SIMATIC Automatisierungssystem S7-1500, Automatisierungssystem ET 200MP
07/2020
DI FA AS E&C-PRM Siemens AG
s71500 et200mp manual collection en-US 7KLVGRFXPHQWFRQWDLQVD FRPSLODWLRQRIDOOPDQXDOV IRUWKH6(703 V\VWHPIDPLO\ 8VHWKHERRNPDUNVRQWKH OHIWHGJHRIWKHVFUHHQWR QDYLJDWH
Manual Collection
SIMATIC
S7-1500, ET 200MP
Automation system S7-1500 Automation system ET 200MP
Edition
07/2020
support.industry.siemens.com
Automation system
SIMATIC S7-1500, ET 200MP Automation system
System Manual
11/2019
A5E03461182-AF
Preface
S7-1500 / ET 200MP Documentation Guide
1
New properties/functions
2
System overview
3
Application planning
4
Installation
5
Wiring
6
Configuring
7
Basics of program execution
8
Protection
9
10 Flexible automation concepts
Commissioning
11
CPU display
12
Maintenance
13
Test and service functions
14
Technical specifications
15
Dimension drawings
A
Accessories/spare parts
B
Safety-relevant symbols
C
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
11/2019 Subject to change
Copyright © Siemens AG 2013 - 2019. All rights reserved
Preface
Purpose of the documentation
This documentation provides you with important information on how to configure, install, wire and commission the S7-1500 automation system/ET 200MP distributed I/O system.
Basic knowledge required
General knowledge in the field of automation engineering is required to understand this documentation.
Validity of the documentation
This documentation is valid for all products from the SIMATIC S7-1500 and SIMATIC ET 200MP product families.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Automation system
System Manual, 11/2019, A5E03461182-AF
3
Preface
Special information
Note Important note for maintaining the operational safety of your plant
Plants with safety-related features are subject to special operational safety requirements on the part of the operator. The supplier is also required to comply with certain measures for product monitoring. Siemens informs system operators in the form of personal notifications about product developments and properties which may be or become important issues in terms of operational safety.
You need to subscribe to the corresponding notifications to ensure that you always remain up-to-date and are able to make any necessary changes to your plant regarding operational safety should the need arise.
Register with Industry Online Support. Follow the links below and click on "Email on update" on the right-hand side in each case: · SIMATIC S7-300/S7-300F (https://support.industry.siemens.com/cs/ww/en/ps/13751) · SIMATIC S7-400/S7-400H/S7-400F/FH
(https://support.industry.siemens.com/cs/ww/en/ps/13828) · SIMATIC WinAC RTX (F) (https://support.industry.siemens.com/cs/ww/en/ps/13915) · SIMATIC S7-1500/SIMATIC S7-1500F
(https://support.industry.siemens.com/cs/ww/en/ps/13716) · SIMATIC S7-1200/SIMATIC S7-1200F
(https://support.industry.siemens.com/cs/ww/en/ps/13883) · Distributed I/O (https://support.industry.siemens.com/cs/ww/en/ps/14029) · STEP 7 (TIA Portal) (https://support.industry.siemens.com/cs/ww/en/ps/14340)
Note
When using F-CPUs in safety mode and fail-safe modules, note the description of the failsafe system SIMATIC Safety Programming and Operating Manual SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126).
Note Product information
The product information on the S7-1500 automation system/ET 200MP distributed I/O system contains: · Module overview of SIMATIC, S7-1500 and ET 200MP · Additions to the documentation
The product information can be found on the Internet (http://support.automation.siemens.com/WW/view/en/68052815).
Automation system
4
System Manual, 11/2019, A5E03461182-AF
Preface
Recycling and disposal
The products are low in pollutants and can be recycled. For environmentally compliant recycling and disposal of your electronic waste, please contact a company certified for the disposal of electronic waste.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Automation system
System Manual, 11/2019, A5E03461182-AF
5
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (http://www.siemens.com/automation/service&support).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
Automation system
6
System Manual, 11/2019, A5E03461182-AF
Table of contents
Preface ................................................................................................................................................... 3
1 S7-1500 / ET 200MP Documentation Guide .......................................................................................... 13
2 New properties/functions....................................................................................................................... 15
3 System overview................................................................................................................................... 19
3.1 3.1.1 3.1.2 3.1.3 3.1.4 3.1.5 3.1.6
Overview of the SIMATIC S7-1500 automation system .........................................................19 The SIMATIC automation systems .........................................................................................19 Comparison of SIMATIC automation systems........................................................................21 Areas of application SIMATIC S7-1500 and ET 200MP.........................................................23 Plant components and automation levels ...............................................................................24 Scalability ................................................................................................................................25 Overview of features ...............................................................................................................27
3.2 3.2.1 3.2.2 3.2.3
Configuration ........................................................................................................................... 30 Configuration of the SIMATIC S7-1500 Automation System..................................................30 Configuration of the distributed I/O system SIMATIC ET 200MP...........................................31 Configuration of a fail-safe system with SIMATIC S7-1500....................................................32
3.3
Components ............................................................................................................................ 36
3.4 3.4.1 3.4.2 3.4.3 3.4.4 3.4.5 3.4.6 3.4.7
CPUs ....................................................................................................................................... 41 What can you do with the CPU?.............................................................................................41 Technical specifications of CPUs ...........................................................................................43 Web server..............................................................................................................................46 Safety ......................................................................................................................................47 Security ...................................................................................................................................49 Diagnostics .............................................................................................................................51 Trace .......................................................................................................................................52
3.5
Interface modules for SIMATIC S7-1500 I/O devices.............................................................54
3.6 3.6.1 3.6.2 3.6.3 3.6.4 3.6.5 3.6.6
Input and output modules .......................................................................................................55 Which I/O devices are the correct ones?................................................................................56 Digital input modules...............................................................................................................57 Digital output modules ............................................................................................................59 Fail-safe digital modules .........................................................................................................61 Analog input modules .............................................................................................................62 Analog output modules ...........................................................................................................65
3.7 3.7.1 3.7.2 3.7.3 3.7.4
Communication .......................................................................................................................67 Interfaces for communications ................................................................................................67 CM communication modules / CP communications processors ............................................67 Communication module IO-Link Master .................................................................................70 Safety-related communication via fail-safe modules ..............................................................71
3.8 3.8.1 3.8.2 3.8.3
Technology functions ..............................................................................................................72 Motion control .........................................................................................................................72 PID Control .............................................................................................................................76 Technology functions of the compact CPUs...........................................................................77
Automation system
System Manual, 11/2019, A5E03461182-AF
7
Table of contents
3.8.4 3.8.5 3.8.6 3.8.7
Technology modules for counting, measuring and position detection................................... 78 Technology module for time-based IO................................................................................... 79 Technology module for weighing technology......................................................................... 80 Technology Module TM NPU................................................................................................. 81
3.9
Power supply.......................................................................................................................... 82
3.10
Connection elements and system cabling ............................................................................. 85
3.11 3.11.1 3.11.2 3.11.3 3.11.4 3.11.5 3.11.6
Software ................................................................................................................................. 87 TIA Portal ............................................................................................................................... 87 TIA Selection Tool.................................................................................................................. 88 SIMATIC Automation Tool ..................................................................................................... 88 SINETPLAN ........................................................................................................................... 89 PRONETA.............................................................................................................................. 89 SIMATIC S7 app .................................................................................................................... 89
4 Application planning.............................................................................................................................. 90
4.1 4.1.1 4.1.2
4.1.3
Hardware configuration .......................................................................................................... 90 Hardware configuration of the S7-1500 automation system.................................................. 90 Hardware configuration of the ET 200MP distributed I/O system with PROFINET interface module..................................................................................................................... 92 Hardware configuration of the ET 200MP distributed I/O system with PROFIBUS interface module..................................................................................................................... 94
4.2 4.2.1 4.2.2
4.2.3
System and load power supply .............................................................................................. 95 Use of system power supplies ............................................................................................... 96 Special considerations for the use of a system power supply in the first power segment ................................................................................................................................. 98 Special requirements when using the power supply PS 60W 24/48/60VDC HF................. 100
4.3
Power balance calculation ................................................................................................... 103
4.4
Use of load power supplies .................................................................................................. 106
5 Installation ...........................................................................................................................................107
5.1
Basics................................................................................................................................... 107
5.2
Installing the mounting rail ................................................................................................... 109
5.3
Installing the standard rail adapter....................................................................................... 114
5.4
Installing a system power supply ......................................................................................... 120
5.5
Installing a load current supply ............................................................................................ 122
5.6
Installing the CPU ................................................................................................................ 124
5.7
Installing the interface module ............................................................................................. 126
5.8
Installing I/O modules .......................................................................................................... 127
Automation system
8
System Manual, 11/2019, A5E03461182-AF
Table of contents
6 Wiring ................................................................................................................................................. 129
6.1
Rules and regulations for operation......................................................................................129
6.2
6.2.1 6.2.2 6.2.3
Additional rules and regulations for operation of the S7-1500/ET 200MP with fail-safe modules ................................................................................................................................131 Safety extra-low voltage (SELV, PELV) for failsafe modules ...............................................131 Requirements of sensors and actuators for fail-safe modules .............................................132 Capacitive crosstalk of digital input/output signals ...............................................................134
6.3
Operation on grounded infeed ..............................................................................................134
6.4
Electrical configuration..........................................................................................................138
6.5
Wiring rules ...........................................................................................................................141
6.6
Connecting the supply voltage..............................................................................................146
6.7
Connecting system power supply and load current supply ..................................................147
6.8
Connecting the CPU/interface module to the load current supply........................................149
6.9
Connecting interfaces for communication.............................................................................151
6.10 6.10.1 6.10.2 6.10.3
Front connector for the I/O modules .....................................................................................152 Wiring front connectors for I/O modules without shield contact element..............................154 Wiring front connectors for I/O modules with shield contact element...................................156 Bringing the front connector into final position......................................................................163
6.11 6.11.1 6.11.2
Marking the I/O modules.......................................................................................................164 Labeling strips.......................................................................................................................164 Optional marking...................................................................................................................166
7 Configuring ......................................................................................................................................... 167
7.1 7.1.1 7.1.2 7.1.2.1 7.1.2.2 7.1.2.3 7.1.3 7.1.3.1 7.1.3.2
Configuring the CPU .............................................................................................................168 Reading out the configuration...............................................................................................169 Address assignment .............................................................................................................174 Addressing - overview...........................................................................................................174 Addressing digital modules ...................................................................................................176 Addressing analog modules .................................................................................................178 Process images and process image partitions .....................................................................180 Process image - overview.....................................................................................................180 Update process image partitions in the user program..........................................................182
7.2
Configuring ET 200MP distributed I/O system .....................................................................183
7.3
Assigning PROFIsafe address to fail-safe modules with SIMATIC Safety...........................184
8 Basics of program execution ............................................................................................................... 185
8.1
Events and OBs ....................................................................................................................185
8.2
Asynchronous instructions ....................................................................................................188
Automation system
System Manual, 11/2019, A5E03461182-AF
9
Table of contents
9 Protection ............................................................................................................................................198
9.1
Overview of the protection functions.................................................................................... 198
9.2
Configuring access protection for the CPU.......................................................................... 199
9.3
Using the display to set additional password protection ...................................................... 202
9.4
Using the user program to set additional access protection ................................................ 203
9.5
Know-how protection ........................................................................................................... 203
9.6
Copy protection .................................................................................................................... 207
9.7
Protection by locking the CPU/interface module ................................................................. 208
10 Flexible automation concepts ...............................................................................................................209
10.1
Standard machine projects .................................................................................................. 209
10.2 10.2.1 10.2.2 10.2.2.1 10.2.2.2 10.2.2.3 10.2.2.4 10.2.3 10.2.4
Configuration control (option handling) ................................................................................ 210 Configuring........................................................................................................................... 212 Creating the control data record .......................................................................................... 214 Control data record for the S7-1500 Automation System .................................................... 217 Control data record for the ET 200MP distributed I/O system ............................................. 218 Feedback data record of the ET 200MP distributed I/O system .......................................... 219 Examples of configuration control........................................................................................ 221 Transferring the control data record in the startup program of the CPU ............................. 224 Behavior during operation .................................................................................................... 228
11 Commissioning ....................................................................................................................................229
11.1
Overview .............................................................................................................................. 229
11.2
Check before powering on for the first time ......................................................................... 230
11.3 11.3.1 11.3.2
Procedure for commissioning the S7-1500 automation system .......................................... 231 Removing/inserting a SIMATIC memory card on the CPU.................................................. 232 First power-on of the CPU ................................................................................................... 235
11.4 11.4.1 11.4.2
Procedure for commissioning the ET 200MP distributed I/O system .................................. 236 Commissioning the ET 200MP for PROFINET IO ............................................................... 236 Commissioning the ET 200MP for PROFIBUS DP.............................................................. 237
11.5 11.5.1 11.5.2 11.5.3 11.5.4
Operating modes.................................................................................................................. 238 STARTUP mode .................................................................................................................. 238 STOP mode ......................................................................................................................... 242 RUN mode ........................................................................................................................... 243 Operating mode transitions .................................................................................................. 244
11.6 11.6.1 11.6.2
CPU memory reset .............................................................................................................. 246 Automatic memory reset ...................................................................................................... 247 Manual memory reset .......................................................................................................... 247
11.7
Backing up and restoring the CPU configuration................................................................. 249
11.8 11.8.1
Time synchronization ........................................................................................................... 253 Example: Configuring and changing NTP server................................................................. 255
11.9 11.9.1 11.9.2 11.9.3
Identification and maintenance data .................................................................................... 258 Reading out and entering I&M data ..................................................................................... 258 Record structure for I&M data .............................................................................................. 260 Example: Read out firmware version of the CPU with Get_IM_Data................................... 263
11.10
Shared commissioning of projects ....................................................................................... 265
Automation system
10
System Manual, 11/2019, A5E03461182-AF
Table of contents
12 CPU display ........................................................................................................................................ 266
13 Maintenance ....................................................................................................................................... 275
13.1
Removing and inserting I/O modules....................................................................................275
13.2
Replacing the display/front cover..........................................................................................276
13.3 13.3.1 13.3.2 13.3.3
Replacement of I/O modules and front connectors ..............................................................278 Coding element on the I/O module and on the front connector............................................278 Replacing an I/O module ......................................................................................................281 Replacing a front connector ..................................................................................................283
13.4
Replacing the coding element at the power connector of the system power supply and
load current supply................................................................................................................285
13.5
Firmware update ...................................................................................................................287
13.6 13.6.1 13.6.2
Reset to factory settings .......................................................................................................292 Resetting the CPU to factory settings...................................................................................292 Resetting interface module (PROFINET IO) to factory settings ...........................................297
13.7
Fault reactions with fail-safe modules...................................................................................298
13.8
Maintenance and repair ........................................................................................................300
14 Test and service functions................................................................................................................... 301
14.1
Test functions........................................................................................................................301
14.2
Reading out/saving service data...........................................................................................308
15 Technical specifications ...................................................................................................................... 311
15.1
Standards and Approvals .....................................................................................................312
15.2
Electromagnetic compatibility ...............................................................................................318
15.3
Electromagnetic compatibility of fail-safe modules ...............................................................320
15.4
Shipping and storage conditions...........................................................................................321
15.5
Mechanical and climatic ambient conditions ........................................................................321
15.6
Information on insulation tests, protection class, degree of protection and rated voltage....327
15.7
Use of the S7-1500/ET 200MP in zone 2 hazardous areas .................................................328
A Dimension drawings............................................................................................................................ 329
A.1
Dimension drawings of the mounting rails ............................................................................329
A.2
Dimension drawing of shielding bracket for 35 mm modules ...............................................332
A.3
Dimension drawing of shielding bracket for 25 mm modules ...............................................333
A.4
Dimension drawing of shielding bracket for 35 mm modules ...............................................333
A.5
Dimension drawing of shielding bracket for 25 mm modules ...............................................334
A.6
Dimension drawing of infeed element for 35 mm modules...................................................334
A.7
Dimension drawing of infeed element for 25 mm modules...................................................334
A.8
Dimension drawings of the labeling strips ............................................................................335
A.9
Dimension drawing of test probe for measurement tap........................................................335
Automation system
System Manual, 11/2019, A5E03461182-AF
11
Table of contents
B Accessories/spare parts.......................................................................................................................336
C Safety-relevant symbols.......................................................................................................................339
C.1
Safety-related symbols for devices without Ex protection ................................................... 339
C.2
Safety-related symbols for devices with Ex protection ........................................................ 340
Glossary ..............................................................................................................................................342
Index ...................................................................................................................................................353
Automation system
12
System Manual, 11/2019, A5E03461182-AF
S7-1500 / ET 200MP Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Automation system
System Manual, 11/2019, A5E03461182-AF
13
S7-1500 / ET 200MP Documentation Guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Automation system
14
System Manual, 11/2019, A5E03461182-AF
New properties/functions
2
What's new in the system manual S7-1500, ET 200MP; Edition 11/2019 since the previous version 12/2017
What's new?
What are the customer benefits?
New contents
Standard rail adapter
Communication module IOLink Master
You install the SIMATIC S7-1500/ET 200MP automation system on a standard 35 mm DIN rail using the DIN rail adapter.
With the IO-Link master, you can do the following during operation:
Where can I find the information? Sec. Installing the standard rail adapter (Page 114)
Section Communication module IO-Link Master (Page 70)
· Changing parameters for the production and processing of product variants and batches down to sensor/actuator level
· Specify remote diagnostics or detailed diagnostics up to the sensor/actuator
Communications processor CP 1545-1 CP 1545-1TSN
Technology Module TM NPU
Communication processors connect the SIMATIC S7-1500 automation system securely with networks. With the integrated security functions, communication processors protect the S7-1500 automation system and lower-level networks from unauthorized access. Communication processors use encryption to protect data transfer against manipulation and espionage.
With the technology module TM NPU you can:
Section CM communication modules / CP communications processors (Page 67)
Section Technology Module TM NPU (Page 81)
· Process large amounts of data via neural networks
· Perform visual quality check
· Control robot systems via screen · Using pick-and-place applications
Basic analog input module
The new, simple and inexpensive analog Section Analog input modules input module provides data for temperature (Page 62) measurement with RTD via 8 channels.
Automation system
System Manual, 11/2019, A5E03461182-AF
15
New properties/functions
What's new in the system manual S7-1500, ET 200MP; Edition 12/2017 since the previous version 09/2016
What's new? New contents Technology CPUs
CPU 1518(F)-4 PN/DP MFP
Password provider
What are the customer benefits?
Where can I find the information?
· Extension of the Technology-CPU portfo- Starting from section System
lio by the CPUs 1516T(F)-3 PN/DP
overview (Page 19)
· All technology-CPUs feature the new technology object TO_Kinematik. With the TO_Kinematics you can implement complex motion control applications for controlling 2D, 3D and 4D kinematics.
· Extension of the CPU portfolio by the
Starting from section System
CPUs 1518(F)-4 PN/DP MFP (multifunc- overview (Page 19)
tional platform)
· The CPU can execute both STEP 7 blocks of the "usual" user programs and blocks and applications which were programmed with C/C++.
· The multifunctional platform offers you the option of running C/C++ code synchronously in the CPU cycle (via the CPU function library). In addition, the multifunctional platform can run C/C++ applications as separate applications in parallel to CPU runtime.
· With C/C++ applications you can implement parallel processes for the STEP 7 user program, e.g. for pre-processing or sending data via Industrial Ethernet. A CPU can perform several tasks at the same time, the complexity of functions is reduced and the time required for implementation is reduced.
· You can re-use existing technological know-how in C/C++ code synchronously and asynchronously to the STEP 7 user program.
As an alternative to manual entry of password, you can connect a password provider to STEP 7. A password provider offers you the following advantages:
Section Know-how protection (Page 203)
· More convenient handling of passwords. STEP 7 automatically imports the password for the blocks. This saves you time
· Optimum block protection as the users do not know the password themselves
Automation system
16
System Manual, 11/2019, A5E03461182-AF
New properties/functions
What's new?
Changed contents
GetSMCinfo instruction Testing with breakpoints
What are the customer benefits?
Where can I find the information?
With the help of the GetSMCinfo instruction you can respond to information provided by the memory card in the user program and if required, replace the memory card as a precautionary measure. This process makes sense if you write to the card often in your application, for example if you use data logs.
Section Overview of SIMATIC memory card
When testing with breakpoints, you execute a program from one breakpoint to another. Testing with breakpoints provides you with the following advantages:
Section Test functions (Page 301)
· Testing SCL and STL program code with the help of breakpoints
· Localization of logic errors step by step
· Simple and quick analysis of complex programs prior to actual commissioning
· Recording of current values within individual executed loops
· Use of breakpoints for program validation also possible in SCL/STL networks within LAD/FBD blocks
PS 60W 24/48/60VDC HF system power supply
The PS 60W 24/48/60VDC HF enables extended retentivity of the CPU's data work memory.
In the event of the failure of the supply voltage, the PS 60W 24/48/60VDC HF supplies sufficient power for the CPU to back up the entire data work memory (without retentive data) to the SIMATIC memory card.
Section Use of system power supplies (Page 96)
Time synchronization
For all applications which require the exact time, update the time of the CPU using the NTP procedure. This also automatically sets the CPU time beyond subnet limits.
Section Time synchronization (Page 253)
Reading out the identifica- With the Get_IM_Data instruction you can
tion and maintenance data read out the identification and maintenance
using the Get_IM_Data data of the modules without much program-
instruction
ming work.
With the Get_IM_Data instruction you can access identification and maintenance data (I&M) of a module in the user program. I&M data is information saved in a module. This allows you to
Section Reading out and entering I&M data (Page 258)
· Check the system configurations
· React to hardware changes
· React to hardware faults in the user program.
Finding and elimination of hardware errors is easier.
Automation system
System Manual, 11/2019, A5E03461182-AF
17
New properties/functions
What's new in the system manual S7-1500, ET 200MP; Edition 09/2016 since the previous version 12/2014
What's new? New contents Compact CPUs
Technology CPUs Fail-safe modules
Changed contents
Formatting, erasing or converting a SIMATIC memory card via the display Asynchronous instructions
Configuration control
What are the customer benefits?
Where can I find information?
You can use compact CPUs for smaller to medium-sized applications The compact CPUs have integrated analog and digital onboard I/O as well as integrated technology functions.
Starting from section System overview (Page 19)
You can use technology CPUs for demanding Starting from section System applications. Technology CPUs are equipped overview (Page 19) with expanded motion control functions.
With fail-safe modules, you replace the conventional safety engineering technical setup. For example, this involves replacement of switching devices for EMERGENCY OFF, protective door monitoring and two-hand operation.
Starting from section System overview (Page 19)
Your SIMATIC memory card is formatted, erased or converted to a program card directly via the display without having to use STEP 7. You save time.
Section SIMATIC memory card
You are given an overview of the resource Section Asynchronous instrucconsumption of asynchronous instructions. tions (Page 188) This ensures adequate resources in the CPU.
Configuration control provides you with the following advantages:
Section Configuration control (Page 210)
· Different configuration levels of a standard machine can be handled in a single project.
· No changes to the hardware configuration or user program are needed.
· Centralized/distributed configuration of a system is flexibly variable
· Easy handling during maintenance, versioning and upgrades.
· Hardware savings: You only use the I/O modules that you currently need.
· Potential savings when building, commissioning and creating documentation for standard machines.
Wiring rules for the power You are given information on proper connec-
supply elements
tion of the power supply elements.
Connecting the CPU/interface module to the load current supply
You are given information on proper connection of the CPU/interface module to the load current supply.
Firmware update via accessible devices
You are given information on fast firmware updates via accessible devices in the network.
Section Wiring rules (Page 141)
Section. Connecting the CPU/interface module to the load current supply (Page 149)
Section Firmware update (Page 287)
Automation system
18
System Manual, 11/2019, A5E03461182-AF
System overview
3
3.1
3.1.1
Overview of the SIMATIC S7-1500 automation system
The SIMATIC automation systems
You need optimum solutions for every application in order to automate your machines and plants economically and flexibly.
The SIMATIC controller portfolio includes a variety of systems:
The SIMATIC S7-1200 Basic Controller is the intelligent choice for compact automation solutions with integrated communication and technology functions.
If plant complexity and system performance are priorities, the SIMATIC S7-1500 automation system is the right choice for you. The SIMATIC S7-1500 controller builds on the more simple functionality of the SIMATIC S7-1200 Basic Controller and fulfills the highest demands on performance, flexibility and networking capability.
The SIMATIC ET 200SP Distributed Controller combines the advantages of the S7-1500 and the very compact design of the ET 200SP with high channel density. By using distributed intelligence, you save costs and space in the control cabinet.
For use outside the cabinet, the CPU 1513pro-2 PN and CPU 1516pro-2 PN offer you SIMATIC S7-1500 functionality in the design of the ET 200pro in the degree of protection IP65/IP67.
If you require PC-based automation, use the SIMATIC S7-1500 software controller. The PC-based controller is autonomous from the operating system during operation.
If you want to increase the availability of your system, use the redundant system S7-1500R/H. In the system, two CPUs (primary and backup CPU) process the user program in parallel and permanently synchronize all relevant data. In the event of failure of the primary CPU, the backup CPU takes over control of the process at the point of interruption.
Automation system
System Manual, 11/2019, A5E03461182-AF
19
System overview 3.1 Overview of the SIMATIC S7-1500 automation system
The SIMATIC controllers are integrated into the Totally Integrated Automation Portal and offer consistent data management and a uniform operating concept. With its integrated functions, engineering in the TIA Portal ensures consistent functionality.
Figure 3-1 Overview of SIMATIC automation systems
The SIMATIC S7-1500 automation system supports all conventional communication standards. All the SIMATIC S7-1500 CPUs offer integrated motion control functions. Technology CPUs are available for extended motion control functions. The SIMATIC S7-1500 CPUs are also available as fail-safe controllers. Diagnostic functions across all components simplify troubleshooting. Changes to the parameter assignment can be implemented quickly and easily with the integrated display. Integrated security functions help against: Manipulation Theft of know-how Integrated security functions offer additional security mechanisms for the configuration of secured networks.
Automation system
20
System Manual, 11/2019, A5E03461182-AF
System overview 3.1 Overview of the SIMATIC S7-1500 automation system
3.1.2
Comparison of SIMATIC automation systems
The tables below compare the main technical specifications of the SIMATIC systems.
Basic Controller SIMATIC S7-1200
Data work memory, max. Code work memory, max. Load memory/mass storage, max.
I/O address area, max. Integrated interfaces, max.
150 KB
32 GB (via SIMATIC memory card) 1024/1024 bytes 1 x PROFINET IO (2-port switch)
Controller with integrated inputs and outputs Configuration control Web server Isochronous mode Integrated display Technology integrated
Security integrated Integrated system diagnostics Integrated safety functionality Degree of protection
X
--X ----Motion Control PID Control X X
In F-CPUs
IP20
controller SIMATIC ET 200SP CPU
1 MB 200 KB 32 GB (via SIMATIC memory card) 32/32 KB 1 x PROFINET IO (3-Port switch) 2 x PROFINET ---
X X Distributed --Motion Control PID Control X X
In F-CPUs
IP20
SIMATIC ET 200SP Controller 1515SP PC 5 MB 1 MB 320 MB
32/32 KB 1 x PROFINET IO (2-port switch) 1 x PROFINET ---
X X Distributed As Windows application Motion Control PID Control X X
In F-CPUs
IP20
Automation system
System Manual, 11/2019, A5E03461182-AF
21
System overview 3.1 Overview of the SIMATIC S7-1500 automation system
Distributed Controller SIMATIC ET 200pro
Advanced Controller SIMATIC S7-1500
Data work memory, max.
Code work memory, max.
Load memory/mass storage, max.
I/O address area, max.
Integrated interfaces, max.
5 MB 1.5 MB
32 GB (via memory card) 32/32 KB 1 x PROFINET IO (3-Port switch) 1 x PROFINET IO
20 MB 6 MB
32 GB (via memory card) 32/32 KB 1 x PROFINET IO (2-port switch) 1 x PROFINET IO 1 x PROFINET 1 x PROFIBUS
Software Controller SIMATIC S7-1500 20 MB 5 MB
SIMATIC S7-1500R/H
8 MB 2 MB
320 MB
32 GB
32/32 KB
Support the hardware interfaces
32/32 KB 1 x PROFINET IO (2-port switch) 1 x PROFINET 1 x H-Sync interface
Controller with integrated inputs and outputs Configuration control Web server Isochronous mode
---
X X Distributed
Integrated display Technology integrated
--Motion Control PID Control
Security integrated
Integrated system diagnostics
Integrated safety functionality
Degree of protection
Redundancy connections (synchronization link)
X X
In F-CPUs
IP65/67 ---
System redundancy
---
C-CPU
---
---
X X Distributed
X Motion Control PID Control C-CPUs: High-speed counters, PWM, PTO, frequency output X X
X
---
X
---
Distributed (support
---
using CP 1625)
As Windows application X
Motion Control
PID control
PID Control
X
X
X
X
In F-CPUs
In F-CPUs
---
IP20 ---
---
Depending on hardware IP20
---
Profinet ring (R-
CPUs)
Fiber-optic cable (H-CPUs)
---
Yes
Automation system
22
System Manual, 11/2019, A5E03461182-AF
System overview 3.1 Overview of the SIMATIC S7-1500 automation system
3.1.3
Areas of application SIMATIC S7-1500 and ET 200MP
Area of application SIMATIC S7-1500
The SIMATIC S7-1500 automation system offers you the required flexibility and performance for a wide range of controller applications in machine and plant engineering. The scalable configuration makes it possible for you to adapt your PLC onsite to the local conditions.
In addition to the standard motion control and technology functions available in the S7-1500, SIMATIC S7-1500 technology CPUs offer you additional features such as enhanced synchronous operation and cam disk functionalities.
The SIMATIC S7-1500 automation system conforms with IP20 degree of protection and is intended for use in a dry environment and installation in a control cabinet.
SIMATIC S7-1500R/H CPUs (redundant or fault-tolerant CPUs) offer you the option to increase the availability of your system. In order to be able to switch from the primary CPU to the backup CPU in case of need, the user program is processed synchronously on two CPUs.
Area of application Distributed I/O system ET 200MP
SIMATIC ET 200MP is a modular, scalable and universally usable distributed I/O system. SIMATIC ET 200MP offers the same system benefits as the SIMATIC S7-1500. A central controller accesses the I/O modules of the ET 200MP as central I/O modules via PROFINET or PROFIBUS.
SIMATIC ET 200MP convinces with its high performance:
For shortest response times
For large configuration limits
For fastest applications
This is also accompanied by the high-speed backplane bus, special input/output modules and the consistent use of PROFINET mechanisms.
Area of application F-system SIMATIC Safety with S7-1500 and ET 200MP
By using fail-safe SIMATIC S7-1500 CPUs and modules, you can implement applications for safety engineering. This enables you to achieve almost seamless integration of machine safety into the SIMATIC S7-1500 and ET 200MP. You use one system at the same time for both your standard and fail-safe automation. This provides you with economic benefits, reliability as well as savings potential for hardware, engineering tasks and storage costs.
Automation system
System Manual, 11/2019, A5E03461182-AF
23
System overview 3.1 Overview of the SIMATIC S7-1500 automation system
3.1.4
Plant components and automation levels
The Advanced Controllers SIMATIC S7-1500 are used for complete production automation and in applications for medium-sized and high-end machines. The combination of the individual SIMATIC components offers powerful and flexible automation solutions that cover all ranges of control applications:
The process signals are connected to the central controller via fieldbus
All modules are located directly in the automation system or in the distributed I/O system
F-CPUs with integrated safety functionality ensure fail-safe processes
SIMATIC S7-1500 is intended for installation in the control cabinet with IP20 degree of protection
The SIMATIC S7-1500 is integrated across all communication standards consistently in the various automation levels.
Figure 3-2 Basic structure: SIMATIC S7-1500 at management, control and field level
You can also find an overview of the SIMATIC S7-1500 automation system on the Internet (https://new.siemens.com/global/en/products/automation/systems/industrial/plc/simatic-s71500.html).
Automation system
24
System Manual, 11/2019, A5E03461182-AF
System overview 3.1 Overview of the SIMATIC S7-1500 automation system
3.1.5
Scalability
In order to suit the requirements of your plant planning, the SIMATIC S7-1500 controllers can be scaled in their processing speed and configuration limits. They also offer networking facilities via different communications standards.
Safety Integrated, Motion Control, and other technology functions can be used for all plant sizes.
Different example applications with different SIMATIC S7-1500 CPUs are shown in the following:
SIMATIC S7-1500 with integrated I/O
Figure 3-3 Example: Plant configuration with SIMATIC S7-1500 with integrated I/O
Automation system
System Manual, 11/2019, A5E03461182-AF
25
System overview 3.1 Overview of the SIMATIC S7-1500 automation system SIMATIC S7-1500 with I/O, ET 200MP and HMI device
Figure 3-4 Example: Plant configuration with SIMATIC S7-1500 with I/O, ET 200MP and HMI device
SIMATIC S7-1500 with Motion Control, distributed I/O and IO-Link devices
Figure 3-5 Example: Plant configuration with SIMATIC S7-1500, Motion Control, distributed I/O and IO-Link devices
Automation system
26
System Manual, 11/2019, A5E03461182-AF
System overview 3.1 Overview of the SIMATIC S7-1500 automation system
SIMATIC S7-1500 with safety und WLAN integration
Figure 3-6 Example: Plant configuration with SIMATIC S7-1500 and Safety on PROFINET
3.1.6
Overview of features
Automation system SIMATIC S7-1500
Through the integration of numerous new performance features, the S7-1500 automation system offers you excellent operability and the highest performance.
Automation system
System Manual, 11/2019, A5E03461182-AF
27
System overview 3.1 Overview of the SIMATIC S7-1500 automation system
Important properties and functions
Figure 3-7 SIMATIC S7-1500 automation system - Properties and functions
Automation system
28
System Manual, 11/2019, A5E03461182-AF
System overview 3.1 Overview of the SIMATIC S7-1500 automation system
Distributed I/O system ET 200MP
The ET 200MP distributed I/O system is a scalable and flexible system for connecting the process signals to a CPU via a fieldbus. The modules have a very high channel density and a low variety of parts. This simplifies ordering, logistics and spare parts handling significantly.
Important properties and functions
Figure 3-8 SIMATIC ET 200MP distributed I/O system - Properties and functions
Automation system
System Manual, 11/2019, A5E03461182-AF
29
System overview 3.2 Configuration
3.2
Configuration
3.2.1
Configuration of the SIMATIC S7-1500 Automation System
Configuration
The SIMATIC S7-1500 automation system is made up of the following components: CPU (standard, fail-safe, compact or technology CPU) Digital and analog I/O modules Communications modules (PROFINET/Ethernet, PROFIBUS, point-to-point) Technology modules (counting, position detection, time-based IO) Load current supply System power supply (optional) You install the S7-1500 automation system on a mounting rail. You can install up to 32 modules (CPU, system power supply and 30 I/O modules) on the mounting rail. You connect the modules to each other with U connectors.
Configuration example
System power supply CPU I/O modules Mounting rail with integrated DIN rail profile
Figure 3-9 Example configuration of an S7-1500 automation system
Automation system
30
System Manual, 11/2019, A5E03461182-AF
System overview 3.2 Configuration
3.2.2
Configuration of the distributed I/O system SIMATIC ET 200MP
Configuration
The SIMATIC ET 200MP distributed I/O system is made up of the following components:
Interface module (PROFINET or PROFIBUS)
Digital and analog I/O modules
Communications modules (point-to-point)
Technology modules (counting, position detection, time-based IO)
System power supply (optional)
The ET 200MP distributed I/O system is installed on a mounting rail like the S7-1500 automation system. The I/O modules of the SIMATIC ET 200MP distributed I/O system can be used in a decentralized configuration (with an ET 200MP interface module) or in a centralized configuration (with an S7-1500 CPU).
Example of a configuration with the IM 155-5 PN ST interface module
Interface module I/O modules System power supply Mounting rail with integrated DIN rail profile
Figure 3-10 Example of a configuration of the ET 200MP with IM 155-5 PN ST
Automation system
System Manual, 11/2019, A5E03461182-AF
31
System overview 3.2 Configuration
Example of a configuration with the IM 155-5 DP ST interface module
Interface module
I/O modules
Mounting rail with integrated DIN rail profile
Figure 3-11 Example of a configuration of the ET 200MP with IM 155-5 DP ST
3.2.3
Configuration of a fail-safe system with SIMATIC S7-1500
Fail-safe automation systems
Fail-safe automation systems (F-systems) are used in systems with higher safety requirements. F-systems control processes and ensure that they are in a safe state immediately after shutdown. In other words, F-systems control processes in which an immediate shutdown does not endanger persons or the environment.
Safety Integrated
Safety Integrated is the integrated safety concept for automation and drive technology from Siemens.
Proven technologies and systems from automation technology, such as SIMATIC S7-1500 in this case, are used for safety systems. Safety Integrated includes the complete safety sequence, ranging from sensor, actuator and fail-safe modules right through to the controller, including safety-related communication via standard fieldbuses. Drives and controllers handle safety tasks in addition to their actual functions.
Automation system
32
System Manual, 11/2019, A5E03461182-AF
System overview 3.2 Configuration
SIMATIC Safety F-system with S7-1500 and ET 200MP
The figure below contains an example of an F-system SIMATIC Safety with S7-1500, ET 200MP and PROFINET IO. You can combine fail-safe I/O modules and non-fail-safe I/O modules in a can be combined in a S7-1500/ET 200MPconfiguration. The fail-safe IO controller (F-CPU) exchanges: Safety-related data with fail-safe modules. Non-safety-related data with non-fail-safe modules.
Figure 3-12 Fail-safe automation system SIMATIC Safety (example)
Fail-safe I/O modules S7-1500/ET 200MP
The following fail-safe I/O modules are available for S7-1500/ET 200MP: Fail-safe digital input modules detect the signal states of safety-related sensors and send
the relevant safety frames to the F-CPU. Fail-safe digital output modules control actuators for safety-oriented tasks.
Automation system
System Manual, 11/2019, A5E03461182-AF
33
System overview 3.2 Configuration
Configuration example of the ET 200MP with fail-safe I/O modules
Interface module I/O modules Power supply (optional) Fail-safe I/O modules Mounting rail with integrated top-hat rail
Figure 3-13 Configuration example of the ET 200MP with fail-safe I/O modules
Hardware and software requirements
You use the S7-1500/ET 200MP fail-safe I/O modules: In S7-1500 with S7-1500 F-CPUs as of firmware version V1.7 Distributed in ET 200MP with S7-1500 F-CPUs as of firmware version V1.5 and all F-
CPUs that can be selected in the hardware catalog of the TIA Portal Fail-safe I/O modules in ET 200MP require the following interface modules: IM 155-5 PN BA, as of firmware version V4.3 IM 155-5 PN ST, as of firmware version V3.0.0 IM 155-5 PN HF, as of firmware version V3.0.0 IM 155-5 DP ST, as of firmware version V3.0.0 To configure and program fail-safe I/O modules S7-1500/ET 200MP , you need: STEP 7, V13 SP1 or higher The option package STEP 7 Safety Advanced as of V13 SP1 + HSP0086
Automation system
34
System Manual, 11/2019, A5E03461182-AF
System overview 3.2 Configuration
Use in safety mode only
You can only use the S7-1500/ET 200MP fail-safe I/O modules in safety mode. They cannot be used in non-fail-safe mode, i.e. standard mode.
Achievable safety classes
Fail-safe I/O modules are equipped with integrated safety functions for safety mode. You can achieve the safety classes of the table below: By corresponding parameter assignment of the safety functions in STEP 7 With a specific combination of fail-safe and non-fail-safe I/O modules as well as With a special arrangement and wiring of the sensors and actuators
Table 3- 1 Safety classes that can be achieved with S7-1500/ET 200MP in safety mode
According to IEC 61508:2010 SIL3 SIL3
Safety class in safety mode
According to ISO 13849-1:2015
Category 3
(PL) Performance Level d
Category 4
(PL) Performance Level e
Additional information
An overview of the technical specifications of the fail-safe I/O modules can be found in section Fail-safe digital modules (Page 61).
The applications and wiring for the particular safety class are described in the manuals of the fail-safe I/O modules.
Automation system
System Manual, 11/2019, A5E03461182-AF
35
System overview 3.3 Components
3.3
Components
Components of the S7-1500 automation system/ET 200MP distributed I/O system
Table 3- 2 Components S7-1500/ET 200MP
Components Mounting rail
Function
The mounting rail is the rack of the SIMATIC S7-1500/ET 200MP automation system. You can use the entire length of the mounting rail (marginless assembly).
The mounting rails can be ordered as Accessories/spare parts (Page 336) accessories.
Diagram
Standard rail adapter
The SIMATIC S7-1500/ET 200MP automation system is installed on a standard 35 mm DIN rail using the DIN rail adapter.
The standard rail adapter can be ordered as accessories/spare parts (Page 336).
PE connection element for mounting rail
The set of screws is threaded into the mounting rail's T-profile groove, and is required for grounding the mounting rail.
The set of screws is contained in the scope of delivery of the mounting rails in the standard lengths (160 to 830 mm) and can be ordered as Accessories/spare parts (Page 336).
Automation system
36
System Manual, 11/2019, A5E03461182-AF
Components CPU (standard, failsafe, compact or technology CPU)
Interface module for PROFINET IO
Function The CPU executes the user program. The integrated system power supply of the CPU supplies the modules used via the backplane bus. Further features and functions of the CPU: · Communication via Ethernet · Communication via PROFIBUS / PROFINET · HMI communication · Integrated web server · OPC UA server · OPC UA client · Integrated technology (e.g. motion control functions, trace func-
tionality) · Integrated system diagnostics · Integrated protection functions (access, know-how and copy pro-
tection) · Safety mode (when using fail-safe CPUs)
The interface module: · Is used as an IO device on PROFINET IO. · Links the ET 200MP distributed I/O system with the IO controller. · Exchanges data with the I/O modules via the backplane bus.
Interface module for PROFIBUS DP
The interface module: · Is used as a DP slave PROFIBUS DP. · Links the ET 200MP distributed I/O system with the DP master. · Exchanges data with the I/O modules via the backplane bus.
System overview 3.3 Components
Diagram
Automation system
System Manual, 11/2019, A5E03461182-AF
37
System overview 3.3 Components
Components I/O module/ fail-safe I/O module
U connector Front connectors
Potential bridges for front connector
Function
The I/O modules form the interface between the controller and the process. The controller detects the current process state via the connected sensors and actuators, and triggers the corresponding reactions. I/O modules are divided into the following module types:
· Digital input (DI, F-DI)
· Digital output (DQ, F-DQ)
· Digital input/digital output (DI/DQ)
· Analog input (AI)
· Analog output (AQ)
· Analog input/analog output (AI/AQ)
· Technology module (TM)
· Communication module (CM)
· Communication processor (CP) A U connector is included in the scope of delivery for each I/O module.
For fail-safe I/O modules, an additional electronic coding element for saving the PROFIsafe address is included in the scope of delivery and can be ordered as spare part Accessories/spare parts (Page 336).
The individual modules are connected to one another with the U connector. The U connector provides the mechanical and electrical connection between the modules.
The U connector is included in the scope of delivery of all modules (exceptions: CPU, interface module) and can be ordered as Accessories/spare parts (Page 336).
The purpose of the front connectors is to wire the I/O modules.
The front connectors for technology and analog modules must be supplemented with a shielding bracket, power supply element, and shielding clamp. The components are included in the scope of delivery of the technology modules, analog modules and compact CPUs (for onboard I/O) and can be ordered as Accessories/spare parts (Page 336)accessories.
There are front connectors with screw terminals and push-in terminals for 35 mm modules, and with push-in terminals for 25 mm modules.
The front connectors for 25 mm modules are included in the scope of delivery of the I/O modules and compact CPUs (for onboard I/O).
Four potential bridges and one cable tie are included in the scope of delivery of the front connectors for 35 mm modules. The front connectors for 25 mm modules have no potential bridges due to the compact module design.
You jumper two terminals with potential bridges.
The potential bridges are included in the scope of delivery of the front connector and can be ordered as Accessories/spare parts (Page 336).
The front connectors for 25 mm modules have no potential bridges. Therefore, you should also observe the information in the product manual for the respective digital or analog module.
Diagram
Automation system
38
System Manual, 11/2019, A5E03461182-AF
Components Shielding bracket
Function
The shield bracket is an insertable bracket for modules with EMCcritical signals (e.g. analog modules, technology modules), and (together with the shield clamp) permits the low impedance application of shielding with minimal installation times.
The shield bracket is included in the scope of delivery of the analog modules, technology modules and compact CPUs (for onboard I/O) and can be ordered as Accessories/spare parts (Page 336).
System overview 3.3 Components
Diagram
Shield clamp
The shield clamps are used to attach cable shielding to the shielding bracket.
The shield clamp is included in the scope of delivery of the analog modules, technology modules and compact CPUs (for onboard I/O) and can be ordered as Accessories/spare parts (Page 336).
Power supply element
Labeling strips for the exterior of the front cover of the I/O modules
4-pole connection plug for supply voltage of the CPU/interface module
The power supply element is inserted in the front cable connector, and serves to supply power to modules with EMC-critical signals (analog modules, technology modules).
The power supply element (connection technology: screw terminal) is included in the scope of delivery of the analog and technology modules and can be ordered as Accessories/spare parts (Page 336).
The labeling strips are used to label the modules for specific plants. You can label the labeling strips using a machine. The labeling strips are available in various colors:
· Al gray: Non-fail-safe modules
· Yellow: Fail-safe modules
The labeling strips are included in the scope of delivery of the I/O modules and compact CPUs (for onboard I/O). Additional labeling strips can be ordered as Accessories/spare parts (Page 336).
The supply voltage is supplied by means of the 4-pole connection plug.
Automation system
System Manual, 11/2019, A5E03461182-AF
39
System overview 3.3 Components
Components System power supply (PS)
Load current supply (PM)
Function
The system power supply is a diagnostics-capable power supply module, that can be connected with the backplane bus using a U connector.
A system power supply is required when the power fed from the CPU/interface module into the backplane bus is not sufficient to supply the connected modules with power.
System power supplies are available in various models:
· PS 25W 24V DC
· PS 60W 24/48/60V DC
· PS 60W 24/48/60V DC HF*
· PS 60W 120/230V AC/DC A power cable connector with coding element and U connector is included in the scope of delivery of the system power supply and may be ordered as spare part.
The load current supply (PM) supplies the system power (PS), central modules (CPU), interface module and input and output circuits of the I/O modules with 24 V DC.
If you are using load current supplies, we recommend the devices from our SIMATIC series. These devices can be mounted on the mounting rail.
Load current supplies are available in various models:
· PM 70W 120/230V AC
· PM 190W 120/230V AC As an alternative to the SIMATIC load current supplies (PM), you can also use SITOP smart power supplies. Use of a SITOP smart power supply is recommended in these cases, among others:
· Higher power requirement
· Redundancy
· Uninterruptible power supply For additional information on the SITOP modules, refer to an FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/96998532).
* Additionally the PS 60W 24/48/60V DC HF keeps the complete work memory of the CPU retentive.
Diagram
Reference
You can find additional information on the different function classes (for example, basic, standard) of the interface and I/O modules in FAQ in Internet (https://support.industry.siemens.com/cs/de/de/view/109476914/en).
Automation system
40
System Manual, 11/2019, A5E03461182-AF
3.4
CPUs
System overview 3.4 CPUs
Figure 3-14 controller
SIMATIC S7-1500 controllers are characterized by maximum performance capability thanks to a high-performance backplane bus, very short terminal-to-terminal response time and extremely fast signal processing. The controller (CPU) executes the user program. The integrated system power supply of the controller provides power to the modules used through the backplane bus. A fail-safe version is available for each SIMATIC S7-1500 controller (except C-CPUs). To use the safety functions in the TIA Portal, you need the "STEP 7 Safety Advanced" option package. During commissioning of the plant you can, for example, change the IP address of the CPU directly via the display, thus saving time and costs. In the event of a service call, the plant downtimes are minimized by quick access to diagnostics alarms. For effective commissioning and fast optimization of drives and controls, the SIMATIC S71500 supports extensive trace functions for all CPU tags. A SIMATIC S7-1500 controller also offers additional functions: Communication via Ethernet/PROFINET Communication via PROFIBUS HMI communication Communication via OPC UA Web server, technology functions, system diagnostics, protection functions integrated When using an F-CPU: Safety mode When using a S7-1500 R/H CPU: Redundancy
3.4.1
What can you do with the CPU?
SIMATICS7-1500 provides you with a variety of CPUs that can be integrated. You can expand each CPU with I/O, communications and technology modules. If the memory and performance of a CPU 1511-1 PN are sufficient for your application, but you also require additional communication interfaces, then you have the option of extending the CPU with communication modules for Ind. Ethernet, PROFINET and PROFIBUS. Modules for serial communication are also available.
Automation system
System Manual, 11/2019, A5E03461182-AF
41
System overview 3.4 CPUs
The CPU provides you with the following options:
Figure 3-15 Selection guide for CPUs 42
Automation system System Manual, 11/2019, A5E03461182-AF
System overview 3.4 CPUs
3.4.2
Technical specifications of CPUs
Table 3- 3 Standard CPUs and F-CPUs
CPU
1511-1 PN 1513-1 PN 1515-2 PN 1516-3 PN/DP
1511F-1 PN
1515F-2 PN 1516F-3 PN/DP
1511T-1 PN 1513F-1 PN 1515T-2 PN 1516T-3 PN/DP
1511TF-1 PN
1515TF-2 PN 1516TF-3 PN/DP
Article number
Standard CPU:
6ES7511- 6ES7513- 6ES7515-
6ES7516-3AN01-
1AK02-0AB0 1AL02-0AB0 2AM01-0AB0 0AB0
F-CPU
6ES7511- 6ES7513- 6ES7515-
6ES7516-3FN01-
1FK01-0AB0 1FL01-0AB0 2FM01-0AB0 0AB0
T-CPU
6ES7511- --1TK01-0AB0
6ES7515-
6ES7516-3TN00-
2TM01-0AB0 0AB0
TF-CPU
6ES7511- --1UK01-0AB0
6ES7515-
6ES7516-3UN00-
2UM01-0AB0 0AB0
CPU 1518 ---
---
---
---
MFP
CPU 1518F ---
---
---
---
MFP
Manual
Standard CPU:
T-CPU
---
CPU 1518 ---
---
---
---
MFP
F-CPU
Supply voltage, permissible range of all the CPUs 19.2 V DC ... 28.8 V DC
Code work memory
Standard CPU:
150 KB
300 KB
500 KB
1 MB
T-CPU
225 KB
---
750 KB
1.5 MB
F-CPU
225 KB
450 KB
750 KB
1.5 MB
1517-3 PN/DP 1518-4 PN/DP 1517F-3 PN/DP 1518F-4 PN/DP 1517T-3 PN/DP 1518-4 PN/DP MFP 1517TF-3 PN/DP 1518F-4 PN/DP MFP
6ES7517-3AP00- 6ES7518-4AP00-
0AB0
0AB0
6ES7517-3FP00- 6ES7518-4FP00-
0AB0
0AB0
6ES7517-3TP00- --0AB0
6ES7517-3UP00- --0AB0
---
6ES7518-4AX00-
1AB0
---
6ES7518-4AX00-
1AB0
-----
2 MB
3 MB 3 MB
4 MB
--6 MB
Data work 1 MB memory
Processing times
Bit opera- 0.06 µs tions
Word oper- 0.072 s ations
Integrated interfaces
PROFINET 1 IO
PROFINET ---
1.5 MB
3 MB
0.04 s 0.048 s
0.03 s 0.036 s
1
2
---
---
5 MB
0.01 s 0.012 s
2 ---
8 MB
0.002 s 0.003 s
2 ---
20 MB
0.001 s 0.002 s
2 1
Automation system
System Manual, 11/2019, A5E03461182-AF
43
System overview 3.4 CPUs
CPU
1511-1 PN 1513-1 PN
1511F-1 PN
1511T-1 PN 1513F-1 PN
1511TF-1 PN
Number of 2
2
PROFINET
ports
PROFIBUS ---
---
DP
Technology
Motion
800
800
Control
resources*
Typical
5
5
number of
positioning
axes (at 4
ms ser-
vo/IPO
cycle)
Max. num- 10
10
ber of posi-
tioning axes
Isochro-
Centralized Centralized
nous mode and distribut- and distrib-
ed
uted
Web server X
X
1515-2 PN 1515F-2 PN 1515T-2 PN 1515TF-2 PN 3
---
2400
7
30
Centralized and distributed X
1516-3 PN/DP 1516F-3 PN/DP 1516T-3 PN/DP 1516TF-3 PN/DP 3
1
2400 T(F)-CPU: 6400 7
30
Centralized and distributed X
1517-3 PN/DP 1518-4 PN/DP
1517F-3 PN/DP 1518F-4 PN/DP
1517T-3 PN/DP 1518-4 PN/DP MFP
1517TF-3 PN/DP 1518F-4 PN/DP MFP
3
4
1
1
10240 70
10240 128
128
128
Centralized and Centralized and dis-
distributed
tributed
X
X
* See section Motion Control (Page 72)
Automation system
44
System Manual, 11/2019, A5E03461182-AF
System overview 3.4 CPUs
Table 3- 4 Compact CPUs
Controller Article number Manual Supply voltage, permissible range Code work memory Data work memory Processing time for bit operations Processing time for Word operations PROFINET interfaces Number of PROFINET ports Integrated analog inputs/outputs Integrated digital inputs/outputs Technology Motion Control resources* Typical number of positioning axes (at 4 ms servo/IPO cycle) Max. number of positioning axes Isochronous mode High-speed counters Frequency meter Period duration measurement Pulse generators (pulse width modulation, Pulse Train Output, frequency output) Web server
1511C-1 PN 6ES7511-1CK01-0AB0
19.2 V DC to 28.8 V DC 175 KB 1 MB 0.06 µs 0.072 s 1 2 5 inputs/2 outputs 16 inputs/16 outputs
800 5
10 Distributed 6 (max. 100 kHz) 6 (max. 100 kHz) 6 channels 4
X
1512C-1 PN 6ES7512-1CK01-0AB0
19.2 V DC to 28.8 V DC 250 KB 1 MB 0.048 s 0.058 µs 1 2 5 inputs/2 outputs 32 inputs/32 outputs
800 5
10 Distributed 6 (max. 100 kHz) 6 (max. 100 kHz) 6 channels 4
X
* See section Motion Control (Page 72)
Code work memory: Volatile memory that contains runtime-relevant parts of the program code.
Data work memory: Volatile memory that contains the runtime-relevant parts of the data blocks and technology objects.
Automation system
System Manual, 11/2019, A5E03461182-AF
45
System overview 3.4 CPUs
3.4.3
Web server
The SIMATIC S7-1500 CPUs have an integrated web server.
You can display the CPU status without additional software installation via a web browser and control it to a limited extent. Graphically visualized process variables and user-defined websites facilitate information acquisition and diagnostics of plant states.
Figure 3-16 Home page web server
Example: Web server simplifies maintenance of treatment plants
Automation task: Implementation of a user interface for fault management of a treatment plant. Feature: Treatment plants operate fully automatically, they are not manned. The operator optionally receives an SMS if a fault occurs. For diagnostics, the operator directly accesses the corresponding web sites. Solution: Creation of user sites for the web server of a SIMATIC S7-1500 CPU. The customer can make changes to the web sites himself, e.g. the mobile number for the SMS messages, settings in the CPU or the message texts.
Automation system
46
System Manual, 11/2019, A5E03461182-AF
System overview 3.4 CPUs
Benefits
The web server provides you with the following advantages: Access via web browsers to a SIMATIC S7-1500 with plant-relevant operating data Display of service and diagnostics information over large distances Access restrictions for unauthorized users
Additional information
A detailed description of handling the web server can be found in the Function Manual "SIMATIC S7-1500 web server" SIMATIC S7-1500 Web server (https://support.industry.siemens.com/cs/de/en/view/59193560).
3.4.4
Safety
For fail-safe operation of your plant, program the F-CPUs of the SIMATIC S7-1500. Use the "STEP 7 Safety Advanced" option package of the TIA Portal for this purpose. In combination with the TIA Portal, the F-CPUs offer optimal integration of fail-safe systems into your engineering environment; one controller, one communication system and one engineering platform for standard and fail-safe automation:
Integration of safety technology
Instructions approved by German Technical Inspectorate for frequently required safety applications
Integration of safety-related functions up to SIL 3 according to IEC 61508:2010 or PL e and category 4 according to ISO 13849-1:2015 or according to EN ISO 13849-1:2015
Uniform engineering for standard and safety automation
Simple documentation of safety-related changes via the F change history in STEP 7 Safety
Support in the acceptance of the safety program and no renewed acceptance of the safety program after changes in the standard program
Automation system
System Manual, 11/2019, A5E03461182-AF
47
System overview 3.4 CPUs
Example: Production cell with access protection
Automation task: A laser scanner monitors access to a production area. The maintenance area is secured by a protective door. Entering the production area or opening the protective door, just like an emergency stop, results in the shutdown or stopping of the production cell.
Emergency stop Laser scanner Protective door Control panel with start and acknowledgment key
Figure 3-17 Production cell with access protection
Feature:
Start-up of the system is only possible with unlocked emergency stop, closed protective door and free protection area of the laser scanner. After activating the emergency stop, opening the protective door or addressing the protection area, a user acknowledgement is required to restart production operations again. Access protection to the F-CPU and the safety program is essential for productive operation.
Solution:
Use of a SIMATIC S7-1500 F-CPU with fail-safe modules in the distributed I/O system ET 200SP on the PROFINET IO.
The F modules ET 200SP take over the connections for emergency stop, monitoring of the protective door, monitoring of the access area, the motor and the user acknowledgment. Perform the relevant programming in STEP 7. The safety program runs in the CPU.
Automation system
48
System Manual, 11/2019, A5E03461182-AF
System overview 3.4 CPUs
Benefits
SIMATIC Safety Integrated provides you with the following advantages:
Engineering with SIMATIC STEP 7 Safety Advanced in the TIA Portal, same engineering and operating concept for standard and fail-safe automation task
Use of instructions approved by the German Technical Inspectorate from the system library Safety in the safety program, e.g. for protective door, emergency stop, monitored feedback loop circuit and user acknowledgment, saves time and reduces the error rate
Simple connections of PROFIsafe devices via PROFINET and PROFIBUS
Additional password protection for F-CPU and safety program is set up for IT security.
Integration in integrated system diagnostics
Additional information
A detailed description of the topic "Safety Integrated" is available in the programming and operating manual SIMATIC Safety - Configuring and ProgrammingSIMATIC Safety Configuration and Programming (https://support.industry.siemens.com/cs/ww/en/view/54110126).
3.4.5
Security
Security means protection of technical systems against sabotage, espionage and human error.
Protection functions
To set up secure networks, the SIMATIC S7-1500 automation system offers an integrated security concept from authorization levels up to block protection:
Protection function Access protection Know-how protection Copy protection Locking the CPU
Description
Protection against unauthorized configuration changes through four authorization levels and an integrated firewall
Protection against unauthorized access and modifications to algorithms by means of password protection
Protection against duplication of programs by linking individual blocks with the serial number of the original memory card on the SIMATIC memory card
Protection against unauthorized access by locking the front cover with a seal or a lock
You can find additional information about security mechanisms of the SIMATIC automation systems in the "Security" document at SIMATIC S7 controllers (https://support.industry.siemens.com/cs/ww/en/view/77431846).
Automation system
System Manual, 11/2019, A5E03461182-AF
49
System overview 3.4 CPUs
Secure Communication
It is becoming increasingly necessary to transfer data to external computers in encrypted form via Intranet or public networks. SIMATIC S7-1500 CPUs and ET 200 CPUs with firmware version 2.0 and higher support the Internet PKI (RFC 5280) with STEP 7 as of V14. This makes the configuration and the operation of Secure Communication possible, for example: Hypertext Transfer Protocol Secure (HTTPS) Secure Open User Communication Secure Communication with OPC UA A public key infrastructure (PKI) can issue, distribute and check digital certificates. For S71500 CPUs, you create certificates for various applications in the CPU properties in STEP 7, for example: TLS certificates for Secure Open User Communication, Web server certificates, OPC UA certificates.
Communications processors with integrated security functions
For special requirements of your plant, use communications processors with integrated security functions, such as access protection using a firewall, protection against data manipulation using VPN, FTPS, HTTPS, SNMPv3 and secure NTP.
Advantages and customer benefits
The protection functions listed above protect your investments from unauthorized access and manipulation, helping to secure plant availability.
Automation system
50
System Manual, 11/2019, A5E03461182-AF
3.4.6
System overview 3.4 CPUs
Diagnostics
Integrated diagnostics across all levels of the automation is incorporated in the SIMATIC S7-1500 automation system. All SIMATIC products have integrated diagnostic functions which you can use to analyze and localize faults and errors efficiently. This reduces the commissioning periods required and minimizes standstill times in production.
A uniform display concept ensures that error messages in the STEP 7, on the HMI, the Web server and in the display of the CPU are visualized identically as plain text information.
You can optionally configure machine and plant diagnostics. This means that the logic of these process diagnostic messages or monitoring depends directly on the state of the plant and is defined by you.
Monitoring functions are integrated in the hardware as standard. Diagnostics is implemented system-wide across bus limits. Output of the cause of the error in plain text, archiving and logging of alarms Automatic localization of the error source Configurability of alarms Plant-wide, uniform display of system status
Figure 3-18 Display of diagnostic information
Faults in the plant are immediately detected and reported on the display devices, even in STOP mode. As a result, system diagnostics is always consistent with the actual state of the plant.
Automation system
System Manual, 11/2019, A5E03461182-AF
51
System overview 3.4 CPUs
Advantages and customer benefits
Integrated system diagnostics offers the following advantages: Diagnostics is always consistent with the actual state of the plant. The system diagnostics
also works in the STOP mode of the CPU. The uniform display concept enables efficient error analysis. The immediate identification of the error source in the event of an error speeds up
commissioning and minimizes production downtimes. By configuring diagnostics events, you tailor the diagnostics to the requirements of your
automation task.
3.4.7
Trace
for effective commissioning and optimization of drives and closed-loop controls, the SIMATIC S7-1500 CPUs feature integrated trace functionality. The trace function records the CPU tags, depending on the settable trigger conditions. Tags are, for example, drive parameters or system and user tags of a CPU. You can display and evaluate the saved recordings with STEP 7.
By visualizing the entire process with real-time trace, you identify, for example, sporadic events in the system during commissioning and service.
Figure 3-19 Schematic overview 52
Automation system System Manual, 11/2019, A5E03461182-AF
System overview 3.4 CPUs
Example: Trace optimizes the commissioning of packaging machines
Automation task:
At what speed does a plant reach its maximum productivity? How do you quickly determine the optimum settings?
The packaging machine ensures quick and reliable packaging of ECG electrodes on a rotary table which is loaded and unloaded by a conveyor belt.
Feature:
After filling is the correct time for further transport of the packaged electrodes. Light barriers trace the position of the electrodes for this.
Solution:
The Trace function of a SIMATIC S7-1500 CPU visualizes the exact sequence of selected signals over a short period of time. It supports the start-up engineer in finding the exact light barrier positions and the optimum speed for belts and the rotary table.
The trace recordings are supplied to the customer as part of the plant project. In the event of a fault, the customer recognizes whether changes to the basic settings have caused the fault.
In addition, the trace recordings are stored as a "measurement" on the SIMATIC memory card, up to 999 trace recordings are available for evaluation.
Advantages and customer benefits
The Trace function provides you with the following advantages: Cost-effective and easy evaluation as the signals are available in the CPU Monitoring of highly dynamic processes Up to 8 independent trace jobs simultaneously Recording for each cycle of up to 16 tag values for the precise optimization of controls
and drives recording in separate CPU memory area for easy localization of sporadic errors Various trigger options Various zoom and cursor measuring functions Saving trace recordings on the SIMATIC memory card export of measurements, e.g. for user-specific processing
Project trace
A project trace includes trace configurations of multiple devices and records the signals across devices.
Synchronization takes place via a global trigger that can be triggered by any device. After receiving the global trigger, the devices with valid project trace configuration start the recording.
Additional information
You can find a detailed description of the "Trace" function in the Function Manual SIMATIC/SINAMICS Using the trace and logic analyzer function SIMATIC/SINAMICS Trace and logic analyzer function (https://support.industry.siemens.com/cs/ww/en/view/64897128).
Automation system
System Manual, 11/2019, A5E03461182-AF
53
System overview 3.5 Interface modules for SIMATIC S7-1500 I/O devices
3.5
Interface modules for SIMATIC S7-1500 I/O devices
An interface module connects the SIMATIC S7-1500 I/O devices as ET 200MP distributed I/O system via PROFINET or PROFIBUS with the controller. The interface module exchanges the data between the higher-level controller and the I/O modules.
Interface modules
Short designation
IM 155-5 PN HF
IM 155-5 PN BA
IM 155-5 PN ST
Article number
High Feature (HF)
6ES7155-5AA00-0AC0
---
Standard (ST)
6ES7155-5AA01-0AB0
---
Basic (BA)
---
6ES7155-5AA00-0AA0
Manual
High Feature (HF)
---
Standard (ST)
---
Basic (BA)
---
Supply voltage
24 V DC
24 V DC
Number of IO modules
30
12
Interfaces
1 x PROFINET IO; integrated 1 x PROFINET IO; integrat-
2-port switch
ed 2-port switch
Min. slave interval
---
---
Isochronous real-time com- X
---
munication (IRT)
Isochronous mode
X (shortest cycle 250 µs)
---
Prioritized startup
X
---
Device replacement without programming device
X (LLDP; address assignment X (LLDP; address assign-
by a tool, for example, STEP ment by a tool, for example,
7)
STEP 7)
Shared device
High Feature: 4 IO controllers 2 IO controllers
Default: 2 IO controllers
Identification and maintenance I&M 0 to 3 data
I&M 0 to 3
Media redundancy (MRP)
X
X
Media redundancy with
High Feature: X
---
planned duplication (MRPD) Default:
System redundancy on S7-400H
High Feature: With GSD file --and STEP 7 V5.5 SP3 or higher
Default:
System redundancy in
High Feature: X
---
S7-1500R/H
Default:
GSD file for ET 200MP
PROFINET
PROFINET
IM 155-5 DP ST
--6ES7155-5BA00-0AB0 ---
---
--24 V DC 12 1 x PROFIBUS 100 s ---------
---
I&M 0 to 3 -----
---
---
PROFIBUS
Automation system
54
System Manual, 11/2019, A5E03461182-AF
System overview 3.6 Input and output modules
3.6
Input and output modules
The I/O modules form the interface between the controller and the process. The controller detects the current process state via the connected sensors and actuators, and triggers the corresponding reactions.
Digital and analog modules provide the inputs/outputs that are required for the respective task.
The input/output modules are divided into function classes.
Function classes of input/output modules
The table below shows selected properties and technical specifications of different function classes of input/output modules.
Function class High Speed (HS) High Feature (HF)
Standard (ST)
Basic (BA)
Special modules for extremely fast applications Shortest input delays Shortest conversion times Isochronous mode Flexible use Even for complex applications Parameters for each channel Diagnostics for each channel Add-on functions
Medium price range Parameter per load group / module Diagnostics per load group / module
Inexpensive, simple modules No parameters No diagnostics
With analog modules
· Highest accuracy (< 0.1%) · High common mode voltage (e. g.
60 V DC / 30 V AC), with singlechannel electrical isolation if required
With analog modules
· Universal modules · Accuracy 0.3% · Common-mode voltage approx. 10
V to 20 V
Automation system
System Manual, 11/2019, A5E03461182-AF
55
System overview 3.6 Input and output modules
3.6.1
Which I/O devices are the correct ones?
SIMATIC S7-1500 offers a wide range of I/O modules. Depending on the complexity of your plant and the technical and functional requirements, you perform your planning flexibly and in a modular manner with SIMATIC components.
Figure 3-20 Selection guide for input/output modules
Automation system
56
System Manual, 11/2019, A5E03461182-AF
System overview 3.6 Input and output modules
3.6.2
Digital input modules
Digital input modules and digital input/output module
Short designation
Article number High Feature (HF)
Basic (BA)
Manual High Feature (HF) Basic (BA) Width High Feature (HF) Basic (BA) Number of inputs Electrical isolation between channels Number of potential groups Rated input voltage
DI 16x24VDC HF
DI 16x24VDC BA
DI 32x24VDC HF
DI 32x24VDC BA
DI 16x24VDC SRC BA
6ES75211BH00-0AB0
6ES75211BH10-0AA0
6ES75211BL00-0AB0
6ES75211BL10-0AA0
---
6ES75211BH50-0AA0
---
35 mm 25 mm 16 ---
1
24 V DC
35 mm 25 mm 32 X
2
24 V DC
--35 mm 16 ---
1
24 V DC
Diagnostic interrupt Only with HF Only with HF ---
Hardware interrupt Only with HF Only with HF ---
Isochronous mode Only with HF Only with HF ---
Input delay
High Feature (HF) 0.05 ms to 20
---
ms (configura-
ble)
Basic (BA)
Integrated counting functions (Two channels can optionally be used as counter with 3 kHz)
Type 3 ms (fixed)
Only with HF: Counting up to 3 kHz
Type 3 ms (fixed)
Only with HF: Counting up to 1 kHz
Type 3 ms (fixed)
---
DI 16x24...125V UC HF
DI 16x230VAC BA
DI 16x24VDC / DQ 16x24V/0.5A BA
6ES75217EH00-0AB0
---
---
6ES75211FH00-0AA0
---
6ES75231BL00-0AA0
---
---
---
35 mm --16 X
--35 mm 16 X
--25 mm 16 ---
1
4
DI: 1 / DQ: 2
24 V UC to 125 V UC X X ---
120/230 V AC 24 V DC
---
---
---
---
---
---
0.05 ms to 20 --ms (configurable with DC)
20 ms (fixed at AC)
---
Type 25 ms
(fixed)
---
---
---
Type 3 ms (fixed) ---
Automation system
System Manual, 11/2019, A5E03461182-AF
57
System overview 3.6 Input and output modules
Benefits
The digital input modules provide you with the following advantages:
High channel density with low variety of parts, therefore less effort for ordering, logistics and storage of spare parts
Modules in 25 mm size without parameter assignment and diagnostics, therefore simple commissioning
Front connector in screw-type connection system or in push-in system (35 mm width) or push-in system for 25 mm modules
Same mechanical design, same handling and same accessories for all modules
Same pin assignment for wiring, which means that circuit diagrams and wiring plans can be universally used
Any combination of narrow and wide modules
Can be used centrally in SIMATIC S7-1500 and in the ET 200MP distributed I/O system
Cost-effective implementation of simple counting tasks with two counter inputs each of the high-feature modules DI16x24VDC HF and DI 32x24V DC HF
Automation system
58
System Manual, 11/2019, A5E03461182-AF
System overview 3.6 Input and output modules
3.6.3
Digital output modules
Digital output modules and digital input/output module (DC)
Short designation
Article number High Feature (HF)
Basic (BA)
Manual High Feature (HF) Basic (BA) Width High Feature (HF) Basic (BA) Number of outputs Type Electrical isolation between channels Number of potential groups Rated output voltage Rated output current Diagnostic interrupt Hardware interrupt Isochronous mode Pulse-width modulation (PWM) Switching cycle counter
DQ 8x24VDC/2A HF
6ES7522-1BF000AB0
---
---
35 mm --8 Transistor X 2 24 V DC 2 A X ----X X
DQ 32x24VDC/0.5A HF DQ 32x24VDC/ 0.5A BA
6ES7522-1BL010AB0
6ES7522-1BL100AA0
35 mm 25 mm 32 Transistor Only with BA
4; only with BA
24 V DC 0.5 A Only with HF --Only with HF ---
---
DQ 16x24VDC/0.5A HF DQ 16x24VDC/ 0.5A BA
6ES7522-1BH010AB0 6ES7522-1BL010AB0 6ES7522-1BH100AA0
35 mm 25 mm 16 Transistor Only with BA
2; only with BA
24 V DC 0.5 A Only with HF --Only with HF ---
Only with HF
DI 16x24VDC / DQ16x24V/0.5A BA
---
6ES7523-1BL000AA0
---
--25 mm 16 Transistor X DQ: 2 / DI: 1 24 V DC 0.5 A -----------
Automation system
System Manual, 11/2019, A5E03461182-AF
59
System overview 3.6 Input and output modules
Digital output modules (UC, AC)
Short designation
Article number
Manual Width Number of outputs Type Electrical isolation between channels Number of potential groups Relay coil supply voltage Rated output voltage
Rated output current Diagnostic interrupt Hardware interrupt
DQ 16x24 ...48VUC/ 125VDC/0.5A ST 6ES7522-5EH000AB0
35 mm 16 Transistor X
1
---
24 V DC to 125 V DC / 24 V AC to 48 V AC 0.5 A
---
---
DQ 8x230VAC/5A ST relay
6ES7522-5HF000AB0
DQ
DQ 8x230VAC/2A
16x230VAC/2A ST ST Triac
relay
6ES7522-5HH00- 6ES7522-5FF00-
0AB0
0AB0
DQ 16x230VAC/1A ST Triac
6ES7522-5FH000AB0
35 mm 8 Relay X
16
24 V DC
24 V DC to 120 V DC / 24 V AC to 230 V AC 5 A
X
---
35 mm 16 Relay X
8
24 V DC
24 V DC to 120 V DC / 24 V AC to 230 V AC 2 A
X
---
35 mm 8 Triac X 8 --230 V AC
2 A -----
35 mm 16 Triac X 8 --230 V AC
1 A -----
Benefits
The digital output modules provide you with the following advantages:
High channel density with low variety of parts, therefore less effort for ordering, logistics and storage of spare parts
Modules in 25 mm size without parameter assignment and diagnostics, therefore simple commissioning
Front connector in screw-type connection system or in push-in system (35 mm width) or push-in system for 25 mm modules
Same mechanical design, same handling and same accessories for all modules
Same pin assignment for wiring, which means that circuit diagrams and wiring plans can be universally used
Any combination of narrow and wide modules
Can be used centrally in SIMATIC S7-1500 and in ET 200MP distributed I/O system
High feature module DQ 8x24VDC/2A HF: You can use pulse width modulation (PWM) to easily generate periodic pulses with a constant rated voltage and a variable pulse duration.
Typical use:
Control of proportional valves and way values (e.g. energy saving by reducing the holding current).
Heating control e.g. via an external additional power unit.
Automation system
60
System Manual, 11/2019, A5E03461182-AF
System overview 3.6 Input and output modules
3.6.4
Fail-safe digital modules
Fail-safe digital modules
Fail-safe digital modules are available for implementing safety concepts in the area of equipment and personnel safety (for example, for emergency stop devices in the operation of processing machines).
The fail-safe modules ensure safe processing of field information (sensors: e.g., EMERGENCY OFF buttons, light barriers; actuators, e.g. motor control). You are provided with all the hardware and software components required for safe processing, according to the required safety class. The following table shows the available fail-safe modules.
Short designation Article number Manual Width Number of inputs Number of outputs Type output Electrical isolation between channels Rated input voltage Rated output voltage Rated output current Maximum achievable safety class in safety mode Low demand mode: PFD according to SIL3 High demand/continuous mode: PFH according to SIL3 Diagnostic interrupt Hardware interrupt Input delay
F-DI 16x 24VDC PROFIsafe 6ES7526-1BH00-0AB0
F-DQ 8x24VDC/2A PPM 6ES7526-2BF00-0AB0
35 mm 16 ------24 V DC ----PLe/SIL 3
35 mm --8 Transistor ----24 V DC 2 A PLe/SIL 3
< 5.00E-05
< 6.00E-05
< 1.00E-09 1/h
< 2.00E-09 1/h
X
X
---
---
0.4 ms to 20 ms (configurable by chan- --nel)
Benefits
The fail-safe input and output modules S7-1500 provide you with the following advantages: High-channel, fail-safe inputs and outputs Can be used centrally in SIMATIC S7-1500 and in ET 200MP distributed I/O system processing of standard and safety programs Uniform engineering for standard and safety automation in the TIA Portal Integration of safety-related functions up to SIL 3 according to IEC 61508:2010 or PL e
and category 4 according to ISO 13849-1:2015 or according to EN ISO 13849-1:2015
Automation system
System Manual, 11/2019, A5E03461182-AF
61
System overview 3.6 Input and output modules
3.6.5
Analog input modules
Analog input modules and analog input/output module
Short designation
Article number High Feature (HF) High Speed (HS) Standard (ST)
Basic (BA)
Manual High Feature (HF) High Speed (HS) Standard (ST) Basic (BA) Width Number of inputs Resolution Measurement type
Electrical isolation between channels Number of potential groups Rated supply voltage Permissible potential difference between inputs (UCM) Diagnostic interrupt Hardware interrupt
Isochronous mode Conversion time (per channel)
AI 8xU/I HF AI 8xU/I HS
AI 8xU/R/RTD/TC HF AI 4xU/I/RTD/TC ST AI 8xU/I/RTD/TC ST AI 8xU/I/R/RTD BA
AI 4xU/I/RTD/TC / AQ 2xU/I ST
6ES7531-7NF00-0AB0 6ES7531-7PF00-0AB0 ---
6ES7531-7NF10-0AB0 ---
---
---
6ES7531-7KF00-0AB0 6ES7531-7QD00-
0AB0
---
---
6ES7531-7QF00-
0AB0
----6ES7534-7QE000AB0 ---
----35 mm 8 16 bits including sign Voltage, current
Only with HF
---
--35 mm 8 16 bits including sign Voltage, current, resistance, thermal resistor, thermocouple
Only with HF
---
---
---
---
25 mm
4
16 bits including sign
Voltage, current, resistance, resistance thermometer, thermocouple
---
--25 mm 4 16 bits including sign Voltage, current, resistance, thermal resistor, thermocouple
---
1
1
---
---
24 V DC
24 V DC
24 V DC
HF: 60 V DC / 30 V AC HF: 60 V DC / 30 V AC 20 V DC
HS: 10 V DC
ST: 10 V DC
24 V DC 20 V DC
X
X
Two high limits and two low limits in each case
Only HS
HF: Fast mode: 4/18/22/102 ms; Standard mode: 9/52/62/302 ms
HS: 62.5 µs, per module, regardless of number of activated channels
X
X
Two high limits and two low limits in each case
---
HF: Fast mode: 4/18/22/102 ms; Standard mode: 9/52/62/302 ms
ST: 9/23/27/107 ms
X
X Two high limits and two low limits in each case
---
9/23/27/107 ms
X
X Two high limits and two low limits in each case
---
9/23/27/107 ms
Automation system
62
System Manual, 11/2019, A5E03461182-AF
System overview 3.6 Input and output modules
Short designation
Calibration in RUN mode Oversampling Scale measuring range Scale temperatures Scale measured values
AI 8xU/I HF AI 8xU/I HS Only with HF
Only with HS Only with HF
--Only with HF
AI 8xU/R/RTD/TC HF AI 8xU/I/RTD/TC ST Only with HF
AI 4xU/I/RTD/TC ST AI 8xU/I/R/RTD BA X
AI 4xU/I/RTD/TC / AQ 2xU/I ST
X
---
---
---
---
---
---
Only with HF
---
---
---
---
---
Benefits
Analog input modules detect process signals, e.g. pressure or temperature and pass the process signals on in digitalized form (16 bit format) to the CPU. You use the analog input modules to measure current (2-wire and 4-wire transducer), voltages, resistances (resistance thermometer) and temperatures (thermoelements). The measurement types depend on the module used.
The analog input modules provide you with the following advantages:
Front connector in screw-type connection system or in push-in system (35 mm width) or push-in system for 25 mm modules
Same mechanical design, same handling and same accessories for all modules
Components required for shielding are included in the scope of delivery and allow simple and quick installation without the use of tools
Same pin assignment for wiring, which means that circuit diagrams and wiring plans can be universally used
Any combination of narrow and wide modules
Can be used centrally in SIMATIC S7-1500 and in ET 200MP distributed I/O system
Overview of functions
In the following you will find a brief overview of special functions of the modules. You can find a detailed description of the functions in the equipment manual of the module.
Measuring range adjustment of the analog input module AI 8xU/I HF
The function adjusts the measuring range to the sensor. You can increase the resolution for a configurable part of the measuring range in S7 format. The measured signal is resolved precisely to more decimal places around a specific operating point.
Automation system
System Manual, 11/2019, A5E03461182-AF
63
System overview 3.6 Input and output modules
Scaling of the measured values of the analog input module AI 8xU/I HF
With measured value scaling, you display the user data of the module in REAL format (32-bit floating point) instead of S7 format. You can thus directly assign a technological variable to the analog value of the module. The conversion is made directly in the module, which saves power and cycle time in the CPU. You can combine the measured value scaling with the measuring range adjustment. In this case, the measuring range is adjusted first and then the representation of the measured value is scaled.
Calibration in runtime
The following analog modules offer you the calibration function at runtime: AI 8xU/I/RTD/TC ST AI 8xU/I HS AI 4xU/I/RTD/TC ST AI 4xU/I/RTD/TC / AQ 2xU/I ST The calibration compensates for influences on the measuring result by cables and/or temperature. A calibration checks the process values output by the analog input module, determines the deviation from the actual values and compensates for measuring errors. Typical use: For plants in which sensors detect relatively small voltages or currents For applications which require regular calibration for all components in a measuring
circuit.
Oversampling of the AI 8xU/I HS analog input module
Oversampling divides a PROFINET bus cycle into equidistant bus sub-cycles. This requires isochronous mode. Oversampling acquires data with high time resolution but without using an extremely short PROFINET bus cycle and thus fast CPU cycles. Use for quality-monitoring measurements, for example when recording pressure trends during the blowing process of PET bottle production.
Automation system
64
System Manual, 11/2019, A5E03461182-AF
System overview 3.6 Input and output modules
3.6.6
Analog output modules
Analog output modules and analog input/output module
Short designation
Article number High Feature (HF)
High Speed (HS) Standard (ST)
Manual High Feature (HF) High Speed (HS) Standard (ST) Width Number of outputs Resolution Output type Electrical isolation between channels Number of potential groups Rated supply voltage Diagnostic interrupt Isochronous mode Conversion time (per channel)
Calibration in RUN mode Oversampling
AQ 8xU/I HS
AQ 4xU/I HF AQ 4xU/I ST
AQ 2xU/I ST
---
6ES7532-5ND00-
0AB0
6ES7532-5HF00-0AB0 ---
---
6ES7532-5HD00-
0AB0
---
--6ES7532-5NB000AB0
---
--35 mm 8 16 bits including sign Voltage/current ---
---
35 mm 4 16 bits including sign Voltage/current Only with HF
-----
25 mm 2 16 bits including sign Voltage/current ---
---
1
---
24 V DC X X 50 µs, regardless of number of activated channels
X
24 V DC
24 V DC
X
X
Only with HF
---
HF: 125 µs, regardless 0.5 ms of number of activated channels
ST: 0.5 ms
Only with ST
X
X
---
---
AI 4xU/I/RTD/TC / AQ 2xU/I ST
---
--6ES7534-7QE000AB0
-----
25 mm 2 16 bits including sign Voltage/current ---
---
24 V DC X --0.5 ms
X
---
Automation system
System Manual, 11/2019, A5E03461182-AF
65
System overview 3.6 Input and output modules
Benefits
Analog output modules convert a 16-bit digital value into current or voltage and output it at the process. With the analog output modules you control, for example, proportional valves or small servo drives.
The analog output modules provide you with the following advantages:
Front connector in screw-type connection system or in push-in system (35 mm width) or push-in system for 25 mm modules
Same mechanical design, same handling and same accessories for all modules
Components required for shielding are included in the scope of delivery and allow simple and quick installation without the use of tools
Same pin assignment for wiring, which means that circuit diagrams and wiring plans can be universally used
Any combination of narrow and wide modules
Can be used centrally in SIMATIC S7-1500 and in ET 200MP distributed I/O system
Overview of functions
In the following you will find a brief overview of special functions of the modules. A detailed description of the functions is available in the device manual of the module.
Calibration in runtime
The following analog modules offer you the calibration function at runtime:
AQ 2xU/I ST
AI 4xU/I/RTD/TC / AQ 2xU/I ST
The calibration compensates for influences on the measuring result by cables and/or temperature. A calibration checks the process values output by the analog output module, determines the deviation from the actual values and compensates for output errors.
Typical use:
For plants in which sensors process relatively small voltages or currents.
For applications which require regular calibration for all components in a measuring circuit.
Oversampling of the AQ 8xU/I HS analog output module
Oversampling divides a PROFINET bus cycle into equidistant bus sub-cycles. This requires isochronous mode.
Oversampling acquires data with high time resolution but without using an extremely short PROFINET bus cycle and thus fast CPU cycles. Used, for example, for controlling a feed valve, the output data is controlled exactly at the current position of the machine.
Automation system
66
System Manual, 11/2019, A5E03461182-AF
3.7
Communication
System overview 3.7 Communication
3.7.1
Interfaces for communications
Interfaces for communication via PROFINET and PROFIBUS DP (as of CPU 1516) are already integrated in the CPUs. Additional communication modules enhance the communication capabilities of the SIMATIC S7-1500 with additional functions or interfaces, e.g. 8xIO-Link. The following communications options are available for your automation task:
Communication options PG communication for commissioning, testing, diagnostics HMI communication for operator control and monitoring Data exchange with TCP/IP, UDP, ISO-on-TCP, ISO protocol Data exchange via OPC UA as server Data exchange via OPC UA as client Direct data exchange between IO controllers Communication via Modbus TCP Communication via UDP Multicast Sending process alarms via e-mail File management and file access via FTP (File Transfer Protocol); CP may be the FTP client and FTP server S7 communication Serial point-to-point or multi-point connection Data exchange via point-to-point with Freeport, 3964 (R), USS or Modbus protocol Web server Data exchange via HTTP(S), for example for diagnostics SNMP (Simple Network Management Protocol) Time synchronization
PN/IE
DP
X
X
X
X
X
---
X
---
X
---
X
---
X
---
X
---
X
---
X
---
X
X
---
---
X
---
X
---
X
X
Serial ---------------------
--X
---
-----
3.7.2
CM communication modules / CP communications processors
For special requirements of your plant, use communications processors (CPs) for security functions to secure Industrial Ethernet networks.
If your system requires additional interfaces, communication modules (CM) expand your S71500 CPU with other interfaces of an interface type such as PROFINET, PROFIBUS or point-to-point connection. The CMs for point-to-point connection allow, for example, Freeport or Modbus communication via their RS232, RS422 and RS485 interfaces.
Automation system
System Manual, 11/2019, A5E03461182-AF
67
System overview 3.7 Communication
Communication modules for PROFINET and Industrial Ethernet
Short designation Article number
CM 1542-1 6GK7542-1AX00-0XE0
CP 1543-1 6GK7543-1AX00-0XE0
CP 1545-1
6GK7545-1GX000XE0
Manual Bus system Interface Data transmission rate Functionality and protocols
Diagnostic interrupt Hardware interrupt Isochronous mode Link to cloud systems via MQTT OPC UA PubSub via UDP
PROFINET RJ45 10/100 Mbps TCP/IP, ISO-on-TCP, UDP, Modbus TCP, S7 communication, IP Broadcast/Multicast, IP routing, SNMPv1
X X -----
Industrial Ethernet RJ45 10/100/1000 Mbps TCP/IP, ISO, UDP, Modbus TCP, S7 communication, IP Broadcast/Multicast, Security, Secure Open User Communication, SMTPS, diagnostics SNMPV1/V3, DHCP, FTP client/server email, IPV4/IPV6
X -------
Industrial Ethernet
RJ45
10/100/1000 Mbps
TCP/IP, ISO, UDP, Modbus TCP, S7 communication,
IP Broadcast/Multicast, Security, Secure Open User Communication, SMTPS, diagnostics SNMPV1/V3, DHCP, FTP client/server email, IPV4/IPV6
X
---
---
X
---
---
X
Communication modules for PROFIBUS
Short designation Article number Manual Bus system Interface Data transmission rate Functionality and protocols
Diagnostic interrupt Hardware interrupt Isochronous mode
CM 1542-5 6GK7542-5DX00-0XE0
PROFIBUS RS485 9600 bps to 12 Mbps DPV1 master/slave, S7 communication, PG/OP communication, Open User Communication X X ---
CP 1542-5 6GK7542-5FX00-0XE0
PROFIBUS RS485 9600 bps to 12 Mbps DPV1 master/slave, S7 communication, PG/OP communication, FDL X X ---
Automation system
68
System Manual, 11/2019, A5E03461182-AF
System overview 3.7 Communication
Communication modules for point-to-point connection
Short designation
Article number High Feature (HF) Basic (BA) Manual High Feature (HF) Basic (BA) Interface Data transmission rate High Feature (HF) Basic (BA) Frame length, max. High Feature (HF) Basic (BA) Diagnostic interrupt Hardware interrupt Isochronous mode Protocols High Feature (HF)
Basic (BA)
CM PtP RS232 HF CM PtP RS232 BA
6ES7541-1AD00-0AB0 6ES7540-1AD00-0AA0
RS232
300 to 115 200 bps 300 to 19 200 bps
4 KB 1 KB X -----
Freeport, 3964 (R), Modbus RTU master, Modbus RTU slave Freeport, 3964 (R)
CM PtP RS422/485 HF CM PtP RS422/485 BA
6ES7541-1AB00-0AB0 6ES7540-1AB00-0AA0
RS422/485
300 to 115 200 bps 300 to 19 200 bps
4 KB 1 KB X -----
Freeport, 3964 (R), Modbus RTU master, Modbus RTU slave Freeport, 3964 (R)
Benefits
The communication modules point-to-point connection S7-1500 provide you with the following advantages: Connection of legacy and external systems possible Connection of data readers or special sensors Can be used centrally in SIMATIC S7-1500 and in ET 200MP distributed I/O system Variety of physical interfaces, e.g. RS232 and RS422 or RS485 Predefined protocols, e.g. 3964(R), Modbus RTU or USS Application-specific protocols based on Freeport (ASCII) Uniform programming interface for all modules Diagnostic interrupt for simple fault rectification
Automation system
System Manual, 11/2019, A5E03461182-AF
69
System overview 3.7 Communication
3.7.3
Communication module IO-Link Master
Communication module IO-Link Master
An 8 port IO-link master module CM 8xIO-link is available for the S7-1500 automation system / ET 200MP distributed I/O system.
IO-Link is a point-to-point connection between a master and a device. Both conventional and intelligent sensors/actuators can be used as devices at the IO-Link via unshielded standard cables using proven 3-wire technology.
You can use the 8-port IO-link master as follows:
Central, directly behind a S7-1500 CPU (a total of 30 I/O modules, plug-in type)
Distributed with ET 200MP to PROFINET and PROFIBUS
With the IO-link, you can easily change the parameters for the production and processing of different product variants and batches up to sensor/actuator level during CPU runtime. A considerably more detailed diagnostics up to sensor or actuator or a remote diagnostics is possible.
Table 3- 5 Communication module IO-Link Master
Short designation Article number Equipment manual Bus system Interface Data transmission rate Functionality and protocols
Diagnostics interrupt Hardware interrupt Isochronous mode
CM 8x IO-Link 6ES7547-1JF00-0AB0
IO-Link 8 ports COM1 (4.8 kbaud), COM2 (38.4 kbaud), COM3 (230.4 kbaud)
IO-Link Protocol 1.0 IO-Link Protocol 1.1 X -----
Benefits: Simplified and reduced wiring, engineering and commissioning Time savings Higher availability due to pre-assembled cable Avoidance of plant downtimes through preventive maintenance High diagnostics capability Configurable diagnostics can be set for each channel
Automation system
70
System Manual, 11/2019, A5E03461182-AF
3.7.4
System overview 3.7 Communication
Safety-related communication via fail-safe modules
The figure below provides an overview of the possibilities of safety-related communication via PROFINET IO in SIMATIC Safety fail-safe systems with S7-1500 F-CPUs.
Safety-related IO controller - IO controller communication Safety-related IO controller - I-device communication Safety-related IO controller - I-slave communication
Figure 3-21 Example of safety-related communication
Automation system
System Manual, 11/2019, A5E03461182-AF
71
System overview 3.8 Technology functions
3.8
Technology functions
3.8.1
Motion control
You use the integrated Motion Control functionality of SIMATIC S7-1500 for positioning and moving axes. Depending on the CPU, the SIMATIC S7-1500 automation system supports different configuration limits for motion control technology objects.
With Motion Control instructions according to PLCopen, you control PROFIdrive-capable drives and drives with analog setpoint interface.
Motion control technology objects
The table below shows the technology objects that are supported by the SIMATIC S7-1500 and S7-1500T. * They occupy Motion Control resources or Extended Motion Control resources in the CPU.
Technology objects
SIMATIC S7-1500
SIMATIC S7-1500T
Speed-controlled axis
X
X
Positioning axis
X
X
Synchronous axis
X
X
External encoder
X
X
Measuring input
X
X
Output cam
X
X
Cam track
X
X
Cam
---
X
Kinematics
---
X
Master value proxy ###
---
X
* They occupy Extended Motion Control resources in the CPU.
Resource requirements per technology object 40 80 160 80 40 20 160 2* 30*
Motion control technology functions
The table below shows the technology functions offered by both SIMATIC S7-1500 and S71500T and the extended Motion Control functions of the technology CPUs.
Technology functions Enable, disable technology objects Acknowledge alarms, restart technology object Reference technology objects, set reference point Pause axis Position axis absolutely Position axis relatively Move axis at set velocity/speed
SIMATIC S7-1500 X X X X X X X
SIMATIC S7-1500T X X X X X X X
Automation system
72
System Manual, 11/2019, A5E03461182-AF
Technology functions Move axis in jog mode Positioning axis overlapping Set alternative encoder as operationally active encoder Hold and disable axis Activate/deactivate hardware limit switch Controlling bits of control word 1 and 2 Start one-time measuring Start cyclic measuring Abort active measuring Activate/deactivate output cam Activate/deactivate cam track Start gearing Start gearing with specified synchronous positions Exit gearing Absolute shift of master value on the following axis Relative shift of master value on the following axis Start camming Exit camming Simulate synchronous operation Specify additive master value Interpolate cam Read out slave value of a cam Read master value of a cam Specify motion setpoints Activate and deactivate force/torque limiting / fixed stop detection Specify additive torque Specify upper and lower torque limits Interrupt motion control of kinematics Continue motion control of kinematics Stop motion of kinematics Position kinematics with linear motion Position kinematics relatively with linear motion Position kinematics with circular motion Position kinematics relatively with circular motion Move kinematics with synchronous "point-to-point" motion, absolute Move kinematics with synchronous "point-to-point" motion, relative Start conveyor tracking Define workspace zones Define kinematics zones Activate workspace zones Deactivate workspace zones Activate kinematics zones
Automation system System Manual, 11/2019, A5E03461182-AF
System overview 3.8 Technology functions
SIMATIC S7-1500 X X --X X X X X X X X X ------------------------X X X -------------------------------
SIMATIC S7-1500T X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X
73
System overview 3.8 Technology functions
Technology functions Deactivate kinematics zones Re-define tool Change active tool Redefine object coordinates system Transform axis coordinates into cartesian coordinates Transforming Cartesian coordinates into axis coordinates
SIMATIC S7-1500 -------------
SIMATIC S7-1500T X X X X X X
Motion Control configuration example
The SINAMICS Startdrive engineering tool is available in the TIA Portal for easy commissioning and optimization of SINAMICS drives. SINAMICS Startdrive enables efficient commissioning by means of the integrated axis control panel and extensive diagnostic functions.
Figure 3-22 Example of a Motion Control configuration
SIMATIC S7-1500T CPUs
The Technology CPUs extend the Motion Control functions available in all SIMATIC S7-1500 controllers for demanding solutions to include gearing and camming and kinematics. The S7-1500 T-CPU is also suitable for safety applications, so that you only need one CPU for standard, safety and comprehensive Motion-Control automation tasks.
Automation system
74
System Manual, 11/2019, A5E03461182-AF
System overview 3.8 Technology functions
Example: Quick and flexible packaging of luxury goods thanks to the CPU SIMATIC S7-1500T
Automation task:
Development of a modular, automatic packaging machine with a speed of up to 50 packages per minute.
Feature:
The packaging machine enables the outer packaging of individual products as well as containers at medium to high speeds (more than 40 products per minute). The possibility of quick changeover to new products is a condition. Scalability and cost efficiency is paramount in the automation solution.
Solution:
A SIMATIC S7-1500 TIME-CPU controls several axes in parallel with its technology functions gearing and camming.
The SINAMICS V90 drive communicates with the CPU via PROFINET IO with IRT. You assign parameters to the technology functions via technology objects with STEP 7.
Benefits
Motion Control with SIMATIC S7-1500T CPUs provide you with the following advantages:
Simple setup and commissioning of the technology functions in the TIA Portal, no specialist knowledge required
Graphical and tabular configuration and optimization of cams with integrated cam editor saves time and reduces the error rate
Adaptation and calculation of the cam disks in the user program during operation, e.g. for quick product changeover
Integration in integrated system diagnostics and Trace function, thus reduction of maintenance and downtimes
Rugged and stable Motion Control platform with easy extensibility to include additional axes
Automatic alignment of the technological variables via the technology objects between controller and drive; reduced engineering, commissioning and service times
Additional information
further information can be found in the function manuals S7-1500T Motion Control (https://support.industry.siemens.com/cs/ww/en/view/109751049)
Automation system
System Manual, 11/2019, A5E03461182-AF
75
System overview 3.8 Technology functions
3.8.2
PID Control
PID compact controllers are integrated as standard in all S7-1500 CPUs. In your plant, the PID controller adjusts a physical setpoint and stabilizes it against interferences at the same time. Depending on your plant, you can use different PID controllers. All controllers support the following functions:
Manageable configuration screens
Automatic determination of the controller parameters
Commissioning screens with integrated trace
PID controller versions
PID controllers PID Compact PID 3step PID Temp
Description Continuous PID controller Step controller for integrating actuators Temperature controller for heating and cooling with two separate actuators
Example: PID Control optimizes the drying process
Automation task:
Development of a temperature control system for drying panes of glass in the production of mirrors
Feature:
The drying process is a critical phase in silvering mirrors. It is decisive for optimum product quality. During the silvering process, the glass panes are treated with chemical solutions and then dried in a pre-heated oven. Temperature control plays a key role in the drying process.
Solution:
A PID controller controls the temperature in the drying oven. The filament of each infrared lamp in the oven is controlled separately and remotely. Control was previously only possible manually.
Benefits
The integrated controller PID Control of the SIMATIC S7-1500 CPUs offer you the following advantages:
High-quality end product due to optimum control performance
High flexibility in the drying oven (see example)
Time savings thanks to automatic control parameter optimization for optimum control performance and simple commissioning
Automation system
76
System Manual, 11/2019, A5E03461182-AF
System overview 3.8 Technology functions
Additional information
A detailed description of PID Control in SIMATIC S7-1500 can be found in the Function Manual "SIMATIC S7-1200, S7-1500 PID Control" SIMATIC S7-1200, S7-1500 PID control (https://support.industry.siemens.com/cs/ww/en/view/108210036).
3.8.3
Technology functions of the compact CPUs
Technology functions are integrated into the SIMATIC S7-1500 compact CPUs.
Function Six high-speed counters Frequency measurement Period duration measurement Velocity measurement
Value Up to 100 kHz 0.04 Hz - 400 kHz 2.5 s - 25 s
Pulse width modulation (PWM output) Pulse Train Output (PTO output)
Frequency output
Max. 4 (up to 100 kHz)
Max. 4 (up to 100 kHz)
Up to 100 kHz
Description For pulse and incremental encoders
Dependent on measurement interval and signal evaluation Unit can be defined by user Output of a signal with defined period duration and variable on-load factor at DQ Output of position information, e. g. for activation of stepper motor drives or simulation of an incremental encoder Precise assignment of a frequency value with high frequencies
Benefits
Compared with the other SIMATIC S7-1500 CPUs, the compact CPUs offer added value in a small space: The CPU with display and inputs/outputs in one enclosure Compact size with high performance Important technology functions such as counting, measuring and positioning are
integrated Cost effective compared to modular systems with CPU and modules Space saving design Can be expanded by SIMATIC S7-1500 input and output modules
Automation system
System Manual, 11/2019, A5E03461182-AF
77
System overview 3.8 Technology functions
3.8.4
Technology modules for counting, measuring and position detection
For technological tasks, powerful technology modules are available that perform these tasks largely autonomously and reduce the load on the CPU. The table below shows the available technology modules for counting, measuring and position detection.
Short designation Article number Manual Connectable encoders
Max. count frequency Integrated DI
Integrated DQ Counting functions
Measuring functions
Diagnostics interrupt Hardware interrupt Isochronous mode
TM Count 2x24V 6ES7550-1AA00-0AB0
TM PosInput 2 6ES7551-1AB00-0AB0
Incremental encoder for signals, 24 V asymmetrical, Pulse encoders with/without direction signal, Pulse encoders up/down
200 kHz 800 kHz with four-fold pulse 3 DIs per counter channel for
Incremental encoder for signals to RS422 (5 V differential signal), Pulse encoders with/without direction signal, Pulse encoders up/down, Absolute encoders (SSI)
1 MHz 4 MHz with four-fold pulse
2 DIs per counter channel for
· Start · Stop
· Start · Stop
· Capture
· Capture
· Synchronization
· Synchronization
2 DQs for comparators and limit values Comparator Adjustable counting range, Incremental position detection
Frequency Period duration Velocity X X X
2 DQs for comparators and limit values Comparator Adjustable counting range, Incremental and absolute position detection Frequency Period duration Velocity X X X
Benefits
Technology modules for counting, measuring and position detection offer you the following advantages:
Fast and timely detection of events with fine resolution for high productivity and product quality
Hardware-level signal processing for rapid counting, measurement and position detection for a variety of transducers
Simple setup and commissioning of the technology functions in STEP 7
Can be used centrally in SIMATIC S7-1500 and in ET 200MP distributed I/O system
Quick response thanks to different hardware interrupts
Automation system
78
System Manual, 11/2019, A5E03461182-AF
System overview 3.8 Technology functions
3.8.5
Technology module for time-based IO
Time-based IO modules enable you to achieve maximum precision and speed - regardless of the performance of the controller and the fieldbus. The time-based IO modules output signals with a precisely defined response time. The I/O signals are processed on a time basis.
The table below shows the main features of the technology module for time-based IO. In conjunction with the "Output cam" and "Cam track" technology objects, the TM Timer DIDQ 16x24V ensures highly accurate cam output. In conjunction with the "Measuring input" technology object, the TM Timer DIDQ 16x24V ensures highly accurate detection of passing products.
Short designation Article number Manual
TM Timer DIDQ 16x24V 6ES7552-1AA00-0AB0
Connectable encoders Max. count frequency Integrated DI
Integrated DQ
Diagnostic interrupt Hardware interrupt Isochronous mode
24 V incremental encoder with signals A and B 24 V pulse encoder with a signal 200 kHz with fourfold evaluation Up to 8 DIs with the following functions: · Up to 2 time stamps per cycle (resolution 1 µs) · 32x oversampling · Counting function up to 50 kHz · Incremental encoder acquisition with 2 phase-shifted tracks · Configurable input filter to suppress interference
Up to 16 DQs with the following functions: · Up to 2 time stamps per cycle (resolution 1 µs) · 32x oversampling · Pulse-width modulated output · Configurable substitute values per DQ
X --X (required for the time stamp and oversampling functions)
Benefits
The technology modules for time-based IO offers you the following advantages:
Meets stringent requirements for precision and speed, independent of the CPU and fieldbus
Signals are read in and output precisely, to within 1 microsecond
Exact definition of response times, independent of the application cycle
Typical use: cam control, length measurement, time measurement, as a probe, for dosing fluid quantities
Automation system
System Manual, 11/2019, A5E03461182-AF
79
System overview 3.8 Technology functions
3.8.6
Technology module for weighing technology
The technology modules SIWAREX WP521 and SIWAREX WP522 are used for the acquisition and processing of signals from weighing or force transducers. You can connect one scale (WP521) or two separate scales (WP522) respectively to the modules. The SIWAREX modules offer high accuracy.
The table below shows the main features of the technology modules for weighing technology.
Short designation Article number Manual Weighing channel Interfaces
Integrated digital inputs Integrated digital outputs Load cell connection Functions
Diagnostic interrupt Hardware interrupt
TM electronic weighing system SIWAREX WP 521 ST
7MH4980-1AA01
TM electronic weighing system SIWAREX WP 522 ST
7MH4980-2AA01
1 channel
2 channels
RS 485 with Modbus RTU or for connecting the remote display (per channel)
Ethernet interface with SIWATOOL protocol and Modbus TCP/IP (1 for both channels)
DI 3x24VDC
DQ 4x24VDC
DMS load cells in 6- or 4-wire technology (per channel), 1 to 4 mV/V
· Adjust the scale with weights or automatically · 3 limits
· Tare
· Set to zero · Trace
· Commission with SIWATOOL (service tool for PC)
--X (configurable)
Benefits
The weighing modules SIWAREX for SIMATIC S7-1500 offer you the following advantages:
Seamless integration of simple weighing applications such as platform and hopper scales in SIMATIC S7-1500
Use for level monitoring, e.g. silos and bunkers
Can be used centrally in SIMATIC S7-1500 and in ET 200MP distributed I/O system
SIWAREX WP521 ST for the setup of one scale
SIWAREX WP522 ST for the setup of two separate scales, with the same space requirements as WP521 ST
Free sample application on the Internet for the quick implementation of customer or industry-specific solutions
Automation system
80
System Manual, 11/2019, A5E03461182-AF
System overview 3.8 Technology functions
3.8.7
Technology Module TM NPU
Technology Module TM NPU
Applications based on artificial intelligence can be implemented using the TM NPU technology module. The technology module TM NPU is used in the S7-1500 automation system / ET 200MP distributed I/O system.
The integrated AI processor (AI - Artificial Intelligence) enables the processing of large amounts of data from connected sensors, as well as data from the user program of the CPU. Connect the sensor technology via the integrated USB interface of the TM NPU e.g.: Cameras or microphones. For TM NPU with V1.0.0, use the USB camera from Intel, type RealSense D435.
The supplied data is processed at high speed in the TM NPU over neural networks. The TM NPU transmits the processing result via the backplane bus to the CP. The CPU then evaluates the data in the user program.
Typical areas of application:
Visual quality check in production plants
Pick-and-place applications
Image-guided robotic systems
Table 3- 6 Technology Module TM NPU
Short designation Article number Equipment manual Interfaces
Interrupts/diagnostics/status information Status display Interrupts Diagnostic functions Product function Artificial intelligence / Processing of neural networks
TM NPU 6ES7556-1AA00-0AB0
Ethernet (1 port) USB 3.1 (1 Port) SD card slot
Yes No Yes
Yes
Benefits:
Design of flexible and precise production processes Reduction of time required for configuration, programming and commissioning
Automation system
System Manual, 11/2019, A5E03461182-AF
81
System overview 3.9 Power supply
3.9
Power supply
The power supply of an automation system to be dimensioned according to plant size. The SIMATIC S7-1500 CPUs are supplied via a load power supply or a system power supply. A system power supply that supplies the backplane bus is integrated in the CPUs. Depending on the system configuration, you can expand the integrated system power supply with up to two additional system power supply modules. If your plant has high power requirements, e.g. I/O load groups, you can connect additional load power supplies.
The table below shows the main differences between the two power supplies for the SIMATIC S7-1500 automation system:
Power supply Load power supply (PM)
System power supply (PS)
Description
Supplies 24 V DC to the S7-1500 system components such as CPU, system power supply (PS), input/output circuits of the I/O modules and any sensors and actuators. You can install the load power supply directly to the left of the CPU (without connection to the backplane bus). If you supply the voltage for the backplane bus via a system power supply, then the supply of the CPU or the interface module with DC 24 V is optional.
Supplies only internally required system voltage. Supplies parts of the module electronics and the LEDs. Additionally the PS 60W 24/48/60V DC HF keeps the complete work memory of the CPU retentive.
Configuration example of a system with load power supply and system power supply
The following figure shows a system configuration with load power supply and additional system power supply.
Figure 3-23 Overall configuration of power supply
In order to ensure the supply of the modules from the backplane bus, the incoming power is compared with the required power in the TIA Portal engineering system or in the TIA Selection Tool.
As early as in the planning stages, make sure that the power fed into the backplane bus is always greater than or equivalent to the power drawn.
Automation system
82
System Manual, 11/2019, A5E03461182-AF
System overview 3.9 Power supply
System power supply modules
System power supplies supply the internal electronics of the S7-1500 modules with power via the backplane bus. The table below shows the available system power supply modules:
Short designation
Article number
Manual Rated input voltage
PS 25 W 24 V DC
6ES7505-0KA000AB0
PS 60 W 24/48/60 V DC 6ES7505-0RA00-0AB0
PS 60 W 24/48/60 V DC HF
/6ES7505-0RB00-0AB0
24 V DC
24 VDC, 48 VDC, 60 VDC
24 VDC, 48 VDC, 60 VDC
Output power
Electrical isolation from the backplane bus
Diagnostic interrupt
Energy buffering for data backup in the CPU
25 W X
X ---
60 W X
X ---
60 W X
X Up to 20 MB retentive
PS 60 W 120/230 V AC/D C 6ES7507-0RA00-0AB0
120 V AC, 230 V AC 120 V DC, 230 V DC 60 W X
X
---
Load power supply modules
The load power supply modules with automatic range selection of the input voltage are optimally adapted in design and functionality to the SIMATIC S7-1500 controller. The table below shows the available load power supply modules:
Short designation Article number Manual Rated input voltage
Output voltage Rated output current* Power consumption
PM 70 W 120/230 V AC 6EP1332-4BA00
120/230 V AC, with automatic switchover 24 V DC 3 A 84 W
PM 190 W 120/230 V AC 6EP1333-4BA00
120/230 V AC with automatic switchover 24 V DC 8 A 213 W
* Power increase by parallel connection of two equal load current supply modules possible
Automation system
System Manual, 11/2019, A5E03461182-AF
83
System overview 3.9 Power supply
Using a SITOP power supply as an alternative to a load power supply
Alternatively, an external 24 V power supply from the SITOP range (https://mall.industry.siemens.com/mall/en/WW/Catalog/Products/10008864) (SITOP smart or SITOP modular) can be used: For higher output currents and 1-phase or 3-phase infeed With redundant installation of the 24 V power supply as protection against failure of a
power pack With buffering of the 24 V power supply (e.g. with DC UPS) as protection against power
failure With selective monitoring of 24 V loads as protection against overload or short-circuit
Automation system
84
System Manual, 11/2019, A5E03461182-AF
System overview 3.10 Connection elements and system cabling
3.10
Connection elements and system cabling
Front connector and shield contact
The front connectors are used to wire the I/O modules. For modules with EMC-critical signals, such as analog modules and technology modules, the front connectors also need a shield contact.
The front connectors are available for 35 mm modules optionally with screw terminals and push-in terminals and for 25 mm modules with push-in terminals. The front connectors for 25 mm modules are included in the scope of delivery of the I/O modules.
24 V DC is supplied, for example, via a plug-in infeed element for analog modules.
The shield contact consists of shield bracket and shield terminal. Together with the shield terminal, the shield bracket allows the low-impedance, module-level connection of cable shields with minimum installation times. The shielding takes place without tools.
The components (infeed element, shielding bracket and shield clamp) are included in the scope of delivery of the modules.
Front connector 35 mm with screw terminals Front connector 35 mm with push-in terminals Front connector 25 mm with push-in terminals Front connector Shield bracket Shield terminal
Figure 3-24 Versions of the front connector with and without shield
U connector
The individual modules are connected to one another with the U connector. The U connector establishes the mechanical and electrical connection between the modules. The U connectors are included in the scope of delivery of the I/O modules.
Automation system
System Manual, 11/2019, A5E03461182-AF
85
System overview 3.10 Connection elements and system cabling
System cabling SIMATIC TOP connect
Figure 3-25 Example: System cabling with SIMATIC TOP connect
For 35 mm modules, the system cabling SIMATIC TOP connect with prefabricated connection elements is available in two versions:
Fully modular connection consisting of front connector module, connection cables and connection modules for connecting sensors and actuators from the field
Flexible connection, consisting of front connector with single cores for wiring within the cabinet
You can find more information in the SIMATIC TOP connect for S7-1500 and ET200MP (https://support.industry.siemens.com/cs/ww/en/view/95924607) manual.
Automation system
86
System Manual, 11/2019, A5E03461182-AF
3.11
Software
System overview 3.11 Software
3.11.1
TIA Portal
The SIMATIC controllers are integrated into the Totally Integrated Automation Portal. Engineering with the TIA Portal offers configuration and programming, common data storage and a uniform operating concept for control, visualization and drives.
The TIA Portal simplifies the integrated engineering in all configuration phases of a plant.
Automation system
System Manual, 11/2019, A5E03461182-AF
87
System overview 3.11 Software
3.11.2
TIA Selection Tool
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration.
You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
3.11.3
88
SIMATIC Automation Tool
You use the SIMATIC Automation Tool (https://support.industry.siemens.com/cs/ww/en/view/98161300) to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. The SIMATIC Automation Tool provides you with a multitude of functions: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device The SIMATIC Automation Tool offers an additional Software Development Kit (SDK) version: With the SIMATIC Automation Tool SDK (Software Development Kit), you can create applications based on the SIMATIC Automation Tool API (Application Programming Interface). To deal with a large number of device automation tasks efficiently, these userspecific applications can be distributed to third parties including the API software. You do not need any license keys to use the user-specific applications.
Automation system System Manual, 11/2019, A5E03461182-AF
3.11.4
System overview 3.11 Software
SINETPLAN
SINETPLAN (http://www.siemens.com/sinetplan), the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. Thus, you prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through import and simulation of existing STEP7 projects
Efficiency through securing existing investment in the long term and optimal exploitation of resources
3.11.5
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the plant network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a plant.
SIEMENS PRONETA (https://support.industry.siemens.com/cs/ww/en/view/67460624) is available for free on the Internet.
3.11.6
SIMATIC S7 app
With the SIMATIC S7 app (http://w3.siemens.com/topics/global/en/industry/future-ofmanufacturing/industry-apps/Pages/industry-apps.aspx) you can establish a secure connection via WLAN to SIMATIC S7-1500 and ET 200SP with, for example, the following functions:
Detect up to 50 networked CPUs via HTTPS and establish a connection
Change CPU operating mode (RUN/STOP)
Read out CPU diagnostics information and send via e-mail
Monitor and modify variables and tags
High security through encrypted communication and encrypted profile data; password to start app and establish the connection
Automation system
System Manual, 11/2019, A5E03461182-AF
89
Application planning
4
4.1
Hardware configuration
Introduction
The S7-1500 automation system/ET 200MP distributed I/O system consists of a single-row configuration in which all modules are installed on one mounting rail. The modules are connected by means of U connectors, and thus form a self-assembling backplane bus.
You can configure the S7-1500 automation system/ET 200MP distributed I/O system with fail-safe and non-fail-safe modules.
4.1.1
Hardware configuration of the S7-1500 automation system
Maximum configuration
The integrated system power supply of the CPU supplies 10 W or 12 W (depending on CPU type) to the backplane bus. The power budget calculation determines the exact number of modules (without optional PS) that can be operated with the CPU. The operating principle is described in section Power balance calculation (Page 103).
A maximum of three system power supplies (PS) is possible. one system power supply (PS) can be inserted to the left of the CPU and two system power supplies (PS) can be inserted to the right of the CPU.
If you use a system power supply (PS) left next to the CPU, a maximum configuration of 32 modules is possible. The modules occupy slots 0 to 31. If further system power supplies (PS) are required to the right of the CPU, they also occupy a slot.
Figure 4-1 S7-1500 maximum configuration
Automation system
90
System Manual, 11/2019, A5E03461182-AF
Application planning 4.1 Hardware configuration
Applicable modules
The following table shows which modules may be used in the various slots:
Table 4- 1 Assignment of slot numbers
Module type
Load current supply (PM)*
System power supply (PS) PS 60W 24/48/60VDC HF system power supply CPU Analog and digital I/O modules Communications modules · Point-to-point
Permissible slots 0**
0; 2 - 31 0 1 2 - 31
2 - 31
Maximum number of modules Unlimited / only 1 PM can be configured in STEP 7 3 1*** 1 30
30
· PROFINET/Ethernet, PROFIBUS
When using a CPU 1511-1(F) PN, CPU 1511C-1 2 - 31
4
PN, CPU 1511T-1 PN
When using a CPU 1512C-1 PN
2-31
6
When using a CPU 1513(F)-1 PN
2 - 31
6
When using a CPU 1515(F)-2 PN, CPU 1515T-2 2 - 31
6
PN
When using a CPU 1516(F)-3 PN/DP, CPU
2 - 31
8
1516T(F)-3 PN/DP
When using a CPU 1517(F)-3 PN/DP, CPU 1517T(F)-3 PN/DP
2 - 31
8
When using a CPU 1518(F)-4 PN/DP, CPU
2 - 31
8
1518(F)-4 PN/DP MFP
Technology modules
2 - 31
30
* No connection to the backplane bus.
** When slot 0 is occupied by a load current supply (PM) in STEP 7, this slot can no longer be used for a system power supply (PS) in STEP 7. You do not have to configure a load current supply (PM) in STEP 7.
When you occupy slot "0" with the system power supply (PS), you can plug in a load current supply (PM) in the TIA Portal to the left of the PS in slot 100.
***The PS 60W 24/48/60VDC HF must only be inserted to the left of the CPU. Use a different system power supply (PS) for other power segments in the configuration to the right of the CPU.
Automation system
System Manual, 11/2019, A5E03461182-AF
91
Application planning 4.1 Hardware configuration
4.1.2
Hardware configuration of the ET 200MP distributed I/O system with PROFINET interface module
Maximum configuration
The integrated system power supply of the interface module feeds 14 W into the backplane bus. The power budget calculation determines the exact number of I/O modules that can be operated with the interface module (without optional PS). The operating principle is described in section Power balance calculation (Page 103).
Use the integrated power supply for the IM 155-5 PN BA interface module. No 'additional system power supplies (PS) must be used. You can insert a maximum of 12 modules to the right of an interface module.
The following applies for the interface modules IM 155-5 PN ST and IM 155-5 PN HF: A maximum of three system power supplies (PS) is possible. You can insert one system power supply (PS) to the left of the interface module and two system power supplies (PS) to the right of the interface module. If you insert a system power supply (PS) to the left of the interface module, this yields a possible maximum configuration of a total of 32 modules (up to 30 modules to the right of the interface module). If further system power supplies (PS) are required to the right of the interface module, they also occupy a slot.
Figure 4-2 Maximum configuration ET 200MP with IM 155-5 PN ST or IM 155-5 PN HF
Automation system
92
System Manual, 11/2019, A5E03461182-AF
Application planning 4.1 Hardware configuration
Applicable modules
The following table shows which modules may be used in the various slots:
Table 4- 2 Assignment of slot numbers
Module type
Load current supply (PM)*
System power supply (PS) PS 60W 24/48/60VDC HF system power supply Interface module Analog and digital I/O modules Communications modules · Point-to-point
Permissible slots IM 1555 PN BA -
-
Permissible slots IM 155-5 PN ST, IM 155-5 PN HF 0**
0; 2 - 31 0
Maximum number of modules
Unlimited / only 1 PM can be configured in STEP 7
3
1***
1 2 - 13
1 2 - 31
1 12 or 30
2 - 13
2 - 31
12 or 30
Technology modules
2 - 13
2 - 31
12 or 30
* No connection to the backplane bus.
** When slot 0 is occupied by a load current supply (PM) in STEP 7, this slot can no longer be used for a system power supply (PS) in STEP 7. You do not have to configure a load current supply (PM) in STEP 7.
***The PS 60W 24/48/60VDC HF must only be inserted to the left of the interface module. Use a different system power supply (PS) for other power segments in the configuration to the right of the interface module.
Automation system
System Manual, 11/2019, A5E03461182-AF
93
Application planning 4.1 Hardware configuration
4.1.3
Hardware configuration of the ET 200MP distributed I/O system with PROFIBUS interface module
Maximum configuration
The integrated system power supply of the interface module feeds 14 W into the backplane bus. You can insert a maximum of 12 modules to the right of an interface module. The power budget calculation determines the exact number of I/O modules that can be operated with the interface module. The operating principle is described in section Power balance calculation (Page 103).
Figure 4-3 Maximum configuration ET 200MP with IM 155-5 DP
Applicable modules
The following table shows which modules may be used in the various slots:
Table 4- 3 Assignment of slot numbers
Module type
Interface module Analog and digital I/O modules Communications modules Point-to-point Technology modules
Permissible slots
2 3 - 14
3 - 14 3 - 14
Maximum number of modules 1 12
12 12
Automation system
94
System Manual, 11/2019, A5E03461182-AF
Application planning 4.2 System and load power supply
4.2
System and load power supply
Types of power supplies
The S7-1500 automation system/ET 200MP distributed I/O system distinguishes between two types of power supply: System power supply (PS) Load current supply (PM)
System power supply (PS)
The system power supply has a connection to the backplane bus (U connector) and supplies solely the internally required system voltage. This system voltage supplies parts of the module electronics and the LEDs. A system power supply can also supply CPUs or interface modules if these are not connected to a 24 VDC load current supply.
Load current supply (PM)
The load current supply feeds the input/output circuits of the modules, as well as the sensors and actuators of the plant, if installed. If you supply the voltage for the backplane bus via a system power supply, then the supply of the CPU/interface module with 24 V DC is optional.
Special characteristic of the load current supply
Load current supplies are mounted on the "S7-1500 mounting rail" and do not have a connection to the backplane bus.
Total configuration with power supplies
Figure 4-4 Total configuration with load current supply (PM) and system power supply (PS)
Optionally, you can insert up to two system power supplies (PS) in the slots to the right of the CPU/interface module. The number of load current supplies is unlimited. Observe the installation rules and specified installation distances in the manuals of the load current supplies.
Automation system
System Manual, 11/2019, A5E03461182-AF
95
Application planning 4.2 System and load power supply
System power supplies
PS 25W 24VDC: Supply voltage with 24 V DC and infeed power to the backplane bus of 25 W
PS 60W 24/48/60VDC: Supply voltage with 24/48/60 V DC and infeed power to the backplane bus of 60 W
PS 60W 24/48/60VDC HF: Supply voltage with 24/48/60 V DC and infeed power to the backplane bus of 60 W Extended retentive memory for CPUs as of FW V2.1.0 (see section Special requirements when using a system power supply PS 60W 24/48/60VDC HF (Page 100)).
PS 60W 120/230V AC/DC: Supply voltage with 120/230 V AC and infeed power to the backplane bus of 60 W
Load current supplies
The load current supplies listed below have been technically adapted especially to the S7-1500 automation system/ET 200MP distributed I/O system. Use of the listed load current supplies is not imperative because you can use a SITOP module, for example, as an alternative. PM 70W 120/230VAC: Supply voltage with 120/230 V AC PM 190W 120/230VAC: Supply voltage with 120/230 V AC Also note the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/96998532) in connection with load current supply units.
4.2.1
Use of system power supplies
Introduction
You can use system power supplies with the CPUs and the interface modules IM 1555 PN ST and IM 155-5 PN HF.
If the power fed from the CPU/interface module into the backplane bus is not sufficient to supply all connected modules with power, system power supplies (PS) are required.
Whether or not you need a system power supply depends on the power consumption of the modules used. The power supplied by the CPU/interface module and the system power supplies must be greater than the power required by the I/O modules.
During configuration, STEP 7 compares the supplied power and the power required by the modules. If the required power is too high, you receive a corresponding message from STEP 7.
In addition, the system power supply PS 60W 24/48/60V DC HF buffers the power in the event of power failures and therefore enables the retentivity of the data of a CPU without a battery and therefore maintenance-free.
Automation system
96
System Manual, 11/2019, A5E03461182-AF
Application planning 4.2 System and load power supply
Slots for system power supplies
The following slots may be used for system power supplies: A system power supply in slot 0 to the left of the CPU/interface module Up to 2 system power supplies in the slots to the right of the CPU/interface module
(power segments) A power segment consists of a power supply module and the modules supplied by it.
Note The system power supply PS 60W 24/48/60V DC HF can only be inserted in slot 0.
Power segment
The following applies for the CPUs and interface modules M 155-5 PN ST and IM 155-5 PN HF: If you are using system power supplies to the right of the CPU/interface module, divide the configuration into power segments.
Configuration variant with power segments
Figure 4-5 Configuration variants with 3 power segments
Note When you configure with STEP 7, STEP 7 automatically checks configuration for consistency and tells you from which module you must open a new power segment.
Automation system
System Manual, 11/2019, A5E03461182-AF
97
Application planning 4.2 System and load power supply
Overload in the power segment
If an overload occurs in a power segment, the red SF LED flashes on the system power supply (PS). All I/O modules to the right of the PS in the power segment will be switched off. Remedy: 1. Correct the configuration in the power segment of the overloaded PS. 2. Switch the supply voltage power off and on again via the on-off switch on the PS. 3. Switch the CPU from STOP to RUN mode.
Reference
Information about the required power is available in the section Power balance calculation (Page 103).
Additional information on the performance values (power feed, power consumption) of the CPU, interface module, system power supply, and I/O modules can be found in the manuals (http://support.automation.siemens.com/WW/view/en/57251228) of the respective modules.
4.2.2
Special considerations for the use of a system power supply in the first power segment
Infeed options
There are three options for the infeed of the required system voltage in the backplane bus: Infeed via CPU/interface module Infeed via CPU/interface module and system power supply Infeed only via system power supply in slot 0
Infeed via CPU/interface module
Infeed via the CPU/interface module generally suffices for small and medium hardware configurations. The power consumption of the connected modules must not exceed the power supplied by the CPU/interface module.
In this configuration variant, supply the CPU/interface module with 24 V DC from a load current supply.
Automation system
98
System Manual, 11/2019, A5E03461182-AF
Procedure
Application planning 4.2 System and load power supply
To set up the supply by means of the CPU/interface module, follow these steps: 1. Open the "Properties" tab of the CPU/interface module in STEP 7 and select the "System
power supply" in the navigation. 2. Select the option "Connection to supply voltage L+".
Figure 4-6 Supply voltage via CPU/interface module only
Infeed via CPU/interface module and system power supply
For larger hardware configurations, infeed into the backplane bus by the CPU/interface module alone no longer suffices. If the modules consume more power in total than the power supplied by the CPU/interface module, you must insert an additional system power supply.
Supply the system power supply with the permissible supply voltage and the CPU/interface module with 24 V DC.
Both the system power supply and the CPU/interface module feed current into the backplane bus. The supplied power is summed.
Power addition: "Infeed power of the system power supply" + "Infeed power of the CPU/interface module"
Procedure
To set up the supply by means of the CPU/interface module and system power supply, follow these steps:
1. Open the "Properties" tab of the CPU/interface module in STEP 7 and select the "System power supply" in the navigation.
2. Select the option "Connection to supply voltage L+".
Figure 4-7 Supply voltage via the CPU/interface module and system power supply
Automation system
System Manual, 11/2019, A5E03461182-AF
99
Application planning 4.2 System and load power supply
Infeed via system power supply only
As a further possibility you can supply the required power to the backplane bus using only a system power supply (in slot 0). In this case, the CPU/interface module is not supplied with 24 V DC, and draws its supply from the backplane bus. The system power supply must be inserted to the left of the CPU/interface module for this.
In general, you can use system power supplies with AC or DC infeed for the configuration.
If no supply voltage with 24 V DC is present (and e.g. only CMs/CPs are inserted next to the CPU), you can use a system power supply with 230 V AC because the CMs/CPs are supplied via the backplane bus.
Procedure
To set up infeed only via the system power supply, follow these steps:
1. Open the "Properties" tab of the CPU/interface module in STEP 7 and select the "System power supply" in the navigation.
2. Select the option "No connection to supply voltage L+".
Figure 4-8 No infeed into the backplane bus by means of the CPU/interface module
4.2.3
Special requirements when using the power supply PS 60W 24/48/60VDC HF
S7-1500 - Extended retentive memory for CPUs as of FW V2.1.0
When you use the PS 60W 24/48/60VDC HF system power supply, the entire data area can be used as retentive memory for CPUs as of firmware version V2.1.0 and higher. The PS 60W 24/48/60VDC HF supplies enough energy in case of a POWER OFF that the CPU can save the entire data area retentively.
Requirements STEP 7 V14 SP1 or higher PS 60W 24/48/60VDC HF system power supply CPU with firmware version as of V2.1.0, see table below
100
Automation system System Manual, 11/2019, A5E03461182-AF
Application planning 4.2 System and load power supply
Applicable CPUs
The size of the retentive memory depends on the size of the work memory for data of the CPU used. The table below shows the applicable CPUs with the required hardware function versions.
CPU with firmware version V2.1.0 CPU 1511-1 PN
CPU 1511F-1 PN CPU 1511T-1 PN CPU 1511T-1 PN CPU 1511C-1 PN
CPU 1512C-1 PN
CPU 1513-1 PN
CPU 1513F-1 PN CPU 1515-2 PN CPU 1515F-2 PN CPU 1515T-2 PN CPU 1515T-2 PN CPU 1516-3 PN/DP CPU 1516F-3 PN/DP CPU 1516T-3 PN/DP CPU 1516TF-3 PN/DP CPU 1616T-3 PN/DP CPU 1517-3 PN/DP CPU 1517F-3 PN/DP CPU 1517T-3 PN/DP CPU 1517TF-3 PN/DP CPU 1518-4 PN/DP CPU 1518F-4 PN/DP CPU 1518-4 PN/DP MFP CPU 1518F-4 PN/DP MFP
Hardware function version FS01 or higher
FS01 or higher FS01 or higher FS01 or higher FS01 or higher
FS01 or higher
FS01 or higher
FS01 or higher FS01 or higher FS01 or higher FS01 or higher FS01 or higher FS01 or higher FS01 or higher FS01 or higher FS01 or higher FS01 or higher FS03 or higher FS03 or higher FS01 or higher FS01 or higher FS03 or higher FS03 or higher FS01 or higher FS01 or higher
Article number
6ES7511-1AK01-0AB0 6ES7511-1AK02-0AB0 6ES7511-1FK01-0AB0 6ES7511-1TK01-0AB0 6ES7511-1UK01-0AB0 6ES7511-1CK00-0AB0 6ES7511-1CK01-0AB0 6ES7512-1CK00-0AB0 6ES7512-1CK01-0AB0 6ES7513-1AL01-0AB0 6ES7513-1AL02-0AB0 6ES7513-1FL01-0AB0 6ES7515-2AM01-0AB0 6ES7515-2FM01-0AB0 6ES7515-2TM01-0AB0 6ES7515-2UM01-0AB0 6ES7516-3AN01-0AB0 6ES7516-3FN01-0AB0 6ES7516-3TN00-0AB0 6ES7516-3UN00-0AB0 6ES7516-3TN00-0AB0 6ES7517-3AP00-0AB0 6ES7517-3FP00-0AB0 6ES7517-3TP00-0AB0 6ES7517-3UP00-0AB0 6ES7518-4AP00-0AB0 6ES7518-4FP00-0AB0 6ES7518-4AX00-1AB00 6ES7518-4FX00-1AB00
Max. retentive memory 1 MB
1 MB 1 MB 1 MB 1 MB
1 MB
1.5 MB
1.5 MB 3 MB 3 MB 3 MB 3 MB 5 MB 5 MB 5 MB 5 MB 5 MB 8 MB 8 MB 8 MB 8 MB 20 MB 20 MB 20 MB 20 MB
Automation system System Manual, 11/2019, A5E03461182-AF
101
Application planning 4.2 System and load power supply
Connection, structure and configuration of an S7-1500 with PS 60W 24/48/60VDC HF
You must insert the system power supply PS 60W 24/48/60VDC HF in slot 0.
Figure 4-9 Slot PS 60W 24/48/60VDC HF
If you are using the PS 60W 24/48/60VDC HF, the 24 V supply of the CPU is not taken into account in the power budget calculation. We therefore recommend that you do not connect the 24 V DC to the CPU.
You must set the "System power supply" parameter to the option "No connection to supply voltage L+" during configuration of the CPU. STEP 7 checks the setting when compiling the configuration.
Figure 4-10 Connecting PS 60W 24/48/60VDC HF
The parameter "Startup > Comparison preset to actual module" must be set to the value "Startup CPU only if compatible" during configuration of the PS 60W 24/48/60VDC HF. Reason: The retentivity of the entire CPU work memory (data) is only guaranteed when the PS 60W 24/48/60VDC HF is inserted.
When you insert the PS 60W 24/48/60VDC HF, STEP 7 automatically sets the parameter.
Figure 4-11 Startup of PS 60W 24/48/60VDC HF
102
Automation system System Manual, 11/2019, A5E03461182-AF
Application planning 4.3 Power balance calculation
Note Other power segments in the configuration The PS 60W 24/48/60VDC HF must only be inserted to the left of the CPU / interface module. Use a different system power supply (PS) for other power segments in the configuration to the right of the CPU / interface module.
Missing diagnostics for the PS 60W 24/48/60VDC HF
In case of POWER OFF, saving the extended retentive data is most important. The CPU as of FW V2.1.0 and higher does no longer output the following diagnostics of the PS 60W 24/48/60VDC HF: Supply voltage fault Switch position Off
4.3
Power balance calculation
Principle of power balance calculation
In order to ensure the supply of the modules from the backplane bus, the power balance calculation compares the infed power with the required power for the modules. The supplied power of all system power supplies including the CPU/interface module must be greater than or equal to the power taken from the modules.
In order to operate the configuration with its used modules, the power balance must be positive for each power segment in use.
This means that the power fed into the power segment is greater than the power consumed by the modules.
Take care even during planning, that the power fed into the backplane bus is always greater than or equal to the power drawn. The TIA Selection Tool (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool) aids you during planning.
The power fed into the backplane bus by the CPU/interface module and system power supply is listed in the technical specifications of the CPU/interface module in the corresponding manuals.
The power consumed from the backplane bus by an I/O module or the CPU/interface module can be found in the technical specifications in the corresponding manuals.
The power balance calculation is performed:
When configuring with STEP 7
During operation by the CPU
Automation system System Manual, 11/2019, A5E03461182-AF
103
Application planning 4.3 Power balance calculation
Power balance calculation when configuring with STEP 7
STEP 7 checks compliance with the power balance during the configuration. Proceed as follows to evaluate the power balance calculation: 1. Perform the configuration of the S7-1500/ET 200MP with all the required modules. 2. In the network view, select the CPU/interface module or the system power supply. 3. Open the "Properties" tab in the inspector window. 4. Select the "System power supply" entry in the area navigation. 5. Check the "Power segment overview" table, so see whether the power balance is
positive. If the power balance is negative, STEP 7 marks the underpowered modules in red.
Figure 4-12 Example of a power balance calculation with STEP 7
Power balance calculation check for overload by the CPU/interface module
The CPU / the interface module monitors compliance with a positive power balance: At every POWER ON At every change of the installed hardware
104
Automation system System Manual, 11/2019, A5E03461182-AF
Application planning 4.3 Power balance calculation
Causes for overload
An overload can still occur despite a positive power balance during planning. The cause for overload can be a hardware configuration that does not correspond to the configuration in STEP 7, for example: More I/O modules inserted in the actual configuration than in the STEP 7 project. A supply voltage L+ (24 V DC) that is necessary for operation is not connected when
system voltage infeed via the CPU/interface module is specified during parameter assignment (see section Special considerations for the use of a system power supply in the first power segment (Page 98)). A system power supply that is necessary for operation is not inserted. A system power supply that is necessary for operation is not switched on (power connection plug or on/off switch). A system power supply that is necessary for operation has no U connector inserted.
Response of the CPU to negative power balance or failure of system power supplies
As soon as the CPU detects a negative power balance/overload, the following actions are executed: The CPU stores the retentive data. The CPU enters the event in the diagnostics buffer. The CPU carries out a restart and repeats this until the cause of the negative power
balance is resolved.
Response of the interface module to negative power balance or failure of system power supplies
As a result of the overload, the interface module switches off all power segments. The I/O controller or DP master can no longer access the I/O modules. The interface module provides diagnostic information and periodically checks the connection to the backplane bus and re-establishes the connection. Exception: In the case of a voltage drop or a hardware fault in power segment 2 or 3, the corresponding system power supply module switches off its power segment (and possibly the following segments), and generates a diagnostic alarm, if possible. More information on the behavior of the system power supply (PS) in the event of a fault can be found in the manuals for the system power supplies.
Automation system System Manual, 11/2019, A5E03461182-AF
105
Application planning 4.4 Use of load power supplies
4.4
Use of load power supplies
Introduction
The load current supply (PM) supplies the system power (PS), central modules (CPU), interface module and input and output circuits of the I/O modules with DC 24 V.
Load current supplies can be mounted on the mounting rail but do not have a connection to the backplane bus.
Observe the installation rules and specified installation distances in the manuals of the load current supplies.
Use of multiple load current supplies
Several load current supplies (PM) can be used as follows for higher output currents: Every load current supply feeds independent 24 V DC load lines. Alternatively you can use an external 24 V power supply, e.g. from the SITOP line.
Figure 4-13 Supply of the modules from 24 V DC load current suppl
Note Alternative 24 V supply of the modules from the control cabinet If safe electrical separation (SELV/PELV according to IEC 61131-2 and IEC 61010-2-201) is guaranteed, you can alternatively supply the modules with 24 V DC from the control cabinet.
Reference
More information on load current supplies can be found on the Internet (https://mall.industry.siemens.com) in the online catalog and in the online ordering system.
106
Automation system System Manual, 11/2019, A5E03461182-AF
Installation
5
5.1
Basics
Introduction
All modules of the S7-1500 automation system/ET 200MP distributed I/O system are open equipment. This means that you may only install this system in housings, cabinets or electrical operating rooms that are located indoors. The housings, cabinets and electrical operating rooms must guarantee protection against electric shock and spread of fire. The requirements for mechanical strength must also be met. The housings, cabinets, and electrical operating rooms must not be accessible without a key or tool. Personnel with access must have been trained or authorized.
Installation position
The S7-1500 automation system / ET 200MP distributed I/O system is designed for the following mounting positions:
Horizontal mounting position for ambient temperatures up to 60° C
Vertical mounting position (CPU is down) for ambient temperatures up to 40° C
More information can be found in chapter Mechanical and climatic ambient conditions (Page 321).
Mounting rail
You can mount the following components on the mounting rails alongside the S7-1500/ET 200MP modules:
Modules from the S7-1200 and ET 200SP range
Terminals
Circuit breakers
Small contactors
Similar components
These components can influence the installation dimensions for the cable duct.
Modules can be mounted right to the outer edge of the mounting rail.
The mounting rails are available in various lengths. You order the mounting rails using the online catalog or the online ordering system. You can find the available lengths and article numbers in the section Accessories/spare parts (Page 336).
Automation system System Manual, 11/2019, A5E03461182-AF
107
Installation 5.1 Basics Minimum clearances
The modules can be mounted to the outer edge of the mounting rail. Maintain the following minimum clearances at the top and bottom when installing or removing the S7-1500 automation system / ET 200MP distributed I/O system:
Upper edge of the mounting rail
Figure 5-1 Minimum clearances in the control cabinet
108
Automation system System Manual, 11/2019, A5E03461182-AF
Installation 5.2 Installing the mounting rail
Installation rules
The installation starts on the left with a CPU/interface module or a system power supply/load current supply.
You connect the modules to each other with U connectors. Note that no U connector protrudes from the first and last module.
Note Only remove and insert modules when the power to the system is switched off.
WARNING Protection from conductive contamination Protect the devices against conductive contamination. At the same time, note the ambient conditions. Protection from conductive contamination can, for example, be achieved by installing the devices in a control cabinet with the appropriate degree of protection.
5.2
Installing the mounting rail
Lengths and drill holes
The mounting rails are delivered in six lengths:
160 mm
245 mm
482.6 mm (19 inches)
530 mm
830 mm
2000 mm
You can find the article numbers in the appendix Accessories/spare parts (Page 336).
The mounting rails (from 160 to 830 mm) come with two drill holes for fixing screws. A set of screws for grounding the mounting rail is provided.
The 2000 mm mounting rail is designed for assemblies with special lengths and does not have holes for fixing screws. No set of screws for grounding is enclosed with the mounting rail (can be ordered as Accessories/spare parts (Page 336)).
The specifications of the maximum offsets between two drill holes can be found in the table, "Dimensions for the drill holes".
Automation system System Manual, 11/2019, A5E03461182-AF
109
Installation 5.2 Installing the mounting rail
Tools required
Commercially available hacksaw Drill 6.5 mm Screwdriver Size 10 adjustable screw-wrench or socket wrench for grounding cable connection Adjustable screw-wrench, matching the selected fixing screws Stripping tool and crimp tool for the grounding cable
Required accessories
Use the following screw types for fastening the mounting rails:
Table 5- 1 Required accessories
For ...
· Outer fixing screws · Additional fixing screws (for mount-
ing rails > 482.6 mm)
you can use ...
M6 fillister head screws according to ISO 1207/ISO 1580 (DIN 84/DIN 85)
M6 hexagon head screws according to ISO 4017 (DIN 4017)
Explanation
Choose a suitable screw length for your assembly.
You also need washers for cylinder head screws with an internal diameter of 6.4 mm and an external diameter of 11 mm in accordance with ISO 7092 (DIN 433).
110
Automation system System Manual, 11/2019, A5E03461182-AF
Dimensions for the drill holes
Table 5- 2 Dimensions for the drill holes "Standard" mounting rails
Installation 5.2 Installing the mounting rail
"Longer" mounting rails
Length of the mounting rail Distance a
160 mm
10 mm
245 mm
10 mm
482.6 mm
8.3 mm
530 mm
15 mm
830 mm
15 mm
Distance b 140 mm 225 mm 466 mm 500 mm 800 mm
Additional fixing screws (for mounting rails > 530 mm)
For profile rails >530 mm, we recommend using additional fixing screws at intervals of >482.6 mm on the identification groove.
Automation system System Manual, 11/2019, A5E03461182-AF
111
Installation 5.2 Installing the mounting rail
Preparing the 2000 mm mounting rail for installation
To prepare the 2000 mm mounting rail for installation, proceed as follows: 1. Cut the 2000 mm mounting rail to the required length. 2. Mark the holes. The necessary dimensions can be found in the table "Dimensions for the
drill holes": Two drill holes at the beginning and end of the mounting rail Additional drill holes at equal intervals of 500 mm maximum, along the identification
groove 3. Drill the marked holes according to the selected type of fastening. 4. Ensure that there are no burrs or shavings on the mounting rail.
Note To ensure secure installation of the modules, make sure you position the drill holes centered on the identification groove and only use screws of the maximum size.
Identification groove for additional drill holes Additional drill hole
Figure 5-2 Preparing the 2000 mm mounting rail for installation
Installing the mounting rail
Place the mounting rail such that sufficient space remains for installation of and heat dissipation from the modules. Note the figure Figure 5-1 Minimum clearances in the control cabinet (Page 108). Screw the rail onto the mounting surface.
112
Automation system System Manual, 11/2019, A5E03461182-AF
Installation 5.2 Installing the mounting rail
Attaching the protective conductor
The S7-1500 automation system/ ET 200MP distributed I/O system has to be connected to the protective conductor system of the electrical system to ensure electrical safety. Proceed as follows to connect the protective conductor: 1. Strip the ground conductor with a minimum diameter of 10 mm2. Attach a ring cable lug
for M6 bolts with the crimping pliers. 2. Slide the enclosed bolt into the T profile groove. 3. Insert the spacer, ring terminal with the grounding connector, flat washer, and lock
washer onto the bolt (in that order). Thread on the hexagon nut. Fasten the components in place with the nut (tightening torque 4 Nm). 4. Connect the opposite end of the grounding cable to the central grounding point/protective conductor busbar (PE).
Figure 5-3 Attaching the protective conductor
Note Alternative grounding of the mounting rail Grounding with the grounding screw is not required if the following requirements are met: The mounting rails must be permanently connected to the protective circuit using an equivalent fitting that complies with the applicable standards, for example by permanent attachment to a grounded control cabinet wall.
Automation system System Manual, 11/2019, A5E03461182-AF
113
Installation 5.3 Installing the standard rail adapter
Note
You can find more information on the exact dimensions of the mounting rails in the appendix Dimension drawings of the mounting rails (Page 329).
5.3
Installing the standard rail adapter
Introduction
The mounting rail adapter allows you to mount the SIMATIC S7-1500/ET 200MP automation system on the standard 35 mm mounting rails.
You order the DIN rail adapter as separate accessories.
Note Note the following reduced technical specifications regarding mechanical load when you install the S7-1500/ET 200MP modules on the 35 mm standard mounting rail using the standard mounting rail adapter:
Vibration test acc. to IEC 60068-2-6 (sinusoidal) · 5 Hz f 8.4 Hz, constant amplitude 3.5 mm · 8.4 Hz f 150 Hz, constant acceleration 1 g
Duration of vibration: 10 frequency sweeps per axis in each of three perpendicular axes
Shock, tested according to IEC 60068-2-27 · Type of shock: Half-sine · Shock intensity: 150 m/s2 peak value, 11 ms duration · Direction of shock: 3 shocks in +/- direction in each of three perpendicular axes
114
Automation system System Manual, 11/2019, A5E03461182-AF
Article No. View
Installation 5.3 Installing the standard rail adapter
6ES7590-6AA00-0AA0 The scope of delivery consists of ten adapters, ten hexagon socket-head screws and ten washers.
The DIN rail adapter consists of a clamp, an adapter frame and a hexagon socket-head screw with washer.
Clamp Adapter frame Hexagon socket-head screw Washer
Figure 5-4 Parts of the DIN rail adapter
Automation system System Manual, 11/2019, A5E03461182-AF
115
Installation 5.3 Installing the standard rail adapter
Dimensional drawing
Position of the adapter frame during mounting to the standard DIN rail 35 mm x 7.5 mm Position of the adapter frame during mounting to the standard DIN rail 35 mm x 15 mm
Figure 5-5 Dimensional drawing
Tools required
Wrench matching the hexagon socket head cap screw M6 according to EN ISO 4762 (DIN 912).
116
Automation system System Manual, 11/2019, A5E03461182-AF
Properties
Installation 5.3 Installing the standard rail adapter
The standard mounting rail adapter makes it possible to mount the S7-1500/ET200MP mounting rail on standard 35 mm mounting rails. The DIN rail adapter allows for the use of prefabricated control cabinet and terminal box systems. The total length of the S7-1500/ET 200 MP mounting rail can be used again completely as before. To ensure optimal stability, the clearance between the two DIN rail adapters must be no more than 250 mm or less.
Figure 5-6 Distance between two DIN rail adapters
Note Note that, depending on the mounting rail width, the mounting rail adapter can protrude up to 4 mm on each side due to the drill holes. You can find an overview of the protrusion dimensions for the various DIN rails in the table below.
Automation system System Manual, 11/2019, A5E03461182-AF
117
Installation 5.3 Installing the standard rail adapter
Table 5- 3 Additional lateral space required
Mounting rail
Article No.
· 160.0 mm (with drill holes) · 245.0 mm (with drill holes) · 482.6 mm (with drill holes) · 530.0 mm · 830.0 mm (with drill holes)
6ES7590-1AB60-0AA0 6ES7590-1AC40-0AA0 6ES7590-1AE80-0AA0 6ES7590-1AF30-0AA0 6ES7590-1AJ30-0AA0
Additional space required with adapter 4 mm 4 mm 8 mm 0 mm 0 mm
Figure 5-7 DIN rail adapter protrusion
118
Automation system System Manual, 11/2019, A5E03461182-AF
Procedure
Installation 5.3 Installing the standard rail adapter
Mounting on the standard DIN rail 35 mm x 7.5 mm To install DIN rail adapter on the standard DIN rail 35 mm x 7.5 mm, follow these steps: 1. Set the clamp onto the standard DIN rail. 2. The shorter transverse edge of the adapter frame points towards the cabinet or box wall
(2). 3. Place the S7-1500/ET 200MP mounting rail on the adapter frame so that the groove in
the S7-1500/ET 200MP mounting rail matches the groove in the adapter frame. Place the S7-1500/ET 200MP mounting rail with the adapter frame on the clamp (4). 4. Screw the S7-1500/ET 200mounting MP mounting rail together with the mounting rail adapter and the standard mounting rail (5 - tightening torque 6 Nm).
Figure 5-8 Mounting sequence of the DIN rail adapter to the DIN rail 35 mm x 7.5 mm or 35 mm x 15 mm
Automation system System Manual, 11/2019, A5E03461182-AF
119
Installation 5.4 Installing a system power supply
Mounting to the standard DIN rail 35 mm x 15 mm To install DIN rail adapter on the standard DIN rail 35 mm x 15 mm, follow these steps: 1. Set the clamp onto the standard DIN rail. 2. The longer transverse edge of the adapter frame points toward the cabinet or box wall
(3). 3. Place the S7-1500/ET 200MP mounting rail on the adapter frame so that the groove in
the S7-1500/ET 200MP mounting rail matches the groove in the adapter frame. Place the S7-1500/ET 200MP mounting rail with the adapter frame onto the clamp (4). 4. Screw the S7-1500/ET 200mounting MP mounting rail together with the mounting rail adapter and the standard mounting rail (5 - tightening torque 6 Nm).
5.4
Installing a system power supply
Introduction
The system power supply has a connection to the backplane bus and supplies the connected modules with the internal supply voltage.
Requirements
The mounting rail is installed.
Tools required
Screwdriver with 4.5 mm blade
120
Automation system System Manual, 11/2019, A5E03461182-AF
Installation 5.4 Installing a system power supply
Installing a system power supply
To install the system power supply, follow these steps: 1. Insert the U-connector into the back of the system power supply. 2. Hang the system power supply on the mounting rail. 3. Swivel the system power supply to the rear.
Figure 5-9 Installing a system power supply
4. Open the front cover. 5. Disconnect the power cable connector from the system power supply. 6. Screw the system power supply tight (tightening torque 1.5 Nm). 7. Insert the already wired-up power cable connector into the system power supply. Information about wiring of the power cable connector is available in the section Connecting system power supply and load current supply (Page 147).
Uninstalling a system power supply
The system power supply is wired up. To uninstall the system power supply, follow these steps: 1. Open the front cover. 2. Shut down the system power supply. 3. Switch off the supplied supply voltage. 4. Disconnect the power cable connector, and remove the connector from the system power
supply. 5. Unscrew the fixing screw. 6. Swivel the system power supply out of the mounting rail.
Automation system System Manual, 11/2019, A5E03461182-AF
121
Installation 5.5 Installing a load current supply
Reference
Additional information can be found in the manuals for the system power supplies.
5.5
Installing a load current supply
Introduction
Load current supplies do not have a connection to the backplane bus of the S7-1500 automation systems/ET 200MP distributed I/O system and also do not occupy a slot on the backplane bus. The load current supply (PM) supplies the system power (PS), CPU, interface module and input and output circuits of the I/O modules with DC 24 V.
Requirements
The mounting rail is installed.
Tools required
Screwdriver with 4.5 mm blade
122
Automation system System Manual, 11/2019, A5E03461182-AF
Installation 5.5 Installing a load current supply
Installing a load current supply
Watch video sequence (http://www.automation.siemens.com/salesmaterial-as/interactivemanuals/getting-started_simatic-s7-1500/videos/EN/mount/start.html) To install a load current supply, follow these steps: 1. Hook the load current supply on the mounting rail. 2. Swivel the load current supply to the rear.
Figure 5-10 Installing a load current supply
3. Open the front cover. 4. Disconnect the power cable connector from the load current supply. 5. Screw the load power supply tight (tightening torque 1.5 Nm). 6. Insert the already wired-up power cable connector into the load current supply. For a description on how to wire the power cable connector, refer to the section Connecting system power supply and load current supply (Page 147).
Note Load current supplies can only be mounted on the left or right side outside the S7-1500 automation system/ET 200MP distributed I/O system. If you mount a load current supply on the right of the configured setup, the heat development of the load current supply may make a gap to the configured setup necessary. For additional information, refer to the relevant manuals. The number of load current supplies that can be used is unlimited.
Automation system System Manual, 11/2019, A5E03461182-AF
123
Installation 5.6 Installing the CPU
Uninstalling the load current supply
The load current supply is wired up. To uninstall a load current supply, follow these steps: 1. Open the front cover. 2. Shut down the load current supply. 3. Turn off the feed supply voltage. 4. Disconnect the power cable connector, and remove the connector from the load current
supply. 5. Unscrew the fixing screw. 6. Swivel the load current supply out of the mounting rail.
Reference
Additional information can be found in the manuals for the load current supplies.
5.6
Installing the CPU
Introduction
The CPU executes the user program and supplies the electronics of the modules with power via the backplane bus.
Requirements
The mounting rail is installed.
In a system power supply located on the left next to the CPU, a U connector is inserted on the back right.
Note Protective film
Please note that the CPU is supplied with a removable protective film on the display. You can remove the protective film as required.
Tools required
Screwdriver with 4.5 mm blade
124
Automation system System Manual, 11/2019, A5E03461182-AF
Installation 5.6 Installing the CPU
Installing the CPU
Watch video sequence (http://www.automation.siemens.com/salesmaterial-as/interactivemanuals/getting-started_simatic-s7-1500/videos/EN/mount/start.html) To install a CPU, follow these steps: 1. Insert a U-connector into the back right on the CPU. 2. Install the CPU to the mounting rail. Also push the CPU to the left system power supply if
necessary. 3. Ensure that the U-connector is inserted at the system power supply. Swivel the CPU in to
the rear. 4. Screw the CPU tight (tightening torque 1.5 Nm).
Figure 5-11 Installing the CPU
Uninstalling the CPU
The CPU is wired, and is followed by additional modules. To uninstall a CPU, follow these steps: 1. Open the front cover. 2. Switch the CPU into STOP mode. 3. Turn off the feed supply voltage. 4. Pull off the connector for the supply voltage. 5. Loosen the bus connectors for PROFIBUS/PROFINET with the screwdriver. 6. Disconnect the bus connector from the CPU. 7. Undo the CPU fixing screws. 8. Pivot the CPU out of the mounting rail.
Automation system System Manual, 11/2019, A5E03461182-AF
125
Installation 5.7 Installing the interface module
5.7
Installing the interface module
Introduction
The interface module connects the ET 200MP with the PROFINET IO/PROFIBUS DP.
The interface module exchanges data between the higher-level controller and the I/O modules.
Requirements
The mounting rail is installed.
For a system power supply located to the left of the interface module, a U connector is inserted on the back left.
Tools required
Screwdriver with 4.5 mm blade
Installing the interface module
Watch video sequence (https://support.industry.siemens.com/cs/media/67462859_installing_web_en/start.htm) To install an interface module, proceed as follows: 1. Mount the U-connector on the back right-hand side of the interface module. 2. Hook the interface module on the rail. 3. Pivot the interface module towards the back. 4. Tighten the interface module (tightening torque 1.5 Nm).
Figure 5-12 Installing the interface module
126
Automation system System Manual, 11/2019, A5E03461182-AF
Installation 5.8 Installing I/O modules
Uninstalling the interface module
The interface module is wired and is followed by additional modules. To uninstall the interface module, follow these steps: 1. Switch off the supply voltage for the interface module. 2. Open the front cover. 3. Loosen the bus connector and the connector for the supply voltage with the screwdriver. 4. Remove the plug from the interface module. 5. Loosen the fixing screw of the interface module. 6. Pivot the interface module out of the mounting rail.
5.8
Installing I/O modules
Introduction
The I/O modules are then mounted to the right of the CPU/interface module. I/O modules form the interface between the controller and the process. The controller detects the current process state via the connected sensors and actuators, and triggers the corresponding reactions.
Requirements
The mounting rail is installed.
The CPU/interface module is installed.
In the module/CPU/interface module located to the left of the I/O module, a U-connector is inserted on the back right.
Tools required
Screwdriver with 4.5 mm blade
Automation system System Manual, 11/2019, A5E03461182-AF
127
Installation 5.8 Installing I/O modules
Installing I/O modules
Watch video sequence (http://www.automation.siemens.com/salesmaterial-as/interactivemanuals/getting-started_simatic-s7-1500/videos/EN/mount/start.html) Proceed as follows to install an I/O module: 1. Insert a U connector into the back right on the I/O module.
Exception: the last I/O module in the assembly 2. Install the I/O module on the mounting rail. Push the I/O module up to the left module. 3. Pivot the I/O module towards the back. 4. Tighten the I/O module (tightening torque 1.5 Nm).
Figure 5-13 Installing I/O module
Uninstalling I/O modules
The I/O module is wired. Proceed as follows to dismantle an I/O module: 1. Turn off all feed supply voltages. 2. Open the front cover. 3. For communications modules: Loosen and remove the connector from the module. 4. At I/O modules: Pull the front connector out of the I/O module using the unlocking strap.
Swivel the front connector downward. Remove the front connector from the guide grooves. 5. Loosen the fixing screw of the I/O module. 6. Pivot the I/O module out of the mounting rail.
128
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring
6
6.1
Rules and regulations for operation
Introduction
The S7-1500 automation system / ET 200MP distributed I/O system is a component of plants or systems. Special rules and regulations must be adhered to in line with the area of application.
This section provides an overview of the most important rules that must be observed for the integration of the S7-1500 automation system/ ET 200MP distributed I/O system in a plant or system. Observe these rules when connecting the S7-1500automation system / ET 200MP distributed I/O system.
Specific application
Observe the safety and accident prevention regulations that are applicable to specific applications (for example Machinery Directive).
EMERGENCY-STOP devices
EMERGENCY OFF equipment to IEC 60204 (corresponds to DIN VDE 0113) must remain effective in all operating modes of the plant or system.
Excluding hazardous plant states
Hazardous operating states must not occur when The plant restarts after a voltage dip or power failure. Bus communication is reestablished following a fault. If a hazardous operating state occurs, force an EMERGENCY STOP. After the EMERGENCY-STOP device has been unlocked, the S7-1500 automation system / ET 200MP distributed I/O system must not started uncontrolled or undefined.
Automation system System Manual, 11/2019, A5E03461182-AF
129
Wiring 6.1 Rules and regulations for operation
Line voltage
The points to note for line voltage are set out below.
For fixed plants or systems without multipole circuit breaker, a mains disconnection device (multipole) must be available in the building installation.
For load current supplies, the configured rated voltage range must correspond to the local line voltage.
For all power circuits of the S7-1500 automation system/ET 200MP distributed I/O system, the fluctuation/deviation of the line voltage from the rated value must be within the permitted tolerance.
You can find additional information in the section Information on insulation tests, protection class, degree of protection and rated voltage (Page 327).
24 V DC supply
The following describes what you must pay attention to in terms of the 24 V DC supply: Power supply units for the 24 V DC supply must supply a safe extra-low voltage
according to IEC 61131-2 or IEC 61010-2-201. To protect the S7-1500 automation system/ET 200MP distributed I/O system from
lightning and overvoltages, use overvoltage arresters. Suitable components for the lightning and overvoltage protection are specified in the Defining interference-free controllers (http://support.automation.siemens.com/WW/view/en/59193566) function manual.
Protection against electrical shock
As protection against electric shock you must connect the mounting rail and if necessary, all other existing protective conductor connections of the S7-1500 automation system / ET 200MP distributed I/O system conductively with the protective conductor. You may only use conductors in the colors yellow-green for connections to protective conductor connections.
Protection against external electrical influences
To protect against electrical effects or faults, observe the following rules: The system for discharging electromagnetic interference must be connected to a
protective conductor with a sufficient cross-section for all plants with an S7-1500 automation system / ET 200MP distributed I/O system. You must ensure that all supply, signal and bus cables are correctly routed and installed. For signal and bus lines, a cable break, wire break or a cross circuit must not lead to undefined states in the plant or system.
130
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.2 Additional rules and regulations for operation of the S7-1500/ET 200MP with fail-safe modules
Reference
Additional information can be found in the function manual, Designing interference-free controllers (http://support.automation.siemens.com/WW/view/en/59193566).
6.2
Additional rules and regulations for operation of the
S7-1500/ET 200MP with fail-safe modules
6.2.1
Safety extra-low voltage (SELV, PELV) for failsafe modules
Key statement
WARNING
The failsafe modules must be operated with safety extra-low voltage (SELV, PELV). You can find more information on safety extra-low voltage (SELV, PELV) in the data sheets of the applicable power supplies, for example. The fail-safe modules operate at a rated voltage of 24 V DC. The tolerance range is 19.2 V DC to 28.8 V DC. The fail-safe motor starters operate with the 24 V DC rated voltage. The tolerance range is 20.4 V DC to 28.8 V DC. Within the overvoltage range from 32 V DC to 36 V DC, the F-modules react in a fail-safe manner and the inputs and outputs are passivated. For overvoltages greater than 36 V DC, the F-modules are permanently de-energized. Use a power supply unit that does not exceed Um = 36 V DC even in the event of a fault. For more on this, refer to the information in the data sheet on overvoltage protection in the case of an internal error. Or implement appropriate measures to limit the voltage, e.g., use of a surge protection device. All system components that can supply electrical energy in any form whatsoever must fulfill this condition. Each additional circuit (24 V DC) used in the system must have a safety extra low voltage (SELV, PELV). Refer to the relevant data sheets or contact the manufacturer. Sensors and actuators with an external power supply can also be connected to F-modules. Make sure that power is supplied to these components from safety extra-low voltage (SELV, PELV) as well. The process signal of a 24 V DC digital module must not exceed a fault voltage Um in the event of a fault.
WARNING
Even when a fault occurs, the permissible potential difference between the supply of the interface module (bus voltage) and the load voltage must not be exceeded. An external direct electrical connection is one way to meet this requirement. This also prevents potential differences from causing voltage additions at the individual voltage sources, which could cause the fault voltage Um to be exceeded.
Automation system System Manual, 11/2019, A5E03461182-AF
131
Wiring 6.2 Additional rules and regulations for operation of the S7-1500/ET 200MP with fail-safe modules
6.2.2
Requirements of sensors and actuators for fail-safe modules
General requirements for sensors and actuators
Note the following important warning regarding safety-related use of sensors and actuators:
WARNING
Note that instrumentation with sensors and actuators bears a considerable safety responsibility. Also bear in mind that sensors and actuators generally do not have a service life of 20 years as defined in IEC 61508:2010 without considerable loss of safety.
The probability of hazardous faults and the rate of hazardous faults of safety functions must comply with an SIL-defined high limit. A listing of values achieved by F-modules in the technical specifications of the F-modules is available under "Fail-safe performance characteristics".
To achieve the respective safety class, suitably qualified sensors and actuators are necessary.
Additional sensor requirements
General rule: A single-channel sensor is sufficient to achieve SIL3/Cat.3/PLd. However, to achieve SIL3/Cat.3/PLd with a single-channel sensor, the sensor itself must be SIL3/Cat.3/PLd-capable. Otherwise you can only reach this security level through the twochannel connection of sensors.
To reach Cat.4, connect the sensors to two channels.
WARNING
In the case of fail-safe input modules, a "0" value is output to the F-CPU after detection of faults. You therefore need to make sure that the sensors are implemented in such a way as to ensure the reliable reaction of the safety program when the sensor is in the "0" state.
Example: In its safety program, an EMERGENCY-STOP sensor must achieve the shutdown of the respective actuator when it is in the "0" state (EMERGENCY-STOP button pressed).
132
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.2 Additional rules and regulations for operation of the S7-1500/ET 200MP with fail-safe modules
Duration requirements for sensor signals
WARNING
Observe the following requirements for sensor signals: · In order to ensure the correct detection of the sensor signals via fail-safe modules with
inputs, you need to make sure that the sensor signals are output for a minimum duration. · In order for pulses to be detected with certainty, the time between two signal changes (pulse duration) must be greater than the PROFIsafe monitoring time.
Safe detection of inputs through F-modules The minimum duration of sensor signals for fail-safe modules with inputs is dependent: On the parameters assigned for input delay On the parameters of the short-circuit test of sensor supplies. On the configured discrepancy behavior with 1oo2 (2v2) evaluation. The duration of the signal must be greater than the maximum response time of the configured application. Information on calculating the maximum response time can be found in section "Response times" of the respective F-module. The maximum permitted switching frequency of the sensor signals results from the minimum duration.
Additional requirements for actuators
The fail-safe output modules test the outputs at regular intervals. The F-module briefly switches off the activated outputs and, if necessary, briefly switches on the deactivated outputs. You can assign the maximum duration of the test pulses (dark and light period) with parameters. High-speed actuators may briefly drop out or be activated during this test. If your process does not tolerate this, set the pulse duration of the light or dark test correspondingly or use actuators that have sufficient lag.
WARNING
If the actuators switch voltages greater than 24 V DC (e.g. 230 V AC), the outputs of a failsafe output module and the parts carrying a higher voltage must be electrically isolated (acc. to standard IEC 60664-1:2010). This is generally the case with relays and contactors and you must pay particular attention to this with semiconductor switching devices.
Technical specifications of sensors and actuators
Refer to the manuals of the fail-safe modules for technical specifications to assist you in selecting sensors and actuators.
Automation system System Manual, 11/2019, A5E03461182-AF
133
Wiring 6.3 Operation on grounded infeed
6.2.3
Capacitive crosstalk of digital input/output signals
Readback errors may occur on the F-DQ modules if the fail-safe digital output signals and fail-safe digital input signals are routed through a single cable.
Cause: Capacitive crosstalk
During the bit pattern test of the outputs or the sensor supply of the inputs, the steep switching edge of the output drivers due to the coupling capacitance of the line may result in crosstalk to other non-activated output or input channels. This may then lead to a response of the readback circuit in these channels. The module detects a cross circuit/short circuit and performs a safety-related shutdown.
Solution:
Separate cables for fail-safe DI modules and fail-safe DQ modules / non-fail-safe DQ modules
Coupling relay or diodes in the outputs
Disable the short-circuit test of the sensor supply if safety class requirements allow it.
Cause: magnetic crosstalk
Note that an inductive load connected to the F-DQ channels can induce coupling of a strong magnetic field.
Solution:
Spatially disconnect the inductive loads or shield against the magnetic field.
Configure the "Max. readback time dark test" to 50 ms or higher.
6.3
Operation on grounded infeed
Introduction
Information is provided below on the overall configuration of an S7-1500 automation system/ET 200MP distributed I/O system on a grounded infeed (TN-S system). The specific subjects discussed are:
Shut-off devices, short circuit and overload protection in accordance with
IEC 60364, corresponds to DIN VDE 0100
IEC 60204, corresponds to DIN VDE 0113
Load current supplies and load circuits
Grounded infeed
In the case of grounding incoming supplies (TN-S system) the neutral conductor (N) and the protective conductor (PE) are each grounded. Both conductors form a part of the overvoltage concept. When a plant is in operation, the current flows across the neutral conductor. When a fault occurs, for example a single ground fault between a live conductor and ground, the current flows through the protective conductor.
134
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.3 Operation on grounded infeed
Safe electrical isolation (SELV in accordance with IEC 61131-2 or IEC 61010-2-201)
Load power supplies/system power supplies with a 24 V DC output voltage require safe electrical isolation and a voltage limit (extra low voltage). Load power supplies/system power supplies with a 24 V DC output voltage are not connected to the protective conductor. In accordance with IEC 61131-2 / IEC 61010-2-201, this protection is referred to as SELV (Safety Extra Low Voltage).
Either the wiring of SELV circuits must be safely isolated from the wiring of other circuits that are not SELV, or the insulation of all wires must be dimensioned for the higher voltage.
Protective extra-low voltage (PELV in accordance with IEC 61131-2 or IEC 61010-2-201)
Load power supplies/system power supplies with a protective 24 V DC output voltage require a safe connection to the protective conductor and a voltage limit (extra low voltage).
In accordance with IEC 61131-2 / IEC 61010-2-201, this protection is referred to as PELV (Protective Extra Low Voltage).
Either the wiring of PELV circuits must be safely isolated from the wiring of other circuits that are not PELV, or the insulation of all wires must be dimensioned for the higher voltage.
Reference potential of the controller
The reference potential of the S7-1500 automation system/ ET 200MP distributed I/O system is connected with the mounting rail through a high-resistance RC combination in the CPU/interface module. In this way, high-frequency interference currents are conducted and electrostatic charges are avoided. Despite the grounded mounting rail, the reference potential of the S7-1500 automation system / ET 200MP distributed I/O system has to be considered as ungrounded due to the high-resistance connection.
If you want to configure the S7-1500 automation system/ET 200MP distributed I/O system with grounded reference potential, connect the M connection of the CPU/interface module galvanically with the protective conductor.
You can find a simplified representation of the potential relationships in section Electrical configuration (Page 138).
Automation system System Manual, 11/2019, A5E03461182-AF
135
Wiring 6.3 Operation on grounded infeed
Short-circuit and overload protection
Various measures as protection against short-circuits and overloads are required for setting up a full installation. The nature of the components and the degree to which the required measures are binding depends on the IEC (DIN VDE) regulation applicable to your plant configuration. The table refers to the following figure and compares the IEC (DIN VDE) regulations.
Table 6- 1 Components and required measures
Shut-off device for control system, sensors, and actuators Short-circuit and overload protection: In groups for sensors and actuators
Load power supply for AC load circuits with more than five items of electromagnetic equipment
Reference to following figure
IEC 60364 (DIN VDE 0100)
Main switch
IEC 60204 (DIN VDE 0113)
Disconnector
Single-pole protection of · With grounded sec-
circuits
ondary circuit: fuse
unipolar
· Otherwise: fuse all
poles
Galvanic isolation by
Galvanic isolation by
transformer recommended transformer recommended
136
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.3 Operation on grounded infeed
S7-1500/ET 200MP in the overall configuration
The figure below shows the overall configuration of the S7-1500/ET 200MP (load current supply and grounding concept) with infeed from a TN-S system.
Main switch Short-circuit and overload protection on the primary side Short-circuit and overload protection on the secondary side The load current supply (galvanic isolation)
Figure 6-1 Operating the S7-1500/ET 200MP with grounded reference potential
Automation system System Manual, 11/2019, A5E03461182-AF
137
Wiring 6.4 Electrical configuration
6.4
Electrical configuration
Galvanic isolation
With the S7-1500 automation system/ET 200MP distributed I/O system, there is galvanic isolation between: The primary side of the system power supply (PS) and all other circuit components The (PROFIBUS/PROFINET) communication interfaces of the CPU/interface module and
all other circuit components The load circuits/process electronics and all other circuit parts of the S7-1500/ET 200MP
components High-frequency interference currents are conducted and electrostatic charges are avoided through integrated RC combinations or integrated capacitors.
S7-1500 potential relationships
The following figure shows a simplified representation of the potential relationships of the S7-1500 automation system.
Figure 6-2 Potential relationships for S7-1500 using CPU 1516-3 PN/DP as an example
138
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.4 Electrical configuration Potential relationships ET 200MP on PROFINET IO The following figure shows a simplified representation of the potential relationships of the ET 200MP distributed I/O system on PROFINET IO.
Figure 6-3 Potential relationships for ET 200MP using an IM 155-5 PN HF interface module as an example
Automation system System Manual, 11/2019, A5E03461182-AF
139
Wiring 6.4 Electrical configuration Potential relationships ET 200MP on PROFIBUS DP
The following figure shows a simplified representation of the potential relationships of the ET 200MP distributed I/O system on PROFIBUS DP.
Figure 6-4 Potential relationships for ET 200MP using an IM 155-5 DP ST interface module as an example
140
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.5 Wiring rules
6.5
Wiring rules
Introduction
Use suitable cables for connecting the S7-1500 automation system/ET 200MP distributed I/O system. The following tables present the wiring rules for the CPU, interface module, system power supply, load current supply, front connector and power supply elements.
CPU, interface module, system power supply and load current supply
Table 6- 2 Wiring rules for CPU, interface module, system power supply and load current supply
Wiring rules for ...
CPU/interface module
Permitted cable cross-sections of solid cables (Cu) -
-
Permitted cable crosssections of flexible cables (Cu)
Without wire end sleeve
With end sleeve
0.25 to 2.5 mm2 AWG*: 24 to 14 0.25 to 1.5 mm2
AWG*: 24 to 16
Number of wires per connection
1
Stripped length of the wires
10 to 11 mm
End sleeves according to DIN 46228
without plastic sleeve Design A, 10 mm long
with plastic sleeve 0.25 Design E, 10 mm long to 1.5 mm2
Sheath diameter
-
Tool
3 to 3.5 mm screwdriver, conic
design
Connection system
Push-in terminal
Tightening torque
-
* American Wire Gauge
System power and load current supply
0.5 to 2.5 mm2 AWG*: 20 to 14 0.5 to 1.5 mm2 AWG*: 20 to 16 1 7 to 8 mm Design A, 7 mm long Design A, 7 mm long
8.5 mm 3 to 3.5 mm screwdriver, conic design Screw terminal from 0.5 Nm to 0.6 Nm
Automation system System Manual, 11/2019, A5E03461182-AF
141
Wiring 6.5 Wiring rules
Front connectors
Table 6- 3 Wiring rules for front connector
Wiring rules for ...
40-pin front connector 40-pin front connector 40-pin front connector
(screw terminal, for 35 mm module)
(push-in terminal, for 35 mm module)
(push-in terminal, for 25 mm module)
Permitted cable cross-sections of solid cables (Cu) up to 0.25 mm²
up to 0.25 mm²
up to 0.25 mm²
AWG*: up to 24
AWG*: up to 24
AWG*: up to 24
Permitted cable cross-
Without wire end
sections of flexible cables sleeve
(Cu)
0.25 to 1.5 mm2 AWG*: 24 to 16
0.25 to 1.5 mm2 AWG*: 24 to 16
0.25 to 1.5 mm2 (max. 40 x 0.75 mm2) AWG*: 24 to 16 mm2
(max. 40 x 0.75 mm2)
With end sleeve
0.25 to 1.5 mm2
0.25 to 1.5 mm2
0.25 to 1.5 mm2
(max. 32 x 0.75 mm²; 8 x 1.5 mm²)
AWG*: 24 to 16
AWG*: 24 to 16
AWG*: 24 to 16
(max. 32 x AWG 19; 8 x AWG 16)
Number of wires per connection
1 or combination of 2 wires up to 1.5 mm2 (total) in the same end sleeve
1 or combination of 2 wires up to 1.5 mm2 (total) in the same end sleeve
1 or combination of 2 wires up to 1.5 mm2 (total) in the same end sleeve
Stripped length of the wires
8 mm up to max. 0.75 mm2(corresponding
to length of end sleeve**: 8 mm)
8 to 11 mm (corresponding to length of end sleeve**: 8 mm, 10 mm)
8 to 11 mm (corresponding to length of end sleeve**: 8 mm, 10 mm)
10 to 12 mm for all cross-sections (corresponding to length of end sleeve**: 10 mm, 12 mm)
End sleeves according to without plastic sleeve DIN 46228
Design A:
Design A: 8 mm
8 mm long up to max. and10 mm long
0.75 mm2,
Design A: 8 mm and10 mm long
10 mm and 12 mm long for all crosssections
with plastic sleeve 0.25 Design E
Design E 8 mm
to 1.5 mm2
8 mm long up to max. and10 mm long
0.75 mm2,
Design E 8 mm and10 mm long
10 mm and 12 mm long for all crosssections
Sheath diameter
-
-
-
Tool
3 to 3.5 mm screw- 3 to 3.5 mm screw- 3 to 3.5 mm screw-
driver, conic design driver, conic design driver, conic design
Connection system
Screw terminal
Push-in terminal
Push-in terminal
142
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.5 Wiring rules
Wiring rules for ...
Tightening torque (screw terminal) Max. actuating force for complete opening of the push-in terminal Recommended crimp shape for end sleeve
40-pin front connector 40-pin front connector 40-pin front connector
(screw terminal, for 35 mm module)
(push-in terminal, for 35 mm module)
(push-in terminal, for 25 mm module)
from 0.4 Nm to 0.7 -
-
Nm
-
40 N
40 N
-
Corresponding to
Corresponding to
crimping tool PZ 6/5 crimping tool PZ 6/5
* American Wire Gauge ** End sleeve
Automation system System Manual, 11/2019, A5E03461182-AF
143
Wiring 6.5 Wiring rules
Power supply elements
Table 6- 4 Wiring rules for power supply elements (component of shield set)
Wiring rules for ...
Permitted cable cross-sections of solid cables (Cu)
Permitted cable cross-sections of flexible cables (Cu)
Without wire end sleeve With end sleeve
Number of wires per connection
Stripped length of the wires
End sleeves according to DIN 46228
without plastic sleeve
with plastic sleeve 0.25 to 1.5 mm2
Sheath diameter Tool
Connection system Tightening torque (screw terminal) Max. actuating force for complete opening of the push-in terminal
Power supply element
(screw terminal, for 35 mm module)
-
-
0.25 to 1.5 mm2
AWG*: 24 to 16
0.25 to 1.5 mm2
AWG*: 24 to 16
1 or combination of 2 wires up to 1.5 mm2 (total) in the same end sleeve
8 mm up to max. 0.75 mm2(corresponding to length of end sleeve**: 8 mm)
10 to 12 mm for all crosssections (corresponding to length of end sleeve**: 10 mm, 12 mm)
Design A:
8 mm long up to max. 0.75 mm2,
10 mm and 12 mm long for all cross-sections
Design E
8 mm long up to max. 0.75 mm2,
10 mm and 12 mm long for all cross-sections
-
3 to 3.5 mm screwdriver, conic design
Screw terminal
From 0.4 Nm to 0.7 Nm
Power supply element (push-in terminal, for 25 mm module)
0.25 to 1.5 mm2 AWG*: 24 to 16 0.25 to 1.5 mm2 AWG*: 24 to 16 1 or combination of 2 wires up to 1.5 mm2 (total) in the same end sleeve 8 to 11 mm (corresponding to length of end sleeve**: 8 mm, 10 mm)
Design A: 8 mm and10 mm long
Design E 8 mm and10 mm long
3 to 3.5 mm screwdriver, conic design Push-in terminal -
-
40 N
144
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring rules for ... Recommended crimp shape for end sleeve
Wiring 6.5 Wiring rules
Power supply element (screw terminal,
for 35 mm module) -
Power supply element
(push-in terminal, for 25 mm module)
Corresponding to crimping tool PZ 6/5
* American Wire Gauge ** End sleeve
Permissible cable temperature
Note Permissible cable temperatures You must select sufficiently large wire cross-sections to ensure that the permissible cable temperatures are not exceeded at the maximum ambient temperature of the S7-1500/ET 200MP distributed I/O system. Example of signal lines (analog modules, DI/DO modules): At an ambient temperature of 30° C, a current of, for example, 0.5 A per wire and a cross-section of 0.75 mm² Cu, a connecting conductor must be rated for a temperature range of at least 55° C. Example of relay module, power supply: At an ambient temperature of 40° C, a current of, for example, 4 A per wire and a cross-section of 1.5 mm² Cu, a connecting conductor must be rated for a temperature range of at least 70° C.
Automation system System Manual, 11/2019, A5E03461182-AF
145
Wiring 6.6 Connecting the supply voltage
6.6
Connecting the supply voltage
Introduction
The supply voltage of the CPU/interface module is supplied by means of a 4-pole connection plug, which is located on the front or below on the CPU / interface module.
Connection for supply voltage (X80)
The connections of the 4-pole connector have the following meaning:
+ 24 V DC of the supply voltage Mass of the supply voltage Mass of the supply voltage for looping (current limited to 10 A) + 24 V DC of the supply voltage for looping (current limited to 10 A) Spring opener (one spring opener per terminal)
Figure 6-5 Connection for supply voltage
The maximum connector cross-section is 1.5 mm2. The cable connector offers you the option of looping the supply voltage uninterrupted, even when it is unplugged.
Requirements
Only wire the cable connector when the supply voltage is turned off. Observe the Wiring rules (Page 141).
Tools required
3 to 3.5 mm screwdriver
Tool-free connection of cables: multi-wire (stranded), with end sleeve or ultrasonic compressed
To connect a wire without tools, follow these steps: 1. Strip 8 to 11 mm of the wires. 2. Seal or crimp the wire with end sleeves. 3. Insert the wire into the push-in terminal as far as it will go. 4. Push the wired connector into the socket of the CPU/interface module.
146
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.7 Connecting system power supply and load current supply
Connection of wires: multi-wire (stranded), without end sleeve, unprocessed
To connect a wire without end sleeve, follow these steps: 1. Strip 8 to 11 mm of the wires. 2. Using a screwdriver, press the spring release and insert the wire into the push-in terminal
as far as it will go. 3. Pull the screwdriver out of the spring release. 4. Push the wired connector into the socket of the CPU/interface module.
Loosening a wire
Push with the screwdriver as far as it will go into the spring release. Remove the wire from the push-in terminal.
Uninstalling the connection plug
To uninstall the connection plug, you need a screwdriver. With the screwdriver, pry the connection plug out of the CPU/interface module.
6.7
Connecting system power supply and load current supply
Introduction
In the delivery condition of the system power supplies/load current supplies, power connectors are inserted. The modules and the associated power connectors are coded. There are two parts to the coding element. One coding element is located in the module, and the other in the power connector. The system power supplies/load current supplies use identical power connectors for the voltage connection.
The coding element prevents the insertion of a power connector into a different type of system power supply/load current supply.
Tools required
3 to 3.5 mm screwdriver
Automation system System Manual, 11/2019, A5E03461182-AF
147
Wiring 6.7 Connecting system power supply and load current supply
Connecting the supply voltage to a system power supply/load current supply
Watch video sequence (https://support.industry.siemens.com/cs/media/67462859_connecting_supply_web_en/start. htm) To connect the supply voltage, follow these steps: 1. Swing the front cover of the module up until the front cover latches. 2. Press down the unlocking button of the power cable connector (Figure 1). Remove the
power cable connector from the front of the module. 3. Loosen the screw on the front of the connector. This loosens the housing latch and the
cable relief. With a tightened screw the connector's cover can't be removed (Figure 2). 4. Pry off the connector cover using a suitable tool (Figure 3).
Figure 6-6 Connecting the supply voltage to a system power supply/load current supply (1) 5. Strip the cable jacket to a length of 35 mm and the conductors to a length of 7 to 8 mm.
Attach the end sleeves. 6. Connect the wires in the connector according to the connection diagram (Figure 4). 7. Close the cover (Figure 5). 8. Retighten the screw (Figure 6). This effects a strain relief on the lines.
Figure 6-7 Connecting the supply voltage to a system power supply/load current supply (2) 9. Insert the power connector into the module, until the latch engages.
148
Automation system System Manual, 11/2019, A5E03461182-AF
Reference
Wiring 6.8 Connecting the CPU/interface module to the load current supply
You can find more information on connecting the 24 V DC output voltage of the load power supply (PM) in the manuals for the relevant modules.
6.8
Connecting the CPU/interface module to the load current supply
Introduction
The load current supply is equipped with a plug-in 24 V DC output terminal (behind the front cover at the bottom). You connect the wires for the supply voltage of the CPU/interface module to this terminal.
Requirements
Only wire the connection plug when the supply voltage is turned off.
The connection plug for connecting the supply voltage to the CPU/interface module is already mounted.
You can find additional information in the section Connecting the supply voltage (Page 146).
Tools required
3 to 3.5 mm screwdriver
Automation system System Manual, 11/2019, A5E03461182-AF
149
Wiring 6.8 Connecting the CPU/interface module to the load current supply
Connecting the CPU/interface module to a load current supply
Watch video sequence (https://support.industry.siemens.com/cs/media/78027451_S7_1500_gs_wire_web_en/start.h tm) To connect the supply voltage, follow these steps: 1. Open the front cover of the load power supply. Pull the 24 V DC output terminal
downwards. 2. Connect the 24 V DC output terminal to the wires of the 4-pole connection plug of the
CPU/interface module.
3. Connecting the load current supply to the CPU/interface module.
Note Connection on the underside of the device
The connection socket for the 4-pole connection plug is located on the underside of the device for the following CPUs/interface modules: · Standard, F-CPUs/compact CPUs from order number 6ES751x-xxx02-
0AB0/6ES751x-1CK01-0AB0 · Interface modules IM 155-5 PN BA as of order number 6ES7155-5AA00-0AA0 and
IM 155-5 PN ST as of order number 6ES7155-5AA01-0AB0
Additional information can be found in the associated manuals for the CPUs/interface modules.
150
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.9 Connecting interfaces for communication
6.9
Connecting interfaces for communication
Connecting interfaces for communication
Connect the communication interfaces of the CPU/interface module using standardized plug connectors. Use prefabricated connecting cables for the connection. If you want to prepare communication cables yourself, the interface assignment is specified in the manuals of the corresponding modules. Observe the mounting instructions for the connectors.
Special consideration: Unlock connectors Industrial Ethernet FastConnect RJ45 plug 180 2x 2 or Industrial Ethernet FastConnect RJ45 plug 180 4x 2 and disconnect from PROFINET interface of CPU/IM
Tools required Industrial Ethernet FastConnect RJ45 Plug 180 2x 2 (6K1901-1BB10-2Ax0): 2.5 mm
screwdriver Industrial Ethernet FastConnect RJ45 Plug 180 4x 2 (6GK1901-1BB12-2Ax0): 3.0 mm
screwdriver Procedure 1. Press the screwdriver parallel to the connector into the unlocking. 2. Disconnect the connector from the PROFINET interface.
Note Do not unlock the connector under tension!
Figure 6-8 Unlocking the FastConnect connector
Automation system System Manual, 11/2019, A5E03461182-AF
151
Wiring 6.10 Front connector for the I/O modules
6.10
Front connector for the I/O modules
Introduction
The sensors and actuators of your plant are connected to the automation system by means of front connectors. Wire the sensors and actuators to the front connector. Plug the front connector with the wired sensors and actuators onto the I/O module.
You can wire the front connector as follows:
In the "pre-wiring position", which allows a convenient wiring
Completely, before you insert it into the I/O module.
You can remove the front connector easily from the I/O module with the wiring attached. This means it is not necessary to loosen the wiring when you replace the module.
Device versions of the front connector
Front connector 35 mm with screw terminals Front connector 25 mm with push-in terminals Front connector 35 mm with push-in terminals
Figure 6-9 Device versions of the front connector
152
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.10 Front connector for the I/O modules
Properties of the front connectors
The three different front connectors are characterized as follows:
40 clamping points each
Connection system: Screw terminal (for 35 mm modules only) or push-in terminal
Module width: 35 mm or 25 mm
If you want to supply load groups with the same potential (non-isolated), use the potential bridges supplied for the front connector (with 35 mm width) for digital I/O modules. The bridges are used to connect the terminals 9 and 29, 10 and 30, 19 and 39 as well as 20 and 40 facing each other. Advantage: Reduction of the wiring effort.
Note Use of potential bridges
The use of potential bridges depends on the relevant module used.
It is not permitted to use potential bridges for 230 V modules. Use the potential bridges only with a maximum supply voltage of 24 V DC. The current capacity per potential bridge is 8 A maximum.
Because of the different assignment, you may not use the potential bridges with analog I/O modules.
The front connectors for 25 mm modules have no potential bridges.
Observe the instructions and wiring rules in the product manual of the respective I/O module when using potential bridges.
In the delivery state a coding element is located in the module. When the front connector is first inserted into the I/O module, a part of the coding element clips onto the front connector. When the front connector is removed from the I/O module, one part of the coding element remains in the front connector, and the other part remains in the I/O module. The insertion of a front connector that is not suited to the module is thereby mechanically prevented. This ensures, for example, that the front connector with the coding element for a digital module cannot be inserted into an analog module.
Properties of the front connectors on fail-safe modules
In as-delivered condition, a fail-safe module not only has a mechanical coding element but also an electronic coding element. The electronic coding key is a rewritable memory for the PROFIsafe address. When the front connector is inserted in the F-module, the electronic coding element engages completely in the front connector. If you remove the front connector from the F-module, the memory with the PROFIsafe address of the fail-safe module remains in the front connector (see section Replacing a front connector (Page 283)).
Reference
You can find additional information on the coding element in the section Coding element on the I/O module and on the front connector (Page 278).
Additional information on the use of the potential bridges can be found in the product manual for the respective I/O module.
Automation system System Manual, 11/2019, A5E03461182-AF
153
Wiring 6.10 Front connector for the I/O modules
6.10.1
Wiring front connectors for I/O modules without shield contact element
Requirements
The I/O modules are installed on the mounting rail.
The supply voltages are turned off.
The cables are prepared according to the clamping technology used; take the Wiring rules (Page 141) into account for this purpose.
Tools required
Stripping tool 3 to 3.5 mm screwdriver
Preparing and wiring front connectors for I/O modules without shield contact element
Proceed as follows to wire the front connector:
1. Shut down the load current supply.
2. Place the included cable strain relief (cable tie) for the cable harness into the front connector (Figure 1).
3. Swing the front cover of the wired I/O module up until the front cover latches (Figure 2). Watch video sequence (https://support.industry.siemens.com/cs/media/67462859_wiring_front_web_en/start.htm)
154
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.10 Front connector for the I/O modules
4. Bring the front connector into the pre-wiring position. To do this, hook the front connector into the bottom of the I/O module and swivel the front connector upward until the front connector latches (Figure 3). Result: In this position, the front connector still protrudes from the I/O module (Figure 4). However, front connector and I/O module are not yet electrically connected. By means of the pre-wiring position, you can easily wire the front connector.
Figure 6-10 Wiring front connectors for I/O modules without shield contact element
5. Begin to completely wire the front connector. 6. Put the strain relief around the cable harness, and pull the strain relief for the cable
harness tight.
Automation system System Manual, 11/2019, A5E03461182-AF
155
Wiring 6.10 Front connector for the I/O modules
Use of the potential bridges on 35 mm digital modules
With the delivered potential bridges, for digital modules with a maximum rated voltage of 24 V DC, you can bridge the terminals for the voltage supply and thus reduce the wiring effort. The bridges are used to connect the following pairs of opposing terminals: 9 and 29, 10 and 30, 19 and 39 as well as 20 and 40.
Reference
Additional information on wiring the inputs and outputs can be found in the manuals for the I/O modules.
6.10.2
Wiring front connectors for I/O modules with shield contact element
Requirements
The I/O modules are installed on the mounting rail.
The supply voltages are turned off.
The wires are prepared according to the clamping technology used. To do this, follow the Wiring rules (Page 141).
Tools required
Stripping tool 3 to 3.5 mm screwdriver Flat pliers
156
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.10 Front connector for the I/O modules
Details view
The shielding bracket, the power supply element, and the shielding clamp are included in the scope of delivery for the analog and technology modules.
The following figure shows the details view of a front connector with shield connection element:
Shield clamp Cable sheathing removed (approx. 20
mm)
Strain relief (cable tie) Signal cables Front connectors
Power supply element Shielding bracket
Supply lines + Shield contact
Figure 6-11 Details view for front connectors with shield connection elements
Automation system System Manual, 11/2019, A5E03461182-AF
157
Wiring 6.10 Front connector for the I/O modules
Preparing front connectors for I/O modules with shield contact element
Watch video sequence (https://support.industry.siemens.com/cs/media/67462859_wiring_shield_web_en/start.htm) To prepare the front connector for wiring, follow these steps: 1. Remove the connection separator from the lower part of the connector (Figure 1). 2. Insert the power supply element (Figure 2). 3. Insert the shielding bracket from below into the guiding groove of the front connector until
the shielding bracket latches into place (Figure 3). 4. Place the included cable strain relief (cable tie) for the cable harness into the front
connector (Figure 4).
Figure 6-12 Preparing front connectors for I/O modules with shield contact element (1) 5. Swing the front cover up until the front cover latches (Figure 5).
158
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.10 Front connector for the I/O modules
6. Bring the front connector into the pre-wiring position. To do this, hook the front connector into the bottom of the I/O module and swivel it upwards until the front connector latches (Figure 6). Result: In this position, the front connector still protrudes from the I/O module (Figure 7). However, front connector and I/O module are not yet electrically connected.
Figure 6-13 Preparing front connectors for I/O modules with shield contact element (2)
Automation system System Manual, 11/2019, A5E03461182-AF
159
Wiring 6.10 Front connector for the I/O modules
7. Wire the power supply element (Figure 8). Terminals 41/42 and 43/44 are galvanically connected to each other. If you connect the supply voltage to 41 (L+) and 44 (M), you can then loop-through the potential to the next module (max. 8 A) with terminals 42 (L+) and 43 (M).
Figure 6-14 Preparing front connectors for I/O modules with shield connection element (3)
Wiring front connectors for I/O modules with shield contact element
To wire a front connector, follow these steps: 1. Strip the cable shielding. 2. Begin to completely wire the front connector (Figure 1).
Figure 6-15 Wiring front connectors for I/O modules with shield connection element (1)
160
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.10 Front connector for the I/O modules 3. Put the strain relief (cable tie) around the cable harness, and pull the strain relief for the cable harness tight (Figure 2).
Figure 6-16 Wiring front connectors for I/O modules with shield connection element (2) 4. Insert the shield clamp from below into the shielding bracket in order to connect the cable
shielding (Figure 3).
Figure 6-17 Wiring front connectors for I/O modules with shield connection element (3)
Automation system System Manual, 11/2019, A5E03461182-AF
161
Wiring 6.10 Front connector for the I/O modules
Functions of the shield contact
The shield contact: Is needed to apply cable shields (e.g., for analog modules) Interference currents on cable shields are diverted from the shield connection to ground
via the mounting rail. The shielding connection is not required at cable entry into the switchboard. The shield support has a cable storage area of 18 mm x 15 mm.
Reference
Figure 6-18 Shield clamp
Additional information on wiring the inputs and outputs can be found in the manuals for the I/O modules.
162
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.10 Front connector for the I/O modules
6.10.3
Bringing the front connector into final position
Bring the front connector from the pre-wiring position into final position
Proceed as follows to bring the front connector from the pre-wiring position into final position: 1. Grip the front connector by the unlocking strap. 2. Pull on the strap until the front connector is released from its latched position. 3. Tilt the top section of the front connector and raise it slightly. The front connector slides
over the guide channel into its final position.
Figure 6-19 Bring the front connector from the pre-wiring position into final position
4. Push the front connector back into the I/O module until it latches. The front connector is now electrically connected with the I/O module.
5. Swivel the front cover down into place. Various latch positions are possible depending on the space requirement of the cable harness so that the required cable storage space can grow as needed.
Automation system System Manual, 11/2019, A5E03461182-AF
163
Wiring 6.11 Marking the I/O modules
Bringing the front connector directly into final position
Proceed as follows to bring the front connector directly into final position: 1. Grip the front connector by the unlocking strap. 2. Push the guide pin of the front connector into the guide channel that has been displaced
downwards. The front connector slides over the guide channel into its final position.
Figure 6-20 Bringing the front connector directly into final position
3. Tilt the front connector and press it into the I/O module until it latches. The front connector is now electrically connected with the I/O module.
4. Swivel the front cover down into place. Various latch positions are possible depending on the space requirement of the cable harness so that the required cable storage space can grow as needed.
6.11
Marking the I/O modules
6.11.1
Labeling strips
Introduction
Mark the pin assignment of the I/O modules using labeling strips. You can label the labeling strips as desired and slide them into the outside of the front cover.
The labeling strips are available in the following models:
Pre-prepared strips that are included with the I/O module as delivered.
DIN A4 sheets, pre-perforated strips for machine printing; see section Accessories/spare parts (Page 336)
164
Automation system System Manual, 11/2019, A5E03461182-AF
Wiring 6.11 Marking the I/O modules Preparing and installing the labeling strip Proceed as follows to prepare and install the labeling strips: 1. Label the labeling strip. You can print labeling strips for the modules in your project with STEP 7. The labeling strips are exported to Microsoft Word DOCX files and printed from the text editing program. You can find more information in the online help. 2. With a pre-perforated strip: Separate the labeling strip from the sheet. 3. Slide the labeling strip into the outside of the front cover.
Labeling strips
Figure 6-21 Marking with labeling strips
Automation system System Manual, 11/2019, A5E03461182-AF
165
Wiring 6.11 Marking the I/O modules
6.11.2
Optional marking
Introduction
The I/O modules have a free area on the front cover. You can label or mark the free area yourself.
Optional marking
The front cover provides about 30 mm x 10 mm of space in its lower part for an optional identifier label.
Free space, for example for equipment identifiers
Figure 6-22 Optional marking
166
Automation system System Manual, 11/2019, A5E03461182-AF
Configuring
7
Introduction
By configuring the individual hardware components, assigning their parameters, and connecting them, you communicate to the S7-1500 automation system/ET 200MP distributed I/O system its preset configuration and operating principle. You perform the work needed for this in the device and network views in STEP 7.
"Configuring" is understood to mean the arranging, setup and networking of devices and modules within the device view or network view of STEP 7. STEP 7 graphically represents modules and racks. Just like "real" module racks, the device view allows the insertion of a defined number of modules.
When the modules are inserted, STEP 7 automatically assigns the addresses and a unique hardware identifier (HW identifier). You can change the addresses later. The HW identifiers cannot be changed.
At startup, the system components compare the configured preset configuration with the actual configuration of the system. By means of parameter assignment, you can specify the response of the CPU to errors in the hardware configuration.
"Assigning parameters" is understood to mean setting the properties of the components used (CPU, modules).
STEP 7 compiles the hardware configuration (the result of "configuring" and "assigning parameters") and downloads it to the CPU. The CPU then connects to the configured components and transfers their configuration and parameters. Modules can be replaced very easily because when a new module is inserted, STEP 7 transfers its configuration and parameters again.
Automation system System Manual, 11/2019, A5E03461182-AF
167
Configuring 7.1 Configuring the CPU
7.1
Configuring the CPU
Requirements for configuration of the CPU
Configuration software STEP 7 V12.0 or higher 1)
Installation information STEP 7 online help
1) The following CPUs can be configured only in V12 or higher: CPU 1511-1 PN, CPU 1513-1 PN, CPU 1516-3 PN/DP. Note that all other CPUs can be configured only starting from a later version (e.g. V12 SP1). Refer to the equipment manual for the CPU to find out whether the version of the CPU you are using is configurable in STEP 7.
Reference
If you want to configure new CPUs whose article numbers are not yet included in the hardware catalog of STEP 7, please refer to the following FAQ in the Internet (https://support.industry.siemens.com/cs/ww/en/view/109760846).
You can find an overview of the most important documents and links to STEP 7 in the following FAQ on the Internet (https://support.industry.siemens.com/cs/de/de/view/65601780/en).
168
Automation system System Manual, 11/2019, A5E03461182-AF
Configuring 7.1 Configuring the CPU
7.1.1
Reading out the configuration
Introduction
When there is a connection to an existing CPU that is being installed, you can load the configuration of this CPU, including centrally present modules, from the device into your project using the "Hardware detection" function. You do not need to manually configure the CPU and the centrally present modules, as the physical configuration is read out automatically.
If you have already configured a CPU and the centrally present modules and you want to load the current configuration and parameters in a new project, it is advisable to use the "Upload device as new station" function. For additional information about this function, refer to section Backing up and restoring the CPU configuration (Page 249).
Procedure for reading out an existing configuration
1. Create a new project and configure an "Unspecified CPU 1500".
Figure 7-1 Unspecified S7-1500 CPU in the device view
Note To open the "Hardware detection for PLC_x" dialog, click the "Detect" link. An example can be found in the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/de/view/41885693/en). An alternative procedure is described in step 2 and step 3.
Automation system System Manual, 11/2019, A5E03461182-AF
169
Configuring 7.1 Configuring the CPU
2. In the device view (or network view), select the "Hardware detection" command in the "Online" menu.
Figure 7-2 Hardware detection in the Online menu STEP 7 opens the "Hardware detection for PLC_x" dialog box.
170
Automation system System Manual, 11/2019, A5E03461182-AF
Configuring 7.1 Configuring the CPU
3. In the "Hardware detection for PLC_x" dialog, click "Refresh". Then, select the CPU and click "Detect".
Figure 7-3 Hardware detection dialog box
Automation system System Manual, 11/2019, A5E03461182-AF
171
Configuring 7.1 Configuring the CPU Result of the hardware detection
STEP 7 has read out the hardware configuration and the modules and transferred them to your project. STEP 7 assigns a valid default parameter assignments for all modules. You can change the parameter assignment subsequently.
Figure 7-4 Result of the hardware detection in the device view
Note If you want to go online after the hardware detection, you have to first download the detected configuration to the CPU; otherwise, an error may occur due to inconsistent configurations. You can find an example of downloading a project to the CPU with STEP 7 in the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/de/view/42637263/en).
172
Automation system System Manual, 11/2019, A5E03461182-AF
Configuring 7.1 Configuring the CPU
Properties of the CPUs
The properties of the CPUs have special significance for system behavior. For a CPU you can make the following settings in STEP 7, for example:
Startup characteristics
Parameter assignment of the interfaces, for example, IP address, subnet mask
Web server, e.g., activation, user administration, and languages
OPC UA server
Global Security Certificate Manager
Cycle times, e.g., maximum cycle time
Properties for the operation of the display
System and clock memory
Protection level for access protection with assigned password parameter
Time and day settings (daylight saving/standard). For additional information, refer to the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/de/view/43566349/en).
The properties that can be set and the corresponding value ranges are specified by STEP 7. Fields that cannot be edited are grayed out.
Reference
Information about the individual settings can be found in the STEP 7 online help and in the manuals of the relevant CPUs.
Automation system System Manual, 11/2019, A5E03461182-AF
173
Configuring 7.1 Configuring the CPU
7.1.2
Address assignment
7.1.2.1
Addressing - overview
Introduction
In order to address the automation components or modules, they must have unique addresses. The following section explains the various address areas.
I/O address
I/O addresses (input/output addresses) are required in the user program to read inputs and set outputs.
STEP 7 automatically assigns input and output addresses when modules are configured. Each module uses a continuous range of input and/or output addresses corresponding to its volume of input and output data.
Figure 7-5 Example with input / output addresses from STEP 7
STEP 7 assigns the address areas of the modules by default to the process image partition 0 ("Automatic updating"). This process image partition is updated in the main cycle of the CPU.
Device address (e.g., Ethernet address)
Device addresses are addresses of modules with interfaces to a subnet (e.g., IP address or PROFIBUS address). They are required to address the various devices on a subnet, for example, to download a user program.
174
Automation system System Manual, 11/2019, A5E03461182-AF
Configuring 7.1 Configuring the CPU Hardware identifier STEP 7 automatically assigns a hardware identifier (HW identifier) for identification and addressing of modules and submodules. The HW identifier is used, for example, for diagnostics alarms or for instructions, to identify the faulty module or the addressed module.
Figure 7-6 Example of a Hardware identifier from STEP 7 The "System constants" tab contains all hardware identifiers and their symbolic names (of HW identifier) for the selected module. The HW identifiers and names of all modules of a device are also available in the default tag table on the "System constants" tab.
Figure 7-7 Example of a default tag table from STEP 7
Automation system System Manual, 11/2019, A5E03461182-AF
175
Configuring 7.1 Configuring the CPU
7.1.2.2
Addressing digital modules
Introduction
The following section describes the addressing of the digital modules. In your user program, you require the addresses of the channels of the digital module.
Digital module addresses
The address of a digital module's input or output is composed of the byte address and the bit address. The channels of the digital module are assigned bit addresses.
Example: I 1.2
The example consists of:
I Input
-
1 Byte address The byte address depends on the module start address
2 Bit address You read the bit address from the module
When you insert a digital module into a free slot, STEP 7 assigns a default address. You can change the proposed default address in STEP 7.
176
Automation system System Manual, 11/2019, A5E03461182-AF
Configuring 7.1 Configuring the CPU
Example for the assignment of channel addresses (digital module)
The following figure shows how the addresses of the individual channels of the digital input module are determined.
Figure 7-8 Example for the assignment of channel addresses (digital module)
Note You can assign symbolic names to the addresses at the following locations in STEP 7: · PLC tag table · Properties of the module in the "IO Tags" tab.
Automation system System Manual, 11/2019, A5E03461182-AF
177
Configuring 7.1 Configuring the CPU
Value status
The value status is additional binary information of a digital input or output signal. It is entered simultaneously with the process signal in the process image input and provides information about the validity of the input or output signal.
If you enable the value status for a digital module, then additional bytes are allocated in the input address area. Each bit in the value status is assigned to a channel and provides information about the validity of the process value. You can find the assignment in the product manual for the respective I/O module.
The value status is influenced by all diagnostics that might falsify the process value, e.g. wire break, short-circuit.
1B: A valid process value is being output or read for the channel.
0B: A substitute value is being output for the channel, or the channel is deactivated, faulty or inaccessible.
You can find additional information on evaluation and processing of the value status for failsafe digital modules in the SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126) manual.
Reference
Additional information on addressing and address allocation with value status can be found in the manuals of the digital modules, and in the online help for STEP 7. An example of the evaluation of the value status in the user program is available in the function manual Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926).
7.1.2.3
Addressing analog modules
Introduction
The following section describes the addressing of the analog modules. In your user program, you require the addresses of the channels of the analog module.
Analog module addresses
The address of an analog channel is always a word address. The channel address depends on the module start address. STEP 7 automatically assigns the channel addresses during configuration. Based on the module start addresses, STEP 7 assigns the channel addresses in increasing sequence (in the following figure, the module start address is 256).
When you insert an analog module into a free slot, STEP 7 assigns a default address. You can change the assigned default address in STEP 7.
178
Automation system System Manual, 11/2019, A5E03461182-AF
Configuring 7.1 Configuring the CPU
Example for the assignment of channel addresses (analog module)
The following figure shows how the addresses of the individual channels of an analog input module are determined when the module has the start address 256.
Figure 7-9 Example for the assignment of channel addresses (analog module)
Note You can assign symbolic names to the addresses at the following locations in STEP 7: · PLC tag table · Properties of the module in the "IO Tags" tab.
Automation system System Manual, 11/2019, A5E03461182-AF
179
Configuring 7.1 Configuring the CPU
Value status
The value status is additional binary information of an analog input or output value. It is entered simultaneously with the process value in the process image input and provides information about the validity of the analog value.
If you enable the value status for an analog module, then additional bytes are allocated in the input address area. Each bit in the value status is assigned to a channel and provides information about the validity of the process value. You can find the assignment in the product manual for the respective I/O module.
The value status is influenced by all diagnostics that might falsify the process value, e.g. wire break, short-circuit.
1B: A valid process value is being output or read for the channel.
0B: A substitute value is being output for the channel, or the channel is deactivated, faulty or inaccessible.
Reference
Additional information on addressing and address allocation with value status can be found in the manuals of the analog modules, and in the online help for STEP 7. A detailed description of the value status for analog modules is available in the function manual Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094). An example of the evaluation of the value status in the user program is available in the function manual Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926).
7.1.3
Process images and process image partitions
7.1.3.1
Process image - overview
Process image of the inputs and outputs
The process image of the inputs and outputs is an image of the signal states. The CPU transfers the values from the input and output modules to the process image in this memory area. At the start of the cyclic program, the CPU transfers the process image output as a signal state to the output modules. The CPU then transfers the signal states of the input modules to the process image inputs.
Advantages of the process image
A process image accesses a consistent image of the process signals during cyclic program execution. If a signal state at an input module changes during program processing, the signal state is retained in the process image. The CPU does not update the process image until the next cycle.
180
Automation system System Manual, 11/2019, A5E03461182-AF
Configuring 7.1 Configuring the CPU
Consistency of the process image
When the process image is updated, the S7-1500 accesses the data of each submodule as consistent data. The maximum data width that is accessed as consistent data for each submodule is dependent on the IO system. For PROFINET IO, for example, this data width is 1024 bytes.
32 process image partitions
By means of process image partitions, the CPU synchronizes the updated inputs/outputs of particular modules with defined user program sections. In the S7-1500 automation system, the overall process image is subdivided into up to 32 process image partitions (PIP). The CPU automatically updates PIP 0 (automatic update) in each program cycle and assigns it to OB 1. You can assign the process image partitions PIP 1 to PIP 31 to the other OBs during configuration of the input/output modules. The CPU always reads the process image partition of the inputs (PIPI) before processing the associated OB. The CPU outputs the process image of the outputs (PIPQ) at the end of the OB. The figure below illustrates the updating of a process image partition.
Figure 7-10 process image
Automation system System Manual, 11/2019, A5E03461182-AF
181
Configuring 7.1 Configuring the CPU
7.1.3.2
Update process image partitions in the user program
Requirements
Alternatively, you can also use the following instructions to update process images:
Instruction "UPDAT_PI"
Instruction "UPDAT_PO"
You will find the instructions in STEP 7 in the "Instructions" task card under "Extended instructions". The instructions can be called from any point in the program.
Requirements for updating process image partitions with the "UPDAT_PI" and "UPDAT_PO" instructions:
The process image partitions must not be assigned to any OB. This means the process image partitions are not automatically updated.
Note Update of PPI 0
PIP 0 (automatic update) cannot be updated with the "UPDAT_PI" and "UPDAT_PO" instructions.
UPDAT_PI: Update process image partition of the inputs
With this instruction you read the signal states from the input modules into the process image partition of the inputs (PIPI).
UPDAT_PO: Update process image partition of the outputs
With this instruction you transmit the process image partition of the outputs to the output modules.
Isochronous mode interrupt OBs
In the isochronous mode interrupt OBs you use the instructions "SYNC_PI" and "SYNC_PO" to update the process image partitions. Additional information on isochronous mode interrupt OBs is available in the STEP 7 online help.
Direct I/O access to the inputs and outputs of the module
You also have direct read and write access to the I/O, as an alternative to access via the process image, should direct access be required for programming reasons. A direct (write) I/O access also writes the process image. This prevents the situation where a subsequent output of the process image overwrites the value written via direct access again.
182
Automation system System Manual, 11/2019, A5E03461182-AF
Reference
Configuring 7.2 Configuring ET 200MP distributed I/O system
Additional information on process image partitions is available found in the function manual, Cycle and response times (http://support.automation.siemens.com/WW/view/en/59193558).
7.2
Configuring ET 200MP distributed I/O system
Introduction
You configure and assign parameters to the ET 200MP (interface module and I/O modules) with STEP 7 or in the configuration software of another manufacturer.
Requirements
Table 7- 1 Requirements for installation
Configuration software STEP 7 as of V13 1)
Requirements
· IM 155-5 PN ST and IM 1555 DP ST: as of firmware version V2.0.0
· IM 155-5 PN HF: as of firmware version V1.0.0
· PROFINET: PROFINET GSD files
· PROFIBUS: PROFIBUS GSD files
STEP 7 V5.5 SP4 HF1 or higher · Software of another manufacturer
·
PROFINET: PROFINET GSD files
PROFIBUS: PROFIBUS GSD files
Installation information
· The TIA Portal supports the following GSDML specifications: TIA Portal V11: V2.3 TIA Portal V12SP1: V2.31 TIA Portal V14: V2.32 TIA Portal V15: V2.34
· The GSDML versions are largely downwards compatible.
· The ET 200MP is already delivered with a GSD file based on specification V2.3. The GSD file can be installed and used in the TIA Portal.
STEP 7 online help STEP 7 online help Manufacturer documentation
1) STEP 7 does not support all the PROFINET features contained in the GSDML specifications. Non-supported features cannot be used with GSD devices.
Reference
You can find an overview of the most important documents and links to STEP 7 in the following FAQ on the Internet (https://support.industry.siemens.com/cs/de/de/view/65601780/en).
Automation system System Manual, 11/2019, A5E03461182-AF
183
Configuring 7.3 Assigning PROFIsafe address to fail-safe modules with SIMATIC Safety
Configuring operation on PROFIBUS DP using a GSD file
If you want to configure the operation on the PROFIBUS DP with GSD file, you need to note the following additional requirements:
Table 7- 2 Requirements for PROFIBUS DP with GSD file
I/O modules
Input/output modules 35 mm Input/output modules 25 mm Technology modules (TM) Communications modules CM PtP
Required firmware version IM 155-5 DP ST as of ... V1.0.0 V2.0.0 V2.0.0 V1.0.0
Required firmware version I/O modules as of ... V2.0 V1.0 V1.1 V1.0.1
7.3
Assigning PROFIsafe address to fail-safe modules with SIMATIC
Safety
The PROFIsafe address is saved permanently on the electronic coding element of the S7-1500/ET 200MP fail-safe modules. You can find additional information on the electronic coding element in the section Replacing the coding element at the power connector of the system power supply and load current supply (Page 285).
Note
The supply voltage L+ must be applied to the F-module during the assignment of the PROFIsafe address (F-destination address together with F-source address).
For additional information on assigning the PROFIsafe address (F-destination address together with the F-source address), refer to the SIMATIC Safety - Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126) programming and operating manual and the online help.
184
Automation system System Manual, 11/2019, A5E03461182-AF
Basics of program execution
8
8.1
Events and OBs
Triggers
The table below gives an overview of the possible event sources for start events and their OBs.
Table 8- 1 Triggers
Event sources
Startup 2) Cyclic program 2) Time-of-day interrupt 2) Time-delay interrupt 2) Cyclic interrupt 2)
Hardware interrupt 2) Status interrupt Update interrupt Manufacturer-specific or profile-specific interrupt Isochronous mode interrupt Time error 3) Maximum cycle time exceeded once Diagnostics interrupt Removal/insertion of modules Rack error MC servo 4) MC pre-servo 4)
MC post-servo 4)
MC interpolator 4) MC pre-interpolator 4)
Possible priorities (default priority) 1 1 2 to 24 (2) 2 to 24 (3) 2 to 24 (8 to 17, frequency dependent) 2 to 26 (16) 2 to 24 (4) 2 to 24 (4) 2 to 24 (4)
16 to 26 (21) 22
2 to 26 (5) 2 to 26 (6)
2 to 26 (6) 17 to 26 (26) corresponds to priority of the MC-Servo corresponds to priority of the MC-Servo 16 to 26 (24) corresponds to priority of the MC interpolator
Possible OB numbers 100, 123 1, 123 10 to 17, 123 20 to 23, 123 30 to 38, 123
Default system reaction 1) Ignore Ignore Not applicable Not applicable Not applicable
40 to 47, 123 55 56 57
Ignore Ignore Ignore Ignore
61 to 64, 123 80
Ignore Ignore STOP
82
Ignore
83
Ignore
86
Ignore
91
Not applicable
67
Not applicable
95
Not applicable
92
Not applicable
68
Not applicable
Number of OBs
0 to 100 0 to 100 0 to 20 0 to 20 0 to 20
0 to 50 0 or 1 0 or 1 0 or 1
0 to 2 0 or 1
0 or 1 0 or 1
0 or 1 0 or 1 0 or 1
0 or 1
0 or 1 0 or 1
Automation system System Manual, 11/2019, A5E03461182-AF
185
Basics of program execution 8.1 Events and OBs
Event sources
Programming error (only for global error handling) I/O access error (only for global error handling)
Possible priorities (default priority) 2 to 26 (7)
2 to 26 (7)
Possible OB numbers
121
Default system reaction 1)
STOP
122
Ignore
Number of OBs 0 or 1 0 or 1
1) If you have not configured the OB.
2) For these event sources, apart from the permanently assigned OB numbers (see column: possible OB numbers), you can also assign OB numbers from the range 123 in STEP 7.
3) If the maximum cycle time has been exceeded twice within a cycle, the CPU always switches to STOP regardless of whether you have configured OB80.
4) You will find more information on these event sources and the starting behavior in the S7-1500/S7-1500T Motion Control function manual.
Response to start events
The occurrence of a start event results in the following reaction: If the event comes from an event source to which you have assigned an OB, this event
triggers the execution of the assigned OB. The event enters the queue according to its priority. If the event comes from an event source to which you have not assigned an OB, the CPU executes the default system reaction.
Note Some event sources, such as startup, pull/plug, exist even if you do not configure them.
Assignment between event source and OBs
The type of OB determines where you assign OB to event source:
For hardware interrupts and isochronous mode interrupts: The assignment is made during the configuration of the hardware or when the OB is created.
For MC-servo, MC-PreServo, MC-PostServo, MC-Interpolator and MC-PreInterpolator: automatic assignment of OBs 91/92 by STEP 7 as soon as you add a technology object.
For all other OB types: Assignment when the OB is created, where applicable after you have configured the event source.
For hardware interrupts, you can change an assignment which has already been made during runtime with the instructions ATTACH and DETACH. In this case, only the actually effective assignment changes, and not the configured assignment. The configured assignment takes effect after loading, and upon each startup.
The CPU ignores hardware interrupts to which you did not assign an OB in your configuration or which occur after the DETACH instruction. The CPU does not check whether an OB is assigned to this event when an event arrives, but only prior to the actual processing of the hardware interrupt.
186
Automation system System Manual, 11/2019, A5E03461182-AF
Basics of program execution 8.1 Events and OBs
OB priority and runtime behavior
If you have assigned an OB to the event, the OB has the priority of the event. S7-1500 CPUs support the priority classes 1 (lowest) to 26 (highest). The following items are essential to the execution of an event:
Call and execution of the assigned OB
The update of the process image partition of the assigned OB
The user program processes the OBs exclusively on a priority basis. This means the program processes the OB with the highest priority first when multiple OB requests occur at the same time. If an event occurs that has a higher priority than the currently active OB, this OB is interrupted. The user program processes events of the same priority in order of occurrence.
Note Communication
The communication (e.g. test functions with the PG) always works with priority 15. To avoid unnecessarily prolonging the program runtime in the case of time-critical applications, make sure that these OBs are not interrupted by communication. Assign a priority > 15 for these OBs.
Programming style guide
The programming guidelines described in the programming style guide help you to create a uniform program code. You can better maintain and reuse the uniform program code. This allows you to detect or avoid errors early on, for example, through compilers.
The programming style guide is available on the Internet (https://support.industry.siemens.com/cs/de/en/view/109478084).
Reference
Additional information on organization blocks is available in the STEP 7 online help.
Automation system System Manual, 11/2019, A5E03461182-AF
187
Basics of program execution 8.2 Asynchronous instructions
8.2
Asynchronous instructions
Introduction
Program execution makes a distinction between synchronous and asynchronous instructions.
The "synchronous" and "asynchronous" properties relate to the temporal relationship between the call and execution of the instruction.
The following applies to synchronous instructions: When the call of a synchronous instruction is complete, execution of the instruction is also complete.
This is different in the case of asynchronous instructions: When the call of an asynchronous instruction is complete, execution of the asynchronous instruction is not necessarily complete yet. This means the execution of an asynchronous instruction can extend over multiple calls. The CPU processes asynchronous instructions in parallel with the cyclic user program. Asynchronous instructions generate jobs in the CPU for their processing.
Asynchronous instructions are usually instructions for transferring data, for example, data records for modules, communication data, diagnostics data.
188
Automation system System Manual, 11/2019, A5E03461182-AF
Basics of program execution 8.2 Asynchronous instructions Difference between synchronous/asynchronous instructions The figure below shows the difference between the processing of an asynchronous instruction and a synchronous instruction. In this figure the CPU calls the asynchronous instruction five times before its execution is complete, e.g. a data record has been completely transferred. In the case of a synchronous instruction, this is completely executed with each call.
First call of the asynchronous instruction, start of execution Intermediate call of the asynchronous instruction, execution continues Last call of the asynchronous instruction, completion of execution A job is fully processed by a synchronous instruction with each call.
Duration of a fully processed job Figure 8-1 Difference between asynchronous and synchronous instructions
Automation system System Manual, 11/2019, A5E03461182-AF
189
Basics of program execution 8.2 Asynchronous instructions
Parallel processing of asynchronous instruction jobs
A CPU can process several asynchronous instruction jobs in parallel. The CPU processes the jobs in parallel under the following conditions: Jobs for an asynchronous instruction are started while other jobs for that instruction are
still running. The maximum number of simultaneously running jobs for the instruction is not exceeded. The figure below shows the parallel processing of two jobs of the WRREC instruction. The two instructions are executed simultaneously for a certain duration.
Figure 8-2 Parallel processing of the asynchronous instruction WRREC
Assigning calls of an instruction to a job
To execute an instruction over multiple calls, the CPU must be able to uniquely relate a subsequent call to a running job of the instruction.
To relate a call to a job, the CPU uses one of the following two mechanisms, depending on the type of the instruction: Using the instance data block of the instruction (for "SFB" type) Using job-identifying input parameters of the instruction. These input parameters must
match in each call during processing of the asynchronous instruction. Example: A job of the "Create_DB" instruction is identified by input parameters LOW_LIMIT, UP_LIMIT, COUNT, ATTRIB and SRCBLK.
The following table shows which input parameters you use to identify which instruction.
Table 8- 2 Identifying input parameters for asynchronous instructions
Instruction DPSYC_FR D_ACT_DP DPNRM_DG WR_DPARM WR_REC RD_REC CREATE_DB
READ_DBL WRIT_DBL RD_DPARA DP_TOPOL
Job is identified by LADDR, GROUP, MODE LADDR LADDR LADDR, RECNUM LADDR, RECNUM LADDR, RECNUM LOW_LIMIT, UP_LIMIT, COUNT, ATTRIB, SRCBLK SRCBLK, DSTBLK SRCBLK, DSTBLK LADDR, RECNUM DP_ID
190
Automation system System Manual, 11/2019, A5E03461182-AF
Basics of program execution 8.2 Asynchronous instructions
Status of an asynchronous instruction
An asynchronous instruction shows its status via the block parameters STATUS/RET_VAL and BUSY. Many asynchronous instructions also use the block parameters DONE and ERROR. The figure below shows the two asynchronous instructions WRREC and CREATE_DB.
The input parameter REQ starts the job to execute the asynchronous instruction. The output parameter DONE indicates that the job was completed without error. The output parameter BUSY indicates whether the job is currently being executed. When
BUSY =1, a resource is allocated for the asynchronous instruction. When BUSY = 0, the resource is free.
The output parameter ERROR indicates that an error has occurred. The output parameter STATUS/RET_VAL provides information on the status of the job execu-
tion. The output parameter STATUS/RET_VAL receives the error information after the occurrence of an error. Figure 8-3 Block parameters of asynchronous instructions using the instructions WRREC and
CREATE_DB as examples.
Automation system System Manual, 11/2019, A5E03461182-AF
191
Basics of program execution 8.2 Asynchronous instructions
Summary
The table below provides you with an overview of the relationships described above. It shows in particular the possible values of the output parameters if execution of the instruction is not complete after a call.
Note You must evaluate the relevant output parameters in your program after each call
Table 8- 3 Relationship between REQ, STATUS/RET_VAL, BUSY and DONE during a "running" job.
Seq. no. of the call
-
1
Type of call
Idle First call
REQ
0 1
2 to (n - 1) Intermediate call
n
Last call
Not relevant
Not relevant
STATUS/RET_VAL
W#16#7000 W#16#7001 Error code (e.g. W#16#80C3 for lack of resources) W#16#7002
W#16#0000, if no errors have occurred. Error code if errors occurred.
BUSY
0 1 0
1 0 0
DONE
0 0 0
0 1 0
ERROR
0 0 1
0 0 1
Use of resources
Asynchronous instructions use resources in the CPU during their execution. The resources are limited depending on the type of CPU and instruction. The CPU can simultaneously process only a maximum number of asynchronous instruction jobs. The resources are available again after a job has been processed successfully or with errors. Example: For the RDREC instruction, an S7-1500 CPU can process up to 20 jobs in parallel. If the maximum number of concurrent jobs for an instruction is exceeded, the following occurs: The instruction returns the error code 80C3 (lack of resources) in the block parameter
STATUS. The CPU stops execution of the job until a resource becomes free again.
Note Lower-level asynchronous instructions
Some asynchronous instructions use one or more lower-level asynchronous instructions for their processing. This dependence is shown in the tables below.
Please note that each lower-level instruction typically occupies one resource in the instruction's resource pool.
192
Automation system System Manual, 11/2019, A5E03461182-AF
Basics of program execution 8.2 Asynchronous instructions
Extended instructions: maximum number of simultaneously running jobs
Table 8- 4 Maximum number of simultaneous jobs for asynchronous extended instructions and lower-level instructions used
Extended instructions
1505SP (F) 1505SP T(F)
1511(F) 1511C 1511T(F)
1507S(F) 1512C 1513(F)
1515(F) 1515T(F)
1516(F) 1516T(F)
1517(F) 1517T(F)
1518(F) 1518(F)
MFP
Distributed I/O
RDREC
20
RD_REC
10
WRREC
20
WR_REC
10
D_ACT_DP
8
ReconfigIOSystem
uses RDREC, WRREC, D_ACT_DP,
DPSYC_FR
2
DPNRM_DG
8
DP_TOPOL
1
ASI_CTRL
uses RDREC, WRREC
PROFIenergy
PE_START_END
uses RDREC, WRREC
PE_CMD
uses RDREC, WRREC
PE_DS3_Write_ET200S
uses RDREC, WRREC
PE_WOL
uses RDREC, WRREC, TUSEND, TURCV, TCON, TDISCON
Module parameter assignment
RD_DPAR
10
RD_DPARA
10
RD_DPARM
10
WR_DPARM
10
Diagnostics
Get_IM_Data
10
GetStationInfo
10
Recipes and data logging
RecipeExport
10
RecipeImport
10
DataLogCreate
10
DataLogOpen
10
DataLogWrite
10
DataLogClear
10
DataLogClose
10
DataLogDelete
10
DataLogNewFile
10
Automation system System Manual, 11/2019, A5E03461182-AF
193
Basics of program execution 8.2 Asynchronous instructions
Extended instructions
Data block functions CREATE_DB READ_DBL WRIT_DBL DELETE_DB File handling FileReadC FileWriteC
1505SP (F) 1505SP T(F)
1511(F) 1511C 1511T(F)
1507S(F) 1512C 1513(F)
1515(F) 1515T(F)
1516(F) 1516T(F)
1517(F) 1517T(F)
1518(F) 1518(F)
MFP
10 10 10 10
10 10
Basic instructions: maximum number of simultaneously running jobs
Table 8- 5 Lower-level instructions used for asynchronous basic instructions
Basic instructions
1505SP (F) 1505SP T(F)
1511(F) 1511C 1511T(F)
1507S(F) 1512C 1513(F)
1515(F) 1515T(F)
1516(F) 1516T(F)
1517(F) 1517T(F)
1518(F) 1518(F)
MFP
Array DB ReadFromArrayDBL WriteToArrayDBL
uses READ_DBL (see Extended instructions) uses READ_DBL, WRIT_DBL (see Extended instructions)
Communication: maximum number of simultaneously running jobs
Table 8- 6 Maximum number of simultaneous jobs for asynchronous instructions and lower-level instructions used for Open User Communication
Open User Communication
1505SP (F) 1505SP T(F)
1511(F) 1511C 1511T(F)
1507S(F) 1512C 1513(F)
1515(F) 1515T(F)
1516(F) 1516T(F)
1517(F) 1517T(F)
1518(F) 1518(F)
MFP
TSEND TUSEND TRCV TURCV TCON TDISCON T_RESET T_DIAG T_CONFIG TSEND_C TRCV_C TMAIL_C
88
96
128
192
256
320
384
88
96
128
192
256
320
384
88
96
128
192
256
320
384
88
96
128
192
256
320
384
88
96
128
192
256
320
384
88
96
128
192
256
320
384
1
uses TSEND, TUSEND, TRCV, TCON, TDISCON
uses TSEND, TUSEND, TRCV, TURCV, TCON, TDISCON
uses TSEND, TUSEND, TRCV, TURCV, TCON, TDISCON
194
Automation system System Manual, 11/2019, A5E03461182-AF
Basics of program execution 8.2 Asynchronous instructions
Table 8- 7 Lower-level instructions used for asynchronous instructions for MODBUS TCP
MODBUS TCP
1505SP (F) 1505SP T(F)
1511(F) 1511C 1511T(F)
1507S(F) 1512C 1513(F)
1515(F) 1515T(F)
1516(F) 1516T(F)
1517(F) 1517T(F)
1518(F) 1518(F)
MFP
MB_CLIENT MB_SERVER
uses TSEND, TUSEND, TRCV, TURCV, TCON, TDISCON uses TSEND, TUSEND, TRCV, TURCV, TCON, TDISCON
Table 8- 8 Maximum number of simultaneously running jobs for asynchronous instructions for S7 communication. The S7 communication instructions use a common pool of resources
S7 communication
1505SP (F) 1505SP T(F)
1511(F) 1511C 1511T(F)
1507S(F) 1512C 1513(F)
1515(F) 1515T(F)
1516(F) 1516T(F)
1517(F) 1517T(F)
1518(F) 1518(F)
MFP
PUT GET USEND URCV BSEND BRCV
264
288
384
576
768
960
1152
Table 8- 9 Lower-level instructions used for asynchronous instructions for communication processors
Communications processors
1505SP (F) 1505SP T(F)
1511(F) 1511C 1511T(F)
1507S(F) 1512C 1513(F)
1515(F) 1515T(F)
1516(F) 1516T(F)
1517(F) 1517T(F)
1518(F) 1518(F)
MFP
PtP communication Port_Config Send_Config Receive_Config Send_P2P Receive_P2P Receive_Reset Signal_Get Signal_Set Get_Features Set_Features USS communication USS_Port_Scan MODBUS (RTU) Modbus_Comm_Load ET 200S serial interface S_USSI SIMATIC NET CP FTP_CMD
uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC
uses RDDEC, WRREC
uses RDDEC, WRREC
uses CREATE_DB
uses TSEND, TRCV, TCON, TDISCON
Automation system System Manual, 11/2019, A5E03461182-AF
195
Basics of program execution 8.2 Asynchronous instructions
Table 8- 10 Maximum number of simultaneously running jobs for asynchronous instructions for OPC UA.
OPC UA instruction
1511(C/F/T/TF) 1512C 1513(F)
OPC_UA_Connect
4
OPC_UA_NamespaceGetIndex 4* List
OPC_UA_NodeGetHandleList 4*
OPC_UA_MethodGetHandleLis 4* t
OPC_UA_TranslatePathList
4*
OPC_UA_ReadList
20 in total (max. 5 per connection, see OPC_UA_Connect)
OPC_UA_WriteList
20 in total (max. 5 per connection, see OPC_UA_Connect)
OPC_UA_MethodCall
20 in total (max. 5 per connection, see OPC_UA_Connect)
OPC_UA_NodeReleaseHandle 4* List
OPC_UA_MethodReleaseHandl 4* eList
OPC_UA_Disconnect
4*
OPC_UA_ConnectionGetStatus 4*
* maximum 1 per connection
1505(S/SP/SP F/SP T/SP TF) 1515(F/T/TF) 1515 SP PC (F/T/TF) 1516(F/T/TF) 10 10*
1507S(F) 1517(F/T/TF) 1518(F/MFP)
40 40*
10*
40*
10*
40*
10*
50 in total (max. 5 per connection, see OPC_UA_Connect)
50 in total (max. 5 per connection, see OPC_UA_Connect)
50 in total (max. 5 per connection, see OPC_UA_Connect)
10*
40*
200 in total (max. 5 per connection, see OPC_UA_Connect)
200 in total (max. 5 per connection, see OPC_UA_Connect)
200 in total (max. 5 per connection, see OPC_UA_Connect)
40*
10*
40*
10*
40*
10*
40*
196
Automation system System Manual, 11/2019, A5E03461182-AF
Basics of program execution 8.2 Asynchronous instructions
Technology: maximum number of simultaneously running jobs
Table 8- 11 Maximum number of simultaneously running jobs for asynchronous instructions for technology. The instructions for technology use a common pool of resources.
Technology
1511(F)1 511C 1512C
1513(F)
1511T
1505SP (F)1515(F
) 1516(F)
1515T 1505SP
T(F) 1516(F)T
1507S(F )
1517(F)
1517T(F)
1518(F) 1518(F)
MFP
S7-1500 Motion Control MC_Power MC_Reset MC_Home MC_Halt MC_MoveAbsolute MC_MoveRelative MC_MoveVelocity MC_MoveJog MC_GearIn MC_MoveSuperimposed MC_MeasuringInput MC_MeasuringInputCyclic MC_AbortMeasuringInput MC_OutputCam MC_CamTrack MC_TorqueLimiting MC_SetSensor MC_GearInPos MC_SynchronizedMotionSim ulation MC_PhasingAbsolute MC_PhasingRelative MC_CamIn MC_InterpolateCam MC_GetCamLeadingValue MC_GetCamFollowingValue
300
-
300
1500
3000
4800
6400
-
1500
-
-
4800
-
Reference
You can find additional information on block parameter assignment in the STEP 7 online help.
Automation system System Manual, 11/2019, A5E03461182-AF
197
Protection
9
9.1
Overview of the protection functions
Introduction
This chapter describes the following functions for protecting the S7-1500 automation system/ET 200MP distributed I/O system against unauthorized access:
Protection functions Access protection Know-how protection Copy protection Protection by locking the CPU/interface module
S7-1500
ET 200MP ------
Further measures for protecting the CPU
The following measures additionally increase the protection against unauthorized access to functions and data of the S7-1500 CPU from external sources and via the network:
Deactivation of the Web server
Deactivation of the OPC UA server (you can find additional information on the security mechanisms for OPC UA server in the Communication (https://support.industry.siemens.com/cs/de/de/view/59192925/en) Function Manual)
Deactivation of the time synchronization via an NTP Server
Deactivation of the PUT/GET communication
When you use Web server, protect your S7-1500 automation system against unauthorized access:
By setting password-protected access rights for specific users in the user administration.
By using the pre-set option "Permit access only via HTTPS". The option allows access to the web server only with the secure hypertext transmission protocol HTTPS.
198
Automation system System Manual, 11/2019, A5E03461182-AF
Protection 9.2 Configuring access protection for the CPU
9.2
Configuring access protection for the CPU
Introduction
The CPU offers four access levels to limit access to specific functions.
By setting up access levels and passwords, you limit the functions and memory areas that are accessible without a password. The individual access levels as well as their associated passwords are specified in the object properties of the CPU.
Rules for passwords
Ensure that passwords are sufficiently secure. Apply the following rules:
Assign a password that is at least 8 characters long.
Use different cases and characters: uppercase/lowercase, numbers and special characters.
Access levels of the CPU
Table 9- 1 Access levels and access restrictions
Access levels Complete access (no protection) Read access
HMI access
No access (complete protection)
Access restrictions
Every user can read and change the hardware configuration and the blocks.
In this access level, only read access to the hardware configuration and the blocks is possible without a password. You can load hardware configuration and blocks into the programming device. In addition, HMI access and access to diagnostics data is possible. Neither blocks nor the hardware configuration can be downloaded to the CPUs without the password. Additionally, the following are not possible without the password: Writing test functions and firmware update (online).
With this access level only HMI access and access to diagnostics data is possible without entering the password. Without entering the password, you can neither load blocks and hardware configuration into the CPU, nor load blocks and hardware configuration from the CPU into the programming device. Additionally, the following are not possible without the password: Test functions, changing the operating mode (RUN/STOP), firmware update and display of online/offline comparison status.
When the CPU has complete protection, no read or write access to the hardware configuration and the blocks is possible (without access authorization in the form of a password). HMI access is also not possible. The server function for PUT/GET communication is disabled in this access level (cannot be changed). Authentication with the password will again provide you full access to the CPU.
An enumeration of which functions are available in the different access levels is available in the "Setting options for the protection" entry in the STEP 7 online help.
Automation system System Manual, 11/2019, A5E03461182-AF
199
Protection 9.2 Configuring access protection for the CPU
Properties of the access levels
Each access level allows unrestricted access to certain functions without entering a password, e.g. identification using the "Accessible devices" function. The CPU's default setting is "No restriction" and "No password protection". In order to protect access to a CPU, you must edit the properties of the CPU and set up a password. In the default access level "Full access (no protection)", every user can read and change the hardware configuration and the blocks. A password is not set and is also not required for online access. Communication between the CPUs (via the communication functions in the blocks) is not restricted by the access level of the CPU, unless PUT/GET communication is deactivated in the "No access" (complete protection) access level. Entry of the right password allows access to all the functions that are allowed in the corresponding level.
Note Configuring an access level does not replace know-how protection Configuring access levels offers a high degree of protection against unauthorized changes on the CPU via network access. Access levels are used to restrict the rights to download the hardware and software configuration to the CPU. However, blocks on the SIMATIC memory card are not write- or read-protected. Use know-how protection to protect the code of blocks on the SIMATIC memory card.
Behavior of functions with different access levels
The STEP 7 online help includes a table listing the online functions available in the various access levels.
200
Automation system System Manual, 11/2019, A5E03461182-AF
Protection 9.2 Configuring access protection for the CPU
Configuring access levels
To configure the access levels of an S7-1500 CPU, follow these steps: 1. Open the properties of the S7-1500 CPU in the Inspector window. 2. Open the "Protection & Security" entry in the area navigation.
A table with the possible access levels appears in the Inspector window.
Figure 9-1 Possible access levels
3. Activate the desired protection level in the first column of the table. The green check marks in the columns to the right of the respective access level show you which operations are still available without entering the password. In the example (Figure: Possible access levels), read access and HMI access are still possible without a password.
4. In the "Enter password" column, specify a password for the access level "Full access" in the first row. In the "Confirm password" column, enter the selected password again to guard against incorrect entries.
5. Assign additional passwords as required for other access levels. 6. Download the hardware configuration for the access level to take effect. The CPU logs the following actions with an entry in the diagnostic buffer: Input of the correct or, possibly, wrong password Changes to access level configuration
Behavior of a password-protected CPU during operation
The CPU protection takes effect for an online connection after you have downloaded the settings to the CPU.
Before an online function is executed, STEP 7 checks the necessary permission and, if necessary, prompts the user to enter a password. The functions protected by a password can only be executed by one programming device/PC at any one time. Another programming device/PC cannot log on.
Logon authorization to the protected data applies for the duration of the online connection or for as long as you have STEP 7 open. The menu command "
Online > Clear access rights" cancels the logon authorization.
You can limit access to a password-protected CPU in RUN locally on the display. This prevents access even with the password.
Automation system System Manual, 11/2019, A5E03461182-AF
201
Protection 9.3 Using the display to set additional password protection
Access level for F-CPUs
For the fail-safe CPUs, there is an additional access level in addition to the four described access levels. For additional information on this access level, refer to the description of the fail-safe system SIMATIC Safety Programming and Operating Manual SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126).
9.3
Using the display to set additional password protection
Blocking access to a password-protected CPU
On the display of an S7-1500 CPU, you can block access to a password-protected CPU (local block of the password). If the mode selector is set to RUN, the block is effective. The access block requires a configured protection level in STEP 7 and works independently of the password protection. This means that even if someone accesses the CPU via a connected programming device and has entered the correct password, access to the CPU remains disabled. The access block can be set separately for each access level on the display. Then, for example, the read access is allowed locally, but the writing access is not allowed locally.
Procedure
If you want to block access to the CPU via the display, you need to configure an access level with a password in STEP 7.
When you set the local access protection for an S7-1500 CPU on the display, proceed as follows:
1. On the display, select Settings > Protection menu.
2. Confirm the selection using "OK", and configure for each access level, whether access at the RUN mode selector switch is allowed or not:
Allow: Access to the CPU is possible with the corresponding password in STEP 7.
Deactivated in RUN: If the mode selector is set to RUN, no additional logon to the CPU is possible with the rights of this access level. Access is denied despite the fact that the user knows the password. Access with the password is enabled again in the STOP operating state.
Access protection for the display
Configure a password for the display in STEP 7 in the properties of the CPU. This protects local access protection with a local password.
202
Automation system System Manual, 11/2019, A5E03461182-AF
Protection 9.4 Using the user program to set additional access protection
9.4
Using the user program to set additional access protection
Access protection by means of the user program
In addition to access protection via the display, you have another option. You can also restrict access to a password-protected CPU using the ENDIS_PW instruction in STEP 7.
You can find more information on this instruction in the STEP 7 online help under "ENDIS_PW: Limit and enable password legitimation ".
9.5
Know-how protection
Application
You can use know-how protection to protect one or more OB, FB or FC blocks as well as global data blocks in your program from unauthorized access. Enter a password to restrict access to a block. The password offers high-level protection against unauthorized reading or manipulation of the block. Know-how protection does not involve the CPU (offline access in STEP 7).
Password provider
As an alternative to manual password input, you can assign a password provider to STEP 7. When using a password provider, you select a password from a list of available passwords. When a protected block is opened, STEP 7 connects to the password provider and retrieves the corresponding password.
To connect a password provider you have to install and activate it. A settings file in which you define the use of a password provider is also required.
A password provider offers you the following advantages:
The password provider defines and manages the passwords. When know-how protected blocks are opened, you work with symbolic names for passwords. For example, a password is marked with the symbolic name "Machine_1" n the password provider. The actual password behind "Machine1" remains hidden from you. A password provider therefore offers optimum block protection as the users do not know the password themselves.
STEP 7 automatically opens know-how protected blocks without the direct entry of a password. This saves you time.
You can find more information on connecting a password provider in the STEP 7 online help.
Automation system System Manual, 11/2019, A5E03461182-AF
203
Protection 9.5 Know-how protection
Readable data
If a block is know-how protected, only the following data is readable without the correct password: Block title, comments and block properties Block parameters (INPUT, OUTPUT, IN, OUT, RETURN) Call structure of the program Global tags without information on the point of use
Further actions
Further actions that can be carried out with a know-how protected block: Copying and deleting Calling within a program Online/offline comparison Load
Global data blocks and array data blocks
You protect global data blocks (global DBs) from unauthorized access with know-how protection. If you do not have the valid password, you can read the global data block but not change it.
Know-how protection is not available for array data blocks (array DBs).
Setting up block know-how protection
To set up block know-how protection, follow these steps: 1. Open the properties of the respective block. 2. Select the "Protection" option under "General".
Figure 9-2 Setting up block know-how protection (1)
204
Automation system System Manual, 11/2019, A5E03461182-AF
Protection 9.5 Know-how protection 3. Click the "Protection" button to display the "Know-how protection" dialog.
Figure 9-3 Setting up block know-how protection (2) 4. Click the "Define" button to display the "Define password" dialog.
Figure 9-4 Setting up block know-how protection (3) 5. Enter the new password in the "New password" field. Enter the same password in the
"Confirm password" field. 6. Click "OK" to confirm your entry. 7. Close the "Know-how protection" dialog by clicking "OK". Result: The blocks selected will be know-how-protected. Know-how protected blocks are marked with a lock symbol in the project tree. The password entered applies to all blocks selected. Note Password provider Alternatively, you can set up know-how protection for blocks with a password provider.
Automation system System Manual, 11/2019, A5E03461182-AF
205
Protection 9.5 Know-how protection
Opening know-how protected blocks
To open a know-how protected block, follow these steps: 1. Double-click the block to open the "Access protection" dialog. 2. Enter the password for the know-how protected block. 3. Click "OK" to confirm your entry. Result: The know-how-protected blockopens. Once you have opened the block, you can edit the program code and the block interface of the block for as long as the block or STEP 7 is open. You need to enter the password again the next time you open the block. If you close the "Access protection" dialog with "Cancel", the block will open but the block code will not be displayed. You will not be able to edit the block. If you copy the block or add it to a library, for example, this does not cancel the know-how protection of the block. The copies will also be know-how-protected.
Removing block know-how protection
To remove block know-how protection, follow these steps: 1. Select the block from which you want to remove know-how protection. The protected
block must not be open in the program editor. 2. In the "Edit" menu, select the "Know-how protection" command to open the "Know-how
protection" dialog. 3. Clear the "Hide code (Know-how protection)" check box.
Figure 9-5 Removing block know-how protection (1) 4. Enter the password.
Figure 9-6 Removing block know-how protection (2)
5. Click "OK" to confirm your entry. Result: Know-how protection for the selected block has been canceled.
206
Automation system System Manual, 11/2019, A5E03461182-AF
Protection 9.6 Copy protection
9.6
Copy protection
Application
The copy protection allows you to protect your program against unauthorized duplication. With copy protection you associate the blocks with a specific SIMATIC memory card or CPU. The link to the serial number means that you can only use the block in conjunction with the corresponding SIMATIC memory card or CPU.
Copy and know-how protection
Recommendation: To prevent an unauthorized reset of the copy protection, provide a copyprotected block with additional know-how protection. First set up the copy protection for the block and after this the know-how protection. You can find additional information on setting up know-how protection in the section Know-how protection (Page 203).
Setting up copy protection
To set up copy protection, follow these steps: 1. Open the properties of the respective block. 2. Select the "Protection" option under "General". 3. In the "Copy protection" area, select either the "Bind to serial number of the CPU" entry or
the "Bind to serial number of the memory card" entry from the drop-down list.
Figure 9-7 Setting up copy protection
4. Activate the option "Serial number is inserted when downloading to a device or a memory card" if STEP 7 is to automatically insert the serial number during the uploading process (dynamic binding). Assign a password using the "Define password" button to link the use of a block additionally to the input of a password. If you want to manually bind the serial number of the CPU or the SIMATIC memory card to a block (static binding), activate the "Enter serial number" option.
5. You can now set up the know-how protection for the block in the "Know-how protection" area.
Note
If you download a copy-protected block to a device that does not match the specified serial number, the entire download operation is not possible. This means that you also cannot download blocks without copy protection.
Automation system System Manual, 11/2019, A5E03461182-AF
207
Protection 9.7 Protection by locking the CPU/interface module
Removing copy protection
To remove copy protection, follow these steps: 1. Remove the Know-how protection (Page 203) if it is set. 2. Open the properties of the respective block. 3. Select the "Protection" option under "General". 4. In the "Copy protection" area, select the "No binding" entry from the drop-down list.
Figure 9-8 Removing copy protection
9.7
Protection by locking the CPU/interface module
Locking options
Provide additional protection for your CPU/Ihr interface module from unauthorized access (for example to the SIMATIC memory card) by using a secure front cover. You have e.g. the following options: Attach a seal Secure the front cover with a lock (shackle diameter: 3 mm)
Figure 9-9 Locking latch on a CPU
208
Automation system System Manual, 11/2019, A5E03461182-AF
Flexible automation concepts
10
10.1
Standard machine projects
Introduction
Standard machine projects are STEP 7 projects that use a set of innovative functions allowing simple configuration and commissioning of flexible automation solutions for standard machines or for machines with a modular structure.
A hardware configuration consisting of an S7-1500 CPU as the IO controller and any connected IO devices represents a "PROFINET IO system master". This master is configured with a maximum configuration based on which various options can be derived for different standard machines, for example with different configuration variants of the IO system.
Greater flexibility at all levels
Standard machine projects have the following central characteristics:
From one project (IO system master) with an engineered maximum configuration, different variants of a standard machine can be loaded (IO system options). The standard machine project covers all variants (options) of the IO system.
An IO system option can be integrated in an existing network locally using simple tools.
Flexibility is provided in more ways than one:
With suitable configuration, adaptation of the IP address parameters of the IO controller is possible locally using simple tools. This allows a standard machine to be integrated in different plants with little effort or to be included in a network several times. IO systems with this property are known as multiple use IO systems.
With suitable configuration and programming, different setups of IO system options can be operated locally that differ in terms of the selection of IO devices used or in terms of the arrangement of the IO devices. Since the specific configuration of the IO system is controlled by the user program, this is known as configuration control for IO systems.
Independently of the functions described above, with suitable configuration and programming, you can use different station options of central devices or distributed I/O devices in one project. The devices can be different in terms of the selection and arrangement of the modules. Since the concrete configuration of the station is controlled by the user program, this is also known as configuration control.
Automation system System Manual, 11/2019, A5E03461182-AF
209
Flexible automation concepts 10.2 Configuration control (option handling)
Additional information
You can find additional information on configuration control in the section Configuration control (option handling) (Page 210). You can find additional information on multiple use IO systems and on configuration control for IO systems in the PROFINET with STEP 7 V14 (http://support.automation.siemens.com/WW/view/en/49948856) Function Manual.
10.2
Configuration control (option handling)
Introduction
With configuration control (option handling), you handle various standard machine configuration levels in one project. You do not need to change the hardware configuration or the user program.
Operating principle of configuration control
Configuration control enables you to operate different configuration levels of a standard machine with a single configuration of the S7-1500 automation system/ET 200MP distributed I/O system.
A station master (maximum configuration) is configured in a project. The station master comprises all modules needed for all possible equipment components of a modular standard machine.
Provision is made in the user program of the project for various station options for the different configuration levels of the standard machine and for selection of a station option. A station option uses, for example, only some of the modules of the station master and these modules are not inserted in the configured order.
Manufacturers of standard machines select a station option for a configuration level of the standard machine and does not have to change the project or load a changed configuration.
You use a control data record you have programmed to notify the CPU/interface module as to which modules are missing or located on different slots in a station option as compared to the station master. The configuration control has no effect on the parameter assignment of the modules.
The configuration control allows you to flexibly vary the centralized/distributed configuration. As a precondition for this, the station option must be able to be derived from the station master.
210
Automation system System Manual, 11/2019, A5E03461182-AF
Flexible automation concepts 10.2 Configuration control (option handling)
The following figure shows three configuration levels of a standard machine with the corresponding station options of the S7-1500 automation system.
Benefits
Figure 10-1 Various configuration levels of a standard machine with the corresponding station options of the S7-1500 automation system
Easy project handling and commissioning through use of a single STEP 7 project for all station options.
Easy handling during maintenance, versioning and upgrades. Hardware savings: I/O modules are installed that are necessary for the current station
option of the machine. Potential savings when building, commissioning and creating documentation for standard
machines.
Automation system System Manual, 11/2019, A5E03461182-AF
211
Flexible automation concepts 10.2 Configuration control (option handling)
Procedure
To set up the configuration control, proceed as follows:
Table 10- 1 Procedure for commissioning the SIMATIC S7-1500
Step 1 2
Procedure Enable configuration control in STEP 7 Create control data record
3
Transfer control data record
See...
Section Configuring (Page 212)
Section Creating the control data record (Page 214)
Section Transferring the control data record in the startup program of the CPU (Page 224)
Library for configuration control
A library for configuration control is available for download (https://support.industry.siemens.com/cs/ww/en/view/29430270) on the internet. The library contains data types with the structure of the control data records for the S7-1500/ET 200MP automation system. You can implement the configuration control for your flexible automation solution economically using these data types.
10.2.1
Configuring
Requirements
With the S7-1500, configuration control is possible both with centrally inserted modules and with the ET 200MP distributed I/O system via PROFINET IO.
For S7-1500 automation system:
STEP 7 Professional as of Version V13
CPU S7-15XX as of firmware version V1.5
The startup parameter "Comparison preset to actual configuration" is set to "Startup CPU even if mismatch" (default setting). You can find the "Comparison preset to actual configuration" parameter in the Inspector window of the CPU properties under "General">"Startup".
For ET 200MP distributed I/O system:
STEP 7 Professional as of Version V13
IM 155-5 PN ST/HF
You have assigned the interface module to an IO controller/DP master in STEP 7
The startup parameter "Comparison preset to actual module" is set to "Startup CPU even if mismatch" (default setting). You can find the "Comparison preset to actual module" parameter in the Inspector window of the interface module properties in the "Startup" field under "General">"Module parameters".
212
Automation system System Manual, 11/2019, A5E03461182-AF
Flexible automation concepts 10.2 Configuration control (option handling) Required steps Enable the "Allow to reconfigure the device via the user program" parameter when configuring the CPU/interface module. For an S7-1500 CPU, you can find the "Allow to reconfigure the device via the user program" parameter in the "Configuration control" area. For an IM 155-5 PN interface module, you can find the "Allow to reconfigure the device via the user program" parameter in the "Configuration control" field under "General">"Module parameters".
Figure 10-2 Enabling configuration control using an S7-1500 CPU as an example
Automation system System Manual, 11/2019, A5E03461182-AF
213
Flexible automation concepts 10.2 Configuration control (option handling)
10.2.2
Creating the control data record
Required steps
To create a control data record for the configuration control, follow these steps:
1. Create a PLC data type that contains the structure of the control data record.
You can find the structure of the control data record:
For the S7-1500 automation system in section Control data record for the S7-1500 Automation System (Page 217).
For the ET 200MP distributed I/O system in section Control data record for the ET 200MP distributed I/O system (Page 218).
Figure 10-3 Creating control data record 196 using an S7-1500 CPU as an example 2. Create a global data block.
214
Automation system System Manual, 11/2019, A5E03461182-AF
Flexible automation concepts 10.2 Configuration control (option handling) 3. Create an array of the data type of the above created PLC data type in the data block. The following figure shows a data block containing three control data records for an S7-1500 CPU.
Figure 10-4 Data block for configuration control 4. In the "Start value" column of the control data records, enter which module is located at
which slot.
Figure 10-5 Assigning slots
Automation system System Manual, 11/2019, A5E03461182-AF
215
Flexible automation concepts 10.2 Configuration control (option handling)
Rules
Observe the following rules: The CPU/interface module ignores slot entries in the control data record outside the
station master. The control data record must contain the entries up to the last slot of the station option. Each slot of a station option may only be present once in the control data record. Each slot of a station option may only be assigned to one slot in the station master. System power supplies (PS) can also be subject to configuration control.
Note Configuration control for system power supplies In the case of a configuration (station option) loaded using a data record, STEP 7 does not automatically check compliance with the power budget. Ensure that the power supplied in each power segment of the station option is greater than or equal to the power drawn. You can find additional information in the section Power balance calculation (Page 103).
Using communication modules
Point-to-point communication modules: Point-to-point communication modules can be used without any restrictions for the configuration control.
PROFINET/Ethernet and PROFIBUS communication modules: CPUs as of firmware version V1.7 support configuration control when using PROFINET/Ethernet or PROFIBUS communication modules. If PROFINET/Ethernet or PROFIBUS communication modules, such as a CM 1542-5 (DP master or DP slave) are inserted in the central configuration, these communication modules cannot be influenced by the configuration control. You must therefore leave these modules in the slots preassigned in the station master and enter the slot numbers from the station master in the control data record ("Station option slot = Station master slot"). In a station option, all slots up to the communication module furthest from the CPU must be present in the control data record. Maximum flexibility is achieved by inserting the communication modules directly to the right of the CPU.
216
Automation system System Manual, 11/2019, A5E03461182-AF
Flexible automation concepts 10.2 Configuration control (option handling)
10.2.2.1
Control data record for the S7-1500 Automation System
Slot assignment
The following table shows the slot assignment of the modules for the S7-1500 automation system:
Table 10- 2 Slot assignment
Slot 0 1 2 - 31
Modules
System power supply (optional) CPU I/O modules/system power supplies, depending on the station option
Comment Upstream of CPU Slot 1 is always the CPU Downstream of CPU
Control data record
For configuration control of the S7-1500 automation system, you define a control data record 196 V4.0, which contains a slot assignment. The table below shows the structure of a control data record with explanations of the individual elements.
Table 10- 3 Configuration control: Structure of control data record 196
Byte 0 1 2 3 4
5
6
7
: 4 + (max. slot number)
Element
Code
Block length
4 + number of slots
Block ID
196
Version
4
Version
0
Slot 0 of the station master Slot assignment in the station option
Slot 1 of the station master Slot assignment 1 in the station option
(always 1, because the CPU is always in slot 1)
Slot 2 of the station master Slot assignment in the station option
Slot 3 of the station master Slot assignment in the station option
:
:
Maximum slot of the station Slot assignment in the
master
station option
Explanation Header
Control element Contains information on which module is inserted in which slot. The following rule determines which value you must enter in the respective byte: · If the module is included in the station
option, enter the slot number of the module. · If the module is not included in the station option, enter 255.
Automation system System Manual, 11/2019, A5E03461182-AF
217
Flexible automation concepts 10.2 Configuration control (option handling)
10.2.2.2
Control data record for the ET 200MP distributed I/O system
Slot assignment
The following table shows the slot assignment of the modules for the ET 200MP distributed I/O system:
Table 10- 4 Slot assignment
Slot 0 1
2 - 31
Modules System power supply (optional) Interface module
I/O modules/system power supplies, depending on the station option
Comment
Upstream from interface module
Interface module (slot 1) is not an element of the configuration control, but instead controls the configuration control.
Downstream from the interface module
Control data record
For configuration control of the ET 200MP distributed I/O system, you define a control data record 196 V3.0, which contains a slot assignment. The table below shows the structure of a control data record with explanations of the individual elements.
Table 10- 5 Configuration control: Structure of control data record 196
Byte 0 1 2 3 4
5
Element Block length Block ID Version Version Slot 0 of the station master
Slot 2 of the station master
Code
4 + number of slots 196 3 0 Slot assignment in the station option Slot assignment in the station option
6
: 4 + (max. slot no. 1)
Slot 3 of the station master Slot assignment in the station option
:
:
Maximum slot of the station Slot assignment in the
master
station option
Explanation Header
Control element Contains information on which module is inserted in which slot. The following rule determines which value you must enter in the respective byte: · If the module is included in the station
option, enter the slot number of the module. · If the module is not included in the station option, enter 127.
218
Automation system System Manual, 11/2019, A5E03461182-AF
Flexible automation concepts 10.2 Configuration control (option handling)
10.2.2.3
Feedback data record of the ET 200MP distributed I/O system
Operating principle
The feedback data record informs you about the accuracy of the module assignment and gives you the option of detecting assignment errors in the control data record. The feedback data record is mapped via a separate data record 197 V2.0.
Slot assignment
The feedback data record exists only when configuration control is configured and always refers to the maximum quantity framework without interface module, i.e., 31 slots.
The following table shows the slot assignment of the modules:
Table 10- 6 Slot assignment
Slot 0 2 - 31
Modules
System power supply (optional) I/O modules/system power supplies, depending on the station option
Comment Upstream from interface module Downstream from the interface module
Partial reading of the feedback data record is possible.
Automation system System Manual, 11/2019, A5E03461182-AF
219
Flexible automation concepts 10.2 Configuration control (option handling)
Feedback data record
Table 10- 7 Feedback data record
Byte 0 1 2 3 4 5 6 7 : 64 65
Element Block length Block ID Version
Status slot 0 Reserved Status slot 2 Reserved : Slot n status Reserved
Code 66 197 2 0 0/1 0 0/1 0 : Maximum slot 0
* Not possible if the slot is marked as not available.
Explanation Header
Status = 1: · Module from station master is
inserted in the station option · Slot is marked as not availa-
ble in the control data record Status = 0: · Module pulled · Incorrect module inserted in
the station option*
Note
The data in the feedback data record is always mapped for all modules. In a Shared Device configuration, it is therefore irrelevant which IO controller the respective modules are assigned to.
As long as no control data record was sent, a one-to-one module assignment is assumed for the compilation of data record 197 (station master station option).
220
Automation system System Manual, 11/2019, A5E03461182-AF
Flexible automation concepts 10.2 Configuration control (option handling)
Error messages
In the case of an error when reading the feedback data record, the RDREC instruction returns the following error messages via the STATUS block parameter:
Table 10- 8 Error messages
Error code 80B1H
80B5H 80B8H
Meaning Invalid length; the length information in data record 197 is not correct. Configuration control not configured Parameter error The following events cause a parameter error:
· Incorrect block ID in the header (not equal to 197) · Invalid version identifier in the header · A reserved bit was set · Multiple slots in the station master are assigned to the same
slot in the station option
10.2.2.4
Examples of configuration control
A station master consisting of a system power supply, CPU, and three I/O modules is configured in STEP 7 in the following section.
The module at slot 3 is not present in the station option 1 and is "hidden" by the configuration control.
In station option 2, the order of the modules in slots 3 and 4 is interchanged. The modified order of the modules is made known to the CPU by a modified control data record.
Automation system System Manual, 11/2019, A5E03461182-AF
221
Flexible automation concepts 10.2 Configuration control (option handling)
Station option 1 with module that is not present
The module that is located in slot 3 in the station master is not present in the station option 1. Slot 3 must be designated in the control data record accordingly with 255 (= not present).
Module is not present in the station option 1.
Figure 10-6 Example: Hardware configuration of station option 1 with the associated control data record in STEP 7
222
Automation system System Manual, 11/2019, A5E03461182-AF
Flexible automation concepts 10.2 Configuration control (option handling)
Station option 2 with modified order of modules
The order of the modules in slot 3 and 4 is interchanged.
Figure 10-7 Example: Hardware configuration of station option 2 with the associated control data record in STEP 7
Automation system System Manual, 11/2019, A5E03461182-AF
223
Flexible automation concepts 10.2 Configuration control (option handling)
Detailed application example
You can find a detailed application example for the configuration control in S7-1500 in here (https://support.industry.siemens.com/cs/ww/en/view/29430270) under "Application example for ET 200SP (PROFINET) and S7-1500 by using the library".
10.2.3
Transferring the control data record in the startup program of the CPU
Required steps
Transfer the created control data record 196 to the CPU/interface module using the WRREC (Write data record) instruction.
Parameters of the WRREC instruction
Below, you will find explanations of individual parameters of the WRREC instruction which you must supply with specific values in the configuration control context. You can find additional information on the WRREC instruction in the STEP 7 online help.
ID
INDEX RECORD
Hardware identifier
· For configuration control for centrally arranged modules, use the HW identifier for the CPU. If you have selected the CPU in the network view or device view, you can find the HW identifier on the System constants tab of the Inspector window. Use the value of the system constant "Local Configuration".
· For configuration control for distributed I/O, use the HW identifier of the interface module. If you have selected the interface module in the network view or device view, you can find the HW identifier on the System constants tab of the Inspector window. Use the value of the system constant "<Name_of_interface_module> Head".
Data record number: 196 (decimal)
Control data record to be transferred. For the structure of the control data record, see section Creating the control data record (Page 214).
224
Automation system System Manual, 11/2019, A5E03461182-AF
Flexible automation concepts 10.2 Configuration control (option handling)
Error messages
In case of error, the WRREC instruction returns the following error messages via the STATUS block parameter:
Table 10- 9 Error messages Error code 80B1H
80B5H 80E2H
80B8H
Meaning Invalid length; the length information in data record 196 is not correct. Configuration control parameters not assigned. Data record was transferred in the wrong OB context. The data record must be transferred in the startup program. Parameter error Reasons for a parameter error are:
· Incorrect block ID in the header (not equal to 196)
· Invalid version identifier in the header
· A reserved bit was set
· A station master slot was assigned an invalid slot in the station option
· Multiple slots in the station master are assigned to the same slot in the station option
· For shared device on submodule level: violation of defined restrictions
Automation system System Manual, 11/2019, A5E03461182-AF
225
Flexible automation concepts 10.2 Configuration control (option handling)
Special requirements relating to the transfer of the control data record to the CPU
If you have enabled configuration control, the CPU is not ready for operation without a control data record. The CPU returns from startup to STOP if a valid control data record is not transferred in the startup OB (for example, OB 100). The central I/O is not initialized in this case. The cause for STOP mode is entered in the diagnostics buffer.
Note If an incorrect control data record is transferred to the CPU in the startup OB, the startup of the CPU may be prevented. In this case, perform a reset to factory settings of the CPU and then transfer a correct control data record.
The CPU processes the WRREC instruction for transferring the control data record asynchronously. For this reason, you must call WRREC in the startup OB (for example, OB 100) repeatedly in a loop until the output parameters "BUSY" and "DONE" indicate that the data record has been transferred. Tip: To program the loop, use the SCL programming language with the REPEAT ... UNTIL instruction.
REPEAT
"WRREC_DB"(REQ := "start_config_control",
ID := "Local Configuration",
INDEX := 196,
LEN := "conf_LEN",
DONE => "conf_DONE",
BUSY => "conf_BUSY",
RECORD := "ConfDB".ConfigControl["ConfDB".Option],
//Selection of control data record*
ERROR => "conf_ERROR",
STATUS => "conf_STATUS");
UNTIL NOT "conf_BUSY"
END_REPEAT;
*Selection of the station option in the user program: In order for the CPU to know which station option you want to operate, you must set up a possibility to select between the various control data records in the user program. You can implement the selection, for example, via an Int tag that references an array element. Please note that the variable used to select the control data record must be stored in the retentive memory area. If the tag is not retentive, it will be initialized during startup of the CPU and will thus be unavailable for selection of the station option. In the graphical programming languages, you implement the loop using instructions for program control.
226
Automation system System Manual, 11/2019, A5E03461182-AF
Flexible automation concepts 10.2 Configuration control (option handling)
Example in FBD: Use the LABEL (jump label) and JMP (jump at RLO=1) instructions to program a loop.
Figure 10-8 WRREC
The control data record is stored retentively in the CPU. Note:
The retentivity of the control data record is independent of the retentivity settings in the STEP 7-memory area. The memory area in which the control data record is configured does then not have to be configured as retentive for this purpose.
If you write a control data record with modified configuration, the original data record 196 is deleted and the new data record 196 is saved retentively. The CPU will then restart with the modified configuration.
Automation system System Manual, 11/2019, A5E03461182-AF
227
Flexible automation concepts 10.2 Configuration control (option handling)
Special requirements relating to the transfer of the control data record to the interface module
If you have enabled configuration control, the ET 200MP station is not ready for operation without a control data record. As long as no valid control data record has been transferred, the I/O modules are considered as failed by the CPU and exhibit substitute value behavior. The interface module continues to exchange data.
The control data record is stored retentively in the interface module. Note:
If the configuration is unchanged, you do not have to rewrite the control data record 196 during restart.
If you write a control data record with modified configuration, this will result in a station failure in the distributed I/O system. The original data record196 is deleted and the new data record 196 is saved retentively. The station will then restart with the modified configuration.
10.2.4
Behavior during operation
Effect of discrepancy between station master and station option
For the online display and for the display in the diagnostics buffer (module OK or module faulty), the station master is always used and not the differing station option.
Example: A module outputs diagnostics data. This module is configured in slot 4 in the station master, but is inserted in slot 3 in the station option (missing module; see example in the next section). The online view (station master) shows an incorrect module in slot 4. In the real configuration, the module in slot 3 indicates an error via an LED display.
Response to modules that are not present
If modules are entered as not present in the control data record, the automation system behaves as follows:
Modules designated as not present in the control data record do not supply diagnostics and their status is always OK. The value status is OK.
Direct writing access to the outputs that are not present or writing access to the process image of outputs that are not present: Remains without effect; no access error is signaled.
Direct reading access to the inputs that are not present or reading access to the process image of inputs that are not present: Value "0" is supplied; no access error is signaled.
Write data record to module that is not present: Remains without effect; no error is signaled.
Read data record from module that is not present: The output parameter STATUS of the instruction RDREC supplies the value 80A3H "General CM error".
228
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning
11
11.1
Overview
Introduction
This section includes information on the following topics: Check before powering on for the first time Procedure for commissioning the S7-1500 automation system
Removing/inserting the SIMATIC memory card First power-on of the CPU Procedure for commissioning the S7-1500 distributed I/O system First power-on of the ET 200MP on PROFINET IO First power-on of the ET 200MP on PROFIBUS DP Operating modes of the CPU STARTUP, STOP, RUN and operating mode transitions CPU memory reset: Automatic and manual Backing up and restoring the CPU configuration Time synchronization Identification and maintenance data Shared commissioning of projects
Commissioning requirements
Note Performing tests You must ensure the safety of your plant. You therefore need to perform a complete functional test and the necessary safety checks before the final commissioning of a plant. Also allow for any possible foreseeable errors in the tests. This avoids endangering persons or equipment during operation.
Automation system System Manual, 11/2019, A5E03461182-AF
229
Commissioning 11.2 Check before powering on for the first time
Software tools for commissioning
The following software tools support you during commissioning: SIEMENS PRONETA in commissioning PROFINET systems. SIMATIC automation tool in commissioning the S7-1500 automation system / ET 200MP
distributed I/O system. You can find more information on SIEMENS PRONETA and the SIMATIC Automation Tool in the section Software (Page 87).
11.2
Check before powering on for the first time
Before the first power-on, check the installation and the wiring of the S7-1500 automation system/ET 200MP distributed I/O system.
Questions for the check
The following questions provide instructions for checking your system in the form of a checklist.
Racks Are the mounting rails firmly installed on the wall, in the framework, or in the cabinet? Are the cable ducts correctly installed? Have the minimum clearances been observed?
Grounding and chassis concept Is the mounting rail connected to the protective conductor? If applicable, are all further protective conductor connection points on the S7-1500
automation system / ET 200MP distributed I/O system connected to the protective conductor? Has the protective conductor been tested? Has the connection between reference ground and ground been correctly made on all mounting rails? Are the required equipotential bonding cables connected with low impedance to the affected plant units?
Module installation and wiring Are all the modules inserted / installed in accordance with the mounting plan and
corresponding to the configuration with STEP 7 and screwed firmly to the mounting rail? Are all the front connectors wired according to the circuit diagram, in the final position,
and inserted on the correct module? Are the correct modules installed and connected to each other with U connectors? Are U connectors projecting either at the left-hand or right-hand over the outer modules
on the S7-1500 automation system/ET 200MP distributed I/O system?
System power supply or load current supply Are all system power supplies and load current supplies switched off? Is the power cable connector correctly wired? Has the connection to line voltage been made?
230
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.3 Procedure for commissioning the S7-1500 automation system
11.3
Procedure for commissioning the S7-1500 automation system
Requirements
The CPU is in the "Factory settings" state or has been reset to factory settings. You can find additional information in the section Resetting the CPU to factory settings (Page 292).
The SIMATIC memory card is as delivered or has been formatted.
Commissioning procedure
For the first commissioning of an S7-1500 automation system, we recommend the following procedure:
Table 11- 1 Procedure for commissioning the SIMATIC S7-1500
Step 1
2 3 4
5
6
7
8 9
10
Procedure Configure hardware in STEP 7 and perform power balance calculation (see also "Requirements: CPU as bus device") Create user program Insert required modules Wiring and checking the assembly (system power supplies, front connectors, etc.) Insert SIMATIC memory card in the CPU
Switch on the CPU and system power supply
Check LEDs
Evaluate information on the CPU's display Load hardware configuration and user program to the CPU
Test inputs and outputs
See...
Section Power balance calculation (Page 103) STEP 7 online help
Section Installation (Page 107)
Section Wiring (Page 129)
Section Removing/inserting a SIMATIC memory card on the CPU (Page 232)
Section First power-on of the CPU (Page 235)
The meaning of the LEDs can be found in the manuals of the modules.
Section CPU display (Page 266)
Online and diagnostics functions in STEP 7
The following functions are helpful: Monitoring and modifying tags, testing with program status, forcing, modifying the outputs in STOP mode. Section Test and service functions (Page 301)
Automation system System Manual, 11/2019, A5E03461182-AF
231
Commissioning 11.3 Procedure for commissioning the S7-1500 automation system
Requirements: CPU as bus device
Note the following requirements for operation of a CPU as bus device: PROFIBUS interface
The integrated PROFIBUS interface of the CPU is configured using STEP 7 (device address and bus parameters configured).
The CPU is connected to the subnet. The terminating resistors at the segment boundaries are switched on. You can find additional information in the PROFIBUS function manual (http://support.automation.siemens.com/WW/view/en/59193579) PROFINET interface The integrated PROFINET interface of the CPU is configured using STEP 7 (IP
address and device name configured). The CPU is connected to the subnet. You can find additional information in the PROFINET function manual (http://support.automation.siemens.com/WW/view/en/49948856)
11.3.1
Removing/inserting a SIMATIC memory card on the CPU
Requirements
The CPU only supports pre-formatted SIMATIC memory cards. If applicable, delete all previously stored data before using the SIMATIC memory card. Additional information about deleting the contents of the SIMATIC memory card can be found in the function manual Structure and use of the CPU memory (https://support.industry.siemens.com/cs/ww/en/view/59193101).
In order to work with the SIMATIC memory card, first ensure that the SIMATIC memory card is not write-protected. For this purpose, slide the slider on the SIMATIC memory card out of the lock position.
If the inserted SIMATIC memory card is write-protected, the CPU display outputs the symbol in the menu "Memory card" > "Overview". In addition, the display shows a message in the
lower level of the menu.
232
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.3 Procedure for commissioning the S7-1500 automation system Inserting the SIMATIC memory card To insert a SIMATIC memory card, follow these steps: 1. Open the front cover of the CPU. 2. Ensure that the CPU is either switched off, or in the STOP mode. 3. Insert the SIMATIC memory card, as depicted on the CPU, into the slot for the SIMATIC memory card.
Standard, F-CPUs / compact CPUs from article number 6ES751x-xxx02-0AB0/6ES751x-
1CK01-0AB0: The slot for the SIMATIC memory card is located on the bottom of the CPU. Figure 11-1 Slot for the SIMATIC memory card 4. Insert the SIMATIC memory card with light pressure into the CPU, until the SIMATIC memory card latches.
Automation system System Manual, 11/2019, A5E03461182-AF
233
Commissioning 11.3 Procedure for commissioning the S7-1500 automation system
Removing the SIMATIC memory card
To remove a SIMATIC memory card, follow these steps: 1. Open the front cover. 2. Switch the CPU into STOP mode. 3. Press the SIMATIC memory card into the CPU with light pressure. Once it has clicked
into place, remove the SIMATIC memory card. Only remove the SIMATIC memory card in POWER OFF or STOP mode of the CPU. Ensure that: No writing functions are active in STOP . Writing functions are online functions with the
PG/PC, for example loading/deleting a block and test functions. No writing functions were active before POWER OFF. If you remove the SIMATIC memory card during a write process, the following problems can occur: The data content of a file is incomplete. The file is no longer readable, or no longer exists. The entire content of the card is corrupted. Please also note the following FAQs on the Internet (https://support.industry.siemens.com/cs/ww/en/view/59457183) for removal of the SIMATIC memory card.
Reactions after removing/inserting the SIMATIC memory card
Inserting and removing the SIMATIC memory card in STOP mode triggers a re-evaluation of the SIMATIC memory card. The CPU hereby compares the content of the configuration on the SIMATIC memory card with the backed-up retentive data. If the backed-up retentive data matches the data of the configuration on the SIMATIC memory card, the retentive data is retained. If the data differs, the CPU automatically performs a memory reset. The retentive data is deleted and CPU then goes to STOP. The CPU evaluates the SIMATIC memory card and indicates this by flashing the RUN/STOP LED.
Note Using the SIMATIC memory card as a firmware update card If you use the SIMATIC memory card as a firmware update card, removing and inserting the card will not result in the loss of retentive data.
Reference
You can find additional information on the SIMATIC memory card in the function manual.
234
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.3 Procedure for commissioning the S7-1500 automation system
11.3.2
First power-on of the CPU
Requirements
An S7-1500 automation system is installed and the assembly is wired. The SIMATIC memory card is inserted in the CPU.
Procedure
Proceed as follows to commission the CPU: Switch on the system power supply and load current supply. Result: The CPU executes a flash test:
All LEDs flash at 2 Hz RUN/STOP LED flashes alternately yellow/green ERROR LED flashes red MAINT LED flashes yellow The CPU runs the system initialization and evaluates the SIMATIC memory card: RUN/STOP LED flashes yellow at 2 Hz After the system initialization has been completed, the CPU goes to STOP mode: The RUN/STOP LED lights up yellow
Automation system System Manual, 11/2019, A5E03461182-AF
235
Commissioning 11.4 Procedure for commissioning the ET 200MP distributed I/O system
11.4
Procedure for commissioning the ET 200MP distributed I/O system
11.4.1
Commissioning the ET 200MP for PROFINET IO
Introduction
The commissioning of your automation system depends on the plant configuration.
Commissioning procedure
To commission the ET 200MP as IO device for PROFINET IO, proceed as follows:
Table 11- 2 Procedure for commissioning the ET 200MP as an IO device for PROFINET IO
Step 1 2
4 5 6
7 8 9
10
Procedure Install ET 200MP Connect ET 200MP · Supply voltages · PROFINET IO · Sensors and actuators Configure IO controller Switch on supply voltages for the IO controller Switch on supply voltages for IO devices
Download configuration to the IO controller Switch IO controller to RUN mode Check LEDs
Test inputs and outputs
See... Section Installation (Page 107) Section Wiring (Page 129)
CPU manual or documentation of the IO controller CPU manual or documentation of the IO controller Interface module (http://support.automation.sie mens.com/WW/view/en/6729 5970/133300) manual STEP 7 online help CPU manual or documentation of the IO controller Interface module (http://support.automation.sie mens.com/WW/view/en/6729 5970/133300) manual The following functions are helpful: Monitoring and modifying tags, testing with program status, forcing, modifying the outputs. See section Test and service functions (Page 301)
Note
The operating mode transitions for the IO controller from RUN to STOP or from STOP to RUN can take several milliseconds, until the mode transition for the inputs and outputs of all I/O modules for the ET 200MP station is completed. This delay also applies to isochronous mode.
236
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.4 Procedure for commissioning the ET 200MP distributed I/O system
11.4.2
Commissioning the ET 200MP for PROFIBUS DP
Introduction
The commissioning of your automation system depends on the plant configuration.
Commissioning procedure
To commission the ET 200MP as DP slave for PROFIBUS DP, proceed as follows:
Table 11- 3
Step 1 2
3
4 5 6
7 8 9
10
Procedure Install ET 200MP (with IM 155-5 DP ST) Set the PROFIBUS address on the interface module
Connect ET 200MP · Supply voltages · PROFIBUS DP · Sensors and actuators Configure DP master (including PROFIBUS address) Switch on supply voltages for DP master Switch on supply voltages for DP slaves
Download configuration to the DP master Switch DP master to RUN Check LEDs
Test inputs and outputs
See... Section Installation (Page 107) Manual for the interface module (http://support.automation.sie mens.com/WW/view/en/7791 0801/133300) Section Wiring (Page 129)
Documentation of the DP master Documentation of the DP master Interface module (http://support.automation.sie mens.com/WW/view/en/7791 0801/133300) manual STEP 7 online help Documentation of the DP master Interface module (http://support.automation.sie mens.com/WW/view/en/7791 0801/133300) manual The following functions are helpful: Monitoring and modifying tags, testing with program status, forcing, modifying the outputs. Section Test and service functions (Page 301)
Note
During operating mode transitions of the DP master from RUN to STOP or from STOP to RUN, it can take several milliseconds until the mode transition for the inputs and outputs of all I/O modules of the ET 200MP is complete.
Automation system System Manual, 11/2019, A5E03461182-AF
237
Commissioning 11.5 Operating modes
11.5
Operating modes
Introduction
Operating states describe the behavior of the CPU at a specific time. The following operating states are possible via the mode selector: STARTUP RUN STOP In these operating modes, the CPU can communicate, for example, via the PROFINET IO interface (X1). The status LEDs on the front side of the CPU indicate the current operating mode.
11.5.1
STARTUP mode
Response
Before the CPU starts to execute the cyclic user program, a startup program is executed.
By suitably programming startup OBs, you can specify initialization tags for your cyclic program in the startup program. That is, you can set up one or several startup OBs in your program, or none at all.
238
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.5 Operating modes
Points to note
All outputs are disabled or react according to the parameter settings for the respective module: They provide a substitute value as set in the parameters or retain the last value output and bring the controlled process to a safe operating mode.
The process image is initialized.
The process image is not updated. To read the current state of inputs during STARTUP, you can access inputs with direct I/O access. To initialize outputs during STARTUP, you can write values via the process image or with direct I/O access. The values are output at the outputs during the transition to the RUN mode.
The CPU always starts up in a warm restart.
The non-retentive bit memories, timers and counters are initialized.
The non-retentive tags in data blocks are initialized.
During startup, no cycle time monitoring is running yet.
The CPU processes the startup OBs in the order of the startup OB numbers. The CPU processes all programmed startup OBs regardless of the selected startup mode. (Figure "Setting the startup behavior").
If a corresponding event occurs, the CPU can start the following OBs in startup:
OB 82: Diagnostics interrupt
OB 83: Removal/insertion of modules
OB 86: Rack error
OB 121: Programming error (only for global error handling)
OB 122: Time-out (for global error handling only) You can find a description of how to use global and local error handling in the STEP 7 online help.
The CPU does not start all other OBs until the transition to RUN mode.
Automation system System Manual, 11/2019, A5E03461182-AF
239
Commissioning 11.5 Operating modes
Response when expected and actual configurations do not match
The configuration downloaded to the CPU represents the expected configuration. The actual configuration is the actual configuration of the automation system. If the expected configuration and actual configuration deviate from one another, the CPU's behavior is specified by the setting of the hardware compatibility. For additional information about the hardware compatibility, see the section Operating mode transitions (Page 244).
Cancellation of the startup
If errors occur during startup, the CPU cancels the startup and returns to STOP mode. The CPU does not perform startup or interrupts the startup under the following conditions: You have not inserted a SIMATIC memory card or an invalid one is inserted. You have not downloaded a hardware configuration to the CPU.
Configuring startup behavior
You configure the behavior of the CPU in the Startup group of the CPU properties.
240
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.5 Operating modes
Setting the startup behavior
To set the startup behavior, follow these steps: 1. Select the CPU in the device view of the STEP 7 hardware network editor. 2. In the properties under "General" select the "Startup" area.
Figure 11-2 Setting the startup behavior
Sets the startup type after POWER ON Defines the startup behavior for the case where a module in a slot does not correspond
to the configured module. This parameter applies to the CPU and to all the modules for which no other setting was selected.
· Startup CPU only if compatible: In this setting a module on a configured slot has to be compatible with the configured module. Compatible means that the module matches the number of inputs and output and must match with respect to its electrical and functional properties.
· Startup CPU even if mismatch: At this setting the CPU starts up irrespective of the type of module plugged.
For locally used modules you can configure the hardware compatibility in the parameter "Comparison preset to actual module" individually for each slot. When you change the setting of the hardware compatibility for a module, the setting made at the CPU does not apply for this module.
Specifies a maximum period (default: 60000 ms) in which the central and distributed I/O
must be ready for operation. The communications modules (CM/CP) are supplied with voltage and communication parameters during the CPU startup. This parameter assignment time grants a period within which the I/O modules connected to the communication module (CM/CP) must be operationally ready. The CPU goes into RUN mode when the central and the distributed I/O is operationally ready within the parameter assignment time.
If the central and distributed I/O is not ready for operation within the configuration time, the startup characteristics of the CPU depends on the setting of the hardware compatibility.
Automation system System Manual, 11/2019, A5E03461182-AF
241
Commissioning 11.5 Operating modes
Example for the "Comparison preset to actual configuration" parameter
"Startup CPU only if compatible" The DI 32x24VDC HF input module with 32 digital inputs can be a compatible replacement for a DI 16x24VDC HF input module with 16 digital inputs. The pin assignment and all electrical and functional properties are identical. "Startup CPU even if mismatch" Instead of a configured digital input module, you insert an analog output module or no module is present in this slot and thus in all subsequent slots. Although the configured inputs cannot be accessed, the CPU starts up. Note that the user program cannot function correctly in this case. Therefore, take appropriate measures!
11.5.2
STOP mode
Response
The CPU does not execute the user program in STOP mode.
All outputs are disabled or react according to the parameter settings for the respective module: They provide a substitute value as set in the parameters or retain the last value output and thus hold the controlled process in a safe operating mode.
242
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.5 Operating modes
11.5.3
RUN mode
Response
In "RUN" mode the cyclic, time-driven, and interrupt-driven program execution is performed. Addresses that are in the "Automatic Update" process image are automatically updated in each program cycle. For additional information, see section Process images and process image partitions (Page 180).
Execution of the user program
Once the CPU has written the outputs and read the inputs, it runs through the cyclic program from the first instruction to the last instruction. Events with higher priority, such as hardware interrupts, diagnostic interrupts and communication, can interrupt the cyclic program flow and prolong the cycle time.
If you have configured a minimum cycle time, the CPU will not end the cycle until this minimum cycle time has expired, even if the user program is completed sooner.
The operating system monitors the execution time of the cyclic program for a configurable upper limit known as the maximum cycle time. You can restart this time monitoring at any point in your program by calling the RE_TRIGR instruction.
If the cyclic program exceeds the maximum cycle time, the operating system starts the time error OB (OB 80). If the OB is not present, the CPU ignores that the maximum cycle time was exceeded. If the cycle monitoring time is exceeded a second time, e.g. while the time error OB is being processed, the CPU goes to STOP mode.
Reference
Additional information about cycle and response times is available in the Function Manual Cycle and response times (http://support.automation.siemens.com/WW/view/en/59193558).
Automation system System Manual, 11/2019, A5E03461182-AF
243
Commissioning 11.5 Operating modes
11.5.4
Operating mode transitions
Operating modes and operating mode transitions
The following figure shows the operating modes and the operating mode transitions:
Figure 11-3 Operating modes and operating mode transitions The table below shows the effects of the operating mode transitions:
Table 11- 4 Operating mode transitions
No. Operating mode transitions
Effects
POWER ON
STARTUP
After switching on, the CPU switches to "STARTUP" mode if:
· The hardware configuration and program blocks are consistent.
· Startup type "Warm restart - RUN" is set.
or
· Startup type "Warm restart mode before POWER OFF" is set and the CPU was in RUN mode before POWER OFF.
The CPU clears the non-retentive memory, and resets the content of non-retentive DBs to the start values of the load memory. Retentive memory and retentive DB contents are retained.
The 500 newest entries in the diagnostics buffer are retained.
POWER ON
STOP
After switching on, the CPU goes to "STOP" mode if: The CPU clears the non-retentive
·
The hardware configuration and program blocks are inconsistent.
memory, and resets the content of non-retentive DBs to the start values of the load memory. Re-
or · Startup type "No restart" is set.
or · Startup type "Warm restart mode before POWER
tentive memory and retentive DB contents are retained.
The 500 newest entries in the diagnostics buffer are retained.
OFF" is set and the CPU was in STOP mode before
POWER OFF.
244
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.5 Operating modes
No. Operating mode transitions
Effects
STOP STARTUP The CPU switches to "STARTUP" mode if:
The CPU clears the non-retentive
·
The hardware configuration and program blocks are consistent.
memory, and resets the content of non-retentive DBs to the start values of the load memory. Re-
· You set the CPU to "RUN" mode via the program- tentive memory and retentive DB
ming device or the display and the mode switch in contents are retained.
is RUN position.
The 500 newest entries in the
or
diagnostics buffer are retained.
· You set the mode selector from STOP to RUN or press the operating mode button RUN.1)
STARTUP STOP In the following cases the CPU returns from
"STARTUP" to "STOP" mode when:
These operating mode transitions have no effect on data.
· The CPU detects an error during startup.
· You set the CPU to "STOP" via the programming device, display or mode selector switch / keys.1)
· The CPU executes a STOP command in the Startup OB.
STARTUP RUN In the following cases, the CPU goes from "STARTUP"
to "RUN" mode when:
· The CPU has initialized the PLC tags.
· The CPU has executed the startup blocks successfully.
RUN STOP
In the following cases the CPU returns from "RUN" back to "STOP" mode when:
· The CPU detects an error which prevents further work.
· The CPU executes a STOP command in the user program.
· You set the CPU to "STOP" via the programming device, display or mode selector switch / keys.1)
1) Standard, F-CPUs / compact CPUs from article number 6ES751x-xxx02-0AB0/6ES751x-1CK01-0AB0: You switch the mode using keys (RUN and STOP).
Automation system System Manual, 11/2019, A5E03461182-AF
245
Commissioning 11.6 CPU memory reset
11.6
CPU memory reset
Basics of a memory reset
The CPU must be in STOP mode for a memory reset.
A memory reset returns the CPU to its "initial state".
Memory reset means: An existing online connection between your programming device/PC and the CPU is
terminated. The content of the work memory and the retentive and non-retentive data are deleted
(with manual memory reset). The diagnostics buffer, time of day, and IP address are retained. Subsequently the CPU is initialized with the loaded project data (hardware configuration,
code and data blocks, force jobs). The CPU copies this data from the load memory to the work memory.
Result:
If you set an IP address in the hardware configuration ("Set IP address in the project" option) and a SIMATIC memory card with the project is in the CPU, this IP address is valid after the memory reset.
Data blocks no longer have current values but rather their configured start values.
Force jobs remain active.
Detecting a CPU memory reset
The RUN/STOP LED flashes yellow at 2 Hz. After completion, the CPU switches to STOP. The RUN/STOP LED is on (constant yellow light).
Result after memory reset
The following table provides an overview of the contents of the memory objects after memory reset.
Table 11- 5 Memory objects after memory reset
Memory object Actual values of the data blocks, instance data blocks Bit memories, timers and counters Retentive tags of technology objects (e.g. adjustment values of absolute encoders) Diagnostics buffer entries IP address Device name Counter readings of the runtime meters Time of day
Contents Initialized Initialized Retained
Retained Retained Retained Retained Retained
246
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.6 CPU memory reset
11.6.1
Automatic memory reset
Possible causes of automatic memory reset
The CPU executes an automatic memory reset if an error occurs that prevents normal further processing.
Examples of such errors:
User program is too large and cannot be loaded to the work memory in full.
The project data on the SIMATIC memory card are damaged, for example because a file was deleted.
You remove or insert the SIMATIC memory card. The backed-up retentive data differs in structure from the data in the configuration on the SIMATIC memory card.
11.6.2
Manual memory reset
Reason for manual memory reset
Memory reset is required to reset the CPU to the "original state".
CPU memory reset
Three options are available for performing a CPU memory reset: Using the mode selector switch / mode selector keys Using the display Using STEP 7
Automation system System Manual, 11/2019, A5E03461182-AF
247
Commissioning 11.6 CPU memory reset
Procedure using the mode selector
Note Memory reset Reset to factory settings The procedure described below also corresponds to the procedure for resetting to factory settings: · Selector operation with inserted SIMATIC memory card: CPU executes a memory reset · Selector operation without inserted SIMATIC memory card: CPU executes reset to factory
settings
To perform a memory reset of the CPU using the mode selector, follow these steps: 1. Set the mode selector to the STOP position.
Result: The RUN/STOP LED lights up yellow. 2. Set the mode selector to the MRES position. Hold the switch in this position until the
RUN/STOP LED lights up for the second time and remains continuously lit after three seconds. After this, release the selector. 3. Within the next three seconds, switch the mode selector back to the MRES position, and then back to STOP again. Result: The CPU executes memory reset. For information on resetting the CPU to factory settings, refer to the section Resetting the CPU to factory settings (Page 292).
Procedure using the mode selector keys (standard, F-CPUs / compact CPUs from article number 6ES751x-xxx02-0AB0/6ES751x-1CK01-0AB0)
Note Memory reset Reset to factory settings
The procedure described below also corresponds to the procedure for resetting to factory settings: · Key operation with inserted SIMATIC memory card: CPU executes a memory reset · Key operation without inserted SIMATIC memory card: CPU executes reset to factory
settings
To perform a memory reset of the CPU using the mode selector keys, follow these steps: 1. Press the STOP mode selector key.
Result: The STOP ACTIVE and RUN/STOP LED light up yellow. 2. Press the operating mode button STOP until the RUN/STOP LED lights up for the 2nd
time and remains continuously lit after three seconds. After this, release the key.
3. Press the STOP mode selector key again within the next three seconds.
Result: The CPU executes memory reset.
For information on resetting the CPU to factory settings, refer to the section Reset CPU to factory settings (Page 292).
248
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.7 Backing up and restoring the CPU configuration
Procedure using the display
To navigate to the desired "Memory reset" menu command, select the following sequence of menu commands and confirm after each selection with "OK". Settings Reset Memory reset Result: The CPU executes memory reset.
Procedure using STEP 7
To perform a memory reset of the CPU via STEP 7, follow these steps: 1. Open the "Online Tools" task card of the CPU. 2. Click the "MRES" button in the "CPU control panel" pane. 3. Click "OK" in response to the confirmation prompt. Result: The CPU is set to STOP mode and performs memory reset.
11.7
Backing up and restoring the CPU configuration
Backup from online device You may make changes in the operation of your plant. For example, you may add new devices, replace existing ones or adapt the user program. If these changes result in undesirable behavior, you can restore the plant to an earlier state. Before you download a changed configuration to the CPU, first use the option "Backup from online device" to create a complete backup of the current device state.
Upload from device (software) With the option "Upload from device (software)", you load the software project data from the CPU to an existing CPU in the project.
Upload device as new station If you are operating a new PG/PC in the plant, the STEP 7 project that was used to create the plant configuration might not be available. In this case, you can use the option "Upload device as new station" to load the data to a project in your PG/PC.
Snapshot of the monitor values To allow you to restore the actual values at a later date, back up the actual values of the data blocks using the option "Snapshot of the observed values".
Automation system System Manual, 11/2019, A5E03461182-AF
249
Commissioning 11.7 Backing up and restoring the CPU configuration
Overview of backup types
The table below shows the backup of CPU data depending on the selected type of backup and its specific characteristics:
Table 11- 6 Types of backup
Current values of all DBs (global and instance data blocks) 1 Blocks of the type OB, FC, FB and DB PLC tags (tag names and constant names) Technology objects Hardware configuration Actual values (bit memories, timers and counters)1 Content of the SIMATIC memory card Archives, recipes Entries in the diagnostics buffer Current time
Backup possible for fail-safe CPUs Backup can be edited Backup possible in operating mode
Backup from online device
Upload from device (software)
--
--
--
--
--
--
--
--
Properties of the type of backup
--
STOP
RUN, STOP
1 Only the values of the tags that are set as retentive are saved. 2 Contents of the DataLogs, Recipes and UserFiles folders
Upload device as new station
--
2
----
RUN, STOP
Snapshot of the monitor values
--
--
----
--
----
RUN, STOP
Example: Backup from online device
The following example shows how to carry out a complete backup of the current device state of the CPU in STEP 7. The S7-1500 automation system is in RUN mode. Before the backup, the CPU goes into STOP mode.
To start the backup, proceed as follows:
1. Right-click to select the CPU in the project tree.
2. Select the "Backup from online device" command from the shortcut menu. The "Upload preview" dialog window sets out the key information on the backup process to be run. For a backup you have to switch the CPU to the STOP mode.
3. In the "Action" column, select the "Stop module" command from the drop-down menu.
4. Click "Upload from device". The CPU changes to STOP mode. The backup of the CPU data starts. The backup is saved in the project tree in the folder of the CPU under "Online backups".
250
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.7 Backing up and restoring the CPU configuration
Example: Restoring a backup of an online device
If you have saved the CPU data beforehand, you can transfer the backup back to the device. The saved backup is then restored to the CPU.
The S7-1500 automation system is in RUN mode. Before the restoration, the CPU goes into STOP mode.
To start the backup restore, proceed as follows:
1. Open the CPU's folder in the project navigator. The lower-level objects are displayed.
2. Open the "Online backups" folder.
3. Select the backup you want to restore.
4. In the "Online" menu, select the "Download to device" command.
5. The "Load preview" dialog window sets out the key information on the restore process to be run. For a restoration you have to switch the CPU to the STOP mode.
6. In the "Action" column, select the "Overwrite" command from the drop-down menu.
7. Click "Download". The CPU changes to STOP mode. The backup is transferred to the CPU and restored. The "Load results" dialog then opens. In this dialog, you can check whether or not the loading operation was successful and take any further action that may be necessary (no action, start modules).
8. Click "Finish".
Reference
You can find additional information on the different backup methods in the STEP 7 online help.
Emergency address (Emergency IP)
The emergency address (emergency IP address) of a CPU is intended for diagnostic and download functions, e.g. when the CPU is no longer accessible via the IP protocol after a wrong project is downloaded. For information on the emergency address, please refer to the Communication (https://support.industry.siemens.com/cs/ww/de/view/59192925/en) function manual.
Automation system System Manual, 11/2019, A5E03461182-AF
251
Commissioning 11.7 Backing up and restoring the CPU configuration
Storage of multilingual project texts
When you configure a CPU, texts of different categories result, e.g.
Object names (names of blocks, modules, tags, etc.)
Comments (for blocks, networks, watch tables, etc.)
Messages and diagnostic texts
Texts are provided by the system, for example texts in the diagnostics buffer, or they are created during configuration, for example, messages.
Texts exist in the project in one language or, after a translation process, in multiple languages. You can maintain project texts in all languages available to you in the project tree (Languages & resources > Project texts). The texts produced when configuring can be downloaded to the CPU.
The following texts are downloaded in the selected languages with the project data to the CPU and are also used by the Web server/CPU display:
Diagnostics buffer texts (cannot be changed)
Status texts for the module status (cannot be changed)
Message texts with associated text lists
Tag comments and step comments for S7 GRAPH and PLC Code Viewer
Comments in watch tables
The following texts are also downloaded in the selected languages with the project languages to the CPU but are not used by the Web server/CPU display:
Comments in tag tables (for tags and constants)
Comments in global data blocks
Comments of elements in block interfaces of FBs, FCs, DBs and UDTs
Network titles in blocks written in LAD, FBD or STL
Block comments
Network comments
Comments of LAD and FBD elements
The S7-1500 CPUs support the storage of multilingual project texts in up to three different project languages. If the project texts for a project language nevertheless exceed the memory space reserved for them, the project cannot be downloaded to the CPU. The download is aborted with a notice that not enough memory space is available. In such a case, take measures to reduce the required storage space, for example by shortening comments.
You will find information on parameterization of multilingual project texts in STEP 7 in the STEP 7 online help.
252
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.8 Time synchronization
Size of files and size of the SIMATIC memory card
Note SIMATIC memory card Make sure that there is enough available storage space on your SIMATIC memory card for downloading projects. To download and back up projects, the project size and the size of the files on the SIMATIC memory card must be less than 2 GB. Do not manipulate any contents in the OMSSTORE directory on the SIMATIC memory card.
You can find information on reading out the memory usage of the CPU and the SIMATIC memory card in the Structure and Use of the CPU Memory (https://support.industry.siemens.com/cs/de/de/view/59193101/en) Function Manual.
11.8
Time synchronization
Introduction
All CPUs are equipped with an internal clock. The clock shows: The time of day with a resolution of 1 millisecond The date and the day of the week The CPU take into account the time change caused by daylight saving time. You can synchronize the time of the CPUs with an NTP server in NTP mode.
Principle of operation
In NTP mode, the device sends time queries at regular intervals (in client mode) to the NTP server in the subnet (LAN). Based on the replies from the server, the most reliable and most accurate time is calculated and the time of day on the CPU is synchronized. The advantage of this mode is that it allows the time to be synchronized across subnets. You can synchronize the time of day of up to a maximum of four NTP servers. You address a communications processor or an HMI device, for example, as sources for time synchronization via the IP addresses.
The update interval defines the interval between the time queries (in seconds). The value of the interval ranges between 10 seconds and one day. In NTP mode, it is generally UTC (Universal Time Coordinated) that is transferred. UTC corresponds to GMT (Greenwich Mean Time).
Automation system System Manual, 11/2019, A5E03461182-AF
253
Commissioning 11.8 Time synchronization
NTP server for the CPU S7-1500
You can assign up to 4 NTP servers to a CPU S7-1500. In STEP 7, you enable time synchronization using the NTP procedure. In STEP 7 you can configure up to four NTP servers for the CPU S7-1500. If you have enabled time synchronization via NTP for the CPU, then you can enter the IP addresses of up to four NTP servers in the user program. For this, use the "T_CONFIG" instruction.
Enabling time synchronization via NTP server
Proceed as follows to enable time synchronization via NTP server for the S7-1500 CPU: 1. Navigate in the Inspector window to the properties of the CPU to "General" > "PROFINET
interface" > Time synchronization". 2. Select the "Enable time synchronization via NTP server" option.
Configuring NTP server in STEP 7
To configure one or more NTP servers for the S7-1500 CPU, follow these steps: 1. Navigate in the Inspector window to the properties of the CPU to "General" > "PROFINET
interface" > Time synchronization". 2. Enter the IP addresses of up to 4 NTP servers at the parameters "Server 1" to "Server 4". 3. Set the time interval of the time queries at the parameter "Update interval". Set the
update interval to between 10 s and 86400 s.
Changing the IP addresses of the NTP servers with the "T_CONFIG" instruction
For the CPU, you can change the addresses of up to 4 NTP servers via the instruction T_CONFIG during runtime. Requirement: You have configured at least one NTP server in STEP 7. Even if you have only configured one NTP server, you can still configure up to four NTP servers in the T_CONFIG instruction. To change the IP addresses of the NTP servers with the T_CONFIG instruction, proceed as follows: 1. Store the IP addresses for the NTP servers in a tag of the data type IF_CONF_NTP. 2. Connect the tag of the data type IF_CONF_NTP to the block parameter CONF_DATA of
the instruction T_CONFIG. 3. Call the T_CONFIG instruction in the user program. Result: The CPU adopts the addresses of the NTP servers from the T_CONFIG instruction. The addresses of the NTP servers configured in STEP 7 are overwritten. If necessary, you can change the addresses of the NTP servers several times with T_CONFIG.
254
Automation system System Manual, 11/2019, A5E03461182-AF
Reference
Commissioning 11.8 Time synchronization
For additional information on time-of-day synchronization - time synchronization, refer to the following FAQ on the Internet (https://support.industry.siemens.com/cs/de/en/view/86535497).
11.8.1
Example: Configuring and changing NTP server
Configuring time synchronization with your own NTP server
Automation task You use your own server in your network. Your own server provides you with the following advantages: Protection against unauthorized accesses from outside
Every device that you synchronize with your own NTP server uses the same time.
You want to synchronize the S7-1500 CPU with this NTP server. Conditions and parameters You have your own server in your network with the IP address 192.168.1.15. You are in STEP 7 in the Inspector window in the properties of the PROFINET interface X1. Solution 1. Navigate to "Properties > General > PROFINET interface > Time synchronization > NTP
procedure".
2. In "Server 1:", enter the IP address of the NTP server: 192.168.1.15.
Figure 11-4 Example: Configuring the NTP server 3. Download the hardware configuration to the CPU. Result The S7-1500 synchronizes the time with the NTP server 192.168.1.15.
Automation system System Manual, 11/2019, A5E03461182-AF
255
Commissioning 11.8 Time synchronization
Changing the IP address of an NTP server in the user program
Automation task You change the NTP server in your network. The new NTP server has the address "192.168.1.10". You want to change the IP address of the NTP server with which your CPU is synchronized, via the user program. The example shows how you change the IP address of the NTP server to "192.168.1.10"via the user program with the instruction "T_CONFIG".
Conditions and parameters Requirement: You have activated the "Enable time synchronization via NTP server" option for your CPU
in STEP 7. You have configured the following NTP server in STEP 7: Server 1 "192.168.1.15" To change the IP addressed for NTP servers, use the following block parameter of the "T_CONFIG" instruction: Req: A positive edge at the block parameter "Req" starts a job of the "T_CONFIG"
instruction. Interface: Enter the HW ID of the PROFINET interface 1 of the CPU at the block
parameter "Interface". In this example, the HW ID is "64". Conf_Data: Area in which you save the IP addresses of the NTP server. Use the data
type "IF_CONF_NTP" for this purpose.
256
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.8 Time synchronization
Solution To change the IP address of the NTP server in the user program to "192.168.1.10", follow these steps: 1. Create a global data block in the project tree under "Program blocks > Add new block".
Name the global data block "NTP". 2. Create a tag of the data type "IF_CONF_NTP" in the global data block "NTP".
Figure 11-5 Example data block with IF_CONF_NTP
3. Create a "T_CONFIG" instruction in the user program. 4. Connect the "T_CONFIG" instruction as follows.
Figure 11-6 Example T_CONFIG: Change NTP server
Automation system System Manual, 11/2019, A5E03461182-AF
257
Commissioning 11.9 Identification and maintenance data
5. In the user program, assign the IP address 192.168.1.10 to the data type "IF_CONF_NTP":
"NTP".NTP_Server.NTP_IP[1].ADDR[1] := 192; "NTP".NTP_Server.NTP_IP[1].ADDR[2] := 168; "NTP".NTP_Server.NTP_IP[1].ADDR[3] := 1; "NTP".NTP_Server.NTP_IP[1].ADDR[4] := 10;
6. You change the IP address of the NTP server by generating a positive edge for the tag "change_NTP-Server" in the user program.
"NTP"."change_NTP-Server" := true;
Result The S7-1500 synchronizes the time with the NTP server 192.168.1.10.
11.9
Identification and maintenance data
11.9.1
Reading out and entering I&M data
I&M data
Identification and maintenance data (I&M data) is information saved on the module. The data is:
Read-only (I data) or
Readable/writable (M data)
Identification data (I&M0): Manufacturer information about the module that can only be read. Some identification data is also printed on the housing of the module, for example article number and serial number. Maintenance data (I&M1, 2, 3): Plant-specific information, for example installation location. Maintenance data for the S7-1500/ET 200MP is created during configuration and downloaded to the automation system/distributed I/O system.
All modules of the S7-1500/ET 200MP support identification data I&M0 through I&M3.
The I&M identification data supports you in the following activities:
Checking the plant configuration
Locating hardware changes in a plant
Correcting errors in a plant
Modules can be clearly identified online using the I&M identification data.
258
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.9 Identification and maintenance data
Options for reading out I&M data
Via the user program Using the display of the CPU Via STEP 7 or HMI devices Via the CPU web server
Reading I&M data via the user program
You have the following options for reading module I&M data in the user program:
Using the RDREC instruction
The data record structure for centrally inserted modules as well as for distributed modules that are accessible via PROFINET IO/PROFIBUS DP is described in the section Record structure for I&M data (Page 260).
Using the Get_IM_Data instruction
Reference
The description of the instructions can be found in the STEP 7 online help.
Reading I&M data from displays
To read the I&M data "Plant designation" or "Location identifier" of the CPU via the display, follow these steps: 1. Navigate to the "Overview/PLC" menu on the display of the CPU. 2. Select "Plant designation" or "Location identifier" and confirm with "OK".
To read the I&M data "Plant designation" or "Location identifier" of a centrally used module, follow these steps: 1. Navigate to the "Modules" menu on the display of the CPU. 2. Select the menu command "Local modules" and confirm with "OK". 3. Select the slot of the module (e.g., slot 3: DI 32 x 24VDC HF) and confirm with "OK". 4. Select the "Status" and confirm with OK. 5. Select "Plant designation" or "Location identifier" and confirm with "OK".
To read the I&M data "Plant designation" or "Location identifier" of a module used in distributed mode, follow these steps: 1. Navigate to the "Modules" menu on the display of the CPU. 2. Select the corresponding distributed I/O system (for example PROFINET IO system) and
confirm with "OK". 3. Select the corresponding device (for example ET 200SP-Station_1) and confirm with
"OK". 4. Select the slot of the module (e.g., slot 1: DI 16 x DC24V ST_1) and confirm with "OK". 5. Select the "Status" and confirm with OK. 6. Select "Plant designation" or "Location identifier" and confirm with "OK".
Automation system System Manual, 11/2019, A5E03461182-AF
259
Commissioning 11.9 Identification and maintenance data
Reading I&M data via STEP 7
Requirement: There must be an online connection to the CPU/interface module. To read I&M data using STEP 7, follow these steps: 1. In the project tree, select the CPU/the interface module. 2. Go to "Online & diagnostics". 3. In the "Diagnostics" folder, select the "General" area.
Enter maintenance data via STEP 7
STEP 7 assigns a default module name. You can enter the following information: Plant designation (I&M 1) Location identifier (I&M 1) Installation date (I&M 2) Additional information (I&M 3) To enter maintenance data via STEP 7, follow these steps: 1. In the device view of STEP 7, select the CPU/interface module or a module. 2. Go to properties, "General", and select the "Identification & Maintenance" area 3. Enter the data. During the loading of the hardware configuration, the maintenance data (I&M 1, 2, 3) are also loaded.
Procedure for reading I&M data via the Web server
The procedure is described in detail in the Web server Function Manual (http://support.automation.siemens.com/WW/view/en/59193560).
11.9.2
Record structure for I&M data
260
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.9 Identification and maintenance data
Reading I&M records via user program (centrally and distributed via PROFINET IO)
Use Read data record ("RDREC" instruction) to access specific identification data. Under the associated record index you obtain the corresponding part of the identification data.
The records are structured as follows:
Table 11- 7 Basic structure of data records with I&M identification data
Contents Header information BlockType
BlockLength
BlockVersionHigh BlockVersionLow Identification data Identification data (see table below)
Length (bytes)
2
2
1 1
I&M0/Index AFF0H: 54 I&M1/Index AFF1H: 54 I&M2/Index AFF2H: 16 I&M3/Index AFF3H: 54
Coding (hex)
I&M0: 0020H I&M1: 0021H I&M2: 0022H I&M3: 0023H I&M0: 0038H I&M1: 0038H I&M2: 0012H I&M3: 0038H 01 00
-
Table 11- 8 Record structure for I&M identification data
Identification data
Access
Identification data 0: (record index AFF0H)
VendorIDHigh
read (1 bytes)
VendorIDLow
read (1 bytes)
Order_ID
read (20 bytes)
Example
0000H 002AH 6ES7516-3AN00-0AB0
IM_SERIAL_NUMBER IM_HARDWARE_REVISION
read (16 bytes) read (2 bytes) 1
IM_SOFTWARE_REVISION · SWRevisionPrefix
read (1 byte)
· IM_SWRevision_Functional_ (1 byte) Enhancement
· IM_SWRevision_Bug_Fix
(1 byte)
· IM_SWRevision_Internal_ Change
(1 byte)
Firmware version V 0000H - 00FFH
0000H - 00FFH 0000H - 00FFH
Explanation
Vendor name (002AH = SIEMENS AG)
Part number of the module (e.g. CPU 1516-3 PN/DP) Serial number (device-specific) corresponds to hardware version (e.g. 1) Provides information about the firmware version of the module (e.g. V1.0.0)
Automation system System Manual, 11/2019, A5E03461182-AF
261
Commissioning 11.9 Identification and maintenance data
Identification data IM_REVISION_COUNTER
Access read (2 bytes)
IM_PROFILE_ID
read (2 bytes)
IM_PROFILE_SPECIFIC_TYPE read (2 bytes)
IM_VERSION · IM_Version_Major · IM_Version_Minor IM_SUPPORTED
read (1 byte) (1 byte) read (2 bytes)
Maintenance data 1: (Record index AFF1H)
IM_TAG_FUNCTION
read/write (32 bytes)
IM_TAG_LOCATION
read/write (22 bytes)
Maintenance data 2: (Record index AFF2H)
IM_DATE
read/write (16 bytes)
Maintenance data 3: (Record index AFF3H)
IM_DESCRIPTOR
read/write (54 bytes)
Example 0000H
0000 H 0001H 0003H 0101H
000EH
-
YYYY-MM-DD HH:MM
-
Explanation Provides information about parameter changes on the module (not used) Generic Device CPU I/O modules Provides information on the ID data version (0101H = Version 1.1)
provides information about the available identification and maintenance data (I&M1 to I&M3)
Enter an identifier for the module here, that is unique plant-wide. Enter the installation location of the module here.
Enter the installation date of the module here.
Enter a comment about the module here.
Reading I&M records with record 255 (distributed configuration via PROFIBUS)
Use Read data record ("RDREC" instruction) to access specific identification data.
The modules support standardized access to identification data using DR 255 (index 65000 to 65003). For additional information on the DR 255 data structure, refer to the specifications of the Profile Guidelines Part 1: Identification & Maintenance Functions - Order no.: 3.502, Version 1.2, October 2009.
262
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.9 Identification and maintenance data
11.9.3
Example: Read out firmware version of the CPU with Get_IM_Data
Automation task
You want to check whether the modules in your automation system have the current firmware. The firmware version of the modules can be found in the I&M0 data. The I&M0 data is the basic information for a device. The I&M0 data contains information, for example:
Manufacturer ID
Article number and serial number
Hardware and firmware version.
To read out the I&M0 data, use the "Get_IM_Data" instruction. You read the I&M0 data of all modules in the user program of the CPU with "Get_IM_Data" instructions and store the I&M data in a data block.
Conditions and parameters
To read out the I&M data of the CPU, use the following block parameters of the "Get_IM_Data" instruction:
LADDR: Enter the HW ID of the module at the block parameter "LADDR".
IM_TYPE: Enter the I&M data number (e.g. "0" for I&M 0 data) at the block parameter "IM_TYPE".
DATA: Area for storing the read I&M data (for example. in a global data block). Store the I&M0 data in an area of the data type "IM0_Data".
This example shows how to read out the I&M 0 data of a CPU 1511-1 PN (6ES7511-1AK000AB0). To read out the I&M 0 data of a different module, simply use the HW ID of the module at the parameter LADDR.
Solution
To read out the I&M 0 data of the CPU, follow these steps:
1. Create a global data block to store the I&M 0 data.
2. Create a structure of the data type "IM0_Data" in the global data block. You can assign any name to the structure ("imData") in this case.
Figure 11-7 Example: Data block for I&M data 3. Create the Insert the "Get_IM_Data" instruction in the user program, e.g. in OB 1.
Automation system System Manual, 11/2019, A5E03461182-AF
263
Commissioning 11.9 Identification and maintenance data
4. Connect the "Get_IM_Data" instruction as follows:
Figure 11-8 Example: Reading out I&M0 data 5. Call the "Get_IM_Data" instruction in the user program. Result The "Get_IM_Data" instruction has stored the I&M0 data in the data block. You can view the I&M0-Daten online in STEP 7, for example, in the data block with the "Monitor all" button. The CPU in the example is a CPU 1511-1 PN (6ES7511-1AK00-0AB0) with firmware version V1.5.
Figure 11-9 Example: I&M0 data of an S7-1500 CPU
264
Automation system System Manual, 11/2019, A5E03461182-AF
Commissioning 11.10 Shared commissioning of projects
11.10
Shared commissioning of projects
Team Engineering
In Team Engineering, several users from various engineering systems work on a project at the same time and access one S7-1500 CPU.
The users can edit separate parts of a master project independently of one another at the same time. The CPU show the changes of the other editors in a synchronization dialog during the loading of the configuration into the CPU and synchronizes the changes automatically, if possible.
Certain online functions can also be executed in parallel from several engineering systems on a shared CPU, such as:
Monitoring blocks on the CPU
Modifying blocks on the CPU
Trace functions
You can find detailed information on the topic of Team Engineering in the STEP 7 online help.
Automation system System Manual, 11/2019, A5E03461182-AF
265
CPU display
12
Introduction
The section below gives an overview of the mode of operation of the CPU display. Detailed information on the individual options, a training course and a simulation of the selectable menu items is available in the SIMATIC S7-1500 Display Simulator (https://support.industry.siemens.com/cs/ww/en/view/109761758).
Display
The S7-1500 CPU has a display and operating keys. The display of the CPU shows you the control and status information in different menus. You use operating keys to navigate through the menus and make a variety of settings in the process.
Benefits
The display of the CPU offers the following advantages:
Reduced downtimes through diagnostic messages in plain text
Tine saving during the commissioning, maintenance and downtime of the plant by changing interface settings (e.g. IP address) of CPU and connected CMs/CPs. No programming device is required.
Shorter downtimes due to read/write access to force tables and read/write access to watch tables. This allows the current values of the individual tags of a user program or a CPU to be monitored and changed by the monitoring and force tables. You can find additional information on the watch and force tables in the section Test functions and fault correction (Page 301) and in the STEP 7 online help.
On site, an image (backup copy) of the functioning plant can be
Backed up on the SIMATIC memory card of the CPU
Restored from the SIMATIC memory card of the CPU
You do not require an additional PG/PC.
For F-CPUs: Overview of status of safety mode and of F-parameters of F-CPU and F-I/O.
Password protection for the display
In the properties of the CPU, assign parameters for a password in STEP 7 for the display operation. Local access protection is thus protected via a local password.
266
Automation system System Manual, 11/2019, A5E03461182-AF
CPU display
Operating temperature for the display
To increase the service life of the display, the display switches off when the permitted operating temperature is exceeded. When the display has cooled down again, it switches on automatically again. When the display is switched off, the LEDs continue to show the status of the CPU.
Information about the temperatures at which the display switches off and back on again is available in the technical data of the manuals of the CPUs.
Display
The following figures show an example of a CPU with large display (left: for example, CPU 1516-3 PN/DP) and a CPU with small display (right: for example, CPU 1511-1 PN).
CPU status information Names of the menus Data display field Navigation aid, e.g. OK/ESC or the page number
Figure 12-1 Example views of the displays
Automation system System Manual, 11/2019, A5E03461182-AF
267
CPU display
Regarding : CPU status information
The following table shows the CPU status information that can be retrieved via the display.
Table 12- 1 CPU status information
Color and icons for the status data Green Orange
Red White
Meaning
RUN · STOP · STOP - firmware update FAULT · Connection established between CPU and display. Protection level configured.
· At least one interrupt is active in the CPU. · No SIMATIC memory card inserted in the CPU. · The serial number to which a know-how-protected block is
bound, does not match the serial number of the CPU or the SIMATIC memory card. · No user program loaded. Force job is active in the CPU.
F-capability activated. Safety operation active (for fail-safe CPUs) The symbol is grayed out when safety mode is deactivated.
Fail-safe CPU (for fail-safe CPUs).
268
Automation system System Manual, 11/2019, A5E03461182-AF
CPU display
Regarding : Names of the menus
The following table shows the available menus of the display.
Table 12- 2 Names of the menus
Main menu items
Meaning Overview
Diagnostics Settings
Description The "Overview" menu contains information about: · The properties of the CPU · The properties of the inserted SIMATIC memory card · Whether a know-how protection or a linking of the serial
number exists. The following information is displayed for F-CPUs: · The status of the safety mode · The collective signature · The date of the last changes
The "Diagnostics" menu includes: · The display of diagnostic messages. · Read/write access to force and watch tables. · Display of cycle time. · Display of CPU memory utilization. · Display of interrupts.
In the "Settings" menu you: · Assign the IP addresses and the PROFINET device name
of the CPU. · Set the network properties of each CPU interface. · Set the date, time, time zones, operating modes
(RUN/STOP) and protection levels. · Disable/enable display with display password · Perform a CPU memory reset. · Perform a reset to factory settings. · Format the SIMATIC memory card. · Delete the user program. · Back up/restore the CPU configuration to/from the
SIMATIC memory card. · View the status of the firmware update. · Convert the SIMATIC memory card into a program card
Automation system System Manual, 11/2019, A5E03461182-AF
269
CPU display
Main menu items
Meaning Modules
Display
Description
The "Modules" menu contains information about the central and distributed modules that are used in your configuration.
Peripherally deployed modules are connected to the CPU via PROFINET and/or PROFIBUS.
You can set the IP addresses for the CPU or a CP/CM here.
Fail-safe parameters are displayed for F-modules.
In the "Display" menu you can configure settings related to the display, such as language setting, brightness and energysaving mode. The energy-saving mode dims the display. The standby mode selectors the display off.
Menu icons
The following table shows the icons that are displayed in the menus.
Table 12- 3 Menu icons
Icon
Meaning
Editable menu item.
Select the desired language here.
A message is available in the next lower level page.
There is an error in the next lower level page.
The marked module is not accessible.
Navigate to the next lower level page.
In edit mode you make the selection using two arrow keys: · Down/up: jumps to the selection or is used to select the desired digits/options. In edit mode you make the selection using four arrow keys: · Down/up: jumps to the selection or is used to select the desired digits. · Left/right: jumps one spot forward or backward. The alarm is not yet acknowledged.
The alarm is acknowledged.
270
Automation system System Manual, 11/2019, A5E03461182-AF
CPU display
Control keys
You operate the display using the following keys:
Four arrow keys: "up", "down", "left", "right" If you press and hold an arrow key for 2 seconds, this generates an automatic scroll function.
One ESC key
One OK key
Figure 12-2 Control keys
Note If the display is in energy-saving mode or in standby mode, you can exit this mode by pressing any key.
Functions of the "OK" and "ESC" keys
For menu commands in which an entry can be made: OK valid access to the menu command, confirmation of input, and exit from the edit mode ESC Restore original content (changes are not saved) and exit edit mode
For menu commands in which no entry can be made: OK to next submenu command ESC back to previous menu command
Hold ESC for about 3 seconds on any screen of the display. Result: You automatically return to the home page.
Automation system System Manual, 11/2019, A5E03461182-AF
271
CPU display
Tooltips
Some of the values shown on the display can exceed the available display width. The values in question include:
Station name
Plant designation
Location identifier
PROFINET device name
The available display width is frequently exceeded on CPUs with small displays.
If you focus on the relevant value on the display and press the "Left" arrow key, a tooltip appears. The tooltip shows the name of the value in complete length. To hide the tooltip again, press the "Left" arrow key again or the "ESC" key.
Figure 12-3 Tooltip function
272
Automation system System Manual, 11/2019, A5E03461182-AF
CPU display
Uploading image to the display via STEP 7
In the STEP 7 device view, you download an image from your file system to the CPU display with the "Display > User-defined logo" function.
Figure 12-4 Uploading image to CPU
To display the uploaded image in the correct aspect ratio, use images with the following dimensions depending on the CPU.
Table 12- 4 Dimensions
CPU
CPU 1511(F)-1 PN CPU 1511C-1 PN CPU 1511T(F)-1 PN
CPU 1512C-1 PN
CPU 1513(F)-1 PN
CPU 1515(F)-2 PN CPU 1515T(F)-2 PN
CPU 1516(F)-3 PN/DP CPU 1516T(F)-3 PN/DP
CPU 1517(F)-3 PN/DP CPU 1517T(F)-3 PN/DP
CPU 1518(F)-4 PN/DP CPU 1518(F)-4 PN/DP MFP
Dimensions 128 x 120 pixels
128 x 120 pixels 128 x 120 pixels 240 x 260 pixels 240 x 260 pixels 240 x 260 pixels 240 x 260 pixels
Supported formats Bitmap, JPEG, GIF, PNG
Bitmap, JPEG, GIF, PNG Bitmap, JPEG, GIF, PNG Bitmap, JPEG, GIF, PNG Bitmap, JPEG, GIF, PNG Bitmap, JPEG, GIF, PNG Bitmap, JPEG, GIF, PNG
If the uploaded image exceeds the specified dimensions, the display shows only part of the image. The "Adapt logo" option in STEP 7 allows you to reduce the image to the specified dimensions. However, note that the original aspect ratio of the image is not retained in such cases.
Displaying image on the display
To display the uploaded image on the display of the CPU, press the ESC key in the main screen of the display. When you upload an image and are in the main screen, the display automatically shows the image after 60 seconds. To hide the image again, press any key on the display.
Automation system System Manual, 11/2019, A5E03461182-AF
273
CPU display
Available language settings
You can set the following languages separately for menu and message texts: Chinese German English French Italian Japanese Korean Portuguese (Brazil) Russian Spanish Turkish You select the required language directly at the display in the "Display" menu or in STEP 7 in the hardware configuration of the CPU under User interface languages". To display message texts on the display, follow these steps: 1. Download the message texts to the CPU as a software component.
To do so, select the "Consistent download" option under "Text libraries" in the "Load preview" dialog.
2. You set the project language you would like to be displayed as the interface language by means of parameter assignment. To do so, select a CPU and navigate to the "Multiple languages" area ("Properties > General > Multilingual support") in the Inspector window. Assign the required project languages to the interface languages.
Reference
Important information/special requirements for the display of F-CPUs can be found in Product Information F-CPUs S7-1500 (https://support.industry.siemens.com/cs/ww/de/view/109478599/en)
274
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance
13
13.1
Removing and inserting I/O modules
Requirement
Remove or insert front connectors and I/O modules only when the voltage is switched off.
NOTICE
Physical damage can occur
If you install or uninstall front connectors and/or I/O modules with switched-on voltage, this can lead to undefined conditions in your plant.
The S7-1500 automation system/ET 200MP distributed I/O system may be damaged as a result.
Therefore only install/uninstall front connectors and/or I/O modules with switched-off voltage.
Therefore during the planning of a plant always make sure to comply with the necessary, pertinent standards and safety guidelines.
Automation system System Manual, 11/2019, A5E03461182-AF
275
Maintenance 13.2 Replacing the display/front cover
13.2
Replacing the display/front cover
Replace display (Standard, F-CPUs / Compact CPUs from article number 6ES751x-xxx02-0AB0/6ES751x-1CK01-0AB0)
The display is pluggable. You can remove or replace the display during operation (RUN). Removing or replacing of the display does not have any influence on the running CPU.
To remove the display from the CPU, follow these steps: 1. Flip the front cover up. 2. Press with a 3.5 mm screwdriver from the front into the unlatching mechanism of the
display. This is found in the middle directly above the display. 3. Press the screwdriver lightly from above and lever out the display from the support. 4. Remove the display in an upward direction. 5. You have removed the display. 6. Place the new display in the CPU and press the display firmly in the top area until it
audibly engages. 7. Flip the front cover down into place.
The figure below shows an example of the operation at the CPU 1511-1 PN.
Figure 13-1 Remove display
WARNING Personal injury or material damage can occur in zone 2 hazardous areas Personal injury or material damage can occur in hazardous are zone 2 if you remove or fit the display while the S7-1500 automation system is running. Before you remove or fit the display, always switch off the power supply to the S7-1500 automation system in hazardous area zone 2.
276
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.2 Replacing the display/front cover
Exchanging the front cover
The front cover is pluggable. If necessary, you can take off the front cover or replace the front cover during runtime (RUN). Removing or replacing the front cover does not affect the CPU in operation. To remove the front cover from the CPU, follow these steps: 1. Flip up the front cover until the front cover stands at a 90° angle to the front of the
module. 2. In the top section of the front cover, press on the anchor(s). At the same time, pull the
front cover toward you and off. 3. Insert the new front panel (at a 90° angle to the module) from the front into the anchor(s)
until they audibly engage. 4. Flip the front cover down into place. The figure below shows an exemplary view of the CPU 1516-3 PN/DP.
Fasteners for removing and fitting the front panel
Figure 13-2 Removing and fitting the front panel
WARNING Personal injury or material damage can occur in zone 2 hazardous areas Personal injury or material damage can occur in hazardous are zone 2 if you remove or fit the front panel while the S7-1500 automation system is running. Before you remove or fit the front panel, always switch off the power supply to the S7-1500 automation system in hazardous area zone 2.
Automation system System Manual, 11/2019, A5E03461182-AF
277
Maintenance 13.3 Replacement of I/O modules and front connectors
13.3
Replacement of I/O modules and front connectors
13.3.1
Coding element on the I/O module and on the front connector
Function
All front connectors for the I/O modules of the S7-1500 automation system/ET 200MP distributed I/O system are identical. The coding element prevents a front connector from being inserted on a module with a different electrical pin assignment.
Delivery state of the I/O module
In the delivery state, the coding element is located in the I/O module.
Figure 13-3 Coding element in the I/O module (delivery condition)
278
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.3 Replacement of I/O modules and front connectors
Coding element in the front connector
When the front connector is inserted into the I/O module for the first time, one half of the coding element latches into the front connector. When you remove the front connector from the I/O module, this half of the coding element remains in the front connector, while the other half remains in the I/O module.
Figure 13-4 Coding element in the I/O module/front connector
You can insert a coded front connector on modules with the same electrical pin assignment. Refer to section Application planning (Page 90).
NOTICE Physical damage can occur If the coding element is changed or removed, it will be possible to insert the front connector on modules in which the electrical connection is not properly wired. This can destroy the module and/or the connected sensors and actuators. Even hazardous plant states are possible. Do not change the coding element unless you want to use the front connector on a different module and you change the process wiring accordingly.
Use cases for replacing the coding element
Replacing an I/O module, for example, due to a defect or incorrect configuration Replacing a front connector
Automation system System Manual, 11/2019, A5E03461182-AF
279
Maintenance 13.3 Replacement of I/O modules and front connectors Additional electronic coding element for fail-safe modules
In as-delivered condition, a fail-safe module not only has a mechanical coding element but also an electronic rewritable memory for the PROFIsafe address.
Electronic coding element
Figure 13-5 F-module with electronic coding element (as delivered)
280
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.3 Replacement of I/O modules and front connectors
When the front connector is inserted in the F-module, the electronic coding element engages completely in the front connector. If you remove the front connector from the F-module, the memory with the PROFIsafe address of the fail-safe module remains in the front connector.
Electronic coding element
Figure 13-6 Front connector with electronic coding element
13.3.2
Replacing an I/O module
Introduction
When the front connector is first inserted into the I/O module, a part of the coding element clips onto the front connector.
In the case of fail-safe modules, the electronic coding element with the PROFIsafe address of the F-module also engages completely in the front connector.
When you replace an I/O module with the same type of module, the correct coding element or coding elements in the case of F-modules are already present in the front connector.
Result: Before inserting the previous front connector, you must remove the coding element or coding elements from the new I/O module.
Automation system System Manual, 11/2019, A5E03461182-AF
281
Maintenance 13.3 Replacement of I/O modules and front connectors
Procedure
To replace the I/O module, follow these steps:
The I/O module to be replaced is uninstalled. You can find information on removing the I/O module in section Installing I/O modules (Page 127).
1. For a new I/O module, use a screwdriver to break out the half of the mechanical coding element that is designated for the front connector.
Note
The arrangement of the mechanical coding element depends on the module type: First, check the position of the coding element on the front connector before you break out the matching half from the I/O module.
For a new fail-safe module you must also remove the electronic coding element from the F-module.
Figure 13-7 Breaking the coding element out of the I/O module
2. Insert the existing front connector into the new I/O module (same module type) until your hear it click into place.
282
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.3 Replacement of I/O modules and front connectors
13.3.3
Replacing a front connector
Introduction
When the front connector is first inserted into the I/O module, a part of the mechanical coding element engages on the front connector.
In the case of fail-safe modules, the electronic coding element with the PROFIsafe address of the F-module also engages completely in the front connector.
When you replace a defective front connector with a new front connector, you must transfer the coding element(s) to the new front connector.
Procedure
You have already removed the front connector from the module and loosened the wiring. If you are using the front connector for an analog module, you also need to remove the power supply element and shield element. Proceed as follows to replace the front connector:
1. Carefully remove the mechanical coding element from the front connector. Take care not to damage the coding element.
Figure 13-8 Removing the mechanical coding element from the front connector
Note The coding elements are dependent on the module type. 2. Insert the removed mechanical coding element into the new front connector.
Figure 13-9 Inserting the mechanical coding element into a new front connector
Automation system System Manual, 11/2019, A5E03461182-AF
283
Maintenance 13.3 Replacement of I/O modules and front connectors
3. Additionally for F-modules: Carefully remove the electronic coding element from the front connector. Take care not to damage the coding element. Insert the removed electronic coding element into the new front connector.
Figure 13-10 Removing the electronic coding element from the front connector and inserting it into a new front connector
4. Insert the new front connector into the existing I/O module, until your hear it click into place.
5. Wire the new front connector.
284
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.4 Replacing the coding element at the power connector of the system power supply and load current supply
13.4
Replacing the coding element at the power connector of the system
power supply and load current supply
Introduction
The coding consists of a 2-part coding element. Ex factory a part of the coding element is inserted into the back side of the power connector. The other part is firmly inserted in the system power supply or load power supply. This prevents the insertion of a power connector of a system power supply or load power supply into a module of a different type.
DANGER Do not manipulate the coding element, or leave it off · Changing or replacing the coding element can result in dangerous system states. · To avoid damage, do not change or replace the coding element. · You must not remove the coding element.
Replacement parts scenario
Insertion of the coding element into a new power connector in the case of a replacement part.
DANGER Dangerous voltage When installing the coding element, you must take into account the supply voltage of the system power supply and load power supply: 24 V DC, 24/48/60 V DC or 120/230 V AC/DC Only install the coding element with switched-off voltage. You must insert the coding element in such a way that the power connector matches the power supply module in terms of voltage.
Automation system System Manual, 11/2019, A5E03461182-AF
285
Maintenance 13.4 Replacing the coding element at the power connector of the system power supply and load current supply
Procedure
To replace the coding element on the power connector of the system power supply and load current supply, follow these steps:
1. Orient yourself using the labeling on the power cable connection.
Figure 13-11 Labeling on the power connector
2. Orient yourself using the red marking on the coding element.
3. The coding element has 3 red markings. Turn the coding element in such a way that one of the 3 red markings corresponds to the voltage indicated on the connector.
4. Insert the coding element into the back side of the power cable connector, until you hear it click into place. The figure below shows you how to insert a coding element into a power cable connector for 24 V DC.
Figure 13-12 Inserting a coding element into a power connector
286
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.5 Firmware update
13.5
Firmware update
Introduction
Update the firmware of the CPU/interface module, display and the I/O modules using firmware files. The retentive data is retained after the execution of the firmware update.
Requirement
You have downloaded the data/files for the firmware update from Siemens Industry Online Support (https://support.industry.siemens.com/cs/ww/en/ps).
On this web site, select:
For the S7-1500 automation system: Automation Technology > Automation Systems > Industrial Automation Systems SIMATIC > Controllers > SIMATIC S7 Advanced Controller SIMATIC S7 > SIMATIC S7-1500.
For the ET 200MP distributed I/O system: Automation Technology > Automation Systems > Industrial Automation Systems SIMATIC > SIMATIC ET 200 I/O systems > ET 200 systems for the cabinet > ET 200MP.
Figure 13-13 Product tree using the S7-1500 as an example:
Automation system System Manual, 11/2019, A5E03461182-AF
287
Maintenance 13.5 Firmware update
From this position, navigate to the specific type of module that you want to update. To continue, click on the "Software downloads" link under "Support". Save the desired firmware update files. Before installing the firmware update, make sure that the modules are not being used.
Figure 13-14 Selecting the software downloads
Additional requirement for fail-safe modules
WARNING Check the firmware version for F-approval When using a new firmware version, always check that the version is approved for use in the respective module. The attachments of the certificate (http://support.automation.siemens.com/WW/view/en/49368678/134200) for SIMATIC Safety specify which firmware version is approved.
288
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.5 Firmware update
Options for the firmware update
There are the following options for performing a firmware update: Online in STEP 7 via Online & Diagnostics Online in STEP 7 via accessible devices (PROFINET) Via SIMATIC memory card: for CPU, display, and all centrally inserted modules Via the integrated Web server Online via the SIMATIC Automation Tool The table below gives an overview of the various options for a firmware update.
Table 13- 1 Overview of firmware update options
Firmware update
CPU
STEP 7 (V12 or higher)
Accessible devices
SIMATIC memory card
Web server of the CPU
SIMATIC Automation Tool
Central I/O module Interface module
--
Distributed I/O module --
Installation of the firmware update
WARNING Impermissible plant states possible The CPU switches to STOP mode or the interface module to "station failure" as a result of the firmware update being installed. STOP or station failure can have an adverse effect on the operation of an online process or a machine. Unexpected operation of a process or a machine can lead to fatal or severe injuries and/or to material damages. Ensure before installing the firmware update that the CPU is not controlling any active process.
Automation system System Manual, 11/2019, A5E03461182-AF
289
Maintenance 13.5 Firmware update
Procedure: online in STEP 7 via Online & diagnostics
Requirement: There is an online connection between the CPU/module and PG/PC. Proceed as follows to perform an online firmware update via STEP 7: 1. Select the module in the device view. 2. Select the "Online & diagnostics" menu command from the shortcut menu. 3. In the "Functions" folder, select the "Firmware update" group.
For a CPU, you can select whether you want to update the CPU or the CPU's display. 4. Click the "Browse" button to select the firmware update files in the "Firmware update"
area. 5. Select the matching firmware file. The table in the firmware update area lists all modules
for which an update is possible with the selected firmware file. 6. Click the "Run update" button. If the module can interpret the selected file, the file is
downloaded to the module. If you must change the CPU mode, STEP 7 prompts you to do so with dialogs.
Updating the firmware The "Run firmware after update" check box is always selected. After a successful loading process the CPU includes imports the firmware and subsequently operates with the new firmware.
Note If a firmware update is interrupted, you need to remove and insert the module before starting the firmware update again.
Procedure: online in STEP 7 via accessible devices
To perform a firmware update online via accessible devices, follow these steps: 1. From the "Online menu, select the "Accessible devices" menu item. 2. In the Accessible devices dialog, search for the accessible devices for the selected
PROFINET interface. 3. To go to a device in the project tree, select the desired device from the list of accessible
devices and click the "Show" button. 4. In the project tree, select the "Online & diagnostics" option of the relevant device and
perform the firmware update under the category Functions/Firmware Update (CPU, Display, Local modules).
290
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.5 Firmware update
Procedure via the SIMATIC memory card
Proceed as follows perform a firmware update via the SIMATIC memory card:
1. Insert a SIMATIC memory card into the SD card reader of your PG/PC.
2. To store the update file on the SIMATIC memory card, select the SIMATIC memory card in the "Card Reader/USB memory" folder in the project tree.
3. Select the "Card Reader/USB memory > Create firmware update memory card" command in the "Project" menu.
4. Use a file selection dialog to navigate to the firmware update file. In a further step you can decide whether you are deleting the content of the SIMATIC memory card or adding the firmware update files to the SIMATIC memory card.
5. Insert the SIMATIC memory card with the firmware update files into the CPU.
The firmware update begins shortly after the SIMATIC memory card has been plugged.
The display indicates that the CPU is in STOP mode, and that a firmware update is being executed: "STOP - FW UPDATE". The display shows the progress of the firmware update. The CPU shows any errors that occur during the firmware update on the display.
The display shows a results screen after the completion of the firmware update.
6. Remove the SIMATIC memory card after the firmware update is complete. The RUN LED on the CPU lights up in yellow and the MAINT LED flashes yellow. If you subsequently wish to use the SIMATIC memory card as a program card, leave the SIMATIC memory card in the CPU. To do so, after completion of the firmware update, select the "Convert memory card" menu item on the display.
Alternatively, you can convert the SIMATIC memory card to a program card via STEP 7.
Note
If your hardware configuration contains several modules, the CPU updates all affected module in the slot sequence, i.e. in ascending order of the module position in the STEP 7. device configuration.
Note Memory size of the SIMATIC memory card
If you perform a firmware update via the SIMATIC memory card, you must use a large enough card based on the CPU used and the associated I/O modules.
Check the specified file sizes of the update files when downloading them from Siemens Industry Online Support. The file size information is especially important when you perform the firmware update not only for the CPU but also, e.g., for the associated I/O modules, communication modules. The total size of the update files must not exceed the available memory size of your SIMATIC memory card.
You can find more information on the capacity of SIMATIC memory cards in the section Accessories/spare parts (Page 336) and in the function manual Structure and use of the CPU memory (https://support.industry.siemens.com/cs/de/en/view/59193101).
Automation system System Manual, 11/2019, A5E03461182-AF
291
Maintenance 13.6 Reset to factory settings
Procedure: via the integrated Web server
The procedure is described in the Web server (http://support.automation.siemens.com/WW/view/en/59193560) Function Manual.
Procedure: online via the SIMATIC Automation Tool
The procedure is described in the SIMATIC Automation Tool (https://support.industry.siemens.com/cs/ww/en/view/98161300) manual (included in the SIMATIC Automation Tool).
Special feature at a firmware update of analog modules
When you carry out a firmware update for analog modules, you have to supply 24 V DC load supply to the module through the infeed element.
Behavior after the firmware update
After the firmware update, check the firmware version of the updated module.
Reference
For additional information on the topic of firmware update, refer to the STEP 7 online help and the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/89257657).
13.6
Reset to factory settings
13.6.1
Resetting the CPU to factory settings
Introduction
"Reset to factory settings" restores the CPU to its delivery state. The function deletes all information that was stored internally on the CPU.
Recommendation:
Switch the CPU to its as-delivered condition if:
You remove a CPU and use it elsewhere with a different program.
You store the CPU.
When resetting to factory settings, remember that the IP address parameters are also deleted.
292
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.6 Reset to factory settings
Options for resetting a CPU to factory settings
To reset the CPU to its delivery state, follow these steps: Using the mode selector switch / mode selector keys Using the display Using STEP 7 Using the SIMATIC Automation Tool
Procedure using the mode selector
Make sure that the CPU is in STOP operating state: The CPU display indicates the STOP operating mode. The RUN/STOP LED lights up yellow.
Note Reset to factory settings Memory reset The procedure described below corresponds to the procedure for a memory reset: · Selector operation with inserted SIMATIC memory card: CPU executes a memory reset · Selector operation without inserted SIMATIC memory card: CPU executes reset to factory
settings
Restore the factory settings of the CPU as follows: 1. Set the mode selector to the STOP position.
Result: The RUN/STOP LED lights up yellow. 2. Remove the SIMATIC memory card from the CPU. Wait until the RUN/STOP LED stops
flashing. 3. Set the mode selector to the MRES position. Hold the mode selector in this position until
the RUN/STOP LED lights up for the second time and remains lit (this takes three seconds). After this, release the selector. 4. Within the next three seconds, switch the mode selector back to the MRES position, and then back to STOP again. Result: The CPU executes a "Reset to factory settings", during which time the RUN/STOP LED flashes yellow. When the RUN/STOP LED lights up yellow, then the CPU has been reset to factory settings, and is in the STOP mode. The "Reset to factory settings" event is entered into the diagnostics buffer.
Note The IP address of the CPU is also deleted when the CPU is reset to the factory settings through the mode selector.
Automation system System Manual, 11/2019, A5E03461182-AF
293
Maintenance 13.6 Reset to factory settings
Procedure using the mode selector keys (standard, F-CPUs / compact CPUs from article number 6ES751x-xxx02-0AB0/6ES751x-1CK01-0AB0)
Make sure that the CPU is in STOP mode (the CPU display shows STOP mode or RUN/STOP LED lights up yellow).
Note Reset to factory settings Memory reset The procedure described below also corresponds to the procedure for a memory reset: · Key operation with inserted SIMATIC memory card: CPU executes a memory reset · Key operation without inserted SIMATIC memory card: CPU executes reset to factory
settings
Perform a reset to factory settings as follows: 1. Press the STOP mode selector key.
Result: The STOP-ACTIVE and RUN/STOP LED light up yellow. 2. Press the STOP operating mode button until the RUN/STOP LED lights up for the 2nd
time and remains continuously lit (this takes three seconds). After this, release the key. 3. Press the STOP mode selector key again within the next three seconds. Result: The CPU executes a "Reset to factory settings", during which time the RUN/STOP LED flashes yellow. When the STOP-ACTIVE and RUN/STOP LED light up yellow, then the CPU has been reset to factory settings, and is in the STOP mode. The "Reset to factory settings" event is entered into the diagnostics buffer.
Note The IP address of the CPU is also deleted when the CPU is reset to the factory settings using the mode selector keys.
294
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.6 Reset to factory settings
Procedure using the display
Make sure that the CPU is in STOP operating state: The CPU indicates STOP mode. The RUN/STOP LED lights up yellow. To reach the desired menu command, "Factory setting", select the following sequence of menu commands. Confirm with "OK" after each selection. Settings Reset Factory settings Result: The CPU executes a "Reset to factory settings", during which time the RUN/STOP LED flashes yellow. When the RUN/STOP LED lights up yellow, then the CPU has been reset to factory settings, and is in the STOP mode. The "Reset to factory settings" event is entered into the diagnostics buffer.
Note The IP address of the CPU is also deleted when the CPU is reset to the factory settings through the display.
Procedure using STEP 7
To reset a CPU to factory settings via STEP 7, follow these steps: Make sure that there is an online connection to the CPU. 1. Open the Online and Diagnostics view of the CPU. 2. In the "Functions" folder, select the "Reset to factory settings" group. 3. If you want to keep the IP address, select the "Keep IP address" option button. If you
want to delete the IP address, select the "Delete IP address" option button.
Note "Delete IP address" deletes all IP addresses, regardless of how you established the online connection. If a SIMATIC memory card is inserted, selecting the "Delete IP address" option has the following effect: · The IP addresses are deleted and the CPU is reset to factory settings. · The existing configuration (including IP address) on the SIMATIC memory card is then
loaded into the CPU. If no configuration is stored (e.g. after the SIMATIC memory card has been erased or formatted), no new IP address is assigned.
4. Click the "Reset" button. 5. Click "OK" in response to the confirmation prompts. Result: The CPU executes a "Reset to factory settings", during which time the RUN/STOP LED flashes yellow. When the RUN/STOP LED lights up in yellow, the CPU has been reset to factory settings and is in the STOP operating state. The "Reset to factory settings" event is entered into the diagnostics buffer.
Automation system System Manual, 11/2019, A5E03461182-AF
295
Maintenance 13.6 Reset to factory settings
Procedure using the SIMATIC Automation Tool
The procedure is described in the SIMATIC Automation Tool (https://support.industry.siemens.com/cs/ww/en/view/98161300) manual (included in the SIMATIC Automation Tool).
Result after resetting to factory settings
The following table provides an overview of the contents of the memory objects after the reset to factory settings.
Table 13- 2 Result after resetting to factory settings
Memory object Actual values of the data blocks, instance data blocks Bit memories, timers and counters Retentive tags of technology objects (e.g. adjustment values of absolute encoders) Entries in the diagnostics buffer IP address
Contents Initialized Initialized Initialized
Initialized Depends on the procedure: · Using mode switch: is deleted · Using display: is deleted · Using STEP 7: Depending on the setting of the
"Keep IP address"/"Delete IP address" option buttons
Device name Counter readings of the runtime meters Time of day
Set to "CPU" Initialized Is set to "00:00:00, 01.01.2012"
If a SIMATIC memory card was inserted prior to the reset to factory settings in the CPU, the CPU downloads the configuration contained on the SIMATIC memory card (hardware and software). A configured IP address is then valid again.
Reference
Additional information on "Reset to factory settings" can be found in the Function Manual Structure and use of the CPU memory (http://support.automation.siemens.com/WW/view/en/59193101) in the section on memory areas and retentivity, and in the online help for STEP 7. For information on the memory reset of the CPU, refer to the section CPU memory reset (Page 246).
296
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.6 Reset to factory settings
13.6.2
Resetting interface module (PROFINET IO) to factory settings
Introduction
The interface module can be reset to its factory state using "Reset to factory settings".
Method of resetting an interface module to factory settings
Via STEP 7 (online via PROFINET IO)
Procedure using STEP 7
To reset an interface module to factory settings via STEP 7, follow these steps:
Make sure that an online connection to the interface module exists. 1. Open the online and diagnostics view of the interface module. 2. In the "Functions" folder, select the "Reset to factory settings" group. 3. Click the "Reset" button. 4. Click "OK" in response to the confirmation prompts.
Result: The interface module then performs a "Reset to factory settings".
Result after resetting to factory settings
Table 13- 3 Properties of the interface module when shipped
Properties Parameter IP address Device name MAC address I&M data
Firmware version
Value Default setting Not present Not present Present Identification data (I&M0) present Maintenance data (I&M1, 2, 3) reset Present
Note Failure of downstream stations is possible
Stations downstream from the interface module can fail when the factory settings are restored on an interface module.
Note Substitute value behavior of the installed I/O modules during reset to factory settings
The I/O modules in the station do not have the configured status after a "reset to factory settings". The interface module does not acquire any input data and does not output any output data.
Automation system System Manual, 11/2019, A5E03461182-AF
297
Maintenance 13.7 Fault reactions with fail-safe modules
Reference
You will find more information on the procedure in the STEP 7 online help.
13.7
Fault reactions with fail-safe modules
Safe state (safety concept)
The basic principle behind the safety concept is the existence of a safe state for all process variables.
Note For fail-safe input and output modules, this safe state is the value "0".
Fault reactions and startup of the F-system
The safety function requires that substitute values (safe state) be output instead of process values for a fail-safe module (passivation of the fail-safe module) in the following cases:
When the F-system is started up
If errors are detected during safety-related communication between the F-CPU and the Fmodule via the PROFIsafe safety protocol (communication error)
If fail-safe I/O faults or channel faults are detected (e.g., wire break, discrepancy error)
Detected faults are written to the diagnostic buffer of the F-CPU and communicated to the safety program in the F-CPU.
F-modules cannot save errors as retentive data. When the system is powered down and then restarted, any faults still existing are detected again during startup. However, you have the option of saving faults in your safety program.
WARNING
Channel faults do not trigger any diagnostic reactions or error handling for channels that have been set to "deactivated" in STEP 7, even if this channel is affected indirectly by a channel group fault (channel parameter "activated/deactivated").
298
Automation system System Manual, 11/2019, A5E03461182-AF
Maintenance 13.7 Fault reactions with fail-safe modules
Remedying faults in the F-system
To remedy faults in your F-system, follow the procedure described in IEC 61508-1:2010 section 7.15.2.4 and IEC 61508-2:2010 section 7.6.2.1 e. The following steps must be performed: 1. Diagnostic and repair of the fault 2. Revalidation of the safety function 3. Recording in the service report
Fail-safe value output for F-modules
In the case of F-modules with inputs, if there is passivation, the F-system provides substitute values (0) for the safety program instead of the process data pending at the fail-safe inputs. In the case of F-modules with outputs, if there is passivation, the F-system transfers substitute values (0) to the fail-safe outputs instead of the output values provided by the safety program. The output channels are de-energized. This also applies when the F-CPU goes into STOP mode. The parameter assignment of fail-safe values is not possible. Substitute values are used either for the relevant channel only or for all channels of the relevant fail-safe module, depending on: The F-system used The type of fault that occurred (fail-safe I/O fault, channel fault or communication error) The parameter assignment of the F-module
Reintegration of a fail-safe module
The system changes from fail-safe to process values (reintegration of an F-module) either automatically or only after user acknowledgment in the safety program. If channel faults occur, it may be necessary to remove and reinsert the F-module. A detailed listing of faults requiring removal and insertion of the F-module can be found in the section Diagnostic messages of the respective F-module. After reintegration, the following occurs: In the case of an F-module with inputs, the process data pending at the fail-safe inputs is
made available to the safety program again In the case of an F-module with outputs, the output values provided in the safety program
are transferred to the fail-safe outputs again
Additional information on passivation and reintegration
For additional information on passivation and reintegration of F-I/O, refer to the SIMATIC Safety, Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126) manual.
Reaction of the F-module with inputs to communication errors
F-modules with inputs respond differently to communication errors compared to other errors. If a communication error is detected, the current process values remain set at the inputs of the F-module. There is no passivation of the channels. The current process values are passivated in the F-CPU.
Automation system System Manual, 11/2019, A5E03461182-AF
299
Maintenance 13.8 Maintenance and repair
13.8
Maintenance and repair
The components of the S7-1500 automation system/ET 200MP distributed I/O system are maintenance-free.
Note Repairs to the components of the S7-1500 automation system/ET 200MP distributed I/O system may only be carried out by the manufacturer.
300
Automation system System Manual, 11/2019, A5E03461182-AF
Test and service functions
14
14.1
Test functions
Introduction
You can test the operation of your user program on the CPU. You monitor signal states and values of tags, and preassign tags with values so that you can simulate specific situations for program execution.
Note Using test functions
Using test functions affects the program execution time and thus the cycle and response times of the controller to a slight extent (a few milliseconds).
Requirements
There is an online connection to the relevant CPU. An executable user program is available in the CPU.
Test options
Testing with program status Testing with breakpoints Testing with a watch table Testing with a force table Testing with a PLC tag table Testing with a data block editor Testing with the LED flash test Testing with a trace function
Automation system System Manual, 11/2019, A5E03461182-AF
301
Test and service functions 14.1 Test functions
Testing with program status
The program status allows you to monitor the execution of the program. You can hereby display the values of operands and the results of logic operations (RLO). This allows you to detect and fix logical errors in your program.
Note Restrictions with the "Program status" function Monitoring loops can significantly increase the cycle time. The increase in cycle time depends on the following factors: · The number of tags to be monitored · The actual numbers of loops run through
WARNING Testing with program status A test with the "Program status" function can cause serious damage to property or injury to persons if there are functional disturbances or program errors. Make sure that you take appropriate measures to exclude the risk of hazardous conditions occurring before running a test with the "Program status" function!
302
Automation system System Manual, 11/2019, A5E03461182-AF
Test and service functions 14.1 Test functions
Testing with breakpoints
With this test option, you set breakpoints in your program, establish an online connection, and enable the breakpoints on the CPU. You then execute a program from one breakpoint to another. Requirements: Setting breakpoints is possible in the programming language SCL or STL. Testing with breakpoints provides you with the following advantages: Localization of logic errors step by step Simple and quick analysis of complex programs prior to actual commissioning Recording of current values within individual executed loops Use of breakpoints for program validation also possible in SCL/STL networks within
LAD/FBD blocks
Note Restriction during testing with breakpoints · When you test with breakpoints, there is a risk of overwriting the cycle time of the CPU. · If you are using technology objects and test them with breakpoints, the CPU switches to
STOP mode.
Note F-System SIMATIC Safety Setting breakpoints in the standard user program results in errors in the safety program: · Sequence of F cycle time monitoring · Error in communication with the fail-safe I/O · Error during safety-oriented CPU-CPU communication · Internal CPU error If you nevertheless want to use breakpoints for testing, you must disable safety mode. This will result in the following errors: · Error in communication with the fail-safe I/O · Error during safety-oriented CPU-CPU communication
Automation system System Manual, 11/2019, A5E03461182-AF
303
Test and service functions 14.1 Test functions
Testing with watch tables
The following functions are available in the watch table: Monitoring of tags
You can use the watch tables to monitor the current values of the individual tags of a user program or a CPU on the programming device/PC, on the display of the CPU, and on the web server. A symbolic name for the tags must be specified in the "Name" column of the watch table to allow the display of the CPU and the web server to show the value of the tags. You monitor the following operand areas: Inputs and outputs (process image) and bit memory Contents of data blocks Peripheral inputs and peripheral outputs Timers and counters Modifying tags Use this function to assign fixed values to the individual tags of a user program or CPU on the PG/PC. Modifying is also possible with Test with program status. The following operand areas are modifiable: Inputs and outputs (process image) and bit memory Contents of data blocks Peripheral inputs and peripheral outputs (for example, %I0.0:P, %Q0.0:P) Timers and counters "Enable peripheral outputs" and "Modify now" These two functions enable you to assign fixed values to individual peripheral outputs of a CPU in the STOP mode. You can also use them to check your wiring.
304
Automation system System Manual, 11/2019, A5E03461182-AF
Test and service functions 14.1 Test functions
Testing with a force table
The following functions are available in the force table: Monitoring of tags
Force tables are used to monitor the actual values of the individual tags of a CPU user program or a CPU On the PG/PC On the display of the CPU On the Web server You monitor the table with or without a trigger condition. A symbolic name for the tags must be specified in the "Name" column of the force table in order that the display of the CPU and the web server can display the value of the tags. You monitor the following tags: Bit memory Contents of data blocks Peripheral inputs Modifying tags You use this function to assign fixed values to individual tags of a user program or a CPU on the programming device/PC or on the display of the CPU. Modifying is also possible with Test with program status. The following tags are modifiable: Bit memory Contents of data blocks Peripheral inputs (e.g. %I0.0:P) Forcing of peripheral inputs and peripheral outputs You can force individual peripheral inputs or peripheral outputs. Peripheral inputs: Forcing of peripheral inputs (for example %I0.0:P) is a "bypassing"
of sensors / inputs by the specification of fixed values to the program. The program receives the force value instead of the actual input value (via process image or via direct access). Peripheral outputs: Forcing of peripheral outputs (for example %Q0.0:P) is a "bypassing" of the complete program by the specification of fixed values to the actuators. With the force table you can simulate different test environments and also overwrite tags in the CPU with a fixed value. This enables you to intervene in the running process in a regulating way.
Automation system System Manual, 11/2019, A5E03461182-AF
305
Test and service functions 14.1 Test functions
Difference between modifying and forcing
The fundamental difference between the modifying and forcing functions consists in the storage behavior: Modifying: Modifying of tags is an online function and is not stored in the CPU. You can
end modifying of tags in the watch table or force table or by terminating the online connection. Forcing: A force job is written to the SIMATIC memory card and is retained after a POWER OFF. The S7-1500 CPU displays an active force job with a corresponding symbol. You can only end the forcing of peripheral inputs and peripheral outputs in the force table.
Testing with a PLC tag table
You can monitor the current data values of tags in the CPU directly in the PLC tag table. To do so, open the PLC tag table and start the monitoring. You also have the option of copying PLC tags to a watch table or force table so that you can monitor, control or force them in the table.
Testing with a data block editor
The data block editor offers different options for monitoring and modifying tags. These functions directly access the actual values of the tags in the online program. Actual values are the current values of tags in the CPU work memory at any moment during program execution. The following functions for monitoring and modifying are available in the database editor. Monitor tags online Modify individual actual values Create a snapshot of the actual values Overwrite actual values with a snapshot
Note Setting data values during commissioning During plant commissioning, you often need to adjust data values to adapt the program to local conditions. To this end, the declaration table offers a few functions for data blocks.
306
Automation system System Manual, 11/2019, A5E03461182-AF
Test and service functions 14.1 Test functions
Testing with the LED flash test
In many online dialogs, you can perform an LED flash test. This feature is useful if you are not sure which device in the hardware configuration corresponds to the device currently selected in the software.
If you click on the "Flash LED" button in STEP 7 under Online & diagnostics (online access), an LED flashes on the device currently selected. The RUN/STOP, ERROR, and MAINT LEDs flash on the CPU. The LEDs flash until you cancel the flash test.
Testing with a trace function
The trace function is used to record the CPU tags, depending on the settable trigger conditions. Tags are, for example, drive parameters or system and user tags of a CPU. The CPU saves the recordings. If necessary, you can display the recordings with STEP 7 and evaluate them.
Procedure: The trace function can be called from the CPU's folder in the project tree, under the name "Traces".
In connection with trace functions, please also note the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/102781176).
Simulation
With STEP 7 you can run and test the hardware and software of the project in a simulated environment. Start the simulation using the menu command "Online" > "Simulation" > "Start".
Reference
Additional information on the test functions can be found in the STEP 7 online help.
Additional information about testing with trace functions is available in the Function Manual Using the trace and logic analyzer function (http://support.automation.siemens.com/WW/view/en/64897128).
Automation system System Manual, 11/2019, A5E03461182-AF
307
Test and service functions 14.2 Reading out/saving service data
14.2
Reading out/saving service data
Service data
In addition to the contents of the diagnostics buffer, the service data contain numerous additional data points about the internal status of the CPU. If a problem occurs with the CPU that you cannot resolve with other methods, send the service data to the Siemens Service & Support. The service data allow Service & Support to analyze problems that have occurred rapidly.
Note
While reading out the service data of the CPU, you cannot simultaneously execute a download to the device.
Methods of reading service data
You can read service data with: the web server STEP 7 the SIMATIC memory card
308
Automation system System Manual, 11/2019, A5E03461182-AF
Test and service functions 14.2 Reading out/saving service data
Procedure using the Web server
To read service data using the Web server, follow these steps: 1. Open a web browser that is suitable for communication with the CPU. 2. Enter the following address in the address bar of the web browser:
https://<CPU IP address>/save_service_data, e.g. https://172.23.15.3/save_service_data 3. The service data page will appear on your screen, with a button for saving the service
data.
Figure 14-1 Saving service data via the Web server 4. Save the service data locally on your PC/programming device, by clicking "Save
ServiceData". Result: The data is saved in a .dmp file with the following naming convention: <Article number> <Serial number> <Time stamp>.dmp". You can change the file name.
Note If you have defined your user page as the home page of the Web server, direct access to the service data by inputting the IP address of the CPU is not possible. For more information on reading out service data via a user-defined page, refer to the Web server (http://support.automation.siemens.com/WW/view/en/59193560) function manual.
Procedure using STEP 7
You can find more information on saving service data with the keyword "Saving service data" in the STEP 7 online help.
Automation system System Manual, 11/2019, A5E03461182-AF
309
Test and service functions 14.2 Reading out/saving service data
Procedure via the SIMATIC memory card
If no communication with the CPU is possible via Ethernet, use the SIMATIC memory card to read out the service data. In all other cases, read and back up the service data via the web server or STEP 7. The procedure via the SIMATIC memory card is more complex than the other options. You must also ensure before backing up that there is sufficient memory space on the SIMATIC memory card.
To back up service data using the SIMATIC memory card, follow these steps:
1. Insert the SIMATIC memory card into the card reader of your PC / programming device.
2. Open the job file S7_JOB.S7S in an editor.
3. Overwrite the entry PROGRAM with the string DUMP in the editor. To ensure that the file size is exactly 4 bytes, do not use any spaces/line breaks/quotation marks.
4. Save the file under the existing file name.
5. Ensure that the SIMATIC memory card is not write-protected and insert the SIMATICmemory card in the card slot of the CPU. Up to CPU 1516 you need a card 32 MB and from CPU 1517 a card 2 GB.
Result: The CPU writes the service data file DUMP.S7S to the SIMATIC memory card and remains in STOP mode.
Service data transfer is complete when the STOP LED stops flashing and is lit continuously. If service data transfer has been successful, only the STOP LED lights up.
In the event of errors in transfer, the STOP LED is lit continuously and the ERROR LED flashes. The CPU also stores a text file with a note on the error that occurred in the DUMP.S7S folder.
310
Automation system System Manual, 11/2019, A5E03461182-AF
Technical specifications
15
Introduction
This chapter lists the technical specifications of the system:
The standards and test values which the modules of the S7-1500 automation system/ET 200MP distributed I/O system comply with and fulfill.
The test criteria according to which the S7-1500 automation system/ET 200MP distributed I/O system was tested.
Technical specifications for the modules
The technical specifications of the individual modules can be found in the manuals of the modules themselves. In the event of deviations between the statements in this document and the manuals, the statements in the manuals take priority.
Automation system System Manual, 11/2019, A5E03461182-AF
311
Technical specifications 15.1 Standards and Approvals
15.1
Standards and Approvals
Currently valid markings and authorizations
Note Details on the components of the S7-1500 automation system/ET 200MP distributed I/O system The currently valid markings and approvals are printed on the components of the S7-1500 automation system/ET 200MP distributed I/O system.
Safety information
WARNING Personal injury and damage to property may occur In hazardous areas, injury to persons and material damage may occur if you disconnect plug-in connections during operation of an S7-1500 automation system/ET 200MP distributed I/O system. Always switch off the power to the S7-1500 automation system/ET 200MP distributed I/O system when disconnecting plug-in connections in hazardous atmospheres.
WARNING Explosion hazard If you replace components, compliance with Class I, DIV 2 may become invalid.
WARNING Deployment requirements This device is only suitable for use in Class I, Div. 2, Group A, B, C, D, or in non-hazardous areas.
312
Automation system System Manual, 11/2019, A5E03461182-AF
Technical specifications 15.1 Standards and Approvals
CE mark
The S7-1500 automation system/ET 200MP distributed I/O system complies with the harmonized European standards (EN) for programmable logic controllers published in the official gazettes of the European Community. The S7-1500 automation system/ET 200MP distributed I/O system meets the requirements and protection targets of the following directives:
2014/35/EU "Electrical equipment designed for use within certain voltage limits" (LowVoltage Directive)
2014/30/EU "Electromagnetic Compatibility" (EMC Directive)
2014/34/EU "Equipment and protective systems intended for use in potentially explosive atmospheres" (Explosion Protection Directive)
2011/65/EU "Restriction of the use of certain hazardous substances in electrical and electronic equipment" (RoHS Directive)
2006/42/EC "Machinery Directive" for S7-1500/ET 200MP fail-safe modules
EU declarations of conformity for the respective authorities are available from:
Siemens AG Digital Industries
Factory Automation DI FA AS SYS P.O. Box 1963 D-92209 Amberg
The EU declarations of conformity are also available for download from the Siemens Industry Online Support website, under the keyword "Declaration of Conformity".
cULus approval
Underwriters Laboratories Inc. in accordance with
UL 508 (Industrial Control Equipment) OR UL 61010-1 and UL 61010-2-201
C22.2 No. 142 (Process Control Equipment) OR CSA. C22.2 No. 61010-1 and CSA C22.2 No. 61010-2 201
OR
Automation system System Manual, 11/2019, A5E03461182-AF
313
Technical specifications 15.1 Standards and Approvals
cULus HAZ. LOC. approval
Underwriters Laboratories Inc. in accordance with
UL 508 (Industrial Control Equipment) OR UL 61010-1 and UL 61010-2-201
CSA C22.2 No. 142 (Process Control Equipment) OR CSA. C22.2 No. 61010-1 and CSA C22.2 No. 61010-2 201
ANSI/ISA 12.12.01
CSA C22.2 No. 213 (Hazardous Location)
APPROVED for use in Class I, Division 2, Group A, B, C, D Tx; Class I, Zone 2, Group IIC Tx
Installation Instructions for cULus haz.loc.
WARNING Explosion Hazard Do not disconnect while circuit is live unless area is known to be non-hazardous.
WARNING Explosion Hazard Substitution of components may impair suitability for Class I, Division 2 or Zone 2.
This equipment is suitable for use in Class I, Division 2, Groups A, B, C, D; Class I, Zone 2, Group IIC; or non-hazardous locations.
These products need to be connected by means of the front connector Cat. No. 6ES7592-1AM00-0XB0
WARNING: EXPOSURE TO SOME CHEMICALS MAY DEGRADE THE SEALING PROPERTIES OF MATERIALS USED IN THE RELAYS.
314
Automation system System Manual, 11/2019, A5E03461182-AF
Technical specifications 15.1 Standards and Approvals
FM approval
Factory Mutual Research (FM) according to
Approval Standard Class Number 3611, 3600, 3810
ANSI/UL 12.12.01
ANSI/ISA 61010-1
CSA C22.2 No. 213
CSA C22.2 No. 61010-1
CSA C22.2 No. 0-10
APPROVED for use in Class I, Division 2, Group A, B, C, D Tx; Class I, Zone 2, Group IIC Tx
Installation Instructions for FM
WARNING Explosion Hazard Do not disconnect while circuit is live unless area is known to be non-hazardous.
WARNING Explosion Hazard Substitution of components may impair suitability for Class I, Division 2 or Zone 2.
This equipment is suitable for use in Class I, Division 2, Groups A, B, C, D; Class I, Zone 2, Group IIC; or non-hazardous locations.
These products need to be connected by means of the front connector Cat. No. 6ES7592-1AM00-0XB0
WARNING: EXPOSURE TO SOME CHEMICALS MAY DEGRADE THE SEALING PROPERTIES OF MATERIALS USED IN THE RELAYS.
ATEX approval
In accordance with EN 60079-15 (Electrical apparatus for potentially explosive atmospheres; Type of protection "n") and EN 60079-0 (Electrical apparatus for potentially explosive gas atmospheres - Part 0: General Requirements)
IECEx approval
According to IEC 60079-15 (Explosive atmospheres - Part 15: Equipment protection by type of protection "n") and IEC 60079-0 (Explosive atmospheres - Part 0: Equipment - General requirements)
Automation system System Manual, 11/2019, A5E03461182-AF
315
Technical specifications 15.1 Standards and Approvals
RCM Declaration of conformity for Australia/New Zealand
The S7-1500 automation system/ET 200MP distributed I/O system fulfills the requirements of the standard IEC 61000-6-4.
Korea Certification
KC registration number: KCC-REM-S49-S71500
Please note that this device corresponds to limit value class A in terms of the emission of radio frequency interference. This device can be used in all areas, except residential areas.
(A) .
Marking for the Eurasian Customs Union
EAC (Eurasian Conformity) Customs Union of Russia, Belarus and Kazakhstan Declaration of conformity with the technical requirements of the Customs Union (TR CU).
IEC 61131-2
The S7-1500 automation system/ET 200MP distributed I/O system meets the requirements and criteria of the standard IEC 61131-2
(Programmable logic controllers, Part 2: Equipment requirements and tests).
IEC 61010-2-201
The S7-1500 automation system/ET 200MP distributed I/O system meets the requirements and criteria of the standard IEC 61010-2-201
(Safety regulations for electrical equipment for measurement, control, and laboratory use Part 2-201: Particular requirements for control equipment).
PROFINET standard
The PROFINET interfaces of the S7-1500 automation system/ET 200MP distributed I/O system are based on the standard IEC 61158 Type 10.
PROFIBUS standard
The PROFIBUS interfaces of the S7-1500 automation system/ET 200MP distributed I/O system are based on the standard IEC 61158 Type 3.
316
Automation system System Manual, 11/2019, A5E03461182-AF
Technical specifications 15.1 Standards and Approvals
Marine approval
Classification societies: ABS (American Bureau of Shipping) BV (Bureau Veritas) DNV-GL (Det Norske Veritas - Germanischer Lloyd) LRS (Lloyds Register of Shipping) Class NK (Nippon Kaiji Kyokai) KR (Korean Register of Shipping) CCS (China Classification Society) RINA (Registro Italiano Navale)
Industrial use
The S7-1500 automation system ET 200MP / distributed I/O system is designed for the industrial field. It meets the following standards for this type of use:
Requirements on interference emission EN 61000-6-4: 2007 + A1: 2011
Requirements on immunity EN 61000-6-2: 2005
Use in mixed areas
Under certain conditions you can use the S7-1500 automation system ET 200MP / distributed I/O system in a mixed area. A mixed area is used for residential purposes and for commercial operations that do not significantly impact the residential purpose.
If you use the S7-1500 automation system / ET 200MP distributed I/O system in a mixed area, you must comply with the radio frequency interference limits of the generic standard EN 61000-6-3. Suitable measures for observing these limits for use in a mixed area are, for example:
Installation of the S7-1500 automation system / ET 200MP I/O system in grounded control cabinets
Use of noise filters in the supply lines
An additional individual acceptance test is also required.
Use in residential areas
Note S7-1500 automation system / ET 200MP I/O system not intended for use in residential areas
The S7-1500 automation system ET 200MP / distributed I/O system is not intended for use in residential areas. If you use the S7-1500 automation system / ET 200MP distributed I/O system in residential areas, this may have an impact on radio/TV reception.
Automation system System Manual, 11/2019, A5E03461182-AF
317
Technical specifications 15.2 Electromagnetic compatibility
Reference
The certificates for the identifiers and approvals can be found in Siemens Industry Online Support on the Internet (http://www.siemens.com/automation/service&support).
15.2
Electromagnetic compatibility
Definition
Electromagnetic compatibility (EMC) is the ability of an electrical installation to function satisfactorily in its electromagnetic environment without interfering with that environment.
The S7-1500 automation system/ET 200MP distributed I/O system also meets the requirements of the EMC legislation for the European single market. The prerequisite for this is that the S7-1500/ET 200MP system complies with the requirements and guidelines relating to electrical equipment.
EMC in accordance with NE21
The S7-1500 automation system/ET 200MP distributed I/O system meets the EMC specifications of the NAMUR guideline NE21.
Pulse-shaped disturbances
The following table shows the electromagnetic compatibility of the S7-1500 automation system/ET 200MP distributed I/O system with regard to pulse-shaped disturbances.
Table 15- 1 Pulse-shaped disturbances
Pulse-shaped disturbance
Tested with
Electrostatic discharge in accordance with IEC 61000-4-2.
Air discharge: ±8 kV Contact discharge: ±6 kV
Burst pulses (high-speed transient dis- ±2 kV (power supply lines)
turbances) in accordance with
±2 kV (signal lines > 30 m)
IEC 61000-4-4.
±1 kV (signal lines < 30 m)
High-energy single pulse (surge) in accordance with IEC 61000-4-5
External protective circuit required (not for 230 V modules)
(Defining interference-free controllers (http://support.automation.siemens.com/WW/view/en/59193566) Function Manual)
· Asymmetric coupling
±2 kV (power supply lines) DC with protective elements
±2 kV (signal/data line only > 30 m), with protective elements
· Symmetric coupling
±1 kV (power supply lines) DC with protective elements
±1 kV (signal/data line only > 30 m), with
protective elements
Corresponds with degree of severity
3 3 3 3
3
318
Automation system System Manual, 11/2019, A5E03461182-AF
Technical specifications 15.2 Electromagnetic compatibility
Sinusoidal disturbances
The following table shows the electromagnetic compatibility of the S7-1500 automation system/ET 200MP distributed I/O system with regard to sinusoidal disturbances (RF radiation).
Table 15- 2 Sinusoidal disturbances with RF radiation
RF radiation in accordance with IEC 61000-4-3/NAMUR 21
Electromagnetic RF field, amplitude-modulated
80 to 1000 MHz; 1.4 to 2 GHz
2.0 GHz to 2.7 GHz
10 V/m
1 V/m
80 % AM (1 kHz)
Corresponds with degree of severity
3
The following table shows the electromagnetic compatibility of the S7-1500 automation system/ET 200MP distributed I/O system with regard to sinusoidal disturbances (RF coupling).
Table 15- 3 Sinusoidal disturbances with RF coupling
RF coupling in accordance with IEC 61000-4-6
from 10 kHz 10 Vrms 80 % AM (1 kHz) 150 source impedance
Corresponds with degree of severity
3
Emission of radio interference
Interference emission of electromagnetic fields in accordance with EN 55016.
Table 15- 4 Interference emission of electromagnetic fields
Frequency 30 MHz to 230 MHz 230 MHz to 1000 MHz from 1 to 3 GHz from 3 to 6 GHz
Interference emission < 40 dB (µV/m) QP < 47 dB (µV/m) QP < 76 dB (µV/m) P < 80 dB (µV/m) P
Measuring distance 10 m 10 m 3 m 3 m
Interference emission via the AC power supply according to EN 55016.
Table 15- 5 Interference emission via the AC power supply
Frequency 0.15 MHz to 0.5 MHz
0.5 MHz to 30 MHz
Interference emission < 79 dB (µV/m)Q < 66 dB (µV/m) M < 73 dB (µV/m)Q < 60 dB (µV/m) M
Automation system System Manual, 11/2019, A5E03461182-AF
319
Technical specifications 15.3 Electromagnetic compatibility of fail-safe modules
15.3
Electromagnetic compatibility of fail-safe modules
Pulse-shaped interference
The fail-safe I/O modules S7-1500/ET 200MP without external protective circuit meet the severity level 2 for the high-energy individual pulse (surge) according to IEC 61000-45:2014.
Protecting S7-1500/ET 200MP against overvoltages with fail-safe modules
If your equipment requires protection from overvoltage, we recommend that you use an external protective circuit (surge filter) between the load voltage power supply and the load voltage input of the fail-safe modules to ensure surge immunity for the S7-1500 automation system/ET 200MP distributed I/O system with fail-safe modules.
Note Lightning protection measures always require a case-by-case examination of the entire system. An almost complete protection from overvoltages, however, can only be achieved if the entire building surroundings have been designed for overvoltage protection. In particular, this involves structural measures in the building design phase. If you want detailed information regarding overvoltage protection, we recommend that you contact your Siemens representative or a company specializing in lightning protection.
You can find more information on protection from overvoltage in the Designing interferencefree controllers (http://support.automation.siemens.com/WW/view/en/59193566) function manual.
320
Automation system System Manual, 11/2019, A5E03461182-AF
Technical specifications 15.4 Shipping and storage conditions
15.4
Shipping and storage conditions
Introduction
The S7-1500 automation system / ET 200MP I/O system meet the specifications regarding transport and storage conditions pursuant to IEC 61131-2. The following information applies to modules that are shipped and/or stored in their original packaging.
Shipping and storage conditions for modules
Table 15- 6 Shipping and storage conditions
Type of condition Free fall (in shipping package) Temperature Barometric pressure
Relative humidity Sinusoidal vibrations in accordance with IEC 60068-2-6 Shock in accordance with IEC 60068-2-27
Permissible range 1 m from -40 °C to +70 °C From 1140 to 540 hPa (corresponds to an altitude of -1000 to 5000 m) 5% to 95%, without condensation 5 - 9 Hz: 3.5 mm 9 - 500 Hz: 9.8 m/s2 250 m/s2, 6 ms, 1000 shocks
15.5
Mechanical and climatic ambient conditions
Operating conditions
The S7-1500 automation system/ET 200MP distributed I/O system is suitable for use in weather-proof, fixed locations. The operating conditions are based on the requirements of DIN EN 60721-3-3:1995 + A2:1997:
Class 3M3 (mechanical requirements)
Class 3K3 (climatic requirements)
Automation system System Manual, 11/2019, A5E03461182-AF
321
Technical specifications 15.5 Mechanical and climatic ambient conditions
Test of mechanical ambient conditions
The table below provides important information with respect to the type and scope of the test of ambient mechanical conditions.
Table 15- 7 Test of mechanical ambient conditions
Condition tested Vibration
Shock Continuous shock
Test Standard Vibration test according to IEC 60068-2-6 (Sinus)
Shock, tested according to IEC 60068-2-27
Shock, tested according to IEC 60068-2-27
Comment
Type of oscillation: Frequency sweeps with a rate of change of 1 octave/minute. 5 Hz f 8.4 Hz, constant amplitude 7 mm 8.4 Hz f 150 Hz, constant acceleration 2 g Duration of oscillation: 10 frequency sweeps per axis, along each of the 3 mutually perpendicular axes
Type of shock: Half-sine Shock intensity: 15 g max., duration 11 ms Direction of shock: 3 shocks each in (+/-) direction, along each of the 3 mutually perpendicular axes
Type of shock: Half-sine Shock intensity: 250 m/s2 peak value, 6 ms duration Direction of shock: 1000 shocks each in (+/-) direction, along each of the 3 mutually perpendicular axes
Reduction of vibrations
If your S7-1500 automation system/ET 200MP distributed I/O system is exposed to severe shock or vibration, take appropriate measures to reduce the acceleration or the amplitude.
We recommend the installation of the S7-1500 automation system/ET 200MP distributed I/O system on damping materials (for example, rubber-bonded metal mounting).
322
Automation system System Manual, 11/2019, A5E03461182-AF
Technical specifications 15.5 Mechanical and climatic ambient conditions
Climatic ambient conditions
The following table shows the permissible climatic ambient conditions for the S7-1500 automation system/ET 200MP distributed I/O system:
Table 15- 8 Climatic ambient conditions
Ambient conditions
Temperature: horizontal mounting position: vertical mounting position:
Permissible range
-25 °C to 60 °C -25 °C to 40 °C
Temperature variation Relative humidity Barometric pressure
10 K/h from 10 % to 95 % from 1140 to 795 hPa
Pollutant concentration
ANSI/ISA-71.04 severity level G1; G2; G3
Comments
The lower permissible ambient temperature was extended for the S7-1500 automation system/ET 200MP distributed I/O system to -25 °C. Differences may exist for specific modules and depending on the mounting position and, if applicable, load.
You must check the lower permissible ambient temperature for each module in the product data sheets.
The product data sheets with daily updated technical specifications can be found on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td) at Industry Online Support. Enter the article number or the short description of the desired module on the website.
To increase the service life of the display, the display switches off when the permitted operating temperature is exceeded. At certain temperatures, the display switches off an on again. You can find more information in the technical specifications in the CPU manuals.
-
Without condensation
Corresponds to an altitude of -1000 m to 2000 m.
See the following section "Using the S7-1500 automation system/ET 200MP distributed I/O system over 2000 m above sea level".
-
Automation system System Manual, 11/2019, A5E03461182-AF
323
Technical specifications 15.5 Mechanical and climatic ambient conditions
Using the S7-1500 automation system/ET 200MP distributed I/O system over 2000 m above sea level.
Table 15- 9 S7-1500 (F) CPUs for maximum installation altitude 5000 m or 3000 m
CPU designation S7-1500 CPU 1511-1 PN CPU 1511-1 PN CPU 1511C-1 PN CPU 1511C-1 PN CPU 1511T-1 PN CPU 1512C-1 PN CPU 1512C-1 PN CPU 1513-1 PN CPU 1513-1 PN CPU 1515-2 PN CPU 1515T-2 PN CPU 1516-3 PN/DP CPU 1516T-3 PN/DP CPU 1517-3 PN/DP CPU 1517T-3 PN/DP CPU 1518-4 PN/DP CPU 1518-4 PN/DP ODK
Article number
6ES7511-1AK01-0AB0 6ES7511-1AK02-0AB0 6ES7511-1CK00-0AB0 6ES7511-1CK01-0AB0 6ES7 511-1TK01-0AB0 6ES7512-1CK00-0AB0 6ES7512-1CK01-0AB0 6ES7513-1AL01-0AB0 6ES7513-1AL02-0AB0 6ES7515-2AM01-0AB0 6ES7515-2TM01-0AB0 6ES7516-3AN01-0AB0 6ES7516-3TN00-0AB0 6ES7517-3AP00-0AB0 6ES7517-3TP00-0AB0 6ES7518-4AP00-0AB0 6ES7518-4AP00-3AB0
Version
Max. installation altitude
FS03 or higher
FS01 or higher
FS03 or higher
FS01 or higher
FS03 or higher
FS03 or higher
FS01 or higher
FS03 or higher
FS01 or higher
FS03 or higher
FS03 or higher
FS03 or higher
FS05 or higher
FS05 or higher
FS05 or higher
FS05 or higher
FS05 or higher
5000 m
324
Automation system System Manual, 11/2019, A5E03461182-AF
Technical specifications 15.5 Mechanical and climatic ambient conditions
S7-1500 F CPU 1511F-1 PN CPU 1511TF-1 PN CPU 1513F-1 PN CPU 1515F-2 PN CPU 1515TF-2 PN CPU 1516F-3 PN/DP CPU 1511F-1 PN CPU 1513F-1 PN S7-1500 F CPU 1516TF-3 PN/DP CPU 1517F-3 PN/DP CPU 1517TF-3 PN/DP CPU 1518F-4 PN/DP CPU 1518F-4 PN/DP ODK
6ES7511-1FK01-0AB0 6ES7511-1UK01-0AB0 6ES7513-1FL01-0AB0 6ES7515-2FM01-0AB0 6ES7515-2UM01-0AB0 6ES7516-3FN01-0AB0 6ES7511-1FK02-0AB0 6ES7513-1FL02-0AB0
6ES7516-3UN00-0AB0 6ES7517-3FP00-0AB0 6ES7517-3UP00-0AB0 6ES7518-4FP00-0AB0 6ES7518-4FP00-3AB0
FS03 or higher
FS03 or higher
FS03 or higher
FS03 or higher
FS03 or higher
FS03 or higher
FS01 or higher
FS01 or higher
5000 m
FS05 or higher
FS05 or higher
FS05 or higher
FS05 or higher
FS05 or higher
3,000 m
The maximum "operating elevation in relation to sea level" depends on the module and is described in the technical specifications of the respective module. The product data sheets with daily updated technical specifications can be found on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td) at Industry Online Support. Enter the article number or the short description of the desired module on the website.
For altitudes > 2000 m the following constraints apply for the maximum specified ambient temperature:
Restrictions of the maximum ambient temperature specified with regard to the installation altitude
Installation altitude -1000 m to 2000 m 2000 m to 3000 m 3000 m to 4000 m 4000 m to 5000 m
Derating factor for ambient temperature 1) 1.0 0.9 0.8 0.7
1) Base value for application of the derating factor is the maximum permissible ambient temperature in °C for 2000 m.
Automation system System Manual, 11/2019, A5E03461182-AF
325
Technical specifications 15.5 Mechanical and climatic ambient conditions
Note
· Linear interpolation between altitudes is permissible.
· The derating factors compensate for the decreasing cooling effect of air in higher altitudes due to lower density.
· Note the mounting position of the respective module in the technical specifications. The basis is the standard IEC 61131-2:2017.
· Make sure that the power supplies you use are rated for altitudes > 2000 m.
· The displays of the S7-1500-CPUs are designed for an altitude of 3,000 m. When operating the device at altitudes > 3,000 m, you may experience problems with the CPU display in rare cases; however, these do not affect operation of the CPU.
Effects on the availability of modules
The higher cosmic radiation present during operation at altitudes above 2000 m will also start to have an effect on the failure rate of electronic components (the so-called soft error rate). In rare cases this can result in a transition of the module into the safe state, especially for safety modules. However, the functional safety of the module is fully retained.
Note
The F-CPUs are certified for operation in safety mode up to the maximum altitude listed in the product data sheet. All other markings and certifications are currently based on an altitude of up to 2000 m.
Information on PFDavg, PFH values for S7-1500 F
PFDavg and PFH values for F-CPUs at operating altitudes up to 3,000 m or 5,000 m. Below you will find the probability of failure values (PFDavg and PFH values) for the F-CPUs with a service life of 20 years and with a repair time of 100 hours:
Operation in low demand mode in accordance with Operation in high demand or continuous mode
IEC 61508:2010:
in accordance with IEC 61508:2010:
PFDavg = Average probability of a dangerous failure on demand
PFH = Average frequency of a dangerous failure [h-1]
< 2E-05
< 1E-09
326
Automation system System Manual, 11/2019, A5E03461182-AF
Technical specifications 15.6 Information on insulation tests, protection class, degree of protection and rated voltage
15.6
Information on insulation tests, protection class, degree of protection
and rated voltage
Insulation
The insulation is designed in accordance with the requirements of EN 61010-2-201.
Note In the case of modules with 24 V DC (SELV/PELV) supply voltage, galvanic isolations are tested with 707 V DC (type test).
Pollution degree/overvoltage category in accordance with EN 61131-2: 2007 and IEC 61010-2-201
Pollution degree 2 Overvoltage category: II
Protection class according to IEC 61131-2: 2007 and IEC 61010-2-201
The S7-1500 automation system/ET 200MP distributed I/O system meets protection class I and contains parts of protection classes II and III.
Degree of protection IP20
Degree of protection IP20 in accordance with IEC 60529 for all modules of the S7-1500 automation system/ET 200MP distributed I/O system: Protection against contact with standard test fingers Protection against foreign objects with diameters in excess of 12.5 mm No protection against water
Automation system System Manual, 11/2019, A5E03461182-AF
327
Technical specifications 15.7 Use of the S7-1500/ET 200MP in zone 2 hazardous areas
Rated voltage for operation
The S7-1500 automation system/ET 200MP distributed I/O system works with the rated voltages and corresponding tolerances listed in the following table.
Note the supply voltage of each module when selecting the rated voltage.
Table 15- 10 Rated voltage of all modules of the S7-1500 automation system/ET 200MP distributed I/O system for operation
rated voltage 24 V DC 48 V DC 60 V DC 120 V AC 230 V AC
Tolerance range 19.2 V DC to 28.8 V DC 1 40.8 to 57.6 V DC 51.0 to 72.0 V DC 93 V AC to 132 V AC 187 V AC to 264 V AC
1 Static value: Generation as protective extra-low voltage with safe electrical isolation in accordance with IEC 61131-2 or IEC 61010-2-201.
15.7
Use of the S7-1500/ET 200MP in zone 2 hazardous areas
Reference
You can find more information in the product information Use of modules in a Zone 2 Hazardous Area (http://support.automation.siemens.com/WW/view/en/19692172).
328
Automation system System Manual, 11/2019, A5E03461182-AF
Dimension drawings
A.1
Dimension drawings of the mounting rails
Mounting rail 160 mm
A
Figure A-1 Mounting rail 160 mm
Automation system System Manual, 11/2019, A5E03461182-AF
329
Dimension drawings A.1 Dimension drawings of the mounting rails
Mounting rail 245 mm
Figure A-2 Mounting rail 245 mm
Mounting rail 482.6 mm
Figure A-3 Mounting rail 482.6 mm
330
Automation system System Manual, 11/2019, A5E03461182-AF
Mounting rail 530 mm
Dimension drawings A.1 Dimension drawings of the mounting rails
Figure A-4 Mounting rail 530 mm
Mounting rail 830 mm
Figure A-5 Mounting rail 830 mm
Automation system System Manual, 11/2019, A5E03461182-AF
331
Dimension drawings A.2 Dimension drawing of shielding bracket for 35 mm modules
Mounting rail 2000 mm
Figure A-6 Mounting rail 2000 mm
A.2
Dimension drawing of shielding bracket for 35 mm modules
Figure A-7 Dimension drawing of shielding bracket for 35 mm modules
332
Automation system System Manual, 11/2019, A5E03461182-AF
Dimension drawings A.3 Dimension drawing of shielding bracket for 25 mm modules
A.3
Dimension drawing of shielding bracket for 25 mm modules
Figure A-8 Dimension drawing of shielding bracket for 25 mm modules
A.4
Dimension drawing of shielding bracket for 35 mm modules
Figure A-9 Dimension drawing of shielding bracket for 35 mm modules
Automation system System Manual, 11/2019, A5E03461182-AF
333
Dimension drawings A.5 Dimension drawing of shielding bracket for 25 mm modules
A.5
Dimension drawing of shielding bracket for 25 mm modules
Figure A-10 Dimension drawing of shielding bracket for 25 mm modules
A.6
Dimension drawing of infeed element for 35 mm modules
Figure A-11 Dimension drawing of infeed element for 35 mm modules
A.7
Dimension drawing of infeed element for 25 mm modules
Figure A-12 Dimension drawing of infeed element for 25 mm modules
334
Automation system System Manual, 11/2019, A5E03461182-AF
Dimension drawings A.8 Dimension drawings of the labeling strips
A.8
Dimension drawings of the labeling strips
Figure A-13 Dimension drawing of labeling strips for 35 mm modules
A.9
Figure A-14 Dimension drawing of labeling strips for 25 mm modules
Dimension drawing of test probe for measurement tap
To perform measurements on the front connector of the S7-1500/ET 200MP automation system, you need a test probe with the following properties: Maximum diameter at measuring tip: 1 mm Length of measuring tip: 10 mm
Figure A-15 Dimension drawing of test probe for measurement tap Corresponding test probes are available from electrical retailers.
Automation system System Manual, 11/2019, A5E03461182-AF
335
Accessories/spare parts
B
Accessories for the S7-1500 automation system/ET 200MP distributed I/O system
Table B- 1 General accessories
Designation Mounting rail · Mounting rail, 160 mm (with drill holes)
Article number 6ES7590-1AB60-0AA0
· Mounting rail, 245 mm (with drill holes)
6ES7590-1AC40-0AA0
· Mounting rail, 482 mm (with drill holes)
6ES7590-1AE80-0AA0
· Mounting rail, 530 mm (with drill holes)
6ES7590-1AF30-0AA0
· Mounting rail, 830 mm (with drill holes)
6ES7590-1AJ30-0AA0
· Mounting rail, 2000 mm (without drill holes) for cutting to length
6ES7590-1BC00-0AA0
Standard rail adapter, 10 adapters, 10 hexagon socket screws and 10 washers
6ES7590-6AA00-0AA0
Active backplane bus (for an interface module and 12 I/O mod- 6ES7590-0BL00-0AA0 ules)
PE connection element for mounting rail, 2000 mm (spare part), 6ES7590-5AA00-0AA0 20 units
Front connector (incl. four potential bridges, cable tie, and individual labeling strip) for 35 mm modules
· Screw-type terminals, 40-pin
6ES7592-1AM00-0XB0
Front connector (incl. four potential bridges, cable tie, and individual labeling strip) for 35 mm modules
· Push-in terminal (40-pin)
6ES7592-1BM00-0XB0
Front connector (incl. cable tie and individual labeling strip) for 25 mm modules
· Push-in terminal (40-pin)
6ES7592-1BM00-0XA0
4-pole connection plug for supply voltage (spare part), 10 units DIN A4 labeling sheet (10 x for labeling the 35 mm I/O modules) · Pre-perforated, AI gray
6ES7193-4JB00-0AA0 6ES7592-2AX00-0AA0
DIN A4 labeling sheet (10 x for labeling the 25 mm I/O modules)
· Pre-perforated, AI gray
6ES7592-1AX00-0AA0
U connector (spare part), 5 units
I/O shielding set for 35 mm modules (consists of: power supply element, shielding bracket, and shield clamp), (spare part), 5 units
6ES7590-0AA00-0AA0 6ES7590-5CA00-0AA0
336
Automation system System Manual, 11/2019, A5E03461182-AF
Accessories/spare parts
Designation
I/O shielding set for 25 mm modules (consists of: power supply element, shielding bracket, and shield clamp), (spare part), 4 units
Shield clamp (spare part), 10 units
Display 70 mm (spare part) for the following CPUs:
Article number 6ES7590-5CA10-0XA0
6ES7590-5BA00-0AA0 6ES7591-1BA00-0AA0
· CPU 1515(F)-2 PN
· CPU 1515T(F)-2 PN
· CPU 1516(F)-3 PN/DP
· CPU 1516T(F)-3 PN/DP
· CPU 1517(F)-3 PN/DP
· CPU 1517T(F)-3 PN/DP
· CPU 1518(F)-4 PN/DP
· CPU 1518(F)-4 PN/DP MFP
Display 35 mm (spare part) for the following CPUs:
6ES7591-1AA00-0AA0
· CPU 1511(F)-1 PN
· CPU 1511C-1 PN
· CPU 1511T(F)-1 PN
· CPU 1512C-1 PN
· CPU 1513(F)-1 PN
Display 35 mm for standard, F-CPUs / compact CPUs from article number 6ES751x-xxx02-0AB0/6ES751x-1CK01-0AB0
Display 70 mm for standard, F-CPUs from article number 6ES751x-xxx02-0AB0
Power cable connector with coding element for power supplies (spare part), 10 units
Potential bridge for front connector (spare part), 20 units
Universal front cover for 35 mm I/O modules (spare part), 5 units
6ES7591-1AB00-0AA0
6ES7591-1BB00-0AA0
6ES7590-8AA00-0AA0
6ES7592-3AA00-0AA0 6ES7528-0AA00-7AA0 Consists of:
· 5 x front cover · 5 x front labeling strip (per module - article number)
· 5 x wiring diagram (per module article number)
Universal front cover for 25 mm I/O modules (spare part), 5 units 6ES7528-0AA00-0AA0 Consists of:
· 5 x front cover · 5 x front labeling strip (per module - article number)
· 5 x wiring diagram (per module article number)
Universal front cover for interface module (spare part), 5 units
6ES7528-0AA70-7AA0 Consists of:
· 5 x front cover
Industrial Ethernet FastConnect RJ45 plug 180 degrees, 1 unit 6GK1901-1BB10-2AA0 Industrial Ethernet FastConnect RJ45 plug 180 degrees, 10 units 6GK1901-1BB10-2AB0
Automation system System Manual, 11/2019, A5E03461182-AF
337
Accessories/spare parts
Designation
Industrial Ethernet FastConnect RJ45 plug 90 degrees, 1 unit
Industrial Ethernet FastConnect RJ45 plug 90 degrees, 10 units
PROFIBUS-FastConnect bus connector without programming device socket, up to 12 MBaud, 1 unit
PROFIBUS FastConnect bus connector with programming device socket, up to 12 MBaud, 1 unit *
PROFIBUS FastConnect bus connector without programming device socket, up to 12 MBaud, 1 unit
PROFIBUS FastConnect bus connector with programming device socket, up to 12 MBaud, 1 unit
Article number 6GK1901-1BB20-2AA0 6GK1901-1BB20-2AB0 6ES7972-0BA70-0XA0
6ES7972-0BB70-0XA0
6ES7972-0BA52-0XA0
6ES7972-0BB52-0XA0
* The PROFIBUS FastConnect bus connector 0BB70 is supplied with the IM 155-5 DP ST interface module and can also be ordered as a spare part.
SIMATIC memory cards
Article number 6ES7954-8LCxx-0AA0 6ES7954-8LExx-0AA0 6ES7954-8LFxx-0AA0 6ES7954-8LL02-0AA0 6ES7954-8LPxx-0AA0 6ES7954-8LT02-0AA0
Capacity 4 MB 12 MB 24 MB 256 MB 2 GB 32 GB
Online catalog
Other article numbers for the S7-1500 automation system/ET 200MP distributed I/O system can be found on the Internet (https://mall.industry.siemens.com) in the online catalog and the online order system.
Accessories for fail-safe modules S7-1500/ET 200MP
Table B- 2 Accessories for fail-safe modules Designation Electronic coding element with rewritable memory for failsafe modules (spare part), 5 units Front cover for 35 mm F-I/O modules (spare part), 5 units
DIN A4 labeling sheet (10 x for labeling the fail-safe I/O modules), pre-perforated, yellow
Article number 6ES7592-6EF00-1AA0
6ES7528-0AA10-7AA0 Consists of: · 5 x front cover · 5 x front labeling strip (per module - article number) · 5 x wiring diagram (per module article number) 6ES7592-2CX00-0AA0
338
Automation system System Manual, 11/2019, A5E03461182-AF
Safety-relevant symbols
C
C.1
Safety-related symbols for devices without Ex protection
The following table contains an explanation of the symbols located in your SIMATIC device, its packaging or the accompanying documentation.
Symbol
Meaning General warning sign Caution/Notice You must read the product documentation. The product documentation contains information about the potential risks and enable you to recognize risks and implement countermeasures. Read the information provided by the product documentation. ISO 7010 M002
Ensure the device is only installed by electrically skilled person. IEC 60417 No. 6182
Note that connected mains lines must be designed according to the expected minimum and maximum ambient temperature.
Note that the device must be constructed and connected in accordance with EMC regulations.
Note that a 230 V device can be exposed to electrical voltages which can be dangerous. ANSI Z535.2
Note that a device of Protection Class III may only be supplied with a protective low voltage according to the standard SELV/PELV. IEC 60417-1-5180 "Class III equipment"
Be aware that the device is only approved for the industrial field and only for indoor use.
Note that an enclosure is required for installing the device. Enclosures are considered:
· Standing control cabinet · Serial control cabinet · Terminal boxes · Wall enclosure
Automation system System Manual, 11/2019, A5E03461182-AF
339
Safety-relevant symbols C.2 Safety-related symbols for devices with Ex protection
C.2
Safety-related symbols for devices with Ex protection
The following table contains an explanation of the symbols located in your SIMATIC device, its packaging or the accompanying documentation.
Symbol
Meaning
The assigned safety symbols apply to devices with Ex approval.
You must read the product documentation. The product documentation contains information about the potential risks and enable you to recognize risks and implement countermeasures.
Read the information provided by the product documentation. ISO 7010 M002 Ensure the device is only installed by electrically skilled person. IEC 60417 No. 6182 Observe the mechanical rating of the device.
Note that connected mains lines must be designed according to the expected minimum and maximum ambient temperature.
Note that the device must be constructed and connected in accordance with EMC regulations.
When the device is under voltage, note that it may not be installed or removed, or plugged or pulled.
Note that a 230 V device can be exposed to electrical voltages which can be dangerous. ANSI Z535.2
Note that a device of Protection Class III may only be supplied with a protective low voltage according to the standard SELV/PELV. IEC 60417-1-5180 "Class III equipment"
Be aware that the device is only approved for the industrial field and only for indoor use.
340
Automation system System Manual, 11/2019, A5E03461182-AF
Safety-relevant symbols C.2 Safety-related symbols for devices with Ex protection
Symbol
Meaning
For Zone 2 potentially explosive atmospheres, be aware that the device may only be used when it is installed in an enclosure with a degree of protection IP54.
For Zone 22 potentially explosive atmospheres, be aware that the device may only be used when it is installed in an enclosure with a degree of protection IP6x.
Automation system System Manual, 11/2019, A5E03461182-AF
341
Glossary
Automation system
Programmable logic controller for the open-loop and closed-loop control of process chains in the process engineering industry and in manufacturing technology. The automation system consists of different components and integrated system functions according to the automation task.
Baud rate
Data transmission rate indicates the number of bits transmitted per second (baud rate = bit rate).
Bit memory
Bit memory is a component of the system memory of the CPU for saving intermediate results. It can be accessed in bit, byte, word or double word mode.
Bus
Joint transmission path to which all nodes of a fieldbus system are connected; has two defined ends.
Bus cable connector
Physical connection between the bus node and the bus cable.
Bus, self-assembling
The modules are lined up on the mounting rail, and are mechanically and electrically connected to each other with a U connector as they are swiveled into position. In this way the bus is extended with each module.
Code block
In SIMATIC S7, a code block is a block that contains a section of the STEP 7 user program. (in contrast to a data block, which contains only data)
Configuration
Systematic arrangement of the individual modules (configuration).
342
Automation system System Manual, 11/2019, A5E03461182-AF
Glossary
Connection plug
The connection plug provides the physical connection between devices and the cable, for example.
Consistent data
Data whose content belongs together and must not be separated is known as consistent data.
Counter
Counters are components of the system memory of the CPU. You can modify the content of the "counter cells" using STEP 7 instructions (e.g. count up/down).
CPU
The CPU uses the integrated system power supply to supply the electronics of the modules via the backplane bus. The CPU contains the operating system and executes the user program. The user program is located on the SIMATICmemory card and is processed in the work memory of the CPU. The PROFINET interfaces on the CPU allow simultaneous communication with PROFINET devices, PROFINET controllers, HMI devices, programming devices, other controllers and other systems. The S7-1500 CPUs support operation as an IO controller and I-device. Similarly to the PROFINET interface, the PROFIBUS interface available on some of the S7-1500 CPUs allows communication with other devices. When the interface is used as PROFIBUS DP interface, the CPU on the PROFIBUS DP also assumes the role of a DP master.
Crimping
Procedure whereby two components joined together, e.g. wire end sleeve and cable, are connected with one another through plastic strain.
Cycle control point
The cycle control point marks the end of a cycle and the start of the next cycle. The cycle time statistics and monitoring of the configured maximum cycle time start at the cycle control point.
Once the cycle control point has been reached, the CPU writes the process image output to the output modules, reads the state of the inputs to the input modules and then executes the first cyclic OB.
Cycle time
The cycle time represents the time a CPU requires to execute the user program once.
Cyclic interrupt
You can find relevant information under the entry "Interrupt, Cyclic "
Automation system System Manual, 11/2019, A5E03461182-AF
343
Glossary
Data block
Data blocks (DBs) are data areas in the user program that contain user data. There are global data blocks, which can be accessed from all code blocks, and instance data blocks, which are assigned to a specific FB call.
Device
A device can send, receive or amplify data via the bus, e.g. IO device via PROFINET IO.
Device names
Before an IO device can be addressed by an IO controller, it must have a device name. This approach was chosen for PROFINET because names are easier to administer than complex IP addresses.
In its delivery state, an IO device has no device name. An IO device be addressed by an IO controller only after a device name has been assigned using the PG/PC, e.g. for the transmission of configuring data (including the IP address) during start-up or for the exchange of useful data in cyclic mode.
Diagnostic buffer
The diagnostic buffer is a battery-backed memory area in the CPU where diagnostic events are stored in their order of occurrence.
Diagnostics
Monitoring functions for the detection, localization, classification, display, and further evaluation of errors, faults, and alarms. They run automatically while the system is in operation. This increases the availability of systems by reducing commissioning times and downtimes.
Diagnostics interrupt
You can find relevant information under the entry "Interrupt, Diagnostics"
Distributed I/O system
System with I/O modules that are configured on a distributed basis, at a large distance from the CPU controlling them.
DP
Distributed I/O
344
Automation system System Manual, 11/2019, A5E03461182-AF
Glossary
Equipotential bonding
Electrical connection (potential equalization conductor) that brings the bodies of electrical equipment and other conductive bodies to the same or almost the same potential, in order to prevent disruptive or dangerous voltages between these bodies.
Firmware of the CPU
In SIMATIC, a distinction is made between the firmware of the CPU and user programs.
The firmware is a software embedded in electronic devices. The firmware is permanently connected to the hardware in functional terms. It is usually saved in a flash memory, such as EPROM, EEPROM or ROM, and cannot be replaced by the user or only with special tools or functions.
User program: You will find further information in the glossary entry "User program"
Firmware update
Upgrade of firmware for CPU and the modules (interface modules, I/O modules etc.), e.g. after function extensions, to the most recent firmware version (update).
Function
A function (FC) is a code block with no static data. A function allows you to pass parameters in the user program. Functions are thus suited for programming frequently recurring complex functions, such as calculations.
Function block
A function block (FB) is a code block with static data. An FB allows you to pass parameters in the user program. Function blocks are thus suited for programming frequently recurring complex functions, such as closed-loop controls or operating mode selection.
Functional ground
The functional ground is a low-impedance current path between electric circuits and ground. It is not intended as a protective measure but rather, for example, for improvement of interference immunity.
Ground
Conductive ground whose electrical potential can be set equal to zero at any point.
All interconnected, inactive parts of a piece of equipment that cannot accept any dangerous contact voltage, even in the event of a fault.
Automation system System Manual, 11/2019, A5E03461182-AF
345
Glossary
Ground
Conductive ground whose electrical potential can be set equal to zero at any point.
All interconnected, inactive parts of a piece of equipment that cannot accept any dangerous contact voltage, even in the event of a fault.
Grounding
Grounding means connecting an electrically conductive part to a grounding electrode by means of a grounding system.
GSD file
The Generic Station Description file contains all properties of a PROFINET or PROFIBUS device that are necessary for its configuration.
Hardware interrupt
You can find relevant information under the entry "Interrupt, Hardware "
I/O modules
All modules that can be operated with a CPU or an interface module.
Identification data
Information that is saved in modules, and that supports the user in reviewing the system configuration and locating hardware changes.
Instance data block
Each call of a function block in the STEP 7 user program is assigned a data block, which is automatically generated. Values of the input, output and in/out parameters, as well as local block data, are stored in the instance data block.
Interface module
Module in the distributed I/O system. The interface module connects the distributed I/O system to the CPU (IO controller) via a fieldbus, and prepares the data for and from I/O modules.
Interrupt
The operating system of the CPU distinguishes between various priority classes that control the execution of the user program. These priority class processes include, for example, hardware interrupts. When an interrupt occurs, the operating system automatically calls an assigned organization block. The user can program the desired reaction in the organization block, e.g. in a FB.
346
Automation system System Manual, 11/2019, A5E03461182-AF
Glossary
Interrupt, cyclic
The CPU generates a cyclic interrupt periodically within a parameterizable time grid and then processes the corresponding organization block.
Interrupt, hardware
A hardware interrupt is triggered by interrupt-triggering modules due to a certain event in the process. The hardware interrupt is signaled to the CPU. The CPU then processes the assigned organization block according to the priority of this interrupt.
Interrupt, time-delay
The time-delay interrupt is one of the program execution priority classes of SIMATIC S7. The time-delay interrupt is generated upon expiration of a timer started in the user program. The CPU then processes the corresponding organization block.
Interrupt, time-of-day
The time-of-day interrupt is one of the program execution priority classes of SIMATIC S7.. The time-of-day interrupt is generated based on a defined date (or daily) and time (e.g. 9:50 or every hour, every minute). The CPU then processes the corresponding organization block.
Interrupt, update
When it receives an update interrupt, the operating system calls the update interrupt OB. This may happen if you changed a parameter on a slot of a device.
IP address
The IP address is made up of four decimal numbers with a range of values from 0 through 255. The decimal numbers are separated by a dot (for example 192.162.0.0). The IP address consists of the following: Address of the network Address of the device (PROFINET interface of the IO controller/IO device)
Isolated modules
In the case of isolated input/output modules, the reference potentials of the control and load circuits are galvanically isolated, e.g. by means of optical isolators, relays or transformers. Input/output circuits can be connected to common potential.
Load current supply
Supply of the module's input and output electric circuits.
Automation system System Manual, 11/2019, A5E03461182-AF
347
Glossary
MAC address
Every PROFINET device is assigned a worldwide unique device identification before it leaves the factory. This 6-byte long device identification is the MAC address.
The MAC address is divided into:
3-byte manufacturer identification
3-byte device identification (consecutive number)
The MAC address is generally shown on the front of the device. Example: 08-00-06-6B-80-C0
Non-isolated modules
In the case of non-isolated input and output modules, the reference potentials of the control and load circuits are electrically connected.
NTP
The Network Time Protocol (NTP) is a standard for synchronizing clocks in automation systems via Industrial Ethernet. NTP uses the UDP connectionless network protocol.
Operating modes
Operating states describe the behavior of a single CPU at a specific time.
Organization block
Organization blocks (OBs) form the interface between the operating system of the CPU and the user program. The organization blocks determine the order in which the user program is executed.
Parameter
Tag of a STEP 7 code block:
Tag for setting the behavior of a module (one or more per module). In as-delivered state, every module has an appropriate basic setting, which you can change by configuring in STEP 7. There are static and dynamic parameters
Parameters, dynamic
In contrast to static parameters, you can change dynamic parameters of modules during operation by calling an SFC in the user program, e.g. limit values of an analog input module.
Parameters, static
In contrast to dynamic parameters, you cannot change static parameters of modules with the user program but only by configuring in STEP 7, e.g. input delay of a digital input module.
348
Automation system System Manual, 11/2019, A5E03461182-AF
Glossary
PELV
Protective Extra Low Voltage = safety extra low voltage connected to protective earth
Pre-wiring
Wiring of the electrical system on the front connector before the front connector is used on the I/O module.
Process image (I/O)
The CPU transfers the values from the input and output modules to this memory area. At the start of the cyclic program the signal states of the input modules are transmitted to the process image of the inputs. At the end of the cyclic program the process image of the outputs is transmitted as signal state to the output modules.
Product version (PV) = Function version (FV)
The product version or function version provides information on the hardware version of the module.
PROFIBUS
PROcess FIeld BUS, process and fieldbus standard that is specified in IEC 61158 Type 3. It specifies functional, electrical and mechanical characteristics for a bit-serial field bus system.
PROFIBUS supports the protocols DP (= Distributed I/O), FMS (= Fieldbus Message Specification), PA (= Process Automation), or TF (= Technological Functions).
PROFINET
PROcess FIeld NETwork, open industrial Ethernet standard which further develops PROFIBUS and industrial Ethernet. A cross-manufacturer communication, automation, and engineering model defined by PROFIBUS International e.V. as an automation standard.
PROFINET IO
Communication concept for the realization of modular, distributed applications within the scope of PROFINET.
PROFINET IO controller
Device used to address connected I/O devices (e.g. distributed I/O systems). This means that: The IO controller exchanges input and output signals with assigned IO devices. Often, the IO controller is the CPU on which the automation program runs.
Automation system System Manual, 11/2019, A5E03461182-AF
349
Glossary
PROFINET IO device
Distributed field device that can be assigned to one or more IO controllers (e.g. distributed I/O system, valve terminals, frequency converters, switches).
Push-in terminal
Terminal for the tool-free connection of wires.
Reference potential
Potential from which the voltages of the circuits involved are observed and/or measured.
Restart
During a warm restart, all non-retentive bit memory is deleted and non-retentive DB contents are reset to the initial values from load memory. Retentive bit memory and retentive DB contents are retained. Program execution begins at the call of the first startup OB.
Retentivity
A memory area whose content is retained after power failure and after a STOP to RUN transition is retentive. The non-retentive area bit memory area, timers and counters are reset after a power failure and after a STOP to RUN transition. The non-retentive content of data blocks is reset to the initial values.
Row
All the modules attached to a mounting rail.
Runtime error
Error that occurs during execution of the user program in the automation system (thus not in the process).
SELV
Safety Extra Low Voltage = Safety extra-low voltage
Slave station
A slave may only exchange data with a master after being requested to by the master.
350
Automation system System Manual, 11/2019, A5E03461182-AF
Glossary
SNMP
SNMP (Simple Network Management Protocol) is the standardized protocol for performing diagnostics on and assigning parameters to the Ethernet network infrastructure.
In the office setting and in automation engineering, devices from a wide range of vendors on the Ethernet support SNMP.
SNMP-based applications can be operated on the same network in parallel to applications with PROFINET.
The scope of supported functions varies depending on the device type. For example a switch has more functions than a CP 1616.
Switch
PROFIBUS is a linear network. The communication nodes are linked by means of a passive cable - the bus.
By contrast, Industrial Ethernet consists of point-to-point connections: Each communication node is directly connected to exactly one communication node.
If a communication node is linked to several communication nodes, this communication node is connected to the port of an active network component - the switch. Additional communication nodes (including switches) can now be connected to the other ports of the switch. The connection between a communication node and the switch remains a point-topoint connection.
A switch thus has the task of regenerating and distributing received signals. The switch "learns" the Ethernet address(es) of a connected PROFINET device or additional switches and only forwards those signals that are intended for the connected PROFINET device or switch.
A switch has a specific number of connections (ports). You connect at most one PROFINET device or additional switch to each port.
System power supply
Consists of the integrated system power supply of the CPU/interface module and additional power supplies (PS), if necessary. The system power supply serves exclusively to supply the I/O modules via the backplane bus.
Technology object
A technology object supports you in the configuration and commissioning of a technological function.
The properties of real objects are represented by technology objects in the controller. Real objects can be, for example, controlled systems or drives.
The technology object contains all data of the real object required for its open-loop or closedloop control, and it signals back status information.
Automation system System Manual, 11/2019, A5E03461182-AF
351
Glossary
TIA Portal
Totally Integrated Automation Portal
The TIA Portal is the key to the full performance capability of Totally Integrated Automation. The software optimizes operating, machine and process sequences.
Time-delay interrupt
You can find relevant information under the entry "Interrupt, time-delay"
Time-of-day interrupt
You can find relevant information under the entry "Interrupt, Time-of-day"
Timer
Timers are components of the system memory of the CPU. The operating system automatically updates the content of the "timer cells" asynchronously to the user program. STEP 7 instructions define the precise function of the timer cell (for example on-delay) and trigger its execution.
Update interrupt
You can find relevant information under the entry "Interrupt, Update "
User program
SIMATIC differentiates between the operating system of the CPU and user programs. The user program contains all instructions, declarations and data for the signal processing, which control a system or process. The user program is assigned to a programmable module, a CPU, for example. Structuring into smaller unit is supported.
Value status
The value status is additional binary information of a digital input or output signal. The value status is entered simultaneously with the process signal in the process image input and provides information about the validity of the signal.
Warm restart
You can find relevant information under the entry "Restart"
352
Automation system System Manual, 11/2019, A5E03461182-AF
Index
2
24 V DC supply, 130
A
Accessible devices Firmware update, 290
Accessories, 336 Addressing, 174
Analog modules, 178 Basics, 174 Digital modules, 176 Ambient condition Climatic, 323 Mechanical, 322 Operating conditions, 321 Analog modules Addressing, 178 Application in industrial environments, 317 in mixed areas, 317 in residential areas, 317 Power segment, Approvals, 312 CE, 313 cULus, 313 FM, 315 IEC 61010, 316 IEC 61131, 316
C
CE approval, 313 Climatic ambient conditions, 323 Coding element, 147, 278
Basics, 278 Front connectors, 283 Power connector, 285 Replace module, 282 Commissioning, 229, 261 Check before power-on, 230 First power-on, 235 First power-on, requirements, 235 Identification data, 258, 261 Identification data - record structure, 261
Automation system System Manual, 11/2019, A5E03461182-AF
Procedure, 231 Removing/inserting SIMATIC memory card, 232 Reset to factory settings, 297 Components Overview of the ET 200MP, 36 Configuration, 135 Basics, 169 Electrical, 138 ET 200MP, 31 On grounded reference potential, 134 Configuration control, 209, 210 Configuration control for IO systems, 209 Configuring, 183 Properties of the CPUs, 173 Connection plug 4-pole, 39 Control data record S7-1500, 217 CPU, 37 Accessories, 336 Backup/restore contents, 250 Display, 266 Installing, uninstalling, 125 Memory reset, 246 Reading out service data, 308 Reset to factory settings, 293 Supply voltage, 146 Wiring rules, 141 cULus approval, 313
D
Degree of protection IP20, 327 Digital modules
Addressing, 176 Dimension drawing, 332
Infeed element, 334, 334 Labeling strips, 335 Mounting rail, 329 Shield clamp, 333, 334 Shielding bracket, 333 Display, 266 Basics, 266 Control buttons, 271 Languages, 274
353
Index
E
H
Electromagnetic compatibility (EMC), 318 Electrostatic discharge, 318 EMC (Electromagnetic compatibility), 318
Disturbances, 318 Radio interference, 319 EMERGENCY-STOP devices, 129 ET 200MP, 29 Accessories, 336 Area of application, 23 Components, 36 Configuration example, 34 Configuring, 183 Examples of configurations, 31 Example Configuration of ET 200MP, 34 Examples of configurations, 31
F
Factory settings, 293, 297 Fail-safe I/O modules
Coding element, 38 FAQ
Emergency address, 251 FAQs
Firmware update, 292 Labeling strips, 165 Load current supplies, 96 Removing a SIMATIC memory card, 234 Firmware update, 287 FM approval, 315 Front connectors, 38 Final position, 163 General information, 152 Potential bridge, 152 replacing, 283 Shield contact, 162 Wiring, 154, 156, 158, 160 Wiring of analog modules, 156 Wiring rules, 141
Hardware configuration ET 200MP DP Slots, 94
Hardware configuration ET 200MP PN Slots, 93
I
I/O module, 38 Front connectors, 152 Inserting or removing, 275 Installing, uninstalling, 128 Marking, 164 replacing, 282
Identification data, 258 Record structure, 261
IEC 60204, 129 IEC 61010, 316 IEC 61131, 316 Infeed, 134 Infeed element, 334, 334 Infeed, grounded, 134 Installation
Basics, 107 CPU, 125 I/O modules, 128 Interface module, 126 Load current supply, 123 Mounting rail, 109, 112 Power supply, 120 Installation position, 107 Installation rules, 109 Insulation, 327 Interface module, 37 Installation rules, 109 Installing, uninstalling, 126 Reset to factory settings, 297 Supply voltage, 146 Wiring rules, 141
K
G
Know-how protection, 203
Galvanic isolation, 138 Grounded infeed, 134 Grounding, 113
Configuration on grounded reference potential, 134 Overview of the CPU, 137
L
Labeling strips, 39, 164, 164 Dimension drawing, 335
Languages Display, 274
354
Automation system System Manual, 11/2019, A5E03461182-AF
Index
Lightning protection, 130 Line voltage, 130 Load current supply, 40, 95
Definition, 95 Installing, uninstalling, 123 Wiring rules, 141
M
Main entry, 23 Maintenance
Coding element, 278 Firmware update, 287 Reading out service data, 308 Removal and insertion, 275 Replace module, 282 Replacing a front connector, 283 Reset to factory settings, 293 Test functions, 301 Marking, 164, 166 Labeling strips, 164 optional, 166 Maximum configuration with PROFIBUS interface module, 94 with PROFINET interface module, 92 Maximum cycle time, (Cycle monitoring time), (Cycle monitoring time) Memory reset Automatic, 247 Basics, 246 Manual, 248, 248 Minimum clearances, 108 Module swapping, (See Replacing) Mounting rail, 36, 107, 109 Attaching the protective conductor, 113 Dimension drawing, 329 Drill holes, 111 Fastening, 111 installation, 112 Length, 111 Multiple use IO systems, 209
O
OBs, 186 Event source, 186 Priorities, 186 Priorities and runtime behavior, 187 Queue, 186 Triggers, 186
Operating mode Setting the startup behavior, 241
Operating modes Basics, 238 Operating mode transitions, 244 RUN, 243 STARTUP, 238 STOP, 242
Option handling, (Configuration control) Overall configuration, 137 Overload, 105 Overview
Components of an S7-1500, 36 Grounding the CPU, 137 Overview, graphic Examples of configurations, 31
P
Password provider, 203 PE connection element, 36 PELV, 135, 135 Pollution degree, 327 Potential bridge, 38
Front connectors, 152 Power balance calculation, 103
Overload, 105 Power segment
Application, 98 Power supply, 120 Power supply element, 39 Process image
Inputs and outputs, 180 Process image partition, 181
updating in the user program, 182 Protection, 199, 204, 207, 208
Access levels, 199 Behavior of a password-protected CPU, 201 Copy protection, 207 Know-how protection, 204 mechanical locking, 208 Protection against electrical shock, 130 Protection against external electrical influences, 130 Protection class, 327
R
Radio interference, 317, 319 rated voltage, 328 Reading out service data, 308 Reference potential of the controller, 135
Automation system System Manual, 11/2019, A5E03461182-AF
355
Index
Removal and insertion of modules, 275 Replacing
Front connectors, 283 I/O module, 282
S
S7-1500 Area of application, 23 Configuration, 30 Configuration example, 30 Overview of components, 36
S7-1500 CPU/ET 200MP interface module Rules and regulations for operation, 129
S7-1500 hardware configuration Slots, 91
Safe electrical isolation, 135, 135 Shield clamp, 39, 333, 334 Shielding bracket, 39, 332, 332, 333 Shipping conditions, 321 Short-circuit and overload protection, 136 Spare parts, 336 Specific application, 129 Standard machine project, 209 Standards, 312 Storage conditions, 321 Supply voltage
CPU, 146 Interface module, 146 Swapping, (See Replacing) System power supply, 40, 95 Application, 97, 98 Configuration variants, 97 Definition, 95 Installing, uninstalling, 121 Power segment, 97 Wiring rules, 141
T
Technical specifications Climatic ambient conditions, 323 Electromagnetic compatibility (EMC), 318 Shipping and storage conditions, 321 Standards and Approvals, 312
Test functions, 301 Test voltage, 327 type-coded, 278
U
U connector, 38 Uninstalling
CPU, 125 I/O module, 128 Load current supply, 124 System power supply, 121
W
Wiring, 129 Front connectors, (Analog modules), 158 General rules for the S7-1500 CPU/the ET 200MP interface module, 129 Front connectors, (Analog modules), 158 Front connectors, (Analog modules), 158 Load current supply, 147 Sensors and actuators, 152 Supply voltage to the CPU, 146 System power supply, 147 Without tools, 146
Wiring actuators, 152 Wiring rules
CPU, 141 Front connectors, 141 Load current supply, 141 System power supply, 141 Wiring sensors, 152
Z
Zone 2 hazardous atmosphere, 328
356
Automation system System Manual, 11/2019, A5E03461182-AF
S7-1500
SIMATIC S7-1500
Getting Started
_W_el_co_m_e ______________ _Au_to_m_a_tio_n _ta_sk__________1_ _Ha_rd_w_a_re_se_c_tio_n_________2_ _So_ft_wa_re_s_e_ct_ion__________3_ _Se_c_ur_ity______________4_
05/2014
A5E03981761-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03981761-AC 05/2014 Subject to change
Copyright © Siemens AG 2013 - 2014. All rights reserved
Welcome
Welcome
Welcome to the Getting Started "TIA Portal V13".
In this Getting Started, we show you an example of how to use the CPU SIMATIC S7-1500 with the TIA Portal to create an automation solution for a "color mixing plant". Video clips will illustrate the approach for creating a solution for the automation task.
In the first part, you assemble the hardware and prepare your configuration PC.
In the second part, you configure the CPU and HMI visualization using the example of a color mixing plant.
In addition, you can find options and extensions for your automation solutions.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, solutions, machines, equipment and/or networks. They are important components in a holistic industrial security concept. With this in mind, Siemens' products and solutions undergo continuous development. Siemens recommends strongly that you regularly check for product updates.
For the secure operation of Siemens products and solutions, it is necessary to take suitable preventive action (e.g. cell protection concept) and integrate each component into a holistic, state-of-the-art industrial security concept. Third-party products that may be in use should also be considered. You can find more information about industrial security on the Internet (http://www.siemens.com/industrialsecurity).
To stay informed about product updates as they occur, sign up for a product-specific newsletter. You can find more information on the Internet (http://support.automation.siemens.com).
S7-1500
Getting Started, 05/2014, A5E03981761-AC
3
Table of contents
Welcome ................................................................................................................................................ 3
1 Automation task ...................................................................................................................................... 7
1.1
Introduction.................................................................................................................................... 7
1.2
Sample project .............................................................................................................................. 8
2 Hardware section .................................................................................................................................. 15
2.1 2.1.1 2.1.2
Introduction.................................................................................................................................. 15 Requirements .............................................................................................................................. 15 Additional information.................................................................................................................. 16
2.2 2.2.1 2.2.2
Installing the assembly ................................................................................................................ 17 Overview ..................................................................................................................................... 17 Installing the assembly ................................................................................................................ 17
2.3 2.3.1 2.3.2 2.3.3 2.3.4 2.3.5 2.3.6 2.3.7 2.3.8
Wiring .......................................................................................................................................... 20 Overview ..................................................................................................................................... 20 Wiring rules ................................................................................................................................. 21 Wiring the mains connection plug ............................................................................................... 22 Wiring the load current supply (PM) to the CPU ......................................................................... 24 Potential bridge circuits ............................................................................................................... 25 Wiring the digital input module .................................................................................................... 25 Wiring the digital output module.................................................................................................. 27 Wiring front connectors ............................................................................................................... 29
2.4 2.4.1 2.4.2 2.4.3
Power on ..................................................................................................................................... 31 Overview ..................................................................................................................................... 31 Power on ..................................................................................................................................... 31 Assign IP address via the display ............................................................................................... 33
3 Software section ................................................................................................................................... 34
3.1 3.1.1 3.1.2 3.1.3 3.1.4 3.1.5 3.1.6 3.1.7 3.1.8 3.1.9
Creating the project and hardware.............................................................................................. 34 Introduction to the TIA Portal ...................................................................................................... 34 Creating a project ........................................................................................................................ 36 Creating an S7-1500 CPU .......................................................................................................... 38 Running the hardware detection ................................................................................................. 40 Creating ET 200 interface modules ............................................................................................ 41 Networking ET 200 interface modules ........................................................................................ 42 Creating input and output modules and a server module for ET 200SP .................................... 44 Creating input and output modules for ET 200MP...................................................................... 46 Assigning names for ET 200 ....................................................................................................... 47
S7-1500
4
Getting Started, 05/2014, A5E03981761-AC
Table of contents
3.2
Creating the program ...................................................................................................................48
3.2.1 Loading the block library ..............................................................................................................48
3.2.2 Deleting program block Main [OB1] .............................................................................................50
3.2.3 Copying program blocks ..............................................................................................................51
3.2.4 Cyclic interrupt OB .......................................................................................................................52
3.2.4.1 Cyclic interrupt OB Cycle time and phase ................................................................................52
3.2.4.2 Changing the cycle time...............................................................................................................53
3.2.5 Copying tag tables .......................................................................................................................54
3.2.6 Compiling a project ......................................................................................................................55
3.2.7 Load project into the CPU............................................................................................................57
3.2.8 Optimized block access ...............................................................................................................59
3.2.8.1 Introduction ..................................................................................................................................59
3.2.8.2 Expanding and reloading the optimized "Filling" data block ........................................................60
3.2.9 Versioning a block........................................................................................................................65
3.2.10 Setting retentivity..........................................................................................................................68
3.2.11 Activating the EN/ENO mechanism .............................................................................................71
3.2.12 Using the comment function ........................................................................................................73
3.2.13 Local error handling .....................................................................................................................74
3.2.13.1 Handle errors within block............................................................................................................74
3.2.13.2 Loading blocks for local error handling ........................................................................................76
3.2.13.3 Generating errors without local error handling.............................................................................78
3.2.13.4 Generating errors with local error handling..................................................................................79
3.3
Configure visualization .................................................................................................................81
3.3.1 Present sample project ................................................................................................................81
3.3.2 HMI configuration .........................................................................................................................81
3.3.2.1 Overview ......................................................................................................................................81
3.3.2.2 SIMATIC HMI Comfort Panels .....................................................................................................82
3.3.2.3 HMI screens .................................................................................................................................83
3.3.2.4 Additional control elements..........................................................................................................84
3.3.2.5 Recipes ........................................................................................................................................85
3.3.2.6 Archives .......................................................................................................................................86
3.3.2.7 User-defined functions .................................................................................................................87
3.3.2.8 User Management .......................................................................................................................88
3.3.2.9 Multilingualism..............................................................................................................................89
3.3.2.10 Reports.........................................................................................................................................91
3.3.3 Insert HMI device from libraries ...................................................................................................93
3.3.3.1 Storing an object in a library ........................................................................................................93
3.3.4 Configuring HMI connection.........................................................................................................94
3.3.4.1 Communication between devices ................................................................................................94
3.3.4.2 Configuring HMI connection.........................................................................................................95
3.3.4.3 Connecting HMI tags ...................................................................................................................97
3.3.5 Configuring system diagnostics ...................................................................................................99
3.3.5.1 System diagnostics basics...........................................................................................................99
3.3.5.2 System diagnostics views ..........................................................................................................100
3.3.5.3 Configuring the system diagnostic view.....................................................................................103
3.3.6 Simulating an HMI device ..........................................................................................................105
3.3.6.1 Simulation basics .......................................................................................................................105
3.3.6.2 Operating the panel in simulation ..............................................................................................106
S7-1500
Getting Started, 05/2014, A5E03981761-AC
5
Table of contents
3.4 3.4.1
Loading the project into the programming device ..................................................................... 110 Load CPU to project .................................................................................................................. 110
3.5 3.5.1 3.5.2 3.5.3
Team engineering via Inter Project Engineering....................................................................... 112 Basics of "Inter Project Engineering" ........................................................................................ 112 Creating an IPE file ................................................................................................................... 113 Importing an IPE file .................................................................................................................. 114
4 Security ...............................................................................................................................................117
4.1
Overview of the protective functions of the CPU ...................................................................... 117
4.2
Using the display to configure additional access protection ..................................................... 118
4.3
Know-how protection................................................................................................................. 119
4.4
Copy protection ......................................................................................................................... 122
4.5
Protection by locking the CPU .................................................................................................. 123
4.6
Configuring access protection for the CPU ............................................................................... 123
4.7
Configuring protection of the HMI connection........................................................................... 126
S7-1500
6
Getting Started, 05/2014, A5E03981761-AC
Automation task
1
1.1
Introduction
Introduction
In the following section, you will become familiar with the automation task.
You can find out more about the application example, the hardware configuration and the components of the sample project.
Application example
The application example for this Getting Started is a color mixing plant for mixing and filling a previously selected color recipe. There are four color components for the recipe, cyan, magenta, yellow and black, which means the colors of the CMYK color space. Filling takes place in four steps. Selection of the color mixture using the HMI recipe function. Filling the recipe components or the four basic colors by opening the respective tank
valves. Mixing the colors. Filling the finished color mixture into tins and transportation by a conveyor belt.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
7
Automation task 1.2 Sample project
Design of the hardware configuration
The hardware configuration consists of the following devices: The CPU 1511-1 PN with an S7-1500 load current supply, a digital input module and a
digital output module. HMI Panel TP1200 Comfort that can also be simulated with the TIA Portal. Distributed ET 200MP I/O system with IM 155-5 PN ST interface module and digital input
and digital output modules. Distributed ET 200SP I/O system with IM 155-6 PN ST interface module, digital input
modules, digital output modules and server module.
1.2
Sample project
Sample project for the application
To configure the color mixing system with the TIA Portal, create the sample project "Color_Filling_Station".
The following project components already exist for the sample project:
The program blocks of the CPU
The visualization of the HMI on a Comfort Panel
In this section, we will explain the relationships between the individual project components of the sample project.
You will carry out the necessary configuration steps yourself at a later point in time.
S7-1500
8
Getting Started, 05/2014, A5E03981761-AC
Selecting the recipe
Automation task 1.2 Sample project
The HMI screen "Recipes" includes the "Color selection recipe". This is a prefabricated
object from the library of the TIA Portal. You can use this object to select data records and to create new data records.
The data records (color mixtures) and elements (color components) are stored in the
"Recipes" HMI editor. Each color mixture consists of the four color components cyan (C), magenta (M), yellow (Y), black (K). The proportion of each of the four color components in a color mixture is stored in the "Recipes" editor.
The values for the respective color components are written in PLC tags when you load
a color mixture. The PLC tags are stored in the "Tags_Filling_Process" tag table of the CPU.
The HMI screen "Recipes" also includes a slider. You use this slider to specify the
number of tins to be filled.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
9
Automation task 1.2 Sample project
Displaying the CMYK and RGB values
When the required color mixture is selected in the HMI screen "Recipes", the values
are displayed in the CMYK color space by means of a bar diagram.
The color mixture can be shown with an additional display. This requires the
"Recipescreen" script to be run.
You run the "Recipescreen" script by clicking the "Display RGB Value" button. The
script assigns the RGB value assigned to the CMYK value to the display, because CMYK values cannot be output directly on screens.
The required RGB value is calculated by the "SCL_Convert_CMYK_TO_RGB"
program block.
S7-1500
10
Getting Started, 05/2014, A5E03981761-AC
Filling the recipe
Automation task 1.2 Sample project
The "Fill recipe" button starts the filling of the color components in the HMI screen "Start screen". The
button activates the "LAD_Control_Color_Valves" program block.
The program block calculates how long each of the four valves needs to stay open for the color mixture
based on the specified recipe and the number of tins that have to be filled.
LEDs below the tanks indicate that the valves are opened. The "LAD_Tanks_Filling_Level" program block is executed at the same time as the filling. The program
block calculates the quantity remaining in the tank for the tank fill level. The fill levels of the tanks are stored in the global data block "Filling".
The fill level indicators in the HMI screen are directly linked with the global data block and are updated
with each runtime acquisition cycle.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
11
Automation task 1.2 Sample project Starting the mixing process
The "Start mixing process" button starts the mixer of the color mixing plant in the HMI
screen "Start screen".
The "LAD_Mixer" program block is called for this purpose at the CPU end. It activates
the mixer for three seconds.
The activation of the mixer is indicated by flashing in the HMI screen.
S7-1500
12
Getting Started, 05/2014, A5E03981761-AC
Filling the color mixture
Automation task 1.2 Sample project
The "Fill Color Mixture" button starts the filling of the tins in the HMI screen "Start
screen".
The "SCL_Valve_Conveyor" program block is activated for this purpose at the CPU
end; it controls the valves and the conveyor belt.
The tins are animated according to the movement of the conveyor belt in the HMI
screen.
A counter indicates the number of tins that have already been filled.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
13
Automation task 1.2 Sample project
Resetting the fill level
There is a button to reset the fill level of each of the four color tanks in the HMI screen
"Start screen".
The reset of the respective fill level has been implemented in the "Main" program
block in networks 6 to 9.
Networks 6 to 9 reset the values to the Start value in the global data block "Filling".
S7-1500
14
Getting Started, 05/2014, A5E03981761-AC
Hardware section
2
2.1
Introduction
The new SIMATIC S7-1500 controller family with the Totally Integrated Automation Portal (TIA Portal) offers you numerous new options to further increase the productivity of your machines and to make the engineering process even more efficient. Explore the options in this Getting Started.
In the first basic steps, you will get to know the new hardware better. We will also show you how to configure and program the SIMATIC S7-1500 with SIMATIC STEP 7 V13 (TIA Portal). The connection of a SIMATIC HMI Comfort Panel with SIMATIC WinCC Advanced V13 (TIA Portal) or SIMATIC WinCC Professional V13 (TIA Portal) completes the basic steps.
2.1.1
Requirements
Hardware requirements
To implement the hardware section of this Getting Started, you will need: 1 × CPU 1511-1 PN (6ES7511-1AK00-0AB0) 1 × S7-1500 load current supply PM 70W 120/230VAC (6EP1332-4BA00) 1 × Mounting rail (6ES7590-1AB60-0AA0) 1 × digital input module DI 16x24VDC SRC BA (6ES7521-1BH50-0AA0) 1 × digital output module DQ 16x24VDC/0.5A ST (6ES7522-1BH00-0AB0) 2 × Front connectors (6ES7592-1AM00-0XB0) 1 × SIMATIC Memory Card with at 4 MB (e.g. 6ES7954-8LBxx-0AA0) 1 × Ethernet cable The hardware mentioned above is also part of the following starter package: Starter package S7-1500 with software: 6ES7511-1AK00-4YB5
S7-1500
Getting Started, 05/2014, A5E03981761-AC
15
Hardware section 2.1 Introduction
Software requirements
To implement the software section of this Getting Started, you will need: SIMATIC STEP 7 Professional V13 SIMATIC WinCC Advanced V13 or SIMATIC WinCC Professional V13
WARNING Severe personal injury may result The S7-1500 automation system in plants or systems is governed by specific standards and regulations, based on the relevant field of application. Please observe the applicable safety and accident prevention regulations such as IEC 60204-1 (general machine safety requirements). Failure to observe these regulations can result in serious injuries and damages to machinery and facilities.
2.1.2
Additional information
Detailed information on the hardware used is available here:
CPU 1511-1 PN (6ES7511-1AK00-0AB0) (http://support.automation.siemens.com/WW/view/en/68020492)
S7-1500 load current supply PM 70W 120/230VAC (6EP1332-4BA00) (http://support.automation.siemens.com/WW/view/en/68036174)
DI 16x24 V DC SRC BA digital input module (6ES7521-1BH50-0AA0) (http://support.automation.siemens.com/WW/view/en/59191844/)
DQ 16x24 V DC/0.5A ST digital output module (6ES7522-1BH00-0AB0) (http://support.automation.siemens.com/WW/view/en/59193401)
S7-1500
16
Getting Started, 05/2014, A5E03981761-AC
2.2
Installing the assembly
2.2.1
Overview
Mounting the assembly
You mount the structure in this section.
Hardware section 2.2 Installing the assembly
2.2.2
Installing the assembly
Procedure
1. Mount the load current supply (PM) on the mounting rail.
2. Open the front cover and pull out the mains connection plug.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
17
Hardware section 2.2 Installing the assembly
3. Remove the 4-pole connection plug and screw the load current supply (PM) tight.
4. Insert the U-connector into the back of the CPU.
5. Mount the CPU on the mounting rail and screw tight.
S7-1500
18
Getting Started, 05/2014, A5E03981761-AC
Hardware section 2.2 Installing the assembly
6. Insert the U-connector into the back of the digital input module.
7. Attach the digital input module to the mounting rail and screw tight. 8. Attach the digital output module to the mounting rail and screw tight.
Result
The assembly has been mounted.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
19
Hardware section 2.3 Wiring
2.3
Wiring
2.3.1
Overview
Wiring the assembly
You mount the assembly in this section.
DANGER
The mains cable for the load current supply must not be connected to the power supply during wiring.
S7-1500
20
Getting Started, 05/2014, A5E03981761-AC
Hardware section 2.3 Wiring
2.3.2
Wiring rules
Operation of an S7-1500 CPU in plants or systems is defined by special set of rules and regulations, based on the relevant field of application.
You can find the general rules and regulations for operating the S7-1500 in the S7-1500 system description (http://support.automation.siemens.com/WW/view/en/59191792).
Wiring rules for the CPU
Wiring rules...
CPU
40-pin front connector Load power supply (screw-type connection)
Connectible wire cross-sections for solid wires --
up to 0.25 mm2
--
--
AWG*: 24
--
Connectible wire cross-sections for stranded wires
Without wire end ferrule 0.25 to 2.5 mm2 AWG*: 24 to 16
With wire end ferrule 0.25 to 2.5 mm2
0.25 to 1.5 mm2 AWG*: 24 to 16 0.25 to 1.5 mm2
1.5 mm2 AWG*: 16 1.5 mm2
AWG*: 24 to 16
AWG*: 24 to 16
AWG*: 16
Number of wires per connection
1
1 or a combination of 2 1 cables up to 1.5 mm2 (total) in the same wire end ferrule
Length of stripped wires
10 to 11 mm
10 to 11 mm
7 to 8 mm
End sleeves according to DIN 46228
Without plastic sleeve
with plastic sleeve 0.25 to 1.5 mm2
Design A, 10 mm long
Design A, 10 mm and 12 mm long
Design E, 10mm long Design E, 10 mm and 12 mm long
Design A, 7 mm long Design A, 7 mm long
Sheath diameter
--
--
8.5 mm
Tool
3 to 3.5 mm Phillips 3 to 3.5 mm Phillips
3 to 3.5 mm Phillips
screwdriver, conic screwdriver, conic design screwdriver, conic
design
design
Connection method
Push-in terminal
Screw terminal
Screw terminal
Tightening torque
--
from 0.4 Nm to 0.7 Nm from 0.5 Nm to 0.6
Nm
* AWG: American Wire Gauge
S7-1500
Getting Started, 05/2014, A5E03981761-AC
21
Hardware section 2.3 Wiring
2.3.3
Wiring the mains connection plug
Procedure
1. Pry off the connector cover using a suitable tool.
2. Connect the mains cable in the plug according to the connection diagram. You will find information on which voltage the plug is approved for on the side of the plug. You select the voltage by inserting the coding element accordingly on the back of the plug.
S7-1500
22
Getting Started, 05/2014, A5E03981761-AC
3. Close the cover.
Hardware section 2.3 Wiring
4. Tighten the screw on the front of the mains connection plug.
Result
The mains connection plug is now wired.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
23
Hardware section 2.3 Wiring
2.3.4
Wiring the load current supply (PM) to the CPU
Procedure
1. Wire the 4-pin connector plug of the load current supply (PM).
2. Wire the 4-pin connector plug with the 4-pin mains connection plug of the CPU.
3. Connect the load current supply (PM) to the CPU.
Result
24
The load current supply is now wired to the CPU.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Hardware section 2.3 Wiring
2.3.5
Potential bridge circuits
Application of the potential bridge circuits
If you want to supply the load groups with the same potential (non-isolated), use the potential circuit bridges supplied for the front connector. This means that you avoid having to wire a clamping unit with two wires.
Tip
Use the terminals 40 (M) and 39 (L+) on the front connector to loop the potential to the next module.
2.3.6
Wiring the digital input module
Procedure
1. Insert the front connector into the pre-wiring position. There is no electrical connection between the front connector and the module in the pre-wiring position.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
25
Hardware section 2.3 Wiring
2. Thread in the cable tie.
3. Connect the supply voltage 24 V DC to the terminals 20 (M) and 19 (L+).
4. Insert the potential circuit bridges between the two bottom terminals.
Result
The digital input module is now wired.
26
S7-1500 Getting Started, 05/2014, A5E03981761-AC
2.3.7
Wiring the digital output module
Procedure
1. Insert the front connector into the pre-wiring position.
Hardware section 2.3 Wiring
2. Use terminals 40 (M) and 39 (L+) from the digital input module to feed the supply voltage DC 24 V from the digital input module to terminals 20 (M) and 19 (L+).
S7-1500
Getting Started, 05/2014, A5E03981761-AC
27
Hardware section 2.3 Wiring
3. Connect the four potential circuit bridges.
4. Connect the terminals 30 and 40, as well as 29 and 39 to each other.
Result
The digital output module is now wired.
S7-1500
28
Getting Started, 05/2014, A5E03981761-AC
Hardware section 2.3 Wiring
2.3.8
Wiring front connectors
Procedure
1. Connect the individual wires according to the connection diagram on the inner side of the front cover in the terminal and screw tight.
2. For strain relief, run the cable tie around the cable harness and pull tight.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
29
Hardware section 2.3 Wiring
3. Move the front connector from the pre-wiring position to its final position. By doing this, you create an electrical connection between the front connector and the module.
4. Tip: Pre-wired front connectors, e.g. for replacing modules, can be inserted directly.
Result
The front connectors are now wired.
S7-1500
30
Getting Started, 05/2014, A5E03981761-AC
2.4
Power on
2.4.1
Overview
Turning on the CPU for the first time
You turn on the CPU for the first time in this section.
2.4.2
Power on
Procedure
1. Insert mains connection plug of the load current supply (PM).
Hardware section 2.4 Power on
2. Connect the mains connection plug to the power supply.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
31
Hardware section 2.4 Power on
3. Insert a blank SIMATIC memory card into the CPU.
4. Move the switch for the load current supply (PM) to the position RUN. The CPU starts up.
Result
The CPU starts up and is in STOP mode.
S7-1500
32
Getting Started, 05/2014, A5E03981761-AC
Hardware section 2.4 Power on
2.4.3
Assign IP address via the display
In this step you set the IP address and the subnet mask for the CPU.
Procedure
1. Navigate to "Settings". 2. Select "Addresses". 3. Select the interface "X1 (IE/PN)". 4. Select the menu item "IP Addresses". 5. Set the IP address 192.168.0.10. 6. Press the "right" arrow key on the module. 7. Set the subnet mask 255.255.255.0. 8. Press the "down" arrow key on the module to select the menu item "Apply" and confirm
the setting with "OK"
Result
You have now assigned an IP address and the subnet mask for the interface "X1 (IE/PN)".
S7-1500
Getting Started, 05/2014, A5E03981761-AC
33
Software section
3
3.1
Creating the project and hardware
3.1.1
Introduction to the TIA Portal
Introduction
The Totally Integrated Automation Portal, referred to as TIA Portal in the following, offers all the functions you need for implementing your automation task assembled in a single, crosssoftware platform.
The TIA Portal is the first shared working environment for integrated engineering with the various SIMATIC systems made available within a single framework. The TIA Portal therefore also enables reliable, convenient cross-system collaboration for the first time.
All required software packages, from hardware configuration and programming to visualization of the process are integrated in a comprehensive engineering framework.
S7-1500
34
Getting Started, 05/2014, A5E03981761-AC
Software section 3.1 Creating the project and hardware
Advantages of working with the TIA Portal
The following features provide efficient support during the realization of your automation solution when working with the TIA Portal: Integrated engineering with a uniform operating concept
Process automation and process visualization go "hand-in-hand". Consistent, centralized data management with powerful editors and universal symbols
Data created once is available in all editors. Changes and corrections are automatically applied and updated within the entire project. Comprehensive library concept Use the ready-made instructions and pre-existing parts of the project again and again. Multiple programming languages Five different programming languages are available for implementing your automation task.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
35
Software section 3.1 Creating the project and hardware
3.1.2
Creating a project
Introduction
In the following step, you will create a new project.
All data which is generated during the creation of an automation solution is saved in the project file. The data is stored in the form of objects. Within the project, the objects are arranged in a tree structure (project hierarchy).
The project hierarchy is based on the devices and stations along with the configuration data and programs belonging to them.
Requirement
You need the following hardware and software equipment to create the project: Hardware:
The CPU 1511-1 PN that was installed and wired in the hardware section of the Getting Started.
An Ethernet connection to your programming device/PC.
Software: The following software packages must be installed and executable on your programming device/PC: SIMATIC STEP 7 Professional V13 SIMATIC WinCC Advanced V13 or SIMATIC WinCC Professional V13
Creating a new project
To create a new project, follow these steps: 1. Click "Create new project". 2. Enter a name for your project.
3. Click "Create" to create the new project.
S7-1500
36
Getting Started, 05/2014, A5E03981761-AC
Result
Software section 3.1 Creating the project and hardware
The project has been created. All data, such as the hardware configuration, the CPU programming and the visualization in HMI, is saved in the project.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
37
Software section 3.1 Creating the project and hardware
3.1.3
Creating an S7-1500 CPU
Introduction
In the following step, you will create an unspecified CPU. Unspecified CPUs are placeholders for specific CPUs from the hardware catalog which will be defined later.
Procedure
1. Open the "Devices & Networks" portal. 2. Insert a new device. 3. Enter "Color_Mixing_CPU" as the name for the CPU.
4. Open the "SIMATIC S7-1500" folder.
S7-1500
38
Getting Started, 05/2014, A5E03981761-AC
Software section 3.1 Creating the project and hardware
5. Select the CPU which has not yet been specified.
Result
6. Create the CPU with a double-click.
The unspecified CPU is created in the project file. Contents of the user program can already be created at this point for this CPU.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
39
Software section 3.1 Creating the project and hardware
3.1.4
Running the hardware detection
Introduction
In the following section, you will use the hardware detection function to read the CPU type.
Run an LED flashing test during hardware detection. The LED flashing test activates the LEDs on a detected device. You may also use this function to verify that the correct device was selected in a hardware configuration consisting of several devices.
Procedure
1. Select the unspecified CPU in the project tree. 2. Select the "Hardware detection" function from the "Online" menu.
Option 2: Click on the yellow framed alarm in the device view. 3. Select the "PN/IE" entry as the type of PG/PC interface. 4. Select the PG/PC interface. 5. Click the "Show all compatible devices" option. 6. Select the CPU from the compatible devices in the subnet. 7. Select the "Flash LED" check box to run a flashing test. 8. Click "Detect" to replace the unspecified CPU with the necessary CPU type.
Result
The CPU type is read out. The correct device name is appended in brackets to your CPU name in the project tree.
The CPU and modules used are displayed in the hardware configuration.
S7-1500
40
Getting Started, 05/2014, A5E03981761-AC
Software section 3.1 Creating the project and hardware
3.1.5
Creating ET 200 interface modules
Introduction
In the following section, you will create two distributed I/O systems in the hardware configuration: An ET 200SP distributed I/O system, which basically consists of the following
components: An interface module for communication with the CPU. Up to 32 modules that can be inserted in any combination. A server module that completes the configuration. An ET 200MP distributed I/O system, which consists of the following components: The interface module for communication with the CPU. Up to 30 modules, each one providing up to 32 channels.
Procedure
1. Open the "Hardware catalog". 2. Change to the "Network view". 3. Open the "Distributed I/O" and "ET 200SP" folders. 4. Open the "IM 155-6 PN ST" folder. 5. Drag-and-drop the "6ES7 155-6AU00-0BN0" interface module to the network view. 6. Open the "ET 200MP" folder. 7. Open the "IM 155-5 PN ST" folder. 8. Drag-and-drop the "6ES7 155-5AA00-0AB0" interface module to the network view.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
41
Software section 3.1 Creating the project and hardware
Result
The I/O systems have been created in the hardware configuration, but not yet assigned to the CPU 1511-1 PN. They are both displayed under "Unassigned devices" in the project view.
Additional information
The SIMATIC ET 200 product family offers different scalable I/O systems to suit your specific application.
You will find more information about the SIMATIC ET 200 distributed I/O on the Internet at (http://www.automation.siemens.com/mcms/distributed-io/en/).
3.1.6
Networking ET 200 interface modules
Introduction
In the following section, you will create a PROFINET I/O system. A PROFINET I/O system consists of the PROFINET IO controller and its assigned PROFINET IO devices: The CPU 1511-1 PN you already created is used as PROFINET IO controller. The two distributed I/O systems are used as PROFINET IO devices.
S7-1500
42
Getting Started, 05/2014, A5E03981761-AC
Procedure Result
Software section 3.1 Creating the project and hardware
1. Drag-and-drop a connection from the interface of the IM 155-5 PN ST interface module to the CPU interface.
2. Create a second connection between the IM 155-6 PN ST interface module and the CPU.
The interface modules are assigned to the CPU as IO devices. Both distributed IO systems are displayed in the project tree in the "Distributed I/O" folder below the CPU. A PROFINET I/O system was created automatically in the networking process and its properties are displayed in the network view.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
43
Software section 3.1 Creating the project and hardware
3.1.7
Creating input and output modules and a server module for ET 200SP
Introduction
In the following section, you will create input and output modules for the ET 200SP.
Note You need the server module to operate the input and output modules. These modules will fail if the server module is missing.
Maximum configuration per potential group
The number of I/O modules that can be used per potential group depends on the following factors:
1. Total power requirement of all I/O modules operated on this potential group
2. Total power requirement of all loads connected externally to this potential group
The sum of the total power calculated from 1. and 2. cannot exceed the current carrying capacity of the employed BaseUnit and the load supply voltage.
Set the "Potential group" parameter for a module as follows:
Parameters Potential group
Value range Use potential group of the left module (default setting)
Enable new potential group
Usage
if the total power consumption of all modules from the left + power consumption of the module is less than the current carrying capacity of the BaseUnit
if the total power consumption of all modules from the left + power consumption of the module is greater than the current carrying capacity of the BaseUnit
You can find additional information on potential groups in the module manuals such as SIMATIC ET 200SP DI 8x24VDC HF digital input module (http://support.automation.siemens.com/DE/view/en/66912542).
Procedure
1. Open the device view of ET 200SP. 2. Open the "DI" and "DI16 x DC24V ST" folders in the hardware catalog. 3. Drag-and-drop input module "6ES7 131-6BH00-0BA0" to slot 1 of the rail. 4. Open the "DQ" and "DQ16 x DC24V / 0.5A ST" folders. 5. Drag-and-drop output module "6ES7 132-6BH00-0BA0" to slot 2 of the rail. 6. Open the "Server modules" folder. 7. Drag-and-drop the server module "6ES7 193-6PA00-0AA0" to slot 3 of the rail.
S7-1500
44
Getting Started, 05/2014, A5E03981761-AC
Result
Software section 3.1 Creating the project and hardware
You have created the input and output modules and the server module.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
45
Software section 3.1 Creating the project and hardware
3.1.8
Creating input and output modules for ET 200MP
Introduction
In the following section, you will create the input and output modules for ET 200MP.
Procedure
1. Open the device view of ET 200MP. 2. Open the "DI" and "DI16 x DC24V HF" folders in the hardware catalog. 3. Drag-and-drop input module "6ES7 521-1BH00-0AB0" to slot 2 of the rail. 4. Open the "DQ" and "DQ16 x DC24V / 0.5A ST" folders. 5. Drag-and-drop output module "6ES7 522-1BH00-0AB0" to slot 3 of the rail.
Result
You have created the input and output modules.
S7-1500
46
Getting Started, 05/2014, A5E03981761-AC
Software section 3.1 Creating the project and hardware
3.1.9
Assigning names for ET 200
Introduction
In the following section, you will assign project-specific names to the distributed I/O.
Procedure
1. Select ET 200SP.
2. Under Properties > General in the inspector window, enter the name "Valve_Control_Unit" in the "Name" field.
3. Select ET 200MP and enter the new name "Mixer_Conveyor_Control_Unit".
Result
You have assigned the project-specific names.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
47
Software section 3.2 Creating the program
3.2
Creating the program
3.2.1
Loading the block library
Introduction
In the following section, you will load the global library "ProgLib_ColorFillingStation". This library contains the blocks and tag tables that you need for the example project. This library is available as a ZIP file under "Getting Started S7-1500 / TIA V13 (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/project/color_filling_station.zip)". You need to unzip this library before you import it to your project.
Global libraries
Global libraries are used to store elements that you want to reuse in other projects. You must create global libraries explicitly.
The following libraries are provided in the standard package:
"Buttons and Switches"
They offer a large selection of switches and buttons. The folders organize switches and buttons into categories. You can find the "System diagnostics indicator" object in the "DiagnosticsButtons" folder, for example. You use the "System diagnostics indicator" object for system diagnostics in your plant.
"Monitoring and Control objects"
This provides complex operator control and display objects in several designs as well as suitable control lights, buttons and switches.
Note Library is write-protected
The "Open read-only" option is activated by default in the "Open global library" dialog. Click in the check box to open the library without write protection.
S7-1500
48
Getting Started, 05/2014, A5E03981761-AC
Procedure
Software section 3.2 Creating the program
1. Click on the "Libraries" tab. 2. Click "Open global library". 3. Select the "ProgLib_ColorFillingStation" file from the directory that contains the unzipped
library folder and click "Open".
Result
The "ProgLib_ColorFillingStation" global library is open.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
49
Software section 3.2 Creating the program
3.2.2
Deleting program block Main [OB1]
Introduction
In the following section, you will delete the automatically generated "Main [OB1]" program block from the project folder. A "Main [OB1]" program block is included in the program blocks of the example project.
Organization blocks (OBs) form the interface between the CPU operating system and the user program. These blocks are called by the operating system. At least one cycle OB must be available in an automation project.
Procedure Result
1. Open the "Program blocks" folder in the project tree and then click the "Main [OB1]" program block.
2. Right-click to open the shortcut menu and then click "Delete". 3. Click "Yes" to confirm deletion of the block.
The automatically generated "Main [OB1]" program block is deleted.
S7-1500
50
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program
3.2.3
Copying program blocks
Introduction
In the following section, you will insert the program blocks from the "ProgLib_ColorFillingStation" global library into your project.
Procedure
1. Click on global library "ProgLib_ColorFillingStation". 2. Click the "Master copies" folder and then on "Programm_blocks". 3. Drag-and-drop the program block to be imported from the global library to the "Program
blocks" folder. 4. Proceed as described in steps 2 and 3 for the other blocks.
Result
The program blocks are inserted in the project folder of the same name.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
51
Software section 3.2 Creating the program
3.2.4
Cyclic interrupt OB
3.2.4.1
Cyclic interrupt OB Cycle time and phase
Cycle time and phase offset can be changed
Main [OB35] is located below the program blocks inserted into the project. Main [OB35] is a cyclic interrupt organization block (cyclic interrupt OB). Cyclic interrupt OBs serve to start programs in periodic time intervals independently of the cyclic program execution. The start times of a cyclic interrupt OB are specified using the cycle time and the phase offset.
Cycle time
The cycle time determines the interval at which an OB is called. The cyclic interrupt OB has a cycle time of 100000 s by default.
Phase offset
The phase offset is used to increase the accuracy of the processing intervals of cyclic interrupt programs. If an OB has the same or a common multiple clock pulse of another OB, both can be operated at a precise interval by a phase offset.
S7-1500
52
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program
3.2.4.2
Changing the cycle time
Introduction
In the following section, you will change the cycle time for the "Main" program block.
Requirement
The program block "Main" [OB35] is contained in the library The FB/FC calls exist
Procedure
1. Open the properties of the "Main" program block. 2. Select the "Cyclic interrupt" option under "General". 3. Enter the new value for the "Cycle time" and click "OK".
Result
The cycle time is changed.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
53
Software section 3.2 Creating the program
3.2.5
Copying tag tables
Introduction
In the following section, you will insert the tag tables from the "ProgLib_ColorFillingStation" global library into your project.
Procedure
1. Open the "PLC tags" folder in the project navigation. 2. Open the "PLC_tags" folder. 3. Drag-and-drop the tag table to be imported from the global library to the "PLC tags"
folder. 4. Proceed as described in step 3 for the other tag tables.
Result
The tag tables are inserted in the project folder of the same name.
S7-1500
54
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program
3.2.6
Compiling a project
Introduction
In the next section, you will compile the "Color_Filling_Station" project.
Procedure
1. Select the "Color_Mixing_CPU" CPU in the project tree.
2. Right-click to open the shortcut menu and then select "Compile" > "Hardware and software (only changes)".
S7-1500
Getting Started, 05/2014, A5E03981761-AC
55
Software section 3.2 Creating the program
Result
The project is compiled and ready for downloading.
Note "Main" program block is updated
Open the "Main" program block after compilation. All instance data blocks have been created and the data blocks are updated.
S7-1500
56
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program
3.2.7
Load project into the CPU
Introduction
In the next section, you will download the "Color_Filling_Station" project to the CPU.
Note Displaying all compatible devices If the desired CPU is not displayed after you have made the settings in the "Extended download to device" dialog, click the option "Show all compatible devices".
Procedure
1. Open the CPU shortcut menu and select "Download to device" > "Hardware and software (only changes)".
2. From the drop-down lists, select the PG/PC interface type, the interface and the connection with the subnet.
3. Select the CPU from the compatible devices in the subnet and click "Load".
4. Confirm the two "Assign IP address" dialogs with "Yes" and "OK". 5. In the "Load preview" dialog, select the alternative entry for all entries set to "No action" in
the drop-down list and confirm open options. 6. Click "Load". 7. Confirm the "Start all" option and click "Finish".
S7-1500
Getting Started, 05/2014, A5E03981761-AC
57
Software section 3.2 Creating the program
Result
The project is downloaded to the CPU.
S7-1500
58
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program
3.2.8
Optimized block access
3.2.8.1
Introduction
Operating principle
The "optimized data blocks" of the CPUs of the S7-1500 series are optimized for performance and are only programmed symbolically. By using the optimized data blocks, you make your program more efficient, because the declared tags are given symbolic names and no longer a fixed address.
You can create data blocks with any structure without paying attention to the physical arrangement of the individual tags. Quick access to the optimized data is always available because the data storage is optimized and managed by the system.
Changing data types increases the risk of error in the standard block. In the optimized block, changes lead to a reorganization of the data storage. Addressing remains unique.
To enable the subsequent editing of user programs that are already running in a CPU, the S7-1500 CPUs support the option of extending the interfaces of function or data blocks during runtime. You can download the modified blocks without setting the CPU to STOP and without affecting the actual values of tags already loaded.
In addition: You can define in the data block itself, which the values in the CPU are read-only for an HMI device ("Visible in HMI") or which can be written ("Accessible from HMI").
S7-1500
Getting Started, 05/2014, A5E03981761-AC
59
Software section 3.2 Creating the program
3.2.8.2
Expanding and reloading the optimized "Filling" data block
Introduction
In the following section, you will supplement the "Filling" data block with the date and time of the last filling and reload the data block. To do this, create a block for recording the date and time and enable the function "Download without reinitialization".
Note: The "Download without reinitialization" function protects the actual parameters of the data block from being overwritten during download to the CPU.
Advantages of symbolic addressing: The use of universally applied and meaningful symbols in the entire project makes the program code easier to read and understand. This gives you the following advantages:
You do not have to write detailed comments.
Data access is faster.
No errors occur when accessing data.
You no longer have to work with absolute addresses.
The assignment of the symbol to the memory address is monitored by STEP 7, which means that all points of use are automatically updated when the name or the address of a tag changes.
Requirement
The library has been loaded The project has been compiled and loaded into the CPU
S7-1500
60
Getting Started, 05/2014, A5E03981761-AC
Procedure
Software section 3.2 Creating the program
1. Open the "Filling" data block and the "Main" program block. 2. Enable the "Monitoring on/off" function for the "Main" program block. 3. In the "Main" program block, open the shortcut menu of the "'FILLING'
FillingLevel_CMYK_C" I/O in the 3 network with a right-click and select "Modify > Modify operand". 4. Enter a new value and click "OK". 5. Enable the "Download without reinitialization" function and the "Monitor all" function in the "Filling" data block. 6. Create a new parameter named "DT_Loc-T_Last_Filling" and select "Date_And_Time" as the data type.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
61
Software section 3.2 Creating the program
7. Insert a normally closed contact into the "Main" program block in the 5 network, and interconnect it with the "FILLING_DONE" parameter.
8. Open the "Date & time" folder from the "Instructions" tab and insert the "RD_Loc_T" block in the "Main" program block.
S7-1500
62
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program 9. Interconnect the "OUT" output with the "DT_Loc-T_Last_Filling" parameter and the "RED_VAL" output with the newly created "RED_VAL_Loc-T" parameter. Use the "LAD_Tanks_Filling_Process" data block as the storage location for the "RED_VAL_LocT" parameter.
10.Compile and download the project.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
63
Software section 3.2 Creating the program
Result
The date and time of the last filling are reloaded. The actual parameters of the "Filling" data block are not overwritten.
S7-1500
64
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program
3.2.9
Versioning a block
Introduction
The use of block types ensures a high degree of standardization in your projects. You can easily integrate function extensions to the block type into existing projects. Change tracking is ensured by versioning. In this example, you create a "LAD_Tanks_Filling" block as a type in the project library. As a function extension, replace the three instructions for the level calculation with CalculateBox, which performs all arithmetic functions. This optimization means that fewer temporary tags are required and that the switch between blocks with various programming languages is no longer necessary.
Procedure
1. Compile the "LAD_Tanks_Filling" block and then insert it in the project library under "Types".
2. Create a new block version with "Edit type".
3. Insert the CALCULATE instruction from the "Basic instructions > Mathematical functions" library.
4. Delete the MUL, DIV and SUB instructions from the block.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
65
Software section 3.2 Creating the program
5. Insert two inputs into the CALCULATE instruction and interconnect the inputs.
6. Define the calculation formula and then interconnect the output.
7. Release the block version. 66
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Result
Software section 3.2 Creating the program
The revised version of the block type is saved in the library with a new version number.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
67
Software section 3.2 Creating the program
3.2.10
Setting retentivity
Introduction
All tags are initialized with their configured start values during CPU startup, for example, after a power failure. The most recent values the tags had immediately before the interruption are overwritten with the initial values. To prevent this, define the tag as retentive. Retentive tags retain their values even after a restart.
In this example, the levels of paint storage tanks are backed up in the retentive memory area of the CPU.
Procedure
1. Connect to the CPU online. 2. Enable the retentivity for the "Cyan" entry in the "Filling" data block.
3. Load the change to the CPU.
4. Drag the "Watchtable" object from the library into the project. This object contains the fill level tags included a control value.
S7-1500
68
Getting Started, 05/2014, A5E03981761-AC
5. Transfer the control values to the CPU with "Modify now".
Software section 3.2 Creating the program
6. Close the online connection to the CPU. To simulate a power failure, disconnect the power supply to the CPU.
7. Reconnect the power supply and go online to the CPU. Enable "Monitor all" for the "Filling" DB.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
69
Software section 3.2 Creating the program
Result
The fill level for "Cyan" is read from the retentive memory area. All other fill levels are reinitialized with their start value.
S7-1500
70
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program
3.2.11
Activating the EN/ENO mechanism
Introduction
The EN/ENO mechanism in various instructions enables you to detect runtime errors and avoid a program crash. Newly inserted ENO instructions are disabled by default. You can then activate the ENO enable output. You can use this in a new network that has the fill level of all paint storage tanks reset to the start value (1000) at the same time.
Procedure
1. Open the Main[OB35] program block and insert the MOVE instruction into network 10. 2. Expand the instruction to a total of four outputs. 3. Insert a normally open contact before the MOVE instruction. 4. Insert a reset coil after the MOVE instruction. 5. Interconnect the inputs and outputs of the MOVE instruction.
6. Generate the instruction with the ENO shortcut menu.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
71
Software section 3.2 Creating the program
Result
The EN/ENO mechanism is interconnected for this block. If there are no errors during execution, the ENO enable output has the signal state "1". If there are errors during execution, the ENO enable output has the signal state "0".
S7-1500
72
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program
3.2.12
Using the comment function
Introduction
The MOVE and Reset instructions should be expanded with detailed commentary.
Procedure
1. Insert a comment using the shortcut menu. 2. Enter the comment text.
Result
The comments for the instruction and the coil are entered.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
73
Software section 3.2 Creating the program
3.2.13
Local error handling
3.2.13.1
Handle errors within block
Procedure
Unlike the CPUs of the S7-300/400, CPUs of the S7-1500 go to STOP with errors much less often. If an error occurs, it is entered in the diagnostics buffer of the CPU. You avoid the CPU STOP by using local error handling at each block. You should preferably enable local error handling during development of the user program.
S7-1500
74
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program
You can precisely evaluate the information and, for example, program the error handling in the block with STL/FBD/LAD and SCL programs. The block generates an error ID that is evaluated by the "GET_ERROR_ID" instruction. You can call the "GET_ERROR_ID" instruction in both the MAIN block and in the function blocks. The CPU remains in RUN mode.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
75
Software section 3.2 Creating the program
3.2.13.2
Loading blocks for local error handling
Introduction
To illustrate the local error handling, load the blocks of the "ProgLib_LEH" library in the project. The blocks are used only to demonstrate the local error handling and are otherwise not used in the project.
Procedure
1. Open the global library, "ProgLib_LEH". 2. Copy the blocks from the master copies into the project.
3. Call the "LAD_Local_Error_Handling" function block in an empty network of the "Main" block.
S7-1500
76
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program
4. Interconnect the parameters of the "LAD_Local_Error_Handling" function block with tags of the "LEH_InOutValues" data block.
Result
5. Connect to the CPU online. 6. Compile and load the changes to the CPU.
Use the "LEH_INDEX" tag at the "INDEX[0..100]" input parameter to trigger a programming error in the following. For example, if you set the input parameter to "101", an error at the output parameters is reported.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
77
Software section 3.2 Creating the program
3.2.13.3
Generating errors without local error handling
Introduction
Perform the following steps to trigger a programming error without using the local error handling or creating a corresponding OB.
Procedure
1. Activate the "Monitor" function.
2. Set the value of the "LEH_INDEX" tag to an invalid value, for example, "101". In the Testing dialog, the ERROR LED flashes briefly and the CPU goes from RUN to STOP.
Result
3. Switch to the diagnostics buffer. The error and the error response is displayed in the diagnostics buffer.
4. Set the CPU back to RUN.
The transition from STOP in RUN resets the "LEH_INDEX" tag to the start value "0". This automatically solves the problem.
S7-1500
78
Getting Started, 05/2014, A5E03981761-AC
Software section 3.2 Creating the program
3.2.13.4
Generating errors with local error handling
Introduction
Perform the following steps to use "GET_ERR_ID" instruction and its ENO bit for the local error handling to respond to the error with an error message. This means the CPU remains in RUN mode.
Procedure
1. Open the "LAD_Local_Error_Handling" function block.
2. Insert the "GET_ERR_ID" instruction in the second network and interconnect the "ID" output.
3. Call the "ErrorID_to_ErrorText" function from the project tree.
4. Interconnect the parameters of the "ErrorID_to_ErrorText" function so that they can convert the error code into an error message.
5. Load the changes to the CPU.
6. Trigger an error in the "Main" organization block by entering an invalid value, for example, "101". An error message is output at the "ERROR_MESSAGE" parameter.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
79
Software section 3.2 Creating the program
Result
The error message is output as long as the error is not corrected. To correct the error, assign the "LEH_INDEX" tag a valid value or restart the CPU.
S7-1500
80
Getting Started, 05/2014, A5E03981761-AC
3.3
Configure visualization
Software section 3.3 Configure visualization
3.3.1
Present sample project
Sample project for the application
To configure the color mixing system with the TIA Portal, create the sample project "Color_Filling_Station". The following project components already exist for the sample project: The program blocks and tag tables of the CPU user program and a configured Comfort Panel with the necessary HMI screens, HMI tags and scripts.
In this section, we will explain the relationships between the individual project components of the sample project. You will carry out the necessary configuration steps yourself at a later point in time.
3.3.2
HMI configuration
3.3.2.1
Overview
Introduction of HMI configuration
The supplied project includes the programmed CPU and the preconfigured HMI device in the "global library".
HMI configuration
In this section, we will introduce the HMI device and HMI configuration.
Additional information
For detailed instructions on HMI configuration see: Getting Started WinCC V13 Comfort Panels, Runtime Advanced
S7-1500
Getting Started, 05/2014, A5E03981761-AC
81
Software section 3.3 Configure visualization
3.3.2.2
SIMATIC HMI Comfort Panels
SIMATIC HMI Comfort Panels
The TP1200 Comfort HMI device from the Comfort Panel series is used to operate the color mixing system.
Comfort Panels are particularly suitable for challenging HMI tasks in PROFINET and PROFIBUS environments and are characterized by the following features:
High-quality housing and numerous interfaces
Industrial widescreen displays with large visualization area, optimum viewing angle stability and maximum brightness
Installation either in horizontal or vertical format
Exact diagnostics with system diagnostics viewer
S7-1500
82
Getting Started, 05/2014, A5E03981761-AC
Software section 3.3 Configure visualization
3.3.2.3
HMI screens
HMI screens
You use the screens loaded onto the respective HMI device to operate and monitor machines and plants in runtime.
You manage the screens in WinCC under "Screens" in the project navigation.
The start screen of the HMI device is used to visualize the color mixing system as well as the most important status information and key figures.
The color mixing system includes the following elements: A color reservoir for each print color with fill level display Mixer Feeder pipes to the mixer Conveyor belt with emergency stop switch
S7-1500
Getting Started, 05/2014, A5E03981761-AC
83
Software section 3.3 Configure visualization
3.3.2.4
Additional control elements
Additional control elements
The process steps "Mixing color" and "Filling color" are to be displayed as animations with dynamic visualization objects.
The start screen of the example project includes additional control objects: Buttons for screen changes Buttons to reset the fill levels Buttons for operating and monitoring the system: Fill recipe, start mixing process, fill color
mixture
S7-1500
84
Getting Started, 05/2014, A5E03981761-AC
3.3.2.5 Recipes
Recipes
Software section 3.3 Configure visualization
A recipe contains related production parameters, such as mixing ratios.
The required mixing ratio can be transferred from the HMI device to the color mixing system in a single step, for example, to switch production from dark orange to signal yellow.
The color mixing system can produce the mixed colors "Orange", "Amber", "Green" and "Red".
A recipe data record is created for each color. The recipe data record includes the percentage of basic colors which result in the respective mixed color.
The recipe consists of relevant parameters and the recipe data records in which the mixing ratios for the individual shades of color are stored.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
85
Software section 3.3 Configure visualization
3.3.2.6
Archives
Archives
To record operational events of a system, the alarms and process values generated during production are saved to logs. You can then evaluate the alarms and process data logs. The fill levels of the color reservoirs are to be documented for the color mixing system. You have configured the alarm log "Tank_Level" for this purpose.
This log stores alarms for fill levels that were too low and fill levels that were too high during a shift.
S7-1500
86
Getting Started, 05/2014, A5E03981761-AC
3.3.2.7 Scripts
User-defined functions
Software section 3.3 Configure visualization
You use the user-defined functions to program additional functionality for the HMI device. WinCC offers a VBS programming interface to create user-defined functions. The example project uses two user-defined functions to display the mixed print color on the monitor in different screens.
"Recipescreen" displays a rectangle in the selected color in the "Recipes" screen.
"Startscreen" displays the label of the filled cans in the currently mixed color in the system overview of the start screen.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
87
Software section 3.3 Configure visualization
3.3.2.8
User Management
User Management
WinCC gives you the option to restrict safety-related operations to special user groups and thus protect data and functions from unauthorized access in Runtime.
The "User view" object offers management of users and passwords on the HMI device.
Users with user management authorization have access to the full range of functions in the user view.
They can create and delete users and change their own password or that of other users.
S7-1500
88
Getting Started, 05/2014, A5E03981761-AC
Software section 3.3 Configure visualization
3.3.2.9
Multilingualism
Multilingualism
WinCC supports multilingual user interfaces. The color mixing system is operated in a new subsidiary in Russia. A Russian user interface is required for maintenance and service technicians. The example project has been expanded by another language for this purpose.
The texts are imported again after they have been exported and translated into Russian.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
89
Software section 3.3 Configure visualization
The Russian texts are displayed in Runtime in case of a language selection.
S7-1500
90
Getting Started, 05/2014, A5E03981761-AC
3.3.2.10 Reports
Reports
Software section 3.3 Configure visualization
Reports are used to record events in a production process as a basis for product testing and quality control. Alarms and recipe data are output at regular intervals in the form of shift reports for this purpose.
A report has been created in WinCC for the "Tank_Level" log with alarms for the fill level.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
91
Software section 3.3 Configure visualization
A report for recipes has also been created in this project.
The reports should be output on a daily basis to a printer which is connected to the HMI device.
The cyclical output was created with the help of the Scheduler.
S7-1500
92
Getting Started, 05/2014, A5E03981761-AC
Software section 3.3 Configure visualization
3.3.3
Insert HMI device from libraries
3.3.3.1
Storing an object in a library
Introduction
The global library includes a preconfigured HMI device.
Procedure
1. Open the global library. 2. Drag-and-drop the HMI device "Color_Mixing_HMI" into the "Devices & Networks" editor.
Result
3. The mouse pointer changes into a crosshair with an object symbol attached. The preconfigured HMI device is created and can be connected to the CPU.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
93
Software section 3.3 Configure visualization
3.3.4
Configuring HMI connection
3.3.4.1
Communication between devices
Communication
The data exchange between devices is referred to as communication. The devices can be interconnected directly or via a network. The interconnected devices in communication are referred to as communication partners.
Data transferred between the communication partners may serve different purposes: Display processes Operate processes Output alarms Archive process values and alarms Document process values and alarms Administer process parameters and machine parameters
Basic information for all communication
The basis for all types of communication is a network configuration. In a network configuration, you specify the connection that exists between the configured devices. With the network configuration, you also ensure the necessary prerequisites for communication, in other words: Every device in a network is assigned a unique address. The devices carry out communication with consistent transmission characteristics.
S7-1500
94
Getting Started, 05/2014, A5E03981761-AC
Software section 3.3 Configure visualization
3.3.4.2
Configuring HMI connection
Introduction
You configure an HMI connection between the Comfort Panel TP1200 and the CPU via PROFINET in the "Devices & Networks" editor. The available communication partners in the project are displayed graphically in the network view.
CAUTION Communication via Ethernet In Ethernet-based communication, the end user is responsible for the security of his data network. Targeted attacks can overload the device and interfere with proper functioning.
Requirements
The following communication partners are created in the "Devices & Networks" editor: HMI device: SIMATIC Comfort Panel CPU: SIMATIC S7-1500
S7-1500
Getting Started, 05/2014, A5E03981761-AC
95
Software section 3.3 Configure visualization
Procedure
1. Click the "Connections" button and select "HMI connection" for the connection type.
The devices available for connection are highlighted in color.
2. Click the PROFINET interface of the CPU and drag-and-drop a connection to the PROFINET interface of the HMI device.
Result
3. Click the communication partners in the "Network view" and change the PROFINET parameters in the Inspector window according to the requirements of your project. Note The created HMI connection is also shown in the tabular area of the editor in the "Connections" tab. You check the connection parameters in the table. You can change the local name for the connection only in the table.
You have created a connection between an HMI device and the CPU.
S7-1500
96
Getting Started, 05/2014, A5E03981761-AC
Software section 3.3 Configure visualization
3.3.4.3
Connecting HMI tags
Introduction
Once you have created the connection of CPU and HMI device, connect the tags of the two devices.
Procedure
1. Open the HMI tag editor.
2. Select the HMI connection you have just configured in the "Connections" column.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
97
Software section 3.3 Configure visualization
3. Repeat this procedure for all entries highlighted in red.
Result
An HMI connection had already been created for tags already configured in the CPU and HMI device.
You have restored this HMI connection.
S7-1500
98
Getting Started, 05/2014, A5E03981761-AC
Software section 3.3 Configure visualization
3.3.5
Configuring system diagnostics
3.3.5.1
System diagnostics basics
Introduction
You use system diagnostics to detect problems and errors in any part of your plant. WinCC has two display and operating elements for quick error localization.
System diagnostics view
The alarm view shows the status of a CPU while the system diagnostics view gives you an overview of all devices available in your system: You navigate directly to the cause of the error and to the relevant device. You have access to all devices supporting diagnostics you have configured in the "Devices & networks" editor.
System diagnostics window
The system diagnostics window is an operating and display element that you can only use in the global screen.
The functions of the system diagnostics window are no different than those of the system diagnostics view. Because the system diagnostics window is configured in the global screen, you can, for example, also specify if the object is closable in Runtime.
S7-1500
Getting Started, 05/2014, A5E03981761-AC
99
Software section 3.3 Configure visualization
3.3.5.2
System diagnostics views
Introduction
There are four different views available in the system diagnostics display and the system diagnostics window. Device view Diagnostic buffer view Detail view Matrix view (for master systems, PROFIBUS, PROFINET only)
Device view
The device view shows all the available devices of a layer in a table. Double-clicking on a device opens either the child devices or the detail view. Symbols in the first column provide information about the current status of the device.
100
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Software section 3.3 Configure visualization
Diagnostic buffer view
The current data from the diagnostic buffer are shown in the diagnostic buffer view.
Detail view
The detail view gives detailed information about the selected device and any pending errors. Check whether the data is correct in the detail view. You can cannot sort error texts in the detail view.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
101
Software section 3.3 Configure visualization
Matrix view
The matrix view is only available for master systems. The matrix view shows the status of the subdevices of the master system.
In PROFIBUS, the numbers assigned by Profibus are used as identification (DP station number).
The IO devices are numbered consecutively from 1 in PROFINET.
Navigation buttons
Button
102
Function Opens the child devices or the detail view if there are no child devices. Opens the parent device or the device view if there is no parent device. Opens the device view. Opens the diagnostic buffer view. Only visible in the device view. Refreshes the view. Configured softkey, for example F2
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Software section 3.3 Configure visualization
3.3.5.3
Configuring the system diagnostic view
Introduction
You add a system diagnostics view to your project to get an overview of all devices available in your plant.
Requirements
CPU has been created. The Inspector window is open.
Procedure
1. Double-click the "Diagnostics" HMI screen.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
103
Software section 3.3 Configure visualization
2. Double-click the "System diagnostics view" object in the "Tools" task card. The object is added to the screen.
Result
104
3. Select "Properties > Properties > Columns > Devices/Detail view" in the Inspector window.
4. Enable the columns that you require in the device view for Runtime, for example, State, Name, Slot.
5. Enable the columns that you require in the detail view for Runtime, for example, State, Name, Higher level designation.
6. Enable the columns that you require in the diagnostics buffer view, for example: State, Name, Rack.
7. If necessary, adapt the headers to the columns. 8. Enable "Properties > Properties > Layout > Column settings > Columns moveable" to
move the columns in Runtime. 9. You can change the column headers under "Properties > Properties > Column headers",
if necessary.
The system diagnostics view has been added to the "Diagnostics" screen. Error messages for the entire plant are now displayed in the system diagnostics view in Runtime.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Software section 3.3 Configure visualization
3.3.6
Simulating an HMI device
3.3.6.1
Simulation basics
Introduction
You can use the simulator to test the performance of your configuration on the configuration PC. This allows you to quickly locate any logical configuration errors before productive operation.
You can start the simulator as follows:
In the shortcut menu of the HMI device or in a screen: "Start simulation"
Menu command "Online > Simulation > [Start|With tag simulator|With script debugger]"
Under "Visualization > Simulate device" in the portal view.
Requirement
The simulation/runtime component is installed on the configuration PC.
Field of application
You can use the simulator to test the following functions of the HMI system, for example: Checking limit levels and alarm outputs Consistency of interrupts Configured interrupt simulation Configured warnings Configured error messages Check of status displays
S7-1500 Getting Started, 05/2014, A5E03981761-AC
105
Software section 3.3 Configure visualization
3.3.6.2
Operating the panel in simulation
Introduction
You simulate the HMI project on your computer.
Procedure
1. Start the simulation of the HMI device.
A connection to the CPU is established and the color mixing system is displayed in the simulation.
2. Open the "Recipes" screen and select a color.
106
S7-1500 Getting Started, 05/2014, A5E03981761-AC
3. Specify the number of cans and view the selected color.
Software section 3.3 Configure visualization
S7-1500 Getting Started, 05/2014, A5E03981761-AC
107
Software section 3.3 Configure visualization
4. Go back to the start screen and start production.
108
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Software section 3.3 Configure visualization
5. You can query the current CPU status in the "Diagnostics" screen.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
109
Software section 3.4 Loading the project into the programming device
3.4
Loading the project into the programming device
3.4.1
Load CPU to project
Introduction
You can create a new station including the actual values from the hardware configuration and the user program.
Procedure
1. Open the dialog for loading from the CPU.
2. Select the interface with which the programming device is connected to the CPU. The search for accessible nodes starts automatically.
3. Load the CPU in the project.
110
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Result
Software section 3.4 Loading the project into the programming device
The hardware and software configuration of the CPU are loaded into the project. The project now contains, for example, program blocks and tags.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
111
Software section 3.5 Team engineering via Inter Project Engineering
3.5
Team engineering via Inter Project Engineering
3.5.1
Basics of "Inter Project Engineering"
Introduction
In this section, you will learn about the benefits of team engineering and how to create the required CPU data for an HMI project engineer. As an HMI project engineer, you will learn how to use this CPU data in your project.
Distributed configuration
You can use "Inter Project Engineering" to develop the user program and user interface in parallel at different locations. The HMI project engineer requires no CPU user program. There is no need for a STEP 7 installation.
Only tags, blocks, messages and address information of the CPU interfaces are ultimately relevant for the connection of an HMI device to a CPU. The programmer can conveniently export this data to an IPE file, which is imported into the project by the HMI developer. Updates are possible at any time by transferring a new IPE file.
The data are consistent after loading to the CPU and HMI device. The connections to the CPU created in the HMI configuration remain up-to-date.
Note
You can integrate the new Basic Panels 2nd Generation and Comfort Panels to STEP 7 projects as of V5.4 SP3 with an import into the TIA Portal.
112
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Software section 3.5 Team engineering via Inter Project Engineering
3.5.2
Creating an IPE file
Introduction
You want to use a compact HMI device to display of fill levels directly at the paint mixing plant. You hire an engineering firm for the visualization and the provide the required CPU data as an IPE file.
Procedure
1. Add new proxy data for the CPU. 2. Enter a name and select the required CPU data.
Result
3. Export the proxy data.
The IPE file is created. You can send the IPE file, for example, as e-mail to the engineering firm.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
113
Software section 3.5 Team engineering via Inter Project Engineering
3.5.3
Importing an IPE file
Introduction
In the engineering office, the project engineer creates a device proxy in a new project and initializes it with the CPU data from the IPE file. The project engineer repeats the initialization for each update of the IPE file.
Procedure
1. Create the device proxy for the CPU in a new project and initialize it.
2. Use the Device Wizard to insert a Basic Panel. 3. Create the HMI tag for the fill level of the "Cyan" color and select the PLC tag.
114
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Software section 3.5 Team engineering via Inter Project Engineering 4. Create the other HMI tags in the same way.
5. Configure a bar graph to display the fill level of the "Cyan" color.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
115
Software section 3.5 Team engineering via Inter Project Engineering
6. Create a bar graph for the other fill levels in the same way.
Result
7. Compile the project.
The project can now be loaded to the HMI device from the commissioning engineer. The communication with the CPU is up-to-date thanks to the CPU data from the IPE file.
116
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Security
4
4.1
Overview of the protective functions of the CPU
Introduction
This chapter describes the following functions for protecting the S7-1500 automation system against unauthorized access: Access protection Know-how protection Copy protection Protection by locking the CPU
Further measures for protecting the CPU
The following measures additionally increase the protection against unauthorized accesses to functions and data of the S7-1500 CPU from external sources and via the network:
Deactivation of the Web server
Deactivation of the time synchronization via an NTP Server
Deactivation of the PUT/GET communication
When the Web server is used, you protect your S7-1500 automation system against unauthorized access by setting password-protected access rights for specific users in the user management.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
117
Security 4.2 Using the display to configure additional access protection
4.2
Using the display to configure additional access protection
Introduction
On the display of an S7-1500, you can block access to a password-protected CPU (local lock). The access lock is only in effect, when the operating mode switch is in the RUN position. The access lock applies independently of password protection, i.e. if someone accesses the CPU via a connected programming device and has entered the correct password, access to the CPU is still blocked. The access block can be set separately for each access level on the display, so that, for example, read access is allowed locally, but write access is not allowed locally.
Procedure
If an access level with a password is configured in STEP 7, access can be blocked using the display.
Proceed as follows to set the local access protection for an S7-1500 CPU on the display:
1. On the display, select Settings > Protection menu.
2. Confirm the selection using "OK", and configure for each access level, whether access at the RUN mode selector is allowed or not:
Allow: Access to the CPU is possible, provided the corresponding password in STEP 7 is entered.
Deactivated in RUN: When the operating mode switch is in the RUN position, no more users with privileges for this access level can log in to the CPU, even if they know the password. In STOP mode, access is possible with password entry.
Access protection for the display
A password can be configured for the display in STEP 7 in the properties of the CPU so that the local access protection is protected by a local password.
118
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Security 4.3 Know-how protection
4.3
Know-how protection
You can use know-how protection to protect one or more blocks of the OB, FB, FC type and global data blocks in your program from unauthorized access. You can enter a password in order to restrict access to a block. The password protection prevents the block from being read or changed without authorization.
Without the password only the following data concerning the block can be read:
Block title, comments and block properties
Block parameters (INPUT, OUTPUT, IN, OUT, RETURN)
Call structure of the program
Global tags without information on the point of use
Further actions that can be carried out with a know-how protected block:
Copying and deleting
Calling in a program
Online/offline comparison
Load
S7-1500 Getting Started, 05/2014, A5E03981761-AC
119
Security 4.3 Know-how protection
Setting up block know-how protection
1. Open the properties of the respective block. 2. Select the "Protection" option under "General".
3. Click the "Protection" button to display the "Know-how protection" dialog.
4. Click the "Define" button to open the "Define password" dialog.
5. Enter the new password in the "New password" field. Enter the same password in the "Confirm password" field.
6. Click "OK" to confirm your entry.
7. Close the "Know-how protection" dialog by clicking "OK".
Result: The blocks selected will be know-how-protected. Know-how protected blocks are marked with a lock in the project tree. The password entered applies to all blocks selected.
120
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Security 4.3 Know-how protection
Opening know-how protected blocks
1. Double-click the block to open the "Access protection" dialog. 2. Enter the password for the know-how protected block. 3. Click "OK" to confirm your entry. Result: The know-how-protected block will open. Once you have opened the block, you can edit the program code and the block interface of the block for as long as the block or TIA Portal is open. The password must be entered again the next time the block is opened. If you close the "Access protection" dialog with "Cancel", the block will open but the block code will not be displayed and you will not be able to edit the block. The know-how protection of the block is not removed if, for example, you copy the block or add it to a library. The copies will also be know-how-protected.
Removing block know-how protection
1. Select the block from which you want to remove know-how protection. The protected block may not be open in the program editor.
2. In the "Edit" menu, select the "Know-how protection" command to open the "Know-how protection" dialog.
3. Deactivate the "Hide code (Know-how protection)" check box.
4. Enter the password.
5. Click "OK" to confirm your entry. Result: Know-how protection will be removed from the block selected.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
121
Security 4.4 Copy protection
4.4
Copy protection
Copy protection allows you to bind the program or the blocks to a specific SIMATIC memory card or CPU. Through the linking of the serial number of a SIMATIC memory card or of a CPU the use of this program or of this block is only possible in combination with a specific SIMATIC memory card or CPU. With this function a program or block can be sent electronically (e.g. by e-mail) or by shipping a memory module.
When you set up such a copy protection for a block, also assign know-how-protection to this block. Without know-how protection, anyone can reset the copy protection. You must, however, set up copy protection first as the copy protection settings are read-only if the block is already know-how-protected.
Setting up copy protection
1. Open the properties of the respective block. 2. Select the "Protection" option under "General".
3. In the "Copy protection" area, select either the "Bind to serial number of the CPU" entry or the "Bind to serial number of the memory card" entry from the drop-down list.
4. Enter the serial number of the CPU or the SIMATIC memory card.
5. You can now set up the know-how protection for the block in the "Know-how protection" area. Note If you download a copy protected block to a device that does not match the specified serial number, the entire download operation will be rejected. This means that blocks without copy protection will also not be downloaded.
122
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Security 4.5 Protection by locking the CPU
Removing copy protection
1. Remove any existing know-how protection. 2. Open the properties of the respective block. 3. Select the "Protection" option under "General". 4. In the "Copy protection" area, select the "No binding" entry from the drop-down list.
4.5
Protection by locking the CPU
Protect your CPU from unauthorized access using a sufficiently secured front cover.
Using the latch on the CPU cover, you have the following options:
Affix a seal
Secure the front cover with a lock (shackle diameter: 3 mm)
4.6
Configuring access protection for the CPU
Introduction
The CPU offers four access levels, in order to limit access to specific functions.
By setting up the access levels and the passwords for a CPU, you limit the functions and memory areas that are accessible without entering a password. The individual access levels as well as the entry of their associated passwords are specified in the object properties of the CPU.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
123
Security 4.6 Configuring access protection for the CPU
Access levels of the CPU
Access levels Complete access (no protection) Read access
HMI access
No access (complete protection)
Access restrictions
The hardware configuration and the blocks can be read and changed by all users.
With this access level, read-only access to the hardware configuration and the blocks is possible without entering a password, which means you can download hardware configuration and blocks to the programming device. HMI access and access to diagnostics data is also possible. Without entering the password, you cannot load any blocks or hardware configuration into the CPU. Additionally, the following are not possible without the password: Test functions which write, changing the operating mode (RUN/STOP), and firmware update (online).
With this access level only HMI access and access to diagnostics data is possible without entering the password. Without entering the password, you can neither load blocks and hardware configuration into the CPU, nor load blocks and hardware configuration from the CPU into the programming device. Additionally, the following are not possible without the password: Test functions which write, changing the operating mode (RUN/STOP), and firmware update (online).
When the CPU is completely protected, no read or write access to the hardware configuration and the blocks is possible. HMI access is also not possible. The server function for PUT/GET communication is disabled in this access level (cannot be changed). Authentication with the password will again provide you full access to the CPU.
Each access level allows unrestricted access to certain functions without entering a password, e.g. identification using the "Accessible devices" function.
The CPU's default setting is "No restriction" and "No password protection". In order to protect access to a CPU, you must edit the properties of the CPU and set up a password.
Communication between the CPUs (via the communication functions in the blocks) is not restricted by the protection level of the CPU, unless PUT/GET communication is deactivated.
Entry of the right password allows access to all the functions that are allowed in the corresponding level.
Note
Configuring an access level does not replace know-how protection
Configuring access levels prevents unauthorized changes to the CPU, by restricting download privileges. However, blocks on the SIMATIC memory card are not write- or readprotected. Use know-how protection to protect the code of blocks on the SIMATIC memory card.
124
S7-1500 Getting Started, 05/2014, A5E03981761-AC
Security 4.6 Configuring access protection for the CPU
Parameterizing the procedure at access levels
To configure the access levels of an S7-1500 CPU, follow these steps: 1. Open the properties of the S7-1500 CPU in the Inspector window. 2. Open the "Protection" entry in the area navigation.
A table with the possible access levels appears in the Inspector window.
3. Activate the desired protection level in the first column of the table. The green checkmarks in the columns to the right of the respective access level show you which operations are still available without entering the password.
4. In the "Password" column, specify a password for the selected access level. In the "Confirmation" column, enter the selected password again to protect against incorrect entries.
Ensure that the password is sufficiently secure, in other words, that is does not follow a pattern that can be recognized by a machine!
You must enter a password in the first row ("Full access" access level). This enables unrestricted access to the CPU for those who know the password, regardless of the selected protection level.
5. Assign additional passwords as needed to other access levels if the selected access level allows you to do so.
6. Download the hardware configuration to the CPU, so that the access level will take effect.
Behavior of a password-protected CPU during operation
The CPU protection takes effect after the settings are downloaded in the CPU.
Before an online function is executed, the necessary permission is checked and, if necessary, the user is prompted to enter a password. The functions protected by a password can only be executed by one programming device/PC at any one time. Another programming device/PC cannot log on.
Access authorization to the protected data is in effect for the duration of the online connection, or until the access authorization is manually rescinded with "Online > Delete access rights".
Access to a password-protected CPU in the RUN mode can be limited locally in the display so that access with a password is also not possible.
S7-1500 Getting Started, 05/2014, A5E03981761-AC
125
Security 4.7 Configuring protection of the HMI connection
4.7
Configuring protection of the HMI connection
Introduction
If the protection level "Complete protection" was set for the CPU, the HMI device can only access the CPU with the password stored there.
This function is only available with HMI devices from SIEMENS.
Procedure
1. Open the "Connections" editor in the project tree. 2. Select the integrated connection. 3. Enter the password for the CPU in the "Password" area.
Result
The HMI device can now communicate and exchange data with the CPU.
126
S7-1500 Getting Started, 05/2014, A5E03981761-AC
SIMATIC S7-1500/ET 200MP Amendments to documentation S7-1500/ET 200MP
Product Information
Introduction
Scope of validity of the product information This product information supplements the documentation for S7-1500/ET 200MP and takes precedence over our system manuals, function manuals and manuals. You can find additional information on the S7-1500 fail-safe CPUs in the Product Information for F-CPUs on the Internet (https://support.industry.siemens.com/cs/de/en/view/109478599). The section "Notes on S7-1500 Motion Control" applies for the following function manuals as of edition 12/2019: · S7-1500/S7-1500T Motion Control overview V5.0 in TIA Portal V16 · S7-1500/S7-1500T Axis functions V5.0 in TIA Portal V16 · S7-1500/S7-1500T Measuring input and cam functions V5.0 in TIA Portal V16 · S7-1500/S7-1500T Synchronous operation functions V5.0 in TIA Portal V16 · S7-1500T Kinematics functions V5.0 in TIA Portal V16
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks. In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept. Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place. For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity). Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats. To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
© Siemens AG 2013 - 2020. All rights reserved
A5E31876033-AU, 07/2020
1
Amendments to documentation S7-1500/ET 200MP
S7-1500/ET 200MP
S7-1500/ET 200MP - Requirements for power supplies in the event of voltage interruption
Note To ensure adherence to IEC 61131-2 and NAMUR Recommendation NE 21, only use power packs/power supply units (230 V AC 24 V DC) with a mains buffering time of at least 20 ms. Observe the relevant requirement in your product standards (e.g. 30 ms for "burners" pursuant to EN 298) as regards possible voltage interruptions. The latest up-to-date information on PS components is available on the Internet (https://mall.industry.siemens.com). These requirements, of course, also apply to power packs/power supply units not constructed using ET 200SP or S7-300-/400-/1500 technology.
S7-1500/ET 200MP wiring rules
Note 40-pin front connector (screw terminal, for 35 mm modules), article number 6ES7592-1AM00-0XB0 In case of a total current of more than 8 A, apply the supply voltage 24 V DC (terminals 19 and 39) and the ground (terminals 20 and 40) twice.
S7-1500/ET 200MP standards and approvals ATEX approval
According to EN 60079-15 (Electrical apparatus for potentially explosive atmospheres - Part 15: Type of protection "n") and EN 60079-0 (Electrical apparatus for potentially explosive gas atmospheres - Part 0: General requirements).
OR According to EN 60079-7 (Electrical apparatus for potentially explosive atmospheres - Part 7: Increased safety "e") and EN IEC 60079-0 (Electrical apparatus for potentially explosive gas atmospheres - Part 0: General requirements).
Special conditions in hazardous area: 1. The devices may only be used in a range not exceeding pollution degree 2, as defined in EN 60664-1. 2. The modules must be installed in a suitable enclosure that guarantees at least IP54 degree of protection according to
EN 60079-15 or EN 60079-7, taking into account the ambient conditions during use. 3. Measures must be taken to prevent the rated voltage from being exceeded by transient disturbance voltages of more than
119 V.
IECEx approval
According to IEC 60079-15 (Explosive atmospheres - Part 15: Equipment protection by type of protection "n") and IEC 600790 (Explosive atmospheres - Part 0: Equipment - General requirements).
Amendments to documentation S7-1500/ET 200MP
2
A5E31876033-AU, 07/2020
OR
According to IEC 60079-7 (Explosive atmospheres - Part 7: Equipment protection by increase safety "e") and IEC 60079-0 (Explosive atmospheres - Part 0: Equipment - General requirements).
Special conditions in hazardous area:
1. The devices may only be used in a range not exceeding pollution degree 2, as defined in IEC 60664-1.
2. The modules must be installed in a suitable enclosure that guarantees at least IP54 degree of protection according to EN 60079-15 or EN 60079-7, taking into account the ambient conditions during use.
3. Measures must be taken to prevent the rated voltage from being exceeded by transient disturbance voltages of more than 119 V.
S7-1500/ET 200MP safety symbols
Safety-related symbols for devices with explosion protection
Updated symbols for zone 2/22:
Symbol
Meaning
For Zone 2 potentially explosive atmospheres, be aware that the device may only be used when it is installed in an enclosure with a degree of protection IP54.
For Zone 22 potentially explosive atmospheres, be aware that the device may only be used when it is installed in an enclosure with a degree of protection IP6x.
S7-1500 CPUs with firmware version V2.8.x
S7-1500 CPUs with firmware version V2.8.x in conjunction with TIA Portal V16 do not fully support PKI infrastructures.
An S7-1500 CPU with the above-mentioned firmware version requires that root certificates can be trusted in general. An S7-1500 CPU implicitly trusts every certificate within the trust chain that was issued by the same Certificate Authority (CA).
Certificate Revocation Lists (CRLs), which are used to explicitly revoke certificates from a trusted certificate authority, are not supported.
This feature will be made available shortly; it will enable even complex PKI infrastructures. But until then, please consider the above-mentioned restrictions when using certificates.
S7-1500 - Access protection for F-CPUs and blocking online access to a password-protected CPU
Access protection for F-CPUs
If you want to achieve the same access protection for an F-CPU as for a standard CPU "No access (complete protection)", you need to have assigned the two passwords above in STEP 7 in the "Protection & Security" area of the F-CPU properties:
· Full access incl. fail-safe (no protection) and
· Full access (no protection)
Blocking online access to a password-protected CPU
You can block online access to a password-protected CPU. The effect of the access block is independent of password protection. This means that if you access a CPU via a PG/PC and enter the correct password, you are still denied access to the CPU.
You have two options for blocking online access:
· Via the display on the CPU (Settings > Protection > Level of protection)
· In STEP 7 using the instruction ENDIS_PW: Limit and enable password legitimation
Amendments to documentation S7-1500/ET 200MP
A5E31876033-AU, 07/2020
3
Special note for standard and F-CPUs
If you want to block individual access levels for a standard or F-CPU (e.g. read access, HMI access, no access (complete protection)) via the display or the ENDIS_PW instruction, you need to have assigned passwords for these access levels (in the "Protection & Security" area in the CPU properties).
S7-1500 CPUs
CPU Manuals, Edition 12/2017 and Edition 09/2016
Technical specifications section: The listed technical specifications correspond to the respective edition of the device manual (Edition 12/2017 or Edition 09/2016). You can find the data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td). Enter the article number or the short designation of the desired module on the website.
CPU Manuals, Edition 12/2017 and Edition 09/2016
You can read the status (e.g. "On" or "Off") of LEDs of a CPU or a module using the "LED" instruction. Note, however, that it is not possible to read the LED status of the LINK RX/TX LEDs on all S7-1500 CPUs.
You can find additional information on the "LED" instruction in the STEP 7 online help.
CPU Manuals, Edition 11/2019, Edition 12/2017 and Edition 09/2016
Unlike as described in the manuals, the MAINT-LED does not light up during PROFIenergy pause.
S7-1500 CPU 1518-4 PN/DP - Isochronous mode
Manual CPU 1518-4 PN/DP, edition 09/2016
Note Isochronous mode If you use high-speed OBs with cycle times of 125 µs, the creation by the system of several hundred DBs may have an effect on the jitter of an OB6x. To avoid possible impacts on the execution and processing times of high-speed OBs, use the CREATE_DB sparingly or not at all.
Amendments to documentation S7-1500/ET 200MP
4
A5E31876033-AU, 07/2020
S7-1500 CPU 1511C-1 PN and CPU 1512C-1 PN CPU 1511C-1 PN and CPU 1512C-1 PN manuals, Edition 12/2017 The loads of the digital onboard I/O X11 and X12 connected at the outputs have a connection to ground 2M/3M and 5M/6M.
xL+ xM CHx RUN ERROR PWR
Figure 1
Encoder supply for the digital inputs CPU interface module Connection for 24 V DC supply voltage Connection for ground Channel or channel status LED (green) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
Block diagram and pin assignment X11 of CPU 1511C-1 PN and CPU 1512C-1 PN
Amendments to documentation S7-1500/ET 200MP
A5E31876033-AU, 07/2020
5
xL+ xM CHx RUN ERROR PWR
Figure 2
Encoder supply for the digital inputs CPU interface module Connection for 24 V DC supply voltage Connection for ground Channel or channel status LED (green) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
Block diagram and pin assignment X12 of CPU 1512C-1 PN
Amendments to documentation S7-1500/ET 200MP
6
A5E31876033-AU, 07/2020
Manual CPU 1518-4 PN/DP MFP, Edition 12/2017, Section 2.3.1 Quick start instructions for commissioning C/C++ Runtime
Note Defective C/C++ Runtime containers The three C/C++ Runtime containers are located in the "/CppEnv1.MFP" directory on the SIMATIC Memory Card. If the C/C++ Runtime containers are damaged or lost when the CPU is switched off, a diagnostic entry is created in the diagnostic buffer of the CPU the next time the CPU is started up. C/C++ Runtime cannot be reached and the ERROR LED flashes. If automatic repair of the containers by the automation system is not possible, the containers can no longer be used by the Linux file system. The automation system starts C++ Runtime in root mode. A new logon with the standard user and password is possible. However, you cannot make any permanent changes to the automation system, e.g: · Change the password · Save data · Change system settings Solution: · Copy a previously created backup copy of the C/C++ Runtime containers to the SIMATIC Memory Card.
or · Delete the affected C/C++ Runtime container from the SIMATIC Memory Card. The automation system then recreates the
container during the next startup.
S7-1500 CPU 1518-4 PN/DP MFP
Manual CPU 1518(F)-4 PN/DP MFP, Edition 12/2017, Section 2.3. Firmware functions
Note the following updated information for the firmware function C/C++ applications:
Function
Description
C/C++ applications
CPU 1518-4 PN/DP MFP can execute STEP 7 blocks as well as blocks and applications programmed with C/C++ (CPU function library) in the user program.
The multifunctional platform enables you to execute C/C++ code (CPU function library for the real-time environment) synchronously in the CPU cycle.
In addition, the multifunctional platform can run C/C++ applications (C/C++ Runtime application) parallel to the CPU cycle.
You create the CPU function library for the real-time environment and Linux C/C++ Runtime application with the "ODK 1500S Open Development Kit" (ODK).
Using the ODK provides you with the mechanisms of higher programming languages (e.g. object-oriented) within a modern programming environment.
You can use Target 1500S for Simulink and ODK 1500S to create CPU function libraries for your complex open and closed-loop control algorithms for the realtime environment in C/C++.
ET 200MP with IM 155-5 PN ST - Channel diagnostics, MSI/MSO Manual IM 155-5 PN ST interface module, edition 11/2017 Channel diagnostics In contrast to the order specified in the manual, the User Structure Identifiers (USI) are structured as follows: · USI data block · Reserved bytes · Manufacturer-specific diagnostics
ET 200MP with IM 155-5 DP ST Operation on a WIN AC RTX
When operating the ET 200MP (PROFIBUS) on a WIN AC RTX, configuration is only possible via GSD file (selection in the hardware catalog under "Additional field devices"). Configuration on the basis of a support package is not supported in the TIA Portal for this device arrangement.
Amendments to documentation S7-1500/ET 200MP
A5E31876033-AU, 07/2020
7
ET 200MP with IM 155-5 DP ST - operation on Y-Link, interrupts, technical specifications Manual Interface module IM 155-5 DP ST, edition 08/2013 Operation on Y-Link As of firmware version V2.0.0, the IM 155-5 DP ST interface module can be operated as DP slave after the Y-Link. Interrupts The bytes x+8 to x+19 of the diagnostic interrupt are assigned as follows:
Figure 3
Structure starting at byte x+8
Figure 4
Structure starting at byte x+14
Technical specifications
For the IM 155-5 DP ST, the address space of each module can be assigned a maximum of 64 bytes of inputs and a maximum of 64 bytes of outputs.
Amendments to documentation S7-1500/ET 200MP
8
A5E31876033-AU, 07/2020
S7-1500/ET 200MP - Substitute value behavior in shared device mode
Observe the following special characteristics for substitute value behavior in shared device mode with the modules/configurations in the following table:
Note Substitute value behavior in shared device mode If the system is in shared device mode and one of the IO controllers involved goes into STOP or fails due to a communication breakdown, for example, all submodules of the output module perform the configured substitute value reaction (e.g. shutdown). This means that even when only one IO controller fails, that the other IO controllers associated with the shared device no longer control the assigned submodule of the output module.
Module/module name DQ 32x24VDC/0.5A BA DQ 16x24VDC/0.5A BA
Configuration 4 x 8-channel without value status 2 x 8-channel without value status
Article no.: 6ES7522-1BL10-0AA0 6ES7522-1BH10-0AA0
S7-1500/ET 200MP - Modules with isochronous mode
The following configurations rule out isochronous mode of the module:
· Module-internal shared input (MSI)
· Module-internal shared output (MSO)
· Submodules for shared device
Digital input modules with isochronous mode
When operating the following digital input modules, make sure that the digital input modules have at least one of the following firmware versions (FW) or higher. Otherwise, you may experience a high jitter in the application.
· DI 16x24VDC HF (6ES7521-1BH00-0AB0): For modules with functional status FS 03: FW V2.1.4 For modules with functional status FS 04: FW V2.2.0
· DI 32x24VDC HF (6ES7521-1BL00-0AB0): For modules with functional status FS 03: FW V2.1.4
S7-1500/ET 200MP - Calibration of analog modules
Requirements: The module is integrated in the hardware catalog of STEP 7 (TIA Portal) (no GSD file).
The "Calibration" function (calibration in RUN) is only possible with the following configurations.
Module/module name AI 8xU/I/RTD/TC ST QI AI 8xU/I/RTD/TC ST AI 8xU/I HS QI AI 8xU/I HS AQ 8xU/I HS QI AQ 8xU/I HS AQ 4xU/I ST QI AQ 4xU/I ST AQ 4xU/I HF QI AQ 4xU/I HF AI 4xU/I/RTD/TC/ AQ 2xU/I ST QI AI 4xU/I/RTD/TC/ AQ 2xU/I ST AI 4xU/I/RTD/TC ST QI AI 4xU/I/RTD/TC ST AQ 2xU/I ST QI AQ 2xU/I ST
Configuration 1 x 8-channel with value status 1 x 8-channel without value status 1 x 8-channel with value status 1 x 8-channel without value status 1 x 8-channel with value status 1 x 8-channel without value status 1 x 4-channel with value status 1 x 4-channel without value status 1 x 4-channel with value status 1 x 4-channel without value status 1 x 6-channel with value status 1 x 6-channel without value status 1 x 4-channel with value status 1 x 4-channel without value status 1 x 2-channel with value status 1 x 2-channel without value status
Article no.: 6ES7531-7KF00-0AB0 6ES7531-7NF10-0AB0 6ES7532-5HF00-0AB0 6ES7532-5HD00-0AB0 6ES7532-5ND00-0AB0 6ES7534-7QE00-0AB0 6ES7531-7QD00-0AB0 6ES7532-5NB00-0AB0
Amendments to documentation S7-1500/ET 200MP
A5E31876033-AU, 07/2020
9
S7-1500/ET 200MP - Technical specifications
Manual AI 8xU/I HS (6ES7531-7NF10-0AB0), Edition 12/2016
Manual AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0), Edition 09/2016
Manual AI 4xU/I/RTD/TC / AQ 2xU/I ST (6ES7534-7QE00-0AB0), Edition 09/2016
Contrary to the information given in the manuals, the following statements apply:
24 V encoder supply Short-circuit protection Output current, max.
Yes 20 mA; max. 47 mA per channel for a duration < 10 s
The "encoder supply" depends on the module and is described in the technical specifications of the respective device manual. You can find the data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td). Enter the article number or the short designation of the desired module on the website.
S7-1500/ET 200MP - modules with switching cycle counter The following modules have a switching cycle counter: · Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0) with firmware version V2.1.0 · Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0) with firmware version V1.1.0 These modules are already integrated in the hardware catalog STEP 7 (TIA Portal) V16 and in the GSD file for PROFINET IO. The modules with the "Switching cycle counter" function will, however, only be available at a later date.
OPC UA client-server connection via NAT router
Communication Function Manual, Edition 11/2019
If client and server are connected via NAT routers, this attempt to make a connection fails with the error message "BadCommunicationError" or "BadNotConnected".
Background: The IPv4 packets are manipulated by the router in NAT systems. As a result, either the source IP ("Source NAT") or the destination IP ("Destination NAT") of a packet is replaced by an IP address configured in the router (depending on the destination port). This process is transparent for client and server, i.e. these devices are not informed about this process.
The problem: The NAT router also has no way to replace the endpoint description returned by the server (this is the EndpointUrl), since this address information is located in the user data of "GetEndpointsResponse".
You can find a detailed description of the procedure in the following FAQ (https://support.industry.siemens.com/cs/ww/en/view/109766709).
CPU Firmware Version V2.6
No OPC UA client-server connection via NAT router possible.
Remedy as of CPU firmware version V2.8
Use the "ServerUri" attribute of the connection information ("SessionConnectInfo" parameter of the "OPC_UA_Connect" instruction).
Enter the complete ServerEndpointUrl with the IP address of the NAT router as "ServerUri". This ServerEndpointUrl is then used to establish the connection instead of the EndpointUrl returned in GetEndpointsResponse. If you leave the attribute empty, the behavior will be the same as in CPU firmware version V2.6.
When you use the connection parameter assignment for the OPC UA connection setup (create client interface), then you must open the client interface DB (*_Configuration[DBx]) after the parameter assignment and change the string in the "ServerUri" parameter. The entry is retained after compiling the OPC UA configuration.
Amendments to documentation S7-1500/ET 200MP
10
A5E31876033-AU, 07/2020
Example of establishing a connection (address from ServerUri replaces address from GetEndpointsResponse) Procedure: In the "ServerUri" parameter, enter the complete server address (ServerEndpointUrl), consisting of IP address, port and optional path. The IP address is the client-side IP address of the NAT router: 1) Open configuration DB
2) Change "ServerUri" parameter
The connection is then established with the following steps:
· GetEndpointsRequest: The S7-1500 OPC UA client addresses the server via the destination address of the NAT router in the client subnet (10.10.0.1). The NAT router converts the destination address into the IP address of the server (192.168.0.1) in the subnet of the server.
· GetEndpointsResponse: The server returns its EndpointUrl in "GetEndpointsResponse": "opc.tcp://192.168.0.1:4840/UA/DemoServer". This address cannot be reached directly by the client because it is located behind a NAT router.
· OpenSecureChannel: The client does not take the EndpointUrl from the GetEndpointsResponse to open the secure channel. Instead, it takes the EndpointUrl from the "ServerUri" parameter: "opc.tcp://10.10.0.1:4840/UA/DemoServer". This IP address can be reached by the client; the data is routed from the NAT router to the IP address of the server.
Active backplane bus
Shared device is not possible with the HSP0318 in the combination of active backplane bus and S7-300/400 CPUs as IO controller.
This combination is possible with GSD file (in STEP 7 as of V5.5 and in STEP 7 (TIA Portal)).
Shared device with active backplane bus and S7-1500 CPUs as IO controller is possible with the HSP0318 and with GSD file.
Amendments to documentation S7-1500/ET 200MP
A5E31876033-AU, 07/2020
11
Notes on S7-1500 Motion Control
Technology alarms 900-902
Contrary to the documented behavior, the received leading value is detected as invalid with technology alarms 900 and 901 as alarm response. Technology alarm 902 has no alarm response.
The technology alarms 900 and 901 are displayed in the diagnostics buffer.
No.
Response
900 Set leading value invalid 901 Set leading value invalid 902 No response
Error bit
X2 X2 -
Warning bit
X2
Restart Diagnostics buffer
Alarm text
-
X
Invalid leading values.
-
X
Data transmission error.
-
-
Leading value accuracy limited.
You can acknowledge a technology alarm 900 with an "MC_Reset" job with "Restart" = FALSE. A restart is not required.
The technology alarm 900 is displayed with the following alarm text:
Alarm text Invalid leading values.
Solution
Set a higher tolerance time (<TO>.Parameter.ToleranceTimeExternalLeadingValueInvalid).
Check the connection of the interconnected components. Make sure that there is no communication interference.
Make sure that the CPUs involved are in RUN operating state.
The technology alarm 901 is displayed with the following alarm text:
Alarm text Data transmission error
Invalid version Invalid modulo start value Invalid modulo length Sign-of-life error Invalid position Invalid velocity Invalid acceleration
Solution Check the communication.
Check the leading value of the leading axis on the other CPU.
Behavior of the modulo cycle counter when homing with "MC_Home"
In contrast to the documented behavior, the modulo cycle counter responds during direct relative homing with "Mode" = 1, 12 and with absolute value encoder adjustment (relative) with "Mode" = 6 as with direct absolute homing with "Mode" = 0. The counter values of the modulo cycles change during homing and the absolute encoder adjustment with the listed modes as follows:
Action
Description
Absolute value adjustment with "Mode" = 6
Direct homing relative with "Mode" = 1, 12
The modulo value is the shortest distance between the current and new position. Depending on the distance, the modulo cycle counter can remain the same, increase by 1 or decrease by 1.
The modulo value is the shortest distance between the current and new position. Depending on the distance, the modulo cycle counter can remain the same, increase by 1 or decrease by 1.
Provision of leading value for cross-PLC synchronous operation
Contrary to documentation, the leading value can only be provided by the CPUs S7-1515, S7-1516, 1515SP PC2 T/TF, the technology CPUs, and the SIMATIC Drive Controller.
This behavior is corrected as of firmware version V2.8.3.
Use of the "DX_TEL_SyncOp" data type for cross-PLC synchronous operation
Output and input tags with the "DX_TEL_SyncOp" data type are created for the cross-PLC synchronous operation at the start address of the transfer area. If the data type "DX_TEL_SyncOp" cannot be assigned, it was deleted with the last compilation.
Unused data types are deleted during the compilation. To restore the "DX_TEL_SyncOp" data type, add a V5.0 technology object. After using the data type in the PLC tag, the technology object can be deleted again.
Amendments to documentation S7-1500/ET 200MP
12
A5E31876033-AU, 07/2020
Manually configuring delay times on the leading axis and the virtual following axis
If you increase the delay time of the leading axis in the leading value settings, this results in a reduction of the extrapolation time at the leading axis proxy or to an increase of the interpolation time of the distributed leading value at the leading axis proxy. This reduces the error resulting from extrapolation in the acceleration and delay phases of the leading value.
If the delay time at the leading axis proxy is increased, this results in an increase of the extrapolation time or to a reduction of the interpolation time.
Calculation of the following error
The following error is the difference between the setpoint and actual position based on the connection of the axis at the drive. In contrast to the documented behavior, the transmission times of the setpoints from the controller to the drive and the actual position values from the drive to the controller are not part of the following error. The value of the following error is thus not the same as the difference between the setpoint available in the controller minus the existing actual position.
Performance of the user transformation with dynamic adaptation (S7-1500T)
With the Technology Version V5.0, longer runtimes of the MC-Interpolator [OB92] arise with the user transformation. With longer runtimes of the MC-Interpolator [OB92] the runtimes of the organization blocks with lower priority are extended.
Maximum number of signals per kinematics trace
You can record a maximum of 16 signals in a kinematics trace. The following table shows how many signals are required for the traces.
Kinematics type
Trace
Required signals
2D
Tool center point (TCP) and kinematics
4
Tool center point (TCP)
2
per OCS
3
2D with orientation
Tool center point (TCP) and kinematics
6
Tool center point (TCP)
3
per OCS
2
3D
Tool center point (TCP) and kinematics
6
Tool center point (TCP)
3
per OCS
6
3D with orientation
Tool center point (TCP) and kinematics
8
Tool center point (TCP)
4
per OCS
4
The more traces you record, the lower the maximum recording duration and the number of measuring points per trace.
Use of blending with kinematics motions (S7-1500T)
Dynamic overruns on the kinematics axes might occur during blending.
Occasionally, a synchronous "point-to-point" motion might not be blended into the next movement. In this case, increase the cycle time of the OB MC servo.
Blending between path motions and synchronous "point-to-point" motions (sPTP motions) (S7-1500T) When using blending from a path motion to an sPTP motion, there might not be any blending or the blending segment could be significantly shortened. When using blending of path motions and sPTP motions, set the path dynamics as high as possible: · Jerk · Acceleration This behavior is corrected with firmware version V2.8.2.
Changing the override for synchronous "point-to-point" motions (sPTP motion) (S7-1500T) When changing the override, the path of the motion of the tool center point (TCP) of an sPTP motion can change. If the motion contour of the TCP is to be retained, the kinematics proceed with minimal change to the override. This behavior is corrected with firmware version V2.8.2.
Amendments to documentation S7-1500/ET 200MP
A5E31876033-AU, 07/2020
13
User-defined transformation (S7-1500T) You can configure and apply the user-defined transformation with multiple technology objects kinematics on a PLC. To differentiate in MC-Transformation [OB98] between the different kinematics technology objects, use the input "KinematicsObject".
Job sequence of the kinematics technology object (S7-1500T) The motion is not always prepared via all motion jobs in the job sequence. The CPU determines the number of motion jobs to be considered depending on the type of motion jobs, e. g. sPTP motion, linear motion, circular motion, conveyor tracking.
Using the Motion Control instruction "MC_TrackConveyorBelt" (S7-1500T) The use of the Motion Control instruction "MC_TrackConveyorBelt" is possible as of firmware version V2.8.2. If the Motion Control instruction "MC_TrackConveyorBelt" is called multiple times with an FB instance and with different input parameters, the parameter "Done" is occasionally not set to TRUE. Use different instances for changing input parameters. If you quickly order two "MC_TrackConveyorBelt" jobs on an FB instance in a row, the parameter "Done" is occasionally not set. After a "MC_TrackConveyorBelt" job, wait at least two motion control application cycles until you order the next job.
Mode of operation of the conveyor tracking with firmware version V2.8.2 (S7-1500T) Contrary to the documentation, the following behavior applies as of firmware version V2.8.2: · Dynamic adaptation cannot be used at any phase of the conveyor tracking. · A direct transition from one tracked OCS into another tracked OCS is not possible. First transmit an instruction in the WCS
or a non-tracked OCS to complete the process of the kinematics with the tracked OCS. When the instruction in the WCS or a non-tracked OCS is completed, the tracking of the OCS at the conveyor is automatically completed ("TrackingState" = 0). · To move the kinematics to the first position in the tracked OCS ("TrackingState" changes from 1 to 2) or to complete the process of the kinematics in the tracked OS ("TrackingState" changes from 3 to 4) use the instructions "MC_MoveLinearAbsolute" or "MC_MoveCircularAbsolute". · The instruction "MC_SetOCSFrame" can only be applied on an OCS with "TrackingState" = 0. · If a motion of the kinematics is completed in the tracked OCS through a motion job in the WCS or a non-tracked OCS, this is shown in the variable "TrackingState" = 4. When the motion job is completed, the "TrackingState" changes to 0 and the OCS is not included with the product position anymore. · An instruction "MC_GroupStop" completes the tracking of the OCS with "TrackingState" = 2 and 4. · The tracking of the OCS with conveyor motion is not recorded in the kinematics trace. The traversing of the TCP with the tracked OCS is recorded. · Permitted values for "InitialObjectPosition":
"InitialObjectPosition.x" <=> 0.0
"InitialObjectPosition.y" = 0.0
"InitialObjectPosition.z" = 0.0
"InitialObjectPosition.a" = 0.0
"InitialObjectPosition.b" = 0.0 "InitialObjectPosition.c" = 0.0
Amendments to documentation S7-1500/ET 200MP
14
A5E31876033-AU, 07/2020
Blending behavior · Blending is possible for the following motions:
In a motion job for moving into the first position in the tracked OCS In motions within the tracked OCS From a motion job that exits tracking at the conveyor to the subsequent motion job, if the sequence of instructions in
the job sequence is as follows: 1. Moving in a tracked OCS 2. Assigning other OCS to the product position of another conveyor 3. Exiting conveyor tracking by moving into a position in WCS or in a non-tracked OCS 4. Moving into a position in the newly tracked OCS The jobs 2, 3 and 4 must already be in the job sequence as long as job 1 is still being performed. · Blending is not possible for the following motions:
In a motion job that completes the tracking at the conveyor From a motion job for moving into the first position in the tracked OCS into the subsequent motion job in the tracked
OCS MC_TrackConveyorBelt V5: Function chart
Amendments to documentation S7-1500/ET 200MP
A5E31876033-AU, 07/2020
15
Amendments to documentation S7-1500/ET 200MP
16
A5E31876033-AU, 07/2020
Section A
A "MC_MeasuringInput" job (A1) is used to record the position of a product at the time . The recorded position "MV" is reported via "Done_1" and written into the variable "CONV_POS.x".
With a "MC_TrackConveyorBelt" job (A2), an OCS is assigned at the time via the parameter "ConveyorBelt" to a leadingvalue capable technology object, which represents the conveyor belt. The OCS is assigned to a known conveyor position to this purpose. The OCS is assigned with the OCS frame and the product position to a product on the conveyor.
The "ObjectPosition" is calculated from the conveyor position minus the "InitialObjectPosition". In the present case the "InitialObjectPosition" is the position of the conveyor ("MV") at the time .
The status of conveyor tracking ("TrackingState") changes from 0 to 1.
Via a "MC_MoveLinearAbsolute" job at the time the kinematics is moved to the position specified in the OCS. When the kinematics moves to the product position, the status of conveyor tracking changes from 1 to 2. When the kinematics follow the product position, the status of conveyor tracking changes from 2 to 3.
Section B
To complete the process of the kinematics with the tracked OCS, a "MC_MoveLinearAbsolute" job is started in the WCS at the time . When the kinematics moves to the position in WCS, the status of conveyor tracking changes from 3 to 4.
The completed conveyor tracking is reported via "Done_4" and the "TrackingState" changes to 0. The OCS is not tracked with the conveyor position anymore.
Technology alarm 802 (S7-1500T)
The technology alarm 802 has been extended with the following alarm texts:
Alarm no. and text
Solution
Calculation of the geometry element not possible. 8 Moving on the tracked OCS is not possible through the
command parameter assignment.
9 Moving of the kinematics on the tracked OCS cannot be completed through the command parameter assignment.
10 A change of the coordinate system is not possible at a moved OCS.
11 An sPTP motion is not possible with a moved OCS. 12 The active coordinate system cannot be changed with a
moved OCS.
13 The dynamic values are not correct.
· Use the instructions "MC_MoveLinearAbsolute" or "MC_MoveCircularAbsolute".
· At "MC_MoveCircularAbsolute" use the "CircMode" = 0.
· Switch off the dynamic adaptation.
· Use a route > 0 for the instructions. An orientation motion without kinematics motion is not possible.
· Use the instructions "MC_MoveLinearAbsolute" or "MC_MoveCircularAbsolute".
· At "MC_MoveCircularAbsolute" use the "CircMode" = 0.
· Switch off the dynamic adaptation.
· Use a route > 0 for the instructions. An orientation motion without kinematics motion is not possible.
It is not possible to automatically change with a motion command from one tracked OCS into another tracked OCS.
A "MC_MoveDirectRelative" or "MC_MoveDirectAbsolute" instruction cannot be used in a moved OCS.
The following instructions can only be performed with the status "TrackingState" = 0 or 1:
· "MC_DefineTool"
· "MC_SetTool"
· "MC_TrackConveyorBelt"
The instruction "MC_SetOCSFrame" can only be performed with the status "TrackingState" = 0.
Check the calculation of the speeds and accelerations in the user transformation in the MC-Transformation [OB98].
Technology alarms 810 and 811 (S7-1500T)
Contrary to the documentation, bit 7 "ConveyorFault" (error in conveyor tracking) is set in <TO>.ErrorWord when alarms 810 and 811 are triggered.
Amendments to documentation S7-1500/ET 200MP
A5E31876033-AU, 07/2020
17
Error detection (Kinematics) (S7-1500T)
The list of error messages has been extended with the following "ErrorIDs":
ErrorID 16#80D7
Description
The job on the kinematics transformation cannot be executed.
16#80DA
Invalid value parameter "InitialObjectPosition"
Solution
A "MC_KinematicsTransformation" or "MC_InverseKinematicsTransformation" instruction cannot perform a calculation, when the kinematics moves a tracked OCS or the moving of a tracked OCS is completed. Wait until the current job for the conveyor tracking has been completed and restart the job for the kinematics transformation.
Enter permissible values for the frame at the parameter "InitialObjectPosition".
Notes on English and Chinese documentation (S7-1500T)
Contrary to the documentation, the leading value during synchronization in advanced and subsynchronization via leading value distance must not reverse. This applies to gearing with "MC_GearInPos" and camming with "MC_CamIn".
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
Amendments to documentation S7-1500/ET 200MP
1A58E31876033-AU, 07/2020
Amendments to documentation S7-1500/ET 200MP A5E31876033-AU, 07/2020
SIMATIC Drive Controller
SIMATIC SIMATIC Drive Controller
System Manual
Preface
SIMATIC Drive Controller Documentation Guide
1
Safety information
2
System overview
3
Application planning
4
Installation
5
Connecting
6
Configuring
7
Basics of program execution
8
Protection
9
10 Flexible automation concepts
Commissioning
11
SIMATIC memory card
12
Maintenance
13
Test and service functions
14
Technical data
15
Information for users
changing from
A
SIMOTION D4x5-2
Accessories/spare parts
B
11/2019
A5E46600094-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E46600094-AA 10/2019 Subject to change
Copyright © Siemens AG 2019. All rights reserved
Preface
Purpose of the documentation
This documentation provides an overview of the SIMATIC Drive Controller family and important information on configuring, installing, wiring and commissioning.
Basic knowledge required A basic knowledge of automation technology is required to understand the documentation.
Scope of the documentation This documentation applies to all products from the SIMATIC Drive Controller product family.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note Notes contain important information on the product described in the documentation, on handling the product or on part of the documentation to which you should pay particular attention.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
3
Preface
Special information
Note Important note for maintaining the operational safety of your plant Plants with safety-related features are subject to special operational safety requirements on the part of the operator. Even suppliers are required to observe special measures during product monitoring. For this reason, we inform you in personal notifications about product developments and features that are (or could be) relevant to the operation of plants from a safety perspective. By subscribing to the corresponding notifications, you will ensure that you are always up-todate and able to make changes to your system when necessary. Log onto Industry Online Support. Go to the following links and right-click on "email on update": SIMATIC S7-1500/SIMATIC S7-1500F (https://support.industry.siemens.com/en/ww/de/ps/13716) Distributed I/O (https://support.industry.siemens.com/cs/ww/en/ps/14029) STEP 7 (TIA Portal) (https://support.industry.siemens.com/cs/ww/en/ps/14667) SINAMICS S120 (https://support.industry.siemens.com/cs/ww/en/ps/13231) SINAMICS Startdrive (https://support.industry.siemens.com/cs/ww/en/ps/13438) Operator control and monitoring systems (https://support.industry.siemens.com/cs/ww/en/ps/14729) Industrial communication (https://support.industry.siemens.com/cs/ww/en/ps/15247) Safety engineering Safety Integrated (https://support.industry.siemens.com/cs/ww/en/ps/19902)
Note When using F-CPUs in safety mode and failsafe modules, observe the description of the SIMATIC Safety - Configuring and Programming (https://support.industry.siemens.com/cs/ww/en/view/54110126) F system.
Recycling and disposal For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
SIMATIC Drive Controller
4
System Manual, 11/2019, A5E46600094-AA
Preface
Siemens Industry Online Support You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet.
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com) and in the Information and Download Center (https://www.siemens.com/automation/infocenter).
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
5
Table of contents
Preface ...................................................................................................................................................... 3
1 SIMATIC Drive Controller Documentation Guide ..................................................................................... 11
2 Safety information.................................................................................................................................... 13
2.1 2.1.1
General safety information ..................................................................................................... 13 Safety-relevant symbols......................................................................................................... 15
2.2
Residual risks of power drive systems................................................................................... 17
2.3
Security information ............................................................................................................... 18
2.4
Unsafe operating states due to manipulation of software...................................................... 18
3 System overview...................................................................................................................................... 19
3.1 3.1.1 3.1.2 3.1.3 3.1.4 3.1.5
What is the SIMATIC Drive Controller? ................................................................................. 19 Comparison of SIMATIC Drive Controller versions ............................................................... 20 Areas of application ............................................................................................................... 22 Plant components and automation levels .............................................................................. 27 Scalability ............................................................................................................................... 28 Overview of features .............................................................................................................. 31
3.2
Configuration.......................................................................................................................... 32
3.3 3.3.1 3.3.2 3.3.3 3.3.4 3.3.5 3.3.6
SIMATIC Drive Controller functions ....................................................................................... 34 Safety ..................................................................................................................................... 34 Security .................................................................................................................................. 38 Web server............................................................................................................................. 40 Trace ...................................................................................................................................... 41 Technology functions of the CPU .......................................................................................... 44 SINAMICS Integrated functions ............................................................................................. 50
3.4
Integrated interfaces for communication................................................................................ 52
3.5
DRIVE-CLiQ........................................................................................................................... 53
3.6
Power supply.......................................................................................................................... 54
3.7 3.7.1 3.7.2 3.7.3 3.7.4 3.7.5
Software ................................................................................................................................. 55 TIA Portal ............................................................................................................................... 55 SINETPLAN ........................................................................................................................... 56 PRONETA.............................................................................................................................. 56 TIA Selection Tool.................................................................................................................. 56 SIMATIC Automation Tool ..................................................................................................... 57
SIMATIC Drive Controller
6
System Manual, 11/2019, A5E46600094-AA
Table of contents
4 Application planning................................................................................................................................. 58
4.1
Installation location .................................................................................................................58
4.2
Hardware and software requirements.....................................................................................60
4.3 4.3.1 4.3.2 4.3.3
Drive Controller-specific properties.........................................................................................61 Drive Controller-specific hardware properties ........................................................................61 Drive Controller-specific properties of the CPU......................................................................61 Drive Controller-specific properties of SINAMICS Integrated.................................................62
4.4
Hardware configuration...........................................................................................................64
4.5
Power supply ..........................................................................................................................66
5 Installation ............................................................................................................................................... 67
5.1
Installation notes .....................................................................................................................67
5.2
Mounting the SIMATIC Drive Controller .................................................................................69
6 Connecting .............................................................................................................................................. 71
6.1
Rules and regulations for operation........................................................................................71
6.2 6.2.1 6.2.2 6.2.3
Additional rules and regulations for operation ........................................................................74 Safety extra-low-voltage (SELV, PELV) for failsafe modules .................................................74 Requirements of sensors and actuators for fail-safe modules ...............................................75 Capacitive crosstalk of digital input/output signals .................................................................78
6.3
Electrical configuration............................................................................................................78
6.4
Wiring rules .............................................................................................................................79
6.5
Connecting the supply voltage................................................................................................80
6.6
PROFINET and PROFIBUS DP .............................................................................................81
6.7
Digital inputs and digital inputs/outputs X122, X132 and X142..............................................82
6.8
DRIVE-CLiQ interfaces X100 to X103 ....................................................................................84
6.9
Protective conductor and potential equalization, functional ground .......................................85
6.10
Connecting cable shields........................................................................................................89
7 Configuring .............................................................................................................................................. 91
7.1
Overview .................................................................................................................................91
7.2
Hardware/software requirements............................................................................................92
7.3
Configuration procedure .........................................................................................................93
7.4
Display in the TIA Portal .........................................................................................................99
7.5
Configuration information......................................................................................................101
7.6
Address assignment .............................................................................................................102
7.6.1
Addressing ............................................................................................................................102
7.7 7.7.1
Address space ......................................................................................................................104 Address space of the digital inputs and digital inputs/outputs..............................................104
7.8 7.8.1 7.8.2
Process images and process image partitions .....................................................................106 Process image - overview.....................................................................................................106 Updating process image partitions in the user program .......................................................107
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
7
Table of contents
7.9 7.9.1 7.9.2 7.9.3 7.9.4 7.9.5 7.9.6 7.9.7 7.9.8 7.9.9 7.9.10
Configuration of digital inputs/outputs (X142)...................................................................... 109 Configuring the DI operating mode ...................................................................................... 111 Configuring the DQ operating mode .................................................................................... 112 Configuring Timer DI operating mode.................................................................................. 113 Configuring Timer DQ operating mode ................................................................................ 117 Configuring Oversampling DI operating mode..................................................................... 123 Configuring Oversampling DQ operating mode................................................................... 125 Configuring event/period measurement operating mode .................................................... 127 Configuring Pulse width modulation (PWM) operating mode .............................................. 128 Assignment of the control interface...................................................................................... 131 Assignment of the feedback interface.................................................................................. 132
7.10
Configuring the digital inputs and digital inputs/outputs (X122/X132) ................................. 135
7.11 7.11.1 7.11.2 7.11.3 7.11.4 7.11.5 7.11.6
Configuring the clock system ............................................................................................... 137 Overview of isochronous mode............................................................................................ 137 Configuring drives with SINAMICS Integrated isochronously.............................................. 139 Configuring technology I/Os (X142) as isochronous ........................................................... 144 Configuring additional drives on PROFINET (X150) as isochronous .................................. 148 Configuring the PROFIBUS interface as isochronous ......................................................... 150 Setting the clock system ...................................................................................................... 150
8 Basics of program execution.................................................................................................................. 157
8.1
Programming the CPU ......................................................................................................... 157
8.2
Events and OBs ................................................................................................................... 158
8.3
Asynchronous instructions ................................................................................................... 160
9 Protection .............................................................................................................................................. 170
9.1
Overview of the protection functions.................................................................................... 170
9.2
Configuring access protection for the CPU.......................................................................... 170
9.3
Using the user program to set additional access protection ................................................ 174
9.4
Know-how protection ........................................................................................................... 175
9.5
Copy protection .................................................................................................................... 179
9.6
Protection by locking the CPU ............................................................................................. 181
10 Flexible automation concepts ................................................................................................................ 182
10.1
Standard machine projects .................................................................................................. 182
10.2
Configuration control (option handling) ................................................................................ 186
10.3
TIA Portal Openness............................................................................................................ 188
11 Commissioning ...................................................................................................................................... 189
11.1
Overview .............................................................................................................................. 189
11.2
Check before powering on for the first time ......................................................................... 191
11.3 11.3.1 11.3.2 11.3.3
Commissioning procedure ................................................................................................... 192 Removing/plugging in a SIMATIC memory card.................................................................. 192 First power-on ...................................................................................................................... 194 Downloading a project to the device .................................................................................... 195
SIMATIC Drive Controller
8
System Manual, 11/2019, A5E46600094-AA
Table of contents
11.4 11.4.1 11.4.2 11.4.3 11.4.4 11.4.5
Operating states of the CPU.................................................................................................196 Overview of operating modes: Startup, STOP, RUN............................................................196 STARTUP operating state ....................................................................................................197 STOP operating state ...........................................................................................................200 RUN operating state .............................................................................................................200 Operating state transitions....................................................................................................201
11.5
SINAMICS Integrated operating states.................................................................................202
11.6
Runtime licensing..................................................................................................................203
11.7 11.7.1 11.7.2
CPU memory reset ...............................................................................................................206 Automatic memory reset.......................................................................................................207 Manual memory reset ...........................................................................................................207
11.8 11.8.1 11.8.2
Configuring SIMATIC Drive Controller backup and restore..................................................209 Backing up and restoring the CPU configuration..................................................................210 Backing up, restoring and deleting SINAMICS Integrated NVRAM data .............................213
11.9 11.9.1 11.9.2
Time synchronization ............................................................................................................215 Time-of-day synchronization of the CPU ..............................................................................215 Time-of-day synchronization of SINAMICS drives ...............................................................217
11.10 11.10.1 11.10.2 11.10.3
Identification and maintenance data .....................................................................................221 Reading out and entering I&M data ......................................................................................221 Record structure for I&M data...............................................................................................223 Example: Read out firmware version of the CPU with Get_IM_Data ...................................225
11.11
Shared commissioning of projects........................................................................................227
12 SIMATIC memory card .......................................................................................................................... 229
12.1
SIMATIC memory card Overview ......................................................................................229
12.2
Setting the card type .............................................................................................................235
12.3
Data transfer with SIMATIC memory cards ..........................................................................237
12.4
Service life of the SIMATIC memory card.............................................................................239
13 Maintenance .......................................................................................................................................... 241
13.1 13.1.1 13.1.2 13.1.3
Replacing system components.............................................................................................241 Replacing a defective SIMATIC Drive Controller..................................................................241 Replacing a defective SIMATIC memory card......................................................................243 Replacing a DRIVE-CLiQ component...................................................................................244
13.2
SIMATIC Drive Controller firmware update ..........................................................................244
13.3
DRIVE-CLiQ component firmware update............................................................................249
13.4
CPU reset to factory settings ................................................................................................251
13.5
SINAMICS Integrated reset to factory settings.....................................................................254
13.6
Fault reactions with failsafe components..............................................................................255
13.7
Temperature monitoring .......................................................................................................257
13.8
Maintenance and repair ........................................................................................................258
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
9
Table of contents
14 Test and service functions ..................................................................................................................... 259
14.1
Test functions....................................................................................................................... 259
14.2
Reading/saving service data................................................................................................ 266
15 Technical data ....................................................................................................................................... 270
15.1
Introduction .......................................................................................................................... 270
15.2
Standards and Approvals..................................................................................................... 270
15.3
Electromagnetic compatibility .............................................................................................. 271
15.4
Shipping and storage conditions.......................................................................................... 272
15.5
Mechanical and climatic ambient conditions........................................................................ 274
15.6
Information on insulation tests, protection class, degree of protection and rated voltage... 276
A Information for users changing from SIMOTION D4x5-2 ....................................................................... 278
A.1
Information for users changing from SIMOTION D4x5-2 .................................................... 278
B Accessories/spare parts ........................................................................................................................ 281
Glossary ................................................................................................................................................ 285
Index...................................................................................................................................................... 300
SIMATIC Drive Controller
10
System Manual, 11/2019, A5E46600094-AA
SIMATIC Drive Controller Documentation Guide
1
The documentation for the SIMATIC Drive Controller is divided into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC Drive Controller. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, interfaces, wiring diagrams, display and operator control elements and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC Drive Controller and SIMATIC S7-1500 automation system, such as diagnostics, communication, Motion Control, Web server and OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
11
SIMATIC Drive Controller Documentation Guide
S7-1500/ET 200MP Manual Collection
The S7-1500/ET 200MP Manual Collection contains the complete documentation on the SIMATIC Drive Controller gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SINAMICS documentation
The SINAMICS documentation contains detailed descriptions of the SINAMICS S120 automatic speed control and SINAMICS S210 servo drive systems. You can find the documentation by entering the manual title in the search box on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/13229/man).
The SINAMICS Technical Documentation (https://support.industry.siemens.com/cs/ww/en/view/108993276) web page provides information on the topics:
Ordering documentation/documentation overview
Additional links for downloading documents
Using documentation online (find and browse manual/information)
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
SIMATIC Drive Controller
12
System Manual, 11/2019, A5E46600094-AA
Safety information
2
2.1
General safety information
WARNING
Electric shock and danger to life from other energy sources
Touching live parts can result in death or serious injury. · Only work on electrical devices when you are qualified for this job. · Always observe the country-specific safety rules.
Follow the steps below to ensure safety: 1. Prepare for shutdown. Notify all those who will be affected by the procedure. 2. Disconnect the drive system and ensure it cannot be switched back on. 3. Wait until the discharge time specified on the warning labels has elapsed. 4. Check there is no voltage between any power connections or between power
connections and the protective conductor connection. 5. Check whether the existing auxiliary supply circuits are de-energized. 6. Ensure that the motors cannot move. 7. Identify all other hazardous energy sources, for example, compressed air, hydraulic
systems, or water. Put all energy sources in a safe state. 8. Check that the correct drive system is completely locked.
After you have completed the work, restore the operational readiness in the inverse sequence.
WARNING
Electric shock with damaged devices
Improper handling of devices can result in damage.
For damaged devices, hazardous voltages can be present at the enclosure or at exposed components; if touched, this can result in death or severe injury. · Observe the limit values specified in the technical specifications during transport,
storage, and operation. · Do not use damaged devices.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
13
Safety information 2.1 General safety information
WARNING Unexpected movement of machines due to inactive safety functions Safety functions that are inactive or that have not been adjusted accordingly can cause operational faults on machines that could lead to serious injury or death. · Observe the information in the appropriate product documentation before
commissioning. · Carry out a safety inspection for functions relevant to safety on the entire system,
including all safety-related components. · Ensure that the safety functions used in your drives and automation tasks are adjusted
and activated through appropriate parameterizing. · Perform a function test. · Only put your plant into live operation once you have guaranteed that the functions
relevant to safety are running correctly.
WARNING Unexpected movement of machines caused by radio devices or cell phones When radio devices or cell phones with a transmission power > 1 W are used in the immediate vicinity of components, they may cause the equipment to malfunction. Malfunctions may impair the functional safety of machines and can therefore endanger people or lead to material damage. · If you come closer than approx. 2 m to such components, switch off any radio devices or
cell phones. · Use the "SIEMENS Industry Online Support App" only on equipment that has been
switched off.
WARNING Interference from pacemakers and implants from electromagnetic fields (EMF) Electromagnetic fields (EMF) are generated by the operation of electrical power equipment such as transformers, converters or motors. People with pacemakers or implants are at a special risk in the immediate vicinity of these devices/systems. · Ensure that the persons involved are the necessary distance away (minimum 2 m).
SIMATIC Drive Controller
14
System Manual, 11/2019, A5E46600094-AA
Safety information 2.1 General safety information
Electrostatic sensitive devices (ESD) are individual components, integrated circuits, modules or devices that may be damaged by either electric fields or electrostatic discharge.
NOTICE
Device damage caused by electrical fields or electrostatic discharge
Electric fields or electrostatic discharge can cause malfunctions through damaged individual components, integrated circuits, modules or devices. · Only pack, store, transport and send electronic components, modules or devices in their
original packaging or in other suitable materials, e.g conductive foam rubber of aluminum foil. · Only touch components, modules and devices when you are grounded by one of the following methods: Wearing an ESD wrist strap Wearing ESD shoes or ESD grounding straps in ESD areas with conductive flooring · Only place electronic components, modules or devices on conductive surfaces (table with ESD surface, conductive ESD foam, ESD packaging, ESD transport container).
2.1.1
Safety-relevant symbols
The following table contains an explanation of the symbols located in your SIMATIC device, its packaging or the accompanying documentation.
Symbol
Meaning General warning sign Caution/Notice You must read the product documentation. The product documentation contains information about the potential risks and enable you to recognize risks and implement countermeasures. Read the information provided by the product documentation. ISO 7010 M002
Ensure the device is only installed by electrically skilled person. IEC 60417 No. 6182
Note that connected mains lines must be designed according to the expected minimum and maximum ambient temperature.
Note that the device must be constructed and connected in accordance with EMC regulations.
Note that a 230 V device can be exposed to electrical voltages which can be dangerous.
ANSI Z535.2
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
15
Safety information 2.1 General safety information
Symbol
Meaning Note that a device of Protection Class III may only be supplied with a protective low voltage according to the standard SELV/PELV. IEC 60417-1-5180 "Class III equipment"
Be aware that the device is only approved for the industrial field and only for indoor use.
Note that an enclosure is required for installing the device. Enclosures are considered:
· Standing control cabinet · Serial control cabinet · Terminal boxes · Wall enclosure
SIMATIC Drive Controller
16
System Manual, 11/2019, A5E46600094-AA
Safety information 2.2 Residual risks of power drive systems
2.2
Residual risks of power drive systems
When performing the risk assessment for a machine or plant in accordance with the respective local regulations (e.g. EC Machinery Directive), the machine manufacturer or plant constructor must take into account the following residual risks associated with the control and drive components of a drive system:
1. Unintentional movements of driven machine or system components during commissioning, operation, maintenance and repairs caused by, for example:
Hardware and/or software errors in the sensors, control system, actuators, and cables and connections
Response times of the control system and of the drive
Operation and/or environmental conditions outside the specification
Condensation/conductive contamination
Parameterization, programming, cabling, and installation errors
Use of wireless devices / mobile phones in the immediate vicinity of electronic components
External influences/damage
X-rays, ionizing radiation and cosmic radiation
2. Unusually high temperatures, including open flames, as well as emissions of light, noise, particles, gases, etc., can occur inside and outside the components under fault conditions caused by, for example:
Component failure
Software errors
Operation and/or environmental conditions outside the specification
External influences/damage
3. Hazardous shock voltages caused by, for example:
Component failure
Influence during electrostatic charging
Induction of voltages in moving motors
Operation and/or environmental conditions outside the specification
Condensation/conductive contamination
External influences/damage
4. Electrical, magnetic and electromagnetic fields generated in operation that can pose a risk to people with a pacemaker, implants or metal replacement joints, etc., if they are too close
5. Release of environmental pollutants or emissions as a result of improper operation of the system and/or failure to dispose of components safely and correctly
For more information about the residual risks of the drive system components, see the relevant sections in the technical user documentation.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
17
Safety information 2.3 Security information
2.3
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
2.4
Unsafe operating states due to manipulation of software
WARNING
Unsafe operating states due to software manipulation
Software manipulation, for example viruses, Trojans, and malware, can cause unsafe operating states in your plant which may result in death, serious injury, and material damage. · Keep the software up-to-date. · Integrate the automation and drive components into a holistic, state-of-the-art Industrial
Security concept for the plant or machine. · Consider all of the products used in your holistic Industrial Security concept. · Use suitable protective measures such as virus scanners to protect the files on
removable media from malware. · Check all security settings when completing commissioning. · Set up access protection for the CPU. · Set up know-how protection for blocks (OB, FB, FC, global data blocks). · Protect the drive from unauthorized changes by enabling the "Know-how protection"
converter function.
SIMATIC Drive Controller
18
System Manual, 11/2019, A5E46600094-AA
System overview
3
3.1
What is the SIMATIC Drive Controller?
SIMATIC Drive Controller The SIMATIC Drive Controller is a drive-based controller in the SIMATIC S7-1500 range.
A SIMATIC Drive Controller combines the following functionalities in a SINAMICS S120 Booksize Compact enclosure:
Failsafe SIMATIC S7-1500 technology CPU with integrated technology I/Os
SINAMICS S120 automatic speed control
The two components are termed "CPU" and "SINAMICS Integrated" in this documentation.
The integrated SINAMICS S120 automatic speed control is based on a CU320-2 control unit and can control:
A max. of 6 servo drives; or
A max. of 6 drives with vector control; or
A max. of 12 drives with U/f control
Two failsafe technology CPUs with graded performance are available. Safety Integrated at the CPU and drive end allow use in failsafe applications.
The SIMATIC Drive Controller supports communication over PROFINET and PROFIBUS DP.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
19
System overview 3.1 What is the SIMATIC Drive Controller?
3.1.1
Comparison of SIMATIC Drive Controller versions
SIMATIC Drive Controller performance classes
The SIMATIC Drive Controller contains a failsafe CPU from the SIMATIC S7-1500 family and SINAMICS S120 automatic speed control. Two graded performance classes are available.
Table 3- 1 Overview of performance classes
Performance class Small to mid-range applications High-performance applications
SIMATIC Drive Controller CPU 1504D TF CPU 1507D TF
Article number 6ES7615-4DF10-0AB0 6ES7615-7DF10-0AB0
Performance features of the CPUs
The SIMATIC Drive Controller differ in terms of the integrated CPU. The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation. The following table shows key performance features of the SIMATIC Drive Controller.
Table 3- 2 Overview of SIMATIC Drive Controller performance features
Feature Data work memory, max. Code work-memory, max. Retentive data area (including timers, counters, bit memories) Load memory/mass storage, max.
I/O address area, max. Integrated interfaces
SINAMICS Integrated Integrated inputs and outputs (onboard I/O) Configuration control CPU Web server
1504D TF 4 MB 2 MB 768 KB
32 GB (with SIMATIC Memory Card) 32/32 KB 1 x PROFINET IO IRT (3-port switch) 1 x PROFINET IO RT 1 x PROFINET basic services (1000 Mbps) 1 x PROFIBUS DP 2 x USB 3.01 4 x DRIVE-CLiQ on basis of CU320-2 CPU: 8 DI/DQ SINAMICS Integrated: 12 DI, 8 DI/DQ X X
1507D TF 20 MB 6 MB 768 KB
32 GB (with SIMATIC Memory Card) 32/32 KB 1 x PROFINET IO IRT (3-port switch) 1 x PROFINET IO RT 1 x PROFINET basic services (1000 Mbps) 1 x PROFIBUS DP 2 x USB 3.01 4 x DRIVE-CLiQ on basis of CU320-2 CPU: 8 DI/DQ SINAMICS Integrated: 12 DI, 8 DI/DQ X X
SIMATIC Drive Controller
20
System Manual, 11/2019, A5E46600094-AA
System overview 3.1 What is the SIMATIC Drive Controller?
Feature Isochronous mode3
Technology Integrated
1504D TF PROFINET IO with IRT (X150) PROFIBUS DP (X126) SINAMICS Integrated Technology I/Os (X142) CPU: · Motion Control · PID control Onboard I/O: · Event/period measurement · Pulse width modulation (PWM) · Timer DI/DQ · Oversampling DI/DQ
1507D TF PROFINET IO with IRT (X150) PROFIBUS DP (X126) SINAMICS Integrated Technology I/Os (X142) CPU: · Motion Control · PID control Onboard I/O: · Event/period measurement · Pulse width modulation (PWM) · Timer DI/DQ · Oversampling DI/DQ
Number of positioning axes
Motion Control resources4 Extended Motion Control resources4 Security Integrated Integrated system diagnostics Integrated safety functionality Degree of protection
Typical2: 10 Maximum: 30 2400 120 X X X IP 20
Typical2: 55 Maximum: 160 12 800 420 X X X IP 20
1) No assigned function
2) With 4 ms Servo/IPO clock and 35% CPU load from Motion Control
3) Only PROFINET interface X150 can be operated isochronously with the clock system of SINAMICS Integrated and the X142 technology I/Os. Isochronous coupling of PROFIBUS interface X126 with other clock systems is not possible. Additional drive systems must therefore be connected over the PROFINET interface (for details, see section Setting the clock system (Page 150)).
4) For information on technology object resource requirements, see Technology functions of the CPU (Page 44) and S7-1500T Motion Control function manuals. (https://support.industry.siemens.com/cs/ww/en/view/109751049)
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
21
System overview 3.1 What is the SIMATIC Drive Controller?
3.1.2
Areas of application
The scalability of the SIMATIC Drive Controllers through several performance classes offers the required flexibility and scalability for a wide range of Motion Control applications in machine and plant engineering.
The SIMATIC Drive Controller have a wide range of communication interfaces, for example for implementing modular machine concepts and connecting HMI and I/O systems.
As the communication interfaces are available in all performance classes, you select the SIMATIC Drive Controller on the basis of CPU and Motion Control performance only.
The integrated technology CPU provides additional functions to the standard Motion Control and technology functions in the S7-1500 CPUs, such as:
Extended synchronous operation and cam functionalities
Kinematics functions
Cross-PLC synchronous operation
The digital onboard I/O offer additional integrated technology functions, for example:
Measuring inputs for fast, accurate and event-dependent acquisition of actual positions
Outputs for output cams and cam tracks for position-dependent generation of switching signals
The failsafe design of the integrated technology CPU allows you to implement applications for safety systems. This enables seamless integration of machine safety into the SIMATIC Drive Controller. You use one system for both your standard and failsafe automation at the same time. This offers:
Economics benefits
Reliability
Potential savings for hardware, engineering tasks and storage costs
You can expand the drive configuration limits of the SIMATIC Drive Controller over PROFINET, for example with SINAMICS S120 control unit CU320-2.
SIMATIC Drive Controller
22
System Manual, 11/2019, A5E46600094-AA
System overview 3.1 What is the SIMATIC Drive Controller?
Applications and areas of application The integration of an S7-1500TF CPU and automatic speed control (SINAMICS Integrated) into a device makes a small, compact design possible. With graded performance and interface configuration, SIMATIC Drive Controller are optimized for production machines and plants with Motion Control. SIMATIC Drive Controller are used in applications with the SINAMICS S120 drive family, for example, because: A highly dynamic, flexible multi-drive system is required: Broad performance range Comprehensive range of motors (including linear drive, external drives, etc.) Comprehensive range of control processes (servo, vector, U/f) Technology Extensions Controlled supply/regeneration is required: To avoid unwanted line harmonics For a high level of ruggedness in the context of network fluctuations For energy recovery in brake mode
SIMATIC Drive Controller are also used where: Safety solutions for the protection of people and machines are necessary A compact, space-saving design is required High performance for Motion Control and rapid I/O is required Modular machine concepts with rapid isochronous mode are required
Typical areas of application: Multi-axis machines (for example printing and paper machines) High-performance applications with short machine clocks (for example packaging
machinery and handling applications) Compact machines in which there is limited room for the controller and drive system (for
example control cabinets in the machine base) Distributed control and drive concepts Synchronization of multiple SIMATIC Drive Controller with cross-PLC synchronous
operation Safe monitoring of motion
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
23
System overview 3.1 What is the SIMATIC Drive Controller?
Example 1: Fast and flexible packaging Automation task: Development of a horizontal bagging machine with a speed of up to 120 packages per minute. Feature: The bagging machine allows the continuous packaging of individual solid products such as foodstuffs and commercial products. A quick changeover to new products must be possible. Scalability and cost efficiency is paramount in the automation solution. Solution: A SIMATIC Drive Controller uses the technology functions to control gear and cam synchronous operation for multiple axes. Necessary input and output signals such as print mark correction, slip compensation, distance detection and product detection are controlled by the integrated technology I/Os of the SIMATIC Drive Controller. Other inputs and outputs, for example for temperature acquisition, are available over the ET 200SP distributed I/O system.
Figure 3-1 Example: Packaging machine
Benefits High-performance solution for optimal product quality and high machine throughput Compact, scalable solution Format change at the touch of a button
SIMATIC Drive Controller
24
System Manual, 11/2019, A5E46600094-AA
System overview 3.1 What is the SIMATIC Drive Controller?
Example 2: Printing machine Automation task: Development of a modular, fully automated printing machine with scalable performance to continue to ensure efficient production and cover a wide range of products in future. Feature: Modular solution, for example for winder/feed, printing mechanisms and drying. The individual machine modules are synchronized over a virtual leading axis. Solution: The modular solution is based on multiple machine modules, each of which is implemented with a SIMATIC Drive Controller and if necessary additional SINAMICS S120 CU320-2. Cross-PLC synchronous operation on the basis of PROFINET IO with IRT is used for synchronization of the axes.
Figure 3-2 Example: Printing machine
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
25
System overview 3.1 What is the SIMATIC Drive Controller?
Benefits Short machine setup times Scalable solution covers a wide performance range Perfect synchronous operation across modules ensures the best possible product quality
high throughput
Advantages and customer benefits The use of SIMATIC Drive Controllers offers the following advantages: Only one device for standard, safety and comprehensive Motion Control automation including automatic speed control Comprehensive range of interfaces, integrated bottom to top performance range Onboard technology I/Os save on additional hardware Eight digital outputs configurable as high-speed outputs; for ultra-short output delays and maximum switching accuracy Simple handling with lower cabling and installation costs Simple configuration in the STEP 7 hardware configuration Simple and efficient commissioning and optimization of drives using the engineering tool SINAMICS Startdrive in the TIA Portal Automatic alignment of the technological variables via the technology objects between controller and drive; reduced engineering, commissioning and service times Central data management with a memory card (SIMATIC Memory Card) for controller and drive Central license handling in the TIA Portal for CPU and SINAMICS Integrated
SIMATIC Drive Controller
26
System Manual, 11/2019, A5E46600094-AA
System overview 3.1 What is the SIMATIC Drive Controller?
3.1.3
Plant components and automation levels
Plant components and automation levels
SIMATIC Drive Controller are used in particular in production automation and Motion Control applications for smaller to high-end machines. The combination of SIMATIC S7-1500 CPU and integrated SINAMICS S120 automatic speed control offers powerful and flexible automation solutions that cover all ranges of Motion Control applications:
The process signals are connected to the central master computer via fieldbus.
The SIMATIC Drive Controller is integrated consistently in the various automation levels through communication standards.
The SIMATIC Drive Controller controls SINAMICS Integrated over the integrated drive and the axis group over the comprehensive range of SINAMICS S120 power units (Line Modules and Motor Modules).
Motors with a DRIVE-CLiQ interface facilitate commissioning and diagnostics.
You connect motors without a DRIVE-CLiQ interface, for example external motors or motors for retrofit applications, over Sensor Modules Cabinet-Mounted (SMC) or Sensor Modules External (SME). Terminal Modules (TM) are terminal expansions over DRIVECLiQ for example for drive digital or analog inputs and outputs.
The F-CPU integrated in the SIMATIC Drive Controller ensure failsafe processes.
Technology I/Os are already integrated in the SIMATIC Drive Controller . If required, you can expand the SIMATIC Drive Controller with technology modules in the ET 200MP and ET 200SP distributed I/O systems.
SIMATIC Drive Controller are intended for installation in a control cabinet with IP20 degree of protection
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
27
System overview 3.1 What is the SIMATIC Drive Controller?
The schematic diagram below shows the key components of a system with SIMATIC Drive Controller from the management level to the control level and field level.
Figure 3-3 Example: SIMATIC Drive Controller at management, control and field level
3.1.4
Scalability
SIMATIC Drive Controller offer the required flexibility and performance for a wide range of controller applications in machine and plant engineering.
Scaling with performance class
To meet your machine and plant planning requirements, the SIMATIC Drive Controller can be scaled in terms of CPU and Motion Control performance and configuration limits (program and data memory and Motion Control resources).
The comprehensive networking options over PROFINET and PROFIBUS DP are the same for all versions. This means that you can scale simply by CPU performance without affecting the available interfaces and thus your machine and plant topology.
SIMATIC Drive Controller
28
System Manual, 11/2019, A5E46600094-AA
System overview 3.1 What is the SIMATIC Drive Controller?
Scaling with drive configuration limits SINAMICS S120 automatic speed control is integrated in all versions of the SIMATIC Drive Controller. It can control. A max. of 6 servo drives; or A max. of 6 drives with vector control; or A max. of 12 drives with U/f control You can expand the drive configuration limits of a SIMATIC Drive Controller, for example with SINAMICS S120 (CU320-2) or SINAMICS S210 (for example for individual drives). In this case, the CPU axis technology objects execute the Motion Control functions for the SINAMICS Integrated drives and drives connected externally. The maximum axis configuration limits are limited at the CPU side by the available Motion Control resources.
Figure 3-4 Example: Plant configuration with SIMATIC Drive Controller, SINAMICS S120 and SINAMICS S210
In principle, you can connect any drives that: Support the standardized profile for PROFIdrive drive technology Support the PROFIdrive frames possible with SIMATIC S7-1500 You can find additional information in the S7-1500T Motion Control function manuals (https://support.industry.siemens.com/cs/ww/en/view/109751049).
Note Computing performance at the drive cannot be increased with a SIMOTION CX32-2 Controller Extension for SIMOTION D4x5-2 control units.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
29
System overview 3.1 What is the SIMATIC Drive Controller?
Scaling with modularization Modular machine concepts offer many advantages, such as standardization, flexibility and scalability. A production line that consists of multiple machine modules each with a controller and drives requires synchronization of the drives. SIMATIC Drive Controller have the cross-PLC synchronous operation functionality. CrossPLC synchronous operation allows you to implement synchronous operation across devices. This allows you to split axis configuration limits between multiple CPUs or implement modular machine concepts. In modular machine concepts, you can distribute the functionality between multiple machine modules, each with its own controller. You can distribute the master value source and synchronous axes between the various controllers. Coupling between the master axis/an external encoder and the following axis is isochronous via PROFINET IO with IRT. The clocks of the axes are synchronized.
Figure 3-5 Example: Modular machine concept with SIMATIC Drive Controller and cross-PLC synchronous operation
Scaling with technology I/Os and technology modules
The integrated eight digital input/outputs (interface X142) provide configurable technology I/Os.
Of the integrated eight digital input/outputs of the SINAMICS Integrated (interface X122/132), you can also use eight digital inputs as measuring inputs.
To expand the integrated technology I/Os high-performance technology modules in the ET 200MP and ET 200SP distributed I/O systems, for example for additional measuring inputs and output cam outputs.
Information on technology objects for measurement sensing inputs and output cam outputs can be found in the section Technology functions of the CPU (Page 44).
SIMATIC Drive Controller
30
System Manual, 11/2019, A5E46600094-AA
System overview 3.1 What is the SIMATIC Drive Controller?
3.1.5
Overview of features
SIMATIC Drive Controller
The SIMATIC Drive Controller combines a failsafe SIMATIC S7-1500 technology CPU with integrated technology I/Os and SINAMICS S120 automatic speed control in one compact enclosure. Performance grading, a range of interfaces, and technology functions are optimized for production machines and plants with Motion Control.
Important properties and functions
Figure 3-6 Overview of SIMATIC Drive Controller properties and functions
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
31
System overview 3.2 Configuration
3.2
Configuration
Configuration
A system with SIMATIC Drive Controller comprises the following components: Power supply for SIMATIC Drive Controller and DRIVE-CLiQ components SIMATIC Drive Controller SINAMICS S120 power units:
Line Module Motor Modules Sensor Modules (SMx) Terminal Modules (TM) Motors with/without DRIVE-CLiQ
SIMATIC Drive Controller
32
System Manual, 11/2019, A5E46600094-AA
Configuration example
System overview 3.2 Configuration
HMI device SIMATIC Drive Controller Line Module SINAMICS S120 Double Motor Module SINAMICS S120 Single Motor Module SIMOTICS S servomotor SINAMICS Terminal Module SINAMICS Sensor Module Cabinet-Mounted
Figure 3-7 Example: SIMATIC Drive Controller installation in a plant
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
33
System overview 3.3 SIMATIC Drive Controller functions
3.3
SIMATIC Drive Controller functions
3.3.1
Safety
SIMATIC Safety Integrated of the integrated F-CPU
For failsafe operation of your plant, program the F-CPUs of the SIMATIC Drive Controller. Use the "STEP 7 Safety Advanced" of the TIA Portal for this purpose. In combination with the TIA Portal, the F-CPU offers optimal integration of failsafe systems into your engineering environment; one controller, one communication system and one engineering platform for standard and failsafe automation:
Integration of safety technology
Instructions approved by German Technical Inspectorate for frequently required safety applications
Integration of safety functions up to SIL 3 in accordance with IEC 61508, SILCL 3 in accordance with IEC 62061 and/or PL e and Category 4 in accordance with ISO 13849-1
Uniform engineering for standard and safety automation
Simple documentation of safety-related changes via the F change history in STEP 7 Safety
Support in the acceptance of the safety program and no renewed acceptance of the safety program after changes in the standard program
Advantages and customer benefits
Safety Integrated offers the following advantages:
Engineering with SIMATIC STEP 7 Safety Advanced in the TIA Portal, same engineering and operating concept for standard and failsafe automation task
Use of instructions approved by the German Technical Inspectorate from the system library Safety in the safety program, for example for protective door, emergency stop, monitored feedback loop circuit and user acknowledgment; saves time and reduces the error rate
Simple connection of PROFIsafe devices via PROFINET and PROFIBUS
Additional password protection for F-CPU and safety program for IT security.
Integration in integrated system diagnostics
SIMATIC Drive Controller
34
System Manual, 11/2019, A5E46600094-AA
System overview 3.3 SIMATIC Drive Controller functions
Safety functionality SINAMICS Integrated SINAMICS Integrated of the SIMATIC Drive Controller supports the same Safety Integrated functions as SINAMICS S120 CU320-2: Safety Integrated Basic Functions Safety Integrated Extended Functions Safety Integrated Advanced Functions One license is required for each axis to be operated with Safety Integrated Extended/Advanced Functions. You can find more information in Runtime licensing (Page 203). The safety functions correspond to the functions pursuant to EN 61800-5-2 (if and to the extent that they are defined therein). The maximum achievable safety class of the SINAMICS Integrated safety functions is SIL 2 according to EC 61508 or PL d according to ISO 13849-1.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
35
System overview 3.3 SIMATIC Drive Controller functions
Example: Production cell with access protection Automation task: A laser scanner monitors access to a production area. The maintenance area is secured by a protective door. Entering the production area or opening the protective door, just like an emergency stop, results in the shutdown or stopping of the production cell.
Emergency stop Laser scanner Protective door Control panel with start and acknowledgment key
Figure 3-8 Production cell with access protection
Feature:
Start-up of the system is only possible with unlocked emergency stop, closed protective door and free protection area of the laser scanner. After activating the emergency stop, opening the protective door or addressing the protection area, a user acknowledgement is required to restart production operations again. Access protection to the F-CPU and the safety program is essential for productive operation.
Solution:
Use of a SIMATIC Drive Controller with SINAMICS Integrated and failsafe modules in the ET 200SP distributed I/O system on the PROFINET IO.
Programming is done in the TIA Portal. The CPU of the SIMATIC Drive Controller runs a machine application with motion control and a safety program.
The ET 200SP F modules are used to connect emergency stop, protective door monitoring, access area monitoring and user acknowledgement. When the safety function is triggered (e.g. opening the protective door), the programmed stop reaction is triggered for the drives in the production cell.
SIMATIC Drive Controller
36
System Manual, 11/2019, A5E46600094-AA
System overview 3.3 SIMATIC Drive Controller functions
Advantages
SIMATIC Safety Integrated provides you with the following advantages:
Engineering with SIMATIC STEP 7 Safety Advanced in the TIA Portal, same engineering and operating concept for standard and failsafe automation task
Use of instructions approved by the German Technical Inspectorate from the system library Safety in the safety program, for example for protective door, emergency stop, monitored feedback loop circuit and user acknowledgment; saves time and reduces the error rate
Simple connection of PROFIsafe devices via PROFINET and PROFIBUS
Convenient configuration of the drive-side safety technology with SINAMICS Startdrive (with Startdrive Advanced including integrated safety acceptance test to facilitate the necessary documentation)
Additional password protection for F-CPU and safety program for IT security
Integration in integrated system diagnostics
Additional information
You can find a detailed description of F-CPU configuration and programming in the SIMATIC Safety Configuring and Programming (https://support.industry.siemens.com/cs/ww/en/view/54110126) programming and operating manual.
You can find a detailed description of the SINAMICS S120 Safety Integrated functions in the SINAMICS S120 Drive Functions (https://support.industry.siemens.com/cs/us/en/view/109763287) function manual and the SINAMICS S120 Safety Integrated (https://support.industry.siemens.com/cs/ww/en/view/109763292) function manual.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
37
System overview 3.3 SIMATIC Drive Controller functions
3.3.2
Security
Security means the protection of technical systems against sabotage, espionage and human error.
Protection functions
For the setup of secure networks, the SIMATIC Drive Controller offers an integrated security concept from authorization levels to block protection:
Table 3- 3 Overview of protection functions
Protection function Access protection Know-how protection Copy protection CPU lock
Description
Protection against unauthorized configuration changes through four authorization levels and an integrated firewall
Protection against unauthorized access and modifications to algorithms by means of password protection
Protection against duplication of programs by linking individual blocks to the serial number of the original memory card on the SIMATIC memory card
Protection against unauthorized access by locking the front cover with a seal or a lock
Access protection example
You can choose from four different access levels in the TIA Portal to restrict user access to functions and memory areas.
Figure 3-9 Access protection
If you only want to allow users access over HMI, for example, select the access level "HMI access" in the TIA Portal. Only HMI access and access to diagnostics data is then possible without entering a password. Users can read and write tags over an HMI device with this access level. Users cannot: Download blocks or the hardware configuration to the CPU Upload blocks or the hardware configuration from the CPU to the PG/PC Run writing test functions Change the operating state from the PG/PC Run CPU firmware updates
SIMATIC Drive Controller
38
System Manual, 11/2019, A5E46600094-AA
System overview 3.3 SIMATIC Drive Controller functions
Advantages and customer benefits of protection functions The protection functions listed above protect your investments from unauthorized access and manipulation, helping to secure plant availability.
Secure Communication There is an increasing need to transfer data to external computers in encrypted form via Intranet or public networks. SIMATIC Drive Controller support the Internet PKI (RFC 5280) with STEP 7. This allows the configuration and operation of Secure Communication, for example: Hypertext Transfer Protocol Secure (HTTPS) Secure Open User Communication Secure Communication with OPC UA A public key infrastructure (PKI) can issue, distribute and check digital certificates. For SIMATIC Drive Controller , you create certificates for various applications in the CPU properties in STEP 7, for example: TLS certificates for Secure Open User Communication, Web server certificates, and OPC UA certificates.
Further information You can find further information on the protection functions described in Protection (Page 170) and in the STEP 7 online help. Siemens products and solutions are only one element of a comprehensive industrial security concept. Please note the additional information on Industrial Security (https://www.siemens.com/industrialsecurity).
Note Please also note the security information in the SINAMICS S120 documentation (https://support.industry.siemens.com/cs/ww/en/ps/13231/man).
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
39
System overview 3.3 SIMATIC Drive Controller functions
3.3.3
Web server
The SIMATIC Drive Controller have an integrated Web server.
You can display the CPU status via a Web browser without installing additional software and to a limited extent control it. Graphic displays of process variables and user-defined websites facilitate information acquisition and the diagnosis of plant states.
Figure 3-10 Home page web server
Note SINAMICS Integrated of the SIMATIC Drive Controller does not have its own Web server.
SIMATIC Drive Controller
40
System Manual, 11/2019, A5E46600094-AA
System overview 3.3 SIMATIC Drive Controller functions
Example: Web server facilitates commissioning and local diagnostics for standard machines Automation task: Implementation of a user interface for commissioning and calibrating test benches. Feature: When standard machines are commissioned, parameters often need to be set once for setup, for example in line with the place of installation or purpose. Examples of such parameters include machine runtime program parameters in the CPU. The operator also requires easy access to the SIMATIC Drive Controller for rapid local diagnostics in the event of an error. Solution: Creation of user sites for the Web server of a SIMATIC Drive Controller. The customer can make the machine settings themselves over these websites without PG/PC, for example adjust the calibration parameters or change the formats. In the event of an error, rapid initial diagnostics is possible over the integrated Web pages of the SIMATIC Drive Controller without the need for the engineering project.
Advantages and customer benefits The Web server provides the following advantages: Access via Web browsers to a SIMATIC Drive Controller with plant-related operating data Display of service and diagnostics information over large distances Access restrictions for unauthorized users
Further information A detailed description of handling the Web server can be found in the SIMATIC S7-1500 Web Server Function Manual (https://support.industry.siemens.com/cs/ww/en/view/59193560).
3.3.4
Trace
The SIMATIC Drive Controller has an integrated Trace functionality for the effective commissioning and optimization of drives and controllers. The Trace function is available for the integrated CPU and SINAMICS Integrated.
The trace function records the following in line with the adjustable trigger conditions:
CPU tags in the CPU Trace
Drive parameters in the SINAMICS Integrated Trace
By visualizing the entire process with real-time Trace, you can identify sporadic events in the system during commissioning and service, for example.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
41
System overview 3.3 SIMATIC Drive Controller functions
Example: Signal response analysis To analyze a specific signal response, you define the recording and trigger conditions for the signals for recording.
The Trace function can be called in the project tree in the "Traces" folder:
For the CPU, under the CPU of the SIMATIC Drive Controller For the SINAMICS Integrated, under the drive unit of the SIMATIC Drive Controller
The trend diagram displays the selected signals of a recording. Digital signals are
displayed as bit track in the lower diagram.
The signal table lists the signals of the selected measurement and provides setting
options for specific properties.
Trace recordings in the project tree
Trend diagram
Signal table
Figure 3-11 Trace recording for the CPU
42
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
System overview 3.3 SIMATIC Drive Controller functions
Example: Trace optimizes the commissioning of packaging machines
Automation task:
At what speed does a plant reach its maximum productivity? How do you quickly determine the optimum settings?
The packaging machine ensures quick and reliable packaging of ECG electrodes on a rotary table which is loaded and unloaded by a conveyor belt.
Feature:
After filling, the issue is the correct time for further transport of the packages electrodes. To this end, light barriers trace the position of the electrodes.
Solution:
The Trace function of a SIMATIC Drive Controller shows the exact sequence of selected signals over a short period of time. It helps the start-up engineer find the exact light barrier positions and the optimum speed for belts and the rotary table.
The trace recordings are supplied to the customer as part of the plant project. In the event of a fault, the customer can see whether changes to the basic settings have caused the fault.
The trace recordings in the CPU trace can also be stored as a "measurement" on the SIMATIC Memory Card; up to 999 trace recordings are available for evaluation.
Advantages
The Trace function provides the following advantages: A uniform standard for tag analysis that allows even sporadic errors to be located rapidly Cost-effective and easy evaluation as the signals are available in the CPU Monitoring of highly dynamic processes Cycle-by-cycle recording:
Of up to 16 different signals and up to 8 separate trace jobs in the CPU trace simultaneously
Of up to 8 different signals and up to 2 separate trace jobs in the SINAMICS Integrated trace simultaneously
Storage of the CPU trace recordings in a separate memory area for easy localization of sporadic errors
Various trigger options Various zoom and cursor measuring functions Storage of CPU trace recordings on the SIMATIC Memory Card Trace recordings can be evaluated on the SIMATIC Memory Card over SIMATIC Drive
Controller Web servers Export of trace recordings, for example for user-specific processing
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
43
System overview 3.3 SIMATIC Drive Controller functions
Project Trace
A project trace contains trace configurations of multiple CPUs. A project trace records the signals across CPUs if the CPUs are connected to each other via PROFINET.
A global trigger that can be activated by each CPU is used for synchronization. After receiving the global trigger, the CPUs with a valid project trace configuration start recording.
Additional information
You can find information on how to save trace recordings for the CPU without the TIA Portal in the section Data transfer with SIMATIC Memory Cards (Page 237).
A detailed description of the "Trace" function is available in the SIMATIC/SINAMICS Using the Trace and Logic Analyzer Function function manual (https://support.industry.siemens.com/cs/ww/en/view/64897128) and in the SINAMICS S120 with Startdrive commissioning manual (https://support.industry.siemens.com/cs/ww/en/view/109763294).
3.3.5
Technology functions of the CPU
The CPU of the SIMATIC Drive Controller has Motion Control technology objects and a modular S7-1500T CPU.
You can control PROFIdrive-capable drives with Motion Control instructions in accordance with PLCopen.
Motion Control technology objects
The following table shows the technology objects that support the SIMATIC Drive Controller. They occupy Motion Control resources or Extended Motion Control resources in the CPU.
Table 3- 4 Technology objects
Technology objects Speed axis Positioning axis Synchronous axis External encoder Measuring input Output cam Cam track Cams Kinematics Leading axis substitute
Resource requirements per technology object 40 80 160 80 40 20 160 2* 30* 3*
*Occupy Extended Motion Control resources in the CPU
SIMATIC Drive Controller
44
System Manual, 11/2019, A5E46600094-AA
System overview 3.3 SIMATIC Drive Controller functions
Motion Control technology functions The following table shows the technology functions supported by SIMATIC Drive Controller .
Table 3- 5 Motion Control technology functions
SIMATIC Drive Controller technology functions Enable, disable technology objects Acknowledge alarms, restart technology object Reference technology objects, set reference point Halt axis Position axis absolutely Position axis relatively Move axis at set velocity/speed Move axis in jog mode Position axis overlapping Set alternative encoder as operationally active encoder Halt and disable axis Enable/disable hardware limit switch Control bits of control word 1 and 2 Start one-time measuring Start cyclic measuring Abort active measuring Enable/disable output cam Enable/disable cam track Start gearing Start gearing with specified synchronous positions Absolute shift of master value on the following axis Relative shift of master value on the following axis Start camming Simulate synchronous operation Specify additive master value Interpolate cam Read out slave value of a cam Read master value of a cam Specify motion setpoints Enable and disable force/torque limit / fixed stop detection Specify additive torque Specify upper and lower torque limits Interrupt Motion Control of kinematics Continue Motion Control of kinematics Stop motion of kinematics Position kinematics with linear path motion Relative positioning of kinematics with linear path motion
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
45
System overview 3.3 SIMATIC Drive Controller functions
PID control
SIMATIC Drive Controller technology functions Position kinematics with circular path motion Relative positioning of kinematics with circular path motion Absolute travel of kinematics with synchronous "point-to-point" movement Relative travel of kinematics with synchronous "point-to-point" movement Start belt monitoring Define workspace zones Define kinematics zones Activate workspace zones Deactivate workspace zones Activate kinematics zones Deactivate kinematics zones Re-define tool Change active tool Redefine object coordinate systems Transform axis coordinates to Cartesian coordinates Transform Cartesian coordinates to axis coordinates
PID compact controllers are integrated as standard in all S7-1500 CPUs. In your application, the PID controller adjusts a physical setpoint and stabilizes it against interferences at the same time. You can use different PID controllers depending on your application. All controllers support the following functions:
Manageable configuration screens
Automatic determination of the controller parameters
Commissioning screens with integrated Trace
Table 3- 6 PID controller versions
PID controller PID Compact PID 3step PID Temp
Description
Continuous PID controller Step controller for integrating actuators Temperature controller for heating and cooling with two separate actuators
SIMATIC Drive Controller
46
System Manual, 11/2019, A5E46600094-AA
System overview 3.3 SIMATIC Drive Controller functions
Technology function of the onboard I/O
The eight digital input/outputs of the SIMATIC Drive Controller provide the following technology function at the X142 interface:
Table 3- 7 Technology I/Os of the CPU at interface X142
Operating mode DI DQ Timer DI Timer DQ Oversampling DI
Oversampling DQ
Event/period measurement
Pulse width modulation (PWM)
Function
Application
Digital input
Used as hardware limit switch, for example
optional: Hardware interrupt upon rising and/or falling edge
Digital output
Used to control an indicator light, for example
Acquisition of the switching time of a digital input signal with up to two edges per cycle (OB91/OB6x)
Used as the input of a measuring input, for example
Precise output of a digital output signal with Used as an output cam output, for example up to two edges per cycle (OB91/OB6x)
Acquisition of 32 states of a digital input signal at equal intervals per cycle (OB91/OB6x)
Detection of short signal levels that are shorter than the position control cycle or isochronous mode interrupts.
Used, for example, to detect a fast-traveling product with a proximity switch or light barrier
Output of 32 states for a digital output signal at equal intervals per cycle (OB91/OB6x)
Output of short signal levels that are shorter than the position control cycle or isochronous mode interrupts.
Used, for example, to control the output of short pulses or pulse trains, for example to control a glue valve for applying dots of glue.
Measurement of number of edges and period Simple speed measurement with shadow
max. counting frequency 32 kHz
mask and light barrier
Period measurement
Counter (rising edges)
Output of a selectable pulse-pause ratio with a configurable base frequency of: 1 kHz, 2 kHz, 4 kHz, 8 kHz, 16 kHz
Output of a signal with a defined period and variable on-load factor
Used, for example, to control proportional valves and directional valves (energy savings through reduction in holding current).
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
47
System overview 3.3 SIMATIC Drive Controller functions
High-speed outputs
For short pulses and maximum output accuracy, configure the digital outputs at interface X142 as high-speed outputs.
The digital outputs are then operated as rapid push/pull switches, which are switched alternately to 24 V DC and ground. This enables very steep edges and extremely short output delays.
Digital outputs as high-speed outputs are particularly suited to the operating modes timer DQ, oversampling DQ and pulse width modulation (PWM).
Note Notes on interconnection
When you use the digital outputs at the X142 interface as high-speed outputs, the currentcarrying capacity is reduced from 0.5 A to 0 4 A. Please note also the information on input interconnection for high-speed outputs in the SIMATIC Drive Controller manual (https://support.industry.siemens.com/cs/ww/en/view/109766666).
Expansion of technology functions with technology modules
For technological tasks, powerful distributed technology modules are also available that operate largely autonomously and reduce the load on the CPU.
Table 3- 8 Technology modules ET 200SP and ET 200MP
Technology module
Article number
ET 200SP Distributed I/O System
TM Count 1x24 V
6ES7138- 6AA00-0BA0
TM PosInput 1
6ES7138-6BA00-0BA0
TM Timer DIDQ 10x24 V
6ES7138-6CG00-0BA0
TM Pulse 2x24 V SIWAREX WP321
6ES7138-6DB00-0BB1 7MH4138-6AA00-0BA0
Description
Manual
Counter module 1 channel for 24 V in- ET 200SP TM Count cremental or pulse encoder, 3 DI, 2 DQ 1x24V
Module for count and position acquisition ET 200SP TM PosInfor RS-422 incremental encoder or SSI put 1 absolute encoder, 2 DI, 2 DQ
Time-controlled digital inputs and digital outputs, 4 DI and 6 DQ with time stamp, count function, pulse width modulation, oversampling
ET 200SP TM Timer DIDQ 10x24 V
Pulse width modulation and pulse output, 2 channels 2 A for proportional valves and DC motors
ET 200SP TM Pulse 2x24V
Weighing electronics 1 channel
SIWAREX WP321
Acquisition and processing of signals from weighing or force sensors with high precision
SIMATIC Drive Controller
48
System Manual, 11/2019, A5E46600094-AA
System overview 3.3 SIMATIC Drive Controller functions
Technology module
Article number
ET 200MP Distributed I/O System
TM Count 2x24V
6ES7550-1AA00-0AB0)
TM PosInput 2
6ES7551-1AB00-0AB0
TM Timer DIDQ 16x24 V
6ES7552-1AA00-0AB0
TM PTO 4
SIWAREX WP521 ST SIWAREX WP522 ST
6ES7553-1AA00-0AB0
7MH4 980-1AA01 7MH4 980-2AA01
Description
Manual
Counter module 2 channels for 24 V incremental or pulse encoder, 3 DI and 2 DQ per channel
S7-1500 TM Count 2x24 V
Module for count and position acquisition S7-1500 TM PosInput for RS-422 incremental encoder or SSI 2 absolute encoder, 2 channels, 2 DI and 2 DQ per channel
Time-controlled digital inputs and digital outputs, max. 8 DI, 16 DQ, of which max. 16 with time stamp, count function, pulse width modulation, oversampling
ET 200MP/S7-1500 TM Timer DIDQ 16x24 V
Interface module for stepper drives, 4 S7-1500/ET 200MP channels, pulse train output (PTO): 24 V, TM PTO 4 2 DI and 1 DQ 24 V DC per channel
Weighing electronics 1 channel (WP521 SIWAREX
ST) or 2 channels (WP522 ST)
WP521/WP522
Acquisition and processing of signals from weighing or force sensors with high precision
Additional information
You can find additional information on the technology functions of the CPU in the S7-1500T Motion Control function manuals (https://support.industry.siemens.com/cs/ww/en/view/109751049).
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
49
System overview 3.3 SIMATIC Drive Controller functions
3.3.6
SINAMICS Integrated functions
The automatic speed control integrated in SIMATIC Drive Controller is based on the automatic speed control of the SINAMICS S120 control unit CU320-2 (firmware version V5.x).
SINAMICS Integrated provides a functional subset of the SINAMICS S120 CU320-2 drive functions relevant in a control context. You can find details at the end of the section under "Unsupported functions and components".
The integrated automatic speed control supports:
Servo control, for maximum dynamic response
Vector control, for maximum torque accuracy
U/f control
You can expand the drive configuration limits of the SIMATIC Drive Controllers via PROFINET IO IRT, for example with SINAMICS S120 control unit CU320-2.
Safety functionality of SINAMICS Integrated
SINAMICS Integrated of the SIMATIC Drive Controller supports the same Safety Integrated functions as SINAMICS S120 CU320-2:
Safety Integrated Basic Functions
Safety Integrated Extended Functions
Safety Integrated Advanced Functions
The safety functions correspond to the functions pursuant to EN 61800-5-2 (if and to the extent that they are defined therein).
Supported licensed SINAMICS functions SINAMICS Integrated supports the following licensed functions of a SINAMICS S120 CU320-2 only: SINAMICS Lizenz Safety Integrated Extended Functions SINAMICS Lizenz Safety Integrated Advanced Functions SINAMICS Technology Extension VIBX - Schwingungstilger SINAMICS Technology Extension RAILCTRL - Rail Control/Multi-Carrier-System
PROFIdrive Integrated
Cyclic communication between CPU and SINAMICS Integrated is based on PROFIdrive mechanisms.
The communications services used are based on PROFIBUS DP and are processed over an internal, high-performance interface.
SIMATIC Drive Controller
50
System Manual, 11/2019, A5E46600094-AA
System overview 3.3 SIMATIC Drive Controller functions
Unsupported functions and components SINAMICS Integrated provides a functional subset of the SINAMICS S120 CU320-2 drive functions relevant in a control context. The following functionalities/components are not supported by the SIMATIC Drive Controller: Basic positioner (EPOS) function module Integrated drive logic processing with Drive Control Chart (DCC) Drive control block (DCB) Free function blocks (FBLOCKS) SINAMICS Web server SIMOTION-specific or SINUMERIK-specific DRIVE-CLiQ components (for example Terminal Module TM17, Hydraulic Drive HLA, Controller Extension CX32-2, Numeric Control Extensions NX10.3/NX15.3) Expansion boards, for example TB30, CBE20, CBE30-2
Note Use of SINAMICS S120 CU320-2 control units Additional CU320-2 control units on the SIMATIC Drive Controller offer the full range of functions, unlike SINAMICS Integrated.
Additional information You can find a detailed description of the functions of SINAMICS S120 CU320-2 in the SINAMICS S120 Drive Functions (https://support.industry.siemens.com/cs/us/en/view/109763287) function manual.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
51
System overview 3.4 Integrated interfaces for communication
3.4
Integrated interfaces for communication
Interfaces for communication over PROFINET and PROFIBUS DP are integrated in the SIMATIC Drive Controller. The following communications options are available for your automation task:
Table 3- 9 SIMATIC Drive Controller communication options
Communication option PG communication for commissioning, testing and diagnostics HMI communication for operator control and monitoring Data exchange with TCP/IP, UDP, ISO-on-TCP, ISO protocol Data exchange via OPC UA as server Data exchange via OPC UA as client Direct data exchange between IO controllers Communication via Modbus TCP Communication via UDP Multicast Sending process alarms via e-mail S7 communication S7 routing Web server of the CPU Data exchange via HTTP(S), for example for diagnostics SNMP (Simple Network Management Protocol) Time-of-day synchronization Connection to the clock system of the technology I/Os X142 and to the SINAMICS Integrated
PN
DP
X
X
X
X
X
-
X
-
X
-
X
-
X
-
X
-
X
-
X
X
X
X
X
-
X
-
X
X
X
-
The SIMATIC Drive Controller also has two USB interfaces 3.0. These do not currently have an assigned function.
Further information
You can find more information on communication options in the Communication Function Manual (https://support.industry.siemens.com/cs/ww/en/view/59192925).
SIMATIC Drive Controller
52
System Manual, 11/2019, A5E46600094-AA
System overview 3.5 DRIVE-CLiQ
3.5
DRIVE-CLiQ
SINAMICS Integrated has 4 DRIVE-CLiQ interfaces. For each DRIVE-CLiQ interface, you have 24 V/450 mA for connecting encoders and measuring systems.
You can connect all components of SINAMICS Integrated including the motors and encoders over the common DRIVE-CLiQ interface.
DRIVE-CLiQ implements a high-performance point-to-point connection for internal drive communication between the various drive components.
The DRIVE-CLiQ interfaces of the SIMATIC Drive Controller are, for example, used for:
Connecting the power units (Line Module, Motor Modules) to the automatic speed control of SINAMICS Integrated
Connecting motors with DRIVE-CLiQ interface to the Motor Modules
Connecting encoder systems over Sensor Modules Cabinet-Mounted (SMC) or Sensor Modules External (SME)
Addition of drive I/Os using Terminal Modules (TM)
Over the DRIVE-CLiQ interface, SINAMICS Integrated detects all connected drive components after switch-on. During operation, cyclical drive-related data is exchanged with the drive components on an isochronous basis, for example parameters and diagnostics data.
Advantages and customer benefits
DRIVE-CLiQ provides the following advantages:
Automatic detection of the connected components reduces commissioning work
Standardized cables and connectors reduce the variety of different parts and cut storage costs.
Consistent diagnostics through to the drive components
Encoder evaluations for converting standard encoder signals to DRIVE-CLiQ are available for third-party motors or retrofit applications.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
53
System overview 3.6 Power supply
3.6
Power supply
SIMATIC Drive Controller supply For the SIMATIC Drive Controller, use an external 24 V power supply, for example from the SITOP range (https://mall.industry.siemens.com/mall/en/WW/Catalog/Products/10008864) (SITOP smart or SITOP modular).
Supply of the SINAMICS S120 drive modules The SINAMICS S120 drive components are supplied over a SINAMICS Line Module. Line Modules generate direct voltage from the line voltage and supply energy to the Motor Modules through the DC link. Optionally, Line Modules with controlled supply/regeneration ensure a constant DC-link voltage and high grid compatibility. Motor Modules supply the motors with power from the DC link.
SIMATIC Drive Controller
54
System Manual, 11/2019, A5E46600094-AA
3.7
3.7.1
Software
System overview 3.7 Software
TIA Portal
The SIMATIC Drive Controller are integrated in the Totally Integrated Automation portal. Engineering with TIA Portal offers: Configuration and programming Shared data management A uniform operating concept for control, visualization and drives The TIA Portal simplifies integrated engineering in all configuration phases of a plant.
Figure 3-12 TIA Portal overview
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
55
System overview 3.7 Software
3.7.2
SINETPLAN
SINETPLAN (https://www.siemens.com/sinetplan), the Siemens Network Planner, helps you plan automation systems and networks based on PROFINET. The tool facilitates the professional and predictive dimensioning of your PROFINET system right from the planning stage. SINETPLAN also assists with network optimization and helps you to make the best possible use of network resources and to plan for reserves. This allows you to avoid problems in commissioning and failures during productive operation even before planned use. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance:
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning with the import and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and the optimal use of resources
3.7.3
PRONETA
Siemens PRONETA (PROFINET network analysis) allows you to analyze the plant network during commissioning. PRONETA features two core functions: The topology overview independently scans PROFINET and all connected components. The IO check is a rapid test of the wiring and the module configuration of a plant.
Siemens PRONETA (https://support.industry.siemens.com/cs/ww/en/view/67460624) is available for free on the Internet.
3.7.4
TIA Selection Tool
TIA Selection Tool
The TIA Selection Tool allows you to select, configure and order devices for Totally Integrated Automation (TIA). The TIA Selection Tool helps you select the right SIMATIC Drive Controller in line with: Axis quantity frameworks Axis technologies Control performance
With the TIA Selection Tool , you can generate a complete order list from your product selection or product configuration.
You can find the TIA Selection Tool on the Internet (https://www.siemens.com/tia-selectiontool).
SIMATIC Drive Controller
56
System Manual, 11/2019, A5E46600094-AA
3.7.5
System overview 3.7 Software
SIMATIC Automation Tool
You use the SIMATIC Automation Tool (https://support.industry.siemens.com/cs/ww/en/view/98161300) to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. The SIMATIC Automation Tool offers a wide range of functions: Browsing the network and creating a table showing the accessible devices in the network Flashing of device LEDs or HMI display to locate a device Loading addresses (IP, subnet, gateway) to a device Loading the PROFINET name (station name) to a device Switching a CPU to RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data in/from a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU CPU memory reset Resetting devices to factory settings Downloading a firmware update to the CPU
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
57
Application planning
4
4.1
Installation location
Operating conditions
The SIMATIC Drive Controller is intended for installation in a control cabinet or in a device connection box.
In these cases, the LEDs on the front of the device will remain visible and usable only during commissioning. Please take this into consideration for subsequent operation of the device.
It is important to note that installation in a control cabinet or device connection box is essential for compliance with UL regulations.
Protect the components from conductive contamination, for example by installing them in a control cabinet with degree of protection IP54 pursuant to IEC 60529 or NEMA 12. If the occurrence of conductive contamination can be ruled out, a correspondingly lower degree of protection for the control cabinet is permitted.
The control cabinet or device connection box must satisfy the regulations regarding fireprotection housing.
Ensure that all cables and leads that protrude externally are equipped with adequate strain relief.
Prohibition on use The SIMATIC Drive Controller must not be used in the following environments without additional measures: In locations with a high degree of ionizing radiation In aggressive environments caused, for example, by Dust formation Corrosive vapors or gases In systems requiring special monitoring, for example Elevators Electrical equipment in particularly hazardous areas An example of an additional measure for use of the SIMATIC Drive Controller is installation in enclosures.
SIMATIC Drive Controller
58
System Manual, 11/2019, A5E46600094-AA
Application planning 4.1 Installation location
Electromagnetic compatibility (EMC)
Electromagnetic compatibility (EMC) means that devices can operate satisfactorily without interfering with other devices and without interference from other devices. The EMC requirements for variable-speed drive systems (Power Drive System, PDS) are detailed in product standard IEC/EN 61800-3. A variable-speed drive system consists of SIMATIC Drive Controller, Line Module and Motor Module and the corresponding electric motors and encoders, including connecting cables. The machine powered is not part of the drive system.
Note
The same installation information regarding EMC applies to the SIMATIC Drive Controller as to SINAMICS S120 control units CU320-2.
The SINAMICS S120 power units are designed for use in the Second Environment. The Second Environment is understood as all non-residential locations. The main Second Environment locations are industrial zones supplied by the medium voltage network via their own transformers.
For compliance with the interference emission and immunity levels, follow the installation information in the SINAMICS S120 manuals.
You can find further information on this topic in the SINAMICS S120 Function Manuals (https://support.industry.siemens.com/cs/ww/en/ps/13231/man).
Use of wireless devices or mobile phones Using wireless devices or mobile phones with a transmitter power > 1 W in the immediate vicinity of the components can cause the devices to malfunction. The malfunctions can affect the functional safety of machinery and can therefore pose a risk to people or cause material damage. If you come closer to the components than c. 2 m, you switch off the wireless devices or mobile phones. Only use the "SIEMENS Industry Online Support App" on the device that is off.
Overvoltage protection
NOTICE Damage to the device Inadequately dimensioned overvoltage protection can result in severe damage to the device. You should therefore ensure that the overvoltage protection is adequate.
Further information
You can find further information on the selection of the installation location, ambient conditions for operation, minimum spacing, etc. can be found in Installation (Page 67).
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
59
Application planning 4.2 Hardware and software requirements
4.2
Hardware and software requirements
Introduction
Please note the following requirements for use of the SIMATIC Drive Controller in a SINAMICS drive system.
Hardware requirements
Table 4- 1 Hardware requirements
Component
SIMATIC Drive Controller
Property/requirement The SIMATIC Drive Controller is available in various performance classes. · CPU 1504D TF (small to mid-range applications)
PROFINET PROFIBUS
· CPU 1507D TF (high-performance applications)
What performance class you require depends on your specific automation and Motion Control solution requirements. You can find a summary of the main performance features of the Drive Controller in Comparison of SIMATIC Drive Controller versions (Page 20).
Note the following requirements for operation of a SIMATIC Drive Controller as a bus device:
PROFINET
· The integrated PROFINET interface of the CPU is configured using STEP 7 (IP address and device name configured).
· The CPU is connected to the subnet. See the PROFINET Function Manual (https://support.industry.siemens.com/cs/ww/en/view/49948856)
For the rapid exchange of control data between the SIMATIC Drive Controller and drive components connected over PROFINET (for example SINAMICS S120, SINAMICS S210), the PROFINET IO network must be configured as isochronous.
PROFIBUS DP
· The integrated PROFIBUS interface of the CPU is configured using STEP 7 (node address and bus parameters configured).
· The CPU is connected to the subnet.
· The terminating resistors at the segment boundaries are on. See the PROFIBUS Function Manual (https://support.industry.siemens.com/cs/ww/en/view/59193579)
24 V DC power supply
SINAMICS S120 system components
Electronics power supply for the SIMATIC Drive Controller.
Power supply units for the 24 V DC supply must supply safety extra-low voltage in accordance with IEC 61131-2 or IEC 61010-2-201.
Devices from the SITOP family, for example, can be used.
You can find information on the 24 V power supply specifications in Power supply (Page 66).
Please note the installation information in the SINAMICS S120 manuals and the "Rules for wiring with DRIVE-CLiQ" in the SINAMICS S120 Function Manual (https://support.industry.siemens.com/cs/ww/en/view/109763287).
SIMATIC Drive Controller
60
System Manual, 11/2019, A5E46600094-AA
Software requirements
Table 4- 2 Software requirements Configuration in the TIA Portal Integrated SIMATIC S7-1500 CPU SINAMICS Integrated
Application planning 4.3 Drive Controller-specific properties
Requirement SIMATIC STEP 7 Professional V16 or higher SINAMICS Startdrive Basic or Startdrive Advanced, V16 or higher Startdrive Advanced has additional engineering functions compared to Startdrive Basic such as a safety acceptance test.
Note Licensing
The S7 controller and SINAMICS Integrated are licensed in the TIA Portal via STEP7 Professional or Startdrive.
4.3
Drive Controller-specific properties
4.3.1
Drive Controller-specific hardware properties
The SIMATIC Drive Controller is part of the SINAMICS S120 drive system and the same installation conditions and installation rules as for SINAMICS S120 therefore apply.
4.3.2
Drive Controller-specific properties of the CPU
The SIMATIC Drive Controller is optimized for automation solutions with Motion Control in which SINAMICS S120 high-performance converters are used.
With its extensive field bus interfaces, the SIMATIC Drive Controller is ideal for modular machine concepts.
Service functions
The SIMATIC Drive Controller does not have an integrated display. You can alternatively run service functions over the integrated Web server, for example. You can save the service data to the SIMATIC memory card with the FUNCT key.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
61
Application planning 4.3 Drive Controller-specific properties
S7-1500 I/O
The SIMATIC Drive Controller has no S7-1500 backplane bus. You can connect S7-1500 I/O modules over the distributed I/O system ET 200MP. Please note that CM/CP communication modules for PROFINET/PROFIBUS in particular cannot be used in the distributed I/O system ET 200MP, but only the communication modules for point-to-point connection (CM PtP). Alternatively, other I/O systems for the control cabinet (for example ET 200SP) or cabinet-free installation (for example ET 200pro, ET 200AL and ET 200eco PN) are available.
Time-based IO
The function blocks for the use of time-based IO (TIO instructions) are not supported by the digital input/outputs of the X142 interface. Recommendation: For the timer DI/DQ, use the technology objects measuring input, output cam or cam track.
Device replacement
The SIMATIC Drive Controller supports the exchange of devices between SIMATIC Drive Controller CPU and the modular SIMATIC S7-1500 CPUs. Device replacement with controllers of other designs (for example ET 200SP, ET 200pro) is not possible.
4.3.3
Drive Controller-specific properties of SINAMICS Integrated
Supported functions
The automatic speed control integrated in SIMATIC Drive Controller only support the functions relevant in a control context (i.e. functional subset of SINAMICS S120 CU320-2 functions). For example, Drive Control Chart (DCC) and basic positioner (EPOS) are not supported by SINAMICS Integrated. For details, see SINAMICS Integrated functions (Page 50).
Online functions with SINAMICS Integrated
SINAMICS Integrated is connected to the CPU over an internal PROFIdrive subnet. From the point of view of an external PROFINET/PROFIBUS interface, SINAMICS Integrated is connected to a lower-level network. Please therefore note the following aspects:
Online functions with SINAMICS Integrated are only possible if the SIMATIC Drive Controller (CPU and SINAMICS Integrated) are configured in the TIA Portal and the network configuration has first been loaded to the CPU.
If only Startdrive is installed (and not STEP 7 Professional), SINAMICS Integrated can be configured offline. Online functions are not possible. STEP 7 Professional and Startdrive need to be installed for this purpose.
A subnet needs to be configured for the interface to which you are connecting the programming device. Routing to the SINAMICS Integrated is only possible if a subnet is configured.
SIMATIC Drive Controller
62
System Manual, 11/2019, A5E46600094-AA
Application planning 4.3 Drive Controller-specific properties
Device replacement
The SIMATIC Drive Controller supports the replacement of SIMATIC Drive Controller CPU with modular SIMATIC S7-1500 CPU and vice versa.
Not supported:
Device replacement with controllers of other designs (for example ET 200SP, ET 200pro)
Device exchange between SINAMICS Integrated and SINAMICS S120 CU320-2
Copying and pasting of individual drive objects from SINAMICS Integrated to SINAMICS S120 CU320-2 (and vice versa) is not possible with V16.
Diagnostics
To evaluate diagnostics information of the SINAMICS Integrated, you can use, for example, the function block FB LAcycCom_ReadDriveMessagesDateTime (FB 30518) of the LAcycCom library.
With this function block, you can read active messages (alarms, errors and SI messages) from a drive object (DO) sorted by time (latest first). The information provided comprises the code, info, date and time of occurrence of the message. Additional information on the LAcycCom library is available here (https://support.industry.siemens.com/cs/ww/en/view/109479553).
The diagnostic information cannot be evaluated over the system diagnostics integrated in the SIMATIC S7-1500.
Restrictions
SINAMICS Integrated does not currently support upload to an empty project.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
63
Application planning 4.4 Hardware configuration
4.4
Hardware configuration
The SIMATIC Drive Controller controls SINAMICS Integrated over the integrated drive and the axis group over the comprehensive range of SINAMICS S120 power units (Line Modules and Motor Modules).
Hardware components
The basic configuration of a system with the SIMATIC Drive Controller comprises the following components:
SIMATIC Drive Controller This includes the SIMATIC S7-1500 TF CPU and SINAMICS Integrated. The SIMATIC Drive Controller can alternatively control:
A max. of 6 servo drives; or
A max. of 6 drives with vector control; or
A max. of 12 drives with U/f control
SINAMICS Line Module The Line Module generates the DC link from the network.
SINAMICS Motor Modules Motor Modules are powered by the DC link and supply the connected motors.
DRIVE-CLiQ components In SINAMICS S120, the individual components of the drive system communicate with each other over DRIVE-CLiQ. The SIMATIC Drive Controller has 4 DRIVE-CLiQ interfaces. Alongside the power components, encoder systems and special DRIVE-CLiQ I/O devices can also be connected over DRIVE-CLiQ.
Hardware configuration
You can expand the drive configuration limits of a SIMATIC Drive Controller, for example with SINAMICS S120 control units (CU320-2) or SINAMICS S210 (for example for individual drives). Additional SINAMICS drive systems must be connected over PROFINET if they are operated isochronously on the MC Servo together with SINAMICS Integrated.
Computing performance at the drive cannot be increased with a SIMOTION CX32-2 Controller Extension for SIMOTION D4x5-2 control units.
Note
The PROFIBUS interface cannot be connected to other clock systems. If you expand the drive configuration limits with distributed drive systems, those systems must be connected over the PROFINET IO interface X150. Only PROFINET interface X150 can be connected to the clock system of SINAMICS Integrated and the X142 technology I/Os.
SIMATIC Drive Controller
64
System Manual, 11/2019, A5E46600094-AA
Application planning 4.4 Hardware configuration
HMI device SIMATIC Drive Controller Line Module SINAMICS S120 Double Motor Module SINAMICS S120 Single Motor Module SIMOTICS S servomotor SINAMICS Terminal Module SINAMICS Sensor Module SMC SINAMICS S120 for up to six drives SINAMICS S210 single-axis servo drive ET 200SP I/O
Figure 4-1 Example: SIMATIC Drive Controller hardware configuration in a plant
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
65
Application planning 4.5 Power supply
4.5
Power supply
24 V power supply design
The SIMATIC Drive Controller is powered by an external 24 V supply (for example SITOP power supply).
The current consumption of the SIMATIC Drive Controller (without the supply of modules/interfaces) is a maximum of 1.7 A.
Table 4- 3 Permissible current load for SIMATIC Drive Controller interfaces
Interface 2 x USB 3.0 (short-circuit proof) 4 x DRIVE-CLiQ 16 x digital output (short-circuit proof)
5 V 2 x 900 mA
-
24 V -
4 x 450 mA 16 x 500 mA
You can find an overview of the current consumption of SINAMICS components and recommendations for the selection of SITOP Power power supply units in the SINAMICS S120 Booksize Power Units manual.
Note No electrical isolation
As ground potential and enclosure (PE) are connected over a low-impedance internal connection, please note the following: · Suitably dimensioned equipotential bonding cables are required between the 24 V power
supply and all grounded, physically separate devices. · Insulation monitors are not permitted in the 24 V power supply.
Please also note the information in Connecting the supply voltage (Page 80).
SIMATIC Drive Controller
66
System Manual, 11/2019, A5E46600094-AA
Installation
5
5.1
Installation notes
Open components These modules are open components. This means they may only be installed in housings, cabinets, or in electrical equipment rooms that can only be entered or accessed with a key or tool. Housings, cabinets, or electrical equipment rooms may only be accessed by trained or authorized personnel. An external fire-protection housing is required.
DANGER Danger to life from energized parts Death or serious injury will result if energized parts are touched. Turn off and lock out all power supplying this device before working on this device.
Protection from conductive contamination
The components must be protected from conductive contamination, for example by installing them in a control cabinet with degree of protection IP54 pursuant to IEC 60529 or NEMA 12.
If the occurrence of conductive contamination can be ruled out, a correspondingly lower degree of protection for the control cabinet is permitted.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
67
Installation 5.1 Installation notes
Permitted mounting positions The SIMATIC Drive Controller must be mounted vertically.
SIMATIC Drive Controller: Vertical mounting position
WARNING Fire hazard due to overheating in the event of incorrect mounting position Incorrect mounting positions cause overheating with a risk for personnel through smoke development and fire. This can also result in increased downtime and reduced service lives for devices / systems. Install the SIMATIC Drive Controller only in vertical mounting position.
Distance for heat dissipation The top and bottom of the SIMATIC Drive Controller must be at least the following distances from the enclosure wall: 80 mm
WARNING Inadequate ventilation clearances pose risk of fire as a result of overheating Inadequate ventilation clearances cause overheating with a risk for personnel through smoke development and fire. This can also result in increased downtime and reduced service lives for devices / systems. Maintain a ventilation clearance of 80 mm above and below the SIMATIC Drive Controller.
EMC guidelines The same installation information regarding EMC applies to the SIMATIC Drive Controller as to SINAMICS S120 control units CU320-2. For further information, see SINAMICS S120 manuals and the EMC design guidelines (https://support.industry.siemens.com/cs/ww/en/view/60612658).
SIMATIC Drive Controller
68
System Manual, 11/2019, A5E46600094-AA
Installation 5.2 Mounting the SIMATIC Drive Controller
5.2
Mounting the SIMATIC Drive Controller
Requirement
The SIMATIC Drive Controller is fitted in a control cabinet together with the SINAMICS components. Requirements for installing a SIMATIC Drive Controller: The control cabinet has been installed and wired. The SINAMICS components have been installed and wired. The components and tools required for installation are to hand. T10 screwdriver for the M3 screws in the spacer are to hand. For installation on the control cabinet wall: Tool for M6 screws
Designs
The SIMATIC Drive Controller is fitted to the wall of the control cabinet in one of the following ways:
Installation with spacer
Installation without spacer
The SIMATIC Drive Controller is supplied with a spacer fitted.
The spacers increase the depth of the SIMATIC Drive Controller to 270 mm and allow flush installation with 270 mm-deep power units.
Installing SIMATIC Drive Controller with spacers Proceed as follows:
1 Attach the SIMATIC Drive Controller to the control cabinet wall with one M6 screw
each at and .
Tightening torque: 6 Nm (53.1 lbf in)
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
69
Installation 5.2 Mounting the SIMATIC Drive Controller Installing SIMATIC Drive Controller without spacers
Proceed as follows:
1 Uninstalling the spacer:
· Unscrew the M3 screws and re-
move the space.
· Tighten the M3 screws again.
2 Attach the SIMATIC Drive Controller to the control cabinet wall with one M6 screw
each at and .
Tightening torque: 6 Nm (53.1 lbf in)
Note
If you install multiple SIMATIC Drive Controllers or SINAMICS S120 CU320-2 next to one another, use a grid size of 50 mm for the drilled holes horizontally to compensate for tolerances. A dimension drawing of the SIMATIC Drive Controller is available in the SIMATIC Drive Controller manual (https://support.industry.siemens.com/cs/ww/en/view/109766666).
SIMATIC Drive Controller
70
System Manual, 11/2019, A5E46600094-AA
Connecting
6
6.1
Rules and regulations for operation
General safety information
WARNING
Electric shock and danger to life from other energy sources
Touching live parts can result in death or serious injury. · Work on electrical devices only if you are qualified for this job. · Always observe the country-specific safety rules. Follow the steps below to ensure
safety: 1. Prepare for shutdown. Notify all those who will be affected by the procedure. 2. Disconnect the drive system and ensure it cannot be switched back on. 3. Wait until the discharge time specified on the warning labels has elapsed. 4. Check there is no voltage between any power connections or between power
connections and the protective conductor connection. 5. Check whether any auxiliary supply circuits are de-energized. 6. Ensure that the motors cannot move. 7. Identify all other hazardous energy sources, for example compressed air, hydraulic
systems, or water. Put all energy sources in a safe state. 8. Check that the correct drive system is completely locked.
After you have completed the work, carry out the procedure in reverse to restore readiness for operation.
WARNING
Electric shock with damaged devices
Incorrect handling can damage devices. Hazardous voltages can be created at the housing or at exposed components if devices are damaged, and can cause death or serious injury if parts are touched. · Ensure compliance with the limits specified in the technical data during transport,
storage and operation. · Never use damaged devices.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
71
Connecting 6.1 Rules and regulations for operation
Specific application
Observe the safety and accident prevention regulations that are applicable to specific applications (for example the Machinery Directive).
EMERGENCY STOP devices
EMERGENCY STOP devices pursuant to IEC 60204 (corresponds to DIN VDE 0113) must remain effective in all operating modes of the plant or system.
Closed-loop control for secure operation
The following measures are also to be taken and adapted to your conditions for the secure operation of your plant:
An EMERGENCY STOP concept in accordance with applicable engineering practice (for example European standards EN 60204, EN 418 and related standards).
Additional measures for limiting axis limits (for example hardware limit switches).
Devices and measures for protecting motors and power electronics in line with the SINAMICS design guidelines.
We also recommend conducting a risk assessment in accordance with the essential safety requirements / Annex 1 to the EC Machinery Directive to identify hazards for the plant as a whole.
Excluding hazardous plant states Hazardous operating states must not occur in the following situations: The plant restarts after a voltage dip or power failure. Bus communication is reestablished following a fault. An undefined system state occurs. If a hazardous operating state occurs, force an EMERGENCY STOP. An uncontrolled or undefined system startup must not occur after the EMERGENCY STOP device is unlocked.
Line voltage
The points to note for line voltage are set out below:
For fixed plants or systems without an all-pole mains disconnect switch, the building technology must include a mains disconnect device (all-pole).
For load power supplies and power modules, the configured rated voltage range must correspond to the local line voltage.
For all power circuits of the system, the fluctuation/deviation of line voltage from the rated value must be within the permitted tolerance.
You can find more information in the section Specifications for insulation tests, protection class, degree of protection, and rated voltage (Page 276).
SIMATIC Drive Controller
72
System Manual, 11/2019, A5E46600094-AA
Connecting 6.1 Rules and regulations for operation
24 V DC supply The points to note for a 24 V DC supply are set out below: Power supply units for the 24 V DC supply must supply safety extra-low voltage (SELV or PELV) in accordance with IEC 61131-2 or IEC 61010-2-201.
Protection from external electrical effects Below are the points to note for protection from electrical effects or faults: The system for discharging electromagnetic interference must be connected to a protective conductor with a sufficient cross-section for all plants with the SIMATIC Drive Controller. You must ensure that all supply, signal and bus cables are correctly laid and installed. For signal and bus lines, a cable break, wire break or a cross-circuit must not lead to undefined states in the plant or system.
Additional references Directive on handling electrostatic sensitive devices (ESD), see appendix. For the configuration of a plant with SIMATIC ET 200 I/O (for example ET 200SP, ET 200MP, etc.), please see the ET 200 I/O systems (https://support.industry.siemens.com/cs/ww/en/ps/14029/man) manuals. We also recommend the EMC design guidelines / Basic system requirements (https://support.industry.siemens.com/cs/ww/en/view/60612658) configuration manual as a source of further information on EMC.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
73
Connecting 6.2 Additional rules and regulations for operation
6.2
Additional rules and regulations for operation
6.2.1
Safety extra-low-voltage (SELV, PELV) for failsafe modules
Please note the following if you use distributed I/O (for example ET200SP) with failsafe modules:
WARNING
The failsafe components/modules must be operated with safety extra-low voltage (SELV, PELV).
You can find more information on safety extra-low voltage (SELV, PELV) in the data sheets of the applicable power supplies, for example.
The failsafe modules operate with the 24 V DC rated voltage. The tolerance range is 19.2 V DC to 28.8 V DC.
The failsafe motor starters operate with the 24 V DC rated voltage. The tolerance range is 20.4 V DC to 28.8 V DC.
Within the overvoltage range of 32 V DC to 36 V DC, the F-modules react in a failsafe manner and the inputs and outputs are passivated. For overvoltages greater than 36 V DC, the F-modules are permanently de-energized.
Use a power supply unit that does not exceed Um = 36 V DC even in the event of a fault. For more on this, refer to the information in the data sheet on overvoltage protection in the case of an internal error, or implement appropriate measures to limit the voltage, for example use of an overvoltage protector.
All system components that can supply electrical energy in any form whatsoever must fulfill this condition.
Each additional circuit (24 V DC) used in the system must have safety extra-low voltage (SELV, PELV). Refer to the relevant data sheets or contact the manufacturer.
Please also note that sensors and actuators with an external power supply can also be connected to F-modules. Make sure that power is supplied to these components from safety extra-low voltage (SELV, PELV) as well. The process signal of a 24 V DC digital module may not exceed a fault voltage Um even in the event of a fault.
WARNING
Even when a fault occurs, the permissible potential difference between the supply of the interface module (bus voltage) and the load voltage must not be exceeded.
An external direct electrical connection is one way to meet this requirement. This also prevents potential differences from causing voltage additions at the individual voltage sources, which could cause the fault voltage Um to be exceeded.
SIMATIC Drive Controller
74
System Manual, 11/2019, A5E46600094-AA
Connecting 6.2 Additional rules and regulations for operation
Requirements for power supplies in the event of voltage interruption
Note To ensure adherence to IEC 61131-2, only use power packs/power supply units (24 V DC) with a mains buffering time of at least 20 ms. Please also note the requirements of the applicable standards regarding mains buffering time. You can find information on the power supply components on the Internet.
6.2.2
Requirements of sensors and actuators for fail-safe modules
General requirements for sensors and actuators
Note the following important warning regarding safety-related use of sensors and actuators:
WARNING
Note that instrumentation with sensors and actuators bears a considerable safety responsibility. Also bear in mind that sensors and actuators generally do not have a service life of 20 years as defined in IEC 61508:2010 without considerable loss of safety.
The probability of hazardous faults and the rate of hazardous faults of safety functions must comply with an SIL-defined high limit. A listing of values achieved by F-modules in the technical specifications of the F-modules is available under "Fail-safe performance characteristics".
To achieve the respective safety class, suitably qualified sensors and actuators are necessary.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
75
Connecting 6.2 Additional rules and regulations for operation
Additional sensor requirements General rule: A single-channel sensor is sufficient to achieve SIL3/Cat.3/PLd. However, to achieve SIL3/Cat.3/PLd with a single-channel sensor, the sensor itself must be SIL3/Cat.3/PLd-capable; otherwise, the sensor must be connected via two channels to achieve this safety level. To achieve Cat.4, sensors must be connected via two channels.
WARNING
In the case of fail-safe input modules, a "0" value is output to the F-CPU after detection of faults. You therefore need to make sure that the sensors are implemented in such a way as to ensure the reliable reaction of the safety program when the sensor is in the "0" state. Example: In its safety program, an EMERGENCY-STOP sensor must achieve the shutdown of the respective actuator when it is in the "0" state (EMERGENCY-STOP button pressed).
Duration requirements for sensor signals
WARNING
Observe the following requirements for sensor signals: · In order to ensure the correct detection of the sensor signals via fail-safe modules with
inputs, you need to make sure that the sensor signals are output for a minimum duration. · In order for pulses to be detected with certainty, the time between two signal changes (pulse duration) must be greater than the PROFIsafe monitoring time.
Safe detection of inputs through F-modules The minimum duration of sensor signals for F-modules with inputs depends on the configured input delay, the parameters of the short circuit test of the sensor supplies, and the configured discrepancy behavior for 1oo2 evaluation. The duration of the signal must be greater than the maximum response time of the configured application. Information on calculating the maximum response time can be found in section "Response times" of the respective F-module. The maximum permitted switching frequency of the sensor signals results from the minimum duration.
SIMATIC Drive Controller
76
System Manual, 11/2019, A5E46600094-AA
Connecting 6.2 Additional rules and regulations for operation
Additional requirements for actuators The fail-safe output modules test the outputs at regular intervals. The F-module briefly switches off the activated outputs and, if necessary, switches on the deactivated outputs. You can assign the maximum duration of the test pulses (dark and light period) with parameters. High-speed actuators may briefly drop out or be activated during this test. If your process does not tolerate this, set the pulse duration of the light or dark test correspondingly or use actuators that have sufficient lag.
WARNING
If the actuators switch voltages greater than 24 V DC (e.g. 230 V AC), the outputs of a failsafe output module and the parts carrying a higher voltage must be electrically isolated (acc. to standard IEC 60664-1:2010). This is generally the case for relays and contactors; particular attention must be paid to this requirement for semiconductor switching devices.
Technical specifications of sensors and actuators Refer to the manuals of the fail-safe modules for technical specifications to assist you in selecting sensors and actuators.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
77
Connecting 6.3 Electrical configuration
6.2.3
Capacitive crosstalk of digital input/output signals
Readback errors may occur on the F-DQ modules if the fail-safe digital output signals and fail-safe digital input signals are routed through a single cable.
Cause: Capacitive crosstalk
During the bit pattern test of the outputs or the sensor supply of the inputs, the steep switching edge of the output drivers caused by the coupling capacitance of the line may result in crosstalk to other non-activated output or input channels. This may then lead to a response of the readback circuit in these channels. The module detects a cross circuit/short circuit and performs a safety-related shutdown. Remedy:
Separate cables for fail-safe DI modules and fail-safe DQ modules / non-fail-safe DQ modules
Coupling relay or diodes in the outputs
Disable the short-circuit test of the sensor supply if safety class requirements allow it.
Cause: magnetic crosstalk
Note that an inductive load connected to the F-DQ channels can induce coupling of a strong magnetic field.
Solution:
Spatially disconnect the inductive loads or shield against the magnetic field.
Configure the "Max. readback time dark test" to 50 ms or higher.
6.3
Electrical configuration
A system with the SIMATIC Drive Controller consists of several individual components. For a system configured with these components to meet the EMC and safety standards, certain design guidelines must be followed.
Grounding concept and radio interference suppression measures The individual system components are attached to a metal cabinet panel. In addition to the protective grounding of system components, special precautions must be taken to guarantee safe, error-free operation of the system. These measure include: Shielded signal lines Special equipotential bonding connections Isolation and shielding measures
SIMATIC Drive Controller
78
System Manual, 11/2019, A5E46600094-AA
Connecting 6.4 Wiring rules
Design guidelines
Take the following measures to achieve the best possible noise immunity for the complete system (controller, power unit and machine):
Ensure a minimum distance of 200 mm between the signal lines and power cables.
If necessary, signal and power cables may cross one another (if possible at an angle of 90°), but must never be laid close or parallel to one another.
Only use cables approved by Siemens for the signal lines from and to the SIMATIC Drive Controller.
Signal lines must not be routed close to strong external magnetic fields (for example motors or transformers).
If signal lines cannot be routed a sufficient distance away, they must be installed in grounded (metal) cable ducts.
You can find further information on interference suppression measures and the connection of shielded cables in the EMC Design Guidelines configuration manual (https://support.industry.siemens.com/cs/ww/en/view/60612658).
See also
Protective conductor and potential equalization, functional ground (Page 85)
6.4
Wiring rules
Use suitable cables to connect a system to the SIMATIC Drive Controller . You can find wiring rules for the SIMATIC Drive Controller in "Wiring (Page 71)" under the relevant interface descriptions.
You can find the wiring rules and information on connection technology for SINAMICS components in the manuals of the SINAMICS components in question.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
79
Connecting 6.5 Connecting the supply voltage
6.5
Connecting the supply voltage
24 V DC power supply
The SIMATIC Drive Controller is powered by an external 24 V DC power supply. Power supply units from the SITOP family, for example, can be used.
WARNING
Connection of an unsuitable power supply poses a danger to life from hazardous voltage
Configure the 24 V direct voltage as protective extra-low voltage.
A 24 V DC power supply to be connected to the interfaces must meet the requirements for a protective extra-low voltage (PELV) pursuant to UL 61010. A backup fuse that trips within 120 milliseconds in the event of a short-circuit at an ambient temperature of 0 °C must also be used.
When the power supply used comes primarily from OVC III circuits up to 600 V AC (line to neutral voltage), the contact distance for the fuse or circuit with single-fault safety must be 3.0 mm pursuant to UL 61010.
If using an external power supply, make sure that the shutdown rating of the fuse corresponds to the max. possible short-time short-circuit current of the power supply used.
Note
The ground potential and enclosure (PE) are connected over a low-impedance internal connection. Therefore, please note the following: · Insulation monitors are not permitted in the 24 V power supply. · If you are using external power supplies (for example SITOP), you must connect the
ground potential to the protective conductor terminal (PELV). · Suitably dimensioned potential equalization connections are required between the 24 V
power supply and all grounded, physically separate devices. You can find information on potential equalization in Protective conductor and potential equalization, functional ground (Page 85).
SIMATIC Drive Controller
80
System Manual, 11/2019, A5E46600094-AA
Connecting 6.6 PROFINET and PROFIBUS DP
Connecting the power supply The supply voltage is supplied over a 4-pin connector at the front of the SIMATIC Drive Controller (behind the top of the front cover). Use rigid or flexible cables with a conductor cross-section as specified in the SIMATIC Drive Controller manual (https://support.industry.siemens.com/cs/ww/en/view/109766666) for wiring the power supply. Tighten the connector using a flat-blade screwdriver.
Note · The 24 V DC cable must be approved for temperatures of up to 70 °C. · The maximum permissible cable length is 10 m.
6.6
PROFINET and PROFIBUS DP
Connecting interfaces for communication Connect the communication interfaces of the SIMATIC Drive Controller using standardized plug connectors. Use preassembled connecting cables for the connection. If you want to assemble the communication cables yourself, we recommend cables and RJ45 plug connectors from the Siemens FastConnect system.
Note The X130 interface of the SIMATIC Drive Controller supports 10, 100 and 1000 Mbps. For 1000 Mbps, you need 8-wire cables (4x2) and the 1000 Mbit version of the 180° FastConnect connector. The 145° FastConnect connectors can only be used for Ethernet interface X130 with a max. of 100 Mbps.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
81
Connecting 6.7 Digital inputs and digital inputs/outputs X122, X132 and X142
6.7
Digital inputs and digital inputs/outputs X122, X132 and X142
The digital inputs and digital inputs/outputs at interfaces X122, X132 and X142 are designed for the connection of sensors and actuators.
The digital inputs and digital outputs at interfaces X122 and X132 are mainly assigned to SINAMICS Integrated. Through configuration (frames 39x), you can also use the digital inputs and digital outputs (X122/X132) for the CPU.
The digital input/outputs at interface X142 are assigned to the CPU of the SIMATIC Drive Controller and that assignment is fixed.
Using the digital inputs and digital outputs
Digital inputs/digital outputs come in the following types:
Digital inputs (DI)
Bidirectional digital inputs/outputs (DI/DQ)
Bidirectional digital input/outputs can be configured channel-by-channel as digital input or digital output.
Assignment of the input/outputs to functions is freely configurable. Technology functions (for example measuring input and output cam) can also be assigned to the inputs/outputs.
Table 6- 1 Use
X122, X132
Electrical isolation
Use as: Inputs/outputs assigned to the CPU Inputs/outputs assigned to SINAMICS Integrated Inputs of measuring input
Cam outputs
DI0 to DI7, DI17, DI18, DI20, DI21 Isolated (ground reference M1 or M2)
Yes1) Yes No
No
DI/DQ 8 to 15
Non-isolated (ground reference M)
Yes1)
Yes
Yes Measuring using central measuring input Measurement using PROFIdrive telegram Yes1) DQ can be used as cam output
Oversampling DI
No
No
Oversampling DQ
No
No
Event/period measure- No
No
ment
X142 DI/DQ 0 to 7
Non-isolated (ground reference M)
Yes
No
Yes Measuring using Timer DI
Yes Timer DQ can be used as high-precision cam output Yes Yes Yes
SIMATIC Drive Controller
82
System Manual, 11/2019, A5E46600094-AA
Connecting 6.7 Digital inputs and digital inputs/outputs X122, X132 and X142
Pulse width modulation PWM
Configuration:
Assignment
X122, X132
DI0 to DI7, DI17, DI18, DI/DQ 8 to 15 DI20, DI21
No
No
X142 DI/DQ 0 to 7
Yes
Configurable channel- Configurable channel- Configurable channelby-channel on the drive by-channel on the drive by-channel on the CPU
1) You can assign the inputs/outputs with frame 39x of the CPU (see also section Configuration of the digital inputs and digital inputs/outputs (X122/X132) (Page 135)).
Note
Shielded cables are required to ensure the best possible immunity of the digital inputs if they are being used as measuring inputs.
Connection cables for digital inputs and digital outputs Use rigid or flexible cables with a conductor cross-section as specified in the SIMATIC Drive Controller manual for wiring the inputs/outputs.
Note Maximum permissible cable length The maximum permissible cable length for the connection cable is 30 m.
Overvoltage protection for signal lines
Overvoltage protection devices are required for lines of > 30 m. You are advised to use the following snubber to protect the 24 V signal lines from overvoltage:
Table 6- 2 Recommendations for overvoltage protection
Line 24 V signal lines
Overvoltage protection device Manufacturer: Weidmüller article: MCZ OVP TAZ Article number: 844915 0000
Snubbers must always be positioned at the edge of the area to be protected, for example at the entry to the cabinet. All 24 V lines leaving the protected area must run through a snubber. You can find additional information on overvoltage protection in the SINAMICS S120 manual "Booksize Power Units (https://support.industry.siemens.com/cs/ww/en/view/109754297)".
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
83
Connecting 6.8 DRIVE-CLiQ interfaces X100 to X103
Additional information Additional information on the pin assignment of interfaces X122, X132, X142 can be found in the SIMATIC Drive Controller manual (https://support.industry.siemens.com/cs/ww/en/view/109766666).
6.8
DRIVE-CLiQ interfaces X100 to X103
Properties of the DRIVE-CLiQ interfaces The SIMATIC Drive Controller has four DRIVE-CLiQ interfaces. The components of the SINAMICS S120 drive system including the motors and encoders are connected over the common DRIVE-CLiQ interface. DRIVE-CLiQ has the following properties: Automatic recognition of the components by the SIMATIC Drive Controller Uniform interfaces on all components Consistent diagnostics down to the components Consistent service down to the components Each DRIVE-CLiQ interface has 24 V/450 mA for connecting encoders and measuring systems.
Note The DRIVE-CLiQ cable with its 24 V supply is only used for the components that require it (for example motors with DRIVE-CLiQ interface).
Rules for DRIVE-CLiQ wiring Rules apply for wiring components with DRIVE-CLiQ. A distinction is made between mandatory DRIVE-CLiQ rules that must be observed and recommended rules.
Further information You can find further information on DRIVE-CLiQ wiring in the following manuals: SIMATIC Drive Controller (https://support.industry.siemens.com/cs/ww/en/view/109766666) manual SINAMICS S120 function manual (https://support.industry.siemens.com/cs/ww/en/view/109763287); section on Rules for wiring with DRIVE-CLiQ SINAMICS S120 Control Units and Supplementary System Components manual (https://support.industry.siemens.com/cs/ww/en/view/109763286)
SIMATIC Drive Controller
84
System Manual, 11/2019, A5E46600094-AA
Connecting 6.9 Protective conductor and potential equalization, functional ground
6.9
Protective conductor and potential equalization, functional ground
Requirement
You have installed the SIMATIC Drive Controller in the control cabinet. Please note the following safety instructions:
DANGER Danger to life from live parts Touching live parts can result in death or serious injury. Always disconnect the plant and device from the power supply before commencing work.
Note
Compliance with machine and system functional safety, reliability and EMC requirements is only guaranteed with original SIEMENS cables.
Protective conductor connection
The SIMATIC Drive Controller and the SINAMICS S120 drive system are designed for use in control cabinets with protective conductor connections.
A connection for the protective conductor is available on the SIMATIC Drive Controller :
Screw M5, Torx T25
Tightening torque: 3 Nm (26.6 lbf in)
This connection is also used for the equipotential bonding conductor.
All plant and machine components are to be included in the protection concept. The drive
line-up is to be installed on a common bare metal mounting plate to ensure compliance
with EMC limits. The connection provides a low-impedance connection to the mounting plate.
The mounting plate must be connected to the protective conductor connection of the control
cabinet. This is done by establishing a connection to the protective conductor bar . Connect the protective conductor bar to the protective conductor .
The protective connection (PE connection) of the motors used must be over the motor cable
.
For EMC reasons, the shield of the motor cable should be connected over a large surface area both at the Motor Module and at the motor.
Components that are not connected over a low-impedance connection, for example, control
cabinet door connected with hinges, also require a protective connection .
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
85
Connecting 6.9 Protective conductor and potential equalization, functional ground
Example: Booksize axis group, consisting of SIMATIC Drive Controller, Line Module and Motor Modules.
SIMATIC Drive Controller SINAMICS S120 Line Module SINAMICS S120 Double Motor Module SINAMICS S120 Single Motor Module SINAMICS Sensor Module Cabinet-Mounted (SMC) SINAMICS Terminal Module (TM) Power supply, for example, SITOP Mounting plate, metallic bright Control cabinet Protective conductor connection Protective conductor bar Motor cable Flexible protective conductor Control cabinet door HMI device Protective conductor
A mounting plate also acts as potential equalization surface. No additional equipotential bonding is therefore required within the drive line-up.
SIMATIC Drive Controller
86
System Manual, 11/2019, A5E46600094-AA
Connecting 6.9 Protective conductor and potential equalization, functional ground
Dimension the protective conductor as follows:
Table 6- 3 Cable cross-section for copper protective conductor
Cross-section of mains supply conductor 16 mm² > 16 mm² to 35 mm² > 35 mm²
Cross-section of protective conductor
As mains supply conductor cross-section 16 mm² 0.5 × mains supply conductor cross-section
For other materials, the cross-section of the protective conductor is to be increased so that it has at least the same conductance as copper.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
87
Connecting 6.9 Protective conductor and potential equalization, functional ground
Potential equalization If there is no common bare metal mounting plate, you need different potential equalization that comes as close as possible to a cross-section in accordance with the "Cable crosssection for copper protective conductors" table, or at least with the same conductance.
SIMATIC Drive Controller SINAMICS S120 Line Module SINAMICS S120 Double Motor Module SINAMICS S120 Single Motor Module SINAMICS Sensor Module Cabinet-Mounted (SMC) SINAMICS Terminal Module (TM) Power supply, for example, SITOP HMI device Control cabinet Functional ground bar Flexible protective conductor Control cabinet door
Note
The ground potential and enclosure (PE) for the SIMATIC Drive Controller are connected over a low-impedance internal connection.
WARNING
Electric shock without grounding
If there is no protective conductor connection or the connection is incorrectly implemented for devices with protection class I, high voltages can be present at open, exposed parts, which can result in death or serious injury if the parts are touched. · Ground the device in compliance with the applicable regulations.
SIMATIC Drive Controller
88
System Manual, 11/2019, A5E46600094-AA
Connecting 6.10 Connecting cable shields
Communication connections Equipotential-bonding cables are not required for fieldbus components within a control cabinet if they are configured as detailed above. For communication connections between separate parts of a plant (for example devices in different control cabinets) and between buildings or parts of buildings, you must ensure potential equalization. If data lines (PROFINET, PROFIBUS or DRIVE-CLiQ), for example, run through more than one control cabinet, potential equalization with a potential equalization conductor is required. Lay the equipotential bonding conductor together with the data line. The following minimum cross-sections are required pursuant to IEC 60364-5-54: At least 6 mm² for copper At least 16 mm² for aluminum At least 50 mm² for steel
NOTICE Disruption to data connection or device defect in the absence of equipotential bonding Considerable leakage current can flow over the data line if no potential equalization is set up. Disruption to data connection or device defects are possible. Lay an equipotential bonding conductor together with the data line.
Due to the maximum length of 100 m for PROFIBUS copper cables at 12 Mbps or for PROFINET copper cables, and aspects of electrical isolation, EMC protection and equipotential bonding, we recommend using fiber-optic cables for connections between buildings.
6.10
Connecting cable shields
Using shielded cables The following options are available for the shield connection when using shielded cables:
A shield connection using a shielding bus supplied separately
Shield contact with shield contact element at the top of the SIMATIC Drive Controller enclosure.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
89
Connecting 6.10 Connecting cable shields
Using a shielding bus Proceed as follows to use a shield bus: 1. Strip the cable shielding. 2. Attach the shield to a grounded shield bus after the point where the cable enters the cabinet. 3. Run the shielded cable as far as the module but do not establish a connection to the shield there.
Using a shield contact on the SIMATIC Drive Controller
1. Loosen the shield contact bracket far enough to create space under the bracket (M3
screw, Torx T10). 2. Strip the cable shielding and insert the cable.
3. Attach the retaining bracket so that the cable shield and cable are pressed against the
shield support by the retaining bracket (tightening torque 0.8 Nm or 7.1 lbf in).
Shield contact bracket Cable shield
Figure 6-1 Shield contact at the SIMATIC Drive Controller
WARNING Unconnected cable shields cause electric shock Hazardous touch voltages can occur through capacitive cross-coupling due to unconnected cable shields. · Connect at least one end of cable shields and unused conductors of cables to the
grounded enclosure potential.
SIMATIC Drive Controller
90
System Manual, 11/2019, A5E46600094-AA
Configuring
7
7.1
Overview
Overview
"Configuring" refers to all steps (configuration, parameter assignment and programming) required for creating an executable project in the TIA Portal.
You transfer the configuration (preset configuration) and mode of operation of the CPU and integrated automatic speed control SINAMICS Integrated to the SIMATIC Drive Controller by configuring, assigning the parameters of and connecting the individual hardware components. You perform the steps needed for this in the device and network views in the TIA Portal and in SINAMICS Startdrive (SINAMICS Integrated).
"Configuring" refers to arranging and networking devices and modules within the device or network view of the TIA Portal. The TIA Portal provides a graphic display of hardware components. It also shows the module racks, for example, for ET 200SP and ET 200MP I/O systems, and the drive line-up of SINAMICS Integrated.
During startup, the configured preset configuration is compared with the actual configuration of the system. Using parameter assignment, you can specify the response of the CPU to errors in the hardware configuration.
"Parameter assignment" means setting the properties of the components used (CPU, SINAMICS Integrated, I/O modules, etc.).
The TIA Portal compiles the hardware configuration (result of "configuring" and "parameter assignment") and loads it to the components.
"Programming" means creating the user programs. The TIA Portal provides highperformance programming editors for efficient engineering. You can, for example, create programs in structured control language (SCL), ladder logic (LAD), function block diagram (FBD) or statement list (STL).
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
91
Configuring 7.2 Hardware/software requirements
7.2
Hardware/software requirements
Hardware requirements The following requirements must be met for commissioning the SIMATIC Drive Controller:
Your plant has been installed and wired.
Your PG/PC has been connected to the SIMATIC Drive Controller over the PROFINET or PROFIBUS interface.
Software requirements
Table 7- 1 Required configuration software
Configuration in the TIA Portal Integrated SIMATIC S7-1500 CPU SINAMICS Integrated
Requirement
SIMATIC STEP 7 Professional, V16 or higher
SINAMICS Startdrive Basic or Startdrive Advanced, V16 or higher
Additional information You can find an overview of the most important documents and links for the TIA Portal on the Internet (https://support.industry.siemens.com/cs/en/en/view/65601780).
You can find manuals, application examples and FAQs on Motion Control (https://support.industry.siemens.com/cs/ww/en/view/109751049) on the following topic page.
Note Configuration without STEP 7/SINAMICS Startdrive
If you want to open projects that already contain a SIMATIC Drive Controller and a SINAMICS drive, you need STEP 7 and SINAMICS Startdrive, even if the controller or the drive are subsequently deleted.
Note Connecting SINAMICS Integrated online
To connect SINAMICS Integrated online: · You need STEP 7 Professional and SINAMICS Startdrive (V16.0 or higher). · The hardware configuration must have been loaded to the SIMATIC Drive Controller. · A subnet must be configured at the interface to which you are connecting your PC/PC.
You can only configure the drive offline with SINAMICS Startdrive without STEP 7 Professional.
SIMATIC Drive Controller
92
System Manual, 11/2019, A5E46600094-AA
Configuring 7.3 Configuration procedure
7.3
Configuration procedure
Proceed as follows to create a new project in the TIA Portal and add a SIMATIC Drive Controller:
Creating a project 1. Start TIA Portal. 2. Select the action "Start" > "Create new project" in the portal view. 3. Assign a name for the new project under "Project name". 4. Set the storage location with the "..." button. 5. If required, enter comments in the Comment field. 6. Click the "Create" button to create the project. You have created the project and are currently in the portal view. To continue with the configuration, switch to the project view.
Adding a SIMATIC Drive Controller to the project
1. Select "Add new device" in the project tree.
2. In the "Add new device" dialog, select the device version you are using under "Controller" > "SIMATIC Drive Controller" and the firmware version of the device under "Version".
3. You use the "Open device view" checkbox to specify whether the hardware configuration view is to be opened once the device has been created. Keep the checkbox selected if you want to configure the CPU next.
4. Click OK to confirm the new device.
You have added the SIMATIC Drive Controller to the project and can now continue with configuration, parameter assignment and programming.
Display of the SIMATIC Drive Controller When you add a SIMATIC Drive Controller to the project, by default: A "Drive Controller_a" group is generated Two devices are added to the group, for example: PLC_b [CPU 1504D TF] and Integrated_c [S120, CPU 150xD]
Figure 7-1 SIMATIC Drive Controller in the project tree, device collapsed
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
93
Configuring 7.3 Configuration procedure
SINAMICS Integrated is only created if Startdrive is installed. Both devices have already been joined in a network over the PROFIdrive Integrated_d subnet. The respective instance numbers (a, b, c, d) are assigned by STEP 7 depending on the objects already present in the project.
Figure 7-2 SIMATIC Drive Controller network view
CPU (e.g. PLC_1) and integrated drive control (e.g. Integrated_1) are modeled as separate devices. You can also move the devices as required to other groups and delete the "Drive Controller" group. You can also add other devices to the "Drive Controller" group, for example a CU320-2 PN, if you require more than six servo drives.
Note Adding SIMATIC Drive Controller directly to group
You can add the SIMATIC Drive Controller directly to a group folder in the project tree even if the group folder is a subfolder: 1. Select the required group. 2. Go to the menu bar or shortcut menu and select "Add" > "Device".
SIMATIC Drive Controller
94
System Manual, 11/2019, A5E46600094-AA
Configuring 7.3 Configuration procedure
Creation options The CPU and SINAMICS Integrated are by default created in a shared group folder in the project tree. To change this behavior, activate or deactivate the relevant options for the SIMATIC Drive Controller under "Settings" -> "Hardware configuration" -> "Device-specific settings".
Figure 7-3 Creation options for creating a SIMATIC Drive Controller
The table below sets out the benefits of configuration with or without grouping.
Table 7- 2 Guide to grouping
With "Drive Controller" grouping
· Actions apply to all devices in a group, for example Go online Load to/from device Copy
· You can add additional devices to the group as required, for example with CU320-2 with I/O system
Without grouping or user-specific grouping
· Greater flexibility in project structure in the project tree, for example by machine/plant modules by CPUs and drives, in separate groups
If you want to create the SIMATIC Drive Controller without the integrated drive, deselect the "Including SINAMICS Integrated" option.
Deselecting this option can, for example, be useful in the following cases:
You are copying a previously configured SINAMICS Integrated drive control from another project.
The project is to be processed by another user without SINAMICS Startdrive.
SINAMICS Integrated is not to be configured until later.
SINAMICS Integrated is not being used, for example, because another drive system is being used.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
95
Configuring 7.3 Configuration procedure
"Drive Controller" group
For the "Drive Controller" group, you have a range of functions to choose from in the menu bar, toolbar and shortcut menu. With "Go online", for example, you can go online with all devices in the group.
The functionality supported by a given device depends on the device and state. For example, the function "Download to device" is supported by the SINAMICS Integrated but not by the CPU when there is an active online connection. The "Load preview" dialog provides relevant information and suggestions for actions for loading.
Figure 7-4 Load preview
Subsequently configuring SINAMICS Integrated Requirements: STEP 7 Professional and SINAMICS Startdrive are installed. Proceed as follows if your project only contains the CPU of a SIMATIC Drive Controller and you want to configure the missing SINAMICS Integrated. 1. Select "Add new device" in the project tree. 2. In the "Add new device" dialog, go to "Drives" > "Drives & starters" > "SINAMICS drives" > "SINAMICS S120 Integrated for SIMATIC" and select SINAMICS Integrated, and select the firmware version of the device under "Version". 3. Click OK to confirm. Result: SINAMICS Integrated has been added to the project tree and can be networked with the CPU.
SIMATIC Drive Controller
96
System Manual, 11/2019, A5E46600094-AA
Configuring 7.3 Configuration procedure
Subsequently configuring a CPU Requirements: STEP 7 Professional and SINAMICS Startdrive are installed.
Proceed as follows if your project only contains a SINAMICS Integrated of a SIMATIC Drive Controller and you want to configure the missing CPU.
1. To ensure that only the CPU (without SINAMICS Integrated) is created, deselect the "Including SINAMICS Integrated" option under "Settings" > "Hardware configuration" > "Device-specific settings". Also deselect the "With Drive Controller group folder" option if you do not want a group folder to be created. Alternatively, you will need to delete the components you do not require.
2. Select "Add new device" in the project tree.
3. In the "Add new device" dialog, select the relevant device version under "Controller" > "SIMATIC Drive Controller" and the firmware version of the device under "Version".
4. Click OK to confirm.
Result: The CPU has been added to the project tree and can be connected to the SINAMICS Integrated .
Replacing devices in STEP 7 The following section explains how to replace a SIMATIC S7-1500 CPU with a SIMATIC Drive Controller in an existing project or vice versa.
1. Select the device to be replaced in the project tree and right-click to open the shortcut menu.
2. Select the "Replace device..." option
3. Select the module you want to use in the right-hand column. The "Compatibility information" section indicates whether the devices to be replaced are compatible and whether or not and, if so, which configurations will be lost in the process.
4. Click "OK" to confirm.
When replacing devices, remember that the SIMATIC Drive Controller consists of two networked devices a CPU and a SINAMICS Integrated.
Replacing a modular SIMATIC S7-1500 CPU with a SIMATIC Drive Controller (CPU) If you replace a modular SIMATIC S7-1500 CPU with a SIMATIC Drive Controller, the configurations at the integrated PROFINET interfaces and at the integrated PROFIBUS interface are retained. In other words, the interfaces are mapped to an interface of the same type.
Configurations of the onboard I/O of S7-1500 compact CPUs are not applied. Please also note the compatibility information in the device replacement dialog.
The centralized I/O in the S7-1500 automation system is moved to the "unplugged modules" area. If required, copy the I/O to a distributed I/O ET 200MP system before device replacement.
A connected SINAMICS S120 CU320-2 remains connected it is not swapped out for a SINAMICS Integrated. If you require a SINAMICS Integrated, you need to create it manually.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
97
Configuring 7.3 Configuration procedure
Replacing a SIMATIC Drive Controller (CPU) with a modular SIMATIC S7-1500 CPU For the device replacement, PROFIdrive Integrated is removed and SINAMICS Integrated remains as a non-networked device in the project. You can connect SINAMICS Integrated to a SIMATIC Drive Controller CPU again at a later time. If you no longer need SINAMICS Integrated, manually delete it from the configuration. Configurations at interface X142 are not applied.
Note Device replacement with other CPU classes (for example ET 200SP CPUs or ET 200pro CPUs) is not possible.
Replacing SINAMICS Integrated with SINAMICS S120 CU320-2 and vice versa Device replacement is currently not supported
SIMATIC Drive Controller
98
System Manual, 11/2019, A5E46600094-AA
Configuring 7.4 Display in the TIA Portal
7.4
Display in the TIA Portal
Project tree
In the project tree, STEP 7 creates the project tree for the SIMATIC Drive Controller . The project tree contains all elements and editors of the project.
Table 7- 3 Structure of the project tree
Under the "Drive Controller" group folder, you will find both the CPU and SINAMICS Integrated.
Under the "PLC" entry, you will find the device configuration and diagnostic options for the CPU, for example. You configure, assign parameters for and program the CPU with STEP 7 Professional.
Under the "Integrated" entry, you will find the device configuration and diagnostic options for integrated automatic speed control, for example. You configure and assign parameters for the SINAMICS Integrated with SINAMICS Startdrive.
Note
If there is no entry for SINAMICS Integrated, check whether SINAMICS Startdrive is correctly installed and whether the "Including SINAMICS Integrated" option is selected in the settings.
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA
99
Configuring 7.4 Display in the TIA Portal
Network view
The network view displays the two components of the SIMATIC Drive Controller, for example:
PLC_1 [CPU 150xD TF] and
Integrated_1 [S120, CPU 150xD]
Different content is shown in the Inspector window depending on the selection in the network view:
Select an interface to configure it
Select the CPU to make CPU settings
Select the SINAMICS Integrated to make SINAMICS Integrated settings (for example
frame settings)
Select the PROFIdrive Integrated subnet to set the bus cycle time (and thus indirectly
the MC Servo clock) or couple the SINAMICS Integrated with another clock system (X142 technology I/Os or PROFINET interface X150).
You can copy/add/delete the components of the SIMATIC Drive Controller individually or together. If you subsequently configure a SINAMICS Integrated, you need to assign the SINAMICS Integrated manually to the master system to establish the PROFIdrive Integrated connection.
Figure 7-5 Display in the TIA Portal network view
Topology view
As the topology view is irrelevant for the SINAMICS Integrated, only the CPU of the SIMATIC Drive Controller is displayed.
100
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.5 Configuration information
Device view
There is a separate device view for each of the two components of the SIMATIC Drive Controller.
CPU device view: Parameter assignment of the CPU including communication interfaces
SINAMICS Integrated device: Configuration of the SINAMICS S120 drive components (Line Modules, Motor Modules, motors, etc.), drive frames, etc.
You can switch between the two views simply and easily with a link.
As in the network view, different content is shown in the Inspector window depending on the selection in the device view.
7.5
Configuration information
Routing
The PROFIdrive Integrated represents a lower-level network. A programming device connected over PROFINET/PROFIBUS uses routing to access the SINAMICS Integrated . The following requirements must be met in order for you to set up an online connection with the SINAMICS Integrated:
A subnet needs to be configured for the interface to which you are connecting the programming device. Routing to the SINAMICS Integrated is only possible if a subnet is configured.
The configuration must be loaded to the CPU for CPU routing information to be available.
Accessible devices
As the SINAMICS Integrated is assigned to a lower-level network, you can only access the higher-level CPU and not the SINAMICS Integrated via "Accessible devices".
IP address of the PROFINET interfaces
With the SIMATIC Drive Controller, the IP addresses 192.168.215.240 to 192.168.215.255 are reserved for internal communication (subnet mask 255.255.255.240). When configuring the PROFINET interfaces (X150, X160, X130), you must ensure that the internal addresses are not located in their network. With IP, the network is defined by an AND connection of IP address and subnet mask.
Startdrive installation without STEP 7 Professional
If only Startdrive is installed, you can configure a SINAMICS Integrated "offline". Online functions are not possible because routing information is not available.
Upload as new station The SIMATIC Drive Controller can be uploaded as a new station. Only the CPU is loaded. Requirement: You have only configured the CPU and not the SINAMICS Integrated.
An upload of the SINAMICS Integrated is not currently supported.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
101
Configuring 7.6 Address assignment
7.6
Address assignment
7.6.1
Addressing
Introduction
The automation components and onboard I/O must have unique addresses so that they can be addressed. The following section explains the various address areas.
I/O address
I/O addresses (input/output addresses) are required in the user program to read inputs and set outputs.
STEP 7 automatically assigns input and output addresses when modules are configured. Each module uses a continuous range of input and/or output addresses corresponding to its volume of input and output data.
The same applies for the onboard I/O of the SIMATIC Drive Controller.
Figure 7-6 Automatic assignment of input/output addresses of interface X142 by STEP 7
STEP 7 assigns the address areas of the modules by default to the process image partition 0 ("Automatic updating"). This process image partition is updated in the main cycle of the CPU.
Note If you have interconnected the X142 digital input/outputs with the technology object measuring input, output cam or cam track, isochronous mode and assignment to the process image partition OB servo are essential. The setting is made automatically as soon as you interconnect a digital input or digital output with a corresponding technology object.
102
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.6 Address assignment
Device address (e.g., Ethernet address) Device addresses are addresses of modules with interfaces to a subnet (e.g., IP address or PROFIBUS address). They are required to address the various devices on a subnet, for example, to download a user program.
Hardware identifier STEP 7 automatically assigns a hardware identifier (HW identifier) for identification and addressing of modules and submodules. The HW identifier is used, for example, for diagnostics alarms or for instructions, to identify the faulty module or the addressed module. In the "System constants" tab of the Inspector window, you will find all hardware identifiers and their symbolic names (of the hardware identifier) for the selected module.
Figure 7-7 Automatic identification and addressing of modules and submodules in STEP 7
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
103
Configuring 7.7 Address space
7.7
Address space
7.7.1
Address space of the digital inputs and digital inputs/outputs
Address space of the digital inputs and digital inputs/outputs
The assignment of address space depends on which digital inputs and digital inputs/outputs are used:
8 DI/DQ at interface X142 (I/Os are assigned to the CPU)
12 DI, 8 DI/DQ at interface X122/X132 (I/Os are by default assigned to the SINAMICS Integrated)
Interface X142 (CPU) The digital input/outputs of interface X142 are permanently assigned to the CPU.
Table 7- 4 Scope of the input/output data of the digital input/outputs of interface X142
I
76 bytes
Q
42 bytes
STEP 7 assigns the addresses automatically. You can change the addresses in the hardware configuration of STEP 7, that is, freely assign the start address. The addresses of the channels are derived from the start address.
You can find the addresses in the device view of the CPU under Device overview and in the Inspector window, on the General tab under I/O addresses.
You can find a description of the control and feedback interface of the digital input/outputs at interface X142 in Parameter assignment of digital input/outputs (X142) (Page 109).
104
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.7 Address space
Interfaces X122/X132 (SINAMICS Integrated)
The digital inputs and digital inputs/outputs are by default assigned to the drive (CU DO1). You can use frame interconnection so that these digital inputs and digital inputs/outputs can also be used by the CPU. To do so, you configure a frame 39x for automatic speed control.
Table 7- 5
Frame 390 391 392 393
394
Scope of input/output data of the digital inputs and digital inputs/outputs X122/X132
Inputs 4 bytes 14 bytes 30 bytes 42 bytes
6 bytes
Outputs 4 bytes 6 bytes 6 bytes 8 bytes
6 bytes
Use of Integrated/CU320-2
No measuring input; DI0 to DI7; DI/DQ8 to DI/DQ15 Two measuring inputs; DI0 to DI7; DI/DQ8 to DI/DQ15 Six measuring inputs; DI0 to DI7; DI/DQ8 to DI/DQ15 8 measuring inputs; DI0 to DI7; DI16, DI17, DI20, DI21, DI/DQ8 to DI/DQ15 (for CU310-2 also: DI18, DI19, DI22, DO16, AI0) No measuring inputs; DI0 to DI7; DI16, DI17, DI20, DI21, DI/DQ8 to DI/DQ15 (for CU310-2 also: DI18, DI19, DI22, DO16, AI0)
You can find a description of the control and feedback interface of the frames in the SINAMICS S120/S150 List Manual (https://support.industry.siemens.com/cs/de/de/view/109763271/en), function diagram 2422 and 2495 to 2500. There you will also find a description of other frames that are not the focus with the SIMATIC Drive Controller.
See also SINAMICS G/S FAQ: Configuration of standard frames in the TIA Portal (https://support.industry.siemens.com/cs/ww/en/view/82841762)
STEP 7 assigns the addresses automatically. You can change the addresses in the hardware configuration of STEP 7, that is, freely assign the start address. The addresses of the channels are based on the start address.
You can, for example, find the assigned addresses:
In the device view of the SINAMICS Integrated, in the Inspector window, on the General tag under frame configuration
In the network view when you select the network; the addresses are then displayed under Address overview in the Inspector window
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
105
Configuring 7.8 Process images and process image partitions
7.8
Process images and process image partitions
7.8.1
Process image - overview
Process image input and process image output
The process image input and output is an image of the signal states. The CPU transfers the values from the input and output modules to the process image input and output. At the start of the cyclic program, the CPU transfers the process image output as a signal state to the output modules. The CPU then transfers the signal states of the input modules to the process image inputs.
Advantages of the process image
A process image accesses a consistent image of the process signals during cyclic program execution. If a signal state at an input module changes during program execution, the signal state is retained in the process image. The CPU does not update the process image until the next cycle.
Consistency of the process image
When the process image is updated, the SIMATIC Drive Controller accesses the data of each submodule as consistent data. This behavior is identical to the modular SIMATIC S71500 CPUs.
The maximum data width that is accessed as consistent data for each submodule depends on the IO system. For PROFINET IO, for example, this data width is 1024 bytes.
32 process image partitions
The CPU uses process image partitions to synchronize the updated inputs/outputs of specific modules with specific parts of the user program.
With the SIMATIC Drive Controller, the overall process image is subdivided into up to 32 process image partitions (PIP).
The CPU automatically updates PIP 0 (automatic update) in each program cycle and assigns it to OB 1.
You can assign other OBs to process image partitions PIP 1 to PIP 31 during configuration of the IO devices.
Before the start of the OB, the CPU writes the outputs of the assigned process image partition (PIPQ) straight to the peripheral outputs of the IO devices. The CPU then updates the assigned process image partition for inputs (PIPI) and reads in the process signals.
The figure below illustrates the updating of a process image partition.
106
Figure 7-8 Updating a process image partition
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.8 Process images and process image partitions
Isochronous processing of the technology I/Os of interface X142
The operating modes timer DI, timer DQ, oversampling DI, oversampling DQ and event/period measurement require isochronous processing in OB91 (MC Servo) or OB6x (isochronous mode interrupt OBs). If you have configured one of those operating modes and have not set isochronous processing, this will result in an error when compiling the hardware configuration.
If you interconnect the technology I/Os with the technology object measuring input, output cam or cam track, isochronous mode and assignment to the process image partition OB servo are essential. The setting is made automatically as soon as you interconnect a technology I/O with a corresponding technology object.
7.8.2
Updating process image partitions in the user program
Requirements
Alternatively, you can also use the following instructions to update process images:
"UPDAT_PI" instruction
"UPDAT_PO" instruction
You will find the instructions in STEP 7 in the "Instructions" task card under "Extended instructions" in the "Process image" folder. You can call the instructions from any point in the user program.
Requirements for updating process image partitions with the "UPDAT_PI" and "UPDAT_PO" instructions:
The process image partitions must not be assigned to any OB. This means the process image partitions are not automatically updated.
Note Update of PIP 0
PIP 0 (automatic update) cannot be updated with the "UPDAT_PI" and "UPDAT_PO" instructions.
UPDAT_PI: Updates the process image partition of the inputs With this instruction, you read the signal states from the input modules of the IO devices to the process image partition of the inputs (PIPI).
UPDAT_PO: Updates the process image partition of the outputs With this instruction, you transfer the process image partition of the outputs of the IO devices to the output modules.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
107
Configuring 7.8 Process images and process image partitions
Direct I/O access to the inputs and outputs of the IO devices You also have direct read and write access to the I/O as an alternative to access via the process image, should direct access be required for programming reasons. Direct (write) I/O access also writes to the process image. This prevents a subsequent output of the process image from again overwriting the value written by direct access.
Additional information You can find more information on process image partitions in the Cycle and response times (https://support.industry.siemens.com/cs/ww/en/view/59193558) function manual.
108
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142)
7.9
Configuration of digital inputs/outputs (X142)
You configure the required digital input/outputs and operating modes over interface X142.
Overview of supported operating modes
You can configure the following operating modes for the individual channels of the X142 interface:
Table 7- 6 Overview of operating modes
Operating mode of X142 I/Os (8 channels) DI
DQ
Functionality
Digital input · Input delay (1 µs/125 µs) · Hardware interrupt (optional) Hardware interrupt at rising and/or falling edge Digital output
Use with technology objects (TOs)
Use via I/O area (without TO)
· Hardware limit
No OB restrictions
switch for position-
ing and synchro-
nous axes
· Output cam
No OB restrictions
· Cam track
Timer DI Timer DQ
Acquisition of the switching time of a digital input signal with up to two edges per application cycle (e.g. for use as measurement sensing input)
Precisely timed output of a digital output signal with up to two edges per application cycle (e.g. for use as an output cam output)
Measuring input (OB 91 required)
· Output cam (OB 91 required)
· Cam track (OB 91 required)
OB 91/OB 6x required
OB 91/OB 6x required
Oversampling DI Acquisition of 32 states of a digital --input signal at equal intervals per application cycle
Oversampling DQ
Output of 32 states of a digital output --signal at equal intervals per application cycle
Event/period dura- Measurement of number of edges --tion measurement and period duration (e.g. for simple
speed measurement with hole mask and light barrier)
Pulse width modu- Output of a configurable pulse-pause ---
lation PWM
ratio with a configurable frequency
OB 91/OB 6x required
OB 91/OB 6x required
OB 91/OB 6x required
No OB restrictions
Isochronous mode Optional
Optional Required Required
Required Required Required Optional
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
109
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Procedure
1. Select the Device configuration entry in the project tree under the CPU. The device view opens.
2. In the device view, click the DI/DQ 8x24VDC [X142] interface. You can now edit the configurable properties under Properties in the Inspector window.
You can find an overview of all channels and your selected settings under Channel parameters.
Figure 7-9 Channel parameters
To configure your selected channels, click on the arrow beside the channel number.
110
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142)
7.9.1
Configuring the DI operating mode
DI operating mode 1. Select the operating mode DI for the required channel at interface X142.
Figure 7-10 DI operating mode
Inversion You can invert the 24 V signal to adjust it to your process. By default, the signal is not inverted. Input delay To suppress faults, you can set an input delay of 1 µs or 125 µs for the input filter of the digital inputs. Changes to the signal are only detected if they are constantly pending for longer than the set input delay time. Hardware interrupts In the Hardware interrupts section, you can assign a hardware interrupt to a rising and/or falling edge.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
111
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Further information You can find more information on the DI operating mode in Assignment of the control interface (Page 131) and Assignment of the feedback interface (Page 132).
7.9.2
Configuring the DQ operating mode
DQ operating mode 1. Select the DQ operating mode for the required channel at interface X142.
Figure 7-11 DQ operating mode
Inversion You can invert the 24 V signal to adjust it to your process. By default, the signal is not inverted.
High-speed output If you select the high-speed output option, the digital output is switched alternately to 24 V DC and ground. Allows for extremely steep edges (output delay in the 1 s range).
Further information You can find more information on the DQ operating mode in Assignment of the control interface (Page 131) and Assignment of the feedback interface (Page 132).
112
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142)
7.9.3
Configuring Timer DI operating mode
Timer DI
Timer DI operating mode allows you to acquire the switching time of up to two edges per application cycle (for example OB 91, OB 6x), for example for use as a measuring output.
Select the Timer DI operating mode for the required channel.
Figure 7-12 Operating mode: Timer DI
Inversion You can invert the 24 V signal to adjust it to your process. By default, the signal is not inverted. Input delay To suppress faults, you can set an input delay of 1 µs or 125 µs for the input filter of the digital inputs. Changes to the signal are only detected if they are constantly pending for longer than the set input delay time. To allow signals pending very briefly to be detected with timer DI (for example level of 100 µs), set an input delay of 1 µs.
Assigning the measuring input technology object The measuring input technology object must always be assigned to another technology object whose position is evaluated by the measuring input. You can assign the measuring input technology object to the following technology objects:
Synchronous axis
Positioning axis
External encoder
You can assign the measuring input technology object precisely one axis or one external encoder. You can assign multiple measuring input technology objects to one axis or one external encoder.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
113
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Configuring the measuring input technology object Select the configuration of the measuring input in the Technology objects folder in the project tree. Configure the basic properties of the technology object in the Basic parameters configuration window.
Figure 7-13 Basic parameters
Name Define the name of the measuring input in this field. The technology object is listed under
this name in the project tree. The tags of the measuring input can be used in the user program under this name.
Assigned axis or external encoder STEP 7 displays the axis or external encoder assigned to the measuring input. You can use the link to directly access the basic parameters of the higher-level technology object.
Unit of measurement The unit of measure shown for the position of the measuring input corresponds to the unit of measure of the higher-level technology object.
114
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Hardware interface In the Hardware interface configuration window, assign the a measuring input type Timer
DI and the selected channel to the technology object.
Figure 7-14 Hardware interface
Measuring input type: Measuring using Timer DI Select a measurement input for a measurement using a Timer DI. The selection box
displays all channels that have been configured correctly.
Note Extending the configuration limits A maximum of eight timer DI can be configured at the X142 interface. If the timer DI at X142 are not sufficient for your needs, you can configure a further eight measuring inputs at interface X122/X132. You can also extend the configuration limits using time-based I/O modules: · ET 200SP distributed I/O system: TM Timer DIDQ 10x24V · ET 200MP distributed I/O system: TM Timer DIDQ 16x24V You can find more information on these systems in Technology functions of the CPU (Page 44).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
115
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Note Unsupported instructions for X142 The function blocks for the use of time-based IO (TIO instructions) are not supported by the X142 interface. Recommendation: Use the measuring input technology object for timer DI.
Adjustment for measuring range activation time To adjust the activation time defined in the system, enter an additional activation time in
the Extended parameters configuration window.
Lost Edge Counter (LEC) Timer DI support Lost Edge Counter. If more than two edges to be detected occur within one position control cycle, a measured value cannot be evaluated for the other edges to be detected. The LEC records the number of edges lost. Which lost edges are recorded in the LEC depends on the mode set in the Motion Control instruction. For example, if you only want to measure rising edges, the LEC only records the rising edges not measured. The LEC can count and display a maximum of seven lost edges. The number of lost edges is displayed in the function block and in the technology data block.
Further information You can find additional information on the following topics in the S7-1500T Motion Control function manuals (https://support.industry.siemens.com/cs/ww/en/view/109751049): Measuring input type: Timer DI Measuring input type: SINAMICS (central measuring input) Measuring input type: PROFIdrive telegram (drive or external encoder) Lost Edge Counter (LEC)
116
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142)
7.9.4
Configuring Timer DQ operating mode
Timer DQ
Timer DQ operating mode allows you to output up to two edges per application cycle (for example OB 91, OB 6x) at a specific time, for example, for use as a cam output.
1. Select the Timer DQ operating mode for the required channel.
Figure 7-15 Mode of operation: Timer DQ
Inversion You can invert the 24 V signal to adjust it to your process. By default, the signal is not inverted. High-speed output If you select the high-speed output option, the digital output is switched alternately to 24 V DC and ground. Advantages of the high-speed output: Extremely steep edges (output delay in the 1 s range)
Extremely high switching frequencies
Maximum switching precision, for example, for use as a cam output
Assigning the output cam technology object The output cam technology object must always be assigned to another technology object whose position is evaluated. You can assign the output cam technology object to the following technology objects: Synchronous axis
Positioning axis
External encoder
You can assign exactly one axis or one external encoder to the output cam. You can assign multiple output cams to one axis or one external encoder.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
117
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Configuring the output cam technology object 1. Select the configuration of the output cam in the Technology objects folder in the project tree. 2. Configure the basic properties of the technology object in the Basic parameters configuration window.
Figure 7-16 Basic parameters
Name 1. Define the name of the output cam in this field. The technology object is listed under this
name in the project tree. The tags of the output cam can be used in the user program under this name.
Assigned axis or external encoder STEP 7 displays the axis or external encoder assigned to the output cam. You can use the link to directly access the basic parameters of the higher-level technology object.
118
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Output cam type 1. Select an output cam type on the basis of the required switching behavior: Position-based cam (position-dependent switch-on/switch-off) Time-based cam (position-dependent switch-on and position-independent or time-
dependent switch-off)
Output cam reference 1. In this selection, configure whether the switching points of the output cams are to
reference the actual position or the position setpoint.
Unit of measurement The unit of measurement shown for the position of the output cam corresponds to the unit of measurement of the higher-level technology object. When a time-based cam is selected as the output cam type, the unit of measurement for the switch-on duration and other times is also indicated. The unit of measurement for output cams is always ms.
Hardware interface Select the type of cam output in the Hardware interface configuration window.
Figure 7-17 Hardware interface
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
119
Configuring 7.9 Configuration of digital inputs/outputs (X142)
1. Select whether you want to output the switching signals generated at the digital output. Activate output
Select one of the following two output options for outputting the cam track: Output via Timer DQ
For output by Timer DQ, select a cam output in the Output field. The selection box displays all channels that have been configured correctly.
Note Extending the configuration limits A maximum of eight timer DQ can be configured at the X142 interface. If the Timer DQ at X142 are not sufficient for your needs, you can increase the configuration limits with time-based IO modules: · ET 200SP distributed I/O system: TM Timer DIDQ 10x24V · ET 200MP distributed I/O system: TM Timer DIDQ 16x24V You can find more information on these systems in Technology functions of the CPU (Page 44).
Note Unsupported instructions for the X142 interface The function blocks for the use of time-based IO (TIO instructions) are not supported by the X142 interface. Recommendation: For the timer DQ, use the output cam or cam track technology object.
Output by digital output module For output by a digital output module, select a digital output in the Output field. Only the digital outputs with previously defined PLC tags are displayed for selection.
Note Output via the X122, X132 or X142 interface Also use the "Output by digital output module" setting in the following cases: · The output occurs at the X142 interface by a DQ instead of a Timer DQ. · The output occurs by a digital output of the X122 or X132 interface (configured
telegram 39x required) In both cases you must define a PLC tag for the respective I/O address.
Output deactivated When output is deactivated, the cam track is evaluated only in the software.
120
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142) Extended parameters > Activation time
Figure 7-18 Activation time
The specified output cam type is indicated at the top of the Activation time configuration window. 1. For a time shift of the switch-on and switch-off times of the output cams, enter an
activation time and a deactivation time.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
121
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Extended parameters Parameter > Hysteresis
Figure 7-19 Hysteresis
1. To prevent unwanted changes in the switching state of the output cams of a cam track, enter a hysteresis value.
When using output cams that reference the actual position, it is advisable to enter a hysteresis value (> 0.0).
Cam track technology object In addition to the output cam technology object already described, the cam track technology object is also available. You can find a detailed description of how to configure the cam track technology object in the S7-1500T Motion Control function manuals (https://support.industry.siemens.com/cs/ww/en/view/109751049).
122
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142)
7.9.5
Configuring Oversampling DI operating mode
Oversampling DI The Oversampling DI function detects 32 signal states of a given digital input at equal intervals per application cycle (for example OB 91, OB 6x). The 32 states are returned together as a 32-bit value in the feedback interface. The value is read in synchronously to Ti (actual value acquisition).
Note Isochronous mode Oversampling requires isochronous mode.
The figure below is an example of Oversampling DI4:
TAPP MSB LSB
Application cycle Most significant bit Least significant bit
Figure 7-20 Oversampling DI
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
123
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Configuring Oversampling DI 1. Select the Oversampling DI operating mode for the required channel.
Figure 7-21 Oversampling DI
Note Extending the configuration limits
A maximum of eight oversampling DI can be configured at the X142 interface. If the Oversampling DI at X142 are not sufficient for your needs, you can increase the configuration limits with time-based IO modules, for example: · ET 200SP distributed I/O system: TM Timer DIDQ 10x24V · ET 200MP distributed I/O system: TM Timer DIDQ 16x24V
You can find more information on these systems in Technology functions of the CPU (Page 44).
Inversion
You can invert the 24 V signal to adjust it to your process. By default, the signal is not inverted.
Input delay
To suppress faults, you can set an input delay of 1 µs or 125 µs for the input filter of the digital inputs. Changes to the signal are only detected if they are constantly pending for longer than the set input delay time.
To allow signals pending very briefly to be detected by oversampling DI (for example level of 100 µs), set an input delay of 1 µs.
Further information
You can find more information on the Oversampling DI operating mode in Assignment of the control interface (Page 131) and Assignment of the feedback interface (Page 132).
124
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142)
7.9.6
Configuring Oversampling DQ operating mode
Oversampling DQ The Oversampling DQ function outputs 32 signal states at equal intervals per application cycle (for example OB 91, OB 6x). Up to 32 edges are therefore possible per application cycle at a given digital output. The 32 states are set over the control interface. The output occurs synchronously with time TO (setpoint transfer).
Note Isochronous mode Oversampling requires isochronous mode.
The image below is an example of oversampling of DQ5:
TAPP MSB LSB
Application cycle Most significant bit Least significant bit
Figure 7-22 Oversampling DQ
Note Output frequency with the Oversampling function
The combination of application cycle and the 32-bit string output must not result in an output frequency that exceeds the maximum switching frequency for the digital outputs.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
125
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Configuring an oversampling DQ 1. Select the operating mode Oversampling DQ for the required channel.
Figure 7-23 Oversampling DQ
Note Extending the configuration limits
A maximum of eight oversampling DQ can be configured at the inputs/outputs of the X142 interface. If the oversampling DQ at X142 are not sufficient for your needs, you can increase the configuration limits with time-based IO modules, for example: · ET 200SP distributed I/O system: TM Timer DIDQ 10x24V · ET 200MP distributed I/O system: TM Timer DIDQ 16x24V
You can find more information on these systems in Technology functions of the CPU (Page 44).
Inversion
You can invert the 24 V signal to adjust it to the process. By default, the signal is not inverted.
High-speed output
If you select the high-speed output option, the digital output is switched alternately to 24 V DC and ground. Allows for extremely steep edges (output delay in the 1 s range).
To allow signals pending very briefly to be output by oversampling DQ (for example level of 0.1 ms), you must operate the output as a high-speed output.
Further information
You can find more information on the Oversampling DQ operating mode in Assignment of the control interface (Page 131) and Assignment of the feedback interface (Page 132).
126
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142)
7.9.7
Configuring event/period measurement operating mode
Event/period duration measurement Event counter You use event measurement (16-bit value) to measure the number of rising edges per application cycle over the feedback interface. The event counter is a rotary counter. An event counter overflow is not displayed. The exact value must be calculated on the basis of the difference. Period measurement You use the period duration measurement (32-bit value) to measure the number of increments of 41.67 ns between the last two rising edges received in the application cycle over the feedback interface. Period = 41.67 ns · number of increments
Note Isochronous mode
Event/period measurement requires isochronous mode.
1. Select the the required channel for the Event/period measurement operating mode.
Figure 7-24 Event/period duration measurement
Inversion
You can invert the 24 V signal to adjust it to your process. By default, the signal is not inverted.
Input delay
To suppress faults, you can set an input delay of 1 µs or 125 µs for the input filter of the digital inputs. Changes to the signal are only detected if they are constantly pending for longer than the set input delay time.
To allow signals pending very briefly to be detected at high counting frequencies, you need to set an input delay of 1 µs.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
127
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Further information You can find more information on the Event/period measurement operating mode in Assignment of the control interface (Page 131) and Assignment of the feedback interface (Page 132).
7.9.8
Configuring Pulse width modulation (PWM) operating mode
Areas of application
You can use pulse width modulation (PWM) to generate periodic pulses with a constant rated voltage and a variable pulse duration.
Possible applications for pulse width modulation (PWM):
Control of proportional valves and directional valves
Energy savings as a result of a reduction in holding current or for controlling the valve position
Heating control, for example, via an external additional power unit
Principle of operation
With pulse width modulation, a signal with defined time period and variable pulse duration is output at the digital output. You use pulse width modulation to vary the mean value of the output voltage. This allows you to control the load current or the power in line with the connected load. The pulse duration can be between 0 (no pulse, always off) and full-scale deflection (no pulse, always on).
Period Pulse duration
Pulse width modulation (PWM) is based on the specification of a base frequency of 1, 2, 4, 8 or 16 kHz. You can alter the base frequency in terms of period and pulse-pause ratio over the control interface (32-bit value). The bit pattern is shown in each base period. The base period is defined on the basis of the base frequency. A "0" is LOW and a "1" is HIGH.
128
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Examples
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Base frequency: 1 kHz Base period: 1 ms 1111 0000 0000 0000 1111 0000 0000 0000 Time period: 500 µs; 375 µs LOW; 125 µs HIGH
Figure 7-25 Pulse width modulation
Base frequency: 1 kHz 1111 1111 1111 1111 0000 0000 0000 0000 Time period: 1 ms; 500 µs LOW; 500 µs HIGH
1111 1111 0000 0000 0000 0000 0000 0000 Time period: 1 ms; 750 µs LOW; 250 µs HIGH
1111 0000 1111 0000 1111 0000 1111 0000 Time period: 250 µs; 125 µs LOW; 125 µs HIGH
Base frequency: 2 kHz 1010 1010 1010 1010 1010 1010 1010 1010 Time period: 31.25 µs; 15.625 µs LOW; 15.625 µs HIGH
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
129
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Configuring Pulse width modulation (PWM) operating mode To configure PWM operating mode, first define the required base frequency of pulse width modulation. You can configure the base frequency as 1, 2, 4, 8 or 16 kHz. The selected base frequency then applies to all channels of interface X142.
Figure 7-26 Base frequency of pulse width modulation
Now select the channels for PWM operating mode. If you want to configure very short pulses, enable the high-speed output function.
Figure 7-27
Pulse width modulation channel
The selected digital output is switched with the selected base frequency and the switching pattern from the control interface.
Inversion
You can invert the 24 V signal to adjust it to your process. By default, the signal is not inverted.
High-speed output
If you select the high-speed output option, the digital output is switched alternately to 24 V DC and ground. Allows for extremely steep edges (output delay in the 1 s range).
To allow signals pending very briefly to be output with pulse width modulation (for example, level duration of 0.1 ms), you must operate the output as a high-speed output.
130
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Further information You can find more information on the Event/period measurement operating mode in Assignment of the control interface (Page 131) and Assignment of the feedback interface (Page 132).
7.9.9
Assignment of the control interface
Control interface
The user program uses the control interface to influence the behavior of the technology inputs and technology outputs at interface X142.
The following table shows the control interface assignment:
Table 7- 7 Assignment of the control interface
Offset from start address Byte 0 Byte 1 to 3 Byte 4 to 7
Byte 8 to 11 Byte 12 to 15 Byte 16 to 19 Byte 20 to 23 Byte 24 to 27 Byte 28 to 31 Byte 32 to 35 Byte 36
Parameter
SET_DQ (DQ0 to DQ7) Reserved TEC_OUT (DQ0)
TEC_OUT (DQ1) TEC_OUT (DQ2) TEC_OUT (DQ3) TEC_OUT (DQ4) TEC_OUT (DQ5) TEC_OUT (DQ6) TEC_OUT (DQ7) SEL (DI0, DI1)
Meaning
Set DQ (DQ0 to DQ7) Must not be used Timer DQ: Byte 0, 1: OFF TIME (output time stamp for DQ reset) Byte 2, 3: ON TIME (output time stamp for setting DQ) Oversampling DQ: Byte 0 to 3: 32 states for oversampling Pulse width modulation (PWM): Byte 0 to 3: PWM bit pattern See Byte 4 to 7
SEL DI1 SEL DI0
Bit 5 to 7: Edge selection for time stamp acquisition DI1 001 Rising edges only 010 Falling edges only 011 Rising and falling edges (in order of occurrence) 101 First rising, then falling edge 110 First falling, then rising edge 000, 100, 111 reserved Bit 4: Cyclical time stamp acquisition for DI1 Bit 0 to 3: see SEL DI1
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
131
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Offset from start address Byte 37 Byte 38 Byte 39 Byte 40, 41
Parameter
SEL (DI2, DI3) SEL (DI4, DI5) SEL (DI6, DI7) STW
Meaning See byte 36
MSL --SYN
Bit 12 to 15: Sign of life counter (master sign of life) Bit 1 to 11: Reserved; bits must be set to 0 Bit 0: Synchronization of X142 interface with the user program
7.9.10
Assignment of the feedback interface
Feedback interface
The user program receives current values and status information from the X142 interface technology I/Os over the feedback interface.
The following table shows the feedback interface assignment:
Table 7- 8 Assignment of the feedback interface
Offset from start address Byte 0 Byte 1 to 3 Byte 4 to 7
Parameter
STS_DI (DI0 to DI7) Reserved TEC_IN (DI0)
Byte 8 to 11 TEC_IN_EXT (DI0)
Byte 12 to 15 Byte 16 to 19 Byte 20 to 23 Byte 24 to 27 Byte 28 to 31 Byte 32 to 35 Byte 36 to 39 Byte 40 to 43 Byte 44 to 47
TEC_IN (DI1) TEC_IN_EXT (DI1) TEC_IN (DI2) TEC_IN_EXT (DI2) TEC_IN (DI3) TEC_IN_EXT (DI3) TEC_IN (DI4) TEC_IN_EXT (DI4) TEC_IN (DI5)
Meaning
State DI (DI0 to DI7)
Must not be used
Timer DI:
Byte 0, 1: 2nd TIME/OFF TIME (second input time stamp)
Byte 2, 3: 1st TIME/ON TIME (first input time stamp)
Oversampling DI:
Byte 0 to 3: Oversampling value
Event/period duration measurement
Event measurement: Byte 0, 1: Reserved
Byte 2, 3: Counter value
Time period measurement:
Byte 0 to 3: Measured time period
See byte 4 to 11
132
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Offset from start address Byte 48 to 51 Byte 52 to 55 Byte 56 to 59 Byte 60 to 63 Byte 64 to 67 Byte 68
Parameter
TEC_IN_EXT (DI5) TEC_IN (DI6) TEC_IN_EXT (DI6) TEC_IN (DI7) TEC_IN_EXT (DI7) LEC (DI0, DI1)
Byte 69
LEC (DI2, DI3)
Byte 70
LEC (DI4, DI5)
Byte 71
LEC (DI6, DI6)
Byte 72 Byte 73 Byte 74, 75
Reserved Layout property ZSW SSL
--SYNC Channel address Channel mode
Meaning
Bit 4 to 6: Lost Edge Counter for DI1 Bit 0 to 2: Lost Edge Counter for DI0 Bit 3, 7: Reserved (must not be used) Bit 4 to 6: Lost Edge Counter for DI3 Bit 0 to 2: Lost Edge Counter for DI2 Bit 3, 7: Reserved (must not be used) Bit 4 to 6: Lost Edge Counter for DI5 Bit 0 to 2: Lost Edge Counter for DI4 Bit 3, 7: Reserved (must not be used) Bit 4 to 6: Lost Edge Counter for DI7 Bit 0 to 2: Lost Edge Counter for DI6 Bit 3, 7: Reserved (must not be used) Must not be used Specific value Bit 12 to 15: Sign of life counter (slave sign of life) Bit 10, 11: Reserved (must not be used) Bit 8: X142 interface is synchronized with user program Bit 4 to 7 and 9: Number of the respective DI or DQ Bit 0 to 3: Operating mode of the respective DI or DQ
Substitute value behavior
If the CPU is in STOP, the digital outputs (irrespective of any inversion set) return "0" (LOW level) as a substitute value.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
133
Configuring 7.9 Configuration of digital inputs/outputs (X142)
Reading back the terminal state STS_DI (offset byte 0 of the feedback interface) represents the logical channel status, taking account of any inversion configured.
Digital inputs With digital inputs (DI, Timer DI, oversampling DI, event/period measurement), the value corresponds to the logical state of the digital input.
Digital outputs With digital outputs (DQ, Timer DQ, oversampling DQ, pulse width modulation PWM), the value corresponds to the actual terminal state of the digital output. If the terminal state deviates from the controlled state, there may be an output driver short-circuit or defect.
Note STS_DI Signals are only reliably acquired over STS_DI if the level is significantly longer than the input delay + acquisition cycle of the digital inputs/outputs (X142). Example: If you operate the digital inputs/outputs (X142) as isochronous to the MC Servo in a cycle of 2 ms and a set input delay of 125 µs, the level duration must be > 2.125 ms.
134
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
7.10
Configuring 7.10 Configuring the digital inputs and digital inputs/outputs (X122/X132)
Configuring the digital inputs and digital inputs/outputs (X122/X132)
The digital inputs and digital inputs/outputs (X122/X132) are mainly assigned to SINAMICS Integrated. Through configuration (frames 39x), you can, however, also use the digital inputs and digital inputs/outputs (X122/X132) for the CPU. The following applies:
A digital output is always only available exclusively to SINAMICS Integrated or to the CPU.
If you use a digital input for the CPU, you can also interconnect the digital input at the drive end.
You can configure the digital inputs and digital inputs/outputs (X122/X132) channel by channel. To do so, go to the function view in the project tree under "Automatic speed control" > "Parameter assignment" and set the configuration under "Inputs/outputs".
Bidirectional inputs/outputs are configured in the following configuration mask.
Figure 7-28 Bidirectional inputs/outputs
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
135
Configuring 7.10 Configuring the digital inputs and digital inputs/outputs (X122/X132)
You can assign the SINAMICS digital inputs and digital inputs/outputs (X122/X132) using frame 39x of the PU. The status information of the digital inputs and digital outputs is then transferred at the PROFIdrive PZD sampling rate (p2048). The inputs/outputs are also sampled in the configured sampling time for the digital inputs and digital inputs/outputs (p0799). The application of the output values and return of the input values are therefore subject to dead times and jitter.
Figure 7-29 Configuration of frame 393 for automatic speed control
You can find further information on the various different frame types in Address space (Page 104). Note Interface X142 If you have particularly strict requirements for the digital input/outputs, use the digital input/outputs at interface X142. The digital inputs/outputs can be operated in isochronous mode and allow very short response times.
136
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
7.11
Configuring the clock system
Configuring 7.11 Configuring the clock system
7.11.1
Overview of isochronous mode
Introduction
The SIMATIC Drive Controller supports isochronous mode for the following clock systems: PROFINET IO interface X150 PROFIBUS DP interface X126 Technology I/Os X142 SINAMICS Integrated with PROFIdrive Integrated (always isochronous) You can operate the clock systems separately or coupled on an isochronous basis. Exception: Isochronous coupling of the PROFIBUS DP interface is not possible.
Independent isochronous mode If you want to operate the clock systems separately in isochronous mode, configure a cycle time for each clock system and assign the clock systems to different process images, for example: SINAMICS Integrated PIP OB Servo [OB 91] PROFIBUS DP interface X126 PIP 1 of isochronous mode interrupt OB [OB 6x] The clock systems are in this case not isochronous to each other.
Note You cannot operate the X142 technology I/Os in isochronous mode separately from SINAMICS Integrated. If you want to operate technology I/Os X142 and SINAMICS Integrated in isochronous mode simultaneously, always set coupled isochronous mode.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
137
Configuring 7.11 Configuring the clock system
Coupled isochronous mode In coupled isochronous mode, the relevant clock systems use a shared system clock.
The leading clock system provides its own system clock to the other clock systems.
The following table shows the possible combinations for coupled isochronous mode on the SIMATIC Drive Controller. The leading clock system for each combination is indicated.
Table 7- 9 Possible combinations for coupled isochronous mode
PROFINET IO interface X150
X (leading) X (leading) X (leading)
-
Technology I/Os X142 (local send clock) X X X (leading)
SINAMICS Integrated (PROFIdrive Integrated)
X X -1 X
PROFIBUS DP interface X126 -
1 SINAMICS Integrated is not configured.
You configure coupled isochronous mode in STEP 7; see Setting the clock system (Page 150).
Note
Isochronous coupling of the PROFIBUS interface with other clock systems is not possible.
If you want to expand the drive configuration limits with distributed drive systems, connect those distributed drive systems over the PROFINET IO interface X150. Only the PROFINET IO interface X150 can be connected isochronously alongside the MC Servo to the clock system of SINAMICS Integrated and the X142 technology I/Os.
138
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.11 Configuring the clock system
7.11.2
Configuring drives with SINAMICS Integrated isochronously
Requirements
STEP 7 , V16 or higher SINAMICS Startdrive , V16 or higher
Procedure
1. Add a SIMATIC Drive Controller to your project. The network view displays the components of a SIMATIC Drive Controller: SIMATIC S71500 CPU and SINAMICS Integrated, networked through PROFIdrive Integrated.
Figure 7-30 SIMATIC Drive Controller in the network view
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
139
Configuring 7.11 Configuring the clock system
2. Open the device view of SINAMICS Integrated. Configure the SINAMICS S120 drive system with its drive objects. You can find the relevant details in the SINAMICS S120 with Startdrive commissioning manual (https://support.industry.siemens.com/cs/ww/en/view/109763294).
Figure 7-31 Configuring the SINAMICS S120 drive system
140
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.11 Configuring the clock system 3. Select the drive control in the SINAMICS Integrated device view. Check the default PROFIdrive telegrams In the properties, under "Integrated_1" > "Telegram configuration" in the "General" tab. Make changes if required. The following default settings are made automatically: Automatic speed control: Frame 393 Supply: Frame 370 Drive axes: Frame 105
Figure 7-32 Configuring PROFIdrive frames
4. Create the axis technology objects. You create the axis technology objects under "Technology objects > Add new object" in the project tree.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
141
Configuring 7.11 Configuring the clock system
5. Assign the configured drives to the axis technology objects. Open the configuration of the technology object. Navigate to "Hardware interface" > "Drive". Select the "PROFIdrive" entry from the "Drive type" drop-down list. Select the "Antrieb" entry from the "Data connection" drop-down list. Select a SINAMICS Integrated drive axis from the "Drive" list. Only drives for which a suitable PROFIdrive frame has been configured are available for selection in the "Drive" list. You can find which PROFIdrive frames are supported by the SINAMICS Integrated in the S7-1500T Motion Control function manuals (https://support.industry.siemens.com/cs/ww/en/view/109751049).
Figure 7-33 Assigning drives to the technology objects
The technology object is connected to the drive. When the drives are assigned to the axis technology objects, the following takes place: MC-Servo is created (if not already present) The TPA OB Servo is entered as the process image for all PROFIdrive telegrams
142
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.11 Configuring the clock system
6. Once you have configured all axis technology objects, switch back to the drive configuration if necessary. You can use the "Device configuration" button.
Figure 7-34 "Device configuration" button
Note With SINAMICS Integrated, all frames must be operated in isochronous mode on OB Servo (OB 91) or isochronous mode interrupt OB (OB 6x). STEP 7 checks compliance with this rule when compiling the SIMATIC Drive Controller. Exception: If you insert a SIMATIC Drive Controller in your project from the module catalog, "--- (none)" is entered as the organization block for the drive control. If you do not configure any other drive objects, you can also compile and download to the device without isochronous mode.
Figure 7-35 Configuring telegrams as isochronous
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
143
Configuring 7.11 Configuring the clock system
Setting the clock system You have configured SINAMICS Integrated as isochronous. Next, set the clock system. Make the following settings in accordance with whether you are operating SINAMICS Integrated in independent or coupled isochronous mode: For independent isochronous mode: Set the required cycle time. Assign the "MC Servo" OB the clock system of SINAMICS Integrated. For coupled isochronous mode: Assign the clock system of SINAMICS Integrated the leading clock system. You can find details of how to assign the leading clock system in Setting the clock system (Page 150).
7.11.3
Configuring technology I/Os (X142) as isochronous
Requirements
STEP 7, V16 or higher
SIMATIC Drive Controller has been configured.
At least one axis technology object has been created at the CPU of the SIMATIC Drive Controller. See for example Configuring drives with SINAMICS Integrated isochronously (Page 139).
144
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Procedure
Configuring 7.11 Configuring the clock system
1. Open the device view of the CPU. 2. Configure the operating modes of the technology I/Os in the CPU properties under
"General" > "DI/DQ 8x24VDC[X142]" > "Channel parameters", for example, a timer DQ for later use as a cam output for channel 0.
Figure 7-36 Setting the operating mode for technology I/O X142
3. In the project tree under the axis technology object, add an output cam technology object under "Output cam" > "Add new output cam".
4. Open the configuration of the output cam. 5. Under "Hardware interface", select the "Activate output" checkbox and the option "Output
over Timer DQ".
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
145
Configuring 7.11 Configuring the clock system
6. Assign the configured output under "Output".
Figure 7-37 Assigning a channel to the output cam
7. Use the "Device configuration" button to switch back to the CPU settings and check the settings under "DI/DQ 8x24VDC [X142]" > "I/O addresses". The following settings must be configured for the input and output addresses: "Isochronous mode" is enabled. The organization block "MC Servo" is selected. The process image "OB Servo PIP" is selected.
Automatic settings Isochronous mode is mandatory for certain operating modes of the X142 technology I/O channels. As soon as you set one of the following operating modes for a technology I/O channel, STEP 7 automatically selects the option "isochronous mode". Timer DI Timer DQ Oversampling DI Oversampling DQ Event/period measurement If you assign an output cam, cam track or measuring input technology object to an X142 I/O, STEP 7 automatically sets the process image "OB Servo PIP". In all other cases, you set the process image manually. If isochronous mode is mandatory for at least one technology I/O, you must set the process image of the "MC Servo" OB (OB91) or an isochronous mode interrupt OB (OB6x).
146
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.11 Configuring the clock system
Setting the clock system You have configured the technology I/Os as isochronous. Next, set the clock system. Make the following settings in accordance with whether you are operating the X142 technology I/Os in independent or coupled isochronous mode: For independent isochronous mode or if the X142 technology I/Os are the leading clock system Set the required cycle time. Assign the "MC Servo" OB the clock system of the technology I/Os.
Note You cannot operate the X142 technology I/Os in isochronous mode separately from SINAMICS Integrated. If you want to operate X142 technology I/Os and SINAMICS Integrated in isochronous mode simultaneously, always set coupled isochronous mode.
For coupled isochronous mode: Assign the leading clock system to the clock system of the technology I/Os. You can find details of how to assign the leading clock system in Setting the clock system (Page 150).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
147
Configuring 7.11 Configuring the clock system
7.11.4
Configuring additional drives on PROFINET (X150) as isochronous
Requirement
STEP 7, V16 or higher
SINAMICS Startdrive, V16 or higher
You can import drives that are not integrated in the TIA Portal via Startdrive using GSD files (generic station description). To do so, install the drive in the "Options" menu as a device description file (GSD).
Adding a drive and frame to the device configuration
1. Add the required drive system in the network view, for example, SINAMICS S120 CU3202 PN.
2. Open the device view of the drive system and configure the drive objects. You can find the relevant details in the SINAMICS S120 with Startdrive commissioning manual (https://support.industry.siemens.com/cs/ww/en/view/109763294).
3. Open the network view. Assign the drive system to the PROFINET interface [X150] of the CPU.
4. Open the topology view. Interconnect the port of the drive system as in the real configuration with the port of the CPU.
5. Configure the PROFIdrive frames for the drive axes, for example, frame 105.
Note
If you use a PROFINET IO drive system other than SINAMICS S120, adding and configuring may differ from the description in certain respects. The frame is automatically preassigned in line with the drive system.
148
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.11 Configuring the clock system
Activating isochronous mode in the device configuration You can operate PROFINET drives in isochronous or non-isochronous mode. Isochronous mode, however, increases the quality of the position control of the drive and is therefore recommended for drives such as SINAMICS S120. Proceed as follows to activate isochronous mode for the drive: 1. Select the device view of the drive system. 2. In the properties window, select the tab "PROFINET Interface [X150]" > "Advanced options" > "Isochronous mode". 3. Select the "Isochronous mode" check box. 4. In the properties window, select the tab "PROFINET Interface [150]" > "Advanced options" > "Real-time settings" > "Synchronization". 5. Select "IRT" as the RT class.
Note If you have configured a PROFIdrive frame at the drive that requires isochronous mode, STEP 7 automatically sets "Isochronous mode" and the RT class "IRT".
Configuring the PLC as sync master and setting the send clock 1. Select the device view of the CPU. 2. In the properties window, select the tab "PROFINET interface [X150]" > "Advanced options" > "Real-time settings" > "Synchronization". 3. Select "IRT" as the RT class if it has not already been set automatically. 4. Select "Sync master" from the "Synchronization role" drop-down list. 5. Click the "Domain settings" button. 6. Set the required send clock.
Selecting the drive in the configuration of the technology object 1. Add a new axis technology object. 2. Open the configuration "Hardware interface" > "Drive". 3. Select the "PROFIdrive" entry from the "Drive type" drop-down list. 4. Select a drive axis of the PROFINET drive unit from the "Drive" list. Only drives for which you have configured a suitable PROFIdrive frame are available for selection. You can find out which PROFIdrive frames are supported by the SIMATIC Drive Controller in the S7-1500T Motion Control function manuals (https://support.industry.siemens.com/cs/ww/en/view/109751049). Using the "Device configuration" button, you can switch to the drive device view, for example, to configure drives or set other PROFIdrive frames (for example 39x frame for the X122/X132 IOs of a CU320-2).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
149
Configuring 7.11 Configuring the clock system
Setting the clock system You have configured an external drive as isochronous on PROFINET using the example of the SINAMICS S120 CU320-2 PN. Next, set the clock system. Choose between independent and coupled isochronous mode. Set the required send clock. Assign the "MC Servo" OB the clock system of the PROFINET interface X150. You can find more information in Setting the clock system (Page 150).
7.11.5
Configuring the PROFIBUS interface as isochronous
You can find out how to configure isochronous mode for distributed I/O on the PROFIBUS DP in the Isochronous Mode (https://support.industry.siemens.com/cs/ww/en/view/109755401) function manual.
Note
Isochronous coupling of the PROFIBUS interface with other clock systems is not possible.
If you want to expand the drive configuration limits with distributed drive systems, connect those distributed drive systems over the PROFINET IO interface X150. Only the PROFINET IO interface X150 can be connected isochronously alongside the MC Servo to the clock system of SINAMICS Integrated and the X142 technology I/Os.
7.11.6
Setting the clock system
The SIMATIC Drive Controller supports isochronous mode for the following clock systems:
PROFINET IO interface X150
PROFIBUS DP interface X126
Technology I/Os X142
With PROFIdrive Integrated
You can operate the clock systems separately or coupled on an isochronous basis. Exception: Isochronous coupling of the PROFIBUS DP interface is not possible. You can find information on the combinations in which you can couple the clock systems in Overview of isochronous mode (Page 137).
You make the required settings in the relevant clock systems.
Once you have set and, if necessary, coupled the clock systems, you need to couple the OB servo with the clock system in which you wish to operate the drives / that is the leading clock system.
150
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.11 Configuring the clock system
SINAMICS Integrated clock system Proceed as follows to set the clock system of the SINAMICS Integrated: 1. Switch to the network view. 2. Click on PROFIdrive Integrated in the network view. 3. Make the settings for the SINAMICS Integrated under "Constant bus cycle time". The SINAMICS Integrated is always isochronous (option is always selected).
Figure 7-38 SINAMICS Integrated (PROFIdrive Integrated) clock system
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
151
Configuring 7.11 Configuring the clock system
Adjust other settings if required for example times Ti/To for reading in/outputting data in isochronous mode.
Table 7- 10 Setting options for "Cycle time" in the SINAMICS Integrated clock system
Setting options Manual Automatic minimum Use local send clock [X142]
Send clock of the PROFINET interface [X150]
Note
With these settings, you operate the SINAMICS Integrated as an independent clock system.
With this setting, you operate the SINAMICS Integrated in isochronous mode coupled with the clock system of the X142 technology I/Os. Use this setting if you want to use the technology I/Os isochronously with the OB servo, for example, for measuring input or output cam applications. Please note the following:
· You cannot operate the X142 technology I/Os in isochronous mode separately from SINAMICS Integrated.
· If you want to operate X142 technology I/Os and SINAMICS Integrated in isochronous mode simultaneously, always set coupled isochronous mode.
Consistency checks ensure that the setting is correct. With this setting, you operate SINAMICS Integrated in isochronous mode coupled with PROFINET interface X150. SINAMICS Integrated uses the system clock of PROFINET interface X150. Use this setting if you need to operate the SIMATIC Drive Controller in isochronous mode at PROFINET IO interface X150, for example, for the connection of drives or for synchronous operation across PLC.
152
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.11 Configuring the clock system
X142 technology I/Os clock system Proceed as follows to set the clock system of the X142 technology I/Os: 1. In the device view of STEP 7, select the CPU of the SIMATIC Drive Controller. 2. Navigate to "Advanced configuration" > "Isochronous mode" in the properties of the CPU. 3. Select the required settings from the "Source of send clock" drop-down list in the "Isochronous mode for local modules" section.
Figure 7-39 Technology I/O clock system
Table 7- 11 Setting options for "Source of send clock" in the clock system of the technology I/Os
Setting options Local send clock
Using the send clock of the PROFINET interface [X150]
Note
With this setting, you operate the X142 technology I/Os as an independent clock system, or as the leading clock system if you couple the clock system of the SINAMICS Integrated.
With this setting, you operate X142 technology I/Os in isochronous mode coupled with PROFINET interface X150. The X142 technology I/Os use the system clock of PROFINET interface X150.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
153
Configuring 7.11 Configuring the clock system
PROFINET IO interface X150 clock system
Proceed as follows to set the clock system of PROFINET interface X150:
1. Select the PROFINET IO system in the network view of STEP 7.
2. Make the settings for the send clock, etc. under "PROFINET subnet" > "Domain management" > "Sync domains".
In coupled isochronous mode with other clock systems, the clock system of the PROFINET interface is always leading.
You can find additional information on configuring isochronous mode on PROFINET IO in the Isochronous mode (https://support.industry.siemens.com/cs/ww/en/view/109755401) function manual.
PROFIBUS interface X126 clock system
You must follow the rules below during configuration if you want to operate the PROFIBUS DP interface in isochronous mode:
Table 7- 12 Rules for configuring isochronous mode for PROFIBUS DP interface
If ...
A SINAMICS Integrated is configured
The X142 technology I/Os are operated in isochronous mode The clock system of the PROFINET IO interface is coupled with one of the two clock systems.
The configured cycle time of the PROFIBUS DP interface must...
Be equal to or an integer multiple of the configured cycle time of the SINAMICS Integrated (PROFIdrive Integrated)
Be equal to or an integer multiple of the configured cycle time of the X142 technology I/Os
Be equal to or an integer multiple of the configured cycle time of the PROFINET IO interface
Consistency checks ensure that the setting is correct.
Proceed as follows to set the clock system of the PROFIBUS interface:
1. Select the DP master system in the network view of STEP 7.
2. Make the settings for the DP cycle under "Constant bus cycle time".
Note
Isochronous coupling of the PROFIBUS interface with other clock systems is not possible.
If you want to expand the drive configuration limits with distributed drive systems, connect those distributed drive systems over the PROFINET IO interface X150. Only the PROFINET IO interface X150 can be connected isochronously alongside the MC Servo to the clock system of SINAMICS Integrated and the X142 technology I/Os.
154
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Configuring 7.11 Configuring the clock system
Synchronizing MC Servo with clock system Proceed as follows to synchronize the MC Servo with a clock system: 1. Open the "Program blocks" folder in the project tree. 2. Select the "MC Servo" organization block. 3. Select the "Properties" command in the shortcut menu. 4. Select the "Cycle time" entry in the area navigation. 5. The option "Synchronous to the bus" must be selected in the dialog box. 6. In the "Source of send clock" drop-down list, select the clock system to be synchronized with the OB MC-Servo.
Figure 7-40 Synchronizing MC Servo with clock system
Table 7- 13 Setting options for synchronization with a clock system
Setting options1) PROFIdrive system (1) PROFINET IO system (100) PLC_1 (0) DP master system (2)
Note
With this setting, you synchronize MC Servo with the clock system of SINAMICS Integrated.
With this setting, you synchronize MC Servo with PROFINET interface X150.
With this setting, you synchronize MC Servo with the clock system of technology I/Os X142.
With this setting, you synchronize MC Servo with PROFIBUS interface X126.
1) The designations may vary depending on the names assigned.
For coupled isochronous mode, you must always select the leading clock system.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
155
Configuring 7.11 Configuring the clock system
Setting the application cycle The application cycle of MC Servo is derived from the send clock and a configurable factor. The adjustable factors depend on the coupled clock system.
156
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Basics of program execution
8
8.1
Programming the CPU
Hardware and software requirements
Your PG/PC is connected to the SIMATIC Drive Controller over the PROFIBUS or PROFINET interface.
To configure and program the SIMATIC Drive Controller, you require:
SIMATIC STEP 7 Professional, V16 or higher
For programming the safety program of the F-CPU "STEP 7 Safety Advanced" as of V16
Option package SINAMICS Startdrive V16, Basic or Advanced, for configuring the SINAMICS Integrated . Startdrive Advanced has additional engineering functions compared to Startdrive Basic, such as a safety acceptance test.
Points to note
The function blocks for the use of time-based IO (TIO instructions) are not supported by the X142 interface. We therefore recommend using the technology objects measuring input, output cam or cam track for the timer DI/DQ.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
157
Basics of program execution 8.2 Events and OBs
8.2
Events and OBs
Response to triggers The occurrence of a trigger results in the following reaction: If the event comes from an event source to which you have assigned an OB, this event triggers the execution of the assigned OB. The event enters the queue according to its priority. If the event comes from an event source to which you have not assigned an OB, the default system reaction is executed.
Note Some event sources, such as startup, pull/plug, exist even if you do not configure them.
Triggers
The table below provides an overview of: possible event sources possible values for the OB priority possible OB numbers default system reaction Number of OBs
Table 8- 1 Triggers
Types of event sources
Startup 2) Cyclic program 2) Time-of-day interrupt 2) Time-delay interrupt 2) Cyclic interrupt 2)
Hardware interrupt 2) Status interrupt Update interrupt Manufacturer-specific or profile-specific interrupt Isochronous mode interrupt Time error 3) Maximum cycle time exceeded once Diagnostics interrupt
Possible priorities (default priority) 1 1 2 to 24 (2) 2 to 24 (3) 2 to 24 (8 to 17, frequency dependent) 2 to 26 (18) 2 to 24 (4) 2 to 24 (4) 2 to 24 (4)
16 to 26 (21) 22
2 to 26 (5)
Possible OB num- Default system
bers
reaction 1)
100, 123 1, 123 10 to 17, 123 20 to 23, 123 30 to 38, 123
Ignore Ignore Not applicable Not applicable Not applicable
40 to 47, 123 55 56 57
Ignore Ignore Ignore Ignore
61 to 64, 123 80
Ignore Ignore STOP
82
Ignore
Number of OBs
0 to 100 0 to 100 0 to 20 0 to 20 0 to 20
0 to 50 0 or 1 0 or 1 0 or 1
0 to 2 0 or 1
0 or 1
158
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Basics of program execution 8.2 Events and OBs
Types of event sources
Removal/insertion of modules Rack error MC servo 4) MC pre-servo 4)
MC post-servo 4)
MC interpolator 4) MC PreInterpolator 4)
Programming error (only for global error handling) I/O access error (only for global error handling)
Possible priorities (default priority) 2 to 26 (6)
2 to 26 (6) 17 to 26 (26) Corresponds to MC Servo priority Corresponds to MC Servo priority 16 to 25 (24) Corresponds to MC Interpolator priority 2 to 26 (7)
2 to 26 (7)
Possible OB num- Default system
bers
reaction 1)
83
Ignore
86
Ignore
91
Not applicable
67
Not applicable
95
Not applicable
92
Not applicable
68
Not applicable
121
STOP
122
Ignore
Number of OBs
0 or 1 0 or 1 0 or 1 0 or 1 0 or 1 0 or 1 0 or 1 0 or 1 0 or 1
1) If you have not configured the OB.
2) For these event sources, apart from the permanently assigned OB numbers (see column: possible OB numbers), you can also assign OB numbers from the range 123 in STEP 7.
3) If the maximum cycle time has been exceeded twice within a cycle, the CPU always switches to STOP regardless of whether you have configured OB80.
4) You can find more information on these event sources and the startup behavior in the S7-1500 Motion Control function manuals.
Assignment between event source and OBs
The type of OB determines where you make the assignment between OB and event source:
With hardware interrupts and isochronous mode interrupts, the assignment is made during the configuration of the hardware or when the OB is created.
For MC Servo, MC PreServo, MC PostServo, MC Interpolator and MC PreInterpolator, STEP 7 automatically assigns OBs 91/92 as soon as you add a technology object.
For all other types of OB, the assignment is made when the OB is created, where applicable after you have configured the event source.
For hardware interrupts, you can change an assignment which has already been made during runtime with the instructions ATTACH and DETACH. In this case, only the actually effective assignment changes, and not the configured assignment. The configured assignment takes effect after loading, and upon each startup.
The CPU ignores hardware interrupts to which you did not assign an OB in your configuration or which occur after the DETACH instruction. The CPU does not check whether an OB is assigned to this event when an event arrives, but only prior to the actual processing of the hardware interrupt.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
159
Basics of program execution 8.3 Asynchronous instructions
OB priority and runtime behavior If you have assigned an OB to the event, the OB has the priority of the event. The CPUs of the SIMATIC Drive Controller support priorities 1 (lowest) to 26 (highest). The following items are essential to the execution of an event:
Call and execution of the assigned OB
The update of the process image partition of the assigned OB
The user program processes the OBs exclusively on a priority basis. This means the program processes the OB with the highest priority first when multiple OB requests occur at the same time. If an event occurs that has a higher priority than the currently active OB, this OB is interrupted. The user program processes events of the same priority in order of occurrence.
Note Communication
The communication (e.g. test functions with the PG) always works with priority 15. To prevent extending the program runtime unnecessarily in time-critical applications, these OBs should not be interrupted by communication. Assign a priority > 15 for these OBs.
Additional information Additional information on organization blocks is available in the STEP 7 online help.
8.3
Asynchronous instructions
Introduction
Program execution makes a distinction between synchronous and asynchronous instructions.
The "synchronous" and "asynchronous" properties relate to the temporal relationship between the call and execution of the instruction.
The following applies to synchronous instructions: When the call of a synchronous instruction is complete, execution of the instruction is also complete.
This is different in the case of asynchronous instructions: When the call of an asynchronous instruction is complete, execution of the asynchronous instruction is not necessarily complete yet. This means the execution of an asynchronous instruction can extend over multiple calls. The CPU processes asynchronous instructions in parallel with the cyclic user program. Asynchronous instructions generate jobs in the CPU for their processing.
Asynchronous instructions are usually Motion Control instructions or instructions for transferring data, e.g. data records for modules, communication data, or diagnostics data.
160
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Basics of program execution 8.3 Asynchronous instructions Difference between synchronous/asynchronous instructions The figure below shows the difference between the processing of an asynchronous instruction and a synchronous instruction. In this figure the CPU calls the asynchronous instruction five times before its execution is complete, e.g. a data record has been completely transferred. With a synchronous instruction, execution is completed upon each call.
First call of the asynchronous instruction, start of execution Intermediate call of the asynchronous instruction, execution continues Last call of the asynchronous instruction, completion of execution The synchronous instruction is completely executed at each call
Duration of complete execution Figure 8-1 Difference between asynchronous and synchronous instructions
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
161
Basics of program execution 8.3 Asynchronous instructions
Parallel processing of asynchronous instruction jobs A CPU can process several asynchronous instruction jobs in parallel. The CPU processes the jobs in parallel under the following conditions: Several asynchronous instruction jobs are called at the same time. The maximum number of simultaneously running jobs for the instruction is not exceeded. The figure below shows the parallel processing of two jobs of the WRREC instruction. The two instructions are executed simultaneously for a certain duration.
Figure 8-2 Parallel processing of the asynchronous instruction WRREC
Assignment of call to job of the instruction
To execute an instruction over multiple calls, the CPU must be able to uniquely relate a subsequent call to a running job of the instruction.
To relate a call to a job, the CPU uses one of the following two mechanisms, depending on the type of the instruction: Using the instance data block of the instruction (for "SFB" type) Using job-identifying input parameters of the instruction. These input parameters must
match in each call during processing of the asynchronous instruction. Example: A job of the "Create_DB" instruction is identified by input parameters LOW_LIMIT, UP_LIMIT, COUNT, ATTRIB and SRCBLK.
The following table shows which input parameters you use to identify which instruction.
Table 8- 2 Asynchronous instructions Call to job assignment
Instruction DPSYC_FR D_ACT_DP DPNRM_DG WR_DPARM WR_REC RD_REC CREATE_DB
READ_DBL WRIT_DBL RD_DPARA DP_TOPOL
Job is identified by LADDR, GROUP, MODE LADDR LADDR LADDR, RECNUM LADDR, RECNUM LADDR, RECNUM LOW_LIMIT, UP_LIMIT, COUNT, ATTRIB, SRCBLK SRCBLK, DSTBLK SRCBLK, DSTBLK LADDR, RECNUM DP_ID
162
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Basics of program execution 8.3 Asynchronous instructions
Status of an asynchronous instruction An asynchronous instruction shows its status via the block parameters STATUS/RET_VAL and BUSY. Many asynchronous instructions also use the block parameters DONE and ERROR. The figure below shows the two asynchronous instructions WRREC and CREATE_DB.
The input parameter REQ starts the job to execute the asynchronous instruction. The output parameter DONE indicates that the job was completed without error. The output parameter BUSY indicates whether the job is currently being executed. When
BUSY =1, a resource is allocated for the asynchronous instruction. When BUSY = 0, the resource is free.
The output parameter ERROR indicates that an error has occurred. The output parameter STATUS/RET_VAL provides information on the status of the job execu-
tion. The output parameter STATUS/RET_VAL receives the error information after the occurrence of an error. Figure 8-3 Block parameters of asynchronous instructions using the instructions WRREC and
CREATE_DB as examples.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
163
Basics of program execution 8.3 Asynchronous instructions
Summary
The table below provides you with an overview of the relationships described above. It shows in particular the possible values of the output parameters if execution of the instruction is not complete after a call.
Note You must evaluate the relevant output parameters in your program after each call
Table 8- 3 Relationship between REQ, STATUS/RET_VAL, BUSY and DONE during a "running" job.
Seq. no. of the call
1
Type of call First call
REQ 1
2 to (n - 1) Intermediate call
n
Last call
Not relevant
Not relevant
STATUS/RET_VAL
W#16#7001 Error code (e.g. W#16#80C3 for lack of resources) W#16#7002
W#16#0000, if no errors have occurred. Error code if errors occurred.
BUSY
1 0
1 0 0
DONE
0 0
0 1 0
ERROR
0 1
0 0 1
Use of resources
Asynchronous instructions use resources in the CPU during their execution. The resources are limited depending on the type of CPU and instruction. The CPU can simultaneously process only a maximum number of asynchronous instruction jobs. The resources are available again after a job has been processed successfully or with errors.
Example: For the RDREC instruction, a CPU can process up to 20 jobs in parallel.
If the maximum number of simultaneously running jobs for an instruction is exceeded, the instruction returns error code 80C3 (lack of resources) in the STATUS block parameter. The CPU stops execution of the job until a resource becomes free again.
Note Lower-level asynchronous instructions
Some asynchronous instructions use one or more lower-level asynchronous instructions for their processing. This dependence is shown in the tables below.
Please note that with multiple lower-level instructions, only one lower-level resource is typically allocated at a time.
164
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Basics of program execution 8.3 Asynchronous instructions
Extended instructions: maximum number of simultaneously running jobs
The following table shows the maximum number of simultaneously running jobs for asynchronous extended instructions.
Table 8- 4 Extended instructions
Extended instructions
CPU 1504D TF
CPU 1507D TF
Distributed I/O
RDREC
20
RD_REC
10
WRREC
20
WR_REC
10
D_ACT_DP
8
ReconfigIOSystem
Uses RDREC, WRREC, D_ACT_DP
DPSYC_FR
2
DPNRM_DG
8
DP_TOPOL
1
ASI_CTRL
Uses RDREC, WRREC
PROFIenergy
PE_START_END
Uses RDREC, WRREC
PE_CMD
Uses RDREC, WRREC
PE_DS3_Write_ET200 Uses RDREC, WRREC S
PE_WOL
Uses RDREC, WRREC, TUSEND, TURCV, TCON, TDISCON
Module parameter assignment
RD_DPAR
10
RD_DPARA
10
RD_DPARM
10
WR_DPARM
10
Diagnostics
Get_IM_Data
10
GetStationInfo
10
Recipes and data logging
RecipeExport
10
RecipeImport
10
DataLogCreate
10
DataLogOpen
10
DataLogWrite
10
DataLogClear
10
DataLogClose
10
DataLogDelete
10
DataLogNewFile
10
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
165
Basics of program execution 8.3 Asynchronous instructions
Extended instructions
Data block functions CREATE_DB READ_DBL WRIT_DBL DELETE_DB File handling FileReadC FileWriteC
CPU 1504D TF
CPU 1507D TF
10 10 10 10
10 10
Basic instructions: maximum number of simultaneously running jobs
The following table shows the maximum number of simultaneously running jobs for asynchronous basic instructions.
Table 8- 5 Basic instructions
Basic instructions Array DB ReadFromArrayDBL WriteToArrayDBL
CPU 1504D TF
CPU 1507D TF
Uses READ_DBL (see Extended instructions) Uses READ_DBL, WRIT_DBL (see Extended instructions)
166
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Basics of program execution 8.3 Asynchronous instructions
Communication: maximum number of simultaneously running jobs
Table 8- 6 Maximum number of simultaneous jobs for asynchronous instructions and lower-level instructions used for Open User Communication
Open User Communication TSEND TUSEND TRCV TURCV TCON TDISCON T_RESET T_DIAG T_CONFIG TSEND_C TRCV_C TMAIL_C
CPU 1504D TF
CPU 1507D TF
384
384
384 384 384 384
1 Uses TSEND, TUSEND, TRCV, TCON, TDISCON Uses TSEND, TUSEND, TRCV, TURCV, TCON, TDISCON Uses TSEND, TUSEND, TRCV, TURCV, TCON, TDISCON
Table 8- 7 Lower-level instructions used for asynchronous instructions for MODBUS TCP
MODBUS TCP MB_CLIENT MB_SERVER
CPU 1504D TF
CPU 1507D TF
Uses TSEND, TUSEND, TRCV, TURCV, TCON, TDISCON
Uses TSEND, TUSEND, TRCV, TURCV, TCON, TDISCON
Table 8- 8 Maximum number of simultaneous jobs for asynchronous instructions for S7 communication. The S7 communication instructions use a common pool of resources.
S7 communication PUT GET USEND URCV BSEND BRCV
CPU 1504D TF
1152
CPU 1507D TF
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
167
Basics of program execution 8.3 Asynchronous instructions
Table 8- 9 Lower-level instructions used for asynchronous instructions for communication processors
Communications processors
CPU 1504D TF
CPU 1507D TF
PtP communication
Port_Config
Uses RDDEC, WRREC
Send_Config
Uses RDDEC, WRREC
Receive_Config
Uses RDDEC, WRREC
Send_P2P
Uses RDDEC, WRREC
Receive_P2P
Uses RDDEC, WRREC
Receive_Reset
Uses RDDEC, WRREC
Signal_Get
Uses RDDEC, WRREC
Signal_Set
Uses RDDEC, WRREC
Get_Features
Uses RDDEC, WRREC
Set_Features
Uses RDDEC, WRREC
USS communication
USS_Port_Scan
Uses RDDEC, WRREC
MODBUS (RTU)
Modbus_Comm_Load
Uses RDDEC, WRREC
ET 200S serial interface
S_USSI
Uses CREATE_DB
SIMATIC NET CP (cannot be used with SIMATIC Drive Controller; SIMATIC NET CPs cannot be used in distributed I/O stations)
FTP_CMD
Uses TSEND, TRCV, TCON, TDISCON
Table 8- 10 Maximum number of simultaneous jobs OPC UA
OPC_UA OPC_UA_Connect OPC_UA_Disconnect OPC_UA_NamespaceGetIndexList OPC_UA_NodeGetHandleList OPC_UA_NodeReleaseHandleList OPC_UA_TranslatePathList OPC_UA_Browse OPC_UA_ReadList OPC_UA_WriteList OPC_UA_MethodGetHandleList OPC_UA_MethodReleaseHandleList OPC_UA_MethodCall OPC_UA_ServerMethodPre OPC_UA_ServerMethodPost OPC_UA_ConnectionGetStatus
CPU 1504D TF
CPU 1507D TF
10
10
10
10
10
10
10
10
10
10
10
10
10
10
10
168
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Basics of program execution 8.3 Asynchronous instructions
Technology: maximum number of simultaneously running jobs
Table 8- 11 Maximum number of simultaneous jobs for asynchronous instructions for technology. The instructions for technology use a common pool of resources.
Technology
CPU 1504D TF
CPU 1507D TF
S7-1500 Motion Control MC_Power MC_Reset MC_Home MC_Halt MC_MoveAbsolute MC_MoveRelative MC_MoveVelocity MC_MoveJog MC_GearIn MC_MoveSuperimposed MC_MeasuringInput MC_MeasuringInputCyclic MC_AbortMeasuringInput MC_OutputCam MC_CamTrack MC_TorqueLimiting MC_SetSensor MC_GearInPos MC_SynchronizedMotionSimulation MC_PhasingAbsolute MC_PhasingRelative MC_CamIn MC_InterpolateCam MC_GetCamLeadingValue MC_GetCamFollowingValue
6400
Additional information
You can find additional information on block parameter assignment in the STEP 7 online help.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
169
Protection
9
9.1
Overview of the protection functions
Introduction
This section describes the functions for protection from unauthorized access: Access protection Know-how protection Protection by locking the CPUs
Other CPU protective measures The following measures provide extra protection against unauthorized access from external sources and through the network:
Do not activate time-of-day synchronization over NTP servers.
Do not activate PUT/GET communication.
9.2
Configuring access protection for the CPU
Introduction
The SIMATIC Drive Controller has four different access levels to limit access to specific functions.
By setting up access levels and passwords, you limit the functions and memory areas that are accessible without a password. The individual access levels and corresponding passwords are specified in the object properties of the CPUs.
Rules for passwords
Ensure that passwords are sufficiently secure. Apply the following rules:
Assign a password that is at least 8 characters long.
Use different cases and characters: uppercase/lowercase, numbers and special characters.
170
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Protection 9.2 Configuring access protection for the CPU
Access levels for the CPUs
Table 9- 1 Access levels and access restrictions
Access levels Full access including failsafe (no protection) Full access (no protection)
Read access
HMI access
No access (complete protection)
Access restrictions
Users of the TIA Portal and HMI applications will have access to all standard and failsafe functions. A password is not required.
Users of the TIA Portal will have access to standard functions. HMI applications can access all functions (failsafe and standard). Required password: For additional access to failsafe functions, the TIA Portal user must enter the password for "Full access including failsafe". In this access level, only read access to the hardware configuration and the blocks is possible without a password. HMI access and access to diagnostics data is also possible. Neither blocks nor the hardware configuration can be downloaded to the CPUs without the password. The following actions are not possible without the password either: Writing test functions and firmware updates (online). The same access restrictions apply to HMI access as to read access. The following actions are not possible without the password either: Change of operating state (RUN/STOP) and display of online/offline comparison status. When the CPUs have complete protection, no read or write access to the hardware configuration or blocks is possible (without access authorization in the form of a password). HMI access is not possible either. Authentication with the correct password provides full access to the CPUs again.
Additional information
You can find a list of which functions are possible in the various protection levels in the STEP 7 online help under "Setting options for protection".
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
171
Protection 9.2 Configuring access protection for the CPU
Properties of the access levels Each access level allows unrestricted access to certain functions without a password, for example identification using the "Accessible devices" function. The default setting of the CPUs is "No restriction" and "No password protection". In order to protect access to the CPUs, you need to edit the properties of the CPUs and set up a password. In the default access level "Full access (no protection)", every user can read and change the hardware configuration and the blocks. No password is configured, and no password is required for online access. Communication between the CPUs via the communication functions in the blocks is not restricted by the access level of the CPUs. Entering the correct password enables access to all the functions that are allowed in the given level.
Note Configuring an access level does not replace know-how protection Configuring access levels offers a high degree of protection against unauthorized changes to the CPU through network access. Access levels restrict the rights to download the hardware and software configuration to the CPUs. However, blocks on the SIMATIC Memory Card are not write-protected or read-protected. Use know-how protection to protect the code of blocks on the SIMATIC Memory Card.
Behavior of functions in different access levels The STEP 7 online help includes a table listing the online functions available in the various access levels.
172
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Protection 9.2 Configuring access protection for the CPU
Configuring access levels Proceed as follows to configure the access levels for the CPUs: 1. Open the properties of the CPUs in the Inspector window. 2. Open "Protection & Security" in the area navigation. A table with the possible access levels appears in the Inspector window.
Figure 9-1 Possible access levels
3. Activate the required protection level in the first column of the table. The green check marks in the columns to the right of the access level show which operations are still possible without entering the password. In the example (Figure: Possible access levels), read access and HMI access are still possible without a password.
4. In the "Enter password" column, specify a password for the access level "Full access including failsafe" in the first row. In the "Confirm password" column, enter the selected password again to avoid incorrect entries.
5. Assign additional passwords as required for other access levels.
6. Download the hardware configuration for the access level to take effect.
The CPUs log the following actions with an entry in the diagnostics buffer:
Input of the correct or incorrect password
Changes to access level configuration
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
173
Protection 9.3 Using the user program to set additional access protection
Behavior of a password-protected CPU during operation CPU protection takes effect for an online connection once settings have been loaded to the CPUs. If you set a higher access level and download it to the CPU, all other online connections will be interrupted. You will then need to establish a new online connection. Before an online function is executed, the necessary permission is checked and, if necessary, the user is prompted to enter a password. The password only provides access to protected functions for the local PG/PC on which the password is entered. Access authorization to the protected data applies for the duration of the online connection or for as long as you have STEP 7 open. The menu command "Online > Clear access rights" cancels the access authorization.
Access levels for F-CPUs You can find additional information on the access level "Full access including failsafe (no protection)" in the description of the F-system SIMATIC Safety programming and operating manual SIMATIC Safety Configuring and Programming (https://support.industry.siemens.com/cs/ww/en/view/54110126).
Restricting access to SINAMICS Integrated
Note For information on how to limit access to specific functions on SINAMICS Integrated, please see the SINAMICS S120 documentation (https://support.industry.siemens.com/cs/ww/en/ps/13231/man).
9.3
Using the user program to set additional access protection
Access protection with the user program
You can also restrict access to a password-protected CPU using the ENDIS_PW instruction in STEP 7.
You can find more information on this instruction in the STEP 7 online help under "ENDIS_PW: Limit and enable password legitimation".
174
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Protection 9.4 Know-how protection
9.4
Know-how protection
Application
You can use know-how protection to protect one or more OB, FB or FC blocks as well as global data blocks in your program from unauthorized access. Enter a password to restrict access to a block. The password offers high-level protection against unauthorized reading and manipulation of the block. Know-how protection does not involve the CPU (offline access in STEP 7).
Note
Please see the SINAMIC S120 documentation (https://support.industry.siemens.com/cs/ww/en/ps/13231/man) for information on how to prevent strictly confidential company expertise on configuration and parameter assignment being read by unauthorized parties with SINAMICS Integrated.
Password provider
As an alternative to manual password input, you can assign a password provider to STEP 7. When using a password provider, you select a password from a list of available passwords. When a protected block is opened, STEP 7 connects to the password provider and retrieves the corresponding password.
You need to install and activate a password provider before you can connect it. A settings file in which you define the use of a password provider is also required.
A password provider offers the following advantages:
The password provider defines and manages the passwords. When know-how protected blocks are opened, you work with symbolic names for passwords. For example, a password is marked with the symbolic name "Machine_1" n the password provider. The actual password behind "Machine1" is disclosed to you. A password provider therefore offers optimum block protection as the users do not know the password themselves.
STEP 7 automatically opens know-how protected blocks without the direct entry of a password. This saves you time.
You can find more information on connecting a password provider in the STEP 7 online help.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
175
Protection 9.4 Know-how protection
Readable data
If a block is know-how protected, only the following data is readable without the correct password: Block title, comments and block properties Block parameters (INPUT, OUTPUT, IN, OUT, RETURN) Call structure of the program Global tags without information on the point of use Static tags
Further actions Further actions that can be carried out with a know-how protected block: Copying and deleting Calling in a program Online/offline comparison Loading
Global data blocks and array data blocks
You protect global data blocks (global DBs) from unauthorized access with know-how protection. If you do not have the valid password, you can read the global data block but not change it.
Know-how protection is not available for array data blocks (array DBs).
176
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Setting up block know-how protection Proceed as follows to set up block know-how protection: 1. Open the properties of the block in question. 2. Select the "Protection" option under "General".
Protection 9.4 Know-how protection
Figure 9-2 Setting up block know-how protection
3. Click the "Protection" button to display the "Define password" dialog.
Figure 9-3 Select password
4. Enter the new password in the "New password" box. Enter the same password in the "Confirm password" box.
5. Click "OK" to confirm your entry. 6. Close the "Know-how protection" dialog by clicking "OK". Result: The blocks selected are know-how-protected. Know-how protected blocks are marked with a padlock in the project tree. The password entered applies to all blocks selected.
Note Password provider Alternatively, you can set up know-how protection for blocks with a password provider.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
177
Protection 9.4 Know-how protection
Opening know-how protected blocks Proceed as follows to open a know-how protected block: 1. Double-click on the block to open the "Access protection" dialog. 2. Enter the password for the know-how protected block. 3. Click "OK" to confirm your entry. Result: The know-how-protected block opens. After opening the block you can edit the program code and the block interface of the block until you close the block or STEP 7. You need to enter the password again the next time you open the block. If you close the "Access protection" dialog with "Cancel", the block will open but the block code will not be displayed. You will not be able to edit the block. If you copy the block or add it to a library, for example, this does not cancel the know-how protection of the block. The copies will also be know-how-protected.
Changing block know-how protection Proceed as follows to change block know-how protection: 1. Select the block for which you want to change know-how protection. The protected block must not be open in the program editor. 2. In the "Edit" menu, select the "Know-how protection" command to open the "Change protection" dialog. 3. To change the password for know-how protection, enter the current password under "Old password". 4. Now enter a new password under "New password" and confirm the password under "Confirm password". 5. Click "OK" to confirm your entry. Result: The password for know-how protection of the selected block has been changed.
178
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Protection 9.5 Copy protection
Removing block know-how protection Proceed as follows to remove block know-how protection: 1. Select the block from which you want to remove know-how protection. The protected block must not be open in the program editor. 2. In the "Edit" menu, select the "Know-how protection" command to open the "Change protection" dialog.
Figure 9-4 Removing know-how protection
3. To remove block protection, enter the current password under "Old password". Leave the fields for the new password blank.
4. Click "Remove" to confirm your entry. Result: Know-how protection for the selected block has been canceled.
9.5
Copy protection
Application
The copy protection allows you to protect your program against unauthorized duplication. With copy protection, you link a block to the serial number of the SIMATIC Memory Card or the SIMATIC Drive Controller. The link to the serial number means that you can only use the block in conjunction with the corresponding SIMATIC Memory Card or SIMATIC Drive Controller.
Note
For information on how to protect your drive unit settings from unauthorized reproduction on SINAMICS Integrated, please see the SINAMIC S120 documentation.
Copy and know-how protection
Recommendation: To prevent an unauthorized reset of the copy protection, provide a copyprotected block with additional know-how protection. First set up the copy protection for the block and after this the know-how protection. You can find additional information on setting up know-how protection in Know-how protection (Page 175).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
179
Protection 9.5 Copy protection
Setting up copy protection To set up copy protection, follow these steps: 1. Open the properties of the respective block. 2. Select the "Protection" option under "General". 3. In the "Copy protection" area, select either the "Bind to serial number of the CPU" entry or the "Bind to serial number of the memory card" entry from the drop-down list.
Figure 9-5 Setting up copy protection
4. Activate the option "Serial number is inserted when downloading to a device or a memory card" if STEP 7 is to automatically insert the serial number during the loading process (dynamic binding). Assign a password using the "Define password" button to link the use of a block additionally to the input of a password. If you want to manually bind the serial number of the SIMATIC Drive Controller or the SIMATIC Memory Card to a block (static binding), activate the "Enter serial number" option.
5. You can now set up know-how protection for the block in the "Know-how protection" area.
Note If you download a copy-protected block to a device that does not match the specified serial number, the entire download operation is not possible. This means that you cannot download blocks without copy protection either.
Removing copy protection To remove copy protection, follow these steps: 1. Remove any know-how protection. 2. Open the properties of the respective block. 3. Select the "Protection" option under "General". 4. In the "Copy protection" area, select the "No binding" entry from the drop-down list.
180
Figure 9-6 Removing copy protection
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Protection 9.6 Protection by locking the CPU
9.6
Protection by locking the CPU
Locking options Provide additional protection for your CPUs from unauthorized access (for example to the SIMATIC memory card) by using a secure front cover. You have the following options, for example: Attach a seal Secure the front cover with a lock (shackle diameter: 3 mm)
Eye for seal or padlock
Note Protection with a seal or padlock only prevents "easy" access to the SIMATIC memory card and operator controls. It does not provide protection from targeted tampering; this must be ensured with other measures (for example through the control cabinet).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
181
Flexible automation concepts
10
10.1
Standard machine projects
Introduction
Standard machine projects are STEP 7 projects that use innovative functions. You can easily configure and commission flexible automation solutions for standard machines or for machines with a modular structure.
In the hardware configuration of a standard machine, the SIMATIC Drive Controller is an IO controller to which any number of IO devices are connected. The SIMATIC Drive Controller therefore represents a PROFINET IO system master. This master is configured with a maximum configuration that can be used as a basis from which to derive various different standard machines using options. Alongside a range of software functionalities, each option therefore also has a range of IO system configuration variants.
Greater flexibility at all levels
Standard machine projects have central features:
From exactly one project (IO system master) with configured maximum configuration, you can load different versions of a standard machine (IO system options). The standard machine project covers all variants (options) of the IO system.
An IO system option can be integrated into an existing network locally using simple tools.
Flexibility is provided in more ways than one:
With a suitable configuration, you can adapt the IP address parameters of the IO controller locally using simple tools. This allows you to integrate a standard machine in different plants with little effort or to connect multiple machine modules of the same type in a network. IO systems with this property are known as multiple use IO systems.
With suitable configuration and programming, you can operate different setups of IO system options locally. The IO system options differ in terms of the selection of IO devices used or in terms of the arrangement of the IO devices. The user program controls the specific configuration of the IO system. The function is therefore called Configuration control for IO systems.
Independently of the functions described above, you can use different station options of distributed I/O devices in one project through suitable configuration and programming. The devices can be different in terms of selection and arrangement of the modules. The user program controls the specific configuration of the station. The function is therefore called Configuration control.
182
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Flexible automation concepts 10.1 Standard machine projects
Modular machines with SINAMICS drives The modular machine concept is based on a maximum target topology created in the commissioning tool "offline". A maximum configuration is the maximum configuration of a specific machine type. All machine components used in that machine type are preconfigured in the target topology. You remove parts of the maximum configuration by deactivating/removing drive objects (p0105 = 2).
Activating and deactivating SINAMICS components The SINAMICS S120 drive components, including the control instances, are described in a parameter object model. You can enable/disable drives including their closed loop control or individual components using the following parameters: Enable/disable drive objects (including on Terminal Modules): Adjustable parameter p0105 (Enable/disable drive object) Display parameter r0106 (Drive object enabled/disabled) Enable/disable power units: Adjustable parameter p0125 (Enable/disable power unit component) Display parameter r0126 (Power unit components enabled/disabled) Enable/disable encoders (on Motor Modules): Adjustable parameter p0145 (Enable/disable encoder interface) Display parameter r0146 (Encoder interface enabled/disabled) Enable/disable Voltage Sensing Module (on Line Modules) Adjustable parameter p0145 (Enable/disable Voltage Sensing Module) Display parameter r0146 (Voltage Sensing Module enabled/disabled)
Note Please check the description and the constraints for the individual parameters in the SINAMICS S120/S150 list manual (https://support.industry.siemens.com/cs/ww/en/view/109763271).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
183
Flexible automation concepts 10.1 Standard machine projects
Example of partial topology with SINAMICS components
Figure 10-1 Example: Partial topology with SINAMICS components
A machine has been configured for one Active Line Module and two Motor Modules. The configuration has been saved on the SIMATIC Memory Card (target topology).
While the machine is off, "Drive 1" is removed and the DRIVE-CLiQ cable is unplugged from the SIMATIC Drive Controller and connected directly to "Drive 2" (partial topology, actual topology).
During power up, SINAMICS Integrated detects a difference between the target and actual topology.
The user program executes the following actions:
Set drive object (DO) "Drive 1" to "deactivate and not available". For this action, the user program must set the p0105 = 2 parameter in this DO.
Save all parameters to non-volatile memory on the SIMATIC Memory Card. For this action, the user program must set parameter p0977 = 1.
This saves the actual topology as the target topology. An error will not be triggered in the next power up.
Note Errors in Safety Integrated status display
If a drive that was grouped for a Safety Integrated line-up is disabled with p0105, the parameter r9774 will not be correctly output. The signals of a disabled drive are not updated.
184
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Flexible automation concepts 10.1 Standard machine projects
Overview of key parameters for SINAMICS components
Table 10- 1 Key parameters for activating/deactivating SINAMICS components
Parameter p0105 r0106 p0125[0...n] r0126[0...n] p0145[0...n] r0146[0...n] p9495 p9496 r9498[0 ... 29] r9499[0 ... 29]
Meaning p0105 Activate/deactivate drive object Drive object active/inactive Activate/deactivate power unit component Power unit component active/inactive Activate/deactivate encoder interface Encoder interface active/inactive BICO response when drive objects are deactivated BICO response when drive objects are activated BICO BI/CI parameter when drive objects are deactivated BICO BO/CO parameter when drive objects are deactivated
LSINATopo library
In addition to enabling and disabling SINAMICS components, the LSINATopo library offers the following functions for SINAMICS S120, among others:
Replacing large motor/small motor
Replacing double-axis module with two single-axis modules (and vice versa)
Enable/disable motor brake
Replacing Active Line Module
Replacing when Safety is activated
With these functions, you can temporarily or permanently change the configuration (target topology) of a SINAMICS drive saved on the storage medium.
For example, you can replace motors in a replacement part scenario without using the Engineering System.
You can use components in the machine that deviate from the configured components. This is necessary for handling variance and extensions in modular machines.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
185
Flexible automation concepts 10.2 Configuration control (option handling)
Additional information
You can find additional information on configuration control in Configuration control (option handling) (Page 186).
You can find additional information on multiple use IO systems and on configuration control for IO systems in the PROFINET function manual (https://support.industry.siemens.com/cs/ww/en/view/49948856).
You can find additional information on activating/deactivating SINAMICS components with parameters in the SINAMICS S120/S150 list manual (https://support.industry.siemens.com/cs/ww/en/view/109763271).
You can find additional information on modular machine concepts with Safety Integrated in the SINAMICS S120 Safety Integrated function manual (https://support.industry.siemens.com/cs/ww/en/view/109763292).
You can find additional information about the LSINATopo library on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109770003).
10.2
Configuration control (option handling)
Introduction
Configuration control (option handling) is used to operate various standard machine configuration levels in one project without changing the configuration and the user program.
Operating principle of configuration control
You can use configuration control to operate different standard machine configurations with a single configuration of the ET 200SP or ET 200MP distributed I/O system.
A station master (maximum configuration) is configured in a project. The station master comprises all modules needed for all possible sections of a modular machine.
Provision is made in the user program of the project for various station options for the different configuration levels of the standard machine and for selection of a station option. A station option uses, for example, only some of the configured modules of the station master and these modules are inserted in the slots in a different order.
During commissioning, manufacturers of standard machines select a station option for a configuration level of the standard machine. A change to the project is not required and a modified configuration therefore does not need to be loaded.
You program a control data record. The control data record notifies the CPU/interface module as to:
which modules are missing in a station option as compared to the station master
or
which modules are in a different slot
The configuration control has no effect on the parameter assignment of the modules.
186
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Flexible automation concepts 10.2 Configuration control (option handling)
You can flexibly vary the distributed configuration with configuration control. As a precondition for this, it must be possible to derive the station option from the station master. The following figure shows three configuration levels of a standard machine with the corresponding station options of the ET 200SP distributed I/O system.
Figure 10-2 Various configuration levels of a standard machine with the corresponding station options of the ET 200SP distributed I/O system
Advantages
Simple project execution and commissioning by using a STEP 7 project for all station options.
Easy handling during maintenance, versioning and upgrades.
Hardware savings: You only install the I/O modules needed for the current station option of the machine.
Potential savings when building, commissioning and creating documentation for standard machines
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
187
Flexible automation concepts 10.3 TIA Portal Openness
Additional information You can find information on configuration, programming and the response during operation with configuration control:
in the S7-1500, ET 200MP Distributed I/O System system manual (https://support.industry.siemens.com/cs/ww/en/view/59191792) for configuration control in in ET 200MP.
in the ET 200SP Distributed I/O System system manual (https://support.industry.siemens.com/cs/ww/en/view/58649293) for configuration control in ET 200SP.
10.3
TIA Portal Openness
TIA Portal Openness describes open interfaces for engineering with the TIA Portal. You automate engineering with TIA Portal Openness by controlling the TIA Portal externally using a program that you created yourself. You can use Openness, for example, to implement modular machine concepts on the engineering level. With TIA Portal Openness, you can implement actions including the following: Create project data Change projects and project data Delete project data Read in project data Make projects and project data available to other applications
Openness with SIMATIC Drive Controller
The SIMATIC Drive Controller supports Openness - including the specific SIMATIC Drive Controller properties, such as X142 technology I/Os and PROFIdrive Integrated. The Openness functionality available for SINAMICS Integrated is based on the currently available range of functions for SINAMICS S120.
Additional information
You can find additional information on the topic of Openness in the system manual SIMATIC Openness: Automating creation of projects (https://support.industry.siemens.com/cs/de/de/view/109477163/en).
188
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning
11.1
Overview
Introduction
This section includes information on the following topics: Check before powering on for the first time Removing/inserting the SIMATIC memory card First power-on of the SIMATIC Drive Controller Downloading a project to the device Operating states of the SIMATIC Drive Controller Operating states of the SINAMICS Integrated Runtime licensing CPU memory reset: automatic and manual Backing up and restoring the CPU configuration Backup/restore of SINAMICS NVRAM data Time-of-day synchronization Identification and maintenance data Shared commissioning of projects
11
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
189
Commissioning 11.1 Overview
Commissioning requirements You must ensure the safety of your plant. You therefore need to perform a complete functional test and the necessary safety checks before the final commissioning of a plant. Also allow for any possible foreseeable errors in the tests. This avoids endangering persons or equipment during operation.
WARNING Unexpected movement of machines due to inactive safety functions Safety functions that are inactive or have not been adjusted accordingly can cause unexpected machine movements that can lead to serious injury or death. · Note the information in the relevant product documentation before commissioning. · Carry out a safety inspection for safety-related functions throughout the entire system,
including all safety-related components. · Ensure that the safety functions used in your drives and automation tasks are adjusted
and activated through suitable parameter assignment. · Run a function test. Only put your plant into live operation once you have ensured that
the safety-related functions are running correctly.
Note Important safety instructions for Safety Integrated functions If you want to use Safety Integrated functions, follow the safety instructions in the Safety Integrated manuals.
Commissioning a drive For detailed information on drive configuration, parameter assignment and commissioning, see the SINAMICS S120 with Startdrive commissioning manual (https://support.industry.siemens.com/cs/ww/en/view/109763294).
You can find an example of commissioning a simple SINAMICS S120 drive in Getting Started with Startdrive (https://support.industry.siemens.com/cs/ww/en/view/109763293).
Software tools for commissioning The following free software tools support you in commissioning:
SIEMENS PRONETA (https://support.industry.siemens.com/cs/ww/en/view/67460624) when commissioning PROFINET systems
SIMATIC Automation Tool (https://support.industry.siemens.com/cs/de/en/view/98161300) when commissioning the SIMATIC Drive Controller.
190
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.2 Check before powering on for the first time
11.2
Check before powering on for the first time
Check before powering on for the first time Before the first power-on, check that the SIMATIC Drive Controller and the SINAMICS components are correctly installed and wired.
Installation and wiring Have the required minimum clearances for heat dissipation been provided? Are all front connectors wired according to the circuit diagram and inserted in the correct connection?
Grounding and chassis concept Is the protective conductor terminal on the SIMATIC Drive Controller connected to the protective conductor? Have all cable shields been applied? Are the required equipotential bonding cables connected with low impedance to the affected plant units?
Further information You can find information on assembly/installation and commissioning of SINAMICS S120 components in the SINAMICS S120 manuals and in the EMC Installation Guide. (https://support.industry.siemens.com/cs/ww/en/view/60612658)
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
191
Commissioning 11.3 Commissioning procedure
11.3
Commissioning procedure
11.3.1
Removing/plugging in a SIMATIC memory card
Requirements
The SIMATIC Drive Controller only supports pre-formatted SIMATIC memory cards. If applicable, delete all previously stored data before using the SIMATIC memory card.
In order to work with the SIMATIC memory card, first ensure that the SIMATIC memory card is not write-protected. For this purpose, slide the slider on the SIMATIC memory card out of the lock position.
Inserting the SIMATIC memory card
To insert a SIMATIC memory card, follow these steps:
1. Open the lower cover of the SIMATIC Drive Controller.
2. Ensure that either the SIMATIC Drive Controller is switched off or that the CPU is in STOP.
3. Insert the SIMATIC memory card, as depicted on the SIMATIC Drive Controller, into the slot for the SIMATIC memory card.
ACT LED SIMATIC memory card Symbol shows correct position of the SIMATIC memory card
4. Carefully push the SIMATIC memory card into the slot until the SIMATIC memory card clicks into place.
192
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.3 Commissioning procedure
Removing the SIMATIC memory card To remove a SIMATIC memory card, follow these steps: 1. Open the bottom cover. 2. Switch the CPU into STOP mode. 3. Carefully push the SIMATIC memory card into the slot. After audible unlatching of the SIMATIC memory card, remove it. Only remove the SIMATIC memory card in POWER OFF or STOP mode of the CPU. Ensure that no writing functions (online functions with the programming device, e.g. loading/deleting a block, test functions) are active in STOP mode or were active before POWER OFF. Do not remove the SIMATIC memory card while the ACT LED is signaling write/read access.
NOTICE Possible data loss If you remove the SIMATIC memory card during a write process, the following problems can occur: · The data content of a file is incomplete. · The file is no longer readable, or no longer exists. · The entire content of the card is corrupted.
Also note the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/59457183) in connection with the removal of the SIMATIC memory card.
Reactions after removing/inserting the SIMATIC memory card Inserting and removing the SIMATIC memory card in STOP mode triggers a re-evaluation of the SIMATIC memory card. The CPU hereby compares the content of the configuration on the SIMATIC memory card with the backed-up retentive data. If the backed-up retentive data matches the data of the configuration on the SIMATIC memory card, the retentive data is retained. If the data differs, the CPU automatically performs a memory reset (which means the retentive data is deleted) and then switches to STOP. The CPU evaluates the SIMATIC memory card and indicates this by flashing the RUN/STOP LED.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
193
Commissioning 11.3 Commissioning procedure
11.3.2
First power-on
Requirements
The SIMATIC Drive Controller and the SINAMICS components have been installed and wired.
The SIMATIC Memory Card is in the SIMATIC Drive Controller.
Procedure
Proceed as follows to commission the SIMATIC Drive Controller: Switch on the 24 V power supply to the SIMATIC Drive Controller.
Startup characteristics of the CPU Startup begins once the power supply has been switched on:
RUN/STOP
Alternately flashes yellow/green
ERR Flashes red
MAINT
Flashes yellow
Description The CPU executes a flash test. All LEDs flash at 2 Hz
Flashes yellow at 2 Hz
On and yellow
-
-
The CPU runs system initialization and evalu-
ates the SIMATIC Memory Card
-
After system initialization has been completed,
the CPU switches to STOP
Startup behavior of SINAMICS Integrated
SINAMICS Integrated power up begins once the power supply has been switched on. The SINAMICS Integrated state after successful power up depends on the configuration state of the SINAMICS Integrated and whether SINAMICS components are running a firmware update.
If booting up fails (for example because of a firmware update with errors), this is indicated by the RDY LED (2 Hz) flashing red.
You can find detailed information on the various LED states in the SIMATIC Drive Controller manual (https://support.industry.siemens.com/cs/ww/en/view/109766666).
194
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.3 Commissioning procedure
11.3.3
Downloading a project to the device
Requirements
The plant has been installed and wired.
The SIMATIC Drive Controller is on and is in STOP.
The TIA Portal with integrated Startdrive has been installed and has started up on the PG/PC.
You have created a project in the TIA Portal, added a SIMATIC Drive Controller with SINAMICS Integrated to the project and configured it.
Loading the CPU project
1. To load the project, select the CPU (PLC) in the project tree and click on the "Download to device" icon in the toolbar.
If necessary, the project data is compiled.
If you had previously established an online connection, the "Load preview" dialog opens. This dialog displays alarms and recommends actions needed for the loading operation.
If you have not already established an online connection, the "Extended download to device" dialog opens, and you must first select the interfaces via which you want to establish the online connection to the device.
2. Check the alarms in the "Load preview" dialog, and select the actions in the "Action" column if necessary. As soon as downloading becomes possible, the "Load" button is enabled.
3. Click "Load". The load operation is performed.
If there is a need for synchronization, the system automatically displays the "Synchronization" dialog. This dialog displays alarms and suggests actions that are needed for synchronization. You have the option of performing these actions or forcing the download without synchronization by clicking "Force download to device". If you have performed the suggested actions, you are asked whether you want to continue with the download. The "Load results" dialog then opens. In this dialog, you can check whether or not the load operation was successful and take any further actions that may be necessary.
4. Click "Finish".
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
195
Commissioning 11.4 Operating states of the CPU
Loading the drive configuration
Requirements For online functions such as "Download to device", "Upload from device" and "Go online" to be possible in SINAMICS Integrated, the following requirements must be met: The firmware version configured for SINAMICS Integrated corresponds to the firmware
version of the device hardware. You have downloaded the hardware configuration to the CPU (see "Loading the CPU
project"). You must have configured a subnet for the interface to which you are connecting your
programming device.
Procedure 1. To load the drive configuration, select the SINAMICS Integrated in the project tree. 2. In the toolbar, click on the "Download to device" icon. You can find further information on downloading the drive configuration in the SINAMICS S120 Startdrive commissioning manual (https://support.industry.siemens.com/cs/ww/en/view/109763294).
11.4
Operating states of the CPU
11.4.1
Overview of operating modes: Startup, STOP, RUN
Introduction
Operating states describe the state of the CPU. The following operating states are possible with the mode selector:
STARTUP
RUN
STOP
In these operating states, the CPU can communicate, for example, over the PROFINET IO interface.
The status LEDs on the front of the SIMATIC Drive Controller indicate the current operating state.
196
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.4 Operating states of the CPU
11.4.2
STARTUP operating state
Response
Before the CPU starts to execute the cyclic user program, a startup routine is executed.
By programming startup OBs, you can specify initialization tags for your cyclic program in the startup routine. You can program one or more startup OBs, or none at all.
Points to note
All outputs are disabled or react according to the parameter settings for the relevant module: They provide a configured substitute value or retain the last value output and switch the controlled process to a safe operating state.
The process image is initialized.
The process image is not updated. To read the current state of inputs during STARTUP, you can access inputs with direct I/O access. To initialize outputs during STARTUP, you can write the values via the process image or via direct I/O access. The values are output at the outputs during the transition to RUN.
The CPU always starts up in a warm restart.
The non-retentive bit memories, timers and counters are initialized.
The non-retentive tags in data blocks are initialized.
Cycle time monitoring is not yet running during startup.
The CPU processes the startup OBs in the order of the startup OB numbers. The CPU processes all programmed startup OBs regardless of the selected startup type (see "Setting the startup behavior" figure below).
If a relevant event occurs, the CPU can start the following OBs in startup:
OB 82: Diagnostics interrupt
OB 83: Removal/insertion of modules
OB 86: Rack error
OB 121: Programming error (only for global error handling)
OB 122: I/O access error (for global error handling only) You can find a description of how to use global and local error handling in the STEP 7 online help.
The CPU cannot start any other OBs until after the transition to RUN.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
197
Commissioning 11.4 Operating states of the CPU
Response when preset configuration does not match actual configuration The configuration downloaded to the CPU represents the preset configuration. The actual configuration is the actual configuration of the automation system. If the preset configuration and actual configuration differ, the hardware compatibility setting defines the behavior of the CPU. For additional information on hardware compatibility, see the section Operating mode transitions (Page 201).
Cancellation of startup If errors occur during startup, the CPU cancels startup and returns to STOP. The CPU does not perform startup or interrupts startup under the following conditions: You have not inserted a SIMATIC Memory Card or have inserted an invalid one. You have not downloaded a hardware configuration to the CPU.
Configuring startup behavior You configure the behavior of the CPU in the Startup group in the CPU properties.
198
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.4 Operating states of the CPU
Setting startup behavior Proceed as follows to set the startup behavior: 1. Select the CPU in the device view of the STEP 7 hardware network editor. 2. Select the "Startup" area in the properties under "General".
Figure 11-1 Setting startup behavior
Sets the startup type after POWER ON Defines the startup behavior for the event that a (distributed I/O) module in a slot does
not correspond to the configured module. This parameter applies to the CPU and to all the modules for which no other setting has been selected. · Startup CPU only if compatible: With this setting, a module in a configured slot must
be compatible with the configured module. Compatible means that the module has the relevant number of inputs and outputs and the electrical and functional properties correspond. · Startup CPU even if mismatch: With this setting, the CPU starts up irrespective of the type of module plugged.
Specifies a maximum period (default: 60 000 ms) in which the distributed I/O must be
ready for operation. If the distributed I/O is ready for operation within the configuration time, the CPU switches to RUN. If the distributed I/O is not ready for operation within the configuration time, the startup behavior of the CPU depends on the hardware compatibility setting.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
199
Commissioning 11.4 Operating states of the CPU
11.4.3
STOP operating state
Response
The CPU does not execute the user program in STOP.
All outputs are disabled or react according to the parameter settings for the relevant module: They provide a configured substitute value or retain the last value output and thus keep the controlled process in a safe operating state.
Points to note
The STOP operating state results in a frame failure at the drive with a corresponding response at the drive end (for example, OFF3 fast stop, depends on parameter assignment). You can find additional information in the SINAMICS S120 Communication function manual (https://support.industry.siemens.com/cs/ww/de/view/109763284/en).
11.4.4
RUN operating state
Response
Cyclic, time-driven, and interrupt-driven program execution are performed in RUN. Addresses in the "Automatic update" process image are automatically updated in each program cycle. You can also find more information in Process images and process image partitions (Page 106).
Execution of the user program
Once the CPU has written the outputs and read the inputs, it executes the cyclic program from the first instruction to the last instruction. Events with a higher priority, such as hardware interrupts, diagnostic interrupts, Motion Control functions and communication, can interrupt the cyclic program flow and prolong the cycle time.
If you have configured a minimum cycle time, the CPU will not end the cycle until this minimum cycle time has expired, even if the user program is completed sooner.
The operating system monitors the execution time of the cyclic program for a configurable upper limit known as the maximum cycle time. You can restart this time monitoring at any point in your program by calling the RE_TRIGR instruction.
If the cyclic program exceeds the maximum cycle time, the operating system will attempt to start the time error OB (OB 80). If the OB does not exist, the CPU ignores the maximum cycle time overshoot. If the cycle monitoring time is exceeded for a second time, for example while the time error OB is being processed, the CPU switches to STOP.
200
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.4 Operating states of the CPU
Additional information You can find additional information on cycle and response times in the Cycle and Response Times (https://support.industry.siemens.com/cs/ww/en/view/59193558) function manual.
11.4.5
Operating state transitions
Operating states and operating state transitions The figure below shows the operating state and operating state transitions:
Figure 11-2 Operating states and operating state transitions
The table below shows the effects of operating state transitions:
Table 11- 1 Operating state transitions
No. Operating state transitions
Effects
POWER ON
STARTUP
After switching on, the CPU switches to "STARTUP" if:
· The hardware configuration and program blocks are consistent.
· Startup type "Warm restart - RUN" is set.
or · Startup type "Warm restart mode before POWER
OFF" is set and the CPU was in RUN mode before POWER OFF.
The CPU clears the non-retentive memory, and resets the content of non-retentive DBs to the start values of the load memory. Retentive memory and retentive DB content are retained.
The 500 most recent entries are retained in the diagnostics buffer.
POWER ON
STOP
After switching on, the CPU switches to "STOP" if:
The CPU clears the non-retentive
·
The hardware configuration and program blocks are inconsistent.
memory, and resets the content of non-retentive DBs to the start values of the load memory. Re-
or · Startup type "No restart" is set.
or · Startup type "Warm restart mode before POWER
tentive memory and retentive DB content are retained.
The 500 most recent entries are retained in the diagnostics buffer.
OFF" is set and the CPU was in STOP mode before
POWER OFF.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
201
Commissioning 11.5 SINAMICS Integrated operating states
No. Operating state transitions
Effects
STOP STARTUP The CPU switches to "STARTUP" mode if:
The CPU clears the non-retentive
·
The hardware configuration and program blocks are consistent.
memory, and resets the content of non-retentive DBs to the start values of the load memory. Re-
· You set the CPU to "RUN" via the programming
tentive memory and retentive DB
device and the mode switch in is the RUN position. content are retained.
or · You move the mode switch from STOP to RUN.
The 500 most recent entries are retained in the diagnostics buffer.
STARTUP STOP The CPU returns to "STOP" in the following cases of These operating mode transitions
"STARTUP":
have no effect on data.
· The CPU detects an error during startup.
· You set the CPU to "STOP" via the programming device or mode switch.
· The CPU executes a STOP command in the Startup OB.
STARTUP RUN The CPU switches to "RUN" in the following cases of
"STARTUP":
· The CPU has initialized the PLC tags.
· The CPU has executed the startup blocks successfully.
RUN STOP
The CPU returns to "STOP" in the following cases of "RUN":
· The CPU detects an error which prevents further work.
· The CPU executes a STOP command in the user program.
· You set the CPU to "STOP" via the programming device or mode switch.
Additional information
You can find information on the behavior of the axes in the different operating states in the S7-1500T Motion Control function manuals (https://support.industry.siemens.com/cs/ww/en/view/109751049).
11.5
SINAMICS Integrated operating states
SINAMICS Integrated operating states
SINAMICS Integrated has various different operating states. SINAMICS Integrated indicates the operating states with status LEDs. You can find further information in the SIMATIC Drive Controller (https://support.industry.siemens.com/cs/ww/en/view/109766666) manual.
202
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.6 Runtime licensing
11.6
Runtime licensing
A number of runtime options requiring licensing are available at the CPU and drive end for the SIMATIC Drive Controller.
Licenses for the CPU CPU applications that require a runtime license include: OPC UA ProDiag Energy Suite Proceed as follows to license the CPU: 1. Double-click the device configuration of the CPU in the project tree. The device configuration is opened in the device view. 2. Select the subordinate tab "General" in the "Properties" Inspector window. 3. Click the arrow next to the "Runtime licenses" section. The Runtime functions available for licensing and their license requirements are displayed. 4. Confirm the purchase of the required licenses.
Note
Licenses must be purchased to use the functions in question. For details, see the licensing terms for the given product.
If the CPU is sub-licensed, compilation of the CPU ends with license errors.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
203
Commissioning 11.6 Runtime licensing
Licenses for the SINAMICS Integrated and S120 control units
Certain functionalities with the SINAMICS S120 drive system require licensing. The licensing procedure for SINAMICS Integrated differs from the licensing procedure for SINAMICS S120 control units.
SINAMICS Integrated (in a process similar to that for runtime licenses for the CPU) is licensed by Engineering by confirming the purchase of the licenses. SINAMICS S120 control units, on the other hand, are licensed over the memory card. The memory card is generally ordered pre-licensed for this purpose.
In the order, specify the type and number of licenses you wish in additional information (Z options). Alternatively, you can also license the memory card with single licenses.
License
Licensing
SINAMICS license Safety Per axis Integrated Extended Func- max. 12 tions
Article number of the single license to be purchased for the SINAMICS Integrated or for SINAMICS S120 control units
6SL3074-0AA10-0AA0
Z option for prelicensing CF cards with SINAMICS S120 control units
Fxx (xx = number of licenses)
SINAMICS license Safety Per axis Integrated Advanced Func- max. 12 tions
6SL3074-0AA20-0AA0
Axx (xx = number of licenses)
SINAMICS Technology
Per SINAMICS 6SL3077-0AA00-5AB0
U03
Extension VIBX Vibration Integrated / CU
extinction
SINAMICS Technology
Per SINAMICS 6SL3077-0AA01-8AB0
U02
Extension RAILCTRL
Integrated / CU
Rail Control/Multi-Carrier
System
SINAMICS Integrated only supports the licensed functions listed.
The SINAMICS Technology Extensions VIBX and RAILCTRL will be available soon for the SIMATIC Drive Controller.
Additional licensed functions and licenses are available for SINAMICS S120 control units.
204
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.6 Runtime licensing
Proceed as follows to license SINAMICS Integrated : 1. In the SINAMICS Integrated project tree, double-click on "Parameter assignment" under
"Automatic speed control". 2. The runtime functions available for licensing and license requirements are displayed in
the function view. 3. Confirm the purchase of the required licenses.
Note Licenses must be purchased to use the function in question. For details, see the licensing terms for the given product. If the SINAMICS Integrated is sub-licensed, this is indicated in the project tree and in the Startdrive working area. The number of licenses purchased is saved in the project. There is no sub-licensing response at the drive end.
Note SINAMICS S120 CU320-2 connected to the SIMATIC Drive Controller are licensed with the CF card of CU320-2. With sub-licensing, there is a sub-licensing response on the CU320-2.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
205
Commissioning 11.7 CPU memory reset
11.7
CPU memory reset
Basics of a memory reset
A memory reset on the CPU is possible only in the STOP mode.
During memory reset, the CPU is changed to a so-called "initial status".
This means that: An existing online connection between your programming device/PC and the CPU is
terminated. The content of the work memory and the retentive and non-retentive data (applies only to
manual memory reset by the user) are deleted. The diagnostics buffer, time of day, and IP address are retained. Subsequently the CPU is initialized with the loaded project data (hardware configuration,
code and data blocks, force jobs). The CPU copies this data from the load memory to the work memory. Result: If you set an IP address in the hardware configuration ("Set IP address in the project"
option) and a SIMATIC Memory Card with the project is in the CPU, this IP address is valid after the memory reset.
Data blocks no longer have current values but rather their configured start values.
Force jobs remain active.
How can I tell if the CPU is performing a memory reset?
The RUN/STOP LED flashes yellow at 2 Hz. After completion the CPU goes into STOP mode, and the RUN/STOP LED is switched on (unchanging yellow).
Result after memory reset
The following table provides an overview of the contents of the memory objects after memory reset.
Table 11- 2 Memory objects after memory reset
Memory object Actual values of the data blocks, instance data blocks, technology objects (except for retentive tags of the TOs) Bit memories, timers and counters Retentive tags of technology objects (e.g. adjustment values of absolute encoders) Diagnostics buffer entries IP addresses Device name Counter readings of the runtime meters Time of day
Contents Initialized
Initialized Retained
Retained Retained Retained Retained Retained
206
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.7 CPU memory reset
11.7.1
Automatic memory reset
Possible cause of automatic memory reset
The CPU executes an automatic memory reset if an error occurs that prevents normal further processing.
Causes for such errors can be:
User program is too large, and can't be completely loaded into work memory.
The project data on the SIMATIC memory card are damaged, for example because a file was deleted.
If you remove or insert the SIMATIC memory card and the backed-up retentive data differs in structure from that of the configuration on the SIMATIC memory card.
11.7.2
Manual memory reset
Reason for manual memory reset CPU memory reset is required to reset the CPU to its "original state".
CPU memory reset CPU memory reset is possible: Using the mode selector Using STEP 7
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
207
Commissioning 11.7 CPU memory reset
Procedure using the mode selector
Note Memory reset Reset to factory settings The procedure described below also corresponds to the procedure for resetting to factory settings: · Selector operation with inserted SIMATIC memory card: CPU executes a memory reset · Selector operation without inserted SIMATIC memory card: CPU executes reset to factory
settings
To perform a memory reset of the CPU using the mode selector, follow these steps: 1. Set the mode selector to the STOP position.
Result: The RUN/STOP LED lights up yellow. 2. Set the mode selector to the MRES position. Hold the selector in this position until the
RUN/STOP LED lights up for the 2nd time and remains continuously lit (this takes three seconds). After this, release the selector. 3. Within the next three seconds, switch the mode selector back to the MRES position, and then back to STOP again. Result: The CPU executes memory reset. You can find information on resetting the CPU to factory settings in CPU reset to factory settings (Page 251).
Procedure using STEP 7 To perform a memory reset of the CPU via STEP 7, follow these steps: 1. Open the "Online Tools" task card of the CPU. 2. Click the "MRES" button in the "CPU control panel" pane. 3. Click "OK" in response to the confirmation prompt. Result: The CPU is set to STOP mode and performs memory reset.
208
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.8 Configuring SIMATIC Drive Controller backup and restore
11.8
Configuring SIMATIC Drive Controller backup and restore
Backing up the software and hardware configuration If you have already downloaded a configuration to the SIMATIC Drive Controller, it is advisable to back it up. Before you test a new configuration, create a backup of the current device version. You can then restore the previous configuration at a later time. You can create as many backups as you want and store a variety of configurations for the SIMATIC Drive Controller.
Scope of the backup The backup includes all data that is needed to restore a particular configuration version of the SIMATIC Drive Controller. The following data is backed up, for example: The content of the SIMATIC memory card including SINAMICS Integrated Retentive memory areas of the CPU, for example, of data blocks, counters, and bit memory Other retentive memory content, for example, IP address parameters The backup is performed with the current values of the CPU. Entries in the diagnostic buffer are not included in the backup. The current time of day of the CPU is not backed up.
SINAMICS Integrated configured
Note If a SINAMICS Integrated is configured, the configuration of the SINAMICS Integrated is also backed by/restored from the SIMATIC memory card. NVRAM data must first have been backed up on the SIMATIC memory card. You can find more information in Backing up, restoring and deleting SINAMICS Integrated NVRAM data (Page 213).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
209
Commissioning 11.8 Configuring SIMATIC Drive Controller backup and restore
11.8.1
Backing up and restoring the CPU configuration
Backup from online device You may want to make changes to your plant over time (for example, add new devices, replace existing devices or adapt the user program). Before you download a changed configuration to the CPU, first use the option "Backup from online device" to create a complete backup of the current device state.
Upload from device (software) With the option "Upload from device (software)", you load the software project data from the CPU to an existing CPU in the project.
Upload device as new station If you are operating a new PG/PC in a plant, the STEP 7 project that was used to create the plant configuration might not be available. In this case, you can use the option "Upload device as new station" to load the device data to a project in your PG/PC.
Snapshot of the actual values You can use the option "Snapshot of the actual values" to back up the actual values of the data blocks so that you can restore the actual values after any changes, if necessary.
210
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.8 Configuring SIMATIC Drive Controller backup and restore
Overview of backup types
The table below shows the backup of CPU data in line with the selected type of backup and its specific characteristics:
Table 11- 3 Types of backup
Current values of all DBs (global and instance data blocks)1 Blocks of the type OB, FC, FB and DB PLC tags (tag names and constant names) Technology objects Hardware configuration Actual values (bit memories, timers and counters)1 Content of the SIMATIC Memory Card Archives, recipes Entries in the diagnostics buffer Current time
Backup possible for failsafe CPUs Backup can be edited Backup possible in operating mode SINAMICS Integrated configuration backup
Backup from online device
Upload from device (software)
--
--
--
--
--
--
--
--
Properties of the backup type
--
STOP
RUN, STOP
3
--
Upload device as new station
--
2
----
RUN, STOP --
1 Only the values of the tags that are set as retentive are saved. 2 Content of DataLogs, Recipes and UserFiles folders 3 SINAMICS NVRAM data must first have been backed up on the SIMATIC Memory Card.
Snapshot of the monitor values
--
--
----
--
----
RUN, STOP --
Note Downloading project data to the CPU
Files with project data to be loaded from the SIMATIC Memory Card to the CPU must not be larger than 2 GB.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
211
Commissioning 11.8 Configuring SIMATIC Drive Controller backup and restore
Additional information
You can find more information on the different backup types in the STEP 7 online help.
For more details on backing up NVRAM data of SINAMICS Integrated, see the section Backing up, restoring and deleting SINAMICS Integrated NVRAM data (Page 213).
Emergency address (emergency IP)
The emergency address (emergency IP address) of a CPU is designed for diagnostic and download functions, for example, if the CPU can no longer be reached via the IP protocol because the wrong project has been loaded. You can find information on the emergency address in the Communication (https://support.industry.siemens.com/cs/ww/en/view/59192925) function manual.
Storing multilingual project texts When you configure a CPU, different categories of texts are generated, for example Object names (names of blocks, modules, tags, etc.) Comments (for blocks, networks, watch tables, etc.) Messages and diagnostic texts Texts are provided by the system (for example diagnostic buffer texts) or are created during configuration (for example messages). In a project, texts exist in one single language or in several languages after a translation process. You can maintain project texts in all language available to you in the project tree (Languages & Resources > Project Texts). The texts created during configuration can be loaded to the CPU. The following texts containing the project data are loaded to the CPU in the chosen languages and are also used by the Web server: Diagnostic buffer texts (not editable) Module state texts (not editable) Message texts with associated text lists Tag comments and step comments for S7 GRAPH and PLC Code Viewer Comments in watch tables The following texts containing the project languages are also loaded to the CPU in the chosen languages, but are not used by the Web server: Comments in tag tables (for tags and constants) Comments in global data blocks Comments of elements in block interfaces of FBs, FCs, DBs and UDTs Network titles in blocks written in LAD, FBD or STL Block comments Network comments Comments of LAD and FBD elements
212
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.8 Configuring SIMATIC Drive Controller backup and restore
The SIMATIC Drive Controller CPU supports the storage of multilingual project texts in up to three different project languages. If the project texts belonging to a specific project language nevertheless exceed the memory space reserved for them, the project cannot be loaded to the CPU. The operation is canceled with a message indicating that not enough free storage space is available. In such a case, take measures to reduce the required storage space, for example by shortening comments.
Note Size of the SIMATIC Memory Card
If the storage space needed to load projects exceeds the storage space available on the SIMATIC Memory Card in use, loading to the CPU is canceled with an error message.
Therefore, make sure that there is enough available storage space on your SIMATIC Memory Card for loading projects.
Please remember when selecting the memory card capacity that the project data of both the CPU and SINAMICS Integrated is stored on the memory card.
You can find information on reading out the storage space capacity utilization of the CPU and the SIMATIC Memory Card in the Structure and Use of the CPU Memory (https://support.industry.siemens.com/cs/ww/en/view/59193101) function manual.
You can find information on parameter assignment of multilingual project texts in STEP 7 in the STEP 7 online help.
11.8.2
Backing up, restoring and deleting SINAMICS Integrated NVRAM data
Backing up the non-volatile memory
The SINAMICS Integrated has a non-volatile memory, NVRAM (Non-Volatile Random Access Memory), for operating data. Data stored in this memory includes the data from the fault buffer, diagnostics buffer and message buffer.
In certain circumstances, for example, a defect or device replacement, this data needs to be backed up. After changing the hardware, you transfer the backup data back to the NVRAM.
p7775 (control unit parameter) is used to execute the following operations:
p7775 = 1 backs up NVRAM data to the memory card.
P7775 = 2 copies the NVRAM data from the memory card to the NVRAM.
p7775 = 3 deletes the data in the NVRAM.
A POWER ON is executed automatically once the data has been successfully deleted. If the operation was successful, p7775 = 0 is automatically set. If the operation was not successful, p7775 displays an error value. You can find further details on error values in the SINAMICS S120/S150 list manual (https://support.industry.siemens.com/cs/ww/en/view/109763271).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
213
Commissioning 11.8 Configuring SIMATIC Drive Controller backup and restore
Backing up NVRAM data p7775 = 1 stores the NVRAM data of the SINAMICS Integrated in the subdirectory "SINAMICS.S7S\USER\SINAMICS\NVRAM\PMEMORY.ACX" on the memory card. The storage operation backs up all data from the NVRAM.
Note Backing up NVRAM data NVRAM data backup to the memory card is also possible during pulse enable. If the drive is moved during NVRAM data transfer, the data backup may not be consistent with the NVRAM data.
Restoring NVRAM data There are two situations that require NVRAM data to be restored. Replacement of the SIMATIC Drive Controller. Targeted NVRAM data restore due to suspected data errors.
Replacement of the SIMATIC Drive Controller: The SINAMICS Integrated detects a replacement based on the serial number of the SIMATIC Drive Controller. Following POWER ON, the NVRAM of the SINAMICS Integrated is cleared and the NVRAM data is then loaded from the SIMATIC memory card.
NVRAM restore: A targeted restore process of the saved NVRAM data is triggered by setting p7775 = 2. The original file is first deleted in NVRAM. If the file "PMEMORY.ACX" is available and has a valid checksum, it is loaded to the NVRAM. The following data is not restored: Operating hours counter Temperature Safety logbook Crash diagnostics data
Deleting NVRAM data p7775 = 3 deletes the NVRAM data. The following data is not deleted in the process: Operating hours counter Temperature Safety logbook Crash diagnostics data
214
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
11.9
Time synchronization
Commissioning 11.9 Time synchronization
11.9.1
Time-of-day synchronization of the CPU
NTP procedure
All CPUs are equipped with an internal clock. The clock always shows the time-of-day with a resolution of 1 millisecond and the date including the day of the week. The time adjustment for daylight saving time is also taken into account.
You can update the time of the CPUs using the NTP procedure with an NTP server. NTP (Network Time Protocol) is a standard for synchronizing clocks.
In NTP mode, the device sends time queries at regular intervals (in client mode) to the NTP server in the subnet (LAN). Based on the replies from the server, the most reliable and most accurate time is calculated and the time of day on the CPU is synchronized. The advantage of this mode is that it allows the time to be synchronized across subnets. You can configure the IP addresses of up to a maximum of four NTP servers. You address the sources for the time-of-day synchronization via IP addresses, for example, an HMI device.
The update interval defines the interval between the time queries (in seconds). The value of the interval ranges between 10 seconds and one day. The NTP procedure generally uses UTC (Universal Time Coordinated). UTC corresponds to GMT (Greenwich Mean Time).
NTP server for the SIMATIC Drive Controller
In STEP 7, you enable time synchronization using the NTP procedure. In STEP 7, you can configure up to four NTP servers for the SIMATIC Drive Controller.
If you have enabled time synchronization via NTP for the CPU, then you can enter the IP addresses of up to four NTP servers in the user program. Use the "T_CONFIG" instruction.
Enabling time synchronization via NTP server Proceed as follows to enable time-of-day synchronization via NTP servers for the CPU:
1. In the Inspector window, navigate to the properties of the CPU to "General" > "PROFINET interface" > "Time-of-day synchronization".
2. Select the "Enable time synchronization via NTP server" option.
Configuring NTP server in STEP 7
Proceed as follows to configure one or more NTP servers for the CPU:
1. In the Inspector window, navigate to the properties of the CPU to "General" > "PROFINET interface" > "Time-of-day synchronization".
2. Enter the IP addresses of up to 4 NTP servers at the parameters "Server 1" to "Server 4".
3. Set the time interval of the time queries at the parameter "Update interval". Set the update interval to between 10 s and 86400 s.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
215
Commissioning 11.9 Time synchronization
Changing the IP addresses of the NTP servers with the "T_CONFIG" instruction For the CPU, you can change the addresses of up to four NTP servers during runtime with the T_CONFIG instruction. Requirement: You have configured at least one NTP server in STEP 7. Even if you have only configured one NTP server, you can save up to four NTP servers in the T_CONFIG instruction. Proceed as follows to change the IP addresses of the NTP servers with the T_CONFIG instruction: 1. Save the IP addresses for the NTP servers in a tag of the data type IF_CONF_NTP. 2. Interconnect the tag of the data type IF_CONF_NTP at the block parameter CONF_DATA of the T_CONFIG instruction. 3. Call the T_CONFIG instruction in the user program. Result: The addresses of the NTP servers from the T_CONFIG instruction are transferred to the CPU. The NTP server addresses configured in STEP 7 are overwritten. You can change the addresses of the NTP servers with T_CONFIG more than once if necessary.
Additional information For additional information on time-of-day synchronization - time synchronization, refer to the following FAQ on the Internet (https://support.industry.siemens.com/cs/de/en/view/86535497).
216
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
11.9.2
Commissioning 11.9 Time synchronization
Time-of-day synchronization of SINAMICS drives
In the factory setting, SINAMICS drives (SINAMICS Integrated, SINAMICS S120) use an operating hours counter. The SINAMICS drive saves interrupts or warnings that occur on the basis of the operating hours. This method does not allow comparable time stamps between multiple drives and the CPU.
If you want comparable time stamps between multiple devices, you need to switch from operating hours counting to UTC format and implement synchronization with the time-of-day master (CPU).
UTC = Universal Time Coordinated; corresponds to GMT (Greenwich Mean Time)
You can then compare the events of all bus nodes that are synchronized with the CPU time.
SINAMICS drives offer the following time-of-day synchronization options:
Synchronization type Simple synchronization Synchronization with ping compensation in non-isochronous communication Synchronization with ping compensation in isochronous communication
Synchronization with Network Time Protocol (NTP) over a PROFINET connection
Accuracy Approx. 100 ms Approx. 10 ms
Notes
Only possible with suitable user program
Approx. 1 ms Approx. 10 ms
Time-of-day synchronization is available as a system functionality for the SIMATIC Drive Controller .
Only for converters on PROFINET IO
(e.g. SINAMICS S120 CU320-2 PN or SINAMICS S120)
Cannot be used for SINAMICS Integrated
With the SIMATIC Drive Controller, time-of-day synchronization of the SINAMICS drives can be implemented automatically by the system or through a user program.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
217
Commissioning 11.9 Time synchronization
Time-of-day synchronization by the system Time-of-day synchronization between CPU and SINAMICS drives is activated in the TIA Portal. By default, time-of-day synchronization is deactivated. Proceed as follows to activate time-of-day synchronization: 1. Select "General" > "Time-of-day synchronization" 2. Select the option "By the system"
Figure 11-3 Time-of-day synchronization
Please note the following in relation to time-of-day synchronization:
An OB MC Servo must be available and be synchronized with the relevant subnet.
Frame 39x must be assigned to OB MC Servo and its process image.
Selecting the "By the system" option switches the drive from operating hours counting to time-of-day synchronization with the controller.
The time-of-day synchronization takes place with isochronous ping compensation.
The first time-of-day synchronization takes place after the SIMATIC Drive Controller has entered the RUN state.
Interrupts and alarms before the first synchronization are saved with the valid time stamp in SINAMICS at those times; all subsequent interrupts and alarms are saved with the synchronized time. The first time-of-day synchronization after synchronization is activated is entered in the diagnostic buffer of the drive with the status of the operating hours counter and the time of day (UTC time, synchronized with SIMATIC Drive Controller).
If you want to implement time-of-day synchronization through a user program, the option "By the system" must be deselected.
218
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.9 Time synchronization
Compensation for runtime deviations To compensate for runtime deviations between SIMATIC and SINAMICS clocks, the time is automatically re-synchronized at regular intervals.
Please note the following response to setting the SINAMICS clock time:
SIMATIC clock time
Response of SINAMICS
Great than time/date on SINAMICS
Time and date are tracked on SINAMICS
Less than time/date on SINAMICS
The clock on SINAMICS is stopped until the "Time/date to be set" is reached.
This response ensures that the order of SINAMICS diagnostic buffer entries is retained following runtime difference compensation.
The SINAMICS clock operates with a resolution of 1 ms. A synchronization accuracy of 1 ms is achieved for all bus clock cycles divisible by 1 ms (for example 1 ms, 2 ms, 3 ms).
For all bus clock cycles that cannot be divided by 1 ms (for example 1.25 ms), a slightly lower synchronization accuracy is achieved in line with the system.
Precise synchronization is only ensured if OB MC Servo is operated in isochronous mode.
Resetting the time
Parameter p3109 is used to define a threshold that has the following effect in the event of negative time jumps:
Negative time jump
Effect on time
Less than threshold value
Time is paused (for details, see "Compensation for runtime deviations")
Greater than threshold value
Clock time is reset
Default setting for the threshold: p3109 = 100 ms
This means that the clock time is reset in the event of negative time jumps of more than 100 ms.
The default value is set so that normal runtime deviations (quartz drift) are below the threshold. If the CPU clock is set back by more than 100 ms, this is interpreted as an "intentional clock time reset" and the clock time of the drives is also set back immediately. The warning A01099 is also output.
If the real-time clock is reset by more than 60 seconds, an entry is also written to the diagnostic buffer in the drive:
Time correction (adjustment) by <correction value> seconds
Following another synchronization operation (negative time jump greater than the threshold), the parameter cu.p3107 has the following values:
p3107[0 ... 1] the UTC time after synchronization
p3107[2 ... 3] the UTC time before synchronization
[0] and [2] are milliseconds; [1] and [3] are days.
Note
The diagnostic buffer entries are not converted to the new time after the clock time changeover.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
219
Commissioning 11.9 Time synchronization
Time-of-day synchronization with the user program Time-of-day synchronization can be implemented through a user program.
Example: SIMATIC S7-1200/S7-1500 and SIMOTION: LAcycCom library for acyclic communication (https://support.industry.siemens.com/cs/ww/en/view/109479553), FB LAcycCom_RTCSinamicsAcyclic
Note If you want to implement time-of-day synchronization for SINAMICS S120 through a user program or the NTP time-of-day synchronization, you need to deselect the option "By the system" for "Time-of-day synchronization". NTP time-of-day synchronization can be used for SINAMICS S210 drives independent of this.
Additional information For additional information, see SINAMICS S120 Communication function manual (https://support.industry.siemens.com/cs/ww/en/view/109763284), "Time-of-day synchronization between controller and converter".
220
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
11.10
Commissioning 11.10 Identification and maintenance data
Identification and maintenance data
11.10.1
Reading out and entering I&M data
I&M data
Identification and maintenance data (I&M data) is data saved on the module as read-only (I data) or read/write (M data) information.
Identification data (I&M0): Manufacturer information about the module that can only be read and is in part also printed on the enclosure of the module, such as article number and serial number.
Maintenance data (I&M1, 2, 3): Plant-dependent information, e.g. installation location. The maintenance data for the SIMATIC Drive Controller is created during configuration and downloaded to the automation system/distributed I/O system.
The SIMATIC Drive Controller supports identification data (I&M0 to I&M3).
The I&M identification data supports you in the following activities:
Checking the plant configuration
Locating hardware changes in a plant
Correcting errors in a plant
Modules can be clearly identified online using the I&M identification data.
You can read out the identification data with STEP 7 (see online help for STEP 7).
Options for reading out I&M data Via the user program Via STEP 7 or HMI devices Via the CPU web server
Procedure for reading I&M data via the user program You have the following options for reading the I&M data of the modules in the user program: Using the RDREC instruction The data record structure for the CPU as well as for distributed modules accessible via PROFINET IO/PROFIBUS DP is described in Record structure for I&M data (Page 223). Using the Get_IM_Data instruction
Further information The description of the instructions can be found in the STEP 7 online help.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
221
Commissioning 11.10 Identification and maintenance data
Procedure for reading I&M data via STEP 7 Requirement: There must be an online connection to the CPU/interface module. To read I&M data using STEP 7, follow these steps: 1. In the project tree, select the CPU/interface module and go to "Online & diagnostics". 2. In the "Diagnostics" folder, select the "General" area.
Procedure for entering maintenance data via STEP 7 STEP 7 assigns a default module name. You can enter the following information: Plant designation (I&M 1) Location identifier (I&M 1) Installation date (I&M 2) Additional information (I&M 3) To enter maintenance data via STEP 7, follow these steps: 1. In the device view of STEP 7, select the CPU/interface module or a module. 2. In the properties under "General", select the "Identification & Maintenance" area and enter the data. During the loading of the hardware configuration, the maintenance data (I&M 1, 2, 3) are also loaded.
Procedure for reading I&M data via the Web server The procedure is described in detail in the Web server Function Manual (https://support.industry.siemens.com/cs/ww/en/view/59193560).
222
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.10 Identification and maintenance data
11.10.2
Record structure for I&M data
Reading I&M records via user program (centrally and distributed via PROFINET IO)
Use Read data record ("RDREC" instruction) to access specific identification data. Under the associated record index you obtain the corresponding part of the identification data.
The records are structured as follows:
Table 11- 4 Basic structure of data records with I&M identification data
Contents Header information BlockType
BlockLength
BlockVersionHigh BlockVersionLow Identification data Identification data (see table below)
Length (bytes)
2
2
1 1 I&M0/Index AFF0H: 54 I&M1/Index AFF1H: 54 I&M2/Index AFF2H: 16 I&M3/Index AFF3H: 54
Coding (hex)
I&M0: 0020H I&M1: 0021H I&M2: 0022H I&M3: 0023H I&M0: 0038H I&M1: 0038H I&M2: 0012H I&M3: 0038H 01 00
-
Table 11- 5 Record structure for I&M identification data
Identification data
Access
Identification data 0: (record index AFF0H)
VendorIDHigh
Read (1 byte)
VendorIDLow
Read (1 byte)
Order_ID
Read (20 bytes)
Example
0000H 002AH 6ES7615-4DF10-0AB0
IM_SERIAL_NUMBER IM_HARDWARE_REVISION
Read (16 bytes) Read (2 bytes) 1
IM_SOFTWARE_REVISION · SWRevisionPrefix
Read (1 byte)
· IM_SWRevision_Functional_ (1 byte) Enhancement
· IM_SWRevision_Bug_Fix
(1 byte)
Firmware version V 0000H - 00FFH
0000H - 00FFH
Explanation
Vendor name (002AH = SIEMENS AG)
Article number of the module (for example, CPU 1504D TF) Serial number (device-specific) corresponds to hardware version (e.g. 1) Provides information about the firmware version of the module (e.g. V1.0.0)
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
223
Commissioning 11.10 Identification and maintenance data
Identification data · IM_SWRevision_Internal_
Change
IM_REVISION_COUNTER
Access (1 byte)
Example 0000H - 00FFH
Read (2 bytes) 0000H
IM_PROFILE_ID
Read (2 bytes)
IM_PROFILE_SPECIFIC_TYPE Read (2 bytes)
IM_VERSION · IM_Version_Major · IM_Version_Minor IM_SUPPORTED
Read (1 byte) (1 byte) Read (2 bytes)
0000 H 0001H 0003H 0101H
000EH
Maintenance data 1: (Record index AFF1H)
IM_TAG_FUNCTION
Read/write (32 bytes)
IM_TAG_LOCATION
Read/write (22 bytes)
Maintenance data 2: (Record index AFF2H)
IM_DATE
Read/write (16 bytes)
Maintenance data 3: (Record index AFF3H)
IM_DESCRIPTOR
Read/write (54 bytes)
YYYY-MM-DD HH:MM -
Explanation
Provides information about parameter changes on the module (not used) Generic Device CPU I/O modules Provides information on the ID data version (0101H = Version 1.1)
provides information about the available identification and maintenance data (I&M1 to I&M3)
Enter an identifier for the module here, that is unique plant-wide. Enter the installation location of the module here.
Enter the installation date of the module here.
Enter a comment about the module here.
Reading I&M records with record 255 (distributed configuration via PROFIBUS)
You can directly access specific identification data by selecting Read data record ("RDREC" instruction).
The modules support standardized access to identification data using DR 255 (index 65000 to 65003). For additional information on the DR 255 data structure, refer to the specifications of the Profile Guidelines Part 1: Identification & Maintenance Functions - Order no.: 3.502, Version 1.2, October 2009. You can find further information on the Internet (https://www.profibus.com/) website of the PROFIBUS user organization.
224
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.10 Identification and maintenance data
11.10.3
Example: Read out firmware version of the CPU with Get_IM_Data
Automation task
You want to check whether the modules in your automation system have the current firmware. You can find the firmware version of the modules in the I&M0 data. The I&M0 data is the basic information for a device. The I&M0 data contains information such as:
Manufacturer ID
Article number and serial number
Hardware and firmware version
To read out the I&M0 data, use the "Get_IM_Data" instruction. You read the I&M0 data of all modules in the user program of the CPU with "Get_IM_Data" instructions and store the I&M data in a data block.
Conditions and parameters
To read out the I&M data of the CPU, use the following block parameters of the "Get_IM_Data" instruction:
LADDR: Enter the hardware identifier of the module at the block parameter "LADDR".
IM_TYPE: Enter the I&M data number (for example "0" for I&M0 data) at the "IM_TYPE" block parameter.
DATA: Area for storing the read I&M data (for example. in a global data block). Store I&M0 data in an area of the data type "IM0_Data".
This example shows how to read out the I&M0 data of a CPU 1504D TF (6ES7615-4DF100AB0) . To read out the I&M0 data of a different module, simply use the hardware identifier of the module at the LADDR parameter.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
225
Commissioning 11.10 Identification and maintenance data
Solution
Proceed as follows to read out the I&M0 data of the CPU:
1. Create a global data block to store the I&M0 data.
2. Create a structure of the data type "IM0_Data" in the global data block. You can assign any name for the structure (in this case "imData").
Figure 11-4 Example: Data block for I&M data
3. Create the "Get_IM_Data" instruction in the user program, for example, in OB 1. 4. Interconnect the "Get_IM_Data" instruction as follows:
Figure 11-5 Example: Reading out I&M0 data
5. Call the "Get_IM_Data" instruction in the user program.
226
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Commissioning 11.11 Shared commissioning of projects
Result The "Get_IM_Data" instruction has stored the I&M0 data in the data block. You can view the I&M0 data online in STEP 7, for example, in the data block with the "Monitor all" button. The CPU in the example is a CPU 1507D TF (6ES7615-7DF10-0AB0) with the firmware version V2.8.
Figure 11-6 Example: I&M0 data of an S7-1500 CPU
11.11
Shared commissioning of projects
Team Engineering
In Team Engineering, several users from various engineering systems work on a project at the same time and access one SIMATIC Drive Controller CPU.
The users can edit separate parts of a master project independently of one another at the same time. When the configuration is loaded to the CPU, the CPU shows changes by the other editors in a synchronization dialog and if possible synchronizes the changes automatically.
Certain online functions can also be executed in parallel from several engineering systems on a shared CPU, for example:
Monitoring blocks on the CPU
Modifying blocks on the CPU
Trace functions
You can find detailed information on the topic of Team Engineering in the STEP 7 online help.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
227
Commissioning 11.11 Shared commissioning of projects
228
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
SIMATIC memory card
12
12.1
SIMATIC memory card Overview
Introduction
The SIMATIC Drive Controller uses the SIMATIC Memory Card of the S7-1500 automation system. The CPU data and the data of the SINAMICS Integrated is stored on the memory card.
The SIMATIC Memory Card is pre-formatted and is compatible with the Windows file system. The memory card is available in different memory sizes and can be used for the following purposes:
Portable data storage medium
CPU program card including SINAMICS Integrated configuration
Firmware update card for CPU and SINAMICS Integrated
Service data card for CPU and SINAMICS Integrated
You can find an overview of the memory card sizes available to order in Accessories/spare parts (Page 281).
Backing up the CPU configuration
When you transfer the user program to the CPU via an online connection, the user program is written to the SIMATIC Memory Card. The SIMATIC Memory Card must be in the card slot of the CPU for this to work.
You can also write the SIMATIC Memory Card in the PG/PC. A commercially available SD card reader is needed to read or write the SIMATIC Memory Card with the PG/PC. This allows you to copy files directly to the SIMATIC Memory Card with Windows Explorer, for example.
Note
The SIMATIC Memory Card is essential for operation of the CPU.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
229
SIMATIC memory card 12.1 SIMATIC memory card Overview
Backing up the drive configuration The SINAMICS Integrated parameter assignment settings are only saved in the volatile memory. If you do not back up the settings on the SIMATIC Memory Card, they will be lost when the SIMATIC Drive Controller is switched off.
Requirements To save the configuration of the SINAMICS Integrated to the SIMATIC Memory Card, you need an online connection to the SINAMICS Integrated. To establish the online connection, you must first load the hardware configuration to the SIMATIC Drive Controller. You can find additional information on this in Downloading a project to the device (Page 195).
Saving online data To save the current project data to the retentive memory of the SIMATIC Memory Card, go to the function view for the active drive and click on the icon (Save data for entire device to retentive memory).
Saving offline data Proceed as follows to save offline data to the SIMATIC Memory Card as well as in the TIA Portal project: 1. Establish an online connection to SINAMICS Integrated . 2. Download the project data to the SINAMICS Integrated.
To do so, click on the icon (Download to device) in the toolbar. 3. Click on the icon in the function view for the active drive (Save data for entire device to
retentive memory). The parameters are saved to the SIMATIC Memory Card retentive memory.
Note The function "Save data for entire device to retentive memory" is also known as "RAM to ROM".
230
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Labeling of the SIMATIC Memory Card
SIMATIC memory card 12.1 SIMATIC memory card Overview
Article number Serial number Production version Memory size Slider for setting write protection:
· Slider up: not write-protected
· Slider down: write-protected
Figure 12-1 Labeling of the SIMATIC Memory Card
Folders and files on the SIMATIC Memory Card The SIMATIC Memory Card can contain the following folders and files:
Table 12- 1 Folder structure
Folder FWUPDATE.S7S SIMATIC.S7S
SINAMICS.S7S
SIMATIC.HMI DataLogs* Recipes* UserFiles*
Backups DUMP.S7S
Description
Firmware update files for CPU and SINAMICS Integrated Project data of the CPU; user program, i.e. all blocks (OBs, FCs, FBs, DBs) and system blocks If SINAMICS Integrated is configured, project data of the SINAMICS Integrated The folder structure under the SINAMICS.S7S folder is based on the structure of a SINAMICS S120 memory card. HMI-related data DataLog files Recipe files You need to manually create the folder "UserFiles" for user data on the memory card. Only files in this folder (*.pdf, *.txt, *.csv, etc.) are also loaded to the TIA Portal project with the "Upload device as new station" function. Files for backup and restore Service data files
* The content of these folders is also loaded to the TIA Portal project with the "Upload device as new station" function.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
231
SIMATIC memory card 12.1 SIMATIC memory card Overview
Table 12- 2 File structure
File type S7_JOB.S7S SIMATIC.HMI\Backup\*.psb SIMATICHMI_Backups_DMS.bin __LOG__ crdinfo.bin *.pdf, *.txt, *.csv, etc.
Description
Job file
Panel backup files
Protected file (required for use of panel backup files in STEP 7)
Protected system file (required for use of card)
Protected system file (required for use of card)
Additional file with different formats that you can also store in folders on the SIMATIC Memory Card If you store the files in the "UserFiles" folder, the files are stored in the STEP 7 project with "Upload device as new station" and can be used, for example, for restoring files in the event of a defective SIMATIC Memory Card.
Note
Supported file/directory names and hierarchy levels on the SIMATIC Memory Card
The following rules apply to file names, directory names and hierarchy levels on the SIMATIC Memory Card:
· Do not use any umlauts (ö, ä, ü, Ö, Ä, Ü) in file and/or directory names.
· Use a maximum of 60 characters for file and/or directory names.
· Use a maximum of 6 hierarchy levels for the directory structure of the SIMATIC Memory Card (e.g: /mountpoint/1/2/3/4/5/6/file.txt). The operating system of the CPU supports directories of no more than 8 levels, where one level is reserved for the mount point and one for the actual file.
Using the serial number for copy protection
You can set up copy protection for CPUs that binds execution of the block to a specific SIMATIC Memory Card. Configuration is carried out in STEP 7 in the properties of the block "Bind to serial number of the SIMATIC Memory Card".
You can then only execute the block if it is on the SIMATIC Memory Card with the specified serial number (see Copy protection (Page 179)).
Note SINAMICS Integrated
You can find information on how to protect settings on SINAMICS Integrated from unauthorized reproduction in the SINAMICS S120 Drive Functions (https://support.industry.siemens.com/cs/ww/den/view/109763287) function manual.
232
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
SIMATIC memory card 12.1 SIMATIC memory card Overview
Removing a SIMATIC Memory Card from the CPU
Note Do not remove the SIMATIC Memory Card while a write operation is in progress. If you remove the memory card from the CPU during a write operation, the content of the memory card may become invalid. The memory areas can then lose their retentivity. You may need to clear the memory card on the programming device and load the program again.
Proceed as follows to remove the SIMATIC Memory Card: Switch off the supply voltage.
Note If there is no write access over the programming device in progress, you can also remove the memory card when the supply voltage is on and the system is in STOP. In this case, first disconnect all communication connections as a precaution.
Inserting the SIMATIC Memory Card in the CPU in STOP state triggers a re-evaluation of the SIMATIC Memory Card. The CPU compares the content of the configuration on the SIMATIC Memory Card with the backed-up retentive data. If the backed-up retentive data matches the data of the configuration on the SIMATIC Memory Card, the retentive data is retained. If the data differs, the CPU automatically performs a memory reset. A memory reset deletes the retentive data on the CPU. After the memory reset, the CPU switches to STOP. Please also note the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/59457183) relating to the removal of the SIMATIC Memory Card.
Note Using the SIMATIC Memory Card as a firmware update card If you use the SIMATIC Memory Card as a firmware update card, removing and inserting the card will not result in the loss of retentive data. You can find more information in SIMATIC Drive Controller firmware update (Page 244).
Removing a SIMATIC Memory Card from Windows computers If you are using the card in a commercially available card reader under Windows, use the "Eject" function before you remove the card from the card reader. If you remove the card without using the "Eject" function, you may lose data.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
233
SIMATIC memory card 12.1 SIMATIC memory card Overview
Deleting content from the SIMATIC Memory Card You have the following options for deleting the content of the SIMATIC Memory Card: Delete files using Windows Explorer Format with STEP 7
Note If you format the card with Windows tools, you will render the SIMATIC Memory Card unusable as a storage medium for a CPU. Deletion of files and folders is permitted, with the exception of the "__LOG__" and "crdinfo.bin" system files. The CPU needs these system files. If you delete the files, you will no longer be able to use the SIMATIC Memory Card with the CPU. If you have deleted the "__LOG__" and "crdinfo.bin" system files, format the SIMATIC Memory Card as described in the following section.
Formatting a SIMATIC Memory Card
Note Formatting the SIMATIC Memory Card Do not format the memory card with Windows tools. Formatting with Windows renders the memory card initially unusable by a CPU. You can find information on how to repair an inconsistent or incorrectly formatted card in the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/69063974).
To free up memory space on your SIMATIC Memory Card, you have the option of formatting the SIMATIC Memory Card. During formatting, the entire contents of the memory card including the project data of the SINAMICS Integrated are deleted. The SIMATIC Memory Card may only be formatted in the CPU. Proceed as follows with the SIMATIC Memory Card inserted:
Formatting with STEP 7: Establish an online connection. Open the online and diagnostics view of the CPU (either from the project context or via
"Accessible devices"). In the dialog window, select "Functions > Format memory card" and then select the
"Format" button. Results: The SIMATIC Memory Card is formatted. The CPU is temporarily unavailable. The project data on the CPU is deleted with the exception of the IP address.
234
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
SIMATIC memory card 12.2 Setting the card type
Replacing the SIMATIC Memory Card without loss of retentive data You can change the SIMATIC Memory Card or use a larger SIMATIC Memory Card without losing the retentive data. When you switch off the CPU, the retentive data is backed up in the retentive memory of the CPU. While the CPU is off, you can remove the memory card and copy its content to a larger memory card. After the CPU is switched on, the data backed up in the CPU when the CPU was switched off is restored.
12.2
Setting the card type
Introduction
You can use the SIMATIC Memory Card as a program card or as a firmware update card.
Procedure using STEP 7
1. To set the card type, insert the SIMATIC Memory Card in the card reader of the programming device.
2. Select the "SIMATIC Card Reader" folder in the project tree.
3. In the properties of the selected SIMATIC Memory Card, specify the card type:
Program card
You use a program card as an external load memory for the SIMATIC Drive Controller. The program card contains the complete user program for the CPU and the configuration of the SINAMICS Integrated. The SIMATIC Drive Controller transfers the user program and drive configuration from the load memory to the work memory. The user program and automatic speed control run in the work memory.
The following folders are created on the SIMATIC Memory Card:
SIMATIC.S7S
SINAMICS.S7S (if a SINAMICS Integrated is configured)
Firmware update card
You can save the firmware of a CPU and SINAMICS Integrated on a SIMATIC Memory Card. This enables you to perform a firmware update with the help of a specially prepared SIMATIC Memory Card.
The following folder is created on the SIMATIC Memory Card: FWUPDATE.S7S
You can find information on how to update the SIMATIC Drive Controller in SIMATIC Drive Controller firmware update (Page 244) You can find information on how to update the firmware of the DRIVE-CLiQ component in DRIVE-CLiQ component firmware update (Page 249).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
235
SIMATIC memory card 12.2 Setting the card type
Service data card You can save service data on a SIMATIC Memory Card. The service data contains the CPU diagnostic buffer and the diagnostic buffer of SINAMICS Integrated. The service data contains much more information on the internal state of the CPU and SINAMICS Integrated. The following folder is created on the SIMATIC Memory Card: DUMP.S7S You can find more information on service data in the section Reading/saving service data (Page 266).
Procedure using the job file Whether the SIMATIC Memory Card is operating as a program card or firmware update card, can also be set using the job file S7_JOB.S7S on the SIMATIC Memory Card. Entry in the job file: PROGRAM: the SIMATIC Memory Card is used as a program card FWUPDATE: the SIMATIC Memory Card is used as a firmware update card Proceed as follows: 1. Open the job file S7_JOB.S7S with an editor. 2. Use the editor to overwrite the PROGRAM entry with FWUPDATE (or vice versa). Do not use any spaces, line breaks or quotation marks. 3. Save the file under the existing file name.
Program card including firmware update files If you want to deliver your project with firmware validated by you, for example, you can store the program data and firmware update files together on the memory card. Your customers then have the option of changing CPU and SINAMICS Integrated to exactly that firmware version.
Note Please note that, depending on the tool used (for example STEP 7, Web server), the firmware update files may also be deleted if you reset to "Program card".
Additional information You can find additional information in the STEP 7 online help.
236
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
SIMATIC memory card 12.3 Data transfer with SIMATIC memory cards
12.3
Data transfer with SIMATIC memory cards
Transferring objects from the project to the SIMATIC Memory Card
While the SIMATIC Memory Card is in the programming device or external card reader, you can transfer the following objects from the project tree (STEP 7) to the SIMATIC Memory Card:
Individual blocks (multiple selection possible)
In this case, the transfer is consistent, i.e. the function takes account of dependencies between blocks through block calls.
CPU folder
In this case, all runtime-related objects such as blocks and the hardware configuration are transferred to the SIMATIC Memory Card, just as with downloading.
Service data
In this case, the service data saved beforehand is transferred to the SIMATIC Memory Card. You can find additional information on this in Reading/saving service data (Page 266).
You have the following options for performing the transfer:
Transfer the objects using drag-and-drop.
Use the "Card Reader/USB memory > Write to memory card" command in the "Project" menu.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
237
SIMATIC memory card 12.3 Data transfer with SIMATIC memory cards
Storing CPU trace recordings on the SIMATIC Memory Card The "Save measurements on device (memory card)" function allows you to save CPU trace recordings on the SIMATIC Memory Card. 1. Select "Traces" -> "Trace" in the project tree. 2. In the working area, select "Configuration" -> "Recording conditions" -> "Measurements in device (memory card)".
Response when number reached The "Deactivate recording" parameter value repeats the measurements until the configured "Number of measurements" is reached. The "Overwrite oldest recording" parameter value replaces the oldest measurement with the latest measurement when the configured "Number of measurements" is reached. Please note, however, that continuously writing data to the SIMATIC Memory Card shortens its service life.
Figure 12-2 Dialog with settings for saving measurements to the memory card in STEP 7
Number of measurements
The CPU supports a maximum of 999 measurements. The CPU writes the Trace recordings to the load memory of the memory card. Meanwhile, the CPU pauses the checking of trigger conditions for the Trace job. Once the CPU has finished saving the Trace recordings, the CPU continues checking the trigger conditions.
NOTICE
Memory required on the SIMATIC Memory Card
If the Trace function "Measurements on device (memory card)" requires more memory than is available on the SIMATIC Memory Card, this can have undesirable effects. Ensure there is always sufficient free memory space to use the "Measurements on device (memory card)" function.
In addition to the "Measurements on device (memory card)" Trace function, other functions, such as storing data logs, use memory space on the SIMATIC Memory Card. Make sure that enough memory space is available for all functions that occupy memory.
238
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
SIMATIC memory card 12.4 Service life of the SIMATIC memory card
You can find additional information on Trace measurements and Trace recordings: In the Using the Trace and Logic Analyzer Function
(http://support.automation.siemens.com/WW/view/en/64897128) function manual In the Web Server (http://support.automation.siemens.com/WW/view/en/59193560)
function manual In the STEP 7 online help
Firmware update using SIMATIC Memory Card You can find information on how to perform a firmware update in SIMATIC Drive Controller firmware update (Page 244).
12.4
Service life of the SIMATIC memory card
Effects on the service life The following factors can affect the service life of SIMATIC Memory Cards: Size of card and number of guaranteed write operations Actual number of write operations The number of physical write operations to the memory blocks of the card is a result of the number of write operations from the application.
Note With the SIMATIC Drive Controller, this includes not only CPU access but also memory card access (write and delete access) by the SINAMICS Integrated.
You can find methods for calculating the service life of a SIMATIC Memory Card in the Structure and use of the CPU memory (https://support.industry.siemens.com/cs/ww/en/view/59193101) function manual and in FAQ (https://support.industry.siemens.com/cs/ww/en/view/109482591) on the Internet.
GetSMCinfo instruction
If the SIMATIC Memory Card is inserted, you can read out the following information in STEP 7 (TIA Portal) with the GetSMCinfo instruction:
Memory size in KB (1 KB = 1024 bytes)
Occupied memory in KB (1 KB = 1024 bytes)
Maintenance information: Percentage of service life used up so far
Configured percentage of service life after which the CPU creates a diagnostics buffer entry and the maintenance LED is activated
You can find additional information on the "GetSMCinfo" instruction in the STEP 7 online help.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
239
SIMATIC memory card 12.4 Service life of the SIMATIC memory card
Additional information You can find additional information on the service life of the SIMATIC Memory Card, on storage capacity utilization, and on the memory areas used in the Structure and Use of the CPU Memory (https://support.industry.siemens.com/cs/ww/en/view/59193101) function manual.
240
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Maintenance
13
13.1
Replacing system components
13.1.1
Replacing a defective SIMATIC Drive Controller
Requirements
The power supply must be switched off before the SIMATIC Drive Controller is removed.
NOTICE
Material damage possible
Install or uninstalling the SIMATIC Drive Controller with the power connected can lead to undefined states in your plant. Your automation system may be damaged as a result. Only install/uninstall the SIMATIC Drive Controller if the power supply is disconnected.
Removing the SIMATIC Drive Controller Proceed as follows to remove the SIMATIC Drive Controller: 1. Switch off the power supply. 2. Open the bottom front cover and remove the SIMATIC Memory Card from the slot. 3. Open the top front cover. 4. Loosen the terminal block for the 24 V power supply. 5. Release the DRIVE-CLiQ connectors to the SINAMICS S120 modules. 6. Release the connectors of the PROFINET interfaces or PROFIBUS interface. 7. Unplug the connectors to the digital inputs and digital outputs at interfaces X122, X132 and X142 8. Separate the connection to the protective conductor. 9. Loosen the fixing screws that are holding the SIMATIC Drive Controller to the cabinet wall.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
241
Maintenance 13.1 Replacing system components
Installing and connecting a new SIMATIC Drive Controller Proceed as follows to install the new SIMATIC Drive Controller: 1. Install the new SIMATIC Drive Controller. 2. Connect the protective conductor to the SIMATIC Drive Controller. 3. Reconnect all connectors you have previously removed. 4. Open the bottom front cover. 5. Insert the SIMATIC Memory Card in the slot. 6. Switch the power supply back on. Following a module replacement, the CPU operates with the configured start values. SINAMICS Integrated detects a module replacement on the basis of the new SIMATIC Drive Controller serial number. Following POWER ON, the NVRAM of the SINAMICS Integrated is cleared and the NVRAM data is then loaded from the memory card.
Note Make sure that the new SIMATIC Drive Controller has the same or a higher main firmware version for CPU and SINAMICS Integrated . If the main SINAMICS firmware version is higher, you will need to upgrade your project to the relevant SINAMICS version to ensure that you can still go online with your project on SINAMICS Integrated.
Note Setting up copy protection For code blocks, you can set up copy protection (Page 179) that binds execution of the blocks to a specific CPU or a specific memory card on the basis of the serial number. In such cases, a substitute controller cannot be used without additional measures being taken.
242
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Maintenance 13.1 Replacing system components
13.1.2
Replacing a defective SIMATIC memory card
Initial situation
Possible error scenario if the SIMATIC Memory Card of a CPU is defective: System diagnostics reports a system error. The CPU has switched to STOP. The RUN/STOP LED is yellow and the ERROR LED is flashing red.
Requirement
Replacement is only possible if you have a suitable replacement card. The replacement card can be a copy of the defective card or a new project card created using engineering.
The new SIMATIC Memory Card must have sufficient memory for the project.
Note
For code blocks, you can set up copy protection (Page 179) that binds execution of the blocks to a specific CPU or a specific memory card on the basis of the serial number. In such cases, a replacement card cannot be used without additional measures being taken.
Procedure
Proceed as follows to replace a defective SIMATIC Memory Card: 1. Remove the defective memory card. 2. Insert the replacement card with the correct configuration.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
243
Maintenance 13.2 SIMATIC Drive Controller firmware update
13.1.3
Replacing a DRIVE-CLiQ component
Replacing a DRIVE-CLiQ component
Defective components in the SINAMICS S120 drive system can be replaced with components with identical or with different article numbers depending on the equivalence level set.
You can find further information in the SINAMICS S120 function manual (https://support.industry.siemens.com/cs/ww/en/view/109763287) under "Component replacement".
Firmware update
DRIVE-CLiQ components are automatically upgraded or downgraded to the component firmware version on the memory card during power up. A module replacement can therefore lead to a firmware update (see DRIVE-CLiQ component firmware update (Page 249)).
13.2
SIMATIC Drive Controller firmware update
Introduction
You update the firmware of the SIMATIC Drive Controller using firmware files. The retentive data is retained after the firmware update on the CPU and SINAMICS Integrated.
Requirement
You have downloaded the file(s) for the firmware update from Siemens Industry Online Support (https://support.industry.siemens.com/cs/ww/en/ps/25715/dl).
Before installing the firmware update, make sure that the SIMATIC Drive Controller and any connected drives are not in use.
Additional requirement for failsafe modules
WARNING Check the firmware version for F-approval When using a new firmware version, always check that the version is approved for use in the module in question. The attachments of the certificate (https://support.industry.siemens.com/cs/ww/en/ps/14675/cert) for SIMATIC Safety specify which firmware version is approved.
244
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Maintenance 13.2 SIMATIC Drive Controller firmware update
Options for the firmware update There are the following options for performing a firmware update: Online in STEP 7 via Online & Diagnostics Online in STEP 7 via accessible devices (PROFINET) Via the SIMATIC Memory Card: for CPU and SINAMICS Integrated Via the integrated Web server Online via the SIMATIC Automation Tool The following table provides an overview of the various options for a firmware update.
Table 13- 1 Overview of firmware update options
Firmware update
Drive Controller CPU
STEP 7, Online & Diagnose
STEP 7, accessible devices
SIMATIC Memory Card
Web server of the CPU
SIMATIC Automation Tool
Drive Controller SINAMICS Integrat-
ed -- ---
Interface module
-
Distributed I/O module
--
Installation of the firmware update
WARNING Impermissible plant states possible Installation of the firmware update causes the CPU to switch to STOP or a distributed interface module to "station failure". STOP or station failure can have an adverse effect on the operation of an online process or a machine. Unexpected operation of a process or a machine can lead to fatal or severe injuries and/or to material damages. Before you install the firmware update, make sure that the SIMATIC Drive Controller is not controlling any active process.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
245
Maintenance 13.2 SIMATIC Drive Controller firmware update
Procedure: online in STEP 7 via Online & diagnostics Requirement: There is an online connection between the CPU/module and PG/PC. Proceed as follows to perform an online firmware update via STEP 7: 1. Select the CPU of the SIMATIC Drive Controller in the project tree. 2. Select the "Online & diagnostics" menu command from the shortcut menu. 3. Select the "Firmware update" group in the "Functions" folder. 4. Click the "Browse" button to select the firmware update files in the "Firmware update" area. 5. Select the matching firmware file. The table in the firmware update area lists all modules for which an update is possible with the selected firmware file. 6. Click the "Run update" button. If the module can interpret the selected file, the file is downloaded to the module. If you must change the CPU mode, STEP 7 prompts you to do so with dialogs.
Updating the firmware The "Run firmware after update" check box is always selected. After a successful loading process the CPU includes imports the firmware and subsequently operates with the new firmware.
Note When a firmware update is interrupted, you need to switch the SIMATIC Drive Controller off/on or remove and insert the relevant module in a distributed I/O station before starting the firmware update again. An update can only be performed for the CPU and not for the SINAMICS Integrated over STEP 7.
Procedure: online in STEP 7 via accessible devices To perform a firmware update online via accessible devices, follow these steps: 1. From the "Online" menu, select the "Accessible devices" menu item. 2. In the Accessible devices dialog, search for the accessible devices for the selected PROFINET interface. 3. To go to a device in the project tree, select the desired device from the list of accessible devices and click the "Show" button. 4. In the project tree, select the "Online & diagnostics" option for the relevant device and perform the firmware update under the category Functions/Firmware Update (CPU, Local modules).
Note An update can only be performed for the CPU and not for the SINAMICS Integrated over accessible devices.
246
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Maintenance 13.2 SIMATIC Drive Controller firmware update
Procedure via the SIMATIC Memory Card With a SIMATIC Memory Card, you can perform an update for CPU and SINAMICS Integrated on the SIMATIC Drive Controller. Separate update files are available for CPU and SINAMICS Integrated. Example for CPU 1504D TF CPU: 6ES7615-4DF10-0AB0 V02.08.00.upd SINAMICS Integrated: 6ES7615-xDS1x-0xxx V05.02.00.upd Proceed as follows perform a firmware update via the SIMATIC Memory Card: 1. Insert a SIMATIC Memory Card in the SD card reader of your PG/PC. 2. To store the update file on the SIMATIC Memory Card, select the SIMATIC Memory Card in the "Card Reader/USB memory" folder in the project tree. 3. Select the "Card Reader/USB memory > Create firmware update memory card" command in the "Project" menu. 4. Use a file selection dialog to navigate to the firmware update file. You can select one or multiple files. You can then also decide whether to delete the content of the SIMATIC Memory Card or add the firmware update files to the SIMATIC Memory Card. 5. Insert the SIMATIC Memory Card with the firmware update files into the CPU. The firmware update begins shortly after the SIMATIC Memory Card has been plugged. 6. Remove the SIMATIC memory card after the firmware update is complete. The RUN LED on the CPU lights up in yellow and the MAINT LED flashes yellow. If you subsequently use the SIMATIC Memory Card as a program card, manually delete the firmware update files, including the job file "S7_JOB.S7S". Alternatively, you can convert the SIMATIC Memory Card to a program card in STEP 7. To do so, specify the required card type in properties in the project tree for the selected SIMATIC Memory Card.
Note Memory size of the SIMATIC Memory Card For a firmware update of the SIMATIC Drive Controller, you need a memory card with at least 256 MB.
You can also copy the update files to the FWUPDATE.S7S directory in Windows Explorer.
Program card including firmware update files You can use the SIMATIC Memory Card as a program card or as a firmware update card. You can find additional information on using the SIMATIC Memory Card as a program card or firmware update card in Setting the card type (Page 235).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
247
Maintenance 13.2 SIMATIC Drive Controller firmware update
Compatibility information Please note the following information on combinations of CPU and SINAMICS Integrated firmware: An update at hotfix level is always possible. Restrictions apply to updates at the level of the main version for the "CPU firmware" and "SINAMICS Integrated firmware" combination. Please note the compatibility information in the relevant publications.
Note If you insert the SIMATIC Memory Card in a SIMATIC Drive Controller with a higher SINAMICS Integrated main firmware version, you need to upgrade your project to the relevant SINAMICS version. You can only go online with your project if the configured SINAMICS version corresponds to the SINAMICS firmware version on the SIMATIC Drive Controller.
SINAMICS Integrated firmware missing or incompatible If there is no SINAMICS Integrated firmware or the firmware is incompatible with the CPU, this is signaled by a red flashing RDY LED (2 Hz) and a red ERROR LED. A corresponding error message is also entered in the diagnostic buffer. If the SIMATIC Memory Card has a SINAMICS Integrated firmware version that is incompatible with the CPU firmware, the SINAMICS Integrated firmware update is rejected. The ERROR LED lights up in red and the MAINT LED in yellow. A corresponding error message is also entered in the diagnostic buffer. An update of the CPU firmware, however, is always possible.
Note Always run an update of the CPU and SINAMICS Integrated firmware main version first for the CPU and then for SINAMICS Integrated. This ensure that an update is possible provided the two versions are compatible. If both update files (PLC and SINAMICS Integrated firmware) are stored on one update card, the update is automatically performed in the order CPU -> SINAMICS Integrated.
Procedure: via the integrated Web server The procedure is described in the Web Server (https://support.industry.siemens.com/cs/ww/en/view/59193560) function manual.
Note You can only perform an update for the CPU and not for the SINAMICS Integrated over the SIMATIC Web server.
248
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Maintenance 13.3 DRIVE-CLiQ component firmware update
Procedure: online via the SIMATIC Automation Tool The procedure is described in the SIMATIC Automation Tool (https://support.industry.siemens.com/cs/ww/en/view/98161300) user manual (included in the SIMATIC Automation Tool).
Note An update can only be performed for the CPU and not for the SINAMICS Integrated using the SIMATIC Automation Tool.
Behavior after the firmware update After the firmware update, check the firmware version of the CPU / SINAMICS Integrated. You can find the firmware version for the CPU or SINAMICS Integrated under "Online & diagnostics". In the working area, the firmware version is under "Diagnostics" > "General".
Additional information For additional information on the topic of firmware update, refer to the STEP 7 online help and the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109767138).
13.3
DRIVE-CLiQ component firmware update
DRIVE-CLiQ components
The SINAMICS Integrated (for SINAMICS S120 control units, the memory card) also contains the firmware for the DRIVE-CLiQ components. With factory setting p7826 = 1, this is automatically transferred from SINAMICS Integrated (for SINAMICS S120 control units from the memory card) to the DRIVE-CLiQ components upon initial commissioning.
The firmware is saved to non-volatile memory in the DRIVE-CLiQ components in the event of an upgrade.
Following a project download or automatic configuration, a firmware update is automatically performed on all connected DRIVE-CLiQ components. This upgrades all DRIVE-CLiQ components to the correct firmware versions.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
249
Maintenance 13.3 DRIVE-CLiQ component firmware update
Update process The update process can take a few minutes. It is indicated by the RDY LED on the relevant component flashing green/red and the RDY LED for SINAMICS Integrated (or on the control unit) flashing yellow at 0.5 Hz. A progress indicator is implemented in parameter p7827. The update is complete when the RDY LED of the SINAMICS Integrated (control unit) stops flashing at 0.5 Hz. Once the upgrade has ended, the RDY LED for the component in question remains continuously lit, provided the upgrade is complete and the new firmware has been activated. For components whose RDY LED is flashing green/red at 2 Hz, you need to perform a POWER OFF/POWER ON to activate the new firmware. For components without LED (for example motors with DRIVE-CLiQ interface), check for relevant warnings on the drive.
Note During activation of the new firmware, it is possible for a component to interrupt cyclic communication. In this case, communication faults occur and must be acknowledged.
You can check the firmware versions of the individual components with parameters. The versions of the DRIVE-CLiQ components and those of SINAMICS Integrated (or of the control unit) may differ.
Note DRIVE-CLiQ components with higher firmware versions are backward compatible and can also operate with DRIVE-CLiQ components with lower firmware versions.
Automatic firmware update
You can use parameter p7826 to influence the response for automatic firmware updates of DRIVE-CLiQ components.
With the automatic firmware update, the firmware version of the DRIVE-CLiQ components is checked against the firmware version of SINAMICS Integrated (or the control unit) and if necessary updated upon each power up. This means power up can take a few minutes longer.
The following settings are possible:
p7826 = 0: Upgrade and downgrade deactivated
p7826 = 1: Upgrade and downgrade (factory setting)
p7826 = 2: upgrade only
A parameter change does not become effective until the next drive system power up.
Where Safety Basic, Extended and/or Advanced Functions are enabled, the system checks whether the parameter for automatic firmware updates p7826 = 1 is set. Otherwise, the following message is output: F01664 (SI CU: No automatic firmware update).
250
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Maintenance 13.4 CPU reset to factory settings
13.4
CPU reset to factory settings
Introduction
"Reset to factory settings" restores the CPU to its delivery state. The function deletes all information that was stored internally on the CPU.
Recommendation:
Switch the CPU to its as-delivered condition if:
You remove a CPU and use it elsewhere with a different program
You store the CPU
When resetting to factory settings, remember that the IP address parameters are also deleted.
Options for resetting a CPU to factory settings To reset the CPU to its delivery state, follow these steps: Using the mode selector Using STEP 7 Using the SIMATIC Automation Tool
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
251
Maintenance 13.4 CPU reset to factory settings
Procedure using the mode selector Make sure that the CPU is in STOP: The RUN/STOP LED lights up in yellow.
Note Reset to factory settings Memory reset The procedure described below corresponds to the procedure for a memory reset: · Selector operation with inserted SIMATIC memory card: CPU executes a memory reset · Selector operation without inserted SIMATIC memory card: CPU executes reset to factory
settings
Restore the factory settings of the CPU as follows: 1. Set the mode selector to the STOP position.
Result: The RUN/STOP LED lights up yellow. 2. Remove the SIMATIC memory card from the CPU. Wait until the RUN/STOP LED stops
flashing. 3. Set the mode selector to the MRES position. Hold the mode selector in this position until
the RUN/STOP LED lights up for the second time and remains lit (this takes three seconds). After this, release the selector. 4. Within the next three seconds, switch the mode selector back to the MRES position, and then back to STOP again. Result: The CPU executes a "Reset to factory settings", during which time the RUN/STOP LED flashes yellow. When the RUN/STOP LED lights up yellow, then the CPU has been reset to factory settings, and is in the STOP mode. The "Reset to factory settings" event is entered into the diagnostics buffer.
Note The IP address of the CPU is also deleted when the CPU is reset to the factory settings through the mode selector.
252
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Maintenance 13.4 CPU reset to factory settings
Procedure using STEP 7 To reset a CPU to factory settings via STEP 7, follow these steps: Make sure that there is an online connection to the CPU. 1. Open the Online and Diagnostics view of the CPU. 2. In the "Functions" folder, select the "Reset to factory settings" group. 3. If you want to keep the IP address, select the "Keep IP address" option button. If you want to delete the IP address, select the "Delete IP address" option button.
Note "Delete IP address" deletes all IP addresses, regardless of how you established the online connection. If there is a SIMATIC memory card inserted, selecting the "Delete IP address" option has the following effect: · The IP addresses are deleted and the CPU is reset to factory settings. · The configuration (including IP address) on the SIMATIC memory card is then loaded
to the CPU. If there is no saved configuration (because the SIMATIC memory card has been cleared or formatted, for example), no new IP address is assigned.
4. Click the "Reset" button. 5. Click "OK" in response to the confirmation prompts. Result: The CPU executes a "Reset to factory settings", during which time the RUN/STOP LED flashes yellow. A yellow RUN/STOP LED indicates that the CPU has been reset to factory settings and is in the STOP operating state. The "Reset to factory settings" event is entered into the diagnostics buffer.
Procedure using the SIMATIC Automation Tool The procedure is described in the SIMATIC Automation Tool (https://support.industry.siemens.com/cs/ww/en/view/98161300) user manual (included in the SIMATIC Automation Tool).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
253
Maintenance 13.5 SINAMICS Integrated reset to factory settings
Result after resetting to factory settings
The following table provides an overview of the contents of the memory objects after the reset to factory settings.
Table 13- 2 Result after resetting to factory settings
Memory object Actual values of the data blocks, instance data blocks Bit memories, timers and counters Retentive tags of technology objects (e.g. adjustment values of absolute encoders) Entries in the diagnostics buffer IP address
Contents Initialized Initialized Initialized
Initialized Depends on the procedure: · Using mode switch: is deleted · Using STEP 7: Depending on the setting of the
"Keep IP address"/"Delete IP address" option buttons
Device name Counter readings of the runtime meters Time of day
Is set to "CPU" Initialized Is set to "00:00:00, 01.01.2012"
If there was a SIMATIC memory card inserted in the CPU prior to the reset to factory settings, the CPU downloads the configuration on the SIMATIC memory card (hardware and software). A configured IP address is then valid again.
Further information
Additional information on "Reset to factory settings" can be found in the Function Manual Structure and use of the CPU memory (https://support.industry.siemens.com/cs/ww/en/view/59193101) in the section on memory areas and retentivity, and in the online help for STEP 7.
13.5
SINAMICS Integrated reset to factory settings
Restoring factory settings In online mode, you can restore the factory settings for SINAMICS Integrated. 1. Establish an online connection to SINAMICS Integrated. 2. Click the icon in the function view for the active drive. The factory settings are restored.
254
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Maintenance 13.6 Fault reactions with failsafe components
13.6
Fault reactions with failsafe components
Safe state (safety concept) The basic principle behind the safety concept is the existence of a safe state for all process variables.
Note For fail-safe input and output modules, this safe state is the value "0".
Fault reactions and startup of the F-system
The safety function requires the output of substitute values (safe state) instead of process values for a failsafe module (passivation of the failsafe module) in the following cases:
When the F-system is started up
If errors are detected during safety-related communication between the F-CPU and the Fmodule via the PROFIsafe safety protocol (communication error)
If F-I/O faults or channel faults are detected (for example wire break, discrepancy error)
Detected faults are written to the diagnostic buffer of the F-CPU and communicated to the safety program in the F-CPU.
F-modules cannot save errors as retentive data. When the system is powered down and then restarted, any faults persisting are detected again during startup. However, you have the option of saving faults in your safety program.
WARNING
Channel faults do not trigger any diagnostic reactions or error handling for channels that have been set to "deactivated" in STEP 7. This applies even if such a channel is affected indirectly by a channel group fault (channel parameter "activated/deactivated").
Remedying faults in the F-system To remedy faults in your F-system, follow the procedure described in IEC 61508-1:2010 section 7.15.2.4 and IEC 61508-2:2010 section 7.6.2.1 e. The following steps must be performed: 1. Diagnostic and repair of the fault 2. Revalidation of the safety function 3. Recording in the service report
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
255
Maintenance 13.6 Fault reactions with failsafe components
Fail-safe value output for F-modules In the case of F-modules with inputs, if there is passivation, the F-system provides substitute values (0) for the safety program instead of the process data pending at the failsafe inputs. In the case of F-modules with outputs, if there is passivation, the F-system transfers substitute values (0) to the failsafe outputs instead of the output values provided by the safety program. The output channels are de-energized. This also applies when the F-CPU goes into STOP mode. The parameter assignment of fail-safe values is not possible. Substitute values are used either for the relevant channel only or for all channels of the relevant failsafe module depending on: The F-system used The type of error that occurred (F-I/O, channel or communication error) The F-module parameter assignment
Reintegration of a fail-safe module The system changes from fail-safe to process values (reintegration of an F-module) either automatically or only after user acknowledgment in the safety program. If channel errors occur, it may be necessary to remove and reinsert the F-module. A detailed listing of faults requiring removal and insertion of the F-module can be found in the section Diagnostic messages of the respective F-module. After reintegration, the following occurs: In the case of an F-module with inputs, the process data pending at the failsafe inputs is made available to the safety program again In the case of an F-module with outputs, the output values provided in the safety program are transferred to the failsafe outputs again
Additional information on passivation and reintegration For additional information on passivation and reintegration of F-I/O, refer to the SIMATIC Safety, Configuring and Programming (https://support.industry.siemens.com/cs/ww/en/view/54110126) manual.
Reaction of the F-module with inputs to communication errors F-modules with inputs respond differently to communication errors compared to other errors. If a communication error is detected, the current process values remain set at the inputs of the F-module. The channels are not passivated. The current process values are passivated in the F-CPU.
256
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Maintenance 13.7 Temperature monitoring
13.7
Temperature monitoring
The SIMATIC Drive Controller has integrated temperature monitoring. Temperature monitoring ensures that the SIMATIC Drive Controller is only operated within the permissible temperature range. This prevents device defects and undefined device behavior.
Function
Temperature sensors monitor the inside temperature. There are temperature thresholds with the following reactions in the event of overtemperature:
Inside temperature Exceeds threshold 1
Exceeds threshold 2
Maintenance event Reaction
CPU overtempera- MAINT LED lights up in yellow.
ture (warning)
An entry is made in the diagnostic buffer.
The diagnostic interrupt OB (OB82) is called.
For details, see Evaluation of interrupts.
CPU overtempera- ERROR LED flashes red.
ture (error)
An entry is made in the diagnostic buffer.
The SIMATIC Drive Controller switches to STOP and a start-up lock is set.
Evaluation of interrupts You evaluate the interrupt and corresponding information with the "RALRM" instruction. Call the "RALRM" instruction in the diagnostic interrupt OB (OB82).
Table 13- 3 Structure of the additional interrupt information in an overtemperature warning
Byte 0 to 1
2 to 3 4
5 6 to 7
Data type WORD
WORD BYTE
BYTE WORD
Meaning
Format identifier for the structure of the following data serving as additional interrupt
information.
The overtemperature information is provided with the format identifier W#16#8000 (channel diagnostics).
Channel number of the component that triggered the interrupt:
W#16# 0C72: PLC hardware
Bits 0 to 2:
Reserved
Bits 3 to 4:
Error type:
0: Reserved
1: Incoming error
2: Outgoing error
3: Outgoing error, other errors present
Bits 5 to 7:
Channel type: Not relevant
Data format: Not relevant
Error type:
W#16#0005: Overtemperature
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
257
Maintenance 13.8 Maintenance and repair
13.8
Maintenance and repair
The SIMATIC Drive Controller is maintenance-free.
Note Repairs to the SIMATIC Drive Controller may only be carried out by the manufacturer.
258
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Test and service functions
14
14.1
Test functions
Introduction
You have the option of testing the operation of your user program on the CPU. You monitor signal states and values of tags, and preassign values to tags so that you can simulate specific situations for program execution.
Note Using test functions
Using test functions affects the program execution time and thus the cycle and response times of the controller to a slight extent (a few milliseconds).
Requirements
There is an online connection to the relevant CPU. An executable user program is available in the CPU.
Test options
Testing with program status Testing with breakpoints Testing with a watch table Testing with a force table Testing with a PLC tag table Testing with a data block editor Testing with the LED flash test Testing with a trace function
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
259
Test and service functions 14.1 Test functions
Testing with program status The program status allows you to monitor the execution of the program. You can display the values of operands and the results of logic operations (RLO). This allows you to detect and fix logical errors in your program.
Note Restrictions with the "Program status" function Monitoring loops can significantly increase the cycle time. The increase in cycle time depends on the following factors: · The number of tags to be monitored · The actual numbers of loops run through
WARNING Testing with program status A test with the "Program status" function can cause serious damage to property or injury to persons if there are functional disturbances or program errors. Make sure that you take appropriate measures to exclude the risk of dangerous states occurring before running a test with the "Program status" function.
260
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Test and service functions 14.1 Test functions
Testing with breakpoints With this test option, you set breakpoints in your program, establish an online connection, and enable the breakpoints on the CPU. You then execute a program from one breakpoint to another. Requirements: Setting breakpoints is possible in the programming language SCL or STL. Testing with breakpoints provides you with the following advantages: Localization of logic errors step by step Simple and quick analysis of complex programs prior to actual commissioning Recording of current values within individual executed loops Use of breakpoints for program validation also possible in SCL/STL networks within LAD/FBD blocks
Note Restriction during testing with breakpoints · When you test with breakpoints, there is a risk of overwriting the cycle time of the CPU. · If you are using technology objects and test them with breakpoints, the CPU switches to
STOP.
Note F-System SIMATIC Safety Setting breakpoints in the standard user program results in errors in the security program: · Sequence of F cycle time monitoring · Error in communication with the fail-safe I/O · Error during safety-oriented CPU-CPU communication · internal CPU error If you still wish to use breakpoints for testing, you must deactivate the safety mode beforehand. This will result in the following errors: · Error in communication with the fail-safe I/O · Error during safety-oriented CPU-CPU communication
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
261
Test and service functions 14.1 Test functions
Testing with watch tables The following functions are available in the watch table: Monitoring of tags With watch tables, you monitor the current values of individual tags in a user program or a CPU on the PG/PC and Web server. Please note the following requirement for displaying the tag values on the Web server: You must specify a symbolic name for the tag in the "Name" column of the watch table. You monitor the following operand areas: Inputs and outputs (process image) and bit memory Contents of data blocks Peripheral inputs and peripheral outputs Timers and counters Modifying tags You use this function to assign fixed values to individual tags in a user program or a CPU on the PG/PC. Modifying is also possible with Test with program status. The following operand areas are modifiable: Inputs and outputs (process image) and bit memory Contents of data blocks Peripheral inputs and peripheral outputs (for example, %I0.0:P, %Q0.0:P) Timers and counters "Enable peripheral outputs" and "Modify now" These two functions enable you to assign fixed values to individual peripheral outputs of a CPU in the STOP mode. You can also use them to check your wiring.
262
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Test and service functions 14.1 Test functions
Testing with a force table The following functions are available in the force table: Monitoring of tags Force tables are used to monitor the actual values of the individual tags of a CPU user program or a CPU - On the PG/PC - On the Web server You monitor the table with or without a trigger condition. You monitor the following tags: Bit memory Contents of data blocks Peripheral inputs Modifying tags You use this function to assign fixed values to individual tags in a user program or a CPU on the PG/PC and Web server. Modifying is also possible with Test with program status. The following tags are modifiable: Bit memory Contents of data blocks Peripheral inputs (e.g. %I0.0:P) Forcing of peripheral inputs and peripheral outputs You can force individual peripheral inputs or peripheral outputs. Peripheral inputs: Forcing of peripheral inputs (for example %I0.0:P) is a "bypassing" of sensors / inputs by the specification of fixed values to the program. The program receives the force value instead of the actual input value (via process image or via direct access). Peripheral outputs: Forcing of peripheral outputs (for example %Q0.0:P) is a "bypassing" of the complete program by the specification of fixed values to the actuators. The advantage of the force table is that you can simulate different test environments and overwrite tags in the CPU with a fixed value. This enables you to intervene in the ongoing process for regulating purposes.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
263
Test and service functions 14.1 Test functions
Difference between modifying and forcing The fundamental difference between the modifying and forcing functions consists in the storage behavior: Modifying: Modifying of tags is an online function and is not stored in the CPU. You can end modifying of tags in the watch table or force table or by terminating the online connection. Forcing: A force job is written to the SIMATIC memory card and is retained after a POWER OFF. You can only end the forcing of peripheral inputs and peripheral outputs in the force table.
Testing with a PLC tag table You can monitor the current data values of tags in the CPU directly in the PLC tag table. To do so, open the PLC tag table and start the monitoring. You can also copy PLC tags to a watch or force table and monitor, modify or force them there.
Testing with a data block editor The data block editor offers different options for monitoring and modifying tags. These functions directly access the actual values of the tags in the online program. Actual values are the current values of tags in the CPU work memory at any moment during program execution. The following functions for monitoring and modifying are available in the database editor. Monitor tags online Modify individual actual values Create a snapshot of the actual values Overwrite actual values with a snapshot
Note Setting data values during commissioning During plant commissioning, you often need to adjust data values to adapt the program to local conditions. The declaration table for data blocks offers some functions for this purpose.
Testing with the LED flash test In many online dialogs, you can perform an LED flash test. This feature is useful if you are not sure which device in the hardware configuration corresponds to the device currently selected in the software. If you click on the "Flash LED" button in STEP 7 under Online & diagnostics (online access), an LED flashes on the device currently selected. The RUN/STOP, ERROR, and MAINT LEDs flash on the CPU. The LEDs flash until you cancel the flash test.
264
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Test and service functions 14.1 Test functions
Testing with CPU Trace
The trace function is used to record the CPU tags, depending on the settable trigger conditions. Examples of tags are the system and user tags of a CPU. Plant states can also be recorded if the drive parameters have been interconnected with CPU tags using relevant frames.
The CPU saves the recordings. If necessary, you can display and evaluate the recordings with STEP 7 or over the Web server. The Trace function can be called from the CPU's folder in the project tree, under "Traces".
Please also see the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/102781176) relevant for Trace functions.
Testing with Drive Trace
You use Drive Trace to records the states of a drive and evaluate them using Startdrive. As the states are recorded in the drive itself (minimum clock 125 µs), Drive Trace is particularly useful for monitoring highly dynamic processes.
For further information, see the Trace function section in the SINAMICS S120 Startdrive (https://support.industry.siemens.com/cs/ww/de/view/109763294/en) commissioning manual
Simulation
With STEP 7 you can run and test the hardware and software of the project in a simulated environment. Start the simulation using the menu command "Online" > "Simulation" > "Start".
Further information
Additional information on the test functions can be found in the STEP 7 online help.
Additional information about testing with trace functions is available in the Function Manual Using the trace and logic analyzer function (https://support.industry.siemens.com/cs/ww/en/view/64897128).
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
265
Test and service functions 14.2 Reading/saving service data
14.2
Reading/saving service data
Service data
The service data contain the CPU diagnostic buffer and the diagnostic buffer of SINAMICS Integrated. It also contains much more information on the internal state of the CPU and SINAMICS Integrated. If a problem occurs with the SIMATIC Drive Controller that cannot be solved with other methods, send the service data to SIEMENS Service & Support. The service data allow Service & Support to analyze problems that have occurred rapidly.
Note
You cannot execute a download to the device while reading the service data of the SIMATIC Drive Controller.
Methods of reading service data You can read service data with:
The FUNCT button on the SIMATIC Drive Controller (über SIMATIC Memory Card)
the web server
STEP 7
the SIMATIC Memory Card
Only use the SIMATIC Memory Card to read service data if you are no longer able to communicate with the CPU via Ethernet. In all other cases, it is preferable to read service data via the Web server or STEP 7.
You do not need to ensure that there is sufficient memory space on the SIMATIC Memory Card before reading the service data.
You can send the diagnostics data straight from the PC.
266
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Test and service functions 14.2 Reading/saving service data
Procedure using the FUNCT button You can save the service data to the SIMATIC Memory Card on the SIMATIC Drive Controller with the FUNCT button. Before reading the data, make sure that there is sufficient memory space on the SIMATIC Memory Card in the SIMATIC Drive Controller. There are two basic methods for reading out service data: Reading out service data in the STOP or RUN state of the SIMATIC Drive Controller Reading out service data during SIMATIC Drive Controller startup Reading service data in STOP or RUN allows you to back up the data quickly and easily on a memory card. If backup is no longer possible (due to a persistent error, for example), you can also back up the service data during startup immediately after switch-on.
FUNCT button
Figure 14-1 SIMATIC Drive Controller FUNCT button
Saving the service data in STOP or RUN state of the SIMATIC Drive Controller 1. To get to the function selection mode, press the FUNCT button for at least three seconds
and then release it. As an aid, the 7-segment display flashes "0". After you release the button, you are in function selection mode. The 7-segment display shows function "1" (Save service data). 2. To confirm the selection, press the FUNCT button within 10 seconds for at least 3 seconds and then release it. The service data is saved. While the function is being executed: The 7-segment display shows "d" (DUMP) The ACT-LED flickers The RUN/STOP LED flashes yellow The ERROR and MAINT LEDs are off After the function has been executed, the 7-segment display shows "0".
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
267
Test and service functions 14.2 Reading/saving service data
Result: The CPU writes the service data to the DUMP.S7S directory on the SIMATIC Memory Card. If an error occurs during saving: The RUN/STOP LED flashes yellow (for STOP) or green (for RUN) depending on the
previous operating state The ERROR LED flashes red In the event of an error, the text file in the DUMP.S7S folder contains information about the error that has occurred.
Note In function selection mode, a short button press < 3 seconds selects the next function (currently only function "1" is available). The last function is "E", If you press the button for at least 3 seconds, the function selection module is exited. The function selection mode is also exited if no key is pressed for 10 seconds.
Reading service data during SIMATIC Drive Controller startup 1. Switch the supply voltage off at the SIMATIC Drive Controller. 2. Press and hold down the FUNCT button. 3. Switch the supply voltage on at the SIMATIC Drive Controller. 4. When the RUN/STOP LED flashes yellow and the ERROR and MAINT LEDs go out,
release the FUNCT button (after about 45 seconds). The save process begins. While the function is active, the 7-segment display shows "d" (DUMP) and the ACT LED flickers. After completion of the saving process, the 7-segment display shows "0". Result: The CPU writes the service data to the DUMP.S7S directory on the SIMATIC Memory Card. If an error occurs during saving, the RUN/STOP LED lights up yellow and the ERROR LED flashes red. In the event of an error, the text file in the DUMP.S7S folder contains information about the error that has occurred.
Note Procedure using the SIMATIC Memory Card Instead of using the FUNCT button, you can also initiate saving the service data using the job file S7_JOB.S7S and the DUMP string. To do so, use an editor to overwrite the PROGRAM entry with the DUMP string. To ensure that the file size is exactly 4 bytes, do not use any spaces/line breaks/quotation marks. If you read out the service data (with the entry String DUMP), the SIMATIC Drive Controller does not start. You must change the entry back to PROGRAM once the function has been executed.
268
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Test and service functions 14.2 Reading/saving service data
Procedure using the Web server Requirement: Access to the Web server has been activated for the interface used. Proceed as follows to read service data using the Web server: 1. Open a Web browser that is suitable for communication with the SIMATIC Drive Controller. You can find additional information in the Web server (https://support.industry.siemens.com/cs/ww/en/view/59193560) function manual. 2. Enter the following address in the address bar of the web browser: https://<CPU IP address>/save_service_data, e.g. https://172.23.15.3/save_service_data 3. The service data page will appear on your screen, with a button for saving the service data.
Figure 14-2 Saving service data via the Web server
4. Save the service data locally on your PC/programming device, by clicking "Save ServiceData".
Result: The data is saved in a .dmp file with the following naming convention: "<Article number> <Serial number> <Time stamp>.dmp". You can change the file name.
Note If you have defined your user page as the Web server homepage, you cannot directly access the service data by entering the IP address of the SIMATIC Drive Controller. For more information on reading out service data via a user-defined page, refer to the Web server (https://support.industry.siemens.com/cs/ww/en/view/59193560) function manual.
Procedure using STEP 7 A description of how to save service data is available under the keyword "Save service data" in STEP 7 online help.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
269
Technical data
15
15.1
Introduction
System data
This section sets out general technical data for a system comprising the SIMATIC Drive Controller and components of the S120 drive system (Booksize). You can find detailed technical data for individual system components in the relevant manuals.
Technical data of the SIMATIC Drive Controller
You can find the technical data for the SIMATIC Drive Controller in the SIMATIC Drive Controller manual.
15.2
Standards and Approvals
Currently valid markings and authorizations
Note Information on the system components The markings and approvals currently valid are printed on the system components.
CE mark
Our products fulfill the requirements and safety objectives of the following EC Directives and comply with the harmonized European standards (EN):
cULus approval Underwriters Laboratories Inc. in accordance with UL 508 (Industrial Control Equipment)
RCM (C-Tick) Declaration of conformity for Australia/New Zealand The device fulfills the requirements of standard AS/NZS CISPR 16.
270
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Technical data 15.3 Electromagnetic compatibility
Korea Certification KC registration number: Please note that this device corresponds to limit value class A in terms of the emission of radio frequency interference. This device can be used in all areas, except residential areas. (A) .
Marking for the Eurasian Customs Union EAC (Eurasian Conformity) Customs Union of Russia, Belarus and Kazakhstan Declaration of conformity with the technical requirements of the Customs Union (TR CU).
Further information The certificates for the markings and approvals can be found on the Internet under Service&Support (https://support.industry.siemens.com/cs/ww/en/ps/25715/cert).
15.3
Electromagnetic compatibility
EMC
Electromagnetic compatibility (EMC) is the ability of an electrical installation to function satisfactorily in its electromagnetic environment without interfering with that environment.
The SIMATIC Drive Controller meets the electromagnetic compatibility requirements for drive systems (PDS Power Drive Systems) as defined in EN 61800-3.
Environments
EN 61800-3 defines different requirements depending on the location of the drive system, referred to as the First and Second Environment.
First Environment locations are defined as residential buildings or locations in which the drive system is directly connected to the public low-voltage power supply network without intermediate transformers.
The Second Environment is understood as all non-residential locations. The main Second Environment locations are industrial zones supplied by the medium voltage network via their own transformers.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
271
Technical data 15.4 Shipping and storage conditions
Categories
The following table shows the possible categories of a system with SIMATIC Drive Controller or SINAMICS S120 components.
Table 15- 1 Category pursuant to EN 61800-3
Category C3 (standard)
C2 (option)
Description
Drive systems for rated voltages <1000 V for use exclusively in the Second Environment.
Fixed drive systems for rated voltages <1000 V for use in the Second Environment. Use in the First Environment is possible if the drive system is installed by a professional.
The system must be configured in accordance with the EC Declaration of Conformity on EMC and the "EMC Design Guidelines" configuration manual.
Further information
For further information, see SINAMICS S120 manuals and the EMC Design Guidelines (https://support.industry.siemens.com/cs/ww/en/view/60612658).
15.4
Shipping and storage conditions
Introduction
The SIMATIC Drive Controller exceeds requirements in terms of shipping and storage conditions pursuant to EN 61800-2.
The following applies under these conditions:
Long-term storage in transport and product packaging: At weather-protected locations that have continuous contact with outside air through openings.
Transport in transport packaging:
In unventilated containers in conditions without protection from the weather.
In the "cold" as in open-air climate.
Air transport in the air-conditioned cargo hold.
272
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Technical data 15.4 Shipping and storage conditions
Transport and storage conditions for devices
Table 15- 2 Ambient conditions during storage and transport
Type of condition
Classification Environmental class Ambient temperature Biological ambient conditions Chemically active environmental conditions Maximum permissible temperature change
Relative humidity Precipitation, rain Water other than rain
Condensation, splash water, icing, salt spray
Permissible range/class
Transport
Storage
EN 60721-3-2
EN 60721-3-1
2K4
1K4
From -40° C to +70° C
From -25° C to +55° C
2B1 1)
1B1 1)
2C2 2)
1C2 2)
Direct interaction in air/air: -40/+30 °C at 95% relative humidity 5 to 95% 6 mm/min 1) 1 m/s and wet loading surfaces 3)
Permitted
30 K/h
Not permitted
Not permit- 1 m/s and wet
ted 4)
loading surfaces 3)
Not permit- Permitted 3) ted 4)
1) Mold growth, slime, rodents, termites and other vermin are not permissible. 2) In marine and weather-resistant transport packaging (container). 3) For storage in transport packaging. 4) For storage in product packaging.
Note Remove the packaging material before installing the components.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
273
Technical data 15.5 Mechanical and climatic ambient conditions
15.5
Mechanical and climatic ambient conditions
Ambient conditions for operation
The SIMATIC Drive Controller is designed for stationary use at weather-protected locations. The documented ambient conditions apply for conditions in the immediate vicinity of the devices and for the cooling air inlet. Compliance with the following standards: EN 60204-1, EN 61800-2, EN 61131-2 and IEC 62477-1.
Table 15- 3 Ambient conditions for operation
Ambient conditions
Areas of application Comments
Climatic ambient conditions
Environmental class
Better than class 3K3
In accordance with EN 60721-3-3
Temperature limits at 0 °C to 55 °C 100% load
From an altitude of 2000 m, the max. ambient temperature is reduced by 7 °C for each additional 1000 m (derating).
Relative humidity
5 to 95% (60% in the presence of corrosive gases and/or dust)
(without condensation)
Condensation; icing; Not permitted drip, spray and splash water
Max. installation altitude
4000 m above sea level
For SINAMICS S120 drive components, see SINAMICS manuals
Barometric pressure 620 to 1060 hPa
Biological, chemical and mechanical influences; pollutants
Biological ambient conditions
Class 3B1 in accordance with EN 60 721-3-3: Mold, mold growth, slime, rodents, termites and other vermin are not permissible.
Mechanically active environmental conditions Class 3S1 in accordance with EN 60721-3-3: Conductive dust is not permissible.
Classification of the mechanical environment
3M3 for machine components 3M1 / 3M2 for components in the control cabinet
Vibratory load
Frequency range: 10 to 150 Hz
Displacement at 10 to 58 Hz: 0.075 mm
Acceleration at 58 to 150 Hz: 1 g
Shock load with shock-sensitive parts
Acceleration: 5 g
Duration of shock: 30 ms
Load: 3 x in each direction
Pollution degree
2 (inside use only)
Type of enclosure
Open type
Overvoltage category
OVC 2
EMC conducted / radiation
Class C2 in accordance with EN 61800-3
274
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Technical data 15.5 Mechanical and climatic ambient conditions
Note The user must consider emitted interference for the complete plant. Particular attention should be paid to cabling. Please contact your sales partner for assistance.
Note In a residential environment, this product can cause high-frequency interference that can make radio interference suppression measures necessary. Have the installation and commissioning with appropriate radio interference suppression measures preformed by qualified personnel.
Protection of the device against environmental factors Protect the device against the following environmental factors: Direct sunlight and heat sources Mechanical vibrations Dust Humidity Strong magnetic fields
Reduction of vibrations If the SIMATIC Drive Controller is exposed to severe shock or vibration, take appropriate measures to reduce the acceleration or amplitude. We recommend installing the SIMATIC Drive Controller on damping materials (for example rubber-bonded-to-metal mounting.)
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
275
Technical data 15.6 Information on insulation tests, protection class, degree of protection and rated voltage
15.6
Information on insulation tests, protection class, degree of protection
and rated voltage
Insulation
The insulation is designed in accordance with the requirements of EN 61131-2: 2007.
Note Galvanic isolation with 707 V DC (Type Test) is tested for modules with 24 V DC supply voltage (SELV/PELV).
Pollution degree
The SIMATIC Drive Controller is designed for pollution degree 2 in accordance with EN 61800-5.
This means that the components must be protected from conductive contamination, for example, by installing them in a control cabinet with degree of protection IP54 pursuant to IEC 60529 or Type 12 pursuant to NEMA 250. If the occurrence of conductive contamination can be ruled out, a correspondingly lower degree of protection for the control cabinet is permitted.
Protection class
Protection class of the SIMATIC Drive Controllers Protection class III
Note
Protection class III equipment may only be connected to SELV or PELV current sources.
Degree of protection The SIMATIC Drive Controller has the degree of protection IP20 in accordance with IEC 60529, open type pursuant to UL/CSA: Protection against contact with standard test finger Protection against foreign objects with diameters in excess of 12.5 mm No protection against water
276
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Technical data 15.6 Information on insulation tests, protection class, degree of protection and rated voltage
Rated voltage for operation
The rated voltages and corresponding tolerances for the power supply to the system components are listed in the following table.
Table 15- 4 Rated voltage of system components
Component/connection
Electronics power supply for SIMATIC Drive Controllers or SINAMICS S120 components
Line connection (power units)
Line frequency
Tolerance range 24 V DC -15/+20% (20.4 to 28.8 V)1 Protective extra low voltage PELV or SELV
3 AC 380 to 480 V ±10 % (-15 % < 1 min) 47 to 63 Hz
1) The supply voltage must not fall below the minimum of 20.4 V (24 V -15%) at the final device in the line-up as malfunctions can otherwise occur. A sufficiently high input voltage must therefore be selected. To prevent the maximum 24 V supply voltage (= 28.8 V) being exceeded, the voltage can be supplied at various different points in the line-up.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
277
Information for users changing from SIMOTION D4x5-2
A
A.1
Information for users changing from SIMOTION D4x5-2
SIMATIC S7-1500 and the SIMOTION Motion Control system are two automation systems whose architecture and therefore programming are fundamentally different. Be aware of these differences when switching between the two automation systems.
Comparison
The comparison below is based largely on the hardware differences between a SIMATIC Drive Controller and a SIMOTION D4x5-2 control unit.
Table A- 1 Differences between SIMOTION D4x5-2 control unit and SIMATIC Drive Controller
Feature
SIMOTION D4x5-2 DP/PN
General
Size
Booksize
(width x height x depth) 50 x 380 x 230 mm
Automation system
SIMOTION
Available
Four performance classes
Performance classes (D425-2 / D435-2 / D445-2 / D455-2)
Failsafe CPU
No
(additional SIMATIC S7 F-CPU required)
Integrated in the drive Yes, on the basis of SINAMICS S120
Safety functions
Engineering
STEP 7 V5.x or TIA Portal with
SIMATIC Drive Controller
Booksize compact 50 x 300 x 226 mm SIMATIC S7-1500 Two performance classes currently available (CPU 1504D and CPU 1507D) Yes (TF-CPU) Yes, on the basis of SINAMICS S120
TIA Portal with
· Controller · Drive
· SCOUT or SCOUT TIA · STARTER integrated in SCOUT
· STEP 7 Professional · Startdrive
Device modeling
Controller and integrated automatic speed
Controller and integrated automatic speed con-
control (SINAMICS Integrated) are modeled as trol (SINAMICS Integrated) are modeled as
ONE device
TWO devices in a TIA Portal group.
Runtime licenses (con- With licensed memory card licenses: axis
trol)
licenses, technology packages, etc.
With engineering (STEP 7 Professional) licenses: OPC UA, etc. (no axis licenses required with SIMATIC)
Interfaces
Option slot
Yes (for TB30 or CBE30-2)
No
PROFINET interface 1 PN IO with IRT: X150 (3 ports, 100 Mbps)
PN IO with IRT: X150 (3 ports, 100 Mbps)
PROFINET interface 2 PN basic communication: X127 (1 port, 1000 Mbps)
PN IO with RT: X160 (1 port, 100 Mbps)
PROFINET interface 3 PN basic communication: X130 (1 port, 1000 Mbps)
PN basic communication: X130 (1 port, 1000 Mbps)
PROFINET interface 4 Optional, CBE30-2 (PN IO with IRT, 4 ports) -
278
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Information for users changing from SIMOTION D4x5-2 A.1 Information for users changing from SIMOTION D4x5-2
Feature
SIMOTION D4x5-2 DP/PN
PROFIBUS interfaces 2 (master/slave)
DRIVE-CLiQ
Onboard I/Os (assigned to the drive)
4 ports (D425-2); 6 ports (D435-2, D445-2, D455-2)
12 DI, 8 DI/DQ
Onboard I/Os
(assigned to the controller)
8 DI/DQ, channel-by-channel as: DI, DQ, measuring input, output cam
SIMATIC Drive Controller 1 (master) Note: PROFIBUS cannot be operated in isochronous mode at the same time as other bus systems on MC Servo. 4 ports
12 DI, 8 DI/DQ
Terminal type and terminal assignment as SIMOTION D4x5-2 8 DI/DQ, channel-by-channel as: DI, DQ, Timer DI (for measuring inputs), Timer DQ (for output cams), Oversampling DI, Oversampling DQ, PWM, Event/period measurement
DQ can be operated as high-speed output
Other interfaces SINAMICS Integrated SINAMICS Integrated
2 x USB (for device updates)
On basis of CU320-2 (no EPOS, no SINAMICS Web server)
CX32-2 Memory card
Yes CF card For firmware and project
Firmware
Firmware is located on the memory card
Terminal type and terminal assignment as SIMOTION D4x5-2 2 x USB (no assigned function)
On basis of CU320-2 (no EPOS, no DCC/DCB, no free function blocks, no SINAMICS Web server) No, expansion with CU320-2 PN SD card (SIMATIC Memory Card) Can be used as program card or firmware update card Firmware is located on the Drive Controller
Runtime licensing Miscellaneous Controls
Display elements
Fan Battery
A common firmware file for controller and SINAMICS Integrated
With licensed memory card
Separate firmware update files for controller and SINAMICS Integrated
With engineering (Startdrive)
2 rotary switches (mode selector; service selector switch) Diagnostics button; reset button
10 LEDs for controller and SINAMICS Integrated PN interfaces with LINK/Activity LED
7-segment display Yes (dual fan for redundancy) Yes (required for buffering date/time > 4 days)
Toggle switch (mode selector)
Function button (for example, for diagnostics) 3 LEDs for controller / 3 LEDs for SINAMICS Integrated PN interfaces with LINK/Activity LED LED for memory card access 7-segment display No No (buffering date/time > 6 weeks)
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
279
Information for users changing from SIMOTION D4x5-2 A.1 Information for users changing from SIMOTION D4x5-2
Feature
SIMOTION D4x5-2 DP/PN
Protection with seal No
Installation
On the cabinet wall with/without spacer
(D445-2 / D455-2: without spacer only with external heat dissipation with cooling fins)
Possible installation positions
Vertical and on its back
SIPLUS variant for use in tough operating conditions, for example, in atmospheres with harmful gases
Yes
(SIMOTION D435-2 DP/PN and D455-2 DP/PN)
SIMATIC Drive Controller Yes, cover can be secured On the cabinet wall with/without spacer (as for CU320-2)
Vertical
No
280
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Accessories/spare parts
B
Accessories
You can order the following accessories for the SIMATIC Drive Controller:
Table B- 1 Accessories
Article SIMATIC Memory Card 4 MB 12 MB 24 MB 256 MB 2 GB 32 GB
Article number
6ES7954-8LC03-0AA0 6ES7954-8LE03-0AA0 6ES7954-8LF03-0AA0 6ES7954-8LL03-0AA0 6ES7954-8LP02-0AA0 6ES7954-8LT03-0AA0
Comments
We recommend a memory card with at least 12 MB if you are using SINAMICS Integrated.
A memory card of at least 256 MB is required for firmware updates.
Accessories for PROFIBUS
Article number
PROFIBUS bus connector RS485
with angled cable outlet (35°)
with screw-type connection,
max. transmission rate 12 Mbps:
· without PG/PC interface · with PG/PC interface
6ES7972-0BA42-0XA0 6ES7972-0BB42-0XA0
PROFIBUS FastConnect bus connector RS485
with angled cable outlet (35°) with insulation displacement connection, max. transmission rate 12 Mbps: · without PG/PC interface · with PG/PC interface
6ES7972-0BA61-0XA0 6ES7972-0BB61-0XA0
Comments -
-
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
281
Accessories for PROFINET (X150/X160 interface)
Article number
RJ45 connector FastConnect for Industrial Ethernet/PROFINET
145° cable outlet (10/100 Mbps):
· 1 pack= 1 item
6GK1901-1BB30-0AA0
· 1 pack= 10 items
6GK1901-1BB30-0AB0
· 1 pack= 50 items
6GK1901-1BB30-0AE0
FastConnect cables for Industrial Ethernet/PROFINET 1)
· IE FC Standard Cable GP 2x2
6XV1840-2AH10
· IE FC Flexible Cable GP 2x2
6XV1870-2B
· IE FC Trailing Cable GP 2x2
6XV1870-2D
· IE FC Trailing Cable 2x2
6XV1840-3AH10
· IE FC Marine Cable 2x2
6XV1840-4AH10
Stripping tool for Industrial Ethernet/PROFINET FastConnect cables
· IE FC Stripping Tool
6GK1901-1GA00
Comments
-
-
-
1) Sold by the meter; max. delivery unit depends on cable type; minimum order quantity 20 m.
282
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Accessories for Industrial Ethernet (interface X130)
Article number
RJ45 FastConnect connector for Industrial Ethernet/PROFINET
180° cable outlet (10/100/1000 Mbps):
· 1 pack= 1 item
6GK1901-1BB11-2AA0
· 1 pack= 10 items
6GK1901-1BB11-2AB0
· 1 pack= 50 items
6GK1901-1BB11-2AE0
FastConnect cables for Industrial Ethernet/PROFINET 1)
· IE FC Standard Cable GP 4x2
6XV1878-2A
· IE FC Flexible Cable GP 4x2
6XV1878-2B
Stripping tool for Industrial Ethernet/PROFINET FastConnect cables
· IE FC Stripping Tool
6GK1901-1GA00
Dust cover blanking plug
for protecting unused DRIVE-CLiQ, Ethernet and PROFINET ports
· Blanking plug (50 units)
6SL3066-4CA00-0AA0
1) Sold by the meter; max. consignment 1000 m; minimum order quantity 20 m.
Comments
-
-
Note
The PROFINET interface X130 supports transmission rates of 10, 100 and 1000 Mbps.
For the maximum transmission rate of 1000 Mbps, use: · 8-wire cables (4x2) · 1000 Mbit 180° FastConnect connectors
You can use the 145° FastConnect connectors for PROFINET interface X130 only with a max. of 100 Mbps.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
283
Spare parts
You can order the following spare parts for the SIMATIC Drive Controller:
Table B- 2 Spare parts
Article Bottom cover Top cover Spacer Terminal kit · 3 x I/O connector for X122/X132/X142 · 1 x 24 V connector for X124 · 5 x DRIVE-CLiQ blanking cover
Article number 6ES7615-0AC10-0AA0 6ES7615-0AC10-1AA0 6SL3064-1BB00-0AA0 6SL3064-2CB00-0AA0
Comments -
284
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Glossary
Accessible devices
Accessible devices are all devices connected to an interface of the programming device / PC that are turned on.
Automatic speed control, for example S120
Automatic speed control covers all elements and components for current and speed control of an electric drive.
Automation system
Programmable logic controller for the open-loop and closed-loop control of process chains in the process engineering industry and in manufacturing technology. The automation system consists of different components and integrated system functions according to the automation task.
Basic positioner (EPOS) function module Converter function for calculating profiles for the position controller.
Baud rate
Baud rate is the symbol or modulation rate in data transmission. For example, if a symbol comprises 4 bits, 9600 bps are transmitted at a modulation rate of 2400 baud. For symbols with only two possible states (binary symbols), the baud rate is the same as the bit rate.
Bit memory
Bit memory is a component of the system memory of the CPU for saving intermediate results. It can be accessed in bit, byte, word or double word mode.
Booksize device
Booksize design of the components of a drive unit, suitable for installation side-by-side. Usually intended for the operation of multiple motors.
Bus
Joint transmission path to which all devices in a fieldbus system are connected; has two defined ends.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
285
Bus cable connector Physical connection between the bus node and the bus cable.
Code block
In SIMATIC S7, a code block is a block that contains a section of the STEP 7 user program. (in contrast to a data block, which contains only data)
Configuration
Systematic arrangement of the individual modules (configuration).
Connection plug Physical connection between device and cable.
Consistent data
Data whose content belongs together and must not be separated is known as consistent data.
Control unit
Converter component with automatic speed control function (e.g. CU320-2). With SIMOTION D, SINUMERIK NCUs and the SIMATIC Drive Controller, the control unit and controller are combined in one device as SINAMICS Integrated.
Controller extension This component scales the number of drive controls in SIMOTION D4x5-2.
Counter
Counters are components of the system memory of the CPU. You can modify the content of the "counter cells" using STEP 7 instructions (e.g. count up/down).
CPU
The CPU contains the operating system and executes the user program. The user program is located on the SIMATIC Memory Card and is processed in the work memory of the CPU. The PROFINET interfaces on the CPU allow simultaneous communication with PROFINET devices, PROFINET controllers, HMI devices, programming devices, other controllers and other systems. The S7-1500 CPUs support operation as an IO controller and I-device. Similarly to the PROFINET interface, the PROFIBUS interface available on some of the S71500 CPUs allows communication with other devices. When the interface is used as PROFIBUS DP interface, the CPU on the PROFIBUS DP also assumes the role of a DP master.
286
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Cross-PLC synchronous operation
This functionality allows you to create a master value source and a synchronous axis on different controllers.
Cycle control point
The cycle control point marks the end of a cycle and the start of the next cycle. The cycle time statistics and monitoring of the configured maximum cycle time start at the cycle control point.
Once the cycle control point has been reached, the CPU writes the process image output to the output modules, reads the state of the inputs in the input modules and then executes the first cyclic OB.
Cycle time
The cycle time represents the time a CPU requires to execute the user program once.
Cyclic interrupt You can find relevant information in the entry "Interrupt, cyclic".
Data block
Data blocks (DBs) are data areas in the user program that contain user data. There are global data blocks, which can be accessed from all code blocks, and instance data blocks, which are assigned to a specific FB call.
Device
A device can send, receive or amplify data via the bus, e.g. IO device via PROFINET IO.
Device names
Before an IO device can be addressed by an IO controller, it must have a device name. This approach was chosen for PROFINET because names are easier to administer than complex IP addresses.
In its delivery state, an IO device has no device name. An IO device can only be addressed by an IO controller for example for transferring configuration data (including the IP address) during startup, or for user data exchange during cyclic operation after it has been assigned a device name with the PG/PC.
Diagnostic buffer
The diagnostic buffer is a battery-backed memory area in the CPU where diagnostic events are stored in their order of occurrence.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
287
Diagnostics
Monitoring functions for the detection, localization, classification, display, and further evaluation of errors, faults, and alarms. They run automatically while the system is in operation. This increases the availability of systems by reducing commissioning times and downtimes.
Diagnostics interrupt You can find relevant information in the entry "Interrupt, diagnostics".
Distributed I/O system
System with I/O modules that are configured on a distributed basis, at a large distance from the CPU controlling them.
DP Distributed I/O
DP master
The DP master is a central component in the PROFIBUS DP data bus that exchanges data with its assigned distributed stations (slaves) in a defined, continually repeating message cycle.
DP slave
An I/O device acting as a passive node in PROFIBUS DP that reads in input information and sends output information to the I/O.
Drive Control Block
Multi-instance block that is selected from a predefined block library in the DCC editor and is used to set the control functionality.
Drive Control Chart (DCC)
Allows the user to implement additional continuous, drive control and math functions using a set of function blocks ("Drive Control Blocks", DCB) in a function block library. These function blocks can be graphically interconnected using a configuration tool ("Drive Control Chart Editor", DCC editor).
Drive object
A drive object is a separate, discrete software functionality with its own parameters and in some cases also its own faults and warnings.
288
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
DRIVE-CLiQ
Abbreviation for Drive Component Link with IQ. This is a SINAMICS drive technology communication system for connecting the various drive components such as control unit, Line Modules, Motor Modules, motors and speed/positioning encoders. In terms of hardware, DRIVE-CLiQ is based on the Industrial Ethernet standard with twisted-pair lines. In addition to the send and receive signals, the +24 V power supply is also provided over the DRIVE-CLiQ line.
Equipotential bonding
Electrical connection (potential equalization conductor) that brings the bodies of electrical equipment and other conductive bodies to the same or almost the same potential, in order to prevent disruptive or dangerous voltages between these bodies.
Failsafe module
Collective name for failsafe inputs and outputs available in SIMATIC S7 for integration into Fsystems.
Firmware update
Upgrade of firmware for the CPU and modules (interface modules, I/O modules etc.), for example after function extensions, to the newest firmware version (update).
Forcing
Preassigning to variables in a user program fixed values that cannot subsequently be modified or overwritten by the program.
Free function blocks (FBLOCKS)
OA application with SINAMICS. Software blocks in a SINAMICS converter that are not active in the factory settings and can be activated and interconnected as required for additional control and math instructions. Free function blocks allow you to implement additional control and math instructions (for example logic functions, math functions, time functions, and storage functions).
Function
A function (FC) is a code block with no static data. A function allows you to pass parameters in the user program. Functions are thus suited for programming frequently recurring complex functions, such as calculations.
Function block
A function block (FB) is a code block with static data. An FB allows you to pass parameters in the user program. Function blocks are thus suited for programming frequently recurring complex functions, such as closed-loop controls or operating mode selection.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
289
Functional ground
The functional ground is a low-impedance current path between electric circuits and ground. It is not intended as a protective measure but rather, for example, for improvement of interference immunity.
Ground
Conductive ground whose electrical potential can be set to zero at any point.
All interconnected, inactive parts of a piece of equipment that cannot accept any dangerous contact voltage, even in the event of a fault.
Ground
Conductive ground whose electrical potential can be set to zero at any point.
All interconnected, inactive parts of a piece of equipment that cannot accept any dangerous contact voltage, even in the event of a fault.
Grounding
Grounding means connecting an electrically conductive part to a grounding electrode by means of a grounding system.
GSD file
The Generic Station Description file contains all properties of a PROFINET or PROFIBUS device that are necessary for its configuration.
Handling system
A device that manages the flow of material from or to a workstation, in other words that is used for handling.
Hardware interrupt You can find relevant information in the entry "Interrupt, process".
I/O modules
All modules that can be operated with a CPU or an interface module.
Identification data
Information that is saved in modules, and that supports the user in reviewing the system configuration and locating hardware changes.
290
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Instance data block
Each call of a function block in the STEP 7 user program is assigned a data block, which is automatically generated. Values of the input, output and in/out parameters, as well as local block data, are stored in the instance data block.
Interrupt
The operating system of the CPU distinguishes between various priority classes that control the execution of the user program. These priority classes include, for example, hardware interrupts. When an interrupt occurs, the operating system automatically calls an assigned organization block. The user can program the desired reaction in the organization block, for example in an FB.
Interrupt, cyclic
The CPU generates a cyclic interrupt periodically within a parameterizable time grid and then processes the corresponding organization block.
Interrupt, hardware
A hardware interrupt is triggered by interrupt-triggering modules due to a certain event in the process. The hardware interrupt is signaled to the CPU. The CPU then processes the assigned organization block according to the priority of this interrupt.
Interrupt, time-delay
The time-delay interrupt is one of the program execution priority classes of SIMATIC S7. It is generated after expiration of a timer started in the user program. The CPU then processes the corresponding organization block.
Interrupt, time-of-day
The time-of-day interrupt is one of the program execution priority classes of SIMATIC S7.. It is generated based on a defined date (or daily) and time (e.g. 9:50 or every hour, every minute). The CPU then processes the corresponding organization block.
Interrupt, update
When it receives an update interrupt, the operating system calls the update interrupt OB. This may happen if you changed a parameter on a slot of a device.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
291
IP address
The IP address is made up of four decimal numbers with a range of values from 0 through 255. The decimal numbers are separated by a dot (for example 192.162.0.0). The IP address consists of the following: Address of the network Address of the device (PROFINET interface of the IO controller/IO device)
IRT, isochronous real time
A synchronized transmission method for the cyclic exchange of I/O data between PROFINET IO devices.
A fixed bandwidth within the send clock is reserved for the I/O data, ensuring that the I/O data is exchanged at equal intervals.
Isochronous mode Signal acquisition, transmission and processing linked to a specified cycle.
Isolated modules
In the case of isolated input/output modules, the reference potentials of the control and load circuits are galvanically isolated, e.g. by means of optical isolators, relays or transformers. Input/output circuits can be connected to common potential.
Line Module
Self-commutated infeed/regenerative feedback unit for generating a controlled DC-link voltage, which decouples connected Motor Modules from the line voltage and thus prevents line voltage fluctuations within the permitted line tolerances from affecting the motor voltage.
Load current supply Supply of the module's input and output electric circuits.
MAC address
Every PROFINET device is assigned a worldwide unique device identification before it leaves the factory. This 6-byte long device identification is the MAC address. Each interface and also each port has its own MAC address.
The MAC address is divided into:
3-byte manufacturer identification
3-byte device identification (consecutive number)
The MAC address is generally shown on the front of the device. Example: 08-00-06-6B-80-C0
292
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Motion Control
Siemens AG product family for drives that control motion. Covers all functions and components for coordination in terms of position and time for machine components in processing machinery.
Motor Module
Converter component (inverter) that provides power for one or two connected motors.
Non-isolated modules
In the case of non-isolated input and output modules, the reference potentials of the control and load circuits are electrically connected.
NTP
The Network Time Protocol (NTP) is a standard for synchronizing clocks in automation systems via Industrial Ethernet. NTP uses the UDP connectionless network protocol.
Onboard I/O
The digital onboard I/O of the SIMATIC Drive Controller is designed for connecting sensors and actuators. Connection is over the interfaces X122, X132 and X142.
The digital inputs and digital outputs at interfaces X122 and X132 are mainly assigned to SINAMICS Integrated. Through configuration (frames 39x), you can, however, also use the digital inputs and digital inputs/outputs (X122/X132) for the CPU. The digital input/outputs at interface X142 are assigned to the CPU of the SIMATIC Drive Controller and that assignment is fixed.
Operating mode
The operating mode is a defined manner in which a device or system is able to execute its function (for example continuous duty, short-time duty or periodic duty).
Operating states Operating states describe the behavior of a single CPU at a specific time.
Organization block
Organization blocks (OBs) form the interface between the operating system of the CPU and the user program. The organization blocks determine the order in which the user program is executed.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
293
Parameter
Tag of a STEP 7 code block:
Tag for setting the behavior of a module (one or more per module). In as-delivered state, every module has an appropriate basic setting, which you can change by configuring in STEP 7. There are static and dynamic parameters
Parameters, dynamic
In contrast to static parameters, you can change dynamic parameters of modules during operation by calling an SFC in the user program, e.g. limit values of an analog input module.
Parameters, static
In contrast to dynamic parameters, you cannot change static parameters of modules with the user program but only by configuring in STEP 7, e.g. input delay of a digital input module.
PELV
Protective Extra Low Voltage = grounded extra low voltage with safe isolation
PLCopen
With these standardized instructions, you can use OPC UA client functions executed in an S7-1500 CPU in your user program.
Pre-wiring
Wiring of the electrical system on the front connector before the front connector is used on the I/O module.
Process image (I/O)
The CPU transfers the values from the input and output modules to this memory area. At the start of the cyclic program the signal states of the input modules are transmitted to the process image of the inputs. At the end of the cyclic program the process image of the outputs is transmitted as signal state to the output modules.
Product version (PV) = Function version (FV)
The product version or function version provides information on the hardware version of the module.
294
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
PROFIBUS
PROcess FIeld BUS, process and fieldbus standard that is specified in IEC 61158 Type 3. It specifies functional, electrical and mechanical characteristics for a bit-serial field bus system.
PROFIBUS supports the protocols DP (= Distributed I/O), FMS (= Fieldbus Message Specification), PA (= Process Automation), or TF (= Technological Functions).
PROFIdrive Integrated
PROFIBUS profile specified by the PNO (PROFIBUS user organization) for speed-controlled and position-controlled drives.
PROFINET
PROcess FIeld NETwork, open Industrial Ethernet standard which further develops PROFIBUS and Industrial Ethernet. A cross-manufacturer communication, automation, and engineering model defined by PROFIBUS International e.V. as an automation standard.
PROFINET IO
Communication concept for the realization of modular, distributed applications within the scope of PROFINET.
PROFINET IO controller
Device used to address connected I/O devices (for example distributed I/O systems). This means that: The IO controller exchanges input and output signals with assigned IO devices. Often, the IO controller is the CPU on which the automation program runs.
PROFINET IO device
Distributed field device that can be assigned to one or more IO controllers (for example distributed I/O system, valve terminals, frequency converters, switches).
Push-in terminal Terminal for the tool-free connection of wires.
Reference potential Potential from which the voltages of the circuits involved are observed and/or measured.
Restart
During a warm restart, all non-retentive bit memory is deleted and non-retentive DB contents are reset to the initial values from load memory. Retentive bit memory and retentive DB contents are retained. Program execution begins at the call of the first startup OB.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
295
Retentivity
A memory area whose content is retained after power failure and after a STOP to RUN transition is retentive. The non-retentive area of the bit memory, timers and counters is reset after power failure and after a STOP to RUN transition.
Row
All the modules attached to a mounting rail.
RT, real-time
A transmission method for the cyclic exchange of I/O data between PROFINET devices. The transmission method guarantees that the I/O data is transferred at deterministic intervals.
Runtime error
Error that occurs during execution of the user program in the automation system (thus not in the process).
SELV
Safety Extra Low Voltage = Safety extra-low voltage
Sensor Module Component for implementing encoder interfaces on DRIVE-CLiQ.
SIMATIC Drive Controller The SIMATIC Drive Controller is a drive-based controller in the SIMATIC S7-1500 range.
SIMATIC Memory Card External memory card for memory expansion in SIMATIC PLC.
SIMATIC Safety Integrated
Coordinated product line, for example safety-related low-voltage switchgears and sensors, failsafe PLC, CNC controllers and variable-speed drives, which can be used in automation and drive technology to achieve the required plant security.
SINAMICS Integrated
SINAMICS Integrated is the integrated automatic speed control for controller platforms on which CPU and SINAMICS automatic speed control are combined in one hardware product for example on the SIMATIC Drive Controller.
296
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
SINAMICS S210 servo drive system
A new servo drive system with five performance classes from 50 to 750 watts. The converter already has an integrated safety function.
SINAMICS Startdrive TIA Portal option package for intuitive integration of SINAMICS drives in automation.
Slave station
A slave may only exchange data with a master after being requested to by the master.
SNMP
SNMP (Simple Network Management Protocol) is the standardized protocol for performing diagnostics on and assigning parameters to the Ethernet network infrastructure.
In the office setting and in automation engineering, devices from a wide range of vendors on the Ethernet support SNMP.
SNMP-based applications can be operated on the same network in parallel to applications with PROFINET.
The scope of supported functions varies depending on the device type. For example a switch has more functions than a CP 1616.
Switch
PROFIBUS is a linear network. The communication nodes are linked by means of a passive cable - the bus.
By contrast, Industrial Ethernet consists of point-to-point connections: Each communication node is directly connected to exactly one communication node.
If a communication node is linked to several communication nodes, this communication node is connected to the port of an active network component - the switch. Additional communication nodes (including switches) can now be connected to the other ports of the switch. The connection between a communication node and the switch remains a point-topoint connection.
A switch thus has the task of regenerating and distributing received signals. The switch "learns" the Ethernet address(es) of a connected PROFINET device or additional switches and only forwards those signals that are intended for the connected PROFINET device or switch.
A switch has a specific number of connections (ports). You connect at most one PROFINET device or additional switch to each port.
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
297
Technology I/Os
Designation for inputs and outputs with hardware-level signal processing, for example for rapid counting, measuring or time-controlled output of signals. Technology I/Os are provided by the ET 200SP/MP technology modules, for example. CPUs with integrated inputs and outputs are also available.
Technology object
A technology object supports you in the configuration and commissioning of a technological function.
The properties of real objects are represented by technology objects in the controller. Real objects include controlled systems and drives.
The technology object contains all data of the real object required for its open-loop or closedloop control, and it signals back status information.
Terminal Module Component for implementing inputs and outputs on DRIVE-CLiQ.
TIA Portal
Totally Integrated Automation Portal
High-performance engineering framework for the most important components of an automation project, such as controller, HMI, drives and distributed I/O. Engineering with TIA Portal offers:
Configuration and programming
Shared data management
Uniform operating concept
The TIA Portal simplifies integrated engineering in all configuration phases of a plant.
Time-delay interrupt You can find relevant information in the entry "Interrupt, delay".
Time-of-day interrupt You can find relevant information in the entry "Interrupt, time".
Timer
Timers are components of the system memory of the CPU. The operating system automatically updates the content of the "timer cells" asynchronously to the user program. STEP 7 instructions define the precise function of the timer cell (for example on-delay) and trigger its execution.
298
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
U/f control
Speed control with output voltage setting on the basis of a V/f characteristic.
Update interrupt You can find relevant information in the entry "Interrupt, update".
User program
SIMATIC differentiates between the operating system of the CPU and user programs. The user program contains all instructions and declarations as well as data for the signal processing that enable a plant or process to be controlled. The user program is assigned to a programmable module (e.g. CPU) and can be structured in smaller units.
Value status
The value status is additional binary information of a digital input or output signal. The value status is entered simultaneously with the process signal in the process image input and provides information about the validity of the signal.
Vector control
Speed control with sublevel closed-loop control of flow and torque.
Warm restart
You can find relevant information in the entry "Restart".
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
299
Index
2
24 V DC supply, 73
A
Access protection with the user program, 174 Accessible devices
Firmware update, 246 Accessories, 281 Addressing, 102
Basics, 102 Approvals, 270
CE, 270 cULus, 270 Asynchronous instructions, 160
C
Cable shield Shield bus, 90 Shield connection, 90
CE approval, 270 Commissioning, 189, 223
First power-on, 194 First power-on, requirements, 194 Identification data, 221, 223 Identification data - record structure, 223 Removing/inserting SIMATIC memory card, 192 Comparison, 278 Components open, 67 Configuration control, 182, 186 Configuration control for IO systems, 182 Configuring, 91, 91 Connecting PROFIBUS DP, 81 PROFINET, 81 Control interface, 131 CPU Backup/restore content, 211 Memory reset, 206 Programming, 157 Reading out service data, 266 Reset to factory settings, 252 cULus approval, 270
D
Data block editor, 264 Degree of protection IP20, 276 Device replacement, 97 Digital inputs/outputs, 82 Display, 231 DRIVE-CLiQ
Firmware update, 249 Rules for wiring, 84
E
Electromagnetic compatibility (EMC), 271 EMC (Electromagnetic compatibility), 271
Disturbances, 272 EMC guidelines, 73 EMERGENCY STOP concept, 72 EMERGENCY STOP devices, 72
F
Factory settings, 252 FAQ
Emergency address, 212 Formatting a SIMATIC Memory Card, 234 Removing a SIMATIC Memory Card, 233 Repairing the SIMATIC Memory Card, 234 FAQs Firmware update, 249 Removing a SIMATIC memory card, 193 Feedback interface, 132 Firmware update, 244 Force table, 263 F-system, 255
H
Hardware Components, 64 Configuration, 64
Hardware requirements, 60
300
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
Index
I
Identification data, 221 Record structure, 223
IEC 60204, 72 Installation, 69 Instructions
GetSMCinfo, 239 Insulation, 276 Interfaces, 52
K
Know-how protection, 175
L
LED flash test, 264 Licensing, 203 Lightning protection, 73 Line voltage, 72 LSINATopo library, 185
M
Maintenance, 258 Firmware update, 244 Reading out service data, 266 Reset to factory settings, 252 Test functions, 259
Maximum cycle time, (Cycle monitoring time), (Cycle monitoring time) Memory reset
Automatic, 207 Basics, 206 Manual, 208 Modular machine, 183 Multiple use IO systems, 182
O
OBs, 158 Event source, 159 Priorities, 158 Priorities and runtime behavior, 160 Queue, 158 Triggers, 158
Openness, 188 Operating conditions, 58 Operating states
Operating state transitions, 201
RUN, 200 Setting startup behavior, 199 STARTUP, 197 STOP, 200 Option handling, (See Configuration control)
P
Parameter assignment, 91 DI operating mode, 111 Digital inputs/outputs, 109 DQ operating mode, 112 Event/period measurement operating mode, 127 Oversampling DI operating mode, 123 Oversampling DQ, 125 PWM operating mode, 128 Timer DI operating mode, 113 Timer DQ operating mode, 117
Password provider, 175 Performance classes, 20 Performance features, 20 PID control, 46 Plant components, 27 PLC tag table, 264 Pollution degree, 276 Potential equalization, 88 Power supply
Safety rules, 72 Process image
Inputs and outputs, 106 Process image partition
Updating in the user program, 107 Project
Adding a SIMATIC Drive Controller, 93 Creating, 93 Display, 93 Grouping, 95 Project tree, 99 PRONETA, 56 Protection, 170, 177, 180, 181 Access levels, 171 Behavior of a password-protected CPU, 174 Copy protection, 180 Know-how protection, 177 Mechanical locking, 181 Protection class, 276 Protection from external electrical effects, 73 Protective conductor connection, 85
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
301
Index
R
rated voltage, 277 Reading out service data, 266 Repair, 258 Requirements
Hardware, 92 Software, 92 Retentive data, 235
S
Scaling, 28 Shipping conditions, 272 SIMATIC Automation Tool, 57 SIMATIC Memory Card, 237
Basics, 229 Possible applications, 237 Repairing, 234 SIMATIC Safety Integrated, 34 SIMOTION D4x5-2, 278 SINAMICS Digital inputs/outputs, 135 SINAMICS Integrated Functions, 50 NVRAM, 213 Operating states, 202 reset to factory settings, 254 Time-of-day synchronization, 217 SINETPLAN, 56 Software requirements, 61 Spare parts, 284 Specific application, 72 Standard machine project, 182 Standards, 270 Storage conditions, 272
T
Team Engineering, 227 Technical specifications
Electromagnetic compatibility (EMC), 271 Shipping and storage conditions, 272 Standards and Approvals, 270 Technology functions, 45 Technology objects, 44 Temperature monitoring, 257 Test functions, 259 Test voltage, 276 TIA Portal Openness, 188 TIA Portal, 55
302
TIA Selection Tool, 56 Time-of-day synchronization, 215 Trace, 265 Trace recordings, 238
W
Web server, 41
SIMATIC Drive Controller System Manual, 11/2019, A5E46600094-AA
A5E48022408-AA
Product Information on the SIMATIC Drive Controller
Product Information
Scope
Scope of validity of the product information
This product information supplements the documentation for the SIMATIC Drive Controller and takes precedence over our system manuals, function manuals and equipment manuals. The statements in this product information are valid for the following SIMATIC Drive Controllers:
SIMATIC Drive Controller
Article number
CPU 1504D TF CPU 1507D TF
6ES7615-4DF10-0AB0 6ES7615-7DF10-0AB0
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
© Siemens AG 2019 - 2020. All rights reserved
A5E48022408-AC, 07/2020
1
Supplementary information on the integrated fail-safe technology CPU
Validity The SIMATIC Drive Controller contains a fail-safe technology CPU from the SIMATIC S7-1500 family and a SINAMICS S120 automatic speed control. The following information applies to the fail-safe technology CPU of the SIMATIC Drive Controller.
Safety and standard mode The fail-safe design of the integrated technology CPU allows you to implement applications for safety systems, e.g. safety solutions for the protection of machines and people. This enables seamless integration of machine safety into the SIMATIC Drive Controller. You use one system for both your standard and fail-safe automation at the same time. You can program the F-CPU of the SIMATIC Drive Controller for safety mode or standard mode. For safety mode, a license for STEP 7 Safety needs to be installed. If no license for STEP 7 Safety is installed, you can only use the SIMATIC Drive Controller in standard mode. Information on the use of the SIMATIC Drive Controller in safety mode is available in the programming and operating manual SIMATIC Safety - Configuring and Programming (https://support.industry.siemens.com/cs/ww/en/view/54110126). Information on the use of the SIMATIC Drive Controller in standard mode is available in the documentation on the SIMATIC Drive Controller: SIMATIC Drive Controller system manual (https://support.industry.siemens.com/cs/ww/en/view/109766665) SIMATIC Drive Controller device manual (https://support.industry.siemens.com/cs/ww/en/view/109766666) You can find the latest firmware for the relevant SIMATIC Drive Controller in the Industry Online Support (https://support.industry.siemens.com/cs/ww/en/view/109773914).
Note Observe any application-specific requirements, for example on mains buffering for power supplies/power packs.
PFDavg, PFH values for F-CPUs
Below you will find the probability of failure values (PFDavg, PFH values) for SIMATIC Drive Controller F-CPUs with a mission time of 20 years and with a repair time of 100 hours:
Operation in low demand mode low demand mode
According to IEC 61508:2010:
PFDavg = Average probability of dangerous failure on demand
Operation in high demand or continuous mode high demand/continuous mode According to IEC 61508:2010: PFH = Average frequency of a dangerous failure [h-1]
PFDavg according to SIL2: < 14E-04
PFDavg according to SIL3: < 2E-05 (with exclusive use of the F-CPU)
PFH according to SIL2: < 14E-09
PFH according to SIL3: < 1E-09 (with exclusive use of the FCPU)
Support of PROFIsafe V2 Interfaces that support PROFINET IO also support PROFIsafe V2.
Restriction with "CREAT_DB" and "DELETE_DB" instructions F-DBs can neither be created nor deleted.
Restriction with "READ_DBL" and "WRIT_DBL" instructions The destination address must not point to an F-DB.
Product Information on the SIMATIC Drive Controller
2
A5E48022408-AC, 07/2020
Restrictions when configuring the retentive behavior of F-data blocks The configuration of the retentive behavior of data blocks is not supported for F-DBs. This means that the actual values of the F-DBs will not be retentive in the event of Power OFF/ON and Restart (STOP-RUN) of the F-CPU. The F-DBs retain the initial values from the load memory. The "Retain" check box is grayed out for all tags in F-DBs.
Use of isochronous mode interrupt (F-)OBs If the sum of the isochronous mode interrupt OBs and the isochronous mode interrupt F-OBs used exceeds the number specified in the technical specifications of the SIMATIC Drive Controller, it is no longer possible to load the standard user program in RUN.
Requirements for power supplies in the event of voltage interruption
Note To ensure adherence to IEC 61131-2 and NAMUR Recommendation NE 21, only use power packs/power supply units (230 V AC 24 V DC) with a mains buffering time of at least 20 ms. Observe the relevant requirements in your product standards (e.g. 30 ms for "burners" pursuant to EN 298) as regards possible voltage interruptions. The latest up-to-date information on PS components is available on the Internet (https://mall.industry.siemens.com).
Web server The following is displayed for the F-CPU on the start page of the Web server: Version of STEP 7 Safety with which the safety program was compiled. Safety mode activated/deactivated Collective F-signature Last fail-safe change The "Fail-safe" tab on the "Diagnostics" Web page provides information about the F-runtime groups: Name of F-runtime group F-runtime groups signature Current cycle time Max. cycle time Current runtime Max. runtime The following is displayed for each F-I/O on the "Module information" web page in the "Fail-safe" tab: F-parameter signature (with addresses) Safety mode F-monitoring time F-source address F-destination address Write access to F-blocks is not permitted.
Note Controlling fail-safe inputs/outputs can result in an F-CPU STOP.
Product Information on the SIMATIC Drive Controller
A5E48022408-AC, 07/2020
3
Information about the technology functions of the CPU
Validity The SIMATIC Drive Controller CPU has technology functions such as a modular S7-1500T CPU. The following information on the technology functions applies to the following function manuals from edition 12/2019 onwards: S7-1500/S7-1500T Motion Control overview V5.0 in TIA Portal V16 S7-1500/S7-1500T Axis functions V5.0 in TIA Portal V16 S7-1500/S7-1500T Measuring input and cam functions V5.0 in TIA Portal V16 S7-1500/S7-1500T Synchronous operation functions V5.0 in TIA Portal V16 S7-1500T Kinematics functions V5.0 in TIA Portal V16
Technology alarms 900-902
Contrary to the documented behavior, the received leading value is detected as invalid with technology alarms 900 and 901 as alarm response. Technology alarm 902 has no alarm response.
The technology alarms 900 and 901 are displayed in the diagnostics buffer.
No.
Response
Error bit Warning bit Restart Diagnos-
tics buffer
Alarm text
900 Set leading value invalid
X2
-
-
X
Invalid leading values.
901 Set leading value invalid
X2
-
-
X
Data transmission error.
902 No response
-
X2
-
-
Leading value accuracy limited.
You can acknowledge a technology alarm 900 with an "MC_Reset" job with "Restart" = FALSE. A restart is not required.
The technology alarm 900 is displayed with the following alarm text:
Alarm text
Solution
Invalid leading values.
Set a higher tolerance time (<TO>.Parameter.ToleranceTimeExternalLeadingValueInvalid).
Check the connection of the interconnected components. Make sure that there is no communication interference.
Make sure that the CPUs involved are in RUN operating state.
The technology alarm 901 is displayed with the following alarm text:
Alarm text
Solution
Data transmission error Invalid version Invalid modulo start value Invalid modulo length Sign-of-life error Invalid position Invalid velocity Invalid acceleration
Check the communication. Check the leading value of the leading axis on the other CPU.
Product Information on the SIMATIC Drive Controller
4
A5E48022408-AC, 07/2020
Behavior of the modulo cycle counter when homing with "MC_Home"
In contrast to the documented behavior, the modulo cycle counter responds during direct relative homing with "Mode" = 1, 12 and with absolute value encoder adjustment (relative) with "Mode" = 6 as with direct absolute homing with "Mode" = 0. The counter values of the modulo cycles change during homing and the absolute encoder adjustment with the listed modes as follows:
Action
Description
Absolute value adjustment with "Mode" = 6
Direct homing relative with "Mode" = 1, 12
The modulo value is the shortest distance between the current and new position. Depending on the distance, the modulo cycle counter can remain the same, increase by 1 or decrease by 1.
The modulo value is the shortest distance between the current and new position. Depending on the distance, the modulo cycle counter can remain the same, increase by 1 or decrease by 1.
Provision of leading value for cross-PLC synchronous operation
Contrary to documentation, the leading value can only be provided by the CPUs S7-1515, S7-1516, 1515SP PC2 T/TF, the technology CPUs, and the SIMATIC Drive Controller.
This behavior is corrected as of firmware version V2.8.3.
Use of the "DX_TEL_SyncOp" data type for cross-PLC synchronous operation
Output and input tags with the "DX_TEL_SyncOp" data type are created for the cross-PLC synchronous operation at the start address of the transfer area. If the data type "DX_TEL_SyncOp" cannot be assigned, it was deleted with the last compilation.
Unused data types are deleted during the compilation. To restore the "DX_TEL_SyncOp" data type, add a V5.0 technology object. After using the data type in the PLC tag, the technology object can be deleted again.
Manually configuring delay times on the leading axis and the virtual following axis
If you increase the delay time of the leading axis in the leading value settings, this results in a reduction of the extrapolation time at the leading axis proxy or to an increase of the interpolation time of the distributed leading value at the leading axis proxy. This reduces the error resulting from extrapolation in the acceleration and delay phases of the leading value.
If the delay time at the leading axis proxy is increased, this results in an increase of the extrapolation time or to a reduction of the interpolation time.
Calculation of the following error
The following error is the difference between the setpoint and actual position based on the connection of the axis at the drive. In contrast to the documented behavior, the transmission times of the setpoints from the controller to the drive and the actual position values from the drive to the controller are not part of the following error. The value of the following error is thus not the same as the difference between the setpoint available in the controller minus the existing actual position.
Performance of the user transformation with dynamic adaptation (S7-1500T)
With the Technology Version V5.0, longer runtimes of the MC-Interpolator [OB92] arise with the user transformation. With longer runtimes of the MC-Interpolator [OB92] the runtimes of the organization blocks with lower priority are extended.
Product Information on the SIMATIC Drive Controller
A5E48022408-AC, 07/2020
5
Maximum number of signals per kinematics trace
You can record a maximum of 16 signals in a kinematics trace. The following table shows how many signals are required for the traces.
Kinematics type
Trace
Required signals
2D
Tool center point (TCP) and kinematics
4
Tool center point (TCP)
2
per OCS
3
2D with orientation
Tool center point (TCP) and kinematics
6
Tool center point (TCP)
3
per OCS
2
3D
Tool center point (TCP) and kinematics
6
Tool center point (TCP)
3
per OCS
6
3D with orientation
Tool center point (TCP) and kinematics
8
Tool center point (TCP)
4
per OCS
4
The more traces you record, the lower the maximum recording duration and the number of measuring points per trace.
Use of blending with kinematics motions (S7-1500T)
Dynamic overruns on the kinematics axes might occur during blending.
Occasionally, a synchronous "point-to-point" motion might not be blended into the next movement. In this case, increase the cycle time of the OB MC servo.
Blending between path motions and synchronous "point-to-point" motions (sPTP motions) (S7-1500T) When using blending from a path motion to an sPTP motion, there might not be any blending or the blending segment could be significantly shortened. When using blending of path motions and sPTP motions, set the path dynamics as high as possible: Jerk Acceleration This behavior is corrected with firmware version V2.8.2.
Changing the override for synchronous "point-to-point" motions (sPTP motion) (S7-1500T) When changing the override, the path of the motion of the tool center point (TCP) of an sPTP motion can change. If the motion contour of the TCP is to be retained, the kinematics proceed with minimal change to the override. This behavior is corrected with firmware version V2.8.2.
User-defined transformation (S7-1500T)
You can configure and apply the user-defined transformation with multiple technology objects kinematics on a PLC.
To differentiate in MC-Transformation [OB98] between the different kinematics technology objects, use the input "KinematicsObject".
Job sequence of the kinematics technology object (S7-1500T)
The motion is not always prepared via all motion jobs in the job sequence.
The CPU determines the number of motion jobs to be considered depending on the type of motion jobs, e. g. sPTP motion, linear motion, circular motion, conveyor tracking.
Product Information on the SIMATIC Drive Controller
6
A5E48022408-AC, 07/2020
Using the Motion Control instruction "MC_TrackConveyorBelt" (S7-1500T)
The use of the Motion Control instruction "MC_TrackConveyorBelt" is possible as of firmware version V2.8.2.
If the Motion Control instruction "MC_TrackConveyorBelt" is called multiple times with an FB instance and with different input parameters, the parameter "Done" is occasionally not set to TRUE.
Use different instances for changing input parameters.
If you quickly order two "MC_TrackConveyorBelt" jobs on an FB instance in a row, the parameter "Done" is occasionally not set.
After a "MC_TrackConveyorBelt" job, wait at least two motion control application cycles until you order the next job.
Mode of operation of the conveyor tracking with firmware version V2.8.2 (S7-1500T)
Contrary to the documentation, the following behavior applies as of firmware version V2.8.2: Dynamic adaptation cannot be used at any phase of the conveyor tracking. A direct transition from one tracked OCS into another tracked OCS is not possible. First transmit an instruction in the
WCS or a non-tracked OCS to complete the process of the kinematics with the tracked OCS. When the instruction in the WCS or a non-tracked OCS is completed, the tracking of the OCS at the conveyor is automatically completed ("TrackingState" = 0). To move the kinematics to the first position in the tracked OCS ("TrackingState" changes from 1 to 2) or to complete the process of the kinematics in the tracked OS ("TrackingState" changes from 3 to 4) use the instructions "MC_MoveLinearAbsolute" or "MC_MoveCircularAbsolute". The instruction "MC_SetOCSFrame" can only be applied on an OCS with "TrackingState" = 0. If a motion of the kinematics is completed in the tracked OCS through a motion job in the WCS or a non-tracked OCS, this is shown in the variable "TrackingState" = 4. When the motion job is completed, the "TrackingState" changes to 0 and the OCS is not included with the product position anymore. An instruction "MC_GroupStop" completes the tracking of the OCS with "TrackingState" = 2 and 4. The tracking of the OCS with conveyor motion is not recorded in the kinematics trace. The traversing of the TCP with the tracked OCS is recorded. Permitted values for "InitialObjectPosition": "InitialObjectPosition.x" <=> 0.0 "InitialObjectPosition.y" = 0.0 "InitialObjectPosition.z" = 0.0 "InitialObjectPosition.a" = 0.0 "InitialObjectPosition.b" = 0.0 "InitialObjectPosition.c" = 0.0
Blending behavior
Blending is possible for the following motions:
In a motion job for moving into the first position in the tracked OCS
In motions within the tracked OCS
From a motion job that exits tracking at the conveyor to the subsequent motion job, if the sequence of instructions in the job sequence is as follows: 1. Moving in a tracked OCS 2. Assigning other OCS to the product position of another conveyor 3. Exiting conveyor tracking by moving into a position in WCS or in a non-tracked OCS 4. Moving into a position in the newly tracked OCS The jobs 2, 3 and 4 must already be in the job sequence as long as job 1 is still being performed.
Blending is not possible for the following motions:
In a motion job that completes the tracking at the conveyor
From a motion job for moving into the first position in the tracked OCS into the subsequent motion job in the tracked OCS
Product Information on the SIMATIC Drive Controller
A5E48022408-AC, 07/2020
7
MC_TrackConveyorBelt V5: Function chart
Product Information on the SIMATIC Drive Controller
8
A5E48022408-AC, 07/2020
Product Information on the SIMATIC Drive Controller
A5E48022408-AC, 07/2020
9
Section A
A "MC_MeasuringInput" job (A1) is used to record the position of a product at the time . The recorded position "MV" is
reported via "Done_1" and written into the variable "CONV_POS.x".
With a "MC_TrackConveyorBelt" job (A2), an OCS is assigned at the time via the parameter "ConveyorBelt" to a leading-
value capable technology object, which represents the conveyor belt. The OCS is assigned to a known conveyor position to this purpose. The OCS is assigned with the OCS frame and the product position to a product on the conveyor.
The "ObjectPosition" is calculated from the conveyor position minus the "InitialObjectPosition". In the present case the
"InitialObjectPosition" is the position of the conveyor ("MV") at the time .
The status of conveyor tracking ("TrackingState") changes from 0 to 1.
Via a "MC_MoveLinearAbsolute" job at the time the kinematics is moved to the position specified in the OCS. When the
kinematics moves to the product position, the status of conveyor tracking changes from 1 to 2. When the kinematics follow the product position, the status of conveyor tracking changes from 2 to 3.
Section B
To complete the process of the kinematics with the tracked OCS, a "MC_MoveLinearAbsolute" job is started in the WCS at
the time . When the kinematics moves to the position in WCS, the status of conveyor tracking changes from 3 to 4.
The completed conveyor tracking is reported via "Done_4" and the "TrackingState" changes to 0. The OCS is not tracked with the conveyor position anymore.
Technology alarm 802 (S7-1500T)
The technology alarm 802 has been extended with the following alarm texts:
Alarm no. and text
Solution
Calculation of the geometry element not possible. 8 Moving on the tracked OCS is not possible through the
command parameter assignment.
9 Moving of the kinematics on the tracked OCS cannot be completed through the command parameter assignment.
10 A change of the coordinate system is not possible at a moved OCS.
11 An sPTP motion is not possible with a moved OCS. 12 The active coordinate system cannot be changed with a
moved OCS.
13 The dynamic values are not correct.
· Use the instructions "MC_MoveLinearAbsolute" or "MC_MoveCircularAbsolute".
· At "MC_MoveCircularAbsolute" use the "CircMode" = 0.
· Switch off the dynamic adaptation.
· Use a route > 0 for the instructions. An orientation motion without kinematics motion is not possible.
· Use the instructions "MC_MoveLinearAbsolute" or "MC_MoveCircularAbsolute".
· At "MC_MoveCircularAbsolute" use the "CircMode" = 0.
· Switch off the dynamic adaptation.
· Use a route > 0 for the instructions. An orientation motion without kinematics motion is not possible.
It is not possible to automatically change with a motion command from one tracked OCS into another tracked OCS.
A "MC_MoveDirectRelative" or "MC_MoveDirectAbsolute" instruction cannot be used in a moved OCS.
The following instructions can only be performed with the status "TrackingState" = 0 or 1:
· "MC_DefineTool"
· "MC_SetTool"
· "MC_TrackConveyorBelt"
The instruction "MC_SetOCSFrame" can only be performed with the status "TrackingState" = 0.
Check the calculation of the speeds and accelerations in the user transformation in the MC-Transformation [OB98].
Product Information on the SIMATIC Drive Controller
10
A5E48022408-AC, 07/2020
Technology alarms 810 and 811 (S7-1500T)
Contrary to the documentation, bit 7 "ConveyorFault" (error in conveyor tracking) is set in <TO>.ErrorWord when alarms 810 and 811 are triggered.
Error detection (Kinematics) (S7-1500T)
The list of error messages has been extended with the following "ErrorIDs":
ErrorID
Description
Solution
16#80D7 16#80DA
The job on the kinematics transformation cannot be executed.
Invalid value parameter "InitialObjectPosition"
A "MC_KinematicsTransformation" or "MC_InverseKinematicsTransformation" instruction cannot perform a calculation, when the kinematics moves a tracked OCS or the moving of a tracked OCS is completed. Wait until the current job for the conveyor tracking has been completed and restart the job for the kinematics transformation.
Enter permissible values for the frame at the parameter "InitialObjectPosition".
Notes on English and Chinese documentation (S7-1500T)
Contrary to the documentation, the leading value during synchronization in advanced and subsynchronization via leading value distance must not reverse. This applies to gearing with "MC_GearInPos" and camming with "MC_CamIn".
Product Information on the SIMATIC Drive Controller
A5E48022408-AC, 07/2020
11
Corrections to the SIMATIC Drive Controller documentation
Opening and closing the bottom cover SIMATIC Drive Controller equipment manual, edition 11/2019, section Front covers You use the "PUSH" button to open and close the bottom cover on the SIMATIC Drive Controller.
"PUSH" button
Interfaces on the underside of the device SIMATIC Drive Controller device manual, edition 11/2019, section View of the SIMATIC Drive Controller from below There is a DisplayPort interface (X140) and an X127 P1 interface sealed with a mechanical lock located on the underside of the SIMATIC Drive Controller. The X140 interface is used exclusively for service purposes by Siemens and must not be used to connect a display. The X127 P1 interface is not available for the SIMATIC Drive Controller.
X127, P1 sealed interface
X140: DisplayPort interface
USB interfaces (X125, X135) Equipment Manual and SIMATIC Drive Controller system manual, edition 11/2019 The two interfaces have no function; no connection permitted.
Product Information on the SIMATIC Drive Controller
12
A5E48022408-AC, 07/2020
Wiring and block diagram of onboard digital inputs/outputs
SIMATIC Drive Controller equipment manual, edition 11/2019, section Onboard digital inputs/digital outputs X122, X132 and X142
In the wiring and block diagram of the equipment manual, the connections at X142.3 to X142.8 are incorrectly shown one position above where they should be. Note the correct connections in the figure below:
Connection removes electrical isolation
Product Information on the SIMATIC Drive Controller
A5E48022408-AC, 07/2020
13
Meaning of the RUN/STOP, ERROR and MAINT LEDs
SIMATIC Drive Controller equipment manual, edition 11/2019, section Status and error displays of the CPU
In contrast to the specifications in the manual, note the following meaning of the LEDs:
RUN/STOP LED
ERROR LED
MAINT LED
Meaning
LED lit yellow LED lit green
LED lit green LED flashes yellow
LED flashes red LED off
LED off LED off
LED off LED lit yellow
LED flashes yellow LED flashes yellow
Service data backup in STOP ended with error
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job Bad configuration
This condition, documented in the Equipment Manual, edition 11/2019, does not exist.
Standards, approvals, certificates
SIMATIC Drive Controller equipment manual, edition 11/2019, section Technical specifications
At the start of delivery, the specified standards, approvals and certificates might not be available in full. You can find more information on the current delivery state in the product notes on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/25714).
FUNCT button: Read service data
SIMATIC Drive Controller system manual, edition 11/2019, section Reading/saving service
Observe the changed content to point 4 and to the result as compared to the system manual:
Reading service data during SIMATIC Drive Controller startup
1. Switch the supply voltage off at the SIMATIC Drive Controller.
2. Press and hold down the FUNCT button.
3. Switch the supply voltage on at the SIMATIC Drive Controller.
4. To start the saving process, release the FUNCT button as soon as the 7-segment displays flashes at least once (approx. 1 to 2 seconds after POWER ON). The save process only begins after about 45 seconds and is indicated by a yellow flashing RUN/STOP LED. The ERROR and MAINT LEDs are off. As the save process progresses, the 7-segment display shows "d" (DUMP) and the ACT LED flickers. After completion of the save process, the 7-segment display shows "0".
Result: The CPU writes the service data to the DUMP.S7S directory on the SIMATIC Memory Card. If an error occurs during saving, the RUN/STOP LED flashes yellow (for STOP) or green (for RUN) depending on the previous operating state and the ERROR LED flashes red. In the event of an error, the text file in the DUMP.S7S folder contains information about the error that has occurred.
Supported licensed SINAMICS functions
SIMATIC Drive Controller system manual, edition 11/2019, section SINAMICS Integrated functions
Licensed function SINAMICS Technology Extension RAILCTRL - Rail Control/Multi-Carrier-System:
In contrast to the information given in the system manual, the license for SINAMICS Integrated is not yet supported, but is in preparation.
Spare parts SIMATIC Drive Controller system manual, edition 11/2019, section Accessories/spare parts The spare parts "top cover" and "bottom cover" are in preparation.
Product Information on the SIMATIC Drive Controller
14
A5E48022408-AC, 07/2020
Connecting the power supply SIMATIC Drive Controller System Manual, edition 11/2019, power supply section The current consumption of the SIMATIC Drive Controller is: Without supply to interfaces and I/Os: Maximum 1.7 A With supply to interfaces and I/Os: Maximum 13.1 A
Connection of an external 24 V DC power supply Equipment Manual and SIMATIC Drive Controller system manual, edition 11/2019, Supply voltage X124 section Please note the changed information on the tripping time of the back-up fuse: When an external 24 V DC power supply is connected, it must comply with the requirements for protective extra-low voltage (PELV) according to UL 61010. A backup fuse that reliably trips within 120 milliseconds in the event of a short-circuit at an ambient temperature of 0 °C must also be available.
Connecting the power supply SIMATIC Drive Controller system manual, edition 11/2019, section Connecting the power supply The following special requirements apply to the connecting cables: The 24 V DC line must be approved for temperatures up to at least 75 °C. Select the permissible conductor cross-section according to the national regulations (NEC, VDE, etc.). The basis for this
can be the output current of the 24 V DC supply or the overcurrent protection device used in the 24 V circuit. If the shortcircuit current of the utilized 24 V power supply unit is greater than 50 A, an appropriate overcurrent protection device that limits the short-circuit current to this value must be used upstream of the product. The protective conductor connection must be designed with a minimum cross-section in accordance with EN 60204-1. Strip 7 mm from the cables for the connection to the 24 V DC connector. Adhere to the permissible bending radius of the cables. Lay all cables in such a way that no cables are crushed. Lay all cables so that they do not touch any abrasive edges.
Note If power supplies with primary side supplies up to 600 V AC (voltage conductor to neutral conductor) are to be used, the transient voltages on the primary side of the power supply must be limited to 4000 V. Only connect the device to a 24 V DC power supply that meets the requirements of a safe extra-low voltage (PELV) according to UL 61010.
Power supply for X142 digital inputs/outputs If you use the X142 digital inputs/outputs partly as inputs and partly as outputs (mixed operations), you need to supply the digital inputs over the same power supply as the SIMATIC Drive Controller (X142 digital inputs and X124 module supply). This restriction does not apply if you operate the X142 digital inputs/outputs exclusively as inputs or as outputs. The X122/X132 digital inputs/outputs are not affected by this restriction.
Disconnection of 24 V plug-in connections during operation Note the safety information for use of the SIMATIC Drive Controller:
WARNING Personal injury and damage to property can occur Personal injury and property damage can occur if 24 V plug-in connections are disconnected during operation. Disconnection of 24 V plug-in connections is only permitted when the power is off.
Product Information on the SIMATIC Drive Controller
A5E48022408-AC, 07/2020
15
Mixed operation of vector control and U/f control In mixed operation of vector control and U/f control, the following axis constellations and current controller cycle times are not possible: 1 axis (vector control, 250 s) and 8 axes (U/f control, 500 s) 2 axes (vector control, 250 s) and 4 axes (U/f control, 500 s)
China RoHS The SIMATIC Drive Controllers comply with the China RoHS directive. Additional information can be found on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109775373).
Classification of the mechanical environment SIMATIC Drive Controller system manual, edition 11/2019, section Mechanical and climatic environmental conditions Classification of the mechanical environment: Class 3M1 in accordance with EN 60721-3-3
Product information on the SIMATIC Drive Controller This product information contains changes and supplements to the documentation of the SIMATIC Drive Controller. It takes precedence over our system manuals, function manuals and equipment manuals. You might find an updated product information on the SIMATIC Drive Controller on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109772684)
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
Product Information on the SIMATIC Drive Controller
1A56E48022408-AC, 07/2020
Product Information on the SIMATIC Drive Controller A5E48022408-AC, 07/2020
S7-1500R/H redundant system
SIMATIC S7-1500 S7-1500R/H redundant system
System Manual
Preface
S7-1500R/H Documentation Guide
1
New properties/functions
2
System overview
3
Application planning
4
Installation
5
Wiring
6
Configuration
7
Basics of program execution
8
Protection
9
Commissioning
10
Display
11
Maintenance
12
Test and service functions
13
Technical specifications
14
Dimension drawings
A
Accessories/spare parts
B
Safety symbols
C
11/2019
A5E41814787-AB
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E41814787-AB 01/2020 Subject to change
Copyright © Siemens AG 2018 - 2019. All rights reserved
Preface
Purpose of the documentation
This documentation provides important information on the following aspects of the S7-1500R/H redundant system: An overview of the redundant system Configuration and failure scenarios How to install, wire and commission the redundant system Information on maintenance and fault correction
Basic knowledge required
General knowledge in the field of automation engineering is required to understand this documentation.
Validity of the documentation
This documentation applies to all products of the SIMATIC S7-1500R/H redundant system.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)". Please also see the notes indicated as follows:
Note
A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
S7-1500R/H redundant system
4
System Manual, 11/2019, A5E41814787-AB
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com).
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
5
Table of contents
Preface ................................................................................................................................................... 3
1 S7-1500R/H Documentation Guide ....................................................................................................... 11
2 New properties/functions....................................................................................................................... 13
3 System overview................................................................................................................................... 15
3.1 3.1.1 3.1.2 3.1.3 3.1.4 3.1.5
What is the S7-1500R/H redundant system? ........................................................................ 15 Areas of application ............................................................................................................... 15 Operating principle of the S7-1500R/H redundant system .................................................... 20 Plant components and automation levels .............................................................................. 26 Scalability ............................................................................................................................... 27 Overview of features .............................................................................................................. 30
3.2 3.2.1 3.2.2 3.2.3
Configuration.......................................................................................................................... 31 Structure of the S7-1500R redundant system ....................................................................... 31 Structure of the S7-1500H redundant system ....................................................................... 32 Components........................................................................................................................... 34
3.3 3.3.1 3.3.2 3.3.3 3.3.4 3.3.5 3.3.6
S7-1500 R/H-CPUs................................................................................................................ 36 Overview of the CPU technical specifications ....................................................................... 37 Redundancy ........................................................................................................................... 38 Security .................................................................................................................................. 44 Diagnostics............................................................................................................................. 45 Trace ...................................................................................................................................... 47 PID control ............................................................................................................................. 49
3.4 3.4.1 3.4.2 3.4.3
Communication ...................................................................................................................... 52 System and device IP addresses........................................................................................... 52 Integrated interfaces for communication................................................................................ 54 HMI devices ........................................................................................................................... 54
3.5
Power supply.......................................................................................................................... 55
3.6 3.6.1 3.6.2 3.6.3
Software ................................................................................................................................. 56 TIA Portal ............................................................................................................................... 56 SINETPLAN ........................................................................................................................... 57 PRONETA.............................................................................................................................. 57
4 Application planning.............................................................................................................................. 58
4.1
Requirements......................................................................................................................... 58
4.2
Restrictions compared to the S7-1500 automation system ................................................... 60
4.3 4.3.1 4.3.2
Configuration versions ........................................................................................................... 62 S7-1500R/H configuration with IO devices in the PROFINET ring........................................ 62 S7-1500R/H configuration with switches and linear topology................................................ 64
S7-1500R/H redundant system
6
System Manual, 11/2019, A5E41814787-AB
Table of contents
4.4 4.4.1 4.4.2 4.4.3 4.4.4 4.4.5 4.4.5.1 4.4.5.2 4.4.5.3
4.4.5.4
Redundancy scenarios ...........................................................................................................67 Introduction .............................................................................................................................67 Failure of the primary CPU .....................................................................................................68 Failure of the backup CPU......................................................................................................70 Failure of the PROFINET cable in the PROFINET ring..........................................................71 Specific redundancy scenarios for S7-1500H ........................................................................73 Failure of a redundancy connection in S7-1500H ..................................................................73 Failure of both redundancy connections in S7-1500H > 1500 ms apart ................................75 Failure of both redundancy connections and the PROFINET cable in the PROFINET ring ..........................................................................................................................................77 Failure of the two PROFINET cables in the PROFINET ring on the backup CPU .................79
4.5 4.5.1 4.5.2 4.5.3 4.5.3.1 4.5.3.2 4.5.3.3 4.5.4 4.5.4.1 4.5.4.2 4.5.4.3
Failure scenarios.....................................................................................................................81 Failure of an IO device in the PROFINET ring .......................................................................82 Failure of a switch (with line topology) in the PROFINET ring................................................83 Specific failure scenarios with S7-1500R ...............................................................................85 Two cable interruptions in the PROFINET ring in S7-1500R > 1500 ms apart ......................85 Two cable interruptions in the PROFINET ring in S7-1500R within 1500 ms .....................87 Failure of the primary CPU when IO devices have failed in the PROFINET ring...................89 Specific failure scenarios with S7-1500H ...............................................................................92 Failure of both redundancy connections in S7-1500H 1500 ms apart ................................92 Failure of one redundancy connection and the primary CPU in S7-1500H............................94 Failure of the two PROFINET cables in the PROFINET ring at the primary CPU..................96
4.6
Hardware configuration...........................................................................................................98
4.7
Using HMI devices ..................................................................................................................99
5 Installation .......................................................................................................................................... 102
5.1
Basics.................................................................................................................................... 102
5.2
Installing the mounting rail ....................................................................................................104
5.3
Installing the standard rail adapter........................................................................................108
5.4
Installing a load current supply .............................................................................................114
5.5
Installing R/H-CPUs ..............................................................................................................115
6 Wiring ................................................................................................................................................. 117
6.1
Rules and regulations for operation......................................................................................117
6.2
Operation on grounded infeed ..............................................................................................119
6.3
Electrical configuration..........................................................................................................122
6.4
Wiring rules ...........................................................................................................................123
6.5
Connecting the supply voltage..............................................................................................124
6.6
Connecting the load current supply ......................................................................................125
6.7
Connecting the CPU to the load power supply .....................................................................127
6.8 6.8.1
Connecting interfaces for communication with S7-1500R....................................................129 Connecting the PROFINET ring to S7-1500.........................................................................129
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
7
Table of contents
6.9 6.9.1 6.9.1.1 6.9.1.2 6.9.1.3 6.9.1.4 6.9.2
Connecting interfaces for communication with S7-1500H ................................................... 132 Connecting redundancy connections (fiber-optic cables) .................................................... 132 Synchronization modules for S7-1500H .............................................................................. 132 Selecting fiber-optic cables .................................................................................................. 133 Installing fiber-optic cables................................................................................................... 137 Connecting redundancy connections (fiber-optic cables) to S7-1500H............................... 139 Connecting the PROFINET ring to S7-1500H ..................................................................... 143
7 Configuration .......................................................................................................................................145
7.1
Configuring the CPU ............................................................................................................ 145
7.2
Configuration procedure ...................................................................................................... 145
7.3
Project tree ........................................................................................................................... 152
7.4
Parameters........................................................................................................................... 153
7.5 7.5.1 7.5.2
Process images and process image partitions .................................................................... 153 Process image - overview .................................................................................................... 153 Updating process image partitions in the user program ...................................................... 154
8 Basics of program execution ................................................................................................................156
8.1
Programming the S7-1500R/H............................................................................................. 156
8.2
Restrictions .......................................................................................................................... 157
8.3
Events and OBs ................................................................................................................... 160
8.4 8.4.1 8.4.2
Special instructions for S7-1500R/H redundant systems .................................................... 165 Disabling/enabling SYNCUP with the RH_CTRL instruction ............................................... 165 Determining the primary CPU with "RH_GetPrimaryID" ...................................................... 168
8.5
Asynchronous instructions ................................................................................................... 169
9 Protection ............................................................................................................................................176
9.1
Overview of the protection functions.................................................................................... 176
9.2
Configuring access protection for the CPU.......................................................................... 176
9.3
Using the display to set additional password protection ...................................................... 179
9.4
Using the user program to set additional access protection ................................................ 180
9.5
Know-how protection ........................................................................................................... 180
9.6
Protection by locking the CPU ............................................................................................. 184
10 Commissioning ....................................................................................................................................185
10.1
Overview .............................................................................................................................. 185
10.2
Check before powering on for the first time ......................................................................... 186
10.3 10.3.1 10.3.2 10.3.3 10.3.4 10.3.5
Commissioning procedure ................................................................................................... 187 Removing/plugging in SIMATIC memory cards ................................................................... 188 First power-on of the CPUs.................................................................................................. 190 CPU pairing.......................................................................................................................... 191 Redundancy IDs................................................................................................................... 193 Downloading projects to the CPUs ...................................................................................... 197
S7-1500R/H redundant system
8
System Manual, 11/2019, A5E41814787-AB
Table of contents
10.4 10.4.1 10.4.2 10.4.3 10.4.4 10.4.5 10.4.6 10.4.7 10.4.8 10.4.9
Operating and system states ................................................................................................205 Overview ...............................................................................................................................205 STARTUP operating state ....................................................................................................208 STOP operating state ...........................................................................................................211 SYNCUP operating state ......................................................................................................211 RUN operating states............................................................................................................212 SYNCUP system state..........................................................................................................213 System and operating state transitions.................................................................................225 Loss of redundancy...............................................................................................................235 Displaying and changing the system state ...........................................................................238
10.5 10.5.1 10.5.2
CPU memory reset ...............................................................................................................241 Automatic memory reset .......................................................................................................242 Manual memory reset ...........................................................................................................243
10.6
Backing up and restoring the CPU configuration..................................................................244
10.7 10.7.1
Time synchronization ............................................................................................................248 Example: Configuring the NTP server ..................................................................................249
10.8 10.8.1 10.8.2 10.8.3
Identification and maintenance data .....................................................................................251 Reading out and entering I&M data ......................................................................................251 Record structure for I&M data...............................................................................................253 Example: Read out firmware version of the CPU with Get_IM_Data ...................................255
11 Display................................................................................................................................................ 258
11.1
CPU display ..........................................................................................................................258
12 Maintenance ....................................................................................................................................... 266
12.1 12.1.1 12.1.2 12.1.3 12.1.3.1 12.1.3.2 12.1.3.3 12.1.3.4 12.1.4 12.1.5 12.1.6 12.1.7
Replacing components of the S7-1500R/H redundant system ............................................266 Checking before replacing components ...............................................................................266 Replacing defective R/H-CPUs.............................................................................................269 Replacing defective redundancy connections ......................................................................270 Replacing two defective PROFINET cables with S7-1500R ................................................270 Replacing a defective redundancy connection with S7-1500H ............................................272 Replacing defective synchronization module with S7-1500H...............................................272 Replacing both defective redundancy connections with S7-1500H .....................................273 Replacing defective PROFINET cables................................................................................274 Replacing a defective SIMATIC memory card......................................................................274 Replace defective load current supply PM ...........................................................................275 Replacing defective IO devices/switches..............................................................................276
12.2
Replacing the front cover ......................................................................................................278
12.3
Replacing the coding element at the power connector of the load current supply ...............279
12.4
Firmware update ...................................................................................................................281
12.5
Resetting CPUs to factory settings .......................................................................................286
12.6
Maintenance and repair ........................................................................................................289
13 Test and service functions................................................................................................................... 290
13.1
Test functions........................................................................................................................290
13.2
Reading out/saving service data...........................................................................................296
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
9
Table of contents
14 Technical specifications .......................................................................................................................298
14.1
Standards and Approvals..................................................................................................... 298
14.2
Electromagnetic compatibility .............................................................................................. 303
14.3
Shipping and storage conditions.......................................................................................... 306
14.4
Mechanical and climatic ambient conditions........................................................................ 306
14.5
Information on insulation tests, protection class, degree of protection and rated voltage... 310
14.6
Use of S7-1500R/H in Zone 2 hazardous area.................................................................... 311
A Dimension drawings.............................................................................................................................312
B Accessories/spare parts.......................................................................................................................315
C Safety symbols ....................................................................................................................................317
C.1
Safety-related symbols for devices without Ex protection ................................................... 317
C.2
Safety-related symbols for devices with Ex protection ........................................................ 318
Glossary ..............................................................................................................................................320
Index ...................................................................................................................................................334
S7-1500R/H redundant system
10
System Manual, 11/2019, A5E41814787-AB
S7-1500R/H Documentation Guide
1
The documentation for the redundant S7-1500R/H system is divided into three areas. This division enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the redundant S7-1500R/H system. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the redundant S7-1500R/H system, e.g. diagnostics, communication.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
11
S7-1500R/H Documentation Guide
S7-1500/ET 200MP Manual Collection
The S7-1500/ET 200MP Manual Collection contains the complete documentation on the redundant S7-1500R/H system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en/).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
S7-1500R/H redundant system
12
System Manual, 11/2019, A5E41814787-AB
New properties/functions
2
What's new in the Redundant System S7-1500R/H System Manual, issue 11/2019 compared to issue 10/2018
What's new?
New con- Switched S1 device tents
Standard rail adapter
Testing with breakpoints
What are the customer benefits?
Where can I find the information?
The "Switched S1 device" function of the
Section Redundancy (Page 38)
CPU enables operation of standard IO devic-
es in the S7-1500R/H redundant system.
You mount the R/H CPUs on a standardized Sec. Installing the standard rail 35 mm rail using the standard rail adapter. adapter (Page 108)
When testing with breakpoints, you run a program from breakpoint to breakpoint in the STARTUP (startup OB) or RUN-Solo system state. Testing with breakpoints provides you with the following advantages:
Section Test functions (Page 290)
· Testing SCL and STL program code with the help of breakpoints
· Localization of logic errors step by step
· Simple and quick analysis of complex programs prior to actual commissioning
· Recording of current values within individual executed loops
· Using breakpoints for program validation is also possible in SCL or STL networks within LAD/FBD blocks.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
13
New properties/functions
What's new? PID controller
What are the customer benefits?
Where can I find the information?
PID controllers are built into all R/H-CPUs as standard. PID controllers measure the actual value of a physical variable, for example, temperature or pressure, and compare the actual value with the setpoint. Based on the resulting error signal, the controller calculates a manipulated variable that causes the process value to reach the setpoint as quickly and stably as possible.
Sec. PID control (Page 49)
The PID controllers offer you the following advantages:
· Simple configuration and programming through integrated editors and blocks.
· Simple simulation, visualization, commissioning and operation via PG and HMI.
· Automatic calculation of the control parameters and tuning during operation.
· No additional hardware and software required.
Changed contents
Download modified user program in RUN-Redundant system state
Backing up the configuration of the S7-1500R/H redundant system in runtime
You can download a modified user program into the R/H CPUs in the RUN-Redundant system state.
Sec. Downloading projects to the CPUs (Page 197)
Advantage: The redundant system will remain in the RUN-Redundant system state during changes to the user program. The system state is not changed after RUN-Solo or SYNCUP.
You do not have to interrupt the process during a backup while the plant is running. Uninterrupted plant operation avoids high restart and material costs.
Section Backing up and restoring the CPU configuration (Page 244)
Alarms in the user program
Messages enable you to display events from process execution in the S7-1500R/H redundant system and to quickly identify, accurately locate, and correct errors.
Function manual Diagnostics (https://support.industry.sieme ns.com/cs/ww/en/view/591929 26)
S7-1500R/H redundant system
14
System Manual, 11/2019, A5E41814787-AB
System overview
3
3.1
What is the S7-1500R/H redundant system?
S7-1500R/H redundant system
For the S7-1500R/H redundant system, the CPUs are duplicated, in other words redundant. The two CPUs process the same project data and the same user program in parallel. The two CPUs are synchronized over two redundancy connections. If one CPU fails, the other CPU maintains control of the process.
Aims of using redundant automation systems
Redundant automation systems are used in practice to achieve greater availability or failsafety.
Purpose of fault-tolerant systems: to reduce the probability of production downtime by operating two systems in parallel.
Purpose of fail-safe systems: to protect life, the environment and capital with safe shutdown to a secure state.
WARNING
Please note the difference between fault-tolerant and fail-safe systems.
S7-1500R/H is a fault-tolerant automation system, but not a fail-safe system. The S71500R/H system must not be used to control safety-critical processes.
3.1.1
Areas of application
Objective
The S7-1500R/H redundant system offers a high degree of reliability and system availability. A redundant configuration of the most important automation components reduces the probability of production downtimes and the consequences of component errors.
The higher the risks and costs of a production downtime, the more worthwhile the use of a redundant system. You can compensate for the generally higher investment costs by avoiding production downtimes.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
15
System overview 3.1 What is the S7-1500R/H redundant system?
Use
In redundantly operated systems, failure or malfunction of individual automation components must not impede the operation of the plant. S7-1500R/H redundant systems are used in the following areas, for example: Tunnels Airports (for example baggage conveyors) Subways Shipbuilding Wastewater treatment plants High-bay warehouse
Example 1: Avoiding downtimes
Automation task An automation solution is required for a road tunnel to: Control the lighting in the tunnel Control the ventilation in the tunnel in line with the concentration of pollutants in the tunnel
Feature Uninterrupted operation of the ventilation system is required to keep the concentration of pollutants below a set level. Constant availability must be ensured for the event that individual automation components fail, for example because of a fire in the tunnel.
Solution Three fans (M) ventilate the tunnel. The automation solution controls the fan speeds in line with the measured pollutant concentration. Three sensors in the tunnel measure the pollutant levels in the air. The S7-1500H redundant system with two redundant CPUs is used to ensure fan availability. As well as controlling the fans, the S7-1500H redundant system also controls the illumination and the traffic lights.
Figure 3-1 Example: Tunnel automation 16
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
System overview 3.1 What is the S7-1500R/H redundant system?
Benefits The user program for controlling the fans runs on both CPUs in the S7-1500H redundant system. You can position the two CPUs up to 10 kilometers apart. If one CPU or one redundancy connection fails due to a local incident, the incident does not affect the controlled process. The fans continue to operate. You can find a detailed description of tunnel automation with S7-1500H in Getting started (https://support.industry.siemens.com/cs/ww/en/view/109757712) Redundant system S7-1500R/H.
Example 2: Avoiding high system restart costs as a result of data loss
Automation task A logistics company needs a matching automation solution for controlling the storage and retrieval unit in a high-bay warehouse.
Feature The failure of a controller would have serious consequences. After the system restart, you would have to reposition the storage and retrieval units and record the content of the containers again. The automation solution must ensure that no data is lost if a CPU fails and that the warehouse can continue to operate.
Solution To store goods in and retrieve them from the bays, the storage and retrieval unit moves along an X, Y and Z axis. If the process is interrupted, data can be lost and the location of the goods is not known. To guard against the loss of data, the storage and retrieval unit is controlled by the S7-1500R redundant system.
Figure 3-2 Example: High-bay warehouse
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
17
System overview 3.1 What is the S7-1500R/H redundant system?
Benefits If one CPU fails, the second CPU maintains control of the process. The project data and the user program are saved redundantly and are not lost if a CPU fails. Once you have replaced the defective CPU and switched it to RUN, the redundant system automatically synchronizes the project data with the user program in the new CPU. The solution saves you service time and downtime costs for the warehouse.
Example 3: Avoiding equipment and material damage
Automation task A steel works needs a matching automation solution to control a blast furnace for the steel production.
Feature Failures, especially in the process industry, can result in damages to the system, workpieces or material. In a steelworks, there is a danger of the pig iron cooling if the process is interrupted. The pig iron then cannot be used for the production of steel. The automation solution must ensure that the plant continues to run if a CPU fails and that the material is not damaged.
S7-1500R/H redundant system
18
System Manual, 11/2019, A5E41814787-AB
System overview 3.1 What is the S7-1500R/H redundant system?
Solution The S7-1500R redundant system controls the blast furnace. The distributed automation components of the redundant system control the temperature, volume and pressure parameters.
Figure 3-3 Example: Blast furnace
Benefits
The S7-1500R redundant system compensates for the possible failure of a CPU or redundant connection. You do not have to interrupt the smelting process when replacing a CPU while the plant is running. Uninterrupted plant operation avoids high restart and material costs.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
19
System overview 3.1 What is the S7-1500R/H redundant system?
3.1.2
Operating principle of the S7-1500R/H redundant system
Introduction
S7-1500R/H redundant systems tolerate the failure of one of the two CPUs or an interruption in the PROFINET ring. The S7-1500R and S7-1500H systems differ in structure, configuration limits and performance.
Note Each PROFINET ring may only contain one R-system or one H-system at a time. A combined setup with one R-system and one H-system in the same PROFINET ring is not supported.
S7-1500 design and operating principle
The figure below shows the typical structure of the S7-1500R redundant system.
CPU 1515R-2 PN PROFINET cable (redundancy connections, PROFINET ring) IO device Switch
Figure 3-4 Structure of an S7-1500R redundant system
S7-1500R/H redundant system
20
System Manual, 11/2019, A5E41814787-AB
System overview 3.1 What is the S7-1500R/H redundant system?
The S7-1500R redundant system consists of:
Two S7-1500R CPUs A PROFINET ring with the Media Redundancy Protocol IO devices Possibly switches
A PROFINET ring is required for the S7-1500R redundant system. The two CPUs must be directly connected to each other with a PROFINET cable. All nodes can still communicate with each other in the event of an interruption in the ring. All PROFINET devices in the PROFINET ring must support media redundancy (MRP).
You can decouple further devices from the PROFINET ring via a switch, e.g.:
PROFINET devices with one port
Non MRP-capable PROFINET devices
PROFINET devices that do not support H-Sync Forwarding, such as standard IO devices
The redundancy connections in an S7-1500R system are the PROFINET ring with MRP .
One of the two CPUs in the redundant system takes on the role of primary CPU. The other CPU takes on the role of the following CPU (backup CPU). The role of the CPUs can change during operation. Synchronization of primary and backup CPU ensures rapid switchover between CPUs in the event of a failure of the primary CPU. If the primary CPU fails, the backup CPU takes over control of the process as the new primary CPU.
The redundancy connections use part of the bandwidth on the PROFINET cable for the synchronization of the R-CPUs. This bandwidth is therefore not available for PROFINET IO communication.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
21
System overview 3.1 What is the S7-1500R/H redundant system?
S7-1500H structure and operating principle
The figure below shows the typical structure of the S7-1500H redundant system.
CPU 1517H-3 PN PROFINET cable (PROFINET ring) Redundancy connections (fiber-optic cables) IO device Switch
Figure 3-5 Structure of an S7-1500H redundant system
The S7-1500H redundant system consists of:
Two CPUs S7-1500H
A PROFINET ring with the Media Redundancy Protocol
Two redundancy connections
IO devices
Possibly switches
As with S7-1500R, the S7-1500H redundant system requires a PROFINET ring closed by
the CPUs. All nodes can still communicate with each other in the event of an interruption in the ring. All PROFINET devices in the PROFINET ring must support media redundancy (MRP).
S7-1500R/H redundant system
22
System Manual, 11/2019, A5E41814787-AB
System overview 3.1 What is the S7-1500R/H redundant system?
You can decouple further devices from the ring via a switch, e.g.:
PROFINET devices with one port
Non MRP-capable PROFINET devices, such as standard IO devices
Unlike in S7-1500R, the PROFINET ring and redundancy connections in S7-1500H are
separate. The two redundancy connections are fiber-optic cables that connect the CPUs
directly over synchronization modules.
One of the two CPUs in the redundant system takes on the role of primary CPU. The other CPU takes on the role of the following CPU (backup CPU). The role of the CPUs can change during operation.
Synchronization of primary and backup CPU ensures rapid switchover between CPUs in the event of a failure of the primary CPU. If the primary CPU fails, the backup CPU takes over control of the process as the new primary CPU.
The synchronization of the H-CPUs does not affect the bandwidth on the PROFINET.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
23
System overview 3.1 What is the S7-1500R/H redundant system?
Differences between S7-1500R and S7-1500H
Table 3- 1 S7-1500R and S7-1500H system differences
S7-1500R
S7-1500H
CPU 1513R-1 PN
CPU 1517H-3 PN
Performance
CPU 1515R-2 PN
· Transfer rate of 100 Mbps (for synchronization · Significantly greater performance than
and communication)
S7-1500R due to:
· Data work-memory: CPU 1513R-1 PN: max. 1.5 MB CPU 1515R-2 PN: max. 3 MB
· Code work-memory: CPU 1513R-1 PN: max. 300 KB CPU 1515R-2 PN: max. 500 KB
Separate redundancy connections over fiber-optic cable
High computing power · transfer rate of 1 Gbps (for synchronization) · Data work-memory: max. 8 MB · Code work-memory: max. 2 MB
Hardware
· The CPUs are identical in design with the
· The CPUs each have 2 optical interfaces.
respective S7-1500 standard versions.
· Synchronization of the CPUs runs separately
· Synchronization of the CPUs takes place over from the PROFINET ring over fiber-optic ca-
the PROFINET ring.
bles.
· When you use PROFINET devices with more · The full bandwidth of the PROFINET cable is
than two ports (e.g. switch) in the PROFINET
available for PROFINET IO communication.
ring of an R-system, then H-Sync Forwarding
is mandatory for these devices.
· H-Sync Forwarding is recommended for all devices in the PROFINET ring if you are using PROFINET devices with only 2 ports in the PROFINET ring of an R-system.
· Part of the bandwidth on the PROFINET cable is required for synchronization of the CPUs. Less bandwidth is therefore available for PROFINET IO communication.
Range
· Distance between the two R-CPUs:
Max. 100 m without media converter Several kilometers with media converter
(depends on the media converter used)
· Distance between the two H-CPUs:
Maximum of 10 km (depends on the synchronization modules used)
Configuration limits · ·
In the PROFINET ring: Max. 50 PROFINET devices, including R-CPUs (max. 16 PROFINET devices recommended)
In the PROFINET ring and separated with switches (line): Max. 66 PROFINET devices (including R-CPUs)
· In the PROFINET ring: Max. 50 PROFINET devices (including H-CPUs)
· In the PROFINET ring and separated with switches (line): Max. 258 PROFINET devices (including H-CPUs)
S7-1500R/H redundant system
24
System Manual, 11/2019, A5E41814787-AB
System overview 3.1 What is the S7-1500R/H redundant system?
Comparison of S7-1500 standard system and S7-1500R/H
The table below sets out the key features of comparable CPUs of the S7-1500 automation system and of the S7-1500R/H redundant system.
Table 3- 2 S7-1500 and S7-1500R/H comparison
S7-1500
S7-1500R/H
Support for central I/O Configuration control Web server CPU redundancy System redundancy S2 S1 device Isochronous mode Shared Device IRT MRP MRPD OPC UA Motion Control PID control Security Integrated Protection function: Copy protection Safety mode 2) Integrated system diagnostics
CPU 1513-1 PN CPU 1515-2 PN CPU 1517-3 PN/DP
---- --
CPU 1513F-1 PN CPU 1515F-1 PN CPU 1517F-3 PN/DP
----
CPU 1513R-1 PN CPU 1515R-2 PN CPU 1517H-3 PN
------ 1) ------ ------ ----
1) As switched S1 device 2) For personal, environmental or investment protection, you will need fail-safe automation systems (F-systems).
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
25
System overview 3.1 What is the S7-1500R/H redundant system?
3.1.3
Plant components and automation levels
Plant components and automation levels
The schematic diagram below shows the key components of the redundant system from the management level to the control level and the field level.
Figure 3-6 Possible configuration at the management, control and field level using the example of S7-1500R
From the management level, the master PC accesses the various devices at the control and field level. The master PC is connected to the CPUs over Industrial Ethernet.
The R-CPUs at the control level are redundant in design. The IO devices at the field level are connected to the R-CPUs within a PROFINET ring.
The redundant S7-1500R system cyclically exchanges IO data with another PROFINET IO system via a PN/PN coupler. The left-hand side of the PN/PN coupler is assigned to the S7-1500R redundant system. The right-hand side of the PN/PN coupler is assigned to the CPU 1516-3 PN/DP (IO controller).
The configuration tolerates the failure of one CPU or an interruption in the PROFINET ring. The primary CPU and the backup CPU execute the user program in parallel. If one CPU fails, the second CPU maintains control of the process.
If the PROFINET ring is interrupted, for example as a result of a cable break or an IO device failure, redundancy in the ring is lost. However, the IO devices that have not failed continue to operate and can be accessed.
S7-1500R/H redundant system
26
System Manual, 11/2019, A5E41814787-AB
System overview 3.1 What is the S7-1500R/H redundant system?
3.1.4
Scalability
Introduction
Redundant systems are more cost-intensive to use than non-redundant systems: There are two CPUs. The physical connections (PROFINET ring and redundancy connections) can be required
over large distances. The S7-1500R/H redundant system is scalable. This means that the S7-1500R and S7-1500H systems have the same functional scope, but differ in terms of: Performance Hardware Range Configuration limits Costs
S7-1500R
You connect the CPUs to the Industrial Ethernet over X2 PROFINET interfaces of CPUs S7-1515R-2 PN or using an additional switch.
S7-1500R supports the following number of PROFINET devices (switches, S7-1500R/H CPUs, S7-1500 CPUs (V2.5 or later), HMI devices, and IO devices such as ET 200MP and ET 200SP):
In the PROFINET ring: max. 50 (recommended: max. 16)
In the PROFINET ring and separated with switches (line): max. 66
Note Recommendation for S7-1500R: Operate a maximum of 16 PROFINET devices (including R-CPUs) in the PROFINET ring.
The number of devices in the PROFINET ring affects the availability of the S7-1500R system. You should therefore operate no more than 16 PROFINET devices (including RCPUs) in the PROFINET ring. Operating significantly more devices in the PROFINET ring will reduce the availability of the IO devices and the R-CPUs.
The technical specifications in the documentation are based on the recommended maximum of 16 PROFINET devices in the ring in S7-1500R.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
27
System overview 3.1 What is the S7-1500R/H redundant system?
The redundancy connections in S7-1500R are the PROFINET ring with MRP. The CPUs are synchronized over the PROFINET ring.
Load current supply (optional) CPU S7-1515R-2 PN PROFINET cable (redundancy connections, PROFINET ring) IO device in the PROFINET ring Switch IO device outside the PROFINET ring (separated with a switch)
Figure 3-7 S7-1500R configuration variant
S7-1500H
You connect the CPUs to the Industrial Ethernet over a PROFINET interface or using an additional switch.
S7-1500H supports the following number of PROFINET devices (switches, S7-1500R/H CPUs, S7-1500 CPUs (V2.5 or later) and HMI devices):
In the PROFINET ring: max. 50
In the PROFINET ring and separated with switches (line): max. 258
S7-1500R/H redundant system
28
System Manual, 11/2019, A5E41814787-AB
System overview 3.1 What is the S7-1500R/H redundant system?
The redundancy connections in S7-1500H are two duplex fiber-optic cables that connect the CPUs directly with plug-in synchronization modules.
Load current supply (optional) CPU 1517H-3 PN PROFINET cable (PROFINET ring) Redundancy connections (2 duplex fiber-optic cables) IO device in the PROFINET ring Switch IO device outside the PROFINET ring (separated with switch)
Figure 3-8 S7-1500H configuration variant
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
29
System overview 3.1 What is the S7-1500R/H redundant system?
3.1.5
Overview of features
The S7-1500R/H redundant system meets all the requirements for a fault-tolerant system. The figure below sets out the main features.
Figure 3-9 S7-1500R/H features
S7-1500R/H redundant system
30
System Manual, 11/2019, A5E41814787-AB
3.2
Configuration
System overview 3.2 Configuration
3.2.1
Structure of the S7-1500R redundant system
Configuration
The S7-1500R redundant system comprises the following components:
Two R-CPUs
Two SIMATIC memory cards
PROFINET cable (redundancy connections, PROFINET ring)
IO devices
Load current supply (optional)
The redundant system S7-1500R can be mounted on a common mounting rail or spatially separated on 2 separate mounting rails. Connecting the PROFINET cable to the PROFINET interfaces X1 P2 R of the CPUs directly connects the two CPUs. You set up the PROFINET ring from the first CPU to the IO devices and the second CPU with the PROFINET interfaces X1 P1 R of the CPUs.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
31
System overview 3.2 Configuration
Configuration example
Optional load current supply CPU Mounting rail with integrated DIN rail profile PROFINET cable (redundancy connections, PROFINET ring)
Figure 3-10 S7-1500R configuration example
3.2.2
Structure of the S7-1500H redundant system
Configuration
The S7-1500H redundant system comprises the following components:
Two H-CPUs
Two SIMATIC memory cards
Four synchronization modules (two synchronization modules in each H-CPU)
Two redundancy connections (two duplex fiber-optic cables)
IO devices
Load current supply (optional)
The S7-1500H redundant system should be installed either on one shared mounting rail or on two separate mounting rails. You connect the two CPUs with fiber-optic cables to two synchronization modules in each CPU. You set up the PROFINET ring with the PROFINET interfaces X1 P1 R and X1 P2 R of the CPUs.
S7-1500R/H redundant system
32
System Manual, 11/2019, A5E41814787-AB
Configuration example
System overview 3.2 Configuration
Optional load current supply
CPU (with two synchronization modules, connected underneath, not visible in the diagram)
Mounting rail with integrated DIN rail profile
Redundancy connections (fiber-optic cables)
PROFINET cable (PROFINET ring)
Figure 3-11 S7-1500H configuration example
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
33
System overview 3.2 Configuration
3.2.3
Components
Components of the S7-1500R/H redundant system
Table 3- 3 S7-1500R/H components
Component Mounting rail
Function
The mounting rail is the rack of the S7-1500R/H automation system. You can use the entire length of the mounting rail.
You can order the mounting rail as Accessories/spare parts (Page 315).
Diagram
Standard rail adapter
The R/H-CPUs are mounted on a standardized 35 mm rail via the standard rail adapter.
The standard rail adapter can be ordered as Accessories/spare parts (Page 315).
PE connection element for mounting rail
The screw set is inserted in the mounting rail's T-profile groove, and is required for grounding the mounting rail.
The set of screws is included in the scope of delivery of the mounting rails in the standard lengths (160 mm to 830 mm) and can be ordered as Accessories/spare parts (Page 315).
S7-1500R/H redundant system
34
System Manual, 11/2019, A5E41814787-AB
Component R/H-CPUs
Function The CPU runs the user program. Additional features and functions of the CPU: · Communication via Industrial Ethernet · Communication via PROFINET IO · Redundant mode · HMI communication · Integrated system diagnostics · Integrated protection functions (access and know-how
protection)
System overview 3.2 Configuration
Diagram
PROFINET cable
You connect the CPUs and the IO devices in a PROFINET ring using PROFINET cables.
Synchronization modules (for S7-1500H)
You create 2 redundancy connections between the H-CPUs via fiber-optic cables using a total of 4 synchronization modules (2 in each H-CPU).
The following synchronization module versions can be ordered:
· Sync module 1 GB FO 10 m: for fiber-optic cables up to 10 m in length
· Sync module 1 GB FO 10 km: for fiber-optic cables up to 10 km in length
Fiber-optic cable (for S7-1500H)
They connect the 2 synchronization modules per CPU in pairs via a fiber-optic cable. The following lengths of fiber-optic cables can be ordered:
· 1m
· 2m · 10 m
· Up to 10 km (on request)
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
35
System overview 3.3 S7-1500 R/H-CPUs
Component
4-pin connection plug for CPU supply voltage
Function The 4-pin connection plug provides the supply voltage.
Load current supply (PM)
The load current supply (PM) supplies the central modules (CPU) with 24 V DC. If you are using load current supplies, we recommend the devices from the SIMATIC series. These devices can be mounted on the mounting rail.
Various models of load current supply are available:
· PM 70 W 120/230 V AC
· PM 190 W 120/230 V AC
Diagram
3.3
S7-1500 R/H-CPUs
The S7-1500R/H redundant system tolerates the failure of one of the two R- or H-CPUs in the PROFINET ring. If the primary CPU fails, the backup CPU takes over control of the process as the new primary CPU at the point of the interruption.
All relevant data is permanently synchronized between the CPUs over the redundancy connections between primary CPU and backup CPU.
The primary CPU and the backup CPU execute the user program in parallel.
The display of the CPU shows you the control and status information in various menus. Quick access to diagnostic alarms minimizes plant downtimes in the event of a service call.
For effective commissioning and fast optimization of drives and controls, the CPUs support trace functions for all CPU tags.
S7-1500R/H redundant system
36
System Manual, 11/2019, A5E41814787-AB
System overview 3.3 S7-1500 R/H-CPUs
3.3.1
Overview of the CPU technical specifications
The table below sets out the main technical specifications for the S7-1500 R/H CPUs.
Table 3- 4 Overview of the R/H-CPU technical specifications
CPU 1513R-1 PN
Data work-memory, max.
1.5 MB
Code work-memory, max.
300 KB
Plug-in load memory (SIMATIC memory 32 GB card), max.
I/O address area, max.
32 KB/32 KB
PROFINET IO interfaces
1
PROFINET interfaces
-
Processing time for bit operations
0.04 s
Display screen size
3.45 cm
Suitable PROFINET devices (IO devices, S7-1500R/H CPUs, switches, S71500 CPUs (as of V2.5) and HMI devices) in the PROFINET ring, max.
50 (recommended: max. 16)
Suitable PROFINET devices (see
66
above) in the PROFINET ring and sepa-
rated with switches (line), max.
Modules per rack, max.
2 (PM and CPU)
Distance between CPUs, max.
Depends on media converter used (with PROFINET cable, max. 100 m)
Redundancy connections (synchroniza- PROFINET ring tion link)
System redundancy
Yes
Switchover time 1)
300 ms
CPU 1515R-2 PN 3 MB 500 KB 32 GB
32 KB/32 KB 1 1 0.03 s 6.1 cm 50 (recommended: max. 16)
66
2 (PM and CPU) Depends on media converter used (with PROFINET cable, max. 100 m) PROFINET ring
Yes 300 ms
CPU 1517H-3 PN 8 MB 2 MB 32 GB
32 KB/32 KB 1 1 0.002 s 6.1 cm 50
258
2 (PM and CPU) Depends on the synchronization module used: max. 10 km
Fiber-optic cable
Yes 50 ms
1) The switchover time is the time starting with the failure or stop of the primary CPU until the backup CPU becomes the primary CPU and assumes control of the process as the primary CPU at the point of interruption. The switchover time can lengthen the cycle time.
Reference
The full technical specifications can be found in the manuals for the CPUs and on the Internet (https://mall.industry.siemens.com).
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
37
System overview 3.3 S7-1500 R/H-CPUs
3.3.2
Redundancy
Introduction
The S7-1500R/H redundant system is based on media redundancy (MRP) in the PROFINET ring. You can use the following IO devices on the redundant S7-1500R/H system: IO devices with S2 system redundancy Standard IO devices over the "Switched S1 device" function of the CPU
Media redundancy
Media redundancy is a function for ensuring network and plant availability.
The two CPUs in the redundant system must be located in a PROFINET ring that uses the MRP media redundancy protocol. All PROFINET devices in the PROFINET ring must support media redundancy (MRP).
S7-1500R uses the PROFINET ring to synchronize the two CPUs. S7-1500H uses the redundancy connections over fiber-optic cables to synchronize the two CPUs. The PROFINET ring (via PROFINET interfaces X1) is also mandatory for S7-1500H.
To set up a ring topology with media redundancy, you need to bring together the free ends of a linear network topology in one device using 2 ports (ring ports, port label "R"). You specify the ring ports in the device configuration.
In the S7-1500R/H redundant system, you need to configure the media redundancy role for each of the two CPUs to Manager (Auto). For all other PROFINET devices in the PROFINET ring, the media redundancy role Client must be configured. There is a communication connection based on MRP between the redundancy manager and the redundancy clients. The Media Redundancy Protocol (MRP) automatically reconfigures the data paths between the individual devices if the ring is interrupted at any point.
You configure the media redundancy role for IO devices and other PROFINET devices in STEP 7. For switches without system redundancy S2, you set the media redundancy role to "Client" over the Web interface.
S7-1500R/H redundant system
38
System Manual, 11/2019, A5E41814787-AB
System overview 3.3 S7-1500 R/H-CPUs
H-Sync Forwarding
H-Sync Forwarding enables a PROFINET device with MRP to forward synchronization data (synchronization frames) of a S7-1500R redundant system only within the PROFINET ring. In addition, H-Sync Forwarding forwards the synchronization data even during reconfiguration of the PROFINET ring. H-Sync Forwarding avoids a cycle time increase if the PROFINET ring is interrupted.
Note Support of H-Sync Forwarding The technical specifications typically state whether a PROFINET device supports H-Sync Forwarding. The GSD file will also indicate whether the device supports H-Sync Forwarding. The device supports H-Sync Forwarding when the "AdditionalForwardingRulesSupported" attribute in the "MediaRedundancy" element is set to "true".
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
39
System overview 3.3 S7-1500 R/H-CPUs
Conditions:
H-Sync Forwarding is not relevant for redundant S7-1500H systems. With the redundant S7-1500H system, the H-Sync frames are transmitted exclusively via the fiber-optic cables.
When you use PROFINET devices with more than two ports (e.g. switch) in the PROFINET ring of an R-system, then H-Sync Forwarding is mandatory for these devices.
H-Sync frames leave the PROFINET ring with a switch without H-Sync Forwarding. This results in an additional load on the network. Another serious result is that the redundancy of other R-systems in the network can fail or startup can be prevented.
H-Sync Forwarding is recommended for all devices in the PROFINET ring if you are using PROFINET devices with only 2 ports in the PROFINET ring of an R-system.
When you operate PROFINET devices without H-Sync Forwarding in the PROFINET ring of the redundant S7-1500R system, the following scenario will result in an additional cycle time increase:
1. The redundant S7-1500R system is in the RUN-Redundant system state. 2. The PROFINET cable which directly connects the two CPUs fails. 3. The PROFINET ring is interrupted. 4. The PROFINET ring is being reconfigured. 5. PROFINET devices without H-Sync Forwarding do not forward any H-Sync frames during the
reconfiguration time of the PROFINET ring. 6. The cycle time increases by the reconfiguration time of the PROFINET ring.
Figure 3-12 Failure of the PROFINET cable between the CPUs
S7-1500R/H redundant system
40
System Manual, 11/2019, A5E41814787-AB
System overview 3.3 S7-1500 R/H-CPUs
If the cyclic program exceeds the cycle monitoring time, the time error OB (OB 80) may be started. Redundancy is lost if the time error OB (OB 80) is not present or the double cycle monitoring time was exceeded with OB 80. You can find additional information on the response of the S7-1500R/H redundant system when cycle time is exceeded in the section Events and OBs (Page 160).
Note
If failure of the PROFINET cable that directly connects the two CPUs of the redundant S7-1500R system is unlikely, you can use PROFINET devices without H-Sync Forwarding in the PROFINET ring of the redundant S7-1500R system.
Example: Both CPUs of the redundant S7-1500R/H system are located next to each other in the control cabinet. In this case, it is unlikely that the PROFINET cable will fail.
System redundancy S2
IO devices with S2 system redundancy enable uninterrupted process data exchange with the S7-1500R/H redundant system in the event of a CPU failure.
An IO device with system redundancy S2 supports system redundancy ARs.
In a redundant system, an IO device with system redundancy S2 has a system redundancy AR with each of the two CPUs (IO controllers). An IO device thus supports ARs of two IO controllers simultaneously (for the same modules).
A system redundancy AR can be the primary AR or the backup AR. An IO device activates the data of the primary AR at the outputs. The data of the backup AR is merely saved.
Behavior in the RUN-Redundant system state:
Both CPUs are IO controllers. PROFINET communication runs on both system redundancy ARs simultaneously, in each case between one of the CPUs (IO controller) and the IO device. If the primary CPU then fails, the backup CPU becomes the primary CPU and also switches the backup AR to primary AR. The data of this AR then becomes active at the outputs.
Behavior in the RUN-Solo system state:
Only the primary CPU is the IO controller. PROFINET communication runs on the primary AR between the primary CPU and the IO device. There is no AR between the backup CPU and the IO device.
In STEP 7, you configure a IO device connected system-redundant by assigning an IO device with S2 system redundancy to both CPUs of the redundant system S7-1500R/H.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
41
System overview 3.3 S7-1500 R/H-CPUs
Switched S1 device
As of firmware version V2.8, the S7-1500R/H redundant system supports the "Switched S1 device" function.
The "Switched S1 device" function of the CPU enables operation of standard IO devices on the S7-1500R/H redundant system.
Standard IO devices are always assigned to both CPUs of the S7-1500R/H redundant system. In contrast to an IO device with S2 system redundancy, a standard IO device supports only one AR. The AR for the IO-device is only set up once by the primary CPU.
Behavior in the RUN-Redundant system state: PROFINET communication runs on the AR between the primary CPU (IO controller) and the standard IO device. There is no AR between the backup CPU and the standard IO device. If the primary CPU fails or is switched to STOP, the S7-1500R/H redundant system responds as follows:
The AR between the primary CPU and the standard IO device is disconnected.
The previous backup CPU becomes the new primary CPU.
The S7-1500R/H redundant system temporarily has no access to the inputs and no control over the outputs of the standard IO device. The status of the outputs depends on the substitute value behavior of the respective channels.
The new primary CPU builds an AR to the standard IO device.
As soon as the new primary CPU has set up the AR, the S7-1500R/H redundant system has access to the inputs again and control over the outputs of the standard IO device.
Behavior in the RUN-Solo system state: Only the primary CPU is the IO controller. PROFINET communication runs on the AR between the primary CPU (IO controller) and the standard IO device. There is no AR between the backup CPU and the standard IO device.
In STEP 7 you configure an IO device connected via the "Switched S1 device" function by assigning a standard IO device to both CPUs of the redundant S7-1500R/H system.
Note Standard IO devices in the redundant system S7-1500R
Standard IO devices usually do not support H-Sync Forwarding.
To avoid a cycle time increase if the PROFINET ring is interrupted, integrate the standard IO devices behind a switch and not in the PROFINET ring.
S7-1500R/H redundant system
42
System Manual, 11/2019, A5E41814787-AB
System overview 3.3 S7-1500 R/H-CPUs
Note I-device as standard IO device
You cannot assign a device to the S7-1500R/H redundant system which you have configured in STEP 7 as an I-device.
In order to operate an I-device as a standard IO device on the redundant system S7-1500R/H, always configure the I-device via GSD file. · SIMATIC CPU as an I-device
First, in STEP 7 configure the SIMATIC CPU as an I-device with all transfer areas. Export the I-device as a GSD file. The GSD export can be found in the properties of
the PROFINET interface under "Operating mode" > "I-device communication" > "Export Generic System Description file (GSD)". Install the GSD file in STEP 7. · HMI device as I-device (function "direct key") The GSD files for SIMATIC Comfort Panel and SIMATIC Mobile Panel can be found in this application example (https://support.industry.siemens.com/cs/ww/en/view/73502293).
Assign the device configured via GSD file to the redundant system S7-1500R/H.
Essential differences between a PROFINET IO device with S2 system redundancy and a standard IO device
Table 3- 5 Main differences between IO device with S2 system redundancy and standard IO device
Property
Requirement for IO device
Maximum simultaneously supported ARs with regard to the same modules Response to role change
IO device with S2 system redundancy Device supports S2 system redundancy. 2
Continuous connection with S71500R/H redundant system Process data is transferred further.
Standard IO device
-
1
Temporary disconnection from S7-1500R/H redundant system. No process data is transferred until the standard IO device is available again. The status of the outputs depends on the substitute value behavior of the respective channels.
Reference
Additional information on media redundancy and system redundancy S2 can be found in the PROFINET function manual (http://support.automation.siemens.com/WW/view/en/49948856).
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
43
System overview 3.3 S7-1500 R/H-CPUs
3.3.3
Security
Security means the protection of technical systems against sabotage, espionage and human error.
Protection functions
For the setup of secure networks, the S7-1500R/H redundant system has an integrated security concept from authorization levels up to block protection:
Table 3- 6 Overview of protection functions
Protection function Access protection
Know-how protection
CPU lock
Description
Protection against unauthorized configuration changes through four authorization levels and an integrated firewall
Protection against unauthorized access and modifications to algorithms with password protection
Protection against unauthorized access by locking the front cover with a seal or a lock
Access protection example
You can choose from four different access levels in the TIA Portal to restrict user access to functions and memory areas.
Figure 3-13 Access protection
If you only want to allow users access over HMI, for example, select the access level "HMI access" in the TIA Portal. Only HMI access and access to diagnostics data is then possible without entering a password. Users can read and write tags over an HMI device with this access level. Users cannot: Download blocks or the hardware configuration to the CPU Upload blocks or the hardware configuration from the CPU to the PG/PC Run writing test functions Change the operating state from the PG/PC Run firmware updates
S7-1500R/H redundant system
44
System Manual, 11/2019, A5E41814787-AB
System overview 3.3 S7-1500 R/H-CPUs
Advantages and customer benefits of protection functions
The protection functions listed above protect your investments from unauthorized access and manipulation, helping to secure plant availability.
Reference
You can find additional information on the protection functions described in the section Protection (Page 176) and in the STEP 7 online help.
Siemens products and solutions are only one element of a comprehensive industrial security concept. Please note the additional information on Industrial Security (http://www.siemens.com/industrialsecurity).
3.3.4
Diagnostics
All levels of automation in the S7-1500R/H redundant system have integrated diagnostics. All SIMATIC products have integrated diagnostic functions that you can use to analyze, localize and log faults and errors efficiently.
System diagnostics is integrated into the firmware of the CPUs and works independently of the cyclic user program. Faults in the plant are immediately detected and reported on the display devices.
A uniform display concept visualizes error messages as plain text information over:
TIA Portal
HMI devices
CPU displays
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
45
System overview 3.3 S7-1500 R/H-CPUs
Displaying faults in an IO device
The various components of the S7-1500R/H redundant system are connected over PROFINET/Industrial Ethernet (IE). The devices detect faults in their modules (for example IO device ET 200SP) and send diagnostics data to the assigned CPU. The CPU analyzes this diagnostic information and notifies the connected display media. The information analyzed is shown in graphic form in the configuration and programming software (TIA Portal), on the HMI devices and on the CPU displays.
Figure 3-14 Overview of system diagnostics in a plant
Advantages and customer benefits
Integrated system diagnostics offers the following advantages:
Diagnostics is always consistent with the actual state of the plant. In S7-1500R/H redundant mode, the diagnostic information is synchronized between the CPUs.
The uniform display concept enables efficient error analysis.
The immediate identification of the error source in the event of an error speeds up commissioning and minimizes production downtimes.
By configuring diagnostics events, you tailor the diagnostics to the requirements of your automation task.
Reference
You will find more information on diagnostics in the Diagnostics (https://support.industry.siemens.com/cs/ww/en/view/59192926) function manual.
S7-1500R/H redundant system
46
System Manual, 11/2019, A5E41814787-AB
3.3.5
System overview 3.3 S7-1500 R/H-CPUs
Trace
The trace functionality facilitates troubleshooting and optimization for the user program. Trace records device tags and evaluates the recordings. This allows you to analyze defective signal responses. Tags are, for example, drive parameters or the system and user tags of a CPU. Because the CPU records tags directly, the trace and logic analyzer function is suitable for monitoring highly dynamic processes.
Note Trace restrictions The S7-1500R/H redundant system does not support the storage of measurements on the SIMATIC memory card.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
47
System overview 3.3 S7-1500 R/H-CPUs
Example of signal response analysis
To analyze a specific signal response, you define the recording and trigger conditions for the signals to be recorded.
The trace function can be called in the project tree from the "Traces" folder under the top
CPU of the redundant system.
The trend diagram displays the selected signals of a recording. Bits are shown in the
lower diagram as a bit track.
The signal table lists the signals of the selected measurement and provides setting
options for specific properties.
Trace recordings for S7-1500R/H in the project tree
Trend diagram
Signal table
Figure 3-15 Trace measurement for S7-1500R/H
S7-1500R/H redundant system
48
System Manual, 11/2019, A5E41814787-AB
System overview 3.3 S7-1500 R/H-CPUs
Advantages and customer benefits
The trace function offers the following advantages: Simultaneous recording of up to 16 different signals and up to four separate trace jobs A uniform standard for tag analysis that allows even sporadic errors to be located rapidly
Reference
You can find additional information on the trace function in the section Test functions (Page 290) and in the Using the trace and logic analyzer function manual (http://support.automation.siemens.com/WW/view/en/64897128).
3.3.6
PID control
PID controllers are built into all R/H-CPUs as standard. PID controllers measure the actual value of a physical variable, for example, temperature or pressure, and compare the actual value with the setpoint. Based on the resulting error signal, the controller calculates a manipulated variable that causes the process value to reach the setpoint as quickly and stably as possible.
You can choose from three different PID technology objects:
PID technology object PID_Compact
PID_3Step PID_Temp
Description
The PID_Compact technology object provides a PID controller with integrated tuning for proportional-action final controlling elements. Different operating modes are possible with PID_Compact, e.g:
· Pretuning
· Fine tuning
· Automatic mode
· Manual mode
The PID_3Step technology object provides a PID controller with tuning for valves or actuators with integrating behavior. You can configure the following controllers:
· Three-point stepping controller with position feedback
· Three-point stepping controller without position feedback
· Valve controller with analog output value
The PID_Temp technology object provides a continuous PID controller with integrated tuning. PID_Temp is specially designed for temperature control and is suitable for heating or heating/cooling applications. Two outputs are available, one for heating and one for cooling. You can also use PID_Temp for other control tasks. PID_Temp can be cascaded. You can use PID_Temp in manual or automatic mode.
Note Restriction
The display of the start value in the CPU and the corresponding comparison result in the configuration editor of the PID technology object is only possible in the RUN-Solo system state.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
49
System overview 3.3 S7-1500 R/H-CPUs
Example closed loop control of a valve in a mixer tap
The automation task is to control the valve of a mixer tap according to a desired temperature setting. You configure the opening and closing of the valve in the PID_3Step technology object. For this you need: An analog input channel for the actual value A digital output for "Control upwards" (e.g. open valve) A digital output for "Control downwards" (e.g. close valve) The first step is to select the PID_3Step technology object in STEP 7:
Figure 3-16 Selection of the PID_3Step technology object in STEP 7
S7-1500R/H redundant system
50
System Manual, 11/2019, A5E41814787-AB
System overview 3.3 S7-1500 R/H-CPUs
After selecting the technology object, it is automatically stored in the project tree in the Technology Objects folder. In the configuration window, select the desired parameter area and enter the configuration data for the PID controller.
Figure 3-17 Configuration of the PID_3Step technology object in STEP 7 The required instance data module corresponds to the PID_3Step technology object.
Advantages and customer benefits
Simple configuration and programming through integrated editors and blocks. Simple simulation, visualization, commissioning and operation via PG and HMI. Automatic calculation of the control parameters and tuning during operation. No additional hardware and software required.
Reference
You can find more information on PID controllers PID Control Function Manual (https://support.industry.siemens.com/cs/ww/en/view/108210036).
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
51
System overview 3.4 Communication
3.4
Communication
3.4.1
System and device IP addresses
Device IP addresses
For the interfaces of the CPUs and the IO devices to be accessible, the interfaces require IP addresses that are unique within the network (device IP addresses).
MAC addresses
The CPUs have a unique MAC address for each interface and its ports. The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC addresses are printed on the rating plate on the right-hand side of each CPU.
System IP addresses
In addition to the device IP addresses of the CPUs, the redundant system S7-1500R/H supports system IP addresses:
System IP address for the X1 PROFINET interfaces of the two CPUs (system IP address X1) for CPU 1513R-1 PN, CPU 1515R-2 PN and CPU 1517H-3 PN
System IP address for the X2 PROFINET interfaces of the two CPUs (system IP address X2) for CPU 1515R-2 PN and CPU 1517H-3 PN
You use the system IP addresses for communication with other devices (for example, HMI devices, CPUs, PG/PC). The devices always communicate over the system IP address with the primary CPU of the redundant system. This ensures that the communication partner can communicate with the new primary CPU (previously backup CPU) in the RUN-Solo system state after failure of the original primary CPU in redundant operation.
There is a virtual MAC address for each system IP address. The virtual MAC addresses of the two PROFINET interfaces must be different from each other.
You enable the system IP addresses in STEP 7.
You can find information on configuring the system IP addresses and the virtual MAC addresses in the section Configuration procedure (Page 145).
Advantages of system IP addresses over device IP addresses
Targeted communication of the communication partner with the primary CPU.
The S7-1500R/H redundant system can continue to communicate over a system IP address even if the primary CPU fails.
S7-1500R/H redundant system
52
System Manual, 11/2019, A5E41814787-AB
System overview 3.4 Communication
Configuration example The figure below shows a configuration in which the S7-1500R/H redundant system communicates with other devices over the system IP address X2. The other devices are connected to the S7-1500 redundant system over the X2 PROFINET interfaces.
Reference
Figure 3-18 Example: Communication of the S7 1500R/H redundant system over the system IP address X2
You can find more information on the system IP address in the S7-1500R/H redundant system in the PROFINET (http://support.automation.siemens.com/WW/view/en/49948856) function manual.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
53
System overview 3.4 Communication
3.4.2
Integrated interfaces for communication
The table below provides an overview of CPU communication options in the S7-1500R/H redundant system.
Table 3- 7 S7-1500R/H communication options
Communication option
Service available over:
PROFINET IO MRP (Media Redundancy Protocol) LLDP (network topology detection) PG communication for commissioning, testing and diagnostics HMI communication for operator control and monitoring Open User Communication S7 communication as server S7 routing IP forwarding Time synchronization
PROFINET interface X1 (device IP
address)
2)
3) 3)
PROFINET interface X2 (device IP
address)1)
----
System IP address (at interfac-
es X1 and X2)
---------
2)
3)
3)
---
---
1) Not with CPU 1513R-1 PN
2) Communication mainly over system IP address: If the HMI device uses a device IP address and the CPU with the device IP address fails, communication to the HMI device also fails.
3) Communication mainly over system IP address: If the HMI device uses a device IP address and the CPU with the device IP address fails, the Open User Communication and S7 communication to S7-1500R/H also fails.
Reference
For more information on communication options, please refer to the Communication function manual (https://support.industry.siemens.com/cs/ww/en/view/59192925).
3.4.3
54
HMI devices
HMI devices are used for machine-level process visualization and control. You use the same HMI devices for the S7-1500R/H redundant system as for the standard S7-1500 system. Using HMI communication, one or more HMI devices exchange data with the CPUs . Examples of HMI devices are HMI Basic/Comfort/Mobile Panel. The connection of the HMI device to the redundant system depends on the specific application. In STEP 7, you can configure the following communication options: The HMI device communicates with the redundant system over the system IP address. The HMI device communicates with the R/H-CPUs (for example for diagnostics purposes)
over the device IP addresses.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Reference
System overview 3.5 Power supply
You can find additional information on using HMI devices in the section Using HMI devices (Page 99) and in the Communication function manual (https://support.industry.siemens.com/cs/ww/en/view/59192925). You can find an overview of all available HMI devices in the Industry Mall (https://mall.industry.siemens.com/mall/en/WW/Catalog/Products/9109999?tree=CatalogTre e).
3.5
Power supply
The CPUs of the redundant system have an integrated system power supply. You can add one load current supply to the integrated system power supply.
Note
The CPUs are designed for fixed operation and continuous operation on a load current supply.
Load current supply (PM)
The load current supply (PM) supplies the system components and CPU. You can install the load current supply directly to the left of the CPU (without connection to the backplane bus).
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
55
System overview 3.6 Software
3.6
Software
3.6.1
TIA Portal
The SIMATIC controllers are integrated into the Totally Integrated Automation Portal. Engineering with TIA Portal offers: Configuration and programming Shared data management A uniform operating concept for control, visualization and drives The TIA Portal simplifies integrated engineering in all configuration phases of a plant.
Figure 3-19 TIA Portal overview 56
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
3.6.2 3.6.3
System overview 3.6 Software
SINETPLAN
SINETPLAN (https://www.siemens.com/sinetplan), the Siemens Network Planner, helps you plan automation systems and networks based on PROFINET. The tool facilitates the professional and predictive dimensioning of your PROFINET system right from the planning stage. SINETPLAN also assists with network optimization and helps you to make the best possible use of network resources and to plan for reserves. This allows you to avoid problems in commissioning and failures during productive operation even before planned use. This increases the availability of the production plant and helps improve operational safety. The advantages at a glance Network optimization thanks to port-specific calculation of the network load Increased production availability thanks to online scan and verification of existing systems Transparency before commissioning through import and simulation of existing STEP7
projects Efficiency through securing existing investments in the long term and the optimal use of
resources
PRONETA
SIEMENS PRONETA (PROFINET network analysis) allows you to analyze the plant network during commissioning. PRONETA features two core functions: The topology overview independently scans PROFINET and all connected components. The IO check is a rapid test of the wiring and the module configuration of a plant. SIEMENS PRONETA (https://support.industry.siemens.com/cs/ww/en/view/67460624) is available for free on the Internet.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
57
Application planning
4
4.1
Requirements
Introduction
Please note the following requirements for use of the S7-1500R/H redundant system.
Hardware requirements
Table 4- 1 Hardware requirements
Property S7-1500R/H CPUs
PROFINET ring
Requirement
· 2 identical R-CPUs or H-CPUs in the redundant system · Identical article numbers and firmware versions for the two CPUs · Firmware version display of the R/H-CPUs: As of FW version V2.6
A PROFINET ring is required for all configuration variants (Page 62) of the S7-1500R/H redundant system.
S7-1500R/H redundant system
58
System Manual, 11/2019, A5E41814787-AB
Application planning 4.1 Requirements
Property PROFINET devices
Load current supply PM
Requirement
· Media redundancy (MRP) All PROFINET devices in the PROFINET ring support the function media redundancy. Both CPUs have the media redundancy role "Manager (auto)". All other devices in the PROFINET ring have the media redundancy role "Client".
· H-Sync Forwarding - for PROFINET devices in the PROFINET ring with S7-1500R: When you use PROFINET devices with more than two ports (e.g. switch) in the PROFINET ring of an R-system, then H-Sync Forwarding is mandatory for these devices. H-Sync Forwarding is recommended for all devices in the PROFINET ring if you are using PROFINET devices with only 2 ports in the PROFINET ring of an R-system.
· Redundancy: With the switched S1 device function, you can operate any standard IO device on the redundant S7-1500R/H system. An IO device must support S2 system redundancy for uninterrupted exchange of process data in the event of failure of the primary CPU (primary-backup switchover).
· The following SIMATIC PROFINET IO devices support system redundancy S2, media redundancy and H-Sync forwarding: ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0), FW version V4.2 or later ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0), FW version V4.2 or later ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0), FW version V4.2 or later ET 200MP (6ES7155-5AA00-0AC0), FW version V4.2 or later PN/PN coupler (6ES7158-3AD10-0XA0), FW version V4.2 or later
· Switches of the product families XC-200, XP-200 and XF-200BA support system redundancy S2, media redundancy and H-Sync-Forwarding, for example SCALANCE XC208 (6GK5208-0BA00-2AC2), FW version V4.0 or later.
· S7-1500 CPUs: Firmware version V2.5 or later The redundant system does not recognize the S7-1500 CPUs when calculating the maximum number of IO devices within and outside the PROFINET ring. If you use S7-1500 CPUs, you will have to check the maximum number yourself.
· SINAMICS S120 PROFINET Control Unit (CU310-2 PN or CU320-2 PN) support system redundancy S2 and media redundancy, FW version V5.2 or later.
Load current supply PM for the R/H CPUs The use of the PM is optional. Suitable load current supplies:
· PM 70 W 120/230 V AC
· PM 190 W 120/230 V AC
1) If you use PROFINET devices that do not support H-Sync Forwarding in S7-1500R, additional cycle time increases may occur in the RUN-Redundant system state. If the cyclic program exceeds the cycle monitoring time, the time error OB (OB 80) may be started. You can find additional information in the section Events and OBs.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
59
Application planning 4.2 Restrictions compared to the S7-1500 automation system
Special case: Operating R/H CPU individually
You can operate an R/H CPU as a single CPU. If you do, please note the following: You always configure 2 R-CPUs or H-CPUs for S7-1500R/H, even if you only set up one
CPU. The MAINT LED on the CPU is always yellow (maintenance demanded):
The R/H system is not in redundant mode. No partner CPU was found.
Software requirements
Table 4- 2
Function STEP 7
Software requirements
Requirement SIMATIC STEP 7 Professional as of V16
4.2
Restrictions compared to the S7-1500 automation system
Introduction
Please note the following restrictions with the S7-1500R/H redundant system compared to the S7-1500 automation system.
Hardware restrictions
Table 4- 3 Hardware restrictions
Property Fail-safe modules
Series machine projects, configuration control (option handling) Central I/O
Cycle and response times
Restriction Fail-safe modules are not supported in the S7-1500R/H redundant system. Not supported
Central I/O modules are not supported in the hardware configuration of the S7-1500R/H redundant system. Longer cycle and response times: You can find additional information in the Cycle and response times (https://support.industry.siemens.com/cs/ww/en/view/591935 58) function manual.
S7-1500R/H redundant system
60
System Manual, 11/2019, A5E41814787-AB
Application planning 4.2 Restrictions compared to the S7-1500 automation system
Software restrictions
Table 4- 4 Software restrictions
Function Instructions
Display: "Modules" menu command Firmware update Hardware detection in STEP 7 (read out configuration) HMI tags
I-device
IRT Configured connections
Motion Control MRPD Multiuser Engineering Online functions OPC UA Secure OUC
PROFINET send clock Shared Device System power supply
Isochronous mode Testing with breakpoints
Trace
Web server Certificate management
Restriction
Restrictions for specific instructions: You can find additional information in the section Restrictions (Page 157). Not supported Firmware update via accessible devices is not supported. Not supported
The direct entry of tags on the HMI device is only possible in the RUN-Solo system state. The S7-1500R/H redundant system cannot be used as an I device. Not supported Connection type not support for communication connection. Only programmed connections are supported. Motion Control functions are not supported in the CPUs Not supported Not supported SIMATIC Automation Tool (SAT tool) not supported OPC UA (server and client) not supported Not supported as certificate management is not possible for the R/H CPUs: If you have enabled Secure OUC, you can compile and load the user program but cannot add certificates to the R/H CPUs. 1 ms only Not supported The following parameter is irrelevant: "System power supply" > "General" > "Connection to supply voltage L+/No connection to supply voltage L+" Isochronous mode is not supported You can only test with breakpoints in the STARTUP (startup OB) or RUN-Solo system state. The storage of measurements on the SIMATIC memory card (measurements in the device) is not supported. Not supported Not supported
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
61
Application planning 4.3 Configuration versions
4.3
Configuration versions
Introduction
You can configure different versions of the S7-1500R/H redundant system. A PROFINET ring is essential in all configuration variants. For the configuration variants of the S7-1500R/H system, there is redundancy for the following components: R/H-CPUs Synchronization interfaces Media in the PROFINET ring This section describes the admissible configuration variants and their advantages/benefits. The following convention applies:
Figure 4-1 Green traffic light
4.3.1
S7-1500R/H configuration with IO devices in the PROFINET ring
Introduction
The following sections set out configurations of the S7-1500R/H redundant system with IO devices in the PROFINET ring.
Advantages/benefits
IO devices with S2 system redundancy enable uninterrupted process data exchange with the S7-1500R/H redundant system in the event of a CPU failure.
The redundant system continues to operate following a cable interruption anywhere in the PROFINET ring.
S7-1500R/H redundant system
62
System Manual, 11/2019, A5E41814787-AB
S7-1500R configuration
Application planning 4.3 Configuration versions
CPU 1 CPU 2 PROFINET cable (redundancy connections, PROFINET ring) IO device ET 200MP (with system redundancy S2) IO device ET 200SP (with system redundancy S2)
Figure 4-2 S7-1500R configuration with IO devices in the PROFINET ring
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
63
Application planning 4.3 Configuration versions
S7-1500H configuration
CPU 1 CPU 2 Two fiber-optic cables (redundancy connections) IO device ET 200SP (with system redundancy S2) IO device ET 200MP (with system redundancy S2) Standard IO device ET 200SP Standard IO device ET 200MP PROFINET cable (PROFINET ring)
Figure 4-3 S7-1500H configuration with IO devices in the PROFINET ring
4.3.2
S7-1500R/H configuration with switches and linear topology
Introduction
The following sections set out configurations of the S7-1500R/H redundant system with switches and line topology.
Benefits/advantages
You can use a switch to add an additional line topology to the PROFINET ring. Unlike the PROFINET ring, the line topology is not redundant.
PROFINET IO devices can be located in the PROFINET ring or they can be separated with a switch.
S7-1500R/H redundant system
64
System Manual, 11/2019, A5E41814787-AB
S7-1500R configuration
Application planning 4.3 Configuration versions
CPU 1 CPU 2 PROFINET cable (redundancy connections, PROFINET ring) IO device ET 200SP (with system redundancy S2) IO device ET 200MP (with system redundancy S2) Switch Standard IO device ET 200SP HMI device
Figure 4-4 S7-1500R configuration with switches and line topology
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
65
Application planning 4.3 Configuration versions
S7-1500H configuration
CPU 1 CPU 2 Two fiber-optic cables (redundancy connections) IO device ET 200MP (with system redundancy S2) IO device ET 200SP (with system redundancy S2) Standard IO device ET 200MP Standard IO device ET 200SP PROFINET cable (PROFINET ring) Switch HMI device
Figure 4-5 S7-1500H configuration with switches and line topology
S7-1500R/H redundant system
66
System Manual, 11/2019, A5E41814787-AB
4.4
Redundancy scenarios
Application planning 4.4 Redundancy scenarios
4.4.1
Introduction
Introduction
This section describes possible redundancy scenarios on the basis of various different configuration variants. The redundancy scenarios do not result in process restrictions. In the examples shown, the failures are tolerated by the redundant system.
The following convention applies:
Figure 4-6 Yellow traffic light
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
67
Application planning 4.4 Redundancy scenarios
4.4.2
Failure of the primary CPU
Introduction
The following redundancy scenario describes the effects of a defective primary CPU.
Redundancy scenario
Primary CPU failed Backup CPU becomes new primary CPU PROFINET cable (redundancy connections, PROFINET ring) IO device ET 200MP (with system redundancy S2) IO device ET 200SP (with system redundancy S2) Switch Standard IO device ET 200SP
Figure 4-7 Failure of the primary CPU (using S7-1500R as an example)
S7-1500R/H redundant system
68
System Manual, 11/2019, A5E41814787-AB
Application planning 4.4 Redundancy scenarios
Sequence of events
1. The primary CPU of the redundant system fails in the RUN-Redundant system state.
2. The redundant system switches to the backup CPU. The backup CPU becomes the new primary CPU. The redundant system switches to the RUN-Solo system state. You can find additional information on the RUN-Solo system state in the section Operating and system states (Page 205).
3. The new primary CPU exchanges process data with the IO devices.
Note Temporary separation of standard IO devices in the event of failure of the primary CPU
If the primary CPU fails, the standard IO devices are temporarily separated from the S7-1500R/H redundant system. During this time, the configured substitute value behavior applies to the modules of the standard IO devices.
The new primary CPU establishes the connections to the standard IO devices again. After a short time, the primary CPU resumes exchanging process data with the standard IO devices.
4. The redundancy of the system is restricted. The restriction has no impact on the process. If another system component or another network segment fails, this can result in the failure of the S7-1500R/H redundant system. You can find additional information in the section Failure scenarios (Page 81).
Diagnostics
System state, operating states and error displays after primary-backup switchover:
Redundant system RUN-Solo system state
Primary CPU (previously backup CPU) RUN operating state
MAINT LED yellow light: The R/H system is not in the RUN-Redundant system state. No partner CPU has been found in the redundant system. The PROFINET ring is open.
Backup CPU (previously primary CPU) failed
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective CPU. You can find additional information on the procedure in the section Replacing defective R/H CPUs (Page 269).
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
69
Application planning 4.4 Redundancy scenarios
4.4.3
Failure of the backup CPU
Introduction
The following redundancy scenario describes the effects of a defective backup CPU.
Redundancy scenario
Primary CPU Backup CPU failed PROFINET cable (redundancy connections, PROFINET ring) IO device ET 200MP IO device ET 200SP
Figure 4-8 Failure of the backup CPU (using S7-1500R as an example)
Sequence of events
1. The backup CPU of the redundant system fails in the RUN-Redundant system state.
2. The redundant system switches to the RUN-Solo system state. You can find additional information on the RUN-Solo system state in the section Operating and system states (Page 205).
3. The primary CPU continues to exchange process data with the IO devices (and standard IO devices).
4. The redundancy of the system is restricted. The restriction has no impact on the process. If another system component or another network segment fails, this can result in the failure of the S7-1500R/H redundant system. You can find additional information in the section Failure scenarios (Page 81).
S7-1500R/H redundant system
70
System Manual, 11/2019, A5E41814787-AB
Application planning 4.4 Redundancy scenarios
Diagnostics
System state, operating states and error displays after primary-backup switchover:
Redundant system RUN-Solo system state
Primary CPU RUN operating state
MAINT LED yellow light: The R/H system is not in the RUN-Redundant system state. No partner CPU has been found in the redundant system. The PROFINET ring is open.
Backup CPU failed
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective CPU. You can find additional information on the procedure in the section Replacing defective R/H CPUs (Page 269).
4.4.4
Failure of the PROFINET cable in the PROFINET ring
Introduction
The following redundancy scenario describes the effects of a defective PROFINET cable in the PROFINET ring.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
71
Application planning 4.4 Redundancy scenarios
Redundancy scenario
Primary CPU Backup CPU PROFINET cable (redundancy connections, PROFINET ring) interrupted IO device ET 200MP IO device ET 200SP
Figure 4-9 Failure of a PROFINET cable in the PROFINET ring (using S7-1500R as an example)
Sequence of events
1. A defective or disconnected PROFINET cable interrupts the PROFINET ring of the redundant system.
2. The redundant system remains in the RUN-Redundant system state: The primary and backup CPUs remain in the RUN-Redundant operating state.
3. The redundant system selects an alternative connection over the backup CPU. This allows the redundant system to access all IO devices in the PROFINET ring again.
4. The redundancy of the system is restricted. The restriction has no effect on the process.
If another system component or another network segment fails, this can result in the failure of the S7-1500R/H redundant system.
If the PROFINET cable is also interrupted at another point, IO devices in the PROFINET ring may fail depending on the location of the interruption.
You can find additional information in the section Failure scenarios (Page 81).
S7-1500R/H redundant system
72
System Manual, 11/2019, A5E41814787-AB
Application planning 4.4 Redundancy scenarios
Diagnostics
System state, operating states and error displays after the failure of the PROFINET cable:
Redundant system RUN-Redundant system state
Primary CPU RUN-Redundant operating state
MAINT LED yellow light: The PROFINET ring is open. There is only one redundancy connection remaining in the redundant system.
Backup CPU RUN-Redundant operating state
MAINT LED yellow light: The PROFINET ring is open. There is only one redundancy connection remaining in the redundant system.
WARNING Failure of the redundant system S7-1500R If the primary CPU fails in addition to the PROFINET cable, the backup CPU switches to the STOP operating state. You can find more information in the section Failure of the primary CPU when IO devices have failed in the PROFINET ring (Page 89).
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective PROFINET cable or reconnect the disconnected PROFINET cable. You can find additional information on the procedure in the section Replacing defective PROFINET cables.
4.4.5
Specific redundancy scenarios for S7-1500H
4.4.5.1
Failure of a redundancy connection in S7-1500H
Introduction
The following redundancy scenario describes the effects of a defective redundancy connection in S7-1500H.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
73
Application planning 4.4 Redundancy scenarios
Redundancy scenario
Primary CPU Backup CPU One fiber-optic cable (redundancy connection) interrupted IO device ET 200SP IO device ET 200MP PROFINET cable (PROFINET ring)
Figure 4-10 Failure of a redundancy connection
Sequence of events
1. One of the two redundancy connections (fiber-optic cables) is interrupted.
2. The system continues to exchange process data with the IO devices.
3. The redundancy of the system is restricted. The redundant system will remain in the RUN-Redundant system state. The restriction has no effect on the process.
S7-1500R/H redundant system
74
System Manual, 11/2019, A5E41814787-AB
Application planning 4.4 Redundancy scenarios
Diagnostics
System state, operating states and error displays after the failure of a redundancy connection:
Redundant system RUN-Redundant system state
Primary CPU RUN-Redundant operating state
MAINT LED yellow light: There is only one redundancy connection remaining in the H system.
Backup CPU RUN-Redundant operating state
MAINT LED yellow light: There is only one redundancy connection remaining in the H system.
WARNING Failure of the redundant system If the primary CPU fails in addition to the redundancy connection, the backup CPU switches to the STOP operating state. You can find more information in the section Failure of one redundancy connection and the primary CPU in S7-1500H (Page 94).
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective redundancy connection. You can find additional information on the procedure in the section Replacing defective redundancy connections (Page 270).
4.4.5.2
Failure of both redundancy connections in S7-1500H > 1500 ms apart
Introduction
The following redundancy scenario describes the effects of a defect in each of the two redundancy connections in S7-1500H. In this redundancy scenario, the time between the redundancy connection failures is > 1500 ms.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
75
Application planning 4.4 Redundancy scenarios
Redundancy scenario
Primary CPU (S7-1500H) Backup CPU (S7-1500H) Two fiber-optic cables (redundancy connections) interrupted IO device ET 200MP IO device ET 200SP PROFINET cable (PROFINET ring)
Figure 4-11 Failure of both redundancy connections (> 1500 ms apart)
Sequence of events
1. The two redundancy connections (fiber-optic cables) are interrupted, one > 1500 ms after the other.
2. The redundant system switches to the RUN-Solo system state. The primary CPU remains in the RUN operating state. The backup CPU switches to the STOP operating state.
3. The primary CPU continues to exchange process data with the IO devices.
4. The redundancy of the system is restricted. The restriction has no impact on the process. If another system component or another network segment fails, this can result in the failure of the S7-1500R/H redundant system. You can find additional information in the section Failure scenarios (Page 81).
S7-1500R/H redundant system
76
System Manual, 11/2019, A5E41814787-AB
Application planning 4.4 Redundancy scenarios
Diagnostics
System state, operating states and error displays after the failure of both redundancy connections:
Redundant system RUN-Solo system state
Primary CPU RUN operating state
MAINT LED yellow light: The H-system is not in the RUN-Redundant system state. No partner CPU has been found in the H-system.
Backup CPU STOP operating state
MAINT LED yellow light: The H-system is not in the RUN-Redundant system state. No partner CPU has been found in the H-system.
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective redundancy connections. You can find additional information on the procedure in the section Replacing defective redundancy connections (Page 270).
4.4.5.3
Failure of both redundancy connections and the PROFINET cable in the PROFINET ring
Introduction
The following redundancy scenario describes the effects of a defect in each of the two redundancy connections and in the PROFINET cable in the PROFINET ring. In this redundancy scenario, the time between the redundancy connection failures is > 1500 ms.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
77
Application planning 4.4 Redundancy scenarios
Redundancy scenario
Primary CPU Backup CPU Two fiber-optic cables (redundancy connections) interrupted IO device ET 200SP IO device ET 200MP PROFINET cable (PROFINET ring) interrupted
Figure 4-12 Failure of both redundancy connections and a PROFINET cable in the PROFINET ring
Sequence of events
1. Both redundancy connections (fiber-optic cables) fail in the redundant system. The time between the failures is > 1500 ms.
2. The redundant system switches to the RUN-Solo system state. The primary CPU remains in the RUN operating state. The backup CPU switches to the STOP operating state.
3. A defective PROFINET cable also interrupts the PROFINET ring.
4. The redundant system accesses all IO devices in the PROFINET ring again over the remaining PROFINET cables.
5. The redundancy of the system is restricted. The restrictions have no effect on the process.
S7-1500R/H redundant system
78
System Manual, 11/2019, A5E41814787-AB
Application planning 4.4 Redundancy scenarios
Diagnostics
System state, operating states and error displays after the failure of the redundancy connections and PROFINET cable:
Redundant system RUN-Solo system state
Primary CPU RUN operating state
MAINT LED yellow light: The H-system is not in the RUN-Redundant system state. No partner CPU has been found in the H-system. The PROFINET ring is open (requirement: Primary CPU is MRP Manager).
Backup CPU STOP operating state
MAINT LED yellow light: The H-system is not in the RUN-Redundant system state. No partner CPU has been found in the H-system.
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective redundancy connections and the defective PROFINET cable. You can find more information on the procedure in the following sections:
Replacing defective redundancy connections (Page 270)
Replacing defective PROFINET cables
4.4.5.4
Failure of the two PROFINET cables in the PROFINET ring on the backup CPU
Introduction
The following redundancy scenario describes the effects of a defect of both PROFINET cables in the PROFINET ring at the backup CPU.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
79
Application planning 4.4 Redundancy scenarios
Redundancy scenario
Primary CPU Backup CPU Two fiber-optic cables (redundancy connections) IO device ET 200SP IO device ET 200MP PROFINET cables (PROFINET ring) interrupted
Figure 4-13 Failure of both PROFINET cables in the PROFINET ring at the backup CPU
Sequence of events
1. Both PROFINET cables in the PROFINET ring upon failure of the backup CPU.
2. The redundant system will remain in the RUN-Redundant system state. The primary and backup CPUs remain in the RUN-Redundant operating state.
3. The redundant system continues to reach all IO devices in the PROFINET ring.
4. The redundancy of the system is restricted. The restrictions have no effect on the process.
S7-1500R/H redundant system
80
System Manual, 11/2019, A5E41814787-AB
Application planning 4.5 Failure scenarios
Diagnostics
System state, operating states and error messages after the failure of both PROFINET cables on the backup CPU:
Redundant system RUN-Redundant system state
Primary CPU RUN-Redundant operating state
MAINT LED yellow light: The PROFINET ring is open.
Backup CPU RUN-Redundant operating state
MAINT LED yellow light: The PROFINET ring is open. The backup CPU cannot accept IO devices.
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective PROFINET cables. You can find additional information on the procedure in the section Replacing defective PROFINET cables.
4.5
Failure scenarios
Introduction
This section describes possible failure scenarios with the various configuration variants. The failure scenarios lead to process restrictions. In the examples shown, the redundant system cannot tolerate the failures any longer.
The following convention applies:
Figure 4-14 Red traffic light
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
81
Application planning 4.5 Failure scenarios
4.5.1
Failure of an IO device in the PROFINET ring
Introduction
The following failure scenario describes the effects of a defective IO device in the PROFINET ring.
Failure scenario
Primary CPU Backup CPU PROFINET cable (redundancy connections, PROFINET ring) IO device ET 200MP IO device ET 200SP failed
Figure 4-15 Failure of an IO device in the PROFINET ring (using S7-1500R as an example)
Sequence of events
1. An IO device in the PROFINET ring fails.
2. The PROFINET ring is interrupted.
3. The redundant system selects an alternative connection over the backup CPU. This allows the redundant system to access all remaining IO devices in the PROFINET ring again.
4. The failure of the IO device has an impact on the process. If the failed inputs and outputs have an important function in the system, their failure can have a critical impact on the process.
S7-1500R/H redundant system
82
System Manual, 11/2019, A5E41814787-AB
Application planning 4.5 Failure scenarios
Diagnostics
System state, operating states and error displays after the failure of an IO device: Redundant system RUN-Redundant system state Primary CPU RUN-Redundant operating state
MAINT LED: yellow light: The PROFINET ring is open. Singular redundancy connection available.
ERROR LED flashes red: An IO device has failed. Backup CPU RUN-Redundant operating state
MAINT LED yellow light: The PROFINET ring is open. Singular redundancy connection available.
ERROR LED flashes red: An IO device has failed.
WARNING Failure of the redundant system If the primary CPU fails in addition to the PROFINET cable, the backup CPU switches to the STOP operating state. You can find more information in the section Failure of the primary CPU when IO devices have failed in the PROFINET ring (Page 89).
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective IO device. You can find additional information on the procedure in the section Replacing defective I/O devices/switches (Page 276).
4.5.2
Failure of a switch (with line topology) in the PROFINET ring
Introduction
The following failure scenario describes the effects of a defective switch (with line topology) in the PROFINET ring.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
83
Application planning 4.5 Failure scenarios
Failure scenario
Primary CPU Backup CPU PROFINET cable (redundancy connections, PROFINET ring) IO device ET 200MP IO device ET 200SP Switch failed IO device ET 200SP HMI device
Figure 4-16 Failure of a switch in the PROFINET ring (using S7-1500R as an example)
Sequence of events
1. A switch (with connected line topology) in the PROFINET ring fails.
2. The PROFINET ring is interrupted.
3. If applicable, the redundant system selects an alternative connection to the IO devices and over the backup CPU. This allows the redundant system to access all IO devices
in the PROFINET ring again.
4. The failure of the switch has an impact on the process as the IO devices in the line topology can no longer be accessed. If the failed inputs and outputs have an important function in the system, their failure can have a critical impact on the process.
S7-1500R/H redundant system
84
System Manual, 11/2019, A5E41814787-AB
Application planning 4.5 Failure scenarios
Diagnostics
System state, operating states and error displays after the failure of a switch: Redundant system RUN-Redundant system state Primary CPU RUN-Redundant operating state
MAINT LED yellow light: The PROFINET ring is open. ERROR LED flashes red: One or more IO devices have failed. Backup CPU RUN-Redundant operating state MAINT LED yellow light: The PROFINET ring is open. ERROR LED flashes red: One or more IO devices have failed.
WARNING Failure of the redundant system If the primary CPU fails in addition to the PROFINET cable, the backup CPU switches to the STOP operating state. You can find more information in the section Failure of the primary CPU when IO devices have failed in the PROFINET ring (Page 89).
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective switch. You can find additional information on the procedure in the section Replacing defective I/O devices/switches (Page 276).
4.5.3
Specific failure scenarios with S7-1500R
4.5.3.1
Two cable interruptions in the PROFINET ring in S7-1500R > 1500 ms apart
Introduction
The following failure scenario describes the effects of two cable interruptions in the PROFINET ring. In this failure scenario, the time between the two cable interruptions is > 1500 ms.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
85
Application planning 4.5 Failure scenarios
Failure scenario
Primary CPU Backup CPU PROFINET ring interrupted at two points IO device ET 200MP IO device ET 200SP
Figure 4-17 Two cable interruptions in the PROFINET ring (> 1500 ms apart)
Sequence of events
1. The PROFINET ring is interrupted at one point.
2. The redundant system remains in the RUN-Redundant system state: The primary and backup CPUs remain in the RUN-Redundant operating state.
3. The PROFINET ring is interrupted at a second point > 1500 ms later.
4. The redundant system switches to the RUN-Solo system state. The primary CPU remains in the RUN operating state. The backup CPU switches to the STOP operating state.
5. CPU redundancy has failed. The failure has an impact on the process. The RUN-Solo system state and the cable interruptions mean that not all IO devices in the PROFINET ring can be accessed. If the failed inputs and outputs have an important function in the system, their failure can have a critical impact on the process.
S7-1500R/H redundant system
86
System Manual, 11/2019, A5E41814787-AB
Application planning 4.5 Failure scenarios
Diagnostics
System state, operating states and error displays after the cable interruptions: Redundant system RUN-Solo system state Primary CPU RUN operating state
MAINT LED yellow light: The R-system is not in the RUN-Redundant system state. No partner CPU has been found in the R-system. The PROFINET ring is open.
ERROR LED flashes red: One or more IO devices cannot be accessed. Backup CPU STOP operating state
MAINT LED yellow light: The R-system is not in the RUN-Redundant system state. No partner CPU has been found in the R-system. The PROFINET ring is open.
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective PROFINET cables. You can find additional information on the procedure in the section Replacing defective redundancy connections (Page 270).
4.5.3.2
Two cable interruptions in the PROFINET ring in S7-1500R within 1500 ms
Introduction
The following failure scenario describes the effects of two cable interruptions in the PROFINET ring. In this failure scenario, the time between the two cable interruptions is 1500 ms.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
87
Application planning 4.5 Failure scenarios
Failure scenario
Primary CPU Backup CPU PROFINET ring interrupted a 2 locations IO device ET 200MP IO device ET 200SP
Figure 4-18 2 cable interruptions in the PROFINET ring (within 1500 ms)
Sequence of events
1. The PROFINET ring is interrupted at 2 points at a time interval of 1500 ms.
2. The redundant system switches to an undefined system state: The primary CPU remains in the RUN operating state. The backup CPU becomes the primary CPU and remains in RUN operating state.
3. The two primary CPUs continue to exchange process data with the accessible IO devices.
4. The redundancy of the system is defective. The redundant system is in an undefined system state. The undefined system state can lead to dangerous states in the process.
WARNING
Undefined system state of the S7-1500R redundant system at the same time as a cable interruption in the PROFINET ring at 2 points within 1500 ms.
Lay the PROFINET cables so that they are securely protected from damage. PROFINET cables should also always be laid separately from each other. This makes simultaneous damage to the PROFINET cables (within 1500 ms) unlikely.
S7-1500R/H redundant system
88
System Manual, 11/2019, A5E41814787-AB
Application planning 4.5 Failure scenarios
Diagnostics
System state and operating states after cable interruptions:
Redundant system System state defective (undefined: Each R-CPU is in the RUN-Solo system state).
Primary CPU RUN operating state
MAINT LED yellow light: The R-system is not in the RUN-Redundant system state. No partner CPU has been found in the R-system. The PROFINET ring is open.
ERROR LED flashes red: An IO device has failed.
Primary CPU (previously backup CPU) RUN operating state
MAINT LED yellow light: The R-system is not in the RUN-Redundant system state. No partner CPU has been found in the R-system. The PROFINET ring is open.
ERROR LED flashes red: An IO device has failed.
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Please note the following solution:
Note Before you replace the defective PROFINET cables, you must switch both R-CPUs to the STOP operating state. Only then repair the PROFINET cables in the PROFINET ring. Afterwards, switch the R-CPUs back to the RUN operating state.
You can find additional information on the procedure in the section Replacing defective redundancy connections (Page 270).
4.5.3.3
Failure of the primary CPU when IO devices have failed in the PROFINET ring
Introduction
The following failure scenario describes the effects of a defective IO device in the PROFINET ring and a defective primary CPU.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
89
Application planning 4.5 Failure scenarios
Failure scenario
Primary CPU failed (2nd failure in sequence of events) Backup CPU switches to STOP operating state PROFINET cable (redundancy connections, PROFINET ring) IO device ET 200MP IO device ET 200SP failed (1st failure in sequence)
Figure 4-19 Failure of an IO device in the PROFINET ring and the primary CPU (using S7-1500R as an example)
Sequence of events
1. An IO device in the PROFINET ring fails.
2. As a result, the PROFINET ring is interrupted.
3. The redundant system selects an alternative connection over the backup CPU. This allows the redundant system to access all remaining IO devices in the PROFINET ring again.
4. The primary CPU also fails.
S7-1500R/H redundant system
90
System Manual, 11/2019, A5E41814787-AB
Application planning 4.5 Failure scenarios
5. The redundant system does not switch to the backup CPU and switches to the STOP system state. The role of the backup CPU remains unchanged.
Note The backup CPU cannot distinguish between the following scenarios: · It can no longer access the primary CPU because the latter has failed. · The other redundancy connection has also been interrupted and the primary CPU may
still be running. That is why the backup CPU does not become the primary CPU. This prevents an undefined system state.
6. The redundant system has failed. The process is no longer controlled by the redundant system.
Diagnostics
System state, operating states and error displays after the failure of the IO device in the PROFINET-Ring and the STOP of Backup CPU: Redundant system STOP system state Primary CPU failed Backup CPU STOP operating state
MAINT LED yellow light: The R-system is not in the RUN-Redundant system state. No partner CPU has been found in the R-system. The PROFINET ring is open.
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective IO device and the defective primary CPU. You can find additional information on the procedure in the sections Replacing defective R/H CPUs (Page 269) and Replacing defective I/O devices/switches (Page 276).
Note
Proceed as follows if you have ensured that the CPU is still working in the STOP operating state and can access all important IO devices: 1. Replace the defective IO device. 2. Switch the CPU from STOP operating state to the RUN operating state. 3. Replace the defective CPU. Switch the new CPU to the RUN operating state.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
91
Application planning 4.5 Failure scenarios
4.5.4
Specific failure scenarios with S7-1500H
4.5.4.1
Failure of both redundancy connections in S7-1500H 1500 ms apart
Introduction
The following failure scenario describes the effects of a defect in each of the two redundancy connections in S7-1500H. In this failure scenario, the time between the redundancy connection failures is 1500 ms.
Failure scenario
Primary CPU Backup CPU Two fiber-optic cables (redundancy connections) interrupted IO device ET 200SP IO device ET 200MP PROFINET cable (PROFINET ring)
Figure 4-20 Failure of both redundancy connections
S7-1500R/H redundant system
92
System Manual, 11/2019, A5E41814787-AB
Application planning 4.5 Failure scenarios
Sequence of events
1. The two redundancy connections (fiber-optic cables) are interrupted 1500 ms apart.
2. The redundant system switches to an undefined system state: The primary CPU remains in the RUN operating state. The backup CPU becomes the primary CPU and remains in RUN operating state.
3. The two primary CPUs continue to exchange process data with the PROFINET devices.
4. The redundancy of the system is defective. The redundant system is in an undefined system state. The undefined system state can lead to dangerous states in the process.
WARNING
Undefined system state of the S7-1500H redundant system when two redundancy connections are interrupted 1500 ms apart.
Lay the redundancy connections so that the fiber-optic cables are securely protected from damage. Also make sure when laying the cables that the two redundancy connections are always separate from each other. This makes simultaneous damage to the redundancy connections (< 1500 ms apart) unlikely.
Diagnostics
System state and operating states after the failure of both redundancy connections: Redundant system System state defective (undefined: Each H-CPU is in the RUN-Solo
system state).
Primary CPU RUN operating state
MAINT LED yellow light: The H-system is not in the RUN-Redundant system state. No partner CPU has been found in the H-system.
Primary CPU (previously backup CPU) RUN operating state
MAINT LED yellow light: The H-system is not in the RUN-Redundant system state. No partner CPU has been found in the H-system.
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Please note the following solution:
Note Before you replace the defective redundancy connections, you must switch both H-CPUs to the STOP operating state. Only then repair the redundancy connections. Switch the H-CPUs back to the RUN operating state.
You can find additional information on the procedure in the section Replacing defective redundancy connections (Page 270).
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
93
Application planning 4.5 Failure scenarios
4.5.4.2
Failure of one redundancy connection and the primary CPU in S7-1500H
Introduction
The following failure scenario describes the effects of a defect in a redundancy connection and the primary CPU in S7-1500H. In this failure scenario, the time between the redundancy connection failure and the primary CPU is > 1500 ms.
Failure scenario
Primary CPU failed (2nd failure in sequence of events) Backup CPU One fiber-optic cable (redundancy connection) interrupted (1st failure in sequence of events) IO device ET 200SP IO device ET 200MP PROFINET cable (PROFINET ring)
Figure 4-21 Failure of one redundancy connection and the primary CPU
S7-1500R/H redundant system
94
System Manual, 11/2019, A5E41814787-AB
Application planning 4.5 Failure scenarios
Sequence of events
1. One of the two redundancy connections is interrupted.
2. Availability is restricted. The redundant system will remain in the RUN-Redundant system state.
3. The primary CPU also fails. Due to the failure, the primary CPU is no longer visible for the backup CPU.
4. The redundant system does not switch to the backup CPU, but switches to the STOP system state. The role of the backup CPU remains unchanged.
Note
The backup CPU cannot distinguish between the following scenarios: · It can no longer access the primary CPU because the latter has failed. · The other redundancy connection has also been interrupted and the primary CPU may
still be running.
That is why the backup CPU does not become the primary CPU. This prevents an undefined system state.
5. System redundancy has failed. The process is no longer controlled by the redundant system.
Diagnostics
System state and operating states after the failure of the redundancy connection and primary CPU:
Redundant system STOP system state
Primary CPU failed
Backup CPU STOP operating state
MAINT LED yellow light: The H-system is not in the RUN-Redundant system state. No partner CPU has been found in the H-system.
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective redundancy connection and the primary CPU. You can find additional information on the procedure in the sections Replacing defective redundancy connections (Page 270) and Replacing defective R/H CPUs (Page 269).
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
95
Application planning 4.5 Failure scenarios
4.5.4.3
Failure of the two PROFINET cables in the PROFINET ring at the primary CPU
Introduction
The following redundancy scenario describes the effects of a defect of both PROFINET cables in the PROFINET ring at the primary CPU.
Redundancy scenario
Primary CPU Backup CPU Two fiber-optic cables (redundancy connections) IO device ET 200SP IO device ET 200MP PROFINET cables (PROFINET ring) interrupted
Figure 4-22 Failure of both PROFINET cables in the PROFINET ring at the primary CPU
Sequence of events
1. Both PROFINET cables in the PROFINET ring at the primary CPU fail. The redundant system will not execute a primary-backup switchover. The redundant system will remain in the RUN-Redundant system state.
2. The primary CPU can no longer access the IO devices in the PROFINET ring. The IO devices will return to the substitute values.
3. The failure of both PROFINET cables affects the process, since the IO devices in the PROFINET ring can no longer be reached from the primary CPU.
S7-1500R/H redundant system
96
System Manual, 11/2019, A5E41814787-AB
Application planning 4.5 Failure scenarios
Diagnostics
System state, operating states and error displays after the failure of the PROFINET cables: Redundant system RUN-Redundant system state Primary CPU RUN-Redundant operating state
MAINT LED yellow light: The PROFINET ring is open. ERROR LED flashes red: IO devices have failed. Backup CPU RUN-Redundant operating state MAINT LED yellow light: The PROFINET ring is open. ERROR LED flashes red: IO devices have failed.
Note To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Replace the defective PROFINET cables. You can find additional information on the procedure in the section Replacing defective PROFINET cables (Page 274).
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
97
Application planning 4.6 Hardware configuration
4.6
Hardware configuration
Modules suitable for R/H-CPUs
The integrated system power supply of the R/H-CPU supplies the required power for operation. Optionally, you can also use a load current supply.
The table below shows which modules can be used in the various R/H-CPU slots:
Table 4- 5 Maximum configuration Module type
Load current supply (PM) 1) CPU 1) No connection to the backplane bus.
Maximum number of mod- Maximum number of mod-
ules, primary CPU (mount- ules, backup CPU (mounting
ing rail)
rail)
Unlimited
Unlimited
1
1
Optional load current supply and first R/H-CPU Optional load current supply and second R/H-CPU
Figure 4-23 Assignment of slot numbers
S7-1500R/H redundant system
98
System Manual, 11/2019, A5E41814787-AB
Application planning 4.7 Using HMI devices
Maximum number of PROFINET devices in the redundant system
The table below shows the maximum number of PROFINET devices in the redundant system. The maximum number includes switches, S7-1500R/H CPUs, S7-1500 CPUs (V2.5 or later) and HMI devices. It does not include media converters.
Table 4- 6 Number of PROFINET devices in the redundant system
PROFINET devices
In the PROFINET ring
In the PROFINET ring and separated with switches (line)
Maximum number, S71500R
50 (Recommendation 16) 1)
66
Maximum number, S7-1500H 50
258
1) Recommendation: The number of devices in the PROFINET ring affects the availability of the S71500R system. The number of PROFINET devices including R-CPUs in the PROFINET ring should not exceed 16. If you operate significantly more devices in the PROFINET ring, the availability of the IO devices and R-CPUs is reduced. The technical specifications in the documentation are based on the recommended maximum of 16 PROFINET devices in the ring in S7-1500R.
4.7
Using HMI devices
Introduction
You can use the same HMI devices for the S7-1500R/H redundant system as for the S7-1500 automation system.
If you use HMI devices in the PROFINET ring with S7-1500R, those HMI devices must support media redundancy. The H-Sync forwarding function is also recommended.
If you use HMI devices in the PROFINET ring with S7-1500H, those HMI devices must support media redundancy.
You transfer the HMI configuration to your HMI device using the configuration and programming software (Engineering Station).
You can connect the HMI device to the redundant system with the system IP address. Connection to the redundant system is possible within and outside the PROFINET ring. The HMI device always communicates with the primary CPU over the system IP address in the RUN-Redundant, RUN-Solo and STOP system states, provided you have activated the system IP address and selected it in the connection configuration for the HMI device.
If the role of primary CPU switches to the other CPU, the communication relationship of the HMI device also switches to the other (primary) CPU.
As an alternative to the system IP address, you can also use a device IP address to connect the HMI device to an R/H-CPU. The HMI device then only communicates with the connected CPU.
When exchanging data via device proxy data, make sure that the IP addresses and system IP addresses are correctly assigned to the PROFINET interfaces. You can find additional information on devices proxy data in the STEP 7 online help.
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
99
Application planning 4.7 Using HMI devices
Connecting HMI devices over Industrial Ethernet and the PROFINET ring, example with CPU 1517H-3 PN/CPU 1515R-2 PN
The figure below is an example of how you can connect the CPU 1517H-3 PN to an HMI device over Industrial Ethernet and the PROFINET ring. Connect the HMI devices in the same way as for the CPU 1515R-2 PN.
Figure 4-24 Configuration example CPU 1517H-3 PN: Connecting HMI devices over Industrial Ethernet and the PROFINET ring
The CPUs 1517H-3 PN/CPU 1515R-2 PN has a PROFINET IO interface with 2 ports (X1 P1 R, X1 P2 R) and a PROFINET interface with a port (X2 P1).
To connect an HMI device to the CPUs over Industrial Ethernet, you use the X2 PROFINET interfaces of the CPU. PROFINET interface X2 supports PROFINET basic functionality. The interface, for example, is suitable for communication with an HMI device or configuration and programming software (Engineering Station).
Note
A PROFINET device (such as an HMI device) can only communicate with the redundant system over the system IP address if it has been connected to both R/H-CPUs. Always connect the PROFINET device to the same interfaces, X1 or X2, on both R/H-CPUs. Do not mix interfaces X1 and X2: If you mix interfaces X1 with X2, the HMI connection is no longer redundant.
Integrate a switch into the PROFINET ring to connect an HMI device to the PROFINET ring. Use this to establish a connection to the HMI device.
100
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Application planning 4.7 Using HMI devices
The PROFINET ring is set up using the PROFINET IO interfaces (X1) of the CPUs. If you operate HMI devices within the ring, you need to assign the MRP role "Client" to the MRP domain. You can find more information on HMI device application planning in the section Requirements (Page 58). You can find more information on the interfaces of the CPUs 1517H-3 PN/CPU 1515R-2 PN in the relevant device manual.
Connecting HMI devices over Industrial Ethernet, example with CPU 1513R-1 PN
The figure below shows how to connect an HMI device over Industrial Ethernet with the CPU 1513R-1 PN.
Reference
Figure 4-25 Configuration example CPU 1513R-1 PN: Connecting the HMI device via a switch
CPU 1513R-1 PN has a PROFINET IO interface with 2 ports (X1 P1 R and X1 P2 R). To connect an HMI device to the CPUs over Industrial Ethernet, you set up the PROFINET ring over PROFINET interface X1. Integrate a switch into the PROFINET ring. Use this to establish an Industrial Ethernet connection. You can find additional information on the interfaces of CPU 1513R-1 PN in the relevant device manual.
You can find more information on the system IP address in the section Configuration process (Page 145) and in the Communication (https://support.industry.siemens.com/cs/ww/de/view/59192925/en) function manual. More information on how to set up an HMI connection to the S7-1500R/H redundant system is available in the Communication (https://support.industry.siemens.com/cs/ww/de/view/59192925/en) function manual.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
101
Installation
5
5.1
Basics
Installation site
All modules of the S7-1500R/H redundant system are unenclosed equipment. You may only install unenclosed equipment in housings, cabinets or electrical operating rooms indoors. The housings, cabinets and electrical operating rooms must guarantee protection against electric shock and spread of fire. The requirements for mechanical strength must also be met. The housings, cabinets, and electrical operating rooms must not be accessible without a key or tool. Personnel must be trained or approved for access.
Installation position
The S7-1500R/H redundant system is designed for use in the following mounting positions: Horizontal mounting position up to 60 °C Vertical mounting position up to 40 °C Additional information can be found in the section Mechanical and climatic environmental conditions.
Mounting rail
You can mount the following components on the mounting rails alongside the S7-1500R/H CPUs, load current supplies:
Terminals
Circuit breakers
Small contactors
Similar components
These components can influence the installation dimensions for the cable duct.
Modules can be mounted right to the outer edge of the mounting rail.
The mounting rails are available in various lengths. You order the mounting rails using the online catalog or the online ordering system. The available lengths and article numbers can be found in the appendix Accessories/spare parts (Page 315).
102
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Installation 5.1 Basics
Minimum clearances
Modules can be mounted right to the outer edge of the mounting rail. Maintain the following minimum clearances when installing or dismantling the S7-1500R/H redundant system.
Upper edge of the mounting rail
Figure 5-1 Minimum clearances in the control cabinet
Installation rules
The redundant system configuration consists of: R/H-CPU and an optional load current supply.
WARNING Protection from conductive contamination Protect the devices from conductive contamination, taking into account the ambient conditions. Protection from conductive contamination can, for example, be achieved by installing the devices in a control cabinet with the appropriate degree of protection.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
103
Installation 5.2 Installing the mounting rail
5.2
Installing the mounting rail
Introduction
The R/H-CPUs should be mounted either on one mounting rail or on two separate mounting rails.
Lengths and drill holes
The mounting rails are delivered in six lengths:
160 mm
245 mm
482.6 mm (19 inches)
530 mm
830 mm
2000 mm
You can find the article numbers in the appendix Accessories/spare parts (Page 315).
The mounting rails (from 160 to 830 mm) come with two drill holes for fixing screws. A set of screws for grounding the mounting rail is provided.
The 2000 mm mounting rail is designed for assemblies with special lengths and does not have holes for fixing screws. No set of screws for grounding is included with the mounting rail (can be ordered as accessories/spare parts (Page 315)).
The specifications of the maximum offsets between two drill holes can be found in the table, "Dimensions for the drill holes".
Tools required
Commercially available hacksaw Drill 6.5 mm Screwdriver Size 10 adjustable screw-wrench or socket wrench for grounding cable connection Adjustable screw-wrench, matching the selected fixing screws Stripping tool and crimp tool for the grounding cable
104
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Installation 5.2 Installing the mounting rail
Accessories required
Use the following screw types for fastening the mounting rails:
Table 5- 1 Accessories required
For ...
· Outer fixing screws · Additional fixing screws (for mount-
ing rails > 482.6 mm)
use ...
M6 fillister head screws according to ISO 1207/ISO 1580 (DIN 84/DIN 85)
M6 hexagon head screws according to ISO 4017 (DIN 4017)
Explanation
Choose a suitable screw length for your assembly.
You also need washers for cylinder head screws with an internal diameter of 6.4 mm and an external diameter of 11 mm in accordance with ISO 7092 (DIN 433).
Dimensions for the drill holes
Table 5- 2 Dimensions for the drill holes "Standard" mounting rails
"Longer" mounting rails
Length of the mounting rail Distance a
160 mm
10 mm
245 mm
10 mm
482.6 mm
8.3 mm
530 mm
15 mm
830 mm
15 mm
Distance b 140 mm 225 mm 466 mm 500 mm 800 mm
Additional fixing screws (for mounting rails > 530 mm)
For profile rails > 530 mm, we recommend using additional fixing screws at intervals of >482.6 mm on the identification groove.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
105
Installation 5.2 Installing the mounting rail
Preparing the 2000 mm mounting rail for installation
Proceed as follows to prepare the 2000 mm mounting rail for installation: 1. Cut the 2000 mm mounting rail to the required length. 2. Mark the holes. The necessary dimensions can be found in the table "Dimensions for the
drill holes": Two drill holes at the beginning and end of the mounting rail Additional drill holes at equal intervals of 500 mm maximum, along the identification
groove 3. Drill the marked holes according to the selected type of fastening. 4. Ensure that there are no burrs or shavings on the mounting rail.
Note To ensure secure installation of the modules, make sure that the drill holes are centered in the identification groove. Only use the maximum size of screws.
Identification groove for additional drill holes Additional drill hole
Figure 5-2 Preparing the 2000 mm mounting rail for installation
Installing the mounting rail
Install the mounting rails for the R/H-CPUs so that there is still sufficient space for installation and heat dissipation. Please study the figure Minimum clearances in the control cabinet (Page 103). Screw the rail onto the mounting surface.
106
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Installation 5.2 Installing the mounting rail
Attaching the protective conductor
The mounting rails of the S7-1500R/H redundant system must be connected to the protective conductor system of the electrical system to ensure electrical safety. Proceed as follows to connect the protective conductor: 1. Strip the grounding conductor with a minimum diameter of 10 mm2. Attach a ring terminal
for M6 bolts with the crimping pliers.
2. Slide the enclosed bolt into the T profile groove.
3. Insert the spacer, ring terminal with the grounding connector, flat washer, and lock washer onto the bolt (in that order). Thread on the hexagon nut. Fasten the components in place with the nut (torque 4 Nm).
4. Connect the opposite end of the grounding cable to the central grounding point/protective conductor busbar (PE).
5. If you mount the redundant system on separate mounting rails, repeat steps 1 to 4 for the second mounting rail.
Figure 5-3 Attaching the protective conductor
Note
Alternative grounding of the mounting rails
Grounding with the grounding screw is not required if the following requirements are met:
The mounting rails must be permanently connected to the protective conductor system using an equivalent fitting that complies with the applicable standards, for example by permanent attachment to a grounded control cabinet wall.
Reference
You can find more information on the exact dimensions of the mounting rails in the appendix Dimension drawings (Page 312).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
107
Installation 5.3 Installing the standard rail adapter
5.3
Installing the standard rail adapter
Introduction
Use the standard rail adapter to mount the redundant SIMATIC S7-1500R/H-system on the standardized 35 mm rails.
You order the DIN rail adapter as separate accessories.
Note Note the following reduced technical specifications regarding mechanical load when you install the S7-1500R/H modules on the 35 mm standard mounting rail using the standard mounting rail adapter:
Vibration test acc. to IEC 60068-2-6 (sinusoidal) · 5 Hz f 8.4 Hz, constant amplitude 3.5 mm · 8.4 Hz f 150 Hz, constant acceleration 1 g
Duration of vibration: 10 frequency sweeps per axis in each of three perpendicular axes
Shock, tested according to IEC 60068-2-27 · Type of shock: Half-sine · Shock intensity: 150 m/s2 peak value, 11 ms duration · Direction of shock: 3 shocks in +/- direction in each of three perpendicular axes
Article No.
6ES7590-6AA00-0AA0
The scope of delivery consists of ten adapters, ten hexagon socket-head screws and ten washers.
108
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
View
Installation 5.3 Installing the standard rail adapter
The DIN rail adapter consists of a clamp, an adapter frame and a hexagon socket-head screw with washer.
Clamp Adapter frame Hexagon socket-head screw Washer
Figure 5-4 Parts of the DIN rail adapter
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
109
Installation 5.3 Installing the standard rail adapter
Dimensional drawing
Position of the adapter frame during mounting to the standard DIN rail 35 mm x 7.5 mm Position of the adapter frame during mounting to the standard DIN rail 35 mm x 15 mm
Figure 5-5 Dimensional drawing
Tools required
Wrench matching the hexagon socket head cap screw M6 according to EN ISO 4762 (DIN 912).
110
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Properties
Installation 5.3 Installing the standard rail adapter
The standard rail adapter makes it possible to mount the S7-1500R/H mounting rail to the standardized 35 mm standard rails. The DIN rail adapter allows for the use of prefabricated control cabinet and terminal box systems. The total length of the S7-1500R/H mounting rail can be used again completely as before. To ensure optimal stability, the clearance between the two DIN rail adapters must be no more than 250 mm or less.
Figure 5-6 Distance between two DIN rail adapters
Note Note that, depending on the mounting rail width, the mounting rail adapter can protrude up to 4 mm on each side due to the drill holes. You can find an overview of the protrusion dimensions for the various DIN rails in the table below.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
111
Installation 5.3 Installing the standard rail adapter
Table 5- 3 Additional lateral space required
Mounting rail · 160.0 mm (with drill holes) · 245.0 mm (with drill holes) · 482.6 mm (with drill holes) · 530.0 mm · 830.0 mm (with drill holes)
Article No.
Additional space required with adapter
6ES7590-1AB60-0AA0 4 mm
6ES7590-1AC40-0AA0 4 mm
6ES7590-1AE80-0AA0 8 mm
6ES7590-1AF30-0AA0 0 mm
6ES7590-1AJ30-0AA0 0 mm
Procedure
Figure 5-7 DIN rail adapter protrusion
Mounting on the standard DIN rail 35 mm x 7.5 mm To install DIN rail adapter on the standard DIN rail 35 mm x 7.5 mm, follow these steps: 1. Set the clamp onto the standard DIN rail. 2. The shorter transverse edge of the adapter frame points towards the cabinet or box wall
(2). 3. Place the S7-1500R/H mounting rail on the adapter frame so that the groove in the
S7-1500R/H mounting rail covers the groove in the adapter frame. Place the S7-1500R/H mounting rail with the adapter frame onto the clamp (4).
112
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Installation 5.3 Installing the standard rail adapter
4. Use screws to fasten the S7-1500R/H mounting rail to the standard rail adapter and the standard mounting rail (Figure 5 - tightening torque 6 Nm).
Figure 5-8 Mounting sequence of the DIN rail adapter to the DIN rail 35 mm x 7.5 mm or 35 mm x 15 mm
Mounting to the standard DIN rail 35 mm x 15 mm
To install DIN rail adapter on the standard DIN rail 35 mm x 15 mm, follow these steps:
1. Set the clamp onto the standard DIN rail.
2. The longer transverse edge of the adapter frame points toward the cabinet or box wall (3).
3. Place the S7-1500R/H mounting rail on the adapter frame so that the groove in the S7-1500R/H mounting rail fits into the groove in the adapter frame. Place the S7-1500R/H mounting rail with the adapter frame onto the clamp (4).
4. Use screws to fasten the S7-1500R/H mounting rail to the standard rail adapter and the standard mounting rail (Figure 5 - tightening torque 6 Nm).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
113
Installation 5.4 Installing a load current supply
5.4
Installing a load current supply
Introduction
Load current supplies do not have a connection to the backplane bus of the S7-1500R/H redundant system and do not occupy a slot on the backplane bus.
Requirements
The mounting rail is installed.
Tools required
Slotted-head screwdriver with 4.5 mm blade
Installing a load current supply
Watch the video sequence (http://www.automation.siemens.com/salesmaterialas/interactive-manuals/getting-started_simatic-s7-1500/videos/EN/mount/start.html) To install a load current supply, follow these steps: 1. Hook the load current supply on the mounting rail. 2. Swivel the load current supply to the rear.
Figure 5-9 Installing a load current supply
3. Open the front cover. 4. Disconnect the power cable connector from the load current supply. 5. Screw the load current supply tight (torque 1.5 Nm). 6. Insert the already wired-up power cable connector into the load current supply.
114
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Installation 5.5 Installing R/H-CPUs
For a description on how to wire the power cable connector, refer to the section Connecting load current supply (Page 125).
Note Load current supplies can only be mounted on the left or right side outside the S7-1500R/H redundant system. If you mount a load current supply on the right of the configured setup, the heat development of the load current supply may make a gap to the configured setup necessary. For additional information, refer to the relevant manuals. The number of load current supplies that can be used is unlimited.
Uninstalling the load current supply
The load current supply is wired up. To uninstall a load current supply, follow these steps: 1. Open the front cover. 2. Shut down the load current supply. 3. Turn off the supply voltage. 4. Disconnect the power cable connector, and remove the connector from the load current
supply. 5. Unscrew the fixing screw. 6. Swivel the load current supply out of the mounting rail.
Reference
Additional information can be found in the manuals for the load current supplies.
5.5
Installing R/H-CPUs
Introduction
CPUs in the S7-1500R/H redundant system are installed in exactly the same way as CPUs in the S7-1500 automation system.
Requirements
The mounting rail is installed.
Note Protective film Please note that the R/H-CPUs come with a removable protective film on the display.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
115
Installation 5.5 Installing R/H-CPUs
Tools required
Slotted-head screwdriver with 4.5 mm blade
Installing R/H-CPUs
Watch the video sequence (http://www.automation.siemens.com/salesmaterialas/interactive-manuals/getting-started_simatic-s7-1500/videos/EN/mount/start.html) Proceed as follows to install an R/H-CPU: 1. Install the CPU to the mounting rail.
Only with optional load current supply: Move the CPU to the load current supply on the left.
2. Swivel the CPU in to the rear. 3. Screw the CPU tight (torque 1.5 Nm).
Uninstalling R/H-CPU
The R/H-CPU is wired. Proceed as follows to uninstall an R/H-CPU: 1. Open the front cover. 2. Switch the CPU into STOP mode. 3. Turn off the supply voltage. 4. Pull off the connector for the supply voltage. 5. Disconnect the cables at the CPU:
R-CPU: Disconnect the PROFINET cables. H-CPU: Disconnect the PROFINET cables and fiber-optic cables. 6. Undo the CPU fixing screw(s). 7. Pivot the CPU out of the mounting rail.
116
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring
6
6.1
Rules and regulations for operation
Introduction
The S7-1500R/H redundant system is a plant and system component. Special rules and regulations must be adhered to in line with the area of application.
This section gives an overview of the key rules for integration of the redundant system into a plant or system. Please follow these rules when connecting the S7-1500R/H redundant system.
Specific application
Observe the safety and accident prevention regulations that are applicable to specific applications (for example Machinery Directive).
EMERGENCY-STOP devices
EMERGENCY OFF equipment to IEC 60204 (corresponds to DIN VDE 0113) must remain effective in all operating modes of the plant or system.
Excluding hazardous plant states
Hazardous operating states must not occur when
The plant restarts after a voltage dip or power failure.
Bus communication is reestablished following a fault.
An undefined system state occurs in the S7-1500R/H. Example: Failure of both redundancy connections 1500 ms apart.
If a hazardous operating state occurs, force an EMERGENCY STOP.
An uncontrolled or undefined redundant system startup must not occur after the EMERGENCY STOP device is unlocked.
Line voltage
The points to note for line voltage are set out below:
For fixed plants or systems without multipole circuit breaker, a mains disconnection device (multipole) must be available in the building installation.
For the load current supply, the configured rated voltage range must correspond to the local line voltage.
For all power circuits of the S7-1500R/H redundant system, the fluctuation/deviation of the line voltage from the rated value must be within the permitted tolerance.
You can find more information in the section Specifications for insulation tests, protection class, degree of protection, and rated voltage (Page 310).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
117
Wiring 6.1 Rules and regulations for operation
24 V DC supply
The points to note for a 24 V DC supply are set out below:
Power supply units for the 24 V DC supply must supply safety extra low voltage in accordance with IEC 61131-2 or IEC 61010-2-201.
To protect the S7-1500R/H redundant system from lightning and overvoltages, use overvoltage arresters.
Suitable components for the lightning and overvoltage protection are specified in the Defining interference-free controllers (http://support.automation.siemens.com/WW/view/en/59193566) function manual.
Protection against electrical shock
The mounting rails of the S7-1500R/H redundant system must be connected conductively to the protective conductor to protect against electric shock.
You may only use conductors in the colors yellow-green for connections to protective conductor connections.
Protection against external electrical influences
The following describes what you must pay attention to in terms of protection against electrical influences and/or faults:
The system for discharging electromagnetic interference must be connected to a protective conductor with a sufficient cross-section for all plants with an S7-1500R/H redundant system.
You must ensure that all supply, signal and bus cables are correctly laid and installed.
For signal and bus lines, a cable break, wire break or a cross-circuit must not lead to undefined states in the plant or system.
Protection of redundancy connections against unauthorized access
Protect the redundant connections in a redundant S7-1500H system so that the fiber-optic cables are protected against unauthorized access, e.g. by spatial access protection.
Reference
Additional information can be found in the function manual, Designing interference-free controllers (http://support.automation.siemens.com/WW/view/en/59193566).
118
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.2 Operation on grounded infeed
6.2
Operation on grounded infeed
Introduction
Information is provided below on the overall configuration of an S7-1500R/H redundant system on a grounded incoming supply (TN-S network). The specific subjects discussed are: Shut-off devices, short circuit and overload protection in accordance with
IEC 60364, corresponds to DIN VDE 0100 IEC 60204, corresponds to DIN VDE 0113 Load current supplies and load circuits
Grounded infeed
In the case of grounding incoming supplies (TN-S system) the neutral conductor (N) and the protective conductor (PE) are each grounded. Both wires form a part of the overvoltage concept. When a plant is in operation, the current flows across the neutral conductor. When a fault occurs, for example a single ground fault between a live conductor and ground, the current flows through the protective conductor.
Safe electrical isolation (SELV in accordance with IEC 61131-2 or IEC 61010-2-201)
Load current supplies with 24 V DC output voltage require safe electrical separation and voltage limiting (extra low voltage). Load current supplies with a 24 V DC output voltage are not connected to the protective conductor. In accordance with IEC 61131-2 / IEC 61010-2-201, this protection is referred to as SELV (Safety Extra Low Voltage).
The wiring of SELV circuits must be safely separated from the wiring of other circuits that are not SELV, or the insulation of all conductors must be dimensioned for the higher voltage.
Protective extra-low voltage (PELV in accordance with IEC 61131-2 or IEC 61010-2-201)
Load current supplies with grounded 24 V DC output voltage require a safe connection to the protective conductor and voltage limiting (extra low voltage).
In accordance with IEC 61131-2 / IEC 61010-2-201, this protection is referred to as PELV (Protective Extra Low Voltage).
Either the wiring of PELV circuits must be safely isolated from the wiring of other circuits that are not PELV, or the insulation of all wires must be dimensioned for the higher voltage.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
119
Wiring 6.2 Operation on grounded infeed
Reference potential of the controller
The reference potential of the S7-1500R/H redundant system is connected to the mounting rail over a high-resistance RC combination in the R/H-CPU. This connection conducts highfrequency interference currents and prevents electrostatic charges. Despite the grounded mounting rail, the reference potential of the S7-1500R/H redundant system has to be considered as ungrounded due to the high-resistance connection.
If you want to configure the S7-1500R/H redundant system with a grounded reference potential, establish an electrical connection between the M connection of the CPU and the protective conductor.
You can find a simplified representation of the potentials in the section Electrical configuration (Page 122).
Short-circuit and overload protection
Various measures as protection against short-circuits and overloads are required for setting up a full installation. The nature of the components and the degree to which the required measures are binding depends on the IEC (DIN VDE) regulation applicable to your plant configuration. The table refers to the following figure and compares the IEC (DIN VDE) regulations.
Table 6- 1 Components and required measures
Shut-off device for control system, sensors, and actuators Short-circuit and overload protection: In groups for sensors and actuators
Load current supply for AC load circuits with more than five items of electromagnetic equipment
Reference to following figure
IEC 60364 (DIN VDE 0100)
Main switch
IEC 60204 (DIN VDE 0113)
Disconnector
Single-pole protection of · With grounded sec-
circuits
ondary circuit: Single-
pole protection
· Otherwise: All-pole
protection
Galvanic isolation by
Galvanic isolation by
transformer recommended transformer recommended
120
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.2 Operation on grounded infeed
Overall configuration of S7-1500R/H
The figure below shows the overall configuration of the S7-1500R/H redundant system (load current supply and grounding concept) with supply from a TN-S network.
Main switch Short-circuit and overload protection on the primary side Short-circuit and overload protection on the secondary side The load current supply (galvanic isolation)
Figure 6-1 Operating the S7-1500R/H with grounded reference potential
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
121
Wiring 6.3 Electrical configuration
6.3
Electrical configuration
Galvanic isolation
In the redundant System S7-1500R/H, there is electrical isolation between: The communication interfaces (PROFINET) of the R-CPU and all other circuit
components The communication interfaces (PROFINET) of the H-CPU and all other circuit
components High-frequency interference currents are conducted and electrostatic charges are avoided through integrated RC combinations or integrated capacitors.
S7-1500R/H potentials
The figure below is a simplified diagram of potentials in the S7-1500R/H redundant system.
Figure 6-2 Potentials in S7-1500R/H using the example of CPU 1515R-2 PN
122
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.4 Wiring rules
6.4
Wiring rules
Introduction
Use suitable cables to connect the S7-1500R/H redundant system. The tables below set out the wiring rules for the R/H-CPUs and load current supply.
R/H CPUs and load current supply
Table 6- 2 Wiring rules for R/H-CPUs and load current supply
Wiring rules for ... Permitted cable cross-sections of solid cables (Cu)
Permitted cable crosssections of flexible cables (Cu)
Without wire-end ferrule
With end sleeve
Number of wires per connection
Stripped length of the wires
End sleeves according to DIN 46228
Without plastic sleeve
With plastic sleeve 0.25 to 1.5 mm2
Sheath diameter
Tool
Connection system Tightening torque
1) American Wire Gauge
R/H-CPU 0.25 to 2.5 mm2 AWG1): 24 to 14 0.25 to 1.5 mm2 AWG1): 24 to 16 1 10 to 11 mm Design A, 10 mm long Design E, 10 mm long
3 to 3.5 mm screwdriver, conic design Push-in terminal -
Load current supply 0.5 to 2.5 mm2 AWG1): 20 to 14 0.5 to 1.5 mm2 AWG1): 20 to 16 1 7 to 8 mm Design A, 7 mm long Design A, 7 mm long
8.5 mm 3 to 3.5 mm screwdriver, conic design Screw terminal From 0.5 Nm to 0.6 Nm
Permissible cable temperature
Note Permissible cable temperatures
You must select sufficiently large wire cross-sections to ensure that the permissible cable temperatures are not exceeded at the maximum ambient temperature of the redundant system S7-1500R/H.
Example of power supply
At an ambient temperature of 40° C, a current of, for example, 4 A per wire and a crosssection of 1.5 mm² Cu, a connecting conductor must be rated for a temperature range of at least 70° C.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
123
Wiring 6.5 Connecting the supply voltage
6.5
Connecting the supply voltage
Introduction
The supply voltage is supplied over a 4-pin connector at the front of the R/H-CPU (behind the front flap, below).
Connection for supply voltage (X80)
The connections of the 4-pole connector have the following meaning:
+ 24 V DC of the supply voltage Mass of the supply voltage Mass of the supply voltage for looping (current limited to 10 A) + 24 V DC of the supply voltage for looping (current limited to 10 A) Spring opener (one spring opener per terminal)
Figure 6-3 Connection for supply voltage
The cable connector enables you to loop the supply voltage uninterrupted, even when it is unplugged.
Requirements
Only wire the cable connector when the supply voltage is turned off. Follow the wiring rules (Page 123).
Tool-free connection of cables: multi-wire (stranded), with end sleeve or ultrasonic compressed
To connect a wire without tools, follow these steps: 1. Strip 8 to 11 mm of the wires. 2. Seal or crimp the wire with end sleeves. 3. Insert the cable into the push-in terminal as far as it will go. 4. Push the wired connector into the socket of the CPU.
Tools required
3 to 3.5 mm slotted-head screwdriver
124
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.6 Connecting the load current supply
Connection of wires: multi-wire (stranded), without end sleeve, unprocessed
To connect a wire without end sleeve, follow these steps: 1. Strip 8 to 11 mm of the wires. 2. Press the screwdriver into the spring release. Insert the cable into the push-in terminal as
far as it will go. 3. Pull the screwdriver out of the spring release. 4. Push the wired connector into the socket of the CPU.
Loosening a wire
To unplug a wire, follow these steps: 1. Push with the screwdriver as far as it will go into the spring release. 2. Remove the wire from the push-in terminal.
Uninstalling the connection plug
With the screwdriver, pry the connector out of the CPU.
6.6
Connecting the load current supply
Introduction
In the delivery condition of the load current supplies, power connectors are inserted. The modules and the associated power connectors are coded. There are two parts to the coding element. One coding element is located in the module, and the other in the power connector. The load current supplies use identical power connectors for the voltage connection.
The coding element prevents the insertion of a power connector into a different type of load current supply.
Tools required
3 to 3.5 mm screwdriver
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
125
Wiring 6.6 Connecting the load current supply
Connecting the supply voltage to a load current supply
Watch the video sequence (https://support.industry.siemens.com/cs/media/67462859_connecting_supply_web_en/start. htm) To connect the supply voltage, follow these steps: 1. Swing the front cover of the module up until the front cover latches. 2. Press down the unlocking button of the power cable connector (Figure 1). Remove the
power cable connector from the front of the module. 3. Loosen the screw on the front of the connector. This loosens the housing latch and the
cable relief. With a tightened screw the connector's cover can't be removed (Figure 2). 4. Pry off the connector cover using a suitable tool (Figure 3).
Figure 6-4 Connecting the supply voltage to a load current supply (1) 5. Strip the cable sheathing to a length of 35 mm. Strip the wires to a length of 7 to 8 mm.
Attach the end sleeves. 6. Connect the wires in the connector according to the connection diagram (Figure 4). 7. Close the cover (Figure 5). 8. Retighten the screw (Figure 6). This effects a strain relief on the lines.
Figure 6-5 Connecting the supply voltage to a load current supply (2) 9. Insert the power connector into the module, until the latch engages.
126
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Reference
Wiring 6.7 Connecting the CPU to the load power supply
You can find more information on connecting the 24 V DC output voltage of the load current supply in the manuals for the relevant modules.
6.7
Connecting the CPU to the load power supply
Introduction
The load current supply is fitted with a plug-in 24 V DC output terminal (behind the front cover at the bottom). You connect the cables for the supply voltage to the CPU at this terminal.
Requirements
Only wire the cable connector when the supply voltage is turned off.
The connector for connecting the supply voltage to the CPU is already fitted. You can find more information in the section Connecting the supply voltage (Page 124).
Tools required
3 to 3.5 mm screwdriver
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
127
Wiring 6.7 Connecting the CPU to the load power supply Connecting the CPU to a load current supply
Watch the video sequence (https://support.industry.siemens.com/cs/media/78027451_S7_1500_gs_wire_web_en/start.h tm) To connect the cables for the supply voltage, follow these steps: 1. Open the front cover of the load current supply. Pull the 24 V DC output terminal down
and off. 2. Wire the 24 V DC output terminal to the wires of the CPU 4-pin connector.
3. Connect the load current supply to the CPU.
128
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.8 Connecting interfaces for communication with S7-1500R
6.8
Connecting interfaces for communication with S7-1500R
Connecting interfaces for communication
Connect the communication interfaces of the CPUs using standardized plug connectors.
Use prefabricated connecting cables for the connection. If you want to prepare communication cables yourself, the interface assignment is specified in the CPU manuals. Observe the mounting instructions for the connectors.
6.8.1
Connecting the PROFINET ring to S7-1500
Introduction
You connect the PROFINET ring between the two R-CPUs at the RJ45 sockets of PROFINET interfaces X1 P1 R and X1 P2 R.
Requirements
One of the two connections of the PROFINET ring between the two R-CPUs must not contain any other IO devices, switches or other PROFINET devices apart from transparent media converters.
The default setting in STEP 7 is port 2 at PROFINET interface X1.
Connect the PROFINET cable to the ports of the PROFINET interfaces of the two R-CPUs.
The maximum length of the PROFINET cable is 100 m.
You can extend the spatial distance between the two R-CPUs using a media converter (electrical/optical). In this case, the maximum length depends on the type of media converter used. You can find more information in the documentation for the media converter:
About the technical specifications
About use
About commissioning
You connect the IO devices, switches and other PROFINET devices to the other PROFINET ring connection. The default setting in STEP 7 is port 1 at PROFINET interface X1.
Accessories required
PROFINET cable for the PROFINET ring Optional transparent media converter (electrical optical)
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
129
Wiring 6.8 Connecting interfaces for communication with S7-1500R
Procedure
To connect the PROFINET ring at SIMATIC S7-1500R, follow these steps:
1. Swing the front cover on the R-CPUs up.
2. Plug the PROFINET cable RJ45 connectors into the RJ45 sockets at PROFINET interfaces X1 P2 R on the two R-CPUs.
Figure 6-6 PROFINET interface X1 P2 R: Connecting R-CPUs (bottom view)
130
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.8 Connecting interfaces for communication with S7-1500R
3. Plug the PROFINET cable RJ45 connectors into the RJ45 sockets at PROFINET interfaces X1 P1 R on the two R-CPUs. Connect the other PROFINET devices in the PROFINET ring.
Figure 6-7 PROFINET interface X1 P1 R: 4. Close the front cover on the R-CPUs.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
131
Wiring 6.9 Connecting interfaces for communication with S7-1500H
6.9
Connecting interfaces for communication with S7-1500H
Connecting interfaces for communication
Connect the communication interfaces of the CPUs using standardized plug connectors.
Use prefabricated connecting cables for the connection. If you want to prepare communication cables yourself, the interface assignment is specified in the CPU manuals. Observe the mounting instructions for the connectors.
6.9.1
Connecting redundancy connections (fiber-optic cables)
6.9.1.1
Synchronization modules for S7-1500H
Introduction
You use the synchronization modules to create two redundancy connections between the two H-CPUs. You need two identical synchronization modules per CPU which you connect with fiber-optic cables.
View
Figure 6-8 Synchronization module
Max. cable length (fiber-optic cable) between the two H-CPUs
In the S7-1500H redundant system, you need to use four synchronization modules of the same type. You can order the following types of synchronization modules:
Maximum cable lengths between the two H-CPUs Article number
10 m
6ES7960-1CB00-0AA5
10 km
6ES7960-1FB00-0AA5
Note
With long synchronization cables, the limited speed of light in the cable extends the cycle time (delay of ca. 100 s for 10 km).
132
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.9 Connecting interfaces for communication with S7-1500H
6.9.1.2
Selecting fiber-optic cables
Introduction
When selecting suitable fiber-optic cables, take the following constraints and conditions into account: What length of cable do I need? Is the fiber-optic cable to be laid indoors or outdoors? Is special protection from mechanical stress required? Is special protection from rodents required? Does the outside cable need to be buried directly in the earth? Does the fiber-optic cable need to be watertight? To what temperatures will the fiber-optic cable be exposed once laid?
Rules
Observe the following rules:
If you use fiber-optic cables, ensure sufficient strain relief at the synchronization modules.
Adhere to the specified ambient conditions for the fiber-optic cables used (bend radii, pressure and temperature).
Comply with the technical specifications for the fiber-optic cables used (attenuation, bandwidth).
Cables up to 10 m
Use the synchronization module 6ES79601CB000AA5 in pairs with fiber-optic cables up to 10 m. Select the following specifications with cable lengths of up to 10 m: 50/125 µ or 62.5/125 µ multimode fiber Patch cable for indoor use 2 x duplex cables per S7-1500H, crossover LC-LC connector type The following cables are available as accessories for S7-1500H:
Table 6- 3
Length 1 m 2 m 10 m
Fiber-optic cables as accessories
Article number 6ES79601BB005AA5 6ES79601BC005AA5 6ES79601CB005AA5
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
133
Wiring 6.9 Connecting interfaces for communication with S7-1500H
Cables up to 10 km
Use the synchronization module 6ES7960-1FB00-0AA5 in pairs with fiber-optic cables up to 10 km.
For cables over 10 m, you will need to have the fiber-optic cables custom-made. Select the following specifications:
Single-mode fiber 9/125 µ
In exceptional cases, you can use the cables available as accessories in lengths of up to 10 m for commissioning and testing purposes. For permanent use, however, you must use the cables specified in the table below with single-mode fibers.
Please see the following tables for the other specifications applicable to your specific application.
Table 6- 4 Specifications for fiber-optic cables used indoors
Cabling
Complete cabling routed within a building.
· No cable junction between indoors and outdoors.
· Required cable length is available as one complete length. No distribution boxes required.
· Easy complete installation with preassembled cables.
Necessary components Patch cable
Installation cable
Specifications 2 x duplex cables for the redundant system:
· LC-LC connector type · Crossover cable See also all other specifications applicable to your plant, for example:
· UL approval · Halogen-free
4-core multicore cables for the redundant system:
· LC-LC connector type · Crossover cable See also all other specifications applicable to your plant, for example:
· UL approval · Halogen-free
Installation cable for indoor use 1 cable with 4 cores for the redundant system:
· Both interfaces in one cable
1 or 2 cables with multiple shared cores for the redundant system:
· Interfaces laid separately to increase availability (reduction of common cause factor)
· Connector type ST or SC, for example, in line with the other components
See also other specifications applicable to your plant:
· UL approval
Patch cable for indoors
· Halogen-free Avoid splicing cables in the field.
Use the pre-assembled cables with pulling protection/aids in whiplash or breakout design, including measuring log.
Connector type LC on ST or SC, for example, in line with the other components.
134
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.9 Connecting interfaces for communication with S7-1500H
Cabling
Installation through distribution boxes. Additional information can be found in the section below.
Necessary components
· One distribution box/junction box for each branch.
· Connecting the installation and patch cables via the distribution box. Use either ST or SC plug-in connectors.
Specifications Connector type ST or SC, in line with the other components.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
135
Wiring 6.9 Connecting interfaces for communication with S7-1500H
Table 6- 5 Specifications for fiber-optic cables used outdoors
Cabling
A cable junction is required between the indoor and outdoor area.
Additional information can be found in the section below.
Necessary components Installation cable for outdoor use
Installation cable for indoor use also
Specifications Installation cable for outdoor use: · 1 cable with 4 cores per S7-1500H system
Both interfaces in one cable · 1 or 2 cables with multiple shared cores
Interfaces laid separately to increase availability (reduction of common cause factor) · Connector type ST or SC, for example, in line with the other components See also other specifications applicable to your plant: · UL approval · Halogen-free See also other specifications for given local conditions: · Protection from increased mechanical stress · Protection from rodents · Protection from water · Suitable for direct burial · Suitable for the relevant temperature ranges Avoid splicing cables in the field. Use the pre-assembled cables with pulling protection/pulling aids in whiplash design, including measuring log.
· 1 cable with 4 cores per S7-1500H system
Both interfaces in one cable · 1 or 2 cables with multiple shared cores
Patch cable for indoors
Interfaces laid separately to increase availability (reduction of common cause factor)
· Connector type ST or SC, for example, in line with the other components
See also other specifications applicable to your plant:
· UL approval
· Halogen-free Avoid splicing cables in the field. Use the pre-assembled cables with pulling protection/aids in whiplash or breakout design, including measuring log.
Connector type LC on ST or SC, for example, in line with the other components.
136
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.9 Connecting interfaces for communication with S7-1500H
Cabling
Installation through distribution boxes
A cable junction is required between the indoor and outdoor area.
Additional information can be found in the section below.
Necessary components
Specifications
· One distribution box/junction Connector type ST or SC, for example, in line with the other
box for each branch.
components.
· Connecting the installation and patch cables via the distribution box. Use either ST or SC plug-in connectors.
Installation of fiber-optic cable through distribution boxes
H-CPU (CPU 1517H-3 PN) Additional distribution boxes, if necessary, for example with SC or ST couplers. This allows you
to combine individual sections to achieve the required total length (maximum of 10 km) of fiberoptic cable.
Patch cable (duplex), for example LC-SC/ST Distribution box, for example with SC or ST couplers
Figure 6-9 Fiber-optic cables, installation through distribution boxes
6.9.1.3
Installing fiber-optic cables
Introduction
Fiber-optic cables may only be laid by trained specialist personnel. Comply with all applicable regulations and statutory requirements.
In practice, the installation of fiber-optic cables represents the most common cause of errors and failures. These can be caused by:
Kinks in the fiber-optic cable due to an insufficient bending radius
Crushing as a result of excessive force caused by persons treading on the cable, by pinching, or by other heavy cables
Overstretching due to high tensile forces
Damage caused by sharp edges
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
137
Wiring 6.9 Connecting interfaces for communication with S7-1500H
Quality assurance on site
Check the following points before laying the fiber-optic cables: Has the correct fiber-optic cable been delivered? Is there any visible transport damage to the product? Have you organized suitable intermediate on-site storage for the fiber-optic cables? Does the category of cable match that of the connecting components?
Storage of fiber-optic cables
Store fiber-optic cables in a place where they are protected from mechanical and thermal factors. Observe the permitted storage temperatures. These are specified in the data sheet for the fiber-optic cable. If possible, do not remove fiber-optic cables from their original packaging until you are about to install them.
Permitted bending radii for pre-assembled cables
You may not go below the following bending radii when laying the fiber-optic cables: Next to connector: 55 mm During installation: 60 mm (repeatedly) After installation: 40 mm (once)
Open installation, wall breakthroughs, cable ducts
Note the following points when laying fiber-optic cables: Fiber-optic cables can be installed in open locations provided you can safely exclude any
damage in those areas (vertical risers, connecting shafts, telecommunications switchboard rooms, etc.). Attach fiber-optic cables to mounting rails, for example cable trays or wire mesh ducts, using cable ties. Take care not to crush the cables when fastening them. Make sure there is not too much pressure on the fiber-optic cables. Before laying the fiber-optic cables: Deburr the edges of the holes. Round the holes. This prevents damage to the sheathing when you pull in and fasten the cable. The bending radius must not be smaller than the value specified by the manufacturer. The branching radii of the cable ducts must correspond to the specified bending radius for the fiber-optic cable. Lay the redundancy connections so that the fiber-optic cables are securely protected from damage. Always lay the two redundancy connections separately. Laying the connections separately increases availability and protects against undefined system states. An undefined system state occurs when the two redundancy connections are interrupted simultaneously in a time period of 1500 ms.
138
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.9 Connecting interfaces for communication with S7-1500H
Pressure
Do not exert any pressure on the cable, for example by the inappropriate use of clamps (cable quick-mount) or cable ties. Do not step on the fiber-optic cable.
Heat
The cables are sensitive to direct heat. Hot air guns and gas burners as used in heat-shrink tubing must not be used on the fiber-optic cables.
6.9.1.4
Connecting redundancy connections (fiber-optic cables) to S7-1500H
Introduction
Make the redundancy connections (fiber-optic cables) between the two H-CPUs using the sockets on the synchronization modules. You need two synchronization modules per CPU. Connect the synchronization modules in pairs to the fiber-optic cables.
Requirements
The redundancy connections (fiber-optic cables) must not include any additional media converters, IO devices or switches. Distribution boxes (Page 133) are allowed.
The redundancy connections can be a maximum of 10 m/10 km long.
Accessories required
4 synchronization modules 2 synchronization modules for each H-CPU
Up to 10 m: Sync module 1 GB FO 10 m
Up to 10 km: Sync module 1 GB FO 10 km
2 redundancy connections sync cable FO. The redundancy connections can be ordered in the following lengths. You can find the article numbers in the appendix Accessories/spare parts (Page 315).
For sync module 1 GB FO 10 m: 1 m, 2 m, 10 m
For sync module 1 GB FO 10 km: On request
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
139
Wiring 6.9 Connecting interfaces for communication with S7-1500H
Safety information
WARNING Personal injury or material damage can occur in zone 2 hazardous areas If you remove or attach a synchronization module during operation, personal injury and damage can occur in hazardous areas of zone 2. Always disconnect the R/H-CPU from the power supply before you remove or attach a synchronization module in hazardous areas of zone 2.
CAUTION The synchronization module contains a laser system and is classified as a "CLASS 1 LASER PRODUCT" in accordance with IEC 60825-1. Can cause personal injury. Avoid direct eye contact with the laser beam. Do not open the housing. Read the information in the system manual carefully.
Figure 6-10 Class 1 laser products
140
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.9 Connecting interfaces for communication with S7-1500H Inserting synchronization modules and connecting fiber-optic cables To insert the synchronization modules and connect the fiber-optic cables, follow these steps: 1. Remove the blanking plugs from the synchronization modules. 2. Push the two synchronization modules up into the module slots at the H-Sync interfaces X3 (port 1) and X4 (port 1) as far as they will go. You should hear the synchronization modules click into place. Then push the clip on each synchronization module to the left. Result: The synchronization modules are locked into place.
Figure 6-11 Inserting and locking synchronization modules
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
141
Wiring 6.9 Connecting interfaces for communication with S7-1500H
3. Hold the pre-assembled connectors of the redundancy connection by the housing. Push the connectors into the sockets of the synchronization modules. You should hear the connectors click into place.
4. Repeat steps 1 to 3 for the second H-CPU.
Figure 6-12 Connecting redundancy connections (fiber-optic cables) to S7-1500H
Uninstalling a synchronization submodule
To uninstall the synchronization modules, follow these steps: 1. Press down lightly on the connector release and hold while pulling the connector out of
the synchronization module. 2. Flip the synchronization module clip to the right. 3. Pull the synchronization module out of the H-Sync interface on the CPU. 4. Place the blanking plug on the synchronization module. 5. Repeat the process for all H-Sync interfaces on the H-CPUs.
142
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Wiring 6.9 Connecting interfaces for communication with S7-1500H
Protecting LC sockets on unused synchronization modules
Protect the LC sockets when storing unused synchronization modules: Close off the LC sockets with the blanking plugs to protect them from dirt. The synchronization modules come with blanking plugs inserted.
NOTICE Reduced optical performance due to dirt Even a small amount of dirt in the LC socket can affect the quality of the signal transmission. Dirt can lead to synchronization losses in operation. Protect the LC sockets from contamination during storage and installation of the synchronization modules.
6.9.2
Connecting the PROFINET ring to S7-1500H
Introduction
You connect the PROFINET ring using the RJ45 sockets of PROFINET interfaces X1 P1 R and X1 P2 R.
Accessories required
PROFINET cable for the PROFINET ring
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
143
Wiring 6.9 Connecting interfaces for communication with S7-1500H
Procedure
Plug the RJ45 connectors on the PROFINET cable in the PROFINET ring into the RJ45 sockets at PROFINET interfaces X1 P1 R/X1 P2 R on the two H-CPUs.
Figure 6-13 Connecting the PROFINET ring to S7-1500H 144
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Configuration
7
7.1
Configuring the CPU
Hardware and software requirements
You will find the hardware and software requirements for operating S7-1500R/H redundant systems in the section Application planning (Page 58).
7.2
Configuration procedure
The following section takes you through the configuration process for an S7-1500R redundant system step by step. The configuration consists of two CPUs 1515R-2 PN and two IO devices (ET 200MP and ET 200SP).
Requirements
The configuration detailed assumes that: You have set the IP address of the PG/PC.
1. Creating a project and R-CPUs
1. Create a new project in STEP 7. Give the project a name. 2. Select CPU 1515R-2 PN from the hardware catalog in the network view of the hardware
configuration. 3. Drag and drop the CPU to the task window in the network view. Result: STEP 7 automatically creates both 1515R-2 PN CPUs for the redundant system. STEP 7 displays both CPUs in the network view graphically.
Note Deleting CPUs from the hardware configuration You can only delete the two CPUs as a pair.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
145
Configuration 7.2 Configuration procedure
Figure 7-1 Display of CPUs in the network view 1. Open the CPUs in the device view. In the device view, the first CPU and the second CPU
are each in slot 1. 2. Give the CPUs unique names under Properties.
2. Assigning IP addresses (device IP addresses)
STEP 7 automatically assigns an IP address to each PROFINET interface of a CPU. You can also assign the IP addresses manually. For PROFINET interface X1 of the CPUs, the IP addresses must be located in the same subnet. The IP address is displayed in the CPU properties, in the "PROFINET interface [X1]" area of the "IP protocol" section.
Figure 7-2 IP address
146
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Configuration 7.2 Configuration procedure
Redundancy IDs In the STEP 7 project tree, each of the two CPUs is displayed with its own tree in the redundant system:
Figure 7-3 Redundant system in the project tree
Each CPU of the redundant system has a redundancy ID. The redundancy ID is used to assign a project tree in STEP 7 to the real CPU. The top CPU of the two in the tree is always the CPU with the redundancy ID "1". The bottom CPU has the redundancy ID "2".
If a CPU has a valid hardware configuration and you change the redundancy ID of that CPU, you also change the CPU's name and IP addresses. You can find more information in the section Redundancy IDs (Page 193).
3. Assigning system IP addresses
In addition to the device IP addresses of the CPUs, you can also assign system IP addresses for the S7-1500R/H redundant system.
You use the system IP addresses for communication with other devices (for example, HMI devices, CPUs, PG/PC). The devices always communicate over the system IP address with the primary CPU of the redundant system. This ensures, for example, that the communication partner can communicate with the new primary CPU (previously backup CPU) in the RUN-Solo system state after failure of the original primary CPU in redundant operation.
Proceed as follows to activate the system IP address for PROFINET interfaces X1 of the two CPUs:
1. Select a CPU in the network view. Select the "Properties" tab in the Inspector window.
2. Select the area "PROFINET interface [X1]" and the section "System IP address for switched communication" in the area navigation.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
147
Configuration 7.2 Configuration procedure
3. Make sure that the checkbox "Enable the system IP address for switched communication" is selected for the interface X1. Apply or assign the system IP address in the "IP address" field. The subnet mask cannot be modified and corresponds to the subnet mask of the device IP address.
4. Apply or assign a virtual MAC address to the system IP address. The virtual MAC address is 6 bytes long. The assignment of the bytes is hexadecimal.
Note Virtual MAC address Ensure that all MAC addresses stored in the Ethernet broadcast domain are unique. This applies in particular to systems with third-party devices consisting of VRRP and redundant systems that are configured through several STEP 7 projects.
5. The other CPU applies the settings automatically.
Figure 7-4 System IP address
You can find more information on the system IP address in the Communication function manual (https://support.industry.siemens.com/cs/ww/en/view/59192925).
4. Setting the cycle monitoring time
STEP 7 assigns default values for the minimum and maximum cycle times. The default values are displayed in the "Cycle" area of the CPU properties.
Note Set cycle time high Select the maximum cycle time as high as your process allows. · The time for the ongoing synchronization of the two CPUs in redundant operation is
included in the cycle time. · A temporary increase in the cycle time can occur upon a system state transition SYNCUP
RUN-Redundant. If only one CPU controls the process (RUN-Solo system state), the cycle time is significantly shorter than during redundant operation.
You can find more information on the cycle time and recommendations for parameterization of the maximum cycle time and the minimum cycle time in the Cycle and response times function manual (http://support.automation.siemens.com/WW/view/en/59193558). You can find information on system states in the section Operating and system states (Page 205).
148
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Configuration 7.2 Configuration procedure
5. Creating IO devices
In the example, you add two IO devices with system redundancy S2 to the R-CPUs. To do so, proceed as follows: 1. Switch to the network view. 2. Drag the interface module IM 155-5 PN HF to the task window as an IO device from the
hardware catalog. 3. Drag the required modules to the corresponding slots in the IO device. 4. Select the second IO device, IM 155-6 PN HF, in exactly the same way. 5. Assign the required modules.
6. Assigning IO devices to the redundant system
To assign IO devices to the S7-1500R/H redundant system, connect every IO device to each CPU. To do so, proceed as follows: 1. Drag-and-drop a line between the PROFINET interface of IM 155-5 PN HF and
PROFINET interface X1 of the left-hand CPU. 2. Drag-and-drop a line between the PROFINET interface of IM 155-5 PN HF and
PROFINET interface X1 of the right-hand CPU. 3. Assign the second IO device, IM 155-6 PN HF, to the two CPUs in exactly the same way.
Set the watchdog timer for the second IO device. Result: The IO devices are connected to the redundant S7-1500R/H system.
Figure 7-5 IO devices assigned in the network view with system redundancy
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
149
Configuration 7.2 Configuration procedure
Note If you have configured modules for the IO devices and compile the project, you receive an error message for the watchdog timer in the Inspector window. Set the watchdog timer indicated in the error message.
Display of the IO device assignments in STEP 7 Regardless of whether an IO device is connected as system redundant or as standard IO device to the redundant S7-1500R/H system, the network view always shows "Multi assigned". To determine which IO devices are connected system redundant and which ones are connected as standard IO devices, follow these steps: 1. In the network view of STEP 7, select the redundant S7-1500R/H system. 2. In the tabular view of the network view switch to "I/O communication". The table contains all assignments of IO devices to the PROFINET interfaces of the redundant S7-1500R/H system. The "Operating mode" column indicates how the IO device is connected to the redundant S7-1500R/H system: IO device (S2): IO device is connected system redundant. IO device (S1): IO device is connected over the "Switched S1 device" function. The following figure shows how STEP 7 displays the two IO devices with system redundancy S2 in the tabular view of the network view.
Figure 7-6 Display of the IO device assignments in STEP 7
7. MRP role of the CPUs in the S7-1500R/H redundant system
As soon as you create an S7-1500R/H redundant system in STEP 7, STEP 7 automatically assigns the MRP role "Manager (auto)" to the PROFINET interfaces X1 of both CPUs.
150
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Configuration 7.2 Configuration procedure
8. Defining the MRP role for additional devices in the ring in STEP 7
Proceed as follows to define the media redundancy for additional devices in the ring: 1. In the network view of STEP 7, select PROFINET interface X1 of one of the two CPUs of
the S7-1500R/H redundant system. 2. In the Inspector window, navigate to "Properties" > "General" > "Advanced options" >
"Media redundancy". 3. Click the "Domain settings" button.
Figure 7-7 S7-1500R/H: MRP role "Manager (auto)"
In the Inspector window, STEP 7 displays the properties of the MRP domain in which PROFINET interface X1 of the CPU is located. 4. In the "MRP role" column of the "Devices" table, assign the MRP role "Client" to all other devices.
Figure 7-8 S7-1500R/H: Assigning MRP roles to ring devices
9. Configuring devices outside the STEP 7 project
Set the MRP role "Client" for devices in the ring that are not located in STEP 7. Example: For a switch, set the MRP role "Client" via the Web interface of the switch.
Reference
You can find information on the PROFINET topologies of S7-1500R/H redundant systems in the PROFINET function manual. (http://support.automation.siemens.com/WW/view/en/49948856)
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
151
Configuration 7.3 Project tree
7.3
Project tree
Structure of the project tree
In the project tree, STEP 7 creates the project tree for the CPUs. The project tree has a tree structure and contains all elements and editors of the project.
Table 7- 1 Structure of the project tree
Below the H system, you will find the device configuration and diagnostic options that apply to the system as a whole.
The CPU displayed in the upper section of the project tree has the redundancy ID "1". The properties of the CPU are displayed below it.
This section also contains other properties of the redundant system, the user program and other system-related project items.
The IO devices assigned to the CPU are listed under "Distributed I/O".
The CPU in the lower section of the project tree has the redundancy ID "2". The properties of the CPU are displayed below it. The IO devices assigned to the CPU are listed under "Distributed I/O".
All distributed I/O devices used are listed under "Ungrouped devices".
152
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Configuration 7.4 Parameters
7.4
Parameters
"Parameter assignment" means setting the module properties. This includes setting addresses, enabling alarms and defining communication properties.
You assign the property parameters for the CPUs in the area navigation, in the STEP 7 Inspector window. The CPUs have general parameters and R/H-specific parameters. Some parameters must be identical for both CPUs. STEP 7 applies these parameters to the second CPU. Other parameters must be different on each CPU (for example device IP addresses). If your configuration is not consistent, STEP 7 will point out the conflict.
Reference
You can find a detailed description of all CPU parameters in the STEP 7 online help.
7.5
Process images and process image partitions
7.5.1
Process image - overview
Process image inputs and outputs
The process image of the inputs and outputs is an image of the signal states. The CPU transfers the values from the input and output modules to the process image inputs and outputs. At the start of the cyclic program, the CPU transfers the process image output as a signal state to the output modules. The CPU then transfers the signal states of the input modules to the process image inputs.
Advantages of the process image
A consistent map of the process signals is available via the process image during cyclic program execution. If a signal state at an input module changes during program execution, the signal state is retained in the process image. The CPU does not update the process image until the next cycle.
Consistency of the process image
When the process image is updated, the S7-1500R/H redundant system accesses the data of each submodule as consistent data. This behavior is identical to that of S7-1500 CPUs.
The maximum data width that is accessed as consistent data for each submodule depends on the IO system. For PROFINET IO, for example, this data width is 1024 bytes.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
153
Configuration 7.5 Process images and process image partitions
32 process image partitions
The CPU uses process image partitions to synchronize the updated inputs/outputs of specific modules with specific parts of the user program.
In the S7-1500R/H redundant system, the overall process image is subdivided into up to 32 process image partitions (PIP).
The CPU automatically updates the TPA 0 (automatic update) at the beginning of each program cycle. You can find additional information in the Cycle and response times (http://support.automation.siemens.com/WW/view/en/59193558) function manual.
You can assign other OBs to process image partitions PIP 1 to PIP 31 during configuration of the IO devices.
The CPU always reads the process image partition of the inputs (PIPI) before processing the associated OB. The CPU outputs the process image of the outputs (PIPQ) at the end of the OB.
The figure below illustrates the updating of a process image partition.
Figure 7-9 Updating a process image partition
7.5.2
Updating process image partitions in the user program
Requirements
Alternatively, you can also use the following instructions to update process images:
"UPDAT_PI" instruction
"UPDAT_PO" instruction
You will find the instructions in STEP 7 in the "Instructions" task card under "Extended instructions". The instructions can be called from any point in the user program.
Requirements for updating process image partitions with the "UPDAT_PI" and "UPDAT_PO" instructions:
The process image partitions must not be assigned to any OB. This means the process image partitions are not automatically updated.
Note Update of PIP 0
PIP 0 (automatic update) cannot be updated with the "UPDAT_PI" and "UPDAT_PO" instructions.
154
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Configuration 7.5 Process images and process image partitions
UPDAT_PI: Updates the process image partition of the inputs
With this instruction, you read the signal states from the input modules of the IO devices to the process image partition of the inputs (PIPI).
UPDAT_PO: Updates the process image partition of the outputs
With this instruction, you transfer the process image partition (PIP) of the outputs to the output modules of the IO devices.
Direct I/O access to the inputs and outputs of the IO devices
You also have direct read and write access to the I/O as an alternative to access via the process image, should direct access be required for programming reasons. Direct (write) I/O access also writes to the process image. This prevents a subsequent output of the process image from again overwriting the value written by direct access.
Note Avoid direct I/O access. Each instance of direct I/O access is synchronized in the RUNRedundant system state and results in a higher cycle time. Recommendation: Access the inputs and outputs of the IO devices over the process image or process image partitions.
Reference
You can find more information on process image partitions in the Cycle and response times (http://support.automation.siemens.com/WW/view/en/59193558) function manual.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
155
Basics of program execution
8
8.1
Programming the S7-1500R/H
User program for the S7-1500R/H redundant system
For the design and programming of the user program, the same rules apply for the redundant S7-1500R/H system as for the S7-1500 automation system.
The user program is stored identically in both CPUs in redundant operation. Both CPUs process the user program event-synchronously.
From the point of view of user program execution, the S7-1500R/H redundant system behaves like the S7-1500 automation system. Synchronization is integrated into the operating system and runs automatically and hidden between the primary and backup CPU.
Specific instructions and blocks for the S7-1500R/H redundant system
Specific instructions and OBs are available for the S7-1500R/H redundant system.
The "RH_CTRL" instruction is used to disable SYNCUP or to enable the running of the SYNCUP. The goal is, to allow SYNCUP only in less critical process phases if necessary (see section Disabling/enabling SYNCUP with the RH_CTRL instruction (Page 165) for more information).
You use the instruction "RH_GetPrimaryID" in the user program to read out which CPU is currently the primary CPU (see section Determining the primary CPU with "RH_GetPrimaryID" (Page 168) for additional information).
In addition to the OBs of the S7-1500 CPU, you can also use OB 72 (CPU redundancy error). OB 72 is called when the S7-1500R/H redundant system has reached or left the RUNRedundant system state.
Special features in program execution
You create the user program for the S7-1500R/H redundant system in the top CPU (for example PLC_1) in the STEP 7 project tree.
The S7-1500R/H redundant system does not support some of the instructions the S7-1500 CPUs. Instructions that are not supported by the S7-1500R/H redundant system are grayed out in STEP 7 in the "Instructions" task card. STEP 7 shows the instructions that are not supported in the program code in red. If you compile program code with instructions that are not supported, STEP 7 outputs an error message. The instructions that are not supported are set out in the section Restrictions (Page 157).
156
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Basics of program execution 8.2 Restrictions
In the case of instructions with the "LADDR" block parameter, you use this parameter to determine which of the two CPUs is the target of this instruction. Example: To read out the I&M data of the CPU with redundancy ID 1, specify the HW identifier 65149 (or the "Local1" system constant) at the "LADDR" block parameter of the Get_IM_Data instruction. You can find more information about the block parameters and the system constants of the S7-1500R/H redundant system in the STEP 7 online help.
In the case of a SYNCUP, the execution time of many instructions operating asynchronously is extended.
In contrast to the S7-1500 automation system, the redundant S7-1500R/H system initializes temporary local data for functions (FCs) not only during optimized block access but also during non-optimized block access. Information on system initialization for optimized block access can be found in the STEP 7 online help.
Programming style guide
The programming guidelines described in the programming style guide help you to create a uniform program code. You can better maintain and reuse the uniform program code. This allows you to detect or avoid errors early on, for example, through compilers.
The programming style guide is available on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109478084).
8.2
Restrictions
Instructions not supported
Table 8- 1 Unsupported instructions CPU 1513R / CPU 1515R / CPU 1517H with firmware version V2.8
Instruction Communication GET PUT USEND URCV BSEND BRCV T_CONFIG TMAIL_C (V5.0 or later)1) OPC_UA_Connect OPC_UA_NamespaceGetIndexList OPC_UA_NodeGetHandleList OPC_UA_MethodGetHandleList OPC_UA_TranslatePathList
Description
Read data from a remote CPU Write data to a remote CPU Send data uncoordinated Receive data uncoordinated Send data in segments Receive data in segments Configure interface Transfer email Create connection Read namespace indexes Get handles for read and write access Get handles for method calls Read node parameters
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
157
Basics of program execution 8.2 Restrictions
Instruction OPC_UA_ReadList OPC_UA_WriteList OPC_UA_MethodCall OPC_UA_NodeReleaseHandleList OPC_UA_MethodReleaseHandleList OPC_UA_Disconnect OPC_UA_ConnectionGetStatus OPC_UA_ServerMethodPre OPC_UA_ServerMethodPost WWW S_USSI FTP_CMD Extended instructions SET_TIMEZONE2) SNC_RTCB SYNC_PI SYNC_PO D_ACT_DP ReconfigIOSystem WR_REC RD_REC RCVREC PRVREC DPSYC_FR DPNRM_DG DP_TOPOL PE_WOL PE_I_DEV WR_DPARM ATTACH DETACH RecipeExport RecipeImport DataLogCreate DataLogOpen DataLogWrite DataLogClear DataLogClose DataLogDelete DataLogNewFile CREATE_DB READ_DBL
158
Description Read tags Write tags Call method Enable handles for read and write access Enable handles for method calls Close connection Read connection status Preparation of the server method call Post preparation of the server method call Synchronize user pages Initialize USS Setup of FTP connections from and to an FTP server
Set time zone Synchronize slave clocks Synchronize process image inputs Synchronize process image outputs Enable/disable DP slaves Reconfigure IO system Write data record to I/O (use new block WRREC) Read data record from I/O (use new block RDREC) Receive data record (I-device) Make data record available (I-device) Synchronize DP slaves/Freeze inputs Read diagnostics data from a DP slave Determine topology for DP master system Start and end energy-saving mode via WakeOnLan Control PROFIenergy commands in I-Device Transfer data record Attach OB to interrupt event Detach OB from interrupt event Export recipe Import recipe Create data log Open data log Write data log Empty data log Close data log Delete data log Data log in new file Create data block Read from data block in load memory
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Basics of program execution 8.2 Restrictions
Instruction WRIT_DBL DELETE_DB FileReadC FileWriteC SET_CLKS Basic instructions ReadFromArrayDBL WriteToArrayDBL Technology All instructions for Motion Control (MC_Power, MC_Home, MC_...) TIO_SYNC
Description Write from data block in load memory Delete data block Read file from memory card Write file on memory card Set time of day and time-of-day status
Read from ARRAY data block in load memory Write to ARRAY data block in load memory
-
Synchronize TIO modules
1) The S7-1500R/H CPUs with firmware version V2.8 support the versions < V5.0 of the instruction "TMAIL_C". 2) Upon a call in the CPU, the instruction provides a negative return value RETVAL.
Unsupported OBs
The CPUs of the S7-1500R/H redundant system do not support the following OBs: Synchronous cycle interrupt OB OB 67 "MC-PreServo" OB 91 "MC-Servo" OB 92 "MC-Interpolator" OB 95 "MC-PostServo"
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
159
Basics of program execution 8.3 Events and OBs
8.3
Events and OBs
Start events
The table below gives an overview of the possible event sources for start events and their OBs:
Table 8- 2 Start events
Event sources
Startup Cyclic program Time-of-day interrupt Time-delay interrupt Cyclic interrupt
Hardware interrupt Status interrupt Update alarm Manufacturer-specific or profilespecific interrupt CPU redundancy error Time error Maximum cycle time exceeded
Diagnostics interrupt Removal/insertion of modules Rack error Programming error (only for global error handling) I/O access error (only for global error handling)
Possible priorities (default priority) 1 1 2 to 24 (2) 2 to 24 (3) 2 to 24 (8 to 17, frequency dependent) 2 to 26 (16) 2 to 24 (4) 2 to 24 (4) 2 to 24 (4)
2 to 26 (26) 22
2 to 26 (5) 2 to 26 (6) 2 to 26 (6) 2 to 26 (7)
2 to 26 (7)
Possible OB numbers 100, 123 1, 123 10 to 17, 123 20 to 23, 123 30 to 38, 123
Default system response1) Ignore Ignore Not applicable Not applicable Not applicable
40 to 47, 123 55 56 57
Ignore Ignore Ignore Ignore
72
Ignore
80
Ignore
Depends on system state2)
82
Ignore
83
Ignore
86
Ignore
121
STOP
122
Ignore
1) If you have not configured the OB. 2) See section "Response of S7-1500R/H redundant system when cycle time is exceeded"
Number of OBs
0 to 100 0 to 100 0 to 20 0 to 20 0 to 20
0 to 50 0 or 1 0 or 1 0 or 1
0 or 1 0 or 1
0 or 1 0 or 1 0 or 1 0 or 1
0 or 1
160
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Basics of program execution 8.3 Events and OBs
Response to start events
The occurrence of a trigger results in the following response: If the event comes from an event source to which you have assigned an OB, this event
triggers the execution of the assigned OB. The event enters the queue according to its priority (exception: hardware interrupts). If the event comes from an event source to which you have not assigned an OB, the CPU executes the default system reaction.
Note Some event sources, such as startup, pull/plug, exist even if you do not configure them.
Response of OB 72 and OB 86 to system state transitions
If an IO device has failed, the OB 86 reports a "rack failure" if programmed. OB 72 "CPU redundancy error" reports a loss of redundancy in the redundant system. The figure below shows the behavior of the two OBs during system state transitions from RUN-Solo to RUN-Redundant and vice versa.
Figure 8-1 OB 72 and OB 86 during system state transitions
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
161
Basics of program execution 8.3 Events and OBs
OB 86 There are three IO devices in the example. Each failure of one of the three IO devices is followed by recovery of the IO device. Each IO device failure/IO device recovery is signaled. Cyclic program execution is interrupted with an OB 86 call. In the "Copy main memory" phase of the SYNCUP system state those OBs that interrupt the cyclic program processing are processed. New diagnostic events are signaled but the OBs are not yet processed. In the example, the failure of IO device 2 and the recovery of IO device 3 are signaled. However, the OB 86 are not processed until the following phase, "Making up backup CPU lag".
Note Order of execution of OB 86 Please note that the order of processing of the OB 86 may differ from the order of processing of the associated diagnostic events.
Note Station re-integration with errors When a station returns with errors in an R/H-CPU, no attempt is made - in contrast to a standard CPU - to output exact error information in the diagnostic buffer.
OB 72 If the system then switches to the RUN-Redundant system state, OB 72 "CPU redundancy error" is called. If the redundant system exits redundant operation and changes to the RUNSolo system state, OB 72 is called again. The two cases can be distinguished by the start information of OB 72. You can find further information in the STEP 7 online help.
Note Delayed execution of OB 72 There may also be a delay in executing OB 72 because the corresponding diagnostic event is processed asynchronously to the user program.
OB behavior for standard IO devices with primary backup switching
If the primary CPU fails or goes to STOP, the standard IO devices are temporarily separated from the redundant S7-1500R/H system. From the CPU perspective, the standard IO devices fail. OB 72 "Redundancy error" is called, additional OB 86 "Module rack failure" for the failed IO devices are not called, however. To detect the failed IO devices, call the DeviceStates instruction in OB 72. To detect all failed IO devices, the OB 72 must have priority 26 (default). With the "Switched S1 device" function, the new primary CPU establishes the ARs to the standard IO devices again. OB 86 is called for each return of an IO device.
162
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Basics of program execution 8.3 Events and OBs
Example: OB 72 CPU redundancy failure
Automation task You use the S7-1500R redundant system to control a blast furnace. The S7-1500R redundant system controls the blast furnace temperature, volume and pressure parameters.
Feature In the event of a loss of redundancy, for example because the primary CPU fails, a signal lamp in the blast furnace control room signals this event. The control room notifies the service personnel. The service personnel replace the defective CPU.
Solution OB 72 is called in the event of a CPU redundancy error. The user program in OB 72 controls a digital output module (relay) in an ET 200SP with a connected signal lamp.
Response of S7-1500R/H redundant system when cycle time is exceeded
The tables below show how the redundant system responds when the cycle time is exceeded.
If the user program does not reach the cycle control point within the maximum cycle time, the redundant system responds as described in the column "1st time cycle time is exceeded". The redundant system then resets the cycle-time monitoring.
If the maximum cycle time is exceeded for a second time in the same cycle, the redundant system responds as described in the column "2nd time cycle time is exceeded". The redundant system then resets the cycle time.
If the maximum cycle time is exceeded for a third time in the same cycle, the redundant system responds as described in the column "3rd time cycle time is exceeded". The redundant system then resets the cycle time (only when time error OB 80 is configured).
Table 8- 3 Response of S7-1500R/H redundant system when cycle time is exceeded, without OB 80
Initial situation
System
Primary CPU
Backup CPU
RUN-Solo
RUN
STOP
SYNCUP
RUNSyncup
SYNCUP
RUN-
RUN-
RUN-
Redundant Redundant Redundant
1st time cycle time is exceeded
System
Primary CPU
Backup CPU
STOP
STOP
STOP
RUN-Solo RUN 1)
STOP 1)
RUN-Solo
RUN
STOP
2nd time cycle time is exceeded
System
Primary CPU
Backup CPU
---
---
---
STOP
STOP
STOP
STOP
STOP
STOP
1) If the time error occurs before the time of creation of the snapshot of the work memory contents, for example during the restart of the backup CPU, the primary CPU also goes into STOP mode and a running SYNCUP is aborted.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
163
Basics of program execution 8.3 Events and OBs
Table 8- 4 Response of S7-1500R/H redundant system when cycle time is exceeded with OB 80
Initial situation
1st time cycle time is exceeded
System
Primary CPU
Backup CPU
System
Primary CPU
Backup CPU
RUNSolo SYNCUP
RUNRedun-
dant
RUN
RUNSyncup RUNRedun-
dant
STOP
RUNSolo
RUN
STOP
SYNCUP SYNCUP RUN- SYNCUP
Syncup 1)
1)
RUNRedun-
dant
RUNRedun-
dant
RUNRedun-
dant
RUNRedun-
dant
2nd time cycle time is exceeded
System Primary Backup
CPU
CPU
STOP STOP STOP
RUNSolo
RUNSolo
RUN RUN
STOP STOP
3rd time cycle time is exceeded
System Primary Backup
CPU
CPU
---
---
---
STOP STOP STOP
STOP STOP STOP
1) If the time error occurs before the time of creation of the snapshot of the work memory contents, for example during the restart of the backup CPU, the primary CPU also goes into STOP mode and a running SYNCUP is aborted.
Assignment between event source and OBs
The type of OB determines where you assign OB to event source:
For hardware interrupts: Assignment in hardware configuration
For all other OB types: Assignment when the OB is created, where applicable after you have configured the event source
OB priority and runtime behavior
If you have assigned an OB to the event, the OB has the priority of the event. S7-1500R/H CPUs support the priorities 1 (lowest) to 26 (highest). The following items are essential to the execution of an event:
Call and execution of the assigned OB
The update of the process image partition of the assigned OB
The user program processes the OBs exclusively on a priority basis. This means the program processes the OB with the highest priority first when multiple OB requests occur at the same time. If an event occurs that has a higher priority than the currently active OB, this OB is interrupted*. The user program processes events of the same priority in order of occurrence.
*Exception: In the RUN-Redundant system state, a higher-priority OB 83 "Pull/plug modules" does not interrupt the execution of an OB 82 "Diagnostic interrupt".
Note
Communication
Communication (for example test functions with the PG/PC) always operates with a priority of 15. To avoid unnecessarily prolonging the program runtime in the case of time-critical applications, make sure that these OBs are not delayed or interrupted by communication. Assign a priority > 15 for these OBs.
Reference
Additional information on organization blocks is available in the STEP 7 online help.
164
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Basics of program execution 8.4 Special instructions for S7-1500R/H redundant systems
8.4
Special instructions for S7-1500R/H redundant systems
8.4.1
Disabling/enabling SYNCUP with the RH_CTRL instruction
Introduction
You use the "RH_CTRL" instruction to disable SYNCUP or to enable the execution of the SYNCUP for the S7-1500R/H redundant system. The disable applies:
Until you cancel it with the "RH_CTRL" instruction or
Until the S7-1500R/H redundant system switches to the STOP system state
Figure 8-2 RH_CTRL instruction
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
165
Basics of program execution 8.4 Special instructions for S7-1500R/H redundant systems
Example: Disabling/enabling SYNCUP for a baggage handling system
Automation task A baggage handling system at an airport is used to distribute pieces of baggage. When a flight lands, all baggage is loaded onto the baggage handling system. The baggage passes through a scanner at high speed. The scanner checks the destination of the baggage: If a piece of baggage has reached its destination airport, the baggage handling system
forwards it directly to baggage claim. If a piece of baggage has not reached its final destination, the system immediately
redirects it towards the connecting flight.
Scanner Deflector
Figure 8-3 Airport baggage handling system
To ensure high availability for the baggage handling system, you use an S7-1500R/H redundant system as controller. If one of the CPUs fails (loss of redundancy), the S7-1500R/H redundant system switches from the RUN-Redundant system state to RUNSolo. A CPU continues to ensure the control of the baggage handling system, but no second redundant CPU is available.
Replace the failed CPU with a replacement CPU. The procedure for replacing the CPU is described in the section Replacing defective R/H-CPUs (Page 269).
As soon as you set the exchanged CPU to RUN, the R/H-System responds as follows:
The replaced CPU (Backup CPU) switches to SYNCUP operating state and sends a corresponding status message to the primary CPU.
The primary CPU then switches from the RUN operating state to RUN-Syncup.
The S7-1500R/H redundant system then does a SYNCUP.
166
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Reference
Basics of program execution 8.4 Special instructions for S7-1500R/H redundant systems
During SYNCUP, the user program of the primary CPU runs through a cycle with an extended cycle time. In this cycle, there is a delay before the redundant system responds to input signal changes. If a piece of baggage passes the scanner during the SYNCUP, the redundant system only responds to the scanner after the extended cycle described above. In the worst case scenario, the piece of baggage has already passed the deflector before the system responds. The piece of baggage is then moved to baggage claim rather than to the connecting flight.
Feature You need the "RH_CTRL" instruction, which allows you to disable and enable the execution of the SYNCUP as required.
Solution You use the "RH_CTRL" instruction to disable the execution of the SYNCUP system state for the S7-1500RH redundant system. If the disable is no longer required, you enable the execution of the SYNCUP again with the "RH_CTRL" instruction. Disable the execution of the SYNCUP to avoid a long program cycle when the baggage handling system is operating at or near capacity. To do so, call the "RH_CTRL" instruction with block parameter MODE = 3 in the user program. Replace the failed CPU with a replacement CPU. As soon as you set the exchanged CPU with disabled SYNCUP to RUN, the R/H-System responds as follows: The exchanged CPU (Backup CPU) shows the SYNCUP state. The Primary CPU then displays the RUN-Syncup state. The redundant system switches to the SYNCUP system state. The redundant system is
not yet running a SYNCUP. As soon as the baggage handling system is operating at low capacity, for example at night, enable the SYNCUP system state. To do so, call the "RH_CTRL" instruction with block parameter MODE = 4 in the user program. The redundant system runs a SYNCUP. The redundant system then switches to the RUN-Redundant system state. Now disable SYNCUP again by calling the "RH_CTRL" instruction in the user program with the block parameter MODE = 3.
You can find additional information on the "RH_CTRL" instruction in the STEP 7 online help. You can find more information on SYNCUP in the section SYNCUP system state (Page 213).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
167
Basics of program execution 8.4 Special instructions for S7-1500R/H redundant systems
8.4.2
Determining the primary CPU with "RH_GetPrimaryID"
You use the "RH_GetPrimaryID" instruction to read out which CPU is currently the primary CPU. The instruction outputs the redundancy ID of the primary CPU at the Ret_Val block parameter.
Figure 8-4 "RH_GetPrimaryID" instruction
Example: Reading maintenance information from the SIMATIC memory card of the primary CPU
Proceed as follows to read specific maintenance information from the SIMATIC memory card of the primary CPU:
1. Get the redundancy ID of the primary CPU with "RH_GetPrimaryID".
2. Read the maintenance information from the SIMATIC memory card of the primary CPU with "GetSMCInfo".
If the CPU with redundancy ID 1 is the primary CPU, enter "12" at the Mode block parameter ("1" for redundancy ID, "2" for maintenance information).
If the CPU with redundancy ID 2 is the primary CPU, enter "22" at the Mode block parameter ("2" for redundancy ID, "2" for maintenance information).
Reference
You can find more information on the "RH_GetPrimaryID" instruction in the STEP 7 online help.
168
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Basics of program execution 8.5 Asynchronous instructions
8.5
Asynchronous instructions
Introduction
During program execution a distinction is made between synchronous and asynchronous instructions.
The "synchronous" and "asynchronous" properties relate to the temporal relationship between the call and execution of the instruction.
The following applies to synchronous instructions: When the call of a synchronous instruction is complete, execution of the instruction is also complete.
This is different in the case of asynchronous instructions: When the call of an asynchronous instruction is complete, execution of the asynchronous instruction is not necessarily complete yet. This means the execution of an asynchronous instruction can extend over multiple calls. The CPU processes asynchronous instructions in parallel with the cyclic user program. Asynchronous instructions generate jobs in the CPU for their processing.
Instructions that work asynchronously are usually instructions for the transfer of data, for example, data records for modules, communication data, diagnostic data.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
169
Basics of program execution 8.5 Asynchronous instructions
Difference between synchronous/asynchronous instructions
The figure below shows the difference between the processing of an asynchronous instruction and a synchronous instruction. In this figure the CPU calls the asynchronous instruction five times before its execution is complete, e.g. a data record has been completely transferred. With a synchronous instruction, the instruction is fully executed in each call.
First call of the asynchronous instruction, start of execution Intermediate call of the asynchronous instruction, execution continues Last call of the asynchronous instruction, completion of execution A job is fully processed by a synchronous instruction with each call.
Duration of a fully executed job
Figure 8-5 Difference between asynchronous and synchronous instructions
Note Processing of an asynchronous instruction during the SYNCUP system state If the S7-1500R/H redundant system executes SYNCUP, this extends the processing time for an asynchronous instruction. Recommendation: Always access asynchronous instructions in the cyclic user program of the S7-1500R/H redundant system, for example in OB 1.
170
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Basics of program execution 8.5 Asynchronous instructions
Parallel processing of asynchronous instruction jobs
A CPU can process several asynchronous instruction jobs in parallel. The CPU processes the jobs in parallel under the following conditions: Jobs for an asynchronous instruction are started while other jobs for that instruction are
still running. The maximum number of simultaneously running jobs for the instruction is not exceeded. The figure below shows the parallel processing of two jobs of the WRREC instruction. The two instructions are executed simultaneously for a certain duration.
Figure 8-6 Parallel processing of the asynchronous instruction WRREC
Assigning calls of an instruction to a job
To execute an instruction over multiple calls, the CPU must be able to uniquely relate a subsequent call to a running job of the instruction. To relate a call to a job, the CPU uses one of the following two mechanisms, depending on the type of the instruction: Using the instance data block of the instruction (for "SFB" type) Using the input parameters of the instruction that identify the job. These input parameters
must match in each call during processing of the asynchronous instruction. Example: The instruction "RD_DPARA" is identified by LADDR and RECNUM.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
171
Basics of program execution 8.5 Asynchronous instructions
Status of an asynchronous instruction
An asynchronous instruction shows its status via the block parameters STATUS/RET_VAL and BUSY. Many asynchronous instructions also use the block parameters DONE and ERROR. The figure below shows the two asynchronous instructions WRREC and RD_DPARA.
Summary
The input parameter REQ starts the job to execute the asynchronous instruction. The output parameter DONE indicates that the job was completed without error. The output parameter BUSY indicates whether the job is currently being executed. When
BUSY=1, a resource is allocated for the asynchronous instruction. When BUSY= 0, the resource is free.
The output parameter ERROR indicates that an error has occurred. The output parameter STATUS/RET_VAL provides information on the status of the job execu-
tion. The output parameter STATUS/RET_VAL receives the error information after the occurrence of an error.
Figure 8-7 Block parameters of asynchronous instructions using the instructions WRREC and RD_DPARA as examples.
The table below provides you with an overview of the relationships described above. It shows in particular the possible values of the output parameters if execution of the instruction is not complete after a call.
Note The output parameters of an synchronous instruction can change on every call. You therefore evaluate the relevant output parameters after each call of the asynchronous instruction.
172
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Basics of program execution 8.5 Asynchronous instructions
Table 8- 5 Relationship between REQ, STATUS/RET_VAL, BUSY and DONE during a "running" job.
Seq. no. of the call
1
Type of call First call
2 to (n - 1) n
Intermediate call
Last call
REQ 1
Not relevant Not relevant
STATUS/RET_VAL
W#16#7001 Error code (e.g. W#16#80C3 for lack of resources) W#16#7002
W#16#0000, if no errors have occurred. Error code if errors occurred.
BUSY
1 0
1
0 0
DONE ERROR
0
0
0
1
0
0
1
0
0
1
Use of resources
Asynchronous instructions use resources in the CPU during their execution. The resources are limited depending on the type of CPU and instruction. The CPU can only simultaneously process a set maximum number of asynchronous instruction jobs. The resources are available again after a job has been processed successfully or with errors.
Example: For the RDREC instruction, an S7-1500R/H CPU can process up to 20 jobs in parallel.
If the maximum number of simultaneous jobs for an instruction is exceeded, the following occurs if another job is started:
The job is not executed.
The ERROR output parameter returns a value of 1.
The STATUS block parameter returns the error code W#16#80C3 (lack of resources).
Note Lower-level asynchronous instructions
Some asynchronous instructions use one or more lower-level asynchronous instructions for their processing. This dependence is shown in the tables below.
Please note that each lower-level instruction typically occupies one resource in the instruction's resource pool.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
173
Basics of program execution 8.5 Asynchronous instructions
Extended instructions: maximum number of simultaneously running jobs
Table 8- 6 Maximum number of simultaneous jobs for asynchronous extended instructions and lower-level instructions used
Extended instructions
1513R-1 PN
1515R-2 PN
1517H-3 PN
Distributed I/O
RDREC
20
WRREC
20
ASI_CTRL
uses RDREC, WRREC
PROFIenergy
PE_START_END
uses RDREC, WRREC
PE_CMD
uses RDREC, WRREC
PE_DS3_Write_ET200 uses RDREC, WRREC S
PE_WOL
uses RDREC, WRREC, TUSEND, TURCV, TCON, TDISCON
Module parameter assignment
RD_DPAR
10
RD_DPARA
10
RD_DPARM
10
Diagnostics
Get_IM_Data
10
GetStationInfo
10
Communication: maximum number of simultaneously running jobs
Table 8- 7 Maximum number of simultaneous jobs for asynchronous instructions and lower-level instructions used for Open User Communication
Open User Communication TSEND TUSEND TRCV TURCV TCON TDISCON T_RESET T_DIAG TSEND_C TRCV_C
1513R-1 PN 88
1515R-2 PN 108
1517H-3 PN 288
88
108
288
88
108
288
88
108
288
88
108
288
88
108
288
uses TSEND, TUSEND, TRCV, TCON, TDISCON
uses TSEND, TUSEND, TRCV, TURCV, TCON, TDISCON
174
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Basics of program execution 8.5 Asynchronous instructions
Table 8- 8 Lower-level instructions used for asynchronous instructions for MODBUS TCP
MODBUS TCP MB_CLIENT MB_SERVER
1513R-1 PN
1515R-2 PN
1517H-3 PN
uses TSEND, TUSEND, TRCV, TURCV, TCON, TDISCON
uses TSEND, TUSEND, TRCV, TURCV, TCON, TDISCON
Reference
Table 8- 9 Lower-level instructions used for asynchronous instructions for communications processors
Communications processors PtP communication Port_Config Send_Config Receive_Config Send_P2P Receive_P2P Receive_Reset Signal_Get Signal_Set Get_Features Set_Features USS communication USS_Port_Scan MODBUS (RTU) Modbus_Comm_Load
1513R-1 PN
uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC uses RDDEC, WRREC
uses RDDEC, WRREC
uses RDDEC, WRREC
1515R-2 PN
1517H-3 PN
You can find additional information on block parameter assignment in the STEP 7 online help.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
175
Protection
9
9.1
Overview of the protection functions
Introduction
This section describes the functions for protection from unauthorized access: Access protection Know-how protection Protection by locking the CPUs
Other CPU protective measures
The following measures provide extra protection against unauthorized access from external sources and through the network:
Do not activate time-of-day synchronization over NTP servers.
Do not activate PUT/GET communication.
9.2
Configuring access protection for the CPU
Introduction
The S7-1500R/H redundant system has four different access levels to limit access to specific functions.
By setting up access levels and passwords, you limit the functions and memory areas that are accessible without a password. The individual access levels and corresponding passwords are specified in the object properties of the CPUs.
Rules for passwords
Ensure that passwords are sufficiently secure. Passwords must not follow a machinerecognizable pattern. Apply the following rules:
Assign a password that is at least 8 characters long.
Use different cases and characters: uppercase/lowercase, numbers and special characters.
176
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Protection 9.2 Configuring access protection for the CPU
Access levels for the CPUs
Table 9- 1 Access levels and access restrictions
Access levels Full access (no protection) Read access
HMI access
No access (complete protection)
Access restrictions Every user can read and change the hardware configuration and the blocks.
In this access level, only read access to the hardware configuration and the blocks is possible without a password. HMI access and access to diagnostics data is also possible. Neither blocks nor the hardware configuration can be downloaded to the CPUs without the password. The following actions are not possible without the password either: Writing test functions and firmware updates (online). The same access restrictions apply to HMI access as to read access. The following actions are not possible without the password either: Change of operating state (RUN/STOP/SYNCUP) and display of online/offline comparison status. When the CPUs have complete protection, no read or write access to the hardware configuration or blocks is possible (without access authorization in the form of a password). HMI access is not possible either. Authentication with the correct password provides full access to the CPUs again.
Reference
You can find a list of which functions are possible in the various protection levels in the STEP 7 online help under "Setting options for protection".
Properties of the access levels
Each access level allows unrestricted access to certain functions without a password, for example identification using the "Accessible devices" function.
The default setting of the CPUs is "No restriction" and "No password protection". In order to protect access to the CPUs, you need to edit the properties of the CPUs and set up a password. In the default access level "Full access (no protection)", every user can read and change the hardware configuration and the blocks. No password is configured, and no password is required for online access.
Communication between the CPUs via the communication functions in the blocks is not restricted by the access level of the CPUs.
Entering the correct password enables access to all the functions that are allowed in the given level.
Note Configuring an access level does not replace know-how protection
Configuring access levels offers a high degree of protection against unauthorized changes to the CPU through network access. Access levels restrict the rights to download the hardware and software configuration to the CPUs. However, blocks on the SIMATIC memory card are not write-protected or read-protected. Use know-how protection to protect the code of blocks on the SIMATIC memory card.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
177
Protection 9.2 Configuring access protection for the CPU
Behavior of functions in different access levels
The STEP 7 online help includes a table listing the online functions available in the various access levels.
Configuring access levels
Proceed as follows to configure the access levels for the CPUs: 1. Open the properties of the CPUs in the Inspector window. 2. Open "Protection & Security" in the area navigation.
A table with the possible access levels appears in the Inspector window.
Figure 9-1 Possible access levels
3. Activate the required protection level in the first column of the table. The green check marks in the columns to the right of the access level show which operations are still possible without entering the password. In the example (Figure: Possible access levels), read access and HMI access are still possible without a password.
4. In the "Enter password" column, specify a password for the access level "Full access" in the first row. In the "Confirm password" column, enter the selected password again to avoid incorrect entries.
5. Assign additional passwords as required for other access levels.
6. Download the hardware configuration for the access level to take effect.
The CPUs log the following actions with an entry in the diagnostics buffer:
Input of the correct or incorrect password
Changes to access level configuration
178
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Protection 9.3 Using the display to set additional password protection
Behavior of a password-protected CPU during operation
The protection of the CPUs takes effect for an online connection after you have loaded the settings into the CPUs. If you set a higher access level and download it to the CPU, all other online connections will be interrupted. You will then need to establish a new online connection.
Before an online function is executed, STEP 7 checks the necessary permission and, if necessary, prompts the user to enter a password. The functions protected by a password can only be executed by one programming device/PC at any one time. Another programming device/PC cannot log on.
Access authorization to the protected data applies for the duration of the online connection or for as long as you have STEP 7 open. The menu command "Online > Clear access rights" cancels the access authorization.
You can limit access to a password-protected CPU in RUN locally on the display. This prevents access even with a password.
9.3
Using the display to set additional password protection
Blocking access to a password-protected CPU
You can block access to password-protected CPUs (local password block) on the CPU display. The block is effective if the mode selector is set to RUN. The access block requires a configured protection level in STEP 7 and applies regardless of password protection. Even if someone accesses the CPUs via a connected PG/PC and has entered the correct password, access to the CPUs is denied. Set the access block separately for each access level on the display.
The backup CPU takes over the settings during SYNCUP. Changes to the access block for primary CPU or backup CPU in RUN-Redundant system state are also applied to the other CPU.
Procedure
If you want to block access to the CPUs via the display, you need to configure an access level with a password in STEP 7.
If you set local access protection for the CPUs on the display, the block applies to both CPUs in the RUN-Redundant system state. Proceed as follows:
1. On the display, select the Settings > Protection menu.
2. Confirm your selection with "OK". For each access level, specify whether or not access in the RUN operating state is allowed:
Allow: Access to the CPUs is possible with the right password in STEP 7.
Deactivated in RUN: If the mode selector is set to RUN, no additional logon to the CPUs is possible with the rights of this access level. Access is denied despite the fact that the user knows the password. If the operating mode switch is in the STOP position, then access with the password is enabled again.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
179
Protection 9.4 Using the user program to set additional access protection
Access protection for the display
Configure a password for the display in STEP 7 in the properties of the CPU. This protects local access protection with a local password.
9.4
Using the user program to set additional access protection
Access protection with the user program
In addition to access protection via the display, you have another option. You can also restrict access to a password-protected CPU using the ENDIS_PW instruction in STEP 7.
You can find more information on this instruction in the STEP 7 online help under "ENDIS_PW: Limit and enable password legitimation".
9.5
Know-how protection
Application
You can use know-how protection to protect one or more OB, FB or FC blocks as well as global data blocks in your program from unauthorized access. To restrict access to a block, assign a password. The password offers high-level protection against unauthorized reading and manipulation of the block. Know-how protection does not involve the CPU (offline access in STEP 7).
Password provider
As an alternative to manual password input, you can assign a password provider to STEP 7. When using a password provider, you select a password from a list of available passwords. When a protected block is opened, STEP 7 connects to the password provider and retrieves the corresponding password.
You need to install and activate a password provider before you can connect it. A settings file in which you define the use of a password provider is also required.
A password provider offers the following advantages:
The password provider defines and manages the passwords. When know-how protected blocks are opened, you work with symbolic names for passwords. For example, a password is marked with the symbolic name "Machine_1" in the password provider. The actual password behind "Machine1" is not disclosed to you. A password provider therefore offers optimum block protection as the users do not know the password themselves.
STEP 7 automatically opens know-how protected blocks without the direct entry of a password. This saves you time.
You can find more information on connecting a password provider in the STEP 7 online help.
180
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Protection 9.5 Know-how protection
Readable data
If a block is know-how protected, only the following data is readable without the correct password: Block title, comments and block properties Block parameters (INPUT, OUTPUT, IN, OUT, RETURN) Call structure of the program Global tags without information on the point of use
Further actions
Further actions that can be carried out with a know-how protected block: Copying and deleting Calling in a program Online/offline comparison Loading
Global data blocks and array data blocks
You protect global data blocks (global DBs) from unauthorized write access with know-how protection. If you do not have the valid password, you can only read the global data block without information on the point of use. The global data block cannot be changed, however.
Know-how protection is not available for array data blocks (array DBs).
Setting up block know-how protection
Proceed as follows to set up block know-how protection: 1. Open the properties of the block in question. 2. Select the "Protection" option under "General".
Figure 9-2 Setting up block know-how protection
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
181
Protection 9.5 Know-how protection
3. Click "Protection" to display the "Define protection" dialog.
Figure 9-3 Defining protection
4. Enter the new password in the "New password" box. Enter the same password in the "Confirm password" box.
5. Click "OK" to confirm your entry. 6. Close the "Know-how protection" dialog by clicking "OK". Result: The blocks selected are know-how-protected. Know-how protected blocks are marked with a padlock in the project tree. The password entered applies to all blocks selected.
Note Password provider Alternatively, you can set up know-how protection for blocks with a password provider.
Opening know-how protected blocks
Proceed as follows to open a know-how protected block: 1. Double-click on the block to open the "Access protection" dialog. 2. Enter the password for the know-how protected block. 3. Click "OK" to confirm your entry. Result: The know-how-protected block opens. After opening the block you can edit the program code and the block interface of the block until you close the block or STEP 7. You need to enter the password again the next time you open the block. If you close the "Access protection" dialog with "Cancel", the block will open but the block code will not be displayed. You will not be able to edit the block. If you copy the block or add it to a library, this does not cancel the know-how protection of the block. The copies will also be know-how-protected.
182
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Protection 9.5 Know-how protection
Changing block know-how protection
Proceed as follows to change block know-how protection: 1. Select the block for which you want to change know-how protection. The protected block
must not be open in the program editor. 2. In the "Edit" menu, select the "Know-how protection" command to open the "Change
protection" dialog. 3. To change the password for know-how protection, enter the current password under "Old
password". 4. Now enter a new password under "New password" and confirm the password under
"Confirm password". 5. Click "OK" to confirm your entry. Result: The password for know-how protection of the selected block has been changed.
Removing block know-how protection
Proceed as follows to remove block know-how protection: 1. Select the block from which you want to remove know-how protection. The protected
block must not be open in the program editor. 2. In the "Edit" menu, select the "Know-how protection" command to open the "Change
protection" dialog.
Figure 9-4 Removing know-how protection
3. To remove block protection, enter the current password under "Old password". Leave the fields for the new password blank.
4. Click "Remove" to confirm your entry. Result: Know-how protection for the selected block has been canceled.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
183
Protection 9.6 Protection by locking the CPU
9.6
Protection by locking the CPU
Locking options
Provide additional protection for your CPUs from unauthorized access (for example to the SIMATIC memory card) by using a secure front cover. You have the following options, for example: Attach a seal Secure the front cover with a lock (shackle diameter: 3 mm)
Figure 9-5 Locking latch on a CPU
184
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning
10
10.1
Overview
Introduction
This section includes information on the following topics: Check before powering on for the first time Commissioning procedure Removing/inserting the SIMATIC Memory Cards First power-on of the CPUs CPU pairing Assigning redundancy IDs Downloading projects to the CPUs Operating and system states CPU memory resets Backing up and restoring the configuration Time synchronization Identification and maintenance data
Commissioning requirements
Note Performing tests You must ensure the safety of your plant. You therefore need to run a complete functional test and make the necessary safety checks before the final commissioning of a plant. Also allow for any possible foreseeable errors in the tests. This prevents you from putting persons or equipment at risk during operation.
Software tools for commissioning
SIEMENS PRONETA provides commissioning support. You can find more information on SIEMENS PRONETA in the section Software (Page 56).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
185
Commissioning 10.2 Check before powering on for the first time
10.2
Check before powering on for the first time
Before the first power-on, check the installation and the wiring of the S7-1500R/H redundant system.
Questions for checking
The following questions provide instructions for checking your system in the form of a checklist.
Rack Are the mounting rails firmly mounted to the wall, in the frame, or in the cabinet? Are the cable ducts correctly installed? Have the minimum clearances been observed?
Grounding concept Are the mounting rails connected to the protective conductors? If applicable, are all further protective conductor connection points on the S7-1500R/H
redundant system connected to the protective conductor? Has the protective conductor been tested? Are the required equipotential bonding cables connected with low impedance to the relevant sections of the plant?
Module installation and wiring Are all the modules inserted / installed in accordance with the installation plan and
configuration with STEP 7 and screwed firmly to the mounting rails? Have all synchronization modules been installed and locked in the S7-1500H redundant
system? You should hear the modules click into place in the module slots. Are all redundancy connection connectors in the S7-1500H redundant system correctly
connected to the LC sockets? You should hear the connectors click into place in the LC sockets. Are the redundancy connections (PROFINET cable) between the CPUs in the S7-1500R redundant system connected to the correct ports of PROFINET interface X1? The ports used must correspond to the configuration in STEP 7. Are the PROFINET devices in the S7-1500R/H redundant system connected?
Load current supply Are all load current supplies switched off? Is the power cable connector correctly wired? Has the connection to line voltage been established?
186
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.3 Commissioning procedure
10.3
Commissioning procedure
Requirements
The CPUs are in the "Factory settings" state or have been reset to factory settings. You can find more information in the section Resetting CPUs to factory settings (Page 286).
The CPUs have the same or compatible article numbers.
The SIMATIC memory cards are as delivered or have been formatted and are not writeprotected.
The two CPUs of the S7-1500R/H redundant system have the same firmware version. You can find more information in the section Firmware update (Page 281).
Commissioning procedure
To commission the S7-1500R/H redundant system, we recommend the following procedure:
Table 10- 1 Procedure for commissioning SIMATIC S7-1500R/H
Step 1 2
3 4
5
6
7 8 9
10 11
12
Procedure Configure hardware in STEP 7 Create user program
Insert required modules Wire and check configuration (cable for supply voltage, PROFINET ring, redundancy connections) Insert SIMATIC memory cards in the CPUs
Switch on CPUs, optional load current supply and distributed I/O CPU pairing Assign CPUs redundancy IDs Check LEDs
Evaluate information on the CPU displays Load hardware configuration and user program to the CPUs Test inputs and outputs
Further information Section Configuration (Page 145) Section Programming the S7-1500R/H (Page 156) and STEP 7 online help Section Installation (Page 102) Section Wiring (Page 117)
Section Removing/plugging in SIMATIC memory cards (Page 188) Section First power-on of the CPUs (Page 190)
Section CPU pairing (Page 191) Section Redundancy IDs (Page 193) You can find the meaning of the LEDs in the module manuals. Section CPU display (Page 258) Section Downloading projects to the CPUs (Page 197)
The following functions are helpful: Monitoring and modifying tags, testing with program status, forcing, controlling the outputs in STOP. You can find more information in the section Test and service functions (Page 290).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
187
Commissioning 10.3 Commissioning procedure
10.3.1
Removing/plugging in SIMATIC memory cards
Requirements
For the S7-1500R/H redundant system, you need a SIMATIC memory card for each of the two CPUs.
The CPUs only support pre-formatted SIMATIC memory cards. If required, format the SIMATIC memory cards before using them in the CPU.
You can find more information on formatting SIMATIC memory cards in the function manual Structure and use of the CPU memory (https://support.industry.siemens.com/cs/ww/en/view/59193101).
Make sure that the SIMATIC memory cards of the two CPUs are not write-protected.
Inserting SIMATIC memory cards
Proceed as follows to insert a SIMATIC memory card:
1. Open the front cover of the CPU.
2. Insert the SIMATIC memory card, as shown on the CPU, into the slot for the SIMATIC memory card.
Figure 10-1 Slot for the SIMATIC memory card
3. Carefully insert the SIMATIC memory card into the CPU, pushing gently, until the card clicks into place.
188
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.3 Commissioning procedure
Removing SIMATIC memory cards
Proceed as follows to remove a SIMATIC memory card: 1. Open the front cover. 2. Switch the CPU to STOP. 3. Gently push the SIMATIC memory card into the CPU. Once it has clicked into place,
remove the SIMATIC memory card. Only remove the SIMATIC memory card in the POWER OFF or STOP state of the CPU. Ensure that: No writing functions are active in STOP. Writing functions are online functions with the
PG/PC, for example loading/deleting a block and test functions. No writing functions were active before POWER OFF If you remove the SIMATIC memory card during a write process, the following problems can occur: The data contents of a file are incomplete. The file is no longer readable, or no longer exists. The entire content of the card is corrupted. Please also note the following FAQs on the Internet (https://support.industry.siemens.com/cs/ww/en/view/59457183) for removal of the SIMATIC memory card.
Note If you switch a CPU in redundant mode to the STOP operating state, the S7-1500R/H redundant system switches to the RUN-Solo system state. The other CPU maintains control of the process.
CPU response after a SIMATIC memory card is removed or inserted
Inserting or removing the SIMATIC memory card in STOP operating state triggers a reevaluation of the SIMATIC memory card. The CPU compares the content of the configuration on the SIMATIC memory card with the backed-up retentive data. If the backedup retentive data matches the data of the configuration on the SIMATIC memory card, the retentive data is retained. If the data differs, the CPU automatically performs a memory reset. A memory reset deletes the retentive data on the CPU. You can find more information on memory resets in the section CPU memory reset (Page 241).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
189
Commissioning 10.3 Commissioning procedure
The CPU evaluates the SIMATIC memory card. This process is indicated by the RUN/STOP LED flashing.
Note Using the SIMATIC memory card as a firmware update card If you use the SIMATIC memory card as a firmware update card, pulling and plugging the card will not result in the loss of retentive data.
Reference
You can find more information on the SIMATIC memory card in the function manual Structure and use of the CPU memory (https://support.industry.siemens.com/cs/ww/en/view/59193101).
10.3.2
First power-on of the CPUs
Requirements
The SIMATIC S7-1500R/H redundant system has been installed. The system has been wired. The SIMATIC memory cards are in the CPUs.
Procedure
Proceed as follows to commission the CPUs: 1. Turn on the load current supply. Result: The CPUs run an LED test. All LEDs flash at 2 Hz,
the RUN/STOP LED flashes alternately yellow/green the ERROR-LED red the MAINT LED yellow. The CPUs run system initialization and evaluate the SIMATIC memory cards: The RUN/STOP LED flashes yellow at 2 Hz. When system initialization is complete, the CPUs switch to STOP: The RUN/STOP LED lights up in yellow.
190
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.3 Commissioning procedure
10.3.3
CPU pairing
Introduction
Pairing is the mutual recognition of the two CPUs within a network. During pairing, the CPUs exchange information for mutual identification. Example: Checking for matching article number and firmware version.
Successful pairing of two CPUs is a fundamental requirement for redundant operation.
Requirement
For successful pairing, the CPUs must have the same firmware version and the same or compatible article numbers.
An invalid configuration variant prevents the pairing of two CPUs, for example more than two R-CPUs in the PROFINET ring. Pairing errors are reported in the diagnostics buffer.
Pairing procedure
Proceed as follows to pair two CPUs
1. Create a redundancy connection between two CPUs. Connect the CPUs to the relevant ports of the interfaces (for example for R-CPUs: X1 P2 R).
2. POWER ON both CPUs.
Loss of pairing
If pairing is already established, an invalid configuration variant will lead to the loss of pairing. Loss of pairing in RUN system state also causes the loss of synchronization between primary CPU and backup CPU. The system switches to the RUN-Solo system state.
The primary CPU switches to the RUN operating state and takes on sole control of the process. The backup CPU switches to the STOP operating state.
In the event of the loss of pairing as a result of the failure of the primary CPU, the backup CPU becomes the new primary CPU and takes on sole control of the process.
Checking pairing state
You can find out how to check the success of pairing on the display and in STEP 7 in the section Checking before replacing components (Page 266).
Checking pairing in the RUN-Solo system state
Please observe the following rules if the redundant system is in the RUN-Solo system state: Do not immediately start replacing components. Do not immediately switch the failed CPU to the RUN operating state.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
191
Commissioning 10.3 Commissioning procedure
First check the pairing status in the RUN-Solo system state.
CAUTION Do not switch the failed CPU in the RUN-Solo system state to the RUN operating state. This could result in an undefined system state for the redundant system. Both CPUs would become primary CPUs. If the S7-1500R/H redundant system is in the RUN-Solo system state, you must not immediately switch the backup CPU to the RUN operating state. Possible cause: No pairing between the two CPUs. Check the pairing status on the display or on the basis of the diagnostics status or diagnostics buffer. If there is no pairing, the redundancy connections have been interrupted. Follow the procedure described in the section Checking before replacing components (Page 266).
Primary and backup CPU role assignment
The primary CPU and backup CPU roles are assigned by the S7-1500R/H redundant system during pairing. The redundant system always attempts to restore the previous roles of the R/H CP. The following applies here: The CPU that last controlled the process becomes the primary CPU. Requirement: The system time has been set correctly. After restoring the factory settings, the redundant system assigns the roles according to the following criteria: The redundant system compares the following criteria of the two SIMATIC memory cards and prioritizes the assignment of roles: SIMATIC memory card contains a STEP 7 project
High priority SIMATIC memory card is empty and writable
Medium priority SIMATIC memory card:
missing or inserted, is empty or is not writable Low priority
Result: If the two R/H CPUs have different priorities, the CPU with the higher priority becomes the primary CPU. If the priorities are identical, the R/H CPU with the lower CPU serial number becomes the primary CPU (see nameplate on the CPU or on the CPU display).
Note If an R/H CPU is in RUN mode, the assigned role does not change when pairing again.
192
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.3 Commissioning procedure
10.3.4
Redundancy IDs
Introduction
For redundant operation, the two CPUs in the redundant system must process identical project data. In SYNCUP, the operating system copies the content of the SIMATIC memory card from the primary CPU to the backup CPU.
The load memories contain the project data of both CPUs. This duplication of the project data is necessary for ensuring redundant operation. By assigning the redundancy IDs, you define which project data a CPU uses for itself.
Redundancy IDs 1 and 2
Redundant operation is only possible if the two CPUs have different redundancy IDs. The redundancy IDs can have values of 1 and 2. The CPUs save the redundancy IDs in their retentive data areas.
Both CPUs have redundancy ID 1 in the following cases:
Default setting upon initial commissioning
After reset to factory settings
In the STEP 7 project tree, each of the two CPUS is displayed with its own tree. The redundancy ID is used to assign a project tree to the real CPU in STEP 7. The upper CPU of the two CPUs in the project tree always has a redundancy ID of 1. The lower CPU of the two always has a redundancy ID of 2.
Diagnostics displays are assigned to the real CPUs in the project tree in the same way.
Figure 10-2 Assignment of the redundancy IDs between project tree and real configuration
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
193
Commissioning 10.3 Commissioning procedure
Assigning redundancy IDs to CPUs in the configuration
Requirement: The CPUs have the same firmware version and the same or compatible article numbers. You have the following options for assigning different redundancy IDs to the CPUs: Automatic assignment Assignment using the display
Automatic assignment
Requirement: Both real CPUs of the redundant system have the same redundancy ID (e.g."1").
Options for automatic assignment: Both CPUs are in STOP. There is pairing between the two CPUs. The ERROR LEDs are
flashing red. Procedure: Switch the left-hand CPU in the configuration to the RUN operating state. Result: The right-hand CPU in the configuration changes its redundancy ID. The left-hand CPU in the configuration is in RUN operating state. The right-hand CPU in the configuration is in STOP. Both redundancy connections are separated, therefore there is no pairing between the two CPUs. Procedure: Implement pairing between the two CPUs by establishing at least one redundancy connection. Result: The right-hand CPU in the configuration changes its redundancy ID. The left-hand CPU in the configuration is in RUN. The right-hand CPU in the configuration is in POWER OFF. At least one redundancy connection is established. There is no pairing between the two CPUs due to POWER OFF. Procedure: POWER ON the right-hand CPU in the configuration. Result: The right-hand CPU in the configuration changes its redundancy ID.
Assignment using the display
Requirements: The two real CPUs in the redundant system: Are connected to each other Have redundancy ID 1 The mode switches of the CPUs are in the STOP position Both CPUs are in POWER OFF mode
194
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.3 Commissioning procedure
Procedure: Proceed as follows to assign the redundancy IDs via the CPU display: 1. POWER ON the CPU to which you want to assign redundancy ID 2. 2. On the display of that CPU, select the menu command "Overview > Redundancy". Assign
the CPU redundancy ID 2. Once you have assigned the CPU redundancy ID 2, the CPU will automatically restart. 3. Switch the other CPU POWER OFF. 4. Download the project and the hardware configuration to the CPU that you want to switch to RUN first.
Figure 10-3 Assigning redundancy IDs
Reading redundancy IDs from the display
As well as assigning redundancy IDs over the display, you can read out the redundancy ID with the menu command "Overview > Redundancy". The display always shows the redundancy ID of the CPU on whose display you query the redundancy ID.
Switching redundancy IDs over the display
Since each of the CPUs already has its own redundancy ID, you can exchange the redundancy IDs of the CPUs for each other if required. Switching redundancy IDs can, for example, be useful in the following situations: You only have access to one of the two CPUs. You have incorrectly assigned the redundancy IDs.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
195
Commissioning 10.3 Commissioning procedure
Note Switching the redundancy IDs switches the assignment of the real CPUs to the project trees in the project navigation. If the two real CPUs contain the same project, switching the redundancy IDs switches all configured properties between the CPUs. These include, for example, the IP addresses of the PROFINET interfaces, the device names and the configured topology.
On the display, you can exchange on only one CPU the redundancy IDs already assigned for both CPUs. Proceed as follows to switch the redundancy IDs: 1. Make sure that both CPUs are in STOP operating state: 2. Make sure that the two CPUs are connected to each other. 3. Change the redundancy ID of a CPU using the display. Result: Once the redundancy ID has been changed on one CPU, both CPUs restart and each now has the previous redundancy ID of the other.
Incompatible assignment of redundancy IDs
There is pairing between the two CPUs. You can find more information in the section CPU pairing (Page 191). In the following case, the redundant system automatically checks the compatibility of the redundancy IDs: Both CPUs are in STOP operating state and they have the same redundancy ID. If the same redundancy ID has been assigned to both CPUs, the ERROR LEDs on both CPUs flash in red. Each CPU display indicates an assignment conflict (symbol ). The CPUs generate an entry in the diagnostics buffer. You can read the entry on the display, for example. To establish redundant mode, resolve the assignment conflict in one of the following ways: Assign a different redundancy ID to one CPU using the display. Switch the CPU that is to retain its assigned redundancy ID to the RUN operating state.
Behavior of the CPUs when redundancy IDs are changed
Please note that you can only change the redundancy ID of a CPU in STOP operating state. After each successful change of a redundancy ID, the CPU in question automatically restarts.
196
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.3 Commissioning procedure
10.3.5
Downloading projects to the CPUs
Introduction
You need to download the project data to the CPU. Download either offline using the SIMATIC memory card or over an online connection from the PG/PC/HMI device to a CPU. The complete project data (all configuration data and the complete user program) can only be downloaded when a CPU is in STOP operating state.
Note Simultaneous online access to both CPUs
Simultaneous online access to both CPUs from STEP 7 is not possible. You can access either the primary CPU or the backup CPU.
Options for downloading
To download project data into the S7-1500R/H redundant system, you have the following options:
In the STOP system state, download: The complete project data to the primary CPU The complete project data to the backup CPU
In the RUN-Solo system state, download: The user program to the primary CPU The complete project data to the backup CPU
In the RUN-Redundant system state, download: the modified user program into the redundant system.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
197
Commissioning 10.3 Commissioning procedure
Note Loading in the RUN-Redundant system state: No check for sufficient free space before a write function is performed Before a write function is performed, the system does not check whether there is enough free space on the SIMATIC memory cards of the CPUs for the function. Writing functions are online functions with the PG/PC, for example, loading/deleting a block, test functions, loading a modified user program in RUN-Redundant system state. If insufficient memory is available on the SIMATIC memory card of a CPU, then: · changes the CPU in question to STOP mode.
If there is insufficient memory on the SIMATIC memory card of the selected CPU (to which you want to download), this CPU then changes to the STOP operating mode. The other CPU changes to the RUN operating mode with the former user program (redundant system system state RUN-Solo).
If there is insufficient memory on the other CPU then this CPU changes to the STOP operating mode. The selected CPU (to which you downloaded) changes to the RUN operating mode with the changed user program (redundant system system state RUN-Solo).
· If the ERROR LED flashes red (temporary error), · a corresponding error message is entered in the diagnostic buffer. If then there is insufficient free space on the SIMATIC memory card of the other CPU, then this CPU stays in the RUN operating mode. The CPU then responds like a standard CPU.
Downloading project data to the CPU
By default, the project data is downloaded to the primary CPU.
Procedure Proceed as follows: 1. Right-click to select the S7-1500R/H system in the project tree. 2. Select the "Download to device" > "Hardware and software (changes only)" command
from the shortcut menu. The "Extended download" dialog window shows the addresses of the configured CPUs in the "Configured access nodes of..." table. 1. Select the subnet from the "Type of the PG/PC interface" drop-down lists. 2. Select the adapter at the "PG/PC interface". 3. Select the interface to which the PG/PC is connected from the "Connection to
interface/subnet" drop-down list. Alternatively, select the entry "Try all interfaces".
198
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
4. Then click on the "Start search" button.
Commissioning 10.3 Commissioning procedure
Figure 10-4 "Extended download" dialog window (primary CPU)
The "Select target device" table shows the CPUs in the S7-1500R/H system and their roles. The primary CPU is already selected. Requirement: You have already assigned the IP addresses using the displays of the CPU (for example for commissioning) or over accessible devices in STEP 7. 5. Click "Load".
Note Remember the redundancy IDs of the CPUs in the configuration: · The real CPU with redundancy ID 1 uses the project data of the top CPU in the STEP 7
project tree. · The real CPU with redundancy ID 2 uses the project data of the bottom CPU in the
STEP 7 project tree. You read out the redundancy ID of a CPU over the display with the menu command "Overview > Redundancy". You can find more information on assigning redundancy IDs in the section Redundancy IDs (Page 193).
"Load preview" dialog window
If necessary, the project data is compiled before the download. You can only load project data that is consistent and has been compiled without errors. The "Load preview" dialog window sets out the key information on the load process to be run:
Procedure 1. After compilation, check the messages in the "Load preview" dialog window. 2. If the S7-1500R/H system is not in STOP, stop the system. To do so, select "Stop RH
system" in the "Action" column of the drop-down menu. 3. Click the "Download" button to start the download.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
199
Commissioning 10.3 Commissioning procedure
Starting the CPU after loading
The "Results of loading" dialog window displays the results of the loading process.
WARNING CPU startup with user program with errors Before starting the CPU, make sure that a user program with errors: · Cannot cause damage or injury · Will not lead to dangerous system states
Requirement The CPU mode selector is in the RUN position.
Procedure 1. To start the primary CPU after loading is complete, select "Start module" in the "Action"
column. 2. To complete loading, click "Finish".
Result: The primary CPU switches to the RUN operating state. 3. Switch the backup CPU to the RUN operating state.
Result: After successful SYNCUP, the S7-1500R/H system switches to redundant mode.
Note Role change during loading Beware of a possible role change between primary and backup CPU shortly before, during or after loading. A role change can occur during loading if the primary CPU fails (power failure, hardware defect) or is in STOP and: · You switch the backup CPU to RUN operating state during this time using the mode
selector, the display or a communication command. or · You switch on the backup CPU during this time. In the event of a role change, the new primary CPU starts up with the old project data. The new project data in the backup CPU is overwritten with the old project data during synchronization of the two CPUs for redundant operation.
200
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.3 Commissioning procedure
Downloading project data to the backup CPU
By default, the project data is downloaded to the primary CPU. In the SYNCUP system state, the project data is then transferred from the primary CPU to the backup CPU. You can also download the project data to the backup CPU. This makes sense if the backup CPU is to be primary CPU with its project data upon a restart.
Procedure: 1. Download the project data to the backup CPU. The primary CPU continues to control the
process. 2. Switch the primary CPU to the STOP operating state after loading. 3. Switch the backup CPU to the RUN operating state. It becomes the new primary CPU
and controls the process on its own with the newly loaded user program in the RUN-Solo system state. 4. Switch the new backup CPU to the RUN operating state. Result: The system state is RUN-Redundant.
Note Please note the following during download to the backup CPU: If the project uses retentive data, the backup CPU runs with its data which may be outdated.
Detailed procedure for download to the backup CPU: 1. Right-click to select the S7-1500R/H system in the project tree. 2. Select "Hardware and software (changes only)" under "Download to backup CPU". The backup CPU is now selected instead of the primary CPU in the "Extended download" dialog window.
Figure 10-5 "Extended download" dialog window (backup CPU)
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
201
Commissioning 10.3 Commissioning procedure
Load user program in RUN-Solo system state
The redundant system is in the RUN-Redundant system state. You can download a modified user program to the primary CPU. Advantages: During downloading, the primary CPU maintains control of the process. The plant
remains in operation. Restore the previous user program:
After loading in the RUN-Solo operating mode, the backup CPU is in the STOP mode The previous user program is still on the backup CPU. If you want to restore the previous user program, then switch the primary CPU to the STOP operating mode and then the backup CPU to the RUN operating state. Result: The backup CPU with the previous user program starts as primary CPU. Then switch the backup CPU to the RUN operating state. Result: The redundant system with the previous user program is in the system state Run-Redundant.
Note If you restore the previous user program, the procedure describes leads to the STOP system of the redundant system.
Procedure Proceed as follows to download the user program in RUN: 1. Switch the backup CPU to the STOP operating state. The S7-1500R/H system switches
to RUN-Solo system state. 2. Download the modified user program to the primary CPU with "Download to device" >
"Software (changes only)". The primary CPU continues to control the process. 3. Switch the backup CPU to the RUN operating state. The primary CPU remains in the RUN operating state and synchronizes the modified user program with the backup CPU in SYNCUP. Result: The S7-1500R/H system switches back to redundant mode with the modified user program.
Downloading a modified user program in RUN-Redundant system state
From firmware version V2.8 of the R/H CPUs, you can download a modified user program in RUN-Redundant system state. If no error messages are issued during the download process, the modified user program is then downloaded into the redundant system. Advantage: The redundant system remains in the RUN-Redundant system state during the download.
202
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.3 Commissioning procedure
Changes in the user program
The redundant system remains in the RUN-Redundant system state during the download process when the following changes are made to the user program:
Table 10- 2 Loading changes in the RUN-Redundant system state
User program Text lists (alarms) Comments Blocks OB FB, FC, DB, user data type UDT FB, FC DB
PLC tags
Action New, Change New, Change, Delete
Consistent loading of multiple changes New, Change, Delete, Change properties New, Change, Delete
Feature to note Exception: Comments in the hardware configuration -
Change code, Change interface Change properties (change attribute "Only store in load memory") New
Change name/type of tags, add or delete tags (memory reserve not enabled) Add new tags (memory reserve activated)
Add (timers, counters, bit memories)
-
Actual values in the new data blocks are set to start values. Actual values of tags in the structurally modified data blocks are set to start values. Actual values of added tags within the memory reserve are set to start values. -
Note Response time when downloading a modified user program into the R/H CPUs in the RUNRedundant system state During the download process in the RUN-Redundant system state, the response time of the system is restricted compared with the normal redundant mode. The more changes the user program contains, the higher the impact on the response time.
Requirements Possible as of firmware version V2.8 SIMATIC memory cards of the R/H CPUs with sufficient free storage space The redundant system is in the RUN-Redundant system state. The opened project is in offline mode.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
203
Commissioning 10.3 Commissioning procedure
Procedure
There are various ways of downloading the modified user program in RUN-Redundant system state:
Options for downloading in the RUNRedundant system state
Proceed as follows to download the modified user program in the RUNRedundant system state:
Downloading the modi- 1. Select the program folder or the blocks of the modified user program in
fied user program to
the project tree.
the primary CPU
2. Select the "Download to device" button or select the "Online > Download
to device" menu command.
1. Select the S7-1500R/H system in the project navigation.
2. Press the right mouse button. Select the "Download to device" > "Software (only changes)" command from the shortcut menu.
Downloading the modi- 1. Select the S7-1500R/H system in the project navigation.
fied user program to the backup CPU
2. Press the right mouse button. Select the "Download to backup CPU" > "Software (only changes)" command from the shortcut menu.
Result: The redundant system remains in the RUN-Redundant system state with the modified user program.
Note
The redundant system remains in the RUN-Redundant system state only with the menu command "Download to device" > "Software (only changes)".
The following menu can subsequently stop the redundant system: · "Download to device" > "Hardware configuration" · "Download to device" > "Software (all blocks)" · Download to device >" Hardware and software" (only changes)
204
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
10.4
Operating and system states
10.4.1
Overview
Operating states
Operating states describe the behavior of an individual CPU at a specific time. Knowledge of the operating states of the CPUs is useful for programming startup, testing and error diagnostics. The status LEDs on the front of the CPU and the CPU display indicate the current operating state.
Like standard S7-1500 CPUs, the S7-1500R/H CPUs have the operating states STOP, STARTUP and RUN. For operation as redundant system, one of the two CPUs can take on an additional operating state, SYNCUP, for synchronizing the two subsystems. The RUN operating mode is divided into the following states for redundant systems:
RUN
RUN-Syncup
RUN-Redundant.
System states
The system states enable the direct assessment of the behavior of a redundant system. They result from the combination of the operating states of the individual CPUs. STOP STARTUP RUN-Solo SYNCUP RUN-Redundant
Event-controlled synchronization
Event-controlled synchronization ensures that both CPUs in a redundant system can operate redundantly (RUN-Redundant system state).
For all events that could result in different internal subsystem states, the operating system automatically synchronizes the data of the primary and backup CPU.
Primary and backup CPU are, for example, synchronized in the event of:
Direct access to the IO devices
Events that interrupt cyclic program execution
Updates to user times, for example S7 timer
Updates to the process image
Changes to data through communication functions
Access to data that could be different on the different CPUs, for example current time, system time, or runtime messages
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
205
Commissioning 10.4 Operating and system states
Synchronization for redundant mode
In the SYNCUP system state, the operating system synchronizes the user programs in the two CPUs for redundant operation. Synchronization ensures that both CPUs can operate redundantly. In the event of failure of the primary CPU in redundant operation, the backup CPU takes over control of the process as the new primary CPU at the point of interruption.
Requirements for achieving a redundant system state
If the following requirements are met, the redundant system reaches the RUN-Redundant system state: The requirements for use of the S7-1500R/H redundant system have been met (see
section Application planning (Page 58)). The two CPUs of the redundant system have recognized each other, which means
pairing was successful (see section CPU pairing (Page 191)); You have commissioned the system as detailed in the section Commissioning procedure
(Page 187).
206
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
Overview of system and operating states
The figure below shows the possible operating states of the CPUs and the resulting system states. In general, the two CPUs have equal priority; each CPU can be either primary or backup.
Figure 10-6 System and operating states
The following table provides you with an overview of how the redundant system starts and at the same time runs through the various operating modes and system states. The following initial situation and steps are an example.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
207
Commissioning 10.4 Operating and system states
The operating and system states are described in detail in the following sections.
Table 10- 3 Redundant system startup
No. in diagram
Primary CPU
System state
Backup CPU
Initial situation: Both CPUs are in STOP operating state. The mode selectors are also in the STOP position.
Step 1: Switch the mode selector of the CPU that is to be primary CPU from STOP to RUN.
The CPU switches to STARTUP STOP STARTUP
and executes startup OB 100 and
other available startup OBs.
The CPU remains in STOP mode.
Following successful STARTUP, STARTUP RUN-Solo
the CPU switches to RUN.
The CPU remains in STOP mode.
The CPU runs like a standard CPU in RUN and executes the user program.
Step 2: Switch the mode selector on the backup CPU from STOP to RUN.
RUN RUN-Syncup
RUN-Solo SYNCUP
STOP SYNCUP
The two user programs are synchronized for redundant mode. The primary CPU copies the contents of the
load and work memory to the backup CPU. The backup CPU catches up with user program processing on
the primary CPU. After successful synchronization, the memory content is identical on the two CPUs.
RUN-Syncup RUN-Redundant SYNCUP RUN-Redundant
SYNCUP RUN-Redundant
After the SYNCUP CPUs go to RUN-Redundant mode. Both CPUs process the user program synchronously.
10.4.2
STARTUP operating state
Startup processing (in the primary CPU only)
STARTUP is only executed by the primary CPU. In STARTUP, the primary CPU behaves just like an S7-1500R/H standard CPU.
Response
Before the CPU starts to execute the cyclic user program, a startup program is executed.
By suitably programming startup OBs, you can initialize variable tags for your cyclic program in the startup routine. You can program one or more startup OBs, or none at all.
208
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
Points to note
All outputs are disabled or respond as configured for the given module: They provide a configured substitute value or retain the last value output and switch the controlled process to a safe operating state.
The process image is initialized.
The process image is not updated. To read the current state of inputs during STARTUP, you can access inputs with direct I/O access. To initialize outputs during STARTUP, you can write values via the process image or with direct I/O access. However, the values are first output at the outputs during the transition to the RUN operating mode.
The CPU always starts up in warm restart mode.
If you define data as retentive, its content is retained beyond program startup after STOP or a power failure.
The non-retentive bit memories, timers and counters are initialized.
The non-retentive tags in data blocks are initialized.
During STARTUP, cycle time monitoring is not yet running.
The CPU processes the startup OBs in the order of the startup OB numbers. The CPU processes all programmed startup OBs regardless of the selected startup type (Figure "Setting the startup behavior").
If a relevant event occurs, the CPU can start the following OBs in startup:
OB 82: Diagnostics interrupt
OB 83: Removal/insertion of modules
OB 86: Rack error
OB 121: Programming error (only for global error handling)
OB 122: I/O access error (only for global error handling) You can find a description of how to use global and local error handling in the STEP 7 online help.
The CPU does not start all other OBs until the transition to the RUN operating state.
Behavior when expected and actual configurations do not match
The configuration downloaded to the CPU is the expected configuration. The actual configuration is the actual, physical configuration of the automation system. If the expected configuration and actual configuration differ, the hardware compatibility setting defines the behavior of the CPU.
Aborting or not running startup
If errors occur during startup, the CPU aborts STARTUP and returns to the STOP operating state. The CPU does not perform STARTUP under the following conditions: You have not inserted a SIMATIC memory card or an invalid one is inserted. You have not downloaded a hardware configuration to the CPU.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
209
Commissioning 10.4 Operating and system states
Configuring startup behavior
You configure the behavior of the CPU in STEP 7 in the "Startup" group of the CPU properties. Proceed as follows to set the startup behavior: 1. Select the CPU in the device view of the STEP 7 hardware network editor. 2. In the properties, select the "Startup" area.
Figure 10-7 Setting the startup behavior
Sets the startup type after POWER ON Defines the startup behavior for the event that a module in a slot does not correspond to
the configured module. This parameter applies to the CPU and to all the modules for which no other setting has been selected. · Startup CPU only if compatible: In this setting, a module in a configured slot must be
compatible with the configured module. Compatible means that the module matches the configured module in terms of: The number of inputs and outputs The electrical and functional properties · Startup CPU even if mismatch: With this setting, the CPU starts up irrespective of the type of module inserted.
Specifies a maximum period (default: 60 000 ms) in which the distributed I/O must be
ready for operation. If the distributed I/O is ready for operation within the configuration time, the CPU switches to RUN. If the distributed I/O is not ready for operation within the configuration time, the startup behavior of the CPU depends on the hardware compatibility setting.
210
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
10.4.3
STOP operating state
Response
The CPU does not execute the user program in the STOP operating state.
All outputs are disabled or respond as configured for the given module if both CPUs are in STOP operating state: They provide a configured substitute value or retain the last value output and thus hold the controlled process in a safe operating state.
Points to note
The backup CPU establishes no connections to the IO devices in the STOP operating state.
The primary CPU establishes connections to the IO devices in the STOP operating state. The primary CPU activates the system IP address even in the STOP operating state if the system IP address has been configured.
If both CPUs are in STOP and you download a configuration to one CPU, note the following:
You have not downloaded a configuration to the backup CPU and the backup CPU should become the primary CPU:
Switch the backup CPU to the primary CPU (either in the event dialog of the download process or via the mode switch of the CPU).
Downloading to the primary CPU configures the connected IO devices in line with the downloaded hardware configuration, even in STOP operating state.
10.4.4
SYNCUP operating state
SYNCUP operating state (only in the backup CPU)
In the SYNCUP operating state, the operating system synchronizes the backup CPU with the primary CPU. The primary CPU is in the RUN-Syncup operating state and controls the process.
Unlike the primary CPU, the backup CPU does not go through the STARTUP operating state.
You can find more information in the section SYNCUP system state (Page 213).
Points to note
You have only limited access to online functions during SYNCUP. You can find more information in the section Test functions (Page 290).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
211
Commissioning 10.4 Operating and system states
10.4.5
RUN operating states
RUN operating states
The primary CPU goes through multiple operating states before reaching the RUNRedundant system state: RUN RUN-Syncup RUN-Redundant The backup CPU only has the RUN-Redundant operating state.
Response
In the RUN operating state, the primary CPU behaves just like an S7-1500 standard CPU. It performs cyclic, time-driven and interrupt-driven program execution on its own.
Addresses that are in the "Automatic update" process image are automatically updated in each program cycle. You can find more information in the section Process images and process image partitions (Page 153).
Once the CPU has written the outputs and read the inputs, it runs through the cyclic program from the first instruction to the last instruction. Events with a higher priority such as hardware interrupts, diagnostic interrupts and communication can interrupt the cyclic program flow and prolong the cycle time.
If you have configured a minimum cycle time, the CPU does not terminate the cycle until after this minimum cycle time has expired, even if the user program is completed sooner.
The operating system monitors the runtime of the cyclic program on the basis of a configurable upper limit known as the maximum cycle time. You can restart this time monitoring at any point in your program by calling the RE_TRIGR instruction.
If the cyclic program exceeds the maximum cycle time, the operating system may start the time error OB (OB 80). You can find additional information in the section Start events (Page 160).
Points to note in the RUN operating state
In non-redundant operation, the CPUs are independent of each other. They can have different projects.
RUN-Syncup operating state
In the RUN-Syncup operating state, the backup CPU synchronizes with the primary CPU. The SYNCUP that temporarily affects the primary CPU (for example delay of asynchronous services, cycle time extension through transfer of the load and work memory contents) runs simultaneously in the backup CPU. You can find more information in the section SYNCUP system state (Page 213).
212
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
RUN-Redundant operating state
The redundant system is in the RUN-Redundant system state. Both CPUs process the user program synchronously.
10.4.6
SYNCUP system state
Requirements
The article numbers and firmware versions of the two CPUs are the same. There is a SIMATIC memory card in each CPU. The PROFINET ring is closed. There is at least one redundancy connection (fiber-optic cable) in the S7-1500H
redundant system. Media redundancy role:
The two CPUs have the media redundancy role "Manager (auto)". All other devices in the PROFINET ring have the media redundancy role "Client". Pairing for the two CPUs has been implemented. The primary CPU is in the RUN operating state. The execution of SYNCUP is not disabled (default setting). No load functions are running. Testing with breakpoints is not used. No SYNCUP is performed during testing with breakpoints. You will find more information on testing with breakpoints in the STEP 7 online help.
SYNCUP system state
Synchronization in the SYNCUP system state ensures that the two CPUs can operate redundantly. With the SYNCUP system state, the redundant system switches from RUNSolo to the RUN-Redundant system state. Afterwards, both CPUs synchronously process the same user program.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
213
Commissioning 10.4 Operating and system states
Starting SYNCUP
The initial situation is the RUN-Solo system state. The primary CPU of a redundant system is in the RUN operating state and the backup CPU is in the STOP operating state.
The operating states are shown on the displays:
Table 10- 4 Starting SYNCUP Primary CPU
Backup CPU
Start SYNCUP by: Starting the backup CPU via the PG/PC/HMI device or the display, and the mode selector
is set to RUN. or Switching the mode selector on the backup CPU from STOP to RUN. or Powering on the backup CPU (mode selector to RUN).
214
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
Preparing the SYNCUP system state
After SYNCUP starts, the CPUs prepare SYNCUP: The backup CPU switches to SYNCUP operating state and sends a status message to
the primary CPU. The primary CPU then switches from the RUN operating state to RUN-Syncup. The current operating states are shown on the displays:
Table 10- 5 Preparing SYNCUP Primary CPU
Backup CPU
Sequence of the SYNCUP system state
The operating systems of the two CPUs run through SYNCUP in five phases:
Copying the SIMATIC memory card Restart of the backup CPU Finishing tasks Copying the work memory Making up backup CPU lag
The display of the primary CPU shows you the current phase of the SYNCUP system state.
The display of the backup CPU shows "Connect..." state during the phases to until the
RUN-Redundant system state is reached.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
215
Commissioning 10.4 Operating and system states
Copying the SIMATIC memory card
The primary CPU copies parts of the load memory to the backup CPU: User program, system blocks and project data of the CPU from the \SIMATIC.S7S folder
Note Overwriting load memory content
Copying overwrites the load memory contents on the SIMATIC memory card of the backup CPU with the content of the primary CPU load memory.
The display of the primary CPU indicates the copying progress.
Table 10- 6 Copying the SIMATIC memory card Primary CPU
Backup CPU
The backup CPU copies the transferred load memory contents to its work memory.
216
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
Restart of the backup CPU
The backup CPU restarts and automatically switches back to the SYNCUP operating state. The display of the backup CPU shows the "Connecting..." state.
Table 10- 7 Restart of the backup CPU Primary CPU
Backup CPU
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
217
Commissioning 10.4 Operating and system states
Finishing tasks
The instructions running asynchronously on the primary CPU are terminated and new ones are accepted but not started.
From this point on, restarted asynchronous instructions are delayed until the "Copying the working memory" phase. The "BUSY" output parameter of instructions is"1". However, processing does not yet start.
The communication connections in the primary CPU are temporarily ended. You can no longer delete, load, generate or compress blocks in the user program. You can no longer run any test or commissioning functions.
Table 10- 8 Preparing the copying of the work memory Primary CPU
Backup CPU
218
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
Copying the work memory
The backup CPU establishes connections to the IO devices (only with S2 system redundancy).
The primary CPU stores a consistent snapshot of its memory contents and some system memory contents (backup CPU dump) at the next cycle control point: Process image, bit memory, SIMATIC time/count functions, temporary local data, data block contents.
After the snapshot, the primary CPU immediately resumes user program execution. Communication connections are reestablished and asynchronous instructions are started.
The primary CPU copies the consistent snapshot to the backup CPU and continues operating in parallel. Data blocks, the process image, etc. are immediately overwritten with current data from the primary CPU.
The display of the primary CPU indicates the operating state.
Table 10- 9 Copying the work memory Primary CPU
Backup CPU
The backup CPU is busy accepting the data before it can also process the user program.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
219
Commissioning 10.4 Operating and system states
Making up backup CPU lag In phase , the backup CPU catches up with the primary CPU.
The communication connections on the backup CPU become available during the catch-up process.
The backup CPU sends a status message on its program progress to the primary CPU at each cycle control point.
The display of the primary CPU indicates the lag of the backup CPU.
Table 10- 10 Making up backup CPU lag Primary CPU
Backup CPU
Once the backup CPU has caught up, both CPUs switch to the RUN-Redundant operating state. Both CPUs process the user program synchronously.
Note High load during SYNCUP The higher load during SYNCUP can prolong the program cycle. If SYNCUP is taking too long and the displays are not showing any progress, you can abort SYNCUP and optimize your user program. You can find more information under "SYNCUP system state aborts".
Note Setting a sufficiently long maximum cycle time Configure a sufficiently long maximum cycle time for the CPUs. A temporary increase in the cycle time can occur upon a system state transition SYNCUP RUN-Redundant.
220
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
Effects of the SYNCUP system state
In SYNCUP, there are different effects on the execution of the user program and communication functions. The effects are set out in the table below.
Table 10- 11 Properties of SYNCUP
Procedure Processing of the user program on the primary CPU Deleting, loading, generating and compressing blocks Processing communication functions PG/PC operation Test and commissioning functions, for example "Monitor and modify tags", "Monitoring (on/off)". Connection handling in the primary CPU
Connection handling in the backup CPU
Diagnostics alarms
Effects during the SYNCUP system state
All priority classes (OBs) are processed. Processing is delayed during the snapshot. After the snapshot, the primary CPU immediately resumes user program execution and asynchronous instructions are started.
Blocks cannot be deleted, loaded, generated or compressed.
The execution of parts of functions is limited and delayed. The system makes up the delays in all functions after SYNCUP.
Depending on the SYNCUP phase, online connections from the PG/PC to the CPU may not be possible.
Depending on the SYNCUP phase, no test and commissioning functions may be possible.
All communication connections are initially aborted. After the snapshot, the primary CPU re-establishes communication connections with active connection establishment. Note that the CPU takes some time to reestablish the communication connections. The CPU re-establishes connection endpoints for communication connections with passive connection setup.
All communication connections are initially aborted. The backup CPU establishes connections (ARs) to the IO devices (only with S2 system redundancy). The communication connections on the backup CPU become available during the backup CPU catch-up process.
Diagnostic alarms can be delayed during the SYNCUP system state. The OB 82 reports delayed diagnostic alarms. If diagnostic alarms occur during the "Making up backup CPU lag" phase, the diagnostic alarms can prolong this phase. You can find additional information in the section Basics to the Program processing (Page 160).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
221
Commissioning 10.4 Operating and system states
SYNCUP system state aborts
Abort is possible in a range of cases even if you have successfully launched the SYNCUP system state:
If one of the two CPUs POWERS OFF.
If you switch the backup CPU to STOP; the primary CPU continues operating in RUN operating state. The abort of SYNCUP may be delayed by a few seconds.
If you set the primary CPU to STOP; the redundant system switches to the STOP system state as the backup CPU was not ready to take over control of the process (not shown in the following figure). The backup CPU restarts.
If the backup CPU lag is not reduced to less than the smallest value after 100 program cycles and 10 to 13 seconds, the primary CPU aborts SYNCUP. Evaluate the diagnostics buffer of the primary and the backup CPU.
If one of the CPUs detects an error that impedes progress, for example if the cycle time is exceeded in the primary CPU.
If the PROFINET ring was already interrupted before changing to the SYNCUP system state or if the PROFINET ring is interrupted during SYNCUP.
If there are other devices in the PROFINET ring apart from the CPUs to which the media redundancy role "Manager" or "Manager (auto)" was assigned.
222
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
You can find a detailed list of the causes of error and remedies in the table SYNCUP abort: Causes and solutions.
Figure 10-8 SYNCUP system state aborts
Table 10- 12 Sequence of events: SYNCUP aborts
No. in diagram
Primary CPU
System state
Backup CPU
Initial situation: The S7-1500R/H redundant system is in the SYNCUP system state. An error occurs in the backup CPU.
The CPU does not switch from the RUN-
Syncup operating state to RUN-Redundant,
SYNCUP RUN-Solo
but instead returns to RUN and continues to
execute the user program.
If SYNCUP aborts, the backup CPU may restart and then switch to the STOP operating state. The backup CPU is ready for a new SYNCUP.
Procedure for error correction 1. Eliminate the error. 2. Switch the backup CPU from STOP to RUN. The backup CPU switches from STOP to the SYNCUP operating state. Synchronization restarts.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
223
Commissioning 10.4 Operating and system states
Causes of error and troubleshooting
There are various possible causes of a SYNCUP system state abort. In the event of a SYNCUP abort, evaluate the diagnostics buffer of the primary and the backup CPU.
Table 10- 13 SYNCUP abort: Causes and solutions
Cause of SYNCUP abort
Solution
Too little memory on the SIMATIC memory card of the backup CPU.
The name of files or directories on the SIMATIC memory card of the backup CPU contains unsupported characters. The number of hierarchy levels used in directories on the SIMATIC memory card of the backup CPU is too large.
System overload. The user program load is too high, and the backup CPU is therefore not catching up with program execution on the primary CPU.
Delete data from the SIMATIC memory card or use a SIMATIC memory card with greater memory capacity. You can find more information in the function manual Structure and use of the CPU memory (https://support.industry.siemens.com/cs/ww/en/view/59193 101).
Make sure that file and/or directory names do not contain umlauts (ö, ä, ü, Ö, Ä, Ü).
Make sure that the directory structure does not consist of more than 6 hierarchy levels (e.g. (F:) SIMATIC MC/1/2/3/4/5/6/file.txt).
Use the "RT_INFO" instruction to generate statistics on the runtime of OBs, communication or the user program.
You can shorten the backup CPU delay compared to the primary CPU by:
· Addressing the CPU overload by reducing the postprocessing of cyclic events (events from one source, for example start events for a cyclic interrupt OB). You can find more information in the Cycle and response times (http://support.automation.siemens.com/WW/view/en/59 193558) function manual.
· Not setting too low a minimum cycle time for program cycle OBs or increasing the minimum cycle time. This reduces the frequency at which the program cycle OBs are called.
The load on the redundancy connections between primary Reduce the load on the redundancy connections between and backup CPU is too high. As a result, the backup CPU is primary and backup CPU by: not catching up with program execution on the primary CPU. · Reducing the post-processing of cyclic events (see
above)
· Avoiding instructions that increase the synchronization load, for example direct access, time access (for example RD_SYS_T, WR_SYS_T, RD_LOC_T)
· Reducing communication (HMI, PG/PG, Open User Communication, etc.)
· Complying with the configuration rules
224
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
Cause of SYNCUP abort Maximum cycle time in the primary CPU exceeded
Solution
· Reduce the cycle time by setting a lower communication load in the hardware configuration.
· Configure a sufficiently long maximum cycle time.
· If there is an OB 80 (time error OB) in the downloaded user program, it is called by the operating system to tolerate the cycle time being exceeded (see section Start events (Page 160)).
Primary CPU or backup CPU goes into STOP operating state.
Switch the primary CPU or backup CPU into RUN operating state.
PROFINET ring interrupted
Replace defective PROFINET cables or PROFINET devices in the PROFINET ring.
In the PROFINET ring, in addition to the two CPUs, there Configure the media redundancy role "Client" for all other are other devices with the media redundancy role "Manager" devices in the PROFINET ring. or "Manager (auto)".
Supply voltage of the primary or backup CPU has failed.
Restore the supply voltage. Replace a defective load current supply (PM).
Simultaneous POWER OFF / POWER ON switching at both Switch both CPUs POWER OFF/ON again. The SYNCUP is
CPUs during SYNCUP:
executed again.
If you switch both CPUs POWER OFF/ON at the same time during SYNCUP, SYNCUP will be aborted.
10.4.7
System and operating state transitions
System state transitions
The following figure shows the system state transitions of the redundant S7-1500R/H system.
Figure 10-9 System state transitions
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
225
Commissioning 10.4 Operating and system states Operating state transitions
Operating state transitions of the redundant system The following figure shows the operating state transitions of the primary and backup CPU.
Figure 10-10 Operating state transitions
226
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
POWER ON STARTUP, POWER ON SYNCUP
Transition System state transition
Operating state transitions
Description
POWER ON STARTUP The CPUs implement pairing after switch-on. The redundant system then switches to STARTUP if:
· The mode selector is set to the RUN position;
· The hardware configuration and program blocks are consistent, and
· The startup type "Warm restart - RUN" is set or
· The startup type "Warm restart - Operating mode before POWER OFF" is set and the system was in RUN-Solo, SYNCUP or RUN-Redundant before POWER OFF.
The CPU that becomes the primary CPU runs the STARTUP. The primary CPU switches to the STARTUP operating state. POWER ON STARTUP The CPUs implement pairing after switch-on. The primary CPU then switches to the STARTUP operating state if:
· The mode selector is in the RUN position;
· The hardware configuration and program blocks are consistent, and
· The startup type "Warm restart - RUN" is set
Effect
After POWER ON STARTUP, the primary CPU clears the nonretentive memory and resets the contents of non-retentive data blocks to the initial values of the load memory. Retentive memory and retentive DB contents are retained.
or
· The startup type "Warm restart - Operating mode before POWER OFF" is set and the CPU was in STARTUP, RUN, RUN-Syncup or RUNRedundant before POWER OFF.
POWER ON SYNCUP The CPUs implement pairing after switch-on. The backup CPU then switches to the SYNCUP operating state if:
· The mode selector is in the RUN position and
· The primary CPU is in the STARTUP or RUN operating state.
Automatic STARTUP after POWER ON only possible for the primary CPU
Note The automatic STARTUP after POWER ON only for the primary CPU prevents a CPU with outdated, retentive data from automatically changing to the RUN operating mode. You can switch the backup CPU manually to RUN, this then automatically becomes the primary CPU and starts with its retentive data.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
227
Commissioning 10.4 Operating and system states
If you have parameterized "Startup after POWER ON" "Warm restart..." as the startup type, then the primary CPU only carries out the startup if the CPU became the primary CPU in POWER ON, i.e.: No partner CPU found
or Due to the role assignment, the local CPU became the primary CPU and the partner CPU
became the backup CPU If a CPU became the backup CPU in POWER ON, then: if all the requirements are met, this results in an automatic SYNCUP
or the backup CPU changes to STOP
In both cases the CPU remains the backup CPU and can therefore not automatically carry out the STARTUP.
To illustrate the process, here are two examples:
No STARTUP after parameterization "Warm restart - RUN"
Requirements: You have parameterized "Warm restart - RUN" for both CPUs. The pairing was successful for both CPUs. Both CPUs are in STOP. Both mode switches are set to RUN. Procedure: 1. POWER OFF/POWER ON the backup CPU. Result: The CPU becomes the backup CPU
again and changes to STOP. 2. POWER OFF/POWER ON the primary CPU. Result: The CPU changes to RUN. The
redundant system switches to the RUN-Solo system state. 3. Switch the backup CPU to POWER OFF/POWER ON again. Result: The redundant
system switches to the SYNCUP system state.
No STARTUP after parameterization "Warm restart - operating mode before POWER
OFF" Requirements: You have parameterized "Warm restart - operating mode before POWER OFF" for both
CPUs. The redundant system is in the RUN-Redundant system state. Procedure: 1. POWER OFF both CPUs at the same time. 2. Set the mode selector for the primary CPU to STOP. 3. POWER ON both CPUs again. Result: The redundant system switches to the STOP
system state.
228
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
POWER ON STOP
Transition
System state transition
Operating state transitions
Description POWER ON STOP The redundant system switches to the STOP system state after switch-on if:
· The CPUs have different firmware versions
or · The mode selector is in the STOP position
or · The hardware configuration and program blocks are inconsistent
or · The startup type "No restart (remain in STOP)" is set
or · The startup type "Warm restart - Operating mode before POWER OFF" is
set and the redundant system was in STOP before POWER OFF.
Effects
The primary CPU clears the nonretentive memory and resets the contents of non-retentive data blocks to the initial values of the load memory. Retentive memory and retentive DB contents are retained.
STOP STARTUP
Transition System state transition
Operating state transition
Description STOP STARTUP The redundant system switches to the STARTUP system state if:
· You set a CPU to RUN via the PG/PC or the display and the mode selector is set to RUN
or
· You set the mode switch from STOP to RUN. The CPU that you switch from STOP to RUN first remains/becomes the primary CPU. It switches to the STARTUP operating state and processes the startup blocks. The backup CPU remains in STOP. STOP STARTUP After switch-on, the primary CPU switches to the STARTUP operating state if:
· The hardware configuration and program blocks are consistent
Effects
The primary CPU clears the nonretentive memory and resets the contents of non-retentive data blocks to the initial values of the load memory. Retentive memory and retentive DB contents are retained.
If there is a role change between primary and backup CPU, connected IO devices are temporarily unavailable.
and
· You set the CPU to RUN via the PG/PC or the display and the mode selector is set to RUN
or · You set the mode switch from STOP to RUN.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
229
Commissioning 10.4 Operating and system states
STARTUP RUN-Solo, STARTUP RUN
Transition System state transition
Operating state transition
Description STARTUP RUN-Solo The redundant system switches from STARTUP to the RUN-Solo system state if:
· The primary CPU has initialized the PLC tags
and · The primary CPU has executed the startup blocks successfully
and · "Startup CPU only if compatible" is configured, there is feedback from all
IO devices before the end of the configuration time and all IO devices match the configured hardware configuration or "Startup CPU even if mismatch" is configured and the configuration time is up. The backup CPU remains in STOP. STARTUP RUN The primary CPU switches to the RUN operating state if:
· The CPU has initialized the PLC tags; · The CPU has executed the startup blocks successfully;
and · "Startup CPU only if compatible" is configured, there is feedback from all
IO devices before the end of the configuration time and all IO devices match the configured hardware configuration or "Startup CPU even if mismatch" is configured and the configuration time is up.
Effects
The process image is updated and processing of the cyclic user program begins.
The outputs of the IO devices are initialized.
230
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
RUN-Solo SYNCUP, RUN RUN-Syncup, STOP SYNCUP
Transition System state transition
Operating state transitions
Description
RUN-Solo SYNCUP The primary CPU is in the RUN operating state. The redundant system switches from the RUN-Solo system state to the SYNCUP system state if:
· You set the backup CPU to RUN via the PG/PC or the display and the mode selector is set to RUN
Effects
See section SYNCUP system state (Page 213)
or · You switch the mode selector on the backup CPU from STOP to RUN.
or · You POWER ON the backup CPU (mode selector to RUN)
and · the SYNCUP system state is not disabled by the RH_CTRL instruction.
RUN RUN-Syncup The primary CPU switches from the RUN operating state to the RUN-Syncup operating state if:
· You set the backup CPU to RUN via the PG/PC or the display and the mode selector is set to RUN
or · You switch the mode selector on the backup CPU from STOP to RUN.
or · You POWER ON the backup CPU (mode selector to RUN).
STOP SYNCUP
The backup CPU switches from the STOP operating state to the SYNCUP operating state.
SYNCUP RUN-Redundant, RUN-Syncup RUN-Redundant
Transition System state transition
Operating state transitions
Description
SYNCUP RUN-Redundant
The redundant system switches from SYNCUP to the RUN-Redundant system state if SYNCUP has successfully run.
In the RUN-Redundant system state, the two CPUs execute the user program synchronously.
Note: A temporary increase in the cycle time can occur upon a system state transition SYNCUP RUN-Redundant. Configure a sufficiently long maximum cycle time for the CPUs.
RUN-Syncup RUN-Redundant
The primary CPU switches from the RUN-Syncup operating state to the RUN-Redundant operating state if SYNCUP has successfully run.
SYNCUP RUN-Redundant
The backup CPU switches from the SYNCUP operating state to the RUNRedundant operating state if SYNCUP has successfully run.
Effects
This system state transition does not have any effect on data.
Communication connections (HMI, PG/PC) on the backup CPU become available.
Both CPUs process the user program synchronously.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
231
Commissioning 10.4 Operating and system states
RUN-Redundant RUN-Solo, RUN-Redundant RUN
Transition System state transition
Operating state transition
Description RUN-Redundant RUN-Solo The redundant system switches from the RUN-Redundant system state to the RUN-Solo system state (loss of redundancy) if:
· You POWER OFF one of the CPUs.
Effects
This system state transition does not have any effect on the data.
or · A CPU detects an error which prevents further work.
or
· The cycle time was exceeded once, see section Events and OBs (Page 160)
or
· You set one of the CPUs to STOP with the PG/PC, the display or the mode selector.
The primary CPU switches to RUN or the backup CPU becomes the primary CPU and switches to RUN.
RUN-Redundant RUN
The primary CPU switches from the RUN-Redundant operating state to the RUN operating state and continues to execute the user program.
This operating state transition does not have any effect on data.
RUN-Redundant STOP, RUN-Solo STOP, RUN STOP
Transition System state transition
Operating state transitions
Description
Effects
RUN-Redundant STOP, RUN-Solo STOP
This system state tran-
The redundant system switches from the RUN-Redundant/RUN-Solo system sition does not have
state to the STOP system state if:
any effect on data.
· The redundant system detects an error that prevents further processing or
· The redundant system processes a STOP command in the user program or
· You set the redundant system to STOP with the PG/PC.
RUN-Redundant STOP, RUN STOP
These operating state
The primary CPU switches from the RUN-Redundant/RUN operating state to transitions have no
the STOP operating state if:
effect on data.
· The CPU detects an error that prevents further work on one of the two CPUs.
or
· You set the CPU to STOP with the PG/PC, the display or the mode selector.
RUN-Redundant STOP
The backup CPU switches from the RUN-Redundant operating state to the STOP operating state.
232
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
SYNCUP RUN-Solo, RUN-Syncup RUN
Transition System state transition
Primary CPU operating state transition
Description SYNCUP RUN-Solo The redundant system switches from the SYNCUP system state to the RUNSolo system state if:
· You execute POWER OFF for the backup CPU
Effects
This system state transition does not have any effect on data.
or
· The redundant system detects an error during SYNCUP that prevents redundant operation
or
· You set the backup CPU to STOP with the PG/PC, the display or the mode selector.
RUN-Syncup RUN
These operating state
The primary CPU switches from the RUN-Syncup operating state to the RUN transitions have no
operating state and continues to execute the user program.
effect on data.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
233
Commissioning 10.4 Operating and system states
SYNCUP STOP, RUN-Syncup STOP
Transition System state transition
Operating state transitions
Description
Effects
SYNCUP STOP
This system state tran-
The redundant system switches from the SYNCUP system state to the STOP sition does not have
system state if:
any effect on data.
· You set the primary CPU or both CPUs to STOP with the PG/PC, the display or the mode selector.
· SYNCUP Is aborted as a result of an error in the primary CPU or in both CPUs.
RUN-Syncup STOP The primary CPU switches from the RUN-Syncup operating state to the STOP operating state if:
· The primary CPU detects an error that prevents further processing
These operating state transitions have no effect on data.
or
· You set the primary CPU to STOP with the PG/PC, the display or the mode selector
or · The redundant system processes a STOP command in the user program.
SYNCUP STOP The backup CPU restarts and switches to the STOP operating state after SYNCUP aborts if:
· SYNCUP Is aborted due to an error (for causes and remedies, see section SYNCUP system state (Page 213))
or
· You set the CPU to STOP with the PG/PC, the display or the mode selector.
234
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
STARTUP STOP
Transition System state transition
Primary CPU operating state transition
Description STARTUP STOP The redundant system switches from the STARTUP system state to the STOP system state if: · The primary CPU detects an error during startup that prevents further
processing
or · You set the primary CPU to STOP with the PG/PC, the display or the
mode selector
or · The primary CPU processes a STOP command in startup OB
or · In the CPU properties, you have set the following for startup behavior:
Too short a configuration time for the distributed I/O and "Startup CPU only if compatible" The primary CPU switches to STOP.
Effects
This system state transition does not have any effect on data.
This operating state transition does not have any effect on data.
10.4.8
Loss of redundancy
Introduction
The following section explains in more detail the system and operating state transitions
from the System and operating state transitions (Page 225) section.
RUN-Redundant RUN-Solo
RUN-Redundant RUN
Response
Loss of redundancy means:
The redundant system switches from the RUN-Redundant system state to the RUN-Solo system state.
The primary CPU switches from the RUN-Redundant operating state to RUN (1)
or
Primary-backup switchover: The backup CPU becomes the primary CPU and switches from the RUN-Redundant operating state to RUN (2).
The primary CPU continues to execute the user program in the RUN operating state and exchanges process data with the IO devices.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
235
Commissioning 10.4 Operating and system states
Causes of redundancy loss
The redundant system switches from the RUN-Redundant system state to RUN-Solo if: You POWER OFF one of the CPUs. You set one of the two CPUs to STOP with the PG/PC, the display or the mode selector. A CPU detects an error that prevents continued processing, for example:
Failure of a CPU, for example as a result of a hardware defect. Cycle time exceeded
(1) Primary CPU switches to the RUN operating state
Figure 10-11 Primary CPU switches to the RUN operating state
236
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
Table 10- 14 Response to loss of redundancy: Primary CPU switches to RUN
No. in Primary CPU diagram
System state
Backup CPU
Initial situation: The S7-1500R/H redundant system is in the RUN-Redundant system state.
The backup CPU fails because of a hardware defect.
The CPU switches from RUN-
RUN-Redundant RUN-Solo Following the error, the CPU switches
Redundant to RUN. The CPU be-
from the RUN-Redundant operating state
haves like a standard CPU and
to STOP or POWER OFF.
continues to process the user pro-
gram.
Error elimination procedure for redundant operation 1. Eliminate the error. 2. Start the backup CPU. The backup CPU switches from the STOP operating state to the SYNCUP operating state. Synchronization starts as detailed in the section SYNCUP system state (Page 213).
(2) Primary-backup switchover
Figure 10-12 Primary-backup switchover
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
237
Commissioning 10.4 Operating and system states
Table 10- 15 Response to primary CPU error: Backup CPU becomes primary CPU and switches to RUN
No. in CPU 1 diagram
System state
CPU 2
Initial situation: The S7-1500R/H redundant system is in the RUN-Redundant system state.
The primary CPU (CPU 1) fails because of a hardware defect.
Following the failure, CPU 1 switch- RUN-Redundant RUN-Solo CPU 2 becomes primary CPU and
es from the RUN-Redundant oper-
switches to the RUN operating state.
ating state to STOP or POWER
The CPU behaves like a standard CPU
OFF.
and continues to process the user pro-
gram.
Error elimination procedure for redundant operation 1. Eliminate the error. 2. Start CPU 1. CPU 1 becomes the backup CPU and switches from the STOP operating state to the SYNCUP operating state. Synchronization starts as detailed in the section SYNCUP system state (Page 213).
10.4.9
Displaying and changing the system state
Introduction
For commissioning and service, you require information on the system state of the redundant system. Examples:
The redundant system does not switch to the RUN-Redundant system state upon initial commissioning.
The primary CPU has failed due to a fault.
Options
You have the following options for displaying and changing the system state of the S71500R/H redundant system:
Using the mode selectors on the CPUs, you can change the operating states of the CPUs and therefore the system state
Via the displays of the primary and backup CPU
In STEP 7, for example when the R/H-CPUs are far apart
238
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.4 Operating and system states
Display of the primary and backup CPU
Displaying the operating state: The operating state of the primary and backup CPU is shown in the status information in the top section of the displays. The two operating states define the system state. Examples: Status information for the primary and backup CPUs: RUN-Redundant, RUN-Redundant.
Result: The system state is RUN-Redundant. Status information for the primary and backup CPUs: RUN, STOP. Result: The system
state is RUN-Solo. Changing the operating state: Switch the CPU to the required operating state in the "Settings > RUN / STOP" menu of the display.
Note Please note that you can only implement the system states RUN-Redundant and STOP through the displays by switching both CPUs to the operating state RUN or STOP .
SIMATIC S7-1500 Display Simulator A simulation of the display of the available menu commands is available in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterialas/interactive-manuals/getting-started_simatic-s7-1500/disp_tool/start_en.html).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
239
Commissioning 10.4 Operating and system states
STEP 7
Displaying the system state: The R/H-system operating panel (Online & Diagnostics) displays the system status. Changing the system state: On the R/H system control panel (Online & diagnostics): STOP system state: Press the STOP R/H-System button.
Figure 10-13 STOP system state on the R/H system control panel
On the CPU control panels (Online & diagnostics): RUN-Redundant system state: Press the RUN R/H-System button on both CPU operator
panels.
Note Please note that you cannot switch the S7-1500R/H system to the RUN-Redundant system state over the R/H system control panel. You implement the RUN-Redundant system state by switching each CPU on its control panel to RUN.
240
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.5 CPU memory reset
10.5
CPU memory reset
Basics of a memory reset
Memory resets can be performed for the primary and for the backup CPU. Memory resets are generally only useful for the primary CPU. Reason: Following a primary CPU memory reset, you need to trigger synchronization for redundant operation. In SYNCUP, the backup CPU is synchronized with the retentive data from the primary CPU. Following SYNCUP, the backup CPU processes the same user program as the primary CPU. The memory reset process for R/H-CPUs is identical to that for the S7-1500 standard CPUs. The CPU must be in the STOP operating state for a memory reset. A memory reset returns the CPU to its "initial state".
Note A memory reset only ever affects the CPU to which you have applied the function. For a memory reset of both CPUs, apply the function to each in turn.
Memory reset means: An existing online connection between your programming device/PC and the CPU is
terminated. The content of the work memory and the retentive and non-retentive data are deleted. The diagnostics buffer, time of day, IP address and the redundancy ID are retained. Subsequently the CPU is initialized with the loaded project data (hardware configuration,
code and data blocks, force jobs). The CPU copies this data from the load memory to the work memory. Data blocks no longer have actual values but rather their configured start values. Force jobs remain active.
Detecting a CPU memory reset
The RUN/STOP LED flashes yellow at 2 Hz. After completion, the CPU switches to STOP. The RUN/STOP LED lights up yellow.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
241
Commissioning 10.5 CPU memory reset
Result after memory reset
The following table provides an overview of the contents of the memory objects after memory reset.
Table 10- 16 Memory objects after memory reset
Memory object Redundancy ID Actual values of the data blocks, instance data blocks Bit memories, timers and counters Entries in the diagnostics buffer1) (retentive area) Entries in the diagnostics buffer (non-retentive area) IP addresses Device name (module name) Counter readings of the runtime meters Time of day
Contents Retained Initialized Initialized Retained Initialized Retained Retained Retained Retained
1) The entries in the diagnostics buffer are the 500 most recent entries.
10.5.1
Automatic memory reset
Possible causes of automatic memory reset
Proper continuation of work is prevented in the following cases. The CPU performs an automatic memory reset.
These can be caused by:
User program is too large and cannot be loaded to the work memory in full.
The project data on the SIMATIC memory card are damaged, for example because a file was deleted.
You remove or insert the SIMATIC memory card. The backed-up retentive data differs in structure from the data in the configuration on the SIMATIC memory card.
SYNCUP aborts in the backup CPU. You can find more information in the section SYNCUP system state (Page 213).
242
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.5 CPU memory reset
10.5.2
Manual memory reset
Reason for manual memory reset
Memory reset is required to reset the primary or backup CPU to its "initial state". Memory resets can only be run in the STOP operating state of a CPU.
CPU memory reset
There are three options for performing a CPU memory reset: Using the mode selector Using the display Using STEP 7
Procedure using the mode selector
Note Memory reset Reset to factory settings The procedure described below also corresponds to the procedure for resetting to factory settings: · Selector operation with inserted SIMATIC memory card: CPU executes a memory reset · Selector operation without inserted SIMATIC memory card: CPU executes reset to factory
settings
Proceed as follows for a CPU memory reset using the mode selector: 1. Set the mode selector to STOP.
Result: The RUN/STOP LED lights up yellow. 2. Set the mode selector to MRES. Hold the switch in this position until the RUN/STOP LED
lights up for the second time and remains continuously lit after three seconds. Then release the mode selector. 3. Within the next three seconds, switch the mode selector back to the MRES position and then back to STOP. Result: The CPU executes a memory reset. For information on resetting the CPU to factory settings, please refer to the section Resetting CPUs to factory settings (Page 286).
Procedure using the display
To navigate to the desired "Memory reset" menu command, select the following sequence of menu commands and confirm after each selection with "OK".
Settings Reset Memory reset
Result: The CPU executes a memory reset.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
243
Commissioning 10.6 Backing up and restoring the CPU configuration
Procedure using STEP 7
Requirement: There is an online connection between the CPU ad PG/PC. Proceed as follows for a CPU memory reset with STEP 7: 1. Open the "Online Tools" task card of the CPU. 2. Click "MRES" in the "CPU operator panel" pane. 3. Click "OK" in response to the confirmation prompt. Result: The CPU executes a memory reset.
10.6
Backing up and restoring the CPU configuration
Backup from online device
You may make changes in the operation of your plant. For example, you may add new devices, replace existing ones or adapt the user program. If these changes result in undesirable behavior, you can restore the plant to an earlier state. Before you download a changed configuration to the CPU, first use the option "Backup from online device" to create a complete backup of the current device state.
Upload from device (software)
With the option "Upload from device (software)", you load the software project data from the CPU to an existing CPU in the project.
Upload device as new station
If you are operating a new PG/PC in the plant, the STEP 7 project that was used to create the plant configuration might not be available. In this case, you can use the option "Upload device as new station" to load the device data to a project in your PG/PC.
Snapshot of the actual values
To allow you to restore the actual values at a later date, back up the actual values of the data blocks using the option "Snapshot of the actual values".
244
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.6 Backing up and restoring the CPU configuration
Overview of backup types
The table below shows the backup of CPU data depending on the selected type of backup and its specific characteristics:
Table 10- 17 Types of backup
Actual values of all DBs (global and instance data blocks) Blocks of the type OB, FC, FB and DB PLC tags (tag names and constant names) Hardware configuration Actual values (bit memories, timers and counters) Contents of the SIMATIC memory card Entries in the diagnostics buffer Current time
Backup can be edited Backup possible in system state
Backup from online device
Upload from device (software)
--
--
--
--
--
--
--
Properties of the type of backup
--
RUN-Solo1), STOP RUN-Redundant, RUN-Solo, STOP
1) From backup CPU
Upload device as new station
--
--
---
RUN-Redundant, RUN-Solo, STOP
Snapshot of the actual values
--
--
---
--
---
RUN-Redundant, RUN-Solo, STOP
Example: Backup from online device
The following example shows how to carry out a complete backup of the current device state of the CPUs in STEP 7. The S7-1500R/H redundant system is in the RUN-Redundant system state. Special consideration should be given to the following:
Before the backup, the backup CPU goes into STOP mode.
The CPU data of the backup CPU is backed up.
To start the backup, proceed as follows:
1. Right-click to select the S7-1500R/H system in the project tree.
2. Select the "Backup from online device" command from the shortcut menu.
3. The "Upload preview" dialog window sets out the key information on the backup process to be run. To make a backup, you need to set the S7-1500R/H redundant system to the RUN-Solo system state.
Note: If you open the entry "Stop module" in the preview, then you can see which CPU is stopped.
4. In the "Action" column, select the "Stop module" command from the drop-down menu.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
245
Commissioning 10.6 Backing up and restoring the CPU configuration
5. Click "Upload from device". The backup CPU switches to the STOP operating state. The backup of the CPU data of the backup CPU begins. The backup is saved in the folder of the top CPU in the project tree.
6. Switch the redundant system to the RUN-Redundant system state again.
Example: Restoring a backup of an online device
If you have saved the CPU data beforehand, you can transfer the backup back to the device. The saved backup is then restored to the CPU.
The S7-1500R/H redundant system is in the RUN-Redundant system state. Special consideration should be given to the following:
The backup is loaded into the primary CPU.
Before the restore, the redundant system goes to the STOP system state.
To start the backup restore, proceed as follows:
1. In the project, open the folder of the top CPU in the project tree to display the lower-level objects.
2. Open the "Online backups" folder.
3. Select the backup you want to restore.
4. In the "Online" menu, select the "Download to device" command.
5. The "Load preview" dialog window sets out the key information on the restore process to be run: For a restore, you must switch the S7-1500R/H redundant system to the STOP system state.
6. In the "Action" column, select the "Overwrite" command from the drop-down menu.
7. Click "Download". The redundant system switches to the STOP system state. The backup is transferred to the primary CPU and restored. The "Load results" dialog then opens. In this dialog, you can check whether or not the loading operation was successful and take any further action that may be necessary (no action, start modules).
8. Click "Finish".
Reference
You can find more information on the various types of backup in the STEP 7 online help.
Emergency address (emergency IP)
If you cannot access the CPU via the IP address, you can set a temporary emergency IP address for the CPU. To the more information on emergency address options, please refer to the Communication (https://support.industry.siemens.com/cs/ww/de/view/59192925/en) function manual.
246
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.6 Backing up and restoring the CPU configuration
Storage of multilingual project texts
Different categories of texts are created when you configure a CPU, for example Object names (names of blocks, modules, tags, etc.) Comments (for blocks, networks, watch tables, etc.) Messages and diagnostic texts Texts are provided by the system, for example texts in the diagnostics buffer, or they are created during configuration, for example messages. Texts exist in the project in one language or, after a translation process, in multiple languages. You can maintain project texts in all languages available to you in the project tree (Languages & resources > Project texts). The texts created during configuration can be downloaded to the CPU. The following texts containing the project data are downloaded to the CPU in the chosen languages and are also used by the CPU display: Diagnostics buffer texts (not editable) Status texts for the module status (cannot be changed) Message texts with associated text lists Tag comments and step comments for PLC Code Viewer Comments in watch tables The following texts are also loaded into the CPU in the selected languages with the project languages, but are not used by the CPU display: Comments in tag tables (for tags and constants) Comments in global data blocks Comments of elements in block interfaces of FBs, FCs, DBs and UDTs Network titles in blocks written in LAD, FBD or STL Block comments Network comments Comments of LAD and FBD elements
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
247
Commissioning 10.7 Time synchronization
The S7-1500R/H CPUs support archiving of multilingual project texts in up to three different project languages. If the project texts for a project language nevertheless exceed the memory space reserved for them on the SIMATIC memory card, the project cannot be downloaded to the CPU. The download is aborted with a notice that not enough memory space is available. In such a case, take measures to reduce the required storage space, for example by shortening comments.
Note SIMATIC memory card
Make sure that there is enough available storage space on your SIMATIC memory card for downloading projects.
In order to be able to download and back up projects, the project size and the size of files on the SIMATIC memory card may not exceed 2 GB.
Do not manipulate any contents in the OMSSTORE folder on the SIMATIC memory card.
You can find information on reading out the memory usage of the CPU and the SIMATIC memory card in the Structure and Use of the CPU Memory (https://support.industry.siemens.com/cs/de/de/view/59193101/en) Function Manual.
You can find information on parameter assignment of multilingual project texts in STEP 7 in the STEP 7 online help.
10.7
Time synchronization
Introduction
All S7-1500R/H CPUs have an internal clock. The clock shows: The time of day with a resolution of 1 millisecond The date and the day of the week The CPUs take into account the time change caused by daylight saving time. In redundant mode, the two CPUs of the S7-1500R/H redundant system constantly synchronize their internal clocks. You can synchronize the time of the CPUs using the NTP procedure.
Principle of operation
In NTP mode, the device sends time queries at regular intervals (in client mode) to the NTP server in the subnet (LAN). Based on the replies from the servers, the most reliable and most accurate time is calculated and the time of day on the S7-1500R/H CPU is synchronized. The advantage of this mode is that it allows the time to be synchronized across subnets. You can synchronize the time of day of up to a maximum of four NTP servers. You address a communications processor or an HMI device, for example, as sources for time synchronization via the IP addresses.
The update interval defines the interval between the time queries (in seconds). The value range for the interval is 10 seconds to one day. In NTP mode, it is generally UTC (Universal Time Coordinated) that is transferred. UTC corresponds to GMT (Greenwich Mean Time).
248
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Conditions Procedure
Commissioning 10.7 Time synchronization
In the S7-1500R/H redundant system, you need to configure time synchronization in NTP mode for each CPU individually. If possible, use the same settings for both CPUs.
The settings for time synchronization with NTP mode are defined at PROFINET interface X1. PROFINET interface X2 uses the settings from PROFINET interface X1.
Make sure that the primary CPU maintains a constant connection to the NTP server. The backup CPU then receives its synchronized time of day from the primary CPU.
Proceed as follows to enable time synchronization for a CPU: 1. Configure the interface properties in the "Properties > General > PROFINET interface >
Time synchronization" parameter group. Select the "Enable time synchronization via NTP server" option. 2. Enter the IP addresses of up to four NTP servers at parameter "Server 1-4". 3. Set the time interval for time queries at the parameter "Update interval".
10.7.1
Example: Configuring the NTP server
Configuring time synchronization with your own NTP server
Automation task You use your own server in your network. Your own server offers the following advantages: Protection against unauthorized external accesses Every device that you synchronize with your own NTP server uses the same time. You want to synchronize the CPUs of your S7-1500R/H redundant system with this NTP server.
Conditions and parameters You have your own NTP server in your network with the IP address 192.168.1.15. S7-1500R/H redundant system
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
249
Commissioning 10.7 Time synchronization
Solution 1. Navigate to "Properties > General > PROFINET interface > Time synchronization > NTP
mode" in the properties of the first CPU. 2. For "Server 1:", enter the IP address of the NTP server: 192.168.1.15.
Figure 10-14 Example: Configuring the NTP server 3. Repeat steps 1 and 2 for the second CPU. 4. Download the hardware configuration to the primary CPU. Result The S7-1500R/H redundant system synchronizes its time with NTP server 192.168.1.15.
250
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
10.8
Commissioning 10.8 Identification and maintenance data
Identification and maintenance data
10.8.1
Reading out and entering I&M data
I&M data
Identification and maintenance data (I&M data) is information saved on the module. The data is:
Read-only (I data) or
Read/write (M data)
Identification data (I&M0): Manufacturer information about the module that can only be read. Some identification data is also printed on the housing of the module, for example article number and serial number. Maintenance data (I&M1, 2, 3): Plant-specific information, for example installation location. Maintenance data for S7-1500R/H is created during configuration and downloaded to the redundant system.
S7-1500R/H supports identification data I&M0 to I&M3. Exception: The synchronization modules for S7-1500H only support identification data I&M0.
The I&M identification data supports you in the following activities:
Checking the plant configuration
Locating hardware changes in a plant
Correcting errors in a plant
Modules can be clearly identified online using the I&M identification data.
Options for reading out I&M data
Over the user program From the display of the CPUs Via STEP 7 or HMI devices
Reading I&M data over the user program
You have the following options for reading module I&M data in the user program:
Using the RDREC instruction
The data record structure for centrally inserted modules and for distributed modules accessible over PROFINET IO is described in the section Record structure for I&M data (Page 253).
Using the Get_IM_Data instruction
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
251
Commissioning 10.8 Identification and maintenance data
Reference
The description of the instructions can be found in the STEP 7 online help.
Reading I&M data from displays
Proceed as follows to read the I&M data of a CPU: 1. Navigate to the "Overview/PLC" menu on the display of the CPU. 2. Select "Plant designation" or "Location identifier". Click "OK" to confirm.
Reading I&M data via STEP 7
Requirement: There must be an online connection to the CPU. Proceed as follows to read the I&M data using STEP 7 from the primary and backup CPU: 1. Select the CPU in the project tree. 2. Go to "Online & diagnostics". 3. In the "Diagnostics" folder, select the "General" area.
Enter maintenance data over STEP 7
STEP 7 assigns a default module name. You can enter the following information: Plant designation (I&M 1) Location identifier (I&M 1) Installation date (I&M 2) Additional information (I&M 3) To enter maintenance data via STEP 7, follow these steps: 1. Select the CPU in the STEP 7 device view. 2. Go to properties, "General", and select the "Identification & Maintenance" area. 3. Enter the data. During the loading of the hardware configuration, the maintenance data (I&M 1, 2, 3) are also loaded.
252
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.8 Identification and maintenance data
10.8.2
Record structure for I&M data
Reading I&M records via user program (centrally and distributed via PROFINET IO)
Use Read data record ("RDREC" instruction) to access specific identification data. Under the associated record index you obtain the corresponding part of the identification data.
The records are structured as follows:
Table 10- 18 Basic structure of data records with I&M identification data
Contents Header information BlockType
BlockLength
BlockVersionHigh BlockVersionLow Identification data Identification data (see table below)
Length (bytes)
2
2
1 1
I&M0/Index AFF0H: 54 I&M1/Index AFF1H: 54 I&M2/Index AFF2H: 16 I&M3/Index AFF3H: 54
Coding (hex)
I&M0: 0020H I&M1: 0021H I&M2: 0022H I&M3: 0023H I&M0: 0038H I&M1: 0038H I&M2: 0012H I&M3: 0038H 01 00
-
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
253
Commissioning 10.8 Identification and maintenance data
Table 10- 19 Record structure for I&M identification data
Identification data
Access
Identification data 0: (record index AFF0H)
VendorIDHigh
Read (1 bytes)
VendorIDLow
Read (1 bytes)
Order_ID
Read (20 bytes)
Example
0000H 002AH 6ES7515-2RM00-0AB0
IM_SERIAL_NUMBER IM_HARDWARE_REVISION
Read (16 bytes) Read (2 bytes) 1
IM_SOFTWARE_REVISION · SWRevisionPrefix
Read (1 byte)
· IM_SWRevision_Functional_ (1 byte) Enhancement
· IM_SWRevision_Bug_Fix
(1 byte)
· IM_SWRevision_Internal_ Change
(1 byte)
IM_REVISION_COUNTER
Read (2 bytes)
Firmware version V 0000H - 00FFH
0000H - 00FFH 0000H - 00FFH
0000H
IM_PROFILE_ID
Read (2 bytes)
IM_PROFILE_SPECIFIC_TYPE Read (2 bytes)
IM_VERSION · IM_Version_Major · IM_Version_Minor IM_SUPPORTED
Read (1 byte) (1 byte) Read (2 bytes)
0000 H 0001H 0003H 0101H
000EH
Maintenance data 1: (Record index AFF1H)
IM_TAG_FUNCTION
Read/write (32 bytes)
IM_TAG_LOCATION
Read/write (22 bytes)
Maintenance data 2: (Record index AFF2H)
IM_DATE
Read/write (16 bytes)
Maintenance data 3: (Record index AFF3H)
IM_DESCRIPTOR
Read/write (54 bytes)
YYYY-MM-DD HH:MM -
Explanation
Vendor name (002AH = SIEMENS AG) Article number of module (for example CPU 1515R-1 PN) Serial number (device-specific) corresponds to hardware version (e.g. 1) Provides information about the firmware version of the module (e.g. V1.0.0)
Provides information about parameter changes on the module (not used) Generic Device CPU I/O modules Provides information on the ID data version (0101H = Version 1.1)
provides information about the available identification and maintenance data (I&M1 to I&M3)
Enter an identifier for the module here, that is unique plant-wide. Enter the installation location of the module here.
Enter the installation date of the module here.
Enter a comment about the module here.
254
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.8 Identification and maintenance data
10.8.3
Example: Read out firmware version of the CPU with Get_IM_Data
Automation task
You want to check whether the modules in your redundant system have the current firmware. The firmware version of the modules can be found in the I&M 0 data. The IM 0 data is the basic information for a device. I&M 0 data contains information such as:
Manufacturer ID
Article number and serial number
Hardware and firmware version
To read out the I&M 0 data, use the "Get_IM_Data" instruction. You read the I&M 0 data of all modules in the user program of the CPU with "Get_IM_Data" instructions and store the I&M 0 data in a data block.
Conditions and parameters
The following block parameters of the "Get_IM_Data" instruction are important for reading out the I&M data of the CPU:
LADDR: You enter the system constants or hardware identifier of the CPU at the LADDR parameter. You have the following options:
"Local1" (65149): The instruction always returns the I&M data of the CPU with redundancy ID 1.
"Local2" (65349): The instruction always returns the I&M data of the CPU with redundancy ID 2.
IM_TYPE: Enter the I&M data number (for example "0" for I&M 0 data) at the IM_TYPE block parameter.
DATA: Area for storing the I&M data read (for example in a global data block). Store the I&M 0 data in an area of the data type "IM0_Data".
This example shows you how to read out the I&M 0 data of a CPU 1513R-1 PN (redundancy ID 1, 6ES7513-1RL00-0AB0).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
255
Commissioning 10.8 Identification and maintenance data
Solution
Proceed as follows to read out the I&M 0 data of the CPU with the redundancy ID 1:
1. Create a global data block to store the I&M 0 data.
2. Create a structure of the data type "IM0_Data" in the global data block. You can assign any name to the structure ("imData" in this case).
Figure 10-15 Example: Data block for I&M data
3. Create the "Get_IM_Data" instruction in the user program, for example in OB 1. 4. Connect the "GET_IM_DATA" instruction as follows:
Figure 10-16 Example: Read out I&M0 data from the S7-1500R redundant system 5. Call the "Get_IM_Data" instruction in the user program.
256
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Commissioning 10.8 Identification and maintenance data
Result The "Get_IM_Data" instruction has stored the I&M 0 data of the CPU with redundancy ID 1 in the data block. You can view the I&M 0 data online in STEP 7, for example with the "Monitor all" button in the data block. The CPU in the example is a CPU 1513R-1 PN (6ES7513-1RL00-0AB0) with the firmware version V2.8. The serial number of the CPU is 'S C-F9S840662018'.
Figure 10-17 Example: I&M 0 data of an R CPU
Benefits
You can see from the data block at a glance which module requires an update.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
257
Display
11
11.1
CPU display
Introduction
The following section gives an overview of how the R/H-CPU display operates. Detailed information on the individual options, a training course and a simulation of the selectable menu items is available in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
Display
The R/H-CPUs have a front cover with a display and operating keys. The display of the CPUs shows you the control and status information in various menus. You use operating keys to navigate through the menus and make a variety of settings in the process.
Benefits
The display offers the following advantages:
Reduced downtimes through diagnostic messages in plain text
Less time required for commissioning and maintenance, shorter plant downtime.
Shorter downtimes due to read/write access to force tables and read/write access to watch tables. The watch and force tables allow you to monitor and modify the actual values of individual tags of a user program on the display. You can find additional information on the watch and force tables in the section Test and service functions (Page 290) and in the STEP 7 online help.
Visualization of the SYNCUP system state with graphic and percentage progress display
Password protection for the display
In the properties of the CPUs, you configure a password in STEP 7 for display operation. Local access protection is thus protected with a local password. Password protection can be configured differently for each display.
Operating temperature for the display
To increase the service life of the display, the display switches off when the permitted operating temperature is exceeded. When the display has cooled down again, it switches back on automatically. When the display is switched off, the LEDs continue to show the status of the CPUs.
You can find additional information on display temperatures in the technical specifications in the CPU manuals.
258
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Display
Display 11.1 CPU display
The following figures show an example of a large display (left: for example CPU 1517H-3 PN) and small display (right: CPU 1513R-1 PN) of a CPU.
CPU status information Names of the menus Data display field Navigation aid, e.g. OK/ESC or the page number
Figure 11-1 Example views of the displays
Regarding : CPU status information
The following table shows the CPU status information that can be retrieved via the display.
Table 11- 1 CPU status information
Color and icons for the status data Green
Orange
Red White
Meaning
· RUN · RUN-Syncup · RUN-Redundant · STARTUP · SYNCUP · STOP · STOP - firmware update FAULT · Connection established between CPU and display. Protection level configured.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
259
Display 11.1 CPU display
Color and icons for the status data
Meaning
· At least one alarm is active in the CPU. · No SIMATIC memory card inserted in the CPU. · No user program loaded. Force job is active in the CPU.
Regarding : Names of the menus
The following table shows the available menus of the display.
Table 11- 2 Names of the menus
Main menu items
Meaning Overview
Diagnostics Settings
Description The "Overview" menu contains information about: · Properties of the local CPU · Redundancy properties, for example
Display of role (primary CPU or backup CPU) Displaying and setting the redundancy ID Display of the pairing state · Properties of the inserted SIMATIC memory card
The "Diagnostics" menu includes: · Display of alarms · Display of the diagnostics buffer · Read and write access to force and watch tables · Display of cycle time · Display of memory used
In the "Settings" menu you: · Assign IP address and PROFINET device name of the CPU · Setting date/time · Set operating states (RUN/STOP) · Perform a CPU memory reset or reset to factory settings · Disabling and enabling passwords · Disable/enable display with display password · Format SIMATIC memory card · Run firmware update and display status · Convert SIMATIC memory card or delete user program
260
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Main menu items
Meaning Modules
Display 11.1 CPU display
Description The "Modules" menu is not supported for R/H-CPUs.
Display
In the "Display" menu you can configure settings related to the display, such as language setting, brightness and energy-saving mode. The energysaving mode dims the display. Standby mode switches off the display.
Menu icons
The following table shows the icons that are displayed in the menus.
Table 11- 3 Menu icons
Icon
Meaning
Editable menu item.
Select the required language.
A message is available in the next lower level page.
There is an error in the next lower level page.
The marked module is not accessible.
Navigate to the next lower level page.
In edit mode you make the selection using two arrow keys: · Down/up: Jumps to the selection or is used to select the desired digits/options. In edit mode you make the selection using four arrow keys: · Down/up: Jumps to the selection or is used to select the desired digits. · Left/right: Jumps one place forward or back. The alarm is not yet acknowledged.
The alarm is acknowledged.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
261
Display 11.1 CPU display
Control keys
You operate the display using the following keys:
Four arrow keys: "up", "down", "left", "right" If you press and hold an arrow key for 2 seconds, this generates an automatic scroll function.
One ESC key
One OK key
Figure 11-2 Control keys
Note If the display is in energy-saving mode or in standby mode, you can exit this mode by pressing any key.
Functions of the "OK" and "ESC" keys
For menu commands in which an entry can be made: OK valid access to the menu command, confirmation of input, and exit from the edit mode ESC restore original content (changes are not saved) and exit edit mode
For menu commands in which no entry can be made: OK to next submenu command ESC back to previous menu command
Hold ESC for about 3 seconds on any screen of the display. Result: You automatically return to the home page.
262
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Tooltips
Display 11.1 CPU display
Some of the values shown on the display can exceed the available display width. The values in question include: Station name Plant designation Location identifier PROFINET device name The available display width is frequently exceeded on CPUs with small displays. If you focus on the relevant value on the display and press the "Left" arrow key, a tooltip appears. The tooltip shows the name of the value in complete length. To hide the tooltip again, press the "Left" arrow key again or the "ESC" key.
Figure 11-3 Tooltip function
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
263
Display 11.1 CPU display
Uploading image to the display via STEP 7
In the STEP 7 device view, you download an image from your file system to the CPU display with the "Display > User-defined logo" function. Different images can be downloaded to the two R/H-CPUs for clearer differentiation.
Figure 11-4 Uploading image to CPU
To display the uploaded image in the correct aspect ratio, use images with the following dimensions depending on the CPU:
Table 11- 4 Dimensions
CPU CPU 1513R-1 PN CPU 1515R-2 PN CPU 1517H-3 PN
Dimensions 128 x 120 pixels 240 x 260 pixels 240 x 260 pixels
Supported formats Bitmap, JPEG, GIF, PNG Bitmap, JPEG, GIF, PNG Bitmap, JPEG, GIF, PNG
If the uploaded image exceeds the specified dimensions, the display shows only part of the image. The "Adapt logo" option in STEP 7 allows you to reduce the image to the specified dimensions. However, note that the original aspect ratio of the image is not retained in such cases.
Displaying image on the display
To display the uploaded image on the display of the CPU, press the ESC key in the main screen of the display. When you upload an image and are in the main screen, the display automatically shows the image after 60 seconds. To hide the image again, press any key on the display.
264
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Display 11.1 CPU display
Available language settings
You can set the following languages separately for menu and message texts: Chinese German English French Italian Japanese Korean Portuguese (Brazil) Russian Spanish Turkish You select the required language directly at the display in the "Display" menu or in STEP 7 in the hardware configuration of the CPU under "User interface languages". Proceed as follows to display message texts on the display: 1. Configure the project language that you want to be displayed as the interface language.
To do so, select a CPU and navigate to the "Multiple languages" area ("Properties > General > Multilingual support") in the Inspector window.
Assign the required project languages to the interface languages. 2. Download the message texts to the CPU as a software component.
To do so, select the "Consistent download" option under "Text libraries" in the "Load preview" dialog (default).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
265
Maintenance
12
12.1
Replacing components of the S7-1500R/H redundant system
12.1.1
Checking before replacing components
Introduction
Please observe the following rules if the redundant system is in the RUN-Solo system state: Do not immediately start replacing components. Do not immediately switch the failed CPU to the RUN. operating state. First check the pairing status in the RUN-Solo system state.
Checking pairing in the RUN-Solo system state
CAUTION Do not switch the failed CPU in the RUN-Solo system state to the RUN operating state. This could result in an undefined system state for the redundant system. Both CPUs would become primary CPUs. If the S7-1500R/H redundant system is in the RUN-Solo system state, you must not immediately switch the backup CPU to the RUN operating state. Possible cause: No pairing between the two CPUs. Check the pairing status on the display or on the basis of the diagnostics status or diagnostics buffer. If there is no pairing, the redundancy connections have been interrupted, for example. In this case, please note the procedure below.
266
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Maintenance 12.1 Replacing components of the S7-1500R/H redundant system
Checking pairing state
You have the following options for checking the pairing state: Directly from the display of the backup CPU.
In the "Overview > Redundancy > Pairing state" menu: Paired Single paired (X*P*) Not paired Not paired - Too many partners Not paired - Article number mismatch Not paired - Firmware mismatch
Primary CPU
Backup CPU
Example: Paired
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
267
Maintenance 12.1 Replacing components of the S7-1500R/H redundant system
In STEP 7 in the diagnostic status (Online & diagnostics) of the S7-1500R/H system: Check the system state in the diagnostic status: Pairing: "Paired" is shown in the "Pairing state" field. No pairing: "No pairing" is displayed in the "Pairing status" field.
Figure 12-1 "Paired" diagnostics state In STEP 7 in the diagnostics buffer (Online & diagnostics): Check the entries on pairing.
Procedure
To start the pairing, for example when redundancy connections are interrupted, follow these steps:
1. Set the mode selector for the backup CPU to STOP.
2. S7-1500R: Repair the PROFINET cables in the PROFINET ring. Insert the PROFINET cables into the R-CPU interfaces. S7-1500H: Repair the fiber-optic cables and synchronization modules. Insert the fiberoptic cables into the synchronization modules.
3. Check for successful pairing of the redundant system. Please note the information in "Checking pairing state" above.
4. Set the mode selector for the backup CPU to RUN.
Result
The S7-1500R/H redundant system switches to the RUN-Redundant system state.
268
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Maintenance 12.1 Replacing components of the S7-1500R/H redundant system
12.1.2
Replacing defective R/H-CPUs
Initial situation
One of the two R/H-CPUs has failed or the R/H-CPU is no longer working. The S7-1500R/H redundant system is in the RUN-Solo system state.
Requirements
Read the information in the section Checking before replacing components (Page 266).
The replacement CPU has the same article number and firmware version as the failed R/H-CPU. It may be necessary to load an older firmware version onto the replacement CPU.
The replacement CPU has a SIMATIC memory card with sufficient storage capacity.
The primary CPU has not disabled SYNCUP (default).
Procedure for replacing R/H-CPUs
Proceed as follows to replace an R/H-CPU in the redundant system: 1. Switch off the supply voltage to the failed R/H-CPU. 2. Remove the connector for the supply voltage. 3. Disconnect the bus connectors for the PROFINET ring. Then remove the bus connectors
from the R/H-CPU. 4. For H-CPUs only: Disconnect the redundancy connections (fiber-optic cables) at the H-
CPU. 5. For H-CPUs only: Pull the synchronization modules out of the H-CPU. 6. Remove the failed R/H-CPU. 7. Install the replacement CPU with the SIMATIC memory card inserted and the mode
selector in the STOP position. 8. For H-CPUs only: Insert the synchronization modules in the replacement CPU. 9. For H-CPUs only: Insert the redundancy connections (fiber-optic cables) in the
synchronization modules. 10.Insert the bus connectors for the PROFINET ring into the R/H CPU. 11.Push the connector for the supply voltage into the socket on the R/H-CPU. 12.Switch the supply voltage back on. 13.Check the pairing. 14.Start the replacement CPU.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
269
Maintenance 12.1 Replacing components of the S7-1500R/H redundant system
Result
1. The replaced R/H-CPU executes SYNCUP.
2. The replaced R/H-CPU switches to the RUN-Redundant operating state and operates as backup CPU.
12.1.3
Replacing defective redundancy connections
Introduction
This section describes the following replacement scenarios:
S7-1500R:
Replace defective PROFINET cable with S7-1500R. The PROFINET ring has been interrupted at any given point. You can find additional information in the section Replacing defective PROFINET cables (Page 274).
Replace two defective PROFINET cables with S7-1500R. The PROFINET ring has been interrupted at two points.
S7-1500H:
Replace a defective redundancy connection with S7-1500H. A fiber-optic cable has been interrupted.
Replace defective synchronization module with S7-1500H.
Replace two defective redundancy connections with S7-1500H. Both fiber-optic cables have been interrupted.
Evaluating the diagnostics buffer
Detailed diagnostics information is provided in the diagnostics buffer of the R/H-CPU. The entries are particularly useful in the replacement scenarios for the redundancy connections:
S7-1500R: They contain information on whether one PROFINET cable or both PROFINET cables have been interrupted or a port of an R-CPU is defective.
S7-1500H: You can access information on whether a fiber-optic cable has been interrupted or the synchronization module is defective (with additional module diagnostics).
12.1.3.1
Replacing two defective PROFINET cables with S7-1500R
Initial situation: Failure of two PROFINET cables, one after the other
Two PROFINET cables in the PROFINET ring have been interrupted one after the other at two points (> 1500 ms apart).
The S7-1500R redundant system is in the RUN-Solo system state.
270
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Maintenance 12.1 Replacing components of the S7-1500R/H redundant system
Requirement
Read the information in the section Checking before replacing components (Page 266).
Procedure: Replacing the two PROFINET cables
Proceed as follows to replace the defective PROFINET cables: 1. Locate the defective PROFINET cables in the PROFINET ring. 2. Replace the PROFINET cables, one after the other. 3. If necessary, restart each of the two CPUs on after the other.
Result
The redundant system switches to the RUN-Redundant system state.
Initial situation: Failure of two PROFINET cables simultaneously
Two PROFINET cables in the PROFINET ring have been interrupted at two points simultaneously ( 1500 ms apart).
Both R-CPUs are primary CPUs. The S7-1500R redundant system is in an undefined system state.
Procedure: Replacing the two PROFINET cables
Proceed as follows to replace the defective PROFINET cables: 1. Immediately switch both R-CPUs to the STOP operating state. 2. Locate the defective PROFINET cables in the PROFINET ring. 3. Replace the PROFINET cables, one after the other. 4. Then start the R-CPUs.
Result
The redundant system switches to the RUN-Redundant system state.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
271
Maintenance 12.1 Replacing components of the S7-1500R/H redundant system
12.1.3.2
Replacing a defective redundancy connection with S7-1500H
Initial situation
One redundancy connection (fiber-optic cable) has been interrupted. Display shows: Single pairing with information on interface and port.
The S7-1500H redundant system is in the RUN-Redundant system state.
Procedure: Replacing the redundancy connection
Proceed as follows to replace a defective redundancy connection: 1. Check the X3/X4 LEDs. You can pinpoint the defective redundancy connection on the
basis of which LEDs are off. 2. Check the redundancy connection that you have located with the LEDs. 3. If the redundancy connection is defective, replace the fiber-optic cable.
Result
The defective redundancy connection has been replaced. The X3/X4 LEDs flicker yellow/green.
12.1.3.3
Replacing defective synchronization module with S7-1500H
Initial situation
A synchronization module has failed. The redundant S7-1500H is in the RUN-Redundant system state.
Procedure: Replacing the synchronization module
Proceed as follows to replace a defective synchronization module:
1. Check the X3/X4 LEDs on the primary and backup CPU. Locate the defective synchronization module on the basis of which LEDs are off.
2. Replace the defective synchronization module. Connect the redundancy connection (fiber-optic cable).
3. If the X3/X4 LEDs remain off, replace the synchronization module on the other CPU.
Result
The defective synchronization module has been replaced. The X3/X4 LEDs flicker yellow/green.
272
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Maintenance 12.1 Replacing components of the S7-1500R/H redundant system
12.1.3.4
Replacing both defective redundancy connections with S7-1500H
Initial situation: Failure of both redundancy connections, one after the other
The two redundancy connections (fiber-optic cables) have been interrupted one after the other (> 1500 ms apart).
The S7-1500H redundant system is in the RUN-Solo system state.
Requirement
Read the information in the section Checking before replacing components (Page 266).
Procedure: Replacing both redundancy connections
Proceed as follows to replace the defective redundancy connections: 1. Check the X3/X4 LEDs on the primary and backup CPU. If all LEDs are off, both
redundancy connections are defective. 2. Replace the redundancy connections (fiber-optic cables) one after the other. 3. Start the CPU which is in STOP mode.
Result
The defective redundancy connections have been replaced. The redundant system switches to the RUN-Redundant system state. The X3/X4 LEDs flicker yellow/green.
Initial situation: Failure of both redundancy connections simultaneously
The two redundancy connections (fiber-optic cables) have been interrupted simultaneously ( 1500 ms apart).
Both H-CPUs are primary CPUs. The S7-1500H redundant system is in an undefined system state.
Procedure: Replacing both redundancy connections
Proceed as follows to replace the defective redundancy connections: 1. Immediately switch both H-CPUs to the STOP operating state. 2. Replace the redundancy connections (fiber-optic cables) one after the other. 3. Switch the H-CPUs back to the RUN operating state.
Result
The redundant system switches to the RUN-Redundant system state. The X3/X4 LEDs flicker yellow/green.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
273
Maintenance 12.1 Replacing components of the S7-1500R/H redundant system
12.1.4
Replacing defective PROFINET cables
Initial situation
The PROFINET ring has been interrupted at any given point. The MAINT LEDs on both CPUs are yellow. The following is shown on the S7-1500R display: Single pairing with information on interface and port.
The S7-1500R/H redundant system is in the RUN-Redundant system state.
Procedure: Replacing the PROFINET cable
Proceed as follows to replace the defective PROFINET cable:
1. Check the X1 P1/X1 P2 LEDs on the primary and backup CPU. LEDs that are off indicate an interruption to the PROFINET ring.
2. Locate the defective PROFINET cable in the PROFINET ring. Check the link RX/TX LEDs of the PROFINET nodes. If the link RX/TX LEDs are switched off, there is no connection between the interface of the PROFINET device and the communication partner.
3. Replace the defective PROFINET cable.
Result
The defective PROFINET cable has been replaced. The X1 P1/X1 P2 LEDs on the primary and backup CPU are yellow. The MAINT LEDs on both CPUs are off.
12.1.5
Replacing a defective SIMATIC memory card
Initial situation
The SIMATIC memory card of a CPU is defective. System diagnostics reports a system error. The CPU affected has switched to the STOP operating state.
The S7-1500R/H redundant system is in the RUN-Solo system state.
Requirement
Read the information in the section Checking before replacing components (Page 266). The new SIMATIC memory card must have sufficient memory for the project.
274
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Procedure Result Reference
Maintenance 12.1 Replacing components of the S7-1500R/H redundant system
Proceed as follows to replace a defective SIMATIC memory card: 1. Replace the SIMATIC memory card in the CPU in STOP. 2. Start the CPU.
1. The redundant system runs SYNCUP. SYNCUP transfers the project data from the primary to the backup CPU.
2. The CPU switches to the RUN-Redundant operating state and operates as backup CPU. The redundant system is in the RUN-Redundant system state again.
If there is not enough memory space on a SIMATIC memory card, the card can be replaced during operation. You will find the procedure, the response of the redundant system and other information on the SIMATIC memory card in the function manual Structure and use of the CPU memory (https://support.industry.siemens.com/cs/de/de/view/59193101/en).
12.1.6
Replace defective load current supply PM
Initial situation
A load current supply PM has failed. The S7-1500R/H redundant system is in the RUN-Solo system state.
Requirement
Read the information in the section Checking before replacing components (Page 266).
Procedure
Proceed as follows to replace a defective load current supply: 1. Switch off the mains supply (24 V DC or 230 V AC). 2. Replace the defective load current supply PM. 3. Switch the mains supply back on. 4. Switch on the replaced load current supply PM.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
275
Maintenance 12.1 Replacing components of the S7-1500R/H redundant system
Result
1. The CPU with the replaced load current supply PM runs SYNCUP. Requirement: The CPU mode selector is in RUN.
2. The CPU switches to the RUN-Redundant operating state and operates as backup CPU. The redundant system is in the RUN-Redundant system state again.
12.1.7
Replacing defective IO devices/switches
Initial situation
A PROFINET device (IO device/switch) in the PROFINET ring has failed, for example because of a defect in the IO device or failure of the power supply. The PROFINET ring has been interrupted. The MAINT LEDs on both CPUs are yellow. The ERROR LEDs on both CPUs are flashing red.
The S7-1500R/H redundant system is in the RUN-Redundant system state.
Note
If a switch/IO device fails, the S7-1500R/H redundant system has no access to the downstream devices in the connected line topology.
Procedure
Proceed as follows to replace a defective PROFINET device: 1. Locate the faulty PROFINET device. 2. Switch off the supply voltage for the PROFINET device. 3. Disconnect the cables for the supply voltage. 4. Disconnect the PROFINET cables from the ports of the PROFINET device. 5. Replace the PROFINET device. 6. Connect the PROFINET cables to the ports of the PROFINET device. 7. Connect the cables for the supply voltage to the PROFINET device. 8. Switch the supply voltage back on.
276
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Result
Maintenance 12.1 Replacing components of the S7-1500R/H redundant system
Note Setting the media redundancy role Client for the PROFINET devices If you replace a PROFINET device in the PROFINET ring, you need to assign the media redundancy role "Client" to the PROFINET device in STEP 7. The client media redundancy role setting is important for nodes that are not IO devices (such as switches). These nodes do not receive the parameters assigned by the R/H CPUs. Replaced IO devices are automatically configured by the R/H-System and receive the correct setting again.
The PROFINET ring has been closed again. The PROFINET device can be accessed again in the S7-1500R/H redundant system. The MAINT and ERROR LEDs on both CPUs are off.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
277
Maintenance 12.2 Replacing the front cover
12.2
Replacing the front cover
Replacing the front cover
The front cover is pluggable. If necessary, you can take off the front cover or replace the front cover during runtime (RUN-Redundant). Removing or replacing the front cover does not affect the CPU in operation.
To remove the front cover from the CPU, follow these steps:
1. Flip up the front cover until the front cover stands at a 90° angle to the front of the module.
2. In the top section of the front cover, press on the anchor(s): Two anchors with CPU 1515R-2 PN, CPU 1517H-3 PN. One anchor with CPU 1513R-1 PN. At the same time, pull the front cover towards you and off.
The view in the figure below is an example of CPU 1515R-2 PN.
Fasteners for removing and fitting the front panel
Figure 12-2 Removing and fitting the front panel
WARNING Personal injury or material damage can occur in zone 2 hazardous areas If you remove or attach the front cover during operation, personal injury and damage can occur in hazardous areas of zone 2. Always deenergize the R/H-CPU from the power supply before you remove or attach the front cover in hazardous areas of zone 2.
278
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Maintenance 12.3 Replacing the coding element at the power connector of the load current supply
12.3
Replacing the coding element at the power connector of the load
current supply
Introduction
The coding consists of a 2-part coding element. Ex factory a part of the coding element is inserted into the back side of the power connector. The other part is firmly inserted in the load current supply. This prevents the insertion of a power connector of a load current supply into a module of a different type.
DANGER Do not manipulate the coding element, or leave it off · Changing or replacing the coding element can result in dangerous system states. · To avoid damage, do not change or replace the coding element. · You must not remove the coding element.
Replacement parts scenario
Insertion of the coding element into a new power connector in the case of a replacement part.
DANGER Dangerous voltage When installing the coding element, you must take into account the supply voltage of the load current supply: 24 V DC, 24/48/60 V DC or 120/230 V AC/DC Only install the coding element with switched-off voltage. You must insert the coding element in such a way that the power connector matches the power supply module in terms of voltage.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
279
Maintenance 12.3 Replacing the coding element at the power connector of the load current supply
Procedure
To replace the coding element on the power connector of the load current supply, follow these steps:
1. Orient yourself using the labeling on the power cable connection.
Figure 12-3 Labeling on the power connector
2. Orient yourself using the red marking on the coding element.
3. The coding element has 3 red markings. Turn the coding element in such a way that one of the 3 red markings corresponds to the voltage indicated on the connector.
4. Insert the coding element into the back side of the power cable connector, until you hear it click into place. The figure below shows you how to insert a coding element into a power cable connector for 24 V DC.
Figure 12-4 Inserting a coding element into a power connector
280
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Maintenance 12.4 Firmware update
12.4
Firmware update
Introduction
You use firmware files to update the firmware of the CPUs, displays and the IO devices (for example for new functions). The retentive data is retained after the firmware has been updated.
Note CPUs operating in redundant mode CPUs operating in redundant mode must have the same article number and the same firmware version.
For the replacement of components, the two CPUs operating in redundant mode must have the same firmware version. Downgrades are therefore possible as well as updates.
Note CPU downgrades and upgrades You cannot upgrade a standard CPU or F-CPU to an R-CPU or H-CPU. You cannot downgrade the firmware of an R/H-CPU to a standard or F-CPU either.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
281
Maintenance 12.4 Firmware update
Requirement
You have downloaded the files for the firmware update from Siemens Industry Online Support (https://support.industry.siemens.com/cs/ww/en/ps).
On this Web page, select:
Automation technology > Automation systems > SIMATIC industrial automation systems > Controllers > Advanced Controller > S7-1500 > CPUs > Redundant CPUs
Figure 12-5 Product tree using the S7-1500 as an example
From this position, navigate to the specific type of module that you want to update. To continue, click on the "Software downloads" link under "Support". Save the required firmware update files. Before installing the firmware update, make sure that the modules are not being used.
Options for the firmware update
The options for performing a firmware update are as follows: Online in STEP 7 via Online & Diagnostics Via the SIMATIC memory card: For CPU and display only The table below gives an overview of the various options for a firmware update.
Firmware update STEP 7 via Online & diagnostics SIMATIC memory card
CPU
Display
PROFINET IO devices --
282
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Maintenance 12.4 Firmware update
Procedure: online in STEP 7 via Online & diagnostics
Requirements: There is an online connection between the CPU/PROFINET IO device and PG/PC. Proceed as follows to perform a firmware update online via STEP 7: 1. Select the module in the device view. 2. Select the "Online & diagnostics" menu command from the shortcut menu. 3. In the "Functions" folder, select the "Firmware update" group.
For a CPU, you can select whether you want to update the CPU or the display. 4. Click the "Browse" button to select the path to the firmware update files in the "Firmware
update" area. 5. Select the correct firmware file. The table in the firmware update area lists all modules for
which an update is possible with the selected firmware file. 6. Click the "Run update" button. If the module can interpret the selected file, the file is
downloaded to the module. If you need to change the CPU operating state, STEP 7 prompts you to do so with dialogs.
Note Updating PROFINET IO device The R/H system remains in the RUN-Redundant system state if you update an IO device.
Updating the firmware The "Run firmware after update" check box is always selected. Once the files have been successfully loaded, the CPU accepts the firmware and operates with the new firmware.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
283
Maintenance 12.4 Firmware update
Procedure with the SIMATIC memory card
Proceed as follows to perform a firmware update using the SIMATIC memory card:
1. Insert a SIMATIC memory card into the SD card reader of your PG/PC.
2. To store the update file on the SIMATIC memory card, select the SIMATIC memory card under "Card reader/USB memory" in the project tree.
3. Select the "Card Reader/USB memory > Create firmware update memory card" command in the "Project" menu.
4. Use a file selection dialog to navigate to the firmware update file. You can then also decide whether to delete the content of the SIMATIC memory card or add the firmware update files to the SIMATIC memory card.
5. Insert the SIMATIC memory card with the firmware update files into the CPU.
The firmware update begins shortly after the SIMATIC memory card has been inserted.
The display indicates that the CPU is in STOP and is running a firmware update.
The display shows a results screen after completion of the firmware update.
6. The RUN LED on the CPU lights up in yellow and the MAINT LED flashes yellow. Remove the SIMATIC memory card after the firmware update is complete. If you subsequently wish to use the SIMATIC memory card as a program card, leave the SIMATIC memory card in the CPU. To do so, after completion of the firmware update, select the "Convert memory card" menu item on the display. Alternatively, you can also convert the SIMATIC memory card to a program card in STEP 7.
Note Memory size of the SIMATIC memory card
If you perform a firmware update via the SIMATIC memory card, you must use a large enough card.
Check the specified file sizes of the update files when downloading them from Siemens Industry Online Support. The total size of the update files must not exceed the available memory size of your SIMATIC memory card.
You can find more information on the capacity of SIMATIC memory cards in the section Accessories/spare parts (Page 315) and in the function manual Structure and use of the CPU memory (https://support.industry.siemens.com/cs/de/de/view/59193101/en).
284
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Maintenance 12.4 Firmware update
Installation of the firmware update of R/H-CPUs
For a firmware update of the R/H-CPUs, you must switch both R/H-CPUs to the STOP operating state. A role change between primary and backup CPU can occur during the firmware update. The initial situation is assumed in the following: CPU 1 is the primary CPU. CPU 2 is the backup CPU. You must proceed in the following order for retentive data to be retained during a firmware update: 1. Switch CPU 2 to the STOP operating state. 2. Run the update for CPU 2.
Please note: Ignore any pairing error (incorrect firmware) after CPU 2 startup. 3. Switch CPU 1 to the STOP operating state. 4. Now run the update for CPU 1. 5. Switch CPU 1 to the RUN operating state. 6. Switch CPU 2 to the RUN operating state.
WARNING Risk of impermissible system states The installation of the firmware update switches the CPUs to the STOP operating state and therefore the redundant system to the STOP system state. STOP can impact the operation of an online process or a machine. Unexpected operation of a process or a machine can lead to fatal or severe injuries and/or to material damage. Ensure before installing the firmware update that the CPU is not controlling any active process.
Installation of the firmware update for R/H-CPU displays
Firmware updates for the R/H-CPU displays are run in the RUN-Solo system state. A role change between primary and backup CPU can occur during the firmware update. The initial situation is assumed in the following: CPU 1 is the primary CPU. CPU 2 is the backup CPU.
Follow the sequence below:
1. Switch CPU 2 to the STOP operating state.
2. Run the update for the CPU 2 display.
3. Switch CPU 2 to the RUN operating state. Wait until the R/H system switches to the RUN-Redundant system state.
4. Switch CPU 1 to the STOP operating state.
5. Run the update for the CPU 1 display.
6. Switch CPU 1 to the RUN operating state. Wait until the R/H system switches to the RUN-Redundant system state.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
285
Maintenance 12.5 Resetting CPUs to factory settings
Behavior after the firmware update
After the firmware update, check the firmware version of the updated module.
Reference
You can find more information on firmware updates in the STEP 7 online help.
12.5
Resetting CPUs to factory settings
Introduction
The CPU can be reset to its as-delivered condition using "Reset to factory settings". The function deletes all information saved internally on the CPU.
Recommendation:
Switch the CPU to its as-delivered condition if:
You remove a CPU and use it elsewhere with a different program.
You store the CPU.
When resetting to factory settings, remember that the IP address parameters are also deleted.
Options for resetting a CPU to factory settings
You can reset the CPU to its as-delivered condition: Using the mode selector Using the display Using STEP 7
286
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Maintenance 12.5 Resetting CPUs to factory settings
Procedure using the mode selector
Make sure that the CPU is in STOP operating state: The CPU display indicates the STOP operating state: The RUN/STOP LED lights up yellow.
Note Reset to factory settings Memory reset The procedure described below corresponds to the procedure for a memory reset: · Selector operation with inserted SIMATIC memory card: CPU executes a memory reset · Selector operation without inserted SIMATIC memory card: CPU executes reset to factory
settings
Restore the factory settings of the CPU as follows: 1. Set the mode selector to the STOP position.
Result: The RUN/STOP LED lights up yellow. 2. Remove the SIMATIC memory card from the CPU. Wait until the RUN/STOP LED stops
flashing. 3. Set the mode selector to the MRES position. Hold the mode selector in this position until
the RUN/STOP LED lights up for the second time and remains continuously lit after 3 seconds. Then release the mode selector. 4. Within the next three seconds, switch the mode selector back to the MRES position and then back to STOP. Result: The CPU executes a "Reset to factory settings", during which time the RUN/STOP LED flashes yellow. When the RUN/STOP LED lights up in yellow, the CPU has been reset to factory settings and is in the STOP operating state. The "Reset to factory settings" event is entered in the diagnostics buffer.
Note Resetting the CPU to the factory settings with the mode selector also deletes the IP address of the CPU and resets the redundancy ID to 1.
Procedure using the display
Make sure that the CPU is in STOP operating state: The CPU indicates the STOP operating state. The RUN/STOP LED lights up yellow.
1. Wait until the RUN/STOP LED stops flashing.
2. To navigate to the required "Factory settings" menu command, select the following sequence of menu commands and confirm each selection with "OK".
Settings Reset Factory settings
Result: The CPU executes a "Reset to factory settings", during which time the RUN/STOP LED flashes yellow. When the RUN/STOP LED lights up in yellow, the CPU has been reset to factory settings and is in the STOP operating state. The "Reset to factory settings" event is entered in the diagnostics buffer.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
287
Maintenance 12.5 Resetting CPUs to factory settings
Procedure using STEP 7
Proceed as follows to reset a CPU to factory settings with STEP 7:
Make sure that there is an online connection to the CPU.
1. Open the Online and Diagnostics view of the CPU.
2. In the "Functions" folder, select the "Reset to factory settings" group.
3. If you want to keep the IP address, select the "Keep IP address" option button. If you want to delete the IP address, select the "Delete IP address" option button.
Note
"Delete IP address" deletes all IP addresses, regardless of how you established the online connection.
If a SIMATIC memory card is inserted, selecting the "Delete IP address" option has the following effect: · The IP addresses are deleted and the CPU is reset to factory settings. · The configuration (including IP address) on the SIMATIC memory card is then
downloaded to the CPU. If there is no saved configuration (because the SIMATIC memory card has been cleared or formatted, for example), no new IP address is assigned.
4. Click the "Reset" button.
5. Click "OK" in response to the confirmation prompts.
Result: The CPU executes a "Reset to factory settings", during which time the RUN/STOP LED flashes yellow. When the RUN/STOP LED lights up in yellow, the CPU has been reset to factory settings and is in STOP. The "Reset to factory settings" event is entered in the diagnostics buffer.
Result after resetting to factory settings
The table below gives an overview of the contents of the memory objects after the reset to factory settings.
Table 12- 1 Result after resetting to factory settings
Memory object Redundancy ID Actual values of the data blocks, instance data blocks Bit memories, timers and counters Retentive tags of technology objects Entries in the diagnostics buffer (retentive area) Entries in the diagnostics buffer (non-retentive area)
Contents Set to "1" Initialized Initialized Initialized Initialized Initialized
288
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Maintenance 12.6 Maintenance and repair
Memory object IP address
Device name (module name) Counter readings of the runtime meters Time of day
Contents Depends on the procedure: · Using mode switch: Is deleted · Using display: Is deleted · Using STEP 7: Depends on the setting of the
"Retain IP address"/"Delete IP address" option buttons
Is set to "CPUcommon" Initialized Set to "00:00:00, Jan. 01, 2012"
Note
IP address conflict
Resetting the CPU to the factory settings also deletes the IP address of the CPU and resets the redundancy ID to 1. Please note the following: An S7-1500R/H redundant system that is already in operation is switched to the STOP system state. If you reset the CPU with redundancy ID 2 to factory settings, that CPU is assigned the IP address of the other CPU (with redundancy ID 1). This results in an IP address conflict. You can only access the CPU with the emergency address. You can find information on the emergency address in the section Backing up and restoring the CPU configuration (Page 244).
Possible remedy: Using the display, assign the CPU the redundancy ID previously set. You can then access the CPU over the original IP address again.
Reference
You can find more information on "Reset to factory settings" in the section on memory areas and retentivity in the function manual Structure and use of the CPU memory (http://support.automation.siemens.com/WW/view/en/59193101), and in the STEP 7 online help. For information on CPU memory resets, please refer to the section CPU memory reset (Page 241).
12.6
Maintenance and repair
The R/H CPUs are maintenance-free.
Note Repairs to the R/H CPUs may only be carried out by the manufacturer.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
289
Test and service functions
13
13.1
Test functions
Introduction
You have the option of testing the operation of your user program on the CPU. You monitor the signal states and values of tags. You preassign values to tags to allow you to simulate specific situations for program execution.
Note Using test functions
Using test functions affects the program execution time and thus the cycle and response times of the controller.
Note Test functions in the RUN-Redundant system state: No check for sufficient free space before a write function is performed
Before a write function is performed, the system does not check whether there is enough free space on the SIMATIC memory cards of the CPUs for the function. Writing functions are online functions with the PG/PC, for example, loading/deleting a block, test functions, loading a modified user program in RUN-Redundant system state.
If insufficient memory is available on the SIMATIC memory card of a CPU, then: · changes the CPU in question to STOP mode.
If there is insufficient memory on the SIMATIC memory card of the selected CPU (to which you want to download), this CPU then changes to the STOP operating mode. The other CPU changes to the RUN operating mode with the former user program (redundant system system state RUN-Solo).
If there is insufficient memory on the other CPU then this CPU changes to the STOP operating mode. The selected CPU (to which you downloaded) changes to the RUN operating mode with the changed user program (redundant system system state RUN-Solo).
· If the ERROR LED flashes red (temporary error), · A corresponding error message is entered in the diagnostic buffer.
If then there is insufficient free space on the SIMATIC memory card of the other CPU, then this CPU stays in the RUN operating mode. The CPU then responds like a standard CPU.
290
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Test and service functions 13.1 Test functions
Requirements
There is an online connection to the relevant primary or backup CPU. A simultaneous online connection to both CPUs is not possible.
An executable user program is available in the CPU.
The redundant system must not be in the SYNCUP system state. Exception: The test functions "Test with a force table" and "Trace function" are also supported in the SYNCUP system state. However, there is no online connection during the SYNCUP system state. You can find more information in this section.
Test options
Testing with program status Testing with breakpoints (only in the STARTUP (startup OB) or RUN-Solo system state) Testing with a watch table Testing with a force table Testing with a PLC tag table Testing with a data block editor Testing with the LED flash test Testing with a trace function
Testing with program status
The program status allows you to monitor the execution of the program. You can display the values of operands and the results of logic operations (RLO). This allows you to detect and fix logical errors in your program.
Note Restrictions with the "Program status" function
Monitoring loops can significantly increase the cycle time. The increase in cycle time depends on the following factors: · The number of tags to be monitored · The actual numbers of loops run through
WARNING
Testing with program status
Testing with the "Program status" function can cause serious damage and injury if there are functional disruptions or program errors.
Make sure that you take appropriate measures to exclude the risk of dangerous states occurring before running a test with the "Program status" function.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
291
Test and service functions 13.1 Test functions
Testing with breakpoints
With this test option, you set breakpoints in your program, establish an online connection, and enable the breakpoints on the CPU. You then execute a program from one breakpoint to another. Requirements: You can only test with breakpoints with the primary CPU in the STARTUP (startup OB) or
RUN-Solo system state. Setting breakpoints is possible in the programming language SCL or STL. Testing with breakpoints provides you with the following advantages: Localization of logic errors step by step Simple and quick analysis of complex programs prior to actual commissioning Recording of current values within individual executed loops Using breakpoints for program validation is also possible in SCL or STL networks within
LAD/FBD blocks.
Note Restrictions during testing with breakpoints · If you test with breakpoints, there is a risk that you will exceed the cycle time of the
R/H-CPU. · SYNCUP is rejected if a breakpoint is set in the RUN-Solo system state.
Difference between modifying and forcing
The fundamental difference between the modifying and forcing functions is the storage behavior: Modifying: Modifying tags is an online function and is not stored in the CPU. You can end
the modifying of tags in the watch table or force table or by terminating the online connection. Forcing: A force job is written to the SIMATIC memory card and is retained after a POWER OFF. The S7-1500R/H CPU displays an active force job with a symbol. You can only end the forcing of peripheral inputs and peripheral outputs in the force table. A force job is transferred to the backup CPU in SYNCUP. The force job is then effective in both CPUs in the RUN-Redundant system state.
292
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Test and service functions 13.1 Test functions
Testing with watch tables
The following functions are available in the watch table: Monitoring of tags
Using watch tables, you can monitor the actual values of the individual tags of a CPU user program. On the PG/PC On the display of the CPU Please note the following requirement for displaying the tag values on the CPU display: You must specify a symbolic name for each tag in the "Name" column of the force table. You monitor the following operand areas: Inputs and outputs (process image) and bit memory Contents of data blocks Peripheral inputs and peripheral outputs Timers and counters Modifying tags You use this function to assign values to the individual tags of a user program or a CPU on the PG/PC. Modifying is also possible with Test with program status. The following operand areas are modifiable: Inputs and outputs (process image) and bit memory Contents of data blocks Peripheral inputs and peripheral outputs (for example, %I0.0:P, %Q0.0:P) Timers and counters
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
293
Test and service functions 13.1 Test functions
Testing with a force table
The following functions are available in the force table: Monitoring of tags
You use watch tables to monitor the actual values of the individual tags of a CPU user program. On the PG/PC On the display of the CPU You can monitor the table with or without trigger conditions. Please note the following requirement for displaying the tag values on the CPU display: You must specify a symbolic name for each tag in the "Name" column of the force table. You monitor the following tags: Bit memory Contents of data blocks Peripheral inputs Forcing of peripheral inputs and peripheral outputs You can force individual peripheral inputs or peripheral outputs. Peripheral inputs: Forcing peripheral inputs "bypasses" sensors/inputs by specifying
fixed values for the program. Instead of the actual input value via a process image or direct access, the program receives the force value. Peripheral outputs: Forcing peripheral outputs "bypasses" the complete program by specifying fixed values for the actuators. The advantage of the force table is that you can simulate different test environments and overwrite tags in the CPU with a fixed value. This enables you to intervene in the running process in a regulating way.
Testing with a PLC tag table
You can monitor the current data values of tags in the CPU directly in the PLC tag table. To do so, open the PLC tag table and start the monitoring. You may also copy PLC tags to a watch table or force table and monitor, modify or force them there.
294
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Test and service functions 13.1 Test functions
Testing with a data block editor
The data block editor offers different options for monitoring and modifying tags. These functions directly access the actual values of the tags in the online program. Actual values are the current values of tags in the CPU work memory at any given moment during program execution. The following functions for monitoring and modifying are available in the database editor. Monitor tags online Modify individual actual values Create a snapshot of the actual values
Note Setting data values during commissioning During plant commissioning, you often need to adjust data values to adapt the program to local conditions. The declaration table for data blocks offers some functions for this purpose.
Testing with the LED flash test
In many online dialogs, you can perform an LED flash test. This feature is useful if you are not sure which device in the hardware configuration corresponds to the device currently selected in the software. If you click on the "Flash LED" button in STEP 7 under Online & diagnostics (online access), specific LEDs flash on the device currently selected. The RUN/STOP, ERROR, and MAINT LEDs flash on the CPU. The LEDs flash until you cancel the flash test.
Testing with a trace function
The trace function is used to record the CPU tags, depending on settable trigger conditions. Examples of tags are the system and user tags of a CPU. The CPU saves the recordings. If necessary, you can display the recordings with STEP 7 and evaluate them. Restriction: The storage of measurements on the SIMATIC memory card (measurements
in the device) is not supported for R/H-CPUs. Procedure
The trace function can be called from the folder of the top CPU in the project tree, under the name "Traces".
In the "Measurements" system folder, double-click to open the recording to display the measurement. The "Diagram" tab for the measurement opens in the work area.
Please also see the FAQs on the Internet (https://support.industry.siemens.com/cs/ww/en/view/102781176) for testing with the trace function.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
295
Test and service functions 13.2 Reading out/saving service data
Reference
Additional information on the test functions can be found in the STEP 7 online help.
You can find more information on testing with trace functions in the function manual Using the trace and logic analyzer function (http://support.automation.siemens.com/WW/view/en/64897128).
13.2
Reading out/saving service data
Service data
In addition to the contents of the diagnostics buffer, the service data contain numerous additional data points about the internal status of the CPU. If a problem occurs with the CPU that you cannot resolve with other methods, send the service data to the Product Support team. The Product Support team will use the service data to help you with problem analysis.
Please note the following:
Read out the service data in the following cases:
Immediately after a CPU has switched to the STOP operating state.
Immediately after a loss of synchronization in the redundant system.
Always read out the service data of the primary and the backup CPU.
Note You cannot execute a download to the device while reading out the service data of the CPU.
Requirement
The S7-1500R/H redundant system must not be in the SYNCUP or RUN-Redundant system state.
Methods of reading service data
You can read service data with: STEP 7 SIMATIC memory card
Procedure using STEP 7
You can find more information on saving service data with the keyword "Saving service data" in the STEP 7 online help.
296
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Test and service functions 13.2 Reading out/saving service data
Procedure using the SIMATIC memory card
Use the SIMATIC memory card to save the service data if communication with the CPU is not possible over the Ethernet. In all other cases, save the service data using STEP 7. The procedure using the SIMATIC memory card is more time-consuming than the other options for saving the service data. You must also ensure before saving that there is sufficient memory space on the SIMATIC memory card.
Proceed as follows for the R/H-CPU to save service data using the SIMATIC memory card:
1. Insert the SIMATIC memory card into the card reader of your PC/PG.
2. Open the job file S7_JOB.S7S in an editor.
3. Overwrite the entry PROGRAM with the STRING or character string DUMP in the editor. Do not use any spaces/line breaks/quotation marks to ensure that the file size is exactly 4 bytes.
4. Make sure that the SIMATIC memory card is not write-protected. Insert the SIMATIC memory card into the card slot of the CPU. For the R/H-CPU, you require one card 32 MB in each case.
5. Save the file under the existing file name.
Result: The CPU writes the service data file DUMP S7S to the SIMATIC memory card and remains in STOP.
Service data transfer is complete when the STOP LED stops flashing and is lit continuously. If service data transfer has been successful, only the STOP LED lights up.
In the event of errors in transfer, the STOP LED is lit continuously and the ERROR LED flashes. The CPU also stores a text file with information on the error that occurred in the DUMP.S7S folder.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
297
Technical specifications
14
Introduction
This chapter lists the technical specifications of the system:
The standards and test values that the modules of the S7-1500R/H redundant system comply with and fulfill.
The test criteria according to which the S7-1500R/H redundant system was tested.
Technical specifications for the modules
The technical specifications of the individual modules can be found in the manuals of the modules themselves. In the event of deviations between the statements in this document and the manuals, the statements in the manuals take priority.
14.1
Standards and Approvals
Currently valid markings and authorizations
Note Information on the components of the S7-1500R/H redundant system The identifiers and approvals currently valid are printed on the components of the S71500R/H redundant system.
Safety information
WARNING Personal injury and damage to property may occur In hazardous areas, injury and damage can occur if you disconnect plug-in connections during operation of an S7-1500R/H redundant system. Always switch off the power to the S7-1500R/H redundant system before disconnecting plug-in connections in hazardous areas.
298
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Technical specifications 14.1 Standards and Approvals
WARNING Explosion hazard If you replace components, compliance with Class I, Div. 2 or zone 2 may become invalid.
WARNING Deployment requirements This device is only suitable for use in Class I, Div. 2, Group A, B, C, D; Class I, zone 2, Group IIC, or in non-hazardous areas.
CE mark
The S7-1500R/H redundant system complies with the harmonized European standards (EN) for programmable logic controllers published in the official gazettes of the European Community. The S7-1500R/H redundant system meets the requirements and protection targets of the following directives.
2014/30/EU "Electromagnetic Compatibility" (EMC Directive)
2014/34/EU "Equipment and protective systems intended for use in potentially explosive atmospheres" (Explosion Protection Directive)
2011/65/EU "Restriction of the use of certain hazardous substances in electrical and electronic equipment" (RoHS Directive)
EU declarations of conformity for the respective authorities are available from:
Siemens AG Digital Industries
Factory Automation DI FA AS SYS Postfach 1963 D-92209 Amberg
The EU declarations of conformity are also available for download from the Siemens Industry Online Support website, under the keyword "Declaration of Conformity".
cULus approval
Underwriters Laboratories Inc. in accordance with
UL 508 (Industrial Control Equipment) OR UL 61010-1 and UL 61010-2-201
C22.2 No. 142 (Process Control Equipment) OR CSA C22.2 No. 61010-1 and CSA C22.2 No. 61010-2-201
OR
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
299
Technical specifications 14.1 Standards and Approvals
cULus HAZ. LOC. approval
Underwriters Laboratories Inc. in accordance with
UL 508 (Industrial Control Equipment) OR UL 61010-1 and UL 61010-2-201
CSA C22.2 No. 142 (Process Control Equipment) OR CSA C22.2 No. 61010-1 and CSA C22.2 No. 61010-2-201
ANSI/ISA 12.12.01
CSA C22.2 No. 213 (Hazardous Location)
APPROVED for use in Class I, Division 2, Group A, B, C, D Tx; Class I, Zone 2, Group IIC Tx
Installation Instructions for cULus haz.loc.
WARNING - Explosion Hazard - Do not disconnect while circuit is live unless area is known to be non-hazardous.
WARNING - Explosion Hazard - Substitution of components may impair suitability for Class I, Division 2 or Zone 2.
This equipment is suitable for use in Class I, Division 2, Groups A, B, C, D; Class I, Zone 2, Group IIC; or non-hazardous locations.
WARNING: EXPOSURE TO SOME CHEMICALS MAY DEGRADE THE SEALING PROPERTIES OF MATERIALS USED IN THE RELAYS.
FM approval
Factory Mutual Research (FM) according to
Approval Standard Class Number 3611, 3600, 3810
ANSI/UL 12.12.01
ANSI/ISA 61010-1
CSA C22.2 No. 213
CSA C22.2 No. 61010-1
CSA C22.2 No. 0-10
APPROVED for use in Class I, Division 2, Group A, B, C, D Tx; Class I, Zone 2, Group IIC Tx
Installation Instructions for FM
WARNING - Explosion Hazard - Do not disconnect while circuit is live unless area is known to be non-hazardous.
WARNING - Explosion Hazard - Substitution of components may impair suitability for Class I, Division 2 or Zone 2.
This equipment is suitable for use in Class I, Division 2, Groups A, B, C, D; Class I, Zone 2, Group IIC; or non-hazardous locations.
WARNING: EXPOSURE TO SOME CHEMICALS MAY DEGRADE THE SEALING PROPERTIES OF MATERIALS USED IN THE RELAYS.
300
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Technical specifications 14.1 Standards and Approvals
ATEX approval
In accordance with EN 60079-15 (Electrical apparatus for potentially explosive atmospheres; Type of protection "n") and EN 60079-0 (Electrical apparatus for potentially explosive gas atmospheres - Part 0: General Requirements)
IECEx approval
According to IEC 60079-15 (Explosive atmospheres - Part 15: Equipment protection by type of protection "n") and IEC 60079-0 (Explosive atmospheres - Part 0: Equipment - General requirements)
RCM Declaration of conformity for Australia/New Zealand
The S7-1500R/H redundant system meets the requirements of EN 61000-6-4.
Korea Certification
KC registration number: KCC-REM-S49-S71500
Please note that this device corresponds to limit value class A in terms of the emission of radio frequency interference. This device can be used in all areas, except residential areas.
(A) .
Marking for the Eurasian Customs Union
EAC (Eurasian Conformity) Customs Union of Russia, Belarus and Kazakhstan Declaration of conformity with the technical requirements of the Customs Union (TR CU).
IEC 61131-2
The S7-1500R/H redundant system meets the requirements and criteria of standard IEC 61131-2, excluding the requirements set out in sections 11 to 14 of the standard (Programmable logic controllers, part 2: Equipment requirements and tests).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
301
Technical specifications 14.1 Standards and Approvals
IEC 61010-2-201
The S7-1500R/H redundant system fulfills the requirements and criteria of standard IEC 61010-2-201 (Safety requirements for electrical equipment for measurement, control, and laboratory use Part 2-201: Particular requirements for control equipment).
PROFINET standard
The PROFINET interfaces of the redundant S7-1500R/H system are based on the standard IEC 61158 Type 10.
Marine approval
Classification societies: ABS (American Bureau of Shipping) BV (Bureau Veritas) DNV- GL (Det Norske Veritas - Germanischer Lloyd) LRS (Lloyds Register of Shipping) Class NK (Nippon Kaiji Kyokai) KR (Korean Register of Shipping) CCS (China Classification Society)
Industrial use
The S7-1500R/H redundant system is designed for use in industrial environments. It meets the following standards for this type of use:
Requirements on emission EN 61000-6-4: 2007 + A1: 2011
Requirements on immunity EN 61000-6-2: 2005
Use in mixed areas
Under certain circumstances, you can use the S7-1500R/H redundant system in a mixed area. A mixed area is used for residential purposes and for commercial operations that do not significantly impact on residents.
If you use the S7-1500R/H redundant system in a mixed area, you must ensure that radio interference emission complies with the limit classes of the technical standard EN 61000-6-3. Suitable measures for observing these limits for use in a mixed area are, for example:
Installation of the S7-1500R/H redundant system in grounded control cabinets
Use of noise filters in the supply cables
An individual acceptance test is also required.
302
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Technical specifications 14.2 Electromagnetic compatibility
Use in residential areas
Note S7-1500R/H redundant system not intended for use in residential areas The S7-1500R/H redundant system is not intended for use in residential areas. Using the S7-1500R/H redundant system in residential areas can affect radio and television reception.
Reference
The certificates for the identifiers and approvals can be found in Siemens Industry Online Support on the Internet (http://www.siemens.com/automation/service&support).
14.2
Electromagnetic compatibility
Definition
Electromagnetic compatibility (EMC) is the ability of an electrical installation to function satisfactorily in its electromagnetic environment, without affecting that environment.
The S7-1500R/H redundant system also meets the requirements of EMC legislation for the European Single Market. This is dependent on the S7-1500R/H redundant system complying with the requirements and guidelines relating to electrical equipment.
EMC in accordance with NE21
The S7-1500R/H redundant system meets the EMC specifications of NAMUR guideline NE21.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
303
Technical specifications 14.2 Electromagnetic compatibility
Pulse-shaped disturbances
The table below shows the electromagnetic compatibility of the S7-1500R/H redundant system with regard to pulse-shaped disturbances.
Table 14- 1 Pulse-shaped disturbances
Pulse-shaped disturbance
Test voltage
Corresponds with degree of severity
Electrostatic discharge in accordance Air discharge: ±8 kV
3
with IEC 61000-4-2.
Contact discharge: ±6 kV
3
Burst pulses (high-speed transient dis- ±2 kV (power supply cable)
3
turbances) in accordance with
±2 kV (signal cable > 30 m)
3
IEC 61000-4-4.
±1 kV (signal cable < 30 m)
High-energy single pulse (surge) in accordance with IEC 61000-4-5
External protective circuit required (not for 230 V modules) You can find more information in the Designing interference-free controllers function manual.
· Asymmetric coupling
±2 kV (power supply cables) DC with protective elements
3
±2 kV (signal/data line only > 30 m), with protective elements
· Symmetric coupling
±1 kV (power supply cable) DC with protective elements
±1 kV (signal/data line only > 30 m), with protective elements
Sinusoidal disturbances
The following table shows the electromagnetic compatibility of the S7-1500R/H redundant system with respect to sinusoidal disturbances (RF radiation).
Table 14- 2 Sinusoidal disturbances with RF radiation
RF radiation in accordance with IEC 61000-4-3/NAMUR 21
Electromagnetic RF field, amplitude-modulated
80 to 1000 MHz; 1.4 to 2 GHz
2.0 GHz to 6 GHz
10 V/m
1 V/m
80 % AM (1 kHz)
Corresponds with degree of severity
3
304
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Technical specifications 14.2 Electromagnetic compatibility
The following table shows the electromagnetic compatibility of the S7-1500R/H redundant system with respect to sinusoidal disturbances (RF coupling).
Table 14- 3 Sinusoidal disturbances with RF coupling
RF coupling in accordance with IEC 61000-4-6
from 10 kHz 10 Vrms 80 % AM (1 kHz) 150 source impedance
Corresponds with degree of severity
3
Emission of radio interference
Interference emission of electromagnetic fields in accordance with EN 55016
Table 14- 4 Interference emission of electromagnetic fields
Frequency 30 MHz to 230 MHz 230 MHz to 1000 MHz From 1 GHz to 3 GHz From 3 GHz to 6 GHz
Interference emission < 40 dB (µV/m) QP < 47 dB (µV/m) QP < 76 dB (µV/m) P < 80 dB (µV/m) P
Measuring distance 10 m 10 m 3 m 3 m
Interference emission via the AC power supply in accordance with EN 55016.
Table 14- 5 Interference emission via the AC power supply
Frequency 0.15 MHz to 0.5 MHz
0.5 MHz to 30 MHz
Interference emission < 79 dB (µV) Q < 66 dB (µV) M < 73 dB (µV) Q < 60 dB (µV) M
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
305
Technical specifications 14.3 Shipping and storage conditions
14.3
Shipping and storage conditions
Introduction
The S7-1500R/H redundant system meets the specifications regarding shippings and storage conditions pursuant to IEC 61131-2. The following information applies to modules that are shipped and/or stored in their original packaging.
Shipping and storage conditions for modules
Table 14- 6 Shipping and storage conditions
Type of condition Free fall (in shipping package) Temperature Barometric pressure
Relative humidity Sinusoidal vibrations in accordance with IEC 60068-2-6 Shock in accordance with IEC 60068-2-27
Permissible range 1 m from -40 °C to +70 °C From 1140 to 660 hPa (corresponds to an elevation of -1000 to 3500 m) 5% to 95%, without condensation 5 - 8.4 Hz: 3.5 mm 8.4 - 500 Hz: 9.8 m/s2 250 m/s2, 6 ms, 1000 shocks
14.4
Mechanical and climatic ambient conditions
Operating conditions
The S7-1500R/H redundant system is designed for stationary use in weather-proof locations. The operating conditions are based on the requirements of DIN EN 60721-3-3:1995 + A2:1997.
Class 3M3 (mechanical requirements)
Class 3K3 (climatic requirements)
306
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Technical specifications 14.4 Mechanical and climatic ambient conditions
Test of mechanical ambient conditions
The table below provides important information with respect to the type and scope of the test of ambient mechanical conditions.
Table 14- 7 Test of mechanical ambient conditions
Condition tested Vibration
Shock Continuous shock
Test Standard Vibration test according to IEC 60068-2-6 (Sinus)
Shock, tested according to IEC 60068-2-27
Shock, tested according to IEC 60068-2-27
Comment
Type of oscillation: Frequency sweeps with a rate of change of 1 octave/minute. 5 Hz f 8.4 Hz, constant amplitude 7 mm 8.4 Hz f 150 Hz, constant acceleration 2 g Duration of oscillation: 10 frequency sweeps per axis, along each of the 3 mutually perpendicular axes
Type of shock: Half-sine Shock intensity: 15 g max., duration 11 ms Direction of shock: 3 shocks each in (+/-) direction, along each of the 3 mutually perpendicular axes
Type of shock: Half-sine Shock intensity: 250 m/s2 peak value, 6 ms duration Direction of shock: 1000 shocks each in (+/-) direction, along each of the 3 mutually perpendicular axes
Reduction of vibrations
If the S7-1500R/H redundant system is exposed to severe shock or vibration, take appropriate measures to reduce the acceleration or the amplitude.
We recommend installing the S7-1500R/H redundant system on damping materials (for example, rubber-bonded metal mounting).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
307
Technical specifications 14.4 Mechanical and climatic ambient conditions
Climatic ambient conditions
The table below shows the permissible ambient climatic conditions for the S7-1500R/H redundant system:
Table 14- 8 Climatic ambient conditions
Ambient conditions
Temperature: horizontal mounting position: vertical mounting position:
Permissible range
0 °C to 60 °C 0 °C to 40 °C
Temperature variation Relative humidity Barometric pressure
10 K/h from 10 % to 95 % From 1140 to 795 hPa
Pollutant concentration
ANSI/ISA-71.04 severity level G1; G2; G3
Comments
To increase the service life of the display, the display switches off when the permitted operating temperature is exceeded.
At certain temperatures, the display switches off and on again. You can find more information in the technical specifications in the CPU manuals.
-
Without condensation
Corresponds to an altitude of -1000 m to 2000 m.
Note the following section "Using the redundant S7-1500R/H system over 2000 m above sea level".
-
Using the redundant S7-1500R/H system over 2000 m above sea level
Table 14- 9 R/H CPUs for maximum installation altitude 5000 m
CPU designation
CPU 1513R-1 PN CPU 1515R-2 PN CPU 1517H-3 PN
Article number
6ES7513-1RL00-0AB0 6ES7515-2RM00-0AB0 6ES7517-3HP00-0AB0
Version
FS01 or higher
Max. installation altitude
5,000 m
The maximum "operating height above sea level" is described in the technical specifications of the respective module. The product data sheets with daily updated technical specifications can be found on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td) at Industry Online Support. Enter the article number or the short description of the desired module on the website.
For altitudes > 2000 m, the following constraints apply to the maximum specified ambient temperature:
308
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Technical specifications 14.4 Mechanical and climatic ambient conditions
Restrictions of the specified maximum ambient temperature in reference to the installation altitude
Installation altitude -1000 m to 2000 m 2000 m to 3000 m 3000 m to 4000 m 4000 m to 5000 m
Derating factor for ambient temperature 1) 1.0 0.9 0.8 0.7
1) Base value for application of the derating factor is the maximum permissible ambient temperature in °C for 2000 m.
Note
· Linear interpolation between altitudes is permissible.
· The derating factors compensate for the decreasing cooling effect of air at higher altitudes due to lower density.
· Note the mounting position of the respective CPU in the technical specifications. The basis is the standard IEC 61131-2:2017.
· Make sure that the power supplies you use are rated for altitudes > 2000 m.
· The displays of the R/H CPUs are designed for an altitude of 3,000 m. When operating the device at altitudes > 3,000 m, you may experience problems with the CPU display in rare cases; however, these do not affect operation of the CPU.
· The synchronization modules for the CPU 1517H-3 PN (sync module 1 GB FO 10 m): 6ES7960-1CB00-0AA5, Sync module 1 GB FO 10 km: 6ES7960-1FB00-0AA5) are also released for 5000 m.
Effects on the availability of modules
The higher cosmic radiation present during operation at altitudes above 2000 m will also start to have an effect on the failure rate of electronic components (the so-called soft error rate). In individual cases this might result in a primary backup switchover.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
309
Technical specifications 14.5 Information on insulation tests, protection class, degree of protection and rated voltage
14.5
Information on insulation tests, protection class, degree of protection
and rated voltage
Insulation
The insulation is designed in accordance with the requirements of IEC 61010-2-201.
Note For modules with 24 V DC (SELV/PELV) supply voltage, electrical isolation is tested with 707 V DC (type test).
Pollution degree/overvoltage category in accordance with IEC 61131-2, IEC 61010-2-201
Pollution degree 2 Overvoltage category: II
Protection class according to IEC 61131-2, IEC 61010-2-201
The S7-1500R/H redundant system meets protection class I requirements and parts of protection classes II and III.
Degree of protection IP20
Degree of protection IP20 in accordance with IEC 60529 for all modules of the S7-1500R/H redundant system: Protection against contact with standard test fingers Protection against foreign objects with diameters in excess of 12.5 mm No protection against water
Rated voltage for operation
The S7-1500R/H redundant system works with the rated voltages and corresponding tolerances listed in the table below.
Table 14- 10 Rated voltage for operation
rated voltage 24 V DC
Tolerance range 19.2 V DC to 28.8 V DC1)
1) Static value: Generation as protective extra-low voltage with safe electrical isolation in accordance with IEC 61131-2 or IEC 61010-2-201.
310
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Technical specifications 14.6 Use of S7-1500R/H in Zone 2 hazardous area
14.6
Use of S7-1500R/H in Zone 2 hazardous area
Reference
You can find more information in the product information Use of modules in a Zone 2 Hazardous Area (http://support.automation.siemens.com/WW/view/en/19692172).
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
311
Dimension drawings
Mounting rail 160 mm
A
Figure A-1 Mounting rail 160 mm
Mounting rail 245 mm
Figure A-2 Mounting rail 245 mm 312
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Mounting rail 482.6 mm
Dimension drawings
Figure A-3 Mounting rail 482.6 mm
Mounting rail 530 mm
Figure A-4 Mounting rail 530 mm
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
313
Dimension drawings Mounting rail 830 mm
Figure A-5 Mounting rail 830 mm
Mounting rail 2000 mm
Figure A-6 Mounting rail 2000 mm
314
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Accessories/spare parts
B
General accessories
Table B- 1 General accessories
Designation Mounting rail · Mounting rail, 160 mm (with drill holes) · Mounting rail, 245 mm (with drill holes) · Mounting rail, 482 mm (with drill holes) · Mounting rail, 530 mm (with drill holes) · Mounting rail, 830 mm (with drill holes) · Mounting rail, 2000 mm (without drill holes) for cutting to length Standard rail adapter, 10 adapters, 10 hexagon socket screws and 10 washers PE connection element for mounting rail, 2000 mm (spare part), 20 units 4-pole connection plug for supply voltage (spare part), 10 units U connector (spare part), 5 units 70 mm display for CPU (spare part) 35 mm display for CPU (spare part) Power cable connector with coding element for power supplies (spare part), 10 units Synchronization module for CPU 1517H-3 PN · Sync module 1 GB FO 10 m · Sync module 1 GB FO 10 km Redundancy connections for CPU 1517H-3 PN · Sync cable FO 1 m (multimode fiber) · Sync cable FO 2 m (multimode fiber) · Sync cable FO 10 m (multimode fiber) · Sync cable FO up to 10 km (single-mode fiber) PROFINET cables for redundancy connections, PROFINET ring with CPU 1513R-1 PN, CPU 1515R-2 PN; PROFINET cables for PROFINET ring with CPU 1517H-3 PN · Industrial Ethernet FastConnect RJ45 plug 180 degrees, 1 unit · Industrial Ethernet FastConnect RJ45 plug 180 degrees, 10 units · Industrial Ethernet FastConnect RJ45 plug 90 degrees, 1 unit · Industrial Ethernet FastConnect RJ45 plug 90 degrees, 10 units
Article number
6ES7590-1AB60-0AA0 6ES7590-1AC40-0AA0 6ES7590-1AE80-0AA0 6ES7590-1AF30-0AA0 6ES7590-1AJ30-0AA0 6ES7590-1BC00-0AA0 6ES7590-6AA00-0AA0 6ES7590-5AA00-0AA0 6ES7193-4JB00-0AA0 6ES7590-0AA00-0AA0 6ES7591-1BA00-0AA0 6ES7591-1AA00-0AA0 6ES7590-8AA00-0AA0
6ES7960-1CB00-0AA5 6ES7960-1FB00-0AA5
6ES7960-1BB00-5AA5 6ES7960-1BC00-5AA5 6ES7960-1CB00-5AA5 On request
6GK1901-1BB10-2AA0 6GK1901-1BB10-2AB0 6GK1901-1BB20-2AA0 6GK1901-1BB20-2AB0
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
315
Accessories/spare parts
SIMATIC memory cards
Table B- 2 SIMATIC memory cards
Article number 6ES7954-8LCxx-0AA0 6ES7954-8LExx-0AA0 6ES7954-8LFxx-0AA0 6ES7954-8LL02-0AA0 6ES7954-8LPxx-0AA0 6ES7954-8LT02-0AA0
Capacity 4 MB 12 MB 24 MB 256 MB 2 GB 32 GB
Media converter (electrical optical)
Table B- 3 Media converter (electrical optical)
Article number SIMATIC NET Media Converter SCALANCE X101-1 RUGGEDCOM RMC-24-TXFXSM-XX Additional media converters
Article number 6GK5101-1BB00-2AA3 6GK6001-0AC01-0EA0 On request
Online catalog
You can find more article numbers for the S7-1500R/H redundant system on the Internet (https://mall.industry.siemens.com) in the online catalog and online ordering system.
316
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Safety symbols
C
C.1
Safety-related symbols for devices without Ex protection
The following table contains an explanation of the symbols located in your SIMATIC device, its packaging or the accompanying documentation.
Symbol
Meaning General warning sign Caution/Notice You must read the product documentation. The product documentation contains information about the potential risks and enable you to recognize risks and implement countermeasures. Read the information provided by the product documentation. ISO 7010 M002
Ensure the device is only installed by electrically skilled person. IEC 60417 No. 6182
Note that connected mains lines must be designed according to the expected minimum and maximum ambient temperature.
Note that the device must be constructed and connected in accordance with EMC regulations.
Note that a 230 V device can be exposed to electrical voltages which can be dangerous. ANSI Z535.2
Note that a device of Protection Class III may only be supplied with a protective low voltage according to the standard SELV/PELV. IEC 60417-1-5180 "Class III equipment"
Be aware that the device is only approved for the industrial field and only for indoor use.
Note that an enclosure is required for installing the device. Enclosures are considered:
· Standing control cabinet · Serial control cabinet · Terminal boxes · Wall enclosure
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
317
Safety symbols C.2 Safety-related symbols for devices with Ex protection
C.2
Safety-related symbols for devices with Ex protection
The following table contains an explanation of the symbols located in your SIMATIC device, its packaging or the accompanying documentation.
Symbol
Meaning
The assigned safety symbols apply to devices with Ex approval.
You must read the product documentation. The product documentation contains information about the potential risks and enable you to recognize risks and implement countermeasures.
Read the information provided by the product documentation. ISO 7010 M002 Ensure the device is only installed by electrically skilled person. IEC 60417 No. 6182 Observe the mechanical rating of the device.
Note that connected mains lines must be designed according to the expected minimum and maximum ambient temperature.
Note that the device must be constructed and connected in accordance with EMC regulations.
When the device is under voltage, note that it may not be installed or removed, or plugged or pulled.
Note that a 230 V device can be exposed to electrical voltages which can be dangerous. ANSI Z535.2
Note that a device of Protection Class III may only be supplied with a protective low voltage according to the standard SELV/PELV. IEC 60417-1-5180 "Class III equipment"
Be aware that the device is only approved for the industrial field and only for indoor use.
318
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Safety symbols C.2 Safety-related symbols for devices with Ex protection
Symbol
Meaning
For Zone 2 potentially explosive atmospheres, be aware that the device may only be used when it is installed in an enclosure with a degree of protection IP54.
For Zone 22 potentially explosive atmospheres, be aware that the device may only be used when it is installed in an enclosure with a degree of protection IP6x.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
319
Glossary
AR
The AR (Application Relation) covers all communication relations between IO controller and IO device (for example IO data, data records, interrupts).
Automation system
Programmable logic controller for the open-loop and closed-loop control of process chains in the process engineering industry and in manufacturing technology. The automation system consists of different components and integrated system functions according to the automation task.
Backup CPU
Role of a CPU in the S7-1500R/H redundant system. If the R/H system is in the RUNRedundant system state, the primary CPU controls the process. The backup CPU processes the user program synchronously and can take over process control if the primary CPU fails.
Baud rate
Data transmission rate indicates the number of bits transmitted per second (baud rate = bit rate).
Bit memory
Bit memory is a component of the system memory of the CPU for saving intermediate results. You access the bit memory through the user program bit by bit, byte by byte, word by word or double word by double word.
Bus
Joint transmission path to which all devices in a fieldbus system are connected.
Bus cable connector
The bus cable connector is the physical connection between bus node and bus cable.
Bus, self-assembling
The modules are lined up on the mounting rail. They are mechanically and electrically connected to each other with a U connector as they are swiveled into position. In this way the bus is extended with each module.
320
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Glossary
Code block
In SIMATIC S7, a code block contains part of the STEP 7 user program.
Configuration
Systematic arrangement of the individual modules (configuration).
Connection plug
The connection plug provides the physical connection between devices and the cable, for example.
Consistent data
Consistent data is data that belongs together in terms of content. Consistent data items are read and written together.
Counter
Counters are components of the system memory of the CPU. You can modify the content of the "counter cells" using STEP 7 instructions. Example: counting up or down).
CPU
The Central Processing Unit (CPU) contains the operating system and executes the user program. The user program is located on the SIMATIC memory card and is processed in the work memory of the CPU. The PROFINET interfaces on the CPU allow simultaneous communication with PROFINET devices, PROFINET controllers, HMI devices and PGs/PCs.
Crimping
Procedure whereby two components joined together, e.g. wire end sleeve and cable, are connected with one another through plastic strain.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
321
Glossary
Cycle control point
The cycle control point marks the end of a cycle and the start of the next cycle. The cycle time statistics and monitoring of the configured maximum cycle time start at the cycle control point.
Once the cycle control point has been reached, the CPU writes the process image output to the output modules, reads the state of the inputs in the input modules and then executes the first program cycle OB.
The following requirements must be met for reaching the cycle control point in redundant mode:
the primary CPU has reached the end of the cyclic program
the backup CPU has reached the end of the cyclic program and reported this to the primary CPU
if a minimum cycle time was configured, this is removed
Cycle time
The cycle time is the time a CPU requires to execute the cyclic user program once.
Cyclic interrupt
You will find further information in the glossary entry "Interrupt, cyclic".
Data block
Data blocks (DBs) are data areas in the user program that contain user data. Available data blocks:
Global data blocks that you can access from all code blocks.
Instance data blocks that are assigned to a specific FB call.
Device
A device can send, receive or amplify data via the bus, e.g. IO device via PROFINET IO.
Device names
Each IO device must have a unique device name. This is required to allow the IO controller to communicate with an IO device. Advantage: Device names are easier to manage than complex IP addresses.
In its delivery state, an IO device has no device name. A device name must be assigned using the PG/PC before an IO device can be addressed by an IO controller. Example: For transmission of the configuration data (e.g. the IP address) during startup or for exchanging user data in cyclic mode.
322
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Glossary
Diagnostics
Monitoring functions include: Detection, localization and classification of errors, faults and alarms. Display and further evaluation of errors, faults and alarms. They run automatically while the system is in operation. This increases the availability of systems by reducing commissioning times and downtimes.
Diagnostics buffer
The diagnostics buffer is a battery-backed memory area in the CPU where diagnostics events are stored in their order of occurrence.
Diagnostics interrupt
You will find further information in the glossary entry "Interrupt, diagnostics".
Distributed I/O system
System with I/O modules that are configured on a distributed basis, at a large distance from the CPU controlling them.
DP
Distributed I/O
Equipotential bonding
Electrical connection (equipotential bonding conductor) that brings the conductive parts of electrical equipment and other conductive parts to the same or approximately the same potential. This prevents disruptive or dangerous voltages arising between these parts.
Firmware of the CPU
In SIMATIC, a distinction is made between the firmware of the CPU and user programs.
The firmware is a software embedded in electronic devices. The firmware is permanently connected to the hardware in functional terms. It is usually saved in a flash memory, such as EPROM, EEPROM or ROM, and cannot be replaced by the user or only with special tools or functions.
User program: You will find further information in the glossary entry "User program".
Firmware update
You update the module firmware with a firmware update. A firmware update is, for example, run for new functions of a CPU or an interface module.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
323
Glossary
Function
A function (FC) is a code block with no static data. A function allows you to pass parameters in the user program. Functions are thus suited for programming frequently recurring complex functions, such as calculations.
Function block
A function block (FB) is a code block with static data. An FB allows you to pass parameters in the user program. Function blocks are thus suited for programming frequently recurring complex functions, such as closed-loop controls or operating mode selection.
Functional ground
Functional ground is a low-impedance current path between electric circuits and ground. It is not intended as a protective measure but rather, for example, for improvement of interference immunity.
Ground
Conductive ground whose electrical potential can be set equal to zero at any point. All interconnected, inactive parts of a piece of equipment.
Ground
Conductive ground whose electrical potential can be set equal to zero at any point. All interconnected, inactive parts of a piece of equipment.
Grounding
Grounding means connecting an electrically conductive part to a grounding electrode by means of a grounding system.
GSD file
As a Generic Station Description, this file contains all the properties of a PROFINET or PROFIBUS device that are necessary for its configuration.
Hardware interrupt
You will find further information in the glossary entry "Interrupt, hardware".
324
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Glossary
H-Sync forwarding
H-Sync Forwarding enables a PROFINET device with MRP to forward synchronization data (synchronization frames) of a S7-1500R redundant system only within the PROFINET ring.
In addition, H-Sync Forwarding forwards the synchronization data even during reconfiguration of the PROFINET ring. H-Sync Forwarding avoids a cycle time increase if the PROFINET ring is interrupted.
S7-1500R: H-Sync Forwarding is recommended for all PROFINET devices with only 2 ports in the PROFINET ring. All PROFINET devices with more than two ports (e.g. switch) in the PROFINET ring must support H-Sync forwarding.
S7-1500H: H-Sync forwarding is not relevant for redundant S7-1500H systems.
I/O module
Device of the distributed I/O that is used as an interface between the controller and the process.
Identification data
Information that is saved in modules, and that supports the user in reviewing the system configuration and locating hardware changes.
Instance data block
Each call of a function block in the STEP 7 user program is assigned a data block, which is automatically generated. Values of the input, output and in/out parameters are stored in the instance data block, as is the local block data.
Interface module
Module in the distributed I/O system. The interface module connects the distributed I/O system to the CPUs (IO controllers) via a fieldbus, and prepares the data of the I/O modules.
Interrupt
The operating system of the CPU distinguishes between various priority classes that control the execution of the user program. These priority classes include interrupts such as hardware interrupts. When an interrupt occurs, the operating system automatically calls an assigned organization block. You program the required reaction in the organization block (for example in an FB).
Interrupt, cyclic
The CPU generates a cyclic interrupt periodically within a parameterizable time grid and then processes the corresponding organization block.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
325
Glossary
Interrupt, diagnostics
Diagnostics-capable modules signal detected system errors to the CPU using diagnostics interrupts.
Interrupt, hardware
A hardware interrupt is triggered by interrupt-triggering modules following a certain event in the process. The hardware interrupt is signaled to the CPU. The CPU then processes the assigned organization block according to the priority of this interrupt.
Interrupt, time-delay
The time-delay interrupt is one of the program execution priority classes of SIMATIC S7. The time-delay interrupt is generated upon expiration of a timer started in the user program. The CPU then processes the corresponding organization block.
Interrupt, time-of-day
The time-of-day interrupt is one of the program execution priority classes of SIMATIC S7. The time-of-day interrupt is generated based on a specific date and time. The CPU then processes the corresponding organization block.
Interrupt, update
When it receives an update interrupt, the operating system calls the update interrupt OB. This may happen if you changed a parameter on a slot of a device.
IP address
The IP address is made up of four decimal numbers with a range of values from 0 through 255. The decimal numbers are separated by a dot (for example 192.162.0.0). The IP address consists of the following: Address of the network Device address (PROFINET interface of the IO controllers/IO devices)
Isolated modules
In the case of isolated input/output modules, the reference potentials of the control and load circuits are electrically isolated. Examples are optical isolators, relays or transformers. Input/output circuits can be connected to common potential.
Load current supply
The load current supply supplies the electric input and output circuits of the module.
326
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Glossary
MAC address
Each port of a PROFINET interface (PROFINET device) is assigned a unique global device identifier in the factory. This 6-byte long device identifier is the MAC address.
The MAC address is divided into:
3-byte manufacturer ID
3-byte device ID (consecutive number)
The MAC addresses are generally shown on the front of the device. Example: 08-00-06-6B-80-C0
Non-isolated modules
In the case of non-isolated input and output modules, the reference potentials of the control and load circuits are electrically connected.
NTP
The Network Time Protocol (NTP) is a standard for synchronizing clocks in automation systems via Industrial Ethernet. NTP uses the UDP connectionless network protocol.
Operating states
Operating states describe the behavior of a single CPU at any given time.
The primary CPU of the S7-1500R/H redundant system has the operating states STOP, STARTUP, RUN, RUN-Syncup and RUN-Redundant. The backup CPU has the operating states STOP, SYNCUP and RUN-Redundant.
Organization block
Organization blocks (OBs) form the interface between the operating system of the CPU and the user program. The organization blocks determine the order in which the user program is executed.
Pairing
Pairing is the mutual recognition of the CPUs of an S7-1500R/H system within a network. During pairing, the CPUs exchange information for mutual identification. Example: Checking for matching article number and firmware version. Successful pairing of two CPUs is a fundamental requirement for redundant operation.
Parameter
Tag of a STEP 7 code block:
Tag for setting the behavior of a module (one or more per module). In as-delivered state, every module has an appropriate basic setting, which you can change by configuring in STEP 7. There are static and dynamic parameters
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
327
Glossary
Parameters, dynamic
You can change dynamic module parameters during operation by calling an SFC in the user program, for example, limits of an analog input module.
Parameters, static
You cannot change static module parameters with the user program, but only with configuration in STEP 7, for example, the input delay of a digital input module.
PELV
Protective Extra Low Voltage = safety extra low voltage connected to protective earth
Pre-wiring
Wiring of the front connector in the "pre-wiring position" at the I/O module or before you insert the front connector into the I/O module.
Primary CPU
Role of a CPU in the S7-1500R/H redundant system. If the R/H system is in the RUNRedundant system state, the primary CPU controls the process. The backup CPU processes the user program synchronously and can take over process control if the primary CPU fails.
Primary-backup switchover
The primary CPU has the leading role within the redundant system. If the primary CPU fails following a fault, the backup CPU takes over the primary role and operates as the primary CPU.
Process image (I/O)
The CPU transfers the values from the input and output modules to this memory area. At the start of the cyclic program, the CPU transfers the process image output as a signal state to the output modules. The CPU then reads the signal states of the input modules into the process image inputs. The CPU then executes the user program.
Product version (PV) = Function version (FV)
The product version or function version provides information on the hardware version of the module.
PROFINET
PROcess FIeld NETwork, open Industrial Ethernet standard that continues PROFIBUS and Industrial Ethernet. A cross-manufacturer communication, automation, and engineering model defined by PROFIBUS International e.V. as an automation standard.
328
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Glossary
PROFINET IO
Communication concept for the realization of modular, distributed applications within the scope of PROFINET.
PROFINET IO controller
Device used to address connected IO devices (for example distributed I/O systems). The IO controller exchanges input and output signals with assigned IO devices. The IO controller is often the CPU on which the user program is running.
PROFINET IO device
Distributed field device that can be assigned to one or more IO controllers. Examples: Distributed I/O system, valve terminals, frequency converters, switches
Push-in terminal
Terminal for the tool-free connection of wires.
Redundancy connection/redundancy connections
The redundancy connection in an S7-1500R system is the PROFINET ring with MRP. The redundancy connection uses part of the bandwidth on the PROFINET cable for the synchronization of the CPUs. This bandwidth is therefore not available for PROFINET IO communication.
Unlike in S7-1500R, the PROFINET ring and redundancy connections in S7-1500H are separate. The two redundancy connections are fiber-optic cables that connect the CPUs directly over synchronization modules. The bandwidth on the PROFINET cable is available for PROFINET IO communication.
Redundancy ID
The load memory of both CPUs contains the project data of one as well as the other CPU. By assigning the redundancy IDs, you define which project data a CPU uses for itself.
Redundant systems
Redundant systems have multiple (redundant) instances of key automation components. Process control is maintained if a redundant component fails.
Reference potential
Potential from which the voltages of the circuits involved are observed and/or measured.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
329
Glossary
Restart
A warm restart deletes all non-retentive bit memory and resets non-retentive DB contents to the initial values from load memory. Retentive bit memory and retentive DB contents are retained. Program execution begins at the call of the first startup OB. A restart is triggered with CPU POWER OFF/POWER ON.
Retentivity
A memory area whose content is retained after power failure and after a STOP to RUN transition is retentive. The non-retentive area bit memory area, timers and counters are reset after a power failure and after a STOP to RUN transition. The non-retentive content of data blocks is reset to the initial values.
Row
All the modules attached to a mounting rail.
Runtime error
Error that occurs during execution of the user program in the automation system (thus not in the process).
SELV
Safety Extra Low Voltage = Safety extra-low voltage
SNMP
SNMP (Simple Network Management Protocol) is the standardized protocol for performing diagnostics on and assigning parameters to the Ethernet network infrastructure.
In the office setting and in automation engineering, devices from a wide range of vendors on the Ethernet support SNMP.
You can operate SNMP-based applications on the same network in parallel to applications with PROFINET.
The scope of supported functions varies depending on the device type. For example, a switch has more functions than a CP 1616.
330
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Glossary
Switch
PROFIBUS is a linear network. The communication nodes are linked by means of a passive cable - the bus.
By contrast, Industrial Ethernet consists of point-to-point connections: Each communication node is directly connected to exactly one communication node.
If you want to link a communication node to several communication nodes, you connect this communication node to the port of an active network component (the switch). You can connect other communication nodes (including switches) to the other ports of the switch. The connection between a communication node and the switch remains a point-to-point connection.
A switch thus has the task of regenerating and distributing received signals. The switch "learns" the MAC addresses of a connected PROFINET device or additional switches. The switch only forwards those signals that are intended for the connected PROFINET device or switch.
A switch has a specific number of connections (ports). You connect at most one PROFINET device or additional switch to each port.
Switched S1 device
The "Switched S1 device" function of the CPU enables operation of standard IO devices on the S7-1500R/H redundant system.
PROFINET communication runs on an AR between the primary CPU and the standard IO device. When replacing the primary CPU, the standard IO device is briefly disconnected from the S7-1500R/H redundant system until the new primary CPU has set up an AR to the standard IO device.
Synchronization module
You use the synchronization modules to create the redundancy connections between the CPUs of the redundant S7-1500H system. You need two synchronization modules per CPU that you connect in pairs with fiber-optic cables.
System states
The system states of the S7-1500R/H redundant system result from the operating states of the primary and backup CPU. The term system state is used as a simplified expression that refers to the operating states that occur simultaneously on both CPUs. The S7-1500R/H redundant system has the system states STOP, STARTUP, RUN-Solo, SYNCUP and RUNRedundant.
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
331
Glossary
System IP address
In addition to the device IP addresses of the CPUs, the redundant system S7-1500R/H supports system IP addresses:
System IP address for the X1 PROFINET interfaces of the two CPUs (system IP address X1)
System IP address for the X2 PROFINET interfaces of the two CPUs (system IP address X2)
You use the system IP addresses for communication with other devices (for example, HMI devices, CPUs, PG/PC). The devices always communicate over the system IP address with the primary CPU of the redundant system. This ensures that the communication partner can communicate with the new primary CPU (previously backup CPU) in the RUN-Solo system state after failure of the original primary CPU in redundant operation.
TIA Portal
Totally Integrated Automation Portal
The TIA Portal is the key to the full performance capability of Totally Integrated Automation. The software optimizes operating, machine and process sequences.
Time-delay interrupt
You will find further information in the glossary entry "Interrupt, time-delay".
Time-of-day interrupt
You will find further information in the glossary entry "Interrupt, time-of-day".
Timer
Timers are components of the system memory of the CPU. The operating system automatically updates the content of the "timer cells" asynchronously to the user program. STEP 7 instructions define the precise function of the timer cell (for example on-delay) and trigger its execution.
Update interrupt
You will find further information in the glossary entry "Interrupt, update".
User program
In SIMATIC, a distinction is made between user programs and the firmware of the CPU.
The user program contains all instructions, declarations and data that control a system or process. The user program is assigned to the redundant system. Structuring into smaller unit is supported.
Firmware: You will find further information in the glossary entry "Firmware of the CPU".
332
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
Glossary
Value status
The value status describes a specific signal state. The value status is constantly updated and cyclically transmitted by the field device as a quality statement together with the measured value.
Warm restart
You will find further information in the glossary entry "Restart".
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
333
Index
24 V DC supply, 118
A
Access levels Assign parameters, 178
Access levels for the CPUs, 177 Access protection for the display, 180 Access protection with the user program, 180 Accessories, 315 Ambient conditions
Climatic, 308 Mechanical, 307 Operating conditions, 306 Approvals, 298 CE, 299 cULus, 299 FM, 300 IEC 61010-2-201, 302 IEC 61131-2, 301 Asynchronous instructions, 169 Automation levels, 26
B
Backup types of the CPU data, 245 Breakpoints, 292
C
Cable length up to 10 km:, 134 up to 10 m:, 133
Cable temperature, 123 Causes and solutions, 224 CE approval, 299 Changes previous version of system manual, 13 Climatic ambient conditions, 308 Coding element, 125
Power connector, 279 Commissioning, 253
Check before power-on, 186 First power-on, 190 First power-on, requirements, 190 Identification data, 251, 253 Identification data - record structure, 253
334
Procedure, 187 Removing/plugging in a SIMATIC memory card, 188 Communication, 52 Configuration, 120, 145 Electrical, 122 Of the redundant system S7-1500H, 22, 32 Of the redundant system S7-1500H, 22, 32 Of the redundant system S7-1500R, 20, 31 Of the redundant system S7-1500R, 20, 31 On grounded reference potential, 119 Configuration versions of S7-1500R/H, 62 Configuring the NTP server, 249 Connecting communication interfaces to S71500H, 132 Connecting communication interfaces to S71500R, 129 Connecting PROFINET ring To S7-1500H, 143 To S7-1500R, 129 Connecting redundancy connections (fiber-optic cables) to S7-1500H, 139 Connecting the supply voltage, 124 Connection plug 4-pin, 36 Control, 292 Correct defect, 266 Exchange load current supply, 275 Replace coding element on mains connection plug, 279 Replace redundancy connection for S7-1500H, 272 Replacing IO device/Switch, 276 Replacing PROFINET cable, 274 Replacing PROFINET cables for S7-1500R, 270 Replacing R/H-CPUs, 269 Replacing redundant connections, 270 Replacing redundant connections for S71500H, 273 Replacing SIMATIC memory card, 274 Replacing the front cover, 278 Replacing the synchronization module for S71500H, 272 CPU, 35 Backup/restore contents, 245 Reading out service data, 296 Reset to factory settings, 286 CPU redundancy error, 161 cULus approval, 299
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
Index
D
Degree of protection IP20, 310 Device IP addresses, 52
Assigning, 146 Diagnostics, 45 Difference between synchronous/asynchronous instructions, 170 Differences between S7-1500R and S7-1500H, 24 Dimension drawing
Mounting rail, 312 Disable SYNCUP, 165 Display, 258
Basics, 258 Control keys, 262 Languages, 265 Menu, 260 Menu icons, 261 Password protection, 258 Upload image to display, 264 Downloading a project to the CPUs, 198 Downloading project data, 197
E
Electrical relationships, 122 Electromagnetic compatibility (EMC), 303
Disturbances, 304 Radio interference, 305 Electrostatic discharge, 304 Emergency address, 246 Emergency IP, 246 EMERGENCY-STOP devices, 117 Entering maintenance data, 252
F
Factory settings, 287 Failure scenarios, 67, 81 FAQs
Firmware update, 286 Removing a SIMATIC memory card, 189 Features of the S7-1500R/H redundant system, 30 Fiber-optic cable, 35 Connection, 132 Installation, 137 Selection, 133 Storage, 138 Firmware update, 281 Using STEP 7, 283 Via the SIMATIC memory card, 284 FM approval, 300
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
Force table, 294 Forcing, 292
G
Galvanic isolation, 122 Grounded extra-low-voltage, 119 Grounded infeed, 119 Grounding, 107
Configuration on grounded reference potential, 119 Overview of the CPU, 121
H
Hardware Requirements, 58 Restrictions, 60
Hardware restrictions, 60 H-CPU
Installing, 116 Uninstalling, 116 HMI devices Connecting, 100 Use, 99 HMI devices, 54 H-Sync Forwarding, 39
I
I&M data Read, 251
Identification data Record structure, 253
IEC 60204, 117 IEC 61010-2-201, 302 IEC 61131-2, 301 Infeed
grounded, 119 Installation
Basics, 102 DIN rail adapter, 108 Load current supply, 114 Mounting rail, 104, 106 R/H-CPU, 116 Installation position, 102 Installation rules, 103 Installing the standard rail adapter, 108 Instructions not supported, 157 Insulation, 310
335
Index
K
Know-how protection, 180 Know-how protection for blocks
Changing, 183 Removing, 183 Setting up, 181
L
Languages Display, 265
LED flashing test, 295 Lightning protection, 118 Line voltage, 117 Load current supply, 36
Connecting a CPU, 128 Installing, uninstalling, 114 Loss of redundancy Response of OB 72 and OB 86, 161 Loss of redundancy, 235
M
MAC addresses, 52 Maintenance, 266
Firmware update, 281 Reading out service data, 296 Reset to factory settings, 287 Test functions, 290 Maximum configuration, 98 Media converter (electrical optical), 316 Media redundancy (MRP), 38 Assigning MRP roles, 151 Memory reset Automatic, 242 Basics, 241 Manual, 243 Minimum clearances, 103 Mounting rail, 34, 102, 104 Attaching the protective conductor, 107 Dimension drawing, 312 Drill holes, 105 Fastening, 105 Installation, 106 Length, 105
N
NTP procedure, 248
336
O
OB 72, 161 OB 86, 161 OBs
Event source, 164 Priorities and runtime behavior, 164 Opening know-how protected blocks, 182 Operating mode Changing, 239 Configuring startup behavior, 210 Displaying, 239 RUN, 212 RUN-Redundant, 213 Run-Syncup, 212 STARTUP, 208 STOP, 211 SYNCUP, 211 Operating principle of the S7-1500H redundant system, 22 Operating principle of the S7-1500R redundant system, 20 Operating state transitions, 226 Overall configuration, 121 Overview Components of an S7-1500R/H, 34 Grounding the CPU, 121 System and operating states, 207 Overview of the CPU technical specifications, 37
P
Pairing, 191 Password provider, 180 PE connection element, 34 PELV
Grounded extra-low-voltage, 119 PID control, 49 PID controller, 49 Plant components, 26 PLC tag table, 294 Pollution degree, 310 Power supply, 55 Process image
Inputs and outputs, 153 Process image partition
Update in the user program, 155 PROFINET cable, 35 Program execution, 156 Program status, 291 Project languages, 247 Project tree, 152
S7-1500R/H redundant system
System Manual, 11/2019, A5E41814787-AB
Index
PRONETA, 57 Protection, 176, 181, 184
Access levels, 177 Against electrical shock, 118 Behavior of a password-protected CPU, 179 Know-how protection, 181 Mechanical locking, 184 Protection against external electrical influences, 118 Protection class, 310 Protection functions, 44
R
R/H-CPU Accessories, 315 Configuration versions, 62 Display, 258 Hardware configuration, 98 Memory reset, 241 Reference potential, 120 Replacing, 269
Rack failure, 161 Radio interference, 303, 305 rated voltage, 310 R-CPU
Installing, 116 Uninstalling, 116 Redundancy, 38 Failure, 67 Redundancy IDs Assigning, 194 Reading, 195 Replacing, 195 Redundant system startup, 208 Reference potential of the controller, 120 Removing/plugging in a SIMATIC memory card CPU response after a SIMATIC memory card is removed or inserted, 189 Replacement of components, 266 Coding element on power plug, 279 Front cover, 278 IO device/switch, 276 Load current supply, 275 PROFINET cable, 274 PROFINET cables for S7-1500R, 270 R/H-CPU, 269 Redundancy connection for S7-1500H, 272 Redundancy connections, 270 Redundancy connections at S7-1500H, 273 SIMATIC memory card, 274 Synchronization module for S7-1500H, 272
Requirements Hardware, 58 Software, 60
Restrictions Software, 61
S
S7 routing, 54 S7-1500 hardware configuration
Slots, 98, 99 S7-1500R/H
Overview of components, 34 S7-1500R/H communication options, 54 S7-1500R/H components, 34 Safe electrical isolation, 119 Scalability, 27 SELV
Safe electrical isolation, 119 Service data, 296
Read via SIMATIC memory card, 297 Reading, 296 Save via STEP 7, 296 Shipping conditions, 306 Short-circuit and overload protection, 120 SIMATIC memory cards, 316 SINETPLAN, 57 Software, 56 Requirements, 60 Restrictions, 61 Spare parts, 315 Specific application, 117 Specific blocks, 156 Standard rail adapter, 34 Standards, 298 Start events, 160 Storage conditions, 306 Switched S1 device, 42 Synchronization modules, 35, 132 Plug and pull, 141 Uninstalling, 142 SYNCUP system state, 213, 224 Cancel, 222 Preparations, 215 Requirements, 213 Sequence of events, 215 System diagnostics, 46 System differences between S7-1500R and S71500H, 24 System IP address Assigning, 147 System IP address, 52
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
337
Index
System redundancy, 41 System state
Changing, 240 Displaying, 240 System state transitions, 225
T
Technical specifications Climatic ambient conditions, 308 CPU S7-1500R/H, 37 Electromagnetic compatibility (EMC), 303 Shipping and storage conditions, 306 Standards and Approvals, 298
Test functions, 290 Test voltage, 310 TIA Portal, 56 Time synchronization, 248 Tooltips, 263 Trace, 47 Trace function, 295
U
Uninstalling Load current supply, 115 R/H-CPU, 116
Use, 15 From HMI devices, 99 In hazardous area Zone 2, 311 in industrial environments, 302 in mixed areas, 302 in residential areas, 303
User program, 156 Download in the RUN-Redundant system state, 202 Download in the RUN-Solo system state, 202
Using PROFINET devices, 99
W
Watch tables, 293 Wiring, 117
General rules, 117 HMI devices, 100 Load current supply, 125 Supply voltage at the R/H-CPUs, 124 Without tools, 124 Wiring rules, 123
338
S7-1500R/H redundant system System Manual, 11/2019, A5E41814787-AB
SIMATIC S7-1500 S7-1500R/H redundant system
Getting Started
_In_tro_d_uc_tio_n_to_t_he_e_xa_m_p_le____1_ _Co_n_fig_u_ra_tio_n___________2_ _Pr_og_ra_m_m_in_g___________3_ _Co_m_m_is_si_on_in_g__________4_ _Ad_d_itio_n_al_in_fo_rm_a_tio_n_______5_
10/2018
A5E44910930-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E44910930-AA 09/2018 Subject to change
Copyright © Siemens AG 2018. All rights reserved
Table of contents
1 Introduction to the example ..................................................................................................................... 4
1.1
Security information ..................................................................................................................5
1.2
Structure and task of the example ............................................................................................6
1.3
Procedure ...............................................................................................................................11
1.4
Requirements .......................................................................................................................... 12
1.5
Wiring diagram for a tunnel section ........................................................................................13
2 Configuration ........................................................................................................................................ 19
2.1
Configuring the assembly .......................................................................................................19
2.2
Configuring H CPUs................................................................................................................22
2.3
Configuring ET 200SP ............................................................................................................25
2.4
Configuring HMI devices.........................................................................................................30
3 Programming ........................................................................................................................................ 34
4 Commissioning ..................................................................................................................................... 48
5 Additional information............................................................................................................................ 51
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
3
Introduction to the example
1
Redundant automation systems are used in practice to achieve greater availability. In redundantly operated systems, failure or malfunction of individual automation components must not impede the operation of the plant.
S7-1500R/H redundant system
For the S7-1500R/H redundant system, the CPUs are duplicated, in other words redundant. The two CPUs process the same project data and the same user program in parallel. The two CPUs are synchronized over redundancy connections. If one CPU fails, the other CPU maintains control of the process.
Basic knowledge required
The Getting Started guides you through the configuration and programming of an S7-1500H redundant system using a concrete example. The following knowledge is required in order to understand the Getting Started:
General knowledge of automation technology
Knowledge of requirements for high availability of automation systems
Knowledge of the engineering system STEP 7 V15.1
WARNING Personal injury and damage to property may occur.
The S7-1500 as a component of plants or systems is governed by specific standards and regulations, based on the relevant field of application. Please observe the applicable safety and accident prevention regulations such as IEC 60204-1 (general machine safety requirements).
The example in this Getting Started serves as an introduction to the configuration and programming of an S7-1500H redundant system. It cannot always and in every case be transferred to effective live operations. Before you do this, you are urgently advised to consult the current version of the system manual "SIMATIC S7-1500R/H redundant system" and the device manuals of the modules used. The warnings and other information there must be observed, even if they are not repeated in this Getting Started.
Failure to observe these regulations can result in serious injuries and damages to machinery and facilities.
S7-1500R/H redundant system
4
Getting Started, 10/2018, A5E44910930-AA
Introduction to the example 1.1 Security information
1.1
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (https://www.siemens.com/industrialsecurity).
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
5
Introduction to the example 1.2 Structure and task of the example
1.2
Structure and task of the example
Automation task light and fan control in a tunnel
The continuing increase in traffic volumes coupled with growing safety requirements demand state-of-the-art tunnel systems. At the same time, equipment requirements for these constructions are rising, especially when it comes to maximum safety and availability.
The example below comprises three subtasks:
Control of the safety ventilation as a function of the air pollution level in the tunnel
Control of the traffic lights and the barriers as a function of the air pollution level in the tunnel
Control of the lighting in the tunnel as a function of the illuminance of the outdoor light
Figure 1-1 Example Light and fan control tunnel
Control of the safety ventilation as a function of the air pollution level in the tunnel Fans are used in the tunnel to extract harmful exhaust gases and supply fresh air. Uninterrupted operation of the ventilation system is required to keep the concentration of pollutants below a set level. Constant availability must be ensured for the event that individual automation components fail, for example because of a fire in the tunnel. The S71500H redundant system with two redundant H-CPUs is used to ensure fan availability. Three fans ventilate the tunnel. Control of the traffic lights and the barriers as a function of the air pollution level in the tunnel The tunnel entries are controlled via two traffic lights. The traffic light control also requires higher availability for safety reasons. If the pollutant concentration exceeds a maximum limit for more than 2 minutes in a tunnel section, then the tunnel is blocked. Control of the lighting in the tunnel as a function of the illuminance of the outdoor light The abrupt transition between light and dark at the entry to the tunnel is compensated for by tunnel lighting in the various tunnel sections. Two light sensors measure the light intensity outside the tunnel. The light intensity of the entry lights in the tunnel is controlled accordingly. The interior lights in the tunnel are controlled by the prevailing daytime / nighttime.
S7-1500R/H redundant system
6
Getting Started, 10/2018, A5E44910930-AA
Introduction to the example 1.2 Structure and task of the example
Technology diagram
The technology diagram below shows the structure of the automation solution.
Figure 1-2
Tunnel lighting Fan Traffic lights Barriers Outdoor light sensors Turbidity sensors Air-quality sensors HMI devices H-CPUs IO devices for tunnel sections 1 to 3
Technology diagram
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
7
Introduction to the example 1.2 Structure and task of the example
Automation components of the example
The configuration consists of:
2 S7-1500 H-CPUs When a CPU fails in redundant operation, the other CPU maintains control over the
tunnel operation.
3 ET 200SP as IO devices in the PROFINET ring An ET 200SP (IO device) distributed I/O system is found in every tunnel section (1 to 3). Sensors and actuators are connected to each IO device for the following tasks: Measurement of the pollutant concentration and as a function thereof:
Control of the fan speed and air flow Control of the traffic lights and barriers Measurement of the light outside the tunnel: Control of the entry lights Control of the interior lights in the tunnel, depending on the day / night time.
2 Comfort Panels The Comfort Panels are used by operators as a control center for monitoring tunnel operation.
S7-1500R/H redundant system
8
Getting Started, 10/2018, A5E44910930-AA
Introduction to the example 1.2 Structure and task of the example
Principle of operation
Controlling the speed of the fans and controlling the traffic lights and barriers Every fan: has two speeds (stages), which are switched on or off depending on the measured
pollutant concentration. has 2 directions of rotation. Depending on whether pollution is measured, the fan must
blow or suck. The H-CPU measures the pollutant concentrations in the tunnel via analog input modules and air-quality sensors. If the pollutant concentration exceeds the maximum limit, the H-CPU responds in ET 200SP via digital output modules as follows: It increases the speed of the fan motors It switches the traffic light system to red after two minutes It closes the barriers after two minutes If the pollutant concentration falls below an average limit, the H-CPU responds in ET 200SP via digital output modules as follows: It switches the ventilation motors to stop It switches the traffic lights to green It opens the barriers
Controlling the lighting in the tunnel The H-CPU measures the light intensity outside and inside the tunnel using analog input modules. Depending on the outdoor light, digital output modules adjust the brightness of the entry lights in the tunnel to the optimum vision conditions. The digital output modules also control the interior lights in the tunnel, depending on the day / night time. The user program in the CPU specifies limits and controls the input and output modules of the ET 200SP. The Comfort Panels visualize the S7-1500H redundant system in an HMI screen. If required, the operator can switch to manual operation via the HMI screen and change limit values.
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
9
Introduction to the example 1.2 Structure and task of the example
S7-1500H versus S7-1500R
As an alternative to S7-1500H, you can use an S7-1500R redundant system for the solution to the automation task. In this example, the S7-1500H redundant system is used as it offers the following advantages for tunnel automation: much higher performance than S7-1500R with:
separate redundancy connections over fiber-optic cable high computing power a higher number of PROFINET devices can be used distance between the two H CPUs up to 10 km
Advantages and benefits of the solution
High availability of the system: If an H-CPU fails or is being maintained, the lighting and fan control continues to function. The tunnel does not need to be blocked.
Reliable monitoring and control of the tunnel facilities over large distances, up to 10 km between the two H-CPUs
Monitoring of the system and targeted information of the operating engineers in real time Signals are recorded and output directly in the ET 200SP distributed I/O systems in the
tunnel. There are no long cable runs.
S7-1500R/H redundant system
10
Getting Started, 10/2018, A5E44910930-AA
Introduction to the example 1.3 Procedure
1.3
Procedure
Tasks
Perform the following tasks for implementation of the example:
Table 1- 1 Procedure for tunnel automation
Step 1
2
Procedure Configure hardware in STEP 7: Configure the assembly with 2 H-CPUs, 3 ET 200SP stations with their I/O modules and 2 Comfort Panels.
Creating a user program in STEP 7:
Further information Section Configuring (Page 19)
Section Programming (Page 34)
· Program the user program in an organization block.
· You create an HMI screen.
3
Installing modules and wiring the assembly:
Redundant System S7-1500R/H
· Install all modules.
· Wire the load current supply, the modules in the PROFINET ring, the redundancy connections and the Comfort Panels.
(https://support.industry.siemens.com/cs/ ww/en/view/109754833) system manual
ET 200SP Distributed I/O System (https://support.industry.siemens.com/cs/
ww/en/view/58649293) system manual
Chapter Wiring diagram for a tunnel section (Page 13)
4
Commissioning the example:
Chapter Commissioning (Page 48)
· Insert the SIMATIC memory cards in the H-CPUs. · Switch on the load current supply and the CPUs.
· Assign redundancy IDs to the CPUs in the configuration on commissioning.
· Load the project data (hardware configuration and user program) to the CPUs.
· Check the LEDs and evaluate the information on the CPU displays.
· Test how the example works.
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
11
Introduction to the example 1.4 Requirements
1.4
Requirements
Requirements for the Example
The following hardware and software is available for processing the example:
Table 1- 2 Hardware/software requirements
Hardware/software
2 H-CPUs with synchronization modules and SIMATIC Memory Cards
Modules//Versions
· 2 identical 1517H-3 PN CPUs with identical article numbers, function versions and firmware version
· 4 synchronization modules for cables up to 10 km in length (6ES7960-1FB00-0AA5)
· 2 SIMATIC Memory Cards e.g. with 256 Mbyte capacity (6ES7954-8LL02-0AA0)
3 ET 200SP distributed I/O systems
2 ET 200SP for tunnel sections 1 and 3 each consisting of:
· 1 interface module IM 155-6 PN HF (6ES7155-6AU01-0CN0), FW version V4.2 or later (with system redundancy S2)
· 4 digital output modules:
2 DQ 4x24VDC/2A ST each with a light-colored BaseUnit, BU type A0: BU15P16+A0+2D
1 DQ 4x24VDC/2A ST with a dark-colored BaseUnit, BU type A0: BU15-P16+A0+2B
1 DQ 4x24..230VAC/2A HF with a light-colored BaseUnit, BU type U0: BU20P16+A0+2D
· 1 analog input module: AI 4xU/I 2-wire ST with a dark-colored BaseUnit, BU type A0: BU15-P16+A0+2B
· 1 server module 1 ET 200SP for tunnel section 2 consisting of:
· 1 interface module IM 155-6 PN HF (6ES7155-6AU01-0CN0), FW version V4.2 or later (with system redundancy S2)
· 2 digital output modules:
1 DQ 4x24VDC/2A ST with a light-colored BaseUnit, BU type A0: BU15-P16+A0+2D
1 DQ 4x24..230VAC/2A HF with a light-colored BaseUnit, BU type U0: BU20P16+A0+2D
· 1 analog input module: AI 4xU/I 2-wire ST with a dark-colored BaseUnit, BU type A0: BU15-P16+A0+2B
· 1 server module
2 HMI devices
2 load current supplies for S7-1500R/H
3 load current supplies for ET 200SP
Accessories
PC/PG with EngineeringSystem
TP1900 Comfort PM 190 W 120/230 V AC
Load current supplies with 24 V DC output voltage (with safe electrical isolation)
1 mounting rail, 2 fiber-optic cables, PROFINET cables PG/PC with Ethernet interface and the following correctly installed software package: · SIMATIC STEP 7 Professional, V15.1 or later
Switch for the connection of SCALANCE X-204IRT the PG/PC
S7-1500R/H redundant system
12
Getting Started, 10/2018, A5E44910930-AA
Introduction to the example 1.5 Wiring diagram for a tunnel section
Additional requirement
The PG/PC is connected to a switch via the PROFINET interface. The switch is a device in the PROFINET ring during commissioning.
Installing modules and wiring the assembly
You can set up and wire the hardware before or after configuration and programming of the user program.
You can find additional information on installation and wiring of an ET 200SP in the ET 200SP distributed I/O system (https://support.industry.siemens.com/cs/ww/en/view/58649293) system manual .
The wiring diagram for an ET 200SP for a tunnel section can be found in the section Wiring diagram for a tunnel section (Page 13).
The procedure for installation and wiring of an S7-1500R/H redundant system is available in the S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833) system manual.
Conventions
Steps and settings which are specific for configuration and programming of an S7-1500H redundant system will be dealt with in detail in the following sections. Procedures which you are already familiar with from configuring and programming a SIMATIC S7-1500 will only be briefly outlined.
1.5
Wiring diagram for a tunnel section
Introduction
The figures below show the wiring of the I/O modules of an ET 200SP distributed I/O system for tunnel section 1 or 3.
When wiring the tunnel section 2, there is no wiring of the digital output modules for the traffic lights control and barrier control nor of the outdoor light sensor on the analog input module.
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
13
Introduction to the example 1.5 Wiring diagram for a tunnel section
Connecting the supply voltage, PROFINET cables and grounding
The following figure shows the wiring of the supply voltage, the PROFINET cables and the grounding on the ET 200SP.
Interface module IM 155-6 PN HF (6ES7155-6AU01-0CN0 firmware version V4.2 and later)
Traffic light control: DQ 4x24VDC/2A ST digital output module with a light-colored BaseUnit BU15-P16+A0+2D (BU
type A0)
Barrier control: DQ 4x24VDC/2A ST digital output module with a dark-colored BaseUnit BU15-P16+A0+2B (BU
type A0)
Measuring the light intensity and air pollution level: 4xU/I 2-wire ST analog input module with a dark-colored Ba-
seUnit BU15-P16+A0+2B (BU type A0)
Fan control system: DQ 4x24VDC/2A ST digital output module with a light-colored BaseUnit BU15-P16+A0+2D
(BU type A0)
Light control system: DQ 4x24..230VAC/2A HF digital output module with a light-colored BaseUnit BU20-
P16+A0+2D (BU type U0)
Server module
Mounting rail grounded at PE
Load current supply with 24 V DC output voltage (with safe electrical isolation)
PROFINET cables for the PROFINET ring
Figure 1-3 Wiring diagram
S7-1500R/H redundant system
14
Getting Started, 10/2018, A5E44910930-AA
Introduction to the example 1.5 Wiring diagram for a tunnel section
Connecting traffic light control
The following figure shows the wiring of the traffic lights on the DQ 4x24VDC/2A ST digital
output module .
Figure 1-4 Wiring of the traffic lights
Connecting barrier control
The following figure shows the wiring of the barrier control on the DQ 4x24VDC/2A ST digital
output module .
The barrier is opened and closed via a three-phase motor. The direction of rotation of the three-phase motor is controlled via a reversing contactor: Open barrier Contactor K1 actuated Close barrier Contactor K2 actuated If the barriers have reached their respective end position, they automatically switch off via limit switches.
Figure 1-5 Wiring of the barrier control
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
15
Introduction to the example 1.5 Wiring diagram for a tunnel section Connecting sensors for light intensity and air pollution level
The following figure shows the wiring of the sensors for measuring the light intensity and air
pollution level on the AI 4xU/I 2-wire ST analog input module .
Figure 1-6 Wiring of sensors for light intensity and air pollution level
S7-1500R/H redundant system
16
Getting Started, 10/2018, A5E44910930-AA
Introduction to the example 1.5 Wiring diagram for a tunnel section
Connect light control function
The following figure shows the wiring of the fan control on the DQ 4x24VDC/2A ST digital
output module .
The direction of rotation of the fan (right/left) is controlled via a reversing contactor: Fan rotates clockwise Contactor K1 actuated Fan rotates counterclockwise Contactor K2 actuated The speed (high/low) of the fan is controlled via a Dahlander circuit: Fan low speed Contactor K5 actuated Fan high speed Contactors K3 and K4 actuated
Figure 1-7 Wiring of fan control
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
17
Introduction to the example 1.5 Wiring diagram for a tunnel section Connect light control function
The following figure shows the wiring of the light control on the DQ 4x24..230VAC/2A HF
digital output module .
The lamps are dimmed via the Phase angle control - Phase angle proportional function of the digital output mode: L1 Entry light L2 Interior light
Figure 1-8 Wiring of the traffic lights
S7-1500R/H redundant system
18
Getting Started, 10/2018, A5E44910930-AA
Configuration
2
2.1
Configuring the assembly
Introduction
Create a new project and add the CPU 1517H-3 PN and the 3 ET 200SP distributed I/O systems. Network the assembly to a PROFINET ring.
Add 2 HMI devices TP1900 Comfort to the assembly.
You do not configure the PM 190 W 120/230 V AC load current supplies.
Requirement
You have set the IP address of the PG/PC, 192.168.0.50 in the example.
Creating a project and assigning hardware
1. Create a new project in STEP 7. Give the project the name "S7-1500H_GS".
Figure 2-1 Creating a new project
2. Select "Configure a device" and then "Configure networks". The network view opens.
3. Select CPU 1517H-3 PN from the hardware catalog in the network view.
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
19
Configuration 2.1 Configuring the assembly
4. Drag and drop the CPU to the task window in the network view. Results: STEP 7 automatically creates both 1517H-3 PN CPUs for the redundant system. STEP 7 automatically assigns the MRP role "Manager (auto)" to the PROFINET interfaces X1 of both CPUs. STEP 7 displays both CPUs in the network view graphically.
Figure 2-2 CPUs in the network view
5. Select an ET 200SP interface module IM 155-6 PN HF (article number 6ES7155-6AU010CN0) from the hardware catalog.
6. Drag and drop the interface module to the task window in the network view.
7. Drag and drop 2 further IM 155-6 PN HF interface modules to the task window in the network view.
8. Select a SIMATIC Comfort Panel TP1900 Comfort from the hardware catalog as an HMI device. Recommendation: Configure the HMI devices with the HMI Device Wizard (Page 30).
9. Drag and drop the TP1900 Comfort to the task window in the network view.
10.Drag and drop a further TP1900 Comfort to the task window in the network view.
Results: The project has been created. The hardware components have been inserted. IP addresses for the PROFINET interfaces of the devices have been automatically assigned.
S7-1500R/H redundant system
20
Getting Started, 10/2018, A5E44910930-AA
Configuration 2.1 Configuring the assembly
Assign ET 200SP with system redundancy S2
To assign the ET 200SP distributed I/O systems to S7-1500H on a system-redundant basis, connect every IM 155-6 PN HF interface module to every CPU. To do so, proceed as follows: 1. Drag-and-drop a line between the PROFINET interface of IM 155-6 PN HF and
PROFINET interface X1 of the left-hand CPU. 2. Drag-and-drop a line between the PROFINET interface of IM 155-6 PN HF and
PROFINET interface X1 of the right-hand CPU. 3. Assign the two other IM 155-6 PN HF devices to the two CPUs in exactly the same way. Result: The distributed I/O system ET 200SP are connected to S7-1500H on a systemredundant basis.
Figure 2-3 ET 200SP assigned to S7-1500H on a system-redundant basis
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
21
Configuration 2.2 Configuring H CPUs
2.2
Configuring H CPUs
Introduction
You create two redundancy connections between the H-CPUs via fiber-optic cables using a total of four synchronization modules (two in each H-CPU). You replace the synchronization modules (for cables up to 10 km in length) in STEP 7.
STEP 7 automatically assigns an IP address to each PROFINET interface of a CPU. You can also assign the IP addresses manually. For PROFINET interface X1 of the CPUs, the IP addresses must be located in the same subnet. In the example you accept the preset IP addresses.
STEP 7 assigns default values for the minimum and maximum cycle times. Select the minimum scan cycle time so that the cyclic program does not have to be executed more frequently than your process requires.
S7-1500R/H redundant system
22
Getting Started, 10/2018, A5E44910930-AA
Configuration 2.2 Configuring H CPUs
Assigning synchronization modules to the H-CPUs
In STEP 7 synchronization modules for 10 m length are assigned to the H-CPUs (default setting). For the tunnel application, assign synchronization modules for cables up to 10 km in length (6ES7960-1FB00-0AA5) to the H-CPUs as follows: 1. Change to the device view of an H-CPU. 2. From the hardware catalog, drag and drop the synchronization module with the article
number 6ES7960-1FB00-0AA5 to the interface for a synchronization module of the HCPU. 3. The "Replace device- Synchronization module" dialog opens. Confirm the replacement with "OK".
Figure 2-4 Assigning a synchronization module to the H-CPU
Result: The four synchronization modules for cables up to 10 km in length have been assigned to the H-CPUs of the redundant system.
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
23
Configuration 2.2 Configuring H CPUs Setting the cycle monitoring time
The default values are displayed in the "Cycle" area of the CPU properties. 1. Set a maximum cycle time of 6000 ms and a minimum cycle time of 10 ms for the
example. 2. Adopt the presets for the other parameters.
Figure 2-5 Setting the cycle monitoring time Result: When you change the parameters described above for a CPU, the parameters are automatically adopted in STEP 7 for the other CPU of the redundant system.
S7-1500R/H redundant system
24
Getting Started, 10/2018, A5E44910930-AA
Configuration 2.3 Configuring ET 200SP
2.3
Configuring ET 200SP
Introduction
In the S7-1500H redundant system the devices communicate in a PROFINET ring via MRP.
Define the media redundancy role of the devices.
Assign the I/O modules for the various automation tasks in the three tunnel sections to the three ET 200SP distributed I/O systems.
Set the watchdog time for each ET 200SP. If you set a higher watchdog time, then a failure of the IO device on interruption of the PROFINET ring can be avoided.
Defining MRP role for ET 200SP in the PROFINET ring
Proceed as follows to define the media redundancy role for the ET 200SP distributed I/O systems as devices in the ring:
1. In the network view of STEP 7, select PROFINET interface X1 of one of the two CPUs.
2. In the Inspector window, navigate to "Properties" > "General" > "Advanced options" > "Media redundancy".
Figure 2-6 Media redundancy domain settings 3. Click the "Domain settings" button.
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
25
Configuration 2.3 Configuring ET 200SP
4. In the Inspector window, STEP 7 displays the properties of the MRP domain in which PROFINET interface X1 of the CPU is located. The CPU has the role "Manager (auto)" in a redundant system.
5. In the "MRP role" column of the "Devices" table, assign the MRP role "Client" to all other devices.
Figure 2-7 Assigning MRP roles to the ET 200SP
S7-1500R/H redundant system
26
Getting Started, 10/2018, A5E44910930-AA
Configuration 2.3 Configuring ET 200SP
Assign I/O modules to the ET 200SP and set parameters
1. Change to the device view of an IM 155-6 PN HF. 2. In the properties of the interface module in the "General" area, assign "Section1" as the
name for tunnel section 1. 3. Select the following modules in succession from the hardware catalog. Assign the
modules to the interface module from slot 1 to 6: DQ 4x24VDC/2A ST (for traffic lights) DQ 4x24VDC/2A ST (for barrier) AI 4xU/I 2-wire ST (for outdoor light, indoor light and air-quality sensors) DQ 4x24VDC/2A ST (for fans) DQ 4x24..230VAC/2A HF (for tunnel lighting) 1 server module (as termination of the configuration)
Figure 2-8 Assigning ET 200SP I/O modules
4. Double-click on the 3rd module DQ 4x24VDC/2A ST in the configuration (for fan). 5. In the module properties "General" > "Potential group", select "Enable new potential
group (light-colored BaseUnit)". 6. Double-click on the module DQ 4x24..230VAC/2A HF (for tunnel lighting). 7. In the module properties "General" > "Potential group", select "Enable new potential
group (light-colored BaseUnit)". 8. Double-click on the module AI 4xU/I 2-wire ST.
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
27
Configuration 2.3 Configuring ET 200SP
9. In the module properties, set the measurement type "Voltage" and measuring range "0..10 V" under "Inputs" for channels 0 to 2 in each case.
Figure 2-9 Setting the measurement type and measuring ranges 10.Set the measurement type to "Disabled" for channel 3. 11.For the module DQ 4x24..230VAC/2A HF retain the defaults, in particular the "Phase angle control - phase angle proportional" mode. 12.Proceed in exactly the same way according to steps 1 to 11 for tunnel section 3. For tunnel section 2, the two digital output modules DQ 4x24VDC/2A ST for barrier and traffic lights control are not required. Result: The ET 200SP I/O modules are fully configured for the tunnel application.
S7-1500R/H redundant system
28
Getting Started, 10/2018, A5E44910930-AA
Configuration 2.3 Configuring ET 200SP
Setting the watchdog time
Do not enter the watchdog time directly, but as "Accepted number of update cycles when IO data is missing". The resulting watchdog time is automatically calculated from the "Accepted number of update cycles when IO data is missing". 1. Select an interface module IM 155-6 PN HF. 2. Navigate to "Properties" > "Advanced options" > "Real time settings" > "IO cycle" >
"Watchdog monitoring". 3. Set the update cycles for the example to 112 (224 ms).
Figure 2-10 Setting the watchdog time
4. Follow steps 1. to 3. for the other two interface modules IM 155-6 PNHF (tunnel sections 2 and 3).
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
29
Configuration 2.4 Configuring HMI devices
2.4
Configuring HMI devices
Introduction
Assign names for the two HMI devices. Connect the HMI devices to the redundant system as follows: Network the HMI devices with an H-CPU in each case. Configure two HMI connections. Assign the system IP address of a PROFINET interface of the H-CPU or Use the device IP address of the respective PROFINET interface of the two H-CPUs
HMI device wizard Recommendation: Configure the HMI devices with the HMI Device Wizard. The HMI device wizard will guide you through each dialog step by step and help you set up an HMI device. The HMI device wizard will automatically start when you create a new HMI device in your project via the project navigation.
Connection via a device IP address: When connecting via the device IP address, the HMI device always communicates with the connected CPU. Communication is independent of the system state. The connected CPU then synchronizes the data with the other CPU. Requirements: Each HMI device is connected to a CPU via a separate subnet. In the example, the TP1900 Comforts communicate in each case via the devices IP address of the PROFINET interface with the directly connected CPU.
Assigning names for HMI devices
1. Select the left-hand TP1900 Comfort in the network view. 2. Change to the device view. 3. In the properties in the "General" area, assign the name "HMI left". 4. Assign the name "HMI right" for the TP1900 Comfort of the CPU on the right.
S7-1500R/H redundant system
30
Getting Started, 10/2018, A5E44910930-AA
Configuration 2.4 Configuring HMI devices
Setting up HMI connections
Connect the HMI devices to the CPUs via separate PROFINET subnets. 1. Using drag-and-drop, draw a line between the PROFINET interface X1 of the "HMI left"
and the PROFINET interface X2 of the left-hand CPU. 2. Using drag-and-drop, draw a line between the PROFINET interface X1 of the "HMI right"
and the PROFINET interface X2 of the right-hand CPU. Result: The HMI devices are networked with the CPUs.
Figure 2-11 HMI devices networked with CPUs
3. In the network view, click on "Connections". This activates connection mode. 4. Using drag-and-drop, draw a line between the networked PROFINET interfaces of "HMI
left" and the left-hand CPU. The "Connection partners" list opens.
Figure 2-12 Assign HMI connection_1 connection partner
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
31
Configuration 2.4 Configuring HMI devices
5. In the "Connection partner" list, select the CPU "PLC_1". 6. Using drag-and-drop, draw a line between the networked PROFINET interfaces of "HMI
right" and the right-hand CPU. The "Connection partners" list opens. 7. In the "Connection partner" list, select the CPU "PLC_2". Result: You have set up the HMI connections from the HMI devices TP1900 Comfort to the CPUs.
Figure 2-13 HMI connections set up
S7-1500R/H redundant system
32
Getting Started, 10/2018, A5E44910930-AA
Configuration 2.4 Configuring HMI devices
Setting devices IP addresses for the HMI connections
Change the IP addresses of the PROFINET interfaces of the HMI devices and the CPUs for the PROFINET subnets 2 and 3 (PN/IE_2/3). 1. Select the respective PROFINET interface of the device in the network view. 2. Change the IP address into a valid one in the subnet in the properties in the "Ethernet
addresses" area.
Figure 2-14 IP address for HMI connection to "HMI left" changed The table below shows all the IP addresses used for the example:
Table 2- 1 IP addresses used in the example
PROFINET interface PG/PC X1 at CPU left X1 at CPU right at ET 200SP "section 1" at ET 200SP "section 2" at ET 200SP "section 3" X2 at CPU left X1 at HMI left X2 at CPU right X1 at HMI right
Subnet PN/IE1 PN/IE1 PN/IE1 PN/IE1 PN/IE1 PN/IE1 PN/IE_2 PN/IE_2 PN/IE_3 PN/IE_3
IP address 192.168.0.50 192.168.0.1 192.168.0.2 192.168.0.3 192.168.0.4 192.168.0.5 192.168.2.1 192.168.2.2 192.168.3.1 192.168.3.2
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
33
Programming
3
Introduction
The example consists of three parts:
The air quality measurement and fan control in the tunnel
The traffic light and barrier control
The lighting control in the tunnel
The following section explains, based on flow diagrams, how the user program works.
Using an HMI screen, you can switch the fans and the lighting in the tunnel from automatic to manual mode and, if necessary, change limit values.
The user program runs on a CPU 1517H-3 PN with SIMATIC STEP 7 Professional, Version V15.1.
The executable user program for the example can be found in the annex to the entry on the Internet (https://support.industry.siemens.com/cs/us/en/view/109757712).
S7-1500R/H redundant system
34
Getting Started, 10/2018, A5E44910930-AA
Programming
States in the tunnel
The user program implements 3 states in the tunnel:
Everything is OK: The air quality sensors measure values within the permissible range: The traffic lights are green. The barriers are open. The motors for ventilation are in Stop mode, only the flow of air moves the fans.
The air quality sensors measure an increased concentration of pollutants between mean and maximum value: The fans immediately run at low level (slow) for at least 30 seconds. The direction of
rotation of the fans depends on the extent of the load in the tunnel section and the distance to the exit. The traffic lights are still green. The barriers are still open.
The air quality sensors measure a pollutant concentration above the maximum value: The fans run immediately at the highest level (fast) for at least 30 seconds. The direction
of rotation of the fans depends on the affected tunnel section and the distance to the exit. If the fans did not provide sufficient air within 2 minutes, the tunnel will be blocked:
The traffic lights are first yellow, then red. The barriers close.
Default tag table
The standard tag table contains the PLC tags for the 3 parts of the user program.
Name
Data type Address Description
Air quality measurement and fan control in tunnel section 1
sectionOneAirVisibility
Int
IW3
Input word for turbidity sensor in section 1
sectionOneAirPollution
Int
IW5
Input word for air quality sensor in section 1
sectionOneVentBlowRight Bool
Q2.0
Output bit for clockwise rotation fan in section 1
sectionOneVentDrawLeft
Bool
Q2.1
Output bit for anticlockwise rotation fan in section 1
sectionOneVentSlow
Bool
Q2.2
Output bit for low speed fan in section 1
sectionOneVentFast
Bool
Q2.3
Output bit for high speed fan in section 1
Traffic light and cabinet control in tunnel section 1
section1TrafficLightRed
Bool
Q0.0
Output bit for red traffic light in section 1
section1TrafficLightYellow Bool
Q0.1
Output bit for yellow traffic light in section 1
sectionOneTrafficLightGreen Bool
Q0.2
Output bit for green traffic light in section 1
sectionOneBarrierUp
Bool
Q1.0
Output bit for barrier in section 1
sectionOneBarrierDown
Bool
Q1.1
Output bit for barrier in section 1
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
35
Programming
Name
Data type Address Description
Lighting control in tunnel section 1
sectionOneLuminance
Int
IW1
Input word for outdoor light sensor in section 1
sectionOneLightEntry
Word
QW21
Output word for brightness of the entry light in section 1
sectionOneLightPassage
Word
QW23
Output word for brightness of the interior luminance in section 1
Air quality measurement and fan control in tunnel section 2
sectionTwoAirVisibility
Int
IW21
Input word for turbidity sensor in section 2
sectionTwoAirPollution
Int
IW23
Input word for outdoor light sensor in section 2
sectionTwoVentBlowRight Bool
Q6.0
Output bit for clockwise rotation fan in section 2
sectionTwoVentDrawLeft
Bool
Q6.1
Output bit for anticlockwise rotation fan in section 2
sectionTwoVentSlow
Bool
Q6.2
Output bit for low speed fan in section 2
sectionTwoVentFast
Bool
Q6.3
Output bit for high speed fan in section 2
Lighting control in tunnel section 2
sectionTwoRightLightPassage
Word
QW13
Output word for brightness of the right interior luminance in section 2
sectionTwoLeftLightPassage Word
QW15
Output word for brightness of the left interior luminance in section 2
Air quality measurement and fan control in tunnel section 3
sectionThreeAirVisibility
Int
IW11
Input word for turbidity sensor in section 3
sectionThreeAirPollution
Int
IW13
Input word for air quality sensor in section 3
sectionThreeVentBlowRight Bool
Q10.0
Output bit for clockwise rotation fan in section 3
sectionThreeVentDrawLeft Bool
Q10.1
Output bit for anticlockwise rotation fan in section 3
sectionThreeVentSlow
Bool
Q10.2
Output bit for low speed fan in section 3
sectionThreeVentFast
Bool
Q10.3
Output bit for high speed fan in section 3
Traffic light and cabinet control in tunnel section 3
sectionThreeTrafficLightRed Bool
Q4.0
Output bit for red traffic light in section 3
sectionThreeTrafficLightYel- Bool low
Q4.1
Output bit for yellow traffic light in section 3
sectionThreeTrafficLightGreen
Bool
Q4.2
Output bit for green traffic light in section 3
sectionThreeBarrierUp
Bool
Q8.0
Output bit for barrier in section 3
sectionThreeBarrierDown
Bool
Q8.1
Output bit for barrier in section 3
Lighting control in tunnel section 3
sectionThreeLuminance
Int
IW9
Input word for outdoor light sensor in section 3
sectionThreeLightPassage Word
QW29
Output word for brightness of the interior luminance in section 3
sectionThreeLightEntry
Word
QW31
Output word for brightness of the entry light in section 3
S7-1500R/H redundant system
36
Getting Started, 10/2018, A5E44910930-AA
Programming
Flow diagram of the user program OB30
The OB30 contains the user program of the tunnel application with three function blocks for: The fan control in the tunnel (FB10) The traffic light and barrier control (FB20) The lighting control in the tunnel (FB30) DB1 contains the HMI tags for the HMI screen.
Figure 3-1 Flow diagram for user program in OB30
Flow diagram for fan control in FB10
Turbidity measurement and air quality measurement: FB10 calls FB11. FB11 reports: The status of the air pollution level A pollutant concentration above the maximum value, which lasts longer than 2 minutes, to
block the tunnel
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
37
Programming
Ventilation in tunnel sections 1, 2 and 3: FB12 switches the speed and direction of rotation of the fans according to the status of the air pollution level (FB13) in the tunnel sections.
Figure 3-2 Flow diagram for fan control in FB10 38
S7-1500R/H redundant system Getting Started, 10/2018, A5E44910930-AA
Programming Flow diagram for traffic light and cabinet control FB20
FB20 calls FB21. Depending on the status of the air pollution level (FB13) in the tunnel sections, both traffic lights are set to green, yellow or red and the barriers are opened or closed.
Figure 3-3 Flow diagram for traffic light and cabinet control FB20
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
39
Programming
Flow diagram for lighting control in FB30
Control of the entry and interior lights in the tunnel sections. FB30 calls FB31. The user program controls the turn-on light according to the status of the outdoor light sensor. The user program controls the interior lights according to the respective time of day or enables manual mode: Daylight: 8:00 am to 6:00 pm Night light: 8:00 pm to 6:00 am Twilight light: 6:00 am to 8:00 am and 6:00 pm to 8:00 pm
Figure 3-4 Flow diagram for lighting control in FB30
S7-1500R/H redundant system
40
Getting Started, 10/2018, A5E44910930-AA
Programming
Display the status of the tunnel on the panel
An HMI screen is used to display the status of the tunnel on both Comfort Panels and to set parameters. The white fields are used to show the current measured values of the sensors. By double-clicking on the "Air parameters" and "Lighting parameters" buttons, you can display and change the parameter settings. By double-clicking on the symbols for lamp and motor, you access the automatic / manual operating mode. By double-clicking on a box for the sensors, you access the automatic / manual operating mode for specifying sensor values.
Figure 3-5 HMI overview screen of tunnel
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
41
Programming
Adjustable limits and parameters in the HMI screen
You can use the HMI screen to change the following limit values during user program runtime: The limit values for air pollution (carbon monoxide and turbidity) in the tunnel sections The light intensity limit value for the outdoor light sensors at the tunnel
You can use the HMI screen to change the following limit values in manual operation: Switch the fans in the tunnel sections to stop / slow / fast Change the clockwise / anticlockwise direction of rotation of the fans in the tunnel
sections Change the light intensity for the dimmer control of the lighting in the tunnel The lamps in the tunnel individually control day, twilight or night mode with different light
intensities For test purposes, set the values for the outdoor light, air quality and turbidity sensors
S7-1500R/H redundant system
42
Getting Started, 10/2018, A5E44910930-AA
Programming
Limit values for air pollution
The "Air parameters" button is used to display the air pollution limit values (carbon monoxide and turbidity) in the tunnel sections.
If a maximum value is exceeded after 2 minutes: The traffic lights are red The barriers close The fan sucks in / blows out air in the tunnel section at high speed, in the example in the
left direction (tunnel exit) In the example in the screen, the air quality sensor measures the value 28 in tunnel section 1, the maximum limit value is 25. In the example in the screen, the turbidity sensor measures the value 2. The value is below the mean, therefore the view is in the normal range.
As soon as a mean value is exceeded: The traffic lights are green The barriers remain open The fan sucks in / blows out air in the tunnel section at low speed You can change the mean and maximum value limits for each tunnel section.
Figure 3-6 HMI screen for air pollution limit value
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
43
Programming
The light intensity limit value for the exterior light sensors and light intensity
Using the "Lighting parameters" button you display the following: The limit value for outdoor light sensors The limit values for day / twilight / night light The light intensity in the tunnel according to the time of day The outdoor light sensors on the tunnel control the respective entrance light in the tunnel. The interior lights are controlled by the time of day. In the example, the outdoor light sensor measures 1, the night light setting (subdued light) is thus effective for the entry into the tunnel. You can change the limit values for the tunnel.
Figure 3-7 HMI screen for light limit value
S7-1500R/H redundant system
44
Getting Started, 10/2018, A5E44910930-AA
Programming Change manual mode speed and direction of rotation of the fans
By double-clicking on a symbol for a motor, you access the automatic / manual operating mode for the fan in the corresponding tunnel section. In the example, the following was set for tunnel section 2: Manual operation for the fan Low speed (slow) Clockwise The fan blows at slow speed in clockwise direction.
Figure 3-8 HMI screen manual mode fan speed and direction of rotation
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
45
Programming
Controlling manual operation of the lamps individually
For maintenance tasks, it may be advisable to manually set the brightness in the tunnel. By double-clicking on a symbol for a lamp, you access the automatic / manual operating mode for the lighting in the corresponding tunnel section. In the example, for the left interior light was set in tunnel section 2: Manual mode Night light The lamp emits subdued light.
Figure 3-9 Controlling the HMI screen lamps individually
S7-1500R/H redundant system
46
Getting Started, 10/2018, A5E44910930-AA
Programming
Specifying manual operation sensor values
By specifying the sensor values, you can test the function of the tunnel application. By double-clicking on a box for the sensors, you access the automatic / manual operating mode. In the example, the following was set for tunnel section 1: Manual operation for setting the CO limit value (air quality sensor) CO limit value of 28 Manual operation for specifying the limit value for the vision (turbidity sensor) Value for the vision of 2
Figure 3-10 Specifying HMI screen sensor values
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
47
Commissioning
4
Introduction
You have configured and programmed the tunnel application. The following sections describe how to commission the tunnel application.
Further information on commissioning is available in the system manual of Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
Inserting SIMATIC memory cards
Requirement:
The CPUs only support pre-formatted SIMATIC memory cards. If required, format the SIMATIC memory cards before using them in the CPU.
Procedure: Insert a SIMATIC memory card into the left-hand CPU as follows.
1. Open the front cover of the CPU.
2. Ensure that the CPU is either switched off or in STOP mode.
3. Insert the SIMATIC memory card, as shown on the CPU, into the slot for the SIMATIC memory card.
4. Carefully insert the SIMATIC memory card into the CPU, pushing gently, until the card clicks into place.
5. Insert the other SIMATIC memory card into the right-hand CPU as described in steps 1 to 4.
Switching on load current supply and CPUs
Requirements:
The SIMATIC S7-1500R/H redundant system has been installed. The system has been wired. The SIMATIC memory cards are in the CPUs. The load current supply is connected to the power supply.
Procedure:
Turn on the load current supply.
Result:
The CPUs run a flash test and on completion of system initialization goes to STOP. The RUN/STOP LEDs on both CPUs are yellow.
The two CPUs implement pairing. The ERROR LEDs are flashing red. In STEP 7 in the diagnostic status (Online & diagnostics) of the S7-1500R/H system, check successful paring. "Paired" is shown in the "Pairing state" field.
S7-1500R/H redundant system
48
Getting Started, 10/2018, A5E44910930-AA
Commissioning
Assigning redundancy IDs to CPUs in the configuration
Redundant operation is only possible if the two CPUs have different redundancy IDs. The redundancy IDs can have values of 1 and 2. Both CPUs have redundancy ID 1 in the configuration as the default: The redundancy ID is used to assign a project tree to the real CPU in STEP 7. The upper CPU of the two in the tree always has a redundancy ID of 1. The lower CPU of the two always has the redundancy ID 2.
Requirements: Both CPUs are in STOP. There is pairing between the two CPUs.
Procedure: 1. On the CPU display of the right CPU, select the menu item "Overview> Redundancy". 2. Assign the CPU redundancy ID 2. Result: The right-hand CPU in the configuration is assigned redundancy ID 2.
Downloading project data to the primary CPU
In the example, download the project data from the PG/PC to the primary CPU via an online connection. The project data (all configuration data and the complete user program) can only be downloaded when a CPU is in STOP operating state.
Procedure: 1. Right-click to select the S7-1500R/H system in the project tree. 2. Select the "Download to device" > "Hardware and software (changes only)" command
from the shortcut menu. Result: The "Extended download" dialog window opens. 3. Select the PG/PC interface. 4. Select the interface to which the PG/PC is connected. 5. Click on the "Start search" button. Result: The "Choose target device" table shows the CPUs in the S7-1500H system. The primary CPU is already selected. 6. Click "Load". Result: The "Load preview" dialog window sets out the key information on the load process to be run: 7. If the S7-1500R/H system is not in STOP, stop the system. To do so, select "Stop RH system" in the "Action" column of the drop-down menu. 8. Click the "Download" button to start the download. The "Results of loading" dialog window displays the results of the loading process.
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
49
Commissioning
Starting CPUs after downloading
Requirement: The CPU mode selector is in the RUN position.
Procedure: 1. To start the primary CPU after loading is complete, select "Start module" in the "Action"
column. 2. To complete loading, click "Finish".
Result: The primary CPU switches to the RUN operating state. 3. Switch the backup CPU to the RUN operating state.
Result: After successful synchronization between the primary and backup CPU, the S71500R/H system switches to redundant mode (system state RUN=Redundant).
Evaluating LEDs and displays at the CPUs
If the CPUs are in the "target" system state RUN-Redundant and there are no events, requirements and errors, then the two CPUs show the following LED screens:
the RUN/STOP LED lights up green
the ERROR-LED is off
the MAINT LED is off
The status information of the CPU is displayed on the display. In the system state RUNRedundant, "RUN-Redundant" is displayed in a green bar on the two CPU displays.
Result
You have fully created and downloaded the configuration and the user program in accordance with the task of the example.
S7-1500R/H redundant system
50
Getting Started, 10/2018, A5E44910930-AA
Additional information
5
Further information
Below is a collection of links:
for additional information on the systems and components which were used in the Getting Started
to tunnel automation
Table 5- 1 Collection of links
Topics
Further information
Components, failure scenarios, setup, installation, wiring and commissioning of S7-1500R/H
Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833 ) system manual
Components, setup, installation, wiring and commissioning of ET 200SP
System manual ET 200SP Distributed I/O System (https://support.industry.siemens.com/cs/ww/en/view/58649293)
PM 190 W 120/230 V AC load current supply
PM 190 W 120/230 V AC load current supply (https://support.industry.siemens.com/cs/ww/en/view/68022506) manual
HMI devices TP1900 Comfort
SIMATIC HMI Comfort Panels (https://support.industry.siemens.com/cs/de/en/view/49313233) operating instructions
SIMATIC STEP 7 Professional: Configuration, programming, HMI visualization, diagnostics
In the STEP 7 online help
PROFINET at S7-1500R/H, system redundancy S2, media redundancy (MRP)
PROFINET (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual
HMI communication to S7-1500R/H, System IP address Communication (https://support.industry.siemens.com/cs/ww/en/view/59192925) function manual
Diagnostics of S7-1500R/H on the CPU display and in Function manual Diagnostics
STEP 7
(https://support.industry.siemens.com/cs/ww/en/view/59192926)
Siemens tunnel automation
on the Internet (https://w3.siemens.com/topics/global/en/tunnelautomatisierung/ Seiten/Default.aspx)
S7-1500R/H redundant system
Getting Started, 10/2018, A5E44910930-AA
51
SIMATIC S7-1500R/H Product information for the S7-1500 R/H redundant system
Product Information
Introduction
Scope of validity of the product information This product information supplements the documentation for S7-1500R/H and takes precedence over our system manuals, function manuals and equipment manuals.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks. In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept. Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place. For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity). Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats. To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
© Siemens AG 2018 - 2019. All rights reserved
A5E45725577-AC, 11/2019
1
Amendments to SIMATIC S7-1500R/H documentation
Software restrictions S7-1500R/H Redundant System Manual, 11/2019 Edition, Section 4.3 Restrictions compared to the S7-1500 automation system, Table 4-4 Software restrictions: Calibrating analog modules You can only calibrate analog modules of an IO device in the RUN-Solo system state. 1. Switch the CPU with redundancy ID 1 to the STOP operating state. 2. Establish an online connection with STEP 7 to the analogue module to be calibrated. 3. Perform the calibration of the analog module with STEP 7. You can find more information on this topic in the STEP 7
online help. 4. Then start the CPU with redundancy ID 1. STEP 7 The command "Online" > "Upload device as new station (hardware and software)..." is currently not permitted for the R/H CPUs.
Get_IM_Data: Loss of redundancy when reading out the I&M data from the S7-1500 R/H CPU displays. S7-1500R/H Redundant System Manual, 11/2019 Edition, Section 8.1 Programming the S7-1500R/H If you read out the I&M data from the displays of the CPUs, then the "Get_IM_Data" instruction might, under certain circumstances, return different data to both CPUs of the S7-1500R/H redundant system. Further processing of this data in the user program could possibly result in loss of redundancy. Do not use the HW identifiers of the displays (65154, 65354) for the LADDR parameter of the "Get_IM_Data" instruction.
Display of the source address in multicast packages "Communication" Function Manual, 11/2019 Edition If an S7-1500 R/H CPU sends UDP multicast messages via the system IP address, the device IP address of the CPU is entered as source address in the multicast packages instead of the system IP address. Consider this behavior for filters and firewalls. In case of a reply to the multicast sender, use the system IP address.
H-Sync forwarding CPU manuals, 11/2019 Edition
Note Support of H-Sync forwarding The technical specifications typically state whether a PROFINET device supports H-Sync forwarding. The GSD file will also indicate whether the device supports H-Sync forwarding. The device supports H-Sync forwarding when the "AdditionalForwardingRulesSupported" attribute in the "MediaRedundancy" element is set to "true".
MAINT-LED during PROFIenergy pause CPU manuals, 11/2019 Edition Unlike as described in the manuals, the MAINT-LED does not light up during PROFIenergy pause.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
Product information for the S7-1500 R/H redundant system
2A5E45725577-AC, 11/2019
Product information for the S7-1500 R/H redundant system A5E45725577-AC, 11/2019
Edition 11/2019
Reference manual
SIMATIC
S7-300/S7-400/S7-1200/S7-1500
Comparison list for programming languages
support.industry.siemens.com
Comparison list for S7-300, S7-400, S7-1200, S7-1500 Reference Manual
Legal information
Warning notice system This manual includes notices you have to observe to ensure your personal safety and to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a hazard alert symbol; notices referring only to property damage have no hazard alert symbol. Depending on the degree of danger, warnings are displayed in a descending order as follows.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury may result if proper precautions are not taken.
NOTICE indicates that damage to property may result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a hazard alert symbol may also include a warning relating to property damage.
A5E33285102-AG
Page 1
Qualified personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems. Proper usage of SIMATIC products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and the associated technical documentation. If third-party products and components are used, these have to be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation, and maintenance are required to ensure that the products operate safely and without any problems. The permitted ambient conditions must be adhered to. Notes in the respective documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. Any other names appearing in this document may be trademarks, the use of which by third parties for their own purposes may breach owners' rights. Disclaimer
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. However, since deviations cannot be ruled out entirely, we cannot guarantee full consistency. The information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NUREMBERG
Contents of the comparison list for S7 300, S7 400, S7 1200, S7 1500 (11/2019) Measuring program runtimes see below Load objects to the CPU: Which modifications and which modified blocks you load to the CPU in which operating mode
next page. Overview, requirements, general conditions and legend for the comparison list (Page 6) Comparison list for S7-300, S7-400 (without H systems), S7-1200, S7-1500 including Software Controller CPU 150xS:
Which instructions and functions you can use for which controller family as of Page 8 . Instructions for SIMATIC Ident and SIMATIC Energy Suite Appendix.
Measuring program runtimes
The runtime of parts of the user program depends on many factors. A listing of runtimes of individual instructions in a table is thus not possible. The RUNTIME (runtime measurement) instruction is used to measure the runtime of the entire program, individual blocks or command sequences. The runtime measurement begins with the first call of the RUNTIME instruction and ends with the second call. Use an OB priority >15 for runtime measurement. This ensures that "online monitoring" does not falsify the runtime. You can find more detailed information in the SIMATIC STEP 7 online help. Enter "RUNTIME" in the search and select "S71200", "S7-1500" or "S7-1500T" as validity identifier.
Programming examples in SCL: #tempLastCycle := RUNTIME(#statRuntimeMemory); // Start of runtime measurement // instance call where the time measurement takes place: "instSpeedTest"(enable:="true",...); #tempLastCycle := RUNTIME(#statRuntimeMemory); // End of runtime measurement
The #tempLastCycle tag contains the time that has passed from the preceding call to the current call of RUNTIME.
A5E33285102-AG
Page 3
Load objects to the CPU
The table shows which modifications and which modified blocks you can download in which operating mode. Very complex programs can prevent downloading in RUN mode.
Solution approaches: Use a memory card with sufficient capacity. Select a CPU with sufficient work memory. Reduce the number of modified used blocks, constants, PLC tags or data types.
You can find information about the behavior of the F-CPU for fail-safe blocks in the "SIMATIC Safety Configuring and Programming manual".
Modifications and blocks
Modified properties of hardware components
Added hardware components
New/revised text lists (messages) Load number of blocks Reset work memory (MRES) New OB Modified OB: Code modifications, modification of comments OB with modified properties (e.g., cycle time change)
S7-300
STOP
STOP RUN RUN (<17) STOP (Reset) RUN
S7-400
STOP, with restrictions in
RUN STOP, with restrictions in
RUN RUN
RUN (<57)
STOP (Reset)
RUN
S7-1200 V2.2 - V3.0
STOP
S7-1200 V4.0 and
higher
STOP
S7-1500 STOP
STOP
STOP
STOP
--
--
RUN
RUN (<11) RUN (<21)
RUN
STOP (Reset) STOP (Reset) STOP (Reset)
STOP
STOP
RUN
RUN
RUN
RUN
RUN
RUN
STOP
RUN
STOP
STOP
RUN
Deleted OB
Modifications and blocks
S7-300 RUN
S7-400 RUN
S7-1200 V2.2 - V3.0
STOP
S7-1200 V4.0 and
higher
STOP
New FB/FC/DB/PLC data type (UDT)
RUN
RUN
RUN
RUN
Deleted FB/FC/DB/PLC data type (UDT)
RUN
RUN
RUN
RUN
Revised FB/FC: Code modification, modification of comments Revised FB/FC: Change to interface Modified DB (no memory reserve configured): Name/type of tags modified, tags added or deleted Modified DB (memory reserve configured): New tags added
RUN STOP RUN (Init)
--
RUN STOP RUN (Init)
--
RUN STOP STOP
--
RUN RUN (Init) RUN (Init)
RUN
Modified PLC data type (UDT)
STOP
STOP
STOP
RUN (Init)
Modified PLC tags (added, deleted, name or data type changed) Modified retentivity settings (bit memory address area, DB area) Motion Control technology objects: Changes to MC Servo cycle clock, change from free-running to cyclical (and vice versa). Changes to the hardware interface of the TO
RUN STOP
--
RUN All objects retentive
--
STOP STOP
--
RUN STOP
--
(init) means that the CPU overwrites the actual values of the DBs with start values during downloading.
S7-1500 RUN RUN RUN RUN
RUN (Init)
RUN (Init)
RUN RUN (Init)
RUN STOP
STOP
A5E33285102-AG
Page 5
Validity and general conditions
SIMATIC STEP 7 version 16 or higher The contents of the S7-1500 column also apply to SIMATIC S7-1500 Software Controller CPU 150xS SIMATIC S7-1200 firmware 4.4 or higher. SIMATIC S7-1200 only supports LAD, FBD and SCL. SIMATIC S7-1500 firmware 2.8 or higher STL: Some instructions have to be called via CALL. The special features of SIMATIC S7-400H systems are not taken into consideration. The instructions of the SIMATIC S7-300T controller are only taken partly into account. Some system state lists (SSLs) for SIMATIC S7-300/400 contain similar information such as function calls with the
SIMATIC S7-1200/1500.
Structure of the comparison list
Basic instructions Instructions that you use often, e.g. bit logic operations, timers, counters, mathematical functions
Extended instructions Extended instructions for more possibilities, e.g. date and time, interrupts, alarms, PROFIenergy
Technological instructions (technology) Technological functions and Motion Control, e.g. PID control, kinematics
Instructions for communication Brief overview and basics of communication and Instructions for communication, such as S7 communication, Open User Communication
Optional instructions instructions, e.g. for SINAMICS or SIMATIC Ident
Legends
()
nn
gray italics
Xyz
Xyz
Applicable Applicable with restrictions
Not yet available for SIMATIC CPU S7-1500R/H
Not required, you can, for example, replace many instructions with simple commands in SCL. We recommend that you do not use the grayed-out instructions in S7-1200 or S7-1500. The instructions are not suitable for symbolic addressing or multiple instances. Avoid SIMATIC counters and timers because they do not have multiple instance capability. New instruction as of SIMATIC STEP 7 V16. For this purpose, SIMATIC S7-1200 requires at least firmware 4.4 and SIMATIC S7-1500 at least firmware 2.8. Also available as fail-safe instruction in LAD and FBD.
A5E33285102-AG
Page 7
Basic instructions
Extended instructions
Instructions in the section "Basic instructions"
Instruction groups
General Bit logic operations Safety functions Times
Page
8 8 10 11
Instruction groups
Counters Comparator operations Mathematical functions Move
Technology
Communication
Page
14 15 17 19
Instruction groups
Conversion operations Program control operations Word logic operations Shift and rotate
Page
24 27 33 34
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Insert network Insert empty box Open branch Close branch Insert input Invert Boolean result
AND logic operation
General
-|
-|NOT|-
-o|
Bit logic operations
&
nn
nn
nn
(
)
nn
nn
NOT
O
&
Basic instructions
Extended instructions
S7-300 S7-400 S7-1200 S7-1500
Description
OR logic operation
EXCLUSIVE OR logic operation
Assignment
Negate assignment
Reset output
Set output
Set bit field S7-400: SFC 79 SET
Reset bit field S7-400: SFC 89 RSET
Set/reset flip-flop
Reset/set flip-flop
Scan operand for positive signal edge
Scan operand for negative signal edge
Set operand on positive signal edge A5E33285102-AG
Technology
Communication
LAD
FBD
STL (not S7-1200)
SCL
>=1
X
-( )-
-[=]
-(/)-
-[/=]
-(R)
-[R]
-(S)
-[S]
SET_BF
O
OR
X
XOR
=
:=
NOT
R
nn
S
nn
nn
nn
RESET_BF
SR RS
-(P)-
-|P|-
-(N)-(P)-
-|N|-|P|-
nn
nn
nn
nn
nn
nn
<Operand>; FP;
nn
<Operand>; FN;
nn
R _TRIG
Page 9
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Set operand on negative signal edge
Scan Boolean result for positive signal edge
Scan Boolean result for negative signal edge
Detect positive signal edge SCL: Programming with two instructions is more effective: posFlanke := signal and not laststate; laststate := signal;
-(N)-
-|N|-
P_TRIG
N_TRIG
F_TRIG
FP
nn
FN
nn
R _TRIG
Detect negative signal edge SCL: Programming with two instructions is more effective: negFlanke := not signal and not laststate;
laststate := not signal;
F_TRIG
Normally open contact
-||-
nn
nn
nn
Normally closed contact
-|/|-
nn
nn
nn
Safety functions
Only Safety: EMERGENCY STOP up to Stop Category 1
Only Safety: Two-hand monitoring
ESTOP1 TWO_HAND
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Only Safety: Two-hand monitoring with enable
Only Safety: parallel muting with two or four muting sensors
Only Safety: parallel muting with two or four muting sensors
Only Safety: 1oo2 evaluation of two single channel encoders combined with a discrepancy
analysis
Only Safety: Feedback monitoring
Only Safety: Protective door monitoring.
Only Safety: Acknowledgment for simultaneous reintegration of all F-I/O/channels of the F-I/O of an F-runtime group after communication errors or F-I/O/channel errors
Times
IEC timers
Generate pulse
A5E33285102-AG
TWO_H_EN MUTING MUT_P EV1oo2DI FDBACK SFDOOR ACK_GL
TP
TP Page 11
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Generate on-delay
TON
TON
Generate off-delay
TOF
TOF
Time accumulator Time accumulator (start timer) Reset timer Load time duration
TONR
-(TONR)- -[TONR]-
nn
nn
-(RT)- -[RT]-
RESET_TIMER
-(PT)- -[PT]-
PRESET_TIMER
Start pulse timer
-(TP)- -[TP]-
nn
nn
Start on-delay timer
-(TON)- -[TON]-
SD
nn
Start off-delay timer
-(TOF)- -[TOF]-
SF
nn
SIMATIC timers legacy
Assign pulse timer parameters and start
Assign extended pulse timer parameters and start
S_PULSE S_PEXT
nn
S_PULSE
nn
S_PEXT
Assign on-delay timer parameters and start
S_ODT
nn
S_ODT
Assign retentive on-delay timer parameters and start
S_ODTS
nn
S_ODTS
S7-300 S7-400 S7-1200 S7-1500
Basic instructions
Extended instructions Description
Technology
Communication
LAD
FBD
STL (not S7-1200)
SCL
Assign off-delay timer parameters and start
S_OFFDT
nn
S_OFFDT
Start pulse timer Start extended pulse timer Enable timer Load timer value Load BCD-coded timer value Reset timer Start off-delay timer Start on-delay timer
-(SP)
-[SP]
SP
nn
-(SD)
-[SD]
SD
nn
FR
nn
L
nn
LC
nn
-(R)
-[R]
R
nn
-(SF)
-[SF]
SF
nn
-(SD) -{SD]
SD
nn
Start retentive on-delay timer
-(SS)
-[SS]
SS
nn
A5E33285102-AG
Page 13
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Counters
IEC counters
Count up
CTU
Count down
CTD
Count up and down
CTUD
SIMATIC counters legacy
Assign parameters and count up
S_CU
Assign parameters and count down
S_CD
Assign parameters and count up/down
S_CUD
Set initial counter value
-(SC) - [SC]
Count up
-(CU) -[CU]
Count down
-(CD) -[CD]
Enable counter
Load counter value
CTU CTD CTUD
nn
S_CU
nn
S_CD
nn
S_CUD
nn
nn
CU
nn
CD
nn
FR
nn
L
nn
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Load BCD-coded counter value Reset counter Set counter
LC
nn
R
nn
S
nn
Comparator operations
Equal Not equal Greater than or equal Less than or equal Greater than Less than
Value within range Value outside range Check validity Check invalidity
CMP ==
== I/D/R
=
CMP <>
<> I/D/R
<>
CMP >=
>= I/D/R
>=
CMP <=
<= I/D/R
<=
CMP >
> I/D/R
>
CMP <
< I/D/R
<
IN_RANGE
nn
OUT_RANGE
nn
-|OK|-
nn
-|NOT_OK|-
nn
A5E33285102-AG
Page 15
S7-300 S7-400 S7-1200 S7-1500
Basic instructions
Extended instructions Description
Technology
Communication
LAD
FBD
STL (not S7-1200)
SCL
Variant
Check data type of a VARIANT tag
Scan data type of an ARRAY element of a VARIANT tag
Compare data type for EQUAL with the data type of a tag
Compare data type of an ARRAY element for EQUAL with the data type of a tag
With a tag of type DB_ANY, compare the data
type of an indirectly addressed DB with a data
type for EQUAL. Identify any data block with DB_ANY. You then
have the option of accessing a data block that is
not yet available during programming.
Compare data type for UNEQUAL with the data type of a tag
Compare data type of an ARRAY element for UNEQUAL with the data type of a tag
EQ _Type EQ _ ElemType
EQ _TypeOfDB:
NE_Type NE_ElemType
TypeOf TypeOfEle-
ments *) *)
*)
*) *)
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
With a tag of TYPE DB_ANY, compare the data
type of an indirectly addressed DB with a data
NE_TypeOfDB:
*)
type for EQUAL.
Check for EQUALS NULL pointer
IS_NULL
*)
Check for UNEQUALS NULL pointer
NOT_NULL
*)
*) Application examples for SCL:
IF TypeOf(...) = INT THEN ... // corresponds to EQ _ Type IF TypeOfElements(...) = INT THEN ... // corresponds to EQ _ ElemType IF ... <> NULL THEN ... // corresponds to NOT _ NULL
Instead of "=", you can also use other operators, e.g.: "<>". Instead of "INT", you can also use any other data types or data types that you have defined, e.g.: "REAL", "Recipe"
Check for ARRAY
IS _ ARR AY
Compare tag structured data types
CompType
=
Mathematical functions
Calculate
CALCULATE
(SCL network in LAD/
nn
nn
FBD)
Add
ADD
+
+
A5E33285102-AG
Page 17
Basic instructions
Extended instructions
S7-300 S7-400 S7-1200 S7-1500
Description
Subtract
Multiply
Divide
Form absolute value Safety instruction only for S7-1200/1500
Return remainder of division
Create twos complement
Create one's complement
Increment
Decrement
Get minimum
Get maximum
Set limit value
Form square
Form square root
Form natural logarithm
Technology
Communication
LAD
FBD
STL (not S7-1200)
SCL
SUB MUL DIV
-
-
*
*
/
/
ABS
ABS
ABS
MOD
NEG
NEGI, NEGD
nn
nn
INVI, INVD
NOT
INC
nn
DEC
nn
MIN
MAX
LIMIT
SQR
SQRT
LN
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
() ()
Form exponential value
Form sine value
Form cosine value
Form tangent value
Form arcsine value
Form arccosine value
Form arctangent value
Return fraction
Exponentiate
Move
Move value S7-300/400: Only LAD and FBD
Only Safety: Write value indirectly to an F-DB
Only Safety: Read value indirectly from an F-DB
Only Safety: Read value from INT F-Array
FRAC EXPT
EXP SIN COS TAN ASIN ACOS ATAN
**
MOVE
WR_FBD RD_FBD RD_ ARR AY_ I
MOVE
FRAC **
:=
A5E33285102-AG
Page 19
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Only Safety: Read value from DINT F-Array
Move data type from ARRAY of BYTE (Deserialize)
Move data type to ARRAY of BYTE (Serialize)
Move block S7-400: SFC 20 BLKMOV
Move block not interruptible S7-400: SFC 81 UBLKMOV
Move block
Fill block
Fill block not interruptible
Disassemble a tag bit string data type BYTE, WORD, DWORD or LWORD into individual bits
(= scatter)
Disassemble an ARRAY of BYTE, WORD, DWORD or LWORD into individual bits
RD_ ARR AY_ DI Deserialize Serialize MOVE_BLK
UMOVE_BLK MOVE_BLK_VARIANT
FILL_BLK UFILL_BLK
SCATTER
SC AT TER _ BLK
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Merge all bits from an ARRAY of BOOL, an anony-
mous STRUCT or a PLC data type exclusively with Boolean elements into a bit string data type
BYTE, WORD, DWORD or LWORD (= gather)
Merge individual bits into multiple elements of an ARRAY of BOOL, an anonymous STRUCT or a
PLC data type exclusively with Boolean elements
Swap
With "AssignmentAttempt", you attempt to
assign a VARIANT tag to a reference tag. The data
type of a reference tag is specified at the time of
the declaration, the data type of a VARIANT tag is
determined during runtime.
ARRAY DB
Read from ARRAY data block
Write to ARRAY data block
Read from ARRAY data block in load memory
Write to ARRAY data block in load memory
GATHER
GATHER _ BLK SWAP ?=
ReadFromArrayDB WriteToArrayDB
ReadFromArrayDBL WriteToArrayDBL
A5E33285102-AG
Page 21
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Variant
Read out VARIANT tag value
Write VARIANT tag value
Get number of ARRAY elements
ARRAY [*]
Read out ARRAY low limit
Read out ARRAY high limit
Read/write access
Recommendation: Symbolic programming.
Read data in little endian format
Write data in little endian format
Read data in big endian format
Write data in big endian format
Read memory address
Read memory bit
VariantGet VariantPut CountOfElements
LOWER_BOUND UPPER_BOUND
READ_LITTLE WRITE_LITTLE
READ_BIG WRITE_BIG
PEEK PEEK_BOOL
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Write memory address
Write memory bit
Write memory area
Legacy
Recommendation: Symbolic programming
Move block
Move block not interruptible
Fill block
Read field; recommendation: Indexed access to an array
FieldRead
Write field; recommendation: Indexed access to an array
FieldWrite
POKE POKE_BOOL POKE_BLK
BLKMOV UBLKMOV
FILL
A5E33285102-AG
Page 23
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Conversion operations
Convert value S7-1200/1500: You can convert numerical for mats and data types to other numerical formats and data types. You can find more detailed information in the information system of STEP 7
CONVERT
Only Safety: Convert data of data type BOOL into data of data type WORD
BO_W
Only Safety: Convert data of data type WORD into data of data type BOOL
W_BO
Round numerical value
ROUND
Generate next higher integer from floating-point number
CEIL
Generate next lower integer from floating-point number
FLOOR
Truncate numerical value
Scale
Normalize
x x x _TO_ y y y
RND RND+
RNDTRUNC SCALE_X NORM_X
ROUND CEIL
FLOOR
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Create a reference to a tag:
"REF()" is used to specify to which tag a previ-
nn
ously declared reference should point.
Convert BCD to integer (16 bit)
nn
Convert integer (16 bit) to BCD
nn
Convert BCD to integer (32 bit)
nn
Convert integer (32 bit) to BCD
nn
Convert integer (16 bit) to integer (32 bit) S7-1500: Conversion also done implicitly
nn
Convert integer (32 bit) to floating-point number S7-1500: Conversion also done implicitly
nn
Create one's complement integer (16 bit) S7-1500: Conversion also done implicitly
nn
Create one's complement double integer (32 bit) S7-1500: Conversion also done implicitly
nn
nn
REF
BTI
BCD16_TO_ INT
ITB
INT_TO_ BCD16
BTD
BCD32_TO_ INT
DTB
DINT_TO_ BCD32
ITD
INT_TO_ DINT
DTR
DINT_TO_ REAL
INVI
nn
INVD
nn
A5E33285102-AG
Page 25
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Negate integer (16 bit)
nn
Negate integer (32 bit)
nn
Negate floating-point number
nn
Switch bytes in the right word of accumulator 1
nn
Switch all bytes in accumulator 1
nn
Variant instructions
Convert VARIANT to DB_ANY Convert DB_ANY to VARIANT
Legacy
Recommendation: Symbolic programming
Convert the integer to a physical unit between a
low limit and high limit (scaling). Standard CPU: INT in REAL
F-CPU: INT in INT
SCALE
NEGI
nn
NEGD
nn
NEGR
nn
CAW
nn
CAD
nn
VARIANT_TO_ DB _ ANY DB _ ANY_TO_VARIANT
SCALE
S7-300 S7-400 S7-1200 S7-1500
Basic instructions
Extended instructions Description
Technology
Communication
LAD
FBD
STL (not S7-1200)
SCL
Convert the integer to a physical unit between a low limit and high limit (scaling).
F-CPU: INT in DINT
SCALE_D
Unscale the floating-point number into physical units between a low limit and a high limit and
convert it io an integer (unscaling).
Program control operations
Branch conditionally
Branch conditionally multiple times Branch to a list element Run in counting loop
Run in counting loop with step width
Run if condition is met, the CPU checks the condition at the start of the loop
A5E33285102-AG
UNSCALE JC SPL
JC
IF... THEN... ELSE...
IF... THEN... ELSIF...
CASE... OF... FOR... TO...
DO... FOR... TO... BY... DO...
WHILE... DO...
Page 27
S7-300 S7-400 S7-1200 S7-1500
Basic instructions
Extended instructions Description
Technology
Communication
LAD
FBD
STL (not S7-1200)
SCL
Run if condition is not met. The CPU checks the condition at the end of the
loop, i.e. the CPU runs the loop at least once.
Terminate running through the loop and start with the next run
Exit loop immediately
Exit block
Organize program code
Conditional block end
Insert a comment section New from V16 and higher: Multilingual com-
ments (/*...*/)
Only SIMATIC S7-1500 Software Controller CPU 150xS: Shut down or restart Windows and the
controller
LOOP
REPEAT... UNTIL...
CONTINUE
EXIT
RET
BEU
RETURN
REGION... END_REGION
BEC
nn
nn
//
//, (*...*), (/*...*/)
SHUT_DOWN
Basic instructions
Extended instructions
S7-300 S7-400 S7-1200 S7-1500
Description
Jumps
Jump
Jump if RLO = 1
Jump if RLO = 0
Jump label
Define jump list
Jump distributor
Return
Only Safety: Open global data block
Jump if RLO = 1 and save RLO
Jump if RLO = 0 and save RLO
Jump if BR = 1
Jump if BR = 0
Jump if OV = 1
Jump if OS = 1
Technology
Communication
LAD
FBD
STL (not S7-1200)
SCL
nn
JU
-(JMP) -[JMP]
JC
-(JMPN) -[JMPN]
JCN
LABEL
:
JMP_LIST
JL
SWITCH
-(RET) -[RET]
-(OPN) -[OPN]
nn
JCB
nn
JNB
nn
JBI
nn
JNBI
nn
JO
nn
JOS
GOTO... nn nn nn nn nn nn nn nn nn nn nn nn nn
A5E33285102-AG
Page 29
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Jump if the result is zero
nn
Jump if the result is not zero
nn
Jump if the result is greater than zero
nn
Jump if the result is less than zero
nn
Jump if the result is greater than or equal to zero
nn
Jump if the result is less than or equal to zero
nn
Jump if the result is invalid
nn
Loop
nn
Data blocks
Open global data block S7-1500: only for "non-optimized" blocks
Open instance data block S7-1500: only for "non-optimized" blocks
Swap data block register
Load the length of a global data block into accumulator 1
JZ
nn
JN
nn
JP
nn
JM
nn
JPZ
nn
JMZ
nn
JUO
nn
LOOP
nn
OPN
nn
OPNI
nn
CDB
nn
L DBLG
nn
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Load the number of a global data block into accumulator 1
Load the length of an instance data block into accumulator 1
Load the number of an instance data block into accumulator 1
Code blocks
Call block LAD/FBD: Only for S7-300/400
Conditional block call
Unconditional block call
Runtime control
Limit and enable password legitimation
Restart cycle monitoring time
Exit program
L DBNO
nn
L DILG
nn
L DINO
nn
CALL
nn
CC
nn
UC
nn
ENDIS_PW RE_TRIGR
STP
A5E33285102-AG
Page 31
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Only SIMATIC S7-1500 software controller CPU 150xS: Shut down or restart Windows and
the controller
Get error locally
Get error ID locally
Compress CPU memory
Control CiR process
Initialize all retain data
Program time delay
Change protection level
Runtime measurement with nanosecond accuracy
Only Safety: Fail-safe acknowledgment from an operator control and monitoring system
SHUT_DOWN
GET_ERROR GET_ ERR _ ID COMPRESS
CiR INIT_RD
WAIT PROTECT RUNTIME
F_ ACK _OP
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Word logic operations
Create one's complement
INVERT
Decode: set a specified bit
Encode: Output bit number of least significant bit set in the input value
Select: Output a parameter as result depending on a BOOL value
() ()
Multiplexing S7-300/400: Only SCL
MUX
Demultiplex
DEMUX
AND logic operation word by word
AND
OR logic operation word by word
OR
EXCLUSIVE OR logic operation word by word
XOR
AND logic operation double word by double word
AND
OR logic operation double word by double word
OR
EXCLUSIVE OR logic operation double word by double word
XOR
A5E33285102-AG
DECO ENCO
SEL
nn nn AW OW XOW AD OD XOD
NOT
MUX DEMUX &, AND
OR XOR &, AND OR XOR Page 33
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Shift and rotate
Rotate right
ROR
Rotate left
ROL
Shift right word by word
SHR
SRW
SHR
Shift left word by word
SHL
SLW
SHL
Shift word by word with sign
SSI
nn
Shift double word by double word with sign
SSD
nn
Shift right double word by double word
SRD
nn
Shift left double word by double word
SLD
nn
Rotate right double word by double word
SHR
RRD
SHR
Rotate left double word by double word
SHL
RLD
SHL
Rotate left by status bit CC 1
RLDA
nn
Rotate right by status bit CC 1
RRDA
nn
Information on S7-400: The controllers have four accumulators. You will find only the instructions for two accumulators in the list below.
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Loading Loading Load status word in accumulator 1 Load AR1 with contents of accumulator 1 Load AR1 with double word or area pointer Load AR1 with contents of AR2 Load AR2 with contents of accumulator 1 Load AR2 with double word or area pointer
Transfer Transfer Transfer accumulator 1 to status word Switch AR1 and AR2 Transfer AR1 to accumulator 1 Transfer AR1 to double word Transfer AR1 to AR2
nn
L
nn
L STW
nn
LAR1
nn
LAR1 <D>
nn
LAR1 AR2
nn
LAR2
nn
LAR2 <D>
nn
nn
T
nn
T STW
nn
CAR
nn
TAR1
nn
TAR1 <D>
nn
TAR1 AR2
nn
A5E33285102-AG
Page 35
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Transfer AR2 to accumulator 1 Transfer AR2 to double word
Legacy Implement sequencer
Implement sequencer Discrete control time interrupt Motor control time interrupt Compare input bits with the bits of a mask Matrix scanner Lead and lag algorithm Create bit pattern for 7-segment display Create tens complement Count number of set bits
Time accumulator Save data to shift register
TAR2
nn
TAR2 <D>
nn
DRUM DRUM_X
DCAT MCAT IMC SMC LEAD_LAG SEG BCDCPL BITSUM TONR _ X WSR
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Shift bit to shift register
SHRB
Get status bit
Status -||-
A 0V
nn
Call block
-(CALL) -[CALL]
UC
nn
Save RLO in BR bit
-(SAVE) -[SAVE]
SAVE
nn
Open MCR ranges
-(MCR<) -[MCR<]
MCR(
nn
Close MCR ranges
-(MCR>) -[MCR>]
)MCR
nn
Enable MCR range
-(MCRA) -[MCRA] MCRA
nn
Disable MCR range
-(MCRD) -[MCRD] MCRD
nn
Set bit array
SET
Set byte array
SETI
Reset bit array
RESET
Reset byte array
RESETI
Enter substitute value
REPL_VAL
Swap content of accumulators 1 and 2
nn
TAK
nn
Shift contents to the next highest accumulator
nn
PUSH
nn
A5E33285102-AG
Page 37
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD
FBD
STL (not S7-1200)
SCL
Shift contents to the next lowest accumulator
nn
POP
nn
Add accumulator 1 to AR1
nn
+AR1
nn
Add accumulator 1 to AR2
nn
+AR2
nn
Program display (null instruction)
nn
BLD
nn
Null instruction
nn
NOP 0
nn
Null instruction
nn
NOP 1
nn
Basic instructions
Extended instructions
Technology
Communication
A5E33285102-AG
Page 39
Basic instructions
Extended instructions
Technology
Communication
Instructions in the section "Extended instructions"
Instruction groups
Page
Date and time
40
String and Character
42
Process image
45
Distributed I/O
45
PROFIenergy
47
Module parameter assignment 48
Instruction groups
Interrupts Alarms Diagnostics Pulse Recipes & data logging Data block functions
Page
49 51 53 54 54 55
Instruction groups
Table functions Addressing File operations (file handling) R/H system Other instructions
Page
56 57 58 58 59
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD STL (not S7-1200)
SCL
Date and time
Compare time tags
T_COMP*
Convert times and extract
T_CONV*
Add times
T_ ADD*
Subtract times
T_SUB*
Time difference
T_DIFF*
Combine times
T_COMBINE*
* SCL: Use conversion functions x_TO_ y (e.g. TIME_TO_DINT), or comparator and arithmetic operators (e.g. +, -, >, <).
Basic instructions
Extended instructions
Technology
S7-300 S7-400 S7-1200 S7-1500
Description
Time-of-day functions
Set time-of-day (STEP 7 V 5x: SET_CLK)
Read time-of-day (STEP 7 V 5x: READ_CLK)
Read local time
Write local time
Synchronize slave clocks
Read system time
Set time zone
Runtime meters
Set runtime meters
Start and stop runtime meters
Read runtime meters
Set time-of-day and time-of-day status
Communication
LAD/FBD STL (not S7-1200)
SCL
WR _ SYS _T RD_SYS_T RD_LOC_T WR _ LOC _T SNC_RTCB TIME_TCK SET_TIMEZONE
RTM SET_RTM CTRL_RTM READ_RTM SET_CLKS
A5E33285102-AG
Page 41
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD STL (not S7-1200)
SCL
Local time Calculate local time Calculate local time from base time Calculate base time from local time Set time-of-day interrupt using local time Set daylight saving time/standard time without time-of-day status Transfer time-stamped alarms
LOC_TIME BT_LT LT_BT
S_LTINT
SET_SW
TIMESTMP
Set daylight saving time/standard time with time-of-day status
SET_SW_S
String and Character
Move character string
Compare character strings
Convert character string
Convert character string to numerical value
S_MOVE
:=
S_COMP
=
S_CONV
STRG_VAL
STRG_...
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD STL (not S7-1200)
SCL
Convert numerical value to character string Convert character string to Array of CHAR Convert Array of CHAR to character string Determine the length of a character string
Join multiple character strings Split character array in multiple character strings
Convert ASCII string to hexadecimal number (conversion is contained in the converting functions, e.g.: CHAR_TO_WORD)
VAL_STRG
..._STRG
Strg_TO_Chars
Chars_TO_Strg
MAX_LEN
JOIN
SPLIT
HTA
Convert hexadecimal number to ASCII string Determine the length of a character string Connect character strings Read the left characters of a character string Read the right characters of a character string Read the middle characters of a character string Delete characters in a character string
A5E33285102-AG
HTA LEN CONCAT LEFT RIGHT MID DELETE
Page 43
Basic instructions
Extended instructions
Technology
S7-300 S7-400 S7-1200 S7-1500
Description
Insert characters in a character string Replace characters in a character string Find characters in a character string
Runtime information Read out name of a tag on the input parameter
Read global name at beginning of a call path. Illustration:
Communication
LAD/FBD STL (not S7-1200)
SCL
INSERT REPLACE
FIND
GetSymbolName
GetInstanceName
Read out name of the block instance Query the global name of block instance
GetSymbolPath GetInstancePath
Basic instructions
Extended instructions
Technology
S7-300 S7-400 S7-1200 S7-1500
Description
Read out name of block in the block itself
Process image
Update the process image inputs
Update the process image outputs
Synchronize the process image inputs
Synchronize the process image outputs
Distributed I/O
DP and PROFINET
Read data record
Write data record
Read process image
Transfer process image
Read process image area
Transfer process image area
Communication
LAD/FBD STL (not S7-1200)
SCL
GetBlockName
UPDAT_PI UPDAT_PO SYNC_PI SYNC_PO
RDREC WRREC GETIO SETIO GETIO_PART SETIO_PART
A5E33285102-AG
Page 45
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD STL (not S7-1200)
SCL
Receive interrupt
Disable/enable DP slaves
Control configuration of a PROFINET IO system (option handling)
Enable or disable devices in order to, for example, Flexibly run
through or bypass production steps of a manufacturing process.
Other instructions
Read data record from I/O
Write data record to I/O
Read consistent data of a DP standard slave Write consistent data of a DP standard slave
iDevice/iSlave
Receive data record
Make data record available
Send interrupt
RALRM D_ AC T_ DP
ReconfigIOSystem
RD_REC WR_REC DPRD_DAT DPWR _ DAT
RCVREC PRVREC SALRM
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD STL (not S7-1200)
SCL
PROFIBUS Trigger hardware interrupt from DP standard slave
Synchronize DP slaves/Freeze inputs
Read diagnostics data from a DP slave
Determine topology for the DP master system
ASi Control ASi master behavior Control ASi master behavior
PROFIenergy
IO controller Start and exit energy-saving mode Start and exit energy-saving mode/Read out status information Set switching behavior of power modules
Starting and stopping energy-saving mode via WakeOnLan
DP_PRAL DPSYC_FR DPNRM_DG DP_TOPOL
ASi_3422 ASI_CTRL
PE_START_END PE_CMD
PE_DS3_WRITE_ET200S PE_WOL
A5E33285102-AG
Page 47
Basic instructions
Extended instructions
Technology
S7-300 S7-400 S7-1200 S7-1500
Description
iDevice/iSlave
Control PROFIenergy commands in the iDevice
Generate negative answer to command
Generate answer to command at start of pause
Generate answer to command at end of pause
Generate queried energy savings modes as answer
Generate scanned energy saving data as answer
Generate PEM status as answer
Number of PROFIenergy commands
Generate supported PROFIenergy commands as answer
Generate queried measured values as answer
Module parameter assignment
Read module data record (predefined parameters)
Read data record of a module asynchronously (predefined parameters)
Communication
LAD/FBD STL (not S7-1200)
SCL
PE_I_DEV PE_Error_RSP PE_Start_RSP PE_End_RSP PE_List_Modes_RSP PE_Get_Mode_RSP PE_PEM_Status_RSP PE_Identify _RSP PE_Measurement_List_RSP PE_Measurement_Value_RSP
RD_DPAR RD_DPARA
Basic instructions
Extended instructions
Technology
S7-300 S7-400 S7-1200 S7-1500
Description
Transfer module data records
Read data record from configured system data (predefined parameters)
Write module data record (dynamic parameters)
Transfer data record (predefined parameters)
Interrupts
Assign an OB to an interrupt event
Detach an OB from an interrupt event
Cyclic interrupt
Set cyclic interrupt parameters
Query cyclic interrupt parameters
Time-of-day interrupt
Set time-of-day interrupt
Set time-of-day interrupt LOCAL: Refer SDT to local or system time.
ACTIVATE: When does the OB apply the settings.
A5E33285102-AG
Communication
LAD/FBD STL (not S7-1200)
SCL
PARM_MOD RD_DPARM
WR _ PARM WR _ DPARM
ATTACH DETACH
SET_CINT QRY_CINT
SET_TINT SET_TINTL
Page 49
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD STL (not S7-1200)
SCL
Cancel time-of-day interrupt
Activate time-of-day interrupt
Query status of time-of-day interrupt
Time-delay interrupt
Start time-delay interrupt
Cancel time-delay interrupt
Query the status of a time-delay interrupt
Synchronous error events
Mask synchronous error events
Unmask synchronous error events
Read out event status register
Asynchronous error event
Disable interrupt event
Enable interrupt event
Delay execution of higher priority interrupts and asynchronous error events
CAN_TINT ACT_TINT QRY_TINT
SRT_DINT CAN_DINT QRY_DINT
MSK_FLT DMSK_FLT READ_ERR
DIS_IRT EN_IRT DIS_AIRT
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD STL (not S7-1200)
SCL
Enable execution of higher priority interrupts and asynchronous error events
Trigger multicomputing interrupt
Alarms
Generate program alarm with associated values
Output alarm status
Read pending alarms
Acknowledging alarms
Generate user diagnostic alarms that are entered in the diagnostics buffer
Write a user diagnostics event to the diagnostics buffer a send to logged on participants
Generate alarm messages
Generate alarm message with acknowledgment
Create permanently acknowledged PLC alarms
Create acknowledgeable PLC alarms
EN_AIRT MP_ ALM
Program_Alarm Get _ AlarmState
Get_Alarm Ack_Alarms Gen_UsrMsg
WR_USMSG ALARM_S ALARM_SQ ALARM_D ALARM_DQ
A5E33285102-AG
Page 51
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD STL (not S7-1200)
SCL
Determine acknowledgment status of the last ALARM_SQ incoming alarm Report up to eight signal changes Create PLC alarms without associated values for eight signals Create PLC alarms with associated values for eight signals Report a signal change Create PLC alarms with acknowledgment display Send archive data
Other instructions Read out dynamically assigned system resources Delete dynamically assigned system resources Enable PLC alarms Disable PLC alarms
Diagnostics
Read current OB start information Read runtime statistics
ALARM_SC NOTIFY_8P ALARM_8 ALARM_8P
NOTIFY ALARM AR_SEND
READ_SI DEL_SI EN_MSG DIS_MSG
RD_SINFO RT_INFO
Basic instructions
Extended instructions
Technology
S7-300 S7-400 S7-1200 S7-1500
Description
Determine OB program runtime
Determine current connection status
Read system status list
Read LED status
Reading identification and maintenance data
Read out name of a module
Read information of an IO device
Read out checksum
Read out information about the memory card
Read out status of the CPU clock
· Is time synchronization via NTP server enabled? · Time synchronization missed?
· Is automatic adjustment for daylight saving time enabled?
Read module status information in an IO system
Read module status information of a module
Generate diagnostics information
Communication
LAD/FBD STL (not S7-1200)
SCL
OB_RT C_DIAG RDSYSST
LED Get_IM_Data
Get_Name GetStationInfo GetChecksum
GetSMCinfo
GetClockStatus
DeciveStates ModuleStates
GEN_DIAG
A5E33285102-AG
Page 53
S7-300 S7-400 S7-1200 S7-1500
Basic instructions
Extended instructions
Technology
Description
Read diagnostics information
Pulse
Pulse width modulation
Pulse train output, output a pulse sequence with specified frequency
Recipes & data logging
Recipe functions
Export recipe
Import recipe Create data log
Data logging
Open data log
Write data log
Empty data log
Communication
LAD/FBD STL (not S7-1200)
SCL
GET_DIAG
CTRL_PWM CTRL_PTO
RecipeExport RecipeImport
DataLogCreate DataLogOpen DataLogWrite DataLogClear
Basic instructions
Extended instructions
Technology
S7-300 S7-400 S7-1200 S7-1500
Description
Close data log
Delete data log
Data log in new file
Data block functions
Create data block
Create data block
Create data block in the load memory
Read from data block in the load memory
Write to data block in the load memory
Read data block attributes
Delete data block
Delete data block
Test data block
Communication
LAD/FBD STL (not S7-1200)
SCL
DataLogClose DataLogDelete DataLogNewFile
CREAT_DB CREATE_DB CREA_DBL READ_DBL WRIT_DBL
AT TR _ DB DEL_DB DELETE_DB TEST_DB
A5E33285102-AG
Page 55
Basic instructions
Extended instructions
Technology
S7-300 S7-400 S7-1200 S7-1500
Description
Table functions
Add value to table
Output first value of the table
Find value in table
Output last value in table
Execute table instruction
Run value from table
Link value logically with table element and save
Calculate standard deviation
Correlated data tables
Link tables
Collect/distribute table data
Addressing
Determine hardware identifier from slot
Determine slot from the hardware identifier
Communication
LAD/FBD STL (not S7-1200)
SCL
ATT FIFO TBL_FIND LIFO TBL TBL_WRD WRD_TBL DEV CDT TBL_TBL PACK
GEO2LOG LOG2GEO
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD STL (not S7-1200)
SCL
Determine the hardware identifier from addressing of STEP 7 V5.5 SPx
Determine hardware identifier from an IO address
Determine the IO addresses from the hardware identifier
Other instructions for addressing
S7-300/400: Determine start address from slot S7-1500: Determine hardware identifier from slot. Exists only for
compatibility reasons, not recommended
S7-300/400: Determine slot from a logical address S7-1500: Determine slot from the hardware identifier. Exists only
for compatibility reasons, not recommended
S7-300/400: Determine all logical addresses from a logical
address S7-1500: Determine the logical addresses from the hardware
identifier
S7-300/400: Determine logical basic address from slot and offset
in the user data address area S7-1500: Determine hardware identifier from slot and offset in
the user data address area
LOG2MOD IO2MOD RD_ADDR
GEO_LOG LOG_GEO
RD_LGADR
GADR _ LGC
A5E33285102-AG
Page 57
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD STL (not S7-1200)
SCL
S7-300/400: Determine slot and offset in the user database from
a logical address S7-1500: Determine slot from the hardware identifier. Exists only
for compatibility reasons, not recommended
File operations (file handling)
Read data from a binary file from the memory card, the binary file has a serialized format/bye array
Write data to a binary file on the memory card
Delete existing file on the memory card
R/H system
Only S7-1500 R/H: Enable or disable the SYNCUP system state.
RH
The lock applies: · Until you disable the lock again
· Until the S7-1500R/H goes to STOP
Determining the redundancy ID of the primary CPU RH 1 = The CPU with redundancy ID 1 is the primary CPU.
2 = The CPU with redundancy ID 2 is the primary CPU.
LGC_GADR
FileReadC FileWriteC FileDelete
RH_CTRL RH_GetPrimaryID
S7-300 S7-400 S7-1200 S7-1500
Basic instructions
Extended instructions Description
Technology
Other instructions
iSlave
Set own network address as DP iSlave
Communication
LAD/FBD STL (not S7-1200)
SCL
SET_ ADDR
A5E33285102-AG
Page 59
Basic instructions
Extended instructions
Technology
Communication
Instructions in the section "Technology"
Instruction groups
Counting (and measuring) PID Control
Page
60 61
Instruction groups
Motion Control Time-driven inputs/outputs
Page
63 70
Instruction groups
S7-300C functions Function modules
Page
71 71
T in the S7-300 column means: Instruction for the S7-300 Technology CPU S7-31xT. The operating principle of the instructions can differ between S7-300 and S7-1500. Instructions solely for the S7-31xT are not listed in the table. The Technology CPU S7-31xT cannot be programmed in the TIA Portal.
T in the S7-1500 column means: Instruction for the Technology CPU S7-15xyT.
S7-300 S7-400 S7-1200 S7-1500
Description
LAD / FBD / STL (not S7-1200) / SCL
Counting (and measuring)
Control high-speed counters
Extended high-speed counters Period duration measurement with system data type 331
High-speed counter for counting and measuring
Detect position with SSI absolute encoder
CTRL_HSC CTRL_HSC_EXT High_Speed_Counter SSI _ Absolut _ Encoder
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD / FBD / STL (not S7-1200) / SCL
PID Control
Compact PID
Universal PID controller with integrated tuning for proportional-action actuators
PID controller with integrated self-optimization for valves and actuators
Temperature controller with integrated optimization for temperature processes
PID basic function
Continuous-action controller Step controller for integrating actuators Pulse generator for proportional-acting actuators Continuous temperature controller with pulse generator Temperature controller for integrating actuators
Automatic optimization for a continuous-action controller
Automatic optimization for a step controller
A5E33285102-AG
PID_Compact
PID_3Step
PID_Temp
CONT_C CONT_S PULSEGEN TCONT_CP TCONT_S TUN_EC TUN_ES
Page 61
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD / FBD / STL (not S7-1200) / SCL
Integrated system functions
Continuous-action controller
Step controller for integrating actuators
Pulse generator for proportional-acting actuators
Help functions
Mapping an input value to an output value using a character-
istic curve. The characteristic curve is a polyline with maximum 50 inter-
polation points with linear interpolation.
Converting input value into an output value
Limiting the change speed of a signal
First-order proportional transfer element
Application:
- Low-pass filter
- Delay element for smoothing signal jumps
- Process simulation block for a closed control circuit within
a CPU
Parameter: Gain, Lag
CONT_C_SF CONT_S_SF PULSGEN_SF
Polyline SplitRange RampFunction
Filter_PT1
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD / FBD / STL (not S7-1200) / SCL
Second-order proportional transfer element
Application:
- Low-pass filter
- Delay element for smoothing signal jumps
- Process simulation block for a closed control circuit within
a CPU
Parameter: Gain, TimeConstant, Damping
First-order differentiator
Application:
- High-pass filter - Differentiator to calculate the derivative of a signal
- Feedforward control
Parameter: Gain, Lag
Motion Control
T
Release/lock axis/technology
T
Acknowledge interrupts, restart axis/technology object
T
Home axis/technology objects, set home position
T
Pause axis
T
Position axis absolutely
Filter_PT2
Filter_DT1
MC_Power MC_Reset MC_Home MC_Halt MC_MoveAbsolute
A5E33285102-AG
Page 63
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD / FBD / STL (not S7-1200) / SCL
T
Position axis relatively
MC_MoveRelative
T
Move axis at set velocity/speed
MC_MoveVelocity
T
Move axis in jog mode
MC_MoveJog
Run axis commands as motion sequence
MC_CommandTable
Change dynamic settings of axis
MC_ChangeDynamic
Write tag of positioning axis
MC_WriteParam
Continuously read motion data of a positioning axis
MC_ReadParam
T
Position axis overlapping
MC_MoveSuperImposed
T
T Set alternative encoder as active encoder
MC_SetSensor
Pause axis and prevent new motion jobs
T
T Stop all motions of an axis and prevent new motion jobs. The
MC_STOP
axis brakes to a standstill and remains switched on.
Set bits in the control words (STW) 1 and/or 2 of the PROFIdrive telegram.
MC_SetAxisSTW
Enable and disable hardware limit switches during runtime.
T
The changed state is effective immediately and remains effec-
MC_WriteParameter
tive until the next restart of the technology object.
S7-300 S7-400 S7-1200 S7-1500
Basic instructions
Extended instructions
Technology
Communication
Description
LAD / FBD / STL (not S7-1200) / SCL
T
Read parameters from technology object
MC_ReadParameter
Output cams, cam track, measuring input
T
Start one-time measuring
MC_MeasuringInput
T
Start cyclic measuring
S7-1500: MC_MeasuringInputCyclic S7-300T: MC_MeasuringInput
T
Cancel active measuring job
S7-1500: MC_AbortMeasuringInput S7-300T: MC_MeasuringInput
T
Activate/deactivate output cam
S7-1500: MC_OutputCam (positionbased cams and time-based cams S7-300T: MC_CamSwitch (positionbased cam)
S7-300T: MC_CamSwitchTime (timebased cam)
T
Activate/deactivate cam track
MC_CamTrack
Synchronous motion - Gearing/camming
T
Start gearing
MC_GearIn
T
T Start gearing with specified synchronous positions
S7-1500T: MC_GearInPos S7-300T: MC_GearIn
A5E33285102-AG
Page 65
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD / FBD / STL (not S7-1200) / SCL
T Start camming
MC_CamIn
T Simulate synchronous operation
MC_SynchronizedMotionSimulation
T
T Relative shift of master value on the following axis
S7-1500T: MC_PhasingRelative S7-300T: MC_Phasing
T
T Absolute shift of master value on the following axis
S7-1500T: MC_PhasingAbsolute S7-300T: MC_Phasing
Specify additive master value, T active master value + additive master value = effective master
value
MC_LeadingValueAdditive
Cam disc
T
T Interpolating a cam disc
MC_InterpolateCam
T
T Read master value of a cam
S7-1500T: MC_GetCamLeadingValue S7-300T: MC_GetCamPoint
T
T Read out slave value of a cam
S7-1500T: MC_GetCamFollowingValue
S7-300T: MC_GetCamPoint
S7-300 S7-400 S7-1200 S7-1500
Basic instructions
Extended instructions
Technology
Communication
Description
LAD / FBD / STL (not S7-1200) / SCL
MotionIn
T Set motion setpoints for velocity and acceleration
MC_MotionInVelocity
T Set motion setpoints for position, velocity and acceleration
MC_MotionInPosition
Torque data
Specify additive torque
MC_TorqueAdditive
Set high and low torque limits
MC_TorqueRange
T
Enable and disable force/torque limiting / fixed stop detection
MC_TorqueLimiting
Motions (kinematics) - Force/torque limiting / fixed stop detection
T
T Interrupt execution of motion
MC_GroupInterrupt
T
T Continue execution of motion
MC_GroupContinue
T
T Stop motion
MC_GroupStop
T
T Position kinematics absolutely with linear path motion
MC_MoveLinearAbsolute
T
T Relative positioning of kinematics with linear path motion
MC_MoveLinearRelative
T
T Position kinematics absolutely with circular path motion
MC_MoveCircularAbsolute
T
T Relative positioning of kinematics with circular path motion
MC_MoveCircularRelative
A5E33285102-AG
Page 67
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD / FBD / STL (not S7-1200) / SCL
T
Absolute positioning of kinematics in synchronous "point-topoint" motion
T
Relative positioning of kinematics in synchronous "point-topoint" motion
Enable belt tracking T Take along object coordinate system (OCS) with a technology
object positioning axis/external sensor/leading axis substitute
Zones
T Define workspace zone
T Define kinematics zone
T Activate workspace zone
T Deactivate workspace zone
T Activate kinematics zone
T Deactivate kinematics zone
Toolbox
T Re-define tool
T Change active tool
MC_MoveDirectAbsolute MC_MoveDirectRelative
MC_TrackConveyorBelt
MC_DefineWorkspaceZone MC_DefineKinematicsZone MC_SetWorkspaceZoneActive MC_SetWorkspaceZoneInactive MC_SetKinematicsZoneActive MC_SetKinematicsZoneInactive
MC_DefineTool MC_SetTool
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD / FBD / STL (not S7-1200) / SCL
HSP HSP HSP HSP HSP HSP HSP HSP HSP HSP
Coordinate systems
T Redefine object coordinate systems
MC_SetOcsFrame
Transforming axis coordinates (position, speed, acceleration) T to Cartesian coordinates (speed and acceleration of the tool
center point) - without moving kinematics.
MC_KinematicsTransformation
T
Transform Cartesian coordinates to axis coordinates - without moving kinematics.
MC_InverseKinematicsTransformation
Time-driven inputs/outputs
Synchronize TIO modules
TIO_SYNC
Read in process input signals with time stamps
TIO_IOLink_IN
Read in edges at digital input and associated time stamps
TIO_DI
Time-controlled output of process output signals
TIO_IOLink_OUT
Output edges time-controlled at digital output
TIO_DQ
S7-300C functions
Position with analog output Position with digital output
ANALOG DIGITAL
A5E33285102-AG
Page 69
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD / FBD / STL (not S7-1200) / SCL
Control counter Control frequency meter Control pulse width modulation
Function modules
Diverse instructions for FM modules Counting/Positioning/ Cam Control/PID Control/Temp Control
COUNT FREQUENC
Pulse
Basic instructions
Extended instructions
Technology
Communication
A5E33285102-AG
Page 71
Basic instructions
Extended instructions
Technology
Communication
The following pages provide an overview of the details and usage of important functions of open communication and S7 communication.
Open communication
Definition: Open exchange of data via PROFINET/Industrial Ethernet between SIMATIC controllers or between SIMATIC controllers and third-party devices. Example of suitable interfaces: Integrated PROFINET/Industrial Ethernet interfaces of controllers PROFINET/Industrial Ethernet interfaces of communication modules Due to the open and flexible communication, the size of a sent data package is not automatically known to the receiver.
Connection-oriented with TCP or ISO-on-TCP
With TCP or ISO-on-TCP you establish a connection between the communication partners. TCP or ISO-on-TCP ensures the arrival of the data at the receiver through a transport acknowledgment. In the event of data loss the controller automatically resends the data. To ensure that the data has arrived completely in the application of the receiver with TCP, you must determine: 1. Determine the size of the data package in the sender. 2. Transfer the size of the data package to the receiver. 3. Evaluate the information in the receiver.
Connection-free with UDP
You send data packets to recipients via UDP without establishing a dedicated connection. The controller cannot detect data loss. UDP offers the following transmission options: Transfer to a specific partner - Unicast Transfer to a specific group of partners - Multicast; e.g. Multicast via defined Multicast addresses 224.0.1.0. Transfer to all - Broadcast
Basic instructions Instruction
Extended instructions
Technology
Communication
Logs
Property of the Data package Application and
data transfer size
application example
S7-300/400 S7-1200 S7-1500
TSEND/TRCV
TSEND_C/TRCV_C (Connection
TCP or ISO-on-TCP
establishment and
termination are
integrated)
Reliable with acknowledgment
<= 64 KB
Exception S7-1200: <= 8 KB
Exchange large data volumes with acknowledgment. E.g. Send data block with measured value logs to any network node. Secure connections by means of exchange of certificates. Implementation of TCP-based protocols, e.g. FTP(s), MQTT, HTTP(S). Application examples: HTTP: https://support.industry.siemens.com/cs/ document/109763879/library-for-http-communication-(lhttp)?dti=0&lc=en-AE MQTT: https://support.industry.siemens.com/cs/ document/109748872/fb-lmqtt_client-for-simatics7-cpu?dti=0&lc=en-AE
UDP
()
TUSEND/TURCV (not S7-300)
Fast, without acknowledgment
Distribute data without acknowledgment. E.g. Distribute position data quickly to many devices.
Max. 2048 bytes An exact calculation of the limits is available in the controller manuals.
A5E33285102-AG
Page 73
Basic instructions
Extended instructions
Technology
Communication
S7 communication
Definition: SIMATIC-homogeneous data exchange between SIMATIC CPUs via PROFIBUS or PROFINET/Industrial Ethernet. The S7 communication can route data between PROFINET and PROFIBUS through a controller. With S7 communication, you connect existing S7-300/400 to S7-1200/1500 or migrate existing systems to S7-1200/1500. Recommendation: Use open communication for data exchange between S7-1200/1500 and thus the possibilities of common Ethernet standards.
Coordinated data transmission with BSEND and BRCV BSEND sends data to an instruction of the type BRCV in a partner controller. Since BSEND and BRCV coordinate the data transfer, BSEND/BRCV transport the largest amount of data of all the configured S7 connections. BSEND segments the data area to be sent and sends each segment individually to the partner. BRCV acknowledges the acceptance of the sent segment. When BRCV has acknowledged the receipt of the complete data area, you can start a new send job BSEND.
Uncoordinated data transmission with USEND and URCV USEND sends data to an instruction of the type URCV in a partner controller. URCV does not acknowledge the receipt of the data. The data transfer is not coordinated with the partner controller. This means that USEND can overwrite received data before URCV has written all the data to the target area. If USEND overwrites data, the receiver outputs an error message.
S7-300/400 S7-1200 S7-1500
Basic instructions
Extended instructions
Technology
Instruction
Operating Property state of of the data partner transfer controller
Guaranteed user Application data size for specified partner controller
Communication Notes
GET
GET_S
PUT
PUT_S
RUN or STOP
Reliable with acknowledgment
<= 64 KB S7-300: 160 bytes S7-400: 400 bytes S7-1200: 160 bytes S7-1500: 880 bytes Exception S7-1200: <= 8 KB
Accessing data in the partner
controller without any programming. For example, read operating data.
You have to use data blocks with absolute addressing. Symbolic addressing is not
possible. You must also
Changing data in the partner enable this service in the
controller without any program- CPU configuration in the
ming. For example, write
"Protection" area.
parameters in a data block and
change a recipe.
BSEND/ BRCV:
RUN
S7-300 CPs: 32768 S7-300: 65534 bytes S7-400: 65534 bytes S7-1500: 65534 bytes, optimized: 65535 bytes
Exchange large amounts of data. For example, send data block with measured value logs to a SCADA system for further evaluation.
Coordinated transmission (See above)
USEND/ URCV
USEND_S/ URCV_S
Fast, without acknowledgment
S7-300: 160 bytes S7-400: 440 bytes S7-1500: 920 bytes
Control multiple controllers, or send data to multiple controllers. For example, distribute actual values of a sensor to
Uncoordinated transmission (See above)
several controllers.
A5E33285102-AG
Page 75
Basic instructions
Extended instructions
Technology
Communication
Overview of connection types
Automatic connections For basic communication, e.g. controller for the programming device for engineering or for the HMI, the system automatically reserves connections.
Programmed connections
Programmed connections are very flexible. Use TSEND_C and TRCV_C for communication. The system automatically establishes and terminates the connection. Alternatively, for SIMATIC S7-300/400 use the TCON, TDISCON, TSEND, and TRCV instructions. Use programmed connections, e.g.for sporadic connections. Communication resources are free again after the connection establishment. Establish and terminate programmed connections in the user program in RUN.
Configured connections
If the connection is interrupted, the controller automatically restores the connection. Create the connection in the network view of SIMATIC STEP 7 and configure the connection. Connection resources remain permanently occupied. Connection establishment in STOP
Basic instructions
Extended instructions
Technology
The table shows you the dependency of the connection type on the protocol.
Communication
PG HMI TCP ISO-onTCP UDP ISO Modbus TCP FDL S 7 Communication
Connection type
Automatic
XX - - - -
-
-
-
Programmed
- - XXX -
X
-
-
Configured
- XXXXX
X
X
X
A5E33285102-AG
Page 77
Basic instructions
Extended instructions
Technology
Communication
Instructions in the section "Communication"
Instruction groups
PROFINET and PROFIBUS S7 communication Open User Communication OPC UA Webserver
Page
78 79 81 82 85
Instruction groups
Page
Fail-safe HMI panels (only in the Safety
program)
85
Modbus TCP
86
Communications processors
87
S7-300C functions
96
Communication with iSlave/iDevice
97
Instruction groups
PROFINET CBA MPI communication TeleService
Page
97 98 98
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
PROFINET and PROFIBUS
Only Safety: Fail-safe sending of data via PROFIBUS DP/ PROFINET IO
Only Safety: Fail-safe receipt of data via PROFIBUS DP/ PROFINET IO
SENDDP RCVDP
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
S7 communication
Read data from a remote CPU Example of an application: Integrating SIMATIC S7-1500
into an already existing system with SIMATIC S7-300.
Write data to a remote CPU Example of an application: Integrating SIMATIC S7-1500
into an already existing system with SIMATIC S7-300.
Send data uncoordinated to a partner (URCV)
Receive data uncoordinated from a partner (USEND)
Send data in segments to a partner (BRCV)
Receive data in segments from a partner (BSEND)
Initiate a warm or cold restart in a remote device
Transition a remote device to STOP state
Initiate a restart in a remote device.
Query the status of a remote partner
Receive remote device status change
GET
PUT
USEND URCV BSEND BRCV START STOP RESUME STATUS USTATUS
A5E33285102-AG
Page 79
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Query the status of connection that belongs to an SFB instance
CONTROL
Send data to printer
PRINT
Query connection status
C_CNTRL
Only Safety: Fail-safe sending of data via S7 connections SENDS7
Only Safety: Fail-safe receipt of data via S7 connections RCVS7
Other instructions
Note: "S" stands for short since only one parameter is possible
Read data from a remote CPU
GET_S
Write data to a remote CPU
PUT_S
Send data uncoordinated
USEND_S
Receive data uncoordinated
URCV_S
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Open User Communication
Compact instructions (..._C) Connect and Disconnect are integrated
Manage communication connection and send data via Ethernet or Profibus
Manage communication connection and send data via Ethernet or Profibus
Manage communication connection and transfer email
Other instructions
Establish communication connection
Terminate communication connection
Send data via communication connection
Receive data via communication connection
Resetting the connection
Check the connection
Configure interface
TSEND_C
TRCV_C TMAIL_C
TCON TDISCON
TSEND TRCV T_RESET T_DIAG T_CONFIG
A5E33285102-AG
Page 81
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Program-controlled IP and connection configuration via SEND/RECEIVE
Send data via Ethernet (UDP)
Receive data via Ethernet (UDP)
Change IP configuration parameters
Swap data using FETCH and WRITE via TCP
Swap data using FETCH and WRITE via ISO-on-TCP
OPC UA
OPC UA server
Query to operating system whether the serve method was called and provision of the input parameters for
processing the method.
Transferring information to the operating system about the status of method execution and whether the output
parameters of the method are valid.
IP_CONFIG TUSEND TURCV IP_CONF FW_TCP FW_IOT
OPC_UA_ServerMethodPre
OPC_UA_ServerMethodPost
S7-300 S7-400 S7-1200 S7-1500
Basic instructions
Extended instructions
Technology
Communication
Description
LAD/FBD
STL (not S7-1200)
SCL
Schematic flow:
OPC UA client
Preparing data exchange, establishing a session
Establish connection.
OPC_UA_Connect
Request the current indexes of the namespaces in an OPC UA server
OPC_UA_NamespaceGetIndexList
Register PLC tags with an OPC UA server, get handles for read and write access
OPC_UA_NodeGetHandleList
A5E33285102-AG
Page 83
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Determine NodeIds (node parameters) from tag names (BrowseName)
OPC _UA _TranslatePathList
Register OPC UA method with an OPC UA server
OPC_UA_MethodGetHandleList
Data exchange/data access
Read values from PLC tags
OPC_UA_ReadList
Writing new values in PLC tags
OPC _UA _WriteList
Call method
OPC_UA_MethodCall
Ending data exchange, ending a session
Terminate connection to the OPC UA server
OPC_UA_Disconnect
Enable handles for method calls
OPC_UA_MethodReleaseHandleList
Diagnostics
Read connection status and determine quality of a connection
OPC _UA _Connec tionGetStatus
OPC UA: CP 443-1 OPC UA
Establish connection.
UA_Connect
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Request the current indexes of the namespaces in an OPC UA server
UA_NamespaceGetIndex
Register PLC tags with an OPC UA server, get handles for read and write access
UA_NodeGetHandleList
Reading out the data from nodes of the connected server using the list of node handles
UA_ReadList
Writing the data in nodes of the connected server using the list of node handles
UA _WriteList
Register PLC tags with an OPC UA server, get handles for read and write access
UA_NodeReleaseHandleList
Terminate connection to the OPC UA server
UA_Disconnect
Web server
Synchronize user-defined web pages
WWW
Fail-safe HMI panels (only in the Safety program)
For Mobile Panel 277 F IWLAN: Communication with connected device via PROFIsafe
F_FB_MP
For Mobile Panel 277 F IWLAN: Managing of up to 4 panels in the effective range
F_FB_RNG_4
A5E33285102-AG
Page 85
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
For Mobile Panel 277 F IWLAN: Managing of up to 16 panels in the effective range
F_FB_RNG_16
For Mobile Panels of the second generation: Communication with connected device via PROFIsafe
F_FB_KTP_
For Mobile Panels of the second generation: Managing of panels in the effective range
F_FB_KTP_ RNG
Modbus TCP
Communicate via PROFINET as Modbus TCP client
MB_CLIENT
Communicate via PROFINET as Modbus TCP server
MB_SERVER
Communicate redundantly via PROFINET as MODBUS TCP client
MB_RED_CLIENT
Communicate redundantly via PROFINET as a MODBUS TCP server
MB_RED_SERVER
Establish communication between a CPU with integrated PN interface and a partner that supports the Modbus/ TCP protocol.
MODBUSPN
Connection management
TCP_COMM
Communicate via Ethernet as Modbus TCP client
MOD_CLI
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Communicate via Ethernet as Modbus TCP server
Communications processors
Not for S7-1500 Software Controller CPU 150xS
Point-to-Point or PtP communication
S7-300/400: Commands for ET 200SP CM PtP
Configure PtP communication port S7-300/400: Only if ET 200SP CM PtP is used
Configure PtP sender
Configure PtP recipient
Configure 3964 (R) protocol
Send data
Receive data
Delete receive buffer
Read status
Set accompanying signals
Get extended functions
A5E33285102-AG
MOD_SRV
Port_Config
Send_Config Receive_Config P3964_Config
Send_P2P Receive_P2P Receive_Reset Signal_Get Signal_Set Get_Features
Page 87
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Set extended functions
Set_Features
Instructions with lower memory requirements, but also less functional scope.
Recommendation: Use the instructions specified above. You cannot apply the instructions decentrally in an ET 200.
Configure communication parameters dynamically
Configure serial transmission parameters dynamically
Configure serial receive parameters dynamically
Transmit send buffer data
Enable receive messages
Delete receive buffer
Query RS 232 signals
Set RS 232 signals
USS communication
S7-300/400: Commands for ET200SP CM PtP
Edit communication via USS network
Communication via USS network (16 drives)
PORT_CFG SEND_CFG RCV_CFG SEND_PTP RCV_PTP RCV_RST SGN_GET SGN_SET
USS_PORT USS_Port_Scan
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Communication via USS network (31 drives)
Prepare and display data for the drive
Data exchange with the drive (16 drives)
Data exchange with the drive (31 drives)
Read out parameters from the drive
Read data from drive (16 drives)
Read data from drive (31 drives)
Change parameters in the drive
Change data in drive (16 drives)
Change data in drive (31 drives)
MODBUS (RTU)
S7-300/400: Commands for ET200SP CM PtP
Configure communication module for Modbus
Communicate as Modbus master
Communicate as Modbus slave
USS_Port_Scan_31 USS_Drive
USS_Drive_Control USS_Drive_Control_31
USS_RPM USS_Read_Param USS_Read_Param_31
USS_WPM USS_Write_Param USS_Write_Param_31
Modbus_Comm_Load Modbus_Master Modbus_Slave
A5E33285102-AG
Page 89
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Recommendation: Use the instructions
Instructions with lower memory requirements, but also specified above. You cannot apply the
less functional scope.
instructions decentrally with a CM or in an
ET 200.
Configure port on the PtP module for Modbus RTU
MB_COMM_LOAD
Communicate via the PtP port as Modbus master
MB_MASTER
Communicate via the PtP port as Modbus slave
MB_SLAVE
Point-to-point connection: CP 340
Receive data
P_RCV
Send data
P_SEND
Output alarm text with up to 4 tags to printer
P_PRINT
Delete receive buffer
P_REST
Read accompanying signals at the RS 232 interface
V24_STAT_340
Write accompanying signals at the RS 232C interface
V24_SET_340
Point-to-point connection: CP 341
Receive or provide data
P_RCV_RK
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Send or fetch data Output alarm text with up to 4 tags to printer Read accompanying signals at the RS 232 interface Write accompanying signals at the RS 232C interface
Point-to-point connection: CP 440 Receive data Send data Delete receive buffer
Point-to-point connection: CP 441 Read accompanying signals at the RS 232 interface Write accompanying signals at the RS 232C interface
MODBUS slave (RTU) Modbus slave instruction for CP 341 Modbus slave instruction for CP 441
P_SND_RK P_PRT341 V24_STAT V24_SET
RECV_440 SEND_440 RES_RECV
V24_STAT_441 V24_SET_441
MODB_341 MODB_441
A5E33285102-AG
Page 91
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
MODBUS: CP 343-1, CP 443-1
Establish communication between a CP and a partner that supports the OPEN MODBUS/TCP protocol
Communicate as Modbus client
Communicate as Modbus server
ET 200S serial interface ("S_" stands for "serial")
Receive data
Send data
Read accompanying signals at the RS 232 interface
Write accompanying signals at the RS 232C interface
Set data flow control using XON/XOFF
Set data flow control using RTS/CTS
Configure data flow control via automatic Configure operation of the RS 232C accompanying signals
Modbus slave instruction for ET 200S 1SI
Send data to a USS slave
MODBUSCP MB_CPCLI MB_CPSRV
S_RCV S_SEND S_VSTAT S_VSET S_XON S_RTS S_V24 S_MODB S_USST
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Receive data from a USS slave
Initialize USS
SIMATIC NET CP Open User Communication Passes data to the CP for transfer via a configured connection Passes jobs to the CP for accepting received data Locks data exchange via a connection with FETCH/WRITE Enable external access to user memory areas of the controller. Data exchange is then possible with FETCH/ WRITE. Connection diagnostics Connection diagnostics, connection establishment, ping request
PROFIBUS DP Data transfer to the CP as DP master or DP slave Data receipt from CP as DP master or DP slave
A5E33285102-AG
S_USSR S_USSI
AG_SEND AG_RECV AG_LOCK
AG_UNLOCK
AG_CNTRL AG_CNTEX
DP_SEND DP_RECV
Page 93
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Request of diagnostic information Transfer of control information to the PROFIBUS CP
PROFINET IO Data passing to the CP as IO controller or IO device Data receipt from CP as IO controller or IO device Read data record or write data record in IO controller Alarm evaluation through CP343-1 as IO controller
PROFIenergy Triggering or ending an energy saving pause Extended triggering or ending of an energy saving pause Processing of the commands of the IO controller in the PROFIenergy device Transfer of the switch setting from power modules to ET 200S
DP_DIAG DP_CTRL
PNIO_SEND PNIO_RECV PNIO_RW_REC PNIO_ALARM
PE_START_END_CP PE_CMD_CP PE_I_DEV_CP
PE_DS3_Write_ET200_CP
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Other instructions
Use of a logical trigger for ERPC communication
Setup of FTP connections from and to an FTP server
Transfer connection data from configurations DB to CP
GPRSComm: CP 1242-7
Establish connection via GSM network
Terminate connection via GSM network
Send data via the GSM network
Receive data via the GSM network
Transfer configuration data to CP
S7-300C functions
ASCII, 3964®
Send data (ASCII, 3964(R))
Fetch data (ASCII, 3964(R))
Reset input buffer (ASCII, 3964(R))
LOGICAL_TRIGGER FTP_CMD IP_CONFIG
TC_CON TC_DISCON
TC_SEND TC_RECV TC_CONFIG
SEND_PTP_300C RCV_PTP_300C RES_RCVB_300C
A5E33285102-AG
Page 95
Basic instructions
Extended instructions
Technology
Communication
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
RK 512 Send data (RK 512) Fetch data (RK 512) Receive and provide data (RK 512)
Communication with iSlave/iDevice
Read data from a communication partner within the local S7 station Write data to a communication partner within the local S7 station Abort a connection to a communication partner within the local S7 station
PROFINET CBA
Update the inputs of the user program interface Update the outputs of the user program interface Release DP interconnections
SEND_RK_300C FETCH_RK_300C SERVE_RK_300C
I_GET I_PUT I_ABORT
PN_IN PN_OUT PN_DP
S7-300 S7-400 S7-1200 S7-1500
Basic instructions
Extended instructions Description
Technology
Communication
LAD/FBD
STL (not S7-1200)
SCL
MPI communication
Send data to a communication partner outside the local S7 station
Receive data from a communication partner outside the local S7 station
Read data from a communication partner outside the local S7 station
Write data to a communication partner outside the local S7 station
Abort an existing connection to a communication partner outside the local S7 station
TeleService
Transfer email
Establish remote connection to programming device/PC
Establish remote connection to AS
Send text (SMS) message
Transfer email
A5E33285102-AG
Note: "X" stands for the MPI interface X_SEND X_RCV X_GET X_PUT X_ABORT
TM_MAIL PG_DIAL AS_DIAL SMS_SEND AS_MAIL
Page 97
S7-300 S7-400 S7-1200 S7-1500
Optional instructions Appendix "Optional instructions"
Description
SIMATIC Ident
Read data from transponder Read out data from code reading system Reset reader Set program at code reading system Write data to the transponder
Status queries Read out status of the reader Read out status of the transponder
Extended functions Load the configuration data to the reader Back up configuration data from the reader Detect transponder population Read out data of the TID memory of a transponder
LAD/FBD
STL (not S7-1200)
SCL
Read Read_MV Reset_Reader Set_MV_Program
Write
Reader_Status Tag_Status
Config_Download Config_Upload Inventory Read_TID
Optional instructions
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Read out UID of an HF transponder Switch on/off antenna of RF300 readers Set UHF parameters in the reader Write EPC ID of a UHF transponder
Ident function for trained users with command transfer in a data structure
Complex Ident function for experts with all commands and possibilities
Legacy
Read out data of the EPC memory of a transponder
Write EPC memory of a UHF transponder
Switch on/off antennas of RF620R/RF630R
Reset MOBY D reader
Reset MOBY U reader
Reset MV code reading device
Read_UID Set _ ANT_ RF30 0
Set_Param Write_EPC_ID Advanced_CMD
Ident_Profile
Read_EPC_Mem Write_EPC_Mem Set _ ANT_ RF60 0 Reset_MOBY_D Reset_MOBY_U
Reset_MV
A5E33285102-AG
Page 99
Optional instructions
S7-300 S7-400 S7-1200 S7-1500
Description
LAD/FBD
STL (not S7-1200)
SCL
Reset RF200 reader Reset RF300 reader Reset RF600 reader
Reset function for experts allows universally adjustable parameters
Energy Suite
Calculate operating-mode-related energy data of machines and systems for uniform efficiency evaluation
according to measuring regulation
Create efficiency protocol in CSV format on the SIMATIC memory card of the CPU according to measuring regula-
tion
SINAMICS
Cyclic control of SINAMICS as basic positioner
Cyclic control of SINAMICS as basic positioner with stan dard telegram 1111;
Position-controlled axis
Reset_RF200 Reset_RF300 Reset_RF600 Reset_Univ
EnS_EEm_Calc
EnS_EEm_Report
TO_BasicPos SinaPos
S7-300 S7-400 S7-1200 S7-1500
Optional instructions
Description
LAD/FBD
STL (not S7-1200)
SCL
Cyclic control of SINAMICS with standard telegram 1; speed-controlled axis
Acyclic read/write of max. 16 parameters from/on the SINAMICS inverter
Acyclic read/write a parameter from/on the SINAMICS inverter
Control feed unit of a SINAMICS S120 via standard telegram 370
SinaSpeed SinaPara SinaParaS SinaInfeed
A5E33285102-AG
Page 101
Optional instructions
Siemens AG Digital Industries Postfach 48 48 90026 Nuremberg GERMANY
Subject to change without prior notice. A5E33285102-AG © Siemens AG 2019
https://www.siemens.com/automation
Short document 03/2016
Security with SIMATIC controller
SIMATIC S7-300/400/WinAC/1200/1500
https://support.industry.siemens.com/cs/ww/en/view/77431846
Siemens AG 2016 All rights reserved
Warranty and liability
Warranty and liability
Note
The Application Examples are not binding and do not claim to be complete regarding the circuits shown, equipping and any eventuality. The Application Examples do not represent customer-specific solutions. They are only intended to provide support for typical applications. You are responsible for ensuring that the described products are used correctly. These Application Examples do not relieve you of the responsibility to use safe practices in application, installation, operation and maintenance. When using these Application Examples, you recognize that we cannot be made liable for any damage/claims beyond the liability clause described. We reserve the right to make changes to these Application Examples at any time without prior notice. If there are any deviations between the recommendations provided in these Application Examples and other Siemens publications e.g. Catalogs the contents of the other documents have priority.
We do not accept any liability for the information contained in this document. Any claims against us based on whatever legal reason resulting from the use of the examples, information, programs, engineering and performance data etc., described in this Application Example shall be excluded. Such an exclusion shall not apply in the case of mandatory liability, e.g. under the German Product Liability Act ("Produkthaftungsgesetz"), in case of intent, gross negligence, or injury of life, body or health, guarantee for the quality of a product, fraudulent concealment of a deficiency or breach of a condition which goes to the root of the contract ("wesentliche Vertragspflichten"). The damages for a breach of a substantial contractual obligation are, however, limited to the foreseeable damage, typical for the type of contract, except in the event of intent or gross negligence or injury to life, body or health. The above provisions do not imply a change of the burden of proof to your detriment. Any form of duplication or distribution of these Application Examples or excerpts hereof is prohibited without the expressed consent of the Siemens AG.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks. In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept. Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place. Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit http://www.siemens.com/industrialsecurity.
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats. To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under http://www.siemens.com/industrialsecurity.
security
Entry-ID: 77431846, V2.0, 03/2016
2
Table of contents
Table of contents
Warranty and liability................................................................................................... 2
1 Minimizing Risk through Security.................................................................... 4
1.1 1.2 1.2.1 1.2.2 1.3 1.4 1.5
Security strategies................................................................................ 4 Implementation of strategies into solutions .......................................... 5 Strengthening the sense of responsibility ............................................ 5 The Siemens protection concept: "Defense in Depth" ......................... 6 Differences between office security and industrial security ................. 7 Differences between functional safety and industrial security ............. 7 Security management .......................................................................... 8
2 Security Mechanisms of the S7 CPU ............................................................... 9
2.1
Block protection .................................................................................... 9
2.2
Online access and function restrictions.............................................. 12
2.3
Copy protection (S7-1200 (V4) / S7-1500)......................................... 13
2.4
Local access protection (S7-1500)..................................................... 14
2.5
Further measures for protecting the CPU .......................................... 15
3 Security Mechanisms of the S7-CPs ............................................................. 17
3.1 3.2 3.3 3.4 3.4.1 3.4.2 3.4.3 3.4.4
Stateful Inspection Firewall ................................................................ 17 Data encoding via VPN ...................................................................... 18 NAT/NAPT (address translation)........................................................ 18 Secure IT functions ............................................................................ 19 File Transfer Protocol (FTP)............................................................... 19 Network Time Protocol (NTP) ............................................................ 19 Hypertext Transfer Protocol (HTTP) .................................................. 20 Simple Network Management Protocol (SNMP) ................................ 20
4 The Achilles Certification Program................................................................ 21
5 Literature .......................................................................................................... 22
6 History............................................................................................................... 23
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
3
Siemens AG 2016 All rights reserved
1 Minimizing Risk through Security
1
Minimizing Risk through Security
Increased networking and the use of proven technologies of the office world in automation systems lead to increased security requirements. It is not sufficient to offer only superficial and limited protection, since attacks from outside may occur on several levels. A deep understanding of security and how to apply it is required for optimal protection.
1.1
Security strategies
Motivation
The first priority in automation is maintaining control over the production process. Measures intended to reduce the security threats must not interfere with this priority. The use of an adequate protection concept should ensure that only authenticated users can carry out (authorized) operations, restricting access to those operation options approved for use by the authenticated user. The operation is to be carried out exclusively in clearly planned access paths to ensure that the production process will continue to operate securely during a command without any risks for people, the environment, the product, the goods to be coordinated and the business of the company.
Strategies Based on these statements, a protection concept comprises general defense strategies which are intended to resist the following attacks: · decrease of availability (e.g. denial of Service)
· bypassing single security mechanisms (such as "man in the middle")
· intentional incorrect operation by authorized users (such as stealing passwords)
· incorrect operations due to misconfigured user privileges
· unauthorized monitoring of data (such as recipes and business secrets or the functioning of the machines and systems and their security mechanisms)
· modifying data (for example to alter alarm levels) · deleting data (for example login files for covering attacks). The Siemens defense strategy uses the mechanisms of "Defense in Depth".
Defense in Depth
The concept of Defense in Depth contains layered structures of security and recognition measures that are superior to the security level of stand-alone systems. It has the following features:
· Capability to detect attackers that try to break through or bypass the Defense in Depth structure.
· A weak point in one layer of this architecture can be temporarily compensated for by the defensive strategies in other layers.
· The system security has its own layer structure within the overall layered structure of the networks security.
security
Entry-ID: 77431846, V2.0, 03/2016
4
1 Minimizing Risk through Security
1.2
1.2.1
Implementation of strategies into solutions
Strengthening the sense of responsibility
A successful implementation of the security strategy into solutions in the automation systems can only be achieved if all the parties involved cooperate responsibly. This includes:
· manufacturers (development, system test, security test)
· systems integrator (planning, structure, factory acceptance test)
· owner/operators (operation and administration). The strategies and their implementation must be supervised and updated throughout the complete service life of the system (from the beginning of submitting the offer, planning and design to the migration and de-installation of a system). The following capabilities make it possible for a protection concept in automation systems to be effective:
· the use of highly available and system-tested products, which have hardened and pre-defined security settings, and have been especially designed for industrial applications,
· a modern configuration, using state-of-the-art technologies and standards and allows for a system design adapted to the customer's security needs,
· the careful and responsible operation of systems and components in accordance with the uses defined by the manufacturer.
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
5
Siemens AG 2016 All rights reserved
1 Minimizing Risk through Security
1.2.2
The Siemens protection concept: "Defense in Depth"
Figure 1-1
Siemens follows the "Defense in Depth" strategy in order to achieve the required security goals. The approach of this strategy is a multi-layer security model consisting of the following components: · Plant Security · Network security · System integrity
Plant Security
· Physical Security · Policies and procedures
DCS/ SCADA*
Network Security
· Security cells and DMZ · Firewalls and VPN
System Integrity
· System hardening · User Account Management · Patch Management · Malware detection and prevention
The advantage of this strategy is the fact that an attacker first has to break through several security mechanisms to do any damage. The security requirements of each layer can be taken into account individually.
The Siemens solution for plant security
Implementation of an appropriate, comprehensive security management is the basis for planning and realizing an industrial security solution. Security management is a process mainly comprising four steps:
· Risk analysis with definition of risk reduction measures: These measures must be defined for the plant, depending on the threats and risks identified.
· Determination of guidelines and coordination of organizational measures.
· Coordination of technical measures.
· A consistent security management process with regular or event-dependent repetition of risk analysis.
The Siemens solution for network security
If controllers or other intelligent devices with no or minimum self-protection are located in a network segment, a good option to consider is to create a secured network environment for these devices. One approach to achieve this is by the use of network security appliances. . Additional security can be provided by segmenting individual sub-networks, e.g. through a cell protection concept or a demilitarized zone (DMZ).
security
Entry-ID: 77431846, V2.0, 03/2016
6
Siemens AG 2016 All rights reserved
1 Minimizing Risk through Security
Note
The Siemens security solution was developed particularly for the requirements of an automation environment, in order to meet the increasing demand of network security, to reduce the susceptibility to failure of the entire production plant and thus to increase its availability.
Further information on this topic is available in the Siemens Industry Online Support (Entry ID: 27043887). http://support.automation.siemens.com/WW/view/en/27043887
The Siemens solution for system integrity
In order to maintain the system integrity, it is important to minimize the vulnerabilities in PC systems and in the control level. Siemens meets this requirement with the following solutions:
· use of antivirus and whitelisting software,
· patch management,
· user authentication for machine or plant operators,
· integrated access protection mechanisms in automation components,
· protection of the program code through know-how protection, copy protection, and assignment of passwords.
1.3
Differences between office security and industrial
security
The security mechanisms integrated in PCs and Windows operating systems generally provide a high level of security. However, these measures are typically designed for the requirements of office environments. In industrial security, the objects to be protected are quite similar, but, to some extent, their priorities differ significantly. While the top priorities in office IT are typically the confidentiality and integrity of information, plant availability or operability come first in industrial security. When selecting appropriate security measures, it must always be ensured that they provide the necessary level of protection without having unacceptable impact on the actual operation.
1.4
Differences between functional safety and industrial
security
Functional safety addresses protection of the controlled environment against abnormal operation of the system. On the other hand security addresses protection of normal operation of a system against intentional or unintentional violations. However safety systems also need to be particularly protected against such violations.
It's a machine vendor's task to establish appropriate safety mechanisms. These mechanisms must not primarily be included into the defense in depth concept, even if they can contribute.
Whereas safety threats are basically static, security threats are dynamic during lifetime of a machine / plant. Therefore the security protection needs to be continuously revised.
security
Entry-ID: 77431846, V2.0, 03/2016
7
1 Minimizing Risk through Security
1.5
Security management
Security management is an integral part of an industrial security concept to address all security-relevant aspects of an automation solution either a single machine, a plant section or an entire plant. As the potential threats to an automation solution change over its life cycle a process to monitor and detect these threats, known as security management, should be considered. The objective of this process is to achieve the necessary security level of an automation solution and to maintain it on a permanent basis. The risk analysis component contained within a security management process ensures that only appropriate countermeasures will be implemented to reduce the risks. An example of a security management process is as follows:
Figure 1-2
Risk analysis
Validation and improvement
Guidelines, organizational measures
Technical measures
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
8
Siemens AG 2016 All rights reserved
2 Security Mechanisms of the S7 CPU
2
Security Mechanisms of the S7 CPU
The following chapters show which integrated access protection mechanisms the SIMATIC S7 controllers offer
2.1
Block protection
Overview
In STEP 7 V5.x and in STEP 7 (TIA Portal), there are different protection facilities to protect the know-how of the programs in the blocks against unauthorized persons.
· Know-how protection
· S7 Block Privacy
If a block protected by this function is opened, only the block interface (IN, OUT and IN/OUT parameters) and the block comment can be read. The program code, temporary/static variables and the network comments are not displayed. It is not possible to modify a protected block.
The following table gives an overview of the individual know-how protection facilities:
Table 2-1
Development environment:
Language
Module protection
Validity
STEP 7 V5.x
· LAD / FBD / STL Know-how protection
· SCL
(not password-protected)
· S7-GRAPH
· CFC
S7-300/400/ WinAC
STEP 7 V5.5
STEP 7 (TIA Portal)
· LAD / FBD / STL S7 Block Privacy
· S7-SCL
(password-protected)
· LAD / FBD / STL Know-how protection
· S7-SCL
(password-protected)
· S7-GRAPH
· LAD / FBD · S7-SCL
· LAD / FBD / STL · S7-SCL
S7-300/400 S7-300/400
S7-1200 (V4) S7-1500
Overview of the blocks
S7 Block Privacy With the S7 Block Privacy, only FBs and FCs can be protected. Know-how protection With the attribute KNOW_HOW_PROTECT a know-how protection mechanism for blocks of type OB, FB and FC can be activated.
Instance data blocks cannot be protected manually since they depend on the know-how protection of the assigned FB. This means that the instance data block of a password-protected FB also contains a know-how protection. This does not depend on whether the instance data block has been explicitly created or generated by a block call.
security
Entry-ID: 77431846, V2.0, 03/2016
9
Siemens AG 2016 All rights reserved
2 Security Mechanisms of the S7 CPU
In TIA Portal are also global data blocks allowed. ARRAY-data blocks could not be protected with know-how protection.
Limitations Blocks with a block protection cannot be further processed in STEP 7 (without correct password). Nor are testing and commissioning functions such as "Monitor blocks" or "Stops" possible. Only the interfaces of the block remain visible. The following actions can be carried out with a protected block:
· copy and delete
· call the protected block
· online/offline comparison
· load
S7 Block Privacy
S7 Block Privacy is a STEP 7 expansion pack from V5.5 onwards for protecting functions and function blocks.
When using S7 Block Privacy, the following must be observed:
· S7 Block Privacy is operated via the context menus.
· Blocks once protected can only be unprotected with the correct password and according to the enclosed recompilation information. Therefore it is recommended to keep the password in a safe place and/or make copies of the unprotected blocks.
· Protected blocks can only be loaded to 400 CPUs from version 6.0 onwards, on 300 CPUs only from version 3.2.
· If there are sources in the project, the protected blocks can be restored by means of the sources by compilation. The sources can be completely removed from the S7 Block Privacy.
Note
Further information for setting the block protection with the S7 Block Privacy can be found in the FAQ "How can the improved block protection for FBs and FCs be set up in STEP 7 V5.5? (Entry ID: 45632073). http://support.automation.siemens.com/WW/view/en/45632073
Know-how protection (STEP 7 V5.x)
Blocks in STEP7 V5.x can be protected by adding a block attribute. The code word KNOW_HOW_PROTECT is indicated during programming of the block in the source.
The block protection can only be revoked with the STL source. If the STL sources are no longer available to the program or the project, the protection for the blocks cannot be removed.
It is recommended to use S7-Block Privacy instead as an improved know-how protection mechanism.
Note
Further information on setting up the block protection can be found in the KNOW_HOW_PROTECT FAQ "How can a block protection be installed for blocks I created myself?" (Entry ID: 10025431).
http://support.automation.siemens.com/WW/view/en/10025431
security
Entry-ID: 77431846, V2.0, 03/2016
10
2 Security Mechanisms of the S7 CPU
Know-how protection (TIA Portal)
In the TIA Portal, the block protection is set via the context menu by indicating a password.
The following must be observed:
· In the comparison between the offline and the online version of know-howprotected blocks, only the data that are not protected will be compared.
· No type of a know-how-protected block can be created in the library. If such a block is added to a library, the new copying template also contains the knowhow protection. There, you need the correct password of the know-howprotected block for using the copies. If a know-how-protected block is to be used in a library without disclosing the password, the following items have to be observed for programming these blocks:
During compilation all the code and data blocks called must be known. So it is not possible to make any indirect calls.
For programming the blocks, the use of PLC variables and global data blocks should be avoided.
Note
Further information can be found in the STEP 7 (TIA Portal) online help at: · Set up know-how protection for blocks · Open know-how-protected blocks · Remove know-how protection for blocks
For S7-1200 (V4) and S7-1500-PLCs an additional copy protection can be set up which binds execution of the block to the PLC to the memory card with the defined serial number.
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
11
2 Security Mechanisms of the S7 CPU
2.2
Online access and function restrictions
CPU protection levels
The S7 CPU offers three (S7-300/S7-400/WinAC) or four (S7-1200(V4)/S7-1500) access levels to limit the access to certain functions. Setting the access level and the passwords restricts the functions and memory areas that are accessible without a password. The individual access levels and the respective passwords are defined in the object properties of the CPU.
Table 2-2
Access levels
Access restriction
Level 1
The hardware configuration and the blocks can be read and modified by
(no protection) anyone.
Level 2
(write protection)
With this access level, only read access is allowed without a password, which means that the following functions can be carried out:
· reading the hardware configuration and the blocks
· reading diagnostic data
· loading the hardware configuration and the blocks into the programming device.
· changing the operating state (RUN/STOP) (not for S7-300 / S7-400 / WinAC)
Without the password the following functions cannot be carried out:
· loading the blocks and hardware configuration into the CPU
· writing test functions
· firmware update (online)
Level 3
(write/read protection)
At this access level, only · HMI access and · reading diagnostic data is possible without a password. Without the password the following functions cannot be carried out: · loading the blocks and hardware configuration into or from the CPU, · writing test functions · changing the operating state (RUN/STOP)
(not for S7-300 / S7-400 / WinAC) · firmware update (online).
Level 4 (complete protection) S7-1200 (v4) S7-1500
With a complete protection, the CPU forbids: · read and write access to the hardware configuration and the blocks, · HMI access, · modifications in the server function for PUT/GET communication, · read and write access in the area "Accessible devices" and in the
project for devices that are switched online.
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
12
2 Security Mechanisms of the S7 CPU
Operating behavior with activated protection level
A password-protected CPU has the following behavior during operation:
· The protection of the CPU becomes effective when the settings have been loaded into the CPU and a new connection is established.
· Before an online function can be carried out, it is first checked whether it is admissible, and if there is a password protection, the user is asked to enter the password.
· The functions protected by a password can only be carried out by a single PG/PC at a time. No other PG/PC can login with the same password.
· The access rights to the protected data applies only for the duration of the online connection or until the access authorization has been removed manually with "Online > Remove access rights"
Note
The configuration of an access level does not replace the know-how protection. This prevents unauthorized modifications in the CPU by restricting the download rights. The blocks on the SIMATIC memory card, however, are not write or readprotected. For protecting the program code, the know-how protection must be used.
2.3
Copy protection (S7-1200 (V4) / S7-1500)
Note
Copy protection makes it possible to associate the entire program or the individual block with a specific SIMATIC memory card or CPU. By associating the program elements with a serial number of a SIMATIC memory card or a CPU, it is only possible to use this program or this block in combination with this defined SIMATIC memory card or CPU.
If a block with a copy protection is loaded into a device that does not correspond to the serial number defined, the complete loading process is rejected. This also means that even blocks without copy protection cannot be loaded.
The copy protection and the entries of the respective serial numbers are made in the block properties.
If such a copy protection is installed for a block, it is important that this block also contain block know-how protection. Without know-how protection, anyone would be able to remove the copy protection.
However, the copy protection must be installed first, since the settings for the copy protection are write-protected if the block has know-how protection.
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
13
2 Security Mechanisms of the S7 CPU
2.4
Local access protection (S7-1500)
Locking the CPU
The SIMATIC S7-1500 has a front flap with a display and operating buttons. For inserting and removing the SIMATIC memory card and for manual changes of the CPU operating state, it must be opened.
For the protection of the CPU against unauthorized access, this front flap can be secured with the locking hatch. Two options are available:
· securing the front flap with a lock
· securing the front flap with a seal
Figure 2-1
Locking the display
In the display you can block the access to a password-protected CPU (local locking). The access protection is only effective when the operating mode switch is in the RUN position. The access protection is effective independent of the password protection, i.e. even if somebody accesses the CPU through a connected programming device and enters the correct password, the access to the CPU will still be denied. The access protection can be set separately for every access level in the display, which means that for example read access is locally permitted, but write access is not permitted locally. You can configure a password for the display in STEP 7 in the properties of the CPU in such a way that the local access protection is ensured by a local password.
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
14
2 Security Mechanisms of the S7 CPU
2.5
Further measures for protecting the CPU
Note
The following measures additionally increase the protection against unauthorized access to the functions and data of the S7 CPU from outside and within the network: · deactivate or restrict the web server · deactivate the time synchronization via NTP server · deactivate the PUT/GET communication (S7-1200(V4)/ S7-1500)
In the default configuration of the modules, these functions are deactivated.
Security functions for the web server
With the web server you can remote control and monitor the CPU via the company Intranet. Evaluations and diagnostics are therefore possible over great distances. However, the risk of unauthorized accesses to the CPU can increase by activating the web server. If you wish to activate the web server, we recommend the following measures:
· do not connect the CPU web server directly to the internet
· protect access to the web server via the use of appropriate network segmentation, DMZ, and security appliances.
· access the web server via the secure transmission protocol "https",
· configure the user and functions rights via the user list create a user define execution rights assign passwords.
Users can only perform the functions that have been established as part of the user administration configuration. Once a user has been configured he can log in with his password and access the websites according to his access rights. By default, a user with the name "Everybody" has been set. This user has minimum access rights (read access to the intro and start page). The user "Everybody" has been set without a password and cannot be modified.
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
15
2 Security Mechanisms of the S7 CPU
Deactivate the PUT/GET communication (S7-1200(V4)/ S7-1500) The CPU can be the server for a number of communication services. In this mode, other communication devices can access the CPU data without having been configured or programmed explicitly for the CPU. In the same way the local CPU does not have the possibility of controlling the communication to the clients. Whether this type of communication is admissible for the local CPU or not, is defined in the object properties of the CPU. In the default configuration, the option "Access via the PUT/GET communication..." is deactivated. In this case, read and write access to the CPU data is only possible for those communication connections which require programming for the local CPU and for the communication partner (e.g. Access via BSEND / BRECV instructions, is possible even in the default configuration). Communications, for which the local CPU is only server (that means, that there is no configuration / programming of the communication to the communication partner), are not possible in the operation of the CPU. This includes: · PUT/GET, FETCH/WRITE or FTP access via communication modules
· PUT/GET access by other S7-CPUs
· HMI access via PUT/GET communication
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
16
3 Security Mechanisms of the S7-CPs
3
Note
Security Mechanisms of the S7-CPs
The following chapters show which security mechanisms the SIMATIC S7-CPs (CP x43-1 Advanced V3 and CP 1x43-1) offer.
The functions in CP 1543-1 can be configured from STEP 7 Professional V12 including update 1 onwards. The CP 1243-1 needs STEP 7 Professional V13 Update 3 or higher..
Figure 3-1
Siemens AG 2016 All rights reserved
CP 1543-1
CP 1243-1
CP 343-1 Advanced CP 443-1 Advanced
3.1
Stateful Inspection Firewall
Description
Firewalls make it possible to filter the incoming and outgoing traffic that flows through a system. A firewall can use one or more sets of "rules" to inspect network packets as they come in or go out of network connections and either allows the traffic through or blocks it. The rules of a firewall can inspect one or more characteristics of the packets such as the protocol type, source or destination host address, and source or destination port.
The filter capabilities of a package filter can be improved considerably if the IP packages are checked in their proper context. For instance, a UDP package arriving from an external computer should only be forwarded internally if another UDP package has been sent to that computer shortly before from within the network (e.g. in case of a DNS request of a client in the internal network to an external DNS server). To enable this, the package filter must maintain records of all states to all current connections. Package filters that are able to do this are therefore referred to as Stateful.
Properties Stateful Inspection Firewalls have the following properties: · with TCP connections: Imitation of the status monitoring of a complete TCP/IP protocol stack · with UDP connections: simulation of virtual connections · creation and deletion of dynamic filter rules.
security
Entry-ID: 77431846, V2.0, 03/2016
17
Siemens AG 2016 All rights reserved
3 Security Mechanisms of the S7-CPs
3.2
Data encoding via VPN
Description
A VPN (virtual private network) is a private network that uses a public network (like the Internet) for the transmission of private data to a private target network. The networks need not be compatible with one another.
Although VPN uses the addressing mechanisms of the carrier network it still uses its own network packages to separate the transport of private data packages from the others. Due to this fact, the private networks appear as a shared logical (virtual) network.
IPSec
An important aspect for the communication of data across network boundaries is IPSec (IP security). It is a standardized protocol suite and provides for manufacturer-independent, secure, and protected data exchange via IP networks. The main object of IPSec is protecting and securing the data during a transmission via an insecure network. Known weaknesses such as the intercepting and changing of data packages can be prevented by this security standard, due to encrypted data packages and authentication of the devices.
3.3
NAT/NAPT (address translation)
Description
Network Address Translation (NAT) / Network Address Port Translation (NAPT) are methods for converting private IP addresses into public IP addresses.
Address conversion with NAT
NAT is a protocol for address conversion between two address spaces. The main task is the conversion of public addresses, i.e. IP addresses used and routed on the Internet into private IP addresses and vice versa.
Through the use of this technology the addresses of the internal network are not visible in the external network. In the external network, the internal nodes are only visible via external IP addresses defined in the address conversion list (NAT table).
The typical NAT is a 1:1 conversion, i.e. a private IP address is converted to a public one.
The target address for the internal nodes is therefore an external IP address.
The NAT table contains the assignment of private and public IP addresses and is configured and managed in the gateway or router.
Address conversion with NAPT
NAPT is a variant of NAT and is often considered to be identical. The difference to NAT is the fact that ports can be converted too with this protocol.
The IP address is no longer converted 1:1. Instead, there is only one public IP address which is converted to a number of private IP addresses by adding port numbers.
The target address for the internal nodes is an external IP address with a port number.
The NAPT table contains the assignment of external ports to private IP addresses including port numbers and is configured and managed in the gateway or router.
security
Entry-ID: 77431846, V2.0, 03/2016
18
3 Security Mechanisms of the S7-CPs
3.4
Secure IT functions
3.4.1
File Transfer Protocol (FTP)
Description
The File Transfer Protocol is a specified network protocol for data transmission between an FTP server and an FTP client, or between two FTP servers.
FTP allows for exchanging data, creating and renaming directories, and also deleting them. The communication between FTP client and FTP server is an exchange of text-based commands. Each command sent by the FTP client results in a feedback by the FTP server in the form of a status code and a message in plain text.
For this, FTP creates two logical connections: a control channel via port 21 for the transmission of FTP commands and their responses as well as a data channel via port 20 for data transmission.
With a passive FTP, the two channels are initiated by the FTP client, whereas with active FTP the server initiates one of the channels to the client.
Solution for a secure FTP is FTPS
Secure data transmission with FTP is achieved with a combination of FTP and the SSL protocol and uses the same ports as in the normal FTP mode (port 20/21).
A certificate which is generated and delivered with the configuration of the security CP is used as the key for SSL.
Secure FTP data transfer with CPx43-1 Advanced V3 is only possible if the security function is enabled and is explicitly permitted in the configuration of the CP.
3.4.2
Network Time Protocol (NTP)
Description
The Network Time Protocol (NTP) is a standardized protocol for synchronizing the time on several computers / components across the network. The precision is within the millisecond range.
An NTP server makes the time available to the NTP clients.
NTP (secured)
NTP (secure) allows for secure and authenticated time synchronization by means of authentication methods and a joint encryption code. Both the NTP server and the NTP clients must support this function.
A secure time synchronization is supported by CP x43-1 Advanced V3 and CP 1x43-1, if the Security Function is activated and the expanded NTP configuration has been explicitly activated in the configuration.
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
19
Siemens AG 2016 All rights reserved
3 Security Mechanisms of the S7-CPs
3.4.3
Hypertext Transfer Protocol (HTTP)
Description
The Hypertext Transfer Protocol (HTTP) is part of the family of Internet protocols and is a standardized procedure for transferring data within a network. HTTP is primarily used for loading websites from a web server to a web browser.
HTTPS
Data transported via HTTP are readable as plain text and can be intercepted by third parties. Today particularly in the age of online banking, online shopping, and social networks it is important that the transmission of confidential and personal data is secure and protected against unauthorized access. The Hypertext Transfer Protocol Secure (HTTPS) is the easiest way of securely transmitting data. HTTPS has the same structure as the HTTP protocol, but in addition it uses the Secure Socket Layer Protocol for encryption. Many of the latest models of SIMATIC CPU's and CP's support HTTPS, and can be configured to use HTTPS exclusively, providing an increased level of security for data transmission.
3.4.4
Simple Network Management Protocol (SNMP)
Description
SNMP Simple Network Management Protocol is a UDP-based protocol that was specified particularly for the administration of data networks and in the meantime has established itself also as a de facto standard for TCP/IP devices. The individual nodes in the network network components or terminals feature a SNMP agent that provides information in a structured form. This structure is referred to as MIB (Management Information Base). In the network node, the agent is usually implemented as firmware functionality.
Management Information Base MIB
An MIB (Management Information Base) is a standardized data structure consisting of different SNMP variables, which are described by a language independent of the target system. Due to the cross-vendor standardization of MIBs and access mechanisms, even a heterogeneous network with components from different manufacturers can be monitored and controlled. If component-specific, nonstandardized data is necessary for network monitoring, this data can be described by the manufacturers in "private MIBs".
Secure SNMP (SNMPv3)
There are several versions of SNMP: SNMPv1, SNMPv2, and SNMPv3. The original version SNMPv1 and SNMPv2 are sometimes still used. However, it is recommendable not to use SNMPv1 and SNMPv2 since security mechanisms have not been implemented in these versions, or only in a restricted way. From version 3, SNMP additionally offers user administration with authentication and optional encryption of data packages. Security with SNMP was substantially improved by these aspects. The secure SNMP is supported by CP x43-1 Advanced V3 and CP 1x43-1, if the Security Function is activated and SNMPv3 has been explicitly activated in the configuration.
security
Entry-ID: 77431846, V2.0, 03/2016
20
4 The Achilles Certification Program
4
The Achilles Certification Program
Motivation
Security in industrial automation can only be achieved if manufacturers, suppliers, users and operators cooperate. An important part of the cooperation is the creation of international standards that are to be applied universally as a basis for futureoriented security concepts and solutions.
Creating uniform standards
The standards
· ISA 99 "Manufacturing and Control Systems Security",
· the IEC 62443 "Security for Industrial Process Measurement and Control Network and System Security",
· the German guideline VDI/VDE 2182 "Informationssicherheit in der industriellen Automatisierung" (information security in industrial automation),
are of particular importance for the creation of uniform standards that are to be used universally.
While the latter deals with the procedures and mechanisms for securing automation components and systems, the ISA Security Compliance Institute (ISCI) meets the challenge of creating a uniform certification framework.
The Achilles certification program
The Achilles certification program by Wurldtech is considered an international standard for cyber security.
The certificate confirms that the automation systems have the necessary communications robustness to improve the security and stability of industrial plants. Achilles certification serves as an important criterion for the selection of products with robust communication systems. The Achilles certification program confirms that the Siemens control systems are resistant to network attacks. The certification program is divided in two levels:
· Achilles Communications Certification Level 1: The first level of the certification program confirms the robustness of the Ethernet, IP, ARP, ACMO, TCP and UDP in the modules with a special test program. If they meet all the test requirements, the modules get the Achilles Level 1 certification.
· Achilles Level 2 Certification: This second level comprises the same protocols as Level 1. However, every protocol is tested more intensively. In addition, Level 2 contains more tests, Denial-of-Service (DoS) tests with a higher link rate and more requirements. The tested Siemens Industry modules all have the Achilles Level 2 certification.
Note
Please find an overview of certified modules on the Wurldtech website at: http://wurldtech.com/product_services/certify_educate/certified_products/
Information about the test environment and the test procedure can be found on the Wurldtech website at http://wurldtech.com/product_services/
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
21
Siemens AG 2016 All rights reserved
5 Literature
5
Literature
Bibliography
This list is by no means complete and only presents a selection of related references. Table 5-1
Subject /1/ STEP7
SIMATIC S7-300/400
/2/ STEP7 SIMATIC S7-300/400
/3/ STEP7 SIMATIC S7-300
/4/ STEP7 SIMATIC S7-400
/5/ STEP7 SIMATIC S7-1200
/6/ STEP7 SIMATIC S7-1500
/7/ SIMATIC NET security
/8/ S7-1500 Manual /9/ S7-1200 Manual /10/ S7-400 Manual
Title
Automating with STEP7 in AWL and SCL Author: Hans Berger Publicis MCD Verlag ISBN: 978-3-89578-397-5
Automating with STEP 7 in KOP and FUP Author: Hans Berger Publicis MCD Verlag ISBN: 978-3-89578-296-1
Automating with SIMATIC S7-300 inside TIA Portal Author: Hans Berger Publicis MCD Verlag ISBN: 978-3-89578-357-9
Automating with SIMATIC S7-400 inside TIA Portal Author: Hans Berger Publicis MCD Verlag ISBN: 978-3-89578-372-2
Automating with SIMATIC S7-1200 Author: Hans Berger Publicis MCD Verlag ISBN: 978-3-89578-355-5
Automating with SIMATIC S7-1200 Author: Hans Berger Publicis MCD Verlag ISBN: 978-3895784033
SIMATIC NET Industrial Ethernet Security Basic Principles and Application Configuration Manual http://support.automation.siemens.com/WW/view/en/56577508
SIMATIC S7-1500 Automation system http://support.automation.siemens.com/WW/view/en/59191792
SIMATIC S7-1200 Automation system http://support.automation.siemens.com/WW/view/en/36932465
SIMATIC S7-400 Automating System S7-400 CPU-Data http://support.automation.siemens.com/WW/view/en/53385241
/11/ S7-300 Manual /12/ CP343-1 Advanced /13/ CP443-1 Advanced
SIMATIC S7-300, CPU 31xC and CPU 31x: Technical Data http://support.automation.siemens.com/WW/view/en/12996906
System Manual Part B CP343-1 Advanced http://support.automation.siemens.com/WW/view/en/62046619
System Manual Part B CP443-1 Advanced http://support.automation.siemens.com/WW/view/en/59187252
/14/ Manual CP1543-1
SIMATIC NET S7-1500 - Industrial Ethernet CP 1543-1 http://support.automation.siemens.com/WW/view/en/76476576
security
Entry-ID: 77431846, V2.0, 03/2016
22
6 History
Internet link specifications
This list is not complete and only represents a selection of relevant information
Table 5-2
Subject
Title
\1\ Reference to the entry
http://support.automation.siemens.com/WW/view/en/77431846
\2\ Siemens Industry Online Support
http://support.automation.siemens.com
\3\ Industrial Ethernet Security
http://support.automation.siemens.com/WW/view/en/18701555/ 130000
\4\ Getting Started S7-1500
http://support.automation.siemens.com/WW/view/en/71704272
\5\ Overview pages ,,All-round protection with Industrial Security"
https://support.industry.siemens.com/cs/de/en/view/50203404
\6\ Overview pages ,,Industrial Remote Communication"
https://support.industry.siemens.com/cs/de/en/view/64721753
\7\ Overview possible constellation with IP-based Remote Networks
https://support.industry.siemens.com/cs/de/en/view/26662448
\8\ SIMATIC NET Industrial Ethernet Security, Setting up security in STEP 7 Professional
https://support.industry.siemens.com/cs/de/en/view/109477192
\9\ SIMATIC NET Industrial
https://support.industry.siemens.com/cs/de/en/view/109474411
Ethernet Security setting up
Security - Getting Started
\10\ SIMATIC NET - Industrial Ethernet Security - Security basics and application Configuration Manual
https://support.industry.siemens.com/cs/de/en/view/109474417
6
History
Table 6-1
Version
Date
Modifications
V1.0 V2.0
09/2013 03/2016
First version Add CP 1243-1, add futher links
Siemens AG 2016 All rights reserved
security
Entry-ID: 77431846, V2.0, 03/2016
23
SIMATIC
S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_nt_at_io_n _gu_id_e_______1_
_Pr_od_u_ct_ov_e_rv_ie_w _________2_
_Co_n_ne_c_tin_g _up___________3_
_ _ _ _ _ _ _ _ _ _ _ Interrupts, error messages,
diagnostics and system
4
alarms
_Te_ch_n_ic_al_sp_e_cif_ic_at_ion_s______5_
_Di_m_en_si_on_a_l d_ra_w_in_g ______A__
12/2017
A5E40869673-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E40869673-AA 12/2017 Subject to change
Copyright © Siemens AG 2017. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system/ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1511-1 PN.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
4
Manual, 12/2017, A5E40869673-AA
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Applications of the S7-1500 CPU .......................................................................................... 11
2.2
Hardware properties .............................................................................................................. 18
2.3
Firmware functions................................................................................................................. 20
2.4 2.4.1 2.4.2 2.4.3
Operating and display elements ............................................................................................ 24 Front view of the CPU with closed front panel....................................................................... 24 Front view of the CPU without front panel and view from below ........................................... 26 Rear view of the CPU ............................................................................................................ 27
2.5
Operating mode buttons ........................................................................................................ 28
3 Connecting up....................................................................................................................................... 29
4 Interrupts, error messages, diagnostics and system alarms................................................................... 33
4.1
Status and error display of the CPU ...................................................................................... 33
5 Technical specifications ........................................................................................................................ 36
A Dimensional drawing............................................................................................................................. 48
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
6
Manual, 12/2017, A5E40869673-AA
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
8
Manual, 12/2017, A5E40869673-AA
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
10
Manual, 12/2017, A5E40869673-AA
Product overview
2
2.1
Applications of the S7-1500 CPU
Area of application
SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation.
The modular and fanless design, simple implementation of distributed structures, and userfriendly operation make SIMATIC S7-1500 the economic and convenient solution for a variety of tasks.
Areas of application of the SIMATIC S7-1500 are, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automobile engineering
Water/waste water
Food & Beverage
Areas of application of the SIMATIC S7-1500T are, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial capability from the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
11
Product overview 2.1 Applications of the S7-1500 CPU
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 1 Standard CPUs
CPU
CPU 1511-1 PN
CPU 1513-1 PN
CPU 1515-2 PN
CPU 1516-3 PN/DP
CPU 1517-3 PN/DP
CPU 1518-4 PN/DP CPU 1518-4 PN/DP MFP
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
Standard CPU for small to
--
1
--
--
mid-range applications
Standard CPU for mid-
--
1
--
--
range applications
Standard CPU for mid-
--
1
1
--
range to large applications
Standard CPU for high-end
1
1
1
--
applications and communi-
cation tasks
Standard CPU for high-end
1
1
1
--
applications and communi-
cation tasks
Standard CPU for high-
1
1
1
1
performance applications,
demanding communication
tasks and very short reac-
tion times
Work memory 1.15 MB
Processing time for bit operations 60 ns
1.8 MB
40 ns
3.5 MB
30 ns
6 MB
10 ns
10 MB
2 ns
24 MB
1 ns
Table 2- 2 Compact CPUs
CPU
Performance segment
CPU 1511C-1 PN CPU 1512C-1 PN
Compact CPU for small to mid-range applications
Compact CPU for midrange applications
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
--
1
--
--
--
1
--
--
Work memory 1.175 MB
Processing time for bit operations 60 ns
1.25 MB
48 ns
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
12
Manual, 12/2017, A5E40869673-AA
Product overview 2.1 Applications of the S7-1500 CPU
Table 2- 3 Fail-safe CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
CPU 1511F-1 PN Fail-safe CPU for small to
--
1
--
--
mid-range applications
CPU 1511TF-1 Fail-safe technology CPU
--
1
--
--
PN
for small to mid-range
applications
CPU 1513F-1 PN Fail-safe CPU for mid-
--
1
--
--
range applications
CPU 1515F-2 PN Fail-safe CPU for mid-
--
1
1
--
range to large applications
CPU 1515TF-2 Fail-safe technology CPU
--
1
1
--
PN
for demanding applications
and communication tasks
CPU 1516F-3
Fail-safe CPU for demand-
1
1
1
--
PN/DP
ing applications and com-
munication tasks
CPU 1516TF-3 Fail-safe technology CPU
1
1
1
--
PN/DP
for demanding applications
and communication tasks
CPU 1517F-3
Fail-safe CPU for demand-
1
1
1
--
PN/DP
ing applications and com-
munication tasks
CPU 1517TF-3 Fail-safe technology CPU
1
1
1
--
PN/DP
for demanding applications
and communication tasks
CPU 1518F-4
Fail-safe CPU for high-
1
1
1
1
PN/DP
performance applications,
CPU 1518F-4 PN/DP MFP
demanding communication tasks and very short reaction times
Work memory 1.225 MB
Processing time for bit operations 60 ns
1.225 MB
60 ns
1.95 MB 3.75 MB 3.75 MB
40 ns 30 ns 30 ns
6.5 MB
10 ns
6.5 MB
10 ns
11 MB
2 ns
11 MB
2 ns
26 MB
1 ns
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
13
Product overview 2.1 Applications of the S7-1500 CPU
Table 2- 4 Technology CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
CPU 1511T-1 PN Technology CPU for small
--
1
--
--
to mid-range applications
CPU 1515T-2 PN Technology CPU for mid-
--
1
1
--
range to large applications
CPU 1516T-3
Technology CPU for high-
1
1
1
--
PN/DP
end applications and
communication tasks
CPU 1517T-3
Technology CPU for high-
1
1
1
--
PN/DP
end applications and
communication tasks
CPU 1511TF-1 PN
These CPUs are described in the fail-safe CPUs
CPU 1515TF-2 PN
CPU 1516TF-3 PN/DP
CPU 1517TF-3 PN/DP
Work memory 1.225 MB
Processing time for bit operations 60 ns
3.75 MB
30 ns
6.5 MB
10 ns
11 MB
2 ns
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O module as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Frequency meter Period duration measurement Pulse width modulation (PWM output)
Pulse Train Output (PTO output) Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
14
Manual, 12/2017, A5E40869673-AA
Product overview 2.1 Applications of the S7-1500 CPU
Integrated Motion Control technology functions
All CPUs of SIMATIC S7-1500 support Motion Control technology functions. STEP 7 offers Motion Control instructions standardized according to PLCopen for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axes Positioning axes Synchronous axes External encoders Output cams Cam tracks Measuring inputs The technology CPUs of the SIMATIC S7-1500 offer enhanced Motion Control functions: Advanced synchronization functions
Synchronization with specification of the synchronous position Actual value coupling Shifting of the master value at following axis Camming Up to 4 encoders or measuring systems as actual position for position control The technology CPUs of the SIMATIC S7-1500 additionally support the following technology objects: Cam Kinematics Cam Kinematics Controlling of kinematics, such as Cartesian portals Roller pickers Delta pickers SCARA Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
Additional integrated technology functions
For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags. In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
15
Product overview 2.1 Applications of the S7-1500 CPU
Other technology functions
Technology modules also implement functions such as high-speed counting, position detection, measuring functions and pulse generators (PTO, PWM and frequency output). For compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and can be implemented without additional technology modules. SIWAREX is a versatile and flexible weighing module which you can use as a static scale for operation.
Security Integrated
In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks. Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU. In addition, you can assign various access rights to different user groups in the controller using four different authorization levels. Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller. The use of an Ethernet CP (CP 1543-1) provides you with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated
The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally. These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration also provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications. The fail-safe CPUs are certified for use in safety mode up to: Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010 Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to
EN ISO 13849-1:2008 Additional password protection for F-configuration and F-program is set up for IT security.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
16
Manual, 12/2017, A5E40869673-AA
Product overview 2.1 Applications of the S7-1500 CPU
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Error messages are immediately shown on the display in plain text. In the case of servicing, plant downtimes are minimized by quick access to diagnostics alarms. Detailed information about this and a multitude of other display functions is available in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
Uniform front connectors for all modules and integrated potential jumpers for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7, on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostic information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server in up to three project languages. The HMI takes over the display in the project languages specified for the CPU. If you require message texts in additional languages, you can load these via the configured connection to your HMI. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
17
Product overview 2.2 Hardware properties
2.2
Hardware properties
Article number
6ES7511-1AK02-0AB0
View of the module
The following figure shows a CPU 1511-1 PN.
Figure 2-1 CPU 1511-1 PN
Note Protective film Note that a protective film is attached to the display of the CPU when shipped from the factory. Remove the protective film if necessary.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
18
Manual, 12/2017, A5E40869673-AA
Product overview 2.2 Hardware properties
Properties
CPU 1511-1 PN has the following technical properties:
Property CPU display
Supply voltage
PROFINET IO PROFINET interface (X1 P1 R and X1 P2 R) Operation of the CPU as · IO controller · I-device
Description
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides information on order numbers, firmware version and serial numbers of all connected modules. In addition, you can set the IP address of the CPU and carry out further network settings. The display shows occurring error messages directly in plain text.
In addition to the functions listed here, a multitude of other functions that are described in the SIMATIC S71500 Display Simulator are shown on the display.
The 24 V DC supply voltage is supplied via a 4-pole connection plug that is located at the front of the CPU.
Additional information
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
· SIMATIC S7-1500 Display Simulator (http://www.automation.siemens. com/salesmaterial-as/interactivemanuals/getting-started_simatics7-1500/disp_tool/start_en.html)
· Chapter Connecting up (Page 29)
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
The interface has two ports. In addition to basic
PROFINET function manual
PROFINET functionality, its also supports
(https://support.industry.siemens.co
PROFINET IO RT (real time) and IRT (isochronous real m/cs/ww/en/view/49948856)
time).
· IO controller: As an IO controller the CPU addresses the connected IO devices
· I-device: As an I-device (intelligent IO device) the CPU is assigned to a higher-level IO controller and is used in the process as an intelligent pre-processing unit of sub-processes
Accessories
You can find information on "Accessories/spare parts" in the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
19
Product overview 2.3 Firmware functions
2.3
Firmware functions
Functions
The CPU 1511-1 PN supports the following firmware functions:
Function Integrated system diagnostics Integrated Web server
Integrated trace functionality
OPC UA
Configuration control
Description
Additional information
The system automatically generates the messages for the system diagnostics and outputs these messages via a programming device/PC, HMI device, the Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
Diagnostics function manual (https://support.industry.siemens.co m/cs/ww/en/view/59193560)
The Web server lets you access the CPU data by
·
means of a network. Evaluations, diagnostics, and
modifications are thus possible over long distances.
Monitoring and evaluation is possible without STEP 7; all you need is a Web browser. Make sure that you take ·
appropriate measures (e.g. limiting network access,
using firewalls) to protect the CPU from being compro-
mised.
Web server function manual (https://support.industry.siemens. com/cs/ww/en/view/59192926)
Security with SIMATIC S7 controllers system manual (https://support.industry.siemens. com/cs/ww/en/view/90885010)
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
Using the trace and logic analyzer function function manual (https://support.industry.siemens.co m/cs/ww/en/view/64897128)
The device saves the recordings. You can read out and permanently save the recordings with the configuration system (ES), if required. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes.
The trace record can also be displayed through the Web server.
With OPC UA, you can exchange data via an open and Communication function manual
manufacturer-neutral communication protocol. The
(https://support.industry.siemens.co
CPU can act as OPC UA DA server. The CPU as
m/cs/ww/en/view/59192925)
OPC UA server can communicate with OPC UA clients.
The OPC UA Companion Specification allows methods to be specified uniformly and independently of the manufacturer. Using these specified methods, you can easily integrate devices from various manufacturers into your plants and production processes.
You can use configuration control to operate different S7-1500, ET 200MP system manual
real hardware configurations with a configured maxi- (https://support.industry.siemens.co
mum configuration of the S7-1500 automation sys-
m/cs/ww/en/view/59191792)
tem/ET 200MP distributed I/O system. This means that,
in series machine manufacturing in particular, you have
the option of operating/configuring different configura-
tion variants of a machine with a single project.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
20
Manual, 12/2017, A5E40869673-AA
Product overview 2.3 Firmware functions
Function PROFINET IO RT (real time) IRT (isochronous real time)
Isochronous mode
MRP (Media Redundancy Protocol)
MRPD (Media Redundancy with Planned Duplication)
Shared device
Description
RT prioritizes PROFINET IO telegrams over standard telegrams. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet telegrams.
A reserved bandwidth within the send clock is available for IRT data. The reserved bandwidth ensures that the IRT data can be transmitted in time-synchronized intervals, unaffected by other high network loading (e.g. TCP/IP communication or additional real-time communication). Update times with maximum determinism can be realized through IRT. Isochronous applications are possible with IRT.
The Isochronous mode system property acquires measured values and process data and processes the signals in a fixed system clock. Isochronous mode thus contributes to high control quality and hence to greater manufacturing precision. Isochronous mode reduces possible fluctuations of the process reaction times to a minimum. Time-assured processing makes higher machine cycles possible.
It is possible to establish redundant networks via the Media Redundancy Protocol. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails. The PROFINET devices that are part of this redundant network form an MRP domain.
RT operation is possible with the use of MRP.
The advantage of the MRP extension MRPD is that, in the event of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no reconfiguration time.
The "Shared device" function allows you to divide the modules or submodules of an IO device up among different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required. The "Shared device" function allows the modules or submodules of an IO device to be divided up among different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules that are physically close to each other in one IO device.
Additional information
PROFINET function manual (https://support.industry.siemens.co m/cs/ww/en/view/49948856)
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
21
Product overview 2.3 Firmware functions
Function PROFIenergy Integrated technology Motion Control
Integrated closed-loop control functionality
Description
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. The majority of the energy is saved by the process; the PROFINET device itself only contributes a few watts of savings potential.
Additional information
S7-1500 CPUs support the controlled positioning and traveling of axes via S7-1500 Motion Control functions by means of the following technology objects:
Speed-controlled axes, positioning axes, synchronized axes, external encoders, cams, cam tracks and measuring inputs.
S7-1500 Motion Control function manual (https://support.industry.siemens.co m/cs/ww/en/view/109749262)
· Speed-controlled axis for controlling a drive with speed specification
· Positioning axis for position-controlled positioning of a drive
· Synchronous axis to interconnect with a master value. The axis is synchronized to the master axis position.
· External encoder for detecting the actual position of an encoder and its use as a master value for synchronous operation
· Cams, cam track for position-dependent generation of switching signals
· Measuring input for fast, accurate and eventdependent sensing of actual positions
· PID Compact (continuous PID controller)
PID control function manual
·
PID 3Step (step controller for integrating actuators)
(https://support.industry.siemens.co m/cs/ww/en/view/108210036)
· PID Temp (temperature controller for heating and
cooling with two separate actuators)
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
22
Manual, 12/2017, A5E40869673-AA
Product overview 2.3 Firmware functions
Function Integrated safety Know-how protection Copy protection Access protection Integrity protection
Password provider
Description
Additional information
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
S7-1500, ET 200MP system manual (https://support.industry.siemens.co m/cs/ww/en/view/59191792)
You can use authorization levels to assign separate rights to different users.
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between TIA Portal and CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password input you can connect a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 reads the password automatically for the blocks. This saves you time.
· Optimum block protection because the users do not know the password itself.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
23
Product overview 2.4 Operating and display elements
2.4
Operating and display elements
2.4.1
Front view of the CPU with closed front panel
The following figure shows the front view of the CPU 1511-1 PN.
LEDs for the current operating mode and diagnostics status of the CPU Display Operator control buttons
Figure 2-2 View of the CPU 1511-1 PN (with front panel) - front
Note Temperature range for display
To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU.
For more information on the temperatures at which the display switches itself on and off, refer to the Technical specifications (Page 36).
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
24
Manual, 12/2017, A5E40869673-AA
Product overview 2.4 Operating and display elements
Removing and fitting the front panel or the display
You can remove and fit the front panel or the display during operation.
WARNING Personal injury and damage to property may occur If you remove or attach the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Before you remove or fit the front panel, always switch off the power supply to the S7-1500 automation system in hazardous area zone 2. The CPU maintains its operating mode.
Locking the front panel
You can lock the front panel to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panel.
Reference
Figure 2-3 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, configurable protection levels and local locks in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
25
Product overview 2.4 Operating and display elements
2.4.2
Front view of the CPU without front panel and view from below
The following figure shows the operator controls and connection elements of the CPU 15111 PN.
LEDs for the current operating mode and diagnostic status of the CPU Display MAC address LED displays for the 2 ports of the PROFINET interface X1 Operating modes with "STOP ACTIVE" LED Connector for power supply
Figure 2-4 View of the CPU 1511-1 PN (without front panel) front
Slot for the SIMATIC memory card PROFINET IO interface (X1) with 2 ports Connection for supply voltage Fixing screw
Figure 2-5 View of the CPU 1511-1 PN bottom
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
26
Manual, 12/2017, A5E40869673-AA
2.4.3
Product overview 2.4 Operating and display elements
Rear view of the CPU
The following figure shows the connection elements on the back of the CPU 1511-1 PN.
Shield contact surface Plug-in connection for power supply Plug-in connection for backplane bus Fastening screw
Figure 2-6 View of the CPU 1511-1 PN - rear
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
27
Product overview 2.5 Operating mode buttons
2.5
Operating mode buttons
You use the operating mode buttons to set the operating mode of the CPU.
The following table shows the meaning of the corresponding operation of the operating mode buttons.
Table 2- 5 Meaning of the operating mode buttons
Operation of the operating mode buttons RUN
STOP
Meaning
RUN mode STOP mode
MRES
1. Press the operating mode button STOP.
Result: The RUN/STOP LED lights up yellow. 2. Press the operating mode button STOP until the RUN/STOP LED lights up for the 2nd time and remains continuously lit (this takes three seconds). After this, release the button. 3. Press the operating mode button STOP again within the next three seconds.
Manual memory reset
(with inserted SIMATIC memory card)
or
Reset to factory settings (without inserted SIMATIC memory card):
Explanation
The CPU is executing the user program. The user program is not being executed. (STOP ACTIVE LED lights up). The CPU executes memory reset.
or The CPU is reset to its factory settings. You can find additional information in the S71500/ET 200MP system manual (https://support.industry.siemens.com/cs/ww/den/ view/59191792).
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
28
Manual, 12/2017, A5E40869673-AA
Connecting up
3
This section provides information on the terminal assignment of the individual interfaces and the block diagram of the CPU 1511-1 PN.
24 V DC supply voltage (X80)
The connector for the power supply is plugged in when the CPU ships from the factory. The following table shows the pin assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring opener (one spring opener per terminal)
Bridged internally:
and and
Figure 3-1 Supply voltage connection
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
29
Connecting up
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R)
The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is
allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Figure 3-2 PROFINET ports
Note You need a screwdriver (max. blade width 2.5 mm) to remove the PROFINET plug.
Reference
You can find additional information on the topics of "Connecting the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
30
Manual, 12/2017, A5E40869673-AA
Connecting up
Assignment of the MAC addresses
The CPU 1511-1 PN has a PROFINET interface with two ports. The PROFINET interface itself has a MAC address, and each of the two PROFINET ports has its own MAC address. The CPU 1511-1 PN therefore has three MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC address are lasered on the rating plate on the right side of each CPU 1511-1 PN.
The table below shows how the MAC addresses are assigned.
Table 3- 1 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3
Assignment
PROFINET interface X1
(visible in STEP 7 for accessible devices)
Labeling
· Front, lasered · Right side, lasered
(start of number range)
Port X1 P1 R (required for LLDP, for example)
Port X1 P2 R (required for LLDP, for example)
· Front and right side, not lasered
· Front, not lasered · Right side, lasered
(end of number range)
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
31
Connecting up
Block diagram
The following figure shows the block diagram of the CPU 1511-1 PN.
PN X1 P1 R PN X1 P2 R X50
CPU with control and operating mode buttons Display Electronics PROFINET 2-port switch Backplane bus interface Internal supply voltage PROFINET interface X1 Port 1 PROFINET interface X1 Port 2 SIMATIC memory card
Figure 3-3 Block diagram CPU 1511-1 PN
X80 24 V DC Infeed of supply voltage
L+
24 V DC supply voltage
M
Ground
SF
STOP ACTIVE LED (yellow)
R/S
RUN/STOP LED (yellow/green)
ER
ERROR LED (red)
MT
MAINT LED (yellow)
X1 P1, X1 P2 LED Link TX/RX
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
32
Manual, 12/2017, A5E40869673-AA
Interrupts, error messages, diagnostics and system alarms
4
The status and error displays of the CPU 1511-1 PN are described below.
You will find additional information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topics of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error display of the CPU
LED display
The figure below shows the CPU 1511-1 PN LEDs.
RUN/STOP LED (yellow/green LED)
ERROR LED (red LED)
MAINT LED (yellow LED)
LINK RX/TX LED for port X1 P1 (yellow/green LED)
LINK RX/TX LED for port X1 P2 (yellow/green LED)
STOP ACTIVE-LED (yellow LED)
Figure 4-1 LED display of the CPU 1511-1 PN (without front panel)
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
33
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1511-1 PN has three LEDs to signal the current operating status and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED off
LED flashes red
LED lit green
LED off
LED lit green
LED flashes red
LED lit green
LED off
LED lit green
LED off
LED lit green
LED flashes red
MAINT LED LED off LED off LED off LED off
LED lit yellow
LED flashes yellow
LED off
Meaning Missing or insufficient power supply on the CPU.
An error has occurred.
CPU is in RUN mode.
A diagnostics event is pending.
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration An error has occurred.
LED lit yellow LED lit yellow LED lit yellow LED lit yellow
LED flashes yellow
LED flashes yellow/green
LED flashes red LED off LED off
LED flashes red LED off
LED off
LED off LED flashes yellow
LED off LED flashes yellow
LED off
LED off
Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card CPU carries out a program with active breakpoint. Startup (transition from RUN STOP)
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
34
Manual, 12/2017, A5E40869673-AA
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
RUN/STOP LED
LED flashes yellow/green
ERROR LED LED flashes red
MAINT LED LED flashes yellow
Meaning Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of the ports for the CPU 1511-1 PN.
Table 4- 2 Meaning of the LEDs
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
Meaning of the STOP ACTIVE LED
The following table shows the meaning of the STOP ACTIVE LED for the CPU 1511-1 PN.
Table 4- 3 Meaning of the LEDs
STOP ACTIVE LED LED lit yellow
LED off
Meaning The CPU is switched to "STOP" mode using the STOP button.
· As long as the STOP ACTIVE LED is lit up, switching the CPU to RUN mode is only possible using the RUN button.
· The CPU can then no longer be set to RUN mode via the display operation or via online functions. The state of the buttons is retained at power-off. If the CPU does not start up automatically after a power-on, you have to keep the STOP button pressed during start-up until the STOP ACTIVE LED is activated.
· If an automatic start-up is to be reliably prevented after a power-up, the STOP button has to be kept pressed during the start-up of the CPU until the STOP ACTIVE LED is activated.
· The CPU is set to "STOP" mode using the display or programming device and not with the STOP button on the device.
· The CPU is in RUN mode.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
35
Technical specifications
5
Article number General information
Product type designation HW functional status Firmware version Engineering with
· STEP 7 TIA Portal configurable/integrated as of version
Configuration control via dataset
Display Screen diagonal [cm]
Control elements Number of keys Mode buttons
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering
· Mains/voltage failure stored energy time
· Repeat rate, min.
Input current Current consumption (rated value) Current consumption, max. Inrush current, max. I²t
Power Infeed power to the backplane bus Power consumption from the backplane bus (balanced)
Power loss Power loss, typ.
Memory Number of slots for SIMATIC memory card SIMATIC memory card required
6ES7511-1AK02-0AB0
CPU 1511-1 PN FS01 V2.5
V15
Yes
3.45 cm
8 2
24 V DC 19.2 V 28.8 V Yes
5 ms 1/s
0.7 A 0.95 A 1.9 A; Rated value 0.02 A²·s
10 W 5.5 W
5.7 W
1 Yes
36
CPU 1511-1 PN (6ES7511-1AK02-0AB0) Manual, 12/2017, A5E40869673-AA
Technical specifications
Article number Work memory
· integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range
· Size, max.
FB · Number range · Size, max.
FC · Number range · Size, max.
OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of DPV1 alarm OBs · Number of isochronous mode OBs · Number of technology synchronous alarm OBs · Number of startup OBs
6ES7511-1AK02-0AB0
150 kbyte 1 Mbyte
32 Gbyte
Yes
60 ns 72 ns 96 ns 384 ns
2 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999 1 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535 150 kbyte
0 ... 65 535 150 kbyte
150 kbyte 100 20 20 20; With minimum OB 3x cycle of 500 µs 50 3 1 2
100
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
37
Technical specifications
Article number · Number of asynchronous error OBs
· Number of synchronous error OBs
· Number of diagnostic alarm OBs Nesting depth
· per priority class Counters, timers and their retentivity S7 counter
· Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max.
Extended retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
· Number of clock memories
Data blocks · Retentivity adjustable
· Retentivity preset Local data
· per priority class, max.
6ES7511-1AK02-0AB0 4 2 1
24
2 048
Yes
Any (only limited by the main memory)
Yes
2 048
Yes
Any (only limited by the main memory)
Yes
128 kbyte; In total; available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 88 KB 1 Mbyte; When using PS 60W 24/48/60V DC HF
16 kbyte 8; 8 clock memory bits, grouped into one clock memory byte Yes No
64 kbyte; max. 16 KB per block
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
38
Manual, 12/2017, A5E40869673-AA
Technical specifications
Article number Address area
Number of IO modules I/O address area
· Inputs · Outputs per integrated IO subsystem
Inputs (volume) Outputs (volume) per CM/CP Inputs (volume) Outputs (volume) Subprocess images · Number of subprocess images, max. Hardware configuration Number of distributed IO systems
Number of DP masters · Via CM
Number of IO Controllers · integrated · Via CM
Rack · Modules per rack, max. · Number of lines, max.
PtP CM · Number of PtP CMs
Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number
6ES7511-1AK02-0AB0
1 024; max. number of modules / submodules
32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image
8 kbyte 8 kbyte
8 kbyte 8 kbyte
32
32; A distributed I/O system is characterized not only by the integration of distributed I/O via PROFINET or PROFIBUS communication modules, but also by the connection of I/O via AS-i master modules or links (e.g. IE/PB-Link)
4; A maximum of 4 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
1 4; A maximum of 4 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
32; CPU + 31 modules 1
the number of connectable PtP CMs is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
39
Technical specifications
Article number Clock synchronization
· supported · in AS, master · in AS, slave · on Ethernet via NTP Interfaces Number of PROFINET interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Functionality · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
PROFINET IO Controller Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP
MRPD PROFIenergy Prioritized startup Number of connectable IO Devices,
max. Of which IO devices with IRT, max. Number of connectable IO Devices for
RT, max.
6ES7511-1AK02-0AB0
Yes Yes Yes Yes
1
2 Yes Yes; X1
Yes; IPv4 Yes Yes Yes Yes Yes Yes; MRP Automanager according to IEC 624392 Edition 2.0
Yes Yes Yes Yes Yes Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50 Yes; Requirement: IRT Yes Yes; Max. 32 PROFINET devices 128; In total, up to 256 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 64 128
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
40
Manual, 12/2017, A5E40869673-AA
Technical specifications
Article number of which in line, max.
6ES7511-1AK02-0AB0 128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
Update time for IRT for send cycle of 250 µs for send cycle of 500 µs for send cycle of 1 ms
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
250 s to 4 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 625 µs of the isochronous OB is decisive 500 s to 8 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 625 µs of the isochronous OB is decisive 1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" Update time = set "odd" send clock (any multiple
send cycles
of 125 µs: 375 µs, 625 µs ... 3 875 µs)
Update time for RT for send cycle of 250 µs
250 µs to 128 ms
for send cycle of 500 µs
500 µs to 256 ms
for send cycle of 1 ms
1 ms to 512 ms
for send cycle of 2 ms
2 ms to 512 ms
for send cycle of 4 ms
4 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
Yes
MRP
Yes
MRPD
Yes; Requirement: IRT
PROFIenergy
Yes
Shared device
Yes
Number of IO Controllers with shared 4 device, max.
Asset management record
Yes; Per user program
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
41
Technical specifications
Article number Interface types RJ 45 (Ethernet)
· 100 Mbps
6ES7511-1AK02-0AB0 Yes
· Autonegotiation
Yes
· Autocrossing
Yes
· Industrial Ethernet status LED
Yes
Protocols Number of connections
· Number of connections, max.
· Number of connections reserved for ES/HMI/web
96; via integrated interfaces of the CPU and connected CPs / CMs
10
· Number of connections via integrated inter- 64 faces
· Number of S7 routing paths
16
PROFINET IO Controller
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
Yes
Open IE communication
Yes
IRT
Yes
MRP MRPD
Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50
Yes; Requirement: IRT
PROFIenergy
Yes
Prioritized startup
Yes; Max. 32 PROFINET devices
Number of connectable IO Devices, max.
128; In total, up to 256 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
Of which IO devices with IRT, max.
64
Number of connectable IO Devices for 128 RT, max.
of which in line, max.
128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
42
Manual, 12/2017, A5E40869673-AA
Technical specifications
Article number SIMATIC communication
· S7 communication, as server · S7 communication, as client · User data per job, max.
Open IE communication · TCP/IP Data length, max. several passive connections per port, supported · ISO-on-TCP (RFC1006) Data length, max. · UDP Data length, max. UDP multicast · DHCP · SNMP · DCP · LLDP
Web server · HTTP · HTTPS
OPC UA · Runtime license required · OPC UA Server
Application authentication Security policies
User authentication Further protocols
· MODBUS Media redundancy
· Switchover time on line break, typ. · Number of stations in the ring, max.
6ES7511-1AK02-0AB0
Yes Yes See online help (S7 communication, user data size)
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
Yes; Standard and user pages Yes; Standard and user pages
Yes Yes; Data access (read, write, subscribe), method call, custom address space Yes Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "anonymous" or by user name & password
Yes; MODBUS TCP
200 ms; For MRP, bumpless for MRPD 50
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
43
Technical specifications
Article number Isochronous mode
Isochronous operation (application synchronized up to terminal) Equidistance S7 message functions Number of login stations for message functions, max. Program alarms Number of configurable program alarms Number of simultaneously active program alarms · Number of program alarms
· Number of alarms for system diagnostics
· Number of alarms for motion technology objects
Test commissioning functions Joint commission (Team Engineering)
Status block
Single step Number of breakpoints Status/control · Status/control variable
· Variables
· Number of variables, max. of which status variables, max. of which control variables, max.
Forcing · Forcing, variables
· Number of variables, max. Diagnostic buffer
· present
· Number of entries, max. of which powerfail-proof
Traces · Number of configurable Traces
6ES7511-1AK02-0AB0
Yes; With minimum OB 6x cycle of 625 µs Yes
32 Yes 5 000
300 100 80
Yes; Parallel online access possible for up to 5 engineering systems Yes; Up to 8 simultaneously (in total across all ES clients) No 8
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Peripheral inputs/outputs 200
Yes 1 000 500
4; Up to 512 KB of data per trace are possible
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
44
Manual, 12/2017, A5E40869673-AA
Technical specifications
Article number Interrupts/diagnostics/status information Diagnostics indication LED
· RUN/STOP LED · ERROR LED · MAINT LED · STOP ACTIVE LED · Connection display LINK TX/RX
6ES7511-1AK02-0AB0
Yes Yes Yes Yes Yes
Supported technology objects
Motion Control
Yes; Note: The number of axes affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER
· Number of available Motion Control re-
800
sources for technology objects (except cam
disks)
· Required Motion Control resources
per speed-controlled axis
40
per positioning axis
80
per synchronous axis
160
per external encoder
80
per output cam
20
per cam track
160
per probe
40
· Positioning axis Number of positioning axes at motion control cycle of 4 ms (typical value) Number of positioning axes at motion control cycle of 8 ms (typical value)
Controller · PID_Compact
· PID_3Step
· PID-Temp
Counting and measuring · High-speed counter
5
10
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
Standards, approvals, certificates
Suitable for safety functions
No
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
45
Technical specifications
Article number Ambient conditions Ambient temperature during operation
· horizontal installation, min. · horizontal installation, max.
· vertical installation, min. · vertical installation, max.
Ambient temperature during storage/transportation
· min. · max. Configuration Programming Programming language
LAD FBD STL SCL GRAPH Know-how protection · User program protection/password protection · Copy protection · Block protection Access protection · Password for display · Protection level: Write protection · Protection level: Read/write protection · Protection level: Complete protection Cycle time monitoring · lower limit · upper limit Dimensions Width Height Depth Weights Weight, approx.
6ES7511-1AK02-0AB0
0 °C 60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off 0 °C 40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C 70 °C
Yes Yes Yes Yes Yes
Yes
Yes Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
35 mm 147 mm 129 mm
405 g
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
46
Manual, 12/2017, A5E40869673-AA
Technical specifications
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
47
Dimensional drawing
A
This section includes a dimensional drawing of the module on a mounting rail and a dimensional drawing with the front panel open. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimensional drawings for CPU 1511-1 PN
Figure A-1 Dimensional drawing of CPU 1511-1 PN, front and side views
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
48
Manual, 12/2017, A5E40869673-AA
Dimensional drawing
Figure A-2 Dimensional drawing of CPU 1511-1 PN, side view with front panel open
CPU 1511-1 PN (6ES7511-1AK02-0AB0)
Manual, 12/2017, A5E40869673-AA
49
SIMATIC
S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Te_c_hn_ol_og_y_fu_nc_ti_on_s_______3_ _W_iri_ng_______________4_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____5_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___6_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______7_ _Di_m_en_si_on_d_ra_w_in_gs________A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _An_a_lo_g _va_lu_e _pr_oc_es_s_ing_____C__
12/2017
A5E40898565-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E40898565-AA 12/2017 Subject to change
Copyright © Siemens AG 2017. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system / ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. Cross-system functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1511C-1 PN.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
4
Manual, 12/2017, A5E40898565-AA
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 9
2 Product overview .................................................................................................................................. 13
2.1
Applications of the S7-1500 CPUs......................................................................................... 13
2.2 2.2.1 2.2.2 2.2.3 2.2.4 2.2.5 2.2.6
Hardware properties and firmware functions ......................................................................... 20 Hardware properties of the CPU part .................................................................................... 21 Firmware functions of the CPU part....................................................................................... 23 Hardware properties of the analog on-board I/O module ...................................................... 27 Firmware functions of the analog on-board I/O module......................................................... 30 Hardware properties of the digital on-board I/O module........................................................ 31 Firmware functions of the digital on-board I/O module .......................................................... 34
2.3 2.3.1 2.3.2 2.3.3
Operator controls and display elements ................................................................................ 36 Front view with closed front panel.......................................................................................... 36 Front view of the CPU without front panel and view from below ........................................... 38 Rear view ............................................................................................................................... 40
2.4
Operating mode buttons ........................................................................................................ 41
3 Technology functions ............................................................................................................................ 42
3.1 3.1.1 3.1.1.1 3.1.1.2 3.1.1.3 3.1.1.4 3.1.2 3.1.2.1 3.1.2.2 3.1.2.3
High-speed counters .............................................................................................................. 42 Functions................................................................................................................................ 43 Counting ................................................................................................................................. 43 Measuring .............................................................................................................................. 45 Position detection for motion control...................................................................................... 46 Additional functions ................................................................................................................ 46 Configuring the high-speed counters ..................................................................................... 47 General .................................................................................................................................. 47 Assignment of the control interface of the high-speed counters............................................ 48 Assignment of the feedback interface of the high-speed counters........................................ 51
3.2 3.2.1 3.2.1.1 3.2.1.2 3.2.1.3 3.2.2 3.2.2.1 3.2.2.2 3.2.3 3.2.3.1 3.2.3.2 3.2.3.3
Pulse generators .................................................................................................................... 52 Operating modes.................................................................................................................... 52 Operating mode: Pulse-width modulation (PWM).................................................................. 52 Operating mode: Frequency output ....................................................................................... 60 Operating mode: PTO ............................................................................................................ 64 Functions................................................................................................................................ 69 Function: High-speed output.................................................................................................. 69 Function: Direct control of the pulse output (DQA) ................................................................ 70 Configuring the PWM and frequency output modes .............................................................. 71 Assignment of the control interface........................................................................................ 71 Handling the SLOT parameter (control interface).................................................................. 73 Assignment of the feedback interface.................................................................................... 77
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
6
Manual, 12/2017, A5E40898565-AA
Table of contents
4 Wiring ................................................................................................................................................... 79
4.1
Supply voltage ........................................................................................................................79
4.2
PROFINET interfaces .............................................................................................................80
4.3 4.3.1 4.3.2 4.3.3 4.3.4 4.3.5
4.3.6 4.3.7 4.3.8
Terminal and block diagrams..................................................................................................82 Block diagram of the CPU part ...............................................................................................82 Terminal and block diagram of the analog on-board I/O ........................................................83 Wiring and block diagrams of the digital on-board I/O............................................................92 Addresses of the high-speed counters .................................................................................104 Addresses of the pulse generators in the Pulse Width Modulation (PWM) and Frequency Output modes .....................................................................................................106 Addresses of pulse generators in the PTO mode.................................................................107 Interconnection overview of the inputs .................................................................................108 Interconnection overview of the outputs ...............................................................................109
5 Parameters/address space ................................................................................................................. 111
5.1
Address space of the analog on-board I/O ...........................................................................111
5.2
Address space of the digital on-board I/O ............................................................................113
5.3
Address space of the high-speed counters ..........................................................................115
5.4
Address space of the pulse generators ................................................................................115
5.5
Measurement types and measuring ranges of the analog on-board I/O ..............................116
5.6
Output type and output ranges of the analog on-board I/O ..................................................117
5.7
Parameters of the analog on-board I/O ................................................................................118
5.8
Parameters of the digital on-board I/O..................................................................................121
6 Interrupts/diagnostics alarms............................................................................................................... 123
6.1 6.1.1 6.1.2 6.1.3
Status and error displays ......................................................................................................123 Status and error displays of the CPU part ............................................................................123 Status and error displays of the analog on-board I/O...........................................................126 Status and error displays of the digital on-board I/O ............................................................128
6.2 6.2.1 6.2.2 6.2.3
Interrupts and diagnostics.....................................................................................................131 Interrupts and diagnostics of the CPU part...........................................................................131 Interrupts and diagnostics of the analog on-board I/O .........................................................131 Interrupts and diagnostics of the digital on-board I/O...........................................................134
7 Technical specifications ...................................................................................................................... 137
A Dimension drawings............................................................................................................................ 160
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
7
Table of contents
B Parameter data records .......................................................................................................................162
B.1
Parameter assignment and structure of the parameter data records of the analog on-
board I/O .............................................................................................................................. 162
B.2
Structure of a data record for input channels of the analog on-board I/O ........................... 162
B.3
Structure of a data record for output channels of the analog on-board I/O ......................... 167
B.4
Parameter assignment and structure of the parameter data records of the digital on-
board I/O .............................................................................................................................. 170
B.5
Structure of a data record for input channels of the digital on-board I/O............................. 171
B.6
Structure of a data record for output channels of the digital on-board I/O........................... 172
B.7
Parameter data records of the high-speed counters ........................................................... 173
B.8
Parameter data records (PWM) ........................................................................................... 180
C Analog value processing ......................................................................................................................183
C.1
Conversion method .............................................................................................................. 183
C.2
Representation of analog values ......................................................................................... 190
C.3 C.3.1 C.3.2 C.3.3
C.3.4
Representation of input ranges............................................................................................ 191 Representation of analog values in voltage measuring ranges ........................................... 192 Representation of analog values in current measuring ranges ........................................... 193 Representation of the analog values of resistance-type sensors/resistance-type thermometers ....................................................................................................................... 194 Measured values for wire break diagnostics........................................................................ 196
C.4 C.4.1 C.4.2
Representation of output ranges.......................................................................................... 197 Representation of analog values in the voltage output ranges............................................ 198 Representation of analog values in the current output ranges ............................................ 199
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
8
Manual, 12/2017, A5E40898565-AA
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
9
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
10
Manual, 12/2017, A5E40898565-AA
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
11
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
12
Manual, 12/2017, A5E40898565-AA
Product overview
2
2.1
Applications of the S7-1500 CPUs
Application area
The SIMATIC S7-1500 is the modular control system for numerous automation applications in discrete automation.
The modular and fanless design, the simple implementation of distributed structures and the user-friendly handling transform the SIMATIC S7-1500 into a cost-effective and convenient solution for a wide variety of tasks.
Areas of application of the SIMATIC S7-1500 are, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automotive
Water/waste water
Food & Beverage
Areas of application of the SIMATIC S7-1500T are, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient functions are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
The high EMC and high resistance to shock and vibration stress make the SIMATIC S7-1500 suitable for universal use.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
13
Product overview 2.1 Applications of the S7-1500 CPUs
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and medium-sized applications, as well as for the highend range of machine and plant automation.
Table 2- 1 Standard CPUs
CPU
CPU 1511-1 PN
CPU 1513-1 PN
CPU 1515-2 PN
CPU 1516-3 PN/DP
CPU 1517-3 PN/DP
CPU 1518-4 PN/DP CPU 1518-4 PN/DP MFP
Performance segment
Standard CPU for small to medium-sized applications Standard CPU for mediumsized applications Standard CPU for mediumsized to large applications Standard CPU for high-end applications and communication tasks Standard CPU for high-end applications and communication tasks Standard CPU for highperformance applications, demanding communications tasks and very short reaction times
PROFIBUS interfaces
---1
1
1
PROFINET I O RT/IRT interface 1 1 1 1
1
1
PROFINET IO RT inter-
face --1 1
1
1
PROFINET basic func-
tionality -----
--
1
Work memory 1.15 MB 1.8 MB 3.5 MB
6 MB
10 MB
24 MB
Processing time for bit operations
60 ns 40 ns 30 ns 10 ns
2 ns
1 ns
Table 2- 2 Compact CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
CPU 1511C-1 PN Compact CPU for small to
--
1
--
--
medium-sized applications
CPU 1512C-1 PN Compact CPU for medium-
--
1
--
--
sized applications
Work memory 1.175 MB
Processing time for bit operations 60 ns
1.25 MB
48 ns
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
14
Manual, 12/2017, A5E40898565-AA
Product overview 2.1 Applications of the S7-1500 CPUs
Table 2- 3 Fail-safe CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
CPU 1511F-1 PN Fail-safe CPU for smaller
--
to medium-sized applica-
tions
CPU 1511TF-1 Fail-safe technology CPU
--
PN
for small to mid-range
applications
CPU 1513F-1 PN Fail-safe CPU for medium-
--
sized applications
CPU 1515F-2 PN Fail-safe CPU for medium-
--
sized to large applications
CPU 1515TF-2 Fail-safe technology CPU
--
PN
for demanding applications
and communication tasks
CPU 1516F-3
Fail-safe CPU for demand-
1
PN/DP
ing applications and com-
munications tasks
CPU 1516TF-3 Fail-safe technology CPU
1
PN/DP
for demanding applications
and communication tasks
CPU 1517F-3
Fail-safe CPU for demand-
1
PN/DP
ing applications and com-
munications tasks
CPU 1517TF-3 Fail-safe technology CPU
1
PN/DP
for demanding applications
and communication tasks
CPU 1518F-4
Fail-safe CPU for high-
1
PN/DP
performance applications,
CPU 1518F-4 PN/DP MFP
demanding communications tasks and very short reaction times
1
--
1
--
1
--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
PROFINET basic func-
tionality --
--
----
--
--
--
--
1
Work memory 1.225 MB
Processing time for bit operations 60 ns
1.225 MB
60 ns
1.95 MB 3.75 MB 3.75 MB
40 ns 30 ns 30 ns
6.5 MB
10 ns
6.5 MB
10 ns
11 MB
2 ns
11 MB
2 ns
26 MB
1 ns
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
15
Product overview 2.1 Applications of the S7-1500 CPUs
Table 2- 4 Technology CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
CPU 1511T-1 PN Technology CPU for small
--
1
--
--
to medium-sized applica-
tions
CPU 1515T-2 PN Technology CPU for mid-
--
1
1
--
range to large applications
CPU 1516T-3
Technology CPU for high-
1
1
1
--
PN/DP
end applications and
communication tasks
CPU 1517T-3
Technology CPU for high-
1
1
1
--
PN/DP
end applications and
communication tasks
CPU 1511TF-1 PN
These CPUs are described in the fail-safe CPUs
CPU 1515TF-2 PN
CPU 1516TF-3 PN/DP
CPU 1517TF-3 PN/DP
Work memory 1.225 MB
Processing time for bit operations 60 ns
3.75 MB 6.5 MB
30 ns 10 ns
11 MB
2 ns
Performance segments of compact CPUs
The compact CPUs can be used for smaller to medium-sized applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the differences in performance between the two compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Frequency meter Period duration measurement Pulse width modulation (PWM output)
Pulse Train Output (PTO output) Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
16
Manual, 12/2017, A5E40898565-AA
Product overview 2.1 Applications of the S7-1500 CPUs
Integrated Motion Control technology functions
All CPUs of SIMATIC S7-1500 support Motion Control technology functions. STEP 7 offers Motion Control instructions standardized according to PLCopen for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axes Positioning axes Synchronous axes External encoders Output cams Cam tracks Measuring inputs The technology CPUs of the SIMATIC S7-1500 offer enhanced Motion Control functions: Advanced synchronization functions
Synchronization with specification of the synchronous position Actual value coupling Shifting of the master value at following axis Camming Up to 4 encoders or measuring systems as actual position for position control The technology CPUs of the SIMATIC S7-1500 additionally support the following technology objects: Cam Kinematics Cam Kinematics Controlling of kinematics, such as Cartesian portals Roller pickers Delta pickers SCARA Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
Additional integrated technology functions
For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags. In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
17
Product overview 2.1 Applications of the S7-1500 CPUs
Other technology functions
Technology modules also implement functions such as high-speed counting, position detection, measuring functions and pulse generators (PTO, PWM and frequency output). For compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and can be implemented without additional technology modules. SIWAREX is a versatile and flexible weighing module which you can use as a static scale for operation.
Security Integrated
In conjunction with STEP 7 (TIA Portal), each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks. The copy protection provides greater protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU. In addition, four different authorization levels in the CPUs can be used to assign different access rights to various user groups. Improved manipulation protection allows the CPUs to detect changed or unauthorized transfers of the engineering data. The use of an Ethernet CP (CP 1543-1) provides the user with additional access protection by means of a firewall and/or the option of secured VPN connections.
Safety Integrated
The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and distributed. These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration provides the system advantages and the extensive functionality of SIMATIC also for fail-safe applications. The fail-safe CPUs are certified for use in safety mode up to: Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010 Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to
EN ISO 13849-1:2008 Additional password protection for F-configuration and F-program is set up for IT security.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
18
Manual, 12/2017, A5E40898565-AA
Product overview 2.1 Applications of the S7-1500 CPUs
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Error messages are immediately shown on the display in plain text. In the case of servicing, plant downtimes are minimized by quick access to diagnostics alarms. Detailed information about this and a multitude of other display functions is available in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
Uniform front connectors for all modules and integrated potential jumpers for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and modularly with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as simple wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single cores).
System diagnostics and alarms
Integrated system diagnostics is enabled by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7 (TIA Portal), on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostics information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server in up to three project languages. The HMI takes over the display in the project languages specified for the CPU. If you require message texts in additional languages, you can load these via the configured connection to your HMI. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
19
Product overview 2.2 Hardware properties and firmware functions
2.2
Hardware properties and firmware functions
The CPU 1511C-1 PN consists of a CPU part, an analog on-board I/O module (X10) and a digital on-board I/O module (X11). When configured in the TIA Portal, the compact CPU therefore occupies a single shared slot (slot 1).
The properties and functions of the CPU part and the analog and digital on-board I/O modules can be found in the subsections below. The properties describe the hardware features of the CPU part and the analog and digital on-board I/O modules. The functions describe the functions of the firmware of the CPU part and the analog and digital on-board I/O modules.
Article number
6ES7511-1CK01-0AB0
Accessories
The following accessories are included in the scope of delivery and can also be ordered separately as spare parts: 2 x front connector (push-in terminals) including cable ties 2 x shield clamp 2 x shield terminal 2 x infeed element (push-in terminals) 2 x labeling strip 2 x universal front cover For more information on accessories, refer to the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
20
Manual, 12/2017, A5E40898565-AA
Product overview 2.2 Hardware properties and firmware functions
2.2.1
Hardware properties of the CPU part
View of the CPU
The figure below shows the CPU part of the CPU 1511C-1 PN.
Figure 2-1 CPU 1511C-1 PN
Note Protective film Note that a protective film is attached to the display of the CPU when shipped from the factory. Remove the protective film if necessary.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
21
Product overview 2.2 Hardware properties and firmware functions
Properties
The CPU 1511C-1 PN has the following technical properties:
Property CPU display
Supply voltage PROFINET IO PROFINET interface (X1 P1 R and X1 P2 R)
Operation of the CPU as · IO controller · I-device
Description
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides information on order numbers, firmware version and serial numbers of all connected modules. In addition, you can set the IP address of the CPU and carry out further network settings. The display shows occurring error messages directly in plain text.
In addition to the functions listed here, a multitude of other functions that are described in the SIMATIC S71500 Display Simulator are shown on the display.
A 4-pole connection plug that is located at the front of the CPU supplies the 24 V DC supply voltage.
Additional information
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
· SIMATIC S7-1500 Display Simulator (http://www.automation.siemens. com/salesmaterial-as/interactivemanuals/getting-started_simatics7-1500/disp_tool/start_en.html)
· Chapter Wiring (Page 79)
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
The X1 interface has two ports (P1 R and P2 R). In addition to basic PROFINET functionality, its also supports PROFINET IO RT (real time) and IRT (isochronous real time), which means you can configure PROFINET IO communication or real-time settings on the interface.
PROFINET function manual (http://support.automation.siemens.c om/WW/view/en/68039307)
Port 1 and Port 2 can also be used as ring ports for the configuration of redundant ring structures in Ethernet (media redundancy).
Basic PROFINET functionality comprises:
· HMI communication
· Communication with the configuration system
· Communication with a higher-level network (backbone, router, Internet)
· Communication with another machine or automation cell
· IO controller: As an IO controller the CPU addresses the connected IO devices
· I-device: As an I-device (intelligent IO device) the CPU is assigned to a higher-level IO controller and is used in the process as an intelligent pre-processing unit of sub-processes
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
22
Manual, 12/2017, A5E40898565-AA
Product overview 2.2 Hardware properties and firmware functions
2.2.2
Firmware functions of the CPU part
Functions
The CPU 1511C-1 PN supports the following functions:
Function Integrated system diagnostics Integrated Web server
Integrated trace functionality
OPC UA
Configuration control
Description
Additional information
The system automatically generates the messages for the system diagnostics and outputs these messages via a programming device/PC, HMI device, the Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
Diagnostics function manual (http://support.automation.siemens.c om/WW/view/en/59192926)
The Web server lets you access the CPU data by
·
means of a network. Evaluations, diagnostics, and
modifications are thus possible over long distances.
Monitoring and evaluation is possible without STEP 7; all you need is a Web browser. Make sure that you take ·
appropriate measures (e.g. limiting network access,
using firewalls) to protect the CPU from being compro-
mised.
Web server function manual (http://support.automation.sieme ns.com/WW/view/en/59193560)
Security with SIMATIC S7 controllers system manual (https://support.industry.siemens. com/cs/ww/en/view/90885010)
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
Using the trace and logic analyzer function function manual (http://support.automation.siemens.c om/WW/view/en/64897128)
The device saves the recordings. You can read out and permanently save the recordings with the configuration system (ES), if required. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes.
The trace record can also be displayed through the Web server.
With OPC UA, data is exchanged via an open and vendor-neutral communication protocol. The CPU can act as an OPC UA DA server. The CPU can communicate with OPC UA clients as an OPC UA server.
Communication function manual (https://support.industry.siemens.co m/cs/ww/en/view/59192925)
Through OPC UA Companion Specification, the methods can be specified uniformly and independently of manufacturers. The specified methods enable you to integrate devices from various manufacturers more easily into your plants and production processes.
You can use configuration control to operate different real hardware configurations with a configured maximum configuration of the hardware. This means that, in series machine manufacturing in particular, you have the option of operating/configuring different configuration variants of a machine with a single project.
S7-1500, ET 200MP system manual (http://support.automation.siemens.c om/WW/view/en/59191792)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
23
Product overview 2.2 Hardware properties and firmware functions
Function PROFINET IO RT (real time) IRT (isochronous real time)
Isochronous mode
MRP (Media Redundancy Protocol)
MRPD (Media Redundancy with Planned Duplication)
Shared device
Description
Additional information
RT prioritizes PROFINET IO telegrams over standard telegrams. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet telegrams.
PROFINET function manual (http://support.automation.siemens.c om/WW/view/en/49948856)
A reserved bandwidth within the send clock is available for IRT data. The reserved bandwidth ensures that the IRT data can be transmitted in time-synchronized intervals, unaffected by other high network loading (e.g. TCP/IP communication or additional real time communication). Update times with maximum determinism can be realized through IRT. Isochronous applications are possible with IRT.
The Isochronous mode system property acquires measured values and process data and processes the signals in a fixed system clock. Isochronous mode thus contributes to high control quality and hence to greater manufacturing precision. Isochronous mode reduces possible fluctuations of the process reaction times to a minimum. Time-assured processing makes higher machine cycles possible.
It is possible to establish redundant networks via the Media Redundancy Protocol. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails. The PROFINET devices that are part of this redundant network form an MRP domain.
RT operation is possible with the use of MRP.
The advantage of the MRP extension MRPD is that, in the event of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no reconfiguration time.
The "Shared device" function allows you to divide the modules or submodules of an IO device up among different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required. The "Shared device" function allows the modules or submodules of an IO device to be divided up among different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules that are physically close to each other in one IO device.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
24
Manual, 12/2017, A5E40898565-AA
Product overview 2.2 Hardware properties and firmware functions
Function PROFIenergy Integrated technology Motion Control
Integrated closed-loop control functionality
Description
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. The majority of the energy is saved by the process; the PROFINET device itself only contributes a few watts of savings potential.
Additional information
S7-1500 CPUs support the controlled positioning and · traveling of axes via S7-1500 Motion Control functions by means of the following technology objects:
· Speed-controlled axes, positioning axes, synchronized axes, external encoders, cams, cam tracks and measuring inputs.
· Speed-controlled axis for controlling a drive with speed specification
· Positioning axis for position-controlled positioning of a drive
· Synchronous axis to interconnect with a master value. The axis is synchronized to the master axis position.
· External encoder for detecting the actual position of an encoder and its use as a master value for synchronous operation
· Cams, cam track for position-dependent generation of switching signals
· Measuring input for fast, accurate and eventdependent sensing of actual positions
Section Technology functions (Page 42)
S7-1500 Motion Control function manual (http://support.automation.sieme ns.com/WW/view/en/109749262)
· PID Compact (continuous PID controller)
PID control function manual
·
PID 3Step (step controller for integrating actuators)
(https://support.industry.siemens.co m/cs/ww/en/view/108210036)
· PID Temp (temperature controller for heating and
cooling with two separate actuators)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
25
Product overview 2.2 Hardware properties and firmware functions
Function Integrated safety Know-how protection Copy protection Access protection Integrity protection
Password provider
Description
Additional information
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
S7-1500, ET 200MP system manual (http://support.automation.siemens.c om/WW/view/en/59191792)
You can use authorization levels to assign separate rights to different users.
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between TIA Portal and CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password input you can connect a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 reads the password automatically for the blocks. This saves you time.
· Optimum block protection because the users do not know the password itself.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
26
Manual, 12/2017, A5E40898565-AA
2.2.3 View
Product overview 2.2 Hardware properties and firmware functions
Hardware properties of the analog on-board I/O module
The following figure shows the analog on-board I/O (X10) of the CPU 1511C-1 PN.
Figure 2-2 Analog on-board I/O
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
27
Product overview 2.2 Hardware properties and firmware functions
Properties of the analog inputs
The 5 inputs of the analog on-board I/O module have the following properties:
Property
Description
Additional information
Resolution: 16 bits includ- A CPU processes information exclusively in digital
· Chapter Analog value pro-
ing sign
format. An ADC (analog-to-digital converter) integrated
cessing
into the analog on-board I/O module therefore converts the analog value into a bit pattern. For the CPU, this
·
Analog value processing function
conversion always returns a 16-bit word for SIMATIC
manual
products. The ADC used digitalizes the analog signal
(http://support.automation.sieme
and approximates its value with a stepped curve. The
ns.com/WW/view/en/67989094)
resolution specifies the number of increments of the
analog value along this stepped curve here.
Integrated types of measuring
Controllers are only capable of processing analog values in the form of bit patterns. For this purpose, transducers which can be connected to the analog module measure physical variables such as pressure or temperature. This analog value is measured by the analog input module in the form of the measurement types current, voltage or resistance. The analog on-board I/O module supports the following measurement types on the following channels.
· Voltage measurement type can be set individually for channel 0 to 3
· Current measurement type can be set individually for channel 0 to 3
· Resistor measurement type can be set for channel 4
· Thermal resistor measurement type can be set for channel 4
Configurable diagnostics Hardware interrupt
The analog on-board I/O module can diagnose errors. The module reports the diagnosed state to the CPU using a diagnostics error interrupt. Different types of diagnostics are available that you can parameterize channel-granularly.
You can react to process events (such as negative/positive exceeding of specific limits) through the configuration of a hardware interrupt. Hardware interrupts can be parameterized channel-granularly.
Chapter Parameters of the analog on-board I/O (Page 118)
· Chapter Parameters of the analog on-board I/O (Page 118)
· Chapter Structure of a data record for input channels of the analog on-board I/O (Page 162)
· STEP 7 online help
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
28
Manual, 12/2017, A5E40898565-AA
Product overview 2.2 Hardware properties and firmware functions
Properties of the analog outputs
The 2 outputs of the analog on-board I/O module have the following properties:
Property Resolution: 16 bits including sign
Integrated output types
Configurable diagnostics
Description
Additional information
Once the CPU has processed the digital signal, a DAC ·
(digital-to-analog converter) integrated in the analog on-
board I/O module converts the output signal to an analog current or voltage value. The resulting value of the
·
output signal corresponds to the output value with
which the analog on-board I/O module controls the
analog actuators.
Chapter Analog value processing
Analog value processing function manual (http://support.automation.sieme ns.com/WW/view/en/67989094)
With the selection of the type of output you specify whether the digital-to-analog converter is to convert the output signal into the type of output "Current" or "Voltage". The output can be selected by individual channel.
The analog on-board I/O module can diagnose errors. The module reports the diagnosed state to the CPU using a diagnostics error interrupt. Different types of diagnostics are available that you can parameterize channel-granularly.
Chapter Parameters of the analog on-board I/O (Page 118)
See also
Parameter assignment and structure of the parameter data records of the analog on-board I/O (Page 162)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
29
Product overview 2.2 Hardware properties and firmware functions
2.2.4
Firmware functions of the analog on-board I/O module
Functions of the analog inputs
The 5 inputs of the analog on-board I/O module have the following functions:
Function Reconfiguration in RUN
Support of the value status (Quality Information, QI)
Description
You have the option of reassigning parameters for the ·
analog on-board I/O module in RUN (for example,
measuring ranges of individual channels can be modi-
fied in RUN without affecting the other channels).
·
Additional information
Chapter Parameters of the analog on-board I/O (Page 118)
Chapter Parameter assignment and structure of the parameter data records of the analog onboard I/O (Page 162)
Value status = 1 ("Good") indicates that the value of the assigned input at the terminal is valid.
Value status = 0 ("Bad") indicates that the read value is not valid.
Chapter Address space of the analog on-board I/O (Page 111)
Functions of the analog outputs
The 2 outputs of the analog on-board I/O module have the following functions:
Function Reconfiguration in RUN
Support of the value status (Quality Information, QI)
Description
You have the option of reassigning parameters for the ·
analog on-board I/O module in RUN (for example,
output ranges of individual channels can be modified in RUN without affecting the other channels).
·
Additional information
Chapter Parameters of the analog on-board I/O (Page 118)
Chapter Parameter assignment and structure of the parameter data records of the analog onboard I/O (Page 162)
Value status = 1 ("Good") indicates that the process value specified by the user program is correctly output at the terminal.
Value status = 0 ("Bad") indicates that the process value output at the hardware output is incorrect.
Chapter Address space of the analog on-board I/O (Page 111)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
30
Manual, 12/2017, A5E40898565-AA
2.2.5 View
Product overview 2.2 Hardware properties and firmware functions
Hardware properties of the digital on-board I/O module
The following figure shows the digital on-board I/O (X11) of the CPU 1511C-1 PN.
Figure 2-3 Digital on-board I/O
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
31
Product overview 2.2 Hardware properties and firmware functions
Properties of the digital inputs
The digital inputs of the digital on-board I/O module have the following properties:
Property Standard and high-speed inputs
Configurable diagnostics
Hardware interrupt
Description
Additional information
The digital on-board I/O module has 16 high-speed inputs for signals up to a max. of 100 kHz. The inputs can be used as standard inputs and as inputs for technology functions.
Chapter Wiring (Page 79)
The inputs have a rated input voltage of 24 V DC.
The inputs are suitable for switches and 2-/3-/4-wire proximity switches.
The digital on-board I/O module is able to diagnose errors. The module reports the diagnosed state to the CPU using a diagnostics error interrupt. You can parameterize the type of diagnostics channel-specifically.
Chapter Parameters of the digital on-board I/O (Page 121)
You can react to process events (such as positive
Chapter Parameters of the digital
edge, negative edge) through the configuration of a
on-board I/O (Page 121)
hardware interrupt. Hardware interrupts can be parame- Chapter Structure of a data record
terized channel-granularly.
for input channels of the digital on-
board I/O (Page 171)
STEP 7 online help
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
32
Manual, 12/2017, A5E40898565-AA
Product overview 2.2 Hardware properties and firmware functions
Properties of the digital outputs
The digital outputs of the digital on-board I/O module have the following properties:
Property
Description
Additional information
Configurable diagnostics
The digital on-board I/O module is able to diagnose errors. The module reports the diagnosed state to the CPU using a diagnostics error interrupt. You can parameterize the type of diagnostics channel-specifically.
Chapter Interconnection overview of the outputs (Page 109)
Standard and high-speed outputs
Standard outputs
The digital on-board I/O module has 16 standard outputs.
Chapter Wiring (Page 79)
High-speed outputs
Of the 16 standard outputs you can also use 8 outputs as high-speed outputs for technology functions.
Rated output voltage
The outputs have a rated output voltage of 24 V DC.
Output frequencies and output currents
Rated output current as output for standard mode: 0.5 A per channel.
Chapter Interconnection overview of the outputs (Page 109)
As an output for technology functions, you can select between an output current of up to 0.5 A at an output frequency up to 10 kHz (load dependent) and a reduced output current of max. 0.1 A at an increased output frequency of up to 100 kHz.
Application
The outputs are suitable for, e.g. solenoid valves, DC contactors and indicator lights, or also for signal transmission or proportional valves.
Driver blocks with pushpull outputs.
The digital outputs feature driver blocks with push-pull Figure "Current flow with correct
outputs. Due to their basic functional design, such driv- wiring using the digital on-board I/O
er blocks always contain parasitic diodes that act as
X11 as an example" in Chapter
freewheeling diodes when shutting off inductive loads. Wiring and block diagrams of the
The shutdown voltage is limited to -0.8 V. Therefore, digital on-board I/O (Page 92).
the demagnetization of inductive loads takes longer and
can be approximately calculated using the following
formula.
tau = L / R (tau= time constant, L = inductance value, R = ohmic resistance value)
After the expiration of a period of 5 * tau, the current has decreased in effect to 0 A due to the inductive load.
The maximum value is derived from:
tau = 1.15H / 48 Ohm = 24 ms. After 5 * 24 ms = 120 ms, the current has decreased in effect to 0 A.
For comparison: With standard modules, inductive shutdown voltage is limited, for example, to Vcc -53 V (supply voltage 53 V), which causes the current to decrease to 0 A after about 15 ms.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
33
Product overview 2.2 Hardware properties and firmware functions
Simultaneous use of technology and standard functions
You can use technology and standard functions at the same time, provided the hardware allows this. For example, all the digital inputs not assigned to the counting, measuring or position detection or PTO technology functions can be used as standard DI. Inputs to which technology functions are assigned can be read. Outputs to which technology functions are assigned cannot be written.
2.2.6
Firmware functions of the digital on-board I/O module
Functions of the digital inputs
The digital inputs of the digital on-board I/O module have the following functions:
Function Technology functions
Reconfiguration in RUN
Support of the value status (Quality Information, QI)
Description
Additional information
The high-speed digital inputs of the digital on-board Chapter Technology functions I/O module support technology functions such as fast (Page 42) counting, measuring, position detection and pulse generators (PWM, PTO and frequency output). Due to the supported technology functions, the compact CPUs are suitable for controlling pumps, fans, mixers, conveyor belts, lifting platforms, gate control systems, building management systems, synchronized axes, etc.
You have the option of reassigning parameters for the ·
digital on-board I/O module in RUN (for example,
values for input delay of individual channels can be
modified without affecting the other channels).
·
Chapter Parameters of the digital on-board I/O (Page 121)
Chapter Parameter assignment and structure of the parameter data records of the digital onboard I/O (Page 170)
Value status = 1 ("Good") indicates that the value of the assigned input at the terminal is valid.
Value status = 0 ("Bad") indicates that no/too little supply voltage L+ is applied at the terminal and that the read value is therefore not valid.
Chapter Address space of the digital on-board I/O (Page 113)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
34
Manual, 12/2017, A5E40898565-AA
Product overview 2.2 Hardware properties and firmware functions
Functions of the digital outputs
The digital outputs of the digital on-board I/O module have the following functions:
Function Technology functions
Reconfiguration in RUN
Support of the value status (Quality Information, QI)
Description
Additional information
The high-speed digital outputs of the digital on-board I/O module support technology functions such as fast counting, measuring, position detection and pulse generators (PWM, PTO and frequency output). Due to the supported technology functions, the compact CPUs are suitable for controlling pumps, fans, mixers, conveyor belts, lifting platforms, gate control systems, building management systems, synchronized axes, etc.
Chapter Technology functions (Page 42)
You have the option of reassigning parameters for the ·
digital on-board I/O module in RUN (for example,
behavior during CPU STOP, without affecting the
other channels).
·
Chapter Parameters of the digital on-board I/O (Page 121)
Chapter Parameter assignment and structure of the parameter data records of the digital onboard I/O (Page 170)
Value status = 1 ("Good") indicates that the process value specified by the user program is correctly output at the terminal.
Value status = 0 ("Bad") indicates that the process value output at the hardware output is incorrect or the channel is used for technology functions.
Chapter Address space of the digital on-board I/O (Page 113)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
35
Product overview 2.3 Operator controls and display elements
2.3
Operator controls and display elements
2.3.1
Front view with closed front panel
The following figure shows the front view of the CPU 1511C-1 PN.
LEDs for the current operating mode and diagnostics status of the CPU Status and error displays RUN/ERROR of the analog on-board I/O Status and error displays RUN/ERROR of the digital on-board I/O Control keys Display
Figure 2-4 View of the CPU 1511C-1 PN with closed front panels (front)
Note Temperature range for display To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down again, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU. You can find additional information on the temperatures at which the display switches itself on and off in the Technical specifications (Page 137).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
36
Manual, 12/2017, A5E40898565-AA
Product overview 2.3 Operator controls and display elements
Removing and fitting the front panel or the display
You can remove and fit the front panel or the display during operation. The CPU retains its operating mode when the front panel is pulled and plugged.
WARNING Personal injury and damage to property may occur If you pull or plug the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Before you pull or plug the front panel in hazardous area zone 2, always ensure that the S7-1500 automation system is de-energized. The CPU maintains its operating mode.
Locking the front panel
You can lock the front panel to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a hoop diameter of 3 mm to the front panel.
Reference
Figure 2-5 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. For more information on the display, the configurable protection levels and the local lock, refer to the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
37
Product overview 2.3 Operator controls and display elements
2.3.2
Front view of the CPU without front panel and view from below
The following figure shows the operator control and connection elements of the CPU 1511C-1 PN with the front cover of the CPU open.
LEDs for the current operating mode and diagnostics status of the CPU Status and error displays RUN/ERROR of the analog on-board I/O Status and error displays RUN/ERROR of the digital on-board I/O Connector for power supply Operating modes with "STOP ACTIVE" LED LEDs for the 2 ports (X1 P1 and X1 P2) of the PROFINET interface X1 MAC address Display
Figure 2-6 View of the CPU 1511C-1 PN without front panel on the CPU (front)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
38
Manual, 12/2017, A5E40898565-AA
Product overview 2.3 Operator controls and display elements
Slot for the SIMATIC memory card PROFINET IO interface (X1) with 2 ports Connection for supply voltage Fastening screw
Figure 2-7 View of the CPU 1511C-1 PN bottom
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
39
Product overview 2.3 Operator controls and display elements
2.3.3
Rear view
The following figure shows the connection elements on the rear of the CPU 1511C-1 PN.
Shield contact surfaces Plug-in connection for power supply Plug-in connection for backplane bus Fastening screws
Figure 2-8 View of the CPU 1511C-1 PN - rear
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
40
Manual, 12/2017, A5E40898565-AA
Product overview 2.4 Operating mode buttons
2.4
Operating mode buttons
You use the operating mode buttons to set the operating mode of the CPU.
The following table shows the meaning of the corresponding operation of the operating mode buttons.
Table 2- 5 Meaning of the operating mode buttons
Operation of the operating mode buttons RUN
STOP
Meaning
RUN mode STOP mode
MRES
1. Press the operating mode button STOP.
Result: The RUN/STOP LED lights up yellow. 2. Press the operating mode button STOP until the RUN/STOP LED lights up for the 2nd time and remains continuously lit (this takes three seconds). After this, release the button. 3. Press the operating mode button STOP again within the next three seconds.
Manual memory reset
(with inserted SIMATIC memory card)
or
Reset to factory settings (without inserted SIMATIC memory card):
Explanation
The CPU executes the user program. The user program is not executed. (STOP ACTIVE LED lights up). The CPU executes memory reset.
or The CPU is reset to its factory settings. You can find additional information in the S71500/ET 200MP system manual (https://support.industry.siemens.com/cs/ww/en/vi ew/59191792).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
41
Technology functions
3
3.1
High-speed counters
Properties
The technology functions of the compact CPU have the following technical properties: 16 high-speed digital inputs (up to 100 kHz), isolated
6 high-speed counters (High Speed Counter/HSC), 4 of which can be used as A/B/N Interfaces
24 V encoder signals of sourcing or push-pull encoders and sensors 24 V encoder supply output, short-circuit-proof Up to 2 additional digital inputs per high-speed counter for possible HSC DI functions
(Sync, Capture, Gate) 1 digital output per high-speed counter for fast reaction to the count Counting range: 32 bits Diagnostics and hardware interrupts can be configured Supported encoder/signal types 24 V incremental encoder
(with 2 tracks A and B, phase-shifted by 90°, up to 4 incremental encoders also with zero track N) 24 V pulse encoder with direction signal 24 V pulse encoder without direction signal 24 V pulse encoder each for forward pulse & reverse pulse The high-speed counters support reconfiguration in RUN. You can find additional information in chapter Parameter data records of the high-speed counters (Page 173).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
42
Manual, 12/2017, A5E40898565-AA
Technology functions 3.1 High-speed counters
3.1.1
Functions
3.1.1.1
Counting
Counting refers to the detection and adding up of events. The counters acquire and evaluate encoder signals and pulses. You can specify the count direction using suitable encoder or pulse signals or through the user program. You can control counting processes using the digital inputs. You can switch the digital outputs exactly at defined count values, regardless of the user program. You can configure the response of the counters using the functionalities described below.
Counting limits
The counting limits define the count value range used. The counting limits are selectable and can be modified during runtime by the user program. The highest counting limit that can be set is 2147483647 (2311). The lowest counting limit that can be set is 2147483648 (231). You can configure the response of the counter at the counting limits:
Continue or stop counting (automatic gate stop) on violation of a counting limit
Set count value to start value or to opposite counting limit on violation of a counting limit
Start value
You can configure a start value within the counting limits. The start value can be modified during runtime by the user program. Depending on the parameter assignment, the compact CPU can set the current count value to the start value during synchronization, during the Capture function, on violation of a counting limit or when the gate is opened.
Gate control
The opening and closing of the hardware gate (HW gate) and software gate (SW gate) defines the period of time during which the counting signals are acquired. The digital inputs of the digital on-board I/O control the HW gate. The user program controls the software gate. You can enable the hardware gate using the parameter assignment. The software gate (bit in the control interface of the cyclic I/O data) cannot be disabled.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
43
Technology functions 3.1 High-speed counters
Capture
You can configure an external reference signal edge that triggers the saving of the current count value as a Capture value. The following external signals can trigger the Capture function:
Rising or falling edge of a digital input
Both edges of a digital input
Rising edge of signal N at the encoder input
You can configure whether counting continues from the current count value or from the start value after the Capture function.
Hysteresis
You can specify hysteresis for the comparison values, within which a digital output is prevented from switching again. An encoder may stop at a certain position, and slight movements may make the count value fluctuate around this position. If a comparison value or a counting limit lies within this fluctuation range, the corresponding digital output will be switched on and off often if hysteresis is not used. The hysteresis prevents these unwanted switching operations.
Reference
For more information on the counter, refer to the S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection function manual (http://support.automation.siemens.com/WW/view/en/59709820).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
44
Manual, 12/2017, A5E40898565-AA
Technology functions 3.1 High-speed counters
3.1.1.2
Measuring
Measuring functions
The following measuring functions are available:
Table 3- 1 Overview of available measuring functions
Measurement type Frequency measurement Period measurement
Velocity measurement
Description
A measuring interval calculates the average frequency based on the time sequence of the count pulses, and returns this frequency as a floating-point number in units of hertz.
A measuring interval calculates the average period duration based on the time sequence of the count pulses, and returns this period duration as a floating-point number in units of seconds.
A measuring interval calculates the average velocity based on the time sequence of the count pulses, and returns this velocity in the configured unit.
The measured value and count value are both available in the feedback interface.
Update time
You can configure the interval at which the compact CPU updates the measured values cyclically as the update time. Greater update times smooth uneven measured variables and increase the measuring accuracy.
Gate control
Opening and closing the hardware gate and software gate defines the period of time during which the count signals are acquired. The update time is asynchronous to the opening of the gate, which means that the update time is not started when the gate is opened. After the gate is closed, the last measured value calculated is still returned.
Measuring ranges
The measuring functions have the following measuring range limits:
Table 3- 2 Overview of low and high measuring range limits
Measurement type Frequency measurement Period measurement Velocity measurement
Low measuring range limit
High measuring range limit
0.04 Hz
400 kHz *
2.5 s *
25 s
Depending on the configured number of "increments per unit" and the "timebase for velocity measurement"
* Applies to 24 V incremental encoder and "quadruple" signal evaluation
All measured values are returned as signed values. The sign indicates whether the count value increased or decreased during the relevant time period. For example, a value of 80 Hz means that the count value decreases at 80 Hz.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
45
Technology functions 3.1 High-speed counters
Reference
For more information on measuring, refer to the S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection function manual (http://support.automation.siemens.com/WW/view/en/59709820).
3.1.1.3
Position detection for motion control
You can use the digital on-board I/O, e.g. with an incremental encoder, for position detection with S7-1500 Motion Control. The position detection is based on the counting function, which evaluates the acquired encoder signals and provides them for S7-1500 Motion Control. In the hardware configuration of the CPU 1511C-1 PN in STEP 7 (TIA Portal), select the "Position input for Motion Control" mode.
Reference
For a detailed description of the use of motion control and its configuration, refer to the S71500 Motion Control function manual (http://support.automation.siemens.com/WW/view/en/109749262). In the function manual, the interface between the drives and encoders is referred to as a technology module (TM). In this context, a technology module (TM) also refers to the digital on-board I/O of the compact CPU described here.
3.1.1.4
Additional functions
Synchronization
You can configure an external reference signal edge to load the counter with the specified start value. The following external signals can trigger a synchronization:
Rising or falling edge of a digital input
Rising edge of signal N at the encoder input
Rising edge of signal N at the encoder input depending on the level of the assigned digital input
Comparison values
The integrated counter supports 2 comparison values and digital output HSC DQ1. If the counter or measured value meets the set comparison condition, HSC DQ1 can be set in order to trigger direct control operations in the process.
Both comparison values can be set in the parameters and can be changed during runtime via the user program.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
46
Manual, 12/2017, A5E40898565-AA
Technology functions 3.1 High-speed counters
Hardware interrupts
If you have enabled a hardware interrupt in the hardware configuration, the counter can trigger a hardware interrupt in the CPU when a comparison event occurs, if there is overflow or underflow, at a zero crossing of the counter, and/or at a change of count direction (direction reversal). You can specify which events are to trigger a hardware interrupt during operation in the hardware configuration.
Diagnostics interrupts
If you have enabled a diagnostics interrupt in the hardware configuration, the counter can trigger a diagnostics interrupt if the supply voltage is missing, if there is an incorrect A/B count signal or lost hardware interrupt.
3.1.2
Configuring the high-speed counters
3.1.2.1
General
You configure the high-speed counters (HSC) in STEP 7 (TIA Portal). The functions are controlled via the user program.
Reference
A detailed description of configuring the counting and measuring functions can be found in:
S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection (http://support.automation.siemens.com/WW/view/en/59709820) function manual
in the STEP 7 online help under "Using technology functions > Counting, measuring and position detection > Counting, measuring and position detection (S7-1500)"
A detailed description of configuring Motion Control be found in:
S7-1500 Motion Control (http://support.automation.siemens.com/WW/view/en/59381279) function manual
in the STEP 7 online help under "Using technology functions > Motion Control > Motion Control (S7-1500)"
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
47
Technology functions 3.1 High-speed counters
3.1.2.2
Assignment of the control interface of the high-speed counters
The user program uses the control interface to influence the behavior of the high speed counter.
Note Operation with High_Speed_Counter technology object
The High_Speed_Counter technology object is available for high-speed counting mode. We therefore recommend use of the High_Speed_Counter technology object instead of the control interface/feedback interface for controlling the high speed counter.
For information on configuring the technology object and programming the associated instruction, refer to the S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection (http://support.automation.siemens.com/WW/view/en/59709820) function manual.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
48
Manual, 12/2017, A5E40898565-AA
Technology functions 3.1 High-speed counters
Control interface per channel
The following table shows the control interface assignment:
Table 3- 3 Assignment of the control interface
Offset from start address Bytes 0 to 3 Bytes 4 to 7 Byte 8
Byte 9
Parameter Slot 0 Slot 1 LD_SLOT_0*
LD_SLOT_1*
EN_CAPTURE EN_SYNC_DN EN_SYNC_UP SET_DQ1 SET_DQ0 TM_CTRL_DQ1 TM_CTRL_DQ0 SW_GATE
Meaning
Load value (meaning of the value is specified in LD_SLOT_0)
Load value (meaning of the value is specified in LD_SLOT_1)
Specifies the meaning of the value in Slot 0
Bit 3 Bit 2 Bit 1 Bit 0
0
0
0
0
No action, idle state
0
0
0
1
Load counter
0
0
1
0
Reserve
0
0
1
1
Load start value
0
1
0
0
Load comparison value 0
0
1
0
1
Load comparison value 1
0
1
1
0
Load low counting limit
0
1
1
1
Load high counting limit
1
0
0
0
Reserve
to
1
1
1
1
Specifies the meaning of the value in Slot 1
Bit 7 Bit 6 Bit 5 Bit 4
0
0
0
0
No action, idle state
0
0
0
1
Load counter
0
0
1
0
Reserve
0
0
1
1
Load start value
0
1
0
0
Load comparison value 0
0
1
0
1
Load comparison value 1
0
1
1
0
Load low counting limit
0
1
1
1
Load high counting limit
1
0
0
0
Reserve
to
1
1
1
1
Bit 7: Enable capture function
Bit 6: Enable downward synchronization
Bit 5: Enable upward synchronization
Bit 4: Set DQ1
Bit 3: Set DQ0
Bit 2: Enable technological function DQ1
Bit 1: Enable technological function DQ0
Bit 0: Software gate
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
49
Technology functions 3.1 High-speed counters
Offset from start address Byte 10
Byte 11
Parameter
SET_DIR RES_EVENT RES_ERROR
Meaning
Bit 7: Count direction (with encoder without direction signal) Bits 2 to 6: Reserve; bits must be set to 0 Bit 1: Reset of saved events Bit 0: Reset of saved error states Bits 0 to 7: Reserve; bits must be set to 0
* If values are loaded simultaneously via LD_SLOT_0 and LD_SLOT_1, the value from Slot 0 is taken first internally and then the value from Slot 1 . This may lead to unexpected intermediate states.
Reference
You can find a graphic representation of the processing of the various SLOT parameters in the section Handling the SLOT parameter (control interface) (Page 73).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
50
Manual, 12/2017, A5E40898565-AA
3.1.2.3
Technology functions 3.1 High-speed counters
Assignment of the feedback interface of the high-speed counters
The user program receives current values and status information from the high speed counter via the feedback interface.
Note Operation with High_Speed_Counter technology object The High_Speed_Counter technology object is available for high-speed counting mode. We therefore recommend use of the High_Speed_Counter technology object instead of the control interface/feedback interface for controlling the high speed counter. For information on configuring the technology object and programming the associated instruction, refer to the S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection (http://support.automation.siemens.com/WW/view/en/59709820) function manual.
Feedback interface per channel
The following table shows the feedback interface assignment:
Table 3- 4 Assignment of the feedback interface
Offset from start address Bytes 0 to 3 Bytes 4 to 7 Bytes 8 to 11 Byte 12
Byte 13
Byte 14
Parameter
COUNT VALUE CAPTURED VALUE MEASURED VALUE LD_ERROR ENC_ERROR POWER_ERROR STS_SW_GATE STS_READY LD_STS_SLOT_1 LD_STS_SLOT_0 RES_EVENT_ACK STS_DI2 STS_DI1 STS_DI0 STS_DQ1 STS_DQ0 STS_GATE STS_CNT STS_DIR
Meaning
Current count value Last Capture value acquired Current measured value Bits 3 to 7: Reserve; set to 0 Bit 2: Error when loading via control interface Bit 1: Incorrect encoder signal Bit 0: Incorrect supply voltage L+ Bits 6 to 7: Reserve; set to 0 Bit 5: Software gate status Bit 4: Digital on-board I/O started up and parameters assigned Bit 3: Load request for Slot 1 detected and executed (toggling) Bit 2: Load request for Slot 0 detected and executed (toggling) Bit 1: Reset of event bits active Bit 0: Reserve; set to 0 Bit 7: Reserve; set to 0 Bit 6: Status HSC DI1 Bit 5: Status HSC DI0 Bit 4: Status HSC DQ1 Bit 3: Status HSC DQ0 Bit 2: Internal gate status Bit 1: Count pulse detected within last approx. 0.5 s Bit 0: Direction of last count value change
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
51
Technology functions 3.2 Pulse generators
Offset from start address
Byte 15
Parameter
STS_M_INTERVAL EVENT_CAP EVENT_SYNC EVENT_CMP1 EVENT_CMP0 EVENT_OFLW EVENT_UFLW EVENT_ZERO
Meaning
Bit 7: Count pulse detected in previous measuring interval Bit 6: Capture event has occurred Bit 5: Synchronization has occurred Bit 4: Comparison event for DQ1 has occurred Bit 3: Comparison event for DQ0 has occurred Bit 2: Overflow has occurred Bit 1: Underflow has occurred Bit 0: Zero crossing has occurred
3.2
Pulse generators
3.2.1
Operating modes
3.2.1.1
Operating mode: Pulse-width modulation (PWM)
Properties
The pulse-width modulation (PWM) mode of the compact CPU has the following technical properties:
Pulse duration
Period duration
Standard output
400 µs with load > 0.1 A 1)
500 µs with load 2 mA 1) 10 ms 2)
Minimum High-speed output
deactivated
20 µs with load > 0.1 A 1) 40 µs with load
2 mA 1) 100 s 2)
High-speed output activated
2 µs 1)
Standard output
Maximum
High-speed output deac-
tivated
High-speed output activat-
ed
10 000 000 µs (10 s)
10 s
1) A lower value is theoretically possible but, depending on the connected load, the output voltage can no longer be output as complete rectangular pulse
2) Load-dependent
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
52
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
Principle of operation
With pulse width modulation, a signal with defined cycle duration and variable on-load factor is output at the digital output. The on-load factor is the relationship of the pulse duration to the cycle duration. In PWM mode, you can control the on-load factor and the cycle duration. With pulse width modulation, you vary the mean value of the output voltage. Depending on the connected load, you can control the load current or the power with this. You can specify the pulse duration as one-hundredth of the period duration (0 to 100), as one-thousandth (0 to 1 000), as one ten-thousandth (0 to 10 000) or in S7 analog format.
Period duration Pulse duration
The pulse duration can be between 0 (no pulse, always off) and full scale (no pulse, period duration always on). The PWM output can, for example, be used to control the speed of a motor from standstill to full speed or you can use it to control the position of a valve from closed to completely open. You configure the pulse width modulation (PWM) mode in STEP 7 (TIA Portal). The pulse width modulation mode has the following functions: When the option "High-speed output (0.1 A)" is activated, you can generate a minimum
pulse duration of 2 s at a current of 100 mA. If the option "High-speed output (0.1 A)" is not activated, you can generate a minimum pulse duration of 20 s with a load > 0.1 A and a minimum pulse duration of 40 s with a load of 2 mA and a current of maximum 0.5 A. If a standard output is used, you can generate a minimum pulse duration of 400 µs with a load of > 0.1 A and a minimum pulse duration of 500 µs with a load of 2 mA. You can control the pulse output (DQA) of the channel manually via the control and feedback interface. You can configure the reaction to CPU STOP. Upon change to CPU STOP, the pulse output (DQA) is set to the configured state.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
53
Technology functions 3.2 Pulse generators
Controller
For the pulse width modulation (PWM) mode, the user program directly accesses the control and feedback interface of the channel.
Reconfiguration via the instructions WRREC/RDREC and parameter assignment data record 128 is supported. You can find additional information in section Parameter data records (PWM) (Page 180).
You control the on-load factor (pulse-cycle ratio) of the pulse width via the OUTPUT_VALUE field of the control interface. Pulse width modulation generates continuous pulses based on this value. The period duration is adjustable.
Figure 3-1 Pulse schematic
Starting the output sequence
The control program must output the enable for the output sequence with the help of the software enable (SW_ENABLE 0 1). The feedback bit STS_SW_ENABLE indicates that the software enable is pending at the PWM. If the software enable is activated (rising edge), STS_ENABLE is set. The output sequence runs continuously, as long as SW_ENABLE is set.
Note Output control signal TM_CTRL_DQ · If TM_CTRL_DQ = 1, the technology function takes over the control and generates pulse
sequences at the output PWM DQA. · If TM_CTRL_DQ = 0, the user program takes over the control and the user can set the
output PWM DQA directly via the control bit SET_DQA.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
54
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
Canceling the output sequence
Deactivating the software enable (SW_ENABLE = 1 0) cancels the current output sequence. The last period duration is not completed. STS_ENABLE and the digital output PWM DQA are immediately reset to 0. A renewed pulse output is only possible after a restart of the output sequence.
Minimum pulse duration and minimum interpulse period
You assign the minimum pulse duration and the minimum interpulse period with the parameter "Minimum pulse duration". A pulse duration determined by the technology function or PWM channel which is shorter
than the minimum pulse duration will be suppressed. A pulse duration determined by the technology function or PWM channel which is longer
than the cycle duration less the minimum interpulse period will be set to the value of the cycle duration (output switched on permanently).
Cycle duration Cycle duration minus minimum interpulse period Minimum pulse duration OUTPUT_VALUE (One tenth of a percent on-load factor) Pulse duration
Figure 3-2 Minimum pulse duration and minimum interpulse period
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
55
Technology functions 3.2 Pulse generators
Setting and changing the pulse on-load factor
OUTPUT_VALUE assigns the on-load factor for the current period duration. You select the range of the field OUTPUT_VALUE of the control interface with the "Output format" parameter.
Output format 1/100: Value range between 0 and 100 Pulse duration = (OUTPUT_VALUE/100) x period duration.
Output format 1/1000: Value range between 0 and 1 000 Pulse duration = (OUTPUT_VALUE/1 000) x period duration.
Output format 1/10000: Value range between 0 and 10 000 Pulse duration = (OUTPUT_VALUE/10 000) x period duration.
Output format "S7 analog output": Value range between 0 and 27 648 Pulse duration = (OUTPUT_VALUE/27 648) x period duration.
You assign OUTPUT_VALUE directly via the control program. A new OUTPUT_VALUE is applied at the output when the next rising edge occurs.
Setting and changing the period duration
Permanent update The period duration is permanently controlled via the control interface. The MODE_SLOT bit must be set ("1" means permanent update); LD_SLOT must be set to value 1 ("1" means period duration). Set the period value in the field SLOT. The unit is always a microsecond.
High-speed output activated: between 10 s and 10 000 000 s (10 s) in the field SLOT
High-speed output deactivated: between 100 s and 10 000 000 s (10 s) in the field SLOT
Standard output (100 Hz output): between 10 000 µs (10 ms) and 10 000 000 µs (10 s) in the field SLOT
Individual updating Set the period duration in the configuration parameters. Alternatively, execute an individual update via the control interface. MODE_SLOT must be deleted ("0" means individual update); LD_SLOT must be set to value 1 ("1" means period duration). Set the period duration value in the field SLOT. The unit is always a microsecond.
High-speed output activated: between 10 s and 10 000 000 s (10 s) in the parameters
High-speed output deactivated: between 100 s and 10 000 000 s (10 s) in the parameters
Standard output (100 Hz output): between 10 000 µs (10 ms) and 10 000 000 µs (10 s) in the parameters
The new period duration is applied at the next rising edge of the output.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
56
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
Setting the minimum pulse duration and the minimum interpulse period
You assign the minimum pulse duration and the minimum interpulse period as DWORD numerical value between 0 and 10 000 000 s (10 s) with the help of the channel parameter configuration "Minimum pulse duration".
Parameters of the pulse width modulation (PWM) mode
Category Reaction to CPU STOP
Diagnostics interrupt
Parameter Reaction to CPU STOP
Substitute value for pulse output (DQA)
No supply voltage L+
Meaning
The parameter "Output substitute value" generates a substitute value upon CPU STOP, which you can define with the parameter "Substitute value for pulse output (DQA)".
On CPU STOP, the parameter "Continue" still generates the PWM output signal which was generated before the CPU STOP.
If you have set the option "Output substitute value" for "Reaction to CPU STOP", the parameter "Substitute value for pulse output (DQA)" defines the substitute value to be used for the pulse output of the channel.
If you have set the option "Continue" for "Reaction to CPU STOP", the parameter "Substitute value for pulse output (DQA)" cannot be selected.
The parameter "Missing supply voltage L+" activates the diagnostic interrupt of the channel in the case of no supply voltage L+
Value range Output substitute value
Continue
0 (use substitute value 0)
1 (use substitute value 1)
Deactivated Activated
Default Output substi-
tute value
0
Deactivated
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
57
Technology functions 3.2 Pulse generators
Category Parameter
Parameter
High-speed output (0.1 A)
Meaning
The "High-speed output (0.1 A)" parameter is used to specify whether you want to use the selected pulse output as high-speed output. The requirement for this is that the selected pulse output supports operation as high-speed output.
Output format
Defines the format of the ratio value (on-load factor) in the field "OUTPUT_VALUE" of the control interface of the channel.
Minimum pulse duration
Defines the minimum pulse duration and the minimum interpulse period of the output signal of the channel. The channel suppresses all pulses and pauses that are below the specified value.
Value range
Deactivated
The output supports frequencies of up to 10 kHz (load dependent)
and currents of up to 0.5 A or frequencies of up to 100 Hz and currents of up to 0.5 A depending on the performance capability of
the selected output.
Activated
The output supports frequencies of up to 100 kHz and currents of
up to 0.1 A.
S7 analog output
Interprets the ratio value in the field OUTPUT_VALUE" of the control interface as 1/27648 of
the current period duration.
Supported value range from 0 to 27 648
1/100
Interprets the ratio value in the field "OUTPUT_VALUE" of the control interface as percentage value of the current period dura-
tion.
Supported value range 0 to 100
1/1000
Interprets the ratio value in the field "OUTPUT_VALUE"of the control interface as a one-tenth percentage point of the current
period duration.
Supported value range from 0 to 1 000
1/10000
Interprets the ratio value in the field "OUTPUT_VALUE" of the
control interface as a onehundredth percentage point of the
current period duration.
Supported value range from 0 to 10 000
0 s to 10 000 000 s (10 s)
Default Deactivated
1/100
0 s
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
58
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
Category
Parameter
Period duration
Hardware inputs/ outputs
Pulse output (DQA)
Meaning Defines the period duration of the output signal of the channel in s. In RUN, the user program can control the period duration via the control and feedback interface of the channel.
The parameter "Pulse output (DQA)" defines the hardware output to use as pulse output channel.
Value range
x to 10 000 000 s (10 s)
at 100 kHz hardware output (high-speed output (0.1 A) activated): 10 s to 10 000 000 s
(10 s)
at 10 kHz hardware output (highspeed output (0.1 A) deactivated): 100 s to 10 000 000 s
(10 s)
at 100 kHz hardware output (high-speed output (0.1 A) deac-
tivated): 10 000 s (10 ms) to 10 000 000 s (10 s)
For B: X11, terminal 21 (DQ0 / %Q4.0): 10 kHz / 0.5 A or 100 kHz / 0.1 A
For B: X11, terminal 31 (DQ8 / %Q5.0):
100 Hz / 0.5 A
Default 2 000 000 s
(2 s)
Hardware output with
the least significant address
Output signals for pulse width modulation (PWM) mode
Output signal
Continuous pulse current at the digital output PWM DQA
Meaning
A pulse is output at the digital output PWM DQA for the set on-load factor and period duration.
Value range Continuous pulse current
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
59
Technology functions 3.2 Pulse generators
3.2.1.2
Operating mode: Frequency output
In this operating mode, you can assign a frequency value with high frequencies more precisely than by using the period duration in PWM mode.
A rectangular signal with an assigned frequency and a constant on-load factor of 50% is generated at the digital output.
The frequency output mode has the following functions:
When the option "High-speed output (0.1 A)" is activated, you can generate a minimum pulse duration of 2 s at a current of 100 mA. If the option "High-speed output (0.1 A)" is not activated, you can generate a minimum pulse duration of 20 s with a load > 0.1 A and a minimum pulse duration of 40 s with a load of 2mA and a current of maximum 0.5 A. If you use a standard output, you can generate a minimum pulse duration of 400 µs with a load of > 0.1 A and a minimum pulse duration of 500 µs with a load of 2 mA and a current of max. 0.5 A.
Frequency
Standard output
Minimum
High-speed output deac-
tivated
0.1 Hz
High-speed Standard out-
output activated
put
100 Hz 1)
Maximum
High-speed output deac-
tivated
10 kHz 1)
High-speed output activated
100 kHz
1) Load-dependent
You can control the pulse output (DQA) of the channel manually via the control and feedback interface.
You can configure the reaction to CPU STOP. Upon change to CPU STOP, the pulse output (DQA) is set to the configured state.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
60
Manual, 12/2017, A5E40898565-AA
Controller
Technology functions 3.2 Pulse generators
For the frequency output mode, the user program directly accesses the control and feedback interface of the channel. Reconfiguration via the instructions WRREC/RDREC and parameter assignment data record 128 is supported. You can find additional information in section Parameter data records (PWM) (Page 180).
Figure 3-3 Pulse schematic
Starting the output sequence
The control program must initiate the enable for the output sequence with the help of the software enable (SW_ENABLE 0 1). The feedback bit STS_SW_ENABLE indicates that the software enable is pending at the pulse generator.
If the software enable is activated (rising edge), STS_ENABLE is set. The output sequence runs continuously, as long as SW_ENABLE is set.
Note Output control signal TM_CTRL_DQ · If TM_CTRL_DQ = 1, the technology function takes over the control and generates pulse
sequences at the output PWM DQA. · If TM_CTRL_DQ = 0, the user program takes over the control and the user can directly
set the output PWM DQA via the control bit SET_DQA. Canceling the output sequence
Deactivating the software enable (SW_ENABLE = 1 0) during the frequency output cancels the current output sequence. The last period duration is not completed. STS_ENABLE and the digital output PWM DQA are immediately reset to 0.
A renewed pulse output is only possible after a restart of the output sequence.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
61
Technology functions 3.2 Pulse generators
Setting and changing the output value (frequency)
You set the frequency with the OUTPUT_VALUE directly with the control program in the control interface. The value is specified in the real format and the unit is always "Hz". The possible range depends on the parameter "High-speed output (0.1 A)" as follows:
High-speed pulse output deactivated
Frequency (OUTPUT_VALUE) 0.1 Hz to 10 000 Hz
High-speed pulse output activated
Frequency (OUTPUT_VALUE) 0.1 Hz to 100 000 Hz
Standard output (100 Hz output)
Frequency (OUTPUT_VALUE) 0.1 Hz to 100 Hz
The new frequency is applied at the start of the next period. The new frequency has no impact on the falling edge or the pulse-cycle ratio. However, the application can take up to 10 s depending on the previously set frequency.
Accuracy of the output frequency
The configured output frequency is output with a frequency-dependent accuracy at the digital output PWM DQA. You can find an overview of the accuracy as a function of the frequency used in the section Interconnection overview of the outputs (Page 109).
Parameters of the frequency output mode
Category
Reaction to CPU STOP
Parameter Reaction to CPU STOP
Substitute value for pulse output (DQA)
Meaning
The parameter "Output substitute value" generates a substitute value upon CPU STOP, which you can define with the parameter "Substitute value for pulse output (DQA)".
The parameter "Continue" still generates the frequency output signal upon CPU STOP, which was generated before the CPU STOP.
If you have set the option "Output substitute value" for "Reaction to CPU STOP", the parameter "Substitute value for pulse output (DQA)" defines the substitute value to be used for the pulse output of the channel.
If you have set the option "Continue" for "Reaction to CPU STOP", the parameter "Substitute value for pulse output (DQA)" cannot be selected.
Value range Output substitute value
Continue
0 (use substitute value 0)
1 (use substitute value 1)
Default Output substi-
tute value
0
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
62
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
Category Diagnostics interrupt Parameter
Hardware inputs/ outputs
Parameter
Meaning
No supply voltage L+
The parameter "Missing supply voltage L+" activates the diagnostic interrupt of the channel in the case of no supply voltage L+
High-speed output (0.1 A)
The "High-speed output (0.1 A)" parameter is used to specify whether you want to use the selected pulse output as high-speed output. The requirement for this is that the selected pulse output supports operation as high-speed output.
Output format
Pulse output (DQA)
Defines the value for the frequency output in the field "OUTPUT_VALUE" of the control interface of the channel.
The parameter "Pulse output (DQA)" is used to define the hardware output that you want to use as pulse output channel.
Value range Deactivated
Activated
Deactivated The output supports frequencies of up to 10 kHz (load dependent)
and currents of up to 0.5 A or frequencies of up to 100 Hz and currents of up to 0.5 A depending on the performance capability of
the selected output.
Activated The output supports frequencies of up to 100 kHz and currents of
up to 0.1 A.
1 Hz Interprets the value of the fre-
quency output in the field "OUTPUT_VALUE" as frequency
with the unit Hz. For B:
X11, terminal 21 (DQ0 / %Q4.0): 10 kHz / 0.5 A or 100 kHz / 0.1 A
For B: X11, terminal 31 (DQ8 / %Q5.0):
100 Hz / 0.5 A
Default Deactivated
Deactivated
1 Hz
Hardware output with
the least significant address
Output signals for frequency output mode
Output signal
Continuous pulse current at the digital output PWM DQA
Meaning
A pulse for the assigned frequency is output at the digital output PWM DQA.
Value range Continuous pulse current
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
63
Technology functions 3.2 Pulse generators
3.2.1.3
Operating mode: PTO
The PTO (Pulse Train Output) mode can be used to output position information. This allows you to, for example, control stepper motor drives or simulate an incremental encoder. The frequency of the pulses represents the speed, while the number of pulses represents the distance. The direction can also be specified by using two signals per channel. You can use a PTO channel for setpoint output (drive) for an axis technology object.
PTO mode is divided into the following four signal types:
PTO (pulse (A) and direction (B)): If you select the PTO signal type (pulse (A) and direction (B)), an output (A) controls the pulses and an output (B) controls the direction. B is 'High' (active) when pulses are generated in a negative direction. B is 'Low' (inactive) when pulses are generated in a positive direction.
Positive direction of rotation Negative direction of rotation
PTO (Count up (A) and Count down (B)): When you select the PTO signal type (count up (A) and count down (B)), an output (A) outputs pulses for positive directions and another output (B) outputs pulses for negative directions.
Positive direction of rotation Negative direction of rotation
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
64
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
PTO (A, B phase-shifted): When you select the PTO signal type (A, B phase-shifted), the two outputs pulses with the specified velocity, but phase-shifted by 90 degrees. This is a 1x combination in which the pulse shows the duration between two positive transitions of A. In this case, the direction is determined based on the output which first changes from 0 to 1. With positive direction, A precedes B. With negative direction B precedes A.
The number of generated pulses is based on the number of 0-to-1 transitions from phase A. The phase ratio determines the direction of motion:
PTO (A, B phase-shifted)
Phase A precedes phase B (positive motion)
Phase A follows phase B (negative motion)
Number of pulses
Number of pulses
PTO (A, B phase-shifted - quadruple): When you select the PTO signal type (A, B phaseshifted, quadruple), the two outputs transmit pulses with the specified velocity, but phaseshifted by 90 degrees. The quadruple signal type is a 4x configuration in which each edge transition corresponds to an increment. Therefore, a full period of the signal A contains four increments. In this way, two outputs, each with 100 kHz signal frequency, can be used to output a control signal that supplies 400 000 increments per second. The direction is determined based on the output which first changes from 0 to 1. With positive direction, A precedes B. With negative direction B precedes A.
PTO (A, B phase-shifted - quadruple)
Phase A precedes phase B (positive motion)
Phase A follows phase B (negative motion)
Number of pulses
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Number of pulses 65
Technology functions 3.2 Pulse generators
Parameters of PTO mode
Category
Diagnostics interrupt
Parameter No supply voltage L+
Data exchange with the drive
Reference speed
Maximum speed
Meaning
With the parameter "Missing supply voltage
L+", you activate the diagnostic interrupt of the channel in the event of no supply voltage L+.
Value range Deactivated
Activated
With the parameter "Reference speed", you
define the reference value for the drive velocity. The drive velocity is defined as percentage value of the refer-
ence speed in the range from -200% to
+200%.
Floating-point number: 1.0 to 20 000.0 (rpm)
The parameter "Maximum speed" is used to
define the required maximum speed for
your application.
The supported value range depends on:
· the signal type selected under "Operating mode"
· the value defined under "Increments per revolution"
· the value defined under "Reference speed"
The low limit of the value range is:
· for the signal type "PTO (A, B phase-shifted - quadruple)": 0.1 Hz * 60 s/min * 4) / Increments per revolution
· for the non-quadruple PTO signal types: (0.1 Hz * 60 s/min) / Increments per revolution
The high limit of the value range is the minimum of the value:
· 2 * reference speed and of the value:
· for the signal type "PTO (A, B phase-shifted - quadruple)": (100 000 Hz * 60 s/min * 4) / Increments per revolution
· for the non-quadruple PTO signal types: (100 000 Hz * 60 s/min) / Increments per revolution
Default Deactivated 3 000.0 (rpm)
3 000.0 (rpm)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
66
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
Category
Fine resolution
Stop behavior
Hardware inputs/ outputs
Parameter
Meaning
Increments per revolution
The "Increments per revolution" is used to define the number of increments per revolution (also in microstep mode), which is required by the drive for a
revolution.
Bits in incr. actual value (G1_XIST1)
The parameter defines the number of bits for the coding of the fine resolution in the current incremental value of
G1_XIST1.
Quick stop time
The parameter "Quick stop time" defines the time period within which
the drive should go from the maximum speed to a standstill
(OFF3).
Reference switch input
The parameter "Reference switch input" defines the hardware input of the reference switch.
Edge selection reference switch
The parameter "Edge selection reference switch" defines the edge type which is to be detected by the reference switch.
Measuring input
The parameter "Measuring input" defines the hardware input of the
measuring input.
"Drive ready" input
The parameter ""Drive ready" input" defines the hardware input of the input "Drive ready".
Pulse output A for "PTO (pulse (A) and direction B)"
The parameter "Pulse output A" defines the hardware output for
PTO signal A.
Direction output B for "PTO (pulse (A) and direction B))"
The parameter "Direction output B" defines the hardware output for
PTO signal B.
Value range 1 to 1 000 000
0
1 to 65 535 (ms)
[Input address of the reference switch DI]
Rising edge Falling edge
[Input address of the measuring input DI]
[Input addresses of the inputs "Drive ready" DIn]
[Output address DQ for PTO signal A (output frequency 100
kHz)] [Output address 1 of the DQ for PTO signal B (output frequency
100 kHz)] [Output address 2 of the DQ for PTO signal B (output frequency
100 kHz)]
Default 200
0
1 000 (ms)
-Rising edge
--Grayed out Read only access to the parameter Qn (output frequency 100 kHz)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
67
Technology functions 3.2 Pulse generators
Category
Parameter
Count up for "PTO (Count up (A) and Count down (B))"
Meaning
The "Clock generator forward (A)" parameter defines the hardware output for PTO signal A.
Value range
[Output address DQ for PTO signal A (output frequency 100
kHz)]
Count down for "PTO (Count up (A) and Count down (B))"
Phase A for "PTO (A, B phaseshifted)" and "PTO (A, B phase-shifted, quadruple)"
Phase B for "PTO (A, B phaseshifted)" and "PTO (A, B phase-shifted, quadruple)" Drive enable output
The "Clock generator backward (B)" parame-
ter defines the hardware output for PTO
signal B.
The "Clock generator output (A)" parameter defines the hardware output for PTO signal A.
The "Clock generator output (B)" parameter defines the hardware output for PTO signal B.
The parameter "Drive enable output" defines the hardware output of the output "Drive ena-
ble output".
[Output address 1 of the DQ for PTO signal B (output frequency
100 kHz)]
[Output address of the DQ for PTO signal A (output frequency
100 kHz)]
[Output address 1 of the DQ for PTO signal B (output frequency
100 kHz)]
[Output addresses of the enable outputs DQn (output frequency
100 Hz)]
Default Grayed out Read only access to the pa-
rameter Grayed out Read only access to the pa-
rameter
Grayed out Read only access to the pa-
rameter
Grayed out Read only access to the pa-
rameter
--
Reaction of the PTO channel to CPU STOP
The PTO channel reacts to a change to CPU STOP by removing the drive enable (if the drive enable output is configured) and outputting the velocity setpoint 0 at the hardware outputs configured for the signal tracks A and B. The CPU STOP reaction of the PTO channels cannot be configured.
Note Reaction to CPU STOP
Upon CPU STOP, the hardware outputs assigned for the PTO outputs A and B can switch to signal state 'High' (1) and/or remain there. It is not guaranteed that the two hardware outputs switch to/remain in signal level 'Low' (0).
Controller
The pulse output channels for the four modes of the pulse generators (PTO) are controlled using Motion Control via the technology objects TO_SpeedAxis, TO_PositioningAxis and TO_SynchronousAxis. With these operating modes, the control and feedback interface of the channels is a partial implementation of the PROFIdrive interface "Telegram 3". For a detailed description of the use of motion control and its configuration, refer to the S7-1500 Motion Control function manual (http://support.automation.siemens.com/WW/view/en/109749262) and the STEP 7 online help.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
68
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
3.2.2
Functions
3.2.2.1
Function: High-speed output
The function "High-speed output (0.1 A)" improves the signal clock of the digital outputs (DQ0 to DQ7). Less delay, fluctuation, jitter, and shorter rise and fall times occur at the switching edges.
The function "High-speed output (0.1 A)" is suitable for generating pulse signals in a more precise clock, but provides a lower maximum load current.
For the PWM and Frequency output modes, select the high-speed output of the channel in STEP 7 (TIA Portal). You can also change the parameter assignment during runtime with the help of the program via the data record.
High-speed pulse output (high-speed output) is available for the following operating modes:
PWM
Frequency output
PTO (the pulse outputs for the PTO mode are always "High-speed output (0.1 A)")
High-speed output
Pulse duration
Period duration Frequency
Minimum
High-speed output deactivated
High-speed output activated
20 µs with load > 0.1 A 1)
2 µs 1)
40 µs with load 2 mA
1)
100 s 2)
0.1 Hz
10 s
Maximum
High-speed output deactivated
High-speed output activated
10 000 000 s (10 s)
10 kHz 2)
100 kHz
1) A lower value is theoretically possible but, depending on the connected load, the output voltage can no longer be output as complete rectangular pulse
2) Load-dependent
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
69
Technology functions 3.2 Pulse generators
3.2.2.2
Function: Direct control of the pulse output (DQA)
Direct control of the pulse output (DQA)
In the modes "Pulse width modulation PWM" and "Frequency output", you can set the pulse output (DQA) of a pulse generator directly via the control program. Select the function for the DQ direct control by deleting the output control bit of the PWM channel (TM_CTRL_DQ = 0) in the control interface.
The direct control of the pulse output (DQA) can be helpful when commissioning a control system for automation.
When you select the direct control of the pulse output (DQA) during a pulse output sequence, the sequence continues to run in the background so that the output sequence is continued as soon as the channel takes control again (by setting TM_CTRL_DQ = 1).
You assign the status of the pulse output (DQA) using the control bits SET_DQA.
When you set TM_CTRL_DQ = 1, you deselect the direct control of the pulse output (DQA) and the channel takes over the processing. If the output sequence is still running (STS_ENABLE still active), the PWM channel takes over the control of the output again. If TM_CTRL_DQ = 1 and STS_ENABLE is not active, the module's channel also takes over processing, but then outputs "0".
Note Output control signal TM_CTRL_DQ of the PWM channel · If TM_CTRL_DQ = 1, the technology function takes over the control and generates pulse
sequences at the output PWM DQA. · If TM_CTRL_DQ = 0, the user program takes over the control and the user can set the
PWM DQA directly using the control bits SET_DQA.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
70
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
3.2.3
Configuring the PWM and frequency output modes
3.2.3.1
Assignment of the control interface
The user program influences the behavior of the PWM channel through the control interface.
Control interface per channel
The following table shows the control interface assignment:
Table 3- 5 Assignment of the control interface
Byte 0 Byte 1 Byte 2 Byte 3 Byte 4 Byte 5 Byte 6 Byte 7 Byte 8
Byte 9
Byte 10
Byte 11
7
6
5
4
3
2
1
0
OUTPUT_VALUE
PWM: On-load factor * (Int)
In PWM mode, the on-load factor uses only the two least significant bytes (byte 2 and byte 3).
Frequency output: Frequency in Hz (Real)
SLOT
Reserved = 0
MODE_SL LD_SLOT
OT
Specifies the meaning of the value under SLOT
0000: No action
0001: Period duration (PWM)
0010 to 1111: Reserved
Reserved = 0
Reserved = Reserved = SET_DQA Reserved = TM_CTRL_ SW_ENA
0
0
0
DQ
BLE
Reserved = 0
RES_ERR OR
Reserved = 0
* The terms "On-load factor", "Pulse duty factor" and "Duty factor" can be used synonymously
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
71
Technology functions 3.2 Pulse generators
Use case
1. Transfer the control for the output to the PWM channel.
2. Set SW_ENABLE so that the output can be started.
3. Set the required on-load factor using OUTPUT_VALUE.
4. If necessary, change the period duration (cyclically or once). If you do not change the value, the period duration from the hardware configuration will be used.
5. With TM CTRL_DQ and SET_DQ, set the output from the user program permanently to 1 or 0.
6. Acknowledge any errors that occur using RES_ERROR.
Additional parameters for the output sequence are defined before the start of an output sequence.
The data record of the parameter assignment is changed in the device configuration in STEP 7 (TIA Portal) or through WRREC execution.
Control interface parameters
OUTPUT_VALUE
The interpretation of the value OUTPUT_VALUE depends on the set operating mode. OUTPUT_VALUE is always updated. When an invalid value is detected (outside the permissible range), the error memory bit ERR_OUT_VAL is set until a valid value is detected. During the error condition, the invalid value is ignored and the PWM channel continues with the last valid OUTPUT_VALUE. Note that, in the frequency output mode, it is also possible that no last valid value is available. In this case, the pulse output returns the value 0, i.e. there is no pulse output.
Please note that the on-load factor is not checked in PWM mode. If the on-load factor is greater than the format permits, the PWM channel uses a ratio of 100%. For values < 0, 0% is effective.
SLOT, MODE_SLOT and LD_SLOT
Use these control interface fields if you occasionally change the period duration in PWM mode before the start of the output sequence or during operation. You can find a description of the interaction between SLOT, MODE_SLOT and LD_SLOT under Handling the SLOT parameter (control interface) (Page 73).
SW_ENABLE
If 0 1, activate the output sequence.
TM_CTRL_DQ
If 1, the output is controlled by the PWM channel and generates the pulse sequences
If 0, the output is controlled directly by the program using the SET_DQA assignments
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
72
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
SET_DQA If 1, set the output A to 1, if TM_CTRL_DQ is inactive If 0, set the output A to 0, if TM_CTRL_DQ is inactive
RES_ERROR Resetting the error bit memory ERR_LD in the feedback interface
3.2.3.2
Handling the SLOT parameter (control interface)
SLOT and MODE_SLOT
SLOT has the following operating modes.
Mode for individual update (MODE_SLOT = 0) Use this mode if you occasionally change the specific parameters (such as period duration) before the start of the output sequence or during operation.
The value in SLOT is always applied when the value changes in LD_SLOT.
The acknowledgment bit STS_LD_SLOT in the feedback interface is switched.
The value of LD_SLOT defines the interpretation of SLOT (see the table below "Interpretation of the SLOT parameter value").
If the LD_SLOT value is invalid, the setting of the feedback bit ERR_LD indicates a parameter assignment error. The user has to reset the error using the control bit RES_ERROR and enable the SLOT parameter again for the next value.
Changes made in this mode can be read back by the channel to the parameter assignment data record.
The current changes are entered in the data record 128 during readback of the parameter assignment data from the user program with RDREC. These changes are lost during a warm restart of the CPU.
Mode for cyclic updating (MODE_SLOT = 1) Use this operating mode if the program is to continuously control another parameter in addition to the main parameter to be controlled.
The value in SLOT is transferred with each module cycle.
No acknowledgment bit is available.
The value of LD_SLOT defines the interpretation of SLOT (see the table below "Interpretation of the SLOT parameter value").
If the value in SLOT is not valid, the error ERR_SLOT_VAL occurs. The error is automatically reset as soon as a valid value is loaded.
In this mode, the value in the parameter assignment data record is not updated. If LD_SLOT is changed in this mode, the last value applied from LD_SLOT is valid.
The mode for permanent updating can be stopped by setting LD_SLOT to 0 and MODE_SLOT to 0. By stopping the mode for permanent updating, the changes made at the parameters during permanent updating are retained until the next changes via SLOT (cyclic or once) or until the next STOP-RUN transition.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
73
Technology functions 3.2 Pulse generators
Interpretation of the SLOT parameter value
The value written in the SLOT parameter is interpreted depending on the LD_SLOT value and the mode as shown in the table below.
LD_SLOT
0 1
Meaning of SLOT value
No action / idling Period duration
Valid modes for using the SLOT value
All operating modes
PWM
SLOT data type
UDInt Permissible value
range*: Minimum value: 10 µs,
100 µs or 10 000 µs (10 ms)
Maximum value: 10 000 000 µs (10 s)
* The permissible value range depends on the selected hardware output and sometimes on the high-speed mode (highspeed/standard).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
74
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
Individual updating of the parameter 'Period duration'
The following representation illustrates the sequence of the individual updating of the parameter 'Period duration'. The described workflow principle can also be used on the channels of the high-speed counters.
User writes the first parameter in SLOT and specifies the first parameter in LD_SLOT Technology channel applies the first parameter and indicates the application with a change in
the bit STS_LD_SLOT
User writes the second parameter in SLOT and specifies the second parameter in LD_SLOT Technology channel applies the second parameter and indicates the application with a change
in the bit STS_LD_SLOT
User writes 0 in LD_SLOT, (SLOT inactive) Technology channel answers change in LD_SLOT with a change in STS_LD_SLOT
Figure 3-4 Individual updating
Note that the following requirements apply to the representation shown above:
The value MODE_SLOT must be set to 0
Errors or invalid values are shown in the feedback bit ERR_SLOT_VAL
The error must be acknowledged
If MODE_SLOT 0 = 1, the following applies (for PWM mode only):
The value in SLOT is continuously evaluated according to LD_SLOT
STS_LD_SLOT does not change
An error is automatically reset as soon as a valid value is set in SLOT
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
75
Technology functions 3.2 Pulse generators
Cyclic updating of the parameter 'Period duration'
The following representation illustrates the sequence of the cyclic updating of the parameter 'Period duration'. The described workflow principle can also be used on the channels of the high-speed counters.
· User sets SLOT to the required parameter
· User sets MODE_SLOT to 1
· User sets LD_SLOT to the required value (1 for period duration)
User changes value in SLOT continuously and technology channel evaluates continuously Value in SLOT exceeds permitted limit, technology channel shows this ERR_SLOT_VAL and
continues working with the last valid value
Value in SLOT again in permitted range, technology channel resets ERR_SLOT_VAL inde-
pendently and continues working with the value in SLOT
User resets LD_SLOT and MODE_SLOT, technology channel continues to work with last value
Figure 3-5 Cyclic updating
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
76
Manual, 12/2017, A5E40898565-AA
Technology functions 3.2 Pulse generators
3.2.3.3
Assignment of the feedback interface
The user program receives current values and status information from the pulse width modulation via the feedback interface.
Feedback interface per channel
The following table shows the feedback interface assignment:
Table 3- 6 Byte 0
Byte 1
Byte 2 Byte 3
Assignment of the feedback interface
7
6
5
ERR_SLOT _VAL
The valid in SLOT is invalid
ERR_OUT_ VAL
The value in
OUTPUT_V ALUE is invalid
Reserved = 0
Reserved = 0
STS_SW_E NABLE
SW_ENABL E detected or feedback
status SW_ENABL
E
Reserved = 0
Reserved = 0
4 Reserved =
0
STS_READ Y
Channel parameters
assigned and ready
Reserved = 0
3
ERR_PULS E
2
ERR_LD Error during loading via
control interface
Reserved = 0
STS_LD_S LOT Load
prompt detected and executed for slot (tog-
gling)
Reserved = Reserved =
0
0
Reserved = 0
1
Reserved = 0
0
ERR_PW R
missing supply voltage L+
Reserved = 0
STS_DQA STS_ENA BLE
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
77
Technology functions 3.2 Pulse generators
Feedback parameters
Table 3- 7 Status feedback Feedback parameters
STS_READY STS_SW_ENABLE STS_LD_SLOT
STS_ENABLE
STS_DQA
Meaning
Value range
The channel is correctly configured, is operating and supplying valid data.
0: Not ready to run 1: Ready to run
Current status of the software enable
0: SW_ENABLE is not active
1: SW_ENABLE detected
Acknowledgment bit for each action of the SLOT in the SLOT mode for individual updating (for a description of the acknowledgment bit, refer to the section Handling the SLOT parameter (control interface) (Page 73)).
Each switching of this bit represents a successful LD_SLOT action.
The output sequence is active.
0: No output sequence running
(STS_ENABLE always depends on the status of 1: Output sequence running the software enable STS_SW_ENABLE)
State of the pulse output (DQA)
0: Pulse output is not active
1: Pulse output is active
Feedback parameters ERR_PWR ERR_LD ERR_OUT_VAL ERR_SLOT_VAL
Meaning
Value range
No supply voltage L+
0: No error
1: Error
Error during loading of a parameter value in the operating mode for individual updating
0: No error 1: Error
The value in OUTPUT_VALUE is invalid
0: No error
1: Error
The value in SLOT is invalid, where MODE_SLOT = 0: No error
1 (permanent updating)
1: Error
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
78
Manual, 12/2017, A5E40898565-AA
Wiring
4
4.1
Supply voltage
24 V DC supply voltage (X80)
The connecting plug for the supply voltage is plugged in when the CPU ships from the factory.
The following table shows the terminal assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring-loaded NC contact (one spring-loaded NC contact per terminal)
Bridged internally:
and and
Figure 4-1 Connection for supply voltage
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
79
Wiring 4.2 PROFINET interfaces
4.2
PROFINET interfaces
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R)
The assignment corresponds to the Ethernet standard for an RJ45 plug.
When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X).
When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Figure 4-2 PROFINET ports
Note You need a screwdriver (max. blade width 2.5 mm) to remove the PROFINET plug.
Reference
For more information on "Wiring the CPU" and "Accessories/spare parts", refer to the S71500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
80
Manual, 12/2017, A5E40898565-AA
Wiring 4.2 PROFINET interfaces
Assignment of the MAC addresses
The CPU 1511C-1 PN has a PROFINET interface with two ports. The PROFINET interface itself has a MAC address, and each of the two PROFINET ports has its own MAC address. The CPU 1511C-1 PN therefore has three MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is continuous. The first and last MAC address are lasered on the rating plate on the right side of each CPU 1511C-1 PN.
The table below shows how the MAC addresses are assigned.
Table 4- 1 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3
Assignment
PROFINET interface X1
(visible in STEP 7 for accessible devices)
Labeling
· Front, lasered · Right side, lasered
(start of number range)
Port X1 P1 R (required for LLDP, for example)
Port X1 P2 R (required for LLDP, for example)
· Front and right side, not lasered
· Front, not lasered · Right side, lasered
(end of number range)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
81
Wiring 4.3 Terminal and block diagrams
4.3
Terminal and block diagrams
4.3.1
Block diagram of the CPU part
Block diagram
The following figure shows the block diagram of the CPU part.
CPU with control and operating mode but-
tons
Display
Electronics
Interface to on-board I/O
Interfaces to the backplane bus
Backplane bus interface
Internal supply voltage
2-port switch
X50
SIMATIC memory card
X80 24 V DC Infeed of supply voltage Figure 4-3 Block diagram of the CPU part
PN X1 P1 R PROFINET interface X1 port 1
PN X1 P2 R L+ M SF R/S ER MT X1 P1, X1 P2
PROFINET interface X1 Port 2 24 V DC supply voltage Ground STOP ACTIVE LED (yellow) RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) Link TX/RX LED
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
82
Manual, 12/2017, A5E40898565-AA
4.3.2
Wiring 4.3 Terminal and block diagrams
Terminal and block diagram of the analog on-board I/O
This section contains the block diagram of the analog on-board I/O (X10) and various wiring options. For information on wiring the front connector, establishing the cable shield, etc., refer to the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Note You can use and combine the different wiring options for all channels. Note, however, that unneeded terminals of an analog input channel must not be connected.
Definition
Un+/UnMn+/Mn-
In+/InIc n+/Ic nQVn QIn MANA CHx
Voltage input channel n (voltage only) Measuring input channel n (only resistance-type transmitters or thermal resistors (RTD)) Current input channel n (current only) Current output for RTD, channel n Voltage output channel Current output channel Reference potential of the analog circuit Channel or display of the channel status
Infeed element
The infeed element is inserted on the front connector and serves to shield the analog onboard I/O.
Note
The analog on-board I/O does not require power to be supplied by the infeed element. The infeed element is, however, necessary for shielding.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
83
Wiring 4.3 Terminal and block diagrams
Wiring: Voltage measurement
The following figure shows the terminal assignment for voltage measurement at the channels available for this measurement type (channels 0 to 3).
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Equipotential bonding cable (optional) Voltage measurement
Figure 4-4 Block diagram and terminal assignment for voltage measurement
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
84
Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
Wiring: 4-wire measuring transducer for current measurement
The following figure shows the terminal assignment for current measurement with 4-wire measuring transducer at the channels available for this measurement type (channels 0 to 3).
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Equipotential bonding cable (optional) Connector 4-wire measuring transducer
Figure 4-5 Block diagram and terminal assignment for current measurement with 4-wire measuring transducer
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
85
Wiring 4.3 Terminal and block diagrams
Wiring: 2-wire measuring transducer for current measurement
As an alternative to connecting a 4-wire measuring transducer, you can also connect 2-wire measuring transducers to channels 0 to 3. An external 24 V power supply is required to connect a 2-wire measuring transducer to the analog on-board I/O of the compact CPU. Feed this voltage short-circuit proof to the 2-wire transducer. Use a fuse to protect the power supply unit.
NOTICE Defective measuring transducer Note that the analog input of the measuring transducer is not protected against destruction in the event of a defect (short circuit). Take the necessary precautions against such cases.
The figure below shows an example of the connection of a 2-wire measuring transducer to channel 0 (CH0) of the analog on-board I/O.
Sensor (e.g. pressure gauge) 2-wire measuring transducer Fuse Equipotential bonding cable (optional)
Figure 4-6 2-wire measuring transducer at channel 0
Use the measurement type "Current (4-wire transducer)" and the measuring range 4 to 20 mA for the parameter assignment of the 2-wire measuring transducer in STEP 7 (TIA Portal).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
86
Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
Wiring: 4-wire connection of resistance-type sensors or thermal resistors (RTD)
The following figure shows the terminal assignment for 4-wire connection of resistance-type sensors or thermal resistors at the channel available for this (channel 4).
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Equipotential bonding cable (optional) 4-wire connection
Figure 4-7 Block diagram and terminal assignment for 4-wire connection
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
87
Wiring 4.3 Terminal and block diagrams
Wiring: 3-wire connection of resistance-type sensors or thermal resistors (RTD)
The following figure shows the terminal assignment for 3-wire connection of resistance-type sensors or thermal resistors at the channel available for this (channel 4).
Note 3-wire connection Note that line resistances are not compensated with a 3-wire connection.
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Equipotential bonding cable (optional) 3-wire connection
Figure 4-8 Block diagram and terminal assignment for 3-wire connection
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
88
Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
Wiring: 2-wire connection of resistance-type sensors or thermal resistors (RTD)
The following figure shows the terminal assignment for 2-wire connection of resistance-type sensors or thermal resistors at the channel available for this (channel 4).
Note 2-wire connection Note that line resistances are not compensated with a 2-wire connection.
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Equipotential bonding cable (optional) 2-wire connection
Figure 4-9 Block diagram and terminal assignment for 2-wire connection
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
89
Wiring 4.3 Terminal and block diagrams
Wiring: Voltage output
The figure below shows the terminal assignment for the wiring of the voltage outputs with: 2-wire connection without compensation for line resistances.
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) 2-wire connection CH0 and CH1
Figure 4-10 Block diagram and terminal assignment for voltage output
Note
MANA on terminals 19 and 20 is equivalent.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
90
Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
Wiring: Current output
The following figure shows an example of the terminal assignment for wiring current outputs.
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Current output CH0 and CH1
Figure 4-11 Block diagram and terminal assignment for current output
Note MANA on terminals 19 and 20 is equivalent.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
91
Wiring 4.3 Terminal and block diagrams
4.3.3
Wiring and block diagrams of the digital on-board I/O
This section contains the block diagram of the digital on-board I/O (X11) with standard inputs and outputs and the encoder supply, as well as the rules for the correct wiring of the ground connections.
For information on wiring the front connector, establishing the cable shield, etc., refer to the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Infeed element
The infeed element is inserted on the front connector and serves to shield the digital onboard I/O.
Note
The digital on-board I/O is supplied via the front connector terminals and therefore does not require power to be supplied by the infeed element. The infeed element is, however, necessary for shielding.
Output driver
The digital onboard I/O uses the following output drivers: X11, DQ0 to DQ7: Push-pull stage and freewheeling diode X11, DQ8 to DQ15: High-side switch and freewheeling diode
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
92
Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
Block diagram and terminal assignment
The figure below shows you how to connect the digital on-board I/O and the assignment of the channels to the addresses (input byte a and b, output byte c and d).
xL+ xM CHx RUN ERROR PWR
Encoder supply for the digital inputs CPU interface Connection for 24 V DC supply voltage Connection for ground Channel or channel status LED (green) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
Figure 4-12 Block diagram and terminal assignment
NOTICE
Polarity reversal of the supply voltage
An internal protective circuit protects the digital on-board I/O against destruction if the polarity of the supply voltage is reversed. In the case of polarity reversal of the supply voltage, however, unexpected states can occur at the digital outputs.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
93
Wiring 4.3 Terminal and block diagrams
Supply voltage
The inputs and outputs of the digital on-board I/O are divided into two load groups which are supplied with 24 V DC.
The digital inputs DI0 to DI15 form a load group and are supplied via the connections 1L+ (terminal 19) and 1M (terminal 20).
The digital outputs DQ0 to DQ7 are supplied via the connection 2L+ (terminal 29). The digital outputs DQ8 to DQ15 are supplied via the connection 3L+ (terminal 39). Please note that the digital outputs DQ0 to DQ15 only have a common ground. In each case, they are led through to the two terminals 30 and 40 (2M/3M) and bridged in the module. The digital outputs form a common load group.
Response of the digital outputs to a wire break at ground connection of the outputs
Due to the characteristics of the output driver used in the module, approx. 25 mA supply current flows out through the outputs via a parasitic diode in the event of a ground wire break. This behavior can lead to non-set outputs also carrying high levels and emitting up to 25 mA output current. Depending on the type of load, 25 mA can be sufficient to control the load with high level. To prevent unintended switching of the digital outputs in the event of a ground wire break, follow these steps:
Wire to ground twice
Connect ground to terminal 30 and to terminal 40.
1. Route the first ground connection from terminal 30 to the central ground connection of the plant.
2. Route the second ground connection from terminal 40 to the central ground connection of the plant.
If terminal 30 or 40 are interrupted by a ground wire break, the outputs will continue to be supplied via the second, intact ground connection.
WARNING
Wire break at ground connection
Never bridge from terminal 30 to terminal 40 in the front connector and never lead only one wire to the central ground connection.
Connect terminal 30 and terminal 40 to a common ground point.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
94
Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
As a supplement to the block diagram and terminal assignment, the following figure shows the correct wiring of the outputs in order to prevent switching of the outputs in the event of a ground wire break.
Figure 4-13 Correct wiring
The ground is supplied with a first cable from the central terminal block to terminal 30 of the module and additionally with a second cable also from the central terminal block to terminal 40 of the module.
At the digital outputs, each of the ground connections of the loads is connected with a separate cable for each load to the central terminal block.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
95
Wiring 4.3 Terminal and block diagrams
The figure below shows the current flow with correct wiring.
Figure 4-14 Current flow with correct wiring
With correct wiring, the supply current flows from the power supply 2L+ via terminal 29 to the module. In the module, the current flows via the output driver and exits the module via terminal 40.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
96
Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
The figure below shows the reaction to interruption of the first ground cable.
Figure 4-15 Interruption of the first ground cable
If a wire break occurs on the first ground cable from the central terminal block to terminal 30, the module can continue to operate without restrictions, as it is still connected to the ground via the second cable from the central terminal block to terminal 40.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
97
Wiring 4.3 Terminal and block diagrams
The figure below shows the reaction to interruption of the second ground cable.
Figure 4-16 Interruption of the second ground cable
If a wire break occurs on the second ground cable from the central block terminal to terminal 30, the module can continue to operate without restrictions, as it is still connected to the ground via the first cable from the central terminal block to terminal 40.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
98
Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
The figure below shows the current flow upon interruption of both ground cables.
Figure 4-17 Current flow upon interruption of both ground cables
If a wire break occurs on the first and on the second ground cable from the central terminal block to the terminals 30 and 40 of the module, a malfunction occurs on the module. Both ground connections of the module are interrupted.
The supply current flows from the power supply 2L+ via terminal 29 to the module. In the module, the current flows via the output driver into the parasitic diode and exits the module via the output terminal, e.g. as shown in the figure via terminal 27. The supply current therefore flows via the connected load. The internal supply current is typically 25 mA.
WARNING
Interruption of both ground cables
If the ground terminals 30 and 40 are interrupted, the following incorrect response can occur:
The activated outputs, which are switched to high, start to switch back and forth between high and low. If the load connected at the output is sufficiently small, the output is continuously activated.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0)
Manual, 12/2017, A5E40898565-AA
99
Wiring 4.3 Terminal and block diagrams
Faulty wiring
The following figure shows faulty wiring which has a bridge on the front connector.
Figure 4-18 Faulty wiring: Bridge
Terminals 30 and 40 are connected in the front connector and only routed with one cable to the central terminal block. If this cable breaks, terminals 30 and 40 are no longer connected to the ground. The module's supply current flows out via the output terminal.
100
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
The figure below shows the current flow when the ground connections of the loads and the ground connection of terminal 30 are routed with a common cable to the central terminal block.
Ground connections of other plant parts that can also carry large currents.
Figure 4-19 Faulty wiring: Common cable
If a break occurs in the common cable, the current of the outputs flows via terminal 30 to the module and via terminal 40 to the central terminal block. The current flows via the module.
WARNING
Current flow with faulty wiring
If a break occurs in the common cable, the current can be very high, depending on the plant, and lead to the destruction of the module.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
101
Wiring 4.3 Terminal and block diagrams
The figure below shows the current flow with correct wiring when a potential difference exits between the grounding points.
Grounding point functional earth 1 (FE 1)
Grounding point functional earth 2 (FE 2)
Figure 4-20 Potential difference
Equipotential bonding occurs via terminals 30 and 40. When a potential difference exists between the grounding points FE1 and FE2, the compensating current flows via terminals 30 and 40.
WARNING
Current flow with faulty wiring
In the event of a potential difference, the current can be very high, depending on the potential conditions, and lead to the destruction of the module.
102
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
Input filter for digital inputs
To suppress disruptions, you can configure an input delay for the digital inputs. You can specify the following values for the input delay: None 0.05 ms 0.1 ms 0.4 ms 1.6 ms 3.2 ms (default setting) 12.8 ms 20 ms
Note Shielding If you use standard digital inputs with "None" set as the input delay, you must use shielded cables. Shielding and the infeed element are recommended for use of standard digital inputs starting from an input delay of 0.05 ms but are not absolutely necessary.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
103
Wiring 4.3 Terminal and block diagrams
4.3.4
Addresses of the high-speed counters
You connect the encoder signals, the digital input and output signals and the encoder supplies to the 40-pin front connector of the digital on-board I/O. For information on wiring the front connector, creating the cable shield, etc., refer to the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Encoder signals
The 24 V encoder signals are designated with letters A, B and N. You can connect the following encoder types:
Incremental encoder with signal N:
Signals A, B and N are connected using the correspondingly marked connections. Signals A and B are the two incremental signals, phase-shifted by 90°. N is the zero mark signal that supplies a pulse per revolution.
Incremental encoder without signal N:
Signals A and B are connected using the correspondingly marked connections. Signals A and B are the two incremental signals, phase-shifted by 90°.
Pulse encoder without direction signal:
The count signal is connected to the A connection.
Pulse encoder with direction signal:
The count signal is connected to the A connection. The direction signal is connected to the B connection.
Pulse encoder with up/down count signal:
The up count signal is connected to the A connection. The down count signal is connected to the B connection.
You can connect the following encoders or sensors to the A, B and N inputs:
Sourcing output: The encoder or sensor switches the A, B and N inputs to 24 V DC.
Note External load resistance
Note that, depending on the characteristics of the signal source, effective load and height of the signal frequency, you may require an external load resistance to limit the fall time of the signal from high level to low level.
The specifications/technical data of the signal source (e.g. sensor) are decisive for the configuration of such a load resistance.
Push-pull: The encoder or sensor switches the A, B and N inputs alternately to 24 V DC and to ground M.
104
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
Digital inputs HSC DI0 and HSC DI1
The digital inputs are logically assigned to the high-speed counters (HSC). For information on the possible assignment of the on-board I/O inputs to the high-speed counters, refer to the table Interconnection overview of the inputs (Page 108). Up to two digital inputs are available for each high-speed counter (HSC DI0 and HSC DI1). You can use the digital inputs for the gate control (Gate), synchronization (Sync) and Capture functions. Alternatively, you can use one or more digital inputs as standard digital inputs without the functions mentioned and read the signal state of the respective digital input using the feedback interface.
Digital inputs that you do not use for high-speed counting are available for use as standard DIs.
Input addresses of the high-speed counters
You set the digital input addresses used by the high-speed counters (HSC) and the assignment of A/B/N, DI0, DI1 and DQ1 signals in STEP 7 (TIA Portal). You can enable and configure each HSC when you configure the compact CPU.
The compact CPU assigns the input addresses for the A/B/N signals automatically according to the configuration.
You specify the input addresses for DI0 and DI1 according to the table Interconnection overview of the inputs (Page 108). The interconnection produces a direct connection of the HSC to an input of the on-board I/O. The high-speed counter then uses this input as HSC DI0 or HSC DI1 ([DI] symbol). The [DI] symbols in the table identify the input addresses for HSC DI0 and HSC DI1 that are offered for selection in the hardware configuration.
Assignment of HSC addresses of inputs
You can find an overview of the options for interconnecting the inputs of the front connectors X11 and X12 in the section Interconnection overview of the inputs (Page 108).
Digital outputs HSC-DQ0 and HSC-DQ1
Two digital outputs are available for each high-speed counter. Digital output HSC-DQ0 is a logical output that cannot be interconnected with a digital output of the on-board I/O. Digital output HSC-DQ0 can only be used via the user program. HSC-DQ1 is a physical output that can be interconnected with a digital output of the on-board I/O. The digital outputs are 24 V sourcing output switches relative to M and can be loaded with a rated load current of 0.1 A. The outputs used as standard outputs have a rated load current of 0.5 A. The digital outputs are protected against overload and short-circuit.
Note
It is possible to directly connect relays and contactors without external wiring. For information on the maximum possible operating frequencies and the inductance values of the inductive loads at the digital outputs, refer to the Technical specifications section.
The section Interconnection overview of the outputs (Page 109) provides an overview of which digital outputs you can interconnect to which high-speed counters. Digital outputs to which no high-speed counter is interconnected can be used as standard outputs. The maximum output delay of each digital output used as standard output is 500 µs.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
105
Wiring 4.3 Terminal and block diagrams
Shielding
Note
When you use digital inputs/outputs with technology functions, i.e. interconnect high-speed counters with the inputs/outputs, you must use shielded cables and the infeed element for shielding.
Reference
For more information on configuring the inputs of the high-speed counters, refer to the S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection (http://support.automation.siemens.com/WW/view/en/59709820) function manual and the STEP 7 online help.
4.3.5
Addresses of the pulse generators in the Pulse Width Modulation (PWM) and Frequency Output modes
Configuring the outputs as pulse generators
If you configure the memory of the outputs of the CPU as pulse generators (for PWM or PTO), the corresponding addresses of the outputs are removed from the memory of the outputs. You cannot use the addresses of the outputs for other purposes in your user program. When your user program writes a value to an output that you are using as a pulse generator, the CPU does not write this value to the physical output.
Assignment of the PWM addresses of the outputs
The section Interconnection overview of the outputs (Page 109) provides an overview of which digital outputs you can interconnect to which PWM channels.
Note The digital inputs and outputs assigned to PWM and PTO cannot be forced.
You assign the digital inputs and outputs to the pulse duration modulation (PWM) and the pulse train output (PTO) during the device configuration. If you assign digital inputs and outputs to these functions, the values of the addresses of the assigned digital inputs and outputs cannot be changed by the function for forcing in the watch table. Instead, you can force the output bit TM_CTRL_DQ to 0 and switch the output on or off with the bit SET_DQA (relevant for the PWM and Frequency Output modes).
For more information on forcing inputs and outputs, refer to the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
106
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
4.3.6
Addresses of pulse generators in the PTO mode
You connect the encoder signals, the digital input and output signals and the encoder supply to the 40-pin front connector of the digital on-board I/O. For information on wiring the front connectors, establishing the cable shields, etc., refer to the S7-1500, ET 200MP system manual. (http://support.automation.siemens.com/WW/view/en/59191792)
Encoder signals
In addition to supporting its outputs, each PTO channel also supports the three following optional inputs: Reference Switch (RS) Measuring Input (MI) Drive Ready (DR)
Input addresses of the pulse generators (PTO)
You make the settings of the digital input addresses used by the pulse generators (PTO) in the hardware configuration of STEP 7 (TIA Portal). When you configure the compact CPU, you can individually activate and configure the four PTO channels.
Assignment of PTO addresses of inputs
A direct connection from the PTO to an input of the on-board I/O is established through the interconnection. You can find an overview of the options for interconnecting the inputs (DI0 to DI15) to the available PTO channels (PTO1 to PTO4) in the section Interconnection overview of the inputs (Page 108).
Assignment of the PTO addresses of the outputs
The section Interconnection overview of the outputs (Page 109) provides an overview of which digital outputs you can interconnect to which PTO channels.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
107
Wiring 4.3 Terminal and block diagrams
4.3.7
Interconnection overview of the inputs
Combined interconnection of the technology channels
The following table provides you with an overview of the possible interconnections of the inputs of front connector X11 to allow you to correctly distribute the available inputs over the possible technology channels HSC and PTO. This overview is a combination of interconnection options of technology channels for HSC and PTO.
Fr Ter Cha on mina nnel t l co nn ec tor
PTO1
PTO
PTO2
PTO3
PTO4
X1 1 1 2
DI0 [DR]
[DR]
DI1 [DR] [MI] [DR]
[DR] [DR]
[DR] [DR]
3 DI2 [DR] [RS] [DR]
[DR]
[DR]
4 DI3 [DR]
[DR]
[DR]
[DR]
5 DI4 [DR]
[DR] [MI] [DR]
[DR]
6 DI5 [DR]
[DR] [RS] [DR]
[DR]
7 DI6 [DR]
[DR]
[DR] [MI] [DR]
8 DI7 [DR]
[DR]
[DR] [RS] [DR]
11 DI8 [DR]
[DR]
[DR]
[DR]
12 DI9 [DR]
[DR]
[DR]
[DR]
13 DI10 [DR]
[DR]
[DR]
[DR]
14 DI11 [DR]
[DR]
[DR]
[DR]
15 DI12 [DR]
[DR]
[DR]
[DR]
16 DI13 [DR]
[DR]
[DR]
[DR]
17 DI14 [DR]
[DR]
[DR]
[DR] [MI]
18 DI15 [DR]
[DR]
[DR]
[DR] [RS]
HSC1
A [B] [DI] [N] [DI]
[DI] [DI] [DI] [DI] [DI]
HSC2
High-speed counters (HSC)
HSC3
HSC4
HSC5
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
A
[DI]
[B] [DI]
[DI]
[N] [DI]
[DI]
[DI] A
[DI] [B] [DI]
A
[DI]
[B] [DI]
[DI]
[N] [DI]
[DI]
[DI] A
[DI] [B] [DI]
[DI] [N] [DI]
[DI]
[DI]
[DI]
[DI]
HSC6
[DI] [DI] [DI] [DI] [DI] [DI] A [B] [DI]
[...] = Use is optional
[DR] = Drive ready; [MI] = Measuring input; [RS] = Reference switch
[DI] stands for [HSC DI0/HSC DI1] = DI: Is used for the HSC functions: Gate, Sync and Capture
The assignment to [B] or [N] takes precedence over the assignment to HSC DI0 or HSC DI1. This means that input addresses that are assigned to count signal [B] or [N] based on the selected signal type cannot be used for other signals such as HSC DI0 or HSC DI1.
108
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Wiring 4.3 Terminal and block diagrams
4.3.8
Interconnection overview of the outputs
Combined interconnection of the technology channels
The following table provides you with an overview of the possible interconnections of the outputs of front connector X11 to allow you to correctly distribute the available outputs over the possible technology channels HSC, PWM and PTO. This overview is a combination of interconnection options of technology channels for HSC, PWM and PTO.
Front connector
Ter mina
l
Hardware output
Cha Output module nnel
X11 1 DQ0
2 DQ1
3 DQ2
4 DQ3
5 DQ4
6 DQ5
7 DQ6
8 DQ7
11 DQ8 12 DQ9 13 DQ1
0 14 DQ1
1 15 DQ1
2 16 DQ1
3 17 DQ1
4 18 DQ1
5
High-speed Standard
High-speed Standard
High-speed Standard
High-speed Standard
High-speed Standard
High-speed Standard
High-speed Standard
High-speed Standard
Standard
Standard DQ Configurable as standard DQ for
channel
DQ0
DQ1
DQ2
DQ3
DQ4
DQ5
DQ6
DQ7 DQ8 DQ9 DQ10 DQ11 DQ12 DQ13 DQ14 DQ15
PWM Configurable as PWM output for
channel
PWM 1 PWM 1
PWM 2 PWM 2
PWM 3 PWM 3
PWM 4 PWM 4
PWM 1 PWM 2
Configurable as PTO output A for
channel 1) PTO1
PTO2
PTO3
PTO4
PTO Configurable as PTO output B for
channel 2)
PTO1)
PTO2
PTO3
PTO4 PTO1*
Configurable as "Drive enable output" for channel
[PTO 2/3/4]
[PTO 1/2/3/4]
[PTO 1/3/4]
[PTO 1/2/3/4]
[PTO 1/2/4]
[PTO 1/2/3/4]
[PTO 1/2/3]
[PTO 1/2/3/4] [PTO 1/2/3/4] [PTO 1/2/3/4] [PTO 1/2/3/4]
HSC Can be used as
HSC-DQ1 for channel
[HSC1]
[HSC2] [HSC3] [HSC4] [HSC6] [HSC5]
[HSC1
PTO2*
[PTO 1/2/3/4]
[HSC2
PWM 3
[PTO 1/2/3/4]
[HSC3
PTO3*
[PTO 1/2/3/4]
[HSC4
PWM 4
[PTO 1/2/3/4]
[HSC6
PTO4*
[PTO 1/2/3/4]
[HSC5
* Only supports for PTO direction signal (signal type "pulse A and direction B") 1) "PTOx - Output A" stands for the signal types Pulse output A or Pulse 2) "PTOx - Output B" stands for the signal types Pulse output B or Direction
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
109
Wiring 4.3 Terminal and block diagrams
Technical characteristics of the outputs
The following table shows an overview of the technical characteristics of the individual outputs.
Frequency range (period duration)
Accuracy of the pulse duration
10 to <= 100 kHz (100 to > = 10 µs)
100 Hz to <10 kHz (10 ms to > 100 µs)
10 to < 100 Hz (0.1 s to > 10 ms)
1 to <10 Hz (1 to > 0.1 s)
0.1 to < 1 Hz (10 to >1 s)
Accuracy of
---
the frequency
Minimum pulse duration
DQ0 to DQ7
High-speed output (0.1 A) activated
High-Speed output (0.1 A) deactivated
max. 100 kHz
max. 10 kHz
max. 0.1 A
max. 0.5 A
Sourcing/sinking output Switching to P potential1)
±100 ppm ±2 µs
---
DQ8 to DQ15 Standard output
max. 100 Hz max. 0.5 A Switching to P potential1)
---
±150 ppm ±2 µs ±600 ppm ±2 µs
± 100 ppm2)
±100 ppm ±10 µs with load > 0.1 A
±100 ppm ±20 µs with load 2mA
±150 ppm ±10 µs with load > 0.1 A
±150 ppm ±20 µs with load 2mA
±600 ppm ±10 µs with load > 0.1 A
±600 ppm ± 20 µs with load 2mA ± 100 ppm2)
±100 ppm ±100 µs with load > 0.1 A
±100 ppm ±200 µs with load 2mA
±150 ppm ±100 µs with load > 0.1 A
±150 ppm ±200 µs with load 2mA
±600 ppm ±100 µs with load > 0.1 A
±600 ppm ±200 µs with load 2mA
± 100 ppm2)3)
2 µs
20 µs with load > 0.1 A 400 µs with load > 0.1 A
40 µs with load 2 mA 500 µs with load 2 mA
20 µs with load < 240 1)
400 µs with load < 240 1)
1) With sourcing outputs, it must be taken into consideration that falling edges can be delayed as compared to rising edges depending on the load. The on-load factor can therefore be falsified. Consider using a high-speed output if the load at the output is greater than 240 .
2) The frequency has a basic accuracy of ±100 ppm with a resolution of 0.3638 mHz.
3) Standard outputs are affected by jitter during generation of frequencies. The set period duration is not adhered to in every period, but it is adhered to on average over several periods.
110
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameters/address space
5
5.1
Address space of the analog on-board I/O
Address space of the analog input and analog output channels
The addresses are divided into five analog input channels and two analog output channels. STEP 7 (TIA Portal) assigns the addresses automatically. You can change the addresses in the hardware configuration of STEP 7 (TIA Portal), i.e. freely assign the start address. The addresses of the channels are based on the start address.
"IB x", for example, stands for the start address input byte x. "QB x" stands, for example, for the start address output byte x.
Figure 5-1 Address space 7-channel analog on-board I/O with value status
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
111
Parameters/address space 5.1 Address space of the analog on-board I/O
Value status (quality information, QI)
As of firmware version 2.0, the analog and digital on-board I/O support the value status as diagnostics option. You activate the use of the value status in the hardware configuration of STEP 7 (TIA Portal). Value status is deactivated by default. When you activate the value status, the input area of the analog on-board I/O contains two additional bytes, which provide the QI bits to the five analog input channels and two analog output channels. You access the QI bits through the user program.
Value status of input channels Value status = 1 ("Good") indicates that the value of the assigned input at the terminal is valid. Value status = 0 ("Bad") indicates that the read value is not valid. Possible cause for value status = 0: A channel has been deactivated A measured value was not updated after a parameter change A measured value is outside the low/high measuring range (overflow/underflow) Wire break has occurred (only for the "Voltage" measurement type in the measuring
range "1 to 5 V" and for the "Current" measurement type in the measuring range "4 to 20 mA")
Value status of output channels The value status = 1 ("Good") indicates that the process value specified by the user program is correctly output at the terminal. The value status = 0 ("Bad") indicates that the process value output at the hardware output is incorrect. Possible cause for value status = 0: A channel has been deactivated Outputs are inactive (for example, CPU in STOP) An output value is outside the high/low measuring range (overflow/underflow) Wire break has occurred (only for the "Current" output type) Short-circuit has occurred (only for the "Voltage" output type)
112
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameters/address space 5.2 Address space of the digital on-board I/O
5.2
Address space of the digital on-board I/O
Address space of the digital input and digital output channels
The addresses are divided into 16 digital input channels and 16 digital output channels. STEP 7 (TIA Portal) assigns the addresses automatically. You can change the addresses in the hardware configuration of STEP 7 (TIA Portal), i.e. freely assign the start address. The addresses of the channels are based on the start address.
The letters "a" to "d" are lasered on the on-board I/O. "IB a", for example, stands for start address input byte a. "QB x", for example, stands for start address output byte x.
Figure 5-2 Address space 32-channel digital on-board I/O (16 digital inputs/16 digital outputs) with value status
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
113
Parameters/address space 5.2 Address space of the digital on-board I/O
Value status (quality information, QI)
As of firmware version 2.0, the analog and digital on-board I/O support the value status as diagnostics option. You activate the use of the value status in the hardware configuration of STEP 7 (TIA Portal). Value status is deactivated by default. You can activate/deactivate the value status of the digital on-board I/O for X11 and X12 independently of each other. When you activate the value status, the input area of the digital on-board I/O (X11/X12) contains four additional bytes, which provide the QI bits to the 16 digital input channels and 16 digital output channels. You access the QI bits through the user program.
Value status of input channels Value status = 1 ("Good") indicates that the value of the assigned input at the terminal is valid. Value status = 0 ("Bad") indicates that no or too little supply voltage L+ is applied at the terminal and that the read value is therefore not valid.
Value status of output channels The value status = 1 ("Good") indicates that the process value specified by the user program is correctly output at the terminal. The value status = 0 ("Bad") indicates that the process value output at the hardware output is incorrect or the channel is used for technology functions. Possible cause for value status = 0: The supply voltage L+ is missing at the terminals or is not sufficient Outputs are inactive (for example, CPU in STOP) Technology functions (HSC, PWM or PTO) use the channel
Note Behavior of the value status at the output channels for technology functions The output channels return the value status 0 ("Bad") when a technology channel (HSC, PWM or PTO) is used. It does not matter in this context whether the output value is incorrect or not.
114
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameters/address space 5.3 Address space of the high-speed counters
5.3
Address space of the high-speed counters
Address space of the high-speed counters
Table 5- 1 Size of the input and output addresses of the high-speed counters
Size per high-speed counter (6x)
Inputs 16 bytes
Outputs 12 bytes
You can find a description of the control interface in the section Assignment of the control interface of the high-speed counters (Page 48). You can find a description of the feedback interface in the section Assignment of the feedback interface of the high-speed counters (Page 51).
Table 5- 2 Size of the input and output addresses in operating mode "Position detection for Motion Control"
Size per high-speed counter (6x)
Inputs 16 bytes
Outputs 4 bytes
5.4
Address space of the pulse generators
Address space of the pulse generators in the PWM, frequency output and PTO modes
Operating mode
PWM (4x) Frequency output PTO Deactivated
Feedback interface (inputs) 4 bytes 4 bytes 18 bytes 4 bytes *
Control interface (outputs) 12 bytes 12 bytes 10 bytes 12 bytes *
* In "Deactivated" mode, the control interface is not evaluated and the feedback interface is set to 0 values
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
115
Parameters/address space 5.5 Measurement types and measuring ranges of the analog on-board I/O
5.5
Measurement types and measuring ranges of the analog on-
board I/O
Introduction
The analog on-board I/O is set to voltage measurement type and measuring range ±10 V by default for the inputs on channels 0 to 3. By default, channel 4 is set to resistance measuring type and measuring range 600 . If you want to use another measurement type or measuring range, change the parameter settings of the analog on-board I/O with STEP 7 (TIA Portal).
Disable unused inputs to prevent disturbances that cause incorrect behavior (e.g. triggering of a hardware interrupt).
Measurement types and measuring ranges
The following table shows the measurement types, the measuring range and the possible channels.
Table 5- 3 Measurement types and measuring range
Measurement type Voltage
Current 4WMT (4-wire measuring transducer) Resistance
Thermal resistor RTD Deactivated
Measuring range 0 to 10 V 1 to 5 V ±5 V ±10 V 0 to 20 mA 4 to 20 mA ±20 mA 150 300 600 Pt 100 Standard/Climate Ni 100 Standard/Climate -
Channel 0 to 3
0 to 3 4 4 -
The tables of the input ranges, overflow, underrange, etc. can be found in the appendix .
116
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameters/address space 5.6 Output type and output ranges of the analog on-board I/O
5.6
Output type and output ranges of the analog on-board I/O
Introduction
The analog on-board I/O is set to voltage output type and output range ±10 V as default for the outputs. If you want to use another output range or output type, you need to change the parameter settings of the analog on-board I/O with STEP 7 (TIA Portal).
Output types and output ranges
The following table shows the output type and the corresponding output ranges.
Table 5- 4 Output type and output ranges Output type Voltage
Current
Deactivated
Output range 1 to 5 V 0 to 10 V ±10 V 0 to 20 mA 4 to 20 mA ±20 mA -
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
117
Parameters/address space 5.7 Parameters of the analog on-board I/O
5.7
Parameters of the analog on-board I/O
Parameters of the analog on-board I/O
You specify the properties of the analog on-board I/O during parameter assignment with STEP 7 (TIA Portal). The tables below list the parameters that can be set for inputs and outputs, respectively.
When parameters are assigned in the user program, they are transferred to the analog onboard I/O via data records with the WRREC instruction, see section Parameter assignment and structure of the parameter data records of the analog on-board I/O (Page 162).
Configurable parameters and default settings for inputs
Table 5- 5 Configurable "Diagnostics" parameters
Diagnostics · Overflow
Parameters 1)
· Underflow
· Wire break 2)
· Current limit for wire break diagnostics
Value range
Yes/No Yes/No Yes/No 1.185 mA or 3.6 mA
Default
No No No 1.185 mA
Reconfiguration in RUN
Yes Yes Yes Yes
1) All parameters can be set for on a channel-specific basis
2) Only for the "Voltage" measurement type in the measuring range 1 to 5 V and for the "Current" measurement type in the measuring range 4 to 20 mA
Table 5- 6 Configurable "Measuring" parameters
Measuring
Parameters 1)
· Measurement type
· Measuring range
Value range
See section Measurement types and measuring ranges of the analog on-board I/O (Page 116)
· Temperature coefficient
Pt: 0.003851 Pt: 0.003916 Pt: 0.003902 Pt: 0.003920 Ni: 0.006180 Ni: 0.006720
Default
Reconfiguration in RUN
Voltage
Yes
(channels 0 to 3)
Resistance (channel 4)
±10 V
Yes
(channels 0 to 3)
600 (channel 4)
0.003851
Yes
118
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameters/address space 5.7 Parameters of the analog on-board I/O
Parameters 1) · Temperature unit
· Interference frequency suppression
· Smoothing
Value range · Kelvin (K) 2) · Fahrenheit (°F) · Celsius (°C)
400 Hz 60 Hz 50 Hz 10 Hz None/weak/medium/strong
Default °C
50 Hz
None
Reconfiguration in RUN Yes
Yes 3)
Yes
1) All parameters can be set for on a channel-specific basis
2) Kelvin (K) is only possible for the "Standard range" measuring range and not for the "Climatic range" measuring range
3) The interference frequency suppression must have the same value for all active input channels. This value can only be changed by reassigning parameters in RUN with single channel parameter assignment (data records 0 to 4) if all other input channels are disabled.
Table 5- 7 Configurable "Hardware interrupt" parameters
Parameters 1) Hardware interrupts · Hardware interrupt low limit 1 · Hardware interrupt high limit 1 · Hardware interrupt low limit 2 · Hardware interrupt high limit 2
Value range
Yes/No Yes/No Yes/No Yes/No
Default
No No No No
Reconfiguration in RUN
Yes Yes Yes Yes
1) All parameters can be set for on a channel-specific basis
You can find an overview of the limits for the hardware interrupts in the section Structure of a data record for input channels of the analog on-board I/O (Page 162).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
119
Parameters/address space 5.7 Parameters of the analog on-board I/O
Configurable parameters and default settings for outputs
Table 5- 8 Configurable "Diagnostics" parameters
Diagnostics
Parameters 1)
· Wire break 2)
· Short-circuit to ground 3)
· Overflow
· Underflow
Value range
Yes/No Yes/No Yes/No Yes/No
1) All parameters can be set for on a channel-specific basis 2) Only for the "Current" output type 3) Only for the "Voltage" output type
Default
No No No No
Reconfiguration in RUN
Yes Yes Yes Yes
Table 5- 9 Configurable output parameters
Parameters 1) Output parameters · Output type · Output range · Reaction to CPU STOP
Value range
Default
See section Output type and output ranges of the analog on-board I/O (Page 117)
· Turn off
· Keep last value
· Output substitute value
Voltage ±10 V Turn off
· Substitute value
Must be within the permitted 0 voltage/current output range. See "Valid substitute value for the output range" table in the section Structure of a data record for output channels of the analog on-board I/O (Page 167)
1) All parameters can be set for on a channel-specific basis
Reconfiguration in RUN Yes Yes Yes
Yes
Short-circuit detection
The diagnostics for short circuit to ground can be configured for the voltage output type. Short-circuit detection is not possible for low output values. The output voltages must therefore be under -0.1 V or over +0.1 V.
Wire break detection
The diagnostics for wire break can be configured for the current output type. Wire break detection is not possible for low output values; the output currents must therefore be below 0.2 mA or above +0.2 mA.
120
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameters/address space 5.8 Parameters of the digital on-board I/O
5.8
Parameters of the digital on-board I/O
Parameters of the digital on-board I/O in standard mode
You specify the properties of the digital on-board I/O during parameter assignment with STEP 7 (TIA Portal). The tables below list the parameters that can be set for inputs and outputs, respectively.
When parameters are assigned in the user program, they are transferred to the digital onboard I/O via data records with the WRREC instruction, see section Parameter assignment and structure of the parameter data records of the digital on-board I/O (Page 170).
The use of a digital input by a technology channel
When a digital input is in use by a technology channel (HSC, PTO or PWM) the corresponding digital input channel remains fully usable without any restriction.
Use of a digital output by a technology channel
When a digital output is in use by a technology channel (HSC, PTO or PWM), the following restrictions apply to the use of the corresponding digital output channel:
Output values for the digital output channel are not effective. The output values are specified by the technology channel.
The CPU STOP behavior configured for the digital output channel is not effective. The reaction of the output to CPU Stop is specified by the technology channel.
With activated value status (Quality Information) for the DI16/DQ16 submodule, the QI bit for the digital output channel shows the value 0 (= Status "Bad").
The current state of the digital output is not returned to the process image output. In the PTO operating mode, you can only observe the switching operations of the assigned digital outputs directly at the output. In the PWM operating mode and with high-speed counters (HSC), you can observe the current state additionally via the feedback interface. Note, however, that high frequencies may no longer be observed under certain circumstances due to an excessively low sampling rate.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
121
Parameters/address space 5.8 Parameters of the digital on-board I/O
Configurable parameters and default settings for inputs
Table 5- 10 Configurable parameters of inputs
Parameters 1) Diagnostics · Missing
supply voltage L+ Input delay
Hardware interrupt · Rising edge · Falling edge
Value range
Yes/No
None, 0.05 ms, 0.1 ms, 0.4 ms, 1.6 ms, 3.2 ms, 12.8 ms, 20 ms
Yes/No Yes/No
1) All parameters can be set for on a channel-specific basis
Default No 3.2 ms
No No
Configurable parameters and default settings for outputs
Table 5- 11 Configurable parameters of outputs
Parameters 1) Diagnostics
· Missing supply voltage L+
Reaction to CPU STOP
When the digital output is controlled by a technology channel (HSC, PTO or PWM), this parameter is not effective. In this case, the technology channel specifies the reaction of the digital output to CPU STOP.
Value range
Yes/No
· Turn off · Keep last value · Output substitute value 1
1) All parameters can be set for on a channel-specific basis
Default No Turn off
Reconfiguration in RUN Yes Yes
Yes Yes
Reconfiguration in RUN Yes Yes
122
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Interrupts/diagnostics alarms
6.1
Status and error displays
6.1.1
Status and error displays of the CPU part
LED display
The figure below shows the LED displays of the CPU part.
6
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) STOP ACTIVE-LED (yellow LED)
Figure 6-1 LED display of the CPU 1511C-1 PN (without front panel)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
123
Interrupts/diagnostics alarms 6.1 Status and error displays
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU has three LEDs for displaying the current operating mode and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 6- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED off
LED flashes red
LED lit green
LED off
LED lit green
LED flashes red
LED lit green
LED off
LED lit green
LED off
LED lit green
LED flashes red
MAINT LED LED off LED off LED off LED off
LED lit yellow
LED flashes yellow
LED off
Meaning Missing or insufficient supply voltage on the CPU.
An error has occurred.
CPU is in RUN mode.
A diagnostics event is pending.
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration An error has occurred.
LED lit yellow LED lit yellow LED lit yellow LED lit yellow
LED flashes yellow
LED flashes yellow/green
LED flashes red LED off LED off
LED flashes red LED off
LED off
LED off LED flashes yellow
LED off LED flashes yellow
LED off
LED off
Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective CPU is performing internal activities during STOP, e.g. ramp-up after STOP. Download of the user program from the SIMATIC memory card CPU carries out a program with active breakpoint. Startup (transition from RUN STOP)
124
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Interrupts/diagnostics alarms 6.1 Status and error displays
RUN/STOP LED
LED flashes yellow/green
ERROR LED LED flashes red
MAINT LED LED flashes yellow
Meaning Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of the CPU ports.
Table 6- 2 Meaning of the LED
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
Meaning of the STOP ACTIVE LED
The following table shows the meaning of the STOP ACTIVE LED for the CPU 1511C-1 PN.
Table 6- 3 Meaning of the LED
STOP ACTIVE LED LED lit yellow
LED off
The CPU is in STOP mode.
Meaning
· As long as the STOP ACTIVE LED is lit up, switching the CPU to RUN mode is only possible using the RUN button.
· The CPU can then no longer be set to RUN mode via the display operation or via online functions. The state of the buttons is retained at power-off. If the CPU does not start up automatically after a power-on, you have to keep the STOP button pressed during startup until the STOP ACTIVE LED is activated.
· If an automatic start-up is to be reliably prevented after a power-up, the STOP button has to be kept pressed during the start-up of the CPU until the STOP ACTIVE LED is activated.
· The CPU is set to "STOP" mode using the display or programming device and not with the STOP button on the device.
· The CPU is in RUN mode.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
125
Interrupts/diagnostics alarms 6.1 Status and error displays
6.1.2
Status and error displays of the analog on-board I/O
LED displays
The figure below shows the LED displays (status and error displays) of the analog on-board I/O.
Figure 6-2 LED displays
126
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Interrupts/diagnostics alarms 6.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Corrective measures for diagnostic alarms can be found in the section Interrupts and diagnostics of the analog on-board I/O (Page 131).
Table 6- 4 RUN/ERROR status and error displays
LEDs RUN ERROR
Off
Off
Flashes
Off
On
Off
On
Flashes
Meaning
No voltage or voltage too low.
Analog on-board I/O starts up and flashes until valid parameter assignment. Parameters have been set for the analog onboard I/O. Indicates module errors (at least one error is present on one channel, e.g. wire break).
Remedy
· Turn on the CPU and/or the system power supply modules.
---
Evaluate the diagnostics and eliminate the error (e.g. wire break).
CHx LED
Table 6- 5 CHx status display
CHx LED Off On On
Meaning Channel disabled.
Remedy ---
Channel parameters set and OK.
---
Channel parameters set, channel error present. Check the wiring.
Diagnostics alarm: e.g. wire break
Disable diagnostics.
Note
Maintenance LED
During ramp-up, the firmware of the CPU checks the consistency of the calibration data of the analog on-board I/O stored by the SIEMENS production. The yellow MAINT LED lights up if the firmware detects an inconsistency (e.g. an invalid value) or missing calibration data. The MAINT LED is located next to the red ERROR LED on the analog on-board I/O.
Note that the MAINT LED on the analog on-board I/O is only intended for troubleshooting by SIEMENS. In normal conditions, the MAINT LED should not light up. However, if this is the case, please contact SIEMENS "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en/).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
127
Interrupts/diagnostics alarms 6.1 Status and error displays
6.1.3
Status and error displays of the digital on-board I/O
LED displays
The figure below shows the LED displays (status and error displays) of the digital on-board I/O. Remedial measures for diagnostics alarms can be found in section Interrupts and diagnostics (Page 131).
Figure 6-3 LED displays
128
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Interrupts/diagnostics alarms 6.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays.
RUN/ERROR LED
Table 6- 6 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Flashes
Off
On
Off
On
Flashes
Meaning No voltage or voltage too low.
Digital on-board I/O starts up. Digital on-board I/O is ready for operation. A diagnostics interrupt is pending. Supply voltage missing.
Remedy
· Turn on the CPU. · Check whether too many modules are in-
serted.
---
Check supply voltage L+.
PWRx LED
Table 6- 7 PWRx status display
PWRx LED Off On
Meaning Supply voltage L+ to module too low or missing.
Supply voltage L+ is present and OK.
Remedy Check supply voltage L+.
---
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
129
Interrupts/diagnostics alarms 6.1 Status and error displays
CHx LED
Table 6- 8 CHx status display
CHx LED Off On
Meaning 0 = Status of the input/output signal.
1 = Status of the input/output signal.
Remedy ---
---
Note
For the status display, the digital inputs only take into account the filter time of the corresponding DI and not the filter time of the A/B/N signals of the fast counters (HSC).
For example, a static signal may be displayed when the DI has a configured input delay of 3.2 ms, even though a 100 kHz counter on these inputs still detects edge transitions.
130
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
6.2
6.2.1
Interrupts and diagnostics
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
Interrupts and diagnostics of the CPU part
For information on the topic of "Interrupts", refer to the STEP 7 (TIA Portal) online help.
For information on "Diagnostics" and "System alarms", refer to the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
6.2.2
Interrupts and diagnostics of the analog on-board I/O
Diagnostics interrupt
The analog on-board I/O generates a diagnostics interrupt at the following events:
Table 6- 9 Diagnostics interrupt for inputs and outputs
Event
Overflow Underflow Wire break Short-circuit to ground
Inputs x x x 1) ---
Diagnostics interrupt
1) Possible for the voltage measuring range (1 to 5 V), current measuring range (4 to 20 mA) 2) Possible for current output type 3) Possible for voltage output type
Outputs x x x 2) x 3)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
131
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
Hardware interrupt for inputs
The compact CPU can generate a hardware interrupt for the following events: Below low limit 1 Above high limit 1 Below low limit 2 Above high limit 2 You can find detailed information on the event in the hardware interrupt organization block with the "RALARM" (read additional interrupt information) instruction and in the STEP 7 (TIA Portal) online help. The start information of the organization block includes information on which channel of the analog on-board I/O triggered the hardware interrupt. The figure below shows the assignment to the bits of double word 8 in local data.
Figure 6-4 Start information of the organization block
Behavior when limits 1 and 2 are reached at the same time
If the two high limits 1 and 2 are reached at the same time, the analog on-board I/O always signals the hardware interrupt for high limit 1 first. The configured value for high limit 2 is irrelevant. After processing the hardware interrupt for high limit 1, the compact CPU triggers the hardware interrupt for high limit 2.
The analog on-board I/O behaves accordingly when the low limits are reached simultaneously. If the two low limits 1 and 2 are reached at the same time, the analog onboard I/O always signals the hardware interrupt for low limit 1 first. After processing the hardware interrupt for low limit 1, the analog on-board I/O triggers the hardware interrupt for low limit 2.
132
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
Structure of the additional interrupt information
Table 6- 10 Structure of USI = W#16#0001
Data block name
Contents
USI (User Structure Identifier)
W#16#0001
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#n
It is followed by the event that triggered the hardware interrupt.
Event
B#16#03
B#16#04
B#16#05
B#16#06
Comment Additional interrupt information of the analog on-board I/O
Number of the event-triggering channel (n = number of analog on-board I/O channels -1)
Below low limit 1 Above high limit 1 Below low limit 2 Above high limit 2
Bytes 2
1
1
Diagnostics alarms
A diagnostics alarm is output for each diagnostics event and the ERROR LED flashes on the analog on-board I/O. The diagnostics alarms can, for example, be read out in the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
Table 6- 11 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Wire break
Error code 6H
Overflow
7H
Underflow
8H
Short-circuit to ground 1H
Meaning
Remedy
Resistance of encoder circuit too high
Use a different encoder type or modify the wiring, for example, using cables with larger cross-section
Interruption of the cable between the Connect the cable analog on-board I/O and sensor
Channel not connected (open)
· Disable diagnostics
· Connect the channel
Measuring range exceeded
The output value set by the user program exceeds the valid rated range/overrange
Value below measuring range
The output value set by the user program is below the valid rated range/underrange
Overload at output
Short-circuit of output QV to MANA
Check the measuring range Correct the output value
Check the measuring range Correct the output value
Eliminate overload Eliminate the short-circuit
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
133
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
6.2.3
Interrupts and diagnostics of the digital on-board I/O
Diagnostics interrupt
A diagnostics alarm is output for each diagnostics event and the ERROR LED flashes on the digital on-board I/O. You can read out the diagnostics alarms, for example, in the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
Table 6- 12 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Load voltage missing
Hardware interrupt lost
Error code 11H 16H
Meaning
No supply voltage L+
The digital on-board I/O cannot trigger an interrupt because the previous interrupt was not acknowledged; possibly a configuration error
Corrective measures Feed supply voltage L+
· Change the interrupt processing in the CPU and reconfigure the digital onboard I/O.
Diagnostics interrupt when using high-speed counters
Table 6- 13 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm
Illegal A/B signal ratio
Error code 500H
Meaning
Corrective measures
· Time sequence of the A and B signals · Correct the process wiring
of the incremental encoder do not meet certain requirements
· Possible causes:
· Check the encoder/sensor · Check the parameter assignment
Signal frequency too high Encoder is defective Process wiring is incorrect
134
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
Hardware interrupt
The compact CPU can generate a hardware interrupt for the following events: Rising edge Falling edge You will find detailed information on the event in the hardware interrupt organization block with the "RALRM" (read additional interrupt information) instruction and in the STEP 7 online help. The start information of the organization block includes information on which channel triggered the hardware interrupt. The figure below shows the assignment to the bits of double word 8 in local data.
Figure 6-5 Start information of the organization block
Structure of the additional interrupt information
Table 6- 14 Structure of USI = W#16#0001
Data block name
Contents
USI
W#16#0001
(User Structure Identifier)
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#0F
The error event that triggered the hardware interrupt follows.
Event
B#16#01
B#16#02
Comment
Bytes
Additional interrupt information of the hardware 2 interrupts of the digital on-board I/O
Number of the event-triggering channel (chan- 1 nel 0 to channel 15)
Rising edge
1
Falling edge
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
135
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
Hardware interrupts when using the high-speed counters
Table 6- 15 Hardware interrupts and their meaning
Hardware interrupt Opening of the internal gate (gate start) Closing of the internal gate (gate stop) Overflow (high counting limit violated)
Event type number 1
2
3
Underflow (low counting limit violated)
4
Comparison event for DQ0 occurred
5
Comparison event for DQ1 occurred
6
Zero crossing
7
New Capture value present1)
8
Synchronization of the counter by an exter- 9 nal signal
Direction reversal2)
10
Meaning
When the internal gate is opened, the technology function triggers a hardware interrupt in the CPU.
When the internal gate is closed, the technology function triggers a hardware interrupt in the CPU.
When the count value exceeds the high counting limit, the technology function triggers a hardware interrupt in the CPU.
When the count value falls below the low counting limit, the technology function triggers a hardware interrupt in the CPU.
When a comparison event for DQ0 occurs due to the selected comparison condition, the technology function triggers a hardware interrupt in the CPU. When the change of the count value for an incremental or pulse encoder was not caused by a count pulse, the technology function does not trigger a hardware interrupt.
When a comparison event for DQ1 occurs due to the selected comparison condition, the technology function triggers a hardware interrupt in the CPU.
When the change of the count value for an incremental or pulse encoder was not caused by a count pulse, the technology function does not trigger a hardware interrupt.
At a zero crossing of the counter or position value, the technology function triggers a hardware interrupt in the CPU.
When the current counter or position value is saved as a Capture value, the technology function triggers a hardware interrupt in the CPU.
At the synchronization of the counter by an N signal or edge at DI, the technology function triggers a hardware interrupt in the CPU.
When the count value or position value changes direction, the technology function triggers a hardware interrupt in the CPU.
1) Can only be set in counting mode
2) Feedback bit STS_DIR is preset to "0". When the first count value or position value change occurs in the reverse direction directly after switching on the digital on-board I/O, a hardware interrupt is not triggered.
136
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Technical specifications
Technical specifications of the CPU 1511C-1 PN
Article number General information
Product type designation HW functional status Firmware version Engineering with · STEP 7 TIA Portal configurable/integrated
as of version
Configuration control via dataset
Display Screen diagonal [cm]
Control elements Number of keys Mode buttons
Supply voltage Type of supply voltage permissible range, lower limit (DC)
permissible range, upper limit (DC) Reverse polarity protection Mains buffering · Mains/voltage failure stored energy time
· Repeat rate, min.
Input current Current consumption (rated value) Current consumption, max. Inrush current, max. I²t
Digital inputs · from load voltage L+ (without load), max.
Digital outputs · from load voltage L+, max.
6ES7511-1CK01-0AB0
CPU 1511C-1 PN FS01 V2.5
V15
Yes
3.45 cm
8 2
24 V DC 19.2 V; 20.4 V DC, for supplying the digital inputs/outputs 28.8 V Yes
5 ms; Refers to the power supply on the CPU section 1/s
0.8 A 1 A 1.9 A; Rated value 0.34 A²·s
20 mA; per group
30 mA; Per group, without load
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
7
137
Technical specifications
Article number Output voltage
Rated value (DC) Encoder supply
Number of outputs 24 V encoder supply
· 24 V
· Short-circuit protection
· Output current, max. Power
Infeed power to the backplane bus Power consumption from the backplane bus (balanced) Power loss Power loss, typ. Memory Number of slots for SIMATIC memory card SIMATIC memory card required Work memory · integrated (for program)
· integrated (for data) Load memory
· Plug-in (SIMATIC Memory Card), max. Backup
· maintenance-free CPU processing times
for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range
· Size, max.
FB · Number range
· Size, max.
6ES7511-1CK01-0AB0
24 V
1; One common 24 V encoder supply
Yes; L+ (-0.8 V) Yes 1 A
10 W 8.5 W
11.8 W
1 Yes
175 kbyte 1 Mbyte
32 Gbyte
Yes
60 ns 72 ns 96 ns 384 ns
2 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999 1 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535 175 kbyte
138
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Technical specifications
Article number FC
· Number range · Size, max. OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of DPV1 alarm OBs · Number of isochronous mode OBs · Number of technology synchronous alarm
OBs · Number of startup OBs · Number of asynchronous error OBs · Number of synchronous error OBs · Number of diagnostic alarm OBs Nesting depth · per priority class Counters, timers and their retentivity S7 counter · Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable
6ES7511-1CK01-0AB0 0 ... 65 535 175 kbyte
175 kbyte 100 20 20 20; With minimum OB 3x cycle of 500 µs 50 3 1 2
100 4 2 1
24
2 048
Yes
Any (only limited by the main memory)
Yes
2 048
Yes
Any (only limited by the main memory)
Yes
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
139
Technical specifications
Article number Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max.
Extended retentive data area (incl. timers, counters, flags), max. Flag · Number, max. · Number of clock memories
Data blocks · Retentivity adjustable · Retentivity preset
Local data · per priority class, max.
Address area Number of IO modules
I/O address area · Inputs · Outputs
per integrated IO subsystem Inputs (volume) Outputs (volume)
per CM/CP Inputs (volume) Outputs (volume)
Subprocess images · Number of subprocess images, max.
Hardware configuration Number of distributed IO systems
Number of DP masters · Via CM
Number of IO Controllers · integrated · Via CM
6ES7511-1CK01-0AB0
128 kbyte; In total; available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 88 KB 1 Mbyte; When using PS 60W 24/48/60V DC HF
16 kbyte 8; 8 clock memory bits, grouped into one clock memory byte
Yes No
64 kbyte; max. 16 KB per block
1 024; max. number of modules / submodules
32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image
8 kbyte 8 kbyte
8 kbyte 8 kbyte
32
32; A distributed I/O system is characterized not only by the integration of distributed I/O via PROFINET or PROFIBUS communication modules, but also by the connection of I/O via AS-i master modules or links (e.g. IE/PB-Link)
4; A maximum of 4 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
1 4; A maximum of 4 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
140
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Technical specifications
Article number Rack
· Modules per rack, max. · Number of lines, max. PtP CM · Number of PtP CMs
Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number Clock synchronization · supported · in AS, master · in AS, slave · on Ethernet via NTP Digital inputs integrated channels (DI) Digital inputs, parameterizable Source/sink input Input characteristic curve in accordance with IEC 61131, type 3 Digital input functions, parameterizable · Gate start/stop · Capture · Synchronization Input voltage · Type of input voltage · Rated value (DC) · for signal "0" · for signal "1" Input current · for signal "1", typ.
6ES7511-1CK01-0AB0
32; CPU + 31 modules 1
the number of connectable PtP CMs is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
Yes Yes Yes Yes
16 Yes P-reading Yes
Yes Yes Yes
DC 24 V -3 to +5V +11 to +30V
2.5 mA
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
141
Technical specifications
Article number Input delay (for rated value of input voltage) for standard inputs
parameterizable
at "0" to "1", min. at "0" to "1", max. at "1" to "0", min. at "1" to "0", max. for interrupt inputs parameterizable for counter/technological functions parameterizable Cable length · shielded, max.
· unshielded, max. Digital outputs
Type of digital output integrated channels (DO) Current-sourcing Short-circuit protection · Response threshold, typ.
Limitation of inductive shutdown voltage to Controlling a digital input Accuracy of pulse duration
minimum pulse duration Digital output functions, parameterizable
· Switching tripped by comparison values · PWM output
Number, max. Cycle duration, parameterizable ON period, min. ON period, max. Resolution of the duty cycle · Frequency output · Pulse train
6ES7511-1CK01-0AB0
Yes; none / 0.05 / 0.1 / 0.4 / 1.6 / 3.2 / 12.8 / 20 ms 4 µs; for parameterization "none" 20 ms 4 µs; for parameterization "none" 20 ms
Yes; Same as for standard inputs
Yes; Same as for standard inputs
1 000 m; 600 m for technological functions; depending on input frequency, encoder and cable quality; max. 50 m at 100 kHz 600 m; For technological functions: No
Transistor 16 Yes; Push-pull output Yes; electronic/thermal 1.6 A with standard output, 0.5 A with high-speed output; see manual for details -0.8 V Yes Up to ±100 ppm ±2 s at high-speed output; see manual for details 2 µs; With High Speed output
Yes; As output signal of a high-speed counter Yes 4 Yes 0 % 100 % 0.0036 %; For S7 analog format, min. 40 ns Yes Yes; also for pulse/direction interface
142
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Technical specifications
Article number Switching capacity of the outputs
· with resistive load, max.
· on lamp load, max.
Load resistance range · lower limit
· upper limit Output voltage
· Type of output voltage · for signal "0", max.
· for signal "1", min. Output current
· for signal "1" rated value
· for signal "1" permissible range, min. · for signal "1" permissible range, max.
· for signal "0" residual current, max. Output delay with resistive load
· "0" to "1", max. · "1" to "0", max. for technological functions
"0" to "1", max.
"1" to "0", max.
Parallel switching of two outputs · for logic links · for uprating · for redundant control of a load
Switching frequency · with resistive load, max.
· with inductive load, max.
· on lamp load, max.
6ES7511-1CK01-0AB0
0.5 A; 0.1 A with high-speed output, i.e. when using a high-speed output; see manual for details 5 W; 1 W with high-speed output, i.e. when using a high-speed output; see manual for details
48 ; 240 ohms with high-speed output, i.e. when using a high-speed output; see manual for details 12 k
DC 1 V; With high-speed output, i.e. when using a high-speed output; see manual for details 23.2 V; L+ (-0.8 V)
0.5 A; 0.1 A with high-speed output, i.e. when using a high-speed output, observe derating; see manual for details 2 mA 0.6 A; 0.12 A with high-speed output, i.e. when using a high-speed output, observe derating; see manual for details 0.5 mA
200 µs 500 µs; Load-dependent
5 µs; Depending on the output used, see additional description in manual 5 µs; Depending on the output used, see additional description in manual
Yes; For technological functions: No No Yes; For technological functions: No
100 kHz; For high-speed output, 100 Hz for standard output 0.5 Hz; Acc. to IEC 60947-5-1, DC-13; observe derating curve 10 Hz
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
143
Technical specifications
Article number Total current of the outputs
· Current per channel, max. · Current per group, max. · Current per power supply, max.
for technological functions Current per channel, max.
Cable length · shielded, max.
· unshielded, max. Analog inputs
Number of analog inputs · For current measurement · For voltage measurement · For resistance/resistance thermometer
measurement permissible input voltage for voltage input (destruction limit), max. permissible input current for current input (destruction limit), max. Cycle time (all channels), min.
Technical unit for temperature measurement adjustable Input ranges (rated values), voltages · 0 to +10 V · Input resistance (0 to 10 V) · 1 V to 5 V · Input resistance (1 V to 5 V) · -10 V to +10 V · Input resistance (-10 V to +10 V) · -5 V to +5 V · Input resistance (-5 V to +5 V)
6ES7511-1CK01-0AB0
0.5 A; see additional description in the manual 8 A; see additional description in the manual 4 A; 2 power supplies for each group, current per power supply max. 4 A, see additional description in manual
0.5 A; see additional description in the manual
1 000 m; 600 m for technological functions; depending on output frequency, load, and cable quality; max. 50 m at 100 kHz 600 m; For technological functions: No
5; 4x for U/I, 1x for R/RTD 4; max. 4; max. 1
28.8 V
40 mA
1 ms; Dependent on the parameterized interference frequency suppression; for details, see conversion procedure in manual Yes; °C/°F/K
Yes; Physical measuring range: ± 10 V 100 k Yes; Physical measuring range: ± 10 V 100 k Yes 100 k Yes; Physical measuring range: ± 10 V 100 k
144
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Technical specifications
Article number Input ranges (rated values), currents
· 0 to 20 mA
6ES7511-1CK01-0AB0 Yes; Physical measuring range: ± 20 mA
· Input resistance (0 to 20 mA) · -20 mA to +20 mA
50 ; Plus approx. 55 ohm for overvoltage protection by PTC
Yes
· Input resistance (-20 mA to +20 mA) · 4 mA to 20 mA
50 ; Plus approx. 55 ohm for overvoltage protection by PTC
Yes; Physical measuring range: ± 20 mA
· Input resistance (4 mA to 20 mA)
Input ranges (rated values), resistance thermometer
· Ni 100
50 ; Plus approx. 55 ohm for overvoltage protection by PTC
Yes; Standard/climate
· Input resistance (Ni 100)
10 M
· Pt 100
Yes; Standard/climate
· Input resistance (Pt 100)
10 M
Input ranges (rated values), resistors · 0 to 150 ohms
Yes; Physical measuring range: 0 ... 600 ohms
· Input resistance (0 to 150 ohms)
10 M
· 0 to 300 ohms
Yes; Physical measuring range: 0 ... 600 ohms
· Input resistance (0 to 300 ohms)
10 M
· 0 to 600 ohms
Yes
· Input resistance (0 to 600 ohms)
10 M
Cable length · shielded, max.
800 m; for U/I, 200 m for R/RTD
Analog outputs integrated channels (AO) Voltage output, short-circuit protection Cycle time (all channels), min.
Output ranges, voltage · 0 to 10 V
2 Yes 1 ms; Dependent on the parameterized interference frequency suppression; for details, see conversion procedure in manual
Yes
· 1 V to 5 V
Yes
· -10 V to +10 V
Yes
Output ranges, current
· 0 to 20 mA
Yes
· -20 mA to +20 mA
Yes
· 4 mA to 20 mA
Yes
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
145
Technical specifications
Article number Load impedance (in rated range of output)
· with voltage outputs, min.
· with voltage outputs, capacitive load, max.
· with current outputs, max.
· with current outputs, inductive load, max. Cable length
· shielded, max. Analog value generation for the inputs Integration and conversion time/resolution per channel
· Resolution with overrange (bit including sign), max.
· Integration time, parameterizable
· Interference voltage suppression for interference frequency f1 in Hz
Smoothing of measured values · parameterizable
· Step: None
· Step: low
· Step: Medium
· Step: High Analog value generation for the outputs Integration and conversion time/resolution per channel
· Resolution with overrange (bit including sign), max.
Settling time · for resistive load
· for capacitive load
· for inductive load
6ES7511-1CK01-0AB0 1 k 100 nF 500 1 mH
200 m
16 bit Yes; 2.5 / 16.67 / 20 / 100 ms, acts on all channels 400 / 60 / 50 / 10
Yes Yes Yes Yes Yes
16 bit
1.5 ms 2.5 ms 2.5 ms
146
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Technical specifications
Article number Encoder Connection of signal encoders
· for voltage measurement
6ES7511-1CK01-0AB0 Yes
· for current measurement as 4-wire trans- Yes ducer
· for resistance measurement with two-wire Yes connection
· for resistance measurement with three-wire Yes connection
· for resistance measurement with four-wire Yes connection
Connectable encoders
· 2-wire sensor
Yes
permissible quiescent current (2-wire sensor), max.
1.5 mA
Encoder signals, incremental encoder (asymmetrical)
· Input voltage
24 V
· Input frequency, max.
100 kHz
· Counting frequency, max.
400 kHz; with quadruple evaluation
· Signal filter, parameterizable
Yes
· Incremental encoder with A/B tracks, 90° Yes phase offset
· Incremental encoder with A/B tracks, 90° Yes phase offset and zero track
· Pulse encoder
Yes
· Pulse encoder with direction
Yes
· Pulse encoder with one impulse signal per Yes count direction
Errors/accuracies
Linearity error (relative to input range), (+/-) 0.1 %
Temperature error (relative to input range), (+/- 0.005 %/K )
Crosstalk between the inputs, max.
-60 dB
Repeat accuracy in steady state at 25 °C (rela- 0.05 % tive to input range), (+/-)
Output ripple (relative to output range, bandwidth 0 to 50 kHz), (+/-)
0.02 %
Linearity error (relative to output range), (+/-) 0.15 %
Temperature error (relative to output range), (+/-)
0.005 %/K
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
147
Technical specifications
Article number
6ES7511-1CK01-0AB0
Crosstalk between the outputs, max.
-80 dB
Repeat accuracy in steady state at 25 °C (rela- 0.05 % tive to output range), (+/-)
Operational error limit in overall temperature range
· Voltage, relative to input range, (+/-)
0.3 %
· Current, relative to input range, (+/-)
0.3 %
· Resistance, relative to input range, (+/-)
0.3 %
· Resistance thermometer, relative to input range, (+/-)
Pt100 Standard: ±2 K, Pt100 Climate: ±1 K, Ni100 Standard: ±1.2 K, Ni100 Climate: ±1 K
· Voltage, relative to output range, (+/-)
0.3 %
· Current, relative to output range, (+/-)
0.3 %
Basic error limit (operational limit at 25 °C) · Voltage, relative to input range, (+/-)
0.2 %
· Current, relative to input range, (+/-)
0.2 %
· Resistance, relative to input range, (+/-)
0.2 %
· Resistance thermometer, relative to input range, (+/-)
Pt100 Standard: ±1 K, Pt100 Climate: ±0.5 K, Ni100 Standard: ±0.6 K, Ni100 Climate: ±0.5 K
· Voltage, relative to output range, (+/-)
0.2 %
· Current, relative to output range, (+/-)
0.2 %
Interference voltage suppression for f = n x (f1 +/1 %), f1 = interference frequency
· Series mode interference (peak value of interference < rated value of input range), min.
30 dB
· Common mode voltage, max.
10 V
· Common mode interference, min.
60 dB; at 400 Hz: 50 dB
Interfaces
Number of PROFINET interfaces
1
1. Interface
Interface types
· Number of ports
2
· integrated switch
Yes
· RJ 45 (Ethernet)
Yes; X1
148
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Technical specifications
Article number Functionality
· IP protocol
6ES7511-1CK01-0AB0 Yes; IPv4
· PROFINET IO Controller
Yes
· PROFINET IO Device
Yes
· SIMATIC communication
Yes
· Open IE communication
Yes
· Web server
Yes
· Media redundancy
PROFINET IO Controller Services
PG/OP communication
Yes; MRP Automanager according to IEC 624392 Edition 2.0
Yes
S7 routing
Yes
Isochronous mode
Yes
Open IE communication
Yes
IRT
Yes
MRP MRPD
Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50
Yes; Requirement: IRT
PROFIenergy
Yes
Prioritized startup
Yes; Max. 32 PROFINET devices
Number of connectable IO Devices, max.
128; In total, up to 256 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
Of which IO devices with IRT, max.
64
Number of connectable IO Devices for 128 RT, max.
of which in line, max.
128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
149
Technical specifications
Article number Update time for IRT
for send cycle of 250 µs
for send cycle of 500 µs
for send cycle of 1 ms
6ES7511-1CK01-0AB0
250 s to 4 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 625 µs of the isochronous OB is decisive 500 s to 8 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 625 µs of the isochronous OB is decisive 1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" Update time = set "odd" send clock (any multiple
send cycles
of 125 µs: 375 µs, 625 µs ... 3 875 µs)
Update time for RT for send cycle of 250 µs
250 µs to 128 ms
for send cycle of 500 µs
500 µs to 256 ms
for send cycle of 1 ms
1 ms to 512 ms
for send cycle of 2 ms
2 ms to 512 ms
for send cycle of 4 ms
4 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
Yes
MRP
Yes
MRPD
Yes; Requirement: IRT
PROFIenergy
Yes
Shared device
Yes
Number of IO Controllers with shared 4 device, max.
Asset management record
Yes; Per user program
Interface types
RJ 45 (Ethernet)
· 100 Mbps
Yes
· Autonegotiation
Yes
· Autocrossing
Yes
· Industrial Ethernet status LED
Yes
150
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Technical specifications
Article number Protocols Number of connections
· Number of connections, max.
· Number of connections reserved for ES/HMI/web
6ES7511-1CK01-0AB0
96; via integrated interfaces of the CPU and connected CPs / CMs 10
· Number of connections via integrated inter- 64 faces
· Number of S7 routing paths
16
PROFINET IO Controller
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
Yes
Open IE communication
Yes
IRT
Yes
MRP MRPD
Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50
Yes; Requirement: IRT
PROFIenergy
Yes
Prioritized startup
Yes; Max. 32 PROFINET devices
Number of connectable IO Devices, max.
128; In total, up to 256 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
Of which IO devices with IRT, max.
64
Number of connectable IO Devices for 128 RT, max.
of which in line, max.
128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
SIMATIC communication · S7 communication, as server
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
Yes
· S7 communication, as client
Yes
· User data per job, max.
See online help (S7 communication, user data size)
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
151
Technical specifications
Article number Open IE communication
· TCP/IP Data length, max. several passive connections per port, supported
· ISO-on-TCP (RFC1006) Data length, max.
· UDP Data length, max. UDP multicast
· DHCP · SNMP · DCP · LLDP Web server · HTTP · HTTPS OPC UA · Runtime license required · OPC UA Server
Application authentication Security policies
User authentication Further protocols
· MODBUS Media redundancy
· Switchover time on line break, typ. · Number of stations in the ring, max. Isochronous mode Isochronous operation (application synchronized up to terminal) Equidistance
6ES7511-1CK01-0AB0
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
Yes; Standard and user pages Yes; Standard and user pages
Yes Yes; Data access (read, write, subscribe), method call, custom address space Yes Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "anonymous" or by user name & password
Yes; MODBUS TCP
200 ms; For MRP, bumpless for MRPD 50
Yes; With minimum OB 6x cycle of 625 µs
Yes
152
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Technical specifications
Article number S7 message functions
Number of login stations for message functions, max. Program alarms Number of configurable program alarms Number of simultaneously active program alarms · Number of program alarms · Number of alarms for system diagnostics · Number of alarms for motion technology
objects Test commissioning functions
Joint commission (Team Engineering)
Status block
Single step Number of breakpoints Status/control · Status/control variable · Variables
· Number of variables, max. of which status variables, max. of which control variables, max.
Forcing · Forcing, variables · Number of variables, max.
Diagnostic buffer · present · Number of entries, max. of which powerfail-proof
Traces · Number of configurable Traces
Interrupts/diagnostics/status information Alarms
· Diagnostic alarm · Hardware interrupt
6ES7511-1CK01-0AB0
32 Yes 5 000
300 100 80
Yes; Parallel online access possible for up to 5 engineering systems Yes; Up to 8 simultaneously (in total across all ES clients) No 8
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Peripheral inputs/outputs 200
Yes 1 000 500
4; Up to 512 KB of data per trace are possible
Yes Yes
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
153
Technical specifications
Article number Diagnostic messages
· Monitoring the supply voltage · Wire-break
· Short-circuit
· A/B transition error at incremental encoder
6ES7511-1CK01-0AB0
Yes
Yes; for analog inputs/outputs, see description in manual Yes; for analog outputs, see description in manual Yes
Diagnostics indication LED · RUN/STOP LED · ERROR LED · MAINT LED · STOP ACTIVE LED · Monitoring of the supply voltage (PWRLED) · Channel status display · for channel diagnostics · Connection display LINK TX/RX
Yes Yes Yes Yes Yes
Yes Yes; For analog inputs/outputs Yes
Supported technology objects
Motion Control
Yes; Note: The number of axes affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER
· Number of available Motion Control re-
800
sources for technology objects (except cam
disks)
· Required Motion Control resources
per speed-controlled axis
40
per positioning axis
80
per synchronous axis
160
per external encoder
80
per output cam
20
per cam track
160
per probe
40
· Positioning axis
Number of positioning axes at motion control cycle of 4 ms (typical value)
Number of positioning axes at motion control cycle of 8 ms (typical value)
Controller · PID_Compact
5 10
Yes; Universal PID controller with integrated optimization
154
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Technical specifications
Article number · PID_3Step
· PID-Temp
Counting and measuring · High-speed counter Integrated Functions Number of counters Counting frequency (counter) max. Counting functions · Continuous counting · Counter response parameterizable · Hardware gate via digital input · Software gate · Event-controlled stop · Synchronization via digital input · Counting range, parameterizable Comparator
Number of comparators Direction dependency Can be changed from user program Position detection · Incremental acquisition · Suitable for S7-1500 Motion Control Measuring functions · Measuring time, parameterizable · Dynamic measurement period adjustment · Number of thresholds, parameterizable Measuring range Frequency measurement, min. Frequency measurement, max. Cycle duration measurement, min. Cycle duration measurement, max.
6ES7511-1CK01-0AB0 Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
6; Of which max. 4x A/B/N 400 kHz; with quadruple evaluation
Yes Yes Yes Yes Yes Yes Yes
2; per count channel; see manual for details Yes Yes
Yes Yes
Yes Yes 2
0.04 Hz 400 kHz; with quadruple evaluation 2.5 µs 25 s
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
155
Technical specifications
Article number Accuracy
Frequency measurement
Cycle duration measurement
Velocity measurement
Potential separation Potential separation digital inputs
· between the channels
6ES7511-1CK01-0AB0
100 ppm; depending on measuring interval and signal evaluation 100 ppm; depending on measuring interval and signal evaluation 100 ppm; depending on measuring interval and signal evaluation
No
· between the channels, in groups of
16
Potential separation digital outputs
· between the channels
No
· between the channels, in groups of
16
Potential separation channels · between the channels and backplane bus Yes
· Between the channels and load voltage L+ No
Isolation Isolation tested with
Ambient conditions Ambient temperature during operation
· horizontal installation, min.
707 V DC (type test) 0 °C
· horizontal installation, max. · vertical installation, min.
60 °C; Note derating data for onboard I/O in the manual. Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off
0 °C
· vertical installation, max.
Ambient temperature during storage/transportation
· min.
40 °C; Note derating data for onboard I/O in the manual. Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C
· max.
70 °C
Configuration
Programming
Programming language
LAD
Yes
FBD
Yes
STL
Yes
SCL
Yes
GRAPH
Yes
156
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Article number Know-how protection
· User program protection/password protection
· Copy protection
· Block protection Access protection
· Password for display
· Protection level: Write protection
· Protection level: Read/write protection
· Protection level: Complete protection Cycle time monitoring
· lower limit
· upper limit Dimensions
Width Height Depth Weights Weight, approx.
6ES7511-1CK01-0AB0
Yes
Yes Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
85 mm 147 mm 129 mm
1 050 g
Technical specifications
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
157
Technical specifications
Power reduction (derating) to total current of digital outputs (per power supply)
The following figure shows the load rating of the digital outputs in relation to the mounting position and the ambient temperature.
Horizontal mounting position Vertical mounting position
Figure 7-1 Loading capacity of the digital outputs per mounting position
The following trends shows the load rating of the digital outputs when technology functions are used in dependence on the ambient temperature.
Horizontal mounting position
Figure 7-2 Load rating of the digital outputs when technology functions are used
158
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Technical specifications
Power reduction (derating) to total current of digital inputs (per power supply)
The following figure shows the load rating of the current for encoder supplies of digital inputs.
Horizontal mounting position
Figure 7-3 Load rating of the current for encoder supplies of digital inputs
Simultaneous operation of digital inputs per group
If the maximum voltage at the inputs is 24 V, all the digital inputs may be simultaneously at high level (corresponds to 100% of the digital inputs). If the maximum voltage at the inputs is 30 V, only 12 digital inputs of 16 digital inputs of one group may be simultaneously at high level (corresponds to 75% of the digital inputs).
General technical specifications
For information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., refer to the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
159
Dimension drawings
A
This appendix contains the dimension drawings of the compact CPU installed on a mounting rail. You must take the dimensions into consideration for installation in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of CPU 1511C-1 PN front and side views
160
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Dimension drawings
Figure A-2 Dimension drawing of CPU 1511C-1 PN side view with front panel open
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
161
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
of the analog on-board I/O
Parameter assignment in the user program
You have the option of reassigning parameters for the analog on-board I/O in RUN (for example, measuring ranges of individual channels can be modified in RUN without affecting the other channels).
Changing parameters in RUN
The parameters are transferred to the analog on-board I/O via data records with the WRREC instruction. The parameters set with STEP 7 (TIA Portal) are not changed in the CPU, which means that the parameters set in STEP 7 (TIA Portal) will be valid again after a restart.
The parameters are checked for plausibility by the analog on-board I/O only after the transfer.
Output parameter STATUS
If errors occur when transferring parameters with the "WRREC" instruction, the analog onboard I/O continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
You will find a description of the "WRREC" instruction and the error codes in the STEP 7 (TIA Portal) online help.
B.2
Structure of a data record for input channels of the analog on-
board I/O
Assignment of data record and channel
The parameters for the 5 analog input channels are located in data records 0 to 4 and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 Data record 2 for channel 2 Data record 3 for channel 3 Data record 4 for channel 4
162
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameter data records B.2 Structure of a data record for input channels of the analog on-board I/O
Data record structure
The figure below shows the structure of data record 0 for channel 0 as an example. The structure is identical for channels 1 to 4. The values in byte 0 and byte 1 are fixed and must not be changed. You enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Bytes 0 to 6
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
163
Parameter data records B.2 Structure of a data record for input channels of the analog on-board I/O
Figure B-2 Structure of data record 0: Bytes 7 to 27
164
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameter data records B.2 Structure of a data record for input channels of the analog on-board I/O
Codes for measurement types
The following table contains all measurement types of the inputs of the analog on-board I/O with the corresponding codes. You must enter these codes in byte 2 of the data record for the corresponding channel (refer to the figure Structure of data record 0: Bytes 0 to 6).
Table B- 1 Codes for measurement type
Measurement type Deactivated Voltage (valid for channels 0 to 3) Current, 4-wire measuring transducer (valid for channels 0 to 3) Resistance (valid for channel 4) Thermal resistor linear (valid for channel 4)
Code 0000 0000 0000 0001 0000 0010 0000 0100 0000 0111
Codes for measuring ranges
The following table contains all measuring ranges of the inputs of the analog on-board I/O with the corresponding codes. You must enter these codes in each case in byte 3 of the data record for the corresponding channel (refer to the figure Structure of data record 0: Bytes 0 to 6).
Table B- 2 Codes for measuring range
Measuring range Voltage ±5 V ±10 V 1 to 5 V 0 to 10 V Current, 4-wire measuring transducer 0 to 20 mA 4 to 20 mA ±20 mA Resistance 150 300 600 Thermal resistor Pt 100 Climate Ni 100 Climate Pt 100 Standard Ni 100 Standard
Code
0000 1000 0000 1001 0000 1010 0000 1011
0000 0010 0000 0011 0000 0100
0000 0001 0000 0010 0000 0011
0000 0000 0000 0001 0000 0010 0000 0011
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
165
Parameter data records B.2 Structure of a data record for input channels of the analog on-board I/O
Codes for temperature coefficient
The following table lists all temperature coefficients for temperature measurement of the thermal resistors along with their codes. You must enter these codes in each case in byte 4 of the data record for the corresponding channel (refer to the figure Structure of data record 0: Bytes 0 to 6)
Table B- 3 Codes for temperature coefficient
Temperature coefficient Pt xxx 0.003851 0.003916 0.003902 0.003920 Ni xxx 0.006180 0.006720
Code
0000 0000 0000 0001 0000 0010 0000 0011
0000 1000 0000 1001
Hardware interrupt limits
The values that can be set for hardware interrupts (high/low limit) must be within the nominal range and overrange/underrange of the relevant measuring range.
The following tables list the permitted hardware interrupt limits. The limits depend on the selected measurement type and measuring range.
Table B- 4 Voltage limits
Voltage ±5 V, ±10 V 32510 -32511
1 to 5 V, 0 to 10 V 32510 -4863
High limit Low limit
Table B- 5 Current and resistance limits
Current ±20 mA
32510 -32511
4 to 20 mA / 0 to 20 mA
32510
-4863
Resistance (all configurable measuring ranges)
32510 1
High limit Low limit
166
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameter data records B.3 Structure of a data record for output channels of the analog on-board I/O
Table B- 6 Limits for thermal resistor Pt 100 Standard and Pt 100 Climate
Thermal resistor
Pt 100 Standard
°C
°F
K
9999
18319
12731
-2429
-4053
303
°C 15499 -14499
Pt 100 Climate
°F
K
31099
---
-22899
---
High limit Low limit
Table B- 7 Limits for thermal resistor Ni 100 Standard and Ni 100 Climate
Thermal resistor
Ni 100 Standard
°C
°F
K
2949
5629
5681
-1049
-1569
1683
°C 15499 -10499
Ni 100 Climate
°F
K
31099
---
-15699
---
High limit Low limit
B.3
Structure of a data record for output channels of the analog on-
board I/O
Assignment of data record and channel
The parameters for the 2 analog output channels are located in data records 64 and 65 and are assigned as follows:
Data record 64 for channel 0
Data record 65 for channel 1
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
167
Parameter data records B.3 Structure of a data record for output channels of the analog on-board I/O
Data record structure
The figure below shows the structure of data record 64 for channel 0 as an example. The structure is identical for channel 1. The values in byte 0 and byte 1 are fixed and must not be changed. You enable a parameter by setting the corresponding bit to "1".
Figure B-3 Structure of data record 64: Bytes 0 to 7
168
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameter data records B.3 Structure of a data record for output channels of the analog on-board I/O
Codes for the output type
The following table contains all output types of the outputs of the analog on-board I/O with the corresponding codes. You must enter these codes in each case in byte 2 of the data record for the corresponding channel (see the previous figure).
Table B- 8 Codes for the output type
Output type Disabled Voltage Current
Code 0000 0000 0000 0001 0000 0010
Codes for output ranges
The following table contains all output ranges for voltage and current of the outputs of the analog on-board I/O with the corresponding codes. You must enter these codes in each case in byte 3 of the corresponding data record (see previous figure).
Table B- 9 Code for the output range
Output range for voltage 1 to 5 V 0 to 10 V ±10 V Output range for current 0 to 20 mA 4 to 20 mA ±20 mA
Code 0000 0011 0000 0010 0000 0000 Code 0000 0001 0000 0010 0000 0000
Permitted substitute values
The following table lists all output ranges for the permitted substitute values. You must enter these substitute values in each case in bytes 6 and 7 of the data record for the corresponding channel (see the previous figure). You can find the binary representation of the output ranges in the section Representation of output ranges (Page 197).
Table B- 10 Permitted substitute value for the output range
Output range ±10 V 1 to 5 V 0 to 10 V ±20 mA 4 to 20 mA 0 to 20 mA
Permitted substitute value -32512 ... +32511 -6912 ... +32511 0 ... +32511 -32512 ... +32511 -6912 ... +32511 0 ... +32511
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
169
Parameter data records B.4 Parameter assignment and structure of the parameter data records of the digital on-board I/O
B.4
Parameter assignment and structure of the parameter data records
of the digital on-board I/O
Parameter assignment in the user program
You have the option of reassigning parameters for the digital on-board I/O in RUN (for example, values for input delay of individual channels can be modified in RUN without affecting the other channels).
Changing parameters in RUN
The parameters are transferred to the digital on-board I/O via data records 0 to 15 with the WRREC instruction. The parameters set with STEP 7 (TIA Portal) are not changed in the CPU, which means the parameters set in STEP 7 (TIA Portal) will be valid again after a restart. The parameters are only checked for plausibility after the transfer.
Output parameter STATUS
If errors occur when transferring parameters with the "WRREC" instruction, the digital onboard I/O continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter. You will find a description of the "WRREC" instruction and the error codes in the STEP 7 (TIA Portal) online help.
170
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameter data records B.5 Structure of a data record for input channels of the digital on-board I/O
B.5
Structure of a data record for input channels of the digital on-
board I/O
Assignment of data record and channel
The parameters for the 16 digital input channels are located in data records 0 to 15 and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 ... Data record 14 for channel 14 Data record 15 for channel 15
Data record structure
The figure below shows the structure of data record 0 for channel 0 as an example. The structure is identical for channels 1 to 15. The values in byte 0 and byte 1 are fixed and must not be changed. You enable a parameter by setting the corresponding bit to "1".
Figure B-4 Structure of data record 0: Bytes 0 to 3
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
171
Parameter data records B.6 Structure of a data record for output channels of the digital on-board I/O
B.6
Structure of a data record for output channels of the digital on-
board I/O
Assignment of data record and channel
The parameters for the 16 digital output channels are located in data records 64 to 79 and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 ... Data record 78 for channel 14 Data record 79 for channel 15
Data record structure
The figure below shows the structure of data record 64 for channel 0 as an example. The structure is identical for channels 1 to 15. The values in byte 0 and byte 1 are fixed and must not be changed. You enable a parameter by setting the corresponding bit to "1".
Figure B-5 Structure of data record 64: Bytes 0 to 3
172
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameter data records B.7 Parameter data records of the high-speed counters
B.7
Parameter data records of the high-speed counters
You can change the parameters of the High Speed Counter in RUN. The WRREC instruction is used to transfer the parameters to the High Speed Counter using data record 128.
If errors occur when transferring or validating parameters with the WRREC instruction, the High Speed Counter continues operation with the previous parameter assignment. The STATUS output parameter then contains a corresponding error code. If no error has occurred, the length of the data actually transferred is entered in the STATUS output parameter.
You will find a description of the "WRREC" instruction and the error codes in the STEP 7 (TIA Portal) online help.
Data record structure
The following table shows you the structure of data record 128 with the counter channel. The values in byte 0 to byte 3 are fixed and must not be changed. The value in byte 4 may only be changed by parameter reassignment and not in RUN mode.
Table B- 11 Parameter data record 128 - HSC parameter header
Bit
Byte
7
6
5
4
3
2
1
0
0
Major Version = 1
Minor Version = 0
1
Length of parameter data of the channel = 48
2
Reserved = 0 1)
3
1) Reserved bits must be set to 0
Table B- 12 Parameter data record 128 - Operating mode
Bit
Byte
7
6
5
4
3
2
1
0
Operating mode
4 Reserved = 0 1)
Operating mode:
0000B: Deactivated
0001B: Counting
0010B: Measuring
0011 to 1111B: Reserved
1) Reserved bits must be set to 0
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
173
Parameter data records B.7 Parameter data records of the high-speed counters
Table B- 13 Parameter data record 128 - Basic parameters
Bit
Byte
7
6
5 Reserved = 0 1)
5
4
3
2
1
0
Basic parameters
Enable additional diagnostic interrupts2)
Reaction to CPU STOP:
00B: Output substitute value
01B: Keep last value
10B: Continue
11B: Reserved
1) Reserved bits must be set to 0
2) Must be set to 1 for the activation of the diagnostic interrupts "Missing supply voltage L+, "Illegal A/B signal ratio" and "Hardware interrupt lost"
Table B- 14 Parameter data record 128 - Counter inputs
Bit
Byte
7
6
6 Reserved = 0 1)
7 Response to signal N: 00B: No reaction to signal N
01B: Synchronization at signal N
10B: Capture at signal N 11B: Reserved
) Reserved bits must be set to 0
5
4
3
2
1
0
Counter inputs
Signal evaluation:
Signal type:
00B: Single
0000B: Pulse (A)
01B: Double
0001B: Pulse (A) and direction (B)
10B: Quadruple
0010B: Count up (A), count down (B)
11B: Reserved
0011B: Incremental encoder (A, B phase-shifted)
0100B: Incremental encoder (A, B, N)
0101 to 1111B: Reserved
Invert direc- Reserved = Filter frequency.
tion
0 1)
0000B: 100 Hz
0001B: 200 Hz
0010B: 500 Hz
0011B: 1 kHz
0100B: 2 kHz
0101B: 5 kHz
0110B: 10 kHz
0111B: 20 kHz
1000B: 50 kHz
1001B: 100 kHz
1010B: Reserved
1011 to 1111B: Reserved
174
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameter data records B.7 Parameter data records of the high-speed counters
Table B- 15 Parameter data record 128 - Hardware interrupts
Bit Byte
8
9
7
6
Reserved = Reserved =
0 1)
0 1)
Synchroni- New capzation of the ture value counter by available an external signal
5
Reserved = 0 1)
Reserved = 0 1)
4
3
Hardware interrupts1)
Direction reversal
Underflow (low counting limit violated)
Zero cross- Reserved =
ing
0 1)
2
1
Overflow (high counting limit violated)
Gate stop
Comparison event for DQ1 occurred
Reserved = 0 1)
0
Gate start
Comparison event for DQ0 occurred
1) Reserved bits must be set to 0
Table B- 16 Parameter data record 128 - Behavior DQ0/1
Bit Byte 10
11
7
6
5
4
3
2
1
0
Behavior of DQ0/1
Set output (DQ1):
Set output (DQ0):
0000B: Use by user program
0000B: Use by user program
0001B: Counting: Between comparison value 1 and high counting limit; Measuring: Measured value >= Comparison value 1
0001B: Counting: Between comparison value 0 and high counting limit; Measuring: Measured value >= Comparison value 0
0010B: Counting: Between comparison value 1 and low counting limit; Measuring: Measured value <= Comparison value 1
0010B: Counting: Between comparison value 0 and low counting limit; Measuring: Measured value <= Comparison value 0
0011B: Counting: At comparison value 1 for one pulse duration; Measuring: Reserved
0011B: Counting: At comparison value 0 for one pulse duration; Measuring: Reserved
0100B: Between comparison value 0 and 1
0100B: Reserved
0101B: Counting: After set command from CPU until comparison value 1; Measuring: Reserved
0101B: Counting: After set command from CPU until comparison value 0; Measuring: Reserved
0110B: Counting: Reserved Measuring: Not between comparison value 0 and 1
0110 to 1111B: Reserved
0111 to 1111B: Reserved
Count direction (DQ1): 00B: Reserved 01B: Up
Count direction (DQ0): 00B: Reserved 01B: Up
Reserved = 0 1)
Substitute value for DQ1
Substitute value for DQ0
10B: Down
10B: Down
11B: In both directions
11B: In both directions
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
175
Parameter data records B.7 Parameter data records of the high-speed counters
Bit
Byte
7
6
5
4
3
2
1
0
12
Pulse duration (DQ0):
13
WORD: Value range in ms/10: 0 to 65535D
14
Pulse duration (DQ1):
15
WORD: Value range in ms/10: 0 to 65535D
1) Reserved bits must be set to 0
Table B- 17 Parameter data record 128 - Behavior DI0
Bit
Byte
7
6
5
16 Behavior of Edge selection (DI0): count value 00B: Reserved after Capture (DI0): 01B: On a rising edge 10B: On a falling edge
0B: Contin- 11B: On rising and falling ue counting edge
1B: Set to start value and continue counting
1) Reserved bits must be set to 0
4
3
Behavior of DI0
Level selec- Reserved = tion (DI0): 0 1)
0B: Active at high level
1B: Active at low level
2
1
0
Set function of the DI (DI0): 000B: Gate start/stop (level-controlled) 001B: Gate start (edge-controlled) 010B: Gate stop (edge-controlled) 011B: Synchronization 100B: Enable synchronization at signal N 101B: Capture 110B: Digital input without function 111B: Reserved
Table B- 18 Parameter data record 128 - Behavior DI1
Bit
Byte
7
6
5
4
3
2
1
0
17
Behavior of DI1:
See byte 16
18
Reserved = 0 1)
19 Sync option Reserved = 0 1)
Reserved = 0 1)
0B: Once
1B: Periodically
1) Reserved bits must be set to 0
176
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameter data records B.7 Parameter data records of the high-speed counters
Table B- 19 Parameter data record 128 - Behavior DI1
Bit Byte 20-23 24-27
28-31
32-35 36-39 40-43
7
6
5
4
3
2
1
0
Values
High counting limit:
DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
Comparison value 0:
Counting mode: DWORD Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH;
Measuring mode: REAL Floating-point number in the set unit of the measured variable
Comparison value 1:
Counting mode: DWORD Value range: 2147483648 to 2147483647D: or 80000000 to 7FFFFFFFH;
Measuring mode: REAL Floating-point number in the set unit of the measured variable
Start value:
DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
Low counting limit:
DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
Update time:
DWORD: Value range in s: 0 to 25000000D
Table B- 20 Parameter data record 128 - Counter behavior at limits and at gate start
Bit Byte
44
7
6
5
4
3
2
1
0
Counter behavior at limits and at gate start
Response to gate start: Response to counting limit violation:
Reset at counting limit violation:
00B: Set to start value
000B: Stop counting
000B: To other counting limit
01B: Continue with current 001B: Continue counting value
001B: On start value
10 to 11B: Reserved
010 to 111B: Reserved
010 to 111B: Reserved
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
177
Parameter data records B.7 Parameter data records of the high-speed counters
Table B- 21 Parameter data record 128 - Specify measured value
Bit
Byte
7
6
5
4
3
2
Specify measured value
45 Reserved = 0 1)
Time base for velocity measurement:
000B: 1 ms
001B: 10 ms
010B: 100 ms
011B: 1 s
100B: 60 s/1 min
101 to 111B: Reserved
46
Increments per unit:
47
WORD: Value range: 1 to 65535D
48
Set hysteresis range:
49 Use of HSC DI0
Reserved = 0 1)
Value range: 0 to 255D Selection HSC DI0
0B: Not used
1
0
Measured variable: 00B: Frequency 01B: Period duration 10B: Velocity 11B: Reserved
178
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameter data records B.7 Parameter data records of the high-speed counters
Bit
Byte
7
6
5
1B: Used
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
4
3
2
1
0
Value range:
HSC1:
00001B: Front connector X11, terminal 2 (DI1) 00010B: Front connector X11, terminal 3 (DI2) 00011B: Front connector X11, terminal 4 (DI3) 00100B: Front connector X11, terminal 5 (DI4) 00101B: Front connector X11, terminal 6 (DI5) 00110B: Front connector X11, terminal 7 (DI6) 00111B: Front connector X11, terminal 8 (DI7)
HSC2:
00000B: Front connector X11, terminal 1 (DI0) 00001B: Front connector X11, terminal 2 (DI1) 00010B: Front connector X11, terminal 3 (DI2) 00100B: Front connector X11, terminal 5 (DI4) 00101B: Front connector X11, terminal 6 (DI5) 00110B: Front connector X11, terminal 7 (DI6) 00111B: Front connector X11, terminal 8 (DI7)
HSC3:
00000B: Front connector X11, terminal 1 (DI0) 00001B: Front connector X11, terminal 2 (DI1) 00010B: Front connector X11, terminal 3 (DI2) 00011B: Front connector X11, terminal 4 (DI3) 00100B: Front connector X11, terminal 5 (DI4) 00101B: Front connector X11, terminal 6 (DI5) 00111B: Front connector X11, terminal 8 (DI7)
HSC4:
01001B: Front connector X11, terminal 12 (DI9) 01010B: Front connector X11, terminal 13 (DI10) 01011B: Front connector X11, terminal 14 (DI11) 01100B: Front connector X11, terminal 15 (DI12) 01101B: Front connector X11, terminal 16 (DI13) 01110B: Front connector X11, terminal 17 (DI14) 01111B: Front connector X11, terminal 18 (DI15)
HSC5:
01000B: Front connector X11, terminal 11 (DI8) 01001B: Front connector X11, terminal 12 (DI9) 01010B: Front connector X11, terminal 13 (DI10) 01100B: Front connector X11, terminal 15 (DI12) 01101B: Front connector X11, terminal 16 (DI13) 01110B: Front connector X11, terminal 17 (DI14) 01111B: Front connector X11, terminal 18 (DI15)
HSC6:
01000B: Front connector X11, terminal 11 (DI8) 01001B: Front connector X11, terminal 12 (DI9) 01010B: Front connector X11, terminal 13 (DI10) 01011B: Front connector X11, terminal 14 (DI11) 01100B: Front connector X11, terminal 15 (DI12) 01101B: Front connector X11, terminal 16 (DI13) 01111B: Front connector X11, terminal 18 (DI15)
All other values: Reserved
The value range also applies for the 'Selection HSC DI1' parameter in the same way.
179
Parameter data records B.8 Parameter data records (PWM)
Bit Byte 50
7
Use of HSC DI1
0B: Not used
1B: Used
6
5
Reserved = 0 1)
51 Use of
Reserved = 0 1)
HSC DQ1
0B: Not used
1B: Used
1) Reserved bits must be set to 0
4
3
2
1
0
All other values: Reserved
The value range also applies for the 'Selection HSC DI1' parameter in
Selection HSC DI1
Value range:
The value range also applies for the 'Selection HSC DI0' parameter in the same way.
Selection HSC DQ1
Value range:
HSC1:
00001B: Front connector X11, terminal 22 (DQ1) 01001B: Front connector X11, terminal 32 (DQ9)
HSC2:
00011B: Front connector X11, terminal 24 (DQ3) 01011B: Front connector X11, terminal 34 (DQ11)
HSC3:
00100B: Front connector X11, terminal 25 (DQ4) 01100B: Front connector X11, terminal 35 (DQ12)
HSC4:
00101B: Front connector X11, terminal 26 (DQ5) 01101B: Front connector X11, terminal 36 (DQ13)
HSC5:
00111B: Front connector X11, terminal 28 (DQ7) 01111B: Front connector X11, terminal 38 (DQ15)
HSC6:
00110B: Front connector X11, terminal 27 (DQ6) 01110B: Front connector X11, terminal 37 (DQ14)
All other values: Reserved
B.8
Parameter data records (PWM)
You have the option of reassigning the pulse width modulation parameters in RUN. The parameters are transferred with the instruction WRREC via the data record 128 to the PWM submodule.
If errors occur when transferring or validating parameters with the WRREC instruction, the module continues operation with the previous parameter assignment. The output parameter STATUS then contains a corresponding error code. If no error has occurred, the length of the data actually transferred is entered in the output parameter STATUS.
You can find a description of the "WRREC" instruction and the error codes in the STEP 7 (TIA Portal) online help.
180
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Parameter data records B.8 Parameter data records (PWM)
Data record structure
The following table shows the structure of the data record 128 for the pulse width modulation. The values in byte 0 to byte 3 are fixed and must not be changed.
Table B- 22 Parameter data record 128
Bit Byte
0 1 2 3 4
5
7
6
5
4
3
2
1
0
Major Version = 1
Minor Version = 0
Length of the parameter data of the channel in bytes = 12
Reserved = 0 1)
Current control
0B: Deactivated
1B: Reserved
Dithering
0B: Deactivated 1B: Reserved
Reserved = 0 1)
High-speed output
Operating mode
0B: Deactivated
0000B: Reserved
01B: Activated 10B-11B: Reserved
Reserved = 0 1)
0001B: PWM (pulse-width modulation)
0010B: Reserved
0011B: Reserved
0100B: Frequency output
0110B to 1110B: Reserved
1111B: Deactivated
Diagnostics Reaction to CPU STOP interrupt
0B: Deactivated
00B: DQ substitute value
1B: Activated
01B: Reserved
10B: Operating mode for continuation of operation
11B: Reserved
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
181
Parameter data records B.8 Parameter data records (PWM)
Bit
Byte 6
7
6
5
Reserved = 0 1)
4
3
2
1
0
Pulse output (DQA) selection
Range of values for PWM1: 00000B: Front connector X11, terminal 21 (DQ0) 01000B: Front connector X11, terminal 31 (DQ8)
Range of values for PWM2: 00010B: Front connector X11, terminal 23 (DQ2) 01010B: Front connector X11, terminal 33 (DQ10)
Range of values for PWM3: 00100B: Front connector X11, terminal 25 (DQ4) 01100B: Front connector X11, terminal 35 (DQ12)
Range of values for PWM4: 00110B: Front connector X11, terminal 27 (DQ6) 01110B: Front connector X11, terminal 37 (DQ14)
All other values: Reserved
7
Reserved = 0 1)
Output format
Reserved = Reserved = Reserved = Substitute
0 1)
0 1)
0 1)
value DQA
PWM
Frequency output
0B: 0 V
00B: S7 analog format
00B: Reserved
1B: 24 V
01B: per 100 01B: 1 Hz (%)
10B: per 1000
10B: Reserved
11B: per 10 000
11B: Reserved
8-11
DWORD minimum pulse duration
PWM: Minimum pulse duration (default = 0 s)
Frequency output: Reserved
12-15
DWORD period duration
PWM: Period duration
Supported value range depending on configured values for "Pulse output (DQA)" and "High-speed output (0.1 A)"
· for 100 kHz DQ (high-speed output activated): 10 s to 10 000 000 s (10 s)
· for 10 kHz DQ (high-speed output deactivated): 100 s to 10 000 000 s (10 s)
· for 100 Hz DQ (high-speed output deactivated): 10 000 s (10 ms) to 10 000 000 s (10 s) Default = 2 000 000 s (2 s)
Frequency output: Reserved
1) Reserved bits must be set to 0
182
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Analog value processing
C
C.1
Conversion method
Conversion
An integrated analog-to-digital converter converts the analog signal into a digital signal so that the compact CPU can process the analog signal read in by an analog channel. Once the CPU has processed the digital signal, an integrated digital-to-analog converter converts the output signal into an analog current or voltage value.
Interference frequency suppression
The interference frequency suppression of the analog inputs suppresses the interference caused by the frequency of the AC voltage network used. The frequency of the AC voltage network may interfere with measured values, particularly for measurements within narrow voltage ranges.
You set the line frequency with which the plant operates (400, 60, 50 or 10 Hz) using the "Interference frequency suppression" parameter in STEP 7 (TIA Portal). The "Interference frequency suppression" parameter can only be set module-wide (for all input channels). The interference frequency suppression filters out the set interference frequency (400/60/50/10 Hz) as well as multiples of it. The selected interference frequency suppression also defines the integration time. The conversion time changes depending on the set interference frequency suppression.
For example, an interference frequency suppression of 50 Hz corresponds to an integration time of 20 ms. The analog on-board I/O supplies one measured value to the CPU every millisecond over a period of 20 ms. This measured value corresponds to the floating mean value of the last 20 measurements.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
183
Analog value processing C.1 Conversion method
The following figure shows how this works using a 400 Hz interference frequency suppression as an example. A 400 Hz interference frequency suppression corresponds to an integration time of 2.5 ms. The analog on-board I/O supplies a measured value to the CPU every 1.25 milliseconds within the integration time.
Figure C-1 Interference frequency suppression 400 Hz
184
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Analog value processing C.1 Conversion method The following figure shows how this works using a 60 Hz interference frequency suppression as an example. A 60 Hz interference frequency suppression corresponds to an integration time of 16.6 ms. The analog on-board I/O supplies a measured value to the CPU every 1.04 milliseconds within the integration time.
Figure C-2 Interference frequency suppression 60 Hz
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
185
Analog value processing C.1 Conversion method
The following figure shows how this works using a 50 Hz interference frequency suppression as an example. A 50 Hz interference frequency suppression corresponds to an integration time of 20 ms. The analog on-board I/O supplies a measured value to the CPU every millisecond within the integration time.
Figure C-3 Interference frequency suppression 50 Hz
186
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Analog value processing C.1 Conversion method The following figure shows how this works using a 10 Hz interference frequency suppression as an example. A 10 Hz interference frequency suppression corresponds to an integration time of 100 ms. The analog on-board I/O supplies a measured value to the CPU every millisecond within the integration time.
Figure C-4 Interference frequency suppression 10 Hz
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
187
Analog value processing C.1 Conversion method
The following table provides an overview of the configurable line frequencies, the integration time and the intervals within which measured values are supplied to the CPU.
Table C- 1 Overview of the configurable line frequencies
Interference frequency suppression 400 Hz 60 Hz 50 Hz 10 Hz
Integration time 2.5 ms 16.6 ms 20 ms 100 ms
Interval 2 x 1.25 ms 16 x 1.04 ms 20 x 1 ms 100 x 1 ms
Note Basic error with an integration time of 2.5 ms.
With an integration time of 2.5 ms, the measured value is changed by the following values based on the additionally obtained basic error and noise: · with "voltage", "current" and "resistance" by ±0.1 % · with "Thermal resistor Pt 100 Standard" by ±0.4 K · with "Thermal resistor Pt 100 Climatic" by ±0.3 K · with "Thermal resistor Ni 100 Standard" by ±0.2 K · with "Thermal resistor Ni 100 Climatic" by ±0.1 K
A detailed description of the basic and operating error is available in the function manual Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094).
188
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Smoothing
Analog value processing C.1 Conversion method
The individual measured values are smoothed by filtering. The smoothing can be set in 4 levels for individual channels in STEP 7 (TIA Portal). Smoothing time = Smoothing (k) x configured integration time The following figure shows the time it takes for the smoothed analog value to reach approximately 100% depending on the set smoothing. This is valid for all signal changes at the analog input.
None (smoothing = 1 x integration time)
Weak (smoothing = 4 x integration time) *
Medium (smoothing = 16 x integration time) *
Strong (smoothing = 32 x integration time) *
* The smoothing time can increase by 1 x integration time.
Figure C-5 Smoothing time depending on the set smoothing level
The following table shows the time it takes for the smoothed analog value to reach approximately 100% depending on the set smoothing and the set interference frequency suppression.
Table C- 2 Smoothing time depending on the set smoothing level and interference frequency suppression
Selection of the smoothing (mean value generation from scan values)
None Weak Medium Strong
Interference frequency suppression/smoothing time
400 Hz
60 Hz
50 Hz
10 Hz
2.5 ms
16.6 ms
20 ms
100 ms
10 ms
66.4 ms
80 ms
400 ms
40 ms
265.6 ms
320 ms
1600 ms
80 ms
531.2 ms
640 ms
3200 ms
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
189
Analog value processing C.2 Representation of analog values
Cycle time
The cycle times (1 ms, 1.04 ms and 1.25 ms) result from the configured interference frequency suppression. The cycle time is independent of the number of configured analog channels. The values for the analog input channels are detected sequentially in each cycle.
Reference
For more information on conversion time, cycle time and conversion method, refer to the Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094) function manual.
C.2
Representation of analog values
Introduction
The analog values for all measuring ranges that you can use with the analog on-board I/O are represented in this appendix.
For cross-product information on "analog value processing", refer to the Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094) function manual.
Measured value resolution
Each analog value is entered left aligned into the tags. The bits marked with "x" are set to "0".
Note This resolution does not apply to temperature values. The digitalized temperature values are the result of a conversion in the analog on-board I/O.
Table C- 3 Resolution of the analog values
Resolution in bits including sign
16
Decimal 1
Values
Hexadecimal 1H
Analog value
High byte Sign 0 0 0 0 0 0 0
Low byte 0 0 0 0 0 0 0 1
190
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Analog value processing C.3 Representation of input ranges
C.3
Representation of input ranges
The tables below set out the digitized representation of the input ranges separately for bipolar and unipolar input ranges. The resolution is 16 bits.
Table C- 4 Bipolar input ranges
Dec. val- Measured
ue
value in %
32767 32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 <-117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange 0 1 1 0 1 1 0000000001 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0000000001 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Nominal 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 range 1 0 0 1 0 1 0000000000 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Underrange 1 0 0 0 0 0 0100000000 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Table C- 5 Unipolar input ranges
Dec. val- Measured
ue
value in %
32767 32511 27649 27648 1 0 -1 -4864 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -17.593 <-17.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange 0 1 1 0 1 1 0000000001 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Nominal 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 range 0 0 0 0 0 0 0000000000 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Underrange 1 1 1 0 1 1 0100000000 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
191
Analog value processing C.3 Representation of input ranges
C.3.1
Representation of analog values in voltage measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible voltage measuring ranges.
Table C- 6 Voltage measuring ranges ±10 V, ±5 V
Values dec. 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex. 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±10 V
±5 V
>11.759 V
>5.879 V
11.759 V
5.879 V
10 V 7.5 V 361.7 µV 0 V
5 V 3.75 V 180.8 µV 0 V
-7.5 V -10 V
-3.75 V -5 V
-11.759 V <-11.759 V
-5.879 V <-5.879 V
Range Overflow Overrange Nominal range
Underrange Underflow
Table C- 7 Voltage measuring range 1 to 5 V, 0 to 10 V
Values dec. 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex. 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Voltage measuring range 1 to 5 V >5.704 V 5.704 V
5 V 4 V 1 V + 144.7 µV 1 V
0.296 V < 0.296 V
0 to 10 V >11.759 V 11.759 V
10.0 V 7.5 V 361.7 V 0 V
-1.759 V < -1.759 V
Range Overflow Overrange Nominal range
Underrange Underflow
192
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
C.3.2
Analog value processing C.3 Representation of input ranges
Representation of analog values in current measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible current measuring ranges.
Table C- 8 Current measuring range ±20 mA
Values dec. 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex. 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Current measuring range ±20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-15 mA -20 mA
-23.52 mA <-23.52 mA
Overflow Overrange Nominal range
Underrange Underflow
Table C- 9 Current measuring ranges 0 to 20 mA and 4 to 20 mA
Values dec. 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex. 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Current measuring range 0 to 20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-3.52 mA <-3.52 mA
4 to 20 mA >22.81 mA 22.81 mA
20 mA 16 mA 4 mA + 578.7 nA 4 mA
1.185 mA <1.185 mA
Overflow Overrange Nominal range
Underrange Underflow
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
193
Analog value processing C.3 Representation of input ranges
C.3.3
Representation of the analog values of resistance-type sensors/resistance-type thermometers
The following tables list the decimal and hexadecimal values (codes) of the possible resistance-type sensor ranges.
Table C- 10 Resistance-type sensors of 150 , 300 and 600
Values dec. 32767 32511 27649 27648 20736 1 0
hex. 7FFF 7EFF 6C01 6C00 5100 1 0
Resistance-type sensor range
150
300
>176.38
>352.77
176.38
352.77
150 112.5 5.43 m 0
300 225 10.85 m 0
600 >705.53 705.53
600 450 21.70 m 0
Overflow Overrange
Nominal range
Table C- 11 Resistance-type thermometer Pt 100 Standard
Pt 100 Standard in °C (1 digit = 0.1°C) > 1000.0 1000.0 : 850.1 850.0 : -200.0 -200.1 : -243.0 < -243.0
Values dec.
32767 10000 : 8501 8500 : -2000 -2001 : -2430 -32768
hex.
7FFF 2710 : 2135 2134 : F830 F82F : F682 8000
Pt 100 Standard in °F (1 digit = 0.1 °F) > 1832.0 1832.0 : 1562.1 1562.0 : -328.0 -328.1 : -405.4 < -405.4
Values dec.
32767 18320 : 15621 15620 : -3280 -3281 : -4054 -32768
hex.
7FFF 4790 : 3D05 3D04 : F330 F32F : F02A 8000
Pt 100 Standard in K (1 digit = 0.1 K) > 1273.2 1273.2 : 1123.3 1123.2 : 73.2 73.1 : 30.2 < 30.2
Values dec.
32767 12732 : 11233 11232 : 732 731 : 302 32768
hex.
7FFF 31BC : 2BE1 2BE0 : 2DC 2DB : 12E 8000
Range
Overflow Overrange Nominal range Underrange Underflow
194
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Analog value processing C.3 Representation of input ranges
Table C- 12 Resistance-type thermometer Pt 100 Climate
Pt 100 Climate/ in °C (1 digit = 0.01 °C) > 155.00 155.00 : 130.01 130.00 : -120.00 -120.01 : -145.00 < -145.00
Values dec.
32767 15500 : 13001 13000 : -12000 -12001 : -14500 -32768
hex.
7FFF 3C8C : 32C9 32C8 : D120 D11F : C75C 8000
Pt 100 Climate/ in °F (1 digit = 0.01 °F) > 311.00 311.00 : 266.01 266.00 : -184.00 -184.01 : -229.00 < -229.00
Values dec.
32767 31100 : 26601 26600 : -18400 -18401 : -22900 -32768
hex.
7FFF 797C : 67E9 67E8 : B820 B81F : A68C 8000
Range Overflow Overrange Nominal range Underrange Underflow
Table C- 13 Resistance-type thermometer Ni 100 standard
Ni 100 Standard in °C (1 digit = 0.1 °C) > 295.0 295.0 : 250.1 250.0 : -60.0 -60.1 : -105.0 < -105.0
Values dec.
32767 2950 : 2501 2500 : -600 -601 : -1050 -32768
hex.
7FFF B86 : 9C5 9C4 : FDA8 FDA7 : FBE6 8000
Ni 100 Standard in °F (1 digit = 0.1 °F) > 563.0 563.0 : 482.1 482.0 : -76.0 -76.1 : -157.0 < -157.0
Values dec.
32767 5630 : 4821 4820 : -760 -761 : -1570 -32768
hex.
7FFF 15FE : 12D5 12D4 : FD08 FD07 : F9DE 8000
Ni 100 Standard in K (1 digit = 0.1 K) > 568.2 568.2 : 523.3 523.2 : 213.2 213.1 : 168.2 < 168.2
Values dec.
32767 5682 : 5233 5232 : 2132 2131 : 1682 32768
hex.
7FFF 1632 : 1471 1470 : 854 853 : 692 8000
Range
Overflow Overrange Nominal range Underrange Underflow
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
195
Analog value processing C.3 Representation of input ranges
Table C- 14 Resistance-type thermometer Ni 100 Climate
Ni 100 Climate in °C Values
(1 digit = 0.01 °C)
dec.
> 155.00 155.00 : 130.01 130.00 : -60.00 -60.01 : -105.00 < - 105.00
32767 15500 : 13001 13000 : -6000 -6001 : -10500 -32768
hex.
7FFF 3C8C : 32C9 32C8 : E890 E88F : D6FC 8000
Ni 100 Climate in °F (1 digit = 0.01 °F) > 311.00 311.00 : 266.01 266.00 : -76.00 -76.01 : -157.00 < - 157.00
Values dec.
32767 31100 : 26601 26600 : -7600 -7601 : -15700 -32768
hex.
7FFF 797C : 67E9 67E8 : E250 E24F : C2AC 8000
Range Overflow Overrange Nominal range Underrange Underflow
C.3.4
Measured values for wire break diagnostics
Measured values for "Wire break" diagnostics as a function of diagnostics enables
With suitable parameter assignment, events that occur trigger a diagnostics entry and a diagnostics interrupt.
Table C- 15 Measured values for wire break diagnostics
Format S7
Parameter assignment
· "Wire break" diagnostics enabled
· "Overflow/Underflow" diagnostics enabled or disabled
("Wire break" diagnostics has a higher priority than "Overflow/Underflow" diagnostics)
· "Wire break" diagnostics disabled
· "Overflow/Underflow" diagnostics enabled
Measured values
32767
7FFFH
-32767 8000 H
· "Wire break" diagnostics disabled
· "Overflow/Underflow" diagnostics disabled
-32767
8000 H
Explanation "Wire break" or "Cable break" diagnostics alarm
· Measured value after leaving the underrange
· Diagnostics alarm "Low limit" violated Measured value after leaving the underrange
196
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Analog value processing C.4 Representation of output ranges
C.4
Representation of output ranges
The tables below set out the digitalized representation of the output ranges separately for bipolar and unipolar ranges. The resolution is 16 bits.
Table C- 16 Bipolar output ranges
Dec. value
32511
32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32512
Output value in %
117.589
117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 -117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Nominal range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Underrange 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < -32512 are specified, the output value is limited to -117.593%.
Table C- 17 Unipolar output ranges
Dec. value
32511
32511 27649 27648 1 0 0
Output value in %
117.589
117.589 100.004 100.000 0.003617 0.000 0
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 x x x x x x x x Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Nominal range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < 0 are specified, the output value is limited to 0%.
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
197
Analog value processing C.4 Representation of output ranges
C.4.1
Representation of analog values in the voltage output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible voltage output ranges.
Table C- 18 Voltage output range ±10 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-75% -100%
dec. >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400
-117.593% <-117.593%
-27649 -32512 <-32512
93FF 8100 < 8100
Voltage output range ±10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V -361.7 µV -7.5 V -10 V
-11.76 V -11.76 V
Range Maximum output value Overrange
Nominal range
Underrange Minimum output value
Table C- 19 Voltage output range 0 V to 10 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0% <0%
dec. >32511 32511 27649 27648 20736 1 0 <0
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Voltage output range 0 to 10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V 0 V
Range Maximum output value Overrange Nominal range
Minimum output value
198
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
Table C- 20 Voltage output range 1 V to 5 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-25% <-25%
dec. >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 <E500
Voltage output range 1 to 5 V 5.70 V 5.70 V
5 V 4 V 1 V +144.7 µV 1 V 1 V -144.7 µV 0 V 0 V
Analog value processing C.4 Representation of output ranges
Range Maximum output value Overrange Nominal range
Underrange Minimum output value
C.4.2
Representation of analog values in the current output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible current output ranges.
Table C- 21 Current output range ±20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-75% -100%
-117.593% <-117.593%
dec. >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 <-32512
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 <8100
Current output range ±20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 mA 0 mA -723.4 mA -15 mA -20 mA
-23.52 mA -23.52 mA
Range Maximum output value Overrange
Nominal range Underrange Minimum output value
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
199
Analog value processing C.4 Representation of output ranges
Table C- 22 Current output range 0 to 20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0% <0%
dec. >32511 32511 27649 27648 20736 1 0 <0
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Current output range 0 to 20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 mA 0 mA 0 mA
Table C- 23 Current output range 4 to 20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-25% <-25%
dec. >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 <E500
Current output range 4 to 20 mA 22.81 mA 22.81 mA
20 mA 16 mA 4 mA 4 mA
0 mA 0 mA
Range Maximum output value Overrange
Nominal range Minimum output value
Range Maximum output value Overrange
Nominal range Underrange Minimum output value
200
CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Manual, 12/2017, A5E40898565-AA
SIMATIC
S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
_Pr_od_u_ct_o_ve_rv_ie_w_________2_
_W_iri_ng_______________3_
_ _ _ _ _ _ _ _ _ _ _ Interrupts, error messages,
diagnostics and system
4
alarms
_Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______5_
_Di_m_en_s_ion_d_ra_w_in_g ________A_
12/2017
A5E36270833-AB
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E36270833-AB 11/2017 Subject to change
Copyright © Siemens AG 2016 - 2017. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system/ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1511T-1 PN.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
4
Manual, 12/2017, A5E36270833-AB
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
5
Table of contents
Preface ...................................................................................................................................................... 4
1 Documentation guide ................................................................................................................................. 7
2 Product overview ..................................................................................................................................... 11
2.1
New functions in firmware version V2.5................................................................................. 11
2.2
Applications of the S7-1500 CPU .......................................................................................... 12
2.3
Hardware properties .............................................................................................................. 19
2.4
Firmware functions................................................................................................................. 21
2.5 2.5.1 2.5.2 2.5.3
Operator controls and display elements ................................................................................ 25 Front view of the CPU with closed front panel....................................................................... 25 Front view of the CPU without front flap ................................................................................ 27 Rear view of the CPU ............................................................................................................ 28
2.6
Mode selector......................................................................................................................... 28
3 Wiring ...................................................................................................................................................... 29
4 Interrupts, error messages, diagnostics and system alarms .................................................................... 32
4.1
Status and error display of the CPU ...................................................................................... 32
5 Technical specifications ........................................................................................................................... 35
A Dimension drawing .................................................................................................................................. 47
A.1
Dimensional drawing of the CPU 1511T-1 PN ...................................................................... 47
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
6
Manual, 12/2017, A5E36270833-AB
Documentation guide
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
1
Basic information The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
7
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
8
Manual, 12/2017, A5E36270833-AB
Documentation guide
Application examples The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
9
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
10
Manual, 12/2017, A5E36270833-AB
Product overview
2
2.1
New functions in firmware version V2.5
New functions of the CPUs firmware 2.5 This section lists the new features of the CPU with firmware version V2.5. You can find additional information in the sections of this manual.
Table 2- 1 New functions of the CPUs with firmware version 2.5
New functions New technology object, kinematics
Additional instructions for torque control
Data adaption for SINAMICS S210 MotionIn
Applications
Customer benefits
Controlling of kinematics, such as · Cartesian portals · Roller pickers
You can realize complex Motion Control applications for controlling 2D, 3D and 4D kinematics.
· Delta pickers
· SCARA Motion specification of paths
Individual motions and motion sequences
Kinematics 2D, 3D, with and without orientation axis
You can apply an additives setpoint torque You can pre-control the torque precisely for
in the drive.
the axes, for example at winders
You can predetermine torque limits in the (predetermine traction torque and additional-
drive cyclically.
ly torque limits in order to prevent tearing of
The torque actual value of the drive can be the material).
evaluated directly in the
You can take the dynamic model of the
TO-DB of the axis.
kinematics into consideration, pre-control the
torque to be expected for each axis and thus
improve the precision.
You can also use data adaption for the new drive SINAMICS S210.
You gain time during the configuration of the technology objects and the drives.
Through additional instructions
This means that specific technological
motion setpoints can be specified cyclical- motion specifications are possible via the
ly via the application.
application (for example at winders).
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
11
Product overview 2.2 Applications of the S7-1500 CPU
2.2
Applications of the S7-1500 CPU
Area of application
SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation.
The modular and fanless design, simple implementation of distributed structures, and user-friendly operation make SIMATIC S7-1500 the economic and convenient solution for a variety of tasks.
Areas of application of the SIMATIC S7-1500 are, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automobile engineering
Water/waste water
Food & Beverage
Additional areas of application of the SIMATIC S7-1500T with extended Motion Control functions are, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial capability from the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500.
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
12
Manual, 12/2017, A5E36270833-AB
Product overview 2.2 Applications of the S7-1500 CPU
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 2 Standard CPUs
CPU
CPU 1511-1 PN
CPU 1513-1 PN CPU 1515-2 PN
CPU 1516-3 PN/ DP CPU 1517-3 PN/ DP CPU 1518-4 PN/ DP CPU 1518-4 PN/ DP MFP
Performance segment
Standard CPU for small to mid-range applications
Standard CPU for mid-range applications
Standard CPU for mid-range to large applications
Standard CPU for highend applications and communication tasks
Standard CPU for highend applications and communication tasks
Standard CPU for highperformance applications, demanding communication tasks and very short reaction times
PROFIBUS interfaces
--
---
1
1
1
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT
interface
--
PROFINET basic
functionality
--
Work memory
1.15 MB
Processing time for bit operations
60 ns
1
--
--
1.8 MB 40 ns
1
1
--
3.5 MB 30 ns
1
1
--
6 MB
10 ns
1
1
--
10 MB
2 ns
1
1
1
24 MB
1 ns
Table 2- 3 Compact CPUs
CPU CPU 1511C-1 PN CPU 1512C-1 PN
Performance segment PROFIBUS PROFINET PROFINET interfaces IO RT/IRT IO RT interfaces interface
Compact CPU for
--
1
--
small to mid-range
applications
Compact CPU for
--
1
--
mid-range applica-
tions
PROFINET basic
functionality --
--
Work memory
1.175 MB
Processing time for bit operations
60 ns
1.25 MB 48 ns
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
13
Product overview 2.2 Applications of the S7-1500 CPU
Table 2- 4 Fail-safe CPUs
CPU
CPU 1511F-1 PN
CPU 1511TF-1 PN
CPU 1513F-1 PN
CPU 1515F-2 PN
CPU 1515TF-2 PN
CPU 1516F-3 PN/ DP
CPU 1516TF-3 PN/ DP
CPU 1517F-3 PN/ DP
CPU 1517TF-3 PN/ DP
CPU 1518F-4 PN/ DP CPU 1518F-4 PN/ DP MFP
Performance segment PROFIBUS PROFINET interfaces IO RT/IRT interfaces
Fail-safe CPU for
--
1
small to mid-range
applications
Fail-safe technology
--
1
CPU for small to mid-
range applications
Fail-safe CPU for
--
1
mid-range applica-
tions
Fail-safe CPU for
--
1
mid-range to large
applications
Fail-safe technology
--
1
CPU for demanding
applications and
communication tasks
Fail-safe CPU for
1
1
demanding applica-
tions and communica-
tion tasks
Fail-safe technology
1
1
CPU for demanding
applications and
communication tasks
Fail-safe CPU for
1
1
demanding applica-
tions and communica-
tion tasks
Fail-safe technology
1
1
CPU for demanding
applications and
communication tasks
Fail-safe CPU for
1
1
high-performance
applications, demand-
ing communication
tasks and very short
reaction times
PROFINET IO RT
interface ---1 1
1
1
1
1
1
PROFINET basic
functionality ------
--
--
--
--
1
Work memory 1.225 MB 1.225 MB 1.95 MB 3.75 MB 3.75 MB
6.5 MB
6.5 MB
11 MB
11 MB
26 MB
Processing time for bit operations
60 ns 60 ns 40 ns 30 ns 30 ns
10 ns
10 ns
2 ns
2 ns
1 ns
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
14
Manual, 12/2017, A5E36270833-AB
Product overview 2.2 Applications of the S7-1500 CPU
Table 2- 5 Technology CPUs
CPU
CPU 1511T-1 PN
CPU 1515T-2 PN
CPU 1516T-3 P N/DP
CPU 1517T-3 PN/DP
CPU 1511TF-1 PN CPU 1515TF-2 PN CPU 1516TF-3 PN/DP CPU 1517TF-3 PN/DP
Performance segment
PROFIBUS PROFINET PROFINET PROFINET
interfaces IO RT/IRT IO RT
basic
interfaces interface functionality
Technology CPU for
--
1
--
--
small to mid-range
applications
Technology CPU for
--
1
1
--
mid-range to large
applications
Technology CPU for
1
1
1
--
high-end applications
and communication
tasks
Technology CPU for
1
1
1
--
high-end applications
and communication
tasks
These CPUs are described in the fail-safe CPUs
Work memory 1.225 MB 3.75 MB 6.5 MB
11 MB
Processing time for bit operations
60 ns
30 ns
10 ns
2 ns
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Frequency meter Period duration measurement Pulse width modulation (PWM output) Pulse Train Output (PTO output) Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 6 (max. 100 kHz)
6 channels Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 6 (max. 100 kHz)
6 channels Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
15
Product overview 2.2 Applications of the S7-1500 CPU
Integrated Motion Control technology functions All CPUs of SIMATIC S7-1500 support Motion Control technology functions. STEP 7 offers Motion Control instructions standardized according to PLCopen for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axis Positioning axis Synchronous axis External encoders Output cam Cam track Measuring inputs The technology CPUs of the SIMATIC S7-1500 offer enhanced Motion Control functions: Advanced synchronization functions Synchronization with specification of synchronous position Actual value coupling Shifting the master value of the following axis Camming Up to 4 encoders or measuring systems as actual position for position control The technology CPUs of the SIMATIC S7-1500 additionally support the following technology objects: Cam Kinematics Cam Kinematics Controlling of kinematics, such as Cartesian portals Roller pickers Delta pickers SCARA Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
Additional integrated technological functions For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags. In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
16
Manual, 12/2017, A5E36270833-AB
Product overview 2.2 Applications of the S7-1500 CPU
Other technology functions Technology modules also implement functions such as high-speed counting, position detection and measuring functions and pulse generators (PTO, PWM and frequency output). For compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and can be implemented without additional technology modules.
SIWAREX is a versatile and flexible weighing module, which you can use as a static scale for operation.
Security Integrated In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks.
Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU.
In addition, you can assign various access rights to different user groups in the controller using four different authorization levels.
Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller.
The use of an Ethernet CP (CP 1543-1) provides the user with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally.
These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration thereby provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications.
The fail-safe CPUs are certified for use in safety mode up to:
Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010
Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to EN ISO 13849-1:2008
Additional password protection for F-configuration and F-program is set up for IT security.
In addition to the CPUs, further components such as SINAMICS drives dispose of integrated safety functions. Additional information about integrated safety functions in drives can be found in the manuals for the respective products.
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
17
Product overview 2.2 Applications of the S7-1500 CPU
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Error messages are immediately shown on the display in plain text. In the case of servicing, plant downtimes are minimized by quick access to diagnostics alarms. Detailed information about this and a multitude of other display functions is available in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
Uniform front connectors for all modules and integrated potential bridges for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7, on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostic information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server in up to three project languages. The HMI takes over the display in the project languages specified for the CPU. If you require message texts in additional languages, you can load these via the configured connection to your HMI. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
18
Manual, 12/2017, A5E36270833-AB
2.3
Hardware properties
Article number 6ES7511-1TK01-0AB0
View of the module The following figure shows a CPU 1511T-1 PN.
Product overview 2.3 Hardware properties
Figure 2-1 CPU 1511T-1 PN
Note Protective film Note that a protective film is attached to the display of the CPU when shipped from the factory. Remove the protective film if necessary.
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
19
Product overview 2.3 Hardware properties
Properties
CPU 1511T-1 PN has the following technical properties:
Property CPU display
Description
All CPUs of the SIMATIC S7-1500 product series feature a ·
display with plain text information. The display provides
information on order numbers, firmware version and serial
numbers of all connected modules. In addition, you can set
the IP address of the CPU and carry out further network
settings. The display shows occurring error messages
·
directly in plain text.
In addition to the functions listed here, a multitude of other functions that are described in the SIMATIC S7-1500 Display Simulator are shown on the display.
Additional information
S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
SIMATIC S7-1500 Display Simulator (http://www.automation.siemens. com/salesmaterial-as/interactivemanuals/getting-started_simatics7-1500/disp_tool/start_en.html)
Supply voltage
The 24 V DC supply voltage is supplied via a 4-pole connec- · Chapter Wiring (Page 29)
tion plug that is located at the front of the CPU.
· S7-1500, ET 200MP system
manual
(http://support.automation.sieme
ns.com/WW/view/en/59191792)
PROFINET IO
PROFINET interface The interface has two ports. In addition to basic PROFINET (X1 P1 R, X1 P2 R) functionality, its also supports PROFINET IO RT (real time)
and IRT (isochronous real time).
Operation of the CPU as
· IO controller
· IO controller: As an IO controller the CPU addresses the connected IO devices
· I-device
· I-device: As an I-device (intelligent IO device) the CPU is assigned to a higher-level IO controller and is used in the process as an intelligent pre-processing unit of sub-processes
PROFINET function manual (https://support.industry.siemens.co m/cs/ww/en/view/49948856)
Accessories
You can find information on "Accessories/spare parts" in the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
20
Manual, 12/2017, A5E36270833-AB
Product overview 2.4 Firmware functions
2.4
Firmware functions
Functions
The CPU 1511T-1 PN supports the following functions:
Function Integrated system diagnostics Integrated Web server
Integrated trace functionality
OPC UA
Configuration control
Description
The system automatically generates the messages for the system diagnostics and outputs these messages via a programming device/PC, HMI device, the Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
The Web server lets you access the CPU data by means of a network. Evaluations, diagnostics, and modifications are thus possible over long distances. Monitoring and evaluation is possible without STEP 7; all you need is a Web browser. Make sure that you take appropriate measures (e.g. limiting network access, using firewalls) to protect the CPU from being compromised.
Additional information Diagnostics function manual (http://support.automation.siemens.c om/WW/view/en/59191792)
· Web server function manual (http://support.automation.sieme ns.com/WW/view/en/59193560)
· Security with SIMATIC S7 controllers system manual (https://support.industry.siemens. com/cs/ww/en/view/90885010)
Trace functionality supports you in troubleshooting and/or Using the trace and logic analyzer
optimizing the user program.
function function manual
You record device tags and evaluate the recordings with (http://support.automation.siemens.c
the trace and logic analyzer function. Tags are, for
om/WW/view/en/64897128)
example, drive parameters or system and user tags of a
CPU.
The device saves the recordings. You can read out and permanently save the recordings with the configuration system (ES), if required. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes.
The trace record can also be displayed through the Web server.
With OPC UA, you can exchange data via an open and Communication function manual manufacturer-neutral communication protocol. The CPU (https://support.industry.siemens.co can act as an OPC UA DA server. The CPU acting as the m/cs/ww/en/view/59192925) OPC UA server can communicate with OPC UA clients.
The OPC UA Companion Specification allows methods to be specified uniformly and independently of the manufacturer. Using these specified methods, you can easily integrate devices from various manufacturers into your plants and production processes.
You can use configuration control to operate different real hardware configurations with a configured maximum configuration of the hardware. This means that, in series machine manufacturing in particular, you have the option of operating/configuring different configuration variants of a machine with a single project.
S7-1500, ET 200MP system manual (http://support.automation.siemens.c om/WW/view/en/59191792)
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
21
Product overview 2.4 Firmware functions
Function PROFINET IO RT (real time)
IRT (isochronous real time)
Isochronous mode
MRP (Media Redundancy Protocol)
MRPD (Media Redundancy with Planned Duplication)
Shared device
Description
Additional information
RT prioritizes PROFINET IO telegrams over standard telegrams. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet telegrams.
A reserved bandwidth within the send clock is available for IRT data. The reserved bandwidth ensures that the IRT data can be transmitted in time-synchronized intervals, unaffected by other high network loading (e.g. TCP/IP communication or additional real time communication). Update times with maximum determinism can be realized through IRT. Isochronous applications are possible with IRT.
The Isochronous mode system property acquires measured values and process data and processes the signals in a fixed system clock. Isochronous mode thus contributes to high control quality and hence to greater manufacturing precision. Isochronous mode reduces possible fluctuations of the process reaction times to a minimum. Time-assured processing makes higher machine cycles possible.
It is possible to establish redundant networks via the Media Redundancy Protocol. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails. The PROFINET devices that are part of this redundant network form an MRP domain.
RT operation is possible with the use of MRP.
The advantage of the MRP extension MRPD is that, in the event of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no reconfiguration time.
The "Shared device" function allows you to divide the modules or submodules of an IO device up among different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required. The "Shared device" function allows the modules or submodules of an IO device to be divided up among different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules that are physically close to each other in one IO device.
PROFINET function manual (http://support.automation.siemens.c om/WW/view/en/49948856)
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
22
Manual, 12/2017, A5E36270833-AB
Product overview 2.4 Firmware functions
Function PROFIenergy Integrated technology Motion Control
Extended Motion Control functions
Description
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. The majority of the energy is saved by the process; the PROFINET device itself only contributes a few watts of savings potential.
Additional information
All CPUs support the S7-1500 Motion Control functions via the technology objects speed axes, positioning axes, synchronized axes, external encoders, cams, cam tracks and measuring inputs.
S7-1500 Motion Control function manual (http://support.automation.siemens.c om/WW/view/en/109749262)
· Speed-controlled axis for controlling a drive with speed specification
· Positioning axis for position-controlled positioning of a drive
· Synchronous axis to interconnect with a master value. The axis is synchronized to the master axis position.
· External encoder for detecting the actual position of an encoder and its use as a master value for synchronous operation
· Cams, cam track for position-dependent generation of switching signals
· Measuring input for fast, accurate and eventdependent sensing of actual positions
You program the technology objects with Motion Control instructions according to PLCopen.
The technology CPUs of the SIMATIC S7-1500 also support extended Motion Control functions:
· Advanced synchronization functions Synchronization with specification of the synchronous position Actual value coupling Shifting of the master value at following axis Camming
S7-1500T Motion Control function manual (https://support.industry.siemens.co m/cs/ww/en/view/109749263)
S7-1500T Kinematics Functions V4.0 in TIA Portal V15 (https://support.industry.siemens.co m/cs/ww/en/view/109749264) Function manual
· Cam
· Up to 4 encoders or measuring systems as actual position for position control
· Controlling of kinematics, such as
Cartesian portals
Roller pickers
Delta pickers
SCARA
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
23
Product overview 2.4 Firmware functions
Function Integrated closed-loop control functionality
Integrated safety Know-how protection Copy protection Access protection Integrity protection
Password provider
Description · PID Compact (continuous PID controller) · PID 3Step (step controller for integrating actuators) · PID Temp (temperature controller for heating and
cooling with two separate actuators)
Additional information
PID control function manual (https://support.industry.siemens.co m/cs/ww/en/view/108210036)
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
S7-1500, ET 200MP system manual (http://support.automation.siemens.c om/WW/view/en/59191792)
Extended access protection provides high-quality protection against unauthorized configuration changes. You can use authorization levels to assign separate rights to different user groups.
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between TIA Portal and CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password input you can connect a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 reads the password automatically for the blocks. This saves you time.
· Optimum block protection because the users do not know the password itself.
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
24
Manual, 12/2017, A5E36270833-AB
2.5
2.5.1
Product overview 2.5 Operator controls and display elements
Operator controls and display elements
Front view of the CPU with closed front panel
The figure below shows the front view of the CPU 1511T-1 PN.
LEDs for the current operating mode and diagnostics status of the CPU Display Operator control buttons
Figure 2-2 View of the CPU 1511T-1 PN (with front panel) - front
Note Temperature range for display To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU. For more information on the temperatures at which the display switches itself on and off, refer to the Technical specifications.
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
25
Product overview 2.5 Operator controls and display elements
Removing and attaching the front panel with display You can remove and attach the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you remove or attach the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Before you remove or fit the front panel, always switch off the power supply to the S7-1500 automation system in hazardous area zone 2. The CPU maintains its operating mode.
Locking the front panel You can lock the front panel to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panel.
Reference
Figure 2-3 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, configurable protection levels and local locks in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
26
Manual, 12/2017, A5E36270833-AB
2.5.2
Product overview 2.5 Operator controls and display elements
Front view of the CPU without front flap
The figure below shows the operator controls and connection elements of the CPU 1511T-1 PN.
LEDs for the current operating mode and diagnostics status of the CPU Display connection Slot for the SIMATIC memory card Mode selector LEDs for the 2 ports of the PROFINET interface X1 MAC address PROFINET IO interface (X1) with 2 ports Connection for supply voltage Fastening screw
Figure 2-4 View of the CPU 1511T-1 PN (without front panel) - front
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
27
Product overview 2.6 Mode selector
2.5.3
Rear view of the CPU
The following figure shows the connection elements on the rear of the CPU 1511T-1 PN.
Shield contact surface Plug-in connection for power supply Plug-in connection for backplane bus Fastening screw
Figure 2-5 View of the CPU 1511T-1 PN - rear
2.6
Mode selector
You use the mode switches to set the operating mode of the CPU.
The following table shows the meaning of the corresponding operation of the operating mode buttons.
Table 2- 6 Meaning of the mode switches
Operation of the mode switch RUN STOP MRES
Meaning RUN mode STOP mode Memory reset
Explanation The CPU is executing the user program. The user program is not executed. (STOP ACTIVE LED lights up) Position for CPU memory reset.
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
28
Manual, 12/2017, A5E36270833-AB
Wiring
3
This section provides information on the pin assignment of the individual interfaces and the block diagram of the CPU 1511T-1 PN.
24 V DC supply voltage (X80) The connector for the power supply is plugged in when the CPU ships from the factory. The following table shows the pin assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring opener (one spring opener per terminal)
Bridged internally:
and and
Figure 3-1 Supply voltage connection
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
29
Wiring
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R) The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Figure 3-2 PROFINET ports
Reference
You can find additional information on the topics of "Connecting the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Assignment of the MAC addresses
The CPU 1511T-1 PN has a PROFINET interface with two ports. The PROFINET interface itself has a MAC address, and each of the two PROFINET ports has its own MAC address. The CPU 1511T-1 PN therefore has three MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC address are lasered on the rating plate on the right side of each CPU 1511T-1 PN.
The table below shows how the MAC addresses are assigned.
Table 3- 1 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3
Assignment PROFINET interface X1 (visible in STEP 7 for accessible devices)
Port X1 P1 R (required for LLDP, for example) Port X1 P2 R (required for LLDP, for example)
Labeling · Front, lasered · Right side, lasered
(start of number range)
· Front and right side, not lasered
· Front, not lasered · Right side, lasered
(end of number range)
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
30
Manual, 12/2017, A5E36270833-AB
Block diagram The following figure shows the block diagram of the CPU 1511T-1 PN.
Wiring
X50
X80 24 V DC
Display RUN/STOP/MRES mode selector Electronics PROFINET 2-port switch Backplane bus interface Internal supply voltage SIMATIC memory card Infeed of supply voltage
Figure 3-3 Block diagram of the CPU 1511T-1 PN
PN X1 P1 R PN X1 P2 R L+ M R/S ER MT X1 P1, X1 P2
PROFINET interface X1 Port 1 PROFINET interface X1 Port 2 24 V DC supply voltage Ground RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
31
Interrupts, error messages, diagnostics and system alarms
4
The status and error displays of the CPU 1511T-1 PN are described below.
You can find additional information on the topic of "Interrupts" in the STEP 7 online help.
You can find additional information on the topic of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error display of the CPU
LED display
The following figure shows the LED displays of the CPU 1511T-1 PN.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED)
Figure 4-1 LED display of the CPU 1511T-1 PN (without front panel)
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
32
Manual, 12/2017, A5E36270833-AB
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1511T-1 PN has three LEDs to signal the current operating status and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED off
LED flashes red
LED lit green
LED off
LED lit green
LED flashes red
LED lit green
LED off
LED lit green
LED off
LED lit green
LED flashes red
MAINT LED LED off LED off LED off LED off
LED lit yellow
LED flashes yellow
LED off
Meaning Missing or insufficient power supply on the CPU.
An error has occurred.
CPU is in RUN mode.
A diagnostics event is pending.
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration An error has occurred.
LED lit yellow LED lit yellow LED lit yellow LED lit yellow
LED flashes yellow
LED flashes yellow/green
LED flashes red LED off LED off
LED flashes red LED off
LED off
LED off LED flashes yellow
LED off LED flashes yellow
LED off
LED off
Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card CPU carries out a program with active breakpoint. Startup (transition from RUN STOP)
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
33
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
RUN/STOP LED
LED flashes yellow/green
ERROR LED LED flashes red
MAINT LED LED flashes yellow
Meaning Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of ports for the CPU 1511T-1 PN.
Table 4- 2 Meaning of the LEDs
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
34
Manual, 12/2017, A5E36270833-AB
Technical specifications
Article number General information
Product type designation HW functional status Firmware version Engineering with
· STEP 7 TIA Portal configurable/integrated as of version
Configuration control via dataset
Display Screen diagonal [cm]
Control elements Number of keys Mode selector switch
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering
· Mains/voltage failure stored energy time
· Repeat rate, min.
Input current Current consumption (rated value) Inrush current, max. I²t
Power Infeed power to the backplane bus Power consumption from the backplane bus (balanced)
Power loss Power loss, typ.
Memory Number of slots for SIMATIC memory card SIMATIC memory card required
6ES7511-1TK01-0AB0
CPU 1511T-1 PN FS03 V2.5
V15 (FW V2.5) / V14 (FW V2.0) or higher
Yes
3.45 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms 1/s
0.7 A 1.9 A; Rated value 0.02 A²·s
10 W 5.5 W
5.7 W
1 Yes
CPU 1511T-1 PN (6ES7511-1TK01-0AB0) Manual, 12/2017, A5E36270833-AB
5
35
Technical specifications
Article number Work memory
· integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range
· Size, max.
FB · Number range · Size, max.
FC · Number range · Size, max.
OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of DPV1 alarm OBs · Number of isochronous mode OBs · Number of technology synchronous alarm OBs · Number of startup OBs
6ES7511-1TK01-0AB0
225 kbyte 1 Mbyte
32 Gbyte
Yes
60 ns 72 ns 96 ns 384 ns
2 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999 1 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535 150 kbyte
0 ... 65 535 150 kbyte
150 kbyte 100 20 20 20; With minimum OB 3x cycle of 500 µs 50 3 1 2
100
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
36
Manual, 12/2017, A5E36270833-AB
Technical specifications
Article number · Number of asynchronous error OBs
· Number of synchronous error OBs
· Number of diagnostic alarm OBs Nesting depth
· per priority class Counters, timers and their retentivity S7 counter
· Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max.
Extended retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
· Number of clock memories
Data blocks · Retentivity adjustable
· Retentivity preset Local data
· per priority class, max. Address area
Number of IO modules
6ES7511-1TK01-0AB0 4 2 1
24
2 048
Yes
Any (only limited by the main memory)
Yes
2 048
Yes
Any (only limited by the main memory)
Yes
128 kbyte; In total; available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 88 KB 1 Mbyte; When using PS 60W 24/48/60V DC HF
16 kbyte 8; 8 clock memory bits, grouped into one clock memory byte Yes No
64 kbyte; max. 16 KB per block
1 024; max. number of modules / submodules
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
37
Technical specifications
Article number I/O address area
· Inputs · Outputs per integrated IO subsystem
Inputs (volume) Outputs (volume) per CM/CP Inputs (volume) Outputs (volume) Subprocess images · Number of subprocess images, max. Hardware configuration Number of distributed IO systems
Number of DP masters · Via CM
Number of IO Controllers · integrated · Via CM
Rack · Modules per rack, max. · Number of lines, max.
PtP CM · Number of PtP CMs
Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number
6ES7511-1TK01-0AB0
32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image
8 kbyte 8 kbyte
8 kbyte 8 kbyte
32
32; A distributed I/O system is characterized not only by the integration of distributed I/O via PROFINET or PROFIBUS communication modules, but also by the connection of I/O via AS-i master modules or links (e.g. IE/PB-Link)
4; A maximum of 4 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
1 4; A maximum of 4 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
32; CPU + 31 modules 1
the number of connectable PtP CMs is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
38
Manual, 12/2017, A5E36270833-AB
Technical specifications
Article number Clock synchronization
· supported · in AS, master · in AS, slave · on Ethernet via NTP Interfaces Number of PROFINET interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Functionality · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
PROFINET IO Controller Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP
MRPD PROFIenergy Prioritized startup Number of connectable IO Devices,
max. Of which IO devices with IRT, max. Number of connectable IO Devices for
RT, max.
6ES7511-1TK01-0AB0
Yes Yes Yes Yes
1
2 Yes Yes; X1
Yes; IPv4 Yes Yes Yes Yes Yes Yes; MRP Automanager according to IEC 62439-2 Edition 2.0
Yes Yes Yes Yes Yes Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50 Yes; Requirement: IRT Yes Yes; Max. 32 PROFINET devices 128; In total, up to 256 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 64 128
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
39
Technical specifications
Article number of which in line, max.
6ES7511-1TK01-0AB0 128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
Update time for IRT for send cycle of 250 µs for send cycle of 500 µs for send cycle of 1 ms
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
250 s to 4 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 625 µs of the isochronous OB is decisive 500 s to 8 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 625 µs of the isochronous OB is decisive 1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" Update time = set "odd" send clock (any multiple
send cycles
of 125 µs: 375 µs, 625 µs ... 3 875 µs)
Update time for RT for send cycle of 250 µs
250 µs to 128 ms
for send cycle of 500 µs
500 µs to 256 ms
for send cycle of 1 ms
1 ms to 512 ms
for send cycle of 2 ms
2 ms to 512 ms
for send cycle of 4 ms
4 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
Yes
MRP
Yes
MRPD
Yes; Requirement: IRT
PROFIenergy
Yes
Shared device
Yes
Number of IO Controllers with shared 4 device, max.
Asset management record
Yes; Per user program
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
40
Manual, 12/2017, A5E36270833-AB
Technical specifications
Article number Interface types RJ 45 (Ethernet)
· 100 Mbps
6ES7511-1TK01-0AB0 Yes
· Autonegotiation
Yes
· Autocrossing
Yes
· Industrial Ethernet status LED
Yes
Protocols Number of connections
· Number of connections, max.
· Number of connections reserved for ES/HMI/web
96; via integrated interfaces of the CPU and connected CPs / CMs
10
· Number of connections via integrated
64
interfaces
· Number of S7 routing paths
16
PROFINET IO Controller
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
Yes
Open IE communication
Yes
IRT
Yes
MRP MRPD
Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50
Yes; Requirement: IRT
PROFIenergy
Yes
Prioritized startup
Yes; Max. 32 PROFINET devices
Number of connectable IO Devices, max.
128; In total, up to 256 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
Of which IO devices with IRT, max.
64
Number of connectable IO Devices for 128 RT, max.
of which in line, max.
128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
41
Technical specifications
Article number SIMATIC communication
· S7 communication, as server · S7 communication, as client · User data per job, max.
Open IE communication · TCP/IP Data length, max. several passive connections per port, supported · ISO-on-TCP (RFC1006) Data length, max. · UDP Data length, max. UDP multicast · DHCP · SNMP · DCP · LLDP
Web server · HTTP · HTTPS
OPC UA · Runtime license required · OPC UA Server
Application authentication Security policies
User authentication Further protocols
· MODBUS Media redundancy
· Switchover time on line break, typ. · Number of stations in the ring, max.
6ES7511-1TK01-0AB0
Yes Yes See online help (S7 communication, user data size)
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
Yes; Standard and user pages Yes; Standard and user pages
Yes Yes; Data access (read, write, subscribe), method call, custom address space Yes Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "anonymous" or by user name & password
Yes; MODBUS TCP
200 ms; For MRP, bumpless for MRPD 50
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
42
Manual, 12/2017, A5E36270833-AB
Technical specifications
Article number Isochronous mode
Isochronous operation (application synchronized up to terminal) Equidistance S7 message functions Number of login stations for message functions, max. Program alarms Number of configurable program alarms Number of simultaneously active program alarms · Number of program alarms
· Number of alarms for system diagnostics
· Number of alarms for motion technology objects
Test commissioning functions Joint commission (Team Engineering)
Status block
Single step Number of breakpoints Status/control · Status/control variable
· Variables
· Number of variables, max. of which status variables, max. of which control variables, max.
Forcing · Forcing, variables
· Number of variables, max. Diagnostic buffer
· present
· Number of entries, max. of which powerfail-proof
Traces · Number of configurable Traces
6ES7511-1TK01-0AB0
Yes; With minimum OB 6x cycle of 625 µs Yes
32 Yes 5 000
300 100 80
Yes; Parallel online access possible for up to 5 engineering systems Yes; Up to 8 simultaneously (in total across all ES clients) No 8
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Peripheral inputs/outputs 200
Yes 1 000 500
4; Up to 512 KB of data per trace are possible
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
43
Technical specifications
Article number Interrupts/diagnostics/status information Diagnostics indication LED
· RUN/STOP LED
6ES7511-1TK01-0AB0 Yes
· ERROR LED
Yes
· MAINT LED
Yes
· Connection display LINK TX/RX
Yes
Supported technology objects
Motion Control
Yes; Note: The number of technology objects affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER
· Number of available Motion Control re-
800
sources for technology objects (except cam
disks)
· Required Motion Control resources
per speed-controlled axis
40
per positioning axis
80
per synchronous axis
160
per external encoder
80
per output cam
20
per cam track
160
per probe
40
· Number of available Extended Motion
40
Control resources for technology objects
· Required Extended Motion Control resources
for each cam
2
for each set of kinematics
30
· Positioning axis
Number of positioning axes at motion 5 control cycle of 4 ms (typical value)
Number of positioning axes at motion 10 control cycle of 8 ms (typical value)
Controller · PID_Compact
· PID_3Step
· PID-Temp Counting and measuring · High-speed counter
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
44
Manual, 12/2017, A5E36270833-AB
Technical specifications
Article number Standards, approvals, certificates
Suitable for safety functions Ambient conditions Ambient temperature during operation
· horizontal installation, min. · horizontal installation, max.
· vertical installation, min. · vertical installation, max.
Ambient temperature during storage/ transportation
· min. · max. Configuration Programming Programming language
LAD FBD STL SCL GRAPH Know-how protection · User program protection/password protection · Copy protection · Block protection Access protection · Password for display · Protection level: Write protection · Protection level: Read/write protection · Protection level: Complete protection Cycle time monitoring · lower limit · upper limit Dimensions Width Height Depth
6ES7511-1TK01-0AB0
No
0 °C 60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off 0 °C 40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C 70 °C
Yes Yes Yes Yes Yes
Yes
Yes Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
35 mm 147 mm 129 mm
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
45
Technical specifications
Article number Weights
Weight, approx.
6ES7511-1TK01-0AB0 430 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP System Manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
46
Manual, 12/2017, A5E36270833-AB
Dimension drawing
A
A.1
Dimensional drawing of the CPU 1511T-1 PN
This section contains the dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with the front panel open. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimensional drawings of the CPU 1511T-1 PN
Figure A-1 Dimensional drawing of the CPU 1511T-1 PN, front and side view
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
Manual, 12/2017, A5E36270833-AB
47
Dimension drawing A.1 Dimensional drawing of the CPU 1511T-1 PN
Figure A-2 Dimensional drawing of the CPU 1511T-1 PN, side view with front panel open
CPU 1511T-1 PN (6ES7511-1TK01-0AB0)
48
Manual, 12/2017, A5E36270833-AB
SIMATIC
S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Te_c_hn_ol_og_y_fu_nc_ti_on_s_______3_ _W_iri_ng_______________4_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____5_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___6_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______7_ _Di_m_en_si_on_d_ra_w_in_gs________A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _An_a_lo_g _va_lu_e _pr_oc_es_s_ing_____C__
12/2017
A5E40898741-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E40898741-AA 12/2017 Subject to change
Copyright © Siemens AG 2017. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system / ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. Cross-system functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1512C-1 PN.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
4
Manual, 12/2017, A5E40898741-AA
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 9
2 Product overview .................................................................................................................................. 13
2.1
Applications of the S7-1500 CPUs......................................................................................... 13
2.2 2.2.1 2.2.2 2.2.3 2.2.4 2.2.5 2.2.6
Hardware properties and firmware functions ......................................................................... 20 Hardware properties of the CPU part .................................................................................... 21 Firmware functions of the CPU part....................................................................................... 23 Hardware properties of the analog on-board I/O module ...................................................... 27 Firmware functions of the analog on-board I/O module......................................................... 30 Hardware properties of the digital on-board I/O module........................................................ 31 Firmware functions of the digital on-board I/O module .......................................................... 34
2.3 2.3.1 2.3.2 2.3.3
Operator controls and display elements ................................................................................ 36 Front view with closed front panel.......................................................................................... 36 Front view of the CPU without front panel and view from below ........................................... 38 Rear view ............................................................................................................................... 40
2.4
Operating mode buttons ........................................................................................................ 41
3 Technology functions ............................................................................................................................ 42
3.1 3.1.1 3.1.1.1 3.1.1.2 3.1.1.3 3.1.1.4 3.1.2 3.1.2.1 3.1.2.2 3.1.2.3
High-speed counters .............................................................................................................. 42 Functions................................................................................................................................ 43 Counting ................................................................................................................................. 43 Measuring .............................................................................................................................. 44 Position detection for motion control...................................................................................... 45 Additional functions ................................................................................................................ 46 Configuring the high-speed counters ..................................................................................... 47 General .................................................................................................................................. 47 Assignment of the control interface of the high-speed counters............................................ 47 Assignment of the feedback interface of the high-speed counters........................................ 50
3.2 3.2.1 3.2.1.1 3.2.1.2 3.2.1.3 3.2.2 3.2.2.1 3.2.2.2 3.2.3 3.2.3.1 3.2.3.2 3.2.3.3
Pulse generators .................................................................................................................... 51 Operating modes.................................................................................................................... 51 Operating mode: Pulse-width modulation (PWM).................................................................. 51 Operating mode: Frequency output ....................................................................................... 58 Operating mode: PTO ............................................................................................................ 62 Functions................................................................................................................................ 67 Function: High-speed output.................................................................................................. 67 Function: Direct control of the pulse output (DQA) ................................................................ 68 Configuring the PWM and frequency output modes .............................................................. 69 Assignment of the control interface........................................................................................ 69 Handling the SLOT parameter (control interface).................................................................. 71 Assignment of the feedback interface.................................................................................... 75
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
6
Manual, 12/2017, A5E40898741-AA
Table of contents
4 Wiring ................................................................................................................................................... 77
4.1
Supply voltage ........................................................................................................................77
4.2
PROFINET interfaces .............................................................................................................78
4.3 4.3.1 4.3.2 4.3.3 4.3.4 4.3.5
4.3.6 4.3.7 4.3.8
Terminal and block diagrams..................................................................................................80 Block diagram of the CPU part ...............................................................................................80 Terminal and block diagram of the analog on-board I/O ........................................................81 Terminal and block diagram of the digital on-board I/O..........................................................90 Addresses of the high-speed counters .................................................................................104 Addresses of the pulse generators in the Pulse Width Modulation (PWM) and Frequency Output modes .....................................................................................................107 Addresses of pulse generators in the PTO mode.................................................................108 Interconnection overview of the inputs .................................................................................109 Interconnection overview of outputs .....................................................................................111
5 Parameters/address space ................................................................................................................. 114
5.1
Address space of the analog on-board I/O ...........................................................................114
5.2
Address space of the digital on-board I/O ............................................................................116
5.3
Address space of the pulse generators ................................................................................119
5.4
Measurement types and measuring ranges of the analog on-board I/O ..............................120
5.5
Output type and output ranges of the analog on-board I/O ..................................................121
5.6
Parameters of the analog on-board I/O ................................................................................122
5.7
Parameters of the digital on-board I/O..................................................................................125
6 Interrupts/diagnostics alarms............................................................................................................... 127
6.1 6.1.1 6.1.2 6.1.3
Status and error displays ......................................................................................................127 Status and error displays of the CPU part ............................................................................127 Status and error displays of the analog on-board I/O...........................................................130 Status and error displays of the digital on-board I/O ............................................................132
6.2 6.2.1 6.2.2 6.2.3
Interrupts and diagnostics.....................................................................................................134 Interrupts and diagnostics of the CPU part...........................................................................134 Interrupts and diagnostics of the analog on-board I/O .........................................................135 Interrupts and diagnostics of the digital on-board I/O...........................................................138
7 Technical specifications ...................................................................................................................... 141
A Dimension drawings............................................................................................................................ 164
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
7
Table of contents
B Parameter data records .......................................................................................................................166
B.1
Parameter assignment and structure of the parameter data records of the analog on-
board I/O .............................................................................................................................. 166
B.2
Structure of a data record for input channels of the analog on-board I/O ........................... 166
B.3
Structure of a data record for output channels of the analog on-board I/O ......................... 172
B.4
Parameter assignment and structure of the parameter data records of the digital on-
board I/O .............................................................................................................................. 175
B.5
Structure of a data record for input channels of the digital on-board I/O............................. 176
B.6
Structure of a data record for output channels of the digital on-board I/O........................... 178
B.7
Parameter data records of the high-speed counters ........................................................... 180
B.8
Parameter data records (PWM) ........................................................................................... 187
C Analog value processing ......................................................................................................................189
C.1
Conversion method .............................................................................................................. 189
C.2
Representation of analog values ......................................................................................... 196
C.3 C.3.1 C.3.2 C.3.3
C.3.4
Representation of input ranges............................................................................................ 197 Representation of analog values in voltage measuring ranges ........................................... 198 Representation of analog values in current measuring ranges ........................................... 199 Representation of the analog values of resistance-type sensors/resistance-type thermometers ....................................................................................................................... 200 Measured values for wire break diagnostics........................................................................ 202
C.4 C.4.1 C.4.2
Representation of output ranges.......................................................................................... 203 Representation of analog values in the voltage output ranges............................................ 204 Representation of analog values in the current output ranges ............................................ 205
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
8
Manual, 12/2017, A5E40898741-AA
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
9
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
10
Manual, 12/2017, A5E40898741-AA
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
11
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
12
Manual, 12/2017, A5E40898741-AA
Product overview
2
2.1
Applications of the S7-1500 CPUs
Application area
The SIMATIC S7-1500 is the modular control system for numerous automation applications in discrete automation.
The modular and fanless design, the simple implementation of distributed structures and the user-friendly handling transform the SIMATIC S7-1500 into a cost-effective and convenient solution for various tasks.
Areas of application of the SIMATIC S7-1500 are, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automotive
Water/waste water
Food & Beverage
Areas of application of the SIMATIC S7-1500T are, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
The high immunity to noise and high resistance to shock and vibration stress make the SIMATIC S7-1500 suitable for universal use.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
13
Product overview 2.1 Applications of the S7-1500 CPUs
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and medium-sized applications, as well as for the highend range of machine and plant automation.
Table 2- 1 Standard CPUs
CPU
CPU 1511-1 PN
CPU 1513-1 PN
CPU 1515-2 PN
CPU 1516-3 PN/DP
CPU 1517-3 PN/DP
CPU 1518-4 PN/DP CPU 1518-4 PN/DP MFP
Performance segment
Standard CPU for small- to medium-sized applications Standard CPU for mediumsized applications Standard CPU for small- to medium-sized applications Standard CPU for high-end applications and communication tasks Standard CPU for high-end applications and communication tasks Standard CPU for highperformance applications, demanding communications tasks and very short reaction times
PROFIBUS interfaces
---1
1
1
PROFINET I O RT/IRT interface 1 1 1 1
1
1
PROFINET IO RT inter-
face --1 1
1
1
PROFINET basic func-
tionality -----
--
1
Work memory 1.15 MB 1.8 MB 3.5 MB
6 MB
10 MB
24 MB
Processing time for bit operations
60 ns 40 ns 30 ns 10 ns
2 ns
1 ns
Table 2- 2 Compact CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic functionality
CPU 1511C-1 PN Compact CPU for small to
--
1
--
--
medium applications
CPU 1512C-1 PN Compact CPU for medium
--
1
--
--
applications
Work memory 1.175 MB
Processing time for bit operations 60 ns
1.25 MB
48 ns
Table 2- 3 Fail-safe CPUs
CPU
Performance segment
CPU 1511F-1 PN
CPU 1511TF-1 P N
Fail-safe CPU for smaller to medium-sized applications
Fail-safe technology CPU for small to mid-range applications
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
--
1
--
--
--
1
--
--
Work memory 1.225 MB
Processing time for bit operations 60 ns
1.225 MB
60 ns
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
14
Manual, 12/2017, A5E40898741-AA
Product overview 2.1 Applications of the S7-1500 CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
CPU 1513F-1 PN Fail-safe CPU for medium-
--
1
--
--
sized applications
CPU 1515F-2 PN Fail-safe CPU for medium-
--
1
1
--
sized to large applications
CPU 1515TF-2 Fail-safe technology CPU
--
1
1
--
PN
for demanding applications
and communication tasks
CPU 1516F-3
Fail-safe CPU for demand-
1
1
1
--
PN/DP
ing applications and com-
munications tasks
CPU 1516TF-3 Fail-safe technology CPU
1
1
1
--
PN/DP
for demanding applications
and communication tasks
CPU 1517F-3
Fail-safe CPU for demand-
1
1
1
--
PN/DP
ing applications and com-
munications tasks
CPU 1517TF-3 Fail-safe technology CPU
1
1
1
--
PN/DP
for demanding applications
and communication tasks
CPU 1518F-4
Fail-safe CPU for high-
1
1
1
1
PN/DP
performance applications,
CPU 1518F-4 PN/DP MFP
demanding communications tasks and very short reaction times
Work memory 1.95 MB
Processing time for bit operations 40 ns
3.75 MB
30 ns
3.75 MB
30 ns
6.5 MB
10 ns
6.5 MB
10 ns
11 MB
2 ns
11 MB
2 ns
26 MB
1 ns
Table 2- 4 Technology CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
CPU 1511T-1 PN Technology CPU for small-
--
1
--
--
to medium-sized applica-
tions
CPU 1515T-2 PN Technology CPU for mid-
--
1
1
--
range to large applications
CPU 1516T-3
Technology CPU for high-
1
1
1
--
PN/DP
end applications and
communication tasks
CPU 1517T-3
Technology CPU for high-
1
1
1
--
PN/DP
end applications and
communication tasks
CPU 1511TF-1 PN
These CPUs are described in the fail-safe CPUs
CPU 1515TF-2 PN
CPU 1516TF-3 PN/DP
CPU 1517TF-3 PN/DP
Work memory 1.225 MB
Processing time for bit operations 60 ns
3.75 MB 6.5 MB
30 ns 10 ns
11 MB
2 ns
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
15
Product overview 2.1 Applications of the S7-1500 CPUs
Performance segments of compact CPUs
The compact CPUs can be used for smaller to medium-sized applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the differences in performance between the two compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Frequency meter Period duration measurement Pulse width modulation (PWM output)
Pulse Train Output (PTO output) Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
16
Manual, 12/2017, A5E40898741-AA
Product overview 2.1 Applications of the S7-1500 CPUs
Integrated Motion Control technology functions
All CPUs of SIMATIC S7-1500 support Motion Control technology functions. STEP 7 offers Motion Control instructions standardized according to PLCopen for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axes Positioning axes Synchronous axes External encoders Output cams Cam tracks Measuring inputs The technology CPUs of the SIMATIC S7-1500 offer enhanced Motion Control functions: Advanced synchronization functions
Synchronization with specification of the synchronous position Actual value coupling Shifting of the master value at following axis Camming Up to 4 encoders or measuring systems as actual position for position control The technology CPUs of the SIMATIC S7-1500 additionally support the following technology objects: Cam Kinematics Cam Kinematics Controlling of kinematics, such as Cartesian portals Roller pickers Delta pickers SCARA Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
Additional integrated technology functions
For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags. In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
17
Product overview 2.1 Applications of the S7-1500 CPUs
Other technology functions
Technology modules also implement functions such as high-speed counting, position detection, measuring functions and pulse generators (PTO, PWM and frequency output). For compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and can be implemented without additional technology modules. SIWAREX is a versatile and flexible weighing module which you can use as a static scale for operation.
Security Integrated
In conjunction with STEP 7 (TIA Portal), each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks. The copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card are linked to its serial number so that the block can only be executed if the configured memory card is inserted in the CPU. In addition, four different authorization levels in the CPUs can be used to assign different access rights to various user groups. Improved manipulation protection allows the CPUs to detect changed or unauthorized transfers of the engineering data. The use of an Ethernet CP (CP 1543-1) provides the user with additional access protection by means of a firewall and/or the option of secured VPN connections.
Safety Integrated
The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and distributed. These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration also provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications. The fail-safe CPUs are certified for use in safety mode up to: Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010 Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to
EN ISO 13849-1:2008 Additional password protection for F-configuration and F-program is set up for IT security.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
18
Manual, 12/2017, A5E40898741-AA
Product overview 2.1 Applications of the S7-1500 CPUs
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Error messages are immediately shown on the display in plain text. In the case of servicing, plant downtimes are minimized by quick access to diagnostics alarms. Detailed information about this and a multitude of other display functions is available in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
Uniform front connectors for all modules and integrated potential jumpers for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and modularly with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as the easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and messages
Integrated system diagnostics is enabled by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7 (TIA Portal), on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostics information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server in up to three project languages. The HMI takes over the display in the project languages specified for the CPU. If you require message texts in additional languages, you can load these via the configured connection to your HMI. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
19
Product overview 2.2 Hardware properties and firmware functions
2.2
Hardware properties and firmware functions
The CPU 1512C-1 PN consists of a CPU part, an analog on-board I/O module (X10) and a digital on-board I/O module (X11 and X12). When configured in the TIA Portal, the compact CPU therefore occupies a single shared slot (slot 1).
The properties and functions of the CPU part and the analog and digital on-board I/O modules can be found in the subsections below. The properties describe the hardware features of the CPU part and the analog and digital on-board I/O modules. The functions describe the functions of the firmware of the CPU part and the analog and digital on-board I/O modules.
Article number
6ES7512-1CK01-0AB0
Accessories
The following accessories are included in the scope of delivery and can also be ordered separately as spare parts: 3 x front connector (push-in terminals) including cable ties 3 x shield clamp 3 x shield terminal 3 x infeed element (push-in terminals) 3 x labeling strip 3 x universal front cover For more information on accessories, refer to the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
20
Manual, 12/2017, A5E40898741-AA
Product overview 2.2 Hardware properties and firmware functions
2.2.1
Hardware properties of the CPU part
View of the CPU
The figure below shows the CPU part of the CPU 1512C-1 PN.
Figure 2-1 CPU 1512C-1 PN
Note Protective film Note that a protective film is attached to the display of the CPU when shipped from the factory. Remove the protective film if necessary.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
21
Product overview 2.2 Hardware properties and firmware functions
Properties
The CPU 1512C-1 PN has the following technical properties:
Property CPU display
Supply voltage PROFINET IO PROFINET interface (X1 P1 R and X1 P2 R)
Operation of the CPU as · IO controller · I-device
Description
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides information on order numbers, firmware version and serial numbers of all connected modules. In addition, you can set the IP address of the CPU and carry out further network settings. The display shows occurring error messages directly in plain text.
In addition to the functions listed here, a multitude of other functions that are described in the SIMATIC S71500 Display Simulator are shown on the display.
A 4-pole connection plug that is located at the front of the CPU supplies the 24 V DC supply voltage.
Additional information
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
· SIMATIC S7-1500 Display Simulator (http://www.automation.siemens. com/salesmaterial-as/interactivemanuals/getting-started_simatics7-1500/disp_tool/start_en.html)
· Chapter Wiring (Page 77)
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
The X1 interface has two ports (P1 R and P2 R). In addition to basic PROFINET functionality, its also supports PROFINET IO RT (real time) and IRT (isochronous real time), which means you can configure PROFINET IO communication or real-time settings on the interface.
PROFINET function manual (http://support.automation.siemens.c om/WW/view/en/68039307)
Port 1 and Port 2 can also be used as ring ports for the configuration of redundant ring structures in Ethernet (media redundancy).
Basic PROFINET functionality comprises:
· HMI communication
· Communication with the configuration system
· Communication with a higher-level network (backbone, router, Internet)
· Communication with another machine or automation cell
· IO controller: As an IO controller the CPU addresses the connected IO devices
· I-device: As an I-device (intelligent IO device) the CPU is assigned to a higher-level IO controller and is used in the process as an intelligent pre-processing unit of sub-processes
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
22
Manual, 12/2017, A5E40898741-AA
Product overview 2.2 Hardware properties and firmware functions
2.2.2
Firmware functions of the CPU part
Functions
The CPU 1512C-1 PN supports the following functions:
Function Integrated system diagnostics Integrated Web server
Integrated trace functionality
OPC UA
Configuration control
Description
Additional information
The system automatically generates the messages for the system diagnostics and outputs these messages via a programming device/PC, HMI device, the Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
Diagnostics function manual (http://support.automation.siemens.c om/WW/view/en/59192926)
The Web server lets you access the CPU data by
·
means of a network. Evaluations, diagnostics, and
modifications are thus possible over long distances.
Monitoring and evaluation is possible without STEP 7; all you need is a Web browser. Make sure that you take ·
appropriate measures (e.g. limiting network access,
using firewalls) to protect the CPU from being compro-
mised.
Web server function manual (http://support.automation.sieme ns.com/WW/view/en/59193560)
Security with SIMATIC S7 controllers system manual (https://support.industry.siemens. com/cs/ww/en/view/90885010)
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
Using the trace and logic analyzer function function manual (http://support.automation.siemens.c om/WW/view/en/64897128)
The device saves the recordings. You can read out and permanently save the recordings with the configuration system (ES), if required. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes.
The trace record can also be displayed through the Web server.
With OPC UA, data is exchanged via an open and vendor-neutral communication protocol. The CPU can act as an OPC UA DA server. The CPU can communicate with OPC UA clients as an OPC UA server.
Communication function manual (https://support.industry.siemens.co m/cs/ww/en/view/59192925)
Through OPC UA Companion Specification, the methods can be specified uniformly and independently of manufacturers. The specified methods enable you to integrate devices from various manufacturers more easily into your plants and production processes.
You can use configuration control to operate different real hardware configurations with a configured maximum configuration of the hardware. This means that, in series machine manufacturing in particular, you have the option of operating/configuring different configuration variants of a machine with a single project.
S7-1500, ET 200MP system manual (http://support.automation.siemens.c om/WW/view/en/59191792)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
23
Product overview 2.2 Hardware properties and firmware functions
Function PROFINET IO RT (real time) IRT (isochronous real time)
Isochronous mode
MRP (Media Redundancy Protocol)
MRPD (Media Redundancy with Planned Duplication)
Shared device
Description
Additional information
RT prioritizes PROFINET IO telegrams over standard telegrams. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet telegrams.
PROFINET function manual (http://support.automation.siemens.c om/WW/view/en/49948856)
A reserved bandwidth within the send clock is available for IRT data. The reserved bandwidth ensures that the IRT data can be transmitted in time-synchronized intervals, unaffected by other high network loading (e.g. TCP/IP communication or additional real time communication). Update times with maximum determinism can be realized through IRT. Isochronous applications are possible with IRT.
The Isochronous mode system property acquires measured values and process data and processes the signals in a fixed system clock. Isochronous mode thus contributes to high control quality and hence to greater manufacturing precision. Isochronous mode reduces possible fluctuations of the process reaction times to a minimum. Time-assured processing makes higher machine cycles possible.
It is possible to establish redundant networks via the Media Redundancy Protocol. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails. The PROFINET devices that are part of this redundant network form an MRP domain.
RT operation is possible with the use of MRP.
The advantage of the MRP extension MRPD is that, in the event of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no reconfiguration time.
The "Shared device" function allows you to divide the modules or submodules of an IO device up among different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required. The "Shared device" function allows the modules or submodules of an IO device to be divided up among different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules that are physically close to each other in one IO device.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
24
Manual, 12/2017, A5E40898741-AA
Product overview 2.2 Hardware properties and firmware functions
Function PROFIenergy Integrated technology Motion Control
Integrated closed-loop control functionality
Description
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. The majority of the energy is saved by the process; the PROFINET device itself only contributes a few watts of savings potential.
Additional information
S7-1500 CPUs support the controlled positioning and · traveling of axes via S7-1500 Motion Control functions by means of the following technology objects:
· Speed-controlled axes, positioning axes, synchronized axes, external encoders, cams, cam tracks and measuring inputs.
· Speed-controlled axis for controlling a drive with speed specification
· Positioning axis for position-controlled positioning of a drive
· Synchronous axis to interconnect with a master value. The axis is synchronized to the master axis position.
· External encoder for detecting the actual position of an encoder and its use as a master value for synchronous operation
· Cams, cam track for position-dependent generation of switching signals
· Measuring input for fast, accurate and eventdependent sensing of actual positions
Section Technology functions (Page 42)
S7-1500 Motion Control function manual (http://support.automation.sieme ns.com/WW/view/en/109749262)
· PID Compact (continuous PID controller)
PID control function manual
·
PID 3Step (step controller for integrating actuators)
(https://support.industry.siemens.co m/cs/ww/en/view/108210036)
· PID Temp (temperature controller for heating and
cooling with two separate actuators)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
25
Product overview 2.2 Hardware properties and firmware functions
Function Integrated safety Know-how protection Copy protection Access protection Integrity protection
Password provider
Description
Additional information
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
S7-1500, ET 200MP system manual (http://support.automation.siemens.c om/WW/view/en/59191792)
You can use authorization levels to assign separate rights to different users.
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between TIA Portal and CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password input you can connect a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 reads the password automatically for the blocks. This saves you time.
· Optimum block protection because the users do not know the password itself.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
26
Manual, 12/2017, A5E40898741-AA
2.2.3 View
Product overview 2.2 Hardware properties and firmware functions
Hardware properties of the analog on-board I/O module
The following figure shows the analog on-board I/O (X10) of the CPU 1512C-1 PN.
Figure 2-2 Analog on-board I/O
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
27
Product overview 2.2 Hardware properties and firmware functions
Properties of the analog inputs
The 5 inputs of the analog on-board I/O module have the following properties:
Property
Description
Additional information
Resolution: 16 bits includ- A CPU processes information exclusively in digital
· Chapter Analog value pro-
ing sign
format. An ADC (analog-to-digital converter) integrated
cessing
into the analog on-board I/O module therefore converts the analog value into a bit pattern. For the CPU, this
·
Analog value processing function
conversion always returns a 16-bit word for SIMATIC
manual
products. The ADC used digitalizes the analog signal
(http://support.automation.sieme
and approximates its value with a stepped curve. The
ns.com/WW/view/en/67989094)
resolution specifies the number of increments of the
analog value along this stepped curve here.
Integrated types of measuring
Controllers are only capable of processing analog values in the form of bit patterns. For this purpose, transducers which can be connected to the analog module measure physical variables such as pressure or temperature. This analog value is measured by the analog input module in the form of the measurement types current, voltage or resistance. The analog on-board I/O module supports the following measurement types on the following channels.
· Voltage measurement type can be set individually for channel 0 to 3
· Current measurement type can be set individually for channel 0 to 3
· Resistor measurement type can be set for channel 4
· Thermal resistor measurement type can be set for channel 4
Configurable diagnostics Hardware interrupt
The analog on-board I/O module can diagnose errors. The module reports the diagnosed state to the CPU using a diagnostics error interrupt. Different types of diagnostics are available that you can parameterize channel-granularly.
You can react to process events (such as negative/positive exceeding of specific limits) through the configuration of a hardware interrupt. Hardware interrupts can be parameterized channel-granularly.
Chapter Parameters of the analog on-board I/O (Page 122)
· Chapter Parameters of the analog on-board I/O (Page 122)
· Chapter Structure of a data record for input channels of the analog on-board I/O (Page 166)
· STEP 7 online help
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
28
Manual, 12/2017, A5E40898741-AA
Product overview 2.2 Hardware properties and firmware functions
Properties of the analog outputs
The 2 outputs of the analog on-board I/O module have the following properties:
Property Resolution: 16 bits including sign
Integrated output types
Configurable diagnostics
Description
Additional information
Once the CPU has processed the digital signal, a DAC ·
(digital-to-analog converter) integrated in the analog on-
board I/O module converts the output signal to an analog current or voltage value. The resulting value of the
·
output signal corresponds to the output value with
which the analog on-board I/O module controls the
analog actuators.
Chapter Analog value processing
Analog value processing function manual (http://support.automation.sieme ns.com/WW/view/en/67989094)
With the selection of the type of output you specify whether the digital-to-analog converter is to convert the output signal into the type of output "Current" or "Voltage". The output can be selected by individual channel.
The analog on-board I/O module can diagnose errors. The module reports the diagnosed state to the CPU using a diagnostics error interrupt. Different types of diagnostics are available that you can parameterize channel-granularly.
Chapter Parameters of the analog on-board I/O (Page 122)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
29
Product overview 2.2 Hardware properties and firmware functions
2.2.4
Firmware functions of the analog on-board I/O module
Functions of the analog inputs
The 5 inputs of the analog on-board I/O module have the following functions:
Function Reconfiguration in RUN
Support of the value status (Quality Information, QI)
Description
You have the option of reassigning parameters for the ·
analog on-board I/O module in RUN (for example,
measuring ranges of individual channels can be modi-
fied in RUN without affecting the other channels).
·
Additional information
Chapter Parameters of the analog on-board I/O (Page 122)
Chapter Parameter assignment and structure of the parameter data records of the analog onboard I/O (Page 166)
Value status = 1 ("Good") indicates that the value of the assigned input at the terminal is valid.
Value status = 0 ("Bad") indicates that the read value is not valid.
Chapter Address space of the analog on-board I/O (Page 114)
Functions of the analog outputs
The 2 outputs of the analog on-board I/O module have the following functions:
Function Reconfiguration in RUN
Support of the value status (Quality Information, QI)
Description
You have the option of reassigning parameters for the ·
analog on-board I/O module in RUN (for example,
output ranges of individual channels can be modified in RUN without affecting the other channels).
·
Additional information
Chapter Parameters of the analog on-board I/O (Page 122)
Chapter Parameter assignment and structure of the parameter data records of the analog onboard I/O (Page 166)
Value status = 1 ("Good") indicates that the process value specified by the user program is correctly output at the terminal.
Value status = 0 ("Bad") indicates that the process value output at the hardware output is incorrect.
Chapter Address space of the analog on-board I/O (Page 114)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
30
Manual, 12/2017, A5E40898741-AA
2.2.5 View
Product overview 2.2 Hardware properties and firmware functions
Hardware properties of the digital on-board I/O module
The following figure shows the digital on-board I/O (X11 and X12) of the CPU 1512C-1 PN.
Figure 2-3 Digital on-board I/O
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
31
Product overview 2.2 Hardware properties and firmware functions
Properties of the digital inputs
The digital inputs of the digital on-board I/O module have the following properties:
Property Standard and high-speed inputs
Configurable diagnostics
Hardware interrupt
Description
Additional information
The digital on-board I/O module has 32 high-speed inputs for signals up to a max. of 100 kHz. The inputs can be used as standard inputs and as inputs for technology functions.
Section Wiring (Page 77)
The inputs have a rated input voltage of 24 V DC.
The inputs are suitable for switches and 2-/3-/4-wire proximity switches.
The digital on-board I/O module is able to diagnose errors. The module reports the diagnosed state to the CPU using a diagnostics error interrupt. You can parameterize the type of diagnostics channel-specifically.
Section Parameters of the digital onboard I/O (Page 125)
You can react to process events (such as positive
Section Parameters of the digital on-
edge, negative edge) through the configuration of a
board I/O (Page 125)
hardware interrupt. Hardware interrupts can be parame- Section Structure of a data record
terized channel-granularly.
for input channels of the digital on-
board I/O (Page 176)
STEP 7 online help
Properties of the digital outputs
The digital outputs of the digital on-board I/O module have the following properties:
Property
Description
Configurable diagnostics
The digital on-board I/O module is able to diagnose errors. The module reports the diagnosed state to the CPU using a diagnostics error interrupt. You can parameterize the type of diagnostics channel-specifically.
Standard and high-speed outputs
Standard outputs
The digital on-board I/O module has 16 standard outputs.
High-speed outputs
Of the 32 standard outputs you can also use 8 outputs as high-speed outputs for technology functions.
Rated output voltage
The outputs have a rated output voltage of 24 V DC.
Output frequencies and output currents
Rated output current as output for standard mode: 0.5 A per channel.
As an output for technology functions, you can select between an output current of up to 0.5 A at an output frequency up to 10 kHz (load dependent) and a reduced output current of max. 0.1 A at an increased output frequency of up to 100 kHz.
Additional information Section Interconnection overview of outputs (Page 111)
Section Wiring (Page 77)
Section Interconnection overview of outputs (Page 111)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
32
Manual, 12/2017, A5E40898741-AA
Product overview 2.2 Hardware properties and firmware functions
Property Application Driver blocks X11
Driver blocks X12
Description
Additional information
The outputs are suitable for, e.g. solenoid valves, DC contactors and indicator lights, or also for signal transmission or proportional valves.
The digital outputs of the digital onboard I/O X11 have driver blocks with parasitic diodes. In principle, parasitic diodes have an effect when switching off inductive loads such as freewheeling diodes. The shutdown voltage is limited to -0.8 V. Therefore, the demagnetization of inductive loads takes longer and can be approximately calculated using the following formula.
Section Terminal and block diagram of the digital on-board I/O (Page 90)
tau = L / R (tau= time constant, L = inductance value, R = ohmic resistance value)
After the expiration of a period of 5 * tau, the current has decreased in effect to 0 A due to the inductive load.
The maximum value is derived from:
tau = 1.15H / 48 Ohm = 24 ms. After 5 * 24 ms = 120 ms, the current has decreased in effect to 0 A.
For comparison: With standard modules, inductive shutdown voltage is limited, for example, to Vcc -53 V (supply voltage 53 V), which causes the current to decrease to 0 A after about 15 ms.
The driver blocks of the outputs from the digital inboard I/O X12 have no freewheeling diodes.
The cut-off voltage is -29 V. Inductive loads are therefore demagnetized faster than for X11.
If ground is interrupted, no unwanted current flows through the digital outputs to the ground.
Simultaneous use of technology and standard functions
You can use technology and standard functions at the same time, provided the hardware allows this. For example, all the digital inputs not assigned to the counting, measuring or position detection or PTO technology functions can be used as standard DI.
Inputs to which technology functions are assigned can be read. Outputs to which technology functions are assigned cannot be written.
See also
Parameter assignment and structure of the parameter data records of the digital on-board I/O (Page 175)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
33
Product overview 2.2 Hardware properties and firmware functions
2.2.6
Firmware functions of the digital on-board I/O module
Functions of the digital inputs
The digital inputs of the digital on-board I/O module have the following functions:
Function Technology functions
Reconfiguration in RUN
Support of the value status (Quality Information, QI)
Description
Additional information
The high-speed digital inputs of the digital on-board Chapter Technology functions I/O module support technology functions such as fast (Page 42) counting, measuring, position detection and pulse generators (PWM, PTO and frequency output). Due to the supported technology functions, the compact CPUs are suitable for controlling pumps, fans, mixers, conveyor belts, lifting platforms, gate control systems, building management systems, synchronized axes, etc.
You have the option of reassigning parameters for the ·
digital on-board I/O module in RUN (for example,
values for input delay of individual channels can be modified without affecting the other channels).
·
Chapter Parameters of the digital on-board I/O (Page 125)
Chapter Parameter assignment and structure of the parameter data records of the digital onboard I/O (Page 175)
Value status = 1 ("Good") indicates that the value of the assigned input at the terminal is valid.
Value status = 0 ("Bad") indicates that no/too little supply voltage L+ is applied at the terminal and that the read value is therefore not valid.
Chapter Address space of the digital on-board I/O (Page 116)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
34
Manual, 12/2017, A5E40898741-AA
Product overview 2.2 Hardware properties and firmware functions
Functions of the digital outputs
The digital outputs of the digital on-board I/O module have the following functions:
Function Technology functions
Reconfiguration in RUN
Support of the value status (Quality Information, QI)
Description
Additional information
The high-speed digital outputs of the digital on-board I/O module support technology functions such as fast counting, measuring, position detection and pulse generators (PWM, PTO and frequency output). Due to the supported technology functions, the compact CPUs are suitable for controlling pumps, fans, mixers, conveyor belts, lifting platforms, gate control systems, building management systems, synchronized axes, etc.
Chapter Technology functions (Page 42)
You have the option of reassigning parameters for the ·
digital on-board I/O module in RUN (for example,
behavior during CPU STOP, without affecting the
other channels).
·
Chapter Parameters of the digital on-board I/O (Page 125)
Chapter Parameter assignment and structure of the parameter data records of the digital onboard I/O (Page 175)
Value status = 1 ("Good") indicates that the process value specified by the user program is correctly output at the terminal.
Value status = 0 ("Bad") indicates that the process value output at the hardware output is incorrect or the channel is used for technology functions.
Chapter Address space of the digital on-board I/O (Page 116)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
35
Product overview 2.3 Operator controls and display elements
2.3
Operator controls and display elements
2.3.1
Front view with closed front panel
The following figure shows the front view of the CPU 1512C-1 PN.
LEDs for the current operating mode and diagnostics status of the CPU Status and error displays RUN/ERROR of the analog on-board I/O Status and error displays RUN/ERROR of the digital on-board I/O Control keys Display
Figure 2-4 View of the CPU 1512C-1 PN with closed front panels (front)
Note Temperature range for display To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down again, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU. You can find additional information on the temperatures at which the display switches itself on and off in the Technical specifications (Page 141).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
36
Manual, 12/2017, A5E40898741-AA
Product overview 2.3 Operator controls and display elements
Removing and fitting the front panel or the display
You can remove and fit the front panel or the display during operation. The CPU retains its operating mode when the front panel is pulled and plugged.
WARNING Personal injury and damage to property may occur If you pull or plug the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Before you pull or plug the front panel in hazardous area zone 2, always ensure that the S7-1500 automation system is de-energized. The CPU maintains its operating mode.
Locking the front panel
You can lock the front panel to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a hoop diameter of 3 mm to the front panel.
Reference
Figure 2-5 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. For more information on the display, the configurable protection levels and the local lock, refer to the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
37
Product overview 2.3 Operator controls and display elements
2.3.2
Front view of the CPU without front panel and view from below
The following figure shows the operator control and connection elements of the CPU 1512C-1 PN with the front cover of the CPU open.
LEDs for the current operating mode and diagnostics status of the CPU Status and error displays RUN/ERROR of the analog on-board I/O Status and error displays RUN/ERROR of the digital on-board I/O Connector for power supply Operating modes with "STOP ACTIVE" LED LEDs for the 2 ports (X1 P1 and X1 P2) of the PROFINET interface X1 MAC address Display
Figure 2-6 View of the CPU 1512C-1 PN without front panel on the CPU (front)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
38
Manual, 12/2017, A5E40898741-AA
Product overview 2.3 Operator controls and display elements
Slot for the SIMATIC memory card PROFINET IO interface (X1) with 2 ports Connection for supply voltage Fastening screw
Figure 2-7 View of the CPU 1512C-1 PN bottom
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
39
Product overview 2.3 Operator controls and display elements
2.3.3
Rear view
The following figure shows the connection elements on the rear of the CPU 1512C-1 PN.
Shield contact surfaces Plug-in connection for power supply Plug-in connection for backplane bus Fastening screws
Figure 2-8 View of the CPU 1512C-1 PN - rear
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
40
Manual, 12/2017, A5E40898741-AA
Product overview 2.4 Operating mode buttons
2.4
Operating mode buttons
You use the operating mode buttons to set the operating mode of the CPU.
The following table shows the meaning of the corresponding operation of the operating mode buttons.
Table 2- 5 Meaning of the operating mode buttons
Operation of the operating mode buttons RUN
STOP
Meaning
RUN mode STOP mode
MRES
1. Press the operating mode button STOP.
Result: The RUN/STOP LED lights up yellow. 2. Press the operating mode button STOP until the RUN/STOP LED lights up for the 2nd time and remains continuously lit (this takes three seconds). After this, release the button. 3. Press the operating mode button STOP again within the next three seconds.
Manual memory reset
(with inserted SIMATIC memory card)
or
Reset to factory settings (without inserted SIMATIC memory card):
Explanation
The CPU executes the user program. The user program is not executed. (STOP ACTIVE LED lights up). The CPU executes memory reset.
or The CPU is reset to its factory settings. You can find additional information in the S7-1500/ET 200MP system manual (https://support.industry.siemens.com/cs/ww/en/vi ew/59191792).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
41
Technology functions
3
3.1
High-speed counters
Properties
The technology functions of the compact CPU have the following technical properties: 32 high-speed digital inputs (up to 100 kHz), isolated
6 high-speed counters (High Speed Counter/HSC), which can all be used as A/B/N Interfaces
24 V encoder signals of sourcing or push-pull encoders and sensors 24 V encoder supply output, short-circuit-proof Up to 2 additional digital inputs per high-speed counter for possible HSC DI functions
(Sync, Capture, Gate) 1 digital output per high-speed counter for fast reaction to the count Counting range: 32 bits Diagnostics and hardware interrupts can be configured Supported encoder/signal types 24 V incremental encoder
(with 2 tracks A and B, phase-shifted by 90°, up to 6 incremental encoders also with zero track N) 24 V pulse encoder with direction signal 24 V pulse encoder without direction signal 24 V pulse encoder each for forward pulse & reverse pulse The high-speed counters support reconfiguration in RUN. You can find additional information in section Parameter data records of the high-speed counters (Page 180).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
42
Manual, 12/2017, A5E40898741-AA
Technology functions 3.1 High-speed counters
3.1.1
Functions
3.1.1.1
Counting
Counting refers to the detection and adding up of events. The counters acquire and evaluate encoder signals and pulses. You can specify the count direction using encoder or pulse signals or through the user program. You can control counting processes using the digital inputs. You can switch the digital outputs exactly at defined count values, regardless of the user program. You can configure the response of the counters using the functionalities described below.
Counting limits
The counting limits define the count value range used. The counting limits are selectable and can be modified during runtime by the user program. The highest counting limit that can be set is 2147483647 (2311). The lowest counting limit that can be set is 2147483648 (231). You can configure the response of the counter at the counting limits:
Continue or stop counting (automatic gate stop) on violation of a counting limit
Set count value to start value or to opposite counting limit on violation of a counting limit
Start value
You can configure a start value within the counting limits. The start value can be modified during runtime by the user program. Depending on the parameter assignment, the compact CPU can set the current count value to the start value during synchronization, during the Capture function, on violation of a counting limit or when the gate is opened.
Gate control
Opening and closing the hardware gate and software gate defines the period of time during which the counting signals are acquired. The digital inputs of the digital on-board I/O control the hardware gate. The user program controls the software gate. You can enable the hardware gate using the parameter assignment. The software gate (bit in the control interface of the cyclic I/O data) cannot be disabled.
Capture
You can configure an external reference signal edge that triggers the saving of the current count value as a Capture value. The following external signals can trigger the Capture function: Rising or falling edge of a digital input Both edges of a digital input Rising edge of signal N at the encoder input
You can configure whether counting continues from the current count value or from the start value after the Capture function.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
43
Technology functions 3.1 High-speed counters
Hysteresis
You can specify hysteresis for the comparison values, within which a digital output is prevented from switching again. An encoder may stop at a certain position, and slight movements may make the count value fluctuate around this position. If a comparison value or a counting limit lies within this fluctuation range, the corresponding digital output will be switched on and off often if hysteresis is not used. The hysteresis prevents these unwanted switching operations.
Reference
For more information on the counter, refer to the S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection function manual (http://support.automation.siemens.com/WW/view/en/59709820).
3.1.1.2
Measuring
Measuring functions
The following measuring functions are available:
Table 3- 1 Overview of available measuring functions
Measurement type Frequency measurement Period measurement
Velocity measurement
Description
A measuring interval calculates the average frequency based on the time sequence of the count pulses, and returns this frequency as a floating-point number in units of hertz.
A measuring interval calculates the average period duration based on the time sequence of the count pulses, and returns this period duration as a floating-point number in units of seconds.
A measuring interval calculates the average velocity based on the time sequence of the count pulses, and returns this velocity in the configured unit.
The measured value and count value are both available in the feedback interface.
Update time
You can configure the interval at which the compact CPU updates the measured values cyclically as the update time. Larger update times smooth uneven measured variables and increase the measuring accuracy.
Gate control
Opening and closing the hardware gate and software gate defines the period of time during which the count signals are acquired. The update time is asynchronous to the opening of the gate, which means that the update time is not started when the gate is opened. After the gate is closed, the last measured value calculated is still returned.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
44
Manual, 12/2017, A5E40898741-AA
Technology functions 3.1 High-speed counters
Measuring ranges
The measuring functions have the following measuring range limits:
Table 3- 2 Overview of low and high measuring range limits
Measurement type Frequency measurement Period measurement Velocity measurement
Low measuring range limit
High measuring range limit
0.04 Hz
400 kHz *
2.5 s *
25 s
Depending on the configured number of "increments per unit" and the "timebase for velocity measurement"
* Applies to 24 V incremental encoder and "quadruple" signal evaluation
All measured values are returned as signed values. The sign indicates whether the count value increased or decreased during the relevant time period. For example, a value of 80 Hz means that the count value decreases at 80 Hz.
Reference
For more information on measuring, refer to the S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection function manual (http://support.automation.siemens.com/WW/view/en/59709820).
3.1.1.3
Position detection for motion control
You can use the digital on-board I/O, e.g. with an incremental encoder, for position detection with S7-1500 Motion Control. The position input is based on the counting function, which evaluates the acquired encoder signals and provides them for S7-1500 Motion Control.
In the hardware configuration of the CPU 1512C-1 PN in STEP 7 (TIA Portal), select the "Position input for Motion Control" mode.
Reference
For a detailed description of the use of motion control and its configuration, refer to the S71500 Motion Control function manual (http://support.automation.siemens.com/WW/view/en/109749262). In the function module, the interface between the drives and encoders is referred to as a technology module (TM). In this context, a technology module (TM) also refers to the digital on-board I/O of the compact CPU described here.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
45
Technology functions 3.1 High-speed counters
3.1.1.4
Additional functions
Synchronization
You can configure an external reference signal edge to load the counter with the specified start value. The following external signals can trigger a synchronization:
Rising or falling edge of a digital input
Rising edge of signal N at the encoder input
Rising edge of signal N at the encoder input depending on the level of the assigned digital input
Comparison values
The integrated counter supports 2 comparison values and digital output HSC DQ1. If the counter or measured value meets the set comparison condition, HSC DQ1 can be set in order to trigger direct control operations in the process.
Both comparison values can be set in the parameters and can be changed during runtime by the user program.
Hardware interrupts
If you have enabled a hardware interrupt in the hardware configuration, the counter can trigger a hardware interrupt in the CPU when a comparison event occurs, if there is overflow or underflow, at a zero crossing of the counter, and/or at a change of count direction (direction reversal). You can specify which events are to trigger a hardware interrupt during operation in the hardware configuration.
Diagnostics interrupts
If you have enabled a diagnostics interrupt in the hardware configuration, the counter can trigger a diagnostics interrupt if the supply voltage is missing, if there is an incorrect A/B count signal or lost hardware interrupt.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
46
Manual, 12/2017, A5E40898741-AA
Technology functions 3.1 High-speed counters
3.1.2
Configuring the high-speed counters
3.1.2.1
General
You configure the high-speed counters (HSC) in STEP 7 (TIA Portal). The functions are controlled by the user program.
Reference
A detailed description of configuring the counting and measuring functions can be found in:
S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection (http://support.automation.siemens.com/WW/view/en/59709820) function manual
in the STEP 7 online help under "Using technology functions > Counting, measuring and position detection > Counting, measuring and position detection (S7-1500)"
A detailed description of configuring Motion Control be found in:
S7-1500 Motion Control (http://support.automation.siemens.com/WW/view/en/59381279) function manual
in the STEP 7 online help under "Using technology functions > Motion Control > Motion Control (S7-1500)"
3.1.2.2
Assignment of the control interface of the high-speed counters
The user program uses the control interface to influence the behavior of the high speed counter.
Note Operation with High_Speed_Counter technology object
The High_Speed_Counter technology object is available for high-speed counting mode. We therefore recommend use of the High_Speed_Counter technology object instead of the control interface/feedback interface for controlling the high speed counter.
For information on configuring the technology object and programming the associated instruction, refer to the S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection (http://support.automation.siemens.com/WW/view/en/59709820) function manual.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
47
Technology functions 3.1 High-speed counters
Control interface per channel
The following table shows the control interface assignment:
Table 3- 3 Assignment of the control interface
Offset from start address Bytes 0 to 3 Bytes 4 to 7 Byte 8
Byte 9
Parameter Slot 0 Slot 1 LD_SLOT_0*
LD_SLOT_1*
EN_CAPTURE EN_SYNC_DN EN_SYNC_UP SET_DQ1 SET_DQ0 TM_CTRL_DQ1 TM_CTRL_DQ0 SW_GATE
Meaning
Load value (meaning of the value is specified in LD_SLOT_0)
Load value (meaning of the value is specified in LD_SLOT_1)
Specifies the meaning of the value in Slot 0
Bit 3 Bit 2 Bit 1 Bit 0
0
0
0
0
No action, idle state
0
0
0
1
Load counter
0
0
1
0
Reserve
0
0
1
1
Load start value
0
1
0
0
Load comparison value 0
0
1
0
1
Load comparison value 1
0
1
1
0
Load low counting limit
0
1
1
1
Load high counting limit
1
0
0
0
Reserve
to
1
1
1
1
Specifies the meaning of the value in Slot 1
Bit 7 Bit 6 Bit 5 Bit 4
0
0
0
0
No action, idle state
0
0
0
1
Load counter
0
0
1
0
Reserve
0
0
1
1
Load start value
0
1
0
0
Load comparison value 0
0
1
0
1
Load comparison value 1
0
1
1
0
Load low counting limit
0
1
1
1
Load high counting limit
1
0
0
0
Reserve
to
1
1
1
1
Bit 7: Enable capture function
Bit 6: Enable downward synchronization
Bit 5: Enable upward synchronization
Bit 4: Set DQ1
Bit 3: Set DQ0
Bit 2: Enable technological function DQ1
Bit 1: Enable technological function DQ0
Bit 0: Software gate
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
48
Manual, 12/2017, A5E40898741-AA
Technology functions 3.1 High-speed counters
Offset from start address Byte 10
Byte 11
Parameter
SET_DIR RES_EVENT RES_ERROR
Meaning
Bit 7: Count direction (with encoder without direction signal) Bits 2 to 6: Reserve; bits must be set to 0 Bit 1: Reset of saved events Bit 0: Reset of saved error states Bits 0 to 7: Reserve; bits must be set to 0
* If values are loaded simultaneously via LD_SLOT_0 and LD_SLOT_1, the value from Slot 0 is taken first internally and then the value from Slot 1 . This may lead to unexpected intermediate states.
Reference
You can find a graphic representation of the processing of the various SLOT parameters in the section Handling the SLOT parameter (control interface) (Page 71).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
49
Technology functions 3.1 High-speed counters
3.1.2.3
Assignment of the feedback interface of the high-speed counters
The user program receives current values and status information from the high speed counter via the feedback interface.
Note Operation with High_Speed_Counter technology object
The High_Speed_Counter technology object is available for high-speed counting mode. We therefore recommend use of the technology object High_Speed_Counter instead of the control interface/feedback interface for controlling the high speed counter.
For information on configuring the technology object and programming the associated instruction, refer to the S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection (http://support.automation.siemens.com/WW/view/en/59709820) function manual.
Feedback interface per channel
The following table shows the feedback interface assignment:
Table 3- 4 Assignment of the feedback interface
Offset from start address Bytes 0 to 3 Bytes 4 to 7 Bytes 8 to 11 Byte 12
Byte 13
Byte 14
Parameter
COUNT VALUE CAPTURED VALUE MEASURED VALUE LD_ERROR ENC_ERROR POWER_ERROR STS_SW_GATE STS_READY LD_STS_SLOT_1 LD_STS_SLOT_0 RES_EVENT_ACK STS_DI2 STS_DI1 STS_DI0 STS_DQ1 STS_DQ0 STS_GATE STS_CNT STS_DIR
Meaning
Current count value Last Capture value acquired Current measured value Bits 3 to 7: Reserve; set to 0 Bit 2: Error when loading via control interface Bit 1: Incorrect encoder signal Bit 0: Incorrect supply voltage L+ Bits 6 to 7: Reserve; set to 0 Bit 5: Software gate status Bit 4: Digital on-board I/O started up and parameters assigned Bit 3: Load request for Slot 1 detected and executed (toggling) Bit 2: Load request for Slot 0 detected and executed (toggling) Bit 1: Reset of event bits active Bit 0: Reserve; set to 0 Bit 7: Reserve; set to 0 Bit 6: Status HSC DI1 Bit 5: Status HSC DI0 Bit 4: Status HSC DQ1 Bit 3: Status HSC DQ0 Bit 2: Internal gate status Bit 1: Count pulse detected within last approx. 0.5 s Bit 0: Direction of last count value change
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
50
Manual, 12/2017, A5E40898741-AA
Technology functions 3.2 Pulse generators
Offset from start address
Byte 15
Parameter
STS_M_INTERVAL EVENT_CAP EVENT_SYNC EVENT_CMP1 EVENT_CMP0 EVENT_OFLW EVENT_UFLW EVENT_ZERO
Meaning
Bit 7: Count pulse detected in previous measuring interval Bit 6: Capture event has occurred Bit 5: Synchronization has occurred Bit 4: Comparison event for DQ1 has occurred Bit 3: Comparison event for DQ0 has occurred Bit 2: Overflow has occurred Bit 1: Underflow has occurred Bit 0: Zero crossing has occurred
3.2
Pulse generators
3.2.1
Operating modes
3.2.1.1
Operating mode: Pulse-width modulation (PWM)
Properties
The pulse-width modulation (PWM) mode of the compact CPU has the following technical properties:
Pulse duration
Period duration
Standard output
Minimum
High-speed output deactivated
High-speed output activated
400 µs with load > 0.1 A 1)
500 µs with load 2m A 1)
10 ms 2)
20 µs with load > 0.1 A 1)
40 µs with load 2m A 1)
100 s 2)
2 µs 1) 10 s
Standard output
Maximum
High-speed output deac-
tivated
High-speed output acti-
vated
10,000,000 µs (10 s)
1) A lower value is theoretically possible but, depending on the connected load, the output voltage can no longer be output as complete rectangular pulse
2) Load dependent
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
51
Technology functions 3.2 Pulse generators
Principle of operation
With pulse width modulation, a signal with defined cycle duration and variable on-load factor is output at the digital output. The on-load factor is the relationship of the pulse duration to the cycle duration. In PWM mode, you can control the on-load factor and the cycle duration. With pulse width modulation you vary the mean value of the output voltage. Depending on the connected load, you can control the load current or the power with this. You can specify the pulse duration as one-hundredth of the period duration (0 bis 100), as one-thousandth (0 to 1000), as one ten-thousandth (0 to 10,000) or in S7 analog format.
Period duration Pulse duration
The pulse duration can be between 0 (no pulse, always off) and full-scale deflection (no pulse, period duration always on). The PWM output can, for example, be used to control the speed of a motor from standstill to full speed or you can use it to control the position of a valve from closed to completely open. You configure the pulse width modulation (PWM) mode in STEP 7 (TIA Portal). The pulse width modulation mode has the following functions: When the option "High-speed output (0.1 A)" is activated, you can generate a minimum
pulse duration of 2 s at a current of 100 mA. If the option "High-speed output (0.1 A)" is not activated, you can generate a minimum pulse duration of 20 s with a load > 0.1 A and a minimum pulse duration of 40 s with a load of 2 mA and a current of maximum 0.5 A. If a standard output is used, you can generate a minimum pulse duration of 400 µs with a load of > 0.1 A and a minimum pulse duration of 500 µs with a load of 2 mA. You can control the pulse output (DQA) of the channel manually via the control and feedback interface. You can configure the reaction to CPU STOP. Upon change to CPU STOP, the pulse output (DQA) is set to the configured state.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
52
Manual, 12/2017, A5E40898741-AA
Controller
Technology functions 3.2 Pulse generators
For the pulse width modulation (PWM) mode, the user program directly accesses the control and feedback interface of the channel. A reconfiguration via the instructions WRREC/RDREC and parameter assignment data record 128 is supported. You can find additional information in section Parameter data records (PWM) (Page 187) You control the on-load factor (pulse-cycle ratio) of the pulse width via the OUTPUT_VALUE field of the control interface. Pulse width modulation generates continuous pulses based on this value. The period duration is adjustable.
Figure 3-1 Pulse schematic
Starting the output sequence
The control program must output the enable for the output sequence with the help of the software enable (SW_ENABLE 0 1). The feedback bit STS_SW_ENABLE indicates that the software enable is pending at the PWM. If the software enable is activated (rising edge), STS_ENABLE is set. The output sequence runs continuously, as long as SW_ENABLE is set.
Note Output control signal TM_CTRL_DQ · If TM_CTRL_DQ = 1, the technology function takes over the control and generates pulse
sequences at the output PWM DQA. · If TM_CTRL_DQ = 0, the user program takes over the control and the user can set the
output PWM DQA directly via the control bit SET_DQA.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
53
Technology functions 3.2 Pulse generators
Canceling the output sequence
A deactivation of the software enable (SW_ENABLE = 1 0) cancels the current output sequence. The last cycle duration is not completed. STS_ENABLE and the digital output PWM DQA are immediately reset to 0. A renewed pulse output is only possible after a restart of the output sequence.
Minimum pulse duration and minimum interpulse period
You assign the minimum pulse duration and the minimum interpulse period with the help of the parameter "Minimum pulse duration". A pulse duration determined by the technology function or PWM channel which is shorter
than the minimum pulse duration will be suppressed. A pulse duration determined by the technology function or PWM channel which is longer
than the cycle duration less the minimum interpulse period will be set to the value of the cycle duration (output switched on permanently).
Cycle duration Cycle duration minus minimum interpulse period Minimum pulse duration OUTPUT_VALUE (One tenth of a percent on-load factor) Pulse duration
Figure 3-2 Minimum pulse duration and minimum interpulse period
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
54
Manual, 12/2017, A5E40898741-AA
Technology functions 3.2 Pulse generators
Setting and changing the pulse on-load factor
OUTPUT_VALUE assigns the on-load factor for the current period duration. You select the range of the field OUTPUT_VALUE of the control interface with the "Output format" parameter.
Output format per 100: Value range between 0 and 100 Pulse duration = (OUTPUT_VALUE/100) x period duration.
Output format 1/1000: Value range between 0 and 1 000 Pulse duration = (OUTPUT_VALUE/1 000) x cycle duration.
Output format 1/10000: Value range between 0 and 10 000 Pulse duration = (OUTPUT_VALUE/10 000) x cycle duration.
Output format "S7 analog output": Value range between 0 and 27,648 Pulse duration = (OUTPUT_VALUE/27 648) x period duration.
You assign OUTPUT_VALUE directly via the control program. A new OUTPUT_VALUE is applied at the output when the next rising edge occurs.
Setting and changing the period duration
Permanent updating The period duration is permanently controlled via the control interface. The MODE_SLOT bit must be set ("1" means permanent updating); LD_SLOT must be set to value 1 ("1" means period duration). Set the period value in the field SLOT. The unit is always a microsecond.
High-speed output activated: between 10 s and 10 000 000 s (10 s) in the field SLOT
High-speed output deactivated: between 100 s and 10 000 000 s (10 s) in the field SLOT
Standard output (100 Hz output): between 10 000 µs (10 ms) and 10 000 000 µs (10 s) in the field SLOT
Individual updating Set the period duration in the configuration parameters. Alternatively, execute an individual updating via the control interface. MODE_SLOT must be deleted ("0" means individual updating); LD_SLOT must be set to value 1 ("1" means period duration). Set the period duration value in the field SLOT. The unit is always a microsecond.
High-speed output activated: between 10 s and 10 000 000 s (10 s) in the parameters
High-speed output deactivated: between 100 s and 10 000 000 s (10 s) in the parameters
Standard output (100 Hz output): between 10 000 µs (10 ms) and 10 000 000 µs (10 s) in the parameters
The new period duration is applied at the next rising edge of the output.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
55
Technology functions 3.2 Pulse generators
Setting the minimum pulse duration and the minimum interpulse period
You assign the minimum pulse duration and the minimum interpulse period as DWORD numerical value between 0 and 10 000 000 s (10 s) with the help of the channel parameter configuration "Minimum pulse duration".
Parameters of the pulse width modulation (PWM) mode
Category Reaction to CPU STOP
Diagnostics interrupt Parameter
Parameter Reaction to CPU STOP
Substitute value for pulse output (DQA)
No supply voltage L+ High-speed output (0.1 A)
Meaning
The parameter "Output substitute value" generates a substitute value upon CPU STOP, which you can define with the parameter "Substitute value for pulse output (DQA)".
The parameter "Continue operation" still generates the PWM output signal upon CPU STOP, which was generated before the CPU STOP.
If you have set the option "Output substitute value" for "Reaction to CPU STOP", the parameter "Substitute value for pulse output (DQA)" defines the substitute value to be used for the pulse output of the channel.
If you have set the option "Continue operation" for "Reaction to CPU STOP", the parameter "Substitute value for pulse output (DQA)" cannot be selected
The parameter "No supply voltage L+" activates the diagnostic interrupt of the channel in the case of no supply voltage L+
The "High-speed output (0.1 A)" parameter is used to specify whether you want to use the selected pulse output as high-speed output. Requirement for this is that the selected pulse output supports the operation as high-speed output.
Value range Output substitute value
Continue operation
0 (use substitute value 0)
1 (use substitute value 1)
Deactivated Activated
Deactivated The output supports frequencies of up to 10 kHz (load dependent)
and currents of up to 0.5 A or frequencies of up to 100 Hz and currents of up to 0.5 A depending on the performance capability of
the selected output. Activated
The output supports frequencies of up to 100 kHz and currents of
up to 0.1 A.
Default Output substi-
tute value
0
Deactivated Deactivated
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
56
Manual, 12/2017, A5E40898741-AA
Technology functions 3.2 Pulse generators
Category
Parameter
Output format
Minimum pulse duration
Period duration
Meaning Defines the format of the ratio value (on-load factor) in the field "OUTPUT_VALUE" of the control duration of the channel.
Defines the minimum pulse duration and the minimum interpulse period of the output signal of the channel. The channel suppresses all pulses and pauses that are below the specified value. Defines the period duration of the output signal of the channel in s. In RUN, the user program can control the period duration via the control and feedback interface of the channel.
Value range S7 analog output Interprets the ratio value in the field OUTPUT_VALUE" of the control interface 1/27648 of the current period duration. Supported value range from 0 to
27 648 Per 100 Interprets the ratio value in the field "OUTPUT_VALUE"of the control interface percentage value of the current period duration. Supported value range 0 to 100 Per 1,000 Interprets the ratio value in the field "OUTPUT_VALUE"of the control interface is a one-tenth percentage point of the current period duration. Supported value range from 0 to
1 000
Per 10,000 Interprets the ratio value in the field "OUTPUT_VALUE" of the
control interface is a onehundredth percentage point of the
current period duration. Supported value range from 0 to
10 000
0 s to 10 000 000 s (10 s)
x to 10 000 000 s (10 s) at 100 kHz hardware output (high-speed output (0.1 A) activated): 10 s to 10 000 000 s
(10 s) at 10 kHz hardware output (highspeed output (0.1 A) deactivat-
ed): 100 s to 10 000 000 s (10 s)
at 100 kHz hardware output (high-speed output (0.1 A) deac-
tivated): 10 000 s (10 ms) to 10 000 000 s (10 s)
Default Per 100
0 s 2 000 000 s
(2 s)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
57
Technology functions 3.2 Pulse generators
Category
Hardware inputs / outputs
Parameter
Pulse output (DQA)
Meaning
The parameter "Pulse output (DQA)" defines the hardware output to use as pulse output channel.
Value range For B:
X11, terminal 21 (DQ0 / %Q4.0): 10 kHz / 0.5 A or 100 kHz / 0.1 A
For B: X11, terminal 31 (DQ8 / %Q5.0):
100 Hz / 0.5 A
Default
Hardware output for the least significant address
Output signals for pulse width modulation (PWM) mode
Output signal
Continuous pulse current at the digital output PWM DQA
Meaning
A pulse is output at the digital output PWM DQA for the set on-load factor and cycle duration.
Value range Continuous pulse current
3.2.1.2
Operating mode: Frequency output
In this operating mode you can assign a frequency value with high frequencies more precisely than by using period duration in PWM mode.
A rectangular signal with an assigned frequency and a constant on-load factor of 50 % is generated at the digital output.
The frequency output mode has the following functions:
When the option "High-speed output (0.1 A)" is activated, you can generate a minimum pulse duration of 2 s at a current of 100 mA. If the option "High-speed output (0.1 A)" is not activated, you can generate a minimum pulse duration of 20 s with a load > 0.1 A and a minimum pulse duration of 40 s with a load of 2 mA and a current of maximum 0.5 A. If you use a standard output, you can generate a minimum pulse duration of 400 µs with a load of > 0.1 A and a minimum pulse duration of 500 µs with a load of 2 mA and a current of max. 0.5 A.
Frequency
Standard output
Minimum
High-speed output deac-
tivated
0.1 Hz
High-speed Standard out-
output activated
put
100 Hz 1)
Maximum
High-speed output deac-
tivated
10 kHz 1)
High-speed output activated
100 kHz
1) Load dependent
You can control the pulse output (DQA) of the channel manually via the control and feedback interface.
You can configure the reaction to CPU STOP. Upon change to CPU STOP, the pulse output (DQA) is set to the configured state.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
58
Manual, 12/2017, A5E40898741-AA
Controller
Technology functions 3.2 Pulse generators
For the frequency output mode, the user program directly accesses the control and feedback interface of the channel. A reconfiguration via the instructions WRREC/RDREC and parameter assignment data record 128 is supported. You can find additional information in section Parameter data records (PWM) (Page 187).
Figure 3-3 Pulse schematic
Starting the output sequence
The control program must initiate the enable for the output sequence with the help of the software enable (SW_ENABLE 0 1). The feedback bit STS_SW_ENABLE indicates that the software enable is pending at the pulse generator.
If the software enable is activated (rising edge), STS_ENABLE is set. The output sequence runs continuously, as long as SW_ENABLE is set.
Note Output control signal TM_CTRL_DQ · If TM_CTRL_DQ = 1, the technology function takes over the control and generates pulse
sequences at the output PWM DQA. · If TM_CTRL_DQ = 0, the user program takes over the control and the user can directly
set the output PWM DQA via the control bit SET_DQA. Canceling the output sequence
Deactivating the software enable (SW_ENABLE = 1 0) during the frequency output cancels the current output sequence. The last cycle duration is not completed. STS_ENABLE and the digital output PWM DQA are immediately reset to 0.
A renewed pulse output is only possible after a restart of the output sequence.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
59
Technology functions 3.2 Pulse generators
Setting and changing the output value (frequency)
You set the frequency with the OUTPUT_VALUE directly with the control program in the control interface. The value is specified in the real format and the unit is always "Hz". The possible range depends on the parameter "High-speed output (0.1 A)" as follows:
High-speed pulse output deactivated
Frequency (OUTPUT_VALUE) 0.1 Hz to 10,000 Hz
High-speed pulse output activated
Frequency (OUTPUT_VALUE) 0.1 Hz to 100,000 Hz
Standard output (100 Hz output)
Frequency (OUTPUT_VALUE) 0.1 Hz to 100,000 Hz
The new frequency is applied at the start of the next period. The new frequency has no impact on the falling edge or the pulse-cycle ratio. However, the application can take up to 10 s depending on the previously set frequency.
Accuracy of the output frequency
The configured output frequency is output with a frequency-dependent accuracy at the digital output PWM DQA. You can find an overview of the accuracy as a function of the frequency used in the section Interconnection overview of outputs (Page 111).
Parameters of the frequency output mode
Category
Reaction to CPU STOP
Parameter Reaction to CPU STOP
Substitute value for pulse output (DQA)
Meaning
The parameter "Output substitute value" generates a substitute value upon CPU STOP, which you can define with the parameter "Substitute value for pulse output (DQA)".
The parameter "Continue operation" still generates the frequency output signal upon CPU STOP, which was generated before the CPU STOP.
If you have set the option "Output substitute value" for "Reaction to CPU STOP", the parameter "Substitute value for pulse output (DQA)" defines the substitute value to be used for the pulse output of the channel.
If you have set the option "Continue operation" for "Reaction to CPU STOP", the parameter "Substitute value for pulse output (DQA)" cannot be selected.
Value range Output substitute value
Continue operation
0 (use substitute value 0)
1 (use substitute value 1)
Default Output substi-
tute value
0
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
60
Manual, 12/2017, A5E40898741-AA
Technology functions 3.2 Pulse generators
Category Diagnostics interrupt Parameter
Hardware inputs / outputs
Parameter
Meaning
No supply voltage L+
The parameter "No supply voltage L+" activates the diagnostic interrupt of the channel in the case of no supply voltage L+
High-speed output (0.1 A)
The "High-speed output (0.1 A)" parameter is used to specify whether you want to use the selected pulse output as high-speed output. Requirement for this is that the selected pulse output supports the operation as high-speed output.
Output format
Pulse output (DQA)
Defines the value for the frequency output in the field "OUTPUT_VALUE" of the control duration of the channel.
The parameter "Pulse output (DQA)" is used to define the hardware output that you want to use as pulse output channel.
Value range Deactivated
Activated
Deactivated The output supports frequencies of up to 10 kHz (load dependent)
and currents of up to 0.5 A or frequencies of up to 100 Hz and currents of up to 0.5 A depending on the performance capability of
the selected output.
Activated The output supports frequencies of up to 100 kHz and currents of
up to 0.1 A.
1 Hz Interprets the value of the fre-
quency output in the field "OUTPUT_VALUE" as frequency
with the unit Hz. For B:
X11, terminal 21 (DQ0 / %Q4.0): 10 kHz / 0.5 A or 100 kHz / 0.1 A
For B: X11, terminal 31 (DQ8 / %Q5.0):
100 Hz / 0.5 A
Default Deactivated Deactivated
1 Hz
Hardware output for the least significant address
Output signals for frequency output mode
Output signal
Continuous pulse current at the digital output PWM DQA
Meaning
A pulse for the assigned frequency is output at the digital output PWM DQA.
Value range Continuous pulse current
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
61
Technology functions 3.2 Pulse generators
3.2.1.3
Operating mode: PTO
The PTO (Pulse Train Output) mode can be used to output position information. This allows you to, for example, control stepper motor drives or simulate an incremental encoder. The frequency of the pulses represents the speed, while the number of pulses represents the distance. The direction can also be specified by using two signals per channel. You can use a PTO channel for setpoint output (drive) for an axis technology object.
PTO mode is divided into the following four signal types:
PTO (pulse (A) and direction (B)): If you select the PTO signal type (pulse (A) and direction (B)), an output (A) controls the pulses and an output (B) controls the direction. B is 'High' (active) when pulses are generated in a negative direction. B is 'Low' (inactive) when pulses are generated in a positive direction.
Positive direction of rotation Negative direction of rotation
PTO (Count Up (A) and Count Down (B)): When you select PTO when you select the PTO signal type (count up (A) and count down (B)), an output (A) outputs pulses for positive directions and another output (B) outputs pulses for negative directions.
Positive direction of rotation Negative direction of rotation
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
62
Manual, 12/2017, A5E40898741-AA
Technology functions 3.2 Pulse generators
PTO (A, B phase-shifted): When you select the PTO signal type (A, B phase-shifted), the two outputs pulses with the specified velocity, but phase-shifted by 90 degrees. This is a 1x combination in which the pulse shows the duration between two positive transitions of A. In this case the direction is determined based on the output which first changes from 0 to 1. With positive direction, A preceeds B. With negative direction B preceeds A.
The number of generated pulses is based on the number of 0-to-1 transitions from phase A. The phase ratio determines the direction of motion:
PTO (A, B phase-shifted)
Phase A precedes phase B (positive motion)
Phase A follows phase B (negative motion)
Number of pulses
Number of pulses
PTO (A, B phase-shifted - quadruple): When you select the PTO signal type (A, B phaseshifted, quadruple), the two outputs transmit pulses with the specified velocity, but phaseshifted by 90 degrees. The quadruple signal type is a 4x configuration in which each edge transition corresponds to an increment. Therefore, a full period of the signal A contains four increments. In this way two outputs, each with 100 kHz signal frequency, can be used to output a control signal that supplies 400,000 increments per second. The direction is determined based on the output which first changes from 0 to 1. With positive direction, A preceeds B. With negative direction B preceeds A.
PTO (A, B phase-shifted - quadruple)
Phase A precedes phase B (positive motion)
Phase A follows phase B (negative motion)
Number of pulses
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Number of pulses 63
Technology functions 3.2 Pulse generators
Parameters of PTO mode
Category
Diagnostics interrupt
Parameter No supply voltage L+
Data exchange Reference speed with the drive
Maximum speed
Meaning
With the parameter "No supply voltage L+" you activate the diagnostic interrupt of the channel in the case of no supply
voltage L+.
Value range Deactivated
Activated
With the parameter "Reference speed" you
define the reference value for the drive velocity. The drive velocity is defined as percentage value of the refer-
ence speed in the range from -200 % to
+200 %.
Floating-point number: 1.0 bis 20,000.0 (rpm)
The parameter "Maximum speed" is used to
define the required maximum speed for
your application.
The supported value range depends on:
· the signal type selected under "Operating mode"
· the value defined under "Increments per revolution"
· the value defined under "Reference speed"
The low limit of the value range is:
· for the signal type "PTO (A, B phase-shifted - quadruple)": 0.1 Hz * 60 s/min * 4) / Increments per revolution
· for the non-quadruple PTO signal types: (0.1 Hz * 60 s/min) / increments per revolution
The high limit of the value range is the minimum of the value:
· 2 * reference speed and of the value:
· for the signal type "PTO (A, B phase-shifted - quadruple)": (100 000 Hz * 60 s/min * 4) / Increments per revolution
· for the non-quadruple PTO signal types: (100 000 Hz * 60 s/min) / Incr ements per revolution
Default Deactivated 3,000.0 (rpm)
3,000.0 (rpm)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
64
Manual, 12/2017, A5E40898741-AA
Technology functions 3.2 Pulse generators
Category
Parameter
Increments per revolution
Fine resolution Bits in incr. actual value (G1_XIST1)
Stop behavior Quick stop time
Hardware inputs / outputs
Reference switch input
Edge selection reference switch
Measuring input
"Drive ready" input
Pulse output A for "PTO (pulse (A) and direction (B))"
Direction output B for "PTO (pulse (A) and direction B))"
Meaning
The "Increments per revolution" is used to define the number of increments per revolution (also in microstep mode), which is required by the drive for a
revolution.
The parameter defines the number of bits for the coding of the fine resolution in the current incremental value of
G1_XIST1.
The parameter "Quick stop time" defines the time interval it should take for the drive to go
from the maximum speed to a standstill
(OFF3).
The parameter "Reference switch input"
defines the hardware input of the reference
switch.
The parameter "Edge selection reference switch" defines the edge type which is to be detected by the reference switch.
The parameter "Measuring input" defines the hardware input of the
measuring input.
The parameter ""Drive ready" input" defines the hardware input of the input "Drive ready".
The parameter "Pulse output A" defines the hardware output for
PTO signal A.
The parameter "Direction output B" defines the hardware output for
PTO signal B.
Value range 1 to 1,000,000
0
1 to 65 535 (ms)
[Input address of the reference switch DI]
Rising edge Falling edge
[Input address of the measuring input DI]
[Input addresses of the inputs "Drive ready" DIn]
[Output address DQ for PTO signal A (output frequency 100 kHz)]
[Output address 1 of the DQ for PTO signal B (output frequency
100 kHz)] [Output address 2 of the DQ for PTO signal B (output frequen-
cy 100 Hz)]
Default 200
0
1,000 (ms)
--
Rising edge
--grayed out Read only access to the parameter Qn (output frequency 100 kHz)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
65
Technology functions 3.2 Pulse generators
Category
Parameter Clock generator forward (A) for "PTO (Count up (A) and Count down (B))"
Clock generator backward (B) for "PTO (Count up (A) and Count down (B))"
Phase A for "PTO (A, B phaseshifted)" and "PTO (A, B phase-shifted, quadruple)"
Phase B for "PTO (A, B phaseshifted)" and "PTO (A, B phase-shifted, quadruple)"
Drive enable output
Meaning
The "Clock generator forward (A)" parameter defines the hardware output for PTO signal
A.
The "Clock generator backward (B)" parame-
ter defines the hardware output for PTO
signal B.
The "Clock generator output (A)" parameter defines the hardware output for PTO signal
A.
The "Clock generator output (B)" parameter defines the hardware output for PTO signal
B.
The parameter "Drive enable output" defines the hardware output of the output "Drive ena-
ble output".
Value range [Output address DQ for PTO
signal A (output frequency 100 kHz)]
[Output address 1 of the DQ for PTO signal B (output frequency
100 kHz)]
[Output address of the DQ for PTO signal A (output frequency
100 kHz)]
[Output address 1 of the DQ for PTO signal B (output frequency
100 kHz)]
[Output addresses of the enable output DQn (output frequency 100 Hz)
Default grayed out Read only access to the pa-
rameter
grayed out Read only access to the pa-
rameter
grayed out Read only access to the pa-
rameter
grayed out Read only access to the pa-
rameter
--
Reaction of the PTO channel to CPU STOP
The PTO channel reacts to a change to CPU STOP with the removal of the drive enable (to the extent that the drive enable output is configured) and with output of the velocity setpoint 0 at the hardware outputs configured for the signal tracks A and B. The CPU STOP reaction of the PTO channels cannot be configured.
Note Reaction to CPU STOP
Upon CPU STOP, the hardware outputs assigned for the PTO outputs A and B can switch to signal state 'High' (1) and/or remain there. A switching/remaining of the two hardware outputs to/in signal level 'Low' (0) is not guaranteed.
Controller
66
The pulse output channels for the four modes of the pulse generators (PTO) are controlled using Motion Control via the technology objects TO_SpeedAxis, TO_PositioningAxis and TO_SynchronousAxis. With these operating modes, the control and feedback interface of the channels is a partial implementation of the PROFIdrive interface "Telegram 3". For a detailed description of the use of motion control and its configuration, refer to the S7-1500 Motion Control function manual (http://support.automation.siemens.com/WW/view/en/109749262) and the STEP 7 online help.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technology functions 3.2 Pulse generators
3.2.2
Functions
3.2.2.1
Function: High-speed output
The function "High-speed output (0.1 A)" enhances the signal clock of the digital outputs (DQ0 to DQ7). Less delay, fluctuation, jitter, and shorter rise and fall times, occur at the switching edges.
The function "High-speed output (0.1 A)" is suited for generating pulse signals in a more precise clock, but provides a lower maximum load current.
For the PWM and frequency output modes, select the high-speed output of the channel in STEP 7 (TIA Portal). You can also change the parameter assignment during runtime with the help of the program via the data record.
High-speed pulse output (high-speed output) is available for the following operating modes:
PWM
Frequency output
PTO (the pulse outputs for the PTO mode are always "High-speed output (0.1 A)")
High-speed output
Pulse duration
Period duration Frequency
Minimum
High-speed output deactivated
High-speed output activated
20 µs with load > 0.1 A 1)
2 µs 1)
40 µs with load 2 mA 1)
100 s 2)
10 s
0.1 Hz
Maximum
High-speed output deactivated
High-speed output activated
10,000,000 s (10 s)
10 kHz 2)
100 kHz
1) A lower value is theoretically possible but, depending on the connected load, the output voltage can no longer be output as complete rectangular pulse
2) Load dependent
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
67
Technology functions 3.2 Pulse generators
3.2.2.2
Function: Direct control of the pulse output (DQA)
Direct control of the pulse output (DQA)
In the modes "Pulse width modulation PWM" and "Frequency output", you can set the pulse output (DQA) of a pulse generator directly via the control program. Select the function for the DQ direct control by deleting the output control bit of the PWM channel (TM_CTRL_DQ = 0) in the control interface.
The direct control of the pulse output (DQA) can be helpful when commissioning a control system for automation.
When you select the direct control of the pulse output (DQA) during a pulse output sequence, the sequence continues to run in the background so that the output sequence is continued as soon as the channel takes control again (by setting TM_CTRL_DQ = 1).
You assign the status of the pulse output (DQA) using the control bits SET_DQA.
When you set TM_CTRL_DQ = 1, you deselect the direct control of the pulse output (DQA) and the channel takes over the processing. If the output sequence is still running (STS_ENABLE still active), the PWM channel takes over the control of the output again. If TM_CTRL_DQ = 1 and STS_ENABLE is not active, the module's channel also takes over processing, but then outputs "0".
Note Output signal TM_CTRL_DQ of the PWM channel · If TM_CTRL_DQ = 1, the technology function takes over the control and generates pulse
sequences at the output PWM DQA. · If TM_CTRL_DQ = 0, the user program takes over the control and the user can set the
PWM DQA directly using the control bits SET_DQA.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
68
Manual, 12/2017, A5E40898741-AA
Technology functions 3.2 Pulse generators
3.2.3
Configuring the PWM and frequency output modes
3.2.3.1
Assignment of the control interface
The user program influences the behavior of the PWM channel through the control interface.
Control interface per channel
The following table shows the control interface assignment:
Table 3- 5 Assignment of the control interface
Byte 0 Byte 1 Byte 2 Byte 3 Byte 4 Byte 5 Byte 6 Byte 7 Byte 8
Byte 9
Byte 10
Byte 11
7
6
5
4
3
2
1
0
OUTPUT_VALUE
PWM: On-load factor * (Int)
In PWM mode, the on-load factor uses only the two least significant bytes (byte 2 and byte 3).
Frequency output: Frequency in Hz (Real)
SLOT
Reserved = 0
Reserved = 0
Reserved = 0
MODE_SL LD_SLOT
OT
Specifies the meaning of the value under SLOT
0000: No action
0001: Period duration (PWM)
0010 to 1111: Reserved
Reserved = 0
SET_DQA Reserved = 0
TM_CTRL_ SW_ENA
DQ
BLE
Reserved = 0
RES_ERR OR
Reserved = 0
* The terms "On-load factor", "Pulse duty factor" and "Duty factor" can be used synonymously
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
69
Technology functions 3.2 Pulse generators
Use case
1. Transfer the control for the output to the PWM channel.
2. Set SW_ENABLE, in order that the output can be started.
3. Set the required on-load factor using OUTPUT_VALUE.
4. If necessary, change the period duration (cyclic or once). If you do not change the value, the period duration from the hardware configuration will be used.
5. With TM CTRL_DQ and SET_DQ set the output from the user program permanently to 1 or 0.
6. Acknowledge any errors that occur using RES_ERROR.
Additional parameters for the output sequence are defined before the start of an output sequence.
The data record of the parameter assignment is changed in the device configuration in STEP 7 (TIA Portal) or through WRREC execution.
Control interface parameters
OUTPUT_VALUE
The interpretation of the value OUTPUT_VALUE depends on the set operating mode. OUTPUT_VALUE is always updated. When an invalid value is detected (outside the permissible range), the error memory bit ERR_OUT_VAL is set until a valid value is detected. During the error condition the invalid value is ignored and the PWM channel continues with the last valid OUTPUT_VALUE. Note that, in the frequency output mode, it is also possible that no last valid value is available. In this case the pulse output returns the value 0, i.e. there is no pulse output.
Please note that the on-load factor is not checked in PWM mode. If the on-load factor is greater than the format permits, the PWM channel uses a ratio of 100 %. 0 % in effect for values < 0.
SLOT, MODE_SLOT and LD_SLOT
Use these control interface fields if you occasionally change the period duration in PWM mode before the start of the output sequence or during operation. You can find a description of the interaction between SLOT, MODE_SLOT and LD_SLOT under Handling the SLOT parameter (control interface) (Page 71)
SW_ENABLE
If 0 1, activate the output sequence.
TM_CTRL_DQ
If 1, the output is controlled by the PWM channel and generates the pulse sequences
If 0, the output is controlled directly by the program using the SET_DQA assignments
SET_DQA
If 1, set the output A to 1, if TM_CTRL_DQ is inactive
If 0, set the output A to 0, if TM_CTRL_DQ is inactive
RES_ERROR
Resetting the error bit memory ERR_LD in the feedback interface
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
70
Manual, 12/2017, A5E40898741-AA
Technology functions 3.2 Pulse generators
3.2.3.2
Handling the SLOT parameter (control interface)
SLOT and MODE_SLOT
SLOT has the following operating modes.
Mode for individual update (MODE_SLOT = 0) Use this mode if you occasionally change the specific parameters (such as period duration) before the start of the output sequence or during operation.
The value in SLOT is the always applied when the value changes in LD_SLOT.
The acknowledgment bit STS_LD_SLOT in the feedback interface is switched.
The value of LD_SLOT defines the interpretation of SLOT (see the table below "Interpretation of the SLOT parameter value").
If the LD_SLOT value is invalid, the setting of the feedback bit ERR_LD indicates a parameter assignment error. The user has to reset the error using the control bit RES_ERROR and enable the SLOT parameter again for the next value.
Changes made in this mode can be read back by the channel in the parameter assignment data record.
The current changes are entered in the data record 128 during the reading back of the parameter assignment data with RDREC from the user program. These changes are lost during a warm restart of the CPU.
Mode for cyclic updating (MODE_SLOT = 1) Use this operating mode if the program is to continuously control another parameter in addition to the main parameter to be controlled.
The value in SLOT is transferred with each module cycle.
No acknowledgment bit is available.
The value of LD_SLOT defines the interpretation of SLOT (see the table below "Interpretation of the SLOT parameter value").
If the value in SLOT is not valid, the error ERR_SLOT_VAL occurs. The error is automatically reset as soon as a valid value is loaded.
In this mode the value in the parameter assignment data record is not updated. If LD_SLOT is changed in this mode, the last value applied from LD_SLOT is valid.
The mode for permanent updating can be stopped by setting LD_SLOT to 0 and MODE_SLOT to 0. By stopping the mode for permanent updating the changes made at the parameters during the permanent updating are retained until the next changes via SLOT (cyclic or once) or until the next STOP-RUN transition.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
71
Technology functions 3.2 Pulse generators
Interpretation of the SLOT parameter value
The value written in the SLOT parameter is displayed as in the table below depending on the LD_SLOT value and the mode is interpreted.
LD_SLOT
0 1
Meaning of SLOT value
No action / idling Period duration
Valid modes for using the SLOT value
All operating modes
PWM
SLOT data type
UDInt Permissible value
range*: Minimum value: 10 µs,
100 µs or 10 000 µs (10 ms)
Maximum value: 10 000 000 µs (10 s)
* The permissible value range depends on the selected hardware output and sometimes on the high-speed mode (highspeed/standard).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
72
Manual, 12/2017, A5E40898741-AA
Technology functions 3.2 Pulse generators
Individual updating of the parameter 'Period duration'
The following representation illustrates the workflow of the individual updating of the parameter 'Period duration'. The described workflow principle can also be used on the channels of the high-speed counters.
User writes the first parameter in SLOT and specifies the first parameter in LD_SLOT Technology channel applies the first parameter and indicates the application by change in the
bit STS_LD_SLOT
User writes the second parameter in SLOT and specifies the second parameter in LD_SLOT Technology channel applies the second parameter and indicates the application by change in
the bit STS_LD_SLOT
User writes 0 in LD_SLOT, (SLOT inactive) Technology channels answers change in LD_SLOT with a change in STS_LD_SLOT
Figure 3-4 Individual updating
Note that the following requirements apply to the representation shown above:
The value MODE_SLOT must be set to 0
Errors or invalid values are shown in the feedback bit ERR_SLOT_VAL
The error must be acknowledged
If MODE_SLOT 0 = 1, the following applies (for PWM mode only):
The value in SLOT is continuously evaluated according to LD_SLOT
STS_LD_SLOT does not change
An error is automatically reset as soon as a valid value is set in SLOT
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
73
Technology functions 3.2 Pulse generators
Cyclic updating of the parameter 'Period duration'
The following representation illustrates the execution of the cyclic updating of the parameter 'Period duration'. The described workflow principle can also be used on the channels of the high-speed counters.
· User sets SLOT to the required parameter
· User sets MODE_SLOT to 1
· User sets LD_SLOT to the required value (1 for period duration)
User changes value in SLOT continuously and technology channel evaluates continuously Value in SLOT exceeds permitted limit, technology channel shows this ERR_SLOT_VAL and
continues working with the last valid value
Value in SLOT again in permitted range, technology channel resets ERR_SLOT_VAL inde-
pendently and continues working with the value in SLOT
User resets LD_SLOT and MODE_SLOT, technology channel continues to work with last value
Figure 3-5 Cyclic updating
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
74
Manual, 12/2017, A5E40898741-AA
Technology functions 3.2 Pulse generators
3.2.3.3
Assignment of the feedback interface
The user program receives current values and status information from the pulse width modulation via the feedback interface.
Feedback interface per channel
The following table shows the feedback interface assignment:
Table 3- 6 Byte 0
Byte 1
Byte 2 Byte 3
Assignment of the feedback interface
7
6
5
4
3
2
ERR_SLOT _VAL
The valid in SLOT is invalid
ERR_OUT_ VAL
The value in
OUTPUT_V ALUE is invalid
Reserved = 0
Reserved = 0
ERR_PULS E
ERR_LD Error during loading via
control interface
Reserved = 0
STS_SW_E NABLE
SW_ENABL E detected or feedback
status SW_ENABL
E
STS_READ Y
Channel parameters
assigned and ready
Reserved = 0
STS_LD_S LOT Load
prompt detected and executed for Slot (tog-
gling)
Reserved = 0
Reserved Reserved Reserved
= 0
= 0
= 0
Reserved = 0
Reserved = 0
1
Reserved = 0
0
ERR_PW R
missing supply voltage L+
Reserved = 0
STS_DQA STS_ENA BLE
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
75
Technology functions 3.2 Pulse generators
Feedback parameters
Table 3- 7 Status feedback Feedback parameters
STS_READY STS_SW_ENABLE STS_LD_SLOT
STS_ENABLE
STS_DQA
Meaning
Value range
The channel is correctly configured, is operating and supplying valid data.
0: Not ready to run 1: Ready to run
Current status of the software enable
0: SW_ENABLE is not active
1: SW_ENABLE detected
Acknowledgment bit for each action of the SLOT in the SLOT mode for individual updating (for a description of the acknowledgment bit, refer to the section Handling the SLOT parameter (control interface) (Page 71)).
Each switching of this bit represents a successful LD_SLOT action.
The output sequence is active.
0: No output sequence running
(STS_ENABLE always depends on the status of 1: Output sequence running the software enable STS_SW_ENABLE ab)
State of the pulse output (DQA)
0: Pulse output is not active
1: Pulse output is active
Feedback parameters ERR_PWR ERR_LD ERR_OUT_VAL ERR_SLOT_VAL
Meaning No supply voltage L+
Error during loading of a parameter value in the operating mode for individual updating The value in OUTPUT_VALUE is invalid
The value in SLOT is invalid, where MODE_SLOT = 1 (permanent updating)
Value range 0: No error 1: Error 0: No error 1: Error 0: No error 1: Error 0: No error 1: Error
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
76
Manual, 12/2017, A5E40898741-AA
Wiring
4
4.1
Supply voltage
24 V DC supply voltage (X80)
The connecting plug for the supply voltage is plugged in when the CPU ships from the factory.
The following table shows the terminal assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring-loaded NC contact (one spring-loaded NC contact per terminal)
Bridged internally:
and and
Figure 4-1 Connection for supply voltage
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
77
Wiring 4.2 PROFINET interfaces
4.2
PROFINET interfaces
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R)
The assignment corresponds to the Ethernet standard for an RJ45 plug.
When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X).
When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Figure 4-2 PROFINET ports
Note You need a screwdriver (max. blade width 2.5 mm) to remove the PROFINET plug.
Reference
For more information on "Wiring the CPU" and "Accessories/spare parts", refer to the S71500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
78
Manual, 12/2017, A5E40898741-AA
Wiring 4.2 PROFINET interfaces
Assignment of the MAC addresses
The CPU 1512C-1 PN has a PROFINET interface with two ports. The PROFINET interface itself has a MAC address, and each of the two PROFINET ports has its own MAC address. The CPU 1512C-1 PN therefore has three MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is continuous. The first and last MAC address are lasered on the rating plate on the right side of each CPU 1512C-1 PN.
The table below shows how the MAC addresses are assigned.
Table 4- 1 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3
Assignment
PROFINET interface X1
(visible in STEP 7 for accessible devices)
Labeling
· Front, lasered · Right side, lasered
(start of number range)
Port X1 P1 R (required for LLDP, for example)
Port X1 P2 R (required for LLDP, for example)
· Front and right side, not lasered
· Front, not lasered · Right side, lasered
(end of number range)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
79
Wiring 4.3 Terminal and block diagrams
4.3
Terminal and block diagrams
4.3.1
Block diagram of the CPU part
Block diagram
The following figure shows the block diagram of the CPU part.
X50
X80 24 V DC
CPU with control and operating mode buttons Display Electronics Interface to on-board I/O Interfaces to the backplane bus Backplane bus interface Internal supply voltage 2-port switch SIMATIC memory card Infeed of supply voltage
Figure 4-3 Block diagram of the CPU part
PN X1 P1 R PROFINET interface X1 port 1
PN X1 P2 R L+ M SF R/S ER MT X1 P1, X1 P2
PROFINET interface X1 Port 2 24 V DC supply voltage Ground STOP ACTIVE LED (yellow) RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) Link TX/RX LED
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
80
Manual, 12/2017, A5E40898741-AA
4.3.2
Wiring 4.3 Terminal and block diagrams
Terminal and block diagram of the analog on-board I/O
This section contains the block diagram of the analog on-board I/O (X10) and various wiring options. For information on wiring the front connector, establishing the cable shield, etc., refer to the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Note You can use and combine the different wiring options for all channels. Note, however, that unneeded terminals of an analog input channel must not be connected.
Definition
Un+/UnMn+/Mn-
In+/InIc n+/Ic nQVn QIn MANA CHx
Voltage input channel n (voltage only) Measuring input channel n (only resistance-type transmitters or thermal resistors (RTD)) Current input channel n (current only) Current output for RTD, channel n Voltage output channel Current output channel Reference potential of the analog circuit Channel or display of the channel status
Infeed element
The infeed element is inserted on the front connector and serves to shield the analog onboard I/O.
Note
The analog on-board I/O does not require power to be supplied by the infeed element. The infeed element is, however, necessary for shielding.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
81
Wiring 4.3 Terminal and block diagrams
Wiring: Voltage measurement
The following figure shows the terminal assignment for voltage measurement at the channels available for this measurement type (channels 0 to 3).
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Equipotential bonding cable (optional) Voltage measurement
Figure 4-4 Block diagram and terminal assignment for voltage measurement
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
82
Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
Wiring: 4-wire measuring transducer for current measurement
The following figure shows the terminal assignment for current measurement with 4-wire measuring transducer at the channels available for this measurement type (channels 0 to 3).
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Equipotential bonding cable (optional) Connector 4-wire measuring transducer
Figure 4-5 Block diagram and terminal assignment for current measurement with 4-wire measuring transducer
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
83
Wiring 4.3 Terminal and block diagrams
Wiring: 2-wire measuring transducer for current measurement
Alternatively to connecting a 4-wire transducer, you can also connect 2-wire transducers to channels 0 to 3. An external 24 V power supply is required to connect a 2-wire transducer to the analog on-board I/O of the compact CPU. Feed this voltage short-circuit proof to the 2wire transducer. Use a fuse to protect the power supply unit.
NOTICE Defective transducers Note that the analog input of the transducer is not protected against destruction in the event of a defect (short circuit). Take the necessary precautions against such cases.
The figure below shows an example of the connection of a 2-wire transducer to channel 0 (CH0) of the analog on-board I/O.
Sensor (e.g. pressure gauge) 2-wire transducer Fuse Equipotential bonding cable (optional)
Figure 4-6 2-wire transducer at channel 0
Use the measurement type "Current (4-wire transducer)" and the measuring range 4 to 20 mA for the parameter assignment of the 2 wire transducer in STEP 7 (TIA Portal).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
84
Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
Wiring: 4-wire connection of resistance-type sensors or thermal resistors (RTD)
The following figure shows the terminal assignment for 4-wire connection of resistance-type sensors or thermal resistors at the channel available for this (channel 4).
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Equipotential bonding cable (optional) 4-wire connection
Figure 4-7 Block diagram and terminal assignment for 4-wire connection
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
85
Wiring 4.3 Terminal and block diagrams
Wiring: 3-wire connection of resistance-type sensors or thermal resistors (RTD)
The following figure shows the terminal assignment for 3-wire connection of resistance-type sensors or thermal resistors at the channel available for this (channel 4).
Note 3-wire connection Note that line resistances are not compensated with a 3-wire connection.
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Equipotential bonding cable (optional) 3-wire connection
Figure 4-8 Block diagram and terminal assignment for 3-wire connection
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
86
Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
Wiring: 2-wire connection of resistance-type sensors or thermal resistors (RTD)
The following figure shows the terminal assignment for 2-wire connection of resistance-type sensors or thermal resistors at the channel available for this (channel 4).
Note 2-wire connection Note that line resistances are not compensated with a 2-wire connection.
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Equipotential bonding cable (optional) 2-wire connection
Figure 4-9 Block diagram and terminal assignment for 2-wire connection
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
87
Wiring 4.3 Terminal and block diagrams
Wiring: Voltage output
The figure below shows the terminal assignment for the wiring of the voltage outputs with: 2-wire connection, no compensation for line resistances.
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) 2-wire connection CH0 and CH1
Figure 4-10 Block diagram and terminal assignment for voltage output
Note
MANA on terminals 19 and 20 is equivalent.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
88
Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
Wiring: Current output
The following figure shows an example of the terminal assignment for wiring current outputs.
Analog-to-digital converter (ADC) LED interface Infeed element (for shielding only) Digital-to-analog converter (DAC) Current output CH0 and CH1
Figure 4-11 Block diagram and terminal assignment for current output
Note MANA on terminals 19 and 20 is equivalent.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
89
Wiring 4.3 Terminal and block diagrams
4.3.3
Terminal and block diagram of the digital on-board I/O
This section contains the block diagram of the digital on-board I/O (X11 and X12) with standard inputs and outputs and the encoder supply, as well as the rules for the correct wiring of the ground connections.
For information on wiring the front connector, establishing the cable shield, etc., refer to the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Infeed element
The infeed element is inserted on the front connector and serves to shield the digital onboard I/O.
Note
The digital on-board I/O is supplied via the front connector terminals and therefore does not require power to be supplied by the infeed element. The infeed element is, however, necessary for shielding.
Output driver
The digital onboard I/O uses the following output drivers: X11, DQ0 to DQ7: Push-pull stage and freewheeling diode X11, DQ8 to DQ15: High-side switch and freewheeling diode X12 DQ0 to DQ7: High-side switch without freewheeling diode X12 DQ8 to DQ15: High-side switch without freewheeling diode
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
90
Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
Block diagram and terminal assignment X11
The figure below shows you how to connect the digital on-board I/O X11 and the assignment of the channels to the addresses (input byte a and b, output byte c and d).
xL+ xM CHx RUN ERROR PWR
Encoder supply for the digital inputs CPU interface Connection for 24 V DC supply voltage Connection for ground Channel or channel status LED (green) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
Figure 4-12 Block diagram and terminal assignment of the digital on-board I/O X11
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
91
Wiring 4.3 Terminal and block diagrams
Block diagram and terminal assignment X12
The figure below shows you how to connect the digital on-board I/O X12 and the assignment of the channels to the addresses (input byte a and b, output byte c and d).
xL+ xM CHx RUN ERROR PWR
Encoder supply for the digital inputs CPU interface Connection for 24 V DC supply voltage Connection for ground Channel or channel status LED (green) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
Figure 4-13 Block diagram and terminal assignment of the digital on-board I/O X12
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
92
Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
Supply voltage using the digital on-board I/O X11 as an example
The inputs and outputs of the digital on-board I/O are divided into two load groups, which are supplied with 24 V DC. The digital inputs DI0 to DI15 form a load group and are supplied via the connections 1L+ (terminal 19) and 1M (terminal 20). The digital outputs DQ0 to DQ7 are supplied via the connection 2L+ (terminal 29). The digital outputs DQ8 to DQ15 are supplied via the connection 3L+ (terminal 39). Please note that the digital outputs DQ0 to DQ15 only have a common ground. In each case, they are led through to the two terminals 30 and 40 (2M/3M) and bridged in the module. The digital outputs form a common load group.
NOTICE Polarity reversal of the supply voltage An internal protective circuit protects the digital on-board I/O against destruction if the polarity of the supply voltage is reversed. In the case of polarity reversal of the supply voltage, however, unexpected states can occur at the digital outputs.
Response of the digital outputs to a wire break at ground connection of the outputs
Due to the characteristics of the output driver used in the module, approx. 25 mA supply current flows out through the outputs via a parasitic diode in the event of a ground wire break. This behavior can lead to non-set outputs also carrying high levels and emitting up to 25 mA output current. Depending on the type of load, 25 mA can be sufficient to control the load with high level. To prevent unintended switching of the digital outputs in the event of a ground wire break, follow these steps:
Wire to ground twice Connect ground to terminal 30 and to terminal 40. 1. Route the first ground connection from terminal 30 to the central ground connection of the plant. 2. Route the second ground connection from terminal 40 to the central ground connection of the plant. If terminal 30 or 40 are interrupted by a ground wire break, the outputs will continue to be supplied via the second, intact ground connection.
WARNING Wire break at ground connection Never bridge from terminal 30 to terminal 40 in the front connector and never lead only one wire to the central ground connection. Connect terminal 30 and terminal 40 to a common ground point.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
93
Wiring 4.3 Terminal and block diagrams
As a supplement to the block diagram and terminal assignment, the following figure shows the correct wiring of the outputs in order to prevent switching of the outputs in the event of a ground wire break.
Figure 4-14 Correct wiring using the digital on-board I/O X11 as an example
The ground is supplied with a first cable from the central terminal block to terminal 30 of the module and additionally with a second cable also from the central terminal block to terminal 40 of the module.
At the digital outputs, each of the ground connections of the loads is connected with a separate cable for each load to the central terminal block.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
94
Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
The figure below shows the current flow with correct wiring.
Figure 4-15 Current flow with correct wiring using the digital on-board I/O X11 as an example
With correct wiring, the supply current flows from the power supply 2L+ via terminal 29 to the module. In the module, the current flows via the output driver and exits the module via terminal 40.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
95
Wiring 4.3 Terminal and block diagrams
The figure below shows the reaction to interruption of the first ground cable.
Figure 4-16 Interruption of the first ground cable using the digital on-board I/O X11 as an example
If a wire break occurs on the first ground cable from the central terminal block to terminal 30, the module can continue to operate without restrictions, as it is still connected to the ground via the second cable from the central terminal block to terminal 40.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
96
Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
The figure below shows the reaction to interruption of the second ground cable.
Figure 4-17 Interruption of the second ground cable using the digital on-board I/O X11 as an example
If a wire break occurs on the second ground cable from the central block terminal to terminal 30, the module can continue to operate without restrictions, as it is still connected to the ground via the first cable from the central terminal block to terminal 40.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
97
Wiring 4.3 Terminal and block diagrams
The figure below shows the current flow upon interruption of both ground cables.
Figure 4-18 Current flow upon interruption of both ground cables using the digital on-board I/O X11 as an example
If a wire break occurs on the first and on the second ground cable from the central terminal block to the terminals 30 and 40 of the module, a malfunction occurs on the module. Both ground connections of the module are interrupted.
The supply current flows from the power supply 2L+ via terminal 29 to the module. In the module, the current flows via the output driver into the parasitic diode and exits the module via the output terminal, e.g. as shown in the figure via terminal 27. The supply current therefore flows via the connected load. The internal supply current is typically 25 mA.
WARNING
Interruption of both ground cables
If the ground terminals 30 and 40 are interrupted, the following incorrect response can occur:
The activated outputs, which are switched to high, start to switch back and forth between high and low. If the load connected at the output is sufficiently small, the output is continuously activated.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
98
Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
Faulty wiring
The following figure shows faulty wiring, which has a bridge on the front connector.
Figure 4-19 Faulty wiring using the digital on-board I/O X11 as an example: Bridge
Terminals 30 and 40 are connected in the front connector and only routed with one cable to the central terminal block. If this cable breaks, terminals 30 and 40 are no longer connected to the ground. The module's supply current flows out via the output terminal.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0)
Manual, 12/2017, A5E40898741-AA
99
Wiring 4.3 Terminal and block diagrams
The figure below shows the current flow when the ground connections of the loads and the ground connection of terminal 30 are routed with a common cable to the central terminal block.
Ground connections of other plant parts that can also carry large currents.
Figure 4-20 Faulty wiring using the digital on-board I/O X11 as an example: Common cable
If a break occurs in the common cable, the current of the outputs flows via terminal 30 to the module and via terminal 40 to the central terminal block. The current flows via the module.
WARNING
Current flow with faulty wiring
If a break occurs in the common cable, the current can be very high, depending on the plant, and lead to the destruction of the module.
100
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
The figure below shows the current flow with correct wiring when a potential difference exits between the grounding points.
Grounding point functional earth 1 (FE 1)
Grounding point functional earth 2 (FE 2)
Figure 4-21 Potential difference using the digital on-board I/O X11 as an example
Equipotential bonding occurs via terminals 30 and 40. When a potential difference exists between the grounding points FE1 and FE2, the compensating current flows via terminals 30 and 40.
WARNING
Current flow with faulty wiring
In the event of a potential difference, the current can be very high, depending on the potential conditions, and lead to the destruction of the module.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
101
Wiring 4.3 Terminal and block diagrams
Response of the digital outputs to a wire break at ground connection of the outputs (X12)
Due to the design of the module, in contrast to the digital onboard I/O X12, no supply current is discharged via the outputs if ground is interrupted in the digital onboard I/O X12, in contrast to the digital onboard I/O X11.
Figure 4-22 Internal circuitry of the digital onboard I/O X12
102
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
Input filter for digital inputs
To suppress disruptions, you can configure an input delay for the digital inputs. You can specify the following values for the input delay: None 0.05 ms 0.1 ms 0.4 ms 1.6 ms 3.2 ms (default setting) 12.8 ms 20 ms
Note Shielding If you use standard digital inputs with "None" set as the input delay, you must use shielded cables. Shielding and the infeed element are recommended for use of standard digital inputs starting from an input delay of 0.05 ms but are not absolutely necessary.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
103
Wiring 4.3 Terminal and block diagrams
4.3.4
Addresses of the high-speed counters
You connect the encoder signals, the digital input and output signals and the encoder supplies to the two 40-pin front connectors of the digital on-board I/O. For information on wiring the front connectors, establishing the cable shields, etc., refer to the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Encoder signals
The 24 V encoder signals are designated with letters A, B and N. You can connect the following encoder types:
Incremental encoder with signal N:
Signals A, B and N are connected using the correspondingly marked connections. Signals A and B are the two incremental signals, phase-shifted by 90°. N is the zero mark signal that supplies a pulse per revolution.
Incremental encoder without signal N:
Signals A and B are connected using the correspondingly marked connections. Signals A and B are the two incremental signals, phase-shifted by 90°.
Pulse encoder without direction signal:
The count signal is connected to the A connection.
Pulse encoder with direction signal:
The count signal is connected to the A connection. The direction signal is connected to the B connection.
Pulse encoder with up/down count signal:
The up count signal is connected to the A connection. The down count signal is connected to the B connection.
You can connect the following encoders or sensors to the A, B and N inputs:
Switching to P potential: The encoder or sensor switches the A, B and N inputs to 24 V DC.
Note External load resistance
Note that, depending on the characteristics of the signal source, effective load and height of the signal frequency, you may possibly require an external load resistance to limit the fall time of the signal from high level to low level.
The specifications/technical data of the signal source (e.g. sensor) are decisive for the configuration of such a load resistance.
Push-pull: The encoder or sensor switches the A, B and N inputs alternately to 24 V DC and to ground M.
104
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
Digital inputs HSC DI0 and HSC DI1
The digital inputs are logically assigned to the high-speed counters (HSC). For information on the possible assignment of the on-board I/O inputs to the high-speed counters, refer to table Interconnection overview of the inputs (Page 109). Up to two digital inputs are available for each high-speed counter (HSC DI0 and HSC DI1). You can use the digital inputs for the gate control (Gate), synchronization (Sync) and Capture functions. Alternatively, you can use one or more digital inputs as standard digital inputs without the functions mentioned and read the signal state of the respective digital input using the feedback interface.
Digital inputs that you do not use for high-speed counting are available for use as standard DIs.
Input addresses of the high-speed counters
You set the digital input addresses used by the high-speed counters (HSC) and the assignment of A/B/N, DI0, DI1 and DQ1 signals in STEP 7 (TIA Portal). You can enable and configure each HSC when you configure the compact CPU.
The compact CPU assigns the input addresses for the A/B/N signals automatically according to the configuration.
You specify the input addresses for DI0 and DI1 according to the table Interconnection overview of the inputs (Page 109). The interconnection produces a direct connection of the HSC to an input of the on-board I/O. The high-speed counter then uses this input as HSC DI0 or HSC DI1 ([DI] symbol). The [DI] symbols in the table identify the input addresses for HSC DI0 and HSC DI1 that are offered for selection in the hardware configuration.
Assignment of HSC addresses of inputs
You can find an overview of the options for interconnecting the inputs of the front connectors X11 and X12 in the section Interconnection overview of the inputs (Page 109).
Note HSC compatibility mode
The displayed interconnection options in the section Interconnection overview of the inputs (Page 109) assume that the "Front connector assignment like CPU 1511C" option is disabled. If the option is enabled, the input signals are interconnected the same way as for the CPU 1511C-1 PN. In this case, the interconnection options of the CPU 1511C-1 PN manual apply.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
105
Wiring 4.3 Terminal and block diagrams
Digital outputs HSC-DQ0 and HSC-DQ1
Two digital outputs are available for each high-speed counter. Digital output HSC-DQ0 is a logical output that cannot be interconnected with a digital output of the on-board I/O. Digital output HSC-DQ0 can only be used via the user program. HSC-DQ1 is a physical output that can be interconnected with a digital output of the on-board I/O.
The digital outputs are 24 V sourcing output switches relative to M and can be loaded with a rated load current of 0.1 A. The outputs used as standard outputs have a rated load current of 0.5 A. The digital outputs are protected against overload and short-circuit.
Note
It is possible to directly connect relays and contactors without external wiring. For information on the maximum possible operating frequencies and the inductance values of the inductive loads at the digital outputs, refer to the Technical specifications section.
The section Interconnection overview of outputs (Page 111) provides an overview of which digital outputs you can interconnect to which high-speed counters. Digital outputs to which no high-speed counter is interconnected can be used as standard outputs. The maximum output delay of each digital output used as standard output is 500 µs.
Shielding
Note
When you use digital inputs/outputs with technology functions, i.e. interconnect high-speed counters with the inputs/outputs, you must use shielded cables and the infeed element for shielding.
Reference
For more information on configuring the inputs of the high-speed counters, refer to the S7-1500, ET 200MP, ET 200SP Counting, measurement and position detection (http://support.automation.siemens.com/WW/view/en/59709820) function manual and the STEP 7 online help.
106
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
4.3.5
Addresses of the pulse generators in the Pulse Width Modulation (PWM) and Frequency Output modes
Configuring the outputs as pulse generators
If you configure the memory of the outputs of the CPU as pulse generators (for PWM or PTO), the corresponding addresses of the outputs are removed from the memory. You cannot use the addresses of the outputs for other purposes in your user program. When your user program writes a value to an output that you are using as a pulse generator, the CPU does not write this value to the physical output.
Assignment of the PWM addresses of the outputs
The section Interconnection overview of outputs (Page 111) provides an overview of which digital outputs you can interconnect to which PWM channels.
Note The digital inputs and outputs assigned to PWM and PTO cannot be forced.
You assign the digital inputs and outputs to the pulse duration modulation (PWM) and the pulse train output (PTO) during the device configuration. If you assign digital inputs and outputs to these functions, the values of the addresses of the assigned digital inputs and outputs cannot be changed by the function for forcing in the watch table. Instead, you can force the output bit TM_CTRL_DQ to 0 and switch the output on or off with the bit SET_DQA (relevant for the PWM and Frequency Output modes).
For more information on forcing inputs and outputs, refer to the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
107
Wiring 4.3 Terminal and block diagrams
4.3.6
Addresses of pulse generators in the PTO mode
You connect the encoder signals, the digital input and output signals and the encoder supplies to the two 40-pin front connectors of the digital on-board I/O. For information on wiring the front connectors and establishing the cable shield, refer to the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
Encoder signals
In addition to supporting its outputs, each PTO channel also supports the three following optional inputs: Reference Switch (RS) Measuring Input (MI) Drive Ready (DR)
Input addresses of the pulse generators (PTO)
You make the settings of the digital input addresses used by the pulse generators (PTO) in the hardware configuration of STEP 7 (TIA Portal). When you configure the compact CPU you can individually activate and configure the four PTO channels.
Assignment of PTO addresses of inputs
A direct connection from the PTO to an input of the on-board I/O is established through the interconnection. You can find an overview of the options for interconnecting the inputs (DI0 to DI15) to the available PTO channels (PTO1 to PTO4) in the section Interconnection overview of the inputs (Page 109).
Assignment of the PTO addresses of the outputs
The section Interconnection overview of outputs (Page 111) provides an overview of which digital outputs you can interconnect to which PTO channels.
108
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
4.3.7
Interconnection overview of the inputs
Combined interconnection of the technology channels
In order that you can correctly divide the available inputs between the possible technology channels HSC and PTO, the following table provides you with an overview of the possible interconnections of the front connectors X11 and X12. This overview is a combination of interconnection options of technology channels for HSC and PTO.
Fro Termi-
nt
nal
con
nect
or
X11 1
2
3
4
5
6
7
8
11
12
13
14
15
16
17
18
Channel
DI0 DI1 DI2 DI3 DI4 DI5 DI6 DI7 DI8 DI9 DI10 DI11 DI12 DI13 DI14 DI15
PTO1
[DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [MI] [DR] [RS] [DR] [DR]
PTO2
PTO
PTO3
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR]
[DR] [MI] [DR]
[DR] [RS] [DR]
[DR]
[DR]
PTO4
[DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR]
High-speed counter (HSC)
HSC1
HSC2
HSC3
A
[B]
[N]
A
[B]
[N]
A
[B]
[DI]
[DI]
[N]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[DI]
[...] = Use is optional
[DR] = Drive Ready; [MI] = Measuring Input; [RS] = Reference Switch
[DI] stands for [HSC DI0/HSC DI1] = DI: Is used for the HSC functions: Gate, Sync and Capture
The assignment to [B] or [N] takes precedence over the assignment to HSC DI0 or HSC DI1. This means that input addresses that are assigned to count signal [B] or [N] based on the selected signal type cannot be used for other signals such as HSC DI0 or HSC DI1.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
109
Wiring 4.3 Terminal and block diagrams
Fro Termi-
nt
nal
con
nect
or
X12 1
2
3
4
5
6
7
8
11
12
13
14
15
16
17
18
Channel
DI0 DI1 DI2 DI3 DI4 DI5 DI6 DI7 DI8 DI9 DI10 DI11 DI12 DI13 DI14 DI15
PTO1
[DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR]
PTO2
PTO
PTO3
PTO4
High-speed counter (HSC)
HSC4
HSC5
HSC6
[DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR] [DR]
[DR]
[DR]
A
[DR]
[DR]
[B]
[DR]
[DR]
[N]
[DR]
[DR]
A
[DR]
[DR]
[B]
[DR]
[DR]
[N]
[DR]
[DR]
A
[DR]
[DR]
[B]
[DR]
[DR]
[DI]
[DI]
[N]
[DI]
[DR]
[DR]
[DI]
[DI]
[DI]
[DR]
[DR]
[DI]
[DI]
[DI]
[DR]
[DR]
[DI]
[DI]
[DI]
[DR] [MI] [DR]
[DI]
[DI]
[DI]
[DR] [RS] [DR]
[DI]
[DI]
[DI]
[DR]
[DR] [MI]
[DI]
[DI]
[DI]
[DR]
[DR] [RS]
[DI]
[DI]
[DI]
[...] = Use is optional
[DR] = Drive Ready; [MI] = Measuring Input; [RS] = Reference Switch
[DI] stands for [HSC DI0/HSC DI1] = DI: Is used for the HSC functions: Gate, Sync and Capture
The assignment to [B] or [N] takes precedence over the assignment to HSC DI0 or HSC DI1. This means that input addresses that are assigned to count signal [B] or [N] based on the selected signal type cannot be used for other signals such as HSC DI0 or HSC DI1.
110
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
4.3.8
Interconnection overview of outputs
Combined interconnection of the technology channels
The following table provides you with an overview of the possible interconnections of the front connectors X11 and X12 to allow you to correctly divide the available inputs between the possible technology channels HSC, PWM and PTO. This overview is a combination of interconnection options of technology channels for HSC, PWM and PTO.
Front connect-
or
Hardware output
Ter Cha Output module min nnel al
Standard DQ
Configurable as standard DQ for channel
PWM
Configurable as PWM output
for channel
Configurable as PTO output
A for channel 1)
X11 1 DQ High-speed
0
Standard
2 DQ 1
High-speed Standard
3 DQ 2
4 DQ 3
High-speed Standard
High-speed Standard
5 DQ 4
6 DQ 5
High-speed Standard
High-speed Standard
7 DQ 6
8 DQ 7
High-speed Standard
High-speed Standard
11 DQ 8
12 DQ 9
13 DQ 10
14 DQ 11
15 DQ 12
16 DQ 13
17 DQ 14
18 DQ 15
Standard
DQ0 DQ1
DQ2 DQ3
DQ4 DQ5
DQ6 DQ7 DQ8 DQ9 DQ10 DQ11 DQ12 DQ13 DQ14 DQ15
PWM1 PWM1
PWM2 PWM2
PWM3 PWM3
PWM4 PWM4
PWM1
PWM2
PWM3
PWM4
PTO1 PTO2 PTO3 PTO4
PTO
Configurable as PTO output
B for channel 2)
Configurable as "Drive enable
output" for channel
PTO1
[PTO 2/3/4]
[PTO 1/2/3/4]
PTO2
[PTO 1/3/4]
[PTO 1/2/3/4]
PTO3
[PTO 1/2/4]
[PTO 1/2/3/4]
PTO4 PTO1* PTO2* PTO3* PTO4*
[PTO 1/2/3]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4] [PTO 1/2/3/4] [PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4] [PTO 1/2/3/4] [PTO 1/2/3/4]
HSC Can be used as HSC-DQ1 for channel
[HSC1]
HSC2 [HSC3] [HSC4] HSC6 [HSC5]
[HSC1]
HSC2 [HSC3] [HSC4] HSC6 [HSC5]
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
111
Wiring 4.3 Terminal and block diagrams
X12 1 DQ 0
2 DQ 1
3 DQ 2
4 DQ 3
5 DQ 4
6 DQ 5
7 DQ 6
8 DQ 7
11 DQ 8
12 DQ 9
13 DQ 10
14 DQ 11
15 DQ 12
16 DQ 13
17 DQ 14
18 DQ 15
Standard
DQ0 DQ1 DQ2 DQ3 DQ4 DQ5 DQ6 DQ7 DQ8 DQ9 DQ10 DQ11 DQ12 DQ13 DQ14 DQ15
* Only supports for PTO direction signal (signal type "pulse A and direction B") 1) "PTOx - Output A" stands for the signal types Pulse Output A or Pulse 2) "PTOx - Output B" stands for the Pulse output B or Direction signal types
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
[PTO 1/2/3/4]
112
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Wiring 4.3 Terminal and block diagrams
Technical characteristics of the outputs
The following table shows an overview of the technical characteristics of the individual outputs.
Accuracy of the pulse duration
Accuracy of the frequency Minimum pulse duration
Frequency range (period duration)
10 to <= 100 kHz (100 to > = 10 µs)
100 Hz to <10 kHz (10 ms to > 100 µs)
10 to < 100 Hz (0.1 s to > 10 ms)
1 to <10 Hz (1 to > 0.1 s)
0.1 to < 1 Hz (10 to >1 s)
---
DQ0 to DQ7
High-speed output (0.1 A) activated
High-Speed output (0.1 A) deactivated
max. 100 kHz
max. 10 kHz
max. 0.1 A
max. 0.5 A
Switching to P potential / Switching to P potential1) sink output
±100 ppm ±2 µs
---
±100 ppm ±10 µs with load > 0.1 A
±100 ppm ±20 µs with load 2mA
±150 ppm ±2 µs
±600 ppm ±2 µs ± 100 ppm2) 2 µs
±150 ppm ±10 µs with load > 0.1 A
±150 ppm ±20 µs with load 2mA
±600 ppm ±10 µs with load > 0.1 A
±600 ppm ± 20 µs with load 2mA ± 100 ppm2)
20 µs with load > 0.1 A 40 µs with load 2 mA 20 µs with load < 240 1)
DQ8 to DQ15 Standard output
max. 100 Hz max. 0.5 A Switching to P potential1)
---
±100 ppm ±100 µs with load > 0.1 A
±100 ppm ±200 µs with load 2mA
±150 ppm ±100 µs with load > 0.1 A
±150 ppm ±200 µs with load 2mA
±600 ppm ±100 µs with load > 0.1 A
±600 ppm ±200 µs with load 2mA ± 100 ppm2)3)
400 µs with load > 0.1 A 500 µs with load 2 mA
400 µs with load < 240 1)
1) With sourcing outputs, it must be taken into consideration that falling edges can be delayed as compared to rising edges depending on the load. The on-load factor can therefore be falsified. Consider using a high-speed output if the load at the output is greater than 240 .
2) The frequency has a basic accuracy of ±100 ppm with a resolution of 0.3638 mHz.
3) Standard outputs are affected by jitter during generation of frequencies. The set period duration is not adhered to in every period, but it is adhered to on average over several periods.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
113
Parameters/address space
5
5.1
Address space of the analog on-board I/O
Address space of the analog input and output channels
The addresses are divided into five analog input channels and two analog output channels. STEP 7 (TIA Portal) assigns the addresses automatically. You can change the addresses in the hardware configuration of STEP 7 (TIA Portal), i.e. freely assign the start address. The addresses of the channels are based on the start address.
"IB x" stands, for example, for the start address input byte x. "QB x" stands, for example, for the start address output byte x.
Figure 5-1 Address space seven-channel analog on-board I/O with value status
114
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameters/address space 5.1 Address space of the analog on-board I/O
Value status (quality information, QI)
As of firmware version 2.0, the analog and digital on-board I/O support the value status as diagnostics option. You activate the use of the value status in the hardware configuration of STEP 7 (TIA Portal). Value status is deactivated by default. When you activate the value status, the input area of the analog on-board I/O contains two additional bytes, which provide the QI bits to the five analog input channels and two analog output channels. You access the QI bits through the user program.
Value status of input channels Value status = 1 ("Good") indicates that the value of the assigned input at the terminal is valid. Value status = 0 ("Bad") indicates that the read value is not valid. Possible cause for value status = 0: a channel has been deactivated a measured value was not updated after a parameter change a measured value is outside the low/high measuring range (overflow/underflow) Wire break has occurred (only for the "Voltage" measurement type in the measuring
range "1 to 5 V" and for the "Current" measurement type in the measuring range "4 to 20 mA")
Value status of output channels The value status = 1 ("Good") indicates that the process value specified by the user program is correctly output at the terminal. The value status = 0 ("Bad") indicates that the process value output at the hardware output is incorrect. Possible cause for value status = 0: a channel has been deactivated Outputs are inactive (for example, CPU in STOP) An output value is outside the lower/upper measuring range (overflow/underflow) Wire break has occurred (only for the "Current" output type) Short-circuit has occurred (only for the "Voltage" output type)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
115
Parameters/address space 5.2 Address space of the digital on-board I/O
5.2
Address space of the digital on-board I/O
Address space of digital input and digital output channels
The addresses are divided into 2 x 16 digital input channels and 2 x 16 digital output channels. STEP 7 (TIA Portal) assigns the addresses automatically. You can change the addresses in the hardware configuration of STEP 7 (TIA Portal), i.e. freely assign the start address. The addresses of the channels are based on the start address.
The letters "a" to "d" are lasered on the on-board I/O. "IB a", for example, stands for start address input byte a. "QB x", for example, stands for start address output byte x.
Figure 5-2 Address space of the submodule X11 of the 2 x 32-channel digital on-board I/O (16 digital inputs/16 digital outputs) with value status
116
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameters/address space 5.2 Address space of the digital on-board I/O
Figure 5-3 Address space of the submodule X12 of the 2 x 32-channel digital on-board I/O (16 digital inputs/16 digital outputs) with value status
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
117
Parameters/address space 5.2 Address space of the digital on-board I/O
Value status (quality information, QI)
As of firmware version 2.0, the analog and digital on-board I/O support the value status as diagnostics option. You activate the use of the value status in the hardware configuration of STEP 7 (TIA Portal). Value status is deactivated by default. You can activate/deactivate the value status of the digital on-board I/O for X11 and X12 independently of each other. When you activate the value status, the input area of the digital on-board I/O (X11/X12) contains four additional bytes, which provide the QI bits to the 16 digital input channels and 16 digital output channels. You access the QI bits through the user program.
Value status of input channels Value status = 1 ("Good") indicates that the value of the assigned input at the terminal is valid. Value status = 0 ("Bad") indicates that no/or too little supply voltage L+ is applied at the terminal and that the read value is therefore not valid.
Value status of output channels The value status = 1 ("Good") indicates that the process value specified by the user program is correctly output at the terminal. The value status = 0 ("Bad") indicates that the process value output at the hardware output is incorrect or the channel is used for technology functions. Possible cause for value status = 0: The supply voltage L+ is missing at the terminals or is not sufficient Outputs are inactive (for example, CPU in STOP) Technology functions (HSC, PWM or PTO) use the channel
Note Behavior of the value status at the output channels for technology functions The output channels return the value status 0 ("Bad") when a technology channel (HSC, PWM or PTO) is used. It does not matter in this context whether the output value is incorrect or not.
118
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameters/address space 5.3 Address space of the pulse generators
Address space of the high-speed counters
Table 5- 1 Size of the input and output addresses of the high-speed counters
Size per high-speed counter (6x)
Inputs 16 bytes
Outputs 12 bytes
You can find a description of the control interface in the section Assignment of the control interface of the high-speed counters (Page 47). You can find a description of the feedback interface in the section Assignment of the feedback interface of the high-speed counters (Page 50).
Table 5- 2 Size of the input and output addresses in operating mode "Position input for Motion Control"
Size per high-speed counter (6x)
Inputs 16 bytes
Outputs 4 bytes
5.3
Address space of the pulse generators
Address space of the pulse generators in the PWM, frequency output and PTO modes
Operating mode
PWM (4x) Frequency output PTO Deactivated
Feedback interface (inputs) 4 bytes 4 bytes 18 bytes 4 bytes *
Control interface (outputs) 12 bytes 12 bytes 10 bytes 12 bytes *
* In "Deactivated" mode, the control interface is not evaluated and the feedback interface is set to 0 value
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
119
Parameters/address space 5.4 Measurement types and measuring ranges of the analog on-board I/O
5.4
Measurement types and measuring ranges of the analog on-
board I/O
Introduction
The analog on-board I/O is set to voltage measurement type and measuring range ±10 V by default for the inputs on channels 0 to 3. By default, channel 4 is set to resistance measuring type and measuring range 600 . If you want to use another measurement type or measuring range, change the parameter settings of the analog on-board I/O with STEP 7 (TIA Portal).
Disable unused inputs to prevent disturbances that cause incorrect behavior (e.g. triggering of a hardware interrupt).
Measurement types and measuring ranges
The following table shows the measurement types, the measuring range and the possible channels.
Table 5- 3 Measurement types and measuring range
Measurement type Voltage
Current 4WMT (4-wire measuring transducer) Resistance
Thermal resistor RTD Deactivated
Measuring range 0 to 10 V 1 to 5 V ±5 V ±10 V 0 to 20 mA 4 to 20 mA ±20 mA 150 300 600 Pt 100 Standard/Climate Ni 100 Standard/Climate -
Channel 0 to 3
0 to 3 4 4 -
The tables of the input ranges, overflow, underrange, etc. can be found in the appendix .
120
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameters/address space 5.5 Output type and output ranges of the analog on-board I/O
5.5
Output type and output ranges of the analog on-board I/O
Introduction
The analog on-board I/O is set to voltage output type and output range ±10 V as default for the outputs. If you want to use another output range or output type, you need to change the parameter settings of the analog on-board I/O in STEP 7 (TIA Portal).
Output types and output ranges
The following table shows the output type and the corresponding output ranges.
Table 5- 4 Output type and output ranges Output type Voltage
Current
Deactivated
Output range 1 to 5 V 0 to 10 V ±10 V 0 to 20 mA 4 to 20 mA ±20 mA -
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
121
Parameters/address space 5.6 Parameters of the analog on-board I/O
5.6
Parameters of the analog on-board I/O
Parameters of the analog on-board I/O
You specify the properties of the analog on-board I/O during parameter assignment with STEP 7 (TIA Portal). The tables below list the parameters that can be set for inputs and outputs, respectively.
When parameters are assigned in the user program, they are transferred to the analog onboard I/O via data records with the WRREC instruction, see section Parameter assignment and structure of the parameter data records of the analog on-board I/O (Page 166).
Configurable parameters and default settings for inputs
Table 5- 5 Configurable "Diagnostics" parameters
Diagnostics · Overflow
Parameters 1)
· Underflow
· Wire break 2)
· Current limit for wire break diagnostics
Value range
Yes/No Yes/No Yes/No 1.185 mA or 3.6 mA
Default
No No No 1.185 mA
Reconfiguration in RUN
Yes Yes Yes Yes
1) All parameters can be set channel-selective
2) Only for the "Voltage" measurement type in the measuring range 1 to 5 V and for the "Current" measurement type in the measuring range 4 to 20 mA
122
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameters/address space 5.6 Parameters of the analog on-board I/O
Table 5- 6 Configurable "Measuring" parameters
Measuring
Parameters 1)
· Measurement type
· Measuring range
· Temperature coefficient
· Temperature unit · Interference frequency suppression · Smoothing
Value range
Default
Reconfiguration in RUN
See section Measurement types and measuring ranges of the analog on-board I/O (Page 120)
Pt: 0.003851 Pt: 0.003916 Pt: 0.003902 Pt: 0.003920 Ni: 0.006180 Ni: 0.006720 · Kelvin (K) 2) · Fahrenheit (°F) · Celsius (°C) 400 Hz 60 Hz 50 Hz 10 Hz None/weak/medium/strong
Voltage
Yes
(channels 0 to 3)
Resistance (channel 4)
±10 V
Yes
(channels 0 to 3)
600 (channel 4)
0.003851
Yes
°C 50 Hz None
Yes Yes 3) Yes
1) All parameters can be set channel-selective
2) Kelvin (K) is only possible for the "Standard range" measuring range and not for the "Climatic range" measuring range
3) The interference frequency suppression must have the same value for all active input channels. This value can only be changed through reconfiguration in RUN with single channel parameter assignment (data records 0 to 4) if all other input channels are disabled.
Table 5- 7 Configurable "Hardware interrupt" parameters
Parameters 1) Hardware interrupts · Hardware interrupt low limit 1 · Hardware interrupt high limit 1 · Hardware interrupt low limit 2 · Hardware interrupt high limit 2
Value range
Yes/No Yes/No Yes/No Yes/No
Default
No No No No
Reconfiguration in RUN
Yes Yes Yes Yes
1) All parameters can be set channel-selective
You can find an overview of the limits for the hardware interrupts in the section Structure of a data record for input channels of the analog on-board I/O (Page 166).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
123
Parameters/address space 5.6 Parameters of the analog on-board I/O
Configurable parameters and default settings for outputs
Table 5- 8 Configurable "Diagnostics" parameters
Diagnostics
Parameters 1)
· Wire break 2)
· Short-circuit to ground 3)
· Overflow
· Underflow
Value range
Yes/No Yes/No Yes/No Yes/No
1) All parameters can be set channel-selective 2) Only for the "Current" output type 3) Only for the "Voltage" output type
Default
No No No No
Reconfiguration in RUN
Yes Yes Yes Yes
Table 5- 9 Configurable output parameters
Parameters 1) Output parameters · Output type · Output range · Reaction to CPU STOP
Value range
Default
See section Output type and output ranges of the analog on-board I/O (Page 121)
· Turn off
· Keep last value
· Output substitute value
Voltage ±10 V Turn off
· Substitute value
Must be within the permitted 0 voltage/current output range. See "Valid substitute value for the output range" table in the section Structure of a data record for output channels of the analog on-board I/O (Page 172)
1) All parameters can be set channel-selective
Reconfiguration in RUN Yes Yes Yes
Yes
Short-circuit detection
The diagnostics for short circuit to ground can be configured for the voltage output type. Short-circuit detection is not possible for low output values. The output voltages must therefore be under -0.1 V or over +0.1 V.
Wire break detection
The diagnostics for wire break can be configured for the current output type. Wire break detection is not possible for low output values; the output currents must therefore be below 0.2 mA or above +0.2 mA.
124
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameters/address space 5.7 Parameters of the digital on-board I/O
5.7
Parameters of the digital on-board I/O
Parameters of the digital on-board I/O in standard mode
You specify the properties of the digital on-board I/O during the parameter assignment with STEP 7 (TIA Portal). The tables below list the parameters that can be set for inputs and outputs, respectively.
When parameters are assigned in the user program, they are transferred to the digital onboard I/O via data records with the WRREC instruction, see section Parameter assignment and structure of the parameter data records of the digital on-board I/O (Page 175).
The use of a digital input by a technology channel
When a digital input is in use by a technology channel (HSC, PTO or PWM) the corresponding digital input channel remains fully usable without any restriction.
Use of a digital output by a technology channel
When a digital output is in use by a technology channel (HSC, PTO or PWM) the following restrictions apply to the use of the corresponding digital output channel:
Output values for the digital output channel are not effective. The output values are specified by the technology channel.
The CPU STOP behavior configured for the digital output channel is not effective. The reaction of the output to CPU Stop is specified by the technology channel.
With activated value status (Quality Information) for the DI16/DQ16 submodule, the QI-bit for the digital output channel shows the value 0 (= Status "Bad").
The current state of the digital output is not returned to the process image output. In the PTO operating mode, you can only observe the switching operations of the assigned digital outputs directly at the output. In the PWM operating mode and with high-speed counters (HSC), you can observe the current state additionally via the feedback interface. Note, however, that high frequencies may no longer be observed under certain circumstances due to an excessively low sampling rate.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
125
Parameters/address space 5.7 Parameters of the digital on-board I/O
Configurable parameters and default settings for inputs
Table 5- 10 Configurable parameters for inputs
Parameters 1) Diagnostics · No
supply voltage L+ Input delay
Hardware interrupt · Rising edge · Falling edge
Value range
Yes/No
None, 0.05 ms, 0.1 ms, 0.4 ms, 1.6 ms, 3.2 ms, 12.8 ms, 20 ms
Yes/No Yes/No
1) All parameters can be set channel-selective
Default No 3.2 ms
No No
Configurable parameters and default settings for outputs
Table 5- 11 Configurable parameters for outputs
Parameters 1) Diagnostics
· Missing supply voltage L+
Reaction to CPU STOP
When the digital output is controlled by a technology channel (HSC, PTO or PWM), this parameter is not effective. In this case the technology channel specifies the reaction of the digital output to CPU STOP.
Value range
Yes/No
· Turn off · Keep last value · Output substitute value 1
1) All parameters can be set channel-selective
Default No Turn off
Reconfiguration in RUN Yes Yes
Yes Yes
Reconfiguration in RUN Yes Yes
126
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Interrupts/diagnostics alarms
6.1
Status and error displays
6.1.1
Status and error displays of the CPU part
LED display
The figure below shows the LED displays of the CPU part.
6
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) STOP ACTIVE-LED (yellow LED)
Figure 6-1 LED display of the CPU 1512C-1 PN (without front panel)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
127
Interrupts/diagnostics alarms 6.1 Status and error displays
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU has three LEDs for displaying the current operating mode and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 6- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED off
LED flashes red
LED lit green
LED off
LED lit green
LED flashes red
LED lit green
LED off
LED lit green
LED off
LED lit green
LED flashes red
MAINT LED LED off LED off LED off LED off
LED lit yellow
LED flashes yellow
LED off
Meaning Missing or insufficient supply voltage on the CPU.
An error has occurred.
CPU is in RUN mode.
A diagnostics event is pending.
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration An error has occurred.
LED lit yellow LED lit yellow LED lit yellow LED lit yellow
LED flashes yellow
LED flashes yellow/green
LED flashes red LED off LED off
LED flashes red LED off
LED off
LED off LED flashes yellow
LED off LED flashes yellow
LED off
LED off
Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective CPU is performing internal activities during STOP, e.g. ramp-up after STOP. Download of the user program from the SIMATIC memory card CPU carries out a program with active breakpoint. Startup (transition from RUN STOP)
128
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Interrupts/diagnostics alarms 6.1 Status and error displays
RUN/STOP LED
LED flashes yellow/green
ERROR LED LED flashes red
MAINT LED LED flashes yellow
Meaning Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of the CPU ports.
Table 6- 2 Meaning of the LED
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
Meaning of the STOP ACTIVE LED
The following table shows the meaning of the STOP ACTIVE LED for the CPU 1512C-1 PN.
Table 6- 3 Meaning of the LEDs
STOP ACTIVE LED LED lit yellow
LED off
Meaning The CPU is switched to "STOP" mode using the STOP button.
· As long as the STOP ACTIVE LED is lit up, switching the CPU to RUN mode is only possible using the RUN button.
· The CPU can then no longer be set to RUN mode via the display operation or via online functions. The state of the buttons is retained at power-off. If the CPU does not start up automatically after a power-on, you have to keep the STOP button pressed during startup until the STOP ACTIVE LED is activated.
· If an automatic start-up is to be reliably prevented after a power-up, the STOP button has to be kept pressed during the start-up of the CPU until the STOP ACTIVE LED is activated.
· The CPU is set to "STOP" mode using the display or programming device and not with the STOP button on the device.
· The CPU is in RUN mode.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
129
Interrupts/diagnostics alarms 6.1 Status and error displays
6.1.2
Status and error displays of the analog on-board I/O
LED displays
The figure below shows the LED displays (status and error displays) of the analog onboard I/O.
Figure 6-2 LED displays
130
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Interrupts/diagnostics alarms 6.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Corrective measures for diagnostic alarms can be found in the section Interrupts and diagnostics of the analog on-board I/O (Page 135).
Table 6- 4 RUN/ERROR status and error displays
LEDs RUN ERROR
Off
Off
Flashes
Off
On
Off
On
Flashes
Flashes Flashes
Meaning
No voltage or voltage too low
Analog on-board I/O starts up and flashes until valid parameter assignment. Parameters have been set for the analog onboard I/O. Indicates module errors (at least one error is present on one channel, e.g. wire break). Hardware defective.
Remedy
· Turn on the CPU and/or the system power supply modules.
---
Evaluate the diagnostics and eliminate the error (e.g. wire break). Replace the compact CPU.
CHx LED
Table 6- 5 CHx status display
CHx LED Off On On
Meaning Channel disabled.
Remedy ---
Channel parameters set and OK.
---
Channel parameters set, channel error present. Check the wiring.
Diagnostics alarm: e.g. wire break
Disable diagnostics.
Note
Maintenance LED
During ramp-up, the firmware of the CPU checks the consistency of the calibration data of the analog on-board I/O stored by the SIEMENS Production. The yellow MAINT LED lights up if the firmware detects an inconsistency (e.g. an invalid value) or missing calibration data. The MAINT-LED is located next the red ERROR-LED on the analog on-board I/O.
Note that the MAINT LED on the analog on-board I/O is only intended for troubleshooting by SIEMENS. In normal condition, the MAINT-LED should not light up. However, if the LED is lit up, please contact SIEMENS "mySupport" at Internet (https://support.industry.siemens.com/My/ww/en/).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
131
Interrupts/diagnostics alarms 6.1 Status and error displays
6.1.3
Status and error displays of the digital on-board I/O
LED displays
The figure below shows an example of the LED displays (status and error displays) of the first module of the digital on-board I/O. Remedial measures for diagnostics alarms can be found in section Interrupts and diagnostics of the digital on-board I/O (Page 138).
Figure 6-3 LED displays
132
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Interrupts/diagnostics alarms 6.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays.
RUN/ERROR LED
Table 6- 6 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Flashes
Off
On
Off
On
Flashes
Meaning No voltage or voltage too low
Digital on-board I/O starts up. Digital on-board I/O is ready for operation. A diagnostics interrupt is pending. Supply voltage missing.
Remedy
· Turn on the CPU. · Check whether too many modules are in-
serted.
---
Check supply voltage L+.
PWRx LED
Table 6- 7 PWRx status display
PWRx LED Off On
Meaning
Remedy
Supply voltage L+ to module too low or missing Check supply voltage L+.
Supply voltage L+ is present and OK.
---
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
133
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
CHx LED
Table 6- 8 CHx status display
CHx LED Off On
Meaning 0 = Status of the input/output signal.
1 = Status of the input/output signal.
Remedy ---
---
Note
For the status display, the digital inputs only take into account the filter time of the corresponding DI and not the filter time of the A/B/N signals of the fast counters (HSC).
For example, a static signal may be displayed when the DI has a configured input delay of 3.2 ms, even though a 100 kHz counter on these inputs still detects edge transitions.
6.2
Interrupts and diagnostics
6.2.1
Interrupts and diagnostics of the CPU part
For information on the topic of "Interrupts", refer to the STEP 7 (TIA Portal) online help.
For information on "Diagnostics" and "System alarms", refer to the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
134
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
6.2.2
Interrupts and diagnostics of the analog on-board I/O
Diagnostics interrupt
The analog on-board I/O generates a diagnostics interrupt at the following events:
Table 6- 9 Diagnostics interrupt for inputs and outputs
Event
Overflow Underflow Wire break Short-circuit to ground
Inputs x x x 1) ---
Diagnostics interrupt
1) Possible for the voltage measuring range (1 to 5 V), current measuring range (4 to 20 mA) 2) Possible for current output type 3) Possible for voltage output type
Outputs x x x 2) x 3)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
135
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
Hardware interrupt for inputs
The compact CPU can generate a hardware interrupt for the following events: Below low limit 1 Above high limit 1 Below low limit 2 Above high limit 2 You can find detailed information on the event in the hardware interrupt organization block with the "RALARM" (read additional interrupt information) instruction and in the STEP 7 (TIA Portal) online help. The start information of the organization block includes information on which channel of the analog on-board I/O triggered the hardware interrupt. The figure below shows the assignment to the bits of double word 8 in local data.
Figure 6-4 Start information of the organization block
Behavior when limits 1 and 2 are reached at the same time
If the two high limits 1 and 2 are reached at the same time, the analog on-board I/O always signals the hardware interrupt for high limit 1 first. The configured value for high limit 2 is irrelevant. After processing the hardware interrupt for high limit 1, the compact CPU triggers the hardware interrupt for high limit 2.
The analog on-board I/O behaves accordingly when the low limits are reached simultaneously. If the two low limits 1 and 2 are reached at the same time, the analog onboard I/O always signals the hardware interrupt for low limit 1 first. After processing the hardware interrupt for low limit 1, the analog on-board I/O triggers the hardware interrupt for low limit 2.
136
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
Structure of the additional interrupt information
Table 6- 10 Structure of USI = W#16#0001
Data block name
Contents
USI (User Structure Identifier)
W#16#0001
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#n
It is followed by the event that triggered the hardware interrupt.
Event
B#16#03
B#16#04
B#16#05
B#16#06
Comment Additional hardware interrupt information of the analog on-board I/O
Number of the event-triggering channel (n = number of analog on-board I/O channels -1)
Below low limit 1 Above high limit 1 Below low limit 2 Above high limit 2
Bytes 2
1
1
Diagnostics alarms
A diagnostics alarm is output for each diagnostics event and the ERROR LED flashes on the analog on-board I/O. The diagnostics alarms can, for example, be read out in the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
Table 6- 11 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Wire break
Error code 6H
Overflow
7H
Underflow
8H
Short-circuit to ground 1H
Meaning
Remedy
Resistance of encoder circuit too high
Use a different encoder type or modify the wiring, for example, using cables with larger cross-section
Interruption of the cable between the Connect the cable analog on-board I/O and sensor
Channel not connected (open)
· Disable diagnostics
· Connect the channel
Measuring range exceeded
The output value set by the user program exceeds the valid rated range/overrange
Value below measuring range
The output value set by the user program is below the valid rated range/underrange
Overload at output
Short-circuit of output QV to MANA
Check the measuring range Correct the output value
Check the measuring range Correct the output value
Eliminate overload Eliminate the short-circuit
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
137
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
6.2.3
Interrupts and diagnostics of the digital on-board I/O
Diagnostics interrupt
A diagnostics alarm is output for each diagnostics event and the ERROR LED flashes on the digital on-board I/O. You can read out the diagnostics alarms, for example, in the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
Table 6- 12 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Load voltage missing
Hardware interrupt lost
Error code 11H 16H
Meaning
No supply voltage L+
The digital on-board I/O cannot trigger an interrupt because the previous interrupt was not acknowledged; possibly a configuration error
Corrective measures Feed supply voltage L+
· Change the interrupt processing in the CPU and reconfigure the digital onboard I/O.
Diagnostic interrupts when using high-speed counters
Table 6- 13 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm
Illegal A/B signal ratio
Error code 500H
Meaning
Corrective measures
· Time sequence of the A and B signals · Correct the process wiring
of the incremental encoder do not meet certain requirements.
· Possible causes:
· Check the encoder/sensor · Check the parameter assignment.
Signal frequency too high Encoder is defective Process wiring is incorrect
138
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
Hardware interrupt
The compact CPU can generate a hardware interrupt for the following events: Rising edge Falling edge You will find detailed information on the event in the hardware interrupt organization block with the "RALRM" (read additional interrupt information) instruction and in the STEP 7 online help. The start information of the organization block includes information on which channel triggered the hardware interrupt. The figure below shows the assignment to the bits of double word 8 in local data.
Figure 6-5 Start information of the organization block
Structure of the additional interrupt information
Table 6- 14 Structure of USI = W#16#0001
Data block name
Contents
USI
W#16#0001
(User Structure Identifier)
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#0F
The error event that triggered the hardware interrupt follows.
Event
B#16#01
B#16#02
Comment
Bytes
Additional interrupt information of the hardware 2 interrupts of the digital on-board I/O
Number of the event-triggering channel (chan- 1 nel 0 to channel 15)
Rising edge
1
Falling edge
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
139
Interrupts/diagnostics alarms 6.2 Interrupts and diagnostics
Hardware interrupts when using the high-speed counters
Table 6- 15 Hardware interrupts and their meaning
Hardware interrupt Opening of the internal gate (gate start) Closing of the internal gate (gate stop) Overflow (high counting limit violated)
Event type number 1
2
3
Underflow (low counting limit violated)
4
Comparison event for DQ0 occurred
5
Comparison event for DQ1 occurred
6
Zero crossing
7
New Capture value present1)
8
Synchronization of the counter by an exter- 9 nal signal
Direction reversal2)
10
Meaning
When the internal gate is opened, the technology function triggers a hardware interrupt in the CPU.
When the internal gate is closed, the technology functions trigger a hardware interrupt in the CPU.
When the count value exceeds the high counting limit, the technology function triggers a hardware interrupt in the CPU.
When the count value falls below the low counting limit, the technology function triggers a hardware interrupt in the CPU.
When a comparison event for DQ0 occurs due to the selected comparison condition, the technology function triggers a hardware interrupt in the CPU. When the change of the count value for an incremental or pulse encoder was not caused by a count pulse, the technology function does not trigger a hardware interrupt.
When a comparison event for DQ1 occurs due to the selected comparison condition, the technology function triggers a hardware interrupt in the CPU.
When the change of the count value for an incremental or pulse encoder was not caused by a count pulse, the technology function does not trigger a hardware interrupt.
At a zero crossing of the counter or position value, the technology function triggers a hardware interrupt in the CPU.
When the current counter or position value is saved as a Capture value, the technology function triggers a hardware interrupt in the CPU.
At the synchronization of the counter by an N signal or edge at DI, the technology function triggers a hardware interrupt in the CPU.
When the count value or position value changes direction, the technology function triggers a hardware interrupt in the CPU.
1) Can only be set in counting mode
2) Feedback bit STS_DIR is preset to "0". When the first count value or position value change occurs in the reverse direction directly after switching on the digital on-board I/O, a hardware interrupt is not triggered.
140
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technical specifications
Technical specifications of the CPU 1512C-1 PN
Article number General information
Product type designation HW functional status Firmware version Engineering with · STEP 7 TIA Portal configurable/integrated
as of version
Configuration control via dataset
Display Screen diagonal [cm]
Control elements Number of keys Mode buttons
Supply voltage Type of supply voltage permissible range, lower limit (DC)
permissible range, upper limit (DC) Reverse polarity protection Mains buffering · Mains/voltage failure stored energy time
· Repeat rate, min.
Input current Current consumption (rated value) Current consumption, max. Inrush current, max. I²t
Digital inputs · from load voltage L+ (without load), max.
Digital outputs · from load voltage L+, max.
6ES7512-1CK01-0AB0
CPU 1512C-1 PN FS01 V2.5
V15
Yes
3.45 cm
8 2
24 V DC 19.2 V; 20.4 V DC, for supplying the digital inputs/outputs 28.8 V Yes
5 ms; Refers to the power supply on the CPU section 1/s
0.8 A 1 A 1.9 A; Rated value 0.34 A²·s
20 mA; per group
30 mA; Per group, without load
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
7
141
Technical specifications
Article number Output voltage
Rated value (DC) Encoder supply
Number of outputs
24 V encoder supply · 24 V · Short-circuit protection · Output current, max.
Power Infeed power to the backplane bus Power consumption from the backplane bus (balanced)
Power loss Power loss, typ.
Memory Number of slots for SIMATIC memory card SIMATIC memory card required
Work memory · integrated (for program) · integrated (for data)
Load memory · Plug-in (SIMATIC Memory Card), max.
Backup · maintenance-free
CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ.
CPU-blocks Number of elements (total)
DB · Number range
· Size, max.
FB · Number range · Size, max.
6ES7512-1CK01-0AB0
24 V
2; One common 24 V encoder supply per 16 digital inputs
Yes; L+ (-0.8 V) Yes 1 A
10 W 9 W
15.2 W
1 Yes
250 kbyte 1 Mbyte
32 Gbyte
Yes
48 ns 58 ns 77 ns 307 ns
2 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999 1 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535 250 kbyte
142
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technical specifications
Article number FC
· Number range · Size, max. OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of DPV1 alarm OBs · Number of isochronous mode OBs · Number of technology synchronous alarm
OBs · Number of startup OBs · Number of asynchronous error OBs · Number of synchronous error OBs · Number of diagnostic alarm OBs Nesting depth · per priority class Counters, timers and their retentivity S7 counter · Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable
6ES7512-1CK01-0AB0 0 ... 65 535 250 kbyte
250 kbyte 100 20 20 20; With minimum OB 3x cycle of 500 µs 50 3 1 2
100 4 2 1
24
2 048
Yes
Any (only limited by the main memory)
Yes
2 048
Yes
Any (only limited by the main memory)
Yes
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
143
Technical specifications
Article number Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max.
Extended retentive data area (incl. timers, counters, flags), max. Flag · Number, max. · Number of clock memories
Data blocks · Retentivity adjustable · Retentivity preset
Local data · per priority class, max.
Address area Number of IO modules
I/O address area · Inputs · Outputs
per integrated IO subsystem Inputs (volume) Outputs (volume)
per CM/CP Inputs (volume) Outputs (volume)
Subprocess images · Number of subprocess images, max.
Hardware configuration Number of distributed IO systems
Number of DP masters · Via CM
Number of IO Controllers · integrated · Via CM
6ES7512-1CK01-0AB0
128 kbyte; In total; available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 88 KB 1 Mbyte; When using PS 60W 24/48/60V DC HF
16 kbyte 8; 8 clock memory bits, grouped into one clock memory byte
Yes No
64 kbyte; max. 16 KB per block
2 048; max. number of modules / submodules
32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image
8 kbyte 8 kbyte
8 kbyte 8 kbyte
32
32; A distributed I/O system is characterized not only by the integration of distributed I/O via PROFINET or PROFIBUS communication modules, but also by the connection of I/O via AS-i master modules or links (e.g. IE/PB-Link)
6; A maximum of 6 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
1 6; A maximum of 6 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
144
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technical specifications
Article number Rack
· Modules per rack, max. · Number of lines, max. PtP CM · Number of PtP CMs
Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number Clock synchronization · supported · in AS, master · in AS, slave · on Ethernet via NTP Digital inputs integrated channels (DI) Digital inputs, parameterizable Source/sink input Input characteristic curve in accordance with IEC 61131, type 3 Digital input functions, parameterizable · Gate start/stop · Capture · Synchronization Input voltage · Type of input voltage · Rated value (DC) · for signal "0" · for signal "1" Input current · for signal "1", typ.
6ES7512-1CK01-0AB0
32; CPU + 31 modules 1
the number of connectable PtP CMs is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
Yes Yes Yes Yes
32 Yes P-reading Yes
Yes Yes Yes
DC 24 V -3 to +5V +11 to +30V
2.5 mA
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
145
Technical specifications
Article number Input delay (for rated value of input voltage) for standard inputs
parameterizable
at "0" to "1", min. at "0" to "1", max. at "1" to "0", min. at "1" to "0", max. for interrupt inputs parameterizable for counter/technological functions parameterizable Cable length · shielded, max.
· unshielded, max. Digital outputs
Type of digital output integrated channels (DO) Current-sourcing Short-circuit protection · Response threshold, typ.
Controlling a digital input Accuracy of pulse duration
minimum pulse duration Digital output functions, parameterizable
· Switching tripped by comparison values · PWM output
Number, max. Cycle duration, parameterizable ON period, min. ON period, max. Resolution of the duty cycle · Frequency output · Pulse train
6ES7512-1CK01-0AB0
Yes; none / 0.05 / 0.1 / 0.4 / 1.6 / 3.2 / 12.8 / 20 ms 4 µs; for parameterization "none" 20 ms 4 µs; for parameterization "none" 20 ms
Yes; Same as for standard inputs
Yes; Same as for standard inputs
1 000 m; 600 m for technological functions; depending on input frequency, encoder and cable quality; max. 50 m at 100 kHz 600 m; For technological functions: No
Transistor 32 Yes; Push-pull output Yes; electronic/thermal 1.6 A with standard output, 0.5 A with high-speed output; see manual for details Yes Up to ±100 ppm ±2 s at high-speed output; see manual for details 2 µs; With High Speed output
Yes; As output signal of a high-speed counter Yes 4 Yes 0 % 100 % 0.0036 %; For S7 analog format, min. 40 ns Yes Yes; also for pulse/direction interface
146
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technical specifications
Article number Switching capacity of the outputs
· with resistive load, max.
· on lamp load, max.
Load resistance range · lower limit
· upper limit Output voltage
· Type of output voltage · for signal "0", max.
· for signal "1", min. Output current
· for signal "1" rated value
· for signal "1" permissible range, min. · for signal "1" permissible range, max.
· for signal "0" residual current, max. Output delay with resistive load
· "0" to "1", max. · "1" to "0", max. for technological functions
"0" to "1", max.
"1" to "0", max.
Parallel switching of two outputs · for logic links · for uprating · for redundant control of a load
Switching frequency · with resistive load, max.
· with inductive load, max.
· on lamp load, max.
6ES7512-1CK01-0AB0
0.5 A; 0.1 A with high-speed output, i.e. when using a high-speed output; see manual for details 5 W; 1 W with high-speed output, i.e. when using a high-speed output; see manual for details
48 ; 240 ohms with high-speed output, i.e. when using a high-speed output; see manual for details 12 k
DC 1 V; With high-speed output, i.e. when using a high-speed output; see manual for details 23.2 V; L+ (-0.8 V)
0.5 A; 0.1 A with high-speed output, i.e. when using a high-speed output, observe derating; see manual for details 2 mA 0.6 A; 0.12 A with high-speed output, i.e. when using a high-speed output, observe derating; see manual for details 0.5 mA
200 µs 500 µs; Load-dependent
5 µs; Depending on the output used, see additional description in manual 5 µs; Depending on the output used, see additional description in manual
Yes; For technological functions: No No Yes; For technological functions: No
100 kHz; For high-speed output, 100 Hz for standard output 0.5 Hz; Acc. to IEC 60947-5-1, DC-13; observe derating curve 10 Hz
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
147
Technical specifications
Article number Total current of the outputs
· Current per channel, max. · Current per group, max. · Current per power supply, max.
for technological functions Current per channel, max.
Cable length · shielded, max.
· unshielded, max. Analog inputs
Number of analog inputs · For current measurement · For voltage measurement · For resistance/resistance thermometer
measurement permissible input voltage for voltage input (destruction limit), max. permissible input current for current input (destruction limit), max. Cycle time (all channels), min.
Technical unit for temperature measurement adjustable Input ranges (rated values), voltages · 0 to +10 V · Input resistance (0 to 10 V) · 1 V to 5 V · Input resistance (1 V to 5 V) · -10 V to +10 V · Input resistance (-10 V to +10 V) · -5 V to +5 V · Input resistance (-5 V to +5 V)
6ES7512-1CK01-0AB0
0.5 A; see additional description in the manual 8 A; see additional description in the manual 4 A; 2 power supplies for each group, current per power supply max. 4 A, see additional description in manual
0.5 A; see additional description in the manual
1 000 m; 600 m for technological functions; depending on output frequency, load, and cable quality; max. 50 m at 100 kHz 600 m; For technological functions: No
5; 4x for U/I, 1x for R/RTD 4; max. 4; max. 1
28.8 V
40 mA
1 ms; Dependent on the parameterized interference frequency suppression; for details, see conversion procedure in manual Yes; °C/°F/K
Yes; Physical measuring range: ± 10 V 100 k Yes; Physical measuring range: ± 10 V 100 k Yes 100 k Yes; Physical measuring range: ± 10 V 100 k
148
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technical specifications
Article number Input ranges (rated values), currents
· 0 to 20 mA
6ES7512-1CK01-0AB0 Yes; Physical measuring range: ± 20 mA
· Input resistance (0 to 20 mA) · -20 mA to +20 mA
50 ; Plus approx. 55 ohm for overvoltage protection by PTC
Yes
· Input resistance (-20 mA to +20 mA) · 4 mA to 20 mA
50 ; Plus approx. 55 ohm for overvoltage protection by PTC
Yes; Physical measuring range: ± 20 mA
· Input resistance (4 mA to 20 mA)
Input ranges (rated values), resistance thermometer
· Ni 100
50 ; Plus approx. 55 ohm for overvoltage protection by PTC
Yes; Standard/climate
· Input resistance (Ni 100)
10 M
· Pt 100
Yes; Standard/climate
· Input resistance (Pt 100)
10 M
Input ranges (rated values), resistors · 0 to 150 ohms
Yes; Physical measuring range: 0 ... 600 ohms
· Input resistance (0 to 150 ohms)
10 M
· 0 to 300 ohms
Yes; Physical measuring range: 0 ... 600 ohms
· Input resistance (0 to 300 ohms)
10 M
· 0 to 600 ohms
Yes
· Input resistance (0 to 600 ohms)
10 M
Cable length · shielded, max.
800 m; for U/I, 200 m for R/RTD
Analog outputs integrated channels (AO) Voltage output, short-circuit protection Cycle time (all channels), min.
Output ranges, voltage · 0 to 10 V
2 Yes 1 ms; Dependent on the parameterized interference frequency suppression; for details, see conversion procedure in manual
Yes
· 1 V to 5 V
Yes
· -10 V to +10 V
Yes
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
149
Technical specifications
Article number Output ranges, current
· 0 to 20 mA
· -20 mA to +20 mA
· 4 mA to 20 mA Load impedance (in rated range of output)
· with voltage outputs, min.
· with voltage outputs, capacitive load, max.
· with current outputs, max.
· with current outputs, inductive load, max. Cable length
· shielded, max. Analog value generation for the inputs Integration and conversion time/resolution per channel
· Resolution with overrange (bit including sign), max.
· Integration time, parameterizable
· Interference voltage suppression for interference frequency f1 in Hz
Smoothing of measured values · parameterizable
· Step: None
· Step: low
· Step: Medium
· Step: High Analog value generation for the outputs Integration and conversion time/resolution per channel
· Resolution with overrange (bit including sign), max.
Settling time · for resistive load
· for capacitive load
· for inductive load
6ES7512-1CK01-0AB0 Yes Yes Yes
1 k 100 nF 500 1 mH
200 m
16 bit Yes; 2.5 / 16.67 / 20 / 100 ms, acts on all channels 400 / 60 / 50 / 10
Yes Yes Yes Yes Yes
16 bit
1.5 ms 2.5 ms 2.5 ms
150
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technical specifications
Article number Encoder Connection of signal encoders
· for voltage measurement
6ES7512-1CK01-0AB0 Yes
· for current measurement as 4-wire trans- Yes ducer
· for resistance measurement with two-wire Yes connection
· for resistance measurement with three-wire Yes connection
· for resistance measurement with four-wire Yes connection
Connectable encoders
· 2-wire sensor
Yes
permissible quiescent current (2-wire sensor), max.
1.5 mA
Encoder signals, incremental encoder (asymmetrical)
· Input voltage
24 V
· Input frequency, max.
100 kHz
· Counting frequency, max.
400 kHz; with quadruple evaluation
· Signal filter, parameterizable
Yes
· Incremental encoder with A/B tracks, 90° Yes phase offset
· Incremental encoder with A/B tracks, 90° Yes phase offset and zero track
· Pulse encoder
Yes
· Pulse encoder with direction
Yes
· Pulse encoder with one impulse signal per Yes count direction
Errors/accuracies
Linearity error (relative to input range), (+/-) 0.1 %
Temperature error (relative to input range), (+/- 0.005 %/K )
Crosstalk between the inputs, max.
-60 dB
Repeat accuracy in steady state at 25 °C (rela- 0.05 % tive to input range), (+/-)
Output ripple (relative to output range, bandwidth 0 to 50 kHz), (+/-)
0.02 %
Linearity error (relative to output range), (+/-) 0.15 %
Temperature error (relative to output range), (+/-)
0.005 %/K
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
151
Technical specifications
Article number
6ES7512-1CK01-0AB0
Crosstalk between the outputs, max.
-80 dB
Repeat accuracy in steady state at 25 °C (rela- 0.05 % tive to output range), (+/-)
Operational error limit in overall temperature range
· Voltage, relative to input range, (+/-)
0.3 %
· Current, relative to input range, (+/-)
0.3 %
· Resistance, relative to input range, (+/-)
0.3 %
· Resistance thermometer, relative to input range, (+/-)
Pt100 Standard: ±2 K, Pt100 Climate: ±1 K, Ni100 Standard: ±1.2 K, Ni100 Climate: ±1 K
· Voltage, relative to output range, (+/-)
0.3 %
· Current, relative to output range, (+/-)
0.3 %
Basic error limit (operational limit at 25 °C) · Voltage, relative to input range, (+/-)
0.2 %
· Current, relative to input range, (+/-)
0.2 %
· Resistance, relative to input range, (+/-)
0.2 %
· Resistance thermometer, relative to input range, (+/-)
Pt100 Standard: ±1 K, Pt100 Climate: ±0.5 K, Ni100 Standard: ±0.6 K, Ni100 Climate: ±0.5 K
· Voltage, relative to output range, (+/-)
0.2 %
· Current, relative to output range, (+/-)
0.2 %
Interference voltage suppression for f = n x (f1 +/1 %), f1 = interference frequency
· Series mode interference (peak value of interference < rated value of input range), min.
30 dB
· Common mode voltage, max.
10 V
· Common mode interference, min.
60 dB; at 400 Hz: 50 dB
Interfaces
Number of PROFINET interfaces
1
1. Interface
Interface types
· Number of ports
2
· integrated switch
Yes
· RJ 45 (Ethernet)
Yes; X1
152
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technical specifications
Article number Functionality
· IP protocol
6ES7512-1CK01-0AB0 Yes; IPv4
· PROFINET IO Controller
Yes
· PROFINET IO Device
Yes
· SIMATIC communication
Yes
· Open IE communication
Yes
· Web server
Yes
· Media redundancy
PROFINET IO Controller Services
PG/OP communication
Yes; MRP Automanager according to IEC 624392 Edition 2.0
Yes
S7 routing
Yes
Isochronous mode
Yes
Open IE communication
Yes
IRT
Yes
MRP MRPD
Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50
Yes; Requirement: IRT
Prioritized startup
Yes; Max. 32 PROFINET devices
Number of connectable IO Devices, max.
128; In total, up to 512 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
Of which IO devices with IRT, max.
64
Number of connectable IO Devices for 128 RT, max.
of which in line, max.
128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
153
Technical specifications
Article number Update time for IRT
for send cycle of 250 µs
for send cycle of 500 µs
for send cycle of 1 ms
6ES7512-1CK01-0AB0
250 s to 4 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 625 µs of the isochronous OB is decisive 500 s to 8 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 625 µs of the isochronous OB is decisive 1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" Update time = set "odd" send clock (any multiple
send cycles
of 125 µs: 375 µs, 625 µs ... 3 875 µs)
Update time for RT for send cycle of 250 µs
250 µs to 128 ms
for send cycle of 500 µs
500 µs to 256 ms
for send cycle of 1 ms
1 ms to 512 ms
for send cycle of 2 ms
2 ms to 512 ms
for send cycle of 4 ms
4 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
Yes
MRP
Yes
MRPD
Yes; Requirement: IRT
PROFIenergy
Yes
Shared device
Yes
Number of IO Controllers with shared 4 device, max.
Asset management record
Yes; Per user program
Interface types
RJ 45 (Ethernet)
· 100 Mbps
Yes
· Autonegotiation
Yes
· Autocrossing
Yes
· Industrial Ethernet status LED
Yes
154
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technical specifications
Article number Protocols Number of connections
· Number of connections, max.
· Number of connections reserved for ES/HMI/web
6ES7512-1CK01-0AB0
128; via integrated interfaces of the CPU and connected CPs / CMs 10
· Number of connections via integrated inter- 88 faces
· Number of S7 routing paths
16
PROFINET IO Controller
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
Yes
Open IE communication
Yes
IRT
Yes
MRP MRPD
Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50
Yes; Requirement: IRT
PROFIenergy
Yes
Prioritized startup
Yes; Max. 32 PROFINET devices
Number of connectable IO Devices, max.
128; In total, up to 512 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
Of which IO devices with IRT, max.
64
Number of connectable IO Devices for 128 RT, max.
of which in line, max.
128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
SIMATIC communication · S7 communication, as server
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
Yes
· S7 communication, as client
Yes
· User data per job, max.
See online help (S7 communication, user data size)
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
155
Technical specifications
Article number Open IE communication
· TCP/IP Data length, max. several passive connections per port, supported
· ISO-on-TCP (RFC1006) Data length, max.
· UDP Data length, max. UDP multicast
· DHCP · SNMP · DCP · LLDP Web server · HTTP · HTTPS OPC UA · Runtime license required · OPC UA Server
Application authentication Security policies
User authentication Further protocols
· MODBUS Media redundancy
· Switchover time on line break, typ. · Number of stations in the ring, max. Isochronous mode Isochronous operation (application synchronized up to terminal) Equidistance
6ES7512-1CK01-0AB0
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
Yes; Standard and user pages Yes; Standard and user pages
Yes Yes; Data access (read, write, subscribe), method call, custom address space Yes Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "anonymous" or by user name & password
Yes; MODBUS TCP
200 ms; For MRP, bumpless for MRPD 50
Yes; With minimum OB 6x cycle of 625 µs
Yes
156
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technical specifications
Article number S7 message functions
Number of login stations for message functions, max. Program alarms Number of configurable program alarms Number of simultaneously active program alarms · Number of program alarms · Number of alarms for system diagnostics · Number of alarms for motion technology
objects Test commissioning functions
Joint commission (Team Engineering)
Status block
Single step Number of breakpoints Status/control · Status/control variable · Variables
· Number of variables, max. of which status variables, max. of which control variables, max.
Forcing · Forcing, variables · Number of variables, max.
Diagnostic buffer · present · Number of entries, max. of which powerfail-proof
Traces · Number of configurable Traces
Interrupts/diagnostics/status information Alarms
· Diagnostic alarm · Hardware interrupt
6ES7512-1CK01-0AB0
32 Yes 5 000
300 100 80
Yes; Parallel online access possible for up to 5 engineering systems Yes; Up to 8 simultaneously (in total across all ES clients) No 8
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Peripheral inputs/outputs 200
Yes 1 000 500
4; Up to 512 KB of data per trace are possible
Yes Yes
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
157
Technical specifications
Article number Diagnostic messages
· Monitoring the supply voltage · Wire-break
· Short-circuit
· A/B transition error at incremental encoder
6ES7512-1CK01-0AB0
Yes
Yes; for analog inputs/outputs, see description in manual Yes; for analog outputs, see description in manual Yes
Diagnostics indication LED · RUN/STOP LED · ERROR LED · MAINT LED · STOP ACTIVE LED · Monitoring of the supply voltage (PWRLED) · Channel status display · for channel diagnostics · Connection display LINK TX/RX
Yes Yes Yes Yes Yes
Yes Yes; For analog inputs/outputs Yes
Supported technology objects
Motion Control
Yes; Note: The number of axes affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER
· Number of available Motion Control re-
800
sources for technology objects (except cam
disks)
· Required Motion Control resources
per speed-controlled axis
40
per positioning axis
80
per synchronous axis
160
per external encoder
80
per output cam
20
per cam track
160
per probe
40
· Positioning axis
Number of positioning axes at motion control cycle of 4 ms (typical value)
Number of positioning axes at motion control cycle of 8 ms (typical value)
Controller · PID_Compact
5 10
Yes; Universal PID controller with integrated optimization
158
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technical specifications
Article number · PID_3Step
· PID-Temp
Counting and measuring · High-speed counter Integrated Functions Number of counters Counting frequency (counter) max. Counting functions · Continuous counting · Counter response parameterizable · Hardware gate via digital input · Software gate · Event-controlled stop · Synchronization via digital input · Counting range, parameterizable Comparator
Number of comparators Direction dependency Can be changed from user program Position detection · Incremental acquisition · Suitable for S7-1500 Motion Control Measuring functions · Measuring time, parameterizable · Dynamic measurement period adjustment · Number of thresholds, parameterizable Measuring range Frequency measurement, min. Frequency measurement, max. Cycle duration measurement, min. Cycle duration measurement, max.
6ES7512-1CK01-0AB0 Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
6 400 kHz; with quadruple evaluation
Yes Yes Yes Yes Yes Yes Yes
2; per count channel; see manual for details Yes Yes
Yes Yes
Yes Yes 2
0.04 Hz 400 kHz; with quadruple evaluation 2.5 µs 25 s
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
159
Technical specifications
Article number Accuracy
Frequency measurement
Cycle duration measurement
Velocity measurement
Potential separation Potential separation digital inputs
· between the channels
6ES7512-1CK01-0AB0
100 ppm; depending on measuring interval and signal evaluation 100 ppm; depending on measuring interval and signal evaluation 100 ppm; depending on measuring interval and signal evaluation
No
· between the channels, in groups of
16
Potential separation digital outputs
· between the channels
No
· between the channels, in groups of
16
Potential separation channels · between the channels and backplane bus Yes
· Between the channels and load voltage L+ No
Isolation Isolation tested with
Ambient conditions Ambient temperature during operation
· horizontal installation, min.
707 V DC (type test) 0 °C
· horizontal installation, max. · vertical installation, min.
60 °C; Note derating data for onboard I/O in the manual. Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off
0 °C
· vertical installation, max.
Ambient temperature during storage/transportation
· min.
40 °C; Note derating data for onboard I/O in the manual. Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C
· max.
70 °C
Configuration
Programming
Programming language
LAD
Yes
FBD
Yes
STL
Yes
SCL
Yes
GRAPH
Yes
160
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Article number Know-how protection
· User program protection/password protection
· Copy protection
· Block protection Access protection
· Password for display
· Protection level: Write protection
· Protection level: Read/write protection
· Protection level: Complete protection Cycle time monitoring
· lower limit
· upper limit Dimensions
Width Height Depth Weights Weight
6ES7512-1CK01-0AB0
Yes
Yes Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
110 mm 147 mm 129 mm
1 360 g
Technical specifications
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
161
Technical specifications
Power reduction (derating) to total current of digital outputs (per power supply)
The following figure shows the load rating of the digital outputs in relation to the mounting position and the ambient temperature.
Horizontal mounting position Vertical mounting position
Figure 7-1 Loading capacity of the digital outputs per mounting position
The following trends shows the load rating of the digital outputs when technology functions are used in dependence on the ambient temperature.
Horizontal mounting position
Figure 7-2 Load rating of the digital outputs when technology functions are used
162
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Technical specifications
Power reduction (derating) to total current of digital inputs (per power supply)
The following figure shows the load rating of the current for encoder supplies of digital inputs.
Horizontal mounting position
Figure 7-3 Load rating of the current for encoder supplies of digital inputs
Simultaneity of digital inputs per group
If the maximum voltage at the inputs is 24 V, all the digital inputs may be simultaneously at high level (corresponds to 100% of the digital inputs). If the maximum voltage at the inputs is 30 V, only 12 digital inputs of 16 digital inputs of one group may be simultaneously at high level (corresponds to 75% of the digital inputs).
General technical specifications
For information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., refer to the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
163
Dimension drawings
A
This appendix contains the dimension drawings of the compact CPU installed on a mounting rail. You must take the dimensions into consideration for installation in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of CPU 1512C-1 PN front and side views
164
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Dimension drawings
Figure A-2 Dimension drawing of CPU 1512C-1 PN side view with front panel open
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
165
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
of the analog on-board I/O
Parameter assignment in the user program
You have the option of reassigning parameters for the analog on-board I/O in RUN (for example, measuring ranges of individual channels can be modified in RUN without affecting the other channels).
Changing parameters in RUN
The parameters are transferred to the analog on-board I/O via data records with the WRREC instruction. The parameters set with STEP 7 (TIA Portal) are not changed in the CPU, which means the parameters set in STEP 7 (TIA Portal) will be valid again after a restart.
The parameters are checked for plausibility by the analog on-board I/O only after the transfer.
Output parameter STATUS
If errors occur when transferring parameters with the "WRREC" instruction, the analog onboard I/O continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
You will find a description of the "WRREC" instruction and the error codes in the STEP 7 (TIA Portal) online help.
B.2
Structure of a data record for input channels of the analog on-
board I/O
Assignment of data record and channel
The parameters for the 5 analog input channels are located in data records 0 to 4 and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 Data record 2 for channel 2 Data record 3 for channel 3 Data record 4 for channel 4
166
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameter data records B.2 Structure of a data record for input channels of the analog on-board I/O
Data record structure
The example in the figure below shows the structure of data record 0 for channel 0. The structure is identical for channels 1 to 4. The values in byte 0 and byte 1 are fixed and must not be changed. You enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Bytes 0 to 6
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
167
Parameter data records B.2 Structure of a data record for input channels of the analog on-board I/O
Figure B-2 Structure of data record 0: Bytes 7 to 27
168
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameter data records B.2 Structure of a data record for input channels of the analog on-board I/O
Codes for measurement types
The following table contains all measurement types of the inputs of the analog on-board I/O with the corresponding codes. You must enter these codes in byte 2 of the data record for the corresponding channel (refer to the figure Structure of data record 0: Bytes 0 to 6).
Table B- 1 Codes for measurement type
Measurement type Deactivated Voltage (valid for channels 0 to 3) Current, 4-wire measuring transducer (valid for channels 0 to 3) Resistance (valid for channel 4) Thermal resistor linear (valid for channel 4)
Code 0000 0000 0000 0001 0000 0010 0000 0100 0000 0111
Codes for measuring ranges
The following table contains all measuring ranges of the inputs of the analog on-board I/O with the corresponding codes. You must enter these codes in each case in byte 3 of the data record for the corresponding channel (refer to the figure Structure of data record 0: Bytes 0 to 6).
Table B- 2 Codes for measuring range
Measuring range Voltage ±5 V ±10 V 1 to 5 V 0 to 10 V Current, 4-wire measuring transducer 0 to 20 mA 4 to 20 mA ±20 mA Resistance 150 300 600 Thermal resistor Pt 100 Climate Ni 100 Climate Pt 100 Standard Ni 100 Standard
Code
0000 1000 0000 1001 0000 1010 0000 1011
0000 0010 0000 0011 0000 0100
0000 0001 0000 0010 0000 0011
0000 0000 0000 0001 0000 0010 0000 0011
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
169
Parameter data records B.2 Structure of a data record for input channels of the analog on-board I/O
Codes for temperature coefficient
The following table lists all temperature coefficients for temperature measurement of the thermal resistors along with their codes. You must enter these codes in each case in byte 4 of the data record for the corresponding channel (refer to the figure Structure of data record 0: Bytes 0 to 6)
Table B- 3 Codes for temperature coefficient
Temperature coefficient Pt xxx 0.003851 0.003916 0.003902 0.003920 Ni xxx 0.006180 0.006720
Code
0000 0000 0000 0001 0000 0010 0000 0011
0000 1000 0000 1001
170
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameter data records B.2 Structure of a data record for input channels of the analog on-board I/O
Hardware interrupt limits
The values that can be set for hardware interrupts (high/low limit) must be within the nominal range and overrange/underrange of the relevant measuring range.
The following tables list the permitted hardware interrupt limits. The limits depend on the selected measurement type and measuring range.
Table B- 4 Voltage limits
Voltage ±5 V, ±10 V 32510 -32511
1 to 5 V, 0 to 10 V 32510 -4863
High limit Low limit
Table B- 5 Current and resistance limits
Current ±20 mA
32510 -32511
4 to 20 mA / 0 to 20 mA
32510
-4863
Resistance (all configurable measuring ranges)
32510 1
High limit Low limit
Table B- 6 Limits for thermal resistor Pt 100 Standard and Pt 100 Climate
Thermal resistor
Pt 100 Standard
°C
°F
K
9999
18319
12731
-2429
-4053
303
°C 15499 -14499
Pt 100 Climate
°F
K
31099
---
-22899
---
High limit Low limit
Table B- 7 Limits for thermal resistor Ni 100 Standard and Ni 100 Climate
Thermal resistor
Ni 100 Standard
°C
°F
K
2949
5629
5681
-1049
-1569
1683
°C 15499 -10499
Ni 100 Climate
°F
K
31099
---
-15699
---
High limit Low limit
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
171
Parameter data records B.3 Structure of a data record for output channels of the analog on-board I/O
B.3
Structure of a data record for output channels of the analog on-
board I/O
Assignment of data record and channel
The parameters for the 2 analog output channels are located in data records 64 and 65 and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1
Data record structure
The figure below shows the structure of data record 64 for channel 0 as an example. The structure is identical for channel 1. The values in byte 0 and byte 1 are fixed and must not be changed. You enable a parameter by setting the corresponding bit to "1".
172
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameter data records B.3 Structure of a data record for output channels of the analog on-board I/O
Figure B-3 Structure of data record 64: Bytes 0 to 7
Codes for output type
The following table contains all output types of the outputs of the analog on-board I/O with the corresponding codes. You must enter these codes in each case in byte 2 of the data record for the corresponding channel (see the previous figure).
Table B- 8 Codes for the output type
Output type Disabled Voltage Current
Code 0000 0000 0000 0001 0000 0010
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
173
Parameter data records B.3 Structure of a data record for output channels of the analog on-board I/O
Codes for output ranges
The following table contains all output ranges for voltage and current of the outputs of the analog on-board I/O with the corresponding codes. You must enter these codes in each case in byte 3 of the corresponding data record (see previous figure).
Table B- 9 Codes for output range
Output range for voltage 1 to 5 V 0 to 10 V ±10 V Output range for current 0 to 20 mA 4 to 20 mA ±20 mA
Code 0000 0011 0000 0010 0000 0000 Code 0000 0001 0000 0010 0000 0000
Permitted substitute values
The following table lists all output ranges for the permitted substitute values. You must enter these substitute values in each case in bytes 6 and 7 of the data record for the corresponding channel (see the previous figure). You can find the binary representation of the output ranges in the section Representation of output ranges (Page 203).
Table B- 10 Permitted substitute value for the output range
Output range ±10 V 1 to 5 V 0 to 10 V ±20 mA 4 to 20 mA 0 to 20 mA
Permitted substitute value -32512 ... +32511 -6912 ... +32511 0 ... +32511 -32512 ... +32511 -6912 ... +32511 0 ... +32511
174
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameter data records B.4 Parameter assignment and structure of the parameter data records of the digital on-board I/O
B.4
Parameter assignment and structure of the parameter data records
of the digital on-board I/O
Parameter assignment in the user program
You have the option of reassigning parameters for the digital on-board I/O in RUN (for example, values for input delay of individual channels can be modified in RUN without affecting the other channels).
Changing parameters in RUN
The parameters are transferred to the digital on-board I/O via data records 0 to 15 with the WRREC instruction. The parameters set with STEP 7 (TIA Portal) are not changed in the CPU, which means the parameters set in STEP 7 (TIA Portal) will be valid again after a restart. The parameters are only checked for plausibility after the transfer.
Output parameter STATUS
If errors occur when transferring parameters with the "WRREC" instruction, the digital onboard I/O continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter. You will find a description of the "WRREC" instruction and the error codes in the STEP 7 (TIA Portal) online help.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
175
Parameter data records B.5 Structure of a data record for input channels of the digital on-board I/O
B.5
Structure of a data record for input channels of the digital on-
board I/O
Assignment of data record and channel
The parameters per submodule for the 32 digital input channels are located in data records 0 to 15 and are assigned as follows: First submodule (X11): Data record 0 for channel 0 Data record 1 for channel 1 ... Data record 14 for channel 14 Data record 15 for channel 15 Second submodule (X12): Data record 0 for channel 0 Data record 1 for channel 1 ... Data record 14 for channel 14 Data record 15 for channel 15
176
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameter data records B.5 Structure of a data record for input channels of the digital on-board I/O
Data record structure
The example in the figure below shows the structure of data record 0 for channel 0. The structure is identical for channels 1 to 31. The values in byte 0 and byte 1 are fixed and must not be changed. You enable a parameter by setting the corresponding bit to "1".
Figure B-4 Structure of data record 0: Bytes 0 to 3
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
177
Parameter data records B.6 Structure of a data record for output channels of the digital on-board I/O
B.6
Structure of a data record for output channels of the digital on-
board I/O
Assignment of data record and channel
The parameters per submodule for the 32 digital output channels are located in data records 64 to 79 and are assigned as follows: First submodule (X11): Data record 64 for channel 0 Data record 65 for channel 1 ... Data record 78 for channel 14 Data record 79 for channel 15 Second submodule (X12): Data record 64 for channel 0 Data record 65 for channel 1 ... Data record 78 for channel 14 Data record 79 for channel 15
178
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameter data records B.6 Structure of a data record for output channels of the digital on-board I/O Data record structure The example in the figure below shows the structure of data record 64 for channel 0. The structure is identical for channels 1 to 31. The values in byte 0 and byte 1 are fixed and must not be changed. You enable a parameter by setting the corresponding bit to "1".
Figure B-5 Structure of data record 64: Bytes 0 to 3
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
179
Parameter data records B.7 Parameter data records of the high-speed counters
B.7
Parameter data records of the high-speed counters
You can change the parameters of the High Speed Counter in RUN mode. The WRREC instruction is used to transfer the parameters to the High Speed Counter using data record 128.
If errors occur when transferring or validating parameters with the WRREC instruction, the High Speed Counter continues operation with the previous parameter assignment. The STATUS output parameter then contains a corresponding error code. If no error has occurred, the length of the data actually transferred is entered in the STATUS output parameter.
You will find a description of the "WRREC" instruction and the error codes in the STEP 7 (TIA Portal) online help.
Data record structure
The following table shows you the structure of data record 128 with the counter channel. The values in byte 0 to byte 3 are fixed and must not be changed. The value in byte 4 may only be changed by parameter reassignment and not in RUN mode.
Table B- 11 Parameter data record 128 - HSC parameter header
Bit
Byte
7
6
5
4
3
2
1
0
0
Major Version = 1
Minor Version = 0
1
Length of parameter data of the channel = 48
2
Reserved = 0 1)
3
1) Reserved bits must be set to 0
Table B- 12 Parameter data record 128 - operating mode
Bit
Byte
7
6
5
4
3
2
1
0
Operating mode
4 Reserved = 0 1)
Operating mode:
0000B: Deactivated
0001B: Counting
0010B: Measuring
0011 to 1111B: Reserved
1) Reserved bits must be set to 0
180
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameter data records B.7 Parameter data records of the high-speed counters
Table B- 13 Parameter data record 128 - Basic parameters
Bit
Byte
7
6
5 Reserved = 0 1)
5
4
3
2
1
0
Basic parameters
Enable additional diagnostic interrupts2)
Reaction to CPU STOP:
00B: Output substitute value
01B: Keep last value
10B: Continue operation
11B: Reserved
1) Reserved bits must be set to 0
2) Must be set to 1 for the activation of the diagnostic interrupts "Missing supply voltage L+, "Illegal A/B signal ratio" and "Hardware interrupt lost"
Table B- 14 Parameter data record 128 - Counter inputs
Bit
Byte
7
6
6 Reserved = 0 1)
7 Reaction to signal N: 00B: No reaction to signal N
01B: Synchronization at signal N
10B: Capture at signal N 11B: Reserved
1) Reserved bits must be set to 0
5
4
3
2
1
0
Counter inputs
Signal evaluation:
Signal type:
00B: Single
0000B: Pulse (A)
01B: Double
0001B: Pulse (A) and direction (B)
10B: Quadruple
0010B: Count up (A), count down (B)
11B: Reserved
0011B: Incremental encoder (A, B phase-shifted)
0100B: Incremental encoder (A, B, N)
0101 to 1111B: Reserved
Invert direc- Reserved = Filter frequency
tion
0 1)
0000B: 100 Hz
0001B: 200 Hz
0010B: 500 Hz
0011B: 1 kHz
0100B: 2 kHz
0101B: 5 kHz
0110B: 10 kHz
0111B: 20 kHz
1000B: 50 kHz
1001B: 100 kHz
1010B: Reserved
1011 to 1111B: Reserved
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
181
Parameter data records B.7 Parameter data records of the high-speed counters
Table B- 15 Parameter data record 128 - Hardware interrupts
Bit Byte
8
9
7
6
Reserved = Reserved =
0 1)
0 1)
Synchroni- New capzation of the ture value counter by available an external signal
5
Reserved = 0 1)
Reserved = 0 1)
4
3
Hardware interrupts1)
Direction reversal
Underflow (low counting limit violated)
Zero cross- Reserved =
ing
0 1)
2
1
Overflow (high counting limit violated)
Gate stop
Comparison event for DQ1 occurred
Reserved = 0 1)
0
Gate start
Comparison event for DQ0 occurred
1) Reserved bits must be set to 0
Table B- 16 Parameter data record 128 - Behavior DQ0/1
Bit Byte 10
11
7
6
5
4
3
2
1
0
Behavior of DQ0/1
Set output (DQ1):
Set output (DQ0):
0000B: Use by user program
0000B: Use by user program
0001B: Counting: Between comparison value 1 and high limit; Measuring: Measured value >= Comparison value 1
0001B: Counting: Between comparison value 0 and high limit; Measuring: Measured value >= Comparison value 0
0010B: Counting: Between comparison value 1 and low limit; Measuring: Measured value <= Comparison value 1
0010B: Counting: Between comparison value 0 and low limit; Measuring: Measured value <= Comparison value 0
0011B: Counting: At comparison value 1 for one pulse duration; Measuring: Reserved
0011B: Counting: At comparison value 0 for one pulse duration; Measuring: Reserved
0100B: Between comparison value 0 and 1
0100B: Reserved
0101B: Counting: After set command from CPU until comparison value 1; Measuring: Reserved
0101B: Counting: After set command from CPU until comparison value 0; Measuring: Reserved
0110B: Counting: Reserved Measuring: Not between comparison value 0 and 1
0110 to 1111B: Reserved
0111 to 1111B: Reserved
Count direction (DQ1): 00B: Reserved 01B: Up
Count direction (DQ0): 00B: Reserved 01B: Up
Reserved = 0 1)
Substitute value for DQ1
Substitute value for DQ0
10B: Down
10B: Down
11B: In both directions
11B: In both directions
182
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameter data records B.7 Parameter data records of the high-speed counters
Bit
Byte
7
6
5
4
3
2
1
0
12
Pulse duration (DQ0):
13
WORD: Value range in ms/10: 0 to 65535D
14
Pulse duration (DQ1):
15
WORD: Value range in ms/10: 0 to 65535D
1) Reserved bits must be set to 0
Table B- 17 Parameter data record 128 - Behavior DI0
Bit
Byte
7
6
5
16 Behavior of Edge selection (DI0): count value 00B: Reserved after Capture (DI0): 01B: On a rising edge 10B: On a falling edge
0B: Contin- 11B: On rising and falling ue counting edge
1B: Set to start value and continue counting
1) Reserved bits must be set to 0
4
3
Behavior of DI0
Level selec- Reserved = tion (DI0): 0 1)
0B: Active at high level
1B: Active at low level
2
1
0
Set function of the DI (DI0): 000B: Gate start/stop (level-triggered) 001B: Gate start (edge-triggered) 010B: Gate stop (edge-triggered) 011B: Synchronization 100B: Enable synchronization at signal N 101B: Capture 110B: Digital input without function 111B: Reserved
Table B- 18 Parameter data record 128 - Behavior DI1
Bit
Byte
7
6
5
4
3
2
1
0
17
Behavior of DI1:
See byte 16
18
Reserved = 0 1)
19 Sync option Reserved = 0 1)
Reserved = 0 1)
0B: Once
1B: Periodically
1) Reserved bits must be set to 0
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
183
Parameter data records B.7 Parameter data records of the high-speed counters
Table B- 19 Parameter data record 128 - Behavior DI1
Bit Byte 20-23 24-27
28-31
32-35 36-39 40-43
7
6
5
4
3
2
1
0
Values
High counting limit:
DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
Comparison value 0:
Counting mode: DWORD Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH;
Measuring mode: REAL Floating-point number in the set unit of the measured variable
Comparison value 1:
Counting mode: DWORD Value range: 2147483648 to 2147483647D: or 80000000 to 7FFFFFFFH;
Measuring mode: REAL Floating-point number in the set unit of the measured variable
Start value:
DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
Low counting limit:
DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
Update time:
DWORD: Value range in s: 0 to 25000000D
Table B- 20 Parameter data record 128 - Counter behavior at limits and at gate start
Bit Byte
44
7
6
5
4
3
2
1
0
Counter behavior at limits and at gate start
Response to gate start: Response to counting limit violation:
Reset at counting limit violation:
00B: Set to start value
000B: Stop counting
000B: To other counting limit
01B: Continue with current 001B: Continue counting value
001B: On start value
10 to 11B: Reserved
010 to 111B: Reserved
010 to 111B: Reserved
Table B- 21 Parameter data record 128 - Specify measured value
Bit
Byte
7
6
45 Reserved = 0 1)
46 47
5
4
3
2
Specify measured value
Time base for velocity measurement:
000B: 1 ms
001B: 10 ms
010B: 100 ms
011B: 1 s
100B: 60 s/1 min
101 to 111B: Reserved
Increments per unit:
WORD: Value range: 1 to 65535D
1
0
Measured variable: 00B: Frequency 01B: Period duration 10B: Velocity 11B: Reserved
184
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameter data records B.7 Parameter data records of the high-speed counters
Bit
Byte
7
6
5
48
49 Use of HSC DI0
0B: Not used
1B: Used
Reserved = 0 1)
4
3
2
1
0
Set hysteresis range:
Value range: 0 to 255D
Selection HSC DI0
Value range (applicable if the CPU is configured with deactivated 'Front connector assignment like 1511C' setting):
HSC1..3:
01000B: Front connector X11, terminal 11 (DI8) 01001B: Front connector X11, terminal 12 (DI9) 01010B: Front connector X11, terminal 13 (DI10) 01011B: Front connector X11, terminal 14 (DI11) 01100B: Front connector X11, terminal 15 (DI12) 01101B: Front connector X11, terminal 16 (DI13) 01110B: Front connector X11, terminal 17 (DI14) 01111B: Front connector X11, terminal 18 (DI15)
HSC4..6:
11000B: Front connector X12, terminal 11 (DI8) 11001B: Front connector X12, terminal 12 (DI9) 11010B: Front connector X12, terminal 13 (DI10) 11011B: Front connector X12, terminal 14 (DI11) 11100B: Front connector X12, terminal 15 (DI12) 11101B: Front connector X12, terminal 16 (DI13) 11110B: Front connector X12, terminal 17 (DI14) 11111B: Front connector X12, terminal 18 (DI15)
All other values: Reserved
Note: If the CPU with enabled 'Front connector assignment like 1511C' setting is configured, the parameter data record definition of CPU 1511C applies. See device manual of CPU 1511C.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
185
Parameter data records B.7 Parameter data records of the high-speed counters
Bit Byte 50
7
Use of HSC DI1
0B: Not used
1B: Used
6
5
Reserved = 0 1)
51 Use of
Reserved = 0 1)
HSC DQ1
0B: Not used
1B: Used
1) Reserved bits must be set to 0
4
3
2
1
0
Selection HSC DI1
Value range (applicable if the CPU is configured with deactivated 'Front connector assignment like 1511C' setting):
HSC1..3:
01000B: Front connector X11, terminal 11 (DI8) 01001B: Front connector X11, terminal 12 (DI9) 01010B: Front connector X11, terminal 13 (DI10) 01011B: Front connector X11, terminal 14 (DI11) 01100B: Front connector X11, terminal 15 (DI12) 01101B: Front connector X11, terminal 16 (DI13) 01110B: Front connector X11, terminal 17 (DI14) 01111B: Front connector X11, terminal 18 (DI15)
HSC4..6:
11000B: Front connector X12, terminal 11 (DI8) 11001B: Front connector X12, terminal 12 (DI9) 11010B: Front connector X12, terminal 13 (DI10) 11011B: Front connector X12, terminal 14 (DI11) 11100B: Front connector X12, terminal 15 (DI12) 11101B: Front connector X12, terminal 16 (DI13) 11110B: Front connector X12, terminal 17 (DI14) 11111B: Front connector X12, terminal 18 (DI15)
All other values: Reserved
Note: If the CPU with enabled 'Front connector assignment like 1511C' setting is configured, the parameter data record definition of CPU 1511C applies. See device manual of CPU 1511C.
Selection HSC DQ1
Value range:
HSC1:
00001B: Front connector X11, terminal 22 (DQ1) 01001B: Front connector X11, terminal 32 (DQ9)
HSC2:
00011B: Front connector X11, terminal 24 (DQ3) 01011B: Front connector X11, terminal 34 (DQ11)
HSC3:
00100B: Front connector X11, terminal 25 (DQ4) 01100B: Front connector X11, terminal 35 (DQ12)
HSC4:
00101B: Front connector X11, terminal 26 (DQ5) 01101B: Front connector X11, terminal 36 (DQ13)
HSC5:
00111B: Front connector X11, terminal 28 (DQ7) 01111B: Front connector X11, terminal 38 (DQ15)
HSC6:
00110B: Front connector X11, terminal 27 (DQ6) 01110B: Front connector X11, terminal 37 (DQ14)
All other values: Reserved
186
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Parameter data records B.8 Parameter data records (PWM)
B.8
Parameter data records (PWM)
You have the option of reassigning the pulse width modulation parameters in RUN. The parameters are transferred with the instruction WRREC via the data record 128 to the PWM submodule.
If errors occur when transferring or validating parameters with the WRREC instruction, the module continues operation with the previous parameter assignment. The output parameter STATUS then contains a corresponding error code. If no error has occurred, the length of the data actually transferred is entered in the output parameter STATUS.
You can find a description of the "WRREC" instruction and the error codes in the STEP 7 (TIA Portal) online help.
Data record structure
The following table shows the structure of the data record 128 for the pulse width modulation. The values in byte 0 to byte 3 are fixed and must not be changed.
Table B- 22 Parameter data record 128
Bit Byte
0 1 2 3 4
5
7
6
5
4
3
2
1
0
Major Version = 1
Minor Version = 0
Length of the parameter data of the channel in bytes = 12
Reserved = 0 1)
Current control
0B: Deactivated
1B: Reserved
Dithering
0B: Deactivated 1B: Reserved
Reserved = 0 1)
High-speed output
Operating mode
0B: Deactivated
0000B: Reserved
01B: Activated 10B-11B: Reserved
Reserved = 0 1)
0001B: PWM (pulse-width modulation)
0010B: Reserved
0011B: Reserved
0100B: Frequency output
0110B to 1110B: Reserved
1111B: Deactivated
Diagnostics Reaction to CPU STOP interrupt
0B: Deactivated
00B: DQ substitute value
1B: Activated
01B: Reserved
10B: Operating mode for continuation of operation
11B: Reserved
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
187
Parameter data records B.8 Parameter data records (PWM)
Bit
Byte 6
7
6
5
Reserved = 0 1)
4
3
2
1
0
Pulse output (DQA) selection
Range of values for PWM1: 00000B: Front connector X11, terminal 21 (DQ0) 01000B: Front connector X11, terminal 31 (DQ8)
Range of values for PWM2: 00010B: Front connector X11, terminal 23 (DQ2) 01010B: Front connector X11, terminal 33 (DQ10)
Range of values for PWM3: 00100B: Front connector X11, terminal 25 (DQ4) 01100B: Front connector X11, terminal 35 (DQ12)
Range of values for PWM4: 00110B: Front connector X11, terminal 27 (DQ6) 01110B: Front connector X11, terminal 37 (DQ14)
All other values: Reserved
7
Reserved = 0 1)
Output format
Reserved = Reserved = Reserved = Substitute
0 1)
0 1)
0 1)
value DQA
PWM
Frequency output
0B: 0 V
00B: S7 analog format
00B: Reserved
1B: 24 V
01B: per 100 01B: 1 Hz (%)
10B: per 1000
10B: Reserved
11B: per 10,000
11B: Reserved
8-11
DWORD minimum pulse duration
PWM: Minimum pulse duration (default = 0 s)
Frequency output: Reserved
12-15
DWORD period duration
PWM: Period duration
Supported value range depending on configured values for "Pulse output (DQA)" and "High-speed output (0.1 A)"
· for 100 kHz DQ (high-speed output activated): 10 s to 10 000 000 s (10 s)
· for 10 kHz DQ (high-speed output deactivated): 100 s to 10 000 000 s (10 s)
· for 100 Hz DQ (high-speed output deactivated): 10 000 s (10 ms) to 10 000 000 s (10 s) Default = 2 000 000 s (2 s)
Frequency output: Reserved
1) Reserved bits must be set to 0
188
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Analog value processing
C
C.1
Conversion method
Conversion
An integrated analog-to-digital converter converts the analog signal into a digital signal in order that the compact CPU can process the analog signal read in by an analog channel. Once the CPU has processed the digital signal, an integrated digital-to-analog converter converts the output signal into an analog current or voltage value.
Interference frequency suppression
The interference frequency suppression of the analog inputs suppresses the interference caused by the frequency of the AC voltage network used. The frequency of the AC voltage network may interfere with measured values, particularly for measurements within narrow voltage ranges.
You set the line frequency with which the plant operates (400, 60, 50 or 10 Hz) using the "Interference frequency suppression" parameter in STEP 7 (TIA Portal). The "Interference frequency suppression" parameter can only be set module-wide (for all input channels). The interference frequency suppression filters out the set interference frequency (400/60/50/10 Hz) as well as multiples of it. The selected interference frequency suppression also defines the integration time. The conversion time changes depending on the set interference frequency suppression.
For example, an interference frequency suppression of 50 Hz corresponds to an integration time of 20 ms. The analog on-board I/O supplies one measured value to the CPU every millisecond over a period of 20 ms. This measured value corresponds to the floating mean value of the last 20 measurements.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
189
Analog value processing C.1 Conversion method
The following figure shows how this works using a 400 Hz interference frequency suppression as an example. A 400 Hz interference frequency suppression corresponds to an integration time of 2.5 ms. The analog on-board I/O supplies a measured value to the CPU every 1.25 milliseconds within the integration time.
Figure C-1 Interference frequency suppression 400 Hz
190
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Analog value processing C.1 Conversion method The following figure shows how this works using a 60 Hz interference frequency suppression as an example. A 60 Hz interference frequency suppression corresponds to an integration time of 16.6 ms. The analog on-board I/O supplies a measured value to the CPU every 1.04 milliseconds within the integration time.
Figure C-2 Interference frequency suppression 60 Hz
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
191
Analog value processing C.1 Conversion method
The following figure shows how this works using a 50 Hz interference frequency suppression as an example. A 50 Hz interference frequency suppression corresponds to an integration time of 20 ms. The analog on-board I/O supplies a measured value to the CPU every millisecond within the integration time.
Figure C-3 Interference frequency suppression 50 Hz
192
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Analog value processing C.1 Conversion method The following figure shows how this works using a 10 Hz interference frequency suppression as an example. A 10 Hz interference frequency suppression corresponds to an integration time of 100 ms. The analog on-board I/O supplies a measured value to the CPU every millisecond within the integration time.
Figure C-4 Interference frequency suppression 10 Hz
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
193
Analog value processing C.1 Conversion method
The following table provides an overview of the configurable line frequencies, the integration time and the intervals within which measured values are supplied to the CPU.
Table C- 1 Overview of the configurable line frequencies
Interference frequency suppression 400 Hz 60 Hz 50 Hz 10 Hz
Integration time 2.5 ms 16.6 ms 20 ms 100 ms
Interval 2 x 1.25 ms 16 x 1.04 ms 20 x 1 ms 100 x 1 ms
Note Basic error with an integration time of 2.5 ms.
With an integration time of 2.5 ms, the measured value is changed by the following values based on the additionally obtained basic error and noise: · with "voltage", "current" and "resistance" by ±0.1 % · with "Thermal resistor Pt 100 Standard" by ±0.4 K · with "Thermal resistor Pt 100 Climatic" by ±0.3 K · with "Thermal resistor Ni 100 Standard" by ±0.2 K · with "Thermal resistor Ni 100 Climatic" by ±0.1 K
A detailed description of the basic and operating error is available in the function manual Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094).
194
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Smoothing
Analog value processing C.1 Conversion method
The individual measured values are smoothed by filtering. The smoothing can be set in 4 levels and channel-selective in STEP 7 (TIA Portal). Smoothing time = Smoothing (k) x configured integration time The following figure shows the time it takes for the smoothed analog value to reach approximately 100 % depending on the set smoothing. This is valid for all signal changes at the analog input.
None (smoothing = 1 x integration time)
Weak (smoothing = 4 x integration time) *
Medium (smoothing = 16 x integration time) *
Strong (smoothing = 32 x integration time) *
* The smoothing time can increase by 1 x integration time.
Figure C-5 Smoothing time depending on the set smoothing level
The following table shows the time it takes for the smoothed analog value to reach approximately 100 % depending on the set smoothing and the set interference frequency suppression.
Table C- 2 Smoothing time depending on the set smoothing level and interference frequency suppression
Selection of the smoothing (mean value generation from scan values)
None Weak Medium Strong
Interference frequency suppression/smoothing time
400 Hz
60 Hz
50 Hz
10 Hz
2.5 ms
16.6 ms
20 ms
100 ms
10 ms
66.4 ms
80 ms
400 ms
40 ms
265.6 ms
320 ms
1600 ms
80 ms
531.2 ms
640 ms
3200 ms
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
195
Analog value processing C.2 Representation of analog values
Cycle time
The cycle times (1 ms, 1.04 ms and 1.25 ms) result from the configured interference frequency suppression. The cycle time is independent of the number of configured analog channels. The values for the analog input channels are detected sequentially in each cycle.
Reference
For more information on conversion time, cycle time and conversion method, refer to the Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094) function manual.
C.2
Representation of analog values
Introduction
The analog values for all measuring ranges that you can use with the analog on-board I/O are represented in this appendix.
For cross-product information on "analog value processing", refer to the Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094) function manual.
Measured value resolution
Each analog value is entered left aligned into the tags. The bits marked with "x" are set to "0".
Note This resolution does not apply to temperature values. The digitalized temperature values are the result of a conversion in the analog on-board I/O.
Table C- 3 Resolution of the analog values
Resolution in bits including sign
16
Decimal 1
Values
Hexadecimal 1H
Analog value
High byte Sign 0 0 0 0 0 0 0
Low byte 0 0 0 0 0 0 0 1
196
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Analog value processing C.3 Representation of input ranges
C.3
Representation of input ranges
The tables below set out the digitized representation of the input ranges separately for bipolar and unipolar input ranges. The resolution is 16 bits.
Table C- 4 Bipolar input ranges
Dec. val- Measured
ue
value in %
32767 32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 <-117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange 0 1 1 0 1 1 0000000001 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0000000001 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Nominal 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 range 1 0 0 1 0 1 0000000000 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Underrange 1 0 0 0 0 0 0100000000 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Table C- 5 Unipolar input ranges
Dec. val- Measured
ue
value in %
32767 32511 27649 27648 1 0 -1 -4864 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -17.593 <-17.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange 0 1 1 0 1 1 0000000001 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Nominal 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 range 0 0 0 0 0 0 0000000000 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Underrange 1 1 1 0 1 1 0100000000 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
197
Analog value processing C.3 Representation of input ranges
C.3.1
Representation of analog values in voltage measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible voltage measuring ranges.
Table C- 6 Voltage measuring ranges ±10 V, ±5 V
Values dec. 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex. 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±10 V
±5 V
>11.759 V
>5.879 V
11.759 V
5.879 V
10 V 7.5 V 361.7 µV 0 V
5 V 3.75 V 180.8 µV 0 V
-7.5 V -10 V
-3.75 V -5 V
-11.759 V <-11.759 V
-5.879 V <-5.879 V
Range Overflow Overrange Nominal range
Underrange Underflow
Table C- 7 Voltage measuring range 1 to 5 V, 0 to 10 V
Values dec. 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex. 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Voltage measuring range 1 to 5 V >5.704 V 5.704 V
5 V 4 V 1 V + 144.7 µV 1 V
0.296 V < 0.296 V
0 to 10 V >11.759 V 11.759 V
10.0 V 7.5 V 361.7 V 0 V
-1.759 V < -1.759 V
Range Overflow Overrange Nominal range
Underrange Underflow
198
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
C.3.2
Analog value processing C.3 Representation of input ranges
Representation of analog values in current measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible current measuring ranges.
Table C- 8 Current measuring range ±20 mA
Values dec. 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex. 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Current measuring range ±20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-15 mA -20 mA
-23.52 mA <-23.52 mA
Overflow Overrange Nominal range
Underrange Underflow
Table C- 9 Current measuring ranges 0 to 20 mA and 4 to 20 mA
Values dec. 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex. 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Current measuring range 0 to 20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-3.52 mA <-3.52 mA
4 to 20 mA >22.81 mA 22.81 mA
20 mA 16 mA 4 mA + 578.7 nA 4 mA
1.185 mA <1.185 mA
Overflow Overrange Nominal range
Underrange Underflow
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
199
Analog value processing C.3 Representation of input ranges
C.3.3
Representation of the analog values of resistance-type sensors/resistance-type thermometers
The following tables list the decimal and hexadecimal values (codes) of the possible resistance-type sensor ranges.
Table C- 10 Resistance-type sensors of 150 , 300 and 600
Values dec. 32767 32511 27649 27648 20736 1 0
hex. 7FFF 7EFF 6C01 6C00 5100 1 0
Resistance-type sensor range
150
300
>176.38
>352.77
176.38
352.77
150 112.5 5.43 m 0
300 225 10.85 m 0
600 >705.53 705.53
600 450 21.70 m 0
Overflow Overrange
Nominal range
Table C- 11 Resistance-type thermometer Pt 100 Standard
Pt 100 Standard in °C (1 digit = 0.1°C) > 1000.0 1000.0 : 850.1 850.0 : -200.0 -200.1 : -243.0 < -243.0
Values dec.
32767 10000 : 8501 8500 : -2000 -2001 : -2430 -32768
hex.
7FFF 2710 : 2135 2134 : F830 F82F : F682 8000
Pt 100 Standard in °F (1 digit = 0.1 °F) > 1832.0 1832.0 : 1562.1 1562.0 : -328.0 -328.1 : -405.4 < -405.4
Values dec.
32767 18320 : 15621 15620 : -3280 -3281 : -4054 -32768
hex.
7FFF 4790 : 3D05 3D04 : F330 F32F : F02A 8000
Pt 100 Standard in K (1 digit = 0.1 K) > 1273.2 1273.2 : 1123.3 1123.2 : 73.2 73.1 : 30.2 < 30.2
Values dec.
32767 12732 : 11233 11232 : 732 731 : 302 32768
hex.
7FFF 31BC : 2BE1 2BE0 : 2DC 2DB : 12E 8000
Range
Overflow Overrange Nominal range Underrange Underflow
200
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Analog value processing C.3 Representation of input ranges
Table C- 12 Resistance-type thermometer Pt 100 Climate
Pt 100 Climate/ in °C (1 digit = 0.01 °C) > 155.00 155.00 : 130.01 130.00 : -120.00 -120.01 : -145.00 < -145.00
Values dec.
32767 15500 : 13001 13000 : -12000 -12001 : -14500 -32768
hex.
7FFF 3C8C : 32C9 32C8 : D120 D11F : C75C 8000
Pt 100 Climate/ in °F (1 digit = 0.01 °F) > 311.00 311.00 : 266.01 266.00 : -184.00 -184.01 : -229.00 < -229.00
Values dec.
32767 31100 : 26601 26600 : -18400 -18401 : -22900 -32768
hex.
7FFF 797C : 67E9 67E8 : B820 B81F : A68C 8000
Range Overflow Overrange Nominal range Underrange Underflow
Table C- 13 Resistance-type thermometer Ni 100 standard
Ni 100 Standard in °C (1 digit = 0.1 °C) > 295.0 295.0 : 250.1 250.0 : -60.0 -60.1 : -105.0 < -105.0
Values dec.
32767 2950 : 2501 2500 : -600 -601 : -1050 -32768
hex.
7FFF B86 : 9C5 9C4 : FDA8 FDA7 : FBE6 8000
Ni 100 Standard in °F (1 digit = 0.1 °F) > 563.0 563.0 : 482.1 482.0 : -76.0 -76.1 : -157.0 < -157.0
Values dec.
32767 5630 : 4821 4820 : -760 -761 : -1570 -32768
hex.
7FFF 15FE : 12D5 12D4 : FD08 FD07 : F9DE 8000
Ni 100 Standard in K (1 digit = 0.1 K) > 568.2 568.2 : 523.3 523.2 : 213.2 213.1 : 168.2 < 168.2
Values dec.
32767 5682 : 5233 5232 : 2132 2131 : 1682 32768
hex.
7FFF 1632 : 1471 1470 : 854 853 : 692 8000
Range
Overflow Overrange Nominal range Underrange Underflow
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
201
Analog value processing C.3 Representation of input ranges
Table C- 14 Resistance-type thermometer Ni 100 Climate
Ni 100 Climate in °C Values
(1 digit = 0.01 °C)
dec.
> 155.00 155.00 : 130.01 130.00 : -60.00 -60.01 : -105.00 < - 105.00
32767 15500 : 13001 13000 : -6000 -6001 : -10500 -32768
hex.
7FFF 3C8C : 32C9 32C8 : E890 E88F : D6FC 8000
Ni 100 Climate in °F (1 digit = 0.01 °F) > 311.00 311.00 : 266.01 266.00 : -76.00 -76.01 : -157.00 < - 157.00
Values dec.
32767 31100 : 26601 26600 : -7600 -7601 : -15700 -32768
hex.
7FFF 797C : 67E9 67E8 : E250 E24F : C2AC 8000
Range Overflow Overrange Nominal range Underrange Underflow
C.3.4
Measured values for wire break diagnostics
Measured values for "Wire break" diagnostics as a function of diagnostics enables
With suitable parameter assignment, events that occur trigger a diagnostics entry and a diagnostics interrupt.
Table C- 15 Measured values for wire break diagnostics
Format S7
Parameter assignment
· "Wire break" diagnostics enabled
· "Overflow/Underflow" diagnostics enabled or disabled
("Wire break" diagnostics has a higher priority than "Overflow/Underflow" diagnostics)
· "Wire break" diagnostics disabled
· "Overflow/Underflow" diagnostics enabled
Measured values
32767
7FFFH
-32767 8000 H
· "Wire break" diagnostics disabled
· "Overflow/Underflow" diagnostics disabled
-32767
8000 H
Explanation "Wire break" or "Cable break" diagnostics alarm
· Measured value after leaving the underrange
· Diagnostics alarm "Low limit" violated Measured value after leaving the underrange
202
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Analog value processing C.4 Representation of output ranges
C.4
Representation of output ranges
The tables below set out the digitalized representation of the output ranges separately for bipolar and unipolar ranges. The resolution is 16 bits.
Table C- 16 Bipolar output ranges
Dec. value
32511
32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32512
Output value in %
117.589
117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 -117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Nominal range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Underrange 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < -32512 are specified, the output value is limited to -117.593%.
Table C- 17 Unipolar output ranges
Dec. value
32511
32511 27649 27648 1 0 0
Output value in %
117.589
117.589 100.004 100.000 0.003617 0.000 0
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 x x x x x x x x Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overrange 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Nominal range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < 0 are specified, the output value is limited to 0%.
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
203
Analog value processing C.4 Representation of output ranges
C.4.1
Representation of analog values in the voltage output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible voltage output ranges.
Table C- 18 Voltage output range ±10 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-75% -100%
dec. >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400
-117.593% <-117.593%
-27649 -32512 <-32512
93FF 8100 < 8100
Voltage output range ±10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V -361.7 µV -7.5 V -10 V
-11.76 V -11.76 V
Range Maximum output value Overrange
Nominal range
Underrange Minimum output value
Table C- 19 Voltage output range 0 V to 10 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0% <0%
dec. >32511 32511 27649 27648 20736 1 0 <0
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Voltage output range 0 to 10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V 0 V
Range Maximum output value Overrange Nominal range
Minimum output value
204
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
Table C- 20 Voltage output range 1 V to 5 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-25% <-25%
dec. >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 <E500
Voltage output range 1 to 5 V 5.70 V 5.70 V
5 V 4 V 1 V +144.7 µV 1 V 1 V -144.7 µV 0 V 0 V
Analog value processing C.4 Representation of output ranges
Range Maximum output value Overrange Nominal range
Underrange Minimum output value
C.4.2
Representation of analog values in the current output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible current output ranges.
Table C- 21 Current output range ±20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-75% -100%
-117.593% <-117.593%
dec. >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 <-32512
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 <8100
Current output range ±20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 mA 0 mA -723.4 mA -15 mA -20 mA
-23.52 mA -23.52 mA
Range Maximum output value Overrange
Nominal range Underrange Minimum output value
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
205
Analog value processing C.4 Representation of output ranges
Table C- 22 Current output range 0 to 20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0% <0%
dec. >32511 32511 27649 27648 20736 1 0 <0
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Current output range 0 to 20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 mA 0 mA 0 mA
Table C- 23 Current output range 4 to 20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-25% <-25%
dec. >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex. >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 <E500
Current output range 4 to 20 mA 22.81 mA 22.81 mA
20 mA 16 mA 4 mA 4 mA
0 mA 0 mA
Range Maximum output value Overrange
Nominal range Minimum output value
Range Maximum output value Overrange
Nominal range Underrange Minimum output value
206
CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Manual, 12/2017, A5E40898741-AA
SIMATIC
S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual
_Pr_ef_ac_e_______________
Documentation guide
1
_Pr_od_u_ct_o_ve_rv_ie_w _________2_
_Co_n_ne_c_tin_g _up___________3_
Interrupts, error messages,
diagnostics and system
4
alarms
_Te_ch_n_ic_al_sp_e_cif_ic_at_ion_s______5_
_Di_m_en_si_on_a_l d_ra_w_in_g ______A__
12/2017
A5E40881673-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E40881673-AA 12/2017 Subject to change
Copyright © Siemens AG 2017. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system/ ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1513-1 PN.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
4
Manual, 12/2017, A5E40881673-AA
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Applications of the S7-1500 CPU .......................................................................................... 11
2.2
Hardware properties .............................................................................................................. 18
2.3
Firmware functions................................................................................................................. 20
2.4 2.4.1 2.4.2 2.4.3
Operating and display elements ............................................................................................ 24 Front view of the CPU with closed front panel....................................................................... 24 Front view of the CPU without front panel and view from below ........................................... 26 Rear view of the CPU ............................................................................................................ 27
2.5
Operating mode buttons ........................................................................................................ 28
3 Connecting up....................................................................................................................................... 29
4 Interrupts, error messages, diagnostics and system alarms................................................................... 33
4.1
Status and error display of the CPU ...................................................................................... 33
5 Technical specifications ........................................................................................................................ 37
A Dimensional drawing............................................................................................................................. 49
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
6
Manual, 12/2017, A5E40881673-AA
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
8
Manual, 12/2017, A5E40881673-AA
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
10
Manual, 12/2017, A5E40881673-AA
Product overview
2
2.1
Applications of the S7-1500 CPU
Area of application
SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation.
The modular and fanless design, simple implementation of distributed structures, and userfriendly operation make SIMATIC S7-1500 the economic and convenient solution for a variety of tasks.
Areas of application of the SIMATIC S7-1500 are, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automobile engineering
Water/waste water
Food & Beverage
Areas of application of the SIMATIC S7-1500T are, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial capability from the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
11
Product overview 2.1 Applications of the S7-1500 CPU
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 1 Standard CPUs
CPU
CPU 1511-1 PN
CPU 1513-1 PN
CPU 1515-2 PN
CPU 1516-3 PN/DP
CPU 1517-3 PN/DP
CPU 1518-4 PN/DP CPU 1518-4 PN/DP MFP
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
Standard CPU for small to
--
1
--
--
mid-range applications
Standard CPU for mid-
--
1
--
--
range applications
Standard CPU for mid-
--
1
1
--
range to large applications
Standard CPU for high-end
1
1
1
--
applications and communi-
cation tasks
Standard CPU for high-end
1
1
1
--
applications and communi-
cation tasks
Standard CPU for high-
1
1
1
1
performance applications,
demanding communication
tasks and very short reac-
tion times
Work memory 1.15 MB
Processing time for bit operations 60 ns
1.8 MB
40 ns
3.5 MB
30 ns
6 MB
10 ns
10 MB
2 ns
24 MB
1 ns
Table 2- 2 Compact CPUs
CPU
Performance segment
CPU 1511C-1 PN CPU 1512C-1 PN
Compact CPU for small to mid-range applications
Compact CPU for midrange applications
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
--
1
--
--
--
1
--
--
Work memory 1.175 MB
Processing time for bit operations 60 ns
1.25 MB
48 ns
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
12
Manual, 12/2017, A5E40881673-AA
Product overview 2.1 Applications of the S7-1500 CPU
Table 2- 3 Fail-safe CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
CPU 1511F-1 PN Fail-safe CPU for small to
--
1
--
--
mid-range applications
CPU 1511TF-1 Fail-safe technology CPU
--
1
--
--
PN
for small to mid-range
applications
CPU 1513F-1 PN Fail-safe CPU for mid-
--
1
--
--
range applications
CPU 1515F-2 PN Fail-safe CPU for mid-
--
1
1
--
range to large applications
CPU 1515TF-2 Fail-safe technology CPU
--
1
1
--
PN
for demanding applications
and communication tasks
CPU 1516F-3
Fail-safe CPU for demand-
1
1
1
--
PN/DP
ing applications and com-
munication tasks
CPU 1516TF-3 Fail-safe technology CPU
1
1
1
--
PN/DP
for demanding applications
and communication tasks
CPU 1517F-3
Fail-safe CPU for demand-
1
1
1
--
PN/DP
ing applications and com-
munication tasks
CPU 1517TF-3 Fail-safe technology CPU
1
1
1
--
PN/DP
for demanding applications
and communication tasks
CPU 1518F-4
Fail-safe CPU for high-
1
1
1
1
PN/DP
performance applications,
CPU 1518F-4 PN/DP MFP
demanding communication tasks and very short reaction times
Work memory 1.225 MB
Processing time for bit operations 60 ns
1.225 MB
60 ns
1.95 MB 3.75 MB 3.75 MB
40 ns 30 ns 30 ns
6.5 MB
10 ns
6.5 MB
10 ns
11 MB
2 ns
11 MB
2 ns
26 MB
1 ns
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
13
Product overview 2.1 Applications of the S7-1500 CPU
Table 2- 4 Technology CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
PROFINET basic func-
tionality
CPU 1511T-1 PN Technology CPU for small
--
1
--
--
to mid-range applications
CPU 1515T-2 PN Technology CPU for mid-
--
1
1
--
range to large applications
CPU 1516T-3
Technology CPU for high-
1
1
1
--
PN/DP
end applications and
communication tasks
CPU 1517T-3
Technology CPU for high-
1
1
1
--
PN/DP
end applications and
communication tasks
CPU 1511TF-1 PN
These CPUs are described in the fail-safe CPUs
CPU 1515TF-2 PN
CPU 1516TF-3 PN/DP
CPU 1517TF-3 PN/DP
Work memory 1.225 MB
Processing time for bit operations 60 ns
3.75 MB
30 ns
6.5 MB
10 ns
11 MB
2 ns
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Frequency meter Period duration measurement Pulse width modulation (PWM output)
Pulse Train Output (PTO output) Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
14
Manual, 12/2017, A5E40881673-AA
Product overview 2.1 Applications of the S7-1500 CPU
Integrated Motion Control technology functions
All CPUs of SIMATIC S7-1500 support Motion Control technology functions. STEP 7 offers Motion Control instructions standardized according to PLCopen for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axes Positioning axes Synchronous axes External encoders Output cams Cam tracks Measuring inputs The technology CPUs of the SIMATIC S7-1500 offer enhanced Motion Control functions: Advanced synchronization functions
Synchronization with specification of the synchronous position Actual value coupling Shifting of the master value at following axis Camming Up to 4 encoders or measuring systems as actual position for position control The technology CPUs of the SIMATIC S7-1500 additionally support the following technology objects: Cam Kinematics Cam Kinematics Controlling of kinematics, such as Cartesian portals Roller pickers Delta pickers SCARA Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
Additional integrated technology functions
For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags. In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
15
Product overview 2.1 Applications of the S7-1500 CPU
Other technology functions
Technology modules also implement functions such as high-speed counting, position detection, measuring functions and pulse generators (PTO, PWM and frequency output). For compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and can be implemented without additional technology modules. SIWAREX is a versatile and flexible weighing module which you can use as a static scale for operation.
Security Integrated
In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks. Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU. In addition, you can assign various access rights to different user groups in the controller using four different authorization levels. Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller. The use of an Ethernet CP (CP 1543-1) provides you with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated
The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally. These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration also provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications. The fail-safe CPUs are certified for use in safety mode up to: Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010 Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to
EN ISO 13849-1:2008 Additional password protection for F-configuration and F-program is set up for IT security.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
16
Manual, 12/2017, A5E40881673-AA
Product overview 2.1 Applications of the S7-1500 CPU
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Error messages are immediately shown on the display in plain text. In the case of servicing, plant downtimes are minimized by quick access to diagnostics alarms. Detailed information about this and a multitude of other display functions is available in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
Uniform front connectors for all modules and integrated potential jumpers for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7, on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostic information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server in up to three project languages. The HMI takes over the display in the project languages specified for the CPU. If you require message texts in additional languages, you can load these via the configured connection to your HMI. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
17
Product overview 2.2 Hardware properties
2.2
Hardware properties
Article number
6ES7513-1AL02-0AB0
View of the module
The following figure shows the CPU 1513-1 PN.
Figure 2-1 CPU 1513-1 PN
Note Protective film Note that a protective film is attached to the display of the CPU when shipped from the factory. Remove the protective film if necessary.
Properties
The CPU 1513-1 PN has the following technical properties:
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
18
Manual, 12/2017, A5E40881673-AA
Product overview 2.2 Hardware properties
Property CPU display
Supply voltage
PROFINET IO PROFINET interface (X1 P1 R and X1 P2 R) Operation of the CPU as · IO controller · I-device
Description
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides information on order numbers, firmware version and serial numbers of all connected modules. In addition, you can set the IP address of the CPU and carry out further network settings. The display shows occurring error messages directly in plain text.
In addition to the functions listed here, a multitude of other functions that are described in the SIMATIC S71500 Display Simulator are shown on the display.
The 24 V DC supply voltage is supplied via a 4-pole connection plug that is located at the front of the CPU.
Additional information
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
· SIMATIC S7-1500 Display Simulator (http://www.automation.siemens. com/salesmaterial-as/interactivemanuals/getting-started_simatics7-1500/disp_tool/start_en.html)
· Chapter Connecting up (Page 29)
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
The interface has two ports. In addition to basic
PROFINET function manual
PROFINET functionality, its also supports
(https://support.industry.siemens.co
PROFINET IO RT (real time) and IRT (isochronous real m/cs/ww/en/view/49948856)
time).
· IO controller: As an IO controller the CPU addresses the connected IO devices
· I-device: As an I-device (intelligent IO device) the CPU is assigned to a higher-level IO controller and is used in the process as an intelligent pre-processing unit of sub-processes
Accessories
You can find information on "Accessories/spare parts" in the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
19
Product overview 2.3 Firmware functions
2.3
Firmware functions
Functions
The CPU 1513-1 PN supports the following firmware functions:
Function Integrated system diagnostics Integrated Web server
Integrated trace functionality
OPC UA
Configuration control
Description
Additional information
The system automatically generates the messages for the system diagnostics and outputs these messages via a programming device/PC, HMI device, the Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
Diagnostics function manual (https://support.industry.siemens.co m/cs/ww/en/view/59192926)
The Web server lets you access the CPU data by
·
means of a network. Evaluations, diagnostics, and
modifications are thus possible over long distances.
Monitoring and evaluation is possible without STEP 7; all you need is a Web browser. Make sure that you take ·
appropriate measures (e.g. limiting network access,
using firewalls) to protect the CPU from being compro-
mised.
Web server function manual (https://support.industry.siemens. com/cs/ww/en/view/59193560)
Security with SIMATIC S7 controllers system manual (https://support.industry.siemens. com/cs/ww/en/view/90885010)
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
Using the trace and logic analyzer function function manual (https://support.industry.siemens.co m/cs/ww/en/view/64897128)
The device saves the recordings. You can read out and permanently save the recordings with the configuration system (ES), if required. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes.
The trace record can also be displayed through the Web server.
With OPC UA, you can exchange data via an open and Communication function manual
manufacturer-neutral communication protocol. The
(https://support.industry.siemens.co
CPU can act as OPC UA DA server. The CPU as
m/cs/ww/en/view/59192925)
OPC UA server can communicate with OPC UA clients.
The OPC UA Companion Specification allows methods to be specified uniformly and independently of the manufacturer. Using these specified methods, you can easily integrate devices from various manufacturers into your plants and production processes.
You can use configuration control to operate different real hardware configurations with a configured maximum configuration of the hardware. This means that, in series machine manufacturing in particular, you have the option of operating/configuring different configuration variants of a machine with a single project.
S7-1500, ET 200MP system manual (https://support.industry.siemens.co m/cs/ww/en/view/59191792)
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
20
Manual, 12/2017, A5E40881673-AA
Product overview 2.3 Firmware functions
Function PROFINET IO RT (real time) IRT (isochronous real time)
Isochronous mode
MRP (Media Redundancy Protocol)
MRPD (Media Redundancy with Planned Duplication)
Shared device
Description
RT prioritizes PROFINET IO telegrams over standard telegrams. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet telegrams.
A reserved bandwidth within the send clock is available for IRT data. The reserved bandwidth ensures that the IRT data can be transmitted in time-synchronized intervals, unaffected by other high network loading (e.g. TCP/IP communication or additional real time communication). Update times with maximum determinism can be realized through IRT. Isochronous applications are possible with IRT.
The Isochronous mode system property acquires measured values and process data and processes the signals in a fixed system clock. Isochronous mode thus contributes to high control quality and hence to greater manufacturing precision. Isochronous mode reduces possible fluctuations of the process reaction times to a minimum. Time-assured processing makes higher machine cycles possible.
It is possible to establish redundant networks via the Media Redundancy Protocol. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails. The PROFINET devices that are part of this redundant network form an MRP domain.
RT operation is possible with the use of MRP.
The advantage of the MRP extension MRPD is that, in the event of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no reconfiguration time.
The "Shared device" function allows you to divide the modules or submodules of an IO device up among different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required. The "Shared device" function allows the modules or submodules of an IO device to be divided up among different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules that are physically close to each other in one IO device.
Additional information
PROFINET function manual (https://support.industry.siemens.co m/cs/ww/en/view/49948856)
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
21
Product overview 2.3 Firmware functions
Function PROFIenergy Integrated technology Motion Control
Integrated closed-loop control functionality
Description
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. The majority of the energy is saved by the process; the PROFINET device itself only contributes a few watts of savings potential.
Additional information
S7-1500 CPUs support the controlled positioning and traveling of axes via S7-1500 Motion Control functions by means of the following technology objects:
Speed-controlled axes, positioning axes, synchronized axes, external encoders, cams, cam tracks and measuring inputs.
S7-1500 Motion Control function manual (https://support.industry.siemens.co m/cs/ww/en/view/109749262)
· Speed-controlled axis for controlling a drive with speed specification
· Positioning axis for position-controlled positioning of a drive
· Synchronous axis to interconnect with a master value. The axis is synchronized to the master axis position.
· External encoder for detecting the actual position of an encoder and its use as a master value for synchronous operation
· Cams, cam track for position-dependent generation of switching signals
· Measuring input for fast, accurate and eventdependent sensing of actual positions
· PID Compact (continuous PID controller)
PID control function manual
·
PID 3Step (step controller for integrating actuators)
(https://support.industry.siemens.co m/cs/ww/en/view/108210036)
· PID Temp (temperature controller for heating and
cooling with two separate actuators)
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
22
Manual, 12/2017, A5E40881673-AA
Product overview 2.3 Firmware functions
Function Integrated safety Know-how protection Copy protection Access protection Integrity protection
Password provider
Description
Additional information
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
S7-1500, ET 200MP system manual (https://support.industry.siemens.co m/cs/ww/en/view/59191792)
You can use authorization levels to assign separate rights to different users.
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between TIA Portal and CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password input you can connect a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 reads the password automatically for the blocks. This saves you time.
· Optimum block protection because the users do not know the password itself.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
23
Product overview 2.4 Operating and display elements
2.4
Operating and display elements
2.4.1
Front view of the CPU with closed front panel
The following figure shows the front view of the CPU 1513-1 PN.
LEDs for the current operating mode and diagnostics status of the CPU Display Operator control buttons
Figure 2-2 View of the CPU 1513-1 PN (with front panel) - front
Note Temperature range for display
To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU.
For more information on the temperatures at which the display switches itself on and off, refer to the Technical specifications (Page 37).
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
24
Manual, 12/2017, A5E40881673-AA
Product overview 2.4 Operating and display elements
Removing and fitting the front panel or the display
You can remove and fit the front panel or the display during operation.
WARNING Personal injury and damage to property may occur If you remove or attach the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Before you remove or fit the front panel, always switch off the power supply to the S7-1500 automation system in hazardous area zone 2. The CPU maintains its operating mode.
Locking the front panel
You can lock the front panel to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panel.
Reference
Figure 2-3 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, configurable protection levels and local locks in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
25
Product overview 2.4 Operating and display elements
2.4.2
Front view of the CPU without front panel and view from below
The following figure shows the operator controls and connection elements of the CPU 1513-1 PN.
LEDs for the current operating mode and diagnostic status of the CPU Display MAC address LED displays for the 2 ports of the PROFINET interface X1 Operating modes with "STOP ACTIVE" LED Connector for power supply
Figure 2-4 View of the CPU 1513-1 PN (without front panel) front
Slot for the SIMATIC memory card PROFINET IO interface (X1) with 2 ports Connection for supply voltage Fixing screw
Figure 2-5 View of the CPU 1513-1 PN bottom
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
26
Manual, 12/2017, A5E40881673-AA
2.4.3
Product overview 2.4 Operating and display elements
Rear view of the CPU
The following figure shows the connection elements on the back of the CPU 1513-1 PN.
Shield contact surface Plug-in connection for power supply Plug-in connection for backplane bus Fastening screw
Figure 2-6 View of the CPU 1513-1 PN - rear
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
27
Product overview 2.5 Operating mode buttons
2.5
Operating mode buttons
You use the operating mode buttons to set the operating mode of the CPU.
The following table shows the meaning of the corresponding operation of the operating mode buttons.
Table 2- 5 Meaning of the operating mode buttons
Operation of the operating mode buttons RUN
STOP
Meaning
RUN mode STOP mode
MRES
1. Press the operating mode button STOP.
Result: The RUN/STOP LED lights up yellow. 2. Press the operating mode button STOP until the RUN/STOP LED lights up for the 2nd time and remains continuously lit (this takes three seconds). After this, release the button. 3. Press the operating mode button STOP again within the next three seconds.
Manual memory reset
(with inserted SIMATIC memory card)
or
Reset to factory settings (without inserted SIMATIC memory card):
Explanation
The CPU is executing the user program. The user program is not being executed. (STOP ACTIVE LED lights up). The CPU executes memory reset.
or The CPU is reset to its factory settings. You can find additional information in the S71500/ET 200MP system manual (https://support.industry.siemens.com/cs/ww/en/vi ew/59191792).
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
28
Manual, 12/2017, A5E40881673-AA
Connecting up
3
This section provides information on the terminal assignment of the individual interfaces and the block diagram of the CPU 1513-1 PN.
24 V DC supply voltage (X80)
The connector for the power supply is plugged in when the CPU ships from the factory. The following table shows the pin assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring opener (one spring opener per terminal)
Bridged internally:
and and
Figure 3-1 Supply voltage connection
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
29
Connecting up
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R)
The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is
allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Figure 3-2 PROFINET ports
Note You need a screwdriver (max. blade width 2.5 mm) to remove the PROFINET plug.
Reference
You can find additional information on the topics of "Connecting the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
30
Manual, 12/2017, A5E40881673-AA
Connecting up
Assignment of the MAC addresses
The CPU 1513-1 PN has a PROFINET interface with two ports. The PROFINET interface itself has a MAC address, and each of the two PROFINET ports has its own MAC address. The CPU 1513-1 PN therefore has three MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC address are lasered on the rating plate on the right side of each CPU 1513-1 PN.
The table below shows how the MAC addresses are assigned.
Table 3- 1 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3
Assignment
PROFINET interface X1
(visible in STEP 7 for accessible devices)
Labeling
· Front, lasered · Right side, lasered (start of number
range)
Port X1 P1 R (required for LLDP, for example)
Port X1 P2 R (required for LLDP, for example)
· Front and right side, not lasered
· Front, not lasered · Right side, lasered
(end of number range)
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
31
Connecting up
Block diagram
The following figure shows the block diagram of the CPU 1513-1 PN.
PN X1 P1 R PN X1 P2 R X50
CPU with control and operating mode buttons Display Electronics PROFINET 2-port switch Backplane bus interface Internal supply voltage PROFINET interface X1 Port 1 PROFINET interface X1 Port 2 SIMATIC memory card
Figure 3-3 Block diagram CPU 1513-1 PN
X80 24 V DC Infeed of supply voltage
L+
24 V DC supply voltage
M
Ground
SF
STOP ACTIVE LED (yellow)
R/S
RUN/STOP LED (yellow/green)
ER
ERROR LED (red)
MT
MAINT LED (yellow)
X1 P1, X1 P2 LED Link TX/RX
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
32
Manual, 12/2017, A5E40881673-AA
Interrupts, error messages, diagnostics and system alarms
4
The status and error displays of the CPU 1513-1 PN are described below.
You will find additional information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topics of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error display of the CPU
LED display
The figure below shows the CPU 1513-1 PN LEDs.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) STOP ACTIVE LED
Figure 4-1 LED display of the CPU 1513-1 PN (without front panel)
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
33
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1513-1 PN has three LEDs to signal the current operating status and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED LED off LED off
LED lit green LED lit green LED lit green
LED lit green
LED lit green
ERROR LED LED off
LED flashes red LED off
LED flashes red LED off
LED off
LED flashes red
MAINT LED LED off LED off
Meaning Missing or insufficient power supply on the CPU.
An error has occurred.
LED off LED off
CPU is in RUN mode. A diagnostics event is pending.
LED lit yellow
LED flashes yellow
LED off
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time.
Active Force job
PROFIenergy pause
Maintenance required for the plant.
The affected hardware must be checked/replaced within a foreseeable period of time.
Bad configuration
An error has occurred.
LED lit yellow LED lit yellow
LED lit yellow LED lit yellow
LED flashes yellow
LED flashes red LED off
LED off LED flashes red
LED off
LED off
LED flashes yellow
LED off
LED flashes yellow
LED off
Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card CPU carries out a program with active breakpoint.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
34
Manual, 12/2017, A5E40881673-AA
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
RUN/STOP LED
LED flashes yellow/green
LED flashes yellow/green
ERROR LED LED off
LED flashes red
MAINT LED LED off
Meaning Startup (transition from RUN STOP)
LED flashes yellow
Startup (CPU booting)
Test of LEDs during startup, inserting a module.
LED flashing test
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX-LED. The table below shows the various "LED scenarios" of the ports for the CPU 1513-1 PN.
Table 4- 2 Meaning of the LEDs
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
35
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of the STOP ACTIVE LED
The following table shows the meaning of the STOP ACTIVE LED for the CPU 1513-1 PN.
Table 4- 3 Meaning of the LEDs
STOP ACTIVE LED LED lit yellow
LED off
Meaning The CPU is switched to "STOP" mode using the STOP button.
· As long as the STOP ACTIVE LED is lit up, switching the CPU to RUN mode is only possible using the RUN button.
· The CPU can then no longer be set to RUN mode via the display operation or via online functions. The state of the buttons is retained at power-off. If the CPU does not start up automatically after a power-on, you have to keep the STOP button pressed during startup until the STOP ACTIVE LED is activated.
· If an automatic start-up is to be reliably prevented after a power-up, the STOP button has to be kept pressed during the start-up of the CPU until the STOP ACTIVE LED is activated.
· The CPU is set to "STOP" mode using the display or programming device and not with the STOP button on the device.
· The CPU is in RUN mode.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
36
Manual, 12/2017, A5E40881673-AA
Technical specifications
Article number General information
Product type designation HW functional status Firmware version Engineering with
· STEP 7 TIA Portal configurable/integrated as of version
Configuration control via dataset
Display Screen diagonal [cm]
Control elements Number of keys Mode buttons
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering
· Mains/voltage failure stored energy time
· Repeat rate, min.
Input current Current consumption (rated value) Current consumption, max. Inrush current, max. I²t
Power Infeed power to the backplane bus Power consumption from the backplane bus (balanced)
Power loss Power loss, typ.
Memory Number of slots for SIMATIC memory card SIMATIC memory card required
6ES7513-1AL02-0AB0
CPU 1513-1 PN FS01 V2.5
V15
Yes
3.45 cm
8 2
24 V DC 19.2 V 28.8 V Yes
5 ms 1/s
0.7 A 0.95 A 1.9 A; Rated value 0.02 A²·s
10 W 5.5 W
5.7 W
1 Yes
CPU 1513-1 PN (6ES7513-1AL02-0AB0) Manual, 12/2017, A5E40881673-AA
5
37
Technical specifications
Article number Work memory
· integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range
· Size, max.
FB · Number range · Size, max.
FC · Number range · Size, max.
OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of DPV1 alarm OBs · Number of isochronous mode OBs · Number of technology synchronous alarm OBs · Number of startup OBs
6ES7513-1AL02-0AB0
300 kbyte 1.5 Mbyte
32 Gbyte
Yes
40 ns 48 ns 64 ns 256 ns
2 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999 1.5 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535 300 kbyte
0 ... 65 535 300 kbyte
300 kbyte 100 20 20 20; With minimum OB 3x cycle of 500 µs 50 3 1 2
100
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
38
Manual, 12/2017, A5E40881673-AA
Technical specifications
Article number · Number of asynchronous error OBs
· Number of synchronous error OBs
· Number of diagnostic alarm OBs Nesting depth
· per priority class Counters, timers and their retentivity S7 counter
· Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max.
Extended retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
· Number of clock memories
Data blocks · Retentivity adjustable
· Retentivity preset Local data
· per priority class, max.
6ES7513-1AL02-0AB0 4 2 1
24
2 048
Yes
Any (only limited by the main memory)
Yes
2 048
Yes
Any (only limited by the main memory)
Yes
128 kbyte; In total; available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 88 KB 1.5 Mbyte; When using PS 60W 24/48/60V DC HF
16 kbyte 8; 8 clock memory bits, grouped into one clock memory byte
Yes No
64 kbyte; max. 16 KB per block
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
39
Technical specifications
Article number Address area
Number of IO modules I/O address area
· Inputs · Outputs per integrated IO subsystem
Inputs (volume) Outputs (volume) per CM/CP Inputs (volume) Outputs (volume) Subprocess images · Number of subprocess images, max. Hardware configuration Number of distributed IO systems
Number of DP masters · Via CM
Number of IO Controllers · integrated · Via CM
Rack · Modules per rack, max. · Number of lines, max.
PtP CM · Number of PtP CMs
Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number
6ES7513-1AL02-0AB0
2 048; max. number of modules / submodules
32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image
8 kbyte 8 kbyte
8 kbyte 8 kbyte
32
32; A distributed I/O system is characterized not only by the integration of distributed I/O via PROFINET or PROFIBUS communication modules, but also by the connection of I/O via AS-i master modules or links (e.g. IE/PB-Link)
6; A maximum of 6 CMs (PROFINET + PROFIBUS) can be inserted in total
1 6; A maximum of 6 CMs (PROFINET + PROFIBUS) can be inserted in total
32; CPU + 31 modules 1
the number of connectable PtP CMs is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
40
Manual, 12/2017, A5E40881673-AA
Technical specifications
Article number Clock synchronization
· supported · in AS, master · in AS, slave · on Ethernet via NTP Interfaces Number of PROFINET interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Functionality · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
PROFINET IO Controller Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP
MRPD PROFIenergy Prioritized startup Number of connectable IO Devices,
max. Of which IO devices with IRT, max. Number of connectable IO Devices for
RT, max.
6ES7513-1AL02-0AB0
Yes Yes Yes Yes
1
2 Yes Yes; X1
Yes; IPv4 Yes Yes Yes Yes Yes Yes; MRP Automanager according to IEC 624392 Edition 2.0
Yes Yes Yes Yes Yes Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50 Yes; Requirement: IRT Yes Yes; Max. 32 PROFINET devices 128; In total, up to 512 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 64 128
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
41
Technical specifications
Article number of which in line, max.
6ES7513-1AL02-0AB0 128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
Update time for IRT for send cycle of 250 µs for send cycle of 500 µs
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
250 s to 4 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 500 µs of the isochronous OB is decisive 500 µs to 8 ms
for send cycle of 1 ms
1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" Update time = set "odd" send clock (any multiple
send cycles
of 125 µs: 375 µs, 625 µs ... 3 875 µs)
Update time for RT for send cycle of 250 µs
250 µs to 128 ms
for send cycle of 500 µs
500 µs to 256 ms
for send cycle of 1 ms
1 ms to 512 ms
for send cycle of 2 ms
2 ms to 512 ms
for send cycle of 4 ms
4 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
Yes
MRP
Yes
MRPD
Yes; Requirement: IRT
PROFIenergy
Yes
Shared device
Yes
Number of IO Controllers with shared 4 device, max.
Asset management record
Yes; Per user program
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
42
Manual, 12/2017, A5E40881673-AA
Technical specifications
Article number Interface types RJ 45 (Ethernet)
· 100 Mbps
6ES7513-1AL02-0AB0 Yes
· Autonegotiation
Yes
· Autocrossing
Yes
· Industrial Ethernet status LED
Yes
Protocols Number of connections
· Number of connections, max.
· Number of connections reserved for ES/HMI/web
128; via integrated interfaces of the CPU and connected CPs / CMs
10
· Number of connections via integrated inter- 88 faces
· Number of S7 routing paths
16
PROFINET IO Controller
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
Yes
Open IE communication
Yes
IRT
Yes
MRP MRPD
Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50
Yes; Requirement: IRT
PROFIenergy
Yes
Prioritized startup
Yes; Max. 32 PROFINET devices
Number of connectable IO Devices, max.
128; In total, up to 512 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
Of which IO devices with IRT, max.
64
Number of connectable IO Devices for 128 RT, max.
of which in line, max.
128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
43
Technical specifications
Article number SIMATIC communication
· S7 communication, as server · S7 communication, as client · User data per job, max.
Open IE communication · TCP/IP Data length, max. several passive connections per port, supported · ISO-on-TCP (RFC1006) Data length, max. · UDP Data length, max. UDP multicast · DHCP · SNMP · DCP · LLDP
Web server · HTTP · HTTPS
OPC UA · Runtime license required · OPC UA Server
Application authentication Security policies
User authentication Further protocols
· MODBUS Media redundancy
· Switchover time on line break, typ. · Number of stations in the ring, max.
6ES7513-1AL02-0AB0
Yes Yes See online help (S7 communication, user data size)
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
Yes; Standard and user pages Yes; Standard and user pages
Yes Yes; Data access (read, write, subscribe), method call, custom address space Yes Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "anonymous" or by user name & password
Yes; MODBUS TCP
200 ms; For MRP, bumpless for MRPD 50
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
44
Manual, 12/2017, A5E40881673-AA
Technical specifications
Article number Isochronous mode
Isochronous operation (application synchronized up to terminal) Equidistance S7 message functions Number of login stations for message functions, max. Program alarms Number of configurable program alarms Number of simultaneously active program alarms · Number of program alarms
· Number of alarms for system diagnostics
· Number of alarms for motion technology objects
Test commissioning functions Joint commission (Team Engineering)
Status block
Single step Number of breakpoints Status/control · Status/control variable
· Variables
· Number of variables, max. of which status variables, max. of which control variables, max.
Forcing · Forcing, variables
· Number of variables, max. Diagnostic buffer
· present
· Number of entries, max. of which powerfail-proof
Traces · Number of configurable Traces
6ES7513-1AL02-0AB0
Yes; With minimum OB 6x cycle of 500 µs Yes
32 Yes 5 000
300 100 80
Yes; Parallel online access possible for up to 5 engineering systems Yes; Up to 8 simultaneously (in total across all ES clients) No 8
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Peripheral inputs/outputs 200
Yes 1 000 500
4; Up to 512 KB of data per trace are possible
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
45
Technical specifications
Article number Interrupts/diagnostics/status information Diagnostics indication LED
· RUN/STOP LED · ERROR LED · MAINT LED · STOP ACTIVE LED · Connection display LINK TX/RX
6ES7513-1AL02-0AB0
Yes Yes Yes Yes Yes
Supported technology objects
Motion Control
Yes; Note: The number of axes affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER
· Number of available Motion Control re-
800
sources for technology objects (except cam
disks)
· Required Motion Control resources
per speed-controlled axis
40
per positioning axis
80
per synchronous axis
160
per external encoder
80
per output cam
20
per cam track
160
per probe
40
· Positioning axis Number of positioning axes at motion control cycle of 4 ms (typical value) Number of positioning axes at motion control cycle of 8 ms (typical value)
Controller · PID_Compact
· PID_3Step
· PID-Temp
Counting and measuring · High-speed counter
5
10
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
Standards, approvals, certificates
Suitable for safety functions
No
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
46
Manual, 12/2017, A5E40881673-AA
Technical specifications
Article number Ambient conditions Ambient temperature during operation
· horizontal installation, min. · horizontal installation, max.
· vertical installation, min. · vertical installation, max.
Ambient temperature during storage/transportation
· min. · max. Configuration Programming Programming language
LAD FBD STL SCL GRAPH Know-how protection · User program protection/password protection · Copy protection · Block protection Access protection · Password for display · Protection level: Write protection · Protection level: Read/write protection · Protection level: Complete protection Cycle time monitoring · lower limit · upper limit Dimensions Width Height Depth Weights Weight
6ES7513-1AL02-0AB0
0 °C 60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off 0 °C 40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C 70 °C
Yes Yes Yes Yes Yes
Yes
Yes Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
35 mm 147 mm 129 mm
405 g
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
47
Technical specifications
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
48
Manual, 12/2017, A5E40881673-AA
Dimensional drawing
A
This section includes a dimensional drawing of the module on a mounting rail and a dimensional drawing with the front panel open. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimensional drawings for CPU 1513-1 PN
Figure A-1 Dimensional drawing of CPU 1513-1 PN, front and side views
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
Manual, 12/2017, A5E40881673-AA
49
Dimensional drawing
Figure A-2 Dimensional drawing of CPU 1513-1 PN, side view with front panel open
CPU 1513-1 PN (6ES7513-1AL02-0AB0)
50
Manual, 12/2017, A5E40881673-AA
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
SIMATIC
S7-1500R/H CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual
Preface
S7-1500R/H Documentation Guide
1
Product overview
2
Connecting
3
Interrupts, diagnostics, error
messages and system
4
events
Technical specifications
5
Dimension drawing
A
11/2019
A5E42009333-AB
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E42009333-AB 10/2019 Subject to change
Copyright © Siemens AG 2018 - 2019. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500R/H redundant system and the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1513R-1 PN.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)". Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
3
Preface
Security information Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Siemens Industry Online Support You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
4
Equipment Manual, 11/2019, A5E42009333-AB
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
5
Table of contents
Preface ...................................................................................................................................................... 3
1 S7-1500R/H Documentation Guide............................................................................................................ 7
2 Product overview ....................................................................................................................................... 9
2.1
New functions in firmware version V2.8................................................................................... 9
2.2
Configuration and operating principle .................................................................................... 11
2.3
Hardware properties .............................................................................................................. 13
2.4
Firmware functions................................................................................................................. 17
2.5 2.5.1 2.5.2 2.5.3
Operator controls and display elements ................................................................................ 19 Front view of the CPU with closed front panel....................................................................... 19 Front view of the CPU without front panel ............................................................................. 21 Rear view of the CPU ............................................................................................................ 22
2.6
Mode selector......................................................................................................................... 23
3 Connecting .............................................................................................................................................. 24
3.1
Terminal assignment.............................................................................................................. 24
4 Interrupts, diagnostics, error messages and system events .................................................................... 27
4.1
Status and error display of the CPU ...................................................................................... 27
5 Technical specifications ........................................................................................................................... 33
A Dimension drawing .................................................................................................................................. 42
A.1
Dimension drawing ................................................................................................................ 42
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
6
Equipment Manual, 11/2019, A5E42009333-AB
S7-1500R/H Documentation Guide
1
The documentation for the redundant S7-1500R/H system is divided into three areas. This division enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the redundant S7-1500R/H system. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the redundant S7-1500R/H system, e.g. diagnostics, communication.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
7
S7-1500R/H Documentation Guide
S7-1500/ET 200MP Manual Collection
The S7-1500/ET 200MP Manual Collection contains the complete documentation on the redundant S7-1500R/H system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en/).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
8
Equipment Manual, 11/2019, A5E42009333-AB
Product overview
2
2.1
New functions in firmware version V2.8
This section contains an overview of the most important new firmware functions of the CPU since the last edition of the manual.
New functions of the CPU in firmware version V2.8
New functions Download modified user program in RUNRedundant system state
Backing up the configuration of the S71500R/H redundant system in runtime
Customer benefits
You can download a modified user program into the R/H CPUs in the RUN-Redundant system state.
Advantage: The redundant system will remain consistently in the RUN-Redundant system state during the change to the user program. The system state will not switch to RUN-Rolo or SYNCUP.
You do not have to interrupt the process during a backup while the plant is running. Uninterrupted plant operation avoids high restart and material costs.
Where can I find information?
S7-1500R/H System Manual (https://support.industry.siemens.com/c s/ww/en/view/109754833)
Switched S1 device Testing with breakpoints
The "Switched S1 device" function of the CPU enables operation of standard IO devices in the S71500R/H redundant system.
When testing with breakpoints, you run a program from breakpoint to breakpoint in the STARTUP (startup OB) or RUN-Solo system state. Testing with breakpoints provides you with the following advantages:
· Testing SCL and STL program code with the help of breakpoints
· Localization of logic errors step by step
· Simple and quick analysis of complex programs prior to actual commissioning
· Recording of current values within individual executed loops
· Using breakpoints for program validation is also possible in SCL or STL networks within LAD/FBD blocks.
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
9
Product overview 2.1 New functions in firmware version V2.8
New functions PID controller
Alarms in the user program
Customer benefits
Where can I find information?
PID controllers are built into all R/H-CPUs as
·
standard. PID controllers measure the actual value of
a physical variable, for example, temperature or
pressure, and compare the actual value with the
setpoint. Based on the resulting error signal, the
·
controller calculates a manipulated variable that
causes the process value to reach the setpoint as
quickly and stably as possible.
S7-1500R/H System Manual (https://support.industry.siemens.co m/cs/ww/en/view/109754833)
PID Control Function Manual (https://support.industry.siemens.co m/cs/ww/en/view/108210036)
The PID controllers offer you the following advantages:
· Simple configuration and programming through integrated editors and blocks
· Simple simulation, visualization, commissioning and operation via PG and HMI
· Automatic calculation of the control parameters and tuning during operation
· No additional hardware and software required
Alarms enable you to display events from process execution in the S7-1500R/H redundant system and to quickly identify, accurately locate, and correct errors.
Diagnostics function manual (https://support.industry.siemens.com/c s/ww/en/view/59192926)
Additional information
You can find an overview of all new functions, improvements and revisions in the respective firmware versions on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109478459).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
10
Equipment Manual, 11/2019, A5E42009333-AB
Product overview 2.2 Configuration and operating principle
2.2
Configuration and operating principle
Structure
The S7-1500R redundant system consists of the following components: Two CPUs of the type CPU 1513R-1 PN Two SIMATIC memory cards PROFINET cable (redundancy connections, PROFINET ring) IO devices Load power supply (optional) System power supply (optional) You mount the CPUs on a common mounting rail or spatially separated on two separate mounting rails. You connect the two CPUs and the IO devices in a PROFINET ring via the PROFINET cable.
Optional load current supply
First CPU
Mounting rail with integrated DIN rail profile
Second CPU
PROFINET cable (redundancy connections, PROFINET ring)
Figure 2-1 Configuration example for S7-1500R
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
11
Product overview 2.2 Configuration and operating principle
Note Standard rail adapter You mount the CPUs on a standardized 35 mm rail using the standard rail adapter. You will find information on mounting the standard rail adapter in the S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833) System Manual.
Principle of operation One of the two CPUs in the redundant system takes on the role of CPU for process control (primary CPU). The other CPU takes on the role of the following CPU (backup CPU). The assigned role of the CPUs can change during operation. Synchronization of all relevant data between primary CPU and backup CPU ensures fast switching between CPUs in the event of a primary CPU failure. If the primary CPU fails, the backup CPU retains control of the process as the new primary CPU at the point of interruption. The redundancy connections are the PROFINET ring with MRP. The CPUs are synchronized via a PROFINET ring.
Additional information You can find a detailed description of the operation and design of the CPUs in the system manual Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
12
Equipment Manual, 11/2019, A5E42009333-AB
2.3
Hardware properties
Article number 6ES7513-1RL00-0AB0
View of the module The figure below shows the CPU 1513R-1 PN.
Product overview 2.3 Hardware properties
Figure 2-2 CPU 1513R-1 PN
Note Protective film Note that there is a removable protective foil on the display when the CPUs are delivered.
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
13
Product overview 2.3 Hardware properties
Properties
CPU 1513R-1 PN has the following technical properties:
Property CPU display
Supply voltage
Description
Additional information
All CPUs of the redundant system S7 1500R/H have a · Redundant System S7-1500R/H
display with plain text information. The display provides
(https://support.industry.siemens.
you with diagnostic messages as well as information about the article number, the firmware version and the serial number of the CPU.
com/cs/ww/en/view/109754833) System Manual
You can also view and assign the IP addresses, the PROFINET device name and the redundancy ID of the
·
SIMATIC S7-1500 Display Simulator
CPU. The system IP address cant be viewed via
(http://www.automation.siemens.
STEP 7 but not in the display.
com/salesmaterial-as/interactive-
In addition to the functions listed here, a large number of other functions are available on the display. These
manuals/getting-started_simatics7-1500/disp_tool/start_en.html)
additional functions are described in the SIMATIC S7
1500 Display Simulator.
The 24 V DC supply voltage is fed via a 4-pin plug located on the front of the CPU.
· Section Connecting (Page 24)
· Redundant System S7-1500R/H (https://support.industry.siemens. com/cs/ww/en/view/109754833) System Manual
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
14
Equipment Manual, 11/2019, A5E42009333-AB
Product overview 2.3 Hardware properties
Property
PROFINET IO
PROFINET IO interface (X1 P1 R and X1 P2 R)
Description
Additional information
The CPU has an X1 interface with two ports (X1 P1 R and X1 P2 R).
· The PROFINET IO interface X1 (default P1 R) is used to set up the PROFINET ring with the two CPUs and the IO devices.
· The PROFINET IO interface X1 (default P2 R) is used to make the connection between the two RCPUs in the PROFINET ring.
· Redundant System S7-1500R/H (https://support.industry.siemens. com/cs/ww/en/view/109754833) System Manual
· Function manual PROFINET (https://support.industry.siemens. com/cs/ww/en/view/49948856)
In the PROFINET ring, the synchronization frames between the CPUs are transmitted via the following connections:
The direct connection (X1 P2 R)
The indirect connection (X1 P1 R) via the IO devices
· The interface supports PROFINET IO RT (RealTime) and PROFINET basic functionality.
Operation of the CPUs as IO controllers
Basic PROFINET functionality comprises: HMI communication Communication with the configuration system Communication with a higher-level network
(backbone, router, Internet) Communication with another machine or
automation cell
IO controller: As IO controllers the CPUs address the following configured IO devices:
· IO devices with S2 system redundancy within the PROFINET ring
· IO devices with S2 system redundancy that are decoupled from the PROFINET ring via a switch
· Standard IO devices (switched S1 devices)
Standard IO devices usually do not support HSync Forwarding.
To avoid a cycle time increase when the PROFINET ring is interrupted, integrate the standard IO devices behind a switch and not in the PROFINET ring.
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
15
Product overview 2.3 Hardware properties
Note PROFINET basic functionality
CPU 1513R-1 PN has a PROFINET IO interface with two ports (X1 P1 R and X1 P2 R).
To connect an HMI device or PG/PC to the CPUs via Industrial Ethernet, build the PROFINET ring via the PROFINET X1 interface. Install a switch in the PROFINET ring. Make an Industrial Ethernet connection via the switch.
H-Sync Forwarding H-Sync Forwarding enables a PROFINET device with MRP to forward synchronization data (synchronization frames) of an S7-1500R redundant system only within the PROFINET ring.
In addition, H-Sync Forwarding forwards the synchronization data even during reconfiguration of the PROFINET ring. H-Sync Forwarding avoids a cycle time increase if the PROFINET ring is interrupted.
Note Support of H-Sync Forwarding
The technical specifications typically state whether a PROFINET device supports H-Sync Forwarding.
The GSD file will also indicate whether the device supports H-Sync Forwarding. The device supports H-Sync Forwarding when the "ApplicationClass" attribute contains the "HighAvailability" token.
You will find more information on H-Sync Forwarding in the system manual S7-1500R/H redundant system.
Accessories
You can find information on the topic of "Accessories/spare parts" in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
16
Equipment Manual, 11/2019, A5E42009333-AB
Product overview 2.4 Firmware functions
2.4
Firmware functions
Functions
CPU 1513R-1 PN supports the following firmware functions:
Function CPU redundancy Integrated system diagnostics
Integrated trace functionality
PROFINET IO System redundancy S2
Switched S1 device RT (real time)
Description
There are two duplicate CPUs that synchronize their data via redundancy connections within a PROFINET ring. If one of the CPUs fails, the other CPU retains control of the process.
The system automatically generates the messages for the system diagnostics and outputs these messages via a programming device/PC, HMI device or the integrated display. System diagnostics information is also available when the CPUs are in operating state STOP.
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
Trace and logic analyzer functions are suitable for monitoring highly dynamic processes.
Note: Note that the S7-1500R/H redundant system supports recording of measurements. However, saving the measurements to the SIMATIC memory card is not supported.
Additional information Redundant System S7-1500R/H (https://support.industry.siemens.co m/cs/ww/en/view/109754833) System Manual Function manual Diagnostics (http://support.automation.siemens.c om/WW/view/en/59192926)
Function manual Using the trace and logic analyzer function (http://support.automation.siemens.c om/WW/view/en/64897128)
All IO devices are connected redundantly in the
·
redundant S7 1500R/H system. All IO devices assigned
to the system must therefore support system
redundancy S2.
If the role of the CPUs changes, the new primary CPU takes over the PROFINET IO communication.
·
Redundant System S7-1500R/H (https://support.industry.siemens. com/cs/ww/en/view/109754833) System Manual
Function manual PROFINET (http://support.automation.sieme ns.com/WW/view/en/49948856)
The switched S1 device function of the CPU enables operation of standard IO devices in the S7-1500R/H redundant system.
RT prioritizes PROFINET IO frames over standard frames. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet frames.
Redundant System S7-1500R/H (https://support.industry.siemens.co m/cs/ww/en/view/109754833) System Manual
Function manual PROFINET (http://support.automation.siemens.c om/WW/view/en/49948856)
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
17
Product overview 2.4 Firmware functions
Function
Description
Additional information
MRP (Media Redundancy Protocol)
PROFIenergy
Integrated technology Integrated closed-loop control functionality
The Media Redundancy Protocol enables the configuration of redundant networks. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails.
Within the PROFINET ring, the R-CPUs assume the role of the MRP Manager following appropriate project configuration and all other devices in the ring assume the role of the MRP clients.
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. Most of the energy is saved by the process. The PROFINET device itself only contributes a few watts to the savings potential.
· PID Compact (continuous PID controller)
· PID 3Step (step controller for integrating actuators)
· PID Temp (temperature controller for heating and cooling with two separate actuators)
Redundant System S7-1500R/H System Manual
Function manual PID Control (https://support.industry.siemens.co m/cs/ww/en/view/108210036)
Security Integrated
Know-how protection Access protection
The know-how protection protects user blocks against unauthorized access and modifications.
You can use authorization levels to assign separate rights to different user groups.
Redundant System S7-1500R/H (https://support.industry.siemens.co m/cs/ww/en/view/109754833) System Manual
Integrity protection Password provider
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between STEP 7 and the CPUs.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPUs for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password entry, you can link a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 automatically imports the password for the blocks. This saves you time.
· Optimum block protection because the users do not know the password itself.
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
18
Equipment Manual, 11/2019, A5E42009333-AB
2.5
2.5.1
Product overview 2.5 Operator controls and display elements
Operator controls and display elements
Front view of the CPU with closed front panel
The figure below shows the front view of the CPU 1513R-1 PN.
LEDs for the current operating state and diagnostic status of the CPU Display Control keys
Figure 2-3 View of the CPU 1513R-1 PN (with front panel) - front
Note Temperature range for display To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPUs. You can find additional information on the temperatures at which the display switches itself on and off in the Technical specifications (Page 33).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
19
Product overview 2.5 Operator controls and display elements
Pulling and plugging the front panel with display You can pull and plug the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you remove or attach the front panel of a redundant system S7-1500R/H during operation, personal injury or damage to property can occur in hazardous area zone 2. Before you remove or fit the front panel, always switch off the power supply to the S7-1500R/H redundant system in hazardous area zone 2.
Locking the front panel You can lock the front panel to protect the SIMATIC memory card and the mode selector of the CPU against unauthorized access. You can attach a security seal or a padlock with a hoop diameter of 3 mm to the front panel.
Reference
Figure 2-4 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, the configurable protection levels and the local lock in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
You can find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
20
Equipment Manual, 11/2019, A5E42009333-AB
2.5.2
Product overview 2.5 Operator controls and display elements
Front view of the CPU without front panel
The figure below shows the operator controls and connection elements of the CPU 1513R-1 PN.
LEDs for the current operating state and diagnostic status of the CPUs
Display connector
Slot for the SIMATIC memory card
Mode selector
LEDs for the 2 ports of the PROFINET interface X1
MAC address of the X1 interface
PROFINET IO interface X1 with 2 ports
Connector for power supply
Fastening screw
Figure 2-5 View of the CPU 1513R-1 PN (without front panel) - front
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
21
Product overview 2.5 Operator controls and display elements
2.5.3
Rear view of the CPU
The figure below shows the connection elements on the rear of the CPU 1513R-1 PN.
Shield contact surface
Plug-in connection for power supply
Plug-in connection for backplane bus
Fastening screw
Figure 2-6 View of the CPU 1513R-1 PN - rear
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
22
Equipment Manual, 11/2019, A5E42009333-AB
Product overview 2.6 Mode selector
2.6
Mode selector
You use the mode selector to:
Request a change to a specific operating state
Disable or enable the change of a specific operating state
(if, for example, the mode selector is set to STOP, you cannot switch the CPU to RUN via a communication task configured in the TIA Portal or via the display)
The following table shows the position of the switch and the corresponding meaning.
Table 2- 1
Position RUN STOP MRES
Mode switch settings
Meaning RUN operating state STOP operating state Memory reset
Explanation The CPU has permission to go to RUN. The CPU does not have permission to go to RUN. Position for CPU memory reset.
Reference
You can find a brief overview of the various operating states and system states in the section Status and error display of the CPU (Page 27).
You can find a detailed description of the operating states and system states in the system manual for S7-1500R/H Redundant System (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
23
Connecting
3
3.1
Terminal assignment
This section provides information on the terminal assignment of the individual interfaces and the block diagram of the CPU 1513R-1 PN.
24 V DC supply voltage (X80)
The connector for the power supply is plugged in when the CPU ships from the factory.
The following table shows the signal names and the descriptions of the pin assignment of the 24 V DC supply voltage.
Table 3- 1 Pin assignment 24 V DC supply voltage
View Connector
Signal name 1)
Description
1 1L+ 2 1M 3 2M 4 2L+
+ 24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through 2) + 24 V DC of the supply voltage for loop-through 2)
1) 1L+ and 2L+ as well as 1M and 2M are bridged internally. 2) Maximum 10 A permitted
You can find information on the various supply options in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
24
Equipment Manual, 11/2019, A5E42009333-AB
Connecting 3.1 Terminal assignment
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R) The assignment corresponds to the Ethernet standard for a RJ45 connector. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Figure 3-1 Interface assignments
Additional information
You can find additional information on the topic of "Connecting the CPU" and on the topic "Accessories/spare parts" in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
Assignment of the MAC addresses
CPU 1513R-1 PN has a PROFINET interface with two ports for each CPU. The PROFINET interface itself has a MAC address, and each of the two PROFINET ports has its own MAC address. There are a total of six MAC addresses for the two CPUs of the CPU 1513R-1 PN.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC addresses are printed on the rating plate on the right side of each CPU 1513R-1 PN.
The table below shows how the MAC addresses are assigned.
Table 3- 2 Assignment of MAC addresses using the example of a single CPU
MAC address 1
MAC address 2 MAC address 3
Assignment PROFINET interface X1 (visible in STEP 7 for accessible devices)
Port X1 P1 R (required for LLDP, for example) Port X1 P2 R (required for LLDP, for example)
Labeling
· Front printed · Right-side printed
(start of number range)
---
· Right-side printed (end of number range)
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
25
Connecting 3.1 Terminal assignment
Block diagram The following figure shows the block diagram of the CPU 1513R-1 PN.
SIMATIC memory card (X50) Display Mode selector RUN/STOP/MRES Electronics PROFINET 2-port switch Backplane bus connection
(connection to backplane bus not configurable)
Internal supply voltage Supply of the 24 V DC supply voltage (X80)
Figure 3-2 Block diagram of the CPU 1513R-1 PN
PN X1 P1 R PN X1 P2 R L+ M R/S ER
MT X1 P1, X1 P2
PROFINET interface X1 port 1 PROFINET interface X1 port 2 24 V DC supply voltage Ground RUN/STOP LED (yellow/green) ERROR LED (red)
MAINT LED (yellow) LED Link TX/RX
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
26
Equipment Manual, 11/2019, A5E42009333-AB
Interrupts, diagnostics, error messages and system events
4
4.1
Status and error display of the CPU
The LED displays of the CPU are described below.
You can find more detailed information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topic of "Diagnostics" and "System events" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual and in the system manual Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
You can find additional information on the topic of "Operating states and system states" as well as various failure scenarios in the system manual for S7-1500R/H Redundant System (https://support.industry.siemens.com/cs/ww/en/view/109754833).
LED display
The figure below shows the LED displays of the CPU 1513R-1 PN.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED)
Figure 4-1 LED display of the CPU 1513R-1 PN (without front panel)
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
27
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
LED displays depending on operating states and system states CPU 1513R-1 PN has the following LEDs for displaying the current operating state and diagnostics status. RUN/STOP LED ERROR LED MAINT LED The LEDs indicate the operating state of the respective CPU within the redundant system. Operating states describe the behavior of a single CPU at a specific time. The combination of the operating states of the CPUs forms the system state. The following figure shows the possible operating states of the CPUs and the resulting system states.
Figure 4-2 Operating states and system states
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
28
Equipment Manual, 11/2019, A5E42009333-AB
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs CPU 1513R-1 PN has three LEDs for displaying the current operating state and diagnostics status.
Note LED patterns of the redundant system S7 1500R Note that it is not always possible to: · Determine the state of the CPU from the signal pattern · Determine the state of the other CPU from the signal pattern The "Meaning" column only shows a possible typical cause. To investigate the cause of the signal pattern, use the diagnostic buffer and its display via: · STEP 7 · HMI devices · Displays of the CPUs
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
29
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
Table 4- 1
The following table shows the meaning of the various color combinations for the RUN/STOP, ERROR and MAINT LEDs.
Meaning of the LEDs
RUN/STOP LED LED off
LED flashes yellow/green LED lit yellow
LED flashes yellow LED lit yellow
LED lit yellow
LED flashes yellow/green
ERROR LED LED off
LED flashes red
LED off LED off LED flashes red LED off LED off
MAINT LED LED off
LED flashes yellow
LED lit yellow LED lit yellow LED flashes yellow LED flashes yellow LED lit yellow
Meaning Missing or insufficient supply voltage on the CPU.
Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test CPU is in operating state STOP. Completion of system initialization CPU executes internal activities in an operating state RUN-Redundant.
CPU defective
Firmware update successfully completed.
The primary CPU is in operating state STARTUP. The backup CPU is in operating state SYNCUP. The backup CPU has not yet been restarted for SYNCUP during this phase.
LED flashes yellow LED lit green
LED off LED off
LED lit green LED lit green LED lit green
LED off LED flashes red LED flashes red
LED off LED lit yellow
LED off LED off LED lit yellow
The CPU performs a warm restart.
Maintenance demanded for the plant. You need to check/replace the affected hardware within a short period of time. The primary CPU is in operating state RUNSyncup. Active Force job PROFIenergy pause The primary CPU is in operating state RUN. The CPU is in operating state RUN-Redundant. There are no events, requirements, errors, etc. A diagnostic event is pending in operating state RUN-Redundant.
A diagnostic event (e.g. failure of an IO device within the PROFINET ring or no access to SIMATIC memory card possible1)) and maintenance is demanded (e.g. interruption of the PROFINET ring).
1) If access to the SIMATIC memory card is not possible in RUN-Redundant (wrong card, card full/write protected), the system switches to RUN-Solo. The ERROR LED flashes for three seconds. The MAINT LED lights up until the RUNRedundant system status is reached again.
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
30
Equipment Manual, 11/2019, A5E42009333-AB
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
Note MAINT LED of the two CPUs
The MAINT LEDs of both CPUs only go out when the following conditions are fulfilled: · The CPUs are in the RUN-Redundant system state. · No maintenance is demanded.
Note LED displays in redundant operating state
In the RUN-Redundant system state, the LED displays on both CPUs are identical (exception: you are performing an LED flash test on one CPU).
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various LED patterns of the ports of the CPU 1513R-1 PN.
Table 4- 2 Meaning of LINK RX/TX LED
LINK TX/RX LED off
Flashes green Illuminated green
LED flashes yellow/green
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The redundancy connections were interrupted. The CPU performs an LED flash test.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner. The redundancy connections are OK. Data is currently being received/sent by a communication partner via the PROFINET interface of the PROFINET device. Note that the human eye perceives this LED image as an LED that is lit yellow or flickering yellow.
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
31
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
Note "LED" instruction You can read the status (e.g. "On" or "Off") of LEDs of a CPU or a module using the "LED" instruction. Note, however, that it is not possible to read the LED status of the LINK RX/TX LEDs on all S7-1500 R/H CPUs. You can find additional information on the "LED" instruction in the STEP 7 online help.
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
32
Equipment Manual, 11/2019, A5E42009333-AB
Technical specifications
5
The following table shows the technical specifications as of 11/2019. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7513-1RL00-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version Product function · I&M data
· Isochronous mode
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
Display Screen diagonal [cm]
Control elements Number of keys Mode selector switch
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering · Mains/voltage failure stored energy time
Input current Current consumption (rated value) Inrush current, max. I²t
Power loss Power loss, typ.
Memory Number of slots for SIMATIC memory card SIMATIC memory card required
6ES7513-1RL00-0AB0
CPU 1513R-1 PN FS01 V2.8
Yes; I&M0 to I&M3 No
V16 (FW V2.8) / V15.1 (FW V2.6) or higher
3.45 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms
0.7 A 1.9 A; Rated value 0.02 A²·s
5.7 W
1 Yes
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
33
Technical specifications
Article number Work memory
· integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range · Size, max.
FB · Number range · Size, max.
FC · Number range · Size, max.
OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of startup OBs · Number of asynchronous error OBs · Number of synchronous error OBs · Number of diagnostic alarm OBs
Nesting depth · per priority class
6ES7513-1RL00-0AB0
300 kbyte 1.5 Mbyte
32 Gbyte
Yes
80 ns 96 ns 128 ns 512 ns
2 000; Blocks (OB, FB, FC, DB) and UDTs
Number range: 1 to 59 999 1.5 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535 300 kbyte
0 ... 65 535 300 kbyte
300 kbyte 100 20 20 20 50 100 4 2 1
24
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
34
Equipment Manual, 11/2019, A5E42009333-AB
Technical specifications
Article number Counters, timers and their retentivity S7 counter
· Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
· Number of clock memories
Data blocks · Retentivity adjustable
· Retentivity preset Local data
· per priority class, max. Address area
Number of IO modules I/O address area
· Inputs
· Outputs per integrated IO subsystem
Inputs (volume) Outputs (volume) Subprocess images · Number of subprocess images, max.
6ES7513-1RL00-0AB0
2 048 Yes Any (only limited by the main memory) Yes 2 048 Yes Any (only limited by the main memory) Yes 128 kbyte
16 kbyte 8; 8 clock memory bit, grouped into one clock memory byte Yes No 64 kbyte; max. 16 KB per block 2 048; max. number of modules / submodules 32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image 8 kbyte 8 kbyte 32
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
35
Technical specifications
Article number Hardware configuration
Number of distributed IO systems Number of IO Controllers
· integrated Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number Clock synchronization · supported · on Ethernet via NTP Interfaces Number of PROFINET interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Protocols · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
6ES7513-1RL00-0AB0
1
1
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
Yes Yes
1
2 Yes Yes; X1
Yes; IPv4 Yes No Yes; Only Server Yes No Yes; MRP Automanager according to IEC 624392 Edition 2.0
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
36
Equipment Manual, 11/2019, A5E42009333-AB
Technical specifications
Article number PROFINET IO Controller Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP
MRPD PROFIenergy Number of connectable IO Devices,
max. Interface types RJ 45 (Ethernet)
· 100 Mbps · Autonegotiation · Autocrossing · Industrial Ethernet status LED Protocols Number of connections · Number of connections, max. · Number of connections reserved for
ES/HMI/web Redundancy mode
· MRP
· MRPD SIMATIC communication
· S7 communication, as server · S7 communication, as client
6ES7513-1RL00-0AB0
Yes No No Yes No Yes; Only Manager Auto, max. 50 nodes; only 16 are recommended, however No Yes 64
Yes Yes Yes Yes
88 10
Yes; Manager Auto is permanently set in TIA. Max. 50 nodes are possible, 16 are recommended No
Yes No
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
37
Technical specifications
Article number Open IE communication
· TCP/IP Data length, max. several passive connections per port, supported
· ISO-on-TCP (RFC1006) Data length, max.
· UDP Data length, max. UDP multicast
· DHCP · SNMP · DCP · LLDP Web server · HTTP · HTTPS OPC UA · OPC UA client · OPC UA server Further protocols · MODBUS Media redundancy · Switchover time on line break, typ. · Number of stations in the ring, max. Isochronous mode Isochronous operation (application synchronized up to terminal) Equidistance
6ES7513-1RL00-0AB0
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
No No
No No
Yes; MODBUS TCP
200 ms; PROFINET MRP 50; Only 16 are recommended, however
No No
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
38
Equipment Manual, 11/2019, A5E42009333-AB
Technical specifications
Article number S7 message functions
Number of login stations for message functions, max. Program alarms Number of configurable program messages, max. Number of loadable program messages in RUN, max. Number of simultaneously active program alarms · Number of program alarms
· Number of alarms for system diagnostics Test commissioning functions
Joint commission (Team Engineering) Status block Single step Number of breakpoints
Status/control · Status/control variable
· Variables
· Number of variables, max. of which status variables, max. of which control variables, max.
Forcing · Forcing
· Forcing, variables
· Number of variables, max. Diagnostic buffer
· present
· Number of entries, max. of which powerfail-proof
Traces · Number of configurable Traces
· Memory size per trace, max.
6ES7513-1RL00-0AB0
32
Yes 5 000; Program messages are generated by the "Program_Alarm" block, ProDiag or GRAPH 2 500
300 100
No Yes; up to 8 simultaneously No 8; Breakpoints are only supported in RUN-Solo status
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Yes Peripheral inputs/outputs 200
Yes 1 000 500
4 512 kbyte
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
39
Technical specifications
Article number Interrupts/diagnostics/status information Diagnostics indication LED
· RUN/STOP LED · ERROR LED · MAINT LED · Connection display LINK TX/RX Supported technology objects Motion Control Controller · PID_Compact
· PID_3Step
· PID-Temp
Counting and measuring · High-speed counter Standards, approvals, certificates Suitable for safety functions Ambient conditions Ambient temperature during operation · horizontal installation, min. · horizontal installation, max.
· vertical installation, min. · vertical installation, max.
Ambient temperature during storage/transportation
· min. · max. Altitude during operation relating to sea level · Installation altitude above sea level, max.
6ES7513-1RL00-0AB0
Yes Yes Yes Yes
No
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature Yes No
No
0 °C 60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off 0 °C 40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C 70 °C
5 000 m; Restrictions for installation altitudes > 2 000 m, see manual
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
40
Equipment Manual, 11/2019, A5E42009333-AB
Technical specifications
Article number Configuration Programming Programming language
LAD FBD STL SCL CFC GRAPH Know-how protection · User program protection/password protection
· Copy protection
· Block protection Access protection
· Password for display
· Protection level: Write protection
· Protection level: Read/write protection
· Protection level: Complete protection Cycle time monitoring
· lower limit
· upper limit Dimensions
Width Height Depth Weights Weight, approx.
6ES7513-1RL00-0AB0
Yes Yes Yes Yes No Yes
Yes
No Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
35 mm 147 mm 129 mm
430 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc. in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
41
Dimension drawing
A
A.1
Dimension drawing
This section contains the dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with the front panel open. Keep to the dimensions when installing in cabinets, control rooms, etc.
Dimension drawings of the CPU 1513R-1 PN
Figure A-1 Dimension drawing of the CPU 1513R-1 PN, front and side view
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
42
Equipment Manual, 11/2019, A5E42009333-AB
Dimension drawing A.1 Dimension drawing
Figure A-2 Dimension drawing of the CPU 1513R-1 PN, side view with front panel open
CPU 1513R-1 PN (6ES7513-1RL00-0AB0)
Equipment Manual, 11/2019, A5E42009333-AB
43
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
-
SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual
Preface
S7-1500 / ET 200MP Documentation Guide
1
Product overview
2
Connecting up
3
Interrupts, error messages,
diagnostics and system
4
alarms
Technical specifications
5
Dimensional drawing
A
11/2019
A5E46416198-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E46416198-AA 11/2019 Subject to change
Copyright © Siemens AG 2019. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system/ ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1515-2 PN.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
3
Preface
Security information Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Siemens Industry Online Support You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
4
Equipment Manual, 11/2019, A5E46416198-AA
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
5
Table of contents
Preface ...................................................................................................................................................... 3
1 S7-1500 / ET 200MP Documentation Guide .............................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
New functions in firmware version V2.8................................................................................... 9
2.2
Area of application of the SIMATIC S7-1500 CPUs .............................................................. 13
2.3
Hardware properties .............................................................................................................. 21
2.4
Firmware functions................................................................................................................. 23
2.5 2.5.1 2.5.2 2.5.3
Operating and display elements ............................................................................................ 27 Front view of the CPU with closed front panel....................................................................... 27 Front view of the CPU without front panel or display and view from below........................... 29 Rear view of the CPU ............................................................................................................ 31
2.6
Operating mode buttons ........................................................................................................ 32
3 Connecting up ......................................................................................................................................... 33
4 Interrupts, error messages, diagnostics and system alarms .................................................................... 37
4.1
Status and error display of the CPU ...................................................................................... 37
5 Technical specifications ........................................................................................................................... 41
A Dimensional drawing ............................................................................................................................... 55
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
6
Equipment Manual, 11/2019, A5E46416198-AA
S7-1500 / ET 200MP Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
7
S7-1500 / ET 200MP Documentation Guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
8
Equipment Manual, 11/2019, A5E46416198-AA
Product overview
2
2.1
New functions in firmware version V2.8
This section contains an overview of the most important new firmware functions of the CPU since the last edition of the manual.
New functions of the CPU in firmware version V2.8
New functions IP forwarding
Direct data exchange
Applications
IP forwarding forwards IP data through the CPU from one IP subnet to another IP subnet.
During IP forwarding, the CPU automatically creates an IP route table from the IP configuration in STEP 7.
Customer benefits
Where can I find information?
· Simplified integration of
Communication function manual
devices for remote access, (https://support.industry.siemens.
e.g. for diagnostics during com/cs/ww/de/view/59192925)
remote maintenance or
firmware update
· Simple access from the control level to the field level for configuration and parameter assignment of devices
In the case of direct data exchange, an S7-1500 CPU provides cyclic user data from the I/O area to one or more partners.
Example: You can access the Web server of a drive connected to the X1 interface of the CPU from a computer connected to the X2 interface of the CPU.
The "Direct data exchange" function enables deterministic, isochronous I/O communication between multiple S7-1500 CPUs.
PROFINET function manual (https://support.industry.siemens. com/cs/ww/en/view/49948856)
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
9
Product overview 2.1 New functions in firmware version V2.8
New functions
API (Application Programming Interface)
Applications
The CPU has a web-based API (Application Programming Interface) as an interface for reading and writing CPU data.
The API supports all conventional browsers and command line programs, such as cURL and Wget.
Customer benefits
· Established standard mechanisms for creating Web pages:
Where can I find information?
Web server function manual (https://support.industry.siemens. com/cs/ww/en/view/59193560)
Automation Web Programming commands (AWP commands) are no longer required for output of CPU data
· No dependency between custom Web pages and CPU program:
No synchronization between user program and Web server required by the SFC 99 instruction
· Lower communication load:
A smaller data packet is transferred between server and client (JSON instead of HTML of the custom Web page generated by the CPU). This improves the communication performance. The CPU needs less runtime to generate the information and make it available.
· Secure data traffic:
API exclusively supports the "HTTPS" transfer protocol
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
10
Equipment Manual, 11/2019, A5E46416198-AA
Product overview 2.1 New functions in firmware version V2.8
New functions Distributed synchronous operation (T-CPUs)
Cross-device trace
Applications
Master value and synchronous axes can be distributed over multiple controllers. Isochronous coupling between the master axis and the following axis via PROFINET IO with IRT. Compensation of delay times for communication and different clock rates.
Coordination of traces on different devices
· Support of multiple CPUs
· Support of different device types
Visualization in a shared chart Support of alternative trigger sources
Customer benefits
· Distribution of high axis configuration limits over different CPUs
· Use on modular machines and multi-axis machines (e.g. printing machines)
· Highly precise synchronous operation across devices
· Extensive trigger options for faster localization of sporadically occurring errors
· Simple combination of related traces
Where can I find information? S7-1500T Motion Control function manuals (https://support.industry.siemens. com/cs/ww/en/view/109751049)
Using the trace and logic analyzer function function manual (https://support.industry.siemens. com/cs/ww/en/view/64897128)
New functions of the CPU in firmware version V2.6
New functions OPC UA client
Isochronous mode for central I/O
Applications
Customer benefits
Where can I find information?
In addition to the OPC UA server, an OPC UA client is integrated in the CPU.
Using the corresponding OPC UA communication instructions, you can:
You can perform, for example, vertical communication to MES systems/cloud services or IO controllerIO controller communication.
Communication function manual (https://support.industry.sie mens.com/cs/ww/de/view/5 9192925)
· Call methods · Read and write data
Isochronous mode is also possible · Optimized controls through con- · PROFINET function
for modules that are inserted next
stant, calculable dead times
manual
to the CPU in a centralized configuration. In this way, you can implement the following functions, for example:
· Dynamic control tasks
· Measuring input
· Cam
· · ·
Determinism, reliable reproducibility of response times
Consistent (simultaneous) reading in of input data
Consistent (simultaneous) output of output data
·
(https://support.industry .siemens.com/cs/ww/en /view/49948856)
Isochronous mode function manual (https://support.industry .siemens.com/cs/ww/en
· Dosing processes, high-speed
/view/109755401)
analog value acquisition with
· S7-1500T Motion Con-
oversampling
trol function manuals
(https://support.industry
.siemens.com/cs/ww/en
/view/109751049)
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
11
Product overview 2.1 New functions in firmware version V2.8
New functions of the CPU in firmware version V2.5
New functions
Testing with breakpoints
Applications
Customer benefits
Testing SCL and STL program
·
code with the help of breakpoints.
When testing with breakpoints, you execute a program from one
·
breakpoint to another.
Localization of logic errors step by step
Simple and quick analysis of complex programs prior to actual commissioning
Where can I find information?
S7-1500, ET 200MP system manual (https://support.industry.sie mens.com/cs/ww/en/view/5 9191792)
· Recording of current values within individual executed loops
· Use of breakpoints for program validation also possible in SCL/STL networks within LAD/FBD blocks
Arithmetic functions for trace
In the case of completed meas- · Generation of unavailable infor-
urements, you can combine the
mation
measured signals mathematically
with each other and thus generate · Post-processing of measure-
signals that were not recorded.
ments
· Measurement of signal paths
(e.g. mean value)
· Using the trace and logic analyzer function function manual (https://support.industry .siemens.com/cs/ww/en /view/64897128)
· Web server function manual (https://support.industry .siemens.com/cs/ww/en /view/59193560)
Importing and exporting ASCII files
Using the FileReadC function, you can read out a binary file (ASCII file) in the user program which was stored on the SIMATIC memory card of the CPU via the Web server.
Using the FileWriteC function, you can store a binary file (ASCII file) on the memory card of the CPU using the user program; this file can be read via the Web server.
Complex file structures are used in free ASCII format on the SIMATIC memory card, e.g. to:
· Read in recipes for which CSV is not flexible enough
· Read in complex parameter assignments or configuration files
· Output complex files for documentation
STEP 7 online help
Sending encrypt- It is possible to send encrypted
High security through encrypted
ed emails
emails via the integrated interfaces transmission of data
of the CPU
Reference
You can find an overview of all new functions, improvements and revisions in the respective firmware versions on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109478459).
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
12
Equipment Manual, 11/2019, A5E46416198-AA
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
2.2
Area of application of the SIMATIC S7-1500 CPUs
Area of application SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation. SIMATIC S7-1500 is the cost-effective and convenient solution for a broad range of tasks and offers the following advantages: Modular, fanless design Simple realization of distributed structures User-friendly handling Areas of application of the SIMATIC S7-1500 automation system include, for example: Special-purpose machines Textile machinery Packaging machines General mechanical engineering Controller engineering Machine tool engineering Installation engineering Electrical industry and crafts Automobile engineering Water/waste water Food & Beverage Areas of application of the SIMATIC S7-1500R/H redundant system include, for example: Tunnels Airports (e.g. baggage conveyors) Subways Shipbuilding Wastewater treatment plants High-bay warehouses
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
13
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
Areas of application of the SIMATIC S7-1500T automation system for advanced motion control applications include, for example:
Packaging machines
Converting applications
Assembly automation
Pick-and-place automation
Palletizers
You can choose between CPUs with various levels of performance and a comprehensive range of modules with many convenient functions. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial suitability due to the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500, S7-1500R/H and S7-1500T automation systems.
Performance segments of the CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 1 Standard CPUs
CPU
Performance segment
CPU 1511-1 PN Standard CPU for small to mid-range applications
CPU 1513-1 PN Standard CPU for mid-range applications
CPU 1515-2 PN Standard CPU for mid-range to large applications
CPU 15163 PN/DP
Standard CPU for demanding applications and communication tasks
CPU 15173 PN/DP
Standard CPU for demanding applications and communication tasks
PROFIBUS interfaces
---1
1
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT inter-
face
--
Basic PROFINET functionality
--
Work memory
1.15 MB
1
--
--
1.8 MB
1
1
--
3.5 MB
1
1
--
6 MB
1
1
--
10 MB
Processing time for bit operations
60 ns
40 ns
30 ns
10 ns
2 ns
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
14
Equipment Manual, 11/2019, A5E46416198-AA
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
CPU
CPU 15184 PN/DP
CPU 15184 PN/DP MFP
Performance segment
PROFIBUS interfaces
Standard CPU for
1
high-performance
applications, demand-
ing communication
tasks and very short
reaction times
Standard CPU for
1
high-performance
applications, demand-
ing communication
tasks, very short reac-
tion times and C/C++
blocks for the user
program
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT inter-
face
1
Basic PROFINET functionality
1
1
1
1
* 50 MB of the integrated work memory is reserved for the function library of CPU runtime
Work memory
24 MB
74* MB
Processing time for bit operations
1 ns
1 ns
Table 2- 2 Redundant CPUs
CPU
CPU 1513R1 PN
CPU 1515R2 PN
CPU 1517H3 PN
Performance segment
Redundant CPU for smaller to mid-range applications Redundant CPU for mid-range to large applications Redundant CPU for demanding applications and communication tasks
PROFIBUS interfaces
--
--
--
PROFINET IO RT/IRT interfaces
1
1
1
PROFINET IO RT
interface
--
--
--
Basic PROFINET functionality
--
1
1
Work memory
1.8 MB
Processing time for bit operations
80 ns
3.5 MB
60 ns
10 MB
4 ns
Table 2- 3 Compact CPUs
CPU
CPU 1511C1 PN
CPU 1512C1 PN
Performance segment
Compact CPU for small to mid-range applications Compact CPU for midrange applications
PROFIBUS interfaces
--
--
PROFINET IO RT/IRT interfaces
1
1
PROFINET IO RT
interface
--
--
Basic PROFINET functionality
--
--
Work memory
1.175 M B
Processing time for bit operations
60 ns
1.25 MB
48 ns
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
15
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
Table 2- 4 Fail-safe CPUs
CPU
CPU 1511F1 PN
CPU 1511TF1 PN
CPU 1513F1 PN CPU 1515F2 PN
CPU 1515TF2 PN
CPU 1516F3 PN/DP
CPU 1516TF3 PN/DP
CPU 1517F3 PN/DP
Performance segment
Fail-safe CPU for small to mid-range applications
Fail-safe technology CPU for small to midrange applications
Fail-safe CPU for midrange applications
Fail-safe CPU for midrange to large applications
Fail-safe technology CPU for demanding applications and communication tasks
Fail-safe CPU for demanding applications and communication tasks
Fail-safe technology CPU for demanding applications and communication tasks
Fail-safe CPU for demanding applications and communication tasks
PROFIBUS interfaces
--
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT
interface
--
Basic PROFINET functionality
--
Work memory
1.225 MB
--
1
--
--
1.225 MB
--
1
--
--
1.95 MB
--
1
1
--
3.75 MB
--
1
1
--
3.75 MB
1
1
1
--
6.5 MB
1
1
1
--
6.5 MB
1
1
1
--
11 MB
Processing time for bit operations
60 ns 60 ns 40 ns 30 ns 30 ns
10 ns
10 ns
2 ns
CPU 1517TF- Fail-safe technology
1
1
1
--
3 PN/DP
CPU for demanding
applications and com-
munication tasks
CPU 1518F-
Fail-safe CPU for high-
1
1
1
1
4 PN/DP
performance applica-
tions, demanding com-
munication tasks and
very short reaction
times
CPU 1518F-
Fail-safe CPU for high-
1
1
1
1
4 PN/DP MFP performance applica-
tions, demanding com-
munication tasks, very
short reaction times and
C/C++ blocks for the
user program
* 50 MB of the integrated work memory is reserved for the function library of CPU runtime
11 MB
2 ns
26 MB
1 ns
76* MB
1 ns
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
16
Equipment Manual, 11/2019, A5E46416198-AA
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
Table 2- 5 Technology CPUs
CPU
CPU 1511T1 PN
CPU 1515T2 PN
CPU 1516T3 PN/DP
CPU 1517T3 PN/DP
CPU 1511TF1 PN CPU 1515TF2 PN CPU 1516TF3 PN/DP CPU 1517TF3 PN/DP
Performance segment PROFIBUS PROFINET
interfaces
IO RT/IRT interfaces
Technology CPU for
--
1
small to mid-range
applications
Technology CPU for
--
1
mid-range to large ap-
plications
Technology CPU for
1
1
high-end applications
and communication
tasks
Technology CPU for
1
1
complex applications
and communication
tasks
These CPUs are described in the fail-safe CPUs
PROFINET IO RT
interface
--
1
1
1
Basic PROFINET functionality
--
--
--
--
Work memory
1.225 M B
Processing time for bit operations
60 ns
3.75 MB
30 ns
6.5 MB
10 ns
11 MB
2 ns
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Frequency meters Period duration measurement Pulse width modulation (PWM output)
Pulse Train Output (PTO output) Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
17
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
Integrated Motion Control technology functions All CPUs of the SIMATIC S7-1500 automation system support motion control technology functions. STEP 7 provides PLCopen-standardized Motion Control instructions for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axes Positioning axes Synchronous axes External encoders Cam Cam track Measuring input The technology CPUs of the SIMATIC S7-1500-automation system offer enhanced Motion Control functions: Advanced synchronization functions Synchronization with specification of the synchronous position Actual value coupling Shifting of the master value at the following axis Camming Up to 4 encoder or measuring systems as actual position for position control Cam Kinematics for control of: Cartesian portals Roller pickers Jointed-arm robots Delta pickers SCARA robots Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
Additional integrated technology functions For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller series offers extensive trace functions for all CPU tags. In addition to drive integration, the SIMATIC S7-1500 controller series has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimum control quality.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
18
Equipment Manual, 11/2019, A5E46416198-AA
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
Other technology functions
Technology modules also implement functions such as high-speed counting, position detection, measuring functions and pulse generators (PTO, PWM and frequency output). With the CPU 1511C-1 PN and CPU 1512C-1 PN compact CPUs, these functions are already integrated and can be implemented without additional technology modules.
SIWAREX is a versatile and flexible weighing module which you can use as a static scale for operation.
Redundant CPUs
The CPUs of the S7-1500R/H redundant system offer a high degree of reliability and system availability. A redundant configuration of the most important automation components reduces the likelihood of production downtimes and the consequences of component errors.
The higher the risks and costs of a production downtime, the more worthwhile the use of a redundant system. The avoidance of production downtimes compensates for the generally higher investment costs.
Security Integrated
In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks.
Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU.
In addition, you can assign various access rights to different user groups in the controller using four different authorization levels.
Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller.
The use of an Ethernet CP (CP 1543-1) provides you with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated
The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally.
These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration also provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications.
The fail-safe CPUs are certified for use in safety mode up to:
Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010
Performance Level (PL) e and Category 4 according to ISO 13849-1:2015 or EN ISO 13849-1:2015
Additional password protection for F-configuration and F-program is set up for IT security.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
19
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Error messages are shown on the display directly in plain text. When performing servicing, you can minimize plant downtimes by quickly accessing the diagnostics alarms. Detailed information about this and a multitude of other display functions is available in the SIMATIC S7-1500 Display Simulator (https://www.automation.siemens.com/salesmaterialas/interactive-manuals/getting-started_simatic-s7-1500/disp_tool/start_en.html).
Uniform front connectors for all modules and integrated potential jumpers for flexible formation of potential groups simplify storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the SIMATIC S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information and alarms from the drives are displayed consistently and in plain text:
On the CPU display
In STEP 7
On the HMI
On the Web server
This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostic information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server in up to three project languages. The HMI takes over the display in the project languages defined for the CPU. If you require alarm texts in additional languages, you can load them into your HMI via the configured connection. The CPU, STEP 7 and your HMI ensure data consistency without additional engineering steps. The maintenance work is easier.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
20
Equipment Manual, 11/2019, A5E46416198-AA
2.3
Hardware properties
Article number 6ES7515-2AM02-0AB0
View of the module The figure below shows the CPU 1515-2 PN.
Product overview 2.3 Hardware properties
Figure 2-1 CPU 1515-2 PN product image
Note Protective film Please note that the CPU is supplied with a removable protective film on the display.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
21
Product overview 2.3 Hardware properties
Properties
The CPU 1515-2 PN has the following technical properties:
Property CPU display
Supply voltage
PROFINET IO PROFINET interface (X1 P1R and X1 P2R) PROFINET interface (X2 P1) Operation of the CPU as · IO controller · I-device
Description All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides information on order numbers, firmware version and serial numbers of all connected modules. In addition, you can set the IP address of the CPU and make further network settings. The display shows occurring error messages directly in plain text. In addition to the functions listed here, a multitude of other functions that are described in the SIMATIC S71500 Display Simulator are shown on the display.
The 24 V DC supply voltage is fed in via a 4-pin plug located at the bottom of the CPU.
Additional information
· S7-1500, ET 200MP system manual (https://support.industry.siemens. com/cs/ww/en/view/59191792)
· SIMATIC S7-1500 Display Simulator (https://www.automation.siemens .com/salesmaterialas/interactive-manuals/gettingstarted_simatic-s71500/disp_tool/start_en.html)
· Section Connecting up (Page 33)
· S7-1500, ET 200MP system manual (https://support.industry.siemens. com/cs/ww/en/view/59191792)
The interface has two ports. In addition to basic
PROFINET
PROFINET functionality, it also supports PROFINET IO (https://support.industry.siemens.co
RT (real time) and IRT (isochronous real time).
m/cs/ww/es/view/49948856) function
The interface has one port. In addition to basic
manual
PROFINET functionality, it also supports PROFINET IO
RT (real time).
· IO controller: As an IO controller, the CPU addresses the connected IO devices
· I-device: As an I-device (intelligent IO device), the CPU is assigned to a higher-level IO controller and is used in the process as an intelligent pre-processing unit of sub-processes
Accessories
You can find information on "Accessories/spare parts" in the S7-1500, ET 200MP system manual (https://support.industry.siemens.com/cs/ww/en/view/59191792).
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
22
Equipment Manual, 11/2019, A5E46416198-AA
Product overview 2.4 Firmware functions
2.4
Firmware functions
Functions
The CPU 1515-2 PN supports the following firmware functions:
Function Integrated system diagnostics Integrated Web server
Integrated trace functionality
OPC UA
Description
The system automatically generates the alarms for the system diagnostics and outputs these alarms via a programming device/PC, HMI device, the Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
The Web server lets you access the CPU data by means of a network. Evaluations, diagnostics, and modifications are thus possible over long distances. Monitoring and evaluation is possible without STEP 7; all you need is a Web browser. Make sure that you take appropriate measures (e.g. limiting network access, using firewalls) to protect the CPU from being compromised.
Additional information
Diagnostics (https://support.industry.siemens. com/cs/ww/en/view/59192926) function manual
· Web server function manual (https://support.industry.siem ens.com/cs/ww/en/view/5919 3560)
· Security with SIMATIC S7 controllers system manual (https://support.industry.siem ens.com/cs/ww/en/view/9088 5010)
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
The device saves the recordings. You can read out and permanently save the recordings with the configuration system (ES), if required. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes.
The trace recording can also be displayed through the Web server.
With OPC UA, data is exchanged via an open and vendorneutral communication protocol.
The CPU can act as OPC UA server. The CPU can communicate with OPC UA clients as an OPC UA server.
In turn, the CPU can access an OPC UA server as OPC UA client, allow the OPC UA server to run methods and read out information from the OPC UA server.
Through OPC UA Companion Specification, methods can be specified in a uniform and vendor-neutral way. The specified methods enable you to integrate devices from a wide range of manufacturers into your plants and production processes more easily.
Using the trace and logic analyzer function (http://support.automation.sieme ns.com/WW/view/en/64897128) function manual
Communication (https://support.industry.siemens. com/cs/ww/en/view/59192925) function manual
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
23
Product overview 2.4 Firmware functions
Function Configuration control
PROFINET IO RT (real time)
IRT (isochronous real time)
Isochronous mode
MRP (Media Redundancy Protocol)
MRPD (Media Redundancy with Planned Duplication)
Description
You can use configuration control to operate different real hardware configurations with a configured maximum configuration of the hardware. This means especially in series machine manufacturing you have the option of operating/configuring different configuration variants of a machine with a single project.
Additional information
S7-1500, ET 200MP system manual (https://support.automation.siem ens.com/WW/view/en/59191792)
RT prioritizes PROFINET IO frames over standard frames. This ensures the required determinism in the automation technology. In this process, the data is transferred via prioritized Ethernet frames.
PROFINET (https://support.industry.siemens. com/cs/ww/en/view/49948856) function manual
A reserved bandwidth within the send clock is available for IRT data. The reserved bandwidth ensures that the IRT data can be transmitted in time-synchronized intervals, unaffected by other high network loads (e.g. TCP/IP communication or additional real time communication). Update times with maximum determinism can be realized through IRT. Isochronous applications are possible with IRT.
The Isochronous mode system property records measured values and process data and processes the signals in a fixed system clock. Isochronous mode contributes to high control quality and hence to greater manufacturing precision. Isochronous mode reduces possible fluctuations of the process reaction times to a minimum. Time-assured processing makes higher machine cycles possible.
It is possible to establish redundant networks via the Media Redundancy Protocol. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails. The PROFINET devices that are part of this redundant network form an MRP domain.
RT operation is possible with the use of MRP.
The advantage of the MRP extension MRPD is that, in the event of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no ring reconfiguration time.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
24
Equipment Manual, 11/2019, A5E46416198-AA
Product overview 2.4 Firmware functions
Function Shared device
PROFIenergy Integrated technology Motion Control
Integrated closed-loop control functionality
Description
The "Shared device" function allows you to divide the modules or submodules of an IO device up among different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required. The "Shared device" function allows the modules or submodules of an IO device to be divided up among different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules that are physically close to each other in one IO device.
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. The goal is that the process is only provided with the energy that is absolutely required. Most of the energy is saved by the process. The PROFINET device itself only contributes a few watts to the savings potential.
Additional information
S7-1500 CPUs support the controlled positioning and traveling of axes via S7-1500 Motion Control functions by means of the following technology objects:
Speed-controlled axes, positioning axes, synchronized axes, external encoders, cams, cam tracks and measuring inputs
S7-1500T Motion Control Function Manual (https://support.industry.siemens. com/cs/ww/de/view/109766459)
· Speed-controlled axis for controlling a drive with speed specification
· Positioning axis for positioning of a drive with closedloop position control
· Synchronous axis to interconnect with a master value. The axis is synchronized to the master axis position
· External encoder for detecting the actual position of an encoder and its use as a master value for synchronous operation
· Cams, cam track for position-dependent generation of switching signals
· Measuring input for fast, accurate and event-dependent sensing of actual positions
· PID Compact (continuous PID controller)
PID control
· PID 3Step (step controller for integrating actuators)
(https://support.industry.siemens. com/cs/ww/en/view/108210036)
· PID Temp (temperature controller for heating and cool- function manual
ing with two separate actuators)
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
25
Product overview 2.4 Firmware functions
Function Integrated safety Know-how protection Copy protection
Access protection Integrity protection
Password provider
Description
Additional information
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection links user blocks with the serial number of one or more SIMATIC memory cards or the serial number of one or more CPUs. User programs cannot run without the corresponding SIMATIC memory card or CPU.
S7-1500, ET 200MP (https://support.automation.siem ens.com/WW/view/en/59191792) system manual
You can use authorization levels to assign separate rights to different users.
The CPUs feature integrity protection by default. Integrity protection identifies possible manipulation of engineering data on the SIMATIC memory card or during data transfer between STEP 7 and the CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulation of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password input, you can connect a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 reads in the password automatically for the blocks. This saves you time.
· Optimum block protection because the users themselves do not know the password.
Reference
You can find additional information on the topic of "Integrated security/Access protection" in the S7-1500/ET 200MP system manual (https://support.automation.siemens.com/WW/view/en/59191792).
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
26
Equipment Manual, 11/2019, A5E46416198-AA
2.5
2.5.1
Operating and display elements
Product overview 2.5 Operating and display elements
Front view of the CPU with closed front panel
The following figure shows the front view of the CPU 1515-2 PN.
LEDs for the current operating mode and diagnostic status of the CPU Display Operator control buttons
Figure 2-2 View of the CPU 1515-2 PN (with front panel) - front
Note Temperature range for display To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU. For more information on the temperatures at which the display switches itself on and off, refer to the Technical specifications (Page 41).
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
27
Product overview 2.5 Operating and display elements
Removing and fitting the front panel or the display You can remove and fit the front panel or the display during operation.
WARNING Personal injury and damage to property may occur Personal injury or material damage can occur in zone 2 hazardous areas if you remove or fit the display while the S7-1500 automation system is running. Before you remove or insert the display in zone 2 hazardous areas, always make sure that the power supply to the S7-1500 automation system is switched off.
Locking the front panel You can lock the front panel to protect the SIMATIC memory card and the operating mode buttons of the CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panel.
Reference
Figure 2-3 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, configurable protection levels and local locks in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
28
Equipment Manual, 11/2019, A5E46416198-AA
2.5.2
Product overview 2.5 Operating and display elements
Front view of the CPU without front panel or display and view from below
The following figure shows the operator controls and connection elements of the CPU 1515-2 PN.
LEDs for the current operating mode and diagnostic status of the CPU Connector for the display Arrow keys LED displays for the PROFINET interface STOP and RUN operating mode buttons STOP-ACTIVE LED Connector for the supply voltage
Figure 2-4 View of the CPU 1515-2 PN (without front panel or display) - front
Note Removing the display
Only remove the display if it is faulty.
You can find information on removing and replacing displays in the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
29
Product overview 2.5 Operating and display elements
Slot for the SIMATIC memory card PROFINET IO interface (X1) with 2 ports PROFINET IO interface (X2) with 1 port Connector for supply voltage Fastening screw
Figure 2-5 View of the CPU 1515-2 PN - bottom
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
30
Equipment Manual, 11/2019, A5E46416198-AA
2.5.3
Product overview 2.5 Operating and display elements
Rear view of the CPU
The following figure shows the connection elements on the rear of the CPU 1515-2 PN.
Shield contact surfaces Plug-in connection for power supply Plug-in connection for backplane bus Fixing screws
Figure 2-6 View of the CPU 1515-2 PN - rear
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
31
Product overview 2.6 Operating mode buttons
2.6
Operating mode buttons
You use the operating mode buttons to:
Request a change to a specific operating state
Disable or enable the change to a specific operating state
(if the operating mode button STOP is active, for example, you cannot switch the CPU to RUN via a communication task configured in the TIA Portal or the display)
The following table shows the meaning of the corresponding operation of the operating mode buttons.
Table 2- 6 Meaning of the operating mode buttons
Operation of the operating mode buttons
RUN
STOP
1. Press the operating mode button STOP.
Result: The RUN/STOP LED lights up yellow. 2. Press the operating mode button STOP until the RUN/STOP LED lights up for the 2nd time and remains continuously lit (this takes three seconds). After this, release the button. 3. Press the operating mode button STOP again within the next three seconds.
Meaning
Explanation
RUN mode STOP mode
Manual memory reset (with SIMATIC memory card inserted) or Reset to factory settings (without inserted SIMATIC memory card)
The CPU has permission to go to RUN. The CPU does not have permission to go to RUN. The CPU is executing a memory reset.
or The CPU is being reset to factory settings. You can find additional information in the S71500/ET 200MP system manual (https://support.industry.siemens.com/cs/ww/en/vi ew/59191792).
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
32
Equipment Manual, 11/2019, A5E46416198-AA
Connecting up
3
This section provides information on the terminal assignment of the individual interfaces and the block diagram of the CPU 1515-2 PN.
24 V DC supply voltage (X80)
The connector for the power supply is plugged in when the CPU ships from the factory.
The following table shows the signal names and the descriptions of the pin assignment for a 24 V DC supply voltage.
Table 3- 1 Pin assignment 24 V DC supply voltage
View Connector
Signal name 1)
Designation
1 1L+ 2 1M 3 2M 4 2L+
+ 24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through 2) + 24 V DC of the supply voltage for loop-through 2)
1) 1L+ and 2L+ as well as 1M and 2M are bridged internally 2) Maximum 10 A permitted
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
33
Connecting up
PROFINET interface X1 with 2-port switch (X1 P1R and X1 P2R) The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
PROFINET interface X2 with 1 port (X2 P1)
The assignment corresponds to the Ethernet standard for an RJ45 plug.
Autocrossing is always active on X2. This means the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Removing the PROFINET plug You need a screwdriver (max. blade width 2.5 mm) to remove the PROFINET plug.
Removing the display
You can find a description of how to remove and replace the display in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Reference
You can find additional information on the topics of "Connecting the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
34
Equipment Manual, 11/2019, A5E46416198-AA
Connecting up
Assignment of the MAC addresses
CPU 1515-2 PN has two PROFINET interfaces, with the first interface having two ports. The PROFINET interfaces each have a MAC address, and each of the PROFINET ports has its own MAC address. The CPU 1515-2 PN therefore has five MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC addresses are printed on the rating plate on the right side of each CPU 1515-2 PN.
The table below shows how the MAC addresses are assigned.
Table 3- 2 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3 MAC address 4 MAC address 5
Assignment PROFINET interface X1 (visible in STEP 7 in accessible devices)
Port X1 P1R (required for LLDP, for example) Port X1 P2R (required for LLDP, for example) PROFINET interface X2 (visible in STEP 7 in accessible devices) Port X2 P1 (required for LLDP, for example)
Labeling · Front printed · Right side printed
(start of number range) ----Front printed
Right side printed (end of number range)
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
35
Connecting up
Block diagram The following figure shows the block diagram of the CPU 1515-2 PN.
PN X1 P1R
PN X1 P2R
PN X2 P1
CPU with control and operating mode buttons Display Electronics PROFINET 2-port switch Backplane bus interface Internal supply voltage PROFINET interface X1 port 1 PROFINET interface X1 port 2 PROFINET interface X2 port 1
Figure 3-1 Block diagram of the CPU 1515-2 PN
X50 X80 24 V DC L+ M SA R/S ER MT X1 P1, X1 P2, X2 P1
SIMATIC memory card Infeed of supply voltage 24 V DC supply voltage Ground STOP-ACTIVE LED (yellow) RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
36
Equipment Manual, 11/2019, A5E46416198-AA
Interrupts, error messages, diagnostics and system alarms
4
The LED displays of the CPU 1515-2 PN are described below.
You will find additional information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topics of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error display of the CPU
LED display
The figure below shows the CPU 1515-2 PN LEDs.
RUN/STOP LED (green/yellow LED) ERROR LED (red LED) MAINT LED (yellow LED) LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED) STOP-ACTIVE LED
Figure 4-1 LED displays of the CPU 1515-2 PN (without front panel and display)
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
37
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1515-2 PN has three LEDs for displaying the current operating state and diagnostic status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED off
LED flashes red
LED lit green
LED off
LED lit green
LED flashes red
LED lit green
LED off
LED lit green LED lit green LED lit yellow LED lit yellow LED lit yellow LED lit yellow
LED off LED flashes red LED flashes red
LED off LED off LED flashes red
LED flashes yellow
LED off
LED flashes yellow/green
LED off
MAINT LED LED off LED off LED off LED off
LED lit yellow
LED flashes yellow LED off
Meaning Missing or insufficient power supply on the CPU.
An error has occurred.
CPU is in RUN mode. There are no events, requirements, errors, etc. A diagnostics event is pending.
Maintenance demanded for the plant. You need to check/replace the affected hardware within a short period of time. Active Force job PROFIenergy pause Bad configuration
An error has occurred.
LED off LED flashes yellow
LED off LED flashes yellow
LED off
LED off
Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. The CPU has detected an error state. Additional information is available via the CPU diagnostic buffer. CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card CPU is executing a program with active breakpoint. Startup (transition from STOP RUN)
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
38
Equipment Manual, 11/2019, A5E46416198-AA
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
RUN/STOP LED
LED flashes yellow/green
ERROR LED LED flashes red
MAINT LED LED flashes yellow
Meaning Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of the CPU 1515-2 PN ports.
Table 4- 2 Meaning of the LED
LINK TX/RX LED LED off
LED flashes green LED lit green LED flashes yellow/green
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The CPU is performing an "LED flash test".
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received/sent by a communication partner in the Ethernet via the PROFINET interface of the PROFINET device.
Note "LED" instruction
You can read the status (e.g. "On" or "Off") of LEDs of a CPU or a module using the "LED" instruction. Note, however, that it is not possible to read the LED status of the LINK RX/TX LEDs on all S7-1500 CPUs.
You can find additional information on the "LED" instruction in the STEP 7 online help.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
39
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of STOP-ACTIVE LED The following table shows the meaning of the STOP-ACTIVE LED of the CPU 1515-2 PN.
Table 4- 3 Meaning of the LED
STOP-ACTIVE LED LED lit yellow
LED off
Meaning The CPU has been switched to STOP mode using the STOP button.
· As long as the STOP-ACTIVE LED is lit up, switching the CPU to RUN mode is only possible using the RUN button.
· The CPU can then no longer be set to RUN mode via display operation or via online functions. The state of the buttons is retained at power-off. If the CPU does not start up automatically after a power-on, you have to keep the STOP button pressed during startup until the STOP-ACTIVE LED is activated.
· If an automatic startup is to be reliably prevented after a power-on, the STOP button has to be kept pressed during the startup of the CPU until the STOP-ACTIVE LED is activated.
· The CPU has been set to STOP mode using the display or programming device/PC and not with the STOP button on the device.
· The CPU is in RUN mode.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
40
Equipment Manual, 11/2019, A5E46416198-AA
Technical specifications
5
The following table shows the technical specifications as of 11/2019. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7515-2AM02-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version Product function · I&M data
· Isochronous mode
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
Configuration control via dataset
Display Screen diagonal [cm]
Control elements Number of keys Mode buttons
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering · Mains/voltage failure stored energy time
· Repeat rate, min.
Input current Current consumption (rated value) Current consumption, max. Inrush current, max. I²t
6ES7515-2AM02-0AB0
CPU 1515-2 PN FS01 V2.8
Yes; I&M0 to I&M3 Yes; Distributed and central; with minimum OB 6x cycle of 500 µs (distributed) and 1 ms (central)
V16 (FW V2.8); with older TIA Portal versions configurable as 6ES7515-2AM01-0AB0
Yes
6.1 cm
8 2
24 V DC 19.2 V 28.8 V Yes
5 ms 1/s
0.8 A 1.1 A 2.4 A; Rated value 0.02 A²·s
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
41
Technical specifications
Article number Power
Infeed power to the backplane bus Power consumption from the backplane bus (balanced) Power loss Power loss, typ. Memory Number of slots for SIMATIC memory card SIMATIC memory card required Work memory · integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range
· Size, max.
FB · Number range · Size, max.
FC · Number range · Size, max.
6ES7515-2AM02-0AB0
12 W 6.2 W
6.3 W
1 Yes
500 kbyte 3 Mbyte
32 Gbyte
Yes
30 ns 36 ns 48 ns 192 ns
6 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999 3 Mbyte; For DBs with absolute addressing, the max. size is 64 KB
0 ... 65 535 500 kbyte
0 ... 65 535 500 kbyte
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
42
Equipment Manual, 11/2019, A5E46416198-AA
Technical specifications
Article number OB
· Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of DPV1 alarm OBs · Number of isochronous mode OBs · Number of technology synchronous alarm
OBs · Number of startup OBs · Number of asynchronous error OBs · Number of synchronous error OBs · Number of diagnostic alarm OBs Nesting depth · per priority class Counters, timers and their retentivity S7 counter · Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable
6ES7515-2AM02-0AB0 500 kbyte 100 20 20 20; With minimum OB 3x cycle of 500 µs 50 3 2 2
100 4 2 1
24
2 048
Yes
Any (only limited by the main memory)
Yes
2 048
Yes
Any (only limited by the main memory)
Yes
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
43
Technical specifications
Article number Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max.
Extended retentive data area (incl. timers, counters, flags), max. Flag · Number, max. · Number of clock memories
Data blocks · Retentivity adjustable · Retentivity preset
Local data · per priority class, max.
Address area Number of IO modules
I/O address area · Inputs · Outputs
per integrated IO subsystem Inputs (volume) Outputs (volume)
per CM/CP Inputs (volume) Outputs (volume)
Subprocess images · Number of subprocess images, max.
Hardware configuration Number of distributed IO systems
Number of DP masters · Via CM
Number of IO Controllers · integrated · Via CM
6ES7515-2AM02-0AB0
512 kbyte; In total; available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 472 KB 3 Mbyte; When using PS 6 0W 24/48/60 V DC HF
16 kbyte 8; 8 clock memory bit, grouped into one clock memory byte
Yes No
64 kbyte; max. 16 KB per block
8 192; max. number of modules / submodules
32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image
8 kbyte 8 kbyte
8 kbyte 8 kbyte
32
64; A distributed I/O system is characterized not only by the integration of distributed I/O via PROFINET or PROFIBUS communication modules, but also by the connection of I/O via AS-i master modules or links (e.g. IE/PB-Link)
8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
2 8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
44
Equipment Manual, 11/2019, A5E46416198-AA
Article number Rack
· Modules per rack, max. · Number of lines, max. PtP CM · Number of PtP CMs
Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number Clock synchronization · supported · in AS, master · in AS, slave · on Ethernet via NTP Interfaces Number of PROFINET interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Protocols · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
Technical specifications
6ES7515-2AM02-0AB0
32; CPU + 31 modules 1
the number of connectable PtP CMs is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
Yes Yes Yes Yes
2
2 Yes Yes; X1
Yes; IPv4 Yes Yes Yes Yes; Optionally also encrypted Yes Yes
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
45
Technical specifications
Article number PROFINET IO Controller Services
PG/OP communication
6ES7515-2AM02-0AB0 Yes
S7 routing
Yes
Isochronous mode
Yes
Direct data exchange IRT
Yes; Requirement: IRT and isochronous mode (MRPD optional)
Yes
MRP MRPD
Yes; MRP Automanager acc. to IEC 62439-2 Edition 2.0; MRP Manager; MRP Client; max. number of devices in the ring: 50
Yes; Requirement: IRT
PROFIenergy
Yes; per user program
Prioritized startup
Yes; Max. 32 PROFINET devices
Number of connectable IO Devices, max.
Of which IO devices with IRT, max.
256; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
64
Number of connectable IO Devices for 256 RT, max.
of which in line, max.
256
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
Update time for IRT for send cycle of 250 µs for send cycle of 500 µs
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
250 s to 4 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 500 µs of the isochronous OB is decisive 500 µs to 8 ms
for send cycle of 1 ms
1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" Update time = set "odd" send clock (any multiple
send cycles
of 125 µs: 375 µs, 625 µs ... 3 875 µs)
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
46
Equipment Manual, 11/2019, A5E46416198-AA
Technical specifications
Article number Update time for RT
for send cycle of 250 µs for send cycle of 500 µs for send cycle of 1 ms for send cycle of 2 ms for send cycle of 4 ms PROFINET IO Device Services PG/OP communication S7 routing Isochronous mode IRT MRP
MRPD PROFIenergy Shared device Number of IO Controllers with shared
device, max. Asset management record 2. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Protocols · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
6ES7515-2AM02-0AB0
250 µs to 128 ms 500 µs to 256 ms 1 ms to 512 ms 2 ms to 512 ms 4 ms to 512 ms
Yes Yes No Yes Yes; MRP Automanager acc. to IEC 62439-2 Edition 2.0; MRP Manager; MRP Client; max. number of devices in the ring: 50 Yes; Requirement: IRT Yes; per user program Yes 4
Yes; per user program
1 No Yes; X2
Yes; IPv4 Yes Yes Yes Yes; Optionally also encrypted Yes No
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
47
Technical specifications
Article number PROFINET IO Controller Services
PG/OP communication
6ES7515-2AM02-0AB0 Yes
S7 routing
Yes
Isochronous mode
No
Direct data exchange
No
IRT
No
MRP
No
MRPD
No
PROFIenergy
Yes; per user program
Prioritized startup
No
Number of connectable IO Devices, max.
Number of connectable IO Devices for RT, max.
32; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
32
of which in line, max.
32
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
Update time for RT for send cycle of 1 ms
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
1 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
IRT
No
MRP
No
MRPD
No
PROFIenergy
Yes; per user program
Prioritized startup
No
Shared device
Yes
Number of IO Controllers with shared 4 device, max.
Asset management record
Yes; per user program
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
48
Equipment Manual, 11/2019, A5E46416198-AA
Technical specifications
Article number Interface types RJ 45 (Ethernet)
· 100 Mbps
6ES7515-2AM02-0AB0 Yes
· Autonegotiation
Yes
· Autocrossing
Yes
· Industrial Ethernet status LED
Yes
Protocols Number of connections
· Number of connections, max.
· Number of connections reserved for ES/HMI/web
192; via integrated interfaces of the CPU and connected CPs / CMs
10
· Number of connections via integrated inter- 108 faces
· Number of S7 routing paths
16
Redundancy mode
· H-Sync forwarding
Yes
SIMATIC communication
· S7 communication, as server
Yes
· S7 communication, as client
Yes
· User data per job, max.
Open IE communication · TCP/IP
See online help (S7 communication, user data size)
Yes
Data length, max.
64 kbyte
several passive connections per port, Yes supported
· ISO-on-TCP (RFC1006)
Yes
Data length, max.
64 kbyte
· UDP
Yes
Data length, max.
2 kbyte; 1 472 bytes for UDP broadcast
UDP multicast
Yes; Max. 5 multicast circuits
· DHCP
No
· SNMP
Yes
· DCP
Yes
· LLDP
Yes
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
49
Technical specifications
Article number Web server
· HTTP
6ES7515-2AM02-0AB0 Yes; Standard and user pages
· HTTPS
Yes; Standard and user pages
OPC UA
· Runtime license required
Yes
· OPC UA client
Yes
Application authentication
Yes
Security policies User authentication
Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256
"anonymous" or by user name & password
Number of connections, max.
10
Number of nodes of the client interfac- 2 000 es, max.
Number of elements for one call of
300
OPC_UA_NodeGetHandleList/OPC_UA
_ReadList/OPC_UA_WriteList, max.
Number of elements for one call of
20
OPC_UA_NameSpaceGetIndexList,
max.
Number of elements for one call of
100
OPC_UA_MethodGetHandleList, max.
Number of simultaneous calls of the cli- 1 ent instructions per connection (except OPC_UA_ReadList,OPC_UA_WriteList, OPC_UA_MethodCall), max.
Number of simultaneous calls of the cli- 5 ent instructions OPC_UA_ReadList,OPC_UA_WriteList and OPC_UA_MethodCall, max.
Number of registerable nodes, max.
5 000
Number of registerable method calls of 100 OPC_UA_MethodCall, max.
Number of inputs/outputs when calling 20 OPC_UA_MethodCall, max.
· OPC UA server Application authentication
Yes; Data access (read, write, subscribe), method call, custom address space
Yes
Security policies User authentication
Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256
"anonymous" or by user name & password
Number of sessions, max.
48
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
50
Equipment Manual, 11/2019, A5E46416198-AA
Technical specifications
Article number Number of accessible variables, max.
6ES7515-2AM02-0AB0 100 000
Number of registerable nodes, max.
20 000
Number of subscriptions per session, 20 max.
Sampling interval, min.
100 ms
Publishing interval, min.
200 ms
Number of server methods, max.
50
Number of inputs/outputs per server
20
method, max.
Number of monitored items, max. Number of server interfaces, max.
2 000; for 1 s sampling interval and 1 s send interval
10; or 20, depending on type of server interface
Number of nodes for user-defined serv- 5 000 er interfaces, max.
Further protocols · MODBUS
Yes; MODBUS TCP
Media redundancy · Switchover time on line break, typ.
200 ms; For MRP, bumpless for MRPD
· Number of stations in the ring, max.
50
Isochronous mode
Isochronous operation (application synchronized up to terminal)
Equidistance
S7 message functions
Number of login stations for message functions, max.
Program alarms
Number of configurable program messages, max.
Number of loadable program messages in RUN, max.
Number of simultaneously active program alarms
· Number of program alarms
Yes; Distributed and central; with minimum OB 6x cycle of 500 µs (distributed) and 1 ms (central) Yes
64
Yes 10 000; Program messages are generated by the "Program_Alarm" block, ProDiag or GRAPH 5 000
800
· Number of alarms for system diagnostics 200
· Number of alarms for motion technology 160 objects
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
51
Technical specifications
Article number Test commissioning functions
Joint commission (Team Engineering)
Status block
Single step Number of breakpoints Status/control · Status/control variable · Variables
· Number of variables, max. of which status variables, max. of which control variables, max.
Forcing · Forcing, variables · Number of variables, max.
Diagnostic buffer · present · Number of entries, max. of which powerfail-proof
Traces · Number of configurable Traces
Interrupts/diagnostics/status information Diagnostics indication LED
· RUN/STOP LED · ERROR LED · MAINT LED · STOP ACTIVE LED · Connection display LINK TX/RX
6ES7515-2AM02-0AB0
Yes; Parallel online access possible for up to 8 engineering systems Yes; Up to 8 simultaneously (in total across all ES clients) No 8
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Peripheral inputs/outputs 200
Yes 3 200 500
4; Up to 512 KB of data per trace are possible
Yes Yes Yes Yes Yes
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
52
Equipment Manual, 11/2019, A5E46416198-AA
Technical specifications
Article number
6ES7515-2AM02-0AB0
Supported technology objects
Motion Control
Yes; Note: The number of axes affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER
· Number of available Motion Control re-
2 400
sources for technology objects (except cam
disks)
· Required Motion Control resources
per speed-controlled axis
40
per positioning axis
80
per synchronous axis
160
per external encoder
80
per output cam
20
per cam track
160
per probe
40
· Positioning axis Number of positioning axes at motion control cycle of 4 ms (typical value) Number of positioning axes at motion control cycle of 8 ms (typical value)
Controller · PID_Compact
· PID_3Step
· PID-Temp
Counting and measuring · High-speed counter
7
14
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
Standards, approvals, certificates Suitable for safety functions
Ambient conditions Ambient temperature during operation
· horizontal installation, min. · horizontal installation, max.
· vertical installation, min. · vertical installation, max.
No
-25 °C; No condensation 60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off -25 °C; No condensation 40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
53
Technical specifications
Article number Ambient temperature during storage/transportation
· min.
· max. Altitude during operation relating to sea level
· Installation altitude above sea level, max.
Configuration Programming Programming language
LAD FBD STL SCL GRAPH Know-how protection · User program protection/password protection
· Copy protection
· Block protection Access protection
· Password for display
· Protection level: Write protection
· Protection level: Read/write protection
· Protection level: Complete protection Cycle time monitoring
· lower limit
· upper limit Dimensions
Width Height Depth Weights Weight, approx.
6ES7515-2AM02-0AB0
-40 °C 70 °C
5 000 m; Restrictions for installation altitudes > 2 000 m, see manual
Yes Yes Yes Yes Yes
Yes
Yes Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
70 mm 147 mm 129 mm
830 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
54
Equipment Manual, 11/2019, A5E46416198-AA
Dimensional drawing
A
This section contains the dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with the front panel open. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimensional drawings for CPU 1515-2 PN
Figure A-1 Dimensional drawing of the CPU 1515-2 PN
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
Equipment Manual, 11/2019, A5E46416198-AA
55
Dimensional drawing
Figure A-2 CPU with open front panel
CPU 1515-2 PN (6ES7515-2AM02-0AB0)
56
Equipment Manual, 11/2019, A5E46416198-AA
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
SIMATIC
S7-1500R/H CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual
Preface
S7-1500R/H Documentation Guide
1
Product overview
2
Connecting
3
Interrupts, diagnostics, error
messages and system
4
events
Technical specifications
5
Dimension drawing
A
11/2019
A5E42009914-AB
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E42009914-AB 10/2019 Subject to change
Copyright © Siemens AG 2018 - 2019. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500R/H redundant system and the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1515R-2 PN.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)". Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
3
Preface
Security information Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Siemens Industry Online Support You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
4
Equipment Manual, 11/2019, A5E42009914-AB
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
5
Table of contents
Preface ...................................................................................................................................................... 3
1 S7-1500R/H Documentation Guide............................................................................................................ 7
2 Product overview ....................................................................................................................................... 9
2.1
New functions in firmware version V2.8................................................................................... 9
2.2
Configuration and operating principle .................................................................................... 11
2.3
Hardware properties .............................................................................................................. 13
2.4
Firmware functions................................................................................................................. 17
2.5 2.5.1 2.5.2 2.5.3
Operator controls and display elements ................................................................................ 20 Front view of the CPU with closed front panel....................................................................... 20 Front view of the CPU without front panel ............................................................................. 22 Rear view of the CPU ............................................................................................................ 23
2.6
Mode selector......................................................................................................................... 24
3 Connecting .............................................................................................................................................. 25
3.1
Terminal assignment.............................................................................................................. 25
4 Interrupts, diagnostics, error messages and system events .................................................................... 29
4.1
Status and error display of the CPU ...................................................................................... 29
5 Technical specifications ........................................................................................................................... 34
A Dimension drawing .................................................................................................................................. 43
A.1
Dimension drawing ................................................................................................................ 43
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
6
Equipment Manual, 11/2019, A5E42009914-AB
S7-1500R/H Documentation Guide
1
The documentation for the redundant S7-1500R/H system is divided into three areas. This division enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the redundant S7-1500R/H system. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the redundant S7-1500R/H system, e.g. diagnostics, communication.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
7
S7-1500R/H Documentation Guide
S7-1500/ET 200MP Manual Collection
The S7-1500/ET 200MP Manual Collection contains the complete documentation on the redundant S7-1500R/H system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en/).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
8
Equipment Manual, 11/2019, A5E42009914-AB
Product overview
2
2.1
New functions in firmware version V2.8
This section contains an overview of the most important new firmware functions of the CPU since the last edition of the manual.
New functions of the CPU in firmware version V2.8
New functions
Customer benefits
Download modified user program in RUNRedundant system state
You can download a modified user program into the R/H CPUs in the RUN-Redundant system state.
Advantage: The redundant system will remain consistently in the RUN-Redundant system state during the change to the user program. The system state will not switch to RUN-Rolo or SYNCUP.
Backing up the configuration of the S7-1500R/H redundant system in runtime
You do not have to interrupt the process during a backup while the plant is running. Uninterrupted plant operation avoids high restart and material costs.
Where can I find information?
S7-1500R/H System Manual (https://support.industry.siemens.com/c s/ww/en/view/109754833)
Switched S1 device Testing with breakpoints
The "Switched S1 device" function of the CPU enables operation of standard IO devices in the S71500R/H redundant system.
When testing with breakpoints, you run a program from breakpoint to breakpoint in the STARTUP (startup OB) or RUN-Solo system state. Testing with breakpoints provides you with the following advantages:
· Testing SCL and STL program code with the help of breakpoints
· Localization of logic errors step by step
· Simple and quick analysis of complex programs prior to actual commissioning
· Recording of current values within individual executed loops
· Using breakpoints for program validation is also possible in SCL or STL networks within LAD/FBD blocks.
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
9
Product overview 2.1 New functions in firmware version V2.8
New functions PID controller
Alarms in the user program
Customer benefits
PID controllers are built into all R/H-CPUs as standard. PID controllers measure the actual value of a physical variable, for example, temperature or pressure, and compare the actual value with the setpoint. Based on the resulting error signal, the controller calculates a manipulated variable that causes the process value to reach the setpoint as quickly and stably as possible.
The PID controllers offer you the following advantages:
Where can I find information?
· S7-1500R/H System Manual (https://support.industry.siemens.co m/cs/ww/en/view/109754833)
· PID Control Function Manual (https://support.industry.siemens.co m/cs/ww/en/view/108210036)
· Simple configuration and programming through integrated editors and blocks
· Simple simulation, visualization, commissioning and operation via PG and HMI
· Automatic calculation of the control parameters and tuning during operation
· No additional hardware and software required
Alarms enable you to display events from process execution in the S7-1500R/H redundant system and to quickly identify, accurately locate, and correct errors.
Diagnostics function manual (https://support.industry.siemens.com/c s/ww/en/view/59192926)
Additional information
You can find an overview of all new functions, improvements and revisions in the respective firmware versions on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109478459).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
10
Equipment Manual, 11/2019, A5E42009914-AB
Product overview 2.2 Configuration and operating principle
2.2
Configuration and operating principle
Structure
The S7-1500R redundant system consists of the following components: Two CPUs of the type CPU 1515R-2 PN Two SIMATIC memory cards PROFINET cable (redundancy connections, PROFINET ring) IO devices Load power supply (optional) System power supply (optional) You mount the CPUs on a common mounting rail or spatially separated on two separate mounting rails. You connect the two CPUs and the IO devices in a PROFINET ring via the PROFINET cable.
Optional load current supply
First CPU
Mounting rail with integrated DIN rail profile
Second CPU
PROFINET cable (redundancy connections, PROFINET ring)
Figure 2-1 Configuration example for S7-1500R
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
11
Product overview 2.2 Configuration and operating principle
Note Standard rail adapter You mount the CPUs on a standardized 35 mm rail using the standard rail adapter. You will find information on mounting the standard rail adapter in the S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833) System Manual.
Principle of operation One of the two CPUs in the redundant system takes on the role of CPU for process control (primary CPU). The other CPU takes on the role of the following CPU (backup CPU). The assigned role of the CPUs can change during operation. Synchronization of all relevant data between primary CPU and backup CPU ensures fast switching between CPUs in the event of a primary CPU failure. If the primary CPU fails, the backup CPU retains control of the process as the new primary CPU at the point of interruption. The redundancy connections are the PROFINET ring with MRP. The CPUs are synchronized via a PROFINET ring.
Additional information You can find a detailed description of the operation and design of the CPUs in the system manual Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
12
Equipment Manual, 11/2019, A5E42009914-AB
2.3
Hardware properties
Article number 6ES7515-2RM00-0AB0
View of the module The figure below shows the CPU 1515R-2 PN.
Product overview 2.3 Hardware properties
Figure 2-2 CPU 1515R-2 PN
Note Protective film Note that there is a removable protective foil on the display when the CPUs are delivered.
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
13
Product overview 2.3 Hardware properties
Properties
CPU 1515R-2 PN has the following technical properties:
Property CPU display
Supply voltage
Description
Additional information
All CPUs of the redundant system S7 1500R/H have a · Redundant System S7-1500R/H
display with plain text information. The display provides
(https://support.industry.siemens.
you with diagnostic messages as well as information about the article number, the firmware version and the serial number of the CPU.
com/cs/ww/en/view/109754833) System Manual
You can also view and assign the IP addresses, the PROFINET device name and the redundancy ID of the
·
SIMATIC S7-1500 Display Simulator
CPU. The system IP address can be viewed via
(http://www.automation.siemens.
STEP 7 but not in the display.
com/salesmaterial-as/interactive-
In addition to the functions listed here, a large number of other functions are available on the display. These
manuals/getting-started_simatics7-1500/disp_tool/start_de.html)
additional functions are described in the SIMATIC S7
1500 Display Simulator.
The 24 V DC supply voltage is fed via a 4-pin plug located on the front of the CPU.
· Section Connecting (Page 25)
· Redundant System S7-1500R/H (https://support.industry.siemens. com/cs/ww/en/view/109754833) System Manual
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
14
Equipment Manual, 11/2019, A5E42009914-AB
Product overview 2.3 Hardware properties
Property
PROFINET IO
PROFINET IO interface (X1 P1 R and X1 P2 R)
Description
Additional information
The CPU has an X1 interface with two ports (X1 P1 R and X1 P2 R).
· The PROFINET IO interface X1 (default P1 R) is used to set up the PROFINET ring with the two CPUs and the IO devices.
· The PROFINET IO interface X1 (default P2 R) is used to make the connection between the two RCPUs in the PROFINET ring.
· Redundant System S7-1500R/H (https://support.industry.siemens. com/cs/ww/en/view/109754833) System Manual
· Function manual PROFINET (https://support.industry.siemens. com/cs/ww/en/view/49948856)
In the PROFINET ring, the synchronization frames between the CPUs are transmitted via the following connections:
The direct connection (X1 P2 R)
The indirect connection (X1 P1 R) via the IO devices
· The interface supports PROFINET IO RT (RealTime) and PROFINET basic functionality.
PROFINET interface (X2 P1)
Operation of the CPUs as IO controllers
Basic PROFINET functionality comprises: HMI communication Communication with the configuration system Communication with a higher-level network
(backbone, router, Internet) Communication with another machine or auto-
mation cell
The CPU has an X2 interface with one port (X2 P1). The interface supports PROFINET basic functionality.
IO controller: As IO controllers the CPUs address the following configured IO devices:
· IO devices with S2 system redundancy within the PROFINET ring
· IO devices with S2 system redundancy that are decoupled from the PROFINET ring via a switch
· Standard IO devices (switched S1 devices)
Standard IO devices usually do not support HSync Forwarding.
To avoid a cycle time increase when the PROFINET ring is interrupted, integrate the standard IO devices behind a switch and not in the PROFINET ring.
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
15
Product overview 2.3 Hardware properties
H-Sync Forwarding H-Sync Forwarding enables a PROFINET device with MRP to forward synchronization data (synchronization frames) of an S7-1500R redundant system only within the PROFINET ring.
In addition, H-Sync Forwarding forwards the synchronization data even during reconfiguration of the PROFINET ring. H-Sync Forwarding avoids a cycle time increase if the PROFINET ring is interrupted.
Note Support of H-Sync Forwarding
The technical specifications typically state whether a PROFINET device supports H-Sync Forwarding.
The GSD file will also indicate whether the device supports H-Sync Forwarding. The device supports H-Sync Forwarding when the "ApplicationClass" attribute contains the "HighAvailability" token.
You will find more information on H-Sync Forwarding in the system manual S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833).
Accessories
You can find information on the topic of "Accessories/spare parts" in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
16
Equipment Manual, 11/2019, A5E42009914-AB
Product overview 2.4 Firmware functions
2.4
Firmware functions
Functions
CPU 1515R-2 PN supports the following firmware functions:
Function CPU redundancy Integrated system diagnostics
Integrated trace functionality
PROFINET IO System redundancy S2
Switched S1 device
Description
Additional information
There are two duplicate CPUs that synchronize their Redundant System S7-1500R/H
data via redundancy connections within a PROFINET (https://support.industry.siemens.com/
ring. If one of the CPUs fails, the other CPU retains cs/ww/en/view/109754833) System
control of the process.
Manual
The system automatically generates the messages for the system diagnostics and outputs these messages via a programming device/PC, HMI device or the integrated display. System diagnostics information is also available when the CPUs are in operating state STOP.
Function manual Diagnostics (http://support.automation.siemens.co m/WW/view/en/59192926)
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
Function manual Using the trace and logic analyzer function (http://support.automation.siemens.co m/WW/view/en/64897128)
Trace and logic analyzer functions are suitable for monitoring highly dynamic processes.
Note: Note that the S7-1500R/H redundant system supports recording of measurements. However, saving the measurements to the SIMATIC memory card is not supported.
All IO devices are connected redundantly in the redundant S7 1500R/H system. All IO devices assigned to the system must therefore support system redundancy S2.
If the role of the CPUs changes, the new primary CPU takes over the PROFINET IO communication.
· Redundant System S7-1500R/H (https://support.industry.siemens.c om/cs/ww/en/view/109754833) System Manual
· Function manual PROFINET (http://support.automation.siemens. com/WW/view/en/49948856)
The switched S1 device function of the CPU enables Redundant System S7-1500R/H Sysoperation of standard IO devices in the S7-1500R/H tem Manual redundant system.
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
17
Product overview 2.4 Firmware functions
Function RT (real time) MRP (Media Redundancy Protocol)
PROFIenergy
Integrated technology Integrated closed-loop control functionality
Description
RT prioritizes PROFINET IO frames over standard frames. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet frames.
The Media Redundancy Protocol enables the configuration of redundant networks. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails.
Within the PROFINET ring, the R-CPUs assume the role of the MRP Manager following appropriate project configuration and all other devices in the ring assume the role of the MRP clients.
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. Most of the energy is saved by the process. The PROFINET device itself only contributes a few watts to the savings potential.
· PID Compact (continuous PID controller)
· PID 3Step (step controller for integrating actuators)
· PID Temp (temperature controller for heating and cooling with two separate actuators)
Additional information Function manual PROFINET (http://support.automation.siemens.co m/WW/view/en/49948856)
Function manual PID Control (https://support.industry.siemens.com/ cs/ww/en/view/108210036) Redundant System S7-1500R/H System Manual
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
18
Equipment Manual, 11/2019, A5E42009914-AB
Product overview 2.4 Firmware functions
Function Security Integrated Know-how protection Access protection Integrity protection
Password provider
Description
Additional information
The know-how protection protects user blocks against unauthorized access and modifications.
You can use authorization levels to assign separate rights to different user groups.
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between STEP 7 and the CPUs.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPUs for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password entry, you can link a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 automatically imports the password for the blocks. This saves you time.
· Optimum block protection because the users do not know the password itself.
Redundant System S7-1500R/H (https://support.industry.siemens.com/ cs/ww/en/view/109754833) System Manual
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
19
Product overview 2.5 Operator controls and display elements
2.5
Operator controls and display elements
2.5.1
Front view of the CPU with closed front panel
The figure below shows the front view of the CPU 1515R-2 PN.
LEDs for the current operating state and diagnostic status of the CPU Display Control keys
Figure 2-3 View of the CPU 1515R-2 PN (with front panel) - front
Note Temperature range for display To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPUs. You can find additional information on the temperatures at which the display switches itself on and off in the Technical specifications (Page 34).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
20
Equipment Manual, 11/2019, A5E42009914-AB
Product overview 2.5 Operator controls and display elements
Pulling and plugging the front panel with display You can pull and plug the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you remove or attach the front panel of a redundant system S7-1500R/H during operation, personal injury or damage to property can occur in hazardous area zone 2. Before you remove or fit the front panel, always switch off the power supply to the S7-1500R/H redundant system in hazardous area zone 2.
Locking the front panel You can lock the front panel to protect the SIMATIC memory card and the mode selector of the CPU against unauthorized access. You can attach a security seal or a padlock with a hoop diameter of 3 mm to the front panel.
Reference
Figure 2-4 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, the configurable protection levels and the local lock in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
You can find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
21
Product overview 2.5 Operator controls and display elements
2.5.2
Front view of the CPU without front panel
The figure below shows the operator controls and connection elements of the CPU 1515R-2 PN.
LEDs for the current operating state and diagnostic status of the CPUs Display connector Slot for the SIMATIC memory card Mode selector LED displays for the 3 ports of the PROFINET interfaces X1 and X2 MAC addresses of the interfaces PROFINET IO interface X2 with 1 port PROFINET IO interface X1 with 2 ports Connector for power supply Fixing screws
Figure 2-5 View of the CPU 1515R-2 PN (without front panel) - front
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
22
Equipment Manual, 11/2019, A5E42009914-AB
2.5.3
Product overview 2.5 Operator controls and display elements
Rear view of the CPU
The figure below shows the connection elements on the rear of the CPU 1515R-2 PN.
Shield contact surfaces Plug-in connection for power supply Plug-in connection for backplane bus Fixing screws
Figure 2-6 View of the CPU 1515R-2 PN - rear
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
23
Product overview 2.6 Mode selector
2.6
Mode selector
You use the mode selector to:
Request a change to a specific operating state
Disable or enable the change of a specific operating state
(if, for example, the mode selector is set to STOP, you cannot switch the CPU to RUN via a communication task configured in the TIA Portal or via the display)
The following table shows the position of the switch and the corresponding meaning.
Table 2- 1
Position RUN STOP MRES
Mode switch settings
Meaning RUN mode STOP mode Memory reset
Explanation The CPU has permission to go to RUN. The CPU does not have permission to go to RUN. Position for CPU memory reset.
Reference
You can find a brief overview of the various operating states and system states in the section Status and error display of the CPU (Page 29).
You can find a detailed description of the operating states and system states in the system manual for S7-1500R/H Redundant System (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
24
Equipment Manual, 11/2019, A5E42009914-AB
Connecting
3
3.1
Terminal assignment
This section provides information on the terminal assignment of the individual interfaces and the block diagram of the CPU 1515R-2 PN.
24 V DC supply voltage (X80)
The connector for the power supply is plugged in when the CPU ships from the factory.
The following table shows the signal names and the descriptions of the pin assignment of the 24 V DC supply voltage.
Table 3- 1 Pin assignment 24 V DC supply voltage
View Connector
Signal name 1)
Description
1 1L+ 2 1M 3 2M 4 2L+
+ 24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through 2) + 24 V DC of the supply voltage for loop-through 2)
1) 1L+ and 2L+ as well as 1M and 2M are bridged internally. 2) Maximum 10 A permitted
You can find information on the various supply options in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
25
Connecting 3.1 Terminal assignment
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R) The assignment corresponds to the Ethernet standard for a RJ45 connector. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Figure 3-1 Interface assignments
PROFINET interface X2 with 1 port (X2 P1) The assignment corresponds to the Ethernet standard for a RJ45 connector. Autocrossing is always active on X2. This means the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Additional information You can find additional information on the topic of "Connecting the CPU" and on the topic "Accessories/spare parts" in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
Assignment of the MAC addresses For each CPU, CPU 1515R-2 PN has: One PROFINET interface with two ports One PROFINET interface with one port Each of the PROFINET interfaces has a MAC address and each of the PROFINET ports has its own MAC address. There are a total of ten MAC addresses for the two CPUs of the CPU 1515R-2 PN. The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function. The number range of the MAC addresses is sequential. The first and last MAC addresses are printed on the rating plate on the right side of each CPU 1515R-2 PN.
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
26
Equipment Manual, 11/2019, A5E42009914-AB
Connecting 3.1 Terminal assignment
The table below shows how the MAC addresses are assigned.
Table 3- 2 Assignment of MAC addresses using the example of a single CPU
MAC address 1
Assignment PROFINET interface X1 (visible in STEP 7 for accessible devices)
MAC address 2 MAC address 3 MAC address 4
MAC address 5
Port X1 P1 R (required for LLDP, for example) Port X1 P2 R (required for LLDP, for example) PROFINET interface X2 (visible in STEP 7 for accessible devices) Port X2 P1 (required for LLDP, for example)
Labeling · Front printed · Right-side printed
(start of number range) ----· Front printed
· Right-side printed (end of number range)
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
27
Connecting 3.1 Terminal assignment
Block diagram The following figure shows the block diagram of the CPU 1515R-2 PN.
PN X1 P1 R
SIMATIC memory card (X50) Display Mode selector RUN/STOP/MRES Electronics PROFINET 2-port switch Backplane bus connection (connection to backplane bus not configurable) Internal supply voltage Supply of the 24 V DC supply voltage (X80) PROFINET interface X1 port 1
Figure 3-2 Block diagram of the CPU 1515R-2 PN
PN X1 P2 R PN X2 P1 L+ M R/S ER
PROFINET interface X1 port 2 PROFINET interface X2 port 1 24 V DC supply voltage Ground RUN/STOP LED (yellow/green) ERROR LED (red)
MT
MAINT LED (yellow)
X1 P1, X1 P2, X2 P1 LED Link TX/RX
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
28
Equipment Manual, 11/2019, A5E42009914-AB
Interrupts, diagnostics, error messages and system events
4
4.1
Status and error display of the CPU
The LED displays of the CPU are described below.
You can find more detailed information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topic of "Diagnostics" and "System events" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual and in the system manual Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
You can find additional information on the topic of "Operating states and system states" as well as various failure scenarios in the system manual for S7-1500R/H Redundant System (https://support.industry.siemens.com/cs/ww/en/view/109754833).
LED display
The figure below shows the LED displays of the CPU 1515R-2 PN.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED)
Figure 4-1 LED display of the CPU 1515R-2 PN (without front panel)
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
29
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
LED displays depending on operating states and system states CPU 1515R-2 PN has the following LEDs for displaying the current operating state and diagnostics status. RUN/STOP LED ERROR LED MAINT LED The LEDs indicate the operating state of the respective CPU within the redundant system. Operating states describe the behavior of a single CPU at a specific time. The combination of the operating states of the CPUs forms the system state. The following figure shows the possible operating states of the CPUs and the resulting system states.
Figure 4-2 Operating states and system states
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
30
Equipment Manual, 11/2019, A5E42009914-AB
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs CPU 1515R-2 PN has the following LEDs for displaying the current operating state and diagnostics status.
Note LED patterns of the redundant system S7 1500R Note that it is not always possible to: · Determine the state of the CPU from the signal pattern · Determine the state of the other CPU from the signal pattern The "Meaning" column only shows a possible typical cause. To investigate the cause of the signal pattern, use the diagnostic buffer and its display via: · STEP 7 · HMI devices · Displays of the CPUs
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
31
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
Table 4- 1
The following table shows the meaning of the various color combinations for the RUN/STOP, ERROR and MAINT LEDs.
Meaning of the LEDs
RUN/STOP LED LED off
LED flashes yellow/green LED lit yellow
LED flashes yellow LED lit yellow
LED lit yellow
LED flashes yellow/green
ERROR LED LED off
LED flashes red
LED off LED off LED flashes red LED off LED off
MAINT LED LED off
LED flashes yellow
LED lit yellow LED lit yellow LED flashes yellow LED flashes yellow LED lit yellow
Meaning Missing or insufficient supply voltage on the CPU.
Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test CPU is in operating state STOP. Completion of system initialization CPU executes internal activities in an operating state RUN-Redundant.
CPU defective
Firmware update successfully completed.
The primary CPU is in operating state STARTUP. The backup CPU is in operating state SYNCUP. The backup CPU has not yet been restarted for SYNCUP during this phase.
LED flashes yellow LED lit green
LED off LED off
LED lit green LED lit green LED lit green
LED off LED flashes red LED flashes red
LED off LED lit yellow
LED off LED off LED lit yellow
The CPU performs a warm restart.
Maintenance demanded for the plant. You need to check/replace the affected hardware within a short period of time. The primary CPU is in operating state RUNSyncup. Active Force job PROFIenergy pause The primary CPU is in operating state RUN. The CPU is in operating state RUN-Redundant. There are no events, requirements, errors, etc. A diagnostic event is pending in operating state RUN-Redundant.
A diagnostic event (e.g. failure of an IO device within the PROFINET ring or no access to SIMATIC memory card possible1)) and maintenance is demanded (e.g. interruption of the PROFINET ring).
1) If access to the SIMATIC memory card is not possible in RUN-Redundant (wrong card, card full/write protected), the system switches to RUN-Solo. The ERROR LED flashes for three seconds. The MAINT LED lights up until the RUNRedundant system status is reached again.
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
32
Equipment Manual, 11/2019, A5E42009914-AB
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
Note MAINT LED of the two CPUs
The MAINT LEDs of both CPUs only go out when the following conditions are fulfilled: · The CPUs are in the RUN-Redundant system state. · No maintenance is demanded.
Note LED displays in redundant mode
In the RUN-Redundant system state, the LED displays on both CPUs are identical (exception: you are performing an LED flash test on one CPU).
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various LED patterns of the ports of the CPU 1515R-2 PN.
Table 4- 2 Meaning of LINK RX/TX LED
LINK TX/RX LED off
Flashes green Illuminated green
LED flashes yellow/green
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The redundancy connections were interrupted. The CPU performs an LED flash test.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner. The redundancy connections are OK. Data is currently being received/sent by a communication partner via the PROFINET interface of the PROFINET device. Note that the human eye perceives this LED image as an LED that is lit yellow or flickering yellow.
Note
"LED" instruction
You can read the status (e.g. "On" or "Off") of LEDs of a CPU or a module using the "LED" instruction. Note, however, that it is not possible to read the LED status of the LINK RX/TX LEDs on all S7-1500 R/H CPUs.
You can find additional information on the "LED" instruction in the STEP 7 online help.
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
33
Technical specifications
5
The following table shows the technical specifications as of 11/2019. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7515-2RM00-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version Product function · I&M data
· Isochronous mode
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
Display Screen diagonal [cm]
Control elements Number of keys Mode selector switch
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering · Mains/voltage failure stored energy time
Input current Current consumption (rated value) Inrush current, max. I²t
Power loss Power loss, typ.
Memory Number of slots for SIMATIC memory card SIMATIC memory card required
6ES7515-2RM00-0AB0
CPU 1515R-2 PN FS01 V2.8
Yes; I&M0 to I&M3 No
V16 (FW V2.8) / V15.1 (FW V2.6) or higher
6.1 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms
0.8 A 2.4 A 0.02 A²·s
6.3 W
1 Yes
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
34
Technical specifications
Article number Work memory
· integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range · Size, max.
FB · Number range · Size, max.
FC · Number range · Size, max.
OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of startup OBs · Number of asynchronous error OBs · Number of synchronous error OBs · Number of diagnostic alarm OBs
Nesting depth · per priority class
6ES7515-2RM00-0AB0
500 kbyte 3 Mbyte
32 Gbyte
Yes
60 ns 72 ns 96 ns 384 ns
6 000; Blocks (OB, FB, FC, DB) and UDTs
Number range: 1 to 59 999 3 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535 500 kbyte
0 ... 65 535 500 kbyte
500 kbyte 100 20 20 20 50 100 4 2 1
24
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
35
Technical specifications
Article number Counters, timers and their retentivity S7 counter
· Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
· Number of clock memories
Data blocks · Retentivity adjustable
· Retentivity preset Local data
· per priority class, max. Address area
Number of IO modules I/O address area
· Inputs
· Outputs per integrated IO subsystem
Inputs (volume) Outputs (volume) Subprocess images · Number of subprocess images, max.
6ES7515-2RM00-0AB0
2 048 Yes Any (only limited by the main memory) Yes 2 048 Yes Any (only limited by the main memory) Yes 512 kbyte
16 kbyte 8; 8 clock memory bit, grouped into one clock memory byte Yes No 64 kbyte; max. 16 KB per block 4 096; max. number of modules / submodules 32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image 8 kbyte 8 kbyte 32
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
36
Equipment Manual, 11/2019, A5E42009914-AB
Article number Hardware configuration
Number of distributed IO systems Number of IO Controllers
· integrated Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number Clock synchronization · supported · on Ethernet via NTP Interfaces Number of PROFINET interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Protocols · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
Technical specifications
6ES7515-2RM00-0AB0 1 1
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
Yes Yes
2
2 Yes Yes; X1
Yes; IPv4 Yes No Yes; Only Server Yes No Yes; MRP Automanager according to IEC 624392 Edition 2.0
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
37
Technical specifications
Article number PROFINET IO Controller Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP
MRPD PROFIenergy Number of connectable IO Devices,
max. Updating times
Update time for RT for send cycle of 1 ms
2. Interface Interface types
· Number of ports · integrated switch · RJ 45 (Ethernet) Protocols · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy Interface types RJ 45 (Ethernet) · 100 Mbps · Autonegotiation · Autocrossing · Industrial Ethernet status LED
6ES7515-2RM00-0AB0
Yes Yes No Yes No Yes; Only Manager Auto, max. 50 nodes; only 16 are recommended, however No Yes 64
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
1 ms to 512 ms
1 No Yes; X2
Yes; IPv4 No No Yes; Only Server Yes No No
Yes Yes Yes Yes
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
38
Equipment Manual, 11/2019, A5E42009914-AB
Technical specifications
Article number Protocols Number of connections
· Number of connections, max. · Number of connections reserved for
ES/HMI/web · Number of S7 routing paths Redundancy mode · MRP
· MRPD SIMATIC communication
· S7 communication, as server · S7 communication, as client Open IE communication · TCP/IP
Data length, max. several passive connections per port,
supported · ISO-on-TCP (RFC1006)
Data length, max. · UDP
Data length, max. UDP multicast · DHCP · SNMP · DCP · LLDP Web server · HTTP · HTTPS OPC UA · OPC UA client · OPC UA server Further protocols · MODBUS
6ES7515-2RM00-0AB0
108 10
16
Yes; Manager Auto is permanently set in TIA. Max. 50 nodes are possible, 16 are recommended No
Yes No
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
No No
No No
Yes; MODBUS TCP
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
39
Technical specifications
Article number Media redundancy
· Switchover time on line break, typ.
· Number of stations in the ring, max. Isochronous mode
Isochronous operation (application synchronized up to terminal) Equidistance S7 message functions Number of login stations for message functions, max. Program alarms Number of configurable program messages, max. Number of loadable program messages in RUN, max. Number of simultaneously active program alarms · Number of program alarms
· Number of alarms for system diagnostics Test commissioning functions
Joint commission (Team Engineering) Status block Single step Number of breakpoints
Status/control · Status/control variable
· Variables
· Number of variables, max.
of which status variables, max. of which control variables, max. Forcing · Forcing
· Forcing, variables
· Number of variables, max. Diagnostic buffer
· present
· Number of entries, max.
of which powerfail-proof
6ES7515-2RM00-0AB0
200 ms; PROFINET MRP 50; Only 16 are recommended, however
No No
64 Yes 10 000; Program messages are generated by the "Program_Alarm" block, ProDiag or GRAPH 5 000
800 200
No Yes; up to 8 simultaneously No 8; Breakpoints are only supported in RUN-Solo status
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Yes Peripheral inputs/outputs 200
Yes 3 200 500
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
40
Equipment Manual, 11/2019, A5E42009914-AB
Technical specifications
Article number Traces
· Number of configurable Traces · Memory size per trace, max. Interrupts/diagnostics/status information Diagnostics indication LED · RUN/STOP LED · ERROR LED · MAINT LED · Connection display LINK TX/RX Supported technology objects Motion Control Controller · PID_Compact
· PID_3Step
· PID-Temp
Counting and measuring · High-speed counter Standards, approvals, certificates Suitable for safety functions Ambient conditions Ambient temperature during operation · horizontal installation, min. · horizontal installation, max.
· vertical installation, min. · vertical installation, max.
Ambient temperature during storage/transportation
· min. · max. Altitude during operation relating to sea level · Installation altitude above sea level, max.
6ES7515-2RM00-0AB0
4 512 kbyte
Yes Yes Yes Yes
No
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature Yes No
No
0 °C 60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off 0 °C 40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C 70 °C
5 000 m; Restrictions for installation altitudes > 2 000 m, see manual
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
Equipment Manual, 11/2019, A5E42009914-AB
41
Technical specifications
Article number Configuration Programming Programming language
LAD FBD STL SCL CFC GRAPH Know-how protection · User program protection/password protection
· Copy protection
· Block protection Access protection
· Password for display
· Protection level: Write protection
· Protection level: Read/write protection
· Protection level: Complete protection Cycle time monitoring
· lower limit
· upper limit Dimensions
Width Height Depth Weights Weight, approx.
6ES7515-2RM00-0AB0
Yes Yes Yes Yes No Yes
Yes
No Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
70 mm 147 mm 129 mm
830 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc. in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
42
Equipment Manual, 11/2019, A5E42009914-AB
Dimension drawing
A
A.1
Dimension drawing
This section contains the dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with the front panel open. Keep to the dimensions when installing in cabinets, control rooms, etc.
Dimension drawings of the CPU 1515R-2 PN
Figure A-1 Dimension drawing of the CPU 1515R-2 PN, front and side view
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
43
Equipment Manual, 11/2019, A5E42009914-AB
Dimension drawing A.1 Dimension drawing
Figure A-2 Dimension drawing CPU 1515R-2 PN, side view with open front panel
CPU 1515R-2 PN (6ES7515-2RM00-0AB0)
44
Equipment Manual, 11/2019, A5E42009914-AB
SIMATIC
S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_nt_at_io_n _gu_id_e_______1_
_Pr_od_u_ct_ov_e_rv_ie_w _________2_
_W_iri_ng_______________3_
_ _ _ _ _ _ _ _ _ _ _ Interrupts, error messages,
diagnostics and system
4
alarms
_Te_ch_n_ic_al_sp_e_cif_ic_at_ion_s______5_
_Di_m_en_si_on_d_ra_w_in_g ________A_
12/2017
A5E36284845-AB
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E36284845-AB 11/2017 Subject to change
Copyright © Siemens AG 2016 - 2017. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system/ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1515T-2 PN.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
4
Manual, 12/2017, A5E36284845-AB
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
5
Table of contents
Preface ...................................................................................................................................................... 4
1 Documentation guide ................................................................................................................................. 7
2 Product overview ..................................................................................................................................... 11
2.1
New functions in firmware version V2.5................................................................................. 11
2.2
Applications of the S7-1500 CPU .......................................................................................... 12
2.3
Hardware properties .............................................................................................................. 19
2.4
Firmware functions................................................................................................................. 21
2.5 2.5.1 2.5.2 2.5.3
Operator controls and display elements ................................................................................ 25 Front view of the CPU with closed front panel....................................................................... 25 Front view of the CPU without front flap ................................................................................ 27 Rear view of the CPU ............................................................................................................ 28
2.6
Mode selector......................................................................................................................... 28
3 Wiring ...................................................................................................................................................... 29
4 Interrupts, error messages, diagnostics and system alarms .................................................................... 33
4.1
Status and error displays of the CPU..................................................................................... 33
5 Technical specifications ........................................................................................................................... 36
A Dimension drawing .................................................................................................................................. 49
A.1
Dimensional drawing of the CPU 1515T-2 PN ...................................................................... 49
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
6
Manual, 12/2017, A5E36284845-AB
Documentation guide
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
1
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
7
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
8
Manual, 12/2017, A5E36284845-AB
Documentation guide
Application examples The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
9
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
10
Manual, 12/2017, A5E36284845-AB
Product overview
2
2.1
New functions in firmware version V2.5
New functions of the CPUs firmware 2.5 This section lists the new features of the CPU with firmware version V2.5. You can find additional information in the sections of this manual.
Table 2- 1 New functions of the CPUs with firmware version 2.5
New functions New technology object, kinematics
Additional instructions for torque control
Data adaption for SINAMICS S210 MotionIn
Applications
Customer benefits
Controlling of kinematics, such as · Cartesian portals · Roller pickers
You can realize complex Motion Control applications for controlling 2D, 3D and 4D kinematics.
· Delta pickers
· SCARA Motion specification of paths
Individual motions and motion sequences
Kinematics 2D, 3D, with and without orientation axis
You can apply an additives setpoint torque in the drive.
You can predetermine torque limits in the drive cyclically.
The torque actual value of the drive can be evaluated directly in the TO-DB of the axis.
You can pre-control the torque precisely for the axes, for example at winders (predetermine traction torque and additionally torque limits in order to prevent tearing of the material).
You can take the dynamic model of the kinematics into consideration, pre-control the torque to be expected for each axis and thus improve the precision.
You can also use data adaption for the new You gain time during the configuration of the
drive SINAMICS S210.
technology objects and the drives.
Through additional instructions motion
This means that specific technological motion
setpoints can be specified cyclically via the specifications are possible via the application
application.
(for example at winders).
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
11
Product overview 2.2 Applications of the S7-1500 CPU
2.2
Applications of the S7-1500 CPU
Area of application
SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation.
The modular and fanless design, simple implementation of distributed structures, and user-friendly operation make SIMATIC S7-1500 the economic and convenient solution for a variety of tasks.
Areas of application of the SIMATIC S7-1500 are, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automobile engineering
Water/waste water
Food & Beverage
Additional areas of application of the SIMATIC S7-1500T with extended Motion Control functions are, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial capability from the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
12
Manual, 12/2017, A5E36284845-AB
Product overview 2.2 Applications of the S7-1500 CPU
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 2 Standard CPUs
CPU
Performance segment PROFIBUS PROFINET PROFINET PROFINET interfaces IO RT/IRT IO RT basic funcinterfaces interface tionality
CPU 1511-1 PN Standard CPU for
--
1
--
--
small to mid-range
applications
CPU 1513-1 PN Standard CPU for
--
1
--
--
mid-range applica-
tions
CPU 1515-2 PN Standard CPU for
--
1
1
--
mid-range to large
applications
CPU 1516-3 PN/ Standard CPU for
1
1
1
--
DP
high-end applications
and communication
tasks
CPU 1517-3 PN/ Standard CPU for
1
1
1
--
DP
high-end applications
and communication
tasks
CPU 1518-4
Standard CPU for
1
1
1
1
PN/DP
high-performance
CPU 1518-4 PN/ applications, demand-
DP MFP
ing communication
tasks and very short
reaction times
Work memory 1.15 MB 1.8 MB 3.5 MB
6 MB
10 MB
24 MB
Processing time for bit operations
60 ns
40 ns
30 ns
10 ns
2 ns
1 ns
Table 2- 3 Compact CPUs
CPU
CPU 1511C-1 PN
CPU 1512C-1 PN
Performance segment PROFIBUS PROFINET PROFINET PROFINET interfaces IO RT/IRT IO RT basic funcinterfaces interface tionality
Compact CPU for
--
1
--
--
small to mid-range
applications
Compact CPU for
--
1
--
--
mid-range applica-
tions
Work memory 1.175 MB
1.25 MB
Processing time for bit operations
60 ns
48 ns
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
13
Product overview 2.2 Applications of the S7-1500 CPU
Table 2- 4 Fail-safe CPUs
CPU
CPU 1511F-1 PN
CPU 1511TF-1 PN
CPU 1513F-1 PN CPU 1515F-2 PN
CPU 1515TF-2 PN
CPU 1516F-3 PN/DP
CPU 1516TF-3 PN/DP
CPU 1517F-3 PN/DP
CPU 1517TF-3 PN/DP
CPU 1518F-4 PN/DP CPU 1518F-4 PN/DP MFP
Performance segment
Fail-safe CPU for small to mid-range applications
Fail-safe technology CPU for small to mid-range applications
Fail-safe CPU for midrange applications
Fail-safe CPU for midrange to large applications
Fail-safe technology CPU for demanding applications and communication tasks
Fail-safe CPU for demanding applications and communication tasks
Fail-safe technology CPU for demanding applications and communication tasks
Fail-safe CPU for demanding applications and communication tasks
Fail-safe technology CPU for demanding applications and communication tasks
Fail-safe CPU for highperformance applications, demanding communication tasks and very short reaction times
PROFIBUS interfaces
------
1
1
1
1
1
PROFINET IO RT/IRT interfaces
1 1 1 1 1
1
1
1
1
1
PROFINET IO RT inter-
face ---1 1
1
1
1
1
1
PROFINET basic func-
tionality
--
Work memory
1.225 M B
Processing time for bit operations
60 ns
--
1.225 M 60 ns
B
--
1.95 MB 40 ns
--
3.75 MB 30 ns
--
3.75 MB 30 ns
--
6.5 MB 10 ns
--
6.5 MB 10 ns
--
11 MB
2 ns
--
11 MB
2 ns
1
26 MB
1 ns
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
14
Manual, 12/2017, A5E36284845-AB
Product overview 2.2 Applications of the S7-1500 CPU
Table 2- 5 Technology CPUs
CPU
CPU 1511T-1 PN
CPU 1515T-2 PN
CPU 1516T-3 PN/DP
CPU 1517T-3 PN/DP
CPU 1511TF-1 PN CPU 1515TF-2 PN CPU 1516TF-3 PN/DP CPU 1517TF-3 PN/DP
Performance segment PROFIBUS PROFINET interfaces IO RT/IRT interfaces
Technology CPU for
--
1
small to mid-range
applications
Technology CPU for
--
1
mid-range to large
applications
Technology CPU for
1
1
high-end applications
and communication
tasks
Technology CPU for
1
1
high-end applications
and communication
tasks
These CPUs are described in the fail-safe CPUs
PROFINET IO RT
interface --
1
1
1
PROFINET basic
functionality --
--
--
--
Work memory 1.225 MB 3.75 MB 6.5 MB
11 MB
Processing time for bit operations
60 ns
30 ns
10 ns
2 ns
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Frequency meter Period duration measurement Pulse width modulation (PWM output) Pulse Train Output (PTO output) Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 6 (max. 100 kHz)
6 channels Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 6 (max. 100 kHz)
6 channels Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
15
Product overview 2.2 Applications of the S7-1500 CPU
Integrated Motion Control technology functions All CPUs of SIMATIC S7-1500 support Motion Control technology functions. STEP 7 offers Motion Control instructions standardized according to PLCopen for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axis Positioning axis Synchronous axis External encoders Output cam Cam track Measuring inputs The technology CPUs of the SIMATIC S7-1500 offer enhanced Motion Control functions: Advanced synchronization functions Synchronization with specification of synchronous position Actual value coupling Shifting the master value of the following axis Camming Up to 4 encoders or measuring systems as actual position for position control The technology CPUs of the SIMATIC S7-1500 additionally support the following technology objects: Cam Kinematics Cam Kinematics Controlling of kinematics, such as Cartesian portals Roller pickers Delta pickers SCARA Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
Additional integrated technological functions For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags. In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
16
Manual, 12/2017, A5E36284845-AB
Product overview 2.2 Applications of the S7-1500 CPU
Other technology functions Technology modules also implement functions such as high-speed counting, position detection and measuring functions and pulse generators (PTO, PWM and frequency output). For compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and can be implemented without additional technology modules.
SIWAREX is a versatile and flexible weighing module, which you can use as a static scale for operation.
Security Integrated In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks.
Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU.
In addition, you can assign various access rights to different user groups in the controller using four different authorization levels.
Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller.
The use of an Ethernet CP (CP 1543-1) provides the user with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally.
These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration thereby provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications.
The fail-safe CPUs are certified for use in safety mode up to:
Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010
Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to EN ISO 13849-1:2008
Additional password protection for F-configuration and F-program is set up for IT security.
In addition to the CPUs, further components such as SINAMICS drives dispose of integrated safety functions. Additional information about integrated safety functions in drives can be found in the manuals for the respective products.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
17
Product overview 2.2 Applications of the S7-1500 CPU
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Error messages are immediately shown on the display in plain text. In the case of servicing, plant downtimes are minimized by quick access to diagnostics alarms. Detailed information about this and a multitude of other display functions is available in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
Uniform front connectors for all modules and integrated potential bridges for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7, on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostic information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server in up to three project languages. The HMI takes over the display in the project languages specified for the CPU. If you require message texts in additional languages, you can load these via the configured connection to your HMI. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
18
Manual, 12/2017, A5E36284845-AB
2.3
Hardware properties
Article number 6ES7515-2TM01-0AB0
View of the module The following figure shows the CPU 1515T-2 PN.
Product overview 2.3 Hardware properties
Figure 2-1 CPU1515T-2 PN
Note Protective film Note that a protective film is attached to the display of the CPU when shipped from the factory. Remove the protective film if necessary.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
19
Product overview 2.3 Hardware properties
Properties
The CPU 1515T-2 PN has the following properties:
Property CPU display
Supply voltage
PROFINET IO PROFINET interface (X1 P1 R, X1 P2 R) PROFINET interface (X2 P1) Operation of the CPU as · IO controller · I-device
Description
Additional information
All CPUs of the SIMATIC S7-1500 product series feature a · S7-1500, ET 200MP system
display with plain text information. The display provides
manual
information on order numbers, firmware version and serial numbers of all connected modules. In addition, you can set the IP address of the CPU and carry out further network
(http://support.automation.sieme ns.com/WW/view/en/59191792)
settings. The display shows occurring error messages
· SIMATIC S7-1500 Display
directly in plain text.
Simulator
In addition to the functions listed here, a multitude of other functions that are described in the SIMATIC S7-1500
(http://www.automation.siemens. com/salesmaterial-as/interactive-
Display Simulator are shown on the display.
manuals/getting-started_simatic-
s7-1500/disp_tool/start_en.html)
The 24 V DC supply voltage is supplied via a 4-pole connection plug that is located at the front of the CPU.
· Chapter Wiring (Page 29)
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
The interface has two ports. In addition to basic PROFINET PROFINET function manual
functionality, its also supports PROFINET IO RT (real time) (https://support.industry.siemens.co
and IRT (isochronous real time).
m/cs/ww/en/view/49948856)
The interface has two ports. In addition to basic PROFINET functionality, its also supports PROFINET IO RT (real time).
· IO controller: As an IO controller the CPU addresses the connected IO devices
· I-device: As an I-device (intelligent IO device) the CPU is assigned to a higher-level IO controller and is used in the process as an intelligent pre-processing unit of sub-processes
Note
Special consideration when PROFINET IO communication is configured on the 2nd PROFINET interface (X2 P1)
If you configure the PROFINET IO communication on the 2nd PROFINET interface (X2 P1) (operated as IO controller or IO device) of the CPU (as of firmware version 2.0), additional system load occurs. You can find additional information in the Cycle and Response Times (http://support.automation.siemens.com/WW/view/en/59193558) function manual.
Accessories
You can find information on "Accessories/spare parts" in the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
20
Manual, 12/2017, A5E36284845-AB
Product overview 2.4 Firmware functions
2.4
Firmware functions
Functions
The CPU 1515T-2 PN supports the following functions:
Function Integrated system diagnostics Integrated Web server
Integrated trace functionality
OPC UA
Configuration control
Description
The system automatically generates the messages for the system diagnostics and outputs these messages via a programming device/PC, HMI device, the Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
The Web server lets you access the CPU data by means of a network. Evaluations, diagnostics, and modifications are thus possible over long distances. Monitoring and evaluation is possible without STEP 7; all you need is a Web browser. Make sure that you take appropriate measures (e.g. limiting network access, using firewalls) to protect the CPU from being compromised.
Additional information Diagnostics function manual (http://support.automation.siemens.com /WW/view/en/59191792)
· Web server function manual (http://support.automation.siemens. com/WW/view/en/59193560)
· Security with SIMATIC S7 controllers system manual (https://support.industry.siemens.co m/cs/ww/en/view/90885010)
Trace functionality supports you in troubleshooting
Using the trace and logic analyzer
and/or optimizing the user program.
function function manual
You record device tags and evaluate the recordings (http://support.automation.siemens.com with the trace and logic analyzer function. Tags are, for /WW/view/en/64897128)
example, drive parameters or system and user tags of
a CPU.
The device saves the recordings. You can read out and permanently save the recordings with the configuration system (ES), if required. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes.
The trace record can also be displayed through the Web server.
With OPC UA, you can exchange data via an open and manufacturer-neutral communication protocol. The CPU can act as an OPC UA DA server. The CPU acting as the OPC UA server can communicate with OPC UA clients.
Communication function manual (https://support.industry.siemens.com/c s/ww/en/view/59192925)
The OPC UA Companion Specification allows methods to be specified uniformly and independently of the manufacturer. Using these specified methods, you can easily integrate devices from various manufacturers into your plants and production processes.
You can use configuration control to operate different real hardware configurations with a configured maximum configuration of the hardware. This means that, in series machine manufacturing in particular, you have the option of operating/configuring different configuration variants of a machine with a single project.
S7-1500, ET 200MP system manual (http://support.automation.siemens.com /WW/view/en/59191792)
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
21
Product overview 2.4 Firmware functions
Function
Description
Additional information
PROFINET IO
RT (real time)
RT prioritizes PROFINET IO telegrams over standard telegrams. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet telegrams.
PROFINET function manual (http://support.automation.siemens.com /WW/view/en/49948856)
IRT
A reserved bandwidth within the send clock is available
(isochronous real time) for IRT data. The reserved bandwidth ensures that the
IRT data can be transmitted in time-synchronized
intervals, unaffected by other high network loading
(e.g. TCP/IP communication or additional real time
communication). Update times with maximum
determinism can be realized through IRT. Isochronous
applications are possible with IRT.
Isochronous mode
The Isochronous mode system property acquires measured values and process data and processes the signal in a fixed system clock. Isochronous mode thus contributes to high control quality and hence to greater manufacturing precision. Isochronous mode reduces possible fluctuations of the process reaction times to a minimum. Time-assured processing makes higher machine cycles possible.
MRP (Media Redundancy Protocol)
It is possible to establish redundant networks via the Media Redundancy Protocol. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails. The PROFINET devices that are part of this redundant network form an MRP domain.
RT operation is possible with the use of MRP.
MRPD (Media Redundancy with Planned Duplication)
The advantage of the MRP extension MRPD is that, in the event of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no reconfiguration time.
Shared device
The "Shared device" function allows you to divide the modules or submodules of an IO device up among different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required. The "Shared device" function allows the modules or submodules of an IO device to be divided up among different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules that are physically close to each other in one IO device.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
22
Manual, 12/2017, A5E36284845-AB
Product overview 2.4 Firmware functions
Function PROFIenergy Integrated technology Motion Control
Extended Motion Control functions
Description
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. The majority of the energy is saved by the process; the PROFINET device itself only contributes a few watts of savings potential.
Additional information
All CPUs support the S7-1500 Motion Control functions via the technology objects speed axes, positioning axes, synchronized axes, external encoders, cams, cam tracks and measuring inputs.
S7-1500T Motion Control function manual (http://support.automation.siemens.com /WW/view/en/109749262)
· Speed-controlled axis for controlling a drive with speed specification
· Positioning axis for position-controlled positioning of a drive
· Synchronous axis to interconnect with a master value. The axis is synchronized to the master axis position.
· External encoder for detecting the actual position of an encoder and its use as a master value for synchronous operation
· Cams, cam track for position-dependent generation of switching signals
· Measuring input for fast, accurate and event-dependent sensing of actual positions
You program the technology objects with Motion Control instructions according to PLCopen.
The technology CPUs of the SIMATIC S7-1500 also support extended Motion Control functions:
· Advanced synchronization functions Synchronization with specification of the synchronous position Actual value coupling Shifting of the master value at following axis Camming
S7-1500T Motion Control function manual (https://support.industry.siemens.com/c s/ww/en/view/109749263)
S7-1500T Kinematics Functions V4.0 in TIA Portal V15 (https://support.industry.siemens.com/c s/ww/en/view/109749264) Function manual
· Cam
· Up to 4 encoders or measuring systems as actual position for position control
· Controlling of kinematics, such as
Cartesian portals
Roller pickers
Delta pickers
SCARA
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
23
Product overview 2.4 Firmware functions
Function Integrated closed-loop control functionality
Integrated safety Know-how protection Copy protection Access protection Integrity protection
Password provider
Description
Additional information
· PID Compact (continuous PID controller)
PID control function manual
·
PID 3Step (step controller for integrating actuators)
(https://support.industry.siemens.com/c s/ww/en/view/108210036)
· PID Temp (temperature controller for heating and
cooling with two separate actuators)
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
S7-1500, ET 200MP system manual (http://support.automation.siemens.com /WW/view/en/59191792)
Extended access protection provides high-quality protection against unauthorized configuration changes. You can use authorization levels to assign separate rights to different user groups.
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between TIA Portal and CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password input you can connect a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 reads the password automatically for the blocks. This saves you time.
· Optimum block protection because the users do not know the password itself.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
24
Manual, 12/2017, A5E36284845-AB
2.5
2.5.1
Product overview 2.5 Operator controls and display elements
Operator controls and display elements
Front view of the CPU with closed front panel
The figure below shows the front view of the CPU 1515T-2 PN.
LEDs for the current operating mode and diagnostics status of the CPU Display Operator control buttons
Figure 2-2 View of the CPU 1515T-2 PN (with front panel) - front
Note Temperature range for display To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU. For more information on the temperatures at which the display switches itself on and off, refer to the Technical specifications.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
25
Product overview 2.5 Operator controls and display elements
Removing and attaching the front panel with display You can remove and attach the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you remove or attach the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Before you remove or fit the front panel, always switch off the power supply to the S7-1500 automation system in hazardous area zone 2. The CPU maintains its operating mode.
Locking the front panel You can lock the front panel to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panel.
Reference
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, configurable protection levels and local locks in the S7-1500/ ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
26
Manual, 12/2017, A5E36284845-AB
2.5.2
Product overview 2.5 Operator controls and display elements
Front view of the CPU without front flap
The figure below shows the operator controls and connection elements of the CPU 1515T-2 PN.
LEDs for the current operating mode and diagnostics status of the CPU Display connection Slot for the SIMATIC memory card Mode selector LEDs for the 3 ports of the PROFINET interfaces X1 and X2 MAC addresses of the interfaces PROFINET IO interface (X2) with 1 port PROFINET IO interface (X1) with 2 ports Connection for supply voltage Fixing screws
Figure 2-3 View of the CPU 1515T-2 PN (without front panel) - front
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
27
Product overview 2.6 Mode selector
2.5.3
Rear view of the CPU
The following figure shows the connection elements on the rear of the CPU 1515T-2 PN.
Shield contact surfaces Plug-in connection for power supply Plug-in connection for backplane bus Fixing screws
Figure 2-4 View of the CPU 1515T-2 PN - rear
2.6
Mode selector
You use the mode switches to set the operating mode of the CPU.
The following table shows the meaning of the corresponding operation of the operating mode buttons.
Table 2- 6 Meaning of the mode switches
Operation of the mode switch RUN STOP MRES
Meaning RUN mode STOP mode Memory reset
Explanation The CPU is executing the user program. The user program is not executed. (STOP ACTIVE LED lights up) Position for CPU memory reset.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
28
Manual, 12/2017, A5E36284845-AB
Wiring
3
This section provides information on the pin assignment of the individual interfaces and the block diagram of the CPU 1515T-2 PN.
24 V DC supply voltage (X80) The connector for the power supply is plugged in when the CPU ships from the factory. The following table shows the pin assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring opener (one spring opener per terminal)
Bridged internally:
and and
Figure 3-1 Supply voltage connection
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
29
Wiring
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R) The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
PROFINET interface X2 with 1 port (X2 P1)
The assignment corresponds to the Ethernet standard for an RJ45 plug.
Autocrossing is always active on X2. This means the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Reference
You can find additional information on the topics of "Connecting the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
30
Manual, 12/2017, A5E36284845-AB
Wiring
Assignment of the MAC addresses
CPU 1515T-2 PN has two PROFINET interfaces, with the first interface having two ports. The PROFINET interfaces each have a MAC address, and each of the PROFINET ports has its own MAC address. The CPU 1515T-2 PN therefore has five MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC address are lasered on the rating plate on the right side of each CPU 1515T-2 PN.
The table below shows how the MAC addresses are assigned.
Table 3- 1 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3 MAC address 4 MAC address 5
Assignment PROFINET interface X1 (visible in STEP 7 for accessible devices)
Port X1 P1 R (required for LLDP, for example) Port X1 P2 R (required for LLDP, for example) PROFINET interface X2 (visible in STEP 7 for accessible devices) Port X2 P1 (required for LLDP, for example)
Labeling · Front, lasered · Right side, lasered
(start of number range)
· Front and right side, not lasered
· Front and right side, not lasered
· Front, lasered · Right side, not lasered
· Front, not lasered · Right side, lasered
(end of number range)
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
31
Wiring
Block diagram The following figure shows the block diagram of the CPU 1515T-2 PN.
X50
X80 24 V DC
Display RUN/STOP/MRES mode selector Electronics PROFINET 2-port switch Backplane bus interface Internal supply voltage SIMATIC memory card Infeed of supply voltage
Figure 3-2 Block diagram of the CPU 1515T-2 PN
PN X1 P1 R PN X1 P2 R PN X2 P1 L+ M R/S ER MT X1 P1, X1 P2, X2 P1
PROFINET interface X1 Port 1 PROFINET interface X1 Port 2 PROFINET interface X2 Port 1 24 V DC supply voltage Ground RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
32
Manual, 12/2017, A5E36284845-AB
Interrupts, error messages, diagnostics and system alarms
4
The status and error displays of the CPU 1515T-2 PN are described below.
You can find additional information on the topic of "Interrupts" in the STEP 7 online help.
You can find additional information on the topic of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error displays of the CPU
LED display
The following figure shows the CPU 1515T-2 PN LEDs.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED)
Figure 4-1 LED display of the CPU 1515T-2 PN (without front panel)
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
33
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error displays of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1515T-2 PN has three LEDs to signal the current operating status and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED off
LED flashes red
LED lit green
LED off
LED lit green
LED flashes red
LED lit green
LED off
LED lit green
LED off
LED lit green LED lit yellow LED lit yellow LED lit yellow LED lit yellow
LED flashes red LED flashes red
LED off LED off LED flashes red
LED flashes yellow
LED off
LED flashes yellow/green
LED off
MAINT LED LED off LED off LED off LED off
LED lit yellow
LED flashes yellow
LED off
Meaning Missing or insufficient power supply on the CPU.
An error has occurred.
CPU is in RUN mode.
A diagnostics event is pending.
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration An error has occurred.
LED off LED flashes yellow
LED off LED flashes yellow
LED off
LED off
Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card CPU carries out a program with active breakpoint. Startup (transition from RUN STOP)
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
34
Manual, 12/2017, A5E36284845-AB
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error displays of the CPU
RUN/STOP LED
LED flashes yellow/green
ERROR LED LED flashes red
MAINT LED LED flashes yellow
Meaning Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of ports for the CPU 1515T-2 PN.
Table 4- 2 Meaning of the LEDs
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
35
Technical specifications
Article number General information
Product type designation HW functional status Firmware version Engineering with
· STEP 7 TIA Portal configurable/integrated as of version
Configuration control via dataset
Display Screen diagonal [cm]
Control elements Number of keys Mode selector switch
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering
· Mains/voltage failure stored energy time
· Repeat rate, min.
Input current Current consumption (rated value) Inrush current, max. I²t
Power Infeed power to the backplane bus Power consumption from the backplane bus (balanced)
Power loss Power loss, typ.
Memory Number of slots for SIMATIC memory card SIMATIC memory card required
6ES7515-2TM01-0AB0
CPU 1515T-2 PN FS03 V2.5
V15 (FW V2.5) / V14 (FW V2.0) or higher
Yes
6.1 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms 1/s
0.8 A 2.4 A; Rated value 0.02 A²·s
12 W 6.2 W
6.3 W
1 Yes
5
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
36
Manual, 12/2017, A5E36284845-AB
Technical specifications
Article number Work memory
· integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range
· Size, max.
FB · Number range · Size, max.
FC · Number range · Size, max.
OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of DPV1 alarm OBs · Number of isochronous mode OBs · Number of technology synchronous alarm OBs · Number of startup OBs
6ES7515-2TM01-0AB0
750 kbyte 3 Mbyte
32 Gbyte
Yes
30 ns 36 ns 48 ns 192 ns
6 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999 3 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535 500 kbyte
0 ... 65 535 500 kbyte
500 kbyte 100 20 20 20; With minimum OB 3x cycle of 500 µs 50 3 1 2
100
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
37
Technical specifications
Article number · Number of asynchronous error OBs
· Number of synchronous error OBs
· Number of diagnostic alarm OBs Nesting depth
· per priority class Counters, timers and their retentivity S7 counter
· Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max.
Extended retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
· Number of clock memories
Data blocks · Retentivity adjustable
· Retentivity preset Local data
· per priority class, max. Address area
Number of IO modules
6ES7515-2TM01-0AB0 4 2 1
24
2 048
Yes
Any (only limited by the main memory)
Yes
2 048
Yes
Any (only limited by the main memory)
Yes
512 kbyte; In total; available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 472 KB 3 Mbyte; When using PS 60W 24/48/60V DC HF
16 kbyte 8; 8 clock memory bits, grouped into one clock memory byte Yes No
64 kbyte; max. 16 KB per block
8 192; max. number of modules / submodules
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
38
Manual, 12/2017, A5E36284845-AB
Technical specifications
Article number I/O address area
· Inputs · Outputs per integrated IO subsystem
Inputs (volume) Outputs (volume) per CM/CP Inputs (volume) Outputs (volume) Subprocess images · Number of subprocess images, max. Hardware configuration Number of distributed IO systems
Number of DP masters · Via CM
Number of IO Controllers · integrated · Via CM
Rack · Modules per rack, max. · Number of lines, max.
PtP CM · Number of PtP CMs
Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number
6ES7515-2TM01-0AB0
32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image
8 kbyte 8 kbyte
8 kbyte 8 kbyte
32
64; A distributed I/O system is characterized not only by the integration of distributed I/O via PROFINET or PROFIBUS communication modules, but also by the connection of I/O via AS-i master modules or links (e.g. IE/PB-Link)
8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
2 8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
32; CPU + 31 modules 1
the number of connectable PtP CMs is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
39
Technical specifications
Article number Clock synchronization
· supported · in AS, master · in AS, slave · on Ethernet via NTP Interfaces Number of PROFINET interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Functionality · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
PROFINET IO Controller Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP
MRPD PROFIenergy Prioritized startup Number of connectable IO Devices,
max.
Of which IO devices with IRT, max. Number of connectable IO Devices for
RT, max.
6ES7515-2TM01-0AB0
Yes Yes Yes Yes
2
2 Yes Yes; X1
Yes; IPv4 Yes Yes Yes Yes Yes Yes; MRP Automanager according to IEC 62439-2 Edition 2.0
Yes Yes Yes Yes Yes Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50 Yes; Requirement: IRT Yes Yes; Max. 32 PROFINET devices 256; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 64 256
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
40
Manual, 12/2017, A5E36284845-AB
Technical specifications
Article number of which in line, max.
6ES7515-2TM01-0AB0 256
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
Update time for IRT for send cycle of 250 µs for send cycle of 500 µs
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
250 s to 4 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 500 µs of the isochronous OB is decisive 500 µs to 8 ms
for send cycle of 1 ms
1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" Update time = set "odd" send clock (any multiple
send cycles
of 125 µs: 375 µs, 625 µs ... 3 875 µs)
Update time for RT for send cycle of 250 µs
250 µs to 128 ms
for send cycle of 500 µs
500 µs to 256 ms
for send cycle of 1 ms
1 ms to 512 ms
for send cycle of 2 ms
2 ms to 512 ms
for send cycle of 4 ms
4 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
Yes
MRP
Yes
MRPD
Yes; Requirement: IRT
PROFIenergy
Yes
Shared device
Yes
Number of IO Controllers with shared 4 device, max.
Asset management record
Yes; Per user program
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
41
Technical specifications
Article number 2. Interface Interface types
· Number of ports · integrated switch · RJ 45 (Ethernet) Functionality · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy PROFINET IO Controller Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP PROFIenergy Prioritized startup Number of connectable IO Devices,
max.
Number of connectable IO Devices for RT, max.
of which in line, max. Number of IO Devices that can be
simultaneously activated/deactivated, max. Number of IO Devices per tool, max. Updating times
Update time for RT for send cycle of 1 ms
6ES7515-2TM01-0AB0
1 No Yes; X2
Yes; IPv4 Yes Yes Yes Yes Yes No
Yes Yes No Yes No No Yes No 32; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 32
32 8; in total across all interfaces
8 The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
1 ms to 512 ms
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
42
Manual, 12/2017, A5E36284845-AB
Technical specifications
Article number PROFINET IO Device Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP MRPD PROFIenergy Prioritized startup Shared device Number of IO Controllers with shared
device, max. Asset management record Interface types RJ 45 (Ethernet) · 100 Mbps · Autonegotiation · Autocrossing · Industrial Ethernet status LED Protocols Number of connections · Number of connections, max.
· Number of connections reserved for ES/HMI/web
· Number of connections via integrated interfaces
· Number of S7 routing paths SIMATIC communication
· S7 communication, as server · S7 communication, as client · User data per job, max.
6ES7515-2TM01-0AB0
Yes Yes No Yes No No No Yes No Yes 4
Yes; Per user program
Yes Yes Yes Yes
192; via integrated interfaces of the CPU and connected CPs / CMs 10
108
16
Yes Yes See online help (S7 communication, user data size)
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
43
Technical specifications
Article number Open IE communication
· TCP/IP Data length, max. several passive connections per port, supported
· ISO-on-TCP (RFC1006) Data length, max.
· UDP Data length, max. UDP multicast
· DHCP · SNMP · DCP · LLDP Web server · HTTP · HTTPS OPC UA · Runtime license required · OPC UA Server
Application authentication Security policies
User authentication Further protocols
· MODBUS Media redundancy
· Switchover time on line break, typ. · Number of stations in the ring, max. Isochronous mode Isochronous operation (application synchronized up to terminal) Equidistance
6ES7515-2TM01-0AB0
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
Yes; Standard and user pages Yes; Standard and user pages
Yes Yes; Data access (read, write, subscribe), method call, custom address space Yes Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "anonymous" or by user name & password
Yes; MODBUS TCP
200 ms; For MRP, bumpless for MRPD 50
Yes; With minimum OB 6x cycle of 500 µs
Yes
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
44
Manual, 12/2017, A5E36284845-AB
Technical specifications
Article number S7 message functions
Number of login stations for message functions, max. Program alarms Number of configurable program alarms Number of simultaneously active program alarms · Number of program alarms · Number of alarms for system diagnostics · Number of alarms for motion technology
objects Test commissioning functions
Joint commission (Team Engineering)
Status block
Single step Number of breakpoints Status/control · Status/control variable · Variables
· Number of variables, max. of which status variables, max. of which control variables, max.
Forcing · Forcing, variables · Number of variables, max.
Diagnostic buffer · present · Number of entries, max. of which powerfail-proof
Traces · Number of configurable Traces
Interrupts/diagnostics/status information Diagnostics indication LED
· RUN/STOP LED · ERROR LED · MAINT LED · Connection display LINK TX/RX
6ES7515-2TM01-0AB0
32 Yes 10 000
600 200 160
Yes; Parallel online access possible for up to 8 engineering systems Yes; Up to 8 simultaneously (in total across all ES clients) No 8
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Peripheral inputs/outputs 200
Yes 3 200 500
4; Up to 512 KB of data per trace are possible
Yes Yes Yes Yes
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
45
Technical specifications
Article number Supported technology objects
Motion Control
· Number of available Motion Control resources for technology objects (except cam disks)
· Required Motion Control resources per speed-controlled axis per positioning axis per synchronous axis per external encoder per output cam per cam track per probe
· Number of available Extended Motion Control resources for technology objects
· Required Extended Motion Control resources for each cam for each set of kinematics
· Positioning axis Number of positioning axes at motion control cycle of 4 ms (typical value) Number of positioning axes at motion control cycle of 8 ms (typical value)
Controller · PID_Compact
· PID_3Step
· PID-Temp
Counting and measuring · High-speed counter Standards, approvals, certificates Suitable for safety functions
6ES7515-2TM01-0AB0
Yes; Note: The number of technology objects affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER 2 400
40 80 160 80 20 160 40 120
2 30
7
14
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
No
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
46
Manual, 12/2017, A5E36284845-AB
Technical specifications
Article number Ambient conditions Ambient temperature during operation
· horizontal installation, min. · horizontal installation, max.
· vertical installation, min. · vertical installation, max.
Ambient temperature during storage/ transportation
· min. · max. Configuration Programming Programming language
LAD FBD STL SCL GRAPH Know-how protection · User program protection/password protection · Copy protection · Block protection Access protection · Password for display · Protection level: Write protection · Protection level: Read/write protection · Protection level: Complete protection Cycle time monitoring · lower limit · upper limit Dimensions Width Height Depth Weights Weight, approx.
6ES7515-2TM01-0AB0
0 °C 60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off 0 °C 40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C 70 °C
Yes Yes Yes Yes Yes
Yes
Yes Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
70 mm 147 mm 129 mm
830 g
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
47
Technical specifications
General technical specifications You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP System Manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
48
Manual, 12/2017, A5E36284845-AB
Dimension drawing
A
A.1
Dimensional drawing of the CPU 1515T-2 PN
This section contains the dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with the front panel open. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimensional drawings of the CPU 1515-2 PN
Figure A-1 Dimensional drawing of the CPU 1515T-2 PN, front and side view
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
Manual, 12/2017, A5E36284845-AB
49
Dimension drawing A.1 Dimensional drawing of the CPU 1515T-2 PN
Figure A-2 Dimensional drawing of the CPU 1515T-2 PN, side view with open front panel
CPU 1515T-2 PN (6ES7515-2TM01-0AB0)
50
Manual, 12/2017, A5E36284845-AB
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
SIMATIC
S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual
Preface
S7-1500 / ET 200MP Documentation Guide
1
Product overview
2
Connecting up
3
Interrupts, error messages,
diagnostics and system
4
alarms
Technical specifications
5
Dimensional drawing
A
11/2019
A5E46418484-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E46418484-AA 10/2019 Subject to change
Copyright © Siemens AG 2019. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system/ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1516-3 PN/DP.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
3
Preface
Security information Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSSFeed visit (https://www.siemens.com/industrialsecurity).
Siemens Industry Online Support You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (http://www.siemens.com/automation/service&support).
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
4
Equipment Manual, 11/2019, A5E46418484-AA
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
5
Table of contents
Preface ...................................................................................................................................................... 3
1 S7-1500 / ET 200MP Documentation Guide .............................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
New functions in firmware version V2.8................................................................................... 9
2.2
Area of application of the SIMATIC S7-1500 CPUs .............................................................. 13
2.3
Hardware properties .............................................................................................................. 21
2.4
Firmware functions................................................................................................................. 23
2.5 2.5.1 2.5.2 2.5.3
Operating and display elements ............................................................................................ 27 Front view of the CPU with closed front panel....................................................................... 27 Front view of the CPU without front panel or display and view from below........................... 29 Rear view of the CPU ............................................................................................................ 31
2.6
Operating mode buttons ........................................................................................................ 32
3 Connecting up ......................................................................................................................................... 33
4 Interrupts, error messages, diagnostics and system alarms .................................................................... 38
4.1
Status and error display of the CPU ...................................................................................... 38
5 Technical specifications ........................................................................................................................... 42
A Dimensional drawing ............................................................................................................................... 57
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
6
Equipment Manual, 11/2019, A5E46418484-AA
S7-1500 / ET 200MP Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
7
S7-1500 / ET 200MP Documentation Guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
8
Equipment Manual, 11/2019, A5E46418484-AA
Product overview
2
2.1
New functions in firmware version V2.8
This section contains an overview of the most important new firmware functions of the CPU since the last edition of the manual.
New functions of the CPU in firmware version V2.8
New functions IP forwarding
Direct data exchange
Applications
IP forwarding forwards IP data through the CPU from one IP subnet to another IP subnet. During IP forwarding, the CPU automatically creates an IP route table from the IP configuration in STEP 7.
Customer benefits
Where can I find information?
· Simplified integration of devices for remote access, e.g. for diagnostics during remote maintenance or firmware update
· Simple access from the control
Communication function manual (https://support.industry.sie mens.com/cs/ww/en/view/5 9192925)
level to the field level for configu-
ration and parameter assignment
of devices
In the case of direct data exchange, an S7-1500 CPU provides cyclic user data from the I/O area to one or more partners.
Example: You can access the Web server of a drive connected to the X1 interface of the CPU from a computer connected to the X2 interface of the CPU.
The "Direct data exchange" function enables deterministic, isochronous I/O communication between multiple S7-1500 CPUs.
PROFINET function manual (https://support.industry.sie mens.com/cs/ww/en/view/4 9948856)
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
9
Product overview 2.1 New functions in firmware version V2.8
New functions
API (Application Programming Interface)
Applications
The CPU has a web-based API (Application Programming Interface) as an interface for reading and writing CPU data. The API supports all conventional browsers and command line programs, such as cURL and Wget.
Customer benefits
· Established standard mechanisms for creating Web pages:
Automation Web Programming commands (AWP commands) are no longer required for output of CPU data · No dependency between custom Web pages and CPU program:
Where can I find information?
Web server (https://support.industry.sie mens.com/cs/ww/en/view/5 9193560) function manual
No synchronization between user program and Web server required by the SFC 99 instruction
· Lower communication load:
A smaller data packet is transferred between server and client (JSON instead of HTML of the custom Web page generated by the CPU). This improves the communication performance. The CPU needs less runtime to generate the information and make it available.
· Secure data traffic:
Distributed synchronous operation (T-CPUs)
Cross-device trace
API exclusively supports the "HTTPS" transfer protocol
Master value and synchronous
· Distribution of high axis configu- S7-1500T Motion Control
axes can be distributed over multi-
ration limits over different CPUs function manuals
ple controllers.
(https://support.industry.sie
Isochronous coupling between the master axis and the following axis via PROFINET IO with IRT.
·
Use on modular machines and multi-axis machines (e.g. printing machines)
mens.com/cs/ww/en/view/1 09751049)
Compensation of delay times for · Highly precise synchronous op-
communication and different clock
eration across devices
rates.
Coordination of traces on different · Extensive trigger options for
Using the trace and logic
devices
faster localization of sporadically analyzer function
· Support of multiple CPUs · Support of different device
occurring errors · Simple combination of related
(https://support.industry.sie mens.com/cs/ww/en/view/6 4897128) function manual
types
traces
Visualization in a shared chart
Support of alternative trigger sources
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
10
Equipment Manual, 11/2019, A5E46418484-AA
Product overview 2.1 New functions in firmware version V2.8
New functions of the CPU in firmware version V2.6
New functions OPC UA client
Isochronous mode for central I/O
Applications
In addition to the OPC UA server, an OPC UA client is integrated in the CPU. Using the corresponding OPC UA communication instructions, you can:
Customer benefits
You can perform, for example, vertical communication to MES systems/cloud services or IO controllerIO controller communication.
Where can I find information?
Communication (https://support.industry.sie mens.com/cs/ww/en/view/5 9192925) function manual
· Call methods
· Read and write data
Isochronous mode is also possible · Optimized controls through con- · PROFINET
for modules that are inserted next
stant, calculable dead times
(https://support.industry
to the CPU in a centralized configuration. In this way, you can implement the following functions, for example:
· Dynamic control tasks
· Measuring input
· Cam
· · ·
Determinism, reliable reproducibility of response times
Consistent (simultaneous) reading in of input data
Consistent (simultaneous) output of output data
·
.siemens.com/cs/ww/en /view/49948856) function manual
Isochronous mode function manual (https://support.industry .siemens.com/cs/ww/en
· Dosing processes, high-speed
/view/109755401)
analog value acquisition with
· S7-1500T Motion Con-
oversampling
trol function manuals
(https://support.industry
.siemens.com/cs/ww/en
/view/109751049)
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
11
Product overview 2.1 New functions in firmware version V2.8
New functions of the CPU in firmware version V2.5
New functions
Testing with breakpoints
Applications
Customer benefits
Testing SCL and STL program
·
code with the help of breakpoints.
When testing with breakpoints, you execute a program from one
·
breakpoint to another.
Localization of logic errors step by step
Simple and quick analysis of complex programs prior to actual commissioning
Where can I find information?
S7-1500, ET 200MP (https://support.industry.sie mens.com/cs/ww/en/view/5 9191792) system manual
· Recording of current values within individual executed loops
· Use of breakpoints for program validation also possible in SCL/STL networks within LAD/FBD blocks
Arithmetic functions for trace
In the case of completed meas- · Generation of unavailable infor-
urements, you can combine the
mation
measured signals mathematically
with each other and thus generate · Post-processing of measure-
signals that were not recorded.
ments
· Measurement of signal paths
(e.g. mean value)
· Using the trace and logic analyzer function (https://support.industry .siemens.com/cs/ww/en /view/64897128) function manual
· Web server (https://support.industry .siemens.com/cs/ww/en /view/59193560) function manual
Importing and exporting ASCII files
Using the FileReadC function, you can read out a binary file (ASCII file) in the user program which was stored on the SIMATIC memory card of the CPU via the Web server.
Using the FileWriteC function, you can store a binary file (ASCII file) on the memory card of the CPU using the user program; this file can be read via the Web server.
Complex file structures are used in free ASCII format on the SIMATIC memory card, e.g. to:
· Read in recipes for which CSV is not flexible enough
· Read in complex parameter assignments or configuration files
· Output complex files for documentation
STEP 7 online help
Sending encrypt- It is possible to send encrypted
High security through encrypted
ed emails
emails via the integrated interfaces transmission of data
of the CPU
Reference
You can find an overview of all new functions, improvements and revisions in the respective firmware versions on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109478459).
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
12
Equipment Manual, 11/2019, A5E46418484-AA
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
2.2
Area of application of the SIMATIC S7-1500 CPUs
Area of application SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation. SIMATIC S7-1500 is the cost-effective and convenient solution for a broad range of tasks and offers the following advantages: Modular, fanless design Simple realization of distributed structures User-friendly handling Areas of application of the SIMATIC S7-1500 automation system include, for example: Special-purpose machines Textile machinery Packaging machines General mechanical engineering Controller engineering Machine tool engineering Installation engineering Electrical industry and crafts Automobile engineering Water/waste water Food & Beverage Areas of application of the SIMATIC S7-1500R/H redundant system include, for example: Tunnels Airports (e.g. baggage conveyors) Subways Shipbuilding Wastewater treatment plants High-bay warehouses Areas of application of the SIMATIC S7-1500T automation system for advanced motion control applications include, for example: Packaging machines Converting applications Assembly automation Pick-and-place automation Palletizers
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
13
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
You can choose between CPUs with various levels of performance and a comprehensive range of modules with many convenient functions. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial suitability due to the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500, S7-1500R/H and S7-1500T automation systems.
Performance segments of the CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 1 Standard CPUs
CPU
Performance segment
CPU 1511-1 PN Standard CPU for small to mid-range applications
CPU 1513-1 PN Standard CPU for midrange applications
CPU 1515-2 PN Standard CPU for midrange to large applications
CPU 15163 PN/DP
Standard CPU for demanding applications and communication tasks
CPU 15173 PN/DP
Standard CPU for demanding applications and communication tasks
CPU 15184 PN/DP
Standard CPU for highperformance applications, demanding communication tasks and very short reaction times
CPU 15184 PN/DP MFP
Standard CPU for highperformance applications, demanding communication tasks, very short reaction times and C/C++ blocks for the user program
PROFIBUS interfaces
---1
1
1
1
PROFINET IO RT/IRT interfaces
1 1 1 1
1
1
1
PROFINET IO RT
interface
--1 1
1
1
1
Basic PROFINET functionality
-----
--
1
1
* 50 MB of the integrated work memory is reserved for the function library of CPU runtime
Work memory
1.15 MB 1.8 MB 3.5 MB 6 MB
10 MB
24 MB
74* MB
Processing time for bit operations
60 ns 40 ns 30 ns 10 ns
2 ns
1 ns
1 ns
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
14
Equipment Manual, 11/2019, A5E46418484-AA
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
Table 2- 2 Redundant CPUs
CPU
CPU 1513R-1 PN CPU 1515R-2 PN CPU 1517H-3 PN
Performance segment
Redundant CPU for smaller to mid-range applications Redundant CPU for mid-range to large applications Redundant CPU for demanding applications and communication tasks
PROFIBUS interfaces
--
--
--
PROFINET IO RT/IRT interfaces
1
1
1
PROFINET IO RT
interface
--
--
--
Basic PROFINET functionality
--
1
1
Work memory
1.8 MB
Processing time for bit operations
80 ns
3.5 MB
60 ns
10 MB
4 ns
Table 2- 3 Compact CPUs
CPU
CPU 1511C-1 PN CPU 1512C-1 PN
Performance segment
Compact CPU for small to mid-range applications Compact CPU for mid-range applications
PROFIBUS interfaces
--
--
PROFINET IO RT/IRT interfaces
1
1
PROFINET IO RT inter-
face
--
--
Basic PROFINET functionality
--
--
Work memory
1.175 MB
Processing time for bit operations
60 ns
1.25 MB
48 ns
Table 2- 4 Fail-safe CPUs
CPU
Performance segment
CPU 1511F-1 PN CPU 1511TF-1 PN CPU 1513F-1 PN CPU 1515F-2 PN
Fail-safe CPU for small to mid-range applications
Fail-safe technology CPU for small to mid-range applications
Fail-safe CPU for mid-range applications
Fail-safe CPU for mid-range to large applications
PROFIBUS interfaces
---
---
PROFINET IO RT/IRT interfaces
1
1
1
1
PROFINET IO RT
interface
--
--
--
1
Basic PROFINET functionality
--
--
--
--
Work memory
1.225 MB
Processing time for bit operations
60 ns
1.225 MB
60 ns
1.95 MB
40 ns
3.75 MB
30 ns
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
15
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
CPU
CPU 1515TF-2 PN
CPU 1516F3 PN/DP
CPU 1516TF3 PN/DP
CPU 1517F3 PN/DP
Performance segment
Fail-safe technology CPU for demanding applications and communication tasks
Fail-safe CPU for demanding applications and communication tasks
Fail-safe technology CPU for demanding applications and communication tasks
Fail-safe CPU for demanding applications and communication tasks
PROFIBUS interfaces
--
1
1
1
PROFINET IO RT/IRT interfaces
1
1
1
1
PROFINET IO RT
interface
1
1
1
1
Basic PROFINET functionality
--
--
--
--
Work memory
3.75 MB 6.5 MB 6.5 MB 11 MB
Processing time for bit operations
30 ns
10 ns
10 ns
2 ns
CPU 1517TF-
Fail-safe technology
1
1
1
--
3 PN/DP
CPU for demanding
applications and
communication tasks
CPU 1518F-
Fail-safe CPU for
1
1
1
1
4 PN/DP
high-performance
applications, de-
manding communi-
cation tasks and
very short reaction
times
CPU 1518F-4
Fail-safe CPU for
1
1
1
1
PN/DP MFP
high-performance
applications, de-
manding communi-
cation tasks, very
short reaction times
and C/C++ blocks
for the user program
* 50 MB of the integrated work memory is reserved for the function library of CPU runtime
11 MB
2 ns
26 MB
1 ns
76* MB
1 ns
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
16
Equipment Manual, 11/2019, A5E46418484-AA
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
Table 2- 5 Technology CPUs
CPU
CPU 1511T-1 PN
CPU 1515T-2 PN
CPU 1516T3 PN/DP
CPU 1517T3 PN/DP
CPU 1511TF-1 PN CPU 1515TF-2 PN CPU 1516TF3 PN/DP CPU 1517TF3 PN/DP
Performance segment PROFIBUS PROFINET PROFINET
interfaces
IO RT/IRT interfaces
IO RT interface
Technology CPU for
--
1
--
small to mid-range
applications
Technology CPU for
--
1
1
mid-range to large
applications
Technology CPU for
1
1
1
high-end applica-
tions and communi-
cation tasks
Technology CPU for
1
1
1
complex applications
and communication
tasks
These CPUs are described in the fail-safe CPUs
Basic PROFINET functionality
--
--
--
--
Work memory
1.225 MB
Processing time for bit operations
60 ns
3.75 MB
30 ns
6.5 MB
10 ns
11 MB
2 ns
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Frequency meters Period duration measurement Pulse width modulation (PWM output)
Pulse Train Output (PTO output) Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 6 (max. 100 kHz)
6 channels
Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
17
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
Integrated Motion Control technology functions All CPUs of the SIMATIC S7-1500 automation system support motion control technology functions. STEP 7 provides PLCopen-standardized Motion Control instructions for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axes Positioning axes Synchronous axes External encoders Cam Cam track Measuring input The technology CPUs of the SIMATIC S7-1500-automation system offer enhanced Motion Control functions: Advanced synchronization functions Synchronization with specification of the synchronous position Actual value coupling Shifting of the master value at the following axis Camming Up to 4 encoder or measuring systems as actual position for position control Cam Kinematics for control of: Cartesian portals Roller pickers Jointed-arm robots Delta pickers SCARA robots Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
Additional integrated technology functions For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller series offers extensive trace functions for all CPU tags. In addition to drive integration, the SIMATIC S7-1500 controller series has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimum control quality.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
18
Equipment Manual, 11/2019, A5E46418484-AA
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
Other technology functions
Technology modules also implement functions such as high-speed counting, position detection, measuring functions and pulse generators (PTO, PWM and frequency output). With the CPU 1511C-1 PN and CPU 1512C-1 PN compact CPUs, these functions are already integrated and can be implemented without additional technology modules.
SIWAREX is a versatile and flexible weighing module which you can use as a static scale for operation.
Redundant CPUs
The CPUs of the S7-1500R/H redundant system offer a high degree of reliability and system availability. A redundant configuration of the most important automation components reduces the likelihood of production downtimes and the consequences of component errors.
The higher the risks and costs of a production downtime, the more worthwhile the use of a redundant system. The avoidance of production downtimes compensates for the generally higher investment costs.
Security Integrated
In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks.
Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU.
In addition, you can assign various access rights to different user groups in the controller using four different authorization levels.
Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller.
The use of an Ethernet CP (CP 1543-1) provides you with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated
The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally.
These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration also provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications.
The fail-safe CPUs are certified for use in safety mode up to:
Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010
Performance Level (PL) e and Category 4 according to ISO 13849-1:2015 or EN ISO 13849-1:2015
Additional password protection for F-configuration and F-program is set up for IT security.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
19
Product overview 2.2 Area of application of the SIMATIC S7-1500 CPUs
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Error messages are shown on the display directly in plain text. When performing servicing, you can minimize plant downtimes by quickly accessing the diagnostics alarms. Detailed information about this and a multitude of other display functions is available in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterialas/interactive-manuals/getting-started_simatic-s7-1500/disp_tool/start_en.html).
Uniform front connectors for all modules and integrated potential jumpers for flexible formation of potential groups simplify storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the SIMATIC S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information and alarms from the drives are displayed consistently and in plain text:
On the CPU display
In STEP 7
On the HMI
On the Web server
This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostic information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server in up to three project languages. The HMI takes over the display in the project languages defined for the CPU. If you require alarm texts in additional languages, you can load them into your HMI via the configured connection. The CPU, STEP 7 and your HMI ensure data consistency without additional engineering steps. The maintenance work is easier.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
20
Equipment Manual, 11/2019, A5E46418484-AA
2.3
Hardware properties
Article number 6ES7516-3AN02-0AB0
View of the module The figure below shows the CPU 1516-3 PN/DP.
Product overview 2.3 Hardware properties
Figure 2-1 CPU 1516-3 PN/DP product image
Note Protective film Please note that the CPU is supplied with a removable protective film on the display.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
21
Product overview 2.3 Hardware properties
Properties
The 1516-3 PN/DP has the following technical properties:
Property
Description
Additional information
CPU display
All CPUs of the SIMATIC S7-1500 product series
· S7-1500, ET 200MP
feature a display with plain text information. The
(http://support.automation.siemens.
display provides information on order numbers, firmware version and serial numbers of all connected modules. In addition, you can set the IP address of
com/WW/view/en/59191792) system manual
the CPU and make further network settings. The
· SIMATIC S7-1500 Display Simula-
display shows occurring error messages directly in
tor
plain text.
(http://www.automation.siemens.co
In addition to the functions listed here, a multitude of other functions that are described in the SIMATIC
m/salesmaterial-as/interactivemanuals/getting-started_simatic-
S7-1500 Display Simulator are shown on the display.
s7-1500/disp_tool/start_en.html)
Supply voltage
The 24 V DC supply voltage is fed in via a 4-pin plug · Section Connecting up (Page 33)
located at the bottom of the CPU.
· S7-1500, ET 200MP
(http://support.automation.siemens.
com/WW/view/en/59191792) sys-
tem manual
PROFINET IO PROFINET interface (X1 P1R and X1 P2R)
PROFINET interface (X2 P1)
Operation of the CPU as · IO controller · I-device
The interface has two ports. In addition to basic PROFINET functionality, it also supports PROFINET IO RT (real time) and IRT (isochronous real time).
The interface has one port. In addition to basic PROFINET functionality, it also supports PROFINET IO RT (real time).
· IO controller: As an IO controller, the CPU addresses the connected IO devices
· I-device: As an I-device (intelligent IO device), the CPU is assigned to a higher-level IO controller and is used in the process as an intelligent preprocessing unit of sub-processes
PROFINET (https://support.industry.siemens.com/ cs/ww/en/view/49948856) function manual
PROFIBUS DP
PROFIBUS interface (X3) The interface is used for connecting to a PROFIBUS network.
Operation of the CPU as a In the role as a DP master, the CPU addresses the
DP master
connected DP slaves. It is not possible for the CPU
to take the role of a DP slave.
PROFIBUS (https://support.industry.siemens.com/ cs/ww/en/view/59193579) function manual
Accessories
You can find information on "Accessories/spare parts" in the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
22
Equipment Manual, 11/2019, A5E46418484-AA
Product overview 2.4 Firmware functions
2.4
Firmware functions
Functions
The CPU 1516-3 PN/DP supports the following firmware functions:
Function Integrated system diagnostics Integrated Web server
Integrated trace functionality
OPC UA
Description
The system automatically generates the alarms for the system diagnostics and outputs these alarms via a programming device/PC, HMI device, the Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
The Web server lets you access the CPU data by means of a network. Evaluations, diagnostics, and modifications are thus possible over long distances. Monitoring and evaluation is possible without STEP 7; all you need is a Web browser. Make sure that you take appropriate measures (e.g. limiting network access, using firewalls) to protect the CPU from being compromised.
Additional information Diagnostics (https://support.industry.siemens.com/ cs/ww/en/view/59192926) function manual
· Web server (https://support.industry.siemens.c om/cs/ww/en/view/59193560) function manual
· Security with SIMATIC S7 controllers (https://support.industry.siemens.c om/cs/ww/en/view/90885010) system manual
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
Using the trace and logic analyzer function (http://support.automation.siemens.co m/WW/view/en/64897128) function manual
The device saves the recordings. You can read out and permanently save the recordings with the configuration system (ES), if required. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes.
The trace recording can also be displayed through the Web server.
With OPC UA, data is exchanged via an open and vendor-neutral communication protocol.
The CPU can act as OPC UA server. The CPU can communicate with OPC UA clients as an OPC UA server.
Communication (https://support.industry.siemens.com/ cs/ww/en/view/59192925) function manual
In turn, the CPU can access an OPC UA server as OPC UA client, allow the OPC UA server to run methods and read out information from the OPC UA server.
Through OPC UA Companion Specification, methods can be specified in a uniform and vendor-neutral way. The specified methods enable you to integrate devices from a wide range of manufacturers into your plants and production processes more easily.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
23
Product overview 2.4 Firmware functions
Function Configuration control
PROFINET IO RT (real time)
IRT (isochronous real time)
Isochronous mode
MRP (Media Redundancy Protocol)
MRPD (Media Redundancy with Planned Duplication)
Description
You can use configuration control to operate different real hardware configurations with a configured maximum configuration of the hardware. This means especially in series machine manufacturing you have the option of operating/configuring different configuration variants of a machine with a single project.
RT prioritizes PROFINET IO frames over standard frames. This ensures the required determinism in the automation technology. In this process, the data is transferred via prioritized Ethernet frames.
A reserved bandwidth within the send clock is available for IRT data. The reserved bandwidth ensures that the IRT data can be transmitted in timesynchronized intervals, unaffected by other high network loads (e.g. TCP/IP communication or additional real time communication). Update times with maximum determinism can be realized through IRT. Isochronous applications are possible with IRT.
The Isochronous mode system property records measured values and process data and processes the signals in a fixed system clock. Isochronous mode contributes to high control quality and hence to greater manufacturing precision. Isochronous mode reduces possible fluctuations of the process reaction times to a minimum. Time-assured processing makes higher machine cycles possible.
It is possible to establish redundant networks via the Media Redundancy Protocol. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails. The PROFINET devices that are part of this redundant network form an MRP domain.
RT operation is possible with the use of MRP.
The advantage of the MRP extension MRPD is that, in the event of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no ring reconfiguration time.
Additional information S7-1500, ET 200MP (http://support.automation.siemens.co m/WW/view/en/59191792) system manual
PROFINET (https://support.industry.siemens.com/ cs/ww/en/view/49948856) function manual
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
24
Equipment Manual, 11/2019, A5E46418484-AA
Product overview 2.4 Firmware functions
Function Shared device
PROFIenergy Integrated technology Motion Control
Integrated closed-loop control functionality
Description
The "Shared device" function allows you to divide the modules or submodules of an IO device up among different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required. The "Shared device" function allows the modules or submodules of an IO device to be divided up among different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules that are physically close to each other in one IO device.
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. The goal is that the process is only provided with the energy that is absolutely required. Most of the energy is saved by the process. The PROFINET device itself only contributes a few watts to the savings potential.
Additional information
S7-1500 CPUs support the controlled positioning and traveling of axes via S7-1500 Motion Control functions by means of the following technology objects:
Speed-controlled axes, positioning axes, synchronized axes, external encoders, cams, cam tracks and measuring inputs
S7-1500T Motion Control function manuals (https://support.industry.siemens.com/ cs/ww/en/view/109751049)
· Speed-controlled axis for controlling a drive with speed specification
· Positioning axis for positioning of a drive with closed-loop position control
· Synchronous axis to interconnect with a master value. The axis is synchronized to the master axis position
· External encoder for detecting the actual position of an encoder and its use as a master value for synchronous operation
· Cams, cam track for position-dependent generation of switching signals
· Measuring input for fast, accurate and eventdependent sensing of actual positions
· PID Compact (continuous PID controller)
PID control
· PID 3Step (step controller for integrating actuators)
(https://support.industry.siemens.com/ cs/ww/en/view/108210036) function manual
· PID Temp (temperature controller for heating and
cooling with two separate actuators)
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
25
Product overview 2.4 Firmware functions
Function Integrated safety Know-how protection Copy protection
Access protection Integrity protection
Password provider
Description
Additional information
The know-how protection protects user blocks against unauthorized access and modifications.
S7-1500, ET 200MP system manual
Copy protection links user blocks with the serial number of one or more SIMATIC memory cards or the serial number of one or more CPUs. User programs cannot run without the corresponding SIMATIC memory card or CPU.
You can use authorization levels to assign separate rights to different users.
The CPUs feature integrity protection by default. Integrity protection identifies possible manipulation of engineering data on the SIMATIC memory card or during data transfer between STEP 7 and the CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulation of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password input, you can connect a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 reads in the password automatically for the blocks. This saves you time.
· Optimum block protection because the users themselves do not know the password.
Reference
You can find additional information on the topic of "Integrated security/Access protection" in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
26
Equipment Manual, 11/2019, A5E46418484-AA
2.5
2.5.1
Operating and display elements
Product overview 2.5 Operating and display elements
Front view of the CPU with closed front panel
The following figure shows the front view of the CPU 1516-3 PN/DP.
LEDs for the current operating mode and diagnostic status of the CPU Display Operator control buttons
Figure 2-2 View of the CPU 1516-3 PN DP (with front panel) - front
Note Temperature range for display To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU. For more information on the temperatures at which the display switches itself on and off, refer to the Technical specifications (Page 42).
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
27
Product overview 2.5 Operating and display elements
Removing and fitting the front panel or the display You can remove and fit the front panel or the display during operation.
WARNING Personal injury and damage to property may occur Personal injury or material damage can occur in zone 2 hazardous areas if you remove or fit the display while the S7-1500 automation system is running. Before you remove or insert the display in zone 2 hazardous areas, always make sure that the power supply to the S7-1500 automation system is switched off.
Locking the front panel You can lock the front panel to protect the SIMATIC memory card and the operating mode buttons of the CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panel.
Reference
Figure 2-3 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, configurable protection levels and local locks in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
28
Equipment Manual, 11/2019, A5E46418484-AA
2.5.2
Product overview 2.5 Operating and display elements
Front view of the CPU without front panel or display and view from below
The following figure shows the operator controls and connection elements of the CPU 1516-3 PN/DP.
LEDs for the current operating mode and diagnostic status of the CPU Connector for the display PROFIBUS interface (X3) Arrow keys LED displays for the PROFINET interface STOP and RUN operating mode buttons STOP-ACTIVE LED Connector for the supply voltage
Figure 2-4 View of the CPU 1516-3 PN/DP (without front panel or display) - front
Note Removing the display
Only remove the display if it is faulty.
You can find information on removing and replacing displays in the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
29
Product overview 2.5 Operating and display elements
Slot for the SIMATIC memory card PROFINET IO interface (X1) with 2 ports PROFINET IO interface (X2) with 1 port Connector for supply voltage Fastening screw
Figure 2-5 View of the CPU 1516-3 PN/DP - bottom
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
30
Equipment Manual, 11/2019, A5E46418484-AA
2.5.3
Product overview 2.5 Operating and display elements
Rear view of the CPU
The following figure shows the connection elements on the rear of the CPU 1516-3 PN/DP.
Shield contact surfaces Plug-in connection for power supply Plug-in connection for backplane bus Fixing screws
Figure 2-6 View of the CPU 1516-3 PN/DP - rear
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
31
Product overview 2.6 Operating mode buttons
2.6
Operating mode buttons
You use the operating mode buttons to:
Request a change to a specific operating state
Disable or enable the change to a specific operating state
(if the operating mode button STOP is active, for example, you cannot switch the CPU to RUN via a communication task configured in the TIA Portal or via the display)
The following table shows the meaning of the corresponding operation of the operating mode buttons.
Table 2- 6 Meaning of the operating mode buttons
Operation of the operating mode buttons RUN
Meaning RUN mode
STOP
STOP mode
1. Press the operating mode button STOP. Manual memory reset
Result: The RUN/STOP LED lights up yellow.
(with SIMATIC memory card inserted)
2. Press the operating mode button STOP or
until the RUN/STOP LED lights up for Reset to factory settings (without
the 2nd time and remains continuously lit inserted SIMATIC memory card)
(this takes three seconds). After this, re-
lease the button.
3. Press the operating mode button STOP again within the next three seconds.
Explanation The CPU has permission to go to RUN. The CPU does not have permission to go to RUN. The CPU is executing a memory reset.
or The CPU is being reset to factory settings. You can find additional information in the S7-1500/ET 200MP system manual (https://support.industry.siemens.com/ cs/ww/en/view/59191792).
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
32
Equipment Manual, 11/2019, A5E46418484-AA
Connecting up
3
This section provides information on the terminal assignment of the individual interfaces and the block diagram of the CPU 1516-3 PN/DP.
24 V DC supply voltage (X80)
The connector for the power supply is plugged in when the CPU ships from the factory.
The following table shows the signal names and the descriptions of the pin assignment of the 24 V DC supply voltage.
Table 3- 1 Pin assignment 24 V DC supply voltage
View Connector
Signal name 1)
Description
1 1L+ 2 1M 3 2M 4 2L+
+ 24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through 2) + 24 V DC of the supply voltage for loop-through 2)
1) 1L+ and 2L+ as well as 1M and 2M are bridged internally 2) Maximum 10 A permitted
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
33
Connecting up
PROFINET interface X1 with 2-port switch (X1 P1R and X1 P2R) The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
PROFINET interface X2 with 1 port (X2 P1)
The assignment corresponds to the Ethernet standard for an RJ45 plug.
Autocrossing is always active on X2. This means the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Removing the PROFINET plug You need a screwdriver (max. blade width 2.5 mm) to remove the PROFINET plug.
PROFIBUS interface X3
The table below shows the terminal assignment of the PROFIBUS interface. The assignment corresponds to the standard assignment of an RS485 interface.
Table 3- 2
PROFIBUS interface terminal assignment
View
Signal name
1
-
2
-
3 RxD/TxD-P
4
RTS
5
M5V2
6
P5V2
7
-
8 RxD/TxD-N
9
-
Description Data line B Request To Send Data reference potential (from station) Supply plus (from station) Data line A -
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
34
Equipment Manual, 11/2019, A5E46418484-AA
Connecting up
Note
Supply of I/O devices
The CPU 1516-3 PN/DP does not provide a 24 V DC power supply on the PROFIBUS interface. I/O devices (for example, PC adapter USB 6ES7972-0CB20-0XA0) are only operational on the interface in conjunction with a plug-in power supply set for external power supply.
The innovative successor product, PC adapter USB A2, receives the required power supply via the USB port. This means it does not need a 24 V DC supply voltage and can be operated without a plug-in power supply set for external power supply.
Removing the display
You can find a description of how to remove and replace the display in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Reference
You can find additional information on the topics of "Connecting the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Assignment of the MAC addresses
CPU 1516-3 PN/DP has two PROFINET interfaces, with the first interface having two ports. The PROFINET interfaces each have a MAC address, and each of the PROFINET ports has its own MAC address. The CPU 1516-3 PN/DP therefore has five MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC addresses are printed on the rating plate on the right side of each CPU 1516-3 PN/DP.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
35
Connecting up
The table below shows how the MAC addresses are assigned.
Table 3- 3 Assignment of the MAC addresses
MAC address 1
Assignment PROFINET interface X1 (visible in STEP 7 in accessible devices)
MAC address 2 MAC address 3 MAC address 4
MAC address 5
Port X1 P1R (required for LLDP, for example) Port X1 P2R (required for LLDP, for example) PROFINET interface X2 (visible in STEP 7 in accessible devices) Port X2 P1 (required for LLDP, for example)
Labeling · Front printed · Right side printed
(start of number range) ----Front printed
Right side printed (end of number range)
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
36
Equipment Manual, 11/2019, A5E46418484-AA
Connecting up
Block diagram The following figure shows the block diagram of the CPU 1516-3 PN/DP.
X50 X80 24 V DC PN X1 P1 R
CPU with control and operating mode buttons Display Electronics PROFINET 2-port switch PROFIBUS DP driver with electrical isolation Backplane bus interface Internal supply voltage SIMATIC memory card Infeed of supply voltage PROFINET interface X1 port 1
PN X1 P2 R
PN X2 P1 PB X3 L+ M SA R/S ER MT X1 P1, X1 P2, X2 P1
Figure 3-1 Block diagram of the CPU 1516-3 PN/DP
PROFINET interface X1 port 2
PROFINET interface X2 port 1 PROFIBUS interface X3 24 V DC supply voltage Ground STOP-ACTIVE LED (yellow) RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
37
Interrupts, error messages, diagnostics and system alarms
4
The LED displays of the CPU 1516-3 PN/DP are described below.
You will find additional information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topics of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error display of the CPU
LED display
The figure below shows the CPU 1516-3 PN/DP LEDs.
RUN/STOP LED (green/yellow LED) ERROR LED (red LED) MAINT LED (yellow LED) LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED) STOP-ACTIVE LED
Figure 4-1 LED displays of the CPU 1516-3 PN/DP (without front panel and display)
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
38
Equipment Manual, 11/2019, A5E46418484-AA
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1516-3 PN/DP has three LEDs for displaying the current operating state and diagnostic status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED off
LED flashes red
LED lit green
LED off
LED lit green
LED flashes red
LED lit green
LED off
LED lit green LED lit green LED lit yellow LED lit yellow LED lit yellow LED lit yellow
LED off LED flashes red LED flashes red
LED off LED off LED flashes red
LED flashes yellow
LED off
MAINT LED LED off LED off LED off LED off
LED lit yellow
LED flashes yellow LED off
Meaning Missing or insufficient power supply on the CPU.
An error has occurred.
CPU is in RUN mode. There are no events, requirements, errors, etc. A diagnostics event is pending.
Maintenance demanded for the plant. You need to check/replace the affected hardware within a short period of time. Active Force job PROFIenergy pause Bad configuration
An error has occurred.
LED off LED flashes yellow
LED off LED flashes yellow
LED off
Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. The CPU has detected an error state. Additional information is available via the CPU diagnostic buffer. CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card CPU is executing a program with active breakpoint.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
39
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
RUN/STOP LED
LED flashes yellow/green
LED flashes yellow/green
ERROR LED LED off
LED flashes red
MAINT LED LED off
Meaning Startup (transition from STOP RUN)
LED flashes yellow
Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of the ports of the CPU 1516-3 PN/DP.
Table 4- 2 Meaning of the LED
LINK TX/RX LED LED off
LED flashes green LED lit green LED flashes yellow/green
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device
and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The CPU is performing an "LED flash test".
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received/sent by a communication partner in the Ethernet via the PROFINET interface of the PROFINET device.
Note "LED" instruction
You can read the status (e.g. "On" or "Off") of LEDs of a CPU or a module using the "LED" instruction. Note, however, that it is not possible to read the LED status of the LINK RX/TX LEDs on all S7-1500 CPUs.
You can find additional information on the "LED" instruction in the STEP 7 online help.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
40
Equipment Manual, 11/2019, A5E46418484-AA
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of STOP-ACTIVE LED
The following table shows the meaning of the STOP-ACTIVE LED for the CPU 1516-3 PN/DP.
STOP-ACTIVE LED LED lit yellow
LED off
Meaning The CPU has been switched to STOP mode using the STOP button.
· As long as the STOP-ACTIVE LED is lit, switching the CPU to RUN mode is only possible using the RUN button.
· The CPU can then no longer be set to RUN mode via display operation or via online functions. The state of the buttons is retained at power-off. If the CPU should not start up automatically after a power-on, you have to keep the STOP button pressed during startup until the STOP-ACTIVE LED is activated.
· If automatic startup is to be reliably prevented after a power-on, the STOP button has to be kept pressed during the startup of the CPU until the STOP-ACTIVE LED is activated.
· The CPU has been set to STOP mode using the display or programming device/PC and not with the STOP button on the device.
· The CPU is in RUN mode.
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
41
Technical specifications
5
The following table shows the technical specifications as of 11/2019. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7516-3AN02-0AB0/td?dl=en).
Article number General information Product type designation HW functional status Firmware version Product function · I&M data
· Isochronous mode
Engineering with · STEP 7 TIA Portal configurable/integrated as
of version
Configuration control via dataset Display Screen diagonal [cm] Control elements Number of keys Mode buttons Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection Mains buffering · Mains/voltage failure stored energy time
· Repeat rate, min.
Input current Current consumption (rated value) Current consumption, max. Inrush current, max. I²t
6ES7516-3AN02-0AB0
CPU 1516-3 PN/DP FS01 V2.8
Yes; I&M0 to I&M3 Yes; Distributed and central; with minimum OB 6x cycle of 375 µs (distributed) and 1 ms (central)
V16 (FW V2.8); with older TIA Portal versions configurable as 6ES7516-3AN01-0AB0
Yes
6.1 cm
8 2
24 V DC 19.2 V 28.8 V Yes
5 ms 1/s
0.85 A 1.1 A 2.4 A; Rated value 0.02 A²·s
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
42
Equipment Manual, 11/2019, A5E46418484-AA
Technical specifications
Article number Power Infeed power to the backplane bus Power consumption from the backplane bus (balanced) Power loss Power loss, typ. Memory Number of slots for SIMATIC memory card SIMATIC memory card required Work memory · integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range
· Size, max.
FB · Number range · Size, max. FC · Number range · Size, max.
6ES7516-3AN02-0AB0
12 W 6.7 W
7 W
1 Yes
1 Mbyte 5 Mbyte
32 Gbyte
Yes
10 ns 12 ns 16 ns 64 ns
8 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999 5 Mbyte; For DBs with absolute addressing, the max. size is 64 KB
0 ... 65 535 1 Mbyte
0 ... 65 535 1 Mbyte
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
43
Technical specifications
Article number OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of DPV1 alarm OBs · Number of isochronous mode OBs · Number of technology synchronous alarm
OBs · Number of startup OBs · Number of asynchronous error OBs · Number of synchronous error OBs · Number of diagnostic alarm OBs Nesting depth · per priority class Counters, timers and their retentivity S7 counter · Number Retentivity
adjustable IEC counter · Number Retentivity
adjustable S7 times · Number Retentivity
adjustable IEC timer · Number Retentivity
adjustable
6ES7516-3AN02-0AB0 1 Mbyte 100 20 20 20; With minimum OB 3x cycle of 250 µs 50 3 3 2
100 4 2 1
24
2 048
Yes
Any (only limited by the main memory)
Yes
2 048
Yes
Any (only limited by the main memory)
Yes
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
44
Equipment Manual, 11/2019, A5E46418484-AA
Technical specifications
Article number Data areas and their retentivity Retentive data area (incl. timers, counters, flags), max.
Extended retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
6ES7516-3AN02-0AB0
512 kbyte; In total; available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 472 KB 5 Mbyte; When using PS 6 0W 24/48/60 V DC HF
16 kbyte
· Number of clock memories
Data blocks · Retentivity adjustable
8; 8 clock memory bit, grouped into one clock memory byte
Yes
· Retentivity preset
No
Local data · per priority class, max.
64 kbyte; max. 16 KB per block
Address area Number of IO modules I/O address area · Inputs
8 192; max. number of modules / submodules 32 kbyte; All inputs are in the process image
· Outputs
32 kbyte; All outputs are in the process image
per integrated IO subsystem Inputs (volume)
8 kbyte
Outputs (volume)
8 kbyte
per CM/CP Inputs (volume)
8 kbyte
Outputs (volume)
8 kbyte
Subprocess images
· Number of subprocess images, max.
32
Hardware configuration Number of distributed IO systems
Number of DP masters · integrated
64; A distributed I/O system is characterized not only by the integration of distributed I/O via PROFINET or PROFIBUS communication modules, but also by the connection of I/O via AS-i master modules or links (e.g. IE/PB-Link)
1
· Via CM
Number of IO Controllers · integrated
8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
2
· Via CM
8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
45
Technical specifications
Article number Rack · Modules per rack, max. · Number of lines, max. PtP CM · Number of PtP CMs
Time of day Clock · Type · Backup time · Deviation per day, max. Operating hours counter · Number Clock synchronization · supported · to DP, master · in AS, master · in AS, slave · on Ethernet via NTP Interfaces Number of PROFINET interfaces Number of PROFIBUS interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Protocols · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
46
6ES7516-3AN02-0AB0
32; CPU + 31 modules 1
the number of connectable PtP CMs is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
Yes Yes Yes Yes Yes
2 1
2 Yes Yes; X1
Yes; IPv4 Yes Yes Yes Yes; Optionally also encrypted Yes Yes
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0) Equipment Manual, 11/2019, A5E46418484-AA
Technical specifications
Article number PROFINET IO Controller Services
PG/OP communication
6ES7516-3AN02-0AB0 Yes
S7 routing
Yes
Isochronous mode
Yes
Direct data exchange IRT
Yes; Requirement: IRT and isochronous mode (MRPD optional)
Yes
MRP MRPD
Yes; MRP Automanager acc. to IEC 62439-2 Edition 2.0; MRP Manager; MRP Client; max. number of devices in the ring: 50
Yes; Requirement: IRT
PROFIenergy
Yes; per user program
Prioritized startup
Yes; Max. 32 PROFINET devices
Number of connectable IO Devices, max. Of which IO devices with IRT, max.
256; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
64
Number of connectable IO Devices for RT, 256 max.
of which in line, max.
256
Number of IO Devices that can be simul- 8; in total across all interfaces taneously activated/deactivated, max.
Number of IO Devices per tool, max.
8
Updating times
Update time for IRT for send cycle of 250 µs for send cycle of 500 µs
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
250 s to 4 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 375 µs of the isochronous OB is decisive 500 µs to 8 ms
for send cycle of 1 ms
1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" send cycles
Update time = set "odd" send clock (any multiple of 125 µs: 375 µs, 625 µs ... 3 875 µs)
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
47
Technical specifications
Article number Update time for RT
for send cycle of 250 µs for send cycle of 500 µs for send cycle of 1 ms for send cycle of 2 ms for send cycle of 4 ms PROFINET IO Device Services PG/OP communication S7 routing Isochronous mode IRT MRP
MRPD PROFIenergy Shared device Number of IO Controllers with shared de-
vice, max. Asset management record 2. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Protocols · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
6ES7516-3AN02-0AB0
250 µs to 128 ms 500 µs to 256 ms 1 ms to 512 ms 2 ms to 512 ms 4 ms to 512 ms
Yes Yes No Yes Yes; MRP Automanager acc. to IEC 62439-2 Edition 2.0; MRP Manager; MRP Client; max. number of devices in the ring: 50 Yes; Requirement: IRT Yes; per user program Yes 4
Yes; per user program
1 No Yes; X2
Yes; IPv4 Yes Yes Yes Yes; Optionally also encrypted Yes No
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
48
Equipment Manual, 11/2019, A5E46418484-AA
Technical specifications
Article number PROFINET IO Controller Services
PG/OP communication
6ES7516-3AN02-0AB0 Yes
S7 routing
Yes
Isochronous mode
No
Direct data exchange
No
IRT
No
MRP
No
MRPD
No
PROFIenergy
Yes; per user program
Prioritized startup
No
Number of connectable IO Devices, max.
32; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
Number of connectable IO Devices for RT, 32 max.
of which in line, max.
32
Number of IO Devices that can be simul- 8; in total across all interfaces taneously activated/deactivated, max.
Number of IO Devices per tool, max.
8
Updating times
Update time for RT for send cycle of 1 ms
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
1 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
IRT
No
MRP
No
MRPD
No
PROFIenergy
Yes; per user program
Prioritized startup
No
Shared device
Yes
Number of IO Controllers with shared de- 4 vice, max.
Asset management record
Yes; per user program
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
49
Technical specifications
Article number 3. Interface Interface types · Number of ports · RS 485 Protocols · PROFIBUS DP master · PROFIBUS DP slave · SIMATIC communication Interface types RJ 45 (Ethernet) · 100 Mbps · Autonegotiation · Autocrossing · Industrial Ethernet status LED RS 485 · Transmission rate, max. Protocols Number of connections · Number of connections, max.
· Number of connections reserved for ES/HMI/web
· Number of connections via integrated interfaces
· Number of S7 routing paths Redundancy mode · H-Sync forwarding SIMATIC communication · S7 communication, as server · S7 communication, as client · User data per job, max.
6ES7516-3AN02-0AB0
1 Yes; X3
Yes No Yes
Yes Yes Yes Yes
12 Mbit/s
256; via integrated interfaces of the CPU and connected CPs / CMs 10
128
16
Yes
Yes Yes See online help (S7 communication, user data size)
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
50
Equipment Manual, 11/2019, A5E46418484-AA
Technical specifications
Article number Open IE communication · TCP/IP
Data length, max. several passive connections per port,
supported · ISO-on-TCP (RFC1006)
Data length, max. · UDP
Data length, max. UDP multicast · DHCP · SNMP · DCP · LLDP Web server · HTTP · HTTPS PROFIBUS DP master · Number of connections, max. Services PG/OP communication S7 routing Data record routing Isochronous mode Equidistance Number of DP slaves
Activation/deactivation of DP slaves
6ES7516-3AN02-0AB0
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
Yes; Standard and user pages Yes; Standard and user pages
48; for the integrated PROFIBUS DP interface
Yes Yes Yes Yes Yes 125; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET Yes
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
51
Technical specifications
Article number OPC UA · Runtime license required
6ES7516-3AN02-0AB0 Yes
· OPC UA client
Yes
Application authentication
Yes
Security policies User authentication
Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256
"anonymous" or by user name & password
Number of connections, max.
10
Number of nodes of the client interfaces, 2 000 max.
Number of elements for one call of
300
OPC_UA_NodeGetHandleList/OPC_UA_R
eadList/OPC_UA_WriteList, max.
Number of elements for one call of
20
OPC_UA_NameSpaceGetIndexList, max.
Number of elements for one call of
100
OPC_UA_MethodGetHandleList, max.
Number of simultaneous calls of the client 1 instructions per connection (except OPC_UA_ReadList,OPC_UA_WriteList,O PC_UA_MethodCall), max.
Number of simultaneous calls of the client 5 instructions OPC_UA_ReadList,OPC_UA_WriteList and OPC_UA_MethodCall, max.
Number of registerable nodes, max.
5 000
Number of registerable method calls of
100
OPC_UA_MethodCall, max.
Number of inputs/outputs when calling
20
OPC_UA_MethodCall, max.
· OPC UA server Application authentication
Yes; Data access (read, write, subscribe), method call, custom address space
Yes
Security policies User authentication
Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256
"anonymous" or by user name & password
Number of sessions, max.
48
Number of accessible variables, max.
100 000
Number of registerable nodes, max.
20 000
Number of subscriptions per session, max. 20
Sampling interval, min.
100 ms
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
52
Equipment Manual, 11/2019, A5E46418484-AA
Technical specifications
Article number Publishing interval, min.
6ES7516-3AN02-0AB0 200 ms
Number of server methods, max.
50
Number of inputs/outputs per server
20
method, max.
Number of monitored items, max. Number of server interfaces, max.
2 000; for 1 s sampling interval and 1 s send interval
10; or 20, depending on type of server interface
Number of nodes for user-defined server 5 000 interfaces, max.
Further protocols · MODBUS
Yes; MODBUS TCP
Media redundancy · Switchover time on line break, typ.
200 ms; For MRP, bumpless for MRPD
· Number of stations in the ring, max.
50
Isochronous mode
Isochronous operation (application synchronized Yes; Distributed and central; with minimum OB 6x
up to terminal)
cycle of 375 µs (distributed) and 1 ms (central)
Equidistance
Yes
S7 message functions
Number of login stations for message functions, 64 max.
Program alarms
Yes
Number of configurable program messages, max. 10 000; Program messages are generated by the "Program_Alarm" block, ProDiag or GRAPH
Number of loadable program messages in RUN, 5 000 max.
Number of simultaneously active program alarms
· Number of program alarms
800
· Number of alarms for system diagnostics
200
· Number of alarms for motion technology ob- 160 jects
Test commissioning functions Joint commission (Team Engineering)
Status block
Single step Number of breakpoints
Yes; Parallel online access possible for up to 8 engineering systems
Yes; Up to 8 simultaneously (in total across all ES clients)
No
8
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
53
Technical specifications
Article number Status/control · Status/control variable · Variables
· Number of variables, max. of which status variables, max. of which control variables, max.
Forcing · Forcing, variables · Number of variables, max.
6ES7516-3AN02-0AB0
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Peripheral inputs/outputs 200
Diagnostic buffer · present · Number of entries, max.
of which powerfail-proof Traces · Number of configurable Traces
Yes 3 200 500
4; Up to 512 KB of data per trace are possible
Interrupts/diagnostics/status information
Diagnostics indication LED
· RUN/STOP LED
Yes
· ERROR LED
Yes
· MAINT LED
Yes
· STOP ACTIVE LED
Yes
· Connection display LINK TX/RX
Yes
Supported technology objects
Motion Control
Yes; Note: The number of axes affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER
· Number of available Motion Control resources 2 400 for technology objects (except cam disks)
· Required Motion Control resources
per speed-controlled axis
40
per positioning axis
80
per synchronous axis
160
per external encoder
80
per output cam
20
per cam track
160
per probe
40
· Positioning axis
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
54
Equipment Manual, 11/2019, A5E46418484-AA
Technical specifications
Article number
6ES7516-3AN02-0AB0
Number of positioning axes at motion con- 7 trol cycle of 4 ms (typical value)
Number of positioning axes at motion con- 14 trol cycle of 8 ms (typical value)
Controller · PID_Compact
· PID_3Step
· PID-Temp Counting and measuring · High-speed counter
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
Standards, approvals, certificates Suitable for safety functions Ambient conditions Ambient temperature during operation · horizontal installation, min.
No -25 °C; No condensation
· horizontal installation, max. · vertical installation, min.
60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off
-25 °C; No condensation
· vertical installation, max.
Ambient temperature during storage/transportation · min.
40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C
· max.
70 °C
Altitude during operation relating to sea level · Installation altitude above sea level, max.
Configuration Programming Programming language
LAD
5 000 m; Restrictions for installation altitudes > 2 000 m, see manual
Yes
FBD
Yes
STL
Yes
SCL
Yes
GRAPH
Yes
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
55
Technical specifications
Article number Know-how protection · User program protection/password protection
· Copy protection
· Block protection Access protection · Password for display
· Protection level: Write protection
· Protection level: Read/write protection
· Protection level: Complete protection Cycle time monitoring · lower limit
· upper limit Dimensions Width Height Depth Weights Weight, approx.
6ES7516-3AN02-0AB0
Yes Yes Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
70 mm 147 mm 129 mm
845 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP System Manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
56
Equipment Manual, 11/2019, A5E46418484-AA
Dimensional drawing
A
This section contains the dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with the front panel open. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimensional drawings for CPU 1516-3 PN/DP
Figure A-1 Dimensional drawing of the CPU 1516-3 PN/DP
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
Equipment Manual, 11/2019, A5E46418484-AA
57
Dimensional drawing
Figure A-2 CPU with open front panel
CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0)
58
Equipment Manual, 11/2019, A5E46418484-AA
SIMATIC
S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
_Pr_od_u_ct_o_ve_rv_ie_w_________2_
_Co_n_ne_c_tin_g_up___________3_
Interrupts, error messages,
diagnostics and system
4
alarms
_Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______5_
_Di_m_en_s_ion_a_l d_ra_w_in_g _______A_
12/2017
A5E40898375-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E40898375-AA 11/2017 Subject to change
Copyright © Siemens AG 2017. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system/ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1516T-3 PN/DP.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
4
Manual, 12/2017, A5E40898375-AA
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
5
Table of contents
Preface ...................................................................................................................................................... 4
1 Documentation guide ................................................................................................................................. 7
2 Product overview ..................................................................................................................................... 11
2.1
Applications of the S7-1500 CPU .......................................................................................... 11
2.2
Hardware properties .............................................................................................................. 18
2.3
Firmware functions................................................................................................................. 20
2.4 2.4.1 2.4.2 2.4.3
Operating and display elements ............................................................................................ 24 Front view of the CPU with closed front panel....................................................................... 24 Front view of the CPU without front flap ................................................................................ 26 Rear view of the CPU ............................................................................................................ 27
2.5
Mode selector switch ............................................................................................................. 27
3 Connecting up ......................................................................................................................................... 28
4 Interrupts, error messages, diagnostics and system alarms .................................................................... 33
4.1
Status and error display of the CPU ...................................................................................... 33
5 Technical specifications ........................................................................................................................... 36
A Dimensional drawing ............................................................................................................................... 49
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
6
Manual, 12/2017, A5E40898375-AA
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
7
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
8
Manual, 12/2017, A5E40898375-AA
Documentation guide
Application examples The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
9
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
10
Manual, 12/2017, A5E40898375-AA
Product overview
2
2.1
Applications of the S7-1500 CPU
Area of application SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation.
The modular and fanless design, simple implementation of distributed structures, and user-friendly operation make SIMATIC S7-1500 the economic and convenient solution for a variety of tasks.
Areas of application of the SIMATIC S7-1500 are, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automobile engineering
Water/waste water
Food & Beverage
Areas of application of the SIMATIC S7-1500T are, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial capability from the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
11
Product overview 2.1 Applications of the S7-1500 CPU
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 1 Standard CPUs
CPU
CPU 1511-1 PN
CPU 1513-1 PN
CPU 1515-2 PN
CPU 1516-3 PN/ DP
CPU 1517-3 PN/ DP
CPU 1518-4 PN/ DP CPU 1518-4 PN/ DP MFP
Performance segment
Standard CPU for small to mid-range applications
Standard CPU for mid-range applications
Standard CPU for small to mid-range applications
Standard CPU for high-end applications and communication tasks
Standard CPU for high-end applications and communication tasks
Standard CPU for high-performance applications, demanding communication tasks and very short reaction times
PROFIBUS interfaces
---1
1
1
PROFINET IO RT/IRT interface
1
1
1
1
1
1
PROFINET IO RT
interface --
--
1
1
1
1
PROFINET basic
functionality --
--
--
--
--
1
Work memory
1.15 MB
Processing time for bit operations
60 ns
1.8 MB
40 ns
3.5 MB
30 ns
6 MB
10 ns
10 MB
2 ns
24 MB
1 ns
Table 2- 2 Compact CPUs
CPU
Performance segment
CPU 1511C-1 PN CPU 1512C-1 PN
Compact CPU for small to mid-range applications
Compact CPU for mid-range applications
PROFIBUS interfaces
--
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT
interface
--
PROFINET basic
functionality
--
Work memory
1.175 MB
Processing time for bit operations
60 ns
--
1
--
--
1.25 MB
48 ns
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
12
Manual, 12/2017, A5E40898375-AA
Product overview 2.1 Applications of the S7-1500 CPU
Table 2- 3 Fail-safe CPUs
CPU
Performance segment
CPU 1511F-1 PN
Fail-safe CPU for small to mid-range applications
CPU 1511TF-1 PN
Fail-safe technology CPU for small to mid-range applications
CPU 1513F-1 PN
Fail-safe CPU for mid-range applications
CPU 1515F-2 PN
Fail-safe CPU for mid-range to large applications
CPU 1515TF-2 PN
Fail-safe technology CPU for demanding applications and communication tasks
CPU 1516F-3 PN/ DP
Fail-safe CPU for demanding applications and communication tasks
CPU 1516TF-3 PN/ DP
Fail-safe technology CPU for demanding applications and communication tasks
CPU 1517F-3 PN/ DP
Fail-safe CPU for demanding applications and communication tasks
CPU 1517TF-3 PN/ DP
Fail-safe technology CPU for demanding applications and communication tasks
CPU 1518F-4 PN/ DP
CPU 1518F-4 PN/ DP MFP
Fail-safe CPU for high-performance applications, demanding communication tasks and very short reaction times
PROFIBUS interfaces
--
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT
interface
--
PROFINET basic
functionality
--
--
1
--
--
--
1
--
--
--
1
1
--
--
1
1
--
1
1
1
--
1
1
1
--
1
1
1
--
1
1
1
--
1
1
1
1
Work memory 1.225 M
B 1.225 M
B 1.95 MB 3.75 MB 3.75 MB
6.5 MB
6.5 MB
11 MB
11 MB
26 MB
Processing time for bit operations
60 ns 60 ns
40 ns 30 ns 30 ns
10 ns
10 ns
2 ns
2 ns
1 ns
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
13
Product overview 2.1 Applications of the S7-1500 CPU
Table 2- 4 Technology CPUs
CPU
Performance segment
PROFIBUS PROFINET PROFINET PROFINET
interfaces IO RT/IRT IO RT
basic
interfaces interface functionality
CPU 1511T-1 PN Technology CPU for
--
1
--
--
small to mid-range
applications
CPU 1515T-2 PN Technology CPU for
--
1
1
--
mid-range to large
applications
CPU 1516T-3 PN/ Technology CPU for
1
1
1
--
DP
high-end applica-
tions and communi-
cation tasks
CPU 1517T-3 PN/ Technology CPU for
1
1
1
--
DP
high-end applica-
tions and communi-
cation tasks
CPU 1511TF-1 PN These CPUs are described in the fail-safe CPUs
CPU 1515TF-2 PN
CPU 1516TF-3 PN/ DP
CPU 1517TF-3 PN/ DP
Work memory 1.23 MB 3.75 MB 6.5 MB
11 MB
Processing time for bit operations
60 ns
30 ns
10 ns
2 ns
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Frequency meter Period duration measurement Pulse width modulation (PWM output) Pulse Train Output (PTO output) Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 6 (max. 100 kHz)
6 channels Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 6 (max. 100 kHz)
6 channels Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
14
Manual, 12/2017, A5E40898375-AA
Product overview 2.1 Applications of the S7-1500 CPU
Integrated Motion Control technology functions All CPUs of SIMATIC S7-1500 support Motion Control technology functions. STEP 7 offers Motion Control instructions standardized according to PLCopen for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axes Positioning axes Synchronous axes External encoders Output cams Cam tracks Measuring inputs The technology CPUs of the SIMATIC S7-1500 offer enhanced Motion Control functions: Advanced synchronization functions Synchronization with specification of the synchronous position Actual value coupling Shifting of the master value at following axis Camming Up to 4 encoders or measuring systems as actual position for position control The technology CPUs of the SIMATIC S7-1500 additionally support the following technology objects: Cam Kinematics Cam Kinematics Controlling of kinematics, such as Cartesian portals Roller pickers Delta pickers SCARA Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
Additional integrated technology functions For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags. In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
15
Product overview 2.1 Applications of the S7-1500 CPU
Other technology functions Technology modules also implement functions such as high-speed counting, position detection, measuring functions and pulse generators (PTO, PWM and frequency output). For compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and can be implemented without additional technology modules.
SIWAREX is a versatile and flexible weighing module which you can use as a static scale for operation.
Security Integrated In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks.
Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU.
In addition, you can assign various access rights to different user groups in the controller using four different authorization levels.
Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller.
The use of an Ethernet CP (CP 1543-1) provides you with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally.
These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration also provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications.
The fail-safe CPUs are certified for use in safety mode up to:
Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010
Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to EN ISO 13849-1:2008
Additional password protection for F-configuration and F-program is set up for IT security.
In addition to the CPUs, further components such as SINAMICS drives dispose of integrated safety functions. Additional information about integrated safety functions in drives can be found in the manuals for the respective products.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
16
Manual, 12/2017, A5E40898375-AA
Product overview 2.1 Applications of the S7-1500 CPU
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Error messages are immediately shown on the display in plain text. In the case of servicing, plant downtimes are minimized by quick access to diagnostics alarms. Detailed information about this and a multitude of other display functions is available in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
Uniform front connectors for all modules and integrated potential bridges for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7, on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostic information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server in up to three project languages. The HMI takes over the display in the project languages specified for the CPU. If you require message texts in additional languages, you can load these via the configured connection to your HMI. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
17
Product overview 2.2 Hardware properties
2.2
Hardware properties
Article number 6ES7516-3TN00-0AB0
View of the module The following figure shows the CPU 1516T-3 PN/DP.
Figure 2-1 CPU 1516T-3 PN/DP
Note Protective film Note that a protective film is attached to the display of the CPU when shipped from the factory. Remove the protective film if necessary.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
18
Manual, 12/2017, A5E40898375-AA
Product overview 2.2 Hardware properties
Properties
The CPU 1516T-3 PN/DP has the following properties:
Property CPU display
Description
Additional information
All CPUs of the SIMATIC S7-1500 product series feature · S7-1500, ET 200MP system
a display with plain text information. The display provides
manual
information on order numbers, firmware version and serial numbers of all connected modules. In addition, you can set the IP address of the CPU and carry out further
(http://support.automation.sieme ns.com/WW/view/en/59191792)
network settings. The display shows occurring error
· SIMATIC S7-1500 Display
messages directly in plain text.
Simulator
In addition to the functions listed here, a multitude of other functions that are described in the
(http://www.automation.siemens. com/salesmaterial-as/interactive-
SIMATIC S7-1500 Display Simulator are shown on the
manuals/getting-started_simatic-
display.
s7-1500/disp_tool/start_en.html)
Supply voltage
The 24 V DC supply voltage is supplied via a 4-pole connection plug that is located at the front of the CPU.
· Chapter Connecting up (Page 28)
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
PROFIBUS DP
PROFIBUS interface (X3)
Operation of the CPU as DP master
The interface serves to connect to a PROFIBUS network.
In the role as a DP master, the CPU addresses the connected DP slaves. The CPU cannot assume the role of a DP slave.
PROFIBUS function manual (https://support.industry.siemens.co m/cs/ww/en/view/59193579)
PROFINET IO
PROFINET interface (X1 P1 R, X1 P2 R)
The interface has two ports. In addition to basic
PROFINET function manual
PROFINET functionality, its also supports PROFINET IO (https://support.industry.siemens.co
RT (real time) and IRT (isochronous real time).
m/cs/ww/en/view/49948856)
PROFINET interface (X2 P1)
The interface has two ports. In addition to basic PROFINET functionality, its also supports PROFINET IO RT (real time).
Operation of the CPU as · IO controller:
· IO controller · I-device
As an IO controller the CPU addresses the connected IO devices
· I-device:
As an I-device (intelligent IO device) the CPU is
assigned to a higher-level IO controller and is used in
the process as an intelligent pre-processing unit of
sub-processes
Accessories
You can find information on "Accessories/spare parts" in the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
19
Product overview 2.3 Firmware functions
2.3
Firmware functions
Functions
The CPU 1516T-3 PN supports the following functions:
Function Integrated system diagnostics Integrated Web server
Integrated trace functionality
OPC UA
Configuration control
Description
The system automatically generates the messages for the system diagnostics and outputs these messages via a programming device/PC, HMI device, the Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
The Web server lets you access the CPU data by means of a network. Evaluations, diagnostics, and modifications are thus possible over long distances. Monitoring and evaluation is possible without STEP 7; all you need is a Web browser. Make sure that you take appropriate measures (e.g. limiting network access, using firewalls) to protect the CPU from being compromised.
Additional information Diagnostics function manual (http://support.automation.siemens.c om/WW/view/en/59191792)
· Web server function manual (http://support.automation.sieme ns.com/WW/view/en/59193560)
· Security with SIMATIC S7 controllers system manual (https://support.industry.siemens. com/cs/ww/en/view/90885010)
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
Using the trace and logic analyzer function function manual (http://support.automation.siemens.c om/WW/view/en/64897128)
The device saves the recordings. You can read out and permanently save the recordings with the configuration system (ES), if required. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes.
The trace record can also be displayed through the Web server.
With OPC UA, you can exchange data via an open and manufacturer-neutral communication protocol. The CPU can act as an OPC UA DA server. The CPU acting as the OPC UA server can communicate with OPC UA clients.
Communication function manual (https://support.industry.siemens.co m/cs/ww/en/view/59192925)
The OPC UA Companion Specification allows methods to be specified uniformly and independently of the manufacturer. Using these specified methods, you can easily integrate devices from various manufacturers into your plants and production processes.
You can use configuration control to operate different
S7-1500, ET 200MP system manual
real hardware configurations with a configured maximum (http://support.automation.siemens.c
configuration of the hardware. This means that, in series om/WW/view/en/59191792)
machine manufacturing in particular, you have the option
of operating/configuring different configuration variants of
a machine with a single project.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
20
Manual, 12/2017, A5E40898375-AA
Product overview 2.3 Firmware functions
Function
Description
PROFINET IO
RT (real time)
RT prioritizes PROFINET IO telegrams over standard telegrams. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet telegrams.
IRT (isochronous real time)
A reserved bandwidth within the send clock is available for IRT data. The reserved bandwidth ensures that the IRT data can be transmitted in time-synchronized intervals, unaffected by other high network loading (e.g. TCP/IP communication or additional real time communication). Update times with maximum determinism can be realized through IRT. Isochronous applications are possible with IRT.
Isochronous mode
The Isochronous mode system property acquires measured values and process data and processes the signal in a fixed system clock. Isochronous mode thus contributes to high control quality and hence to greater manufacturing precision. Isochronous mode reduces possible fluctuations of the process reaction times to a minimum. Time-assured processing makes higher machine cycles possible.
MRP (Media Redundancy Protocol)
It is possible to establish redundant networks via the Media Redundancy Protocol. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails. The PROFINET devices that are part of this redundant network form an MRP domain.
RT operation is possible with the use of MRP.
MRPD (Media Redundancy with Planned Duplication)
The advantage of the MRP extension MRPD is that, in the event of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no reconfiguration time.
Shared device
The "Shared device" function allows you to divide the modules or submodules of an IO device up among different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required. The "Shared device" function allows the modules or submodules of an IO device to be divided up among different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules that are physically close to each other in one IO device.
Additional information
PROFINET function manual (http://support.automation.siemens.c om/WW/view/en/49948856)
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
21
Product overview 2.3 Firmware functions
Function PROFIenergy
Description
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. The majority of the energy is saved by the process; the PROFINET device itself only contributes a few watts of savings potential.
Additional information
Integrated technology
Motion Control
S7-1500 CPUs support the controlled positioning and S7-1500 Motion Control
traveling of axes via S7-1500 Motion Control functions by function manual
means of the following technology objects:
(http://support.automation.siemens.c
Speed-controlled axes, positioning axes, synchronized om/WW/view/en/109749262)
axes, external encoders, cams, cam tracks and
measuring inputs.
· Speed-controlled axis for controlling a drive with speed specification
· Positioning axis for position-controlled positioning of a drive
· Synchronous axis to interconnect with a master value. The axis is synchronized to the master axis position.
· External encoder for detecting the actual position of an encoder and its use as a master value for synchronous operation
· Cams, cam track for position-dependent generation of switching signals
· Measuring input for fast, accurate and event-dependent sensing of actual positions
You program the technology objects with Motion Control instructions according to PLCopen.
Extended Motion Control The technology CPUs of the SIMATIC S7-1500 also
functions
support extended Motion Control functions:
· Advanced synchronization functions
Synchronization with specification of the synchronous position
Actual value coupling Shifting of the master value at following axis Camming
S7-1500T Motion Control function manual (https://support.industry.siemens.co m/cs/ww/en/view/109749263)
S7-1500T Kinematics Functions V4.0 in TIA Portal V15 (https://support.industry.siemens.co m/cs/ww/en/view/109749264) Function manual
· Cam
· Up to 4 encoders or measuring systems as actual position for position control
· Controlling of kinematics, such as
Cartesian portals Roller pickers Delta pickers SCARA
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
22
Manual, 12/2017, A5E40898375-AA
Product overview 2.3 Firmware functions
Function Integrated closed-loop control functionality
Integrated safety Know-how protection Copy protection
Access protection Integrity protection
Password provider
Description · PID Compact (continuous PID controller) · PID 3Step (step controller for integrating actuators) · PID Temp (temperature controller for heating and
cooling with two separate actuators)
Additional information
PID control function manual (https://support.industry.siemens.co m/cs/ww/en/view/108210036)
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
S7-1500, ET 200MP system manual (http://support.automation.siemens.c om/WW/view/en/59191792)
You can use authorization levels to assign separate rights to different users.
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between TIA Portal and CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password input you can connect a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 reads the password automatically for the blocks. This saves you time.
· Optimum block protection because the users do not know the password itself.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
23
Product overview 2.4 Operating and display elements
2.4
Operating and display elements
2.4.1
Front view of the CPU with closed front panel
The following figure shows the front view of the CPU 1516T-3 PN/DP.
LEDs for the current operating mode and diagnostics status of the CPU Display Operator control buttons
Figure 2-2 View of the CPU 1516T-3 PN/DP (with front panel) front
Note Temperature range for display
To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU.
For more information on the temperatures at which the display switches itself on and off, refer to the Technical specifications (Page 36).
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
24
Manual, 12/2017, A5E40898375-AA
Product overview 2.4 Operating and display elements
Removing and attaching the front panel with display You can remove and attach the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you remove or attach the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Before you remove or fit the front panel, always switch off the power supply to the S7-1500 automation system in hazardous area zone 2. The CPU maintains its operating mode.
Locking the front panel You can lock the front panel to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panel.
Reference
Figure 2-3 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, configurable protection levels and local locks in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
25
Product overview 2.4 Operating and display elements
2.4.2
Front view of the CPU without front flap
The figure below shows the operator controls and connection elements of the CPU 1516T-3 PN/DP.
Mode selector No function PROFIBUS interface (X3) Fixing screws Connector for power supply PROFINET IO interface (X2) with 1 port PROFINET IO interface (X1) with 2 ports MAC addresses of the interfaces LEDs for the 3 ports of the PROFINET interfaces X1 and X2 Slot for the SIMATIC memory card Display connection LEDs for the current operating mode and diagnostics status of the CPU
Figure 2-4 View of the CPU 1516T-3 PN/DP (without front panel) front
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
26
Manual, 12/2017, A5E40898375-AA
2.4.3
Product overview 2.5 Mode selector switch
Rear view of the CPU
The following figure shows the connection elements on the back of the CPU 1516T-3 PN/DP.
Shield contact surfaces Plug-in connection for power supply Plug-in connection for backplane bus Fixing screws
Figure 2-5 View of the CPU 1516T-3 PN/DP rear
2.5
Mode selector switch
You use the mode switches to set the operating mode of the CPU.
The following table shows the meaning of the corresponding operation of the operating mode buttons.
Table 2- 5 Meaning of the mode switches
Operation of the mode switch RUN STOP MRES
Meaning RUN mode STOP mode Memory reset
Explanation The CPU is executing the user program. The user program is not being executed. (STOP ACTIVE LED lights up). Position for CPU memory reset.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
27
Connecting up
3
This section provides information on the terminal assignment of the individual interfaces and the block diagram of the CPU 1516T-3 PN/DP.
24 V DC supply voltage (X80) The connector for the power supply is plugged in when the CPU ships from the factory. The following table shows the pin assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring opener (one spring opener per terminal)
Bridged internally:
and and
Figure 3-1 Supply voltage connection
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
28
Manual, 12/2017, A5E40898375-AA
Connecting up
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R) The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
PROFINET interface X2 with 1 port (X2 P1) The assignment corresponds to the Ethernet standard for an RJ45 plug. Autocrossing is always active on X2. This means the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
29
Connecting up
PROFIBUS interface X3
The table below shows the terminal assignment of the PROFIBUS interface. The assignment corresponds to the standard assignment of an RS485 interface.
Table 3- 1
PROFIBUS interface terminal assignment
View
Signal name
1
-
2
-
3 RxD/TxD-P
4
RTS
5
M5V2
6
P5V2
7
-
8 RxD/TxD-N
9
-
Designation Data line B Request To Send Data reference potential (from station) Supply plus (from station) Data line A -
Note
Supply of I/O devices
The CPU 1516T-3 PN/DP does not provide a 24 V DC power supply on the PROFIBUS interface. I/O devices (for example, PC adapter USB 6ES7972-0CB20-0XA0) are only operational on the interface in conjunction with a plug-in power supply set for external power supply.
The innovative successor product, PC adapter USB A2, receives the required power supply via the USB port. This means it does not need a 24 V DC supply voltage and can be operated without a plug-in power supply set for external power supply.
Reference
You can find additional information on the topics of "Connecting the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
30
Manual, 12/2017, A5E40898375-AA
Connecting up
Assignment of the MAC addresses
CPU 1516T-3 PN/DP has two PROFINET interfaces, with the first interface having two ports. The PROFINET interfaces each have a MAC address, and each of the PROFINET ports has its own MAC address. The CPU 1516T-3 PN/DP therefore has five MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC addresses are lasered on the rating plate on the right side of each CPU 1516T-3 PN/DP.
The table below shows how the MAC addresses are assigned.
Table 3- 2 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3 MAC address 4 MAC address 5
Assignment PROFINET interface X1 (visible in STEP 7 for accessible devices)
Port X1 P1 R (required for LLDP, for example) Port X1 P2 R (required for LLDP, for example) PROFINET interface X2 (visible in STEP 7 for accessible devices)
Port X2 P1 (required for LLDP, for example)
Labeling · Front, lasered · Right side, lasered
(start of number range) · Front and right side, not lasered
· Front and right side, not lasered
· Front, lasered · Right side, not lasered · Front, not lasered · Right side, lasered
(end of number range)
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
31
Connecting up
Block diagram The following figure shows the block diagram of the CPU 1516T-3 PN/DP.
X50
X80 24 V DC
Display RUN/STOP/MRES mode selector Electronics PROFINET 2-port switch PROFIBUS DP driver Backplane bus interface Internal supply voltage SIMATIC memory card Infeed of supply voltage
PN X1 P1 R PN X1 P2 R PN X2 P1 PB X3 L+ M R/S ER MT X1 P1, X1 P2, X2 P1
Figure 3-2 Block diagram of the CPU 1516T-3 PN/DP
PROFINET interface X1 Port 1 PROFINET interface X1 Port 2 PROFINET interface X2 Port 1 PROFIBUS interface X3 24 V DC supply voltage Ground RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
32
Manual, 12/2017, A5E40898375-AA
Interrupts, error messages, diagnostics and system alarms
4
The status and error displays of the CPU 1516T-3 PN/DP are described below.
You will find additional information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topics of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error display of the CPU
LED display
The figure below shows the LED displays of the CPU 1516T-3 PN/DP.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED)
Figure 4-1 LED display of the CPU 1516T-3 PN/DP (without front panel)
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
33
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1516T-3 PN/DP has three LEDs to signal the current operating status and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED off
LED flashes red
LED lit green
LED off
LED lit green
LED flashes red
LED lit green
LED off
LED lit green
LED off
LED lit green LED lit yellow LED lit yellow LED lit yellow LED lit yellow
LED flashes red LED flashes red
LED off LED off LED flashes red
LED flashes yellow
LED off
LED flashes yellow/green
LED off
MAINT LED LED off LED off LED off LED off
LED lit yellow
LED flashes yellow
LED off
Meaning Missing or insufficient power supply on the CPU.
An error has occurred.
CPU is in RUN mode.
A diagnostics event is pending.
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration An error has occurred.
LED off LED flashes yellow
LED off LED flashes yellow
LED off
LED off
Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card CPU carries out a program with active breakpoint. Startup (transition from RUN STOP)
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
34
Manual, 12/2017, A5E40898375-AA
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
RUN/STOP LED
LED flashes yellow/green
ERROR LED LED flashes red
MAINT LED LED flashes yellow
Meaning Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of ports for the CPU 1516T-3 PN/DP.
Table 4- 2 Meaning of the LEDs
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
35
Technical specifications
5
Article number General information
Product type designation HW functional status Firmware version Engineering with
· STEP 7 TIA Portal configurable/integrated as of version
Configuration control via dataset
Display Screen diagonal [cm]
Control elements Number of keys Mode selector switch
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering
· Mains/voltage failure stored energy time
· Repeat rate, min.
Input current Current consumption (rated value) Current consumption, max. Inrush current, max. I²t
Power Infeed power to the backplane bus Power consumption from the backplane bus (balanced)
Power loss Power loss, typ.
Memory Number of slots for SIMATIC memory card SIMATIC memory card required
6ES7516-3TN00-0AB0
CPU 1516T-3 PN/DP FS05 V2.5
V15 (FW V2.5)
Yes
6.1 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms 1/s
1.2 A 1.55 A 2.4 A; Rated value 0.02 A²·s
12 W 30 W
24 W
1 Yes
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
36
Manual, 12/2017, A5E40898375-AA
Technical specifications
Article number Work memory
· integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range
· Size, max.
FB · Number range · Size, max.
FC · Number range · Size, max.
OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of DPV1 alarm OBs · Number of isochronous mode OBs · Number of technology synchronous alarm OBs · Number of startup OBs
6ES7516-3TN00-0AB0
1.5 Mbyte 5 Mbyte
32 Gbyte
Yes
10 ns 12 ns 16 ns 64 ns
6 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999 5 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535 1 Mbyte
0 ... 65 535 1 Mbyte
1 Mbyte 100 20 20 20; With minimum OB 3x cycle of 250 µs 50 3 2 2
100
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
37
Technical specifications
Article number · Number of asynchronous error OBs
· Number of synchronous error OBs
· Number of diagnostic alarm OBs Nesting depth
· per priority class Counters, timers and their retentivity S7 counter
· Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max.
Extended retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
· Number of clock memories
Data blocks · Retentivity adjustable
· Retentivity preset Local data
· per priority class, max.
6ES7516-3TN00-0AB0 4 2 1
24
2 048
Yes
Any (only limited by the main memory)
Yes
2 048
Yes
Any (only limited by the main memory)
Yes
512 kbyte; In total; available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 472 KB 5 Mbyte; When using PS 60W 24/48/60V DC HF
16 kbyte 8; 8 clock memory bits, grouped into one clock memory byte Yes No
64 kbyte; max. 16 KB per block
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
38
Manual, 12/2017, A5E40898375-AA
Technical specifications
Article number Address area
Number of IO modules I/O address area
· Inputs · Outputs per integrated IO subsystem
Inputs (volume) Outputs (volume) per CM/CP Inputs (volume) Outputs (volume) Subprocess images · Number of subprocess images, max. Hardware configuration Number of distributed IO systems
Number of DP masters · integrated · Via CM
Number of IO Controllers · integrated · Via CM
Rack · Modules per rack, max. · Number of lines, max.
PtP CM · Number of PtP CMs
Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number
6ES7516-3TN00-0AB0
8 192; max. number of modules / submodules
32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image
8 kbyte 8 kbyte
8 kbyte 8 kbyte
32
64; A distributed I/O system is characterized not only by the integration of distributed I/O via PROFINET or PROFIBUS communication modules, but also by the connection of I/O via AS-i master modules or links (e.g. IE/PB-Link)
1 8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
2 8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
32; CPU + 31 modules 1
the number of connectable PtP CMs is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
39
Technical specifications
Article number Clock synchronization
· supported · to DP, master · in AS, master · in AS, slave · on Ethernet via NTP Interfaces Number of PROFINET interfaces Number of PROFIBUS interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Functionality · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
PROFINET IO Controller Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP
MRPD PROFIenergy Prioritized startup Number of connectable IO Devices,
max.
6ES7516-3TN00-0AB0
Yes Yes Yes Yes Yes
2 1
2 Yes Yes; X1
Yes; IPv4 Yes Yes Yes Yes Yes Yes; MRP Automanager according to IEC 62439-2 Edition 2.0
Yes Yes Yes Yes Yes Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50 Yes; Requirement: IRT Yes Yes; Max. 32 PROFINET devices 256; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
40
Manual, 12/2017, A5E40898375-AA
Technical specifications
Article number Of which IO devices with IRT, max.
6ES7516-3TN00-0AB0 64
Number of connectable IO Devices for 256 RT, max.
of which in line, max.
256
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
Update time for IRT for send cycle of 250 µs for send cycle of 500 µs
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
250 s to 4 ms; Note: In the case of IRT with isochronous mode, the minimum update time of 500 µs of the isochronous OB is decisive 500 µs to 8 ms
for send cycle of 1 ms
1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" send cycles
Update time = set "odd" send clock (any multiple of 125 µs: 375 µs, 625 µs ... 3 875 µs)
Update time for RT for send cycle of 250 µs
250 µs to 128 ms
for send cycle of 500 µs
500 µs to 256 ms
for send cycle of 1 ms
1 ms to 512 ms
for send cycle of 2 ms
2 ms to 512 ms
for send cycle of 4 ms
4 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
Yes
MRP
Yes
MRPD
Yes; Requirement: IRT
PROFIenergy
Yes
Shared device
Yes
Number of IO Controllers with shared 4 device, max.
Asset management record
Yes; Per user program
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
41
Technical specifications
Article number 2. Interface Interface types
· Number of ports
6ES7516-3TN00-0AB0 1
· integrated switch
No
· RJ 45 (Ethernet)
Yes; X2
Functionality · IP protocol
Yes; IPv4
· PROFINET IO Controller
Yes
· PROFINET IO Device
Yes
· SIMATIC communication
Yes
· Open IE communication
Yes
· Web server
Yes
· Media redundancy
No
PROFINET IO Controller
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
No
MRP
No
PROFIenergy
Yes
Prioritized startup
No
Number of connectable IO Devices, max.
Number of connectable IO Devices for RT, max.
32; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
32
of which in line, max.
32
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
Update time for RT for send cycle of 1 ms
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
1 ms to 512 ms
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
42
Manual, 12/2017, A5E40898375-AA
Technical specifications
Article number PROFINET IO Device Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP MRPD PROFIenergy Prioritized startup Shared device Number of IO Controllers with shared
device, max. Asset management record 3. Interface Interface types · Number of ports · RS 485 Functionality · PROFIBUS DP master · PROFIBUS DP slave · SIMATIC communication Interface types RJ 45 (Ethernet) · 100 Mbps · Autonegotiation · Autocrossing · Industrial Ethernet status LED RS 485 · Transmission rate, max. Protocols Number of connections · Number of connections, max.
· Number of connections reserved for ES/HMI/web
6ES7516-3TN00-0AB0
Yes Yes No Yes No No No Yes No Yes 4
Yes; Per user program
1 Yes; X3
Yes No Yes
Yes Yes Yes Yes
12 Mbit/s
256; via integrated interfaces of the CPU and connected CPs / CMs 10
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
43
Technical specifications
Article number · Number of connections via integrated interfaces · Number of S7 routing paths
SIMATIC communication · S7 communication, as server · S7 communication, as client · User data per job, max.
Open IE communication · TCP/IP Data length, max. several passive connections per port, supported · ISO-on-TCP (RFC1006) Data length, max. · UDP Data length, max. UDP multicast · DHCP · SNMP · DCP · LLDP
Web server · HTTP · HTTPS
PROFIBUS DP master · Number of connections, max.
Services PG/OP communication S7 routing Data record routing Isochronous mode Equidistance Number of DP slaves
Activation/deactivation of DP slaves
6ES7516-3TN00-0AB0 128
16
Yes Yes See online help (S7 communication, user data size)
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
Yes; Standard and user pages Yes; Standard and user pages
48; for the integrated PROFIBUS DP interface
Yes Yes Yes Yes Yes 125; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET Yes
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
44
Manual, 12/2017, A5E40898375-AA
Technical specifications
Article number OPC UA
· Runtime license required · OPC UA Server
Application authentication Security policies
User authentication Further protocols
· MODBUS Media redundancy
· Switchover time on line break, typ. · Number of stations in the ring, max. Isochronous mode Isochronous operation (application synchronized up to terminal) Equidistance S7 message functions Number of login stations for message functions, max. Program alarms Number of configurable program alarms Number of simultaneously active program alarms · Number of program alarms · Number of alarms for system diagnostics · Number of alarms for motion technology
objects Test commissioning functions
Joint commission (Team Engineering)
Status block
Single step Number of breakpoints Status/control · Status/control variable · Variables
· Number of variables, max. of which status variables, max. of which control variables, max.
6ES7516-3TN00-0AB0
Yes Yes; Data access (read, write, subscribe), method call, custom address space Yes Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "anonymous" or by user name & password
Yes; MODBUS TCP
200 ms; For MRP, bumpless for MRPD 50
Yes; With minimum OB 6x cycle of 375 µs
Yes
32
Yes 10 000
600 200 160
Yes; Parallel online access possible for up to 8 engineering systems Yes; Up to 8 simultaneously (in total across all ES clients) No 8
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
45
Technical specifications
Article number Forcing
· Forcing, variables · Number of variables, max. Diagnostic buffer · present · Number of entries, max.
of which powerfail-proof Traces
· Number of configurable Traces Interrupts/diagnostics/status information Diagnostics indication LED
· RUN/STOP LED · ERROR LED · MAINT LED · Connection display LINK TX/RX Supported technology objects Motion Control
· Number of available Motion Control resources for technology objects (except cam disks)
· Required Motion Control resources per speed-controlled axis per positioning axis per synchronous axis per external encoder per output cam per cam track per probe
· Number of available Extended Motion Control resources for technology objects
· Required Extended Motion Control resources for each cam for each set of kinematics
6ES7516-3TN00-0AB0
Peripheral inputs/outputs 200
Yes 3 200 500
4; Up to 512 KB of data per trace are possible
Yes Yes Yes Yes
Yes; Note: The number of technology objects affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER 6 400
40 80 160 80 20 160 40 192
2 30
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
46
Manual, 12/2017, A5E40898375-AA
Technical specifications
Article number · Positioning axis Number of positioning axes at motion control cycle of 4 ms (typical value) Number of positioning axes at motion control cycle of 8 ms (typical value) Controller · PID_Compact
· PID_3Step
· PID-Temp
Counting and measuring · High-speed counter Standards, approvals, certificates Suitable for safety functions Ambient conditions Ambient temperature during operation · horizontal installation, min. · horizontal installation, max.
· vertical installation, min. · vertical installation, max.
Ambient temperature during storage/ transportation
· min. · max. Configuration Programming Programming language
LAD FBD STL SCL GRAPH Know-how protection · User program protection/password protection · Copy protection · Block protection
6ES7516-3TN00-0AB0
55
80
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
No
0 °C 60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off 0 °C 40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C 70 °C
Yes Yes Yes Yes Yes
Yes
Yes Yes
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
47
Technical specifications
Article number Access protection
· Password for display
· Protection level: Write protection
· Protection level: Read/write protection
· Protection level: Complete protection Cycle time monitoring
· lower limit
· upper limit Dimensions
Width Height Depth Weights Weight, approx.
6ES7516-3TN00-0AB0
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
175 mm 147 mm 129 mm
1 978 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
48
Manual, 12/2017, A5E40898375-AA
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this section. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimensional drawings of the CPU 1516T-3 PN/DP
Figure A-1 Dimensional drawing of the CPU 1516T-3 PN/DP, front and side view
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
Manual, 12/2017, A5E40898375-AA
49
Dimensional drawing
Figure A-2 Dimensional drawing of the CPU 1516T-3 PN/DP, side view with open front panel
CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0)
50
Manual, 12/2017, A5E40898375-AA
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
SIMATIC
S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
_Pr_od_u_ct_o_ve_rv_ie_w_________2_
_W_iri_ng_______________3_
_ _ _ _ _ _ _ _ _ _ _ Interrupts, error messages,
diagnostics and system
4
alarms
_Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______5_
_Di_m_en_si_on_d_ra_w_in_g ________A_
09/2016
A5E33594822-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E33594822-AC 08/2016 Subject to change
Copyright © Siemens AG 2014 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system/ ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1517-3 PN/DP.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
4
Manual, 09/2016, A5E33594822-AC
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (http://www.siemens.com/automation/service&support).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
New functions in firmware version V2.0................................................................................. 11
2.2
Applications of the S7-1500 CPU .......................................................................................... 14
2.3
Operating principle ................................................................................................................. 19
2.4
Properties ............................................................................................................................... 20
2.5 2.5.1 2.5.2 2.5.3
Operating and display elements ............................................................................................ 25 Front view of the module with closed front panels ................................................................. 25 Front view of the module without front panels ....................................................................... 27 Rear view of the module ........................................................................................................ 28
2.6
Mode switch ........................................................................................................................... 28
3 Wiring ................................................................................................................................................... 29
4 Interrupts, error messages, diagnostics and system alarms................................................................... 33
4.1
Status and error display of the CPU ...................................................................................... 33
5 Technical specifications ........................................................................................................................ 36
A Dimension drawing ............................................................................................................................... 48
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
6
Manual, 09/2016, A5E33594822-AC
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
8
Manual, 09/2016, A5E33594822-AC
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
10
Manual, 09/2016, A5E33594822-AC
Product overview
2
2.1
New functions in firmware version V2.0
New functions of the CPU in firmware version V2.0
This section lists the new features of the CPU with firmware version V2.0. You can find additional information in the sections of this manual.
Table 2- 1 New functions of the CPU with firmware version 2.0 compared with firmware version V1.8
New functions OPC UA server
PROFINET IO PROFINET IO on the 2nd PROFINET interface IRT with very short data cycle times down to 187.5 µs
MRPD: Media Redundancy for Planned Duplication for IRT
Applications
Customer benefits
You realize the data communication between different systems, both within the process level and on the control and enterprise levels:
· To embedded systems with controllers
· To controllers with MES systems and systems of the enterprise level (ERP, asset systems)
OPC UA is a unified standard for data communication and is independent of any particular operating system platforms.
You have integrated security mechanisms on different automation systems, for example, for data exchange, on the application level, for authentication of the user.
OPC UA servers provide a large amount of data:
· Values of PLC tags that clients can access
· To Siemens controllers with controllers from other manufacturers
· To intelligent sensors with controllers Supported standard: OPC Data Access, DA.
· Data types of these PLC tags
· Information about the OPC UA server itself and the CPU
In this way, clients can gain an overview and can read and write values.
You can operate another PROFINET IO You use a fieldbus in the plant.
system on the CPU or connect additional The CPU can perform fast and deterministic data
IO devices.
exchange as an I-device with a higher-level controller
(PROFINET/Ethernet) through the second line.
You realize high-end applications with IO You make PROFINET IO communication and stand-
communication which place very high ard communication possible via one cable even with
performance demands on the IO pro- a send clock of 187.5 µs.
cessing.
Data cycle of 187.5 s: You configure program
blocks with the additional "low jitter" property, which
provides deterministic runtimes.
PROFINET IO IRT enables you to realize applications that place particularly high demands on failure safety and accuracy (isochronous).
By sending the cyclic IO data in both directions in the ring, the communication to the IO devices is maintained even when the ring is interrupted and does not result in device failure even with fast update times. You achieve higher failure safety than with MRP.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
11
Product overview 2.1 New functions in firmware version V2.0
New functions
Applications
Customer benefits
PROFINET performance You can develop applications with high
upgrade
demands on speed and clock cycles.
This is interesting for applications with
high demands on performance.
Better utilization of the bandwidth results in short reaction times.
Limitation of the data infeed into the network
You limit the network load for standard Ethernet communication to a maximum value.
You smooth peaks in the data infeed.
You share the remaining bandwidth based on requirements.
Display and Web server
Backing up and restoring via the display
Backing up and restoring via the Web server
You can back up and restore the CPU configuration to/from the SIMATIC memory card without a programming device/PC.
You can, for example, backup and restore the configuration of the CPU to the PG/PC on which the Web server is running.
You can make a backup copy of an operational project without STEP 7.
In an "emergency", you can simply use an existing configuration without STEP 7, for example, during commissioning or after a program download.
Display and Web server provide up to three project languages for comments and message texts
When you export your plants worldwide, for example, comments or message texts can be stored on the card in up to 3 languages. For example, German author's language, English - internationally usable, Portuguese - end user's language.
You provide customers with better service.
Trace via Web server
Monitoring of configured technology objects via a Web server
When you enable trace functions via the Web server, you have better service support. You can send your trace recordings via Web service, for example, to your service partner.
You can monitor statuses, errors, technology alarms and the current values of technology objects (TOs) with the Web server.
You get plant/project information for diagnostics and maintenance requirements without STEP 7.
You can provide trace recordings for each Web server.
You save time in troubleshooting.
Formatting, erasing or converting a SIMATIC memory card via the display
Your SIMATIC memory card is directly formatted, erased or converted to a program card without having to use STEP 7. You save time.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
12
Manual, 09/2016, A5E33594822-AC
Product overview 2.1 New functions in firmware version V2.0
New functions
Motion control
Greater number of axes for Motion Control applications and new technology objects: Output cam, cam track and measuring input
Applications
Customer benefits
Speed specification, e.g. for: · Pumps, fans, mixers · Conveyor belts · Auxiliary drives Positioning tasks, e.g.: · Lifting and vertical conveyors
You can implement additional Motion Control applications with a CPU.
The scalable configuration limits allow you to handle all types of application.
High machine speeds result in greater productivity with better accuracy.
· Feeding and gate control
· Palletizing equipment
Output cams and cam tracks make other applications possible, e.g.:
· Applying glue tracks
· Triggering switching operations with precise positioning
· Very precise processing of products on a conveyor belt
Measuring inputs are used, for example:
· For measuring products
· For detecting the position of the product on a conveyor belt
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
13
Product overview 2.2 Applications of the S7-1500 CPU
2.2
Applications of the S7-1500 CPU
Area of application
SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation.
The modular and fanless design, simple implementation of distributed structures, and userfriendly operation make SIMATIC S7-1500 the economic and convenient solution for a variety of tasks.
Applications of the SIMATIC S7-1500, include, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automobile engineering
Water/waste water
Food & Beverage
Applications of the SIMATIC S7-1500T include, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial capability from the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
14
Manual, 09/2016, A5E33594822-AC
Product overview 2.2 Applications of the S7-1500 CPU
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 2 Standard CPUs
CPU
Performance segment
CPU 1511-1 PN Standard CPU for small to mid-range applications
CPU 1513-1 PN Standard CPU for midrange applications
CPU 1515-2 PN Standard CPU for midrange to large applications
CPU 1516-3 PN/DP
Standard CPU for demanding applications and communication tasks
CPU 1517-3 PN/DP
Standard CPU for demanding applications and communication tasks
CPU 1518-4 PN/DP
CPU 1518-4 PN/DP ODK
Standard CPU for highperformance applications, demanding communication tasks and very short reaction times
PROFIBUS interfaces
---1
1
1
PROFINET IO RT/IRT interfaces
1
1 1
1
1
1
PROFINET IO RT inter-
face --
-1
1
1
1
PROFINET basic func-
tionality
--
Work memory
1.23 MB
Processing time for bit operations
60 ns
--
1.95 MB 40 ns
--
3.75 MB 30 ns
--
6.5 MB 10 ns
--
11 MB
2 ns
1
26 MB
1 ns
Table 2- 3 Compact CPUs
CPU
CPU 1511C-1 PN CPU 1512C-1 PN
Performance segment PROFIBUS interfaces
Compact CPU for small
--
to mid-range applications
Compact CPU for mid-
--
range applications
PROFINET IO RT/IRT interfaces
1
1
PROFINET IO RT inter-
face --
--
PROFINET Work Processing
basic func- memory time for bit
tionality
operations
--
1.175 M 60 ns
B
--
1.25 MB 48 ns
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
15
Product overview 2.2 Applications of the S7-1500 CPU
Table 2- 4 Fail-safe CPUs
CPU
Performance segment
CPU 1511F-1 PN Fail-safe CPU for small to mid-range applications
CPU 1513F-1 PN Fail-safe CPU for midrange applications
CPU 1515F-2 PN Fail-safe CPU for midrange to large applications
CPU 1516F-3 PN/DP
Fail-safe CPU for demanding applications and communication tasks
CPU 1517F-3 PN/DP
CPU 1517TF-3 PN/DP
Fail-safe CPU for demanding applications and communication tasks
PROFIBUS interfaces
--
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT inter-
face
--
PROFINET basic func-
tionality
--
Work Processing memory time for bit
operations
1.23 M B
60 ns
--
1
--
--
1.95 M 40 ns
B
--
1
1
--
3.75 M 30 ns
B
1
1
1
--
6.5 MB 10 ns
1
1
1
--
11 MB
2 ns
CPU 1518F-4 Fail-safe CPU for high-
1
1
1
1
26 MB
1 ns
PN/DP
performance applica-
CPU 1518F-4 PN/DP ODK
tions, demanding communication tasks and very short reaction times
Table 2- 5 Technology CPUs
CPU
CPU 1511T-1 PN
CPU 1515T-2 PN
CPU 1517T-3 PN/DP
CPU 1517TF-3 PN/DP
Performance segment
PROFIBUS PROFINET interfaces IO RT/IRT
interfaces
Technology CPU for
--
1
small to mid-range ap-
plications
Technology CPU for
--
1
mid-range to large appli-
cations
Technology CPU for
1
1
complex applications
and communication
tasks
This CPU is described in the fail-safe CPUs
PROFINET IO RT inter-
face --
1
1
PROFINET basic func-
tionality --
--
--
Work memory
1.23 M B
3.75 M B
11 MB
Processing time for bit operations
60 ns
30 ns
2 ns
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
16
Manual, 09/2016, A5E33594822-AC
Product overview 2.2 Applications of the S7-1500 CPU
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Pulse generators · PWM (pulse-width modulation) · PTO (Pulse Train Output or stepper motor con-
trol) · Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 4 (PTOx/PWMx)
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 4 (PTOx/PWMx)
Integrated technological functions
The CPUs of the SIMATIC S7-1500 support motion control functions. STEP 7 offers blocks standardized according to PLCopen for configuring and connecting a drive to the CPU. Motion Control supports speed-controlled, positioning and synchronous axes (synchronizing without specification of the synchronous position) as well as external encoders, cams, cam tracks and measuring inputs.
The CPUs of theSIMATIC S7-1500T support advanced motion control functions in addition to the motion control functions offered by the standard CPUs. Additional motion control functions are absolute synchronous axes (synchronization with specification of synchronous position) and the cam.
For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags.
In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
Technology modules also implement functions such as high-speed counting, position detection and measuring functions and pulse generators (PWM and frequency output). In compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and require no additional technology modules.
SIWAREX is a versatile and flexible weighing module, which you can use as a static scale for operation.
Due to the supported technology functions, the CPUs are suitable for controlling pumps, fans, mixers, conveyor belts, lifting platforms, gate control systems, building management systems, synchronized axes, etc.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
17
Product overview 2.2 Applications of the S7-1500 CPU
Security Integrated
In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks.
Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU.
In addition, you can assign various access rights to different user groups in the controller using four different authorization levels.
Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller.
The use of an Ethernet CP (CP 1543-1) provides you with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated
The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally.
These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration also provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications.
The fail-safe CPUs are certified for use in safety mode up to:
Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010
Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to EN ISO 13849-1:2008
Additional password protection for F-configuration and F-program is set up for IT security.
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Errors messages are immediately shown on the display in plain text, thus helping customers to reduce downtimes.
Uniform front connectors for all modules and integrated potential bridges for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
18
Manual, 09/2016, A5E33594822-AC
Product overview 2.3 Operating principle
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7, on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostic information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server for 3 languages. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
2.3
Operating principle
Principle of operation
The CPU contains the operating system and executes the user program. The user program is located on the SIMATIC memory card and is processed in the work memory of the CPU.
The connection to the process is centralized or distributed via PROFINET or PROFIBUS with I/O modules.
The PROFINET interfaces on the CPU allow simultaneous communication with PROFINET devices, PROFINET controllers, HMI devices, programming devices, other controllers and other systems. CPU 1517-3 PN/DP supports operation as an IO controller and I-device.
Similarly to the PROFINET interface, the PROFIBUS interface available on the CPU allows communication with other devices. When you use the interface as PROFIBUS DP interface, the CPU on the PROFIBUS DP also assumes the role of a DP master.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
19
Product overview 2.4 Properties
2.4
Properties
Article number
6ES7517-3AP00-0AB0
View of the module
The following figure shows the CPU 1517-3 PN/DP.
Figure 2-1 CPU 1517-3 PN/DP
Note Protective film Note that a protective film is attached to the display of the CPU when shipped from the factory. Remove the protective film if necessary.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
20
Manual, 09/2016, A5E33594822-AC
Properties
Product overview 2.4 Properties
CPU 1517-3 PN/DP has the following technical properties:
Communication:
Interfaces
CPU 1517-3 PN/DP has three interfaces. Two interfaces for PROFINET and one for PROFIBUS.
The 1st PROFINET interface (X1 P1, X1 P2) has two ports. In addition to PROFINET basic functionality, it also supports PROFINET IO RT (real-time) and IRT (isochronous real-time). PROFINET IO communication or real-time settings can be configured.
Even with a send clock of 187.5 µs, IO communication and standard communication is possible via one cable.
Port 1 and port 2 can also be used as ring ports for the configuration of redundant ring structures in Ethernet.
The 2nd PROFINET interface (X2 P1) has one port. In addition to PROFINET basic functionality, its also supports PROFINET IO RT (real-time). The basic functionality of PROFINET supports HMI communication, communication with the configuration system, communication with a higher-level network (backbone, router, Internet) and communication with another machine or automation cell. The 2nd PROFINET interface supports a transmission rate of 1000 Mbps as of firmware version V1.7.
Note IP subnets
The IP subnets of the two interfaces must be different. This means that the subnets of the IP addresses of the two interfaces must differ from each other.
The 3rd interface (X3) is used to connect to a PROFIBUS network. When you use the interface as PROFIBUS DP interface, the CPU is the DP master in this case. The CPU cannot assume the role of a DP slave.
OPC UA With OPC UA, data is exchanged via an open and vendor-neutral communication protocol. The CPU, as OPC UA server, can communicate with OPC UA clients such as HMI panels, SCADA systems, etc.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
21
Product overview 2.4 Properties
Integrated Web server: A Web server is integrated in the CPU. You can read out the following information with the Web server: Start page with general CPU information Identification information Contents of the diagnostics buffer Query of module states Firmware update Alarms (without acknowledgment option) Information about communication PROFINET topology Tag status, writing tags Watch tables Memory usage User pages Data logs (if used) Online backup and restoration of the configuration. Diagnostic information for the motion control technology objects Display of trace recording stored on the SIMATIC memory card Readout service data Basic Web pages Display of the Web server in 3 project languages, for example, comments and message texts Recipes User-defined Web pages
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
22
Manual, 09/2016, A5E33594822-AC
Product overview 2.4 Properties
Integrated technology:
Motion Control
The Motion Control functionality uses technology objects to support speed-controlled axes, positioning axes, synchronous axes, external encoders, cams, cam tracks and measuring inputs, as well as PLCopen blocks for programming the motion control functionality. You can find a detailed description of the use of Motion Control and its configuration in the S7-1500 Motion Control (http://support.automation.siemens.com/WW/view/en/109739589) function manual. You can also use the TIA Selection Tool (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool) or the SIZER (http://w3.siemens.com/mcms/mc-solutions/en/engineering-software/drive-design-toolsizer/Pages/drive-design-tool-sizer.aspx) to create or configure axes.
Integrated closed-loop control functionality
- PID Compact (continuous PID controller)
- PID 3Step (step controller for integrating actuators)
- PID Temp (temperature controller for heating and cooling with two separate actuators)
Trace functionality:
The trace functionality supports troubleshooting and optimization of the user program. You can find additional information on the trace functionality in the Using the Trace and Logic Analyzer (http://support.automation.siemens.com/WW/view/en/64897128) function manual.
Integrated system diagnostics:
The alarms for the system diagnostics are automatically created by the system and displayed on a PG/PC, HMI device, Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
23
Product overview 2.4 Properties
Integrated security:
Know-how protection
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
Access protection
Extended access protection provides high-quality protection against unauthorized configuration changes. You can use authorization levels to assign separate rights to different user groups.
Integrity protection
The system protects the data transferred to the CPU against manipulation. The CPU detects erroneous or manipulated engineering data.
Additional functions:
PROFIenergy You can find information on the topic of "PROFIenergy" in the PROFINET function manual (https://support.industry.siemens.com/cs/ww/en/view/49948856) and in the PROFINET specification on the Internet (http://www.profibus.com).
Shared device You can find information on the topic of "Shared device" in the PROFINET function manual (https://support.industry.siemens.com/cs/ww/en/view/49948856).
Configuration control You can find information on the topic of "Configuration control" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Isochronous mode You can find information about the "Isochronous mode" topic in the PROFINET (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Reference
You will find additional information on the topic of "Integrated security/Access protection" in the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
24
Manual, 09/2016, A5E33594822-AC
2.5
2.5.1
Operating and display elements
Product overview 2.5 Operating and display elements
Front view of the module with closed front panels
The following figure shows the front view of the CPU 1517-3 PN/DP.
LEDs for the current operating mode and diagnostics status of the CPU Front panel with display Display Operator control buttons Front panel of the PROFIBUS interface
Figure 2-2 View of the CPU 1517-3 PN/DP (with front panels) - front
Note Temperature range for display
To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU.
For more information on the temperatures at which the display switches itself on and off, refer to the Technical specifications (Page 36).
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
25
Product overview 2.5 Operating and display elements
Removing and attaching the front panel with display
You can remove and attach the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you remove or attach the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Before you remove or fit the front panel, always switch off the power supply to the S7-1500 automation system in hazardous area zone 2. The CPU maintains its operating mode.
Locking the front panel
You can lock the wide front panel with display as well as the narrow front panel of the PROFIBUS interface to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panels.
Reference
Figure 2-3 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, configurable protection levels and local locks in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
26
Manual, 09/2016, A5E33594822-AC
2.5.2
Product overview 2.5 Operating and display elements
Front view of the module without front panels
The following figure shows the operator controls and connection elements of the CPU 1517-3 PN/DP.
Mode selector No function PROFIBUS interface (X3) Fixing screws Connector for power supply PROFINET IO interface (X2) with 1 port PROFINET IO interface (X1) with 2 ports MAC addresses of the interfaces LEDs for the 3 ports of the PROFINET interfaces X1 and X2 Slot for the SIMATIC memory card Display connector LEDs for the current operating mode and diagnostic status of the CPU
Figure 2-4 View of the CPU 1517-3 PN/DP (without front panels) - front
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
27
Product overview 2.6 Mode switch
2.5.3
Rear view of the module
The following figure shows the connection elements on the rear of the CPU 1517-3 PN/DP.
2.6
Shield contact surfaces Plug-in connection for power supply Plug-in connection for backplane bus Fixing screws
Figure 2-5 View of the CPU 1517-3 PN/DP - rear
Mode switch
Use the mode switch to set the CPU operating mode. The following table shows the position of the switch and the corresponding meaning.
Table 2- 6
Position RUN STOP MRES
Mode switch settings
Meaning RUN mode STOP mode Memory reset
Explanation The CPU is executing the user program. The user program is not being executed. Position for CPU memory reset.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
28
Manual, 09/2016, A5E33594822-AC
Wiring
3
This section provides information on the terminal assignment of the individual interfaces and the block diagram of the CPU 1517-3 PN/DP.
24 V DC supply voltage (X80)
The connector for the power supply is plugged in when the CPU ships from the factory. The following table shows the pin assignment for a 24 V DC supply voltage.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring opener (one spring opener per terminal)
Bridged internally:
and and
Figure 3-1 Supply voltage connection
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
29
Wiring
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R)
The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is
allocated either as data terminal equipment (MDI) or a switch (MDI-X).
PROFINET interface X2 with 1 port (X2 P1)
The assignment corresponds to the Ethernet standard for an RJ45 plug.
Autocrossing is always active on X2. This means the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
PROFIBUS interface X3
The table below shows the terminal assignment of the PROFIBUS interface. The assignment corresponds to the standard assignment of an RS485 interface.
Table 3- 1
PROFIBUS interface terminal assignment
View
Signal name
1
-
2
-
3 RxD/TxD-P
4
RTS
5
M5V2
6
P5V2
7
-
8 RxD/TxD-N
9
-
Designation Data line B Request To Send Data reference potential (from station) Supply plus (from station) Data line A -
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
30
Manual, 09/2016, A5E33594822-AC
Wiring
Note Supply of I/O devices
The CPU 1517-3 PN/DP does not provide a 24 V DC power supply on the PROFIBUS interface. I/O devices (for example, PC adapter USB ) are therefore only operational on the interface in conjunction with a plug-in power supply set for external power supply.
The innovative successor product, PC adapter USB A2, receives the required power supply via the USB port. The USB A2 PC adapter therefore does not require a 24 V DC supply voltage and can be operated without a plug-in power supply set for external power supply.
Reference
You can find additional information on the topics of "Connecting the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Assignment of the MAC addresses
CPU 1517-3 PN/DP has two PROFINET interfaces. The first interface has two ports. Each of the PROFINET interfaces has a MAC address and each of the PROFINET ports has its own MAC address. In total, the CPU 1517-3 PN/DP has five MAC addresses.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC address are lasered on the rating plate on the right side of each CPU 1517-3 PN/DP.
The table below shows how the MAC addresses are assigned.
Table 3- 2 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3 MAC address 4 MAC address 5
Assignment
PROFINET interface X1
(visible in STEP 7 for accessible devices)
Labeling
· Front, lasered · Right side, lasered
(start of number range)
Port X1 P1 R (required for LLDP, for example)
· Front and right side, not lasered
Port X1 P2 R (required for LLDP, for example)
· Front and right side, not lasered
PROFINET interface X2
· Front, lasered
(visible in STEP 7 for accessible devic- · Right side, not lasered es)
Port X2 P1 (required for LLDP, for example)
· Front, not lasered
· Right side, lasered (start of number range)
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
31
Wiring
Block diagram
The following figure shows the block diagram of the CPU 1517-3 PN/DP.
X50
X80 24 V DC
Display RUN/STOP/MRES mode selector Electronics PROFINET 2-port switch PROFIBUS DP driver Backplane bus interface Internal supply voltage SIMATIC memory card Infeed of supply voltage
Figure 3-2 Block diagram of the CPU 1517-3 PN/DP
PN X1 P1 R PN X1 P2 R PN X2 P1 PB X3 L+ M R/S ER MT X1 P1, X1 P2, X2 P1
PROFINET interface X1 Port 1 PROFINET interface X1 Port 2 PROFINET interface X2 Port 1 PROFIBUS interface X3 24 V DC supply voltage Ground RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
32
Manual, 09/2016, A5E33594822-AC
Interrupts, error messages, diagnostics and system alarms
4
The status and error displays of the CPU 1517-3 PN/DP are described below.
You will find additional information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topics of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error display of the CPU
LED display
The figure below shows the CPU 1517-3 PN/DP LEDs.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) No function LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED)
Figure 4-1 LED display of the CPU 1517-3 PN/DP (without front panel)
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
33
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1517-3 PN/DP has three LEDs to signal the current operating status and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED LED off LED off
LED lit green LED lit green LED lit green
LED lit green
LED lit yellow
LED lit yellow LED lit yellow
LED flashes yellow
LED flashes yellow/green LED flashes yellow/green
ERROR LED LED off
LED flashes red LED off
LED flashes red LED off
LED off
LED off LED off LED flashes red LED off
LED off LED flashes red
MAINT LED LED off LED off
Meaning Missing or insufficient power supply on the CPU.
An error has occurred.
LED off LED off
CPU is in RUN mode. A diagnostics event is pending.
LED lit yellow
LED flashes yellow
LED flashes yellow
LED off LED flashes yel-
low LED off
LED off
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective
CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card Startup (transition from RUN STOP)
LED flashes yellow
Startup (CPU booting)
Test of LEDs during startup, inserting a module.
LED flashing test
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
34
Manual, 09/2016, A5E33594822-AC
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of ports for the CPU 1517-3 PN/DP.
Table 4- 2 Meaning of the LEDs
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
35
Technical specifications
5
General information Product type designation Hardware function version Firmware version Engineering with STEP 7 TIA Portal can be configured/integrated as of version Configuration control Via data record Display Screen diagonal (cm) Operator controls Number of buttons Mode selector Supply voltage Type of supply voltage Low limit of permitted range (DC) High limit of permitted range (DC) Reverse polarity protection Power and voltage failure buffering Power/voltage failure buffer time Input current Current consumption (rated value) Inrush current, max. I²t Power Power consumption from the backplane bus (balanced) Incoming power to the backplane bus Power loss Power loss, typ. Memory Number of slots for SIMATIC memory card SIMATIC memory card required Work memory Integrated (for program) Integrated (for data)
6ES7517-3AP00-0AB0
CPU 1517-3 PN/DP FS04 V2.0
V14
Yes
6.1 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms
1.55 A 2.4 A; rated value 0.02 A²s
30 W 12 W
24 W
1 Yes
2 MB 8 MB
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
36
Manual, 09/2016, A5E33594822-AC
Technical specifications
Load memory Plug-in (SIMATIC memory card), max. Buffering Maintenance-free CPU processing times For bit operations, typ. For word operations, typ. For fixed-point arithmetic, typ. For floating-point arithmetic, typ. CPU blocks Number of elements (total) DB Number range
Size, max.
FB Number range Size, max. FC Number range Size, max. OB Size, max. Number of free-cycle OBs Number of time-of-day interrupt OBs Number of time-delay interrupt OBs Number of cyclic interrupt OBs Number of hardware interrupt OBs Number of DPV1 interrupt OBs Number of isochronous mode OBs Number of technology synchronous interrupt OBs Number of restart OBs Number of asynchronous error OBs Number of synchronous error OBs Number of diagnostic interrupt OBs Nesting depth Per priority class
6ES7517-3AP00-0AB0
32 GB
Yes
2 ns 3 ns 3 ns 12 ns
10000; blocks (OB/FB/FC/DB) and UDTs
1 ... 60 999; divided into: Number range available for the user: 1 ... 59 999 and number range for DBs generated by SFC 86: 60 000 ... 60 999 8 MB; the maximum size of the DB is 64 KB with non-optimized module access
0 ... 65 535 512 KB
0 ... 65 535 512 KB
512 KB 100 20 20 20; with minimum OB 3x cycle of 100 µs 50 3 2 2 100 4 2 1
24
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
37
Technical specifications
Counters, timers and their retentivity S7 counters Quantity Retentivity · Adjustable IEC counters Quantity Retentivity · Adjustable S7 timers Quantity Retentivity · Adjustable IEC timers Quantity Data areas and their retentivity Total retentive data area (including timers, counters, bit memories), max.
Bit memory Number, max. Number of clock memory bits
Data blocks Retentivity adjustable Retentivity preset Local data Per priority class, max. Address area Number of I/O modules I/O address area Inputs Outputs Of which per integrated IO subsystem · Inputs (volume)
· Outputs (volume)
Of which per CM/CP · Inputs (volume)
· Outputs (volume)
6ES7517-3AP00-0AB0
2048
Yes
Unlimited (limited only by work memory)
Yes
2048
Yes
Unlimited (limited only by work memory)
768 KB; for bit memories, timers, counters, DBs and technological data (axes), usable retentive memory: 700 KB
16 KB 8; 8 clock memory bits, grouped in one clock memory byte
Yes No
64 KB; max. 16 KB per block
16384; max. number of modules/submodules
32 KB; all inputs are in the process image 32 KB; all outputs are in the process image
16 KB; 16 KB via the integrated PROFINET IO interface, 8 KB via the integrated DP interface 16 KB; 16 KB via the integrated PROFINET IO interface, 8 KB via the integrated DP interface
8 KB 8 KB
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
38
Manual, 09/2016, A5E33594822-AC
Technical specifications
Process image partitions Number of process image partitions, max. Hardware configuration Number of distributed IO systems
Number of DP masters Integrated Via CM
Number of IO controllers Integrated Via CM
Rack Modules per rack, max. Number of rows, max. PtP CM Number of PtP CMs
Time Clock Type Backup duration Deviation per day, max. Operating hours counter Quantity Time-of-day synchronization Supported On DP, master in AS, Master in AS, Slave On Ethernet via NTP Interfaces Number of PROFINET interfaces Number of PROFIBUS interfaces 1st interface Interface hardware Number of ports Integrated switch RJ45 (Ethernet)
6ES7517-3AP00-0AB0
32
64; a distributed IO system is understood to mean the integration of distributed I/O via PROFINET or PROFIBUS communication modules as well as the connection of I/O via AS-i master modules or links (e.g. IE/PB link)
1 8; a maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
2 8; a maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
32; CPU + 31 modules 1
The number of PtP CMs that can be connected is only limited by the available slots
Hardware clock 6 wk; at 40 °C ambient temperature, typ. 10 s; typ.: 2 s
16
Yes Yes Yes Yes Yes
2 1
2 Yes Yes; X1
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
39
Technical specifications
Protocols PROFINET IO controller PROFINET IO device SIMATIC communication Open IE communication Web server Media redundancy PROFINET IO controller Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP
· MRPD · PROFIenergy · Prioritized startup · Number of connectable IO devices, max.
· of these, IO devices with IRT, max. · Number of connectable IO devices for RT,
max. · of these, in a line topology, max. · Number of IO devices that can be activat-
ed/deactivated simultaneously, max. · Number of IO devices per tool, max. · Update times
6ES7517-3AP00-0AB0
Yes Yes Yes Yes Yes Yes
Yes Yes Yes Yes Yes Yes; as MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50 Yes; requirement: IRT Yes Yes; max. 32 PROFINET devices 512; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 64 512
512 8; in total over all interfaces
8 The minimum value of the update time also depends on the communication component set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
40
Manual, 09/2016, A5E33594822-AC
Technical specifications
Update time with IRT · for send clock of 250 µs
· With send clock of 500 µs · With send clock of 1 ms · with send clock of 2 ms · with send clock of 4 ms · with IRT and "odd" send clock parameter as-
signment Update time with RT · for send clock of 250 µs · With send clock of 500 µs · With send clock of 1 ms · with send clock of 2 ms · with send clock of 4 ms PROFINET IO device Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP · MRPD · PROFIenergy · Shared device · Number of IO controllers with shared device,
max. 2nd interface Interface hardware Number of ports Integrated switch RJ45 (Ethernet)
6ES7517-3AP00-0AB0
250 µs to 4 ms; note: with IRT with isochronous mode, the minimum update time of 500 µs of the isochronous OB is crucial 500 µs to 8 ms 1 ms to 16 ms 2 ms to 32 ms 4 ms to 64 ms Update time = set "odd" send clock (any multiple of 125 µs: 375 µs, 625 µs to 3 875 µs)
250 µs to 128 ms 500 µs to 256 ms 1 ms to 512 ms 2 ms to 512 ms 4 ms to 512 ms
Yes Yes No Yes Yes Yes Yes; requirement: IRT Yes Yes 4
1 No Yes; X2
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
41
Technical specifications
Protocols PROFINET IO controller PROFINET IO device SIMATIC communication Open IE communication Web server Media redundancy PROFINET IO controller Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP · MRPD · PROFIenergy · Prioritized startup · Number of connectable IO devices, max.
· Number of connectable IO devices for RT, max.
· of these, in a line topology, max. · Number of IO devices that can be activat-
ed/deactivated simultaneously, max. · Number of IO devices per tool, max. · Update times
Update time with RT · With send clock of 1 ms
6ES7517-3AP00-0AB0
Yes Yes Yes Yes Yes No
Yes Yes No Yes No No No Yes No 128; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 128
128 8; in total over all interfaces
8 The minimum value of the update time also depends on the communication component set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data.
1 ms to 512 ms
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
42
Manual, 09/2016, A5E33594822-AC
Technical specifications
PROFINET IO device Services · PG/OP communication
6ES7517-3AP00-0AB0 Yes
· S7 routing
Yes
· Isochronous mode
No
· Open IE communication
Yes
· IRT
No
· MRP
No
· MRPD
No
· PROFIenergy
Yes
· Prioritized startup
No
· Shared device
Yes
· Number of IO controllers with shared device, 4 max.
3rd interface Interface hardware Number of ports RS 485 Protocols PROFIBUS DP master PROFIBUS DP slave SIMATIC communication Interface hardware RJ45 (Ethernet) 100 Mbps Autonegotiation Autocrossing Industrial Ethernet status LED RS 485 Transmission rate, max. Protocols Number of connections Number of connections, max.
Number of connections reserved for ES/HMI/Web Number of connections via integrated interfaces Number of S7 routing connections
1 Yes; X3
Yes No Yes
Yes Yes Yes Yes
12 Mbps
320; via integrated interfaces of the CPU and connected CPs/CMs 10 160 64; in total, only 16 S7 routing connections are supported via PROFIBUS
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
43
Technical specifications
SIMATIC communication S7 communication, as server S7 communication, as client User data per job, max.
Open IE communication TCP/IP · Data length, max. · Multiple passive connections per port, sup-
ported ISO-on-TCP (RFC1006) · Data length, max. UDP · Data length, max. DHCP SNMP DCP LLDP Web server HTTP HTTPS PROFIBUS DP master Number of connections, max. Services · PG/OP communication · S7 routing · Data record routing · Isochronous mode · Constant bus cycle time · Number of DP slaves
· Activation/deactivation of DP slaves OPC UA OPC UA server
· Application authentication · Security Policies
· User authentication
6ES7517-3AP00-0AB0
Yes Yes See online help (S7 communication, user data size)
Yes 64 KB Yes
Yes 64 KB Yes 1472 bytes No Yes Yes Yes
Yes; standard and user-defined sites Yes; standard and user-defined sites
48; for the integrated PROFIBUS DP interface
Yes Yes Yes Yes Yes 125; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET Yes
Yes; Data Access (Read, Write, Subscribe), Runtime license required Yes Available Security Policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "Anonymous" or with user name and password
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
44
Manual, 09/2016, A5E33594822-AC
Technical specifications
6ES7517-3AP00-0AB0
Additional protocols
MODBUS
Yes; MODBUS TCP
Media redundancy
Switchover time in the case of cable break, typ. 200 ms; with MRP; bumpless with MRPD
Number of devices in the ring, max.
50
Isochronous mode
Isochronous mode (application synchronized up to Yes; with minimum OB 6x cycle of 250 µs terminal)
Constant bus cycle time
Yes
S7 signaling functions
Number of stations that can be logged in for sig- 32 naling functions, max.
Block-related alarms
Yes
Number of configurable interrupts, max.
10000
Number of simultaneously active interrupts in interrupt pool
· Number of reserved user interrupts
1000
· Number of reserved interrupts for system di- 200 agnostics
· Number of reserved interrupts for motion con- 160 trol technology objects
Test/commissioning functions Joint commissioning (Team Engineering)
Status block
Single-step Status/modify Status/modify tag Tags
Number of tags, max. · Of which are status tags, max.
Yes; parallel online access possible for up to 10 engineering systems Yes; up to 16 simultaneously (in total from all ES clients) No
Yes Inputs/outputs, bit memory, DB, peripheral inputs/outputs, timers, counters
200; per job
· Of which are modify tags, max.
200; per job
Force Forcing, tags Number of tags, max. Diagnostics buffer Available Number of entries, max.
· Of which are power failure-proof
Peripheral inputs/outputs 200
Yes 3200 1000
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
45
Technical specifications
Traces Number of configurable traces Interrupts/diagnostics/status information Diagnostics display LED RUN/STOP LED ERROR LED MAINT LED Connection display LINK TX/RX Supported technology objects Motion control
· Number of available motion control resources for technology objects (except cams)
· required Motion Control resources per speed-controlled axis per positioning axis per synchronous axis per external encoder per output cam per cam track per measuring input
Controller · PID_Compact
· PID_3Step
· PID temp
Counting and measuring · High-speed counter Standards, approvals, certificates Suitable for safety functions Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max.
Vertical mounting position, min. Vertical mounting position, max.
6ES7517-3AP00-0AB0
8; up to 512 KB data possible per trace
Yes Yes Yes Yes
Yes; note: the number of axes affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER 10240
40 80 160 80 20 160 40
Yes; universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
No
0 °C 60 ; display: 50 , the display is switched off at an operating temperature of typically 50 0 °C 40 ; display: 40 , the display is switched off at an operating temperature of typically 40
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
46
Manual, 09/2016, A5E33594822-AC
Technical specifications
Ambient temperature during storage/transport Min. Max. Configuring Programming Programming language · LAD
· FBD
· STL
· SCL
· GRAPH
Know-how protection User program protection Copy protection Block protection Access protection Password for display Protection level: Write protection Protection level: Read/write protection Protection level: Complete protection Cycle-time monitoring Low limit High limit Dimensions Width Height Depth Weights Weight, approx.
-40 °C 70 °C
6ES7517-3AP00-0AB0
Yes Yes Yes Yes Yes
Yes Yes Yes
Yes Yes Yes Yes
Adjustable minimum cycle time Adjustable maximum cycle time
175 mm 147 mm 129 mm
1978 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
Manual, 09/2016, A5E33594822-AC
47
Dimension drawing
A
This section contains the dimension drawing of the module on the mounting rail, as well as a dimension drawing with the front panel open. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimension drawings for CPU 1517-3 PN/DP
Figure A-1 Dimension drawing of CPU 1517-3 PN/DP, front and side views
Figure A-2 Dimension drawing CPU 1517-3 PN/DP, side view with open front panel
CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0)
48
Manual, 09/2016, A5E33594822-AC
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
SIMATIC
S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
_Pr_od_u_ct_o_ve_rv_ie_w_________2_
_W_iri_ng_______________3_
_ _ _ _ _ _ _ _ _ _ _ Interrupts, error messages,
diagnostics and system
4
alarms
_Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______5_
_Di_m_en_si_on_d_ra_w_in_g ________A_
09/2016
A5E36285525-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E36285525-AA 08/2016 Subject to change
Copyright © Siemens AG 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system/ ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1517T-3 PN/DP.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
4
Manual, 09/2016, A5E36285525-AA
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (http://www.siemens.com/automation/service&support).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Applications of the S7-1500 CPU .......................................................................................... 11
2.2
Principle of operation ............................................................................................................. 16
2.3
Properties ............................................................................................................................... 17
2.4 2.4.1 2.4.2 2.4.3
Operator controls and display elements ................................................................................ 22 Front view of the module with closed front panels ................................................................. 22 Front view of the module without front panels ....................................................................... 24 Rear view of the module ........................................................................................................ 25
2.5
Mode selector......................................................................................................................... 25
3 Wiring ................................................................................................................................................... 26
3.1
Pin assignment....................................................................................................................... 26
4 Interrupts, error messages, diagnostics and system alarms................................................................... 31
4.1
Status and error displays of the CPU..................................................................................... 31
5 Technical specifications ........................................................................................................................ 34
A Dimension drawing ............................................................................................................................... 46
A.1
Dimension drawing CPU 1517T-3 PN/DP ............................................................................. 46
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
6
Manual, 09/2016, A5E36285525-AA
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
8
Manual, 09/2016, A5E36285525-AA
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
10
Manual, 09/2016, A5E36285525-AA
Product overview
2
2.1
Applications of the S7-1500 CPU
Area of application
SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation.
The modular and fanless design, simple implementation of distributed structures, and userfriendly operation make SIMATIC S7-1500 the economic and convenient solution for a variety of tasks.
Applications of the SIMATIC S7-1500, include, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automobile engineering
Water/waste water
Food & Beverage
Applications of the SIMATIC S7-1500T include, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial capability from the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
11
Product overview 2.1 Applications of the S7-1500 CPU
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 1 Standard CPUs
CPU
CPU 1511-1 PN
CPU 1513-1 PN CPU 1515-2 PN
CPU 1516-3 PN/DP
CPU 1517-3 PN/DP
CPU 1518-4 PN/DP CPU 1518-4 PN/DP ODK
Performance segment
Standard CPU for small to mid-range applications
Standard CPU for midrange applications
Standard CPU for midrange to large applications
Standard CPU for demanding applications and communication tasks
Standard CPU for demanding applications and communication tasks
Standard CPU for highperformance applications, demanding communication tasks and very short reaction times
PROFIBUS interfaces
---1
1
1
PROFINET IO RT/IRT interfaces
1
1 1
1
1
1
PROFINET IO RT inter-
face --
-1
1
1
1
PROFINET basic func-
tionality --
---
--
--
1
Work memory 1.23 MB 1.95 MB 3.75 MB 6.5 MB
11 MB
26 MB
Processing time for bit operations
60 ns
40 ns 30 ns
10 ns
2 ns
1 ns
Table 2- 2 Compact CPUs
CPU CPU 1511C-1 PN CPU 1512C-1 PN
Performance segment
Compact CPU for small to mid-range applications Compact CPU for midrange applications
PROFIBUS interfaces
--
--
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT inter-
face
--
1
--
PROFINET basic func-
tionality --
--
Work memory
1.175 M B
Processing time for bit operations
60 ns
1.25 MB 48 ns
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
12
Manual, 09/2016, A5E36285525-AA
Product overview 2.1 Applications of the S7-1500 CPU
Table 2- 3 Fail-safe CPUs
CPU
Performance segment
CPU 1511F-1 PN
CPU 1513F-1 PN CPU 1515F-2 PN
CPU 1516F-3 PN/DP
CPU 1517F-3 PN/DP CPU 1517TF-3 PN/DP
Fail-safe CPU for small to mid-range applications
Fail-safe CPU for midrange applications
Fail-safe CPU for midrange to large applications
Fail-safe CPU for demanding applications and communication tasks
Fail-safe CPU for demanding applications and communication tasks
PROFIBUS interfaces
--
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT
interface
--
PROFINET basic func-
tionality
--
Work memory
1.23 MB
Processing time for bit operations
60 ns
--
1
--
--
1.95 MB 40 ns
--
1
1
--
3.75 MB 30 ns
1
1
1
--
6.5 MB 10 ns
1
1
1
--
11 MB
2 ns
CPU 1518F-4
Fail-safe CPU for high-
1
1
1
1
26 MB
1 ns
PN/DP
performance applica-
CPU 1518F-4 PN/DP ODK
tions, demanding communication tasks and very short reaction
times
Table 2- 4 Technology CPUs
CPU
CPU 1511T-1 PN
CPU 1515T-2 PN
CPU 1517T-3 PN/DP
CPU 1517TF-3 PN/DP
Performance segment
PROFIBUS PROFINET interfaces IO RT/IRT
interfaces
Technology CPU for
--
1
small to mid-range ap-
plications
Technology CPU for
--
1
mid-range to large ap-
plications
Technology CPU for
1
1
complex applications
and communication
tasks
This CPU is described in the fail-safe CPUs
PROFINET IO RT
interface --
1
1
PROFINET basic func-
tionality --
--
--
Work memory
1.23 MB
Processing time for bit operations
60 ns
3.75 MB 30 ns
11 MB
2 ns
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
13
Product overview 2.1 Applications of the S7-1500 CPU
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Pulse generators · PWM (pulse-width modulation) · PTO (Pulse Train Output or stepper motor control) · Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 4 (PTOx/PWMx)
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 4 (PTOx/PWMx)
Integrated technological functions
All CPUs of SIMATIC S7-1500 support motion control functions. STEP 7 offers Motion Control instructions standardized according to PLCopen for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axis Positioning axis Synchronous axis External encoders Output cam Cam track Measuring input The technology CPUs of the SIMATIC S7-1500 offer enhanced Motion Control functions: Advanced synchronization functions
Synchronization with specification of synchronous position Actual value coupling Shifting the master value of the following axis Camming Cam Up to 4 encoders or measuring systems as actual position for position control Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
14
Manual, 09/2016, A5E36285525-AA
Product overview 2.1 Applications of the S7-1500 CPU
Additional integrated technological functions
For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags.
In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
Technology modules also implement functions such as high-speed counting, position detection and measuring functions and pulse generators (PTO, PWM and frequency output). For compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and can be implemented without additional technology modules.
SIWAREX is a versatile and flexible weighing module, which you can use as a static scale for operation.
Security Integrated
In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks.
Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU.
In addition, you can assign various access rights to different user groups in the controller using four different authorization levels.
Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller.
The use of an Ethernet CP (CP 1543-1) provides the user with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated
The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally.
These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration thereby provides the system advantages and the extensive functionality of SIMATIC for failsafe applications.
The fail-safe CPUs are certified for use in safety mode up to:
Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010
Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to EN ISO 13849-1:2008
Additional password protection for F-configuration and F-program is set up for IT security.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
15
Product overview 2.2 Principle of operation
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Errors messages are immediately shown on the display in plain text, thus helping customers to reduce downtimes.
Uniform front connectors for all modules and integrated potential bridges for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7, on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostic information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server for 3 languages. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
2.2
Principle of operation
Principle of operation
The CPU contains the operating system and executes the user program.
The user program is located on the SIMATIC memory card and is processed in the work memory of the CPU.
The PROFINET interfaces on the CPU allow simultaneous communication with PROFINET devices, PROFINET controllers, HMI devices, programming devices, other controllers and other systems. CPU 1517T-3 PN/DP supports operation as an IO controller and I-device.
Similarly to the PROFINET interface, the PROFIBUS interface available on the CPU allows communication with other devices. When you use the interface as PROFIBUS DP interface, the CPU on the PROFIBUS DP also assumes the role of a DP master.
Motion control
The CPU 1517T-3 PN/DP is specially designed for use in Motion Control applications.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
16
Manual, 09/2016, A5E36285525-AA
2.3
Properties
Article number
6ES7517-3TP00-0AB0
View of the module
The following figure shows the CPU 1517T-3 PN/DP.
Product overview 2.3 Properties
Figure 2-1 CPU 1517T-3 PN/DP
Note Protective film Note that a protective film is applied to the display in the delivery state of the CPU. Remove the protective film if necessary.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
17
Product overview 2.3 Properties
Properties
CPU 1517T-3 PN/DP has the following technical properties:
Motion Control:
All CPUs support the standard Motion Control functions via the technology objects speed axes, positioning axes, synchronized axes, external encoders, cams, cam tracks and measuring inputs.
Speed-controlled axis for controlling a drive with speed specification
Positioning axis for position-controlled positioning of a drive
Synchronous axis to interconnect with a master value. The axis is synchronized to the master axis position.
External encoder for detecting the actual position of an encoder
Cams, cam track for position-dependent generation of switching signals
Measuring input for fast, accurate and event-dependent sensing of actual positions
The technology CPUs of the SIMATIC S7-1500 also support the technology object:
Cam for specification of the synchronous function for camming
Motion Control instructions based on PLCopen are available for programming the technology objects.
A detailed description of the use of Motion Control and its configuration is available in the S7-1500T Motion Control (https://support.industry.siemens.com/cs/ww/en/view/109481326) function manual.
You can also use the TIA Selection Tool (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool) or the SIZER (http://w3.siemens.com/mcms/mc-solutions/en/engineering-software/drive-design-toolsizer/Pages/drive-design-tool-sizer.aspx) for the selection and design of the axes.
Integrated closed-loop control functionality
PID Compact (continuous PID controller)
PID 3Step (step controller for integrating actuators)
PID Temp (temperature controller for heating and cooling with two separate actuators)
Communication:
Interfaces
CPU 1517T-3 PN/DP has three interfaces. Two interfaces for PROFINET and one for PROFIBUS.
The 1st PROFINET interface (X1 P1, X1 P2) has two ports. In addition to PROFINET basic functionality, it also supports PROFINET IO RT (real-time) and IRT (isochronous real-time). PROFINET IO communication or real-time settings can be configured.
Even with a send clock of 187.5 µs, IO communication and standard communication is possible via one cable.
Port 1 and port 2 can also be used as ring ports for the configuration of redundant ring structures in Ethernet.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
18
Manual, 09/2016, A5E36285525-AA
Product overview 2.3 Properties
The 2nd PROFINET interface (X2 P1) has one port. In addition to PROFINET basic functionality, its also supports PROFINET IO RT (real-time).
Note IP subnets The IP subnets of the two interfaces must be different. This means that the subnets of the IP addresses of the two interfaces must differ from each other.
The 3rd interface (X3) is used to connect to a PROFIBUS network. When you use the interface as PROFIBUS DP interface, the CPU is the DP master in this case. The CPU cannot assume the role of a DP slave. OPC UA With OPC UA, data is exchanged via an open and vendor-neutral communication protocol. The CPU, as OPC UA server, can communicate with OPC UA clients such as HMI panels, SCADA systems, etc.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
19
Product overview 2.3 Properties
Integrated Web server: A Web server is integrated in the CPU. You can read out the following information with the Web server: Start page with general CPU information Identification information Contents of the diagnostics buffer Querying module information Firmware update Alarms (without acknowledgment option) Information about communication PROFINET topology Tag status, writing tags Watch tables Memory usage User pages Data logs (if used) Online backup and restoration of the configuration. Diagnostic information for the motion control technology objects Display of trace recording stored on the SIMATIC memory card Readout service data Basic Web pages Display of the Web server in 3 project languages, for example, comments and message texts Recipes User-defined Web pages
Trace functionality: The trace functionality supports troubleshooting and optimization of the user program. You can find additional information on the trace functionality in the Using the Trace and Logic Analyzer (http://support.automation.siemens.com/WW/view/en/64897128) function manual.
Integrated system diagnostics: The alarms for the system diagnostics are automatically created by the system and displayed on a PG/PC, HMI device, Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
20
Manual, 09/2016, A5E36285525-AA
Reference
Product overview 2.3 Properties
Integrated security:
Know-how protection
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
Access protection
Extended access protection provides high-quality protection against unauthorized configuration changes. You can use authorization levels to assign separate rights to different user groups.
Integrity protection
The system protects the data transferred to the CPU against manipulation. The CPU detects erroneous or manipulated engineering data.
CPU 1517T-3 PN/DP supports the following additional functions:
PROFIenergy You can find information on the topic of "PROFIenergy" in the PROFINET function manual (https://support.industry.siemens.com/cs/ww/en/view/49948856) and in the PROFINET specification on the Internet (http://www.profibus.com).
Shared device You can find information on the topic of "Shared device" in the PROFINET function manual (https://support.industry.siemens.com/cs/ww/en/view/49948856).
Configuration control You can find information on the topic of "Configuration control" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Isochronous mode You can find information about the "Isochronous mode" topic in the PROFINET (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
You can find additional information on the topic of "Integrated security/Access protection" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
21
Product overview 2.4 Operator controls and display elements
2.4
Operator controls and display elements
2.4.1
Front view of the module with closed front panels
The figure below shows the front view of the CPU 1517T-3 PN/DP.
LEDs for the current operating mode and diagnostics status of the CPU Front panel with display Display Control keys Front panel of the PROFIBUS interface
Figure 2-2 View of the CPU 1517T-3 PN/DP (with front panels) - front
Note Temperature range for display
To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU.
You can find additional information on the temperatures at which the display switches itself on and off in the technical specifications.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
22
Manual, 09/2016, A5E36285525-AA
Product overview 2.4 Operator controls and display elements
Removing and fitting the front panel with display
You can remove and fit the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you remove or fit the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Before you remove or fit the front panel, always switch off the power supply to the S7-1500 automation system in hazardous area zone 2. The CPU maintains its operating mode.
Locking the front panel
You can lock the wide front panel with display as well as the narrow front panel of the PROFIBUS interface to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panels.
Reference
Figure 2-3 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, the configurable protection levels and local locking in the S71500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You can find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
23
Product overview 2.4 Operator controls and display elements
2.4.2
Front view of the module without front panels
The figure below shows the operator controls and connection elements of the CPU 1517T-3 PN/DP.
Mode selector No function PROFIBUS interface (X3) Fixing screws Connection for supply voltage PROFINET IO interface (X2) with 1 port PROFINET IO interface (X1) with 2 ports MAC addresses of the interfaces LEDs for the 3 ports of the PROFINET interfaces X1 and X2 Slot for the SIMATIC memory card Display connection LEDs for the current operating mode and diagnostics status of the CPU
Figure 2-4 View of the CPU 1517T-3 PN/DP (without front panels) - front
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
24
Manual, 09/2016, A5E36285525-AA
2.4.3
Product overview 2.5 Mode selector
Rear view of the module
The following figure shows the connection elements on the rear of the CPU 1517T-3 PN/DP.
Shield contact surfaces Plug-in connection for power supply Plug-in connection for backplane bus Fixing screws
Figure 2-5 View of the CPU 1517T-3 PN/DP - rear
2.5
Mode selector
You use the mode selector to set the operating mode of the CPU.
The following table shows the position of the switch and the corresponding meaning.
Table 2- 5
Position RUN STOP MRES
Mode selector settings
Meaning RUN mode STOP mode Memory reset
Explanation The CPU is executing the user program. The user program is not executed. Position for CPU memory reset.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
25
Wiring
3
3.1
Pin assignment
This section provides information on the pin assignment of the individual interfaces and the block diagram of the CPU 1517T-3 PN/DP.
24 V DC supply voltage (X80)
The connector for the supply voltage is plugged in when the CPU ships from the factory. The following table shows the pin assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring opener (one spring opener per terminal)
Bridged internally:
and and
Figure 3-1 Supply voltage connection
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
26
Manual, 09/2016, A5E36285525-AA
Wiring 3.1 Pin assignment PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R) The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Figure 3-2 PROFINET
PROFINET interface X2 with 1 port (X2 P1)
The assignment corresponds to the Ethernet standard for an RJ45 plug. Autocrossing is always active on X2. This means the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
27
Wiring 3.1 Pin assignment
PROFIBUS interface X3
The table below shows the pin assignment of the PROFIBUS interface. The assignment corresponds to the standard assignment of an RS485 interface.
Table 3- 1
PROFIBUS interface pin assignment
View
Signal name
1
-
2
-
3
RxD/TxD-P
4
RTS
5
M5V2
6
P5V2
7
-
8
RxD/TxD-N
9
-
Designation Data line B Request to send Data reference potential (from station) Supply plus (from station) Data line A -
Note Supply of I/O devices
CPU 1517T-3 PN/DP does not provide a 24 V DC power supply on the PROFIBUS interface. I/O devices (for example, PC adapter USB) are therefore only operational on the interface in conjunction with a plug-in power supply set for external power supply.
The innovative successor product, PC adapter USB A2, receives the required power supply via the USB port. The USB A2 PC adapter therefore does not require a 24 V DC supply voltage and can be operated without a plug-in power supply set for external power supply.
Reference
You can find additional information on the topics of "Wiring the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Assignment of the MAC addresses
CPU 1517T-3 PN/DP has two PROFINET interfaces. The first interface has two ports. Each of the PROFINET interfaces has a MAC address and each of the PROFINET ports has its own MAC address. In total, the CPU 1517T-3 PN/DP has five MAC addresses.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC address are lasered on the rating plate on the right side of each CPU 1517T-3 PN/DP.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
28
Manual, 09/2016, A5E36285525-AA
Wiring 3.1 Pin assignment
The table below shows how the MAC addresses are assigned.
Table 3- 2 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3 MAC address 4 MAC address 5
Assignment PROFINET interface X1 (visible in STEP 7 for accessible devices)
Port X1 P1 R (required for LLDP, for example) Port X1 P2 R (required for LLDP, for example) PROFINET interface X2 (visible in STEP 7 for accessible devices) Port X2 P1 (required for LLDP, for example)
Labeling · Front, lasered · Right side, lasered
(start of number range)
· Front and right side, not lasered
· Front and right side, not lasered
· Front, lasered · Right side, not lasered
· Front, not lasered · Right side, lasered
(start of number range)
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
29
Wiring 3.1 Pin assignment
Block diagram
The following figure shows the block diagram of the CPU 1517T-3 PN/DP.
X50
X80 24 V DC
Display RUN/STOP/MRES mode selector Electronics PROFINET 2-port switch PROFIBUS DP driver Backplane bus interface Internal supply voltage SIMATIC memory card Infeed of supply voltage
Figure 3-3 Block diagram of the CPU 1517T-3 PN/DP
PN X1 P1 R PN X1 P2 R PN X2 P1 PB X3 L+ M R/S ER MT X1 P1, X1 P2, X2 P1
PROFINET interface X1 Port 1 PROFINET interface X1 Port 2 PROFINET interface X2 Port 1 PROFIBUS interface X3 24 V DC supply voltage Ground RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
30
Manual, 09/2016, A5E36285525-AA
Interrupts, error messages, diagnostics and system alarms
4
The status and error displays of the CPU 1517T-3 PN are described below.
You can find additional information on the topic of "Interrupts" in the STEP 7 online help.
You can find additional information on the topic of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error displays of the CPU
LED display
The following figure shows the LED displays of the CPU 1517T-3 PN/DP.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) No function LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED)
Figure 4-1 LED display of the CPU 1517T-3 PN/DP (without front panel)
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
31
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error displays of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1517T-3 PN/DP has three LEDs to signal the current operating status and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED off
LED flashes red
LED lit green
LED off
LED lit green
LED flashes red
LED lit green
LED off
LED lit green
LED off
LED lit yellow LED lit yellow LED lit yellow
LED off LED off LED flashes red
LED flashes yellow
LED off
LED flashes yellow/green
LED flashes yellow/green
LED off LED flashes red
MAINT LED LED off LED off LED off LED off
LED lit yellow
LED flashes yellow
LED flashes yellow LED off
LED flashes yellow LED off
LED off
Meaning Missing or insufficient supply voltage on the CPU.
An error has occurred.
CPU is in RUN mode.
A diagnostics event is pending.
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card Startup (transition from RUN STOP)
LED flashes yellow
Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
32
Manual, 09/2016, A5E36285525-AA
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error displays of the CPU
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of ports for the CPU 1517T-3 PN/DP.
Table 4- 2 Meaning of the LEDs
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
33
Technical specifications
5
General information Product type designation Hardware function version Firmware version Engineering with STEP 7 TIA Portal configurable/integrated as of version Configuration control Via data record Display Screen diagonal (cm) Operator controls Number of buttons Mode selector Supply voltage Type of supply voltage Low limit of permitted range (DC) High limit of permitted range (DC) Reverse polarity protection Power and voltage failure buffering Power/voltage failure buffer time Input current Current consumption (rated value) Inrush current, max. I²t Power Power consumption from the backplane bus (balanced) Incoming power to the backplane bus Power loss Power loss, typ. Memory Number of slots for SIMATIC memory card SIMATIC memory card required Work memory integrated (for program) integrated (for data)
6ES7517-3TP00-0AB0
CPU 1517T-3 PN/DP FS04 V2.0
V14
Yes
6.1 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms
1.55 A 2.4 A; rated value 0.02 A²s
30 W 12 W
24 W
1 Yes
3 MB 8 MB
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
34
Manual, 09/2016, A5E36285525-AA
Technical specifications
Load memory Plug-in (SIMATIC memory card), max. Buffering maintenance-free CPU processing times For bit operations, typ. For word operations, typ. For fixed-point arithmetic, typ. For floating-point arithmetic, typ. CPU blocks Number of elements (total)
DB Number range
Size, max.
FB Number range Size, max. FC Number range Size, max. OB Size, max. Number of free-cycle OBs Number of time-of-day interrupt OBs Number of time-delay interrupt OBs Number of cyclic interrupt OBs Number of hardware interrupt OBs Number of DPV1 interrupt OBs Number of isochronous mode OBs Number of technology synchronization interrupt OBs Number of startup OBs Number of asynchronous error OBs Number of synchronous error OBs Number of diagnostic interrupt OBs Nesting depth Per priority class
6ES7517-3TP00-0AB0
32 GB
Yes
2 ns 3 ns 3 ns 12 ns
10000; elements can be taken to mean blocks such as DBs, FBs and FCs, as well as UDTs, global constants, etc.
1 ... 60 999; divided into: Number range that can be used by user: 1 ... 59 999 and number range for DBs generated by SFC 86: 60 000 ... 60 999 8 MB; the maximum size of the DB is 64 KB with non-optimized block access
0 ... 65 535 512 KB
0 ... 65 535 512 KB
512 KB 100 20 20 20; with minimum OB 3x cycle of 100 µs 50 3 2 2
100 4 2 1
24
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
35
Technical specifications
Counters, timers and their retentivity S7 counters Quantity Retentivity · can be set IEC counters Quantity Retentivity · can be set S7 timers Quantity Retentivity · can be set IEC timers Quantity Data areas and their retentivity Total retentive data area (including timers, counters, bit memories), max.
Bit memory Number, max. Number of clock memories
Data blocks Retentivity can be set Retentivity preset Local data Per priority class, max. Address area Number of IO modules I/O address area Inputs Outputs of these, per integrated IO subsystem · Inputs (volume)
· Outputs (volume)
of these, per CM/CP · Inputs (volume)
· Outputs (volume) Process image partitions Number of process image partitions, max.
6ES7517-3TP00-0AB0
2048
Yes
Any (only limited by the work memory)
Yes
2048
Yes
Any (only limited by the work memory)
768 KB; retentive memory that can be used for bit memories, timers, counters, DBs and technology data (axes): 700 KB
16 KB 8; there are 8 clock memory bits, grouped in one clock memory byte
Yes No
64 KB; max. 16 KB per block
16384; max. number of modules/submodules
32 KB; all inputs are in the process image 32 KB; all outputs are in the process image
16 KB; 16 KB via the integrated PROFINET IO interface, 8 KB via the integrated DP interface 16 KB; 16 KB via the integrated PROFINET IO interface, 8 KB via the integrated DP interface
8 KB 8 KB
32
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
36
Manual, 09/2016, A5E36285525-AA
Hardware configuration Number of distributed IO systems
Number of DP masters integrated Via CM
Number of IO controllers integrated Via CM
Rack Modules per rack, max. Number of rows, max. PtP CM Number of PtP CMs
Time Clock Type Backup duration Deviation per day, max. Operating hours counter Quantity Time synchronization Supported On DP, master In AS, master In AS, slave On Ethernet via NTP Interfaces Number of PROFINET interfaces Number of PROFIBUS interfaces 1st interface Interface hardware Number of ports Integrated switch RJ45 (Ethernet)
Technical specifications
6ES7517-3TP00-0AB0
64; a distributed IO system is understood to mean the integration of distributed I/O via PROFINET or PROFIBUS communication modules as well as the connection of I/O via AS-i master modules or links (e.g. IE/PB link)
1 8; a maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
2 8; a maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
32; CPU + 31 modules 1
The number of PtP CMs that can be connected is only limited by the available slots
Hardware clock 6 wk; at 40 °C ambient temperature, typ. 10 s; typ.: 2 s
16
Yes Yes Yes Yes Yes
2 1
2 Yes Yes; X1
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
37
Technical specifications
Protocols PROFINET IO controller PROFINET IO device SIMATIC communication Open IE communication Web server Media redundancy PROFINET IO controller Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP
· MRPD · PROFIenergy · Prioritized startup · Number of connectable IO devices, max.
· of these, IO devices with IRT, max. · Number of connectable IO devices for RT,
max. · of these, in a line topology, max. · Number of IO devices that can be activat-
ed/deactivated simultaneously, max. · Number of IO devices per tool, max. · Update times
Update time with IRT · with send clock of 250 µs
· with send clock of 500 µs · with send clock of 1 ms · with send clock of 2 ms · with send clock of 4 ms · with IRT and "odd" send clock parameter as-
signment
6ES7517-3TP00-0AB0
Yes Yes Yes Yes Yes Yes
Yes Yes Yes Yes Yes Yes; as MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50 Yes; requirement: IRT Yes Yes; max. 32 PROFINET devices 512; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 64 512
512 8; in total over all interfaces
8 Minimum value of update time also depends on the communication allocation setting for PROFINET IO, the number of IO devices and the amount of configured user data
250 µs to 4 ms; note: with IRT with isochronous mode, the minimum update time of 500 µs of the isochronous OB is crucial 500 µs to 8 ms 1 ms to 16 ms 2 ms to 32 ms 4 ms to 64 ms Update time = set "odd" send clock (any multiple of 125 µs: 375 µs, 625 µs to 3 875 µs)
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
38
Manual, 09/2016, A5E36285525-AA
Technical specifications
Update time with RT · with send clock of 250 µs
· with send clock of 500 µs
· with send clock of 1 ms
· with send clock of 2 ms
· with send clock of 4 ms PROFINET IO device Services · PG/OP communication
· S7 routing
· Isochronous mode
· Open IE communication
· IRT
· MRP
· MRPD
· PROFIenergy
· Shared device
· Number of IO controllers with shared device, max.
2nd interface Interface hardware Number of ports Integrated switch RJ45 (Ethernet) Protocols PROFINET IO controller PROFINET IO device SIMATIC communication Open IE communication Web server Media redundancy
6ES7517-3TP00-0AB0
250 µs to 128 ms 500 µs to 256 ms 1 ms to 512 ms 2 ms to 512 ms 4 ms to 512 ms
Yes Yes No Yes Yes Yes Yes; requirement: IRT Yes Yes 4
1 No Yes; X2
Yes Yes Yes Yes Yes No
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
39
Technical specifications
PROFINET IO controller Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP · MRPD · PROFIenergy · Prioritized startup · Number of connectable IO devices, max.
· Number of connectable IO devices for RT, max.
· of these, in a line topology, max. · Number of IO devices that can be activat-
ed/deactivated simultaneously, max. · Number of IO devices per tool, max. · Update times
Update time with RT · with send clock of 1 ms PROFINET IO device Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP · MRPD · PROFIenergy · Prioritized startup · Shared device · Number of IO controllers with shared device,
max.
6ES7517-3TP00-0AB0
Yes Yes No Yes No No No Yes No 128; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 128
128 8; in total over all interfaces
8 Minimum value of update time also depends on the communication allocation setting for PROFINET IO, the number of IO devices and the amount of configured user data
1 ms to 512 ms
Yes Yes No Yes No No No Yes No Yes 4
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
40
Manual, 09/2016, A5E36285525-AA
Technical specifications
3rd interface Interface hardware Number of ports RS 485 Protocols PROFIBUS DP master PROFIBUS DP slave SIMATIC communication Interface hardware RJ45 (Ethernet) 100 Mbps Autonegotiation Autocrossing Industrial Ethernet status LED RS 485 Transmission rate, max. Protocols Number of connections Number of connections, max.
Number of connections reserved for ES/HMI/Web Number of connections via integrated interfaces Number of S7 routing connections
SIMATIC communication S7 communication, as server S7 communication, as client User data per job, max.
Open IE communication TCP/IP · Data length, max.
· Multiple passive connections per port, supported
ISO-on-TCP (RFC1006) · Data length, max. UDP · Data length, max. DHCP SNMP DCP LLDP
6ES7517-3TP00-0AB0
1 Yes
Yes No Yes
Yes Yes Yes Yes
12 Mbps
320; via integrated interfaces of the CPU and connected CPs/CMs 10 160 64; in total, only 16 S7 routing connections are supported via PROFIBUS
Yes Yes See online help (S7 communication, user data size)
Yes 64 KB Yes
Yes 64 KB Yes 1472 bytes No Yes Yes Yes
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
41
Technical specifications
Web server HTTP HTTPS PROFIBUS DP master Number of connections, max. Services
· PG/OP communication
6ES7517-3TP00-0AB0
Yes; standard and user-defined sites Yes; standard and user-defined sites 48; for the integrated PROFIBUS DP interface Yes
· S7 routing
Yes
· Data record routing
Yes
· Isochronous mode
Yes
· Constant bus cycle time
Yes
· Number of DP slaves · Activation/deactivation of DP slaves
125; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
Yes
OPC UA OPC UA server
· Application authentication
Yes; Data Access (Read, Write, Subscribe), Runtime license required
Yes
· Security Policies · User authentication
Available Security Policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256
"Anonymous" or with user name and password
Additional protocols MODBUS Media redundancy Switchover time in the case of cable break, typ. Number of devices in the ring, max. Isochronous mode Isochronous mode (application synchronized up to terminal) Constant bus cycle time S7 signaling functions Number of stations that can be logged in for signaling functions, max. Block-related alarms Number of configurable interrupts, max. Number of simultaneously active interrupts in interrupt pool
· Number of reserved user interrupts
Yes; MODBUS TCP 200 ms; with MRP; bumpless with MRPD 50 Yes; with minimum OB 6x cycle of 250 µs Yes 32 Yes 10000
1000
· Number of reserved interrupts for system di- 200 agnostics
· Number of reserved interrupts for motion con- 160 trol technology objects
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
42
Manual, 09/2016, A5E36285525-AA
Technical specifications
Test/commissioning functions Shared commissioning (Team Engineering)
Status block
Single-step Status/modify Status/modify tag Tags
Number of tags, max. · of these, status tags, max. · of these, modify tags, max. Forcing Forcing, tags Number of tags, max. Diagnostic buffer Available Number of entries, max. · of these, protected against power failure Traces Number of configurable traces Interrupts/diagnostics/status information Diagnostics display LED RUN/STOP LED ERROR LED MAINT LED Connection display LINK TX/RX Supported technology objects Motion control
· Number of available motion control resources for technology objects (except cams)
· required Motion Control resources per speed-controlled axis per positioning axis per synchronous axis per external encoder per output cam per cam track per measuring input
· Cams Number of cams, max.
6ES7517-3TP00-0AB0
Yes; parallel online access possible for up to 10 engineering systems Yes; up to 16 simultaneously (in total over all ES clients) No
Yes Inputs/outputs, bit memory, DB, peripheral inputs/outputs, timers, counters
200; per job 200; per job
Peripheral inputs/outputs 200
Yes 3200 1000
8; up to 512 KB data possible per trace
Yes Yes Yes Yes
Yes; note: the number of axes affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER 10240
40 80 160 80 20 160 40
128
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
43
Technical specifications
Controller · PID_Compact
· PID_3Step
· PID temp
Counting and measuring · High-speed counter Standards, approvals, certificates Suitable for safety functions Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max.
Vertical mounting position, min. Vertical mounting position, max.
Ambient temperature during storage/transport Min. Max. Configuring Programming Programming language · LAD
· FBD
· STL
· SCL
· GRAPH Know-how protection User program protection Copy protection Block protection Access protection Password for display Protection level: Write protection Protection level: Read/write protection Protection level: Complete protection Cycle time monitoring Low limit High limit
6ES7517-3TP00-0AB0
Yes; universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
No
0 °C 60 ; display: 50 , the display is switched off at an operating temperature of typically 50 0 °C 40 ; display: 40 , the display is switched off at an operating temperature of typically 40
-40 °C 70 °C
Yes Yes Yes Yes Yes
Yes Yes Yes
Yes Yes Yes Yes
Configurable minimum cycle time Configurable maximum cycle time
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
44
Manual, 09/2016, A5E36285525-AA
Technical specifications
Dimensions Width Height Depth Weights Weight, approx.
6ES7517-3TP00-0AB0
175 mm 147 mm 129 mm
1978 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP System Manual (http://support.automation.siemens.com/WW/view/en/59191792)
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
45
Dimension drawing
A
A.1
Dimension drawing CPU 1517T-3 PN/DP
This section contains the dimension drawing of the module on the mounting rail, as well as a dimension drawing with the front panel open. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimension drawings for CPU 1517-3 PN/DP
Figure A-1 Dimension drawing of the CPU 1517T-3 PN/DP, front and side view
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
46
Manual, 09/2016, A5E36285525-AA
Dimension drawing A.1 Dimension drawing CPU 1517T-3 PN/DP
Figure A-2 Dimension drawing of the CPU 1517T-3 PN/DP, side view with open front panel
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 09/2016, A5E36285525-AA
47
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
SIMATIC
S7-1500R/H CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual
Preface
S7-1500R/H Documentation Guide
1
Product overview
2
Connecting
3
Interrupts, diagnostics, error
messages and system
4
events
Technical specifications
5
Dimension drawing
A
11/2019
A5E42011886-AB
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E42011886-AB 10/2019 Subject to change
Copyright © Siemens AG 2018 - 2019. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500R/H redundant system and the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1517H-3 PN.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)". Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
3
Preface
Security information Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Siemens Industry Online Support You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
4
Equipment Manual, 11/2019, A5E42011886-AB
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
5
Table of contents
Preface ...................................................................................................................................................... 3
1 S7-1500R/H Documentation Guide............................................................................................................ 7
2 Product overview ....................................................................................................................................... 9
2.1
New functions in firmware version V2.8................................................................................... 9
2.2
Configuration and operating principle .................................................................................... 11
2.3
Hardware properties .............................................................................................................. 14
2.4
Firmware functions................................................................................................................. 17
2.5 2.5.1 2.5.2 2.5.3 2.5.4
Operator controls and display elements ................................................................................ 19 Front view of the CPU with closed front flap .......................................................................... 19 Front view of the CPU without front flaps .............................................................................. 21 Rear view of the CPU ............................................................................................................ 22 Bottom view............................................................................................................................ 23
2.6
Mode selector......................................................................................................................... 24
3 Connecting .............................................................................................................................................. 25
3.1
Terminal assignment.............................................................................................................. 25
4 Interrupts, diagnostics, error messages and system events .................................................................... 29
4.1
Status and error display of the CPU ...................................................................................... 29
5 Technical specifications ........................................................................................................................... 35
A Dimension drawing .................................................................................................................................. 44
A.1
Dimension drawing ................................................................................................................ 44
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
6
Equipment Manual, 11/2019, A5E42011886-AB
S7-1500R/H Documentation Guide
1
The documentation for the redundant S7-1500R/H system is divided into three areas. This division enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the redundant S7-1500R/H system. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the redundant S7-1500R/H system, e.g. diagnostics, communication.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
7
S7-1500R/H Documentation Guide
S7-1500/ET 200MP Manual Collection
The S7-1500/ET 200MP Manual Collection contains the complete documentation on the redundant S7-1500R/H system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en/).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
8
Equipment Manual, 11/2019, A5E42011886-AB
Product overview
2
2.1
New functions in firmware version V2.8
This section contains an overview of the most important new firmware functions of the CPU since the last edition of the manual.
New functions of the CPU in firmware version V2.8
New functions
Customer benefits
Download modified user program in RUNRedundant system state
You can download a modified user program into the R/H CPUs in the RUN-Redundant system state.
Advantage: The redundant system will remain consistently in the RUN-Redundant system state during the change to the user program. The system state will not switch to RUN-Solo or SYNCUP.
Backing up the configuration of the S7-1500R/H redundant system in runtime
You do not have to interrupt the process during a backup while the plant is running. Uninterrupted plant operation avoids high restart and material costs.
Where can I find information?
S7-1500R/H System Manual (https://support.industry.siemens.com/c s/ww/en/view/109754833)
Switched S1 device Testing with breakpoints
The "Switched S1 device" function of the CPU enables operation of standard IO devices in the S71500R/H redundant system.
When testing with breakpoints, you run a program from breakpoint to breakpoint in the STARTUP (startup OB) or RUN-Solo system state. Testing with breakpoints provides you with the following advantages:
· Testing SCL and STL program code with the help of breakpoints
· Localization of logic errors step by step
· Simple and quick analysis of complex programs prior to actual commissioning
· Recording of current values within individual executed loops
· Using breakpoints for program validation is also possible in SCL or STL networks within LAD/FBD blocks.
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
9
Product overview 2.1 New functions in firmware version V2.8
New functions PID controller
Alarms in the user program
Customer benefits
PID controllers are built into all R/H-CPUs as standard. PID controllers measure the actual value of a physical variable, for example, temperature or pressure, and compare the actual value with the setpoint. Based on the resulting error signal, the controller calculates a manipulated variable that causes the process value to reach the setpoint as quickly and stably as possible.
The PID controllers offer you the following advantages:
Where can I find information?
· S7-1500R/H System Manual (https://support.industry.siemens.co m/cs/ww/en/view/109754833)
· PID Control Function Manual (https://support.industry.siemens.co m/cs/ww/en/view/108210036)
· Simple configuration and programming through integrated editors and blocks
· Simple simulation, visualization, commissioning and operation via PG and HMI
· Automatic calculation of the control parameters and tuning during operation
· No additional hardware and software required
Alarms enable you to display events from process execution in the S7-1500R/H redundant system and to quickly identify, accurately locate, and correct errors.
Diagnostics function manual (https://support.industry.siemens.com/c s/ww/en/view/59192926)
Additional information
You can find an overview of all new functions, improvements and revisions in the respective firmware version on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109478459).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
10
Equipment Manual, 11/2019, A5E42011886-AB
Product overview 2.2 Configuration and operating principle
2.2
Configuration and operating principle
Structure
The S7-1500H redundant system consists of the following components: Two CPUs of the type CPU 1517H-3 PN Two SIMATIC memory cards Four synchronization modules (two synchronization modules in each H-CPU) Two redundancy connections (two duplex fiber-optic cables) IO devices Load power supply (optional) System power supply (optional)
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
11
Product overview 2.2 Configuration and operating principle
You mount the CPUs on a common mounting rail or spatially separated on two separate mounting rails. You connect the two CPUs with fiber-optic cables to two synchronization modules in each CPU. You set up the PROFINET ring with the PROFINET interfaces X1 P1 R and X1 P2 R of the CPUs.
Optional load current supply
First CPU
Mounting rail with integrated DIN rail profile
Second CPU
Location of the synchronization modules (not visible in graphic)
Redundancy connections (fiber-optic cables)
PROFINET cable (PROFINET ring)
Figure 2-1 Configuration example for S7-1500H
Note Standard rail adapter
You mount the CPUs on a standardized 35 mm rail using the standard rail adapter.
You will find information on mounting the standard rail adapter in the S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833) System Manual.
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
12
Equipment Manual, 11/2019, A5E42011886-AB
Product overview 2.2 Configuration and operating principle
Principle of operation One of the two CPUs in the redundant system takes on the role of CPU for process control (primary CPU). The other CPU takes on the role of the following CPU (backup CPU). The role of the CPUs can change during operation. All relevant data is synchronized from the primary CPU to the backup CPU via the fiber-optic cables of the redundancy connections. Synchronization between the primary CPU and backup CPU ensures fast switching between CPUs in the event of a primary CPU failure. If the primary CPU fails, the backup CPU retains control of the process as the new primary CPU at the point of interruption.
The redundancy connections consist of two fiber-optic cables, which directly connect the CPUs via plug-in synchronization modules.
Additional information You can find a detailed description of the operation and design of the S7-1500H redundant system in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
13
Product overview 2.3 Hardware properties
2.3
Hardware properties
Article number 6ES7517-3HP00-0AB0
View of the module The figure below shows the CPU 1517H-3 PN.
Figure 2-2 CPU 1517H-3 PN
Note Protective film Note that there is a removable protective foil on the display when the CPUs are delivered.
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
14
Equipment Manual, 11/2019, A5E42011886-AB
Product overview 2.3 Hardware properties
Properties
CPU 1517H-3 PN has the following technical properties:
Property CPU display
Supply voltage
Description
Additional information
All CPUs of the redundant system S7 1500R/H have a · Redundant System S7-1500R/H
display with plain text information. The display provides
(https://support.industry.siemens.
you with diagnostic messages as well as information about the article number, the firmware version and the serial number of the CPU.
com/cs/ww/en/view/109754833) System Manual
You can also view and assign the IP addresses, the PROFINET device name and the redundancy ID of the
·
SIMATIC S7-1500 Display Simulator
CPU. The system IP address can be viewed via
(http://www.automation.siemens.
STEP 7 but not in the display.
com/salesmaterial-as/interactive-
In addition to the functions listed here, a large number of other functions are available on the display. These
manuals/getting-started_simatics7-1500/disp_tool/start_en.html)
additional functions are described in the SIMATIC S7
1500 Display Simulator.
The 24 V DC supply voltage is fed via a 4-pin plug located on the front of the CPU.
· Section Connecting (Page 25)
· Redundant System S7-1500R/H (https://support.industry.siemens. com/cs/ww/en/view/109754833) System Manual
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
15
Product overview 2.3 Hardware properties
Property
PROFINET IO
PROFINET IO interface (X1 P1 R and X1 P2 R)
Description
Additional information
The CPU has an X1 interface with two ports (X1 P1 R and X1 P2 R).
· The PROFINET IO interface X1 (default P1 R) is used to set up the PROFINET ring with the two CPUs and the IO devices.
· The interface supports PROFINET IO RT (RealTime) and PROFINET basic functionality.
· Redundant System S7-1500R/H (https://support.industry.siemens. com/cs/ww/en/view/109754833) System Manual
· Function manual PROFINET (https://support.industry.siemens. com/cs/ww/en/view/49948856)
Basic PROFINET functionality comprises:
HMI communication
Communication with the configuration system
Communication with a higher-level network (backbone, router, Internet)
Communication with another machine or automation cell
PROFINET interface (X2 P1) H-Sync interfaces (X3 P1 and X4 P1)
Synchronization modules
Fiber-optic cables Operation of the CPUs as IO controllers
The CPU has an X2 interface with one port (X2 P1).
The interface supports PROFINET basic functionality.
Die CPU has an X3 interface with one port (X3 P1) and an X4 interface with one port (X4 P1).
The X3 and X4 interfaces are reserved for the synchronization of the two CPUs.
Make the redundancy connections between the two CPUs via the synchronization modules with fiber-optic cables.
You plug each synchronization modules in the X3 and X4 interfaces.
You connect the two synchronization modules in pairs to each CPU via a fiber-optic cable.
IO controller: As IO controllers the CPUs address the following configured IO devices:
· IO devices with S2 system redundancy within the PROFINET ring
· IO devices with S2 system redundancy that are decoupled from the PROFINET ring via a switch
· Standard IO devices (switched S1 devices)
Accessories
You can find information on the topic of "Accessories/spare parts" in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
16
Equipment Manual, 11/2019, A5E42011886-AB
Product overview 2.4 Firmware functions
2.4
Firmware functions
Functions
CPU 1517H-3 PN supports the following firmware functions:
Function CPU redundancy
Integrated system diagnostics Integrated trace functionality
PROFINET IO System redundancy S2
Switched S1 device
Description
Additional information
There are two duplicate CPUs that synchronize their Redundant System S7-1500R/H data via two duplex fiber-optic cables, which connect (https://support.industry.siemens.co the CPUs directly to each other via plug-in synchroniza- m/cs/ww/en/view/109754833) Systion modules. If one of the CPUs fails, the other CPU tem Manual retains control of the process.
The system automatically generates the messages for the system diagnostics and outputs these messages via a programming device/PC, HMI device or the integrated display. System diagnostics information is also available when the CPUs are in operating state STOP.
Function manual Diagnostics (http://support.automation.siemens.c om/WW/view/en/59192926)
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
Function manual Using the trace and logic analyzer function (http://support.automation.siemens.c om/WW/view/en/64897128)
Trace and logic analyzer functions are suitable for monitoring highly dynamic processes.
Note: Note that the S7-1500R/H redundant system supports recording of measurements. However, saving the measurements to the SIMATIC memory card is not supported.
All IO devices are connected redundantly in the redundant S7 1500R/H system. All IO devices assigned to the system must therefore support system redundancy S2. If the role of the CPUs changes, the new primary CPU takes over the PROFINET IO communication.
The switched S1 device function of the CPU enables operation of standard IO devices in the S7-1500R/H redundant system.
· Redundant System S7-1500R/H (https://support.industry.siemens. com/cs/ww/en/view/109754833) System Manual
· Function manual PROFINET (http://support.automation.sieme ns.com/WW/view/en/49948856)
Redundant System S7-1500R/H (https://support.industry.siemens.co m/cs/ww/en/view/109754833) System Manual
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
17
Product overview 2.4 Firmware functions
Function RT (real time) MRP (Media Redundancy Protocol)
PROFIenergy
Integrated technology Integrated closed-loop control functionality
Description
RT prioritizes PROFINET IO frames over standard frames. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet frames.
The Media Redundancy Protocol enables the configuration of redundant networks. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails.
Within the PROFINET ring, the H-CPUs assume the role of the MRP Manager following appropriate project configuration and all other devices in the ring assume the role of the MRP clients.
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. Most of the energy is saved by the process. The PROFINET device itself only contributes a few watts to the savings potential.
· PID Compact (continuous PID controller)
· PID 3Step (step controller for integrating actuators)
· PID Temp (temperature controller for heating and cooling with two separate actuators)
Additional information Function manual PROFINET (http://support.automation.siemens.c om/WW/view/en/49948856)
Function manual PID Control (https://support.industry.siemens.co m/cs/ww/en/view/108210036)
Security Integrated Know-how protection Access protection Integrity protection
Password provider
The know-how protection protects user blocks against unauthorized access and modifications.
You can use authorization levels to assign separate rights to different user groups.
Redundant System S7-1500R/H (https://support.industry.siemens.co m/cs/ww/en/view/109754833) System Manual
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between STEP 7 and the CPUs.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPUs for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password entry, you can link a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 automatically imports the password for the blocks. This saves you time.
· Optimum block protection because the users do not know the password itself.
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
18
Equipment Manual, 11/2019, A5E42011886-AB
2.5
2.5.1
Product overview 2.5 Operator controls and display elements
Operator controls and display elements
Front view of the CPU with closed front flap
The figure below shows the front view of the CPU 1517H-3 PN.
LEDs for the current operating state and diagnostic status of the CPU Front panel with display Display Control keys Front panel of the X3 and X4 interfaces
Figure 2-3 View of the CPU 1517R-3 PN (with front panel) - front
Note Temperature range for display To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU. You can find additional information on the temperatures at which the display switches itself on and off in the Technical specifications (Page 35).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
19
Product overview 2.5 Operator controls and display elements
Pulling and plugging the front panel with display You can pull and plug the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you remove or attach the front panel of a redundant system S7-1500R/H during operation, personal injury or damage to property can occur in hazardous area zone 2. Before you remove or fit the front panel, always switch off the power supply to the S7-1500R/H redundant system in hazardous area zone 2.
Locking the front panel You can lock the front panel to protect the SIMATIC memory card and the mode selector of the CPU against unauthorized access. You can attach a security seal or a padlock with a hoop diameter of 3 mm to the front panel.
Reference
Figure 2-4 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, the configurable protection levels and the local lock in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
You can find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_de.html).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
20
Equipment Manual, 11/2019, A5E42011886-AB
2.5.2
Product overview 2.5 Operator controls and display elements
Front view of the CPU without front flaps
The figure below shows the operator controls and connection elements of the CPU 1517H-3 PN.
Mode selector No function LED displays for the ports of the X3 and X4 interfaces MAC addresses of the X3 and X4 interfaces H-Sync X3 and X4 interfaces with 1 port each (not visible in graphic) Fixing screws Connector for power supply PROFINET IO interface X2 with 1 port PROFINET IO interface X1 with 2 ports MAC addresses of the X1 and X2 interfaces LED displays for the ports of the X1 and X2 interfaces Slot for the SIMATIC memory card Display connector LEDs for the current operating state and diagnostic status of the CPU
Figure 2-5 View of the CPU 1517H-3 PN (without front panels) - front
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
21
Product overview 2.5 Operator controls and display elements
2.5.3
Rear view of the CPU
The figure below shows the connection elements on the rear of the CPU 1517H-3 PN.
Shield contact surfaces Plug-in connection for power supply Fixing screws
Figure 2-6 View of the CPU 1517H-3 PN - rear
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
22
Equipment Manual, 11/2019, A5E42011886-AB
Product overview 2.5 Operator controls and display elements
2.5.4
Bottom view
Interfaces and synchronization modules The figure below shows the position of the interfaces on the underside of the CPU.
PROFINET IO interface X1 with 2 ports PROFINET IO interface X2 with 1 port H-Sync interface X3 without synchronization module H-Sync interface X4 without synchronization module
Figure 2-7 Bottom view
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
23
Product overview 2.6 Mode selector
2.6
Mode selector
You use the mode selector to:
Request a change to a specific operating state
Disable or enable the change of a specific operating state
(if, for example, the mode selector is set to STOP, you cannot switch the CPU to RUN via a communication task configured in the TIA Portal or via the display)
The following table shows the position of the switch and the corresponding meaning.
Table 2- 1
Position RUN STOP MRES
Mode switch settings
Meaning RUN operating state STOP operating state Memory reset
Explanation The CPU has permission to go to RUN. The CPU does not have permission to go to RUN. Position for CPU memory reset.
Reference
You can find a brief overview of the various operating states and system states in the section Status and error display of the CPU (Page 29).
You can find a detailed description of the operating states and system states in the system manual for S7-1500R/H Redundant System (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
24
Equipment Manual, 11/2019, A5E42011886-AB
Connecting
3
3.1
Terminal assignment
This section provides information on the terminal assignment of the individual interfaces and the block diagram of the CPU 1517H-3 PN.
24 V DC supply voltage (X80)
The connector for the power supply is plugged in when the CPU ships from the factory.
The following table shows the signal names and the descriptions of the pin assignment of the 24 V DC supply voltage.
Table 3- 1 Pin assignment 24 V DC supply voltage
View Connector
Signal name 1)
Description
1 1L+ 2 1M 3 2M 4 2L+
+ 24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through 2) + 24 V DC of the supply voltage for loop-through 2)
1) 1L+ and 2L+ as well as 1M and 2M are bridged internally 2) Maximum 10 A permitted
You can find information on the various supply options in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
25
Connecting 3.1 Terminal assignment
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R) The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Figure 3-1 Interface assignments
PROFINET interface X2 with 1 port (X2 P1) The assignment corresponds to the Ethernet standard for a RJ45 connector. Autocrossing is always active on X2. This means the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
H-Sync X3 interface with 1 port (X3 P1) and X4 with 1 port (X4 P1) Make the redundancy connections between the two CPUs via the synchronization modules at the X3 P1 and X4 P1 interfaces (LC sockets). You interconnect the CPUs in pairs via the fiber-optic cables.
X3 P1 without synchronization module X4 P1 with synchronization module and removed dummy plugs
Figure 3-2 Interface assignments
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
26
Equipment Manual, 11/2019, A5E42011886-AB
Connecting 3.1 Terminal assignment
Additional information
You can find additional information on the topic of "Connecting the CPU" and on the topic "Accessories/spare parts" in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
Assignment of the MAC addresses For each CPU, CPU 1517H-3 PN has:
One PROFINET interface with two ports
One PROFINET interface with one port
Two H-Sync interfaces with one port each
Each of the interfaces has a MAC address. Each port also has a separate MAC address. There are a total of eighteen MAC addresses for the two CPUs of the CPU 1517H-3 PN.
The MAC addresses of the ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC addresses are printed on the rating plate on the right side of each CPU 1517H-3 PN.
The table below shows how the MAC addresses are assigned.
Table 3- 2 Distribution of the MAC addresses of a CPU
MAC address 1
MAC address 2 MAC address 3 MAC address 4
MAC address 5 MAC address 6 MAC address 7 MAC address 8 MAC address 9
Assignment
Labeling
PROFINET interface X1
·
(visible in STEP 7 when devices are accessible) ·
Front printed
Right-side printed (start of number range)
Port X1 P1 R (required for LLDP, for example) ---
Port X1 P2 R (required for LLDP, for example) ---
PROFINET interface X2
· Front printed
(visible in STEP 7 when devices are accessible)
Port X2 P1 (required for LLDP, for example)
---
H-Sync interface X3
· Front printed
Port X3 P1 H-Sync interface X4
--· Front printed
Port X4 P1
· Right-side printed (end of number range)
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
27
Connecting 3.1 Terminal assignment
Block diagram The following figure shows the block diagram of the CPU 1517H-3 PN.
PN X1 P1 R
SIMATIC memory card (X50) Display Mode selector RUN/STOP/MRES Electronics PROFINET 2-port switch Synchronization interface Backplane bus connection (connection to backplane bus not configurable) Internal supply voltage Supply of the 24 V DC supply voltage (X80) PROFINET interface X1 port 1
Figure 3-3 Block diagram of the CPU 1517H-3 PN
PN X1 P2 R PN X2 P1 HSYNC X3 P1 HSYNC X4 P1 L+ M R/S
ER MT X1 P1, X1 P2, X2 P1, X3 P1, X4 P1
PROFINET interface X1 port 2 PROFINET interface X2 port 1 H-Sync interface X3 port 1 H-Sync interface X4 port 1 24 V DC supply voltage Ground RUN/STOP LED (yellow/green)
ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
28
Equipment Manual, 11/2019, A5E42011886-AB
Interrupts, diagnostics, error messages and system events
4
4.1
Status and error display of the CPU
The LED displays of the CPU are described below.
You can find more detailed information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topic of "Diagnostics" and "System events" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual and in the system manual Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
You can find additional information on the topic of "Operating states and system states" as well as various failure scenarios in the system manual for S7-1500R/H Redundant System (https://support.industry.siemens.com/cs/ww/en/view/109754833).
LED display
The figure below shows the LED displays of the CPU 1517H-3 PN.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) LINK RX/TX LED for port X3 P1 (yellow/green LED) LINK RX/TX LED for port X4 P1 (yellow/green LED) No function LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED)
Figure 4-1 LED display of the CPU 1517H-3 PN (without front panel)
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
29
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
LED displays depending on operating states and system states CPU 1517H-3 PN has the following LEDs for displaying the current operating state and diagnostics status. RUN/STOP LED ERROR LED MAINT LED The LEDs indicate the operating state of the respective CPU within the redundant system. Operating states describe the behavior of a single CPU at a specific time. The combination of the operating states of the CPUs forms the system state. The following figure shows the possible operating states of the CPUs and the resulting system states.
Figure 4-2 Operating states and system states
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
30
Equipment Manual, 11/2019, A5E42011886-AB
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs CPU 1517H-3 PN has the following LEDs for displaying the current operating state and diagnostics status.
Note LED patterns of the S7-1500H redundant system Note that it is not always possible to: · Determine the state of the CPU from the signal pattern of individual LEDs · Determine the state of the other CPU from the signal pattern of a CPU The "Meaning" column only shows a possible typical cause. To investigate the cause of the signal pattern, use the diagnostic buffer and its display via: · STEP 7 · HMI devices · Displays of the CPUs
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
31
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
The following table shows the meaning of the various color combinations for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED flashes yellow/green LED lit yellow
LED flashes yellow LED lit yellow
LED lit yellow
LED flashes red
LED off LED off LED flashes red LED off
LED flashes yellow/green
LED off
MAINT LED LED off
LED flashes yellow
LED lit yellow LED lit yellow LED flashes yellow LED flashes yellow LED lit yellow
Meaning Missing or insufficient supply voltage on the CPU.
Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test CPU is in operating state STOP. Completion of system initialization CPU executes internal activities in an operating state RUN-Redundant.
CPU defective
Firmware update successfully completed.
The primary CPU is in STARTUP operating state. The backup CPU is in SYNCUP operating state. The backup CPU has not yet been restarted for SYNCUP during this phase.
LED flashes yellow LED lit green
LED off LED off
LED lit green LED lit green LED lit green
LED off LED flashes red LED flashes red
LED off LED lit yellow
LED off LED off LED lit yellow
The CPU performs a warm restart.
Maintenance demanded for the plant. You need to check/replace the affected hardware within a short period of time. The primary CPU is in RUN-Syncup operating state. Active Force job PROFIenergy pause The primary CPU is in RUN operating state. The CPU is in RUN-Redundant operating state. There are no events, requirements, errors, etc. A diagnostic event is pending in RUN-Redundant operating state.
A diagnostic event (e.g. failure of an IO device within the PROFINET ring or no access to SIMATIC memory card possible1)) and maintenance is demanded (e.g. interruption of the PROFINET ring).
1) If access to the SIMATIC memory card is not possible in RUN-Redundant (wrong card, card full/write protected), the system switches to RUN-Solo. The ERROR LED flashes for three seconds. The MAINT LED lights up until the RUNRedundant system status is reached again.
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
32
Equipment Manual, 11/2019, A5E42011886-AB
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
Note MAINT LED of the two CPUs
The MAINT LEDs of both CPUs only go out when the following conditions are fulfilled: · The CPUs are in the RUN-Redundant system state. · No maintenance is demanded.
Note LED displays in redundant operating state
In the RUN-Redundant system state, the LED displays on both CPUs are identical (exception: you are performing an LED flash test on one CPU).
Meaning of LINK RX/TX LED
Each port of the X1, X2, X3 and X4 interfaces has a LINK RX/TX LED. The table below shows the various LED patterns of the ports of the CPU 1517H-3 PN.
Table 4- 2 Meaning of LINK RX/TX LED
LINK TX/RX LED Off
Flashes green Illuminated green
LED flashes yellow/green
Meaning There is no connection between the interface of the device and a communication partner. No data is currently being sent/received via the interface. There is no LINK connection. The redundancy connections were interrupted. The CPU performs an LED flash test.
There is a connection between the interface of the device and a communication partner. The redundancy connections are OK. Data is currently being received or sent by a communication partner via the interface of the device.
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
33
Interrupts, diagnostics, error messages and system events 4.1 Status and error display of the CPU
Note "LED" instruction You can read the status (e.g. "On" or "Off") of LEDs of a CPU or a module using the "LED" instruction. Note, however, that it is not possible to read the LED status of the LINK RX/TX LEDs on all S7-1500 R/H CPUs. You can find additional information on the "LED" instruction in the STEP 7 online help.
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
34
Equipment Manual, 11/2019, A5E42011886-AB
Technical specifications
5
The following table shows the technical specifications as of 11/2019. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7517-3HP00-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version Product function · I&M data
· Isochronous mode
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
Display Screen diagonal [cm]
Control elements Number of keys Mode selector switch
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering · Mains/voltage failure stored energy time
Input current Current consumption (rated value) Inrush current, max. I²t
Power loss Power loss, typ.
Memory Number of slots for SIMATIC memory card SIMATIC memory card required
6ES7517-3HP00-0AB0
CPU 1517H-3 PN FS02 V2.8
Yes; I&M0 to I&M3 No
V16 (FW V2.8) / V15.1 (FW V2.6) or higher
6.1 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms
1.5 A 2.4 A; Rated value 0.02 A²·s
24 W
1 Yes
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
35
Technical specifications
Article number Work memory
· integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range · Size, max.
FB · Number range · Size, max.
FC · Number range · Size, max.
OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of startup OBs · Number of asynchronous error OBs · Number of synchronous error OBs · Number of diagnostic alarm OBs
Nesting depth · per priority class
6ES7517-3HP00-0AB0
2 Mbyte 8 Mbyte
32 Gbyte
Yes
4 ns 6 ns 6 ns 24 ns
12 000; Blocks (OB, FB, FC, DB) and UDTs
Number range: 1 to 59 999 8 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535 1 Mbyte
0 ... 65 535 1 Mbyte
1 Mbyte 100 20 20 20 50 100 4 2 1
24
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
36
Equipment Manual, 11/2019, A5E42011886-AB
Technical specifications
Article number Counters, timers and their retentivity S7 counter
· Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
· Number of clock memories
Data blocks · Retentivity adjustable
· Retentivity preset Local data
· per priority class, max. Address area
Number of IO modules I/O address area
· Inputs
· Outputs per integrated IO subsystem
Inputs (volume) Outputs (volume) Subprocess images · Number of subprocess images, max.
6ES7517-3HP00-0AB0
2 048 Yes Any (only limited by the main memory) Yes 2 048 Yes Any (only limited by the main memory) Yes 768 kbyte
16 kbyte 8; 8 clock memory bit, grouped into one clock memory byte Yes No 64 kbyte; max. 16 KB per block 8 192; max. number of modules / submodules 32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image 16 kbyte 16 kbyte 32
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
37
Technical specifications
Article number Hardware configuration
Number of distributed IO systems Number of IO Controllers
· integrated Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number Clock synchronization · supported · on Ethernet via NTP Interfaces Number of PROFINET interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Protocols · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
6ES7517-3HP00-0AB0
1
1
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
Yes Yes
1
2 Yes Yes; X1
Yes; IPv4 Yes No Yes; Only Server Yes No Yes; MRP Automanager according to IEC 624392 Edition 2.0
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
38
Equipment Manual, 11/2019, A5E42011886-AB
Technical specifications
Article number PROFINET IO Controller Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP MRPD PROFIenergy Number of connectable IO Devices,
max. Update time for RT
for send cycle of 1 ms 2. Interface Interface types
· Number of ports · integrated switch · RJ 45 (Ethernet) Protocols · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy 3. Interface Interface type Plug-in interface modules
4. Interface Interface type Plug-in interface modules
6ES7517-3HP00-0AB0
Yes Yes No Yes No Yes; Only Manager Auto, max. 50 nodes No Yes 256
1 ms to 512 ms
1 No Yes; X2
Yes; IPv4 No No Yes; Only Server Yes No No
Pluggable interface module (IF) Synchronization module 6ES7960-1CB00-0AA5 or 6ES7960-1FB00-0AA5
Pluggable synchronization submodule (FO) Synchronization module 6ES7960-1CB00-0AA5 or 6ES7960-1FB00-0AA5
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
39
Technical specifications
Article number Interface types RJ 45 (Ethernet)
· 100 Mbps · Autonegotiation · Autocrossing · Industrial Ethernet status LED Protocols Number of connections · Number of connections, max. · Number of connections reserved for
ES/HMI/web · Number of S7 routing paths Redundancy mode · MRP
· MRPD SIMATIC communication
· S7 communication, as server · S7 communication, as client Open IE communication · TCP/IP
Data length, max. several passive connections per port,
supported · ISO-on-TCP (RFC1006)
Data length, max. · UDP
Data length, max. UDP multicast · DHCP · SNMP · DCP · LLDP Web server · HTTP · HTTPS
6ES7517-3HP00-0AB0
Yes Yes Yes Yes
288 10
64
Yes; Manager Auto is permanently set in TIA. Max. 50 nodes are possible No
Yes No
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
No No
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
40
Equipment Manual, 11/2019, A5E42011886-AB
Technical specifications
Article number OPC UA
· OPC UA client
· OPC UA server Further protocols
· MODBUS Media redundancy
· Switchover time on line break, typ.
· Number of stations in the ring, max. Isochronous mode
Isochronous operation (application synchronized up to terminal) Equidistance S7 message functions Number of login stations for message functions, max. Program alarms Number of configurable program messages, max. Number of loadable program messages in RUN, max. Number of simultaneously active program alarms · Number of program alarms
· Number of alarms for system diagnostics Test commissioning functions
Joint commission (Team Engineering) Status block Single step Number of breakpoints
Status/control · Status/control variable
· Variables
· Number of variables, max.
of which status variables, max. of which control variables, max. Forcing · Forcing
· Forcing, variables
· Number of variables, max.
6ES7517-3HP00-0AB0
No No
Yes; MODBUS TCP
200 ms; PROFINET MRP 50
No No
64 Yes 10 000; Program messages are generated by the "Program_Alarm" block, ProDiag or GRAPH 5 000
1 000 1 000
No Yes; Up to 16 simultaneously No 20; Breakpoints are only supported in RUN-Solo status
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Yes Peripheral inputs/outputs 200
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
41
Technical specifications
Article number Diagnostic buffer
· present · Number of entries, max.
of which powerfail-proof Traces
· Number of configurable Traces · Memory size per trace, max. Interrupts/diagnostics/status information Diagnostics indication LED · RUN/STOP LED · ERROR LED · MAINT LED · Connection display LINK TX/RX Supported technology objects Motion Control Controller · PID_Compact
· PID_3Step
· PID-Temp
Counting and measuring · High-speed counter Standards, approvals, certificates Suitable for safety functions Ambient conditions Ambient temperature during operation · horizontal installation, min. · horizontal installation, max.
· vertical installation, min. · vertical installation, max.
Ambient temperature during storage/transportation
· min. · max. Altitude during operation relating to sea level · Installation altitude above sea level, max.
6ES7517-3HP00-0AB0
Yes 3 200 1 000
8 512 kbyte
Yes Yes Yes Yes
No
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature Yes No
No
0 °C 60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off 0 °C 40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C 70 °C
5 000 m; Restrictions for installation altitudes > 2 000 m, see manual
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
42
Equipment Manual, 11/2019, A5E42011886-AB
Technical specifications
Article number Configuration Programming Programming language
LAD FBD STL SCL CFC GRAPH Know-how protection · User program protection/password protection
· Copy protection
· Block protection Access protection
· Password for display
· Protection level: Write protection
· Protection level: Read/write protection
· Protection level: Complete protection Cycle time monitoring
· lower limit
· upper limit Dimensions
Width Height Depth Weights Weight, approx.
6ES7517-3HP00-0AB0
Yes Yes Yes Yes No Yes
Yes
No Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
210 mm 147 mm 129 mm
2 119 g; Interface modules: 2x 18 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc. in the system manual for Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833).
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
43
Dimension drawing
A
A.1
Dimension drawing
This section contains the dimension drawing of the module on the mounting rail, as well as a dimension drawing with the front panel open. Keep to the dimensions when installing in cabinets, control rooms, etc.
Dimension drawings of the CPU 1517H-3 PN
Figure A-1 Dimension drawing of the CPU 1517H-3 PN, front and side view
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
44
Equipment Manual, 11/2019, A5E42011886-AB
Dimension drawing A.1 Dimension drawing
Figure A-2 Dimension drawing of the CPU 1517H-3 PN, side view with front panel open
CPU 1517H-3 PN (6ES7517-3HP00-0AB0)
Equipment Manual, 11/2019, A5E42011886-AB
45
SIMATIC
S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_nt_at_io_n _gu_id_e_______1_
_Pr_od_u_ct_ov_e_rv_ie_w _________2_
_W_iri_ng_______________3_
_ _ _ _ _ _ _ _ _ _ _ Interrupts, error messages,
diagnostics and system
4
alarms
_Te_ch_n_ic_al_sp_e_cif_ic_at_ion_s______5_
_Di_m_en_si_on_d_ra_w_in_g ________A_
12/2017
A5E36285525-AB
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E36285525-AB 11/2017 Subject to change
Copyright © Siemens AG 2016 - 2107. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system/ ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1517T-3 PN/DP.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
4
Manual, 12/2017, A5E36285525-AB
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
5
Table of contents
Preface ...................................................................................................................................................... 4
1 Documentation guide ................................................................................................................................. 7
2 Product overview ..................................................................................................................................... 11
2.1
New functions in firmware version V2.5................................................................................. 11
2.2
Applications of the S7-1500 CPU .......................................................................................... 12
2.3
Hardware properties .............................................................................................................. 19
2.4
Firmware functions................................................................................................................. 21
2.5 2.5.1 2.5.2 2.5.3
Operator controls and display elements ................................................................................ 25 Front view of the CPU with closed front flap .......................................................................... 25 Front view of the CPU without front flaps .............................................................................. 27 Rear view of the CPU ............................................................................................................ 28
2.6
Mode selector......................................................................................................................... 28
3 Wiring ...................................................................................................................................................... 29
4 Interrupts, error messages, diagnostics and system alarms .................................................................... 34
4.1
Status and error displays of the CPU..................................................................................... 34
5 Technical specifications ........................................................................................................................... 37
A Dimension drawing .................................................................................................................................. 50
A.1
Dimension drawing CPU 1517T-3 PN/DP ............................................................................. 50
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
6
Manual, 12/2017, A5E36285525-AB
Documentation guide
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
1
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
7
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
8
Manual, 12/2017, A5E36285525-AB
Documentation guide
Application examples The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
9
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
10
Manual, 12/2017, A5E36285525-AB
Product overview
2
2.1
New functions in firmware version V2.5
New functions of the CPUs firmware 2.5 This section lists the new features of the CPU with firmware version V2.5. You can find additional information in the sections of this manual.
Table 2- 1 New functions of the CPUs with firmware version 2.5
New functions
Applications
Customer benefits
New technology object, kinematics
Controlling of kinematics, such as · Cartesian portals · Roller pickers
You can realize complex Motion Control applications for controlling 2D, 3D and 4D kinematics.
· Delta pickers
· SCARA Motion specification of paths
Individual motions and motion sequences
Kinematics 2D, 3D, with and without orientation axis
Additional instructions for torque control You can apply an additives setpoint
You can pre-control the torque precise-
torque in the drive.
ly for the axes, for example at winders
You can predetermine torque limits in (predetermine traction torque and addi-
the drive cyclically.
tionally torque limits in order to prevent
The torque actual value of the drive can tearing of the material).
be evaluated directly in the TO-DB of You can take the dynamic model of the
the axis.
kinematics into consideration, pre-
control the torque to be expected for
each axis and thus improve the preci-
sion.
Data adaption for SINAMICS S210
You can also use data adaption for the You gain time during the configuration
new drive SINAMICS S210.
of the technology objects and the
drives.
MotionIn
Through additional instructions motion setpoints can be specified cyclically via the application.
This means that specific technological motion specifications are possible via the application (for example at winders).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
11
Product overview 2.2 Applications of the S7-1500 CPU
2.2
Applications of the S7-1500 CPU
Area of application
SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation.
The modular and fanless design, simple implementation of distributed structures, and user-friendly operation make SIMATIC S7-1500 the economic and convenient solution for a variety of tasks.
Areas of application of the SIMATIC S7-1500 are, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automobile engineering
Water/waste water
Food & Beverage
Additional areas of application of the SIMATIC S7-1500T with extended Motion Control functions are, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial capability from the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
12
Manual, 12/2017, A5E36285525-AB
Product overview 2.2 Applications of the S7-1500 CPU
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 2 Standard CPUs
CPU
CPU 1511-1 PN
CPU 1513-1 PN
CPU 1515-2 PN
CPU 1516-3 PN/ DP
CPU 1517-3 PN/ DP
CPU 1518-4 PN/ DP CPU 1518-4 PN/ DP MFP
Performance segment PROFIBUS interfaces
Standard CPU for
--
small to mid-range
applications
Standard CPU for
--
mid-range applica-
tions
Standard CPU for
--
mid-range to large
applications
Standard CPU for
1
high-end applications
and communication
tasks
Standard CPU for
1
high-end applications
and communication
tasks
Standard CPU for
1
high-performance
applications, demand-
ing communication
tasks and very short
reaction times
PROFINET IO RT/IRT interfaces
1
1
1
1
1
1
PROFINET IO RT
interface --
--
1
1
1
1
PROFINET basic func-
tionality --
--
--
--
--
1
Work memory 1.15 MB 1.8 MB 3.5 MB
6 MB
10 MB
24 MB
Processing time for bit operations
60 ns
40 ns
30 ns
10 ns
2 ns
1 ns
Table 2- 3 Compact CPUs
CPU
CPU 1511C-1 PN
CPU 1512C-1 PN
Performance segment
Compact CPU for small to mid-range applications Compact CPU for mid-range applications
PROFIBUS interfaces
--
--
PROFINET IO RT/IRT interfaces
1
1
PROFINET IO RT
interface --
--
PROFINET basic func-
tionality --
--
Work memory 1.175 MB
1.25 MB
Processing time for bit operations
60 ns
48 ns
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
13
Product overview 2.2 Applications of the S7-1500 CPU
Table 2- 4 Fail-safe CPUs
CPU
CPU 1511F-1 PN
CPU 1511TF-1 PN
CPU 1513F-1 PN CPU 1515F-2 PN
CPU 1515TF-2 PN
CPU 1516F-3 PN/DP
CPU 1516TF-3 PN/DP
CPU 1517F-3 PN/DP
CPU 1517TF-3 PN/DP
CPU 1518F-4 PN/DP CPU 1518F-4 PN/DP MFP
Performance segment
Fail-safe CPU for small to mid-range applications
Fail-safe technology CPU for small to mid-range applications
Fail-safe CPU for mid-range applications
Fail-safe CPU for mid-range to large applications
Fail-safe technology CPU for demanding applications and communication tasks
Fail-safe CPU for demanding applications and communication tasks
Fail-safe technology CPU for demanding applications and communication tasks
Fail-safe CPU for demanding applications and communication tasks
Fail-safe technology CPU for demanding applications and communication tasks
Fail-safe CPU for highperformance applications, demanding communication tasks and very short reaction times
PROFIBUS interfaces
--
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT
interface
--
PROFINET basic func-
tionality
--
--
1
--
--
--
1
--
--
--
1
1
--
--
1
1
--
1
1
1
--
1
1
1
--
1
1
1
--
1
1
1
--
1
1
1
1
Work memory 1.225 MB 1.225 MB 1.95 MB 3.75 MB 3.75 MB
6.5 MB
6.5 MB
11 MB
11 MB
26 MB
Processing time for bit operations
60 ns 60 ns 40 ns 30 ns 30 ns
10 ns
10 ns
2 ns
2 ns
1 ns
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
14
Manual, 12/2017, A5E36285525-AB
Product overview 2.2 Applications of the S7-1500 CPU
Table 2- 5 Technology CPUs
CPU
CPU 1511T-1 PN
CPU 1515T-2 PN
CPU 1516T-3 PN/DP
CPU 1517T-3 PN/DP
CPU 1511TF-1 PN CPU 1515TF-2 PN CPU 1516TF-3 PN/DP CPU 1517TF-3 PN/DP
Performance segment PROFIBUS PROFINET PROFINET PROFINET interfaces IO RT/IRT IO RT basic funcinterfaces interface tionality
Technology CPU for
--
1
--
--
small to mid-range
applications
Technology CPU for
--
1
1
--
mid-range to large
applications
Technology CPU for
1
1
1
--
high-end applications
and communication
tasks
Technology CPU for
1
1
1
--
high-end applications
and communication
tasks
These CPUs are described in the fail-safe CPUs
Work memory 1.225 MB 3.75 MB 6.5 MB
11 MB
Processing time for bit operations
60 ns
30 ns
10 ns
2 ns
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Frequency meter Period duration measurement Pulse width modulation (PWM output) Pulse Train Output (PTO output) Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 6 (max. 100 kHz)
6 channels Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 6 (max. 100 kHz)
6 channels Max. 4 (up to 100 kHz) Max. 4 (up to 100 kHz)
Up to 100 kHz
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
15
Product overview 2.2 Applications of the S7-1500 CPU
Integrated Motion Control technology functions All CPUs of SIMATIC S7-1500 support Motion Control technology functions. STEP 7 offers Motion Control instructions standardized according to PLCopen for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axis Positioning axis Synchronous axis External encoders Output cam Cam track Measuring inputs The technology CPUs of the SIMATIC S7-1500 offer enhanced Motion Control functions: Advanced synchronization functions Synchronization with specification of synchronous position Actual value coupling Shifting the master value of the following axis Camming Up to 4 encoders or measuring systems as actual position for position control The technology CPUs of the SIMATIC S7-1500 additionally support the following technology objects: Cam Kinematics Cam Kinematics Controlling of kinematics, such as Cartesian portals Roller pickers Delta pickers SCARA Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
Additional integrated technological functions For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags. In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
16
Manual, 12/2017, A5E36285525-AB
Product overview 2.2 Applications of the S7-1500 CPU
Other technology functions Technology modules also implement functions such as high-speed counting, position detection and measuring functions and pulse generators (PTO, PWM and frequency output). For compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and can be implemented without additional technology modules.
SIWAREX is a versatile and flexible weighing module, which you can use as a static scale for operation.
Security Integrated In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks.
Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU.
In addition, you can assign various access rights to different user groups in the controller using four different authorization levels.
Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller.
The use of an Ethernet CP (CP 1543-1) provides the user with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally.
These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration thereby provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications.
The fail-safe CPUs are certified for use in safety mode up to:
Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010
Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to EN ISO 13849-1:2008
Additional password protection for F-configuration and F-program is set up for IT security.
In addition to the CPUs, further components such as SINAMICS drives dispose of integrated safety functions. Additional information about integrated safety functions in drives can be found in the manuals for the respective products.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
17
Product overview 2.2 Applications of the S7-1500 CPU
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Error messages are immediately shown on the display in plain text. In the case of servicing, plant downtimes are minimized by quick access to diagnostics alarms. Detailed information about this and a multitude of other display functions is available in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
Uniform front connectors for all modules and integrated potential bridges for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7, on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostic information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server in up to three project languages. The HMI takes over the display in the project languages specified for the CPU. If you require message texts in additional languages, you can load these via the configured connection to your HMI. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
18
Manual, 12/2017, A5E36285525-AB
2.3
Hardware properties
Article number 6ES7517-3TP00-0AB0
View of the module The following figure shows the CPU 1517T-3 PN/DP.
Product overview 2.3 Hardware properties
Figure 2-1 CPU 1517T-3 PN/DP
Note Protective film Note that a protective film is applied to the display in the delivery state of the CPU. Remove the protective film if necessary.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
19
Product overview 2.3 Hardware properties
Properties
The CPU 1517T-3 PN/DP has the following properties:
Property CPU display
Description
All CPUs of the SIMATIC S7-1500 product series
·
feature a display with plain text information. The display
provides information on order numbers, firmware
version and serial numbers of all connected modules.
In addition, you can set the IP address of the CPU and carry out further network settings. The display shows ·
occurring error messages directly in plain text.
In addition to the functions listed here, a multitude of other functions that are described in the SIMATIC S7-1500 Display Simulator are shown on the display.
Additional information
S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
SIMATIC S7-1500 Display Simulator (http://www.automation.siemens. com/salesmaterial-as/interactivemanuals/getting-started_simatics7-1500/disp_tool/start_en.html)
Supply voltage
The 24 V DC supply voltage is supplied via a 4-pole connection plug that is located at the front of the CPU.
· Chapter Wiring (Page 29)
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
PROFIBUS DP PROFIBUS interface (X3)
Operation of the CPU as DP master
PROFINET IO PROFINET interface (X1 P1 R, X1 P2 R)
PROFINET interface (X2 P1)
Operation of the CPU as · IO controller · I-device
The interface serves to connect to a PROFIBUS network.
In the role as a DP master, the CPU addresses the connected DP slaves. The CPU cannot assume the role of a DP slave.
PROFIBUS function manual (https://support.industry.siemens.co m/cs/ww/en/view/59193579)
The interface has two ports. In addition to basic
PROFINET function manual
PROFINET functionality, its also supports
(https://support.industry.siemens.co
PROFINET IO RT (real time) and IRT (isochronous real m/cs/ww/en/view/49948856)
time).
The interface has two ports. In addition to basic PROFINET functionality, its also supports PROFINET IO RT (real time).
· IO controller: As an IO controller the CPU addresses the connected IO devices
· I-device: As an I-device (intelligent IO device) the CPU is assigned to a higher-level IO controller and is used in the process as an intelligent pre-processing unit of sub-processes
Accessories
You can find information on "Accessories/spare parts" in the S7-1500, ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
20
Manual, 12/2017, A5E36285525-AB
Product overview 2.4 Firmware functions
2.4
Firmware functions
Functions
The CPU 1517T-3 PN/DP supports the following functions:
Function Integrated system diagnostics Integrated Web server
Integrated trace functionality
OPC UA
Configuration control
Description
Additional information
The system automatically generates the messages for the system diagnostics and outputs these messages via a programming device/PC, HMI device, the Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
Diagnostics function manual (http://support.automation.siemens.c om/WW/view/en/59191792)
The Web server lets you access the CPU data by
·
means of a network. Evaluations, diagnostics, and
modifications are thus possible over long distances.
Monitoring and evaluation is possible without STEP 7; all you need is a Web browser. Make sure that you take ·
appropriate measures (e.g. limiting network access,
using firewalls) to protect the CPU from being compro-
mised.
Web server function manual (http://support.automation.sieme ns.com/WW/view/en/59193560)
Security with SIMATIC S7 controllers system manual (https://support.industry.siemens. com/cs/ww/en/view/90885010)
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
Using the trace and logic analyzer function function manual (http://support.automation.siemens.c om/WW/view/en/64897128)
The device saves the recordings. You can read out and permanently save the recordings with the configuration system (ES), if required. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes.
The trace record can also be displayed through the Web server.
With OPC UA, you can exchange data via an open and manufacturer-neutral communication protocol. The CPU can act as an OPC UA DA server. The CPU acting as the OPC UA server can communicate with OPC UA clients.
Communication function manual (https://support.industry.siemens.co m/cs/ww/en/view/59192925)
The OPC UA Companion Specification allows methods to be specified uniformly and independently of the manufacturer. Using these specified methods, you can easily integrate devices from various manufacturers into your plants and production processes.
You can use configuration control to operate different real hardware configurations with a configured maximum configuration of the hardware. This means that, in series machine manufacturing in particular, you have the option of operating/configuring different configuration variants of a machine with a single project.
S7-1500, ET 200MP system manual (http://support.automation.siemens.c om/WW/view/en/59191792)
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
21
Product overview 2.4 Firmware functions
Function PROFINET IO RT (real time) IRT (isochronous real time)
Isochronous mode
MRP (Media Redundancy Protocol)
MRPD (Media Redundancy with Planned Duplication)
Shared device
Description
RT prioritizes PROFINET IO telegrams over standard telegrams. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet telegrams.
A reserved bandwidth within the send clock is available for IRT data. The reserved bandwidth ensures that the IRT data can be transmitted in time-synchronized intervals, unaffected by other high network loading (e.g. TCP/IP communication or additional real time communication). Update times with maximum determinism can be realized through IRT. Isochronous applications are possible with IRT.
The Isochronous mode system property acquires measured values and process data and processes the signal in a fixed system clock. Isochronous mode thus contributes to high control quality and hence to greater manufacturing precision. Isochronous mode reduces possible fluctuations of the process reaction times to a minimum. Time-assured processing makes higher machine cycles possible.
It is possible to establish redundant networks via the Media Redundancy Protocol. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails. The PROFINET devices that are part of this redundant network form an MRP domain.
RT operation is possible with the use of MRP.
The advantage of the MRP extension MRPD is that, in the event of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no reconfiguration time.
The "Shared device" function allows you to divide the modules or submodules of an IO device up among different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required. The "Shared device" function allows the modules or submodules of an IO device to be divided up among different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules that are physically close to each other in one IO device.
Additional information
PROFINET function manual (http://support.automation.siemens.c om/WW/view/en/49948856)
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
22
Manual, 12/2017, A5E36285525-AB
Product overview 2.4 Firmware functions
Function PROFIenergy Integrated technology Motion Control
Extended Motion Control functions
Description
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. The majority of the energy is saved by the process; the PROFINET device itself only contributes a few watts of savings potential.
Additional information
S7-1500 CPUs support the controlled positioning and traveling of axes via S7-1500 Motion Control functions by means of the following technology objects:
Speed-controlled axes, positioning axes, synchronized axes, external encoders, cams, cam tracks and measuring inputs.
S7-1500 Motion Control function manual (http://support.automation.siemens.c om/WW/view/en/109749262)
· Speed-controlled axis for controlling a drive with speed specification
· Positioning axis for position-controlled positioning of a drive
· Synchronous axis to interconnect with a master value. The axis is synchronized to the master axis position.
· External encoder for detecting the actual position of an encoder and its use as a master value for synchronous operation
· Cams, cam track for position-dependent generation of switching signals
· Measuring input for fast, accurate and eventdependent sensing of actual positions
You program the technology objects with Motion Control instructions according to PLCopen.
The technology CPUs of the SIMATIC S7-1500 also support extended Motion Control functions:
· Advanced synchronization functions Synchronization with specification of the synchronous position Actual value coupling Shifting of the master value at following axis Camming
S7-1500T Motion Control function manual (https://support.industry.siemens.co m/cs/ww/en/view/109749263)
S7-1500T Kinematics Functions V4.0 in TIA Portal V15 (https://support.industry.siemens.co m/cs/ww/en/view/109749264) Function manual
· Cam
· Up to 4 encoders or measuring systems as actual position for position control
· Controlling of kinematics, such as
Cartesian portals Roller pickers Delta pickers SCARA
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
23
Product overview 2.4 Firmware functions
Function Integrated closed-loop control functionality
Integrated safety Know-how protection Copy protection Access protection Integrity protection
Password provider
Description
Additional information
· PID Compact (continuous PID controller)
PID control function manual
·
PID 3Step (step controller for integrating actuators)
(https://support.industry.siemens.co m/cs/ww/en/view/108210036)
· PID Temp (temperature controller for heating and
cooling with two separate actuators)
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
S7-1500, ET 200MP system manual (http://support.automation.siemens.c om/WW/view/en/59191792)
Extended access protection provides high-quality protection against unauthorized configuration changes. You can use authorization levels to assign separate rights to different user groups.
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between TIA Portal and CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password input you can connect a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords. STEP 7 reads the password automatically for the blocks. This saves you time.
· Optimum block protection because the users do not know the password itself.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
24
Manual, 12/2017, A5E36285525-AB
2.5
2.5.1
Product overview 2.5 Operator controls and display elements
Operator controls and display elements
Front view of the CPU with closed front flap
The figure below shows the front view of the CPU 1517T-3 PN/DP.
LEDs for the current operating mode and diagnostics status of the CPU Front panel with display Display Control keys Front panel of the PROFIBUS interface
Figure 2-2 View of the CPU 1517T-3 PN/DP (with front panels) - front
Note Temperature range for display
To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU.
You can find additional information on the temperatures at which the display switches itself on and off in the technical specifications.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
25
Product overview 2.5 Operator controls and display elements
Removing and fitting the front panel with display You can remove and fit the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you remove or fit the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Before you remove or fit the front panel, always switch off the power supply to the S7-1500 automation system in hazardous area zone 2. The CPU maintains its operating mode.
Locking the front panel You can lock the wide front panel with display as well as the narrow front panel of the PROFIBUS interface to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panels.
Reference
Figure 2-3 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, the configurable protection levels and local locking in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You can find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
26
Manual, 12/2017, A5E36285525-AB
2.5.2
Product overview 2.5 Operator controls and display elements
Front view of the CPU without front flaps
The figure below shows the operator controls and connection elements of the CPU 1517T-3 PN/DP.
Mode selector No function PROFIBUS interface (X3) Fixing screws Connection for supply voltage PROFINET IO interface (X2) with 1 port PROFINET IO interface (X1) with 2 ports MAC addresses of the interfaces LEDs for the 3 ports of the PROFINET interfaces X1 and X2 Slot for the SIMATIC memory card Display connection LEDs for the current operating mode and diagnostics status of the CPU
Figure 2-4 View of the CPU 1517T-3 PN/DP (without front panels) - front
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
27
Product overview 2.6 Mode selector
2.5.3
Rear view of the CPU
The following figure shows the connection elements on the rear of the CPU 1517T-3 PN/DP.
Shield contact surfaces Plug-in connection for power supply Plug-in connection for backplane bus Fixing screws
Figure 2-5 View of the CPU 1517T-3 PN/DP - rear
2.6
Mode selector
You use the mode selector to set the operating mode of the CPU.
The following table shows the meaning of the corresponding operation of the operating mode buttons.
Table 2- 6 Meaning of the mode switches
Operation of the mode switch RUN STOP MRES
Meaning RUN mode STOP mode Memory reset
Explanation The CPU is executing the user program. The user program is not executed. (STOP ACTIVE LED lights up). Position for CPU memory reset.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
28
Manual, 12/2017, A5E36285525-AB
Wiring
3
This section provides information on the pin assignment of the individual interfaces and the block diagram of the CPU 1517T-3 PN/DP.
24 V DC supply voltage (X80) The connector for the supply voltage is plugged in when the CPU ships from the factory. The following table shows the pin assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring opener (one spring opener per terminal)
Bridged internally:
and and
Figure 3-1 Supply voltage connection
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
29
Wiring
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R) The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
Figure 3-2 PROFINET
PROFINET interface X2 with 1 port (X2 P1) The assignment corresponds to the Ethernet standard for an RJ45 plug. Autocrossing is always active on X2. This means the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
30
Manual, 12/2017, A5E36285525-AB
Wiring
PROFIBUS interface X3
The table below shows the pin assignment of the PROFIBUS interface. The assignment corresponds to the standard assignment of an RS485 interface.
Table 3- 1
PROFIBUS interface pin assignment
View
Signal name
1
-
2
-
3
RxD/TxD-P
4
RTS
5
M5V2
6
P5V2
7
-
8
RxD/TxD-N
9
-
Designation Data line B Request to send Data reference potential (from station) Supply plus (from station) Data line A -
Note Supply of I/O devices
CPU 1517T-3 PN/DP does not provide a 24 V DC power supply on the PROFIBUS interface. I/O devices (for example, PC adapter USB) are therefore only operational on the interface in conjunction with a plug-in power supply set for external power supply.
The innovative successor product, PC adapter USB A2, receives the required power supply via the USB port. The USB A2 PC adapter therefore does not require a 24 V DC supply voltage and can be operated without a plug-in power supply set for external power supply.
Reference
You can find additional information on the topics of "Wiring the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
31
Wiring
Assignment of the MAC addresses
CPU 1517T-3 PN/DP has two PROFINET interfaces. The first interface has two ports. Each of the PROFINET interfaces has a MAC address and each of the PROFINET ports has its own MAC address. In total, the CPU 1517T-3 PN/DP has five MAC addresses.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC address are lasered on the rating plate on the right side of each CPU 1517T-3 PN/DP.
The table below shows how the MAC addresses are assigned.
Table 3- 2 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3 MAC address 4 MAC address 5
Assignment PROFINET interface X1 (visible in STEP 7 for accessible devices)
Port X1 P1 R (required for LLDP, for example) Port X1 P2 R (required for LLDP, for example) PROFINET interface X2 (visible in STEP 7 for accessible devices) Port X2 P1 (required for LLDP, for example)
Labeling · Front, lasered · Right side, lasered
(start of number range)
· Front and right side, not lasered
· Front and right side, not lasered
· Front, lasered · Right side, not lasered
· Front, not lasered · Right side, lasered
(start of number range)
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
32
Manual, 12/2017, A5E36285525-AB
Block diagram The following figure shows the block diagram of the CPU 1517T-3 PN/DP.
Wiring
X50
X80 24 V DC
Display RUN/STOP/MRES mode selector Electronics PROFINET 2-port switch PROFIBUS DP driver Backplane bus interface Internal supply voltage SIMATIC memory card Infeed of supply voltage
PN X1 P1 R PN X1 P2 R PN X2 P1 PB X3 L+ M R/S ER MT X1 P1, X1 P2, X2 P1
PROFINET interface X1 Port 1 PROFINET interface X1 Port 2 PROFINET interface X2 Port 1 PROFIBUS interface X3 24 V DC supply voltage Ground RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
Figure 3-3 Block diagram of the CPU 1517T-3 PN/DP
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
33
Interrupts, error messages, diagnostics and system alarms
4
The status and error displays of the CPU 1517T-3 PN are described below.
You can find additional information on the topic of "Interrupts" in the STEP 7 online help.
You can find additional information on the topic of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error displays of the CPU
LED display
The following figure shows the LED displays of the CPU 1517T-3 PN/DP.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) No function LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED)
Figure 4-1 LED display of the CPU 1517T-3 PN/DP (without front panel)
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
34
Manual, 12/2017, A5E36285525-AB
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error displays of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1517T-3 PN/DP has three LEDs to signal the current operating status and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED off
LED flashes red
LED lit green
LED off
LED lit green
LED flashes red
LED lit green
LED off
LED lit green
LED off
LED lit green LED lit yellow LED lit yellow LED lit yellow LED lit yellow
LED flashes red LED flashes red
LED off LED off LED flashes red
LED flashes yellow
LED off
LED flashes yellow/green
LED off
MAINT LED LED off LED off LED off LED off
LED lit yellow
LED flashes yellow
LED off
Meaning Missing or insufficient supply voltage on the CPU.
An error has occurred.
CPU is in RUN mode.
A diagnostics event is pending.
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration An error has occurred.
LED off LED flashes yellow
LED off LED flashes yellow
LED off
LED off
Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card CPU carries out a program with active breakpoint. Startup (transition from RUN STOP)
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
35
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error displays of the CPU
RUN/STOP LED
LED flashes yellow/green
ERROR LED LED flashes red
MAINT LED LED flashes yellow
Meaning Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of ports for the CPU 1517T-3 PN/DP.
Table 4- 2 Meaning of the LEDs
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
36
Manual, 12/2017, A5E36285525-AB
Technical specifications
Article number General information
Product type designation HW functional status Firmware version Engineering with
· STEP 7 TIA Portal configurable/integrated as of version
Configuration control via dataset
Display Screen diagonal [cm]
Control elements Number of keys Mode selector switch
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering
· Mains/voltage failure stored energy time
· Repeat rate, min.
Input current Current consumption (rated value) Inrush current, max. I²t
Power Infeed power to the backplane bus Power consumption from the backplane bus (balanced)
Power loss Power loss, typ.
Memory Number of slots for SIMATIC memory card SIMATIC memory card required
6ES7517-3TP00-0AB0
CPU 1517T-3 PN/DP FS05 V2.5
V15 (FW V2.5) / V14 (FW V2.0) or higher
Yes
6.1 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms 1/s
1.55 A 2.4 A; Rated value 0.02 A²·s
12 W 30 W
24 W
1 Yes
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0) Manual, 12/2017, A5E36285525-AB
5
37
Technical specifications
Article number Work memory
· integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ. CPU-blocks Number of elements (total) DB · Number range
· Size, max.
FB · Number range · Size, max.
FC · Number range · Size, max.
OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs · Number of process alarm OBs · Number of DPV1 alarm OBs · Number of isochronous mode OBs · Number of technology synchronous alarm OBs · Number of startup OBs
6ES7517-3TP00-0AB0
3 Mbyte 8 Mbyte
32 Gbyte
Yes
2 ns 3 ns 3 ns 12 ns
10 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999 8 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535 1 Mbyte
0 ... 65 535 1 Mbyte
1 Mbyte 100 20 20 20; With minimum OB 3x cycle of 100 µs 50 3 2 2
100
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
38
Manual, 12/2017, A5E36285525-AB
Technical specifications
Article number · Number of asynchronous error OBs
· Number of synchronous error OBs
· Number of diagnostic alarm OBs Nesting depth
· per priority class Counters, timers and their retentivity S7 counter
· Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max.
Extended retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
· Number of clock memories
Data blocks · Retentivity adjustable
· Retentivity preset Local data
· per priority class, max. Address area
Number of IO modules
6ES7517-3TP00-0AB0 4 2 1
24
2 048
Yes
Any (only limited by the main memory)
Yes
2 048
Yes
Any (only limited by the main memory)
Yes
768 kbyte; Available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 700 KB 8 Mbyte; When using PS 60W 24/48/60V DC HF
16 kbyte 8; 8 clock memory bits, grouped into one clock memory byte Yes No
64 kbyte; max. 16 KB per block
16 384; max. number of modules / submodules
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
39
Technical specifications
Article number I/O address area
· Inputs · Outputs per integrated IO subsystem
Inputs (volume)
Outputs (volume)
per CM/CP Inputs (volume) Outputs (volume)
Subprocess images · Number of subprocess images, max.
Hardware configuration Number of distributed IO systems
Number of DP masters · integrated · Via CM
Number of IO Controllers · integrated · Via CM
Rack · Modules per rack, max. · Number of lines, max.
PtP CM · Number of PtP CMs
Time of day Clock
· Type · Backup time · Deviation per day, max.
6ES7517-3TP00-0AB0
32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image
16 kbyte; 16 KB via the integrated PROFINET IO interface X1, 8 KB via the integrated PROFINET IO interface X2 and via the integrated PROFIBUS DP interface 16 kbyte; 16 KB via the integrated PROFINET IO interface X1, 8 KB via the integrated PROFINET IO interface X2 and via the integrated PROFIBUS DP interface
8 kbyte 8 kbyte
32
64; A distributed I/O system is characterized not only by the integration of distributed I/O via PROFINET or PROFIBUS communication modules, but also by the connection of I/O via AS-i master modules or links (e.g. IE/PB-Link)
1 8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
2 8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
32; CPU + 31 modules 1
the number of connectable PtP CMs is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
40
Manual, 12/2017, A5E36285525-AB
Technical specifications
Article number Operating hours counter
· Number Clock synchronization
· supported · to DP, master · in AS, master · in AS, slave · on Ethernet via NTP Interfaces Number of PROFINET interfaces Number of PROFIBUS interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Functionality · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
PROFINET IO Controller Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP
MRPD PROFIenergy Prioritized startup
6ES7517-3TP00-0AB0
16
Yes Yes Yes Yes Yes
2 1
2 Yes Yes; X1
Yes; IPv4 Yes Yes Yes Yes Yes Yes; MRP Automanager according to IEC 62439-2 Edition 2.0
Yes Yes Yes Yes Yes Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50 Yes; Requirement: IRT Yes Yes; Max. 32 PROFINET devices
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
41
Technical specifications
Article number Number of connectable IO Devices, max.
Of which IO devices with IRT, max.
6ES7517-3TP00-0AB0
512; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
64
Number of connectable IO Devices for 512 RT, max.
of which in line, max.
512
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
Update time for IRT for send cycle of 250 µs
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
250 µs to 4 ms
for send cycle of 500 µs
500 µs to 8 ms
for send cycle of 1 ms
1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" Update time = set "odd" send clock (any multiple
send cycles
of 125 µs: 375 µs, 625 µs ... 3 875 µs)
Update time for RT for send cycle of 250 µs
250 µs to 128 ms
for send cycle of 500 µs
500 µs to 256 ms
for send cycle of 1 ms
1 ms to 512 ms
for send cycle of 2 ms
2 ms to 512 ms
for send cycle of 4 ms
4 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
Yes
MRP
Yes
MRPD
Yes; Requirement: IRT
PROFIenergy
Yes
Shared device
Yes
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
42
Manual, 12/2017, A5E36285525-AB
Technical specifications
Article number
Number of IO Controllers with shared device, max.
6ES7517-3TP00-0AB0 4
Asset management record
Yes; Per user program
2. Interface
Interface types
· Number of ports
1
· integrated switch
No
· RJ 45 (Ethernet)
Yes; X2
Functionality · IP protocol
Yes; IPv4
· PROFINET IO Controller
Yes
· PROFINET IO Device
Yes
· SIMATIC communication
Yes
· Open IE communication
Yes
· Web server
Yes
· Media redundancy
No
PROFINET IO Controller
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
No
MRP
No
PROFIenergy
Yes
Prioritized startup
No
Number of connectable IO Devices, max.
Number of connectable IO Devices for RT, max.
128; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
128
of which in line, max.
128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
43
Technical specifications
Article number Update time for RT
for send cycle of 1 ms PROFINET IO Device Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP MRPD PROFIenergy Prioritized startup Shared device Number of IO Controllers with shared
device, max. Asset management record 3. Interface Interface types · Number of ports · RS 485 Functionality · PROFIBUS DP master · PROFIBUS DP slave · SIMATIC communication Interface types RJ 45 (Ethernet) · 100 Mbps · Autonegotiation · Autocrossing · Industrial Ethernet status LED RS 485 · Transmission rate, max.
6ES7517-3TP00-0AB0
1 ms to 512 ms
Yes Yes No Yes No No No Yes No Yes 4
Yes; Per user program
1 Yes; X3
Yes No Yes
Yes Yes Yes Yes
12 Mbit/s
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
44
Manual, 12/2017, A5E36285525-AB
Technical specifications
Article number Protocols Number of connections
· Number of connections, max.
· Number of connections reserved for ES/HMI/web
· Number of connections via integrated interfaces
· Number of S7 routing paths
SIMATIC communication · S7 communication, as server · S7 communication, as client · User data per job, max.
Open IE communication · TCP/IP Data length, max. several passive connections per port, supported · ISO-on-TCP (RFC1006) Data length, max. · UDP Data length, max. UDP multicast · DHCP · SNMP · DCP · LLDP
Web server · HTTP · HTTPS
PROFIBUS DP master · Number of connections, max.
Services PG/OP communication S7 routing Data record routing Isochronous mode
6ES7517-3TP00-0AB0
320; via integrated interfaces of the CPU and connected CPs / CMs 10
160
64; in total, only 16 S7-Routing connections are supported via PROFIBUS
Yes Yes See online help (S7 communication, user data size)
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
Yes; Standard and user pages Yes; Standard and user pages
48; for the integrated PROFIBUS DP interface
Yes Yes Yes Yes
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
45
Technical specifications
Article number Equidistance Number of DP slaves
Activation/deactivation of DP slaves OPC UA
· Runtime license required · OPC UA Server
Application authentication Security policies
User authentication Further protocols
· MODBUS Media redundancy
· Switchover time on line break, typ. · Number of stations in the ring, max. Isochronous mode Isochronous operation (application synchronized up to terminal) Equidistance S7 message functions Number of login stations for message functions, max. Program alarms Number of configurable program alarms Number of simultaneously active program alarms · Number of program alarms · Number of alarms for system diagnostics · Number of alarms for motion technology
objects Test commissioning functions
Joint commission (Team Engineering)
Status block
Single step Number of breakpoints
6ES7517-3TP00-0AB0 Yes 125; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET Yes
Yes Yes; Data access (read, write, subscribe), method call, custom address space Yes Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "anonymous" or by user name & password
Yes; MODBUS TCP
200 ms; For MRP, bumpless for MRPD 50
Yes; With minimum OB 6x cycle of 250 µs
Yes
32
Yes 10 000
1 000 200 160
Yes; Parallel online access possible for up to 10 engineering systems Yes; Up to 16 simultaneously (in total across all ES clients) No 20
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
46
Manual, 12/2017, A5E36285525-AB
Technical specifications
Article number Status/control
· Status/control variable · Variables
· Number of variables, max. of which status variables, max. of which control variables, max.
Forcing · Forcing, variables · Number of variables, max.
Diagnostic buffer · present · Number of entries, max. of which powerfail-proof
Traces · Number of configurable Traces
Interrupts/diagnostics/status information Diagnostics indication LED
· RUN/STOP LED · ERROR LED · MAINT LED · Connection display LINK TX/RX Supported technology objects Motion Control
· Number of available Motion Control resources for technology objects (except cam disks)
· Required Motion Control resources per speed-controlled axis per positioning axis per synchronous axis per external encoder per output cam per cam track per probe
6ES7517-3TP00-0AB0
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Peripheral inputs/outputs 200
Yes 3 200 1 000
8; Up to 512 KB of data per trace are possible
Yes Yes Yes Yes
Yes; Note: The number of technology objects affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER 10 240
40 80 160 80 20 160 40
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
47
Technical specifications
Article number
6ES7517-3TP00-0AB0
· Number of available Extended Motion Con- 256 trol resources for technology objects
· Required Extended Motion Control resources
for each cam
2
for each set of kinematics
30
· Positioning axis
Number of positioning axes at motion 70 control cycle of 4 ms (typical value)
Number of positioning axes at motion 128 control cycle of 8 ms (typical value)
Controller · PID_Compact
· PID_3Step
· PID-Temp Counting and measuring · High-speed counter
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
Standards, approvals, certificates
Suitable for safety functions
No
Ambient conditions
Ambient temperature during operation
· horizontal installation, min.
0 °C
· horizontal installation, max. · vertical installation, min.
60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off
0 °C
· vertical installation, max.
Ambient temperature during storage/transportation
· min.
40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C
· max.
70 °C
Configuration
Programming
Programming language
LAD
Yes
FBD
Yes
STL
Yes
SCL
Yes
GRAPH
Yes
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
48
Manual, 12/2017, A5E36285525-AB
Technical specifications
Article number Know-how protection
· User program protection/password protection
· Copy protection
· Block protection Access protection
· Password for display
· Protection level: Write protection
· Protection level: Read/write protection
· Protection level: Complete protection Cycle time monitoring
· lower limit
· upper limit Dimensions
Width Height Depth Weights Weight, approx.
6ES7517-3TP00-0AB0
Yes
Yes Yes
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
175 mm 147 mm 129 mm
1 978 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP System Manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
49
Dimension drawing
A
A.1
Dimension drawing CPU 1517T-3 PN/DP
This section contains the dimension drawing of the module on the mounting rail, as well as a dimension drawing with the front panel open. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimension drawings for CPU 1517-3 PN/DP
Figure A-1 Dimension drawing of the CPU 1517T-3 PN/DP, front and side view
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
50
Manual, 12/2017, A5E36285525-AB
Dimension drawing A.1 Dimension drawing CPU 1517T-3 PN/DP
Figure A-2 Dimension drawing of the CPU 1517T-3 PN/DP, side view with open front panel
CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0)
Manual, 12/2017, A5E36285525-AB
51
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
SIMATIC
S7-1500 CPU 1518-4 PN/DP (6ES75184AP00-0AB0)
Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
_Pr_od_u_ct_o_ve_rv_ie_w_________2_
_Co_n_ne_c_tin_g_up___________3_
_ _ _ _ _ _ _ _ _ _ _ Interrupts, error messages,
diagnostics and system
4
alarms
_Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______5_
_Di_m_en_si_on_a_l d_ra_w_in_g _______A_
09/2016
A5E32334527-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E32334527-AC 08/2016 Subject to change
Copyright © Siemens AG 2014 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system/ ET 200MP distributed I/O system as well as the function manuals. This manual contains a description of the module-specific information. The system-related functions are described in the system manual. All system-spanning functions are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1518-4 PN/DP.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
4
Manual, 09/2016, A5E32334527-AC
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (http://www.siemens.com/automation/service&support).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
New functions in firmware version V2.0................................................................................. 11
2.2
Applications of the S7-1500 CPU .......................................................................................... 14
2.3
How it works ........................................................................................................................... 19
2.4
Properties ............................................................................................................................... 20
2.5 2.5.1 2.5.2 2.5.3
Operating and display elements ............................................................................................ 25 Front view of the module with closed front panels ................................................................. 25 Front view of the module without front panels ....................................................................... 27 Rear view of the module ........................................................................................................ 28
2.6
Mode selector switch ............................................................................................................. 28
3 Connecting up....................................................................................................................................... 29
4 Interrupts, error messages, diagnostics and system alarms................................................................... 34
4.1
Status and error display of the CPU ...................................................................................... 34
5 Technical specifications ........................................................................................................................ 37
A Dimensional drawing............................................................................................................................. 49
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
6
Manual, 09/2016, A5E32334527-AC
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
8
Manual, 09/2016, A5E32334527-AC
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
10
Manual, 09/2016, A5E32334527-AC
Product overview
2
2.1
New functions in firmware version V2.0
New functions of the CPU in firmware version V2.0
This section lists the new features of the CPU with firmware version V2.0. You can find additional information in the sections of this manual.
Table 2- 1 New functions of the CPU with firmware version 2.0 compared with firmware version V1.8
New functions
Applications
Customer benefits
OPC UA server
You realize the data communication between OPC UA is a unified standard for data communi-
different systems, both within the process level cation and is independent of any particular oper-
and on the control and enterprise levels:
ating system platforms.
· To embedded systems with controllers
· To controllers with MES systems and systems of the enterprise level (ERP, asset systems)
· To Siemens controllers with controllers from other manufacturers
· To intelligent sensors with controllers Supported standard: OPC Data Access, DA.
You have integrated security mechanisms on different automation systems, for example, for data exchange, on the application level, for authentication of the user.
OPC UA servers provide a large amount of data:
· Values of PLC tags that clients can access
· Data types of these PLC tags
· Information about the OPC UA server itself and the CPU
In this way, clients can gain an overview and can read and write values.
PROFINET IO
PROFINET IO on the You can operate another PROFINET IO sys-
2nd PROFINET inter- tem on the CPU or connect additional IO de-
face
vices.
You use a fieldbus in the plant.
The CPU can perform fast and deterministic data exchange as an I-device with a higher-level controller (PROFINET/Ethernet) through the second line.
IRT with very short You realize high-end applications with IO
data cycle times down communication which place very high perfor-
to 125 µs
mance demands on the IO processing.
You make PROFINET IO communication and standard communication possible via one cable even with a send clock of 125 µs.
Data cycle of 125 µs: You configure program blocks with the additional "low jitter" property, which provides deterministic runtimes.
MRPD: Media Redundancy for Planned Duplication for IRT
PROFINET IO IRT enables you to realize applications that place particularly high demands on failure safety and accuracy (isochronous).
By sending the cyclic IO data in both directions in the ring, the communication to the IO devices is maintained even when the ring is interrupted and does not result in device failure even with fast update times. You achieve higher failure safety than with MRP.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
11
Product overview 2.1 New functions in firmware version V2.0
New functions
Applications
Customer benefits
PROFINET performance upgrade
You can develop applications with high demands on speed and clock cycles. This is interesting for applications with high demands on performance.
Better utilization of the bandwidth results in short reaction times.
Limitation of the data infeed into the network
You limit the network load for standard Ethernet communication to a maximum value.
You smooth peaks in the data infeed.
You share the remaining bandwidth based on requirements.
Display and Web server
Backing up and restoring via the display
Backing up and restoring via the Web server
You can back up and restore the CPU configu- You can make a backup copy of an operational
ration to/from the SIMATIC memory card with- project without STEP 7.
out a programming device/PC.
In an "emergency", you can simply use an exist-
You can, for example, backup and restore the ing configuration without STEP 7, for example,
configuration of the CPU to the PG/PC on
during commissioning or after a program down-
which the Web server is running.
load.
Display and Web server provide up to three project languages for comments and message texts
When you export your plants worldwide, for example, comments or message texts can be stored on the card in up to 3 languages. For example, German - author's language, English - internationally usable, Portuguese - end user's language.
You provide customers with better service.
Trace via Web server
Monitoring of configured technology objects via a Web server
When you enable trace functions via the Web server, you have better service support. You can send your trace recordings via Web service, for example, to your service partner.
You can monitor statuses, errors, technology alarms and the current values of technology objects (TOs) with the Web server.
You get plant/project information for diagnostics and maintenance requirements without STEP 7.
You can provide trace recordings for each Web server.
You save time in troubleshooting.
Formatting, erasing or converting a SIMATIC memory card via the display
Your SIMATIC memory card is directly formatted, erased or converted to a program card without having to use STEP 7. You save time.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
12
Manual, 09/2016, A5E32334527-AC
Product overview 2.1 New functions in firmware version V2.0
New functions
Motion control
Greater number of axes for Motion Control applications and new technology objects: Output cam, cam track and measuring input
Applications
Customer benefits
Speed specification, e.g. for: · Pumps, fans, mixers · Conveyor belts · Auxiliary drives Positioning tasks, e.g.: · Lifting and vertical conveyors
You can implement additional Motion Control applications with a CPU.
The scalable configuration limits allow you to handle all types of application.
High machine speeds result in greater productivity with better accuracy.
· Feeding and gate control
· Palletizing equipment
Output cams and cam tracks make other applications possible, e.g.:
· Applying glue tracks
· Triggering switching operations with precise positioning
· Very precise processing of products on a conveyor belt
Measuring inputs are used, for example:
· For measuring products
· For detecting the position of the product on a conveyor belt
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
13
Product overview 2.2 Applications of the S7-1500 CPU
2.2
Applications of the S7-1500 CPU
Area of application
SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation.
The modular and fanless design, simple implementation of distributed structures, and userfriendly operation make SIMATIC S7-1500 the economic and convenient solution for a variety of tasks.
Applications of the SIMATIC S7-1500, include, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automobile engineering
Water/waste water
Food & Beverage
Applications of the SIMATIC S7-1500T include, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial capability from the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
14
Manual, 09/2016, A5E32334527-AC
Product overview 2.2 Applications of the S7-1500 CPU
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 2 Standard CPUs
CPU
Performance segment
CPU 1511-1 PN Standard CPU for small to mid-range applications
CPU 1513-1 PN Standard CPU for midrange applications
CPU 1515-2 PN Standard CPU for midrange to large applications
CPU 1516-3 PN/DP
Standard CPU for demanding applications and communication tasks
CPU 1517-3 PN/DP
Standard CPU for demanding applications and communication tasks
CPU 1518-4 PN/DP
CPU 1518-4 PN/DP ODK
Standard CPU for highperformance applications, demanding communication tasks and very short reaction times
PROFIBUS interfaces
---1
1
1
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT
interface
--
1
--
1
1
1
1
1
1
1
1
PROFINET basic func-
tionality
--
Work memory
1.23 MB
Processing time for bit operations
60 ns
--
1.95 MB 40 ns
--
3.75 MB 30 ns
--
6.5 MB 10 ns
--
11 MB
2 ns
1
26 MB
1 ns
Table 2- 3 Compact CPUs
CPU
CPU 1511C-1 PN CPU 1512C-1 PN
Performance segment
Compact CPU for small to mid-range applications Compact CPU for midrange applications
PROFIBUS interfaces
--
--
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT
interface
--
1
--
PROFINET basic func-
tionality --
--
Work memor
y
1.175 MB
1.25 M B
Processing time for bit operations
60 ns
48 ns
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
15
Product overview 2.2 Applications of the S7-1500 CPU
Table 2- 4 Fail-safe CPUs
CPU
CPU 1511F-1 PN
CPU 1513F-1 PN CPU 1515F-2 PN
CPU 1516F-3 PN/DP
CPU 1517F-3 PN/DP CPU 1517TF-3 PN/DP
Performance segment
Fail-safe CPU for small to mid-range applications Fail-safe CPU for midrange applications Fail-safe CPU for midrange to large applications Fail-safe CPU for demanding applications and communication tasks Fail-safe CPU for demanding applications and communication tasks
PROFIBUS interfaces
--
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT inter-
face
--
PROFINET basic func-
tionality
--
Work memory
1.23 MB
Processing time for bit operations
60 ns
--
1
--
--
1.95 MB 40 ns
--
1
1
--
3.75 MB 30 ns
1
1
1
--
6.5 MB 10 ns
1
1
1
--
11 MB
2 ns
CPU 1518F-4 Fail-safe CPU for high-
1
1
1
1
26 MB
1 ns
PN/DP
performance applica-
CPU 1518F-4 PN/DP ODK
tions, demanding communication tasks and very short reaction times
Table 2- 5 Technology CPUs
CPU
CPU 1511T-1 PN
CPU 1515T-2 PN
CPU 1517T-3 PN/DP
CPU 1517TF-3 PN/DP
Performance segment
PROFIBUS PROFINET interfaces IO RT/IRT
interfaces
Technology CPU for
--
1
small to mid-range ap-
plications
Technology CPU for
--
1
mid-range to large appli-
cations
Technology CPU for
1
1
complex applications
and communication
tasks
This CPU is described in the fail-safe CPUs
PROFINET IO RT inter-
face --
1
1
PROFINET basic func-
tionality --
--
--
Work memory
1.23 MB
Processing time for bit operations
60 ns
3.75 MB 30 ns
11 MB
2 ns
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
16
Manual, 09/2016, A5E32334527-AC
Product overview 2.2 Applications of the S7-1500 CPU
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Pulse generators · PWM (pulse-width modulation) · PTO (Pulse Train Output or stepper motor control) · Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 4 (PTOx/PWMx)
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 4 (PTOx/PWMx)
Integrated technological functions
The CPUs of the SIMATIC S7-1500 support motion control functions. STEP 7 offers blocks standardized according to PLCopen for configuring and connecting a drive to the CPU. Motion Control supports speed-controlled, positioning and synchronous axes (synchronizing without specification of the synchronous position) as well as external encoders, cams, cam tracks and measuring inputs.
The CPUs of theSIMATIC S7-1500T support advanced motion control functions in addition to the motion control functions offered by the standard CPUs. Additional motion control functions are absolute synchronous axes (synchronization with specification of synchronous position) and the cam.
For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags.
In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
Technology modules also implement functions such as high-speed counting, position detection and measuring functions and pulse generators (PWM and frequency output). In compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and require no additional technology modules.
SIWAREX is a versatile and flexible weighing module, which you can use as a static scale for operation.
Due to the supported technology functions, the CPUs are suitable for controlling pumps, fans, mixers, conveyor belts, lifting platforms, gate control systems, building management systems, synchronized axes, etc.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
17
Product overview 2.2 Applications of the S7-1500 CPU
Security Integrated
In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks.
Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU.
In addition, you can assign various access rights to different user groups in the controller using four different authorization levels.
Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller.
The use of an Ethernet CP (CP 1543-1) provides you with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated
The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally.
These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration also provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications.
The fail-safe CPUs are certified for use in safety mode up to:
Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010
Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to EN ISO 13849-1:2008
Additional password protection for F-configuration and F-program is set up for IT security.
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Errors messages are immediately shown on the display in plain text, thus helping customers to reduce downtimes.
Uniform front connectors for all modules and integrated potential bridges for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
18
Manual, 09/2016, A5E32334527-AC
Product overview 2.3 How it works
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different types of diagnostics are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7, on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. The diagnostic information is updated automatically when you configure new hardware components.
The CPU is available as a central interrupt server for 3 languages. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
2.3
How it works
Principle of operation
The CPU contains the operating system and executes the user program. The user program is located on the SIMATIC memory card and is processed in the work memory of the CPU.
The connection to the process is centralized or distributed via PROFINET or PROFIBUS with I/O modules.
The PROFINET interfaces on the CPU allow simultaneous communication with PROFINET devices, PROFINET controllers, HMI devices, programming devices, other controllers and other systems. CPU 1518-4 PN/DP supports operation as an IO controller and I-device.
Similarly to the PROFINET interface, the PROFIBUS interface available on the CPU allows communication with other devices. When you use the interface as PROFIBUS DP interface, the CPU on the PROFIBUS DP also assumes the role of a DP master.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
19
Product overview 2.4 Properties
2.4
Properties
Article number
6ES7518-4AP00-0AB0
View of the module
The following figure shows the CPU 1518-4 PN/DP.
Figure 2-1 CPU 1518-4 PN/DP
Note Protective film Note that a protective film is applied to the display in the delivery state of the CPU. Remove the protective film if necessary.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
20
Manual, 09/2016, A5E32334527-AC
Properties
Product overview 2.4 Properties
CPU 1518-4 PN/DP has the following technical properties:
Communication:
Interfaces
CPU 1518-4 PN/DP has four interfaces. Three interfaces for PROFINET and one for PROFIBUS.
The 1st PROFINET interface (X1 P1, X1 P2) has two ports. In addition to PROFINET basic functionality, it also supports PROFINET IO RT (real-time) and IRT (isochronous real-time). PROFINET IO communication or real-time settings can be configured.
Even with a send clock of 125 µs, IO communication and standard communication is possible via one cable.
Port 1 and port 2 can also be used as ring ports for the configuration of redundant ring structures in Ethernet.
The 2nd PROFINET interface (X2 P1) has one port. In addition to the basic functionality of PROFINET, it also supports PROFINET IO RT (Real-time). PROFINET basic functionality supports HMI communication, communication with the configuration system, communication with a higher-level network (backbone, router, Internet) and communication with another machine or automation cell.
The 3rd PROFINET interface (X3 P1) has one port and supports PROFINET basic functionality, i.e. no IO controller / IO device role. The basic functionality of PROFINET supports HMI communication, communication with the configuration system, communication with a higher-level network (backbone, router, Internet) and communication with another machine or automation cell. The 3rd PROFINET interface supports a transmission rate of 1000 Mbps as of firmware version V1.7.
Note IP subnets
The IP subnets of the three interfaces must be different. This means that the subnets of the IP addresses of the three interfaces must differ from each other.
The 4th interface (X4) is used to connect to a PROFIBUS network. When you use the interface as PROFIBUS DP interface, the CPU is the DP master in this case. The CPU cannot assume the role of a DP slave.
OPC UA With OPC UA, data is exchanged via an open and vendor-neutral communication protocol. The CPU, as OPC UA server, can communicate with OPC UA clients such as HMI panels, SCADA systems, etc.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
21
Product overview 2.4 Properties
Integrated Web server: A Web server is integrated in the CPU. You can read out the following information with the Web server: Start page with general CPU information Identification information Contents of the diagnostics buffer Querying module information Firmware update Alarms (without acknowledgment option) Information about communication PROFINET topology Tag status, writing tags Watch tables Memory usage User pages Data logs (if used) Online backup and restoration of the configuration. Diagnostic information for the motion control technology objects Display of trace recording stored on the SIMATIC memory card Readout service data Basic Web pages Display of the Web server in 3 project languages, for example, comments and message texts Recipes User-defined Web pages
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
22
Manual, 09/2016, A5E32334527-AC
Product overview 2.4 Properties
Integrated technology:
Motion Control
The Motion Control functionality uses technology objects to support speed-controlled axes, positioning axes, synchronous axes, external encoders, cams, cam tracks and measuring inputs, as well as PLCopen blocks for programming the motion control functionality. You can find a detailed description of the use of Motion Control and its configuration in the S7-1500 Motion Control (http://support.automation.siemens.com/WW/view/en/109739589) function manual. You can also use the TIA Selection Tool (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool) or the SIZER (http://w3.siemens.com/mcms/mc-solutions/en/engineering-software/drive-design-toolsizer/Pages/drive-design-tool-sizer.aspx) to create or configure axes.
Integrated closed-loop control functionality
- PID Compact (continuous PID controller)
- PID 3Step (step controller for integrating actuators)
- PID Temp (temperature controller for heating and cooling with two separate actuators)
Trace functionality:
The trace functionality supports troubleshooting and optimization of the user program. You can find additional information on the trace functionality in the Using the Trace and Logic Analyzer (http://support.automation.siemens.com/WW/view/en/64897128) function manual.
Integrated system diagnostics:
The alarms for the system diagnostics are automatically created by the system and displayed on a PG/PC, HMI device, Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
23
Product overview 2.4 Properties
Integrated security:
Know-how protection
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
Access protection
Extended access protection provides high-quality protection against unauthorized configuration changes. You can use authorization levels to assign separate rights to different user groups.
Integrity protection
The system protects the data transferred to the CPU against manipulation. The CPU detects erroneous or manipulated engineering data.
Additional functions:
PROFIenergy You can find information on the topic of "PROFIenergy" in the PROFINET function manual (https://support.industry.siemens.com/cs/ww/en/view/49948856) and in the PROFINET specification on the Internet (http://www.profibus.com).
Shared device You can find information on the topic of "Shared device" in the PROFINET function manual (https://support.industry.siemens.com/cs/ww/en/view/49948856).
Configuration control You can find information on the topic of "Configuration control" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Isochronous mode You can find information about the "Isochronous mode" topic in the PROFINET (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Reference
You can find additional information on the topic of "Integrated security/Access protection" in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
24
Manual, 09/2016, A5E32334527-AC
2.5
2.5.1
Operating and display elements
Product overview 2.5 Operating and display elements
Front view of the module with closed front panels
The following figure shows the front view of the CPU 1518-4 PN/DP.
LEDs for the current operating mode and diagnostics status of the CPU Front panel with display Display Control keys Front panel of the PROFIBUS interface
Figure 2-2 View of the CPU 1518-4 PN/DP (with front panels) - front
Note Temperature range for display
To increase its service life, the display switches off at a temperature below the permitted operating temperature of the device. When the display cools down, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU.
You can find additional information on the temperatures at which the display switches itself on and off in the technical specifications (Page 37).
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
25
Product overview 2.5 Operating and display elements
Removing and fitting the front panel with display
You can remove and fit the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you remove or fit the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Before you remove or fit the front panel, always switch off the power supply to the S7-1500 automation system in hazardous area zone 2. The CPU maintains its operating mode.
Locking the front panel
You can lock the wide front panel with display as well as the narrow front panel of the PROFIBUS interface to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panels.
Reference
Figure 2-3 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock) and assign a password for the display. You can find additional information on the display, the configurable protection levels and local locking in the S71500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You can find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
26
Manual, 09/2016, A5E32334527-AC
2.5.2
Product overview 2.5 Operating and display elements
Front view of the module without front panels
The following figure shows the operator controls and connection elements of the CPU 1518-4 PN/DP.
Mode selector No function PROFIBUS interface (X4) Fixing screws Connector for power supply PROFINET IO interface (X3) with 1 port (back interface) PROFINET IO interface (X2) with 1 port (front interface) PROFINET IO interface (X1) with 2 ports MAC addresses of the interfaces LEDs for the 4 ports of the PROFINET interfaces X1, X2 and X3 Slot for the SIMATIC memory card Display connector LEDs for the current operating mode and diagnostic status of the CPU
Figure 2-4 View of the CPU 1518-4 PN/DP (without front panels) - front
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
27
Product overview 2.6 Mode selector switch
2.5.3
Rear view of the module
The following figure shows the connection elements on the rear of the CPU 1518-4 PN/DP.
2.6
Shield contact surfaces Plug-in connection for power supply Plug-in connection for backplane bus Fixing screws
Figure 2-5 View of the CPU 1518-4 PN/DP - rear
Mode selector switch
Use the mode switch to set the CPU operating mode. The following table shows the position of the switch and the corresponding meaning.
Table 2- 6
Position RUN STOP MRES
Mode switch settings
Meaning RUN mode STOP mode Memory reset
Explanation The CPU is executing the user program. The user program is not being executed. Position for CPU memory reset.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
28
Manual, 09/2016, A5E32334527-AC
Connecting up
3
This section provides information on the pin assignment of the individual interfaces and the block diagram of the CPU 1518-4 PN/DP.
24 V DC supply voltage (X80)
The connector for the supply voltage is plugged in when the CPU ships from the factory. The following table shows the pin assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring opener (one spring opener per terminal)
Bridged internally:
and and
Figure 3-1 Supply voltage connection
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
29
Connecting up
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R)
The assignment corresponds to the Ethernet standard for an RJ45 connector. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is
allocated either as data terminal equipment (MDI) or a switch (MDI-X).
PROFINET interfaces X2 and X3 with 1 port (X2 P1 X3 P1)
The assignment corresponds to the Ethernet standard for an RJ45 connector. Autocrossing is always active on X2. This means the RJ45 socket is allocated either as
data terminal equipment (MDI) or a switch (MDI-X). Autocrossing is always active on X3. This means the RJ45 socket is allocated either as
data terminal equipment (MDI) or a switch (MDI-X).
Figure 3-2 Interfaces X2 and X3
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
30
Manual, 09/2016, A5E32334527-AC
Connecting up
Note PROFINET interface X3 with a transmission rate of 1000 Mbps
The PROFINET interface X3 supports a maximum transmission rate of 1000 Mbps.
Requirements: · The CPU 1518-4 PN/DP has a firmware version of V1.7 or higher · Devices on the PROFINET segment must support the 1000 Mbps transmission rate. · The network infrastructure (network cables and outlets) must be category CAT 5e or
better. · The "Transmission rate" parameter in the properties of the port (X3) must be set as
follows in STEP 7: The "Autonegotiation" check box is selected "Automatic" is selected in the drop-down list
PROFIBUS interface X4
The table below shows the pin assignment of the PROFIBUS interface. The assignment corresponds to the standard assignment of an RS485 interface.
Table 3- 1
PROFIBUS interface pin assignment
View
Signal name
1
-
2
-
3 RxD/TxD-P
4
RTS
5
M5V2
6
P5V2
7
-
8 RxD/TxD-N
9
-
Designation Data line B Request to send Data reference potential (from station) Supply plus (from station) Data line A -
Note Supply of I/O devices
CPU 1518-4 PN/DP does not provide a 24 V DC power supply on the PROFIBUS interface. I/O devices (for example, PC adapter USB 6ES7972-0CB20-0XA0) are only operational on the interface in conjunction with a plug-in power supply set for external power supply.
The innovated successor product, PC adapter USB A2, receives the required power supply via the USB port. This means it does not need a 24 V DC supply voltage and can be operated without a plug-in power supply set for external power supply.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
31
Connecting up
Reference
You can find additional information on the topics of "Wiring the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Assignment of the MAC addresses
CPU 1518-4 PN/DP has three PROFINET interfaces. The first interface is an interface with 2-port switch. The PROFINET interfaces each have a MAC address, and each of the PROFINET ports has its own MAC address. The CPU 1518-4 PN/DP therefore has seven MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC address are lasered on the rating plate on the right side of each CPU 1518-4 PN/DP.
The table below shows how the MAC addresses are assigned.
Table 3- 2 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3 MAC address 4
MAC address 5 MAC address 6 MAC address 7
Assignment
PROFINET interface X1
(visible in STEP 7 for accessible devices)
Labeling
· Front, lasered · Right side, lasered
(start of number range)
Port X1 P1 R (required for LLDP, for example)
· Front and right side, not lasered
Port X1 P2 R (required for LLDP, for example)
· Front and right side, not lasered
PROFINET interface X2
· Front, lasered
(visible in STEP 7 for accessible devic- · Right side, not lasered es)
Port X2 P1 (required for LLDP, for example)
· Front and right side, not lasered
PROFINET interface X3
· Front, lasered
(visible in STEP 7 for accessible devic- · Right side, not lasered es)
Port X3 P1 (required for LLDP, for example)
· Front, lasered
· Right side, lasered (end of number range)
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
32
Manual, 09/2016, A5E32334527-AC
Connecting up
Block diagram
The following figure shows the block diagram of the CPU 1518-4 PN/DP.
Display
RUN/STOP/MRES mode selector
Electronics
PROFINET 2-port switch
PROFIBUS DP driver
Backplane bus interface
Internal supply voltage
X50
SIMATIC memory card
X80 24 V DC Infeed of supply voltage
PN X1 P1 R PROFINET interface X1 Port 1
PN X1 P2 R PN X2 P1 PN X3 P1 PB X4 L+ M R/S ER MT X1 P1, X1 P2, X2 P1, X3 P1
Figure 3-3 Block diagram of the CPU 1518-4 PN/DP
PROFINET interface X1 Port 2 PROFINET interface X2 Port 1 PROFINET interface X3 Port 1 PROFIBUS interface X4 24 V DC supply voltage Ground RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
33
Interrupts, error messages, diagnostics and system alarms
4
The status and error displays of the CPU 1518-4 PN/DP are described below.
You will find additional information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topics of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error display of the CPU
LED display
The following figure shows the LED displays of the CPU 1518-4 PN/DP.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) No function LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X3 P1 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED)
Figure 4-1 LED display of the CPU 1518-4 PN/DP (without front panel)
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
34
Manual, 09/2016, A5E32334527-AC
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1518-4 PN/DP has three LEDs to signal the current operating status and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED LED off LED off
LED lit green LED lit green LED lit green
LED lit green
LED lit yellow
LED lit yellow LED lit yellow
LED flashes yellow
LED flashes yellow/green LED flashes yellow/green
ERROR LED LED off
LED flashes red LED off
LED flashes red LED off
LED off
LED off LED off LED flashes red LED off
LED off LED flashes red
MAINT LED LED off LED off
Meaning Missing or insufficient supply voltage on the CPU.
An error has occurred.
LED off LED off
CPU is in RUN mode. A diagnostics event is pending.
LED lit yellow
LED flashes yellow
LED flashes yellow
LED off LED flashes yel-
low LED off
LED off
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective
CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card Startup (transition from RUN STOP)
LED flashes yellow
Startup (CPU booting)
Test of LEDs during startup, inserting a module.
LED flashing test
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
35
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of ports for the CPU 1518-4 PN/DP.
Table 4- 2 Meaning of the LEDs
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
36
Manual, 09/2016, A5E32334527-AC
Technical specifications
5
General information Product type designation Hardware function version Firmware version Engineering with STEP 7 TIA Portal configurable/integrated as of version Configuration control Via data record Display Screen diagonal (cm) Operator controls Number of buttons Mode selector Supply voltage Type of supply voltage Low limit of permitted range (DC) High limit of permitted range (DC) Reverse polarity protection Power and voltage failure buffering Power/voltage failure buffer time Input current Current consumption (rated value) Inrush current, max. I²t Power Power consumption from the backplane bus (balanced) Incoming power to the backplane bus Power loss Power loss, typ. Memory Number of slots for SIMATIC memory card SIMATIC memory card required Work memory integrated (for program) integrated (for data)
6ES7518-4AP00-0AB0
CPU 1518-4 PN/DP FS04 V2.0
V14
Yes
6.1 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms
1.55 A 2.4 A; rated value 0.02 A²s
30 W 12 W
24 W
1 Yes
4 MB 20 MB
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
37
Technical specifications
Load memory Plug-in (SIMATIC memory card), max. Buffering maintenance-free CPU processing times For bit operations, typ. For word operations, typ. For fixed-point arithmetic, typ. For floating-point arithmetic, typ. CPU blocks Number of elements (total) DB Number range
Size, max.
FB Number range Size, max. FC Number range Size, max. OB Size, max. Number of free-cycle OBs Number of time-of-day interrupt OBs Number of time-delay interrupt OBs Number of cyclic interrupt OBs Number of hardware interrupt OBs Number of DPV1 interrupt OBs Number of isochronous mode OBs Number of technology synchronization interrupt OBs Number of startup OBs Number of asynchronous error OBs Number of synchronous error OBs Number of diagnostic interrupt OBs Nesting depth Per priority class
6ES7518-4AP00-0AB0
32 GB
Yes
1 ns 2 ns 2 ns 6 ns
10000; blocks (OB/FB/FC/DB) and UDTs
1 ... 60 999; divided into: Number range that can be used by user: 1 ... 59 999 and number range for DBs generated by SFC 86: 60 000 ... 60 999 16 MB; the maximum size of the DB is 64 KB with non-optimized block access
0 ... 65 535 512 KB
0 ... 65 535 512 KB
512 KB 100 20 20 20; with minimum OB 3x cycle of 100 µs 50 3 2 2
100 4 2 1
24
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
38
Manual, 09/2016, A5E32334527-AC
Technical specifications
Counters, timers and their retentivity S7 counters Quantity Retentivity · can be set IEC counters Quantity Retentivity · can be set S7 timers Quantity Retentivity · can be set IEC timers Quantity Retentivity · can be set Data areas and their retentivity Total retentive data area (including timers, counters, bit memories), max.
Bit memory Number, max. Number of clock memories
Data blocks Retentivity can be set Retentivity preset Local data Per priority class, max. Address area Number of IO modules I/O address area Inputs Outputs of these, per integrated IO subsystem · Inputs (volume)
· Outputs (volume)
of these, per CM/CP · Inputs (volume)
· Outputs (volume)
6ES7518-4AP00-0AB0
2048
Yes
Any (only limited by the work memory)
Yes
2048
Yes
Any (only limited by the work memory)
Yes
768 KB; in total; for bit memories, timers, counters, DBs and technological data (axes), usable retentive memory: 700 KB
16 KB 8; there are 8 clock memory bits, grouped in one clock memory byte
Yes No
64 KB; max. 16 KB per block
16384; max. number of modules/submodules
32 KB; all inputs are in the process image 32 KB; all outputs are in the process image
16 KB; 16 KB via the integrated PROFINET IO interface, 8 KB via the integrated DP interface 16 KB; 16 KB via the integrated PROFINET IO interface, 8 KB via the integrated DP interface
8 KB 8 KB
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
39
Technical specifications
Process image partitions Number of process image partitions, max. Hardware configuration Number of distributed IO systems
Number of DP masters integrated Via CM
Number of IO controllers integrated Via CM
Rack Modules per rack, max. Number of rows, max. PtP CM Number of PtP CMs
Time Clock Type Backup duration Deviation per day, max. Operating hours counter Quantity Time synchronization Supported On DP, master In AS, master In AS, slave On Ethernet via NTP Interfaces Number of PROFINET interfaces Number of PROFIBUS interfaces 1st interface Interface hardware Number of ports Integrated switch RJ45 (Ethernet)
6ES7518-4AP00-0AB0
32
64; a distributed IO system is understood to mean the integration of distributed I/O via PROFINET or PROFIBUS communication modules as well as the connection of I/O via AS-i master modules or links (e.g. IE/PB link)
1 8; a maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
2 8; a maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
32; CPU + 31 modules 1
The number of PtP CMs that can be connected is only limited by the available slots
Hardware clock 6 wk; at 40 °C ambient temperature, typ. 10 s; typ.: 2 s
16
Yes Yes Yes Yes Yes
3 1
2 Yes Yes; X1
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
40
Manual, 09/2016, A5E32334527-AC
Technical specifications
Protocols PROFINET IO controller PROFINET IO device SIMATIC communication Open IE communication Web server Media redundancy PROFINET IO controller Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP
· MRPD · PROFIenergy · Prioritized startup · Number of connectable IO devices, max.
· of these, IO devices with IRT, max. · Number of connectable IO devices for RT,
max. · of these, in a line topology, max. · Number of IO devices that can be activat-
ed/deactivated simultaneously, max. · Number of IO devices per tool, max. · Update times
Update time with IRT · with send clock of 125 µs · with send clock of 187.5 µs · with send clock of 250 µs · with send clock of 500 µs · with send clock of 1 ms · with send clock of 2 ms · with send clock of 4 ms · with IRT and "odd" send clock parameter as-
signment
6ES7518-4AP00-0AB0
Yes Yes Yes Yes Yes Yes
Yes Yes Yes Yes Yes Yes; as MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50 Yes; requirement: IRT Yes Yes; max. 32 PROFINET devices 512; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 64 512
512 8; in total over all interfaces
8 Minimum value of update time also depends on the communication allocation setting for PROFINET IO, the number of IO devices and the amount of configured user data
125 µs 187.5 µs 250 µs to 4 ms 500 µs to 8 ms 1 ms to 16 ms 2 ms to 32 ms 4 ms to 64 ms Update time = set "odd" send clock (any multiple of 125 µs: 375 µs, 625 µs to 3 875 µs)
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
41
Technical specifications
Update time with RT · with send clock of 250 µs
· with send clock of 500 µs
· with send clock of 1 ms
· with send clock of 2 ms
· with send clock of 4 ms PROFINET IO device Services · PG/OP communication
· S7 routing
· Isochronous mode
· Open IE communication
· IRT
· MRP
· MRPD
· PROFIenergy
· Shared device
· Number of IO controllers with shared device, max.
2nd interface Interface hardware Number of ports Integrated switch RJ45 (Ethernet) Protocols PROFINET IO controller PROFINET IO device SIMATIC communication Open IE communication Web server Media redundancy
6ES7518-4AP00-0AB0
250 µs to 128 ms 500 µs to 256 ms 1 ms to 512 ms 2 ms to 512 ms 4 ms to 512 ms
Yes Yes No Yes Yes Yes Yes; requirement: IRT Yes Yes 4
1 No Yes; X2
Yes Yes Yes Yes Yes No
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
42
Manual, 09/2016, A5E32334527-AC
Technical specifications
PROFINET IO controller Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP · MRPD · PROFIenergy · Prioritized startup · Number of connectable IO devices, max.
· Number of connectable IO devices for RT, max.
· of these, in a line topology, max. · Number of IO devices that can be activat-
ed/deactivated simultaneously, max. · Update times
Update time with RT · with send clock of 1 ms PROFINET IO device Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP · MRPD · PROFIenergy · Prioritized startup · Shared device · Number of IO controllers with shared device,
max.
6ES7518-4AP00-0AB0
Yes Yes No Yes No No No Yes No 128; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 128
128 8; in total over all interfaces
Minimum value of update time also depends on the communication allocation setting for PROFINET IO, the number of IO devices and the amount of configured user data
1 ms to 512 ms
Yes Yes No Yes No No No Yes No Yes 4
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
43
Technical specifications
3rd interface Interface hardware Number of ports Integrated switch RJ45 (Ethernet) Protocols PROFINET IO controller PROFINET IO device SIMATIC communication Open IE communication Web server 4th interface Interface hardware Number of ports RS 485 Protocols PROFIBUS DP master PROFIBUS DP slave SIMATIC communication Interface hardware RJ45 (Ethernet) 100 Mbps 1000 Mbps
Autonegotiation Autocrossing Industrial Ethernet status LED RS 485 Transmission rate, max. Protocols Number of connections Number of connections, max.
Number of connections reserved for ES/HMI/Web Number of connections via integrated interfaces Number of S7 routing connections
SIMATIC communication S7 communication, as server S7 communication, as client User data per job, max.
6ES7518-4AP00-0AB0
1 No Yes; X3
No No Yes Yes Yes
1 Yes; X4
Yes No Yes
Yes Yes; only possible on the X3 interface of CPU 1518 Yes Yes Yes
12 Mbps
384; via integrated interfaces of the CPU and connected CPs/CMs 10 192 64; in total, only 16 S7 routing connections are supported via PROFIBUS
Yes Yes See online help (S7 communication, user data size)
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
44
Manual, 09/2016, A5E32334527-AC
Technical specifications
Open IE communication TCP/IP · Data length, max. · Multiple passive connections per port, sup-
ported ISO-on-TCP (RFC1006) · Data length, max. UDP · Data length, max. DHCP SNMP DCP LLDP Web server HTTP HTTPS PROFIBUS DP master Number of connections, max. Services · PG/OP communication · S7 routing · Data record routing · Isochronous mode · Constant bus cycle time · Number of DP slaves
· Activation/deactivation of DP slaves OPC UA OPC UA server
· Application authentication · Security Policies
· User authentication Additional protocols MODBUS Media redundancy Switchover time in the case of cable break, typ. Number of devices in the ring, max.
Yes 64 KB
Yes
6ES7518-4AP00-0AB0
Yes 64 KB Yes 1472 bytes No Yes Yes Yes
Yes; standard and user-defined sites Yes; standard and user-defined sites
48; for the integrated PROFIBUS DP interface
Yes Yes Yes Yes Yes 125; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET Yes
Yes; Data Access (Read, Write, Subscribe), Runtime license required Yes
Available Security Policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "Anonymous" or with user name and password
Yes; MODBUS TCP
200 ms; with MRP; bumpless with MRPD 50
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
45
Technical specifications
6ES7518-4AP00-0AB0
Isochronous mode
Isochronous mode (application synchronized up to Yes; with minimum OB 6x cycle of 125 µs terminal)
Constant bus cycle time
Yes
S7 signaling functions
Number of stations that can be logged in for sig- 32 naling functions, max.
Block-related alarms
Yes
Number of configurable interrupts, max.
10000
Number of simultaneously active interrupts in interrupt pool
· Number of reserved user interrupts
1000
· Number of reserved interrupts for system di- 200 agnostics
· Number of reserved interrupts for motion con- 160 trol technology objects
Test/commissioning functions Shared commissioning (Team Engineering)
Status block
Single-step Status/modify Status/modify tag Tags
Number of tags, max. · of these, status tags, max.
Yes; parallel online access possible for up to 10 engineering systems Yes; up to 16 simultaneously (in total over all ES clients) No
Yes Inputs/outputs, bit memory, DB, peripheral inputs/outputs, timers, counters
200; per job
· of these, modify tags, max.
200; per job
Forcing Forcing, tags Number of tags, max. Diagnostic buffer Available Number of entries, max.
· of these, protected against power failure
Peripheral inputs/outputs 200
Yes 3200 1000
Traces Number of configurable traces Interrupts/diagnostics/status information Diagnostics display LED RUN/STOP LED ERROR LED MAINT LED Connection display LINK TX/RX
8; up to 512 KB data possible per trace
Yes Yes Yes Yes
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
46
Manual, 09/2016, A5E32334527-AC
Technical specifications
Supported technology objects Motion control
· Number of available motion control resources for technology objects (except cams)
· required Motion Control resources per speed-controlled axis per positioning axis per synchronous axis per external encoder per output cam per cam track per measuring input
Controller · PID_Compact
· PID_3Step
· PID temp
Counting and measuring · High-speed counter Standards, approvals, certificates Suitable for safety functions Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max.
Vertical mounting position, min. Vertical mounting position, max.
Ambient temperature during storage/transport Min. Max.
6ES7518-4AP00-0AB0
Yes; note: the number of axes affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER 10240
40 80 160 80 20 160 40
Yes; universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
No
0 °C 60 ; display: 50 , the display is switched off at an operating temperature of typically 50 0 °C 40 ; display: 40 , the display is switched off at an operating temperature of typically 40
-40 °C 70 °C
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
47
Technical specifications
Configuring Programming Programming language · LAD
· FBD
· STL
· SCL
· GRAPH
Know-how protection User program protection Copy protection Block protection Access protection Password for display Protection level: Write protection Protection level: Read/write protection Protection level: Complete protection Cycle time monitoring Low limit High limit Dimensions Width Height Depth Weights Weight, approx.
6ES7518-4AP00-0AB0
Yes Yes Yes Yes Yes
Yes Yes Yes
Yes Yes Yes Yes
Configurable minimum cycle time Configurable maximum cycle time
175 mm 147 mm 129 mm
1988 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
48
Manual, 09/2016, A5E32334527-AC
Dimensional drawing
A
This section contains the dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with the front panel open. Keep to the dimensions when installing in cabinets, control rooms, etc.
Dimensional drawings for CPU 1518-4 PN/DP
Figure A-1 Dimensional drawing of CPU 1518-4 PN/DP, front and side views
Figure A-2 Dimensional drawing CPU 1518-4 PN/DP, side view with open front panel
CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0)
Manual, 09/2016, A5E32334527-AC
49
SIMATIC
S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
_Pr_od_u_ct_o_ve_rv_ie_w_________2_
_Co_n_ne_c_tin_g_up___________3_
_ _ _ _ _ _ _ _ _ _ _ Interrupts, error messages,
diagnostics and system
4
alarms
_Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______5_
_Di_m_en_si_on_a_l d_ra_w_in_g _______A_
12/2017
A5E40882737-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E40882737-AA 12/2017 Subject to change
Copyright © Siemens AG 2017. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system and the function manuals. All cross-system functions are described in the system manual and in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1518-4 PN/DP MFP.
Basic knowledge required
To understand this documentation, you need to have general knowledge of automation engineering. You also need basic knowledge of the following topics: Knowledge of the industrial automation system SIMATIC Knowledge of working with STEP 7 Knowledge of working with Linux systems Knowledge of programming with C/C++ Working with the Eclipse development environment
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
ODK: Open Development Kit SO: Shared Object MFP: Multifunctional platform
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
4
Manual, 12/2017, A5E40882737-AA
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks. In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept. Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place. Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity). Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats. To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here: Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals. Application examples Tools and examples to solve your automation tasks as well as function blocks, performance information and videos. Services Information about Industry Services, Field Services, Technical Support, spare parts and training offers. Forums For answers and solutions concerning automation technology. mySupport Your personal working area in Industry Online Support for messages, support queries, and configurable documents. This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
5
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
6
Manual, 12/2017, A5E40882737-AA
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 8
2 Product overview .................................................................................................................................. 12
2.1
Applications of the S7-1500 CPUs .........................................................................................12
2.2
Hardware properties ...............................................................................................................21
2.3 2.3.1 2.3.2
Firmware functions..................................................................................................................23 Quick start instructions for commissioning C/C++ Runtime ...................................................28 Supplied libraries for C/C++ Runtime .....................................................................................31
2.4 2.4.1 2.4.2 2.4.3
Operating and display elements .............................................................................................32 Front view of the CPU with the front panel .............................................................................32 Front view of the CPU without front panel ..............................................................................34 Rear view of the CPU .............................................................................................................35
2.5
Mode selector switch ..............................................................................................................35
3 Connecting up....................................................................................................................................... 36
4 Interrupts, error messages, diagnostics and system alarms................................................................... 42
4.1
Status and error display of the CPU .......................................................................................42
5 Technical specifications ........................................................................................................................ 45
A Dimensional drawing............................................................................................................................. 59
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
7
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
8
Manual, 12/2017, A5E40882737-AA
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
9
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
10
Manual, 12/2017, A5E40882737-AA
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
11
Product overview
2
2.1
Applications of the S7-1500 CPUs
Application
SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation.
The modular and fanless design, simple implementation of distributed structures, and userfriendly operation make SIMATIC S7-1500 the economic and convenient solution for a variety of tasks.
Application areas of the SIMATIC S7-1500 are, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automobile engineering
Water/waste water
Food & Beverage
Application areas of the SIMATIC S7-1500T are, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial capability from the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
12
Manual, 12/2017, A5E40882737-AA
Product overview 2.1 Applications of the S7-1500 CPUs
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 1 Standard CPUs
CPU
CPU 1511-1 PN
CPU 1513-1 PN
CPU 1515-2 PN
CPU 1516-3 PN/DP
CPU 1517-3 PN/DP
CPU 1518-4 PN/DP CPU 1518-4 PN/DP MFP
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
Basic PROFINET functionality
Standard CPU for small to
--
1
--
--
mid-range applications
Standard CPU for mid-
--
1
--
--
range applications
Standard CPU for small to
--
1
1
--
mid-range applications
Standard CPU for high-end
1
1
1
--
applications and communi-
cation tasks
Standard CPU for high-end
1
1
1
--
applications and communi-
cation tasks
Standard CPU for high-
1
1
1
1
performance applications,
demanding communication
tasks and very short reac-
tion times
Work memory 1.15 MB
Processing time for bit operations 60 ns
1.8 MB
40 ns
3.5 MB
30 ns
6 MB
10 ns
10 MB
2 ns
24 MB
1 ns
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
13
Product overview 2.1 Applications of the S7-1500 CPUs
Table 2- 2 Compact CPUs
CPU
Performance segment
CPU 1511C-1 PN CPU 1512C-1 PN
Compact CPU for small to mid-range applications
Compact CPU for midrange applications
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
Basic PROFINET functionality
--
1
--
--
--
1
--
--
Work memory 1.175 MB
Processing time for bit operations 60 ns
1.25 MB
48 ns
Table 2- 3 Fail-safe CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
Basic PROFINET functionality
CPU 1511F-1 PN Fail-safe CPU for smaller
--
1
--
--
to medium-sized applica-
tions
CPU 1511TF-1 Fail-safe technology CPU
--
1
--
--
PN
for small to mid-range
applications
CPU 1513F-1 PN Fail-safe CPU for medium-
--
1
--
--
sized applications
CPU 1515F-2 PN Fail-safe CPU for medium-
--
1
1
--
sized to large applications
CPU 1515TF-2 Fail-safe technology CPU
--
1
1
--
PN
for complex applications
and communication tasks
CPU 1516F-3
Fail-safe CPU for demand-
1
1
1
--
PN/DP
ing applications and com-
munications tasks
CPU 1516TF-3 Fail-safe technology CPU
1
1
1
--
PN/DP
for complex applications
and communication tasks
CPU 1517F-3
Fail-safe CPU for demand-
1
1
1
--
PN/DP
ing applications and com-
munications tasks
CPU 1517TF-3 Fail-safe technology CPU
1
1
1
--
PN/DP
for complex applications
and communication tasks
CPU 1518F-4
Fail-safe CPU for high-
1
1
1
1
PN/DP
performance applications,
CPU 1518F-4 PN/DP MFP
demanding communication tasks and very short reaction times
Work memory 1.225 MB
Processing time for bit operations 60 ns
1.225 MB
60 ns
1.95 MB 3.75 MB 3.75 MB
40 ns 30 ns 30 ns
6.5 MB
10 ns
6.5 MB
10 ns
11 MB
2 ns
11 MB
2 ns
26 MB
1 ns
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
14
Manual, 12/2017, A5E40882737-AA
Product overview 2.1 Applications of the S7-1500 CPUs
Table 2- 4 Technology CPUs
CPU
Performance segment
PROFIBUS interfaces
PROFINET IO RT/IRT interfaces
PROFINET IO RT
interface
Basic PROFINET functionality
CPU 1511T-1 PN Technology CPU for small
--
1
--
--
to mid-range applications
CPU 1515T-2 PN Technology CPU for mid-
--
1
1
--
range to large applications
CPU 1516T-3
Technology CPU for high-
1
1
1
--
PN/DP
end applications and
communication tasks
CPU 1517T-3
Technology CPU for high-
1
1
1
--
PN/DP
end applications and
communication tasks
CPU 1511TF-1 PN
These CPUs are described in the fail-safe CPUs (see table Fail-safe CPUs)
CPU 1515TF-2 PN
CPU 1516TF-3 PN/DP
CPU 1517TF-3 PN/DP
Work memory 1.225 MB
Processing time for bit operations 60 ns
3.75 MB
30 ns
6.5 MB
10 ns
11 MB
2 ns
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
15
Product overview 2.1 Applications of the S7-1500 CPUs
Performance segment of the CPU 1518-4 PN/DP MFP
The CPU can be used for the high-end area of machine and plant automation. CPU 1518-4 PN/DP MFP can execute both STEP 7 blocks of the "usual" user program, as well as blocks and applications that have been programmed with C/C++. The multifunctional platform enables you to execute C/C++ code synchronously in the CPU cycle (through the CPU function library). In addition, the multifunctional platform can run C/C++ applications as separate applications parallel to CPU Runtime.
Figure 2-1 Overview of the performance segment
You create the C/C++ blocks (CPU function library for CPU Runtime) and C/C++ Runtime applications with the "ODK 1500S Open Development Kit" (ODK).
Employing the ODK enables you to use mechanisms from high-level programming languages (e.g. object-based) within a modern programming environment.
With ODK, you program:
Blocks in C/C++ that can be run synchronously in the execution cycle of the CPU (CPU function library for CPU Runtime)
C/C++ Runtime applications running in SIMATIC S7-1500 MFP C/C++ Runtime, independent of the STEP 7 user program
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
16
Manual, 12/2017, A5E40882737-AA
Product overview 2.1 Applications of the S7-1500 CPUs
You can use C/C++ Runtime applications to implement parallel processes to the STEP 7 user program, for example, for pre-processing or transmitting data via Industrial Ethernet. A CPU can simultaneously perform more tasks, the complexity of functions is reduced and the time required for implementation decreased.
You can reuse existing C/C++ algorithms. In order to continue using existing technological know-how, you can integrate the existing C/C++ code via the Open Development Kit:
In the runtime environment of the CPU or
As C/C++ Runtime applications in SIMATIC S7-1500 MFP C/C++ Runtime
Once you integrate the C/C++ sources, you can execute them on the CPU.
You can find a description of the Open Development Kit in the S7-1500 Programming and Operating Manual Open Development Kit 1500S, as of V2.5 Edition 12/2017. The sections that describe the CPU function library for CPU Runtime and die C/C++ Runtime applications apply to CPU 1518-4 PN/DP MFP.
CPU 1518-4 PN/DP MFP has additional memory for C/C++ code and data:
Work memory for:
The STEP 7 user program
The CPU function library for CPU Runtime
C/C++ Runtime applications
Load memory for:
The STEP 7 user program including CPU function library for CPU Runtime
C/C++ Runtime applications
Performance segments of compact CPUs
The compact CPUs can be used for smaller to mid-range applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Frequency meter Period duration measurement Pulse width modulation (PWM output)
Pulse Train Output (PTO output) Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 6 (max. 100 kHz)
6 channels
max. 4 (up to 100 kHz) max. 4 (up to 100 kHz)
up to 100 kHz
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 6 (max. 100 kHz)
6 channels
max. 4 (up to 100 kHz) max. 4 (up to 100 kHz)
up to 100 kHz
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
17
Product overview 2.1 Applications of the S7-1500 CPUs
Integrated Motion Control technology functions
All CPUs of SIMATIC S7-1500 support Motion Control technology functions. STEP 7 offers Motion Control instructions standardized according to PLCopen for configuring and connecting a drive to the CPU. S7-1500 Motion Control supports the following technology objects: Speed-controlled axis Positioning axis Synchronous axis External encoders Output cam Cam track Measuring input The technology CPUs of the SIMATIC S7-1500 offer enhanced Motion Control functions: Advanced synchronization functions
Synchronization with specification of synchronous position Actual value coupling Shifting of the master value at following axis Camming Up to 4 encoders or measuring systems as actual position for position control The technology CPUs of the SIMATIC S7-1500 additionally support the following technology objects: Cam Kinematics Cam Kinematics Control of kinematics, such as Cartesian portals Role picker Delta picker SCARA Due to the supported technology functions, the S7-1500T CPUs are suitable for controlling packaging machines, converting applications, assembly automation, etc.
Additional integrated technology functions
For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags. In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
18
Manual, 12/2017, A5E40882737-AA
Product overview 2.1 Applications of the S7-1500 CPUs
Other technology functions
Technology modules also implement functions such as high-speed counting, position detection, measuring functions and pulse generators (PTO, PWM and frequency output). For compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and can be implemented without additional technology modules. SIWAREX is a versatile and flexible weighing module which you can use as a static scale for operation.
Security Integrated
In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks. Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU. In addition, you can assign various access rights to different user groups in the controller using four different authorization levels. Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller. The use of an Ethernet CP (CP 1543-1) provides you with additional access protection through a firewall or possibilities to establish secure VPN connections.
Safety Integrated
The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally. These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration also provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications. The fail-safe CPUs are certified for use in safety mode up to: Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010 Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to
EN ISO 13849-1:2008 Additional password protection for F-configuration and F-program is set up for IT security.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
19
Product overview 2.1 Applications of the S7-1500 CPUs
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Errors messages are immediately shown on the display in plain text. When performing servicing, you can minimize plant downtimes by quickly accessing the diagnostics messages. You can find detailed information on these and all other options for the display in the SIMATIC S71500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactivemanuals/getting-started_simatic-s7-1500/disp_tool/start_en.html).
Uniform front connectors for all modules and integrated potential bridges for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different diagnostic types are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7, on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. An automatic update of the diagnostics information is performed when you configure new hardware components.
The CPU is available as a central interrupt server in up to three project languages. The HMI takes over the display in the project languages defined for the CPU. If you require alarm texts in additional languages, you can load them into your HMI via the configured connection. The CPU, STEP 7 and your HMI ensure data consistency without additional engineering steps. The maintenance work is easier.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
20
Manual, 12/2017, A5E40882737-AA
2.2
Hardware properties
Article number
6ES7518-4AX00-1AB0
View of the module
The figure below shows the CPU 1518-4 PN/DP MFP.
Product overview 2.2 Hardware properties
Figure 2-2 CPU 1518-4 PN/DP MFP
Note Protective film Note that a protective film is attached to the display of the CPU when shipped from the factory. Remove the protective film if necessary.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
21
Product overview 2.2 Hardware properties
Properties
CPU 1518-4 PN/DP MFP has the following properties:
Property CPU display
Description
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides information on order numbers, firmware version and serial numbers of all connected modules. In addition, you can set the IP address of the CPU and make additional network settings. The display shows error messages directly as plain text.
Additional information
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
· SIMATIC S7-1500 Display Simulator (http://www.automation.siemens. com/salesmaterial-as/interactivemanuals/getting-started_simatics7-1500/disp_tool/start_en.html)
Supply voltage
The 24 V DC supply voltage is fed via a 4-pin plug located on the front of the CPU.
· Section Connecting up (Page 36)
· S7-1500, ET 200MP system manual (http://support.automation.sieme ns.com/WW/view/en/59191792)
PROFIBUS DP
PROFIBUS interface (X4) The interface is used for connecting to a PROFIBUS network.
Operation of the CPU as a In the role as a DP master, the CPU responds to the
DP master
connected DP slaves. It is not possible for the CPU to
take the role of a DP slave.
PROFIBUS function manual (https://support.industry.siemens.co m/cs/ww/en/view/59193579)
PROFINET IO
PROFINET interface (X1 P1 R and X1 P2 R)
The interface has two ports. In addition to basic
PROFINET function manual
PROFINET functionality, it also supports PROFINET IO (http://support.automation.siemens.c
RT (real time) and IRT (isochronous real time).
om/WW/view/en/68039307)
PROFINET interface (X2 P1)
The interface has one port. In addition to basic PROFINET functionality, it also supports PROFINET IO RT (real time).
PROFINET interface (X3 P1)
The interface is used to:
· Link development tools for C/C++ applications · Connect the TIA portal to the development of
STEP 7 applications
S7-1500 ODK 1500S manual (https://support.industry.siemens.co m/cs/ww/en/view/109249838)
· Communicate to the "outside world" from C/C++ Runtime
· Communicate internally between C/C++ and CPU Runtime (via virtual network)
Operation of the CPU as · IO controller · I-device
· IO controller: As an IO controller, the CPU addresses the connected IO devices
PROFINET function manual (http://support.automation.siemens.c om/WW/view/en/68039307)
· I-device As an I-device (intelligent IO device), the CPU is assigned to a higher-level IO controller and is used as an intelligent pre-processing unit for subroutines
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
22
Manual, 12/2017, A5E40882737-AA
Product overview 2.3 Firmware functions
2.3
Firmware functions
Functions
CPU 1518-4 PN/DP MFP supports the following functions:
Function C/C++ applications
Integrated system diagnostics Integrated web server
Description
Additional information
CPU 1518-4 PN/DPMFP can execute both STEP 7 blocks as well as blocks and applications programmed with C/C++, C#, VB.Net (CPU function library) in the user program.
The multifunctional platform enables you to execute C/C++ code (CPU function library for the real-time environment) synchronously in the CPU cycle.
The CPU function library can continue to be used asynchronously in the CPU cycle for Windows environments (C/C++, C#, VB.Net).
S7-1500 Open Development Kit 1500S programming and operating manual (https://support.industry.siemens.co m/cs/ww/en/view/109741218)
SIMATIC S7-1500 Target 1500S for Simulink programming manual (https://support.industry.siemens.co m/cs/ww/en/view/109741754)
In addition, the multifunctional platform can run C/C++ applications (C/C++ Runtime Application) parallel to the CPU cycle.
You create the CPU function library for the realtime and Windows environment, as well as C/C++ Runtime Applications with the "ODK 1500S Open Development Kit" (ODK).
Employing the ODK enables you to use mechanisms from high-level programming languages (e.g. objectbased) within a modern programming environment.
You can use Target 1500S for Simulink and ODK 1500S to create C/C++ code for the realtime environment for your complex open and closed-loop algorithms.
The system automatically generates the alarms for system diagnostics and outputs the alarms via a programming device/PC, HMI device, the web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
Diagnostics function manual (http://support.automation.siemens.c om/WW/view/en/59191792)
The web server allows you to access CPU data over a network. Evaluations, diagnostics, and modifications are thus possible over long distances. Monitoring and evaluation is possible without STEP 7; only a web browser is required. Make sure that you take appropriate measures (e.g. limiting network access, using firewalls) to protect the CPU from being compromised.
· Web server function manual (http://support.automation.sieme ns.com/WW/view/en/59193560)
· Security for SIMATIC S7 Controllers system manual (https://support.industry.siemens. com/cs/ww/en/view/90885010)
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
23
Product overview 2.3 Firmware functions
Function Integrated trace functionality
OPC UA
Configuration control
PROFINET IO RT (real time) IRT (isochronous real time)
Isochronous mode
Description
Additional information
The trace functionality supports the troubleshooting and/or optimization of the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
Function manual for trace and logic analyzer function (http://support.automation.siemens.c om/WW/view/en/64897128)
The device saves the traces. If necessary, you can read the traces with the configuration system (ES) and save them permanently. Thus, the trace and logic analyzer function is suitable for monitoring highly dynamic processes.
The trace recording can also be displayed via the web server.
With OPC UA, you can exchange data via an open and manufacturer-neutral communication protocol. The CPU can act as an OPC UA DA server. The CPU acting as the OPC UA server can communicate with OPC UA clients.
Communication function manual (https://support.industry.siemens.co m/cs/de/de/view/59192925/en)
The OPC UA Companion Specification allows methods to be specified uniformly and independently of the manufacturer. Using these specified methods, you can easily integrate devices from various manufacturers into your plants and production processes.
Configuration control allows you to operate different
S7-1500, ET 200MP system manual
real hardware configurations by configuring a maximum (http://support.automation.siemens.c
configuration of the S7-1500/ET 200MP distributed I/O om/WW/view/en/59191792)
system. This means you have the option to oper-
ate/configure different configuration variants of a ma-
chine with a single project.
RT prioritizes PROFINET IO message frames over standard message frames. This ensures the required determinism in the automation technology. The data is transferred via prioritized Ethernet frames.
PROFINET function manual (http://support.automation.siemens.c om/WW/view/en/49948856)
A reserved bandwidth is available within the send clock for the IRT data. The reserved bandwidth guarantees that the IRT data can also be transmitted unaffected by a high network load (for example, TCP/IP communication or additional real-time communication) in reserved, synchronized intervals. IRT enables update times to be achieved with the highest deterministics. IRT makes isochronous applications possible.
The clock synchronization system characteristic acquires measured values and process data and processes the signals within a fixed system clock. Isochronous mode thus contributes to high control quality and hence to greater manufacturing precision. Clock synchronization reduces possible fluctuations of the process reaction times to a minimum. Time-assured processing enables higher machine clocks to be achieve.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
24
Manual, 12/2017, A5E40882737-AA
Function MRP (Media Redundancy Protocol)
MRPD (Media Redundancy with Planned Duplication)
Shared device
PROFIenergy
Description
The Media Redundancy Protocol makes it possible to build redundant networks. Redundant transmission paths (ring topology) ensure that an alternative communication path is made available if one transmission path fails. PROFINET devices that are part of this redundant network form an MRP domain.
RT mode is possible when using MRP.
The MRP extension, MRPD, has the advantage that if a device or a line in the ring fails, all other devices are continuously supplied with IO data without interruption and with fast update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no reconfiguration time.
The "Shared device" function allows you to distribute the modules or submodules of an IO device to different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. Therefore, if sensors close in distance to one another have to supply data to different IO controllers, several IO devices are required. The "Shared device" function allows you to distribute the modules or submodules of an IO device to different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules lying near one other in one IO device.
PROFIenergy is a PROFINET-based data interface for switching off consumers centrally and with full coordination during pause times regardless of the manufacturer or device type. Through this, the process should only be provided with the energy that is absolutely required. The majority of the energy is saved by the process; the PROFINET device itself only contributes a few watts of savings potential.
Product overview 2.3 Firmware functions
Additional information
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
25
Product overview 2.3 Firmware functions
Function Integrated technology Motion control
Integrated closed-loop control functionality
Description
Additional information
The CPUs support the standard Motion Control func- S7-1500 Motion Control function
tions via the technology objects speed axes, positioning manual
axes, synchronous axes, external encoders, cams, cam (http://support.automation.siemens.c
tracks and measuring inputs.
om/WW/view/en/109749262)
· Speed-controlled axis for controlling a drive with speed specification
· Positioning axis for position-controlled positioning of a drive
· Synchronous axis to interconnect with a master value. The axis follows the synchronous operation of the position of the leading axis
· External encoder for detecting the actual position of an encoder and its use as a master value for synchronous operation
· Cams, cam track for position-dependent generation of switching signals
· Measuring input for fast, accurate and eventdependent sensing of actual positions
· PID Compact (continuous PID controller)
PID Control function manual
·
PID 3Step (step controller for integrating actuators)
(https://support.industry.siemens.co m/cs/ww/en/view/108210036)
· PID Temp (temperature controller for heating and
cooling with two separate actuators)
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
26
Manual, 12/2017, A5E40882737-AA
Product overview 2.3 Firmware functions
Function Integrated safety Know-how protection Copy protection
Access protection Integrity protection
Password provider
Description
Additional information
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
S7-1500, ET 200MP system manual (http://support.automation.siemens.c om/WW/view/en/59191792)
You can assign separate rights to different users via authorization levels.
The CPUs have integrity protection by default. Integrity protection detects possible manipulation of engineering data on the SIMATIC memory card or during the data transfer between TIA Portal and CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulation of engineering data.
If integrity protection detects manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password entry, you can link a password provider to STEP 7. A password provider provides the following advantages:
· Convenient handling of passwords. STEP 7 automatically reads in the password for the blocks. This saves you time.
· Optimal block protection, since the users do not know the password themselves.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
27
Product overview 2.3 Firmware functions
2.3.1
Quick start instructions for commissioning C/C++ Runtime
Note Commissioning C/C++ Runtime You require experience in working with Linux systems to commission C/C++ Runtime.
Two IP addresses of the PROFINET interface X3 P1 PROFINET interface X3 P1 is used to: Link development tools for C/C++ Runtime applications Connect the TIA portal Develop STEP 7 applications Communicate from C/C++ Runtime Communicate internally between C/C++ and CPU Runtime (via virtual network) The PROFINET interface X3 P1 is split internally for CPU Runtime and C/C++ Runtime. Therefore, there is one IP address for the CPU and one IP address for C/C++ Runtime. Set the IP address of the CPU in STEP 7. You can find additional information in the
online help for STEP 7. Set the IP address of C/C++ Runtime via C/C++ Runtime (see section "Initial
commissioning").
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
28
Manual, 12/2017, A5E40882737-AA
Product overview 2.3 Firmware functions
Note the following restrictions when configuring the PROFINET interface X3 P1 with STEP 7: If you disable the option "Activate this port for use" in the port options in STEP 7, the
PROFINET interface X3 P1 is disabled for the CPU and for internal communication with C/C++ Runtime. The configuration of the "Transmission rate/duplex" has no effect on the connection to the PROFINET interface X3 P1 and C/C++ Runtime. The "Monitor" option is not supported. Topology configuration is not supported.
Figure 2-3 Port options in STEP 7
Initial commissioning
Minimum requirement SIMATIC memory card with a capacity of at least 2 GB.
Procedure To commission C/C++ Runtime for the first time, proceed as follows: 1. Connection setup via Secure Shell (SSH):
The default IP address of C/C++ Runtime is 192.168.15.18. DHCP is disabled. The default user name is "root". The individual default password can be found in the display under "Overview > MFP >
Default Password:". Change the default password when you log on for the first time. 2. Change the IP address or configure DHCP using the "network.sh" script in the "/etc/mfp/etc" directory. 3. Transfer the C/C++ Runtime application to C/C++ Runtime. You can find additional information in the ODK manual (https://support.industry.siemens.com/cs/ww/en/view/109249838).
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
29
Product overview 2.3 Firmware functions
Mass storage concept
Keep in mind the following information on the memory locations on the SIMATIC memory card: The following C/C++ Runtime containers are located in the "/CppEnv1.MFP" directory on
the SIMATIC memory card and are mounted in the file system in Linux as described: System.img (6 MB) mount point: "/etc/mfp" (system files) User.img (50 MB) mount point: "/home" (home directory of the user, for
C/C++ Runtime application, for example) Data.img (200 MB) mount point: "/var/userdata" (e.g. log data) RAM disk (max. 256 MB) mount point: "/var/volatile" You can find all the information needed for creating C/C++ Runtime applications in the ODK manual (https://support.industry.siemens.com/cs/ww/en/view/109249838)
Work memory for C/C++ Runtime
The RAM is 1 GB including the RAM disk.
Performing bulk operations
To use the same C/C++ Runtime application for other CPUs, transfer the C/C++ Runtime application to the home directory. The home directory is located in the "User.img" file on the SIMATIC memory card. To use the C/C++ Runtime application on other CPUs, copy the "User.img" file to the corresponding SIMATIC memory cards.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
30
Manual, 12/2017, A5E40882737-AA
Product overview 2.3 Firmware functions
Special features
Note Initial startup with an empty SIMATIC memory card When the CPU starts for the first time with an empty SIMATIC memory card, the card is prepared for use with C/C++ Runtime. This process takes up to three minutes. Do not turn off the CPU during this phase; the STOP LED flashes.
Note Corrupt C/C++ Runtime container If the C/C++ Runtime containers are damaged or lost when the CPU is switched off, a diagnostic entry is created in the diagnostic buffer of the CPU the next time the CPU is started up. C/C++ Runtime is not available and the ERROR LED flashes. To remedy this, copy a backup copy of the C/C++ Runtime container to the SIMATIC memory card.
Note Affecting the performance of the CPU Applications, such as mass memory accesses to the SIMATIC memory card, can affect the performance of the CPU on the C/C++ Runtime page depending on the type of programming.
2.3.2
Supplied libraries for C/C++ Runtime
glibc
: 2.24
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
libstdc++
: 6.2.0
The GNU Standard C++ Library is an ongoing project to implement the ISO 14882 Standard C++ library as described in clauses 17 through 30 and annex D.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
31
Product overview 2.4 Operating and display elements
2.4
Operating and display elements
2.4.1
Front view of the CPU with the front panel
The following figure shows the front view of the CPU 1518-4 PN/DP MFP.
LEDs for the current operating mode and diagnostic status of the CPU Front panel with display Display Operator control buttons Front panel of the PROFIBUS interface
Figure 2-4 View of the CPU 1518-4 PN/DP MFP (with front panels) front
Note Temperature range for display
To increase the service life of the display, the display switches itself off when the permitted operating temperature is exceeded. When the display cools down again, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU.
For more information on the temperatures at which the display switches itself on and off, refer to the Technical specifications (Page 45).
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
32
Manual, 12/2017, A5E40882737-AA
Product overview 2.4 Operating and display elements
Pulling and plugging the front panel with display
You can pull and plug the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you pull or plug the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Always disconnect the S7-1500 automation system from the power supply before you pull or plug the front panel in zone 2 hazardous areas. The CPU retains its operating mode.
Locking the front panel
You can lock the wide front panel with display as well as the narrow front panel of the PROFIBUS interface to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panels.
Reference
Figure 2-5 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock). You can find additional information on the display, configurable protection levels and local locks in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
33
Product overview 2.4 Operating and display elements
2.4.2
Front view of the CPU without front panel
The figure below shows the operator controls and connection elements of the CPU 1518-4 PN/DP MFP.
Mode selector No function PROFIBUS interface (X4) Fixing screws Connector for power supply PROFINET IO interface (X3) with 1 port (back interface) PROFINET IO interface (X2) with 1 port (front interface) PROFINET IO interface (X1) with 2 ports MAC addresses of the interfaces LEDs for the 4 ports of the PROFINET interfaces X1, X2 and X3 Slot for the SIMATIC memory card Display connector LEDs for the current operating mode and diagnostic status of the CPU
Figure 2-6 View of the CPU 1518-4 PN/DP MFP (without front panels) front
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
34
Manual, 12/2017, A5E40882737-AA
2.4.3
Product overview 2.5 Mode selector switch
Rear view of the CPU
The following figure shows the connection elements on the rear of the CPU 1518-4 PN/DP MFP.
2.5
Shield contact surfaces Backplane bus connector Fixing screws
Figure 2-7 View of the CPU 1518-4 PN/DP MFP rear
Mode selector switch
Use the mode switch to set the CPU operating mode. The following table shows the position of the switch and the corresponding meaning.
Table 2- 5 Mode switch settings
Position RUN STOP MRES
Meaning RUN mode STOP mode Memory reset
Explanation The CPU is executing the user program. The user program is not being executed. Position for CPU memory reset.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
35
Connecting up
3
This section provides information on the terminal assignment of the individual interfaces and the block diagram of the CPU 1518-4 PN/DP MFP.
24 V DC supply voltage (X80)
The connector for the power supply is plugged in when the CPU ships from the factory. The following table shows the pin assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring opener (one spring opener per terminal)
Bridged internally:
and and
Figure 3-1 Supply voltage connection
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
36
Manual, 12/2017, A5E40882737-AA
Connecting up
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R)
The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is
allocated either as data terminal equipment (MDI) or a switch (MDI-X).
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
37
Connecting up
PROFINET interface X2 and X3 with 1 port (X2 P1, X3 P1)
The assignment corresponds to the Ethernet standard for an RJ45 plug. Autocrossing is always active on X2. This means the RJ45 socket is allocated either as
data terminal equipment (MDI) or a switch (MDI-X). Autocrossing is always active on X3. This means the RJ45 socket is allocated either as
data terminal equipment (MDI) or a switch (MDI-X).
Figure 3-2 Interfaces X2 and X3
Note PROFINET interface X3 with a transmission rate of 1000 Mbps The PROFINET interface X3 supports a maximum transmission rate of 1000 Mbps. Requirements: · Devices on the PROFINET segment must support the 1000 Mbps transmission rate. · The network infrastructure (network cables and outlets) must be category CAT 5e or
higher. · The "Transmission rate" parameter in the properties of the port (X3) must be set as
follows in STEP 7: The "Autonegotiation" check box is selected "Automatic" is selected in the drop-down list
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
38
Manual, 12/2017, A5E40882737-AA
Connecting up
PROFIBUS interface X4
The table below shows the terminal assignment of the PROFIBUS interface. The assignment corresponds to the standard assignment of an RS485 interface.
Table 3- 1
PROFIBUS interface terminal assignment
View
Signal name
1
-
2
-
3 RxD/TxD-P
4
RTS
5
M5V2
6
P5V2
7
-
8 RxD/TxD-N
9
-
Designation Data line B Request To Send Data reference potential (from station) Supply plus (from station) Data line A -
Note
Supply of I/O devices
The CPU 1518-4 PN/DP MFP does not provide a 24 V DC power supply on the PROFIBUS interface. I/O devices (for example, PC adapter USB 6ES7972-0CB20-0XA0) are only operational on the interface in conjunction with a plug-in power supply set for external power supply.
The innovative successor product, PC adapter USB A2, receives the required power supply via the USB port. This means it does not need a 24 V DC supply voltage and can be operated without a plug-in power supply set for external power supply.
Reference
You can find additional information on the topics of "Connecting the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
39
Connecting up
Assignment of the MAC addresses
CPU 1518-4 PN/DP MFP has three PROFINET interfaces. The first interface is an interface with 2-port switch. The PROFINET interfaces each have a MAC address, and each of the PROFINET ports has its own MAC address. The CPU 1518-4 PN/DP MFP therefore has seven MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC addresses are lasered on the rating plate on the right side of each CPU 1518-4 PN/DP MFP.
The table below shows how the MAC addresses are assigned.
Table 3- 2 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3 MAC address 4
MAC address 5 MAC address 6 MAC address 7
Assignment
PROFINET interface X1
(visible in STEP 7 for accessible devices)
Labeling
· Front, lasered · Right side, lasered
(start of number range)
Port X1 P1 R (required for LLDP, for example)
· Front and right side, not lasered
Port X1 P2 R (required for LLDP, for example)
· Front and right side, not lasered
PROFINET interface X2
· Front, lasered
(visible in STEP 7 for accessible devic- · Right side, not lasered es)
Port X2 P1 (required for LLDP, for example)
· Front and right side, not lasered
PROFINET interface X3
· Front, lasered
(visible in STEP 7 for accessible devic- · Right side, not lasered es)
Port X3 P1 (for C/C++ Runtime applications)
· Front, lasered
· Right side, lasered (end of number range)
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
40
Manual, 12/2017, A5E40882737-AA
Connecting up
Block diagram
The following figure shows the block diagram of the CPU 1518-4 PN/DP MFP.
X50
X80 24 V DC
PN X1 P1 R
Display RUN/STOP/MRES mode selector Electronics PROFINET 2-port switch PROFIBUS DP driver Backplane bus interface Internal supply voltage SIMATIC memory card Infeed of supply voltage PROFINET interface X1 Port 1
PN X1 P2 R PROFINET interface X1 Port 2
PN X2 P1
PROFINET interface X2 Port 1
PN X3 P1
PROFINET interface X3 Port 1
PB X4
PROFIBUS interface X4
L+
24 V DC supply voltage
M
Ground
R/S
RUN/STOP LED (yellow/green)
ER
ERROR LED (red)
MT
MAINT LED (yellow)
X1 P1, X1 P2, LED Link TX/RX X2 P1, X3 P1
Figure 3-3 Block diagram of the CPU 1518-4 PN/DP MFP
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
41
Interrupts, error messages, diagnostics and system alarms
4
The status and error displays of the CPU 1518-4 PN/DP MFP are described below.
You will find additional information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topics of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error display of the CPU
LED display
The figure below shows the LED displays of the CPU 1518-4 PN/DP MFP.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) No function LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X3 P1 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED)
Figure 4-1 LED display of the CPU 1518-4 PN/DP MFP (without front panel)
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
42
Manual, 12/2017, A5E40882737-AA
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
CPU 1518-4 PN/DP MFP has three LEDs to signal the current operating status and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED
ERROR LED
LED off
LED off
LED off
LED flashes red
LED lit green
LED off
LED lit green
LED flashes red
LED lit green
LED off
LED lit green
LED off
LED lit green
LED flashes red
MAINT LED LED off LED off LED off LED off
LED lit yellow
LED flashes yellow
LED off
Meaning Missing or insufficient power supply on the CPU.
An error has occurred.
CPU is in RUN mode.
A diagnostics event is pending.
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration An error has occurred.
LED lit yellow LED lit yellow LED lit yellow LED lit yellow LED flashes yellow
LED flashes yellow/green
LED flashes red LED off LED off
LED flashes red LED off
LED off
LED off LED flashes yellow
LED off LED flashes yellow
LED off
LED off
Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card CPU executes a program with an enabled breakpoint. Startup (transition from RUN STOP)
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
43
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
RUN/STOP LED
LED flashes yellow/green
ERROR LED LED flashes red
MAINT LED LED flashes yellow
Meaning Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of the ports for the CPU 1518-4 PN/DP MFP.
Table 4- 2 Meaning of the LEDs
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
44
Manual, 12/2017, A5E40882737-AA
Technical specifications
Article number General information
Product type designation HW functional status Firmware version Engineering with
· STEP 7 TIA Portal configurable/integrated as of version
Configuration control via dataset
Display Screen diagonal [cm]
Control elements Number of keys Mode selector switch
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering
· Mains/voltage failure stored energy time
· Repeat rate, min.
Input current Current consumption (rated value) Current consumption, max. Inrush current, max. I²t
Power Infeed power to the backplane bus Power consumption from the backplane bus (balanced)
Power loss Power loss, typ.
Memory Number of slots for SIMATIC memory card SIMATIC memory card required
6ES7518-4AX00-1AB0
CPU 1518-4 PN/DP MFP FS01 V2.5
V15
Yes
6.1 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms 1/s
1.7 A 2 A 2.7 A; Rated value 0.02 A²·s
12 W 35 W
29 W
1 Yes
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) Manual, 12/2017, A5E40882737-AA
5
45
Technical specifications
Article number Work memory
· integrated (for program)
6ES7518-4AX00-1AB0 4 Mbyte
· integrated (for data)
20 Mbyte
· integrated (for CPU function library of CPU Runtime)
Working memory for additional functions · Integrated (for C/C++ Runtime application)
50 Mbyte; Note: The "CPU function library of the CPU" are C/C++ blocks for the user program that were created using the SIMATIC ODK 1500S or Target 1500S.
500 Mbyte
Load memory · Plug-in (SIMATIC Memory Card), max.
Backup · maintenance-free
32 Gbyte; The memory card must have at least 2 GB of space on it
Yes
CPU processing times for bit operations, typ. for word operations, typ. for fixed point arithmetic, typ. for floating point arithmetic, typ.
CPU-blocks Number of elements (total)
DB · Number range
· Size, max.
FB · Number range
1 ns 2 ns 2 ns 6 ns
10 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999 16 Mbyte; For non-optimized block accesses, the max. size of the DB is 64 KB
0 ... 65 535
· Size, max.
1 Mbyte
FC · Number range
0 ... 65 535
· Size, max.
1 Mbyte
OB · Size, max.
1 Mbyte
· Number of free cycle OBs
100
· Number of time alarm OBs
20
· Number of delay alarm OBs
20
· Number of cyclic interrupt OBs
20; With minimum OB 3x cycle of 100 µs
· Number of process alarm OBs
50
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
46
Manual, 12/2017, A5E40882737-AA
Technical specifications
Article number · Number of DPV1 alarm OBs
· Number of isochronous mode OBs
· Number of technology synchronous alarm OBs
· Number of startup OBs
· Number of asynchronous error OBs
· Number of synchronous error OBs
· Number of diagnostic alarm OBs Nesting depth
· per priority class Counters, timers and their retentivity S7 counter
· Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max.
Extended retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
· Number of clock memories
6ES7518-4AX00-1AB0 3 2 2
100 4 2 1
24
2 048
Yes
Any (only limited by the main memory)
Yes
2 048
Yes
Any (only limited by the main memory)
Yes
768 kbyte; In total; available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 700 KB 20 Mbyte; When using PS 60W 24/48/60V DC HF
16 kbyte 8; 8 clock memory bits, grouped into one clock memory byte
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
47
Technical specifications
Article number Data blocks
· Retentivity adjustable · Retentivity preset Local data · per priority class, max. Address area Number of IO modules I/O address area · Inputs · Outputs per integrated IO subsystem
Inputs (volume)
Outputs (volume)
per CM/CP Inputs (volume) Outputs (volume)
Subprocess images · Number of subprocess images, max.
Hardware configuration Number of distributed IO systems
Number of DP masters · integrated · Via CM
Number of IO Controllers · integrated · Via CM
Rack · Modules per rack, max. · Number of lines, max.
6ES7518-4AX00-1AB0
Yes No
64 kbyte; max. 16 KB per block
16 384; max. number of modules / submodules
32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image
16 kbyte; 16 KB via the integrated PROFINET IO interface X1, 8 KB via the integrated PROFINET IO interface X2 and via the integrated PROFIBUS DP interface 16 kbyte; 16 KB via the integrated PROFINET IO interface X1, 8 KB via the integrated PROFINET IO interface X2 and via the integrated PROFIBUS DP interface
8 kbyte 8 kbyte
32
64; A distributed I/O system is characterized not only by the integration of distributed I/O via PROFINET or PROFIBUS communication modules, but also by the connection of I/O via AS-i master modules or links (e.g. IE/PB-Link)
1 8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
2 8; A maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
32; CPU + 31 modules 1
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
48
Manual, 12/2017, A5E40882737-AA
Technical specifications
Article number PtP CM
· Number of PtP CMs
Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number Clock synchronization · supported · to DP, master · in AS, master · in AS, slave · on Ethernet via NTP Interfaces Number of PROFINET interfaces Number of PROFIBUS interfaces 1. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Functionality · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
PROFINET IO Controller Services
PG/OP communication S7 routing Isochronous mode
6ES7518-4AX00-1AB0
the number of connectable PtP CMs is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2 s
16
Yes Yes Yes Yes Yes
3 1
2 Yes Yes; X1
Yes; IPv4 Yes Yes Yes Yes Yes Yes; MRP Automanager according to IEC 624392 Edition 2.0
Yes Yes Yes
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
49
Technical specifications
Article number Open IE communication
6ES7518-4AX00-1AB0 Yes
IRT
Yes
MRP MRPD
Yes; As MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50
Yes; Requirement: IRT
PROFIenergy
Yes
Prioritized startup
Yes; Max. 32 PROFINET devices
Number of connectable IO Devices, max.
Of which IO devices with IRT, max.
512; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
64
Number of connectable IO Devices for 512 RT, max.
of which in line, max.
512
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Number of IO Devices per tool, max. 8
Updating times
Update time for IRT for send cycle of 125 µs
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
125 µs
for send cycle of 187.5 µs
187.5 µs
for send cycle of 250 µs
250 µs to 4 ms
for send cycle of 500 µs
500 µs to 8 ms
for send cycle of 1 ms
1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" Update time = set "odd" send clock (any multiple
send cycles
of 125 µs: 375 µs, 625 µs ... 3 875 µs)
Update time for RT for send cycle of 250 µs
250 µs to 128 ms
for send cycle of 500 µs
500 µs to 256 ms
for send cycle of 1 ms
1 ms to 512 ms
for send cycle of 2 ms
2 ms to 512 ms
for send cycle of 4 ms
4 ms to 512 ms
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
50
Manual, 12/2017, A5E40882737-AA
Article number PROFINET IO Device Services
PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP MRPD PROFIenergy Shared device Number of IO Controllers with shared
device, max. Asset management record 2. Interface Interface types · Number of ports · integrated switch · RJ 45 (Ethernet) Functionality · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy PROFINET IO Controller Services PG/OP communication S7 routing Isochronous mode Open IE communication IRT MRP PROFIenergy Prioritized startup
6ES7518-4AX00-1AB0
Yes Yes No Yes Yes Yes Yes; Requirement: IRT Yes Yes 4
Yes; Per user program
1 No Yes; X2
Yes; IPv4 Yes Yes Yes Yes Yes No
Yes Yes No Yes No No Yes No
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) Manual, 12/2017, A5E40882737-AA
Technical specifications 51
Technical specifications
Article number Number of connectable IO Devices, max.
Number of connectable IO Devices for RT, max.
6ES7518-4AX00-1AB0
128; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
128
of which in line, max.
128
Number of IO Devices that can be sim- 8; in total across all interfaces ultaneously activated/deactivated, max.
Updating times
Update time for RT for send cycle of 1 ms
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
1 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
No
MRP
No
MRPD
No
PROFIenergy
Yes
Prioritized startup
No
Shared device
Yes
Number of IO Controllers with shared 4 device, max.
Asset management record
Yes; Per user program
3. Interface Interface types
· Number of ports
· integrated switch
1; C/C++ Runtime can also be reached via this port
No
· RJ 45 (Ethernet)
Yes; X3
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
52
Manual, 12/2017, A5E40882737-AA
Technical specifications
Article number Functionality
· IP protocol
6ES7518-4AX00-1AB0 Yes; IPv4
· PROFINET IO Controller
No
· PROFINET IO Device
No
· SIMATIC communication
Yes
· Open IE communication
Yes
· Web server
Yes
4. Interface
Interface types
· Number of ports
1
· RS 485
Yes; X4
Functionality
· PROFIBUS DP master
Yes
· PROFIBUS DP slave
No
· SIMATIC communication
Yes
Interface types
RJ 45 (Ethernet)
· 100 Mbps
Yes
· 1000 Mbps · Autonegotiation
Yes; Only possible at the X3 interface of the CPU 1518
Yes
· Autocrossing
Yes
· Industrial Ethernet status LED
Yes
RS 485 · Transmission rate, max.
12 Mbit/s
Protocols Number of connections
· Number of connections, max.
· Number of connections reserved for ES/HMI/web
384; via integrated interfaces of the CPU and connected CPs / CMs
10
· Number of connections via integrated inter- 192 faces
· Number of S7 routing paths
64; in total, only 16 S7-Routing connections are supported via PROFIBUS
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
53
Technical specifications
Article number SIMATIC communication
· S7 communication, as server · S7 communication, as client · User data per job, max.
Open IE communication · TCP/IP Data length, max. several passive connections per port, supported · ISO-on-TCP (RFC1006) Data length, max. · UDP Data length, max. UDP multicast · DHCP · SNMP · DCP · LLDP
Web server · HTTP · HTTPS
PROFIBUS DP master · Number of connections, max.
Services PG/OP communication S7 routing Data record routing Isochronous mode Equidistance Number of DP slaves
Activation/deactivation of DP slaves
6ES7518-4AX00-1AB0
Yes Yes See online help (S7 communication, user data size)
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
Yes; Standard and user pages Yes; Standard and user pages
48; for the integrated PROFIBUS DP interface
Yes Yes Yes Yes Yes 125; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET Yes
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
54
Manual, 12/2017, A5E40882737-AA
Technical specifications
Article number OPC UA
· Runtime license required · OPC UA Server
Application authentication Security policies
User authentication Further protocols
· MODBUS Media redundancy
· Switchover time on line break, typ. · Number of stations in the ring, max. Isochronous mode Isochronous operation (application synchronized up to terminal) Equidistance S7 message functions Number of login stations for message functions, max. Program alarms Number of configurable program alarms Number of simultaneously active program alarms · Number of program alarms · Number of alarms for system diagnostics · Number of alarms for motion technology
objects Test commissioning functions
Joint commission (Team Engineering)
Status block
Single step Number of breakpoints
6ES7518-4AX00-1AB0
Yes Yes; Data access (read, write, subscribe), method call, custom address space Yes Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "anonymous" or by user name & password
Yes; MODBUS TCP
200 ms; For MRP, bumpless for MRPD 50
Yes; With minimum OB 6x cycle of 125 µs
Yes
32
Yes 10 000
1 000 200 160
Yes; Parallel online access possible for up to 10 engineering systems Yes; Up to 16 simultaneously (in total across all ES clients) No 20
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
55
Technical specifications
Article number Status/control
· Status/control variable
6ES7518-4AX00-1AB0 Yes
· Variables · Number of variables, max.
Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
of which status variables, max.
200; per job
of which control variables, max.
200; per job
Forcing · Forcing, variables
Peripheral inputs/outputs
· Number of variables, max.
200
Diagnostic buffer
· present
Yes
· Number of entries, max.
3 200
of which powerfail-proof
1 000
Traces · Number of configurable Traces
8; Up to 512 KB of data per trace are possible
Interrupts/diagnostics/status information
Diagnostics indication LED
· RUN/STOP LED
Yes
· ERROR LED
Yes
· MAINT LED
Yes
· Connection display LINK TX/RX
Yes
Supported technology objects
Motion Control
Yes; Note: The number of axes affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER
· Number of available Motion Control re-
10 240
sources for technology objects (except cam
disks)
· Required Motion Control resources
per speed-controlled axis
40
per positioning axis
80
per synchronous axis
160
per external encoder
80
per output cam
20
per cam track
160
per probe
40
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
56
Manual, 12/2017, A5E40882737-AA
Technical specifications
Article number · Positioning axis Number of positioning axes at motion control cycle of 4 ms (typical value) Number of positioning axes at motion control cycle of 8 ms (typical value) Controller · PID_Compact
· PID_3Step
· PID-Temp
Counting and measuring · High-speed counter Standards, approvals, certificates Suitable for safety functions Ambient conditions Ambient temperature during operation · horizontal installation, min. · horizontal installation, max.
· vertical installation, min. · vertical installation, max.
Ambient temperature during storage/transportation
· min. · max. Configuration Programming Programming language
LAD FBD STL SCL GRAPH Know-how protection · User program protection/password protection · Copy protection · Block protection
6ES7518-4AX00-1AB0
128
128
Yes; Universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
No
0 °C 60 °C; Display: 50 °C, at an operating temperature of typically 50 °C, the display is switched off 0 °C 40 °C; Display: 40 °C, at an operating temperature of typically 40 °C, the display is switched off
-40 °C 70 °C
Yes Yes Yes Yes Yes
Yes
Yes Yes
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
57
Technical specifications
Article number Access protection
· Password for display
· Protection level: Write protection
· Protection level: Read/write protection
· Protection level: Complete protection Cycle time monitoring
· lower limit
· upper limit Open Development interfaces
· Size of ODK SO file, max. Dimensions
Width Height Depth Weights Weight
6ES7518-4AX00-1AB0
Yes Yes Yes Yes
adjustable minimum cycle time adjustable maximum cycle time
9.8 Mbyte
175 mm 147 mm 129 mm
1 988 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
58
Manual, 12/2017, A5E40882737-AA
Dimensional drawing
A
This section contains the dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with the front panel open. Keep to the dimensions when installing in cabinets, control rooms, etc.
Dimension drawings of the CPU 1518-4 PN/DP MFP
Figure A-1 Dimension drawing of the CPU 1518-4 PN/DP MFP, front and side view
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Manual, 12/2017, A5E40882737-AA
59
Dimensional drawing
Figure A-2 Dimension drawing CPU 1518-4 PN/DP MFP, side view with open front panel
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
60
Manual, 12/2017, A5E40882737-AA
CPU 1518-4 PN/DP ODK (6ES7518- _Pr_ef_ac_e_______________
4AP00-3AB0)
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
SIMATIC
S7-1500 CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
_Pr_od_u_ct_o_ve_rv_ie_w_________2_
_Co_n_ne_c_tin_g_up___________3_
_ _ _ _ _ _ _ _ _ _ _ Interrupts, error messages,
diagnostics and system
4
alarms
Manual
_Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______5_
_Di_m_en_si_on_a_l d_ra_w_in_g _______A_
09/2016
A5E35681108-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E35681108-AA 08/2016 Subject to change
Copyright © Siemens AG 2015 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual of the S7-1500 automation system and the function manuals. All cross-system functions are described in the system manual and in the function manuals.
The information provided in this manual and the system manual enables you to commission the CPU 1518-4 PN/DP ODK.
Basic knowledge required
To understand this documentation, you need to have general knowledge of automation engineering. You also need basic knowledge of the following topics: Knowledge of the industrial automation system SIMATIC Knowledge of working with STEP 7 Knowledge of programming with C/C++ Working with the Eclipse development environment
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
ODK: Open Development Kit SO: Shared Object
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
4
Manual, 09/2016, A5E35681108-AA
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks. In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept. Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place. Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity). Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats. To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here: Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals. Application examples Tools and examples to solve your automation tasks as well as function blocks, performance information and videos. Services Information about Industry Services, Field Services, Technical Support, spare parts and training offers. Forums For answers and solutions concerning automation technology. mySupport Your personal working area in Industry Online Support for messages, support queries, and configurable documents. This information is provided by the Siemens Industry Online Support in the Internet (http://www.siemens.com/automation/service&support).
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
5
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
6
Manual, 09/2016, A5E35681108-AA
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 8
2 Product overview .................................................................................................................................. 12
2.1
Application ..............................................................................................................................12
2.2
How it works............................................................................................................................18
2.3
Properties ................................................................................................................................ 19
2.4 2.4.1 2.4.2 2.4.3
Operating and display elements .............................................................................................24 Front view of the module with closed front panels..................................................................24 Front view of the module without front panels ........................................................................26 Rear view of the module .........................................................................................................27
2.5
Mode selector switch ..............................................................................................................27
3 Connecting up....................................................................................................................................... 28
4 Interrupts, error messages, diagnostics and system alarms................................................................... 33
4.1
Status and error display of the CPU .......................................................................................33
5 Technical specifications ........................................................................................................................ 36
A Dimensional drawing............................................................................................................................. 48
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
7
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
8
Manual, 09/2016, A5E35681108-AA
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
9
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
10
Manual, 09/2016, A5E35681108-AA
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
11
Product overview
2
2.1
Application
Area of application
SIMATIC S7-1500 is the modular control system for a wide variety of automation applications in discrete automation.
The modular and fanless design, simple implementation of distributed structures, and userfriendly operation make SIMATIC S7-1500 the economic and convenient solution for a variety of tasks.
Applications of the SIMATIC S7-1500, include, for example:
Special-purpose machines
Textile machinery
Packaging machines
General mechanical engineering
Controller engineering
Machine tool engineering
Installation engineering
Electrical industry and crafts
Automobile engineering
Water/waste water
Food & Beverage
Applications of the SIMATIC S7-1500T include, for example:
Packaging machines
Converting application
Assembly automation
Several CPUs with various levels of performance and a comprehensive range of modules with many convenient features are available. Fail-safe CPUs enable use in fail-safe applications. The modular design allows you to use only the modules that you need for your application. The controller can be retrofitted with additional modules at any time to expand its range of tasks.
High industrial capability from the high resistance to EMC, shock and vibration enable universal use of the SIMATIC S7-1500.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
12
Manual, 09/2016, A5E35681108-AA
Product overview 2.1 Application
Performance segments of the CPU 1518-4 PN/DP ODK
The CPU can be used for the high-end area of machine and plant automation.
The CPU 1518-4 PN/DP ODK can execute blocks that were programmed with C/C++. Programming of the blocks is effected by means of the "Open Development Kit ODK 1500S"
You can use the ODK to implement mechanisms from high-level programming languages (e.g. object-based) within a modern programming environment. The complexity and required time for implementation of functions is thereby reduced. The blocks generated with ODK can be run synchronously in the execution cycle of the CPU.
You can reuse existing C/C++ algorithms.
To use existing technological know-how, you can integrate the existing C/C++ code in the runtime environment of the CPU using the Open Development Kit. Once the C/C++ sources have been integrated with the ODK, they can be subsequently run on the CPU.
You can find the description of the ODK application in the S7-1500 Software Controller Open Development Kit 1500S (https://support.industry.siemens.com/cs/ww/de/view/109249838/en) programming and operating manual as of V2.0 edition 09/2016.
However, only the part covering the real-time functionality applies to the CPU 1518-4 PN/DP ODK.
The CPU 1518-4 PN/DP ODK has 2 memories:
Work memory
Additional memory for ODK applications (C/C++ code and data).
Performance segments of the standard, compact, fail-safe and technology CPUs
The CPUs can be used for smaller and mid-range applications, as well as for the high-end range of machine and plant automation.
Table 2- 1 Standard CPUs
CPU
Performance segment
PROFIBUS PROFINET PROFINET interfaces IO RT/IRT IO RT
interfaces interface
CPU 1511-1 PN Standard CPU for small
--
1
--
to mid-range applications
CPU 1513-1 PN Standard CPU for mid-
--
1
--
range applications
CPU 1515-2 PN Standard CPU for medi-
--
1
1
um-sized to large applica-
tions
CPU 1516-3 PN Standard CPU for de-
1
1
1
/DP
manding applications and
communications tasks
PROFINET basic func-
tionality --
--
--
--
Work memory 1.23 MB 1.95 MB 3.75 MB
6.5 MB
Processing time for bit operations
60 ns
40 ns
30 ns
10 ns
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
13
Product overview 2.1 Application
CPU
CPU 1517-3 PN /DP
CPU 1518-4 PN /DP CPU 1518-4 PN /DP ODK
Performance segment
Standard CPU for demanding applications and communications tasks Standard CPU for highperformance applications, demanding communication tasks and very short reaction times
PROFIBUS interfaces
1
1
PROFINET IO RT/IRT interfaces
1
1
PROFINET IO RT
interface 1
1
PROFINET basic func-
tionality --
1
Work memory 11 MB
26 MB
Processing time for bit operations
2 ns
1 ns
Table 2- 2 Compact CPUs
CPU
Performance segment
CPU 1511C-1 P N
CPU 1512C-1 P N
Compact CPU for small to mid-range applications
Compact CPU for midrange applications
PROFIBU S
interfaces --
--
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT
interface
--
1
--
PROFINET basic func-
tionality --
--
Work memory
1.175 M B
1.25 MB
Processing time for bit operations
60 ns
48 ns
Table 2- 3 Fail-safe CPUs
CPU
Performance segment
CPU 1511F-1 P N
CPU 1513F-1 P N CPU 1515F-2 P N
CPU 1516F-3 P N/DP
CPU 1517F-3 P N/DP CPU 1517TF3 PN/DP CPU 1518F-4 P N/DP CPU 1518F-4 P N/DP ODK
Fail-safe CPU for smaller to medium-sized applications
Fail-safe CPU for medium-sized applications
Fail-safe CPU for medium-sized to large applications
Fail-safe CPU for demanding applications and communications tasks
Fail-safe CPU for demanding applications and communications tasks
Fail-safe CPU for highperformance applications, demanding communication tasks and very short reaction times
PROFIBU S
interfaces --
---
1
1
1
PROFINET IO RT/IRT interfaces
1
PROFINET IO RT
interface
--
PROFINET basic func-
tionality
--
Work memory
1.23 MB
Processing time for bit operations
60 ns
1
--
--
1.95 MB 40 ns
1
1
--
3.75 MB 30 ns
1
1
--
6.5 MB 10 ns
1
1
--
11 MB
2 ns
1
1
1
26 MB
1 ns
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
14
Manual, 09/2016, A5E35681108-AA
Product overview 2.1 Application
Table 2- 4 Technology CPUs
CPU
CPU 1511T-1 PN CPU 1515T-2 PN CPU 1517T3 PN/DP
CPU 1517TF3 PN/DP
Performance segment
PROFIBUS interfaces
PROFINE T IO
RT/IRT interfaces
Technology CPU for
--
1
small to mid-range
applications
Technology CPU for
--
1
mid-range to large ap-
plications
Technology CPU for
1
1
complex applications
and communication
tasks
This CPU is described in the fail-safe CPUs
PROFINE T IO RT interface
--
1
1
PROFINET basic func-
tionality
--
Work memory 1.23 MB
Processing time for bit opera-
tions
60 ns
--
3.75 MB
30 ns
--
11 MB
2 ns
Performance segments of compact CPUs
The compact CPUs can be used for smaller to medium-sized applications and have an integrated analog and digital on-board I/O as well as integrated technology functions. The following table shows the specific properties of the Compact CPUs.
Integrated analog inputs/outputs Integrated digital inputs/outputs High-speed counters Pulse generators · PWM (pulse-width modulation) · PTO (pulse train output or stepper motor control) · Frequency output
CPU 1511C-1 PN 5 inputs/2 outputs 16 inputs/16 outputs
6 4 (PTOx/PWMx)
CPU 1512C-1 PN 5 inputs/2 outputs 32 inputs/32 outputs
6 4 (PTOx/PWMx)
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
15
Product overview 2.1 Application
Integrated technological functions
The CPUs of the SIMATIC S7-1500 support motion control functions. STEP 7 offers blocks standardized according to PLCopen for configuring and connecting a drive to the CPU. Motion Control supports speed-controlled, positioning and synchronous axes (synchronizing without specification of the synchronous position) as well as external encoders, cams, cam tracks and measuring inputs.
The CPUs of theSIMATIC S7-1500T support advanced motion control functions in addition to the motion control functions offered by the standard CPUs. Additional motion control functions are absolute synchronous axes (synchronization with specification of synchronous position) and the cam.
For effective commissioning, diagnostics and fast optimization of drives and controls, the SIMATIC S7-1500 controller family offers extensive trace functions for all CPU tags.
In addition to drive integration, the SIMATIC S7-1500 has a PID compact closed-loop controller; easy-to-configure blocks allow automatic optimization of the controller parameters for optimized control quality.
Technology modules also implement functions such as high-speed counting, position detection and measuring functions and pulse generators (PWM and frequency output). In compact CPU 1511C-1 PN and CPU 1512C-1 PN CPUs, these functions are already integrated and require no additional technology modules.
SIWAREX is a versatile and flexible weighing module, which you can use as a static scale for operation.
Due to the supported technology functions, the CPUs are suitable for controlling pumps, fans, mixers, conveyor belts, lifting platforms, gate control systems, building management systems, synchronized axes, etc.
Security Integrated
In conjunction with STEP 7, each CPU offers password-based know-how protection against unauthorized reading out or modification of the program blocks.
Copy protection provides reliable protection against unauthorized reproduction of program blocks. With copy protection, individual blocks on the SIMATIC memory card can be tied to its serial number so that the block can only be run if the configured memory card is inserted into the CPU.
In addition, you can assign various access rights to different user groups in the controller using four different authorization levels.
Improved manipulation protection allows changed or unauthorized transfers of engineering data to be detected by the controller.
The use of an Ethernet CP (CP 1543-1) provides you with additional access protection through a firewall or possibilities to establish secure VPN connections.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
16
Manual, 09/2016, A5E35681108-AA
Product overview 2.1 Application
Safety Integrated
The fail-safe CPUs are intended for users who want to implement demanding standard and fail-safe applications both centrally and decentrally.
These fail-safe CPUs allow the processing of standard and safety programs on a single CPU. This allows fail-safe data to be evaluated in the standard user program. The integration also provides the system advantages and the extensive functionality of SIMATIC for fail-safe applications.
The fail-safe CPUs are certified for use in safety mode up to:
Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010
Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to EN ISO 13849-1:2008
Additional password protection for F-configuration and F-program is set up for IT security.
Design and handling
All CPUs of the SIMATIC S7-1500 product series feature a display with plain text information. The display provides the user with information on the order numbers, firmware version, and serial number of all connected modules. In addition, the IP address of the CPU and other network settings can be adapted locally without a programming device. Errors messages are immediately shown on the display in plain text, thus helping customers to reduce downtimes.
Uniform front connectors for all modules and integrated potential bridges for flexible formation of potential groups simplifies storage. Additional components such as circuit breakers, relays, etc., can be installed quickly and easily, since a DIN rail is implemented in the rail of the S7-1500. The CPUs of the SIMATIC S7-1500 product series can be expanded centrally and in a modular fashion with signal modules. Space-saving expansion enables flexible adaptation to each application.
The system cabling for digital signal modules enables fast and clear connection to sensors and actuators from the field (fully modular connection consisting of front connector modules, connection cables and I/O modules), as well as easy wiring inside the control cabinet (flexible connection consisting of front connectors with assembled single conductors).
System diagnostics and alarms
Integrated system diagnostics is activated by default for the CPUs. The different diagnostic types are configured instead of programmed. System diagnostics information is shown uniformly and in plain text on the display of the CPU, in STEP 7, on the HMI and on the Web server, even for alarms related to drives. This information is available in RUN mode, but also in STOP mode of the CPU. An automatic update of the diagnostics information is performed when you configure new hardware components.
The CPU is available as a central interrupt server for 3 languages. The CPU, STEP 7 and your HMI guarantee data consistency without additional engineering steps. The maintenance work is easier.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
17
Product overview 2.2 How it works
2.2
How it works
Principle of operation
The CPU contains the operating system and executes the user program. The user program is located on the SIMATIC memory card and is processed in the work memory of the CPU.
CPU 1518-4 PN/DP ODK allows you to integrate C/C++ functions created with the SIMATIC S7-1500 ODK in the user program in addition to the user program created directly with STEP 7.
The connection to the process is centralized or distributed via PROFINET or PROFIBUS with I/O modules.
The PROFINET interfaces on the CPU allow simultaneous communication with PROFINET devices, PROFINET controllers, HMI devices, programming devices, other controllers and other systems. CPU 1518-4 PN/DP ODK supports operation as an IO controller and I-device.
Similarly to the PROFINET interface, the PROFIBUS interface available on the CPU allows communication with other devices. When you use the interface as PROFIBUS DP interface, the CPU on the PROFIBUS DP also assumes the role of a DP master.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
18
Manual, 09/2016, A5E35681108-AA
2.3
Properties
Article number
6ES7518-4AP00-3AB0
View of the module
The figure below shows the CPU 1518-4 PN/DP ODK.
Product overview 2.3 Properties
Figure 2-1 CPU 1518-4 PN/DP ODK
Note Protective film Note that a protective film is attached to the display of the CPU when shipped from the factory. Remove the protective film if necessary.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
19
Product overview 2.3 Properties
Properties
CPU 1518-4 PN/DP ODK has the following technical properties:
C/C++ applications
Their C/C++ applications are generated via the SIMATIC S7-1500 ODK. They are loaded with the TIA Portal and the Web server. With the SIMATIC S7-1500 ODK you program functions from which you can launch the STEP 7 user program.
You can find the description of the ODK application in the S7-1500 Software Controller Open Development Kit 1500S programming and operating manual.
However, only the part covering the real-time functionality applies to the CPU 1518-4 PN/DP ODK.
Communication:
Interfaces
CPU 1518-4 PN/DP ODK has four interfaces. Three interfaces for PROFINET and one for PROFIBUS.
The 1st PROFINET interface (X1 P1, X1 P2) has two ports. In addition to PROFINET basic functionality, it also supports PROFINET IO RT (real-time) and IRT (isochronous real-time). PROFINET IO communication or real-time settings can be configured.
Even with a send clock of 125 µs, IO communication and standard communication is possible via one cable.
Port 1 and port 2 can also be used as ring ports for the configuration of redundant ring structures in Ethernet.
The 2nd PROFINET interface (X2 P1) has one port. In addition to PROFINET basic functionality, its also supports PROFINET IO RT (real-time). The basic functionality of PROFINET supports HMI communication, communication with the configuration system, communication with a higher-level network (backbone, router, Internet) and communication with another machine or automation cell.
The 3rd PROFINET interface (X3 P1) has one port and supports PROFINET basic functionality, i.e. no IO controller / IO device role. The basic functionality of PROFINET supports HMI communication, communication with the configuration system, communication with a higher-level network (backbone, router, Internet) and communication with another machine or automation cell. The 3rd PROFINET interface supports a transmission rate of 1000 Mbps as of firmware version V1.7.
Note IP subnets
The IP subnets of the three interfaces must be different. This means that the IP addresses of the three interfaces must differ from each other in the subnets.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
20
Manual, 09/2016, A5E35681108-AA
Product overview 2.3 Properties
The 4th interface (X4) is used to connect to a PROFIBUS network. When you use the interface as PROFIBUS DP interface, the CPU is the DP master in this case. The CPU cannot assume the role of a DP slave. OPC UA With OPC UA, data is exchanged via an open and vendor-neutral communication protocol. The CPU, as OPC UA server, can communicate with OPC UA clients such as HMI panels, SCADA systems, etc. Integrated Web server: A Web server is integrated in the CPU. You can read out the following information with the Web server: Start page with general CPU information Identification information Contents of the diagnostics buffer Query of module states Firmware update Alarms (without acknowledgment option) Information about communication PROFINET topology Tag status, writing tags Watch tables Memory usage User pages Data logs (if used) Online backup and restoration of the configuration. Diagnostic information for the motion control technology objects Display of trace recording stored on the SIMATIC memory card Readout service data Basic Web pages Display of the Web server in 3 project languages, for example, comments and message texts Recipes User-defined Web pages
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
21
Product overview 2.3 Properties
Integrated technology:
Motion Control
The Motion Control functionality uses technology objects to support speed-controlled axes, positioning axes, synchronous axes, external encoders, cams, cam tracks and measuring inputs, as well as PLCopen blocks for programming the motion control functionality. You can find a detailed description of the use of Motion Control and its configuration in the S7-1500 Motion Control (http://support.automation.siemens.com/WW/view/en/109739589) function manual. You can also use the TIA Selection Tool (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool) or the SIZER (http://w3.siemens.com/mcms/mc-solutions/en/engineering-software/drive-design-toolsizer/Pages/drive-design-tool-sizer.aspx) to create or configure axes.
Integrated closed-loop control functionality
- PID Compact (continuous PID controller)
- PID 3Step (step controller for integrating actuators)
- PID Temp (temperature controller for heating and cooling with two separate actuators)
Trace functionality:
The trace functionality supports troubleshooting and optimization of the user program. You can find additional information on the trace functionality in the Using the Trace and Logic Analyzer (http://support.automation.siemens.com/WW/view/en/64897128) function manual.
Integrated system diagnostics:
The alarms for the system diagnostics are automatically created by the system and displayed on a PG/PC, HMI device, Web server or the integrated display. System diagnostics information is also available when the CPU is in STOP mode.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
22
Manual, 09/2016, A5E35681108-AA
Reference
Product overview 2.3 Properties
Integrated security:
Know-how protection
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the CPU. User programs cannot run without the corresponding SIMATIC memory card or CPU.
Access protection
Extended access protection provides high-quality protection against unauthorized configuration changes. You can use authorization levels to assign separate rights to different user groups.
Integrity protection
The system protects the data transferred to the CPU against manipulation. The CPU detects erroneous or manipulated engineering data.
Additional functions:
PROFIenergy You can find information on the topic of "PROFIenergy" in the PROFINET function manual (http://support.automation.siemens.com/WW/view/en/19292127) and in the PROFINET specification on the Internet (http://www.profibus.com).
Shared device You can find information on the topic of "Shared device" in the PROFINET function manual (http://support.automation.siemens.com/WW/view/en/19292127).
Configuration control You can find information on the topic of "Configuration control" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Isochronous mode You can find information about the "Isochronous mode" topic in the PROFINET (http://support.automation.siemens.com/WW/view/en/68039307) function manual.
You will find additional information on the topic of "Integrated security/Access protection" in the S7-1500/ET 200MP system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
23
Product overview 2.4 Operating and display elements
2.4
Operating and display elements
2.4.1
Front view of the module with closed front panels
The figure below shows the front view of the CPU 1518-4 PN/DP ODK.
LEDs for the current operating mode and diagnostic status of the CPU Front panel with display Display Operator control buttons Front panel of the PROFIBUS interface
Figure 2-2 View of the CPU 1518-4 PN/DP ODK (with front panels) - front
Note Temperature range for display
To increase the service life of the display, the display switches itself off when the permitted operating temperature is exceeded. When the display cools down again, it automatically switches itself on again. When the display is switched off, the LEDs continue to show the status of the CPU.
For more information on the temperatures at which the display switches itself on and off, refer to the Technical specifications (Page 36).
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
24
Manual, 09/2016, A5E35681108-AA
Product overview 2.4 Operating and display elements
Pulling and plugging the front panel with display
You can pull and plug the front panel with display during operation.
WARNING Personal injury and damage to property may occur If you pull or plug the front panel of an S7-1500 automation system during operation, personal injury or damage to property can occur in zone 2 hazardous areas. Always disconnect the S7-1500 automation system from the power supply before you pull or plug the front panel in zone 2 hazardous areas.
Locking the front panel
You can lock the wide front panel with display as well as the narrow front panel of the PROFIBUS interface to protect your CPU against unauthorized access. You can attach a security seal or a padlock with a diameter of 3 mm to the front panels.
Reference
Figure 2-3 Locking latch on the CPU
In addition to the mechanical lock, you can also block access to a password-protected CPU on the display (local lock). You can find additional information on the display, configurable protection levels and local locks in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You will find detailed information on the individual display options, a training course and a simulation of the available menu commands in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
25
Product overview 2.4 Operating and display elements
2.4.2
Front view of the module without front panels
The figure below shows the operator controls and connection elements of the CPU 1518-4 PN/DP ODK.
Mode selector No function PROFIBUS interface (X4) Fixing screws Connector for power supply PROFINET IO interface (X3) with 1 port (back interface) PROFINET IO interface (X2) with 1 port (front interface) PROFINET IO interface (X1) with 2 ports MAC addresses of the interfaces LEDs for the 4 ports of the PROFINET interfaces X1, X2 and X3 Slot for the SIMATIC memory card Display connector LEDs for the current operating mode and diagnostic status of the CPU
Figure 2-4 View of the CPU 1518-4 PN/DP ODK (without front panels) - front
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
26
Manual, 09/2016, A5E35681108-AA
2.4.3
Product overview 2.5 Mode selector switch
Rear view of the module
The figure below shows the connection elements on the rear of the CPU 1518-4 PN/DP ODK.
2.5
Shield contact surfaces Backplane bus connector Fixing screws
Figure 2-5 View of the CPU 1518-4 PN/DP ODK - rear
Mode selector switch
Use the mode switch to set the CPU operating mode. The following table shows the position of the switch and the corresponding meaning.
Table 2- 5 Mode switch settings
Position RUN STOP MRES
Meaning RUN mode STOP mode Memory reset
Explanation The CPU is executing the user program. The user program is not being executed. Position for CPU memory reset.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
27
Connecting up
3
This section provides information on the terminal assignment of the individual interfaces and the block diagram of the CPU 1518-4 PN/DP ODK.
24 V DC supply voltage (X80)
The connector for the power supply is plugged in when the CPU ships from the factory. The following table shows the pin assignment for a 24 V DC power supply.
+24 V DC of the supply voltage Ground of the supply voltage Ground of the supply voltage for loop-through (maximum of 10 A permitted) +24 V DC of the supply voltage for loop-through (maximum of 10 A permitted) Spring opener (one spring opener per terminal)
Bridged internally:
and and
Figure 3-1 Supply voltage connection
If the CPU is supplied by a system power supply, it is not necessary to connect the 24 V supply.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
28
Manual, 09/2016, A5E35681108-AA
Connecting up
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R)
The assignment corresponds to the Ethernet standard for an RJ45 plug. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is
allocated either as data terminal equipment (MDI) or a switch (MDI-X).
PROFINET interface X2 and X3 with 1 port (X2 P1, X3 P1)
The assignment corresponds to the Ethernet standard for an RJ45 plug. Autocrossing is always active on X2. This means the RJ45 socket is allocated either as
data terminal equipment (MDI) or a switch (MDI-X). Autocrossing is always active on X3. This means the RJ45 socket is allocated either as
data terminal equipment (MDI) or a switch (MDI-X).
Figure 3-2 Interfaces X2 and X3
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
29
Connecting up
Note PROFINET interface X3 with a transmission rate of 1000 Mbps
The PROFINET interface X3 supports a maximum transmission rate of 1000 Mbps.
Requirements: · Devices on the PROFINET segment must support the 1000 Mbps transmission rate. · The network infrastructure (network cables and outlets) must be category CAT 5e or
higher. · The "Transmission rate" parameter in the properties of the port (X3) must be set as
follows in STEP 7: The "Autonegotiation" check box is selected "Automatic" is selected in the drop-down list
PROFIBUS interface X4
The table below shows the terminal assignment of the PROFIBUS interface. The assignment corresponds to the standard assignment of an RS485 interface.
Table 3- 1
PROFIBUS interface terminal assignment
View
Signal name
1
-
2
-
3 RxD/TxD-P
4
RTS
5
M5V2
6
P5V2
7
-
8 RxD/TxD-N
9
-
Designation Data line B Request To Send Data reference potential (from station) Supply plus (from station) Data line A -
Note
Supply of I/O devices
The CPU 1518-4 PN/DP ODK does not provide a 24 V DC power supply on the PROFIBUS interface. I/O devices (for example, PC adapter USB 6ES7972-0CB20-0XA0) are only operational on the interface in conjunction with a plug-in power supply set for external power supply.
The innovative successor product, PC adapter USB A2, receives the required power supply via the USB port. This means it does not need a 24 V DC supply voltage and can be operated without a plug-in power supply set for external power supply.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
30
Manual, 09/2016, A5E35681108-AA
Connecting up
Reference
You can find additional information on the topics of "Connecting the CPU" and "Accessories/spare parts" in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Assignment of the MAC addresses
CPU 1518-4 PN/DP ODK has three PROFINET interfaces. The first interface is an interface with 2-port switch. The PROFINET interfaces each have a MAC address, and each of the PROFINET ports has its own MAC address. The CPU 1518-4 PN/DP ODK therefore has seven MAC addresses in total.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example for the neighborhood discovery function.
The number range of the MAC addresses is sequential. The first and last MAC address are lasered on the rating plate on the right side of each CPU 1518-4 PN/DP ODK.
The table below shows how the MAC addresses are assigned.
Table 3- 2 Assignment of the MAC addresses
MAC address 1
MAC address 2 MAC address 3 MAC address 4
MAC address 5 MAC address 6 MAC address 7
Assignment
PROFINET interface X1
(visible in STEP 7 for accessible devices)
Labeling
· Front, lasered · Right side, lasered
(start of number range)
Port X1 P1 R (required for LLDP, for example)
· Front and right side, not lasered
Port X1 P2 R (required for LLDP, for example)
· Front and right side, not lasered
PROFINET interface X2
· Front, lasered
(visible in STEP 7 for accessible devic- · Right side, not lasered es)
Port X2 P1 (required for LLDP, for example)
· Front and right side, not lasered
PROFINET interface X3
· Front, lasered
(visible in STEP 7 for accessible devic- · Right side, not lasered es)
Port X3 P1 (required for LLDP, for example)
· Front, lasered
· Right side, lasered (end of number range)
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
31
Connecting up
Block diagram
The figure below shows the block diagram of the CPU 1518-4 PN/DP ODK.
Display
RUN/STOP/MRES mode selector
Electronics
PROFINET 2-port switch
PROFIBUS DP driver
Backplane bus interface
Internal supply voltage
X50
SIMATIC memory card
X80 24 V DC Infeed of supply voltage
PN X1 P1 R PROFINET interface X1 Port 1
PN X1 P2 R PN X2 P1 PN X3 P1 PB X4 L+ M R/S ER MT X1 P1, X1 P2, X2 P1, X3 P1
Figure 3-3 Block diagram of the CPU 1518-4 PN/DP ODK
PROFINET interface X1 Port 2 PROFINET interface X2 Port 1 PROFINET interface X3 Port 1 PROFIBUS interface X4 24 V DC supply voltage Ground RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
32
Manual, 09/2016, A5E35681108-AA
Interrupts, error messages, diagnostics and system alarms
4
The status and error displays of the CPU 1518-4 PN/DP ODK are described below.
You will find additional information on "Interrupts" in the STEP 7 online help.
You can find additional information on the topics of "Diagnostics" and "System alarms" in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
4.1
Status and error display of the CPU
LED display
The figure below shows the CPU 1518-4 PN/DP ODK LEDs.
RUN/STOP LED (yellow/green LED) ERROR LED (red LED) MAINT LED (yellow LED) No function LINK RX/TX LED for port X1 P1 (yellow/green LED) LINK RX/TX LED for port X1 P2 (yellow/green LED) LINK RX/TX LED for port X3 P1 (yellow/green LED) LINK RX/TX LED for port X2 P1 (yellow/green LED)
Figure 4-1 LED display of the CPU 1518-4 PN/DP ODK (without front panel)
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
33
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The CPU 1518-4 PN/DP ODK has three LEDs to signal the current operating status and diagnostics status. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED LED off LED off
LED lit green LED lit green LED lit green
LED lit green
LED lit yellow
LED lit yellow LED lit yellow
LED flashes yellow
LED flashes yellow/green LED flashes yellow/green
ERROR LED LED off
LED flashes red LED off
LED flashes red LED off
LED off
LED off LED off LED flashes red LED off
LED off LED flashes red
MAINT LED LED off LED off
Meaning Missing or insufficient power supply on the CPU.
An error has occurred.
LED off LED off
CPU is in RUN mode. A diagnostics event is pending.
LED lit yellow
LED flashes yellow
LED flashes yellow
LED off LED flashes yel-
low LED off
LED off
Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective
CPU is performing internal activities during STOP, e.g. startup after STOP. Download of the user program from the SIMATIC memory card Startup (transition from RUN STOP)
LED flashes yellow
Startup (CPU booting)
Test of LEDs during startup, inserting a module.
LED flashing test
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
34
Manual, 09/2016, A5E35681108-AA
Interrupts, error messages, diagnostics and system alarms 4.1 Status and error display of the CPU
Meaning of LINK RX/TX LED
Each port has a LINK RX/TX LED. The table below shows the various "LED scenarios" of ports for the CPU 1518-4 PN/DP ODK.
Table 4- 2 Meaning of the LEDs
LINK TX/RX LED LED off
LED flashes green LED lit green
LED flickers yellow
Meaning There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is no LINK connection. The "LED flashing test" is being performed.
There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
35
Technical specifications
5
General information Product type designation Hardware function version Firmware version Engineering with STEP 7 TIA Portal can be configured/integrated as of version Configuration control Via data record Display Screen diagonal (cm) Operator controls Number of buttons Mode selector Supply voltage Type of supply voltage Low limit of permitted range (DC) High limit of permitted range (DC) Reverse polarity protection Power and voltage failure buffering Power/voltage failure buffer time Input current Current consumption (rated value) Inrush current, max. I²t Power Power consumption from the backplane bus (balanced) Incoming power to the backplane bus Power loss Power loss, typ. Memory Number of slots for SIMATIC memory card SIMATIC memory card required Work memory Integrated (for program) Integrated (for data) Integrated (for ODK application)
6ES7518-4AP00-3AB0
CPU 1518-4 PN/DP ODK FS03 V2.0
V14
Yes
6.1 cm
6 1
24 V DC 19.2 V 28.8 V Yes
5 ms
1.55 A 2.4 A; rated value 0.02 A²s
30 W 12 W
24 W
1 Yes
4 MB 20 MB 20 MB
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
36
Manual, 09/2016, A5E35681108-AA
Technical specifications
Load memory Plug-in (SIMATIC memory card), max. Buffering Maintenance-free CPU processing times For bit operations, typ. For word operations, typ. For fixed-point arithmetic, typ. For floating-point arithmetic, typ. CPU blocks Number of elements (total) DB Number range
Size, max.
FB Number range Size, max. FC Number range Size, max. OB Size, max. Number of free-cycle OBs Number of time-of-day interrupt OBs Number of time-delay interrupt OBs Number of cyclic interrupt OBs Number of hardware interrupt OBs Number of DPV1 interrupt OBs Number of isochronous mode OBs Number of technology synchronous interrupt OBs Number of restart OBs Number of asynchronous error OBs Number of synchronous error OBs Number of diagnostic interrupt OBs Nesting depth Per priority class Counters, timers and their retentivity S7 counters Quantity Retentivity · Adjustable
6ES7518-4AP00-3AB0
32 GB
Yes
1 ns 2 ns 2 ns 6 ns
10000; blocks (OB/FB/FC/DB) and UDTs
1 ... 60 999; divided into: Number range available for the user: 1 ... 59 999 and number range for DBs generated by SFC 86: 60 000 ... 60 999 16 MB; the maximum size of the DB is 64 KB with non-optimized block access
0 ... 65 535 512 KB
0 ... 65 535 512 KB
512 KB 100 20 20 20; with minimum OB 3x cycle of 100 µs 50 3 2 2 100 4 2 1
24
2048
Yes
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
37
Technical specifications
IEC counters Quantity Retentivity · Adjustable S7 timers Quantity Retentivity · Adjustable IEC timers Quantity Retentivity · Adjustable Data areas and their retentivity Total retentive data area (including timers, counters, bit memories), max.
Bit memory Number, max. Number of clock memory bits
Data blocks Retentivity adjustable Retentivity preset Local data Per priority class, max. Address area Number of I/O modules I/O address area Inputs Outputs Of which per integrated IO subsystem · Inputs (volume)
· Outputs (volume)
Of which per CM/CP · Inputs (volume)
· Outputs (volume) Process image partitions Number of process image partitions, max.
6ES7518-4AP00-3AB0
Unlimited (limited only by work memory)
Yes
2048
Yes
Unlimited (limited only by work memory)
Yes
768 KB; in total; for bit memories, timers, counters, DBs and technological data (axes), usable retentive memory: 700 KB
16 KB 8; 8 clock memory bits, grouped in one clock memory byte
Yes No
64 KB; max. 16 KB per block
16384; max. number of modules/submodules
32 KB; all inputs are in the process image 32 KB; all outputs are in the process image
16 KB; 16 KB via the integrated PROFINET IO interface, 8 KB via the integrated DP interface 16 KB; 16 KB via the integrated PROFINET IO interface, 8 KB via the integrated DP interface
8 KB 8 KB
32
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
38
Manual, 09/2016, A5E35681108-AA
Hardware configuration Number of distributed IO systems
Number of DP masters Integrated Via CM
Number of IO controllers Integrated Via CM
Rack Modules per rack, max. Number of rows, max. PtP CM Number of PtP CMs
Time Clock Type Backup duration Deviation per day, max. Operating hours counter Quantity Time-of-day synchronization Supported On DP, master in AS, Master in AS, Slave On Ethernet via NTP Interfaces Number of PROFINET interfaces Number of PROFIBUS interfaces 1st interface Interface hardware Number of ports Integrated switch RJ45 (Ethernet)
Technical specifications
6ES7518-4AP00-3AB0
64; a distributed IO system is understood to mean the integration of distributed I/O via PROFINET or PROFIBUS communication modules as well as the connection of I/O via AS-i master modules or links (e.g. IE/PB link)
1 8; a maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
2 8; a maximum of 8 CMs/CPs (PROFIBUS, PROFINET, Ethernet) can be inserted in total
32; CPU + 31 modules 1
The number of PtP CMs that can be connected is only limited by the available slots
Hardware clock 6 wk; at 40 °C ambient temperature, typ. 10 s; typ.: 2 s
16
Yes Yes Yes Yes Yes
3 1
2 Yes Yes; X1
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
39
Technical specifications
Protocols PROFINET IO controller PROFINET IO device SIMATIC communication Open IE communication Web server Media redundancy PROFINET IO controller Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP
· MRPD · PROFIenergy · Prioritized startup · Number of connectable IO devices, max.
· of these, IO devices with IRT, max. · Number of connectable IO devices for RT,
max. · of these, in a line topology, max. · Number of IO devices that can be activat-
ed/deactivated simultaneously, max. · Number of IO devices per tool, max. · Update times
Update time with IRT · with send clock of 125 µs · with send clock of 187.5 µs · for send clock of 250 µs · With send clock of 500 µs · With send clock of 1 ms · with send clock of 2 ms · with send clock of 4 ms · with IRT and "odd" send clock parameter as-
signment
6ES7518-4AP00-3AB0
Yes Yes Yes Yes Yes Yes
Yes Yes Yes Yes Yes Yes; as MRP redundancy manager and/or MRP client; max. number of devices in the ring: 50 Yes; requirement: IRT Yes Yes; max. 32 PROFINET devices 512; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 64 512
512 8; in total over all interfaces
8 The minimum value of the update time also depends on the communication component set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data.
125 µs 187.5 µs 250 µs to 4 ms 500 µs to 8 ms 1 ms to 16 ms 2 ms to 32 ms 4 ms to 64 ms Update time = set "odd" send clock (any multiple of 125 µs: 375 µs, 625 µs to 3 875 µs)
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
40
Manual, 09/2016, A5E35681108-AA
Technical specifications
Update time with RT · for send clock of 250 µs
· With send clock of 500 µs
· With send clock of 1 ms
· with send clock of 2 ms
· with send clock of 4 ms PROFINET IO device Services · PG/OP communication
· S7 routing
· Isochronous mode
· Open IE communication
· IRT
· MRP
· MRPD
· PROFIenergy
· Shared device
· Number of IO controllers with shared device, max.
2nd interface Interface hardware Number of ports Integrated switch RJ45 (Ethernet) Protocols PROFINET IO controller PROFINET IO device SIMATIC communication Open IE communication Web server Media redundancy
6ES7518-4AP00-3AB0
250 µs to 128 ms 500 µs to 256 ms 1 ms to 512 ms 2 ms to 512 ms 4 ms to 512 ms
Yes Yes No Yes Yes Yes Yes; requirement: IRT Yes Yes 4
1 No Yes; X2
Yes Yes Yes Yes Yes No
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
41
Technical specifications
PROFINET IO controller Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP · MRPD · PROFIenergy · Prioritized startup · Number of connectable IO devices, max.
· Number of connectable IO devices for RT, max.
· of these, in a line topology, max. · Number of IO devices that can be activat-
ed/deactivated simultaneously, max. · Update times
Update time with RT · With send clock of 1 ms PROFINET IO device Services · PG/OP communication · S7 routing · Isochronous mode · Open IE communication · IRT · MRP · MRPD · PROFIenergy · Prioritized startup · Shared device · Number of IO controllers with shared device,
max.
6ES7518-4AP00-3AB0
Yes Yes No Yes No No No Yes No 128; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET 128
128 8; in total over all interfaces
The minimum value of the update time also depends on the communication component set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data.
1 ms to 512 ms
Yes Yes No Yes No No No Yes No Yes 4
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
42
Manual, 09/2016, A5E35681108-AA
Technical specifications
3rd interface Interface hardware Number of ports Integrated switch RJ45 (Ethernet) Protocols PROFINET IO controller PROFINET IO device SIMATIC communication Open IE communication Web server 4th interface Interface hardware Number of ports RS 485 Protocols PROFIBUS DP master PROFIBUS DP slave SIMATIC communication Interface hardware RJ45 (Ethernet) 100 Mbps 1000 Mbps
Autonegotiation Autocrossing Industrial Ethernet status LED RS 485 Transmission rate, max. Protocols Number of connections Number of connections, max.
Number of connections reserved for ES/HMI/Web Number of connections via integrated interfaces Number of S7 routing connections
SIMATIC communication S7 communication, as server S7 communication, as client User data per job, max.
6ES7518-4AP00-3AB0
1 No Yes; X3
No No Yes Yes Yes
1 Yes; X4
Yes No Yes
Yes Yes; only possible on the X3 interface of CPU 1518 Yes Yes Yes
12 Mbps
384; via integrated interfaces of the CPU and connected CPs/CMs 10 192 64; in total, only 16 S7 routing connections are supported via PROFIBUS
Yes Yes See online help (S7 communication, user data size)
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
43
Technical specifications
Open IE communication TCP/IP · Data length, max. · Multiple passive connections per port, sup-
ported ISO-on-TCP (RFC1006) · Data length, max. UDP · Data length, max. DHCP SNMP DCP LLDP Web server HTTP HTTPS PROFIBUS DP master Number of connections, max. Services · PG/OP communication · S7 routing · Data record routing · Isochronous mode · Constant bus cycle time · Number of DP slaves
· Activation/deactivation of DP slaves OPC UA OPC UA server
· Application authentication · Security Policies
· User authentication Additional protocols MODBUS Media redundancy Switchover time in the case of cable break, typ. Number of devices in the ring, max.
Yes 64 KB
Yes
6ES7518-4AP00-3AB0
Yes 64 KB Yes 1472 bytes No Yes Yes Yes
Yes; standard and user-defined sites Yes; standard and user-defined sites
48; for the integrated PROFIBUS DP interface
Yes Yes Yes Yes Yes 125; in total, max. 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET Yes
Yes; Data Access (Read, Write, Subscribe), Runtime license required Yes
Available Security Policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256 "Anonymous" or with user name and password
Yes; MODBUS TCP
200 ms; with MRP; bumpless with MRPD 50
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
44
Manual, 09/2016, A5E35681108-AA
Technical specifications
6ES7518-4AP00-3AB0
Isochronous mode
Isochronous mode (application synchronized up to Yes; with minimum OB 6x cycle of 125 µs terminal)
Constant bus cycle time
Yes
S7 signaling functions
Number of stations that can be logged in for sig- 32 naling functions, max.
Block-related alarms
Yes
Number of configurable interrupts, max.
10000
Number of simultaneously active interrupts in interrupt pool
· Number of reserved user interrupts
1000
· Number of reserved interrupts for system di- 200 agnostics
· Number of reserved interrupts for motion con- 160 trol technology objects
Test/commissioning functions Joint commissioning (Team Engineering)
Status block
Single-step Status/modify Status/modify tag Tags
Number of tags, max. · Of which are status tags, max.
Yes; parallel online access possible for up to 10 engineering systems Yes; up to 16 simultaneously (in total from all ES clients) No
Yes Inputs/outputs, bit memory, DB, peripheral inputs/outputs, timers, counters
200; per job
· Of which are modify tags, max.
200; per job
Force Forcing, tags Number of tags, max. Diagnostics buffer Available Number of entries, max.
· Of which are power failure-proof
Peripheral inputs/outputs 200
Yes 3200 1000
Traces Number of configurable traces
8; up to 512 KB data possible per trace
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
45
Technical specifications
Interrupts/diagnostics/status information Diagnostics display LED RUN/STOP LED ERROR LED MAINT LED Connection display LINK TX/RX Supported technology objects Motion control
· Number of available motion control resources for technology objects (except cams)
· required Motion Control resources per speed-controlled axis per positioning axis per synchronous axis per external encoder per output cam per cam track per measuring input
Controller · PID_Compact
· PID_3Step
· PID temp
Counting and measuring · High-speed counter Standards, approvals, certificates Suitable for safety functions Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max.
Vertical mounting position, min. Vertical mounting position, max.
Ambient temperature during storage/transport Min. Max.
6ES7518-4AP00-3AB0
Yes Yes Yes Yes
Yes; note: the number of axes affects the cycle time of the PLC program; selection guide via the TIA Selection Tool or SIZER 10240
40 80 160 80 20 160 40
Yes; universal PID controller with integrated optimization Yes; PID controller with integrated optimization for valves Yes; PID controller with integrated optimization for temperature
Yes
No
0 °C 60 ; display: 50 , the display is switched off at an operating temperature of typically 50 0 °C 40 ; display: 40 , the display is switched off at an operating temperature of typically 40
-40 °C 70 °C
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
46
Manual, 09/2016, A5E35681108-AA
Technical specifications
Configuring Programming Programming language · LAD
· FBD
· STL
· SCL
· GRAPH
Know-how protection User program protection Copy protection Block protection Access protection Password for display Protection level: Write protection Protection level: Read/write protection Protection level: Complete protection Cycle-time monitoring Low limit High limit Open Development interfaces Size ODK SO file, max. Dimensions Width Height Depth Weights Weight, approx.
6ES7518-4AP00-3AB0
Yes Yes Yes Yes Yes
Yes Yes Yes
Yes Yes Yes Yes
Adjustable minimum cycle time Adjustable maximum cycle time
5.8 MB
175 mm 147 mm 129 mm
1988 g
General technical specifications
You can find information on the general technical specifications, such as standards and approvals, electromagnetic compatibility, protection class, etc., in the S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
Manual, 09/2016, A5E35681108-AA
47
Dimensional drawing
A
This section contains the dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with the front panel open. Keep to the dimensions when installing in cabinets, control rooms, etc.
Dimensional drawings for CPU 1518-4 PN/DP ODK
Figure A-1 Dimensional drawing of CPU 1518-4 PN/DP ODK, front and side views
Figure A-2 Dimensional drawing CPU 1518-4 PN/DP ODK, side view with open front panel
CPU 1518-4 PN/DP ODK (6ES7518-4AP00-3AB0)
48
Manual, 09/2016, A5E35681108-AA
SIMATIC S7-1200/S7-1500 F-CPUs
Product Information
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Content
Introduction
This Product Information contains important information on the F-CPUs specified in the section "Scope of validity". The Product Information is part of the product supplied. The information in this Product Information should be considered more up-to-date than other documentation if uncertainties arise.
Scope of validity
The statements in this product information apply to the F-CPUs listed below:
S7-1200 F-CPUs
· CPU 1212FC DC/DC/DC · CPU 1511(T)F-1 PN · CPU 1212FC DC/DC/Rly · CPU 1513F-1 PN · CPU 1214FC DC/DC/DC · CPU 1515(T)F-2 PN · CPU 1214FC DC/DC/Rly · CPU 1516(T)F-3 PN/DP · CPU 1215FC DC/DC/DC · CPU 1517(T)F-3 PN/DP · CPU 1215FC DC/DC/Rly · CPU 1518F-4 PN/DP
· CPU 1518F-4 PN/DP (MFP/ODK)
S7-1500 F-CPUs
· CPU 1510SP F-1 PN · CPU 1512SP F-1 PN · CPU 1513proF-2 PN · CPU 1516proF-2 PN
S7-1500 F-Software Controller · CPU 1505SP (T)F · CPU 1507S F · CPU 1508S F
© Siemens AG 2015 - 2019. All rights reserved
8
A5E35635424-AH, 11/2019
Areas of application
Main areas of application of the S7-1200/1500 F-CPUs are personal and machine safety and burner controls. In addition to the safety program, you can also program standard applications.
You can operate the S7-1200/1500 F-CPUs in safety or standard mode.
The installed STEP 7 Safety license is required for safety mode. If the license for STEP 7 Safety is not installed, you can use the S7-1200/1500 F-CPUs in standard mode. In standard mode, S7-1200/1500 F-CPUs behave like standard S7-1200/1500 CPUs.
Additional information on using the S7-1200/1500 F-CPUs in safety mode is available in the programming and operating manual "SIMATIC Safety - Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126)".
Additional information on using the S7-1200 F-CPUs in standard mode is available in the "S7-1200 Programmable controller (https://support.industry.siemens.com/cs/ww/en/view/109478121)" system manual.
Additional information on using the S7-1500 F-CPUs in standard mode is available in the relevant manuals for the S7-1500 and the standard-T-CPUs S7-1500 at the following links:
CPUs 151x (http://support.automation.siemens.com/WW/view/en/67295862/133300)
CPUs 151xT (https://support.industry.siemens.com/cs/ww/en/ps/22057/man)
CPUs 151xSP (http://support.automation.siemens.com/WW/view/en/90466439/133300)
CPU 151xpro-2 PN (https://support.industry.siemens.com/cs/ww/en/ps/13906/man)
S7-1500 Software Controller (http://support.automation.siemens.com/WW/view/en/109740725)
You can find the latest firmware for the relevant F-CPU by searching for downloads with the respective article number in the Industry Online Support (https://support.industry.siemens.com).
Note Observe any application-specific requirements, for example on mains buffering for power supplies/power packs.
PFDavg and PFH values for F-CPUs
Below are the probability of failure on demand values (PFDavg, PFH values) for the above-named F-CPUs with a mission time of 20 years and an MTTR of 100 hours:
Low demand mode
low demand mode
According to IEC 61508:2010:
PFDavg = Average probability of dangerous failure on demand
High demand or continuous mode high demand/continuous mode According to IEC 61508:2010: PFH = Average frequency of a dangerous failure [h-1]
< 2E-05
< 1E-09
Overview of the work memory of F-CPUs compared with standard CPUs
CPU
Work memory
F-CPU
CPU 1212C DC/DC/DC CPU 1212C DC/DC/Rly CPU 1214C DC/DC/DC CPU 1214C DC/DC/Rly CPU 1215C DC/DC/DC CPU 1215C DC/DC/Rly CPU 1511-1 PN CPU 1511T-1 PN CPU 1513-1 PN CPU 1515-1 PN CPU 1515T-1 PN CPU 1516-3 PN/DP
75 KB
100 KB
125 KB
150 KB 225 KB 300 KB 500 KB 750 KB 1 MB
CPU 1212FC DC/DC/DC CPU 1212FC DC/DC/Rly CPU 1214FC DC/DC/DC CPU 1214FC DC/DC/Rly CPU 1215FC DC/DC/DC CPU 1215FC DC/DC/Rly CPU 1511F-1 PN CPU 1511TF-1 PN CPU 1513F-1 PN CPU 1515F-1 PN CPU 1515TF-1 PN CPU 1516F-3 PN/DP
Work memory 100 KB
125 KB
150 KB
225 KB 225 KB 450 KB 750 KB 750 KB 1.5 MB
F-CPUs
A5E35635424-AH, 11/2019
9
CPU CPU 1516T-3 PN/DP CPU 1517-3 PN/DP CPU 1517T-3 PN/DP CPU 1518-4 PN/DP (MFP/ODK) CPU 1510SP-1 PN CPU 1512SP-1 PN CPU 1513pro-2 PN CPU 1516pro-2 PN CPU 1505SP (T) CPU 1507S CPU 1508S
Work memory 1.5 MB 2 MB 3 MB 4 MB
100 KB 200 KB 300 KB 1 MB 1 MB 5 MB 10 MB
F-CPU CPU 1516TF-3 PN/DP CPU 1517F-3 PN/DP CPU 1517TF-3 PN/DP CPU 1518F-4 PN/DP (MFP/ODK) CPU 1510SP F-1 PN CPU 1512SP F-1 PN CPU 1513proF-2 PN CPU 1516proF-2 PN CPU 1505SP (T)F CPU 1507S F CPU 1508S F
Work memory 1.5 MB 3 MB 3 MB 6 MB
150 KB 300 KB 450 KB 1.5 MB 1.5 MB 7.5 MB 12.5 MB
Support of PROFIsafe V2 Interfaces that support PROFINET IO also support PROFIsafe V2.
Restriction with "CREAT_DB" and "DELETE_DB" instructions F-DBs can neither be created nor deleted.
Restriction with "READ_DBL" and "WRIT_DBL" instructions The destination address must not point to an F-DB.
Restrictions when configuring the retentive behavior of data blocks
The configuration of the retentive behavior of data blocks is not supported for F-DBs. This means that the actual values of the F-DBs will not be retentive in the event of Power OFF/ON and Restart (STOP-RUN) of the F-CPU. The F-DBs retain the initial values from the load memory.
The "Retain" check box is grayed-out for all tags in F-DBs.
Configuration control (option handling) on an S7-1200 F-CPU
Configuration control (option handling) on an S7-1200 F-CPU is possible with central modules subject to the following limitation:
The fail-safe S7-1200 modules cannot be swapped and must also always be physically inserted into their configured slot.
Position the fail-safe S7-1200 modules directly next to the F-CPU. Position the standard modules on the right next to the failsafe S7-1200 modules.
Procedure for loading a configuration for firmware < V2.0 for S7-1500 F-CPUs
If you have loaded an S7-1500 F-CPU with a configuration for firmware as of V2.0 with configured protection level "Full access incl. fail-safe (no protection)" and you now want to load a configuration for firmware <= V1.8 to this F-CPU, you must observe the following:
When the configuration with firmware <= V1.8 is loaded to the F-CPU, you will be prompted to enter the password and the entered password will be identified as invalid.
As a remedy, format the SIMATIC Memory Card as described in the online help for STEP 7 under "Formatting an S7-1500 memory card". You can then load the configuration for firmware <= V1.8 to the F-CPU.
Use of isochronous mode interrupt (F-)OBs
The number of isochronous mode interrupt (F-)OBs depends on the F-CPU used. You can obtain information in the technical specification of the CPU.
If the sum of the isochronous mode interrupt OBs and the isochronous mode interrupt F-OBs exceeds the number specified in the technical specifications of the CPU, it is no longer possible to load the standard user program in RUN.
F-CPUs
10
A5E35635424-AH, 11/2019
Requirements for power supplies in the event of voltage interruption
Note To ensure adherence to IEC 61131-2 and NAMUR Recommendation NE 21, only use power packs/power supply units (230 V AC 24 V DC) with a mains buffering time of at least 20 ms. Observe the relevant requirement in your product standards (e.g. 30 ms for "burners" pursuant to EN 298) as regards possible voltage interruptions. The latest up-to-date information on PS components is available on the Internet (https://mall.industry.siemens.com). These requirements, of course, also apply to power packs/power supply units not constructed using ET 200SP or S7-300-/400-/1500 technology.
Display (for S7-1500 F-CPUs with display or panel) S7-1500 F-CPUs with display show you the following in the "Overview" menu under "Fail-safe": Safety mode activated/deactivated Collective F-signature Last fail-safe change Version of STEP 7 Safety with which the safety program was compiled. Information on the F-runtime groups
Name of F-runtime group F-runtime groups signature Current cycle time Max. cycle time Current runtime Max. runtime The following is displayed for each F-I/O under "Fail-safe parameters": F-parameter signature (with addresses) Safety mode F-monitoring time F-source address F-destination address The following additional menu command is displayed in the "Settings" menu under "Protection": Enable/disable F-password Write access to F-blocks is not permitted.
Note Controlling fail-safe inputs/outputs can result set the F-CPU to STOP.
Note With the display firmware V2.5, the display is not refreshed and cannot be operated for a few minutes after loading program changes. Afterwards, the display restarts.
F-CPUs
A5E35635424-AH, 11/2019
11
Web server S7-1200/1500 F-CPUs show you the following on the start page of the Web server: Safety mode activated/deactivated Collective F-signature Last fail-safe change Version of STEP 7 Safety with which the safety program was compiled. Information on the F-runtime groups
Name of F-runtime group F-runtime groups signature Current cycle time Max. cycle time Current runtime Max. runtime The following is displayed for each F-I/O on the "Module Information" web page in the "Fail-safe" tab: F-parameter signature (with addresses) Safety mode F-monitoring time F-source address F-destination address Write access to F-blocks is not permitted.
Note Controlling fail-safe inputs/outputs can result set the F-CPU to STOP.
F-CPUs
12
A5E35635424-AH, 11/2019
The following points relate to the S7-1500 F-Software Controller
The S7-1500 F-Software Controller is a fail-safe software CPU that is used on the following devices.
S7-1500 F-Software Controller CPU 1505SP (T)F CPU 1507S F
CPU 1508S F
Device
· CPU 1515SP PC(2)
· IPC 2x7E* · IPC 4x7D* · IPC 4x7E* · IPC 627D** · IPC 677D** · IPC 827D** · IPC 4x7E* · IPC 627D** · IPC 677D** · IPC 827D**
* Can only be used when NVRAM is present (to be automatically allocated) ** Can only be used with PROFIBUS or PROFINET interface and when NVRAM is present (to be automatically allocated)
The devices specified in the table above react in a fail-safe manner when the S7-1500 F-Software Controller and STEP 7 Safety are used, even in the case of elevated electromagnetic interference. Special type tests for functional safety are therefore not required for these devices in contrast to F-I/O. With regard to availability, however, you must observe the
application-specific requirements, especially the standards for burner control.
The yellow adhesive label with the TÜV SÜD test mark for functional safety included in the scope of delivery is exclusively intended for use in connection with S7-1500 F-Software Controllers (not included in the download version of the product package). You can use the adhesive label to mark the hardware on which the S7-1500 F-Software Controller is installed. You must remove the adhesive label when you uninstall the S7-1500 F-Software Controller.
Backup and restore
Backup and restoration of project data is not supported.
Passwords for protection levels
The PC station does not distinguish between the two passwords of protection levels "Full access incl. fail-safe (no protection)" and "Full access (no protection)". The S7-1500 F-Software Controller distinguishes between the two passwords of protection levels "Full access incl. fail-safe (no protection)" and "Full access (no protection)".
ENDIS_PW instruction
When the ENDIS_PW instruction is used on an IPC, you can be locked out of your system because an IPC has no mode selector. As a remedy, you can follow a procedure similar to that described in the online help for the ENDIS_PW instruction under "Preventing unintentional lockout of an S7-1200 CPU".
The following applies for PC stations up to and including V2.0: If an unintentional lockout occurs, you can remedy this only by uninstalling and installing the S7-1500 F-Software Controller.
The following applies for PC stations as of V2.1: Members of the Windows "Failsafe Operators" user group can bypass the lockout using the "Delete Configuration" function.
Note The Windows user "Everyone" is not taken into consideration if it is in the "Failsafe Operators" Windows user group.
TPM functionality The TPM functionality cannot be used for S7-1500 F-Software Controllers because it could result in a STOP. Using EWF or UWF and the EWF or UWF Manager You cannot select EWF or UWF and the EWF or UWF Manager for the CPU volume.
F-CPUs
A5E35635424-AH, 11/2019
13
Other particularities
WARNING You must limit access for the S7-1500 F-Software Controller through access protection to persons who are authorized to install or uninstall the software of the S7-1500 F-Software Controller.
Note With an S7-1500 F-Software Controller with a PC station up to and including V2.1, the "Delete Configuration" function is only offered on the PC-station panel when no access protection (no protection) is set up on the F-CPU. With a PC station as of V2.2, it is checked whether the Windows user is a member of the "Failsafe Operators" Windows user group. If the logged-on Windows user is a member of the group, they can execute the "Delete Configuration" function even when the F-password is set. If the logged-on Windows user is not a member of the group, the PC station behaves as up to V2.1.
Note If the S7-1500 F-Software Controller features an access protection, this is not deleted with "Delete Configuration" and is retained.
Note Required BIOS version for CPU 1505SP F prior to V2.5 For use of the CPU 1505SP F, you require BIOS version V2.00_02.01 or higher.
Note The CPU clock must not be changed in RUN because this would result in a STOP. You can prevent this by disabling the energy-saving function.
Note Assignment of PROFIsafe addresses for F-modules via PROFIBUS on IPCs with S7-1500 F Software Controller prior to V2.5 If you want to assign PROFIsafe addresses for F-modules that are being operated via PROFIBUS on an IPC with an S7-1500 F-Software Controller, assign the PROFIsafe addresses to the F-modules and then perform a power on/power off of the PROFIBUS station.
Note Loading the safety program or activating safety mode for S7-1500 F Software Controller prior to V2.5 After loading the safety program or activating safety mode, close the panel and then open it again to update the display on the panel.
Note If you execute an update for a S7-1500 F Software Controller with V2.0 to a version > 2.0, the value "Last fail-safe change" is set to the time of installation if a safety program is already installed on the S7-1500 F-Software Controller.
Note The "Configuration file export" functionality requires the STEP 7 Safety add-on package as of V15 and an S7-1500 F Software Controller prior to V2.5 with Windows.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
F-CPUs
1A54E35635424-AH, 11/2019
F-CPUs A5E35635424-AH, 11/2019
SIMATIC Drive Controller
SIMATIC SIMATIC Drive Controller
Equipment Manual
Preface
SIMATIC Drive Controller Documentation Guide
1
Product overview
2
Connecting
3
Interrupts, diagnostics
alarms, error messages and
4
system alarms
Technical specifications
5
Dimension drawing
A
11/2019
A5E46600370-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E46600370-AA 11/2019 Subject to change
Copyright © Siemens AG 2019. All rights reserved
Preface
Purpose of the documentation
This equipment manual supplements the system manual of the SIMATIC Drive Controller family of controllers. It contains a concise description of the SIMATIC Drive Controller hardware and, in addition to the product overview, includes information on:
Interfaces
Wiring diagrams
Display and operator controls
Technical specifications
In the SIMATIC Drive Controller system manual, you will find information on configuring, installing, wiring and commissioning the SIMATIC Drive Controller, among other things.
All cross-system functions, such as motion control and communication functions, are described in the function manuals.
The information provided in this manual and the system manual enables you to commission the SIMATIC Drive Controller.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)". Also take note of information labeled as follows:
Note
A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
3
Preface
Special information
Note Important note for maintaining the operational safety of your system Systems with safety-oriented variants are subject to special operational safety requirements on the part of the operator. The supplier is also obliged to comply with special product monitoring measures. For this reason, we inform you in personal notifications about product developments and features that are (or could be) relevant to the operation of systems from a safety perspective. By subscribing to the corresponding notifications, you will ensure that you are always up-todate and able to make changes to your system when necessary. Log in to Industry Online Support. Follow the links below, and right-click on "email on update": SIMATIC S7-1500/SIMATIC S7-1500F (https://support.industry.siemens.com/cs/ww/en/ps/13716) Distributed I/O (https://support.industry.siemens.com/cs/ww/en/ps/14029) STEP 7 (TIA Portal) (https://support.industry.siemens.com/cs/ww/en/ps/14667) SINAMICS S120 (https://support.industry.siemens.com/cs/ww/en/ps/13231) SINAMICS Startdrive (https://support.industry.siemens.com/cs/ww/en/ps/13438) Operator control and monitoring systems (https://support.industry.siemens.com/cs/ww/en/ps/14729) Industrial Communication (https://support.industry.siemens.com/cs/ww/en/ps/15247) Safety systems Safety Integrated (https://support.industry.siemens.com/cs/ww/en/ps/19902)
Note When using F-CPUs in safety mode and fail-safe modules, observe the description of the Fsystem in SIMATIC Safety - Configuring and Programming (https://support.industry.siemens.com/cs/ww/en/view/54110126).
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
SIMATIC Drive Controller
4
Equipment Manual, 11/2019, A5E46600370-AA
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
5
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com) and in the Information and Download Center (https://www.siemens.com/automation/infocenter).
SIMATIC Drive Controller
6
Equipment Manual, 11/2019, A5E46600370-AA
Table of contents
Preface ................................................................................................................................................... 3
1 SIMATIC Drive Controller Documentation Guide ..................................................................................... 9
2 Product overview .................................................................................................................................. 11
2.1 2.1.1
Application range ....................................................................................................................11 SIMATIC Drive Controller .......................................................................................................11
2.2
Components and functionality ................................................................................................16
2.3
Hardware properties ...............................................................................................................20
2.4
Firmware functions of the CPU...............................................................................................24
2.5
Firmware functions of SINAMICS Integrated..........................................................................30
2.6 2.6.1 2.6.2 2.6.3 2.6.4 2.6.5 2.6.6
Operator controls, displays and connection elements............................................................32 View of SIMATIC Drive Controller with front covers ...............................................................32 View of SIMATIC Drive Controller without front covers ..........................................................33 Top view of SIMATIC Drive Controller....................................................................................34 View of the SIMATIC Drive Controller from below..................................................................35 Front covers ............................................................................................................................36 Nameplates .............................................................................................................................38
2.7
Mode selector .........................................................................................................................41
2.8
FUNCT button.........................................................................................................................42
3 Connecting ........................................................................................................................................... 43
3.1
Supply voltage X124 ...............................................................................................................43
3.2
PROFINET X150, X160 and X130 .........................................................................................46
3.3
PROFIBUS X126 ....................................................................................................................49
3.4
Digital inputs and outputs of X122, X132 and X142 ...............................................................50
3.5
DRIVE-CLiQ interfaces X100 to X103 ....................................................................................56
3.6 3.6.1 3.6.2 3.6.3
Wiring and block diagrams .....................................................................................................57 SIMATIC Drive Controller block diagram................................................................................57 Onboard digital inputs/digital outputs of X122, X132 and X142 .............................................58 DRIVE-CLiQ interfaces X100 to X103 ....................................................................................59
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
7
Table of contents
4 Interrupts, diagnostics alarms, error messages and system alarms ....................................................... 61
4.1 4.1.1 4.1.2 4.1.3 4.1.4 4.1.5
Status and error displays ....................................................................................................... 61 Overview ................................................................................................................................ 61 Status and error display of the CPU ...................................................................................... 63 Status and error display of SINAMICS Integrated ................................................................. 65 ACT LED and interface LEDs ................................................................................................ 66 7-segment display .................................................................................................................. 68
4.2 4.2.1
Interrupts, diagnostics and system messages ....................................................................... 69 Interrupts, diagnostics and system messages ....................................................................... 69
5 Technical specifications ........................................................................................................................ 70
A Dimension drawing ............................................................................................................................... 88
SIMATIC Drive Controller
8
Equipment Manual, 11/2019, A5E46600370-AA
SIMATIC Drive Controller Documentation Guide
1
The documentation for the SIMATIC Drive Controller is divided into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC Drive Controller. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, interfaces, wiring diagrams, display and operator control elements and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC Drive Controller and SIMATIC S7-1500 automation system, such as diagnostics, communication, Motion Control, Web server and OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
9
SIMATIC Drive Controller Documentation Guide
S7-1500/ET 200MP Manual Collection
The S7-1500/ET 200MP Manual Collection contains the complete documentation on the SIMATIC Drive Controller gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SINAMICS documentation
The SINAMICS documentation contains detailed descriptions of the SINAMICS S120 automatic speed control and SINAMICS S210 servo drive systems. You can find the documentation by entering the manual title in the search box on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/13229/man).
The SINAMICS Technical Documentation (https://support.industry.siemens.com/cs/ww/en/view/108993276) web page provides information on the topics:
Ordering documentation/documentation overview
Additional links for downloading documents
Using documentation online (find and browse manual/information)
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
SIMATIC Drive Controller
10
Equipment Manual, 11/2019, A5E46600370-AA
Product overview
2
2.1
Application range
2.1.1
SIMATIC Drive Controller
Overview
The SIMATIC Drive Controller is a drive-based controller in the SIMATIC S7-1500 range.
A SIMATIC Drive Controller combines the following functionalities in a SINAMICS S120 Booksize Compact enclosure:
Fail-safe SIMATIC S7-1500 technology CPU with integrated technology I/Os
SINAMICS S120 drive control
The two components are referred to as "CPU" and "SINAMICS Integrated" in this documentation.
The integrated SINAMICS S120 drive control is based on a CU320-2 Control Unit. It can control
a maximum of 6 servo drives,
a maximum of 6 drives with vector control, or
a maximum of 12 drives with U/f control
Fail-safe technology CPUs are available in two performance classes. Safety Integrated on the CPU side and drive side allows use in fail-safe applications.
The SIMATIC Drive Controller supports PROFINET and PROFIBUS DP communication.
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
11
Product overview 2.1 Application range
Properties
Important properties of the SIMATIC Drive Controller: Fail-safe technology CPU including drive control with safety functions integrated in the
drive Extremely compact because the CPU is integrated in the drive system without taking up
any additional space One memory card for CPU and SINAMICS Integrated
Easy handling Less cabling and installation effort thanks to SINAMICS Integrated Easy configuring in the hardware configuration of STEP 7 Central data management with one memory card for CPU and SINAMICS Integrated Central license handling in the TIA Portal Easy and efficient commissioning and optimization of drives using the SINAMICS
Startdrive engineering tool in the TIA Portal Optimization function for determining the optimal precontrol and gain (Kv factor) for the
closed loop position control of the axis
Optimized for production machinery Performance classes and memory size optimized for production machinery Wide range of interfaces, consistent across performance range Technology I/Os onboard
12 digital inputs and 16 user-configurable digital inputs/outputs Up to 8 outputs configurable as high-speed outputs for ultra-short output delays and
maximum switching precision, e.g. can be configured for output cam applications. Up to 16 inputs configurable as measurement sensing inputs for position detection Additional technology functions such as oversampling and event/period duration
measurement
SIMATIC Drive Controller
12
Equipment Manual, 11/2019, A5E46600370-AA
Product overview 2.1 Application range
Areas of application SIMATIC Drive Controllers are used, for example, in applications in which the SINAMICS S120 drive family is being used because of the need for: A highly dynamic, flexible multi-axis drive system:
Broad performance range Comprehensive range of motors (including linear drives, external drives, etc.) Comprehensive control modes (servo, vector, U/f) Technology extensions Controlled infeed/regenerative feedback For prevention of undesired harmonics For a high level of robustness against line fluctuations For energy recovery in braking mode
SIMATIC Drive Controllers are also used where there is a need for: Safety solutions for machine and operator protection A compact, space-saving design High performance for motion control and high-speed I/O Modular machine concepts with fast isochronous mode
Typical areas of application are: Multi-axis machines (e.g. printing and paper machines) High-performance applications with short machine cycles (e.g. packaging machines and
handling applications) Compact machines in which there is limited room for the controller and drive system (e.g.
control cabinets in the machine base) Distributed control and drive concepts Synchronization of multiple SIMATIC Drive Controller s using cross-PLC synchronous
operation
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
13
Product overview 2.1 Application range
SIMATIC Drive Controller performance classes
The SIMATIC Drive Controller contains a failsafe CPU from the SIMATIC S7-1500 family and a SINAMICS S120 drive control. Two performance classes are available.
Table 2- 1 Overview of performance classes
Performance class Low to mid-range applications High-performance applications
SIMATIC Drive Controller CPU 1504D TF CPU 1507D TF
Article number 6ES7615-4DF10-0AB0 6ES7615-7DF10-0AB0
Performance characteristics of the CPUs
The SIMATIC Drive Controller sdiffer in terms of the integrated CPU. The CPUs can be used for lower and mid-range applications all the way to the high-end range of machine and plant automation. The following table shows key performance characteristics of the SIMATIC Drive Controllers.
Table 2- 2 Overview of SIMATIC Drive Controller performance characteristics
Performance characteristic Data work memory, max. Code work memory, max. Retentive data area (including timers, counters, bit memory) Load memory/mass storage, max.
I/O address area, max. Integrated interfaces
SINAMICS Integrated Integrated inputs and outputs (onboard I/O) Configuration control CPU web server Isochronous mode3)
1504D TF 4 MB 2 MB 768 KB
32 GB (with SIMATIC memory card) 32/32 KB 1 x PROFINET IO IRT (3-port switch) 1 x PROFINET IO RT 1 x PROFINET basic services (1000 Mbps) 1 x PROFIBUS DP 2 x USB 3.01) 4 x DRIVE-CLiQ On basis of CU320-2 CPU: 8 DI/DQ SINAMICS Integrated: 12 DI, 8 DI/DQ X X PROFINET IO with IRT (X150) PROFIBUS DP (X126) SINAMICS Integrated Technology I/Os (X142)
1507D TF 20 MB 6 MB 768 KB
32 GB (with SIMATIC memory card) 32/32 KB 1 x PROFINET IO IRT (3-port switch) 1 x PROFINET IO RT 1 x PROFINET basic services (1000 Mbps) 1 x PROFIBUS DP 2 x USB 3.01) 4 x DRIVE-CLiQ On basis of CU320-2 CPU: 8 DI/DQ SINAMICS Integrated: 12 DI, 8 DI/DQ X X PROFINET IO with IRT (X150) PROFIBUS DP (X126) SINAMICS Integrated Technology I/Os (X142)
SIMATIC Drive Controller
14
Equipment Manual, 11/2019, A5E46600370-AA
Product overview 2.1 Application range
Performance characteristic Technology Integrated
1504D TF
1507D TF
CPU:
CPU:
· Motion control
· Motion control
· PID control Onboard I/O:
· PID control Onboard I/O:
· Event/period duration measurement · Event/period duration measurement
· Pulse width modulation (PWM)
· Pulse width modulation (PWM)
· Timer DI/DQ
· Timer DI/DQ
· Oversampling DI/DQ
· Oversampling DI/DQ
Number of positioning axes
Motion control resources4) Extended motion control resources4) Security Integrated Integrated system diagnostics Integrated safety functionality Degree of protection
Typical2): 10 Maximum: 30 2400 120 X X X IP 20
Typical2): 55 Maximum: 160 12 800 420 X X X IP 20
1) No assigned function
2) With 4 ms servo/IPO cycle and 35% CPU load from motion control
3) Besides the MC-Servo, only PROFINET interface X150 can also be operated isochronously with the clock pulse system of SINAMICS Integrated and the X142 technology I/Os. Isochronous coupling of PROFIBUS interface X126 with other clock systems is not possible. Additional drive systems must therefore be connected via the PROFINET interface.
4) For information on the resources used by technology objects, see the S7-1500 Motion Control function manuals. (https://support.industry.siemens.com/cs/ww/en/view/109751049)
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
15
Product overview 2.2 Components and functionality
2.2
Components and functionality
Components of a SIMATIC Drive Controller system
A drive-based solution with the SIMATIC Drive Controller is made up of the following components:
Power supply for SIMATIC Drive Controller and DRIVE-CLiQ components
SIMATIC Drive Controller with fail-safe SIMATIC S7-1500 technology CPU and an integrated SINAMICS S120 drive control (based on CU320-2)
SINAMICS S120 power units:
Line Modules
Motor Modules
Sensor Modules (SMx)
Terminal Modules (TM)
Motors with/without DRIVE-CLiQ
You can expand the drive configuration limits of a SIMATIC Drive Controller by connecting additional drive systems using PROFINET IO with IRT, e.g. SINAMICS S120 CU320-2 for control of multiple axes or the SINAMICS S210 single-axis servo converter system.
Note
The PROFIBUS interface cannot be coupled with other clock pulse systems. If you expand the drive configuration limits with distributed drive systems, those systems must be connected via PROFINET IO interface X150. Besides the MC-Servo, only PROFINET interface X150 can also be coupled isochronously with the clock pulse system of SINAMICS Integrated and the X142 technology I/Os.
SIMATIC Drive Controller
16
Equipment Manual, 11/2019, A5E46600370-AA
Configuration example
Product overview 2.2 Components and functionality
HMI device SIMATIC Drive Controller Line Module SINAMICS S120 Double Motor Module SINAMICS S120 Single Motor Module SIMOTICS S servo motor SINAMICS Terminal Module SINAMICS Sensor Module SMC SINAMICS S120 with CU320-2 for control of multiple axes SINAMICS S210 single-axis servo converter system ET 200SP I/O
Figure 2-1 Example: SIMATIC Drive Controller as a component in a system
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
17
Product overview 2.2 Components and functionality
Functionality
The SIMATIC Drive Controller combines the functionality of a SIMATIC S7-1500 TF-CPU and a SINAMICS S120 drive control based on CU320-2 in one compact device.
SIMATIC Drive Controllers are suitable for simple as well as complex motion control applications, including fail-safe applications when needed.
You can link and extend the SIMATIC Drive Controller , for example, with HMI and I/O systems using the wide range of communication interfaces. The drive control integrated in the SIMATIC Drive Controller (SINAMICS Integrated) supports the following control modes:
Vector control
Servo control
U/f control
Vector control is recommended for drive solutions with continuous material webs, such as wire-drawing, film and paper machines. Servo control is suitable for clocked processes with precise yet highly dynamic position control with servo motors.
You interconnect all components of SINAMICS S120, including the motors and encoders, using DRIVE-CLiQ. You connect motors without a DRIVE-CLiQ interface, e.g. external motors or motors for retrofit applications, using Sensor Modules Cabinet-Mounted (SMC) or Sensor Modules External (SME).
Line Modules feed the power to the DC link. Optionally, Line Modules with controlled infeed/regenerative feedback ensure a constant DC-link voltage and high grid compatibility.
Motor Modules supply the motors with power from the DC link.
Terminal Modules are terminal extensions via DRIVE-CLiQ for example, for drive-oriented digital or analog inputs/outputs.
Note
SINAMICS Integrated has a functional subset compared with a SINAMICS S120 CU320-2 and supports only the functions relevant in the control context. For example, SINAMICS Integrated does not support the following: · Drive Control Chart (DCC) · Basic positioner (EPOS) · Free function blocks (FBLOCKS) · Drive control blocks (DCB)
You can find additional information in the SIMATIC Drive Controller system manual (https://support.industry.siemens.com/cs/ww/en/view/109766665).
SIMATIC Drive Controller
18
Equipment Manual, 11/2019, A5E46600370-AA
Product overview 2.2 Components and functionality
Further information
You can find a description of the Control Units, power units and supplementary system components of SINAMICS S120 in the following manuals: SINAMICS S120 Control Units and Additional System Components
(https://support.industry.siemens.com/cs/ww/en/view/109763286) SINAMICS S120 Booksize Power Units
(https://support.industry.siemens.com/cs/en/en/view/109766188) SINAMICS S120 Booksize C/D-type Power Units
(https://support.industry.siemens.com/cs/ww/en/view/109763283) SINAMICS S120 AC Drive
(https://support.industry.siemens.com/cs/ww/en/view/109757057)
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
19
Product overview 2.3 Hardware properties
2.3
Hardware properties
Article numbers
SIMATIC Drive Controller with CPU 1504D TF: 6ES7615-4DF10-0AB0 SIMATIC Drive Controller with CPU 1507D TF: 6ES7615-7DF10-0AB0
Front and side views
The figure below shows the front view and side view of a SIMATIC Drive Controller.
Holding clamp of shield support Top cover Side nameplate Spacer Bottom cover
Figure 2-2 SIMATIC Drive Controller front view and side view
SIMATIC Drive Controller
20
Equipment Manual, 11/2019, A5E46600370-AA
Top view
Product overview 2.3 Hardware properties
The figure below shows the top view of a SIMATIC Drive Controller.
Spacer Ventilation slots DRIVE-CLiQ interfaces Holding clamp of shield support Release for top cover
Figure 2-3 SIMATIC Drive Controller top view
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
21
Product overview 2.3 Hardware properties
Properties
The SIMATIC Drive Controllers have the following properties:
Table 2- 3 Hardware properties
Properties Supply voltage (X124)
Description
The 24 V DC supply voltage for the SIMATIC Drive Controller is fed via a 4-pin cable connector located on the front of the SIMATIC Drive Controller.
Additional information
· Section Connecting (Page 43)
· SIMATIC Drive Controller system manual (https://support.industry.siem ens.com/cs/ww/en/view/1097 66665)
PROFINET IO
PROFINET interface (X150 P1R, X150 P2R, X150 P3)
The interface has three ports. In addition to basic
· Section Connecting
PROFINET functionality, it also supports PROFINET
(Page 43)
IO RT (Real-Time) and IRT (Isochronous Real-Time).
The interface can be operated isochronously with the · PROFINET function manual
clock pulse system of SINAMICS Integrated and the
(https://support.industry.siem
X142 technology I/Os.
ens.com/cs/ww/en/view/4994
PROFINET interface (X160 P1) The interface has one port. In addition to basic
8856)
PROFINET functionality, it also supports PROFINET
IO RT (Real-Time).
PROFINET interface (X130 P1) The interface has one port. It supports basic PROFINET functionality.
Operation of the CPU as · IO controller · I-device
· IO controller: As an IO controller the CPU controls the connected IO devices
· I-device: As an I-device (intelligent IO device) the CPU is assigned to a higher-level IO controller and is thereby used as an intelligent pre-processing unit of sub-processes
PROFIBUS DP PROFIBUS interface (X126)
Operation of the CPU as a DP master Isochronous mode
Additional interfaces USB 3.0 (X125, X135) DRIVE-CLiQ interfaces (X100 to X103)
The interface is used for connecting to a PROFIBUS network.
As a DP master, the CPU addresses the connected DP slaves. The CPU cannot be a DP slave.
The PROFIBUS interface can be operated isochronously. However, isochronous coupling with the clock pulse system of SINAMICS Integrated and the X142 technology I/Os is not possible.
Section Connecting (Page 43)
PROFIBUS function manual (https://support.industry.siemens .com/cs/ww/en/view/59193579)
No function assigned at present
The SIMATIC Drive Controller has four DRIVE-CLiQ interfaces. For each DRIVE-CLiQ interface, you have 24 V/450 mA available for connecting encoders and measuring systems.
Section Connecting (Page 43)
SIMATIC Drive Controller
22
Equipment Manual, 11/2019, A5E46600370-AA
Product overview 2.3 Hardware properties
Properties Integrated inputs and outputs 12 DI (X122, X132)
8 DI/DQ (X122, X132)
8 DI/8 DQ (X142)
Description
Additional information
The digital inputs are assigned to SINAMICS Integrated . You use the digital inputs, for example, for the control of Safety Integrated basic functions via a terminal.
Section Connecting (Page 43)
Alternatively, you assign the digital inputs to the CPU, by means of configuration with telegram 39x.
The bidirectional digital inputs/outputs are assigned to SINAMICS Integrated . You use the digital inputs/outputs, for example, as measuring inputs via a PROFIdrive telegram.
Alternatively, you assign the digital inputs/outputs to the CPU, by means of configuration with telegram 39x.
The bidirectional digital inputs/outputs are assigned to the CPU. You configure each of the digital inputs/outputs according to your task:
· as a digital input or a digital output
· as a timer input, e.g. for measurement sensing inputs
· as a timer output, e.g. for output cam applications
· as an oversampling input or an oversampling output
· for event/period duration measurement
· for pulse width modulation (PWM)
· as a high-speed output
Accessories/spare parts
The following accessories are included in the scope of delivery of the SIMATIC Drive Controller and can also be ordered as spare parts:
Table 2- 4 Spare parts
Article Bottom cover Top cover Spacer Terminal kit · 3 x I/O connector for X122/X132/X142 · 1 x 24 V connector for X124 · 5 x DRIVE-CLiQ blanking cover
Article number 6ES7615-0AC10-0AA0 6ES7615-0AC10-1AA0 6SL3064-1BB00-0AA0 6SL3064-2CB00-0AA0
You can find additional information on accessories in the SIMATIC Drive Controller system manual (https://support.industry.siemens.com/cs/ww/en/view/109766665).
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
23
Product overview 2.4 Firmware functions of the CPU
2.4
Firmware functions of the CPU
The SIMATIC S7-1500 CPU of the SIMATIC Drive Controller supports the following functions:
Functions
Function Safety Integrated
Integrated system diagnostics Integrated web server
Integrated trace functionality
Description
Additional information
The integrated F-CPU of the SIMATIC Drive Controller processes standard and safety programs on a single component. This allows fail-safe data to be evaluated in the standard user program. As a result of the integration, the system advantages and the extensive functionality of SIMATIC are also available for fail-safe applications.
The F-CPU is certified for use in safety mode up to:
· Safety class (Safety Integrity Level) SIL 3 according to IEC 61508:2010
· Performance Level (PL) e and Category 4 according to ISO 13849-1:2006 or according to EN ISO 13849-1:2008
SIMATIC Safety - Configuring and Programming programming and operating manual (https://support.industry.sie mens.com/cs/ww/en/view/5 4110126)
Section Firmware functions of SINAMICS Integrated (Page 30)
An additional password protection for the F-configuration and safety program is set up for IT security.
Besides the F-CPU, SINAMICS Integrated also has integrated safety functions.
The system automatically creates alarms for the system diagnostics and outputs the alarms via a PG/PC, HMI device or web server. System diagnostics information is also available when the CPU is in STOP mode.
Diagnostics function manual (https://support.industry.sie mens.com/cs/ww/en/view/5 9192926)
The web server lets you access the CPU data over a network.
· Web Server function
Evaluations, diagnostics, and modifications are thus possible over
manual
long distances. Monitoring and evaluation is possible without STEP 7; all you need is a Web browser. Make sure that you take appropriate measures (e.g. limiting network access, using firewalls) to protect the CPU from being compromised.
(https://support.industry. siemens.com/cs/ww/en/vie w/59193560)
· Security with SIMATIC S7 Controller system manual (https://support.industry. siemens.com/cs/ww/en/vie w/90885010)
Trace functionality supports you in troubleshooting and/or optimizing the user program.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
The device saves the recordings. You can read out and permanently save the recordings with the configuration system (ES), if required. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes.
Using the Trace and Logic Analyzer Function function manual (https://support.industry.sie mens.com/cs/ww/en/view/6 4897128)
SIMATIC Drive Controller
24
Equipment Manual, 11/2019, A5E46600370-AA
Product overview 2.4 Firmware functions of the CPU
Function OPC UA
Configuration control
Description
Additional information
With OPC UA, you can exchange data via an open and manufacturer-neutral communication protocol. The CPU can act as an OPC UA DA server. The CPU acting as the OPC UA server can communicate with OPC UA clients.
The OPC UA Companion Specification allows methods to be specified uniformly and independently of the manufacturer. Using these specified methods, you can easily integrate devices from various manufacturers into your plants and production processes.
Communication function manual (https://support.industry.sie mens.com/cs/ww/en/view/5 9192925)
You can use configuration control to operate different real hardware configurations with a configured maximum configuration of the hardware. This means especially in series machine manufacturing you have the option of operating/configuring different configuration variants of a machine with a single project.
SIMATIC Drive Controller system manual (https://support.industry.sie mens.com/cs/ww/en/view/1 09766665)
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
25
Product overview 2.4 Firmware functions of the CPU
PROFINET IO
Function RT (Real-Time) IRT (Isochronous Real-Time)
Isochronous mode
MRP (Media Redundancy Protocol)
MRPD (Media Redundancy with Planned Duplication)
Shared device
Description
Additional information
RT prioritizes PROFINET IO telegrams over standard telegrams. This ensures the required determinism in the automation technology. In this process the data is transferred via prioritized Ethernet telegrams.
PROFINET function manual (https://support.industry.sie mens.com/cs/ww/en/view/4 9948856)
A reserved bandwidth within the send clock is available for IRT data. The reserved bandwidth ensures that the IRT data can be transmitted in time-synchronized intervals, unaffected by other high network loading (e.g. TCP/IP communication or additional real time communication). Update times with maximum determinism can be realized through IRT. Isochronous applications are possible with IRT.
With isochronous mode, measured values and process data are acquired and processed in a fixed system clock. Isochronous mode thus contributes to high control quality and hence to greater manufacturing precision. Isochronous mode reduces possible fluctuations of the process response times to a minimum. Time-assured processing makes higher machine cycles possible.
With SIMATIC Drive Controller, the clock pulse systems of SINAMICS Integrated, PROFINET (X150) and the technology I/Os (X142) can be coupled together isochronously.
It is possible to establish redundant networks via the Media Redundancy Protocol. Redundant transmission links (ring topology) ensure that an alternative communication path is made available if a transmission link fails. The PROFINET devices that are part of this redundant network form an MRP domain.
RT operation is possible with the use of MRP.
The advantage of the MRP extension MRPD is that, in the event of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports. This eliminates the reconfiguration time of the ring.
The "Shared device" function allows you to divide the modules or submodules of an IO device up among different IO controllers. Numerous IO controllers are often used in larger or widely distributed systems. Without the "Shared device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required. The "Shared device" function allows the modules or submodules of an IO device to be divided up among different IO controllers, thus allowing flexible automation concepts. You can, for example, combine I/O modules that are physically close to each other in one IO device.
SIMATIC Drive Controller
26
Equipment Manual, 11/2019, A5E46600370-AA
Function PROFIenergy
Product overview 2.4 Firmware functions of the CPU
Description
The vendor- and device-neutral profile defined by the PNO allows you to significantly reduce your energy demand and costs. With PROFIenergy you switch off unneeded loads. Thus, energy costs drop noticeably during production breaks. PROFIenergy provides an easy, automated way of switching technologically-related plant parts off and on. Most of the energy savings comes from the process. The PROFINET device itself contributes only a few watts to the savings potential.
Additional information
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
27
Product overview 2.4 Firmware functions of the CPU
Integrated technology
Function
Description
Additional information
Motion control
The CPU of the SIMATIC Drive Controller supports the S7-1500 Motion Control functions via the technology objects speed axes, positioning axes, synchronized axes, external encoders, cams, cam tracks and measuring inputs.
· Speed-controlled axis for controlling a drive with speed specification
S7-1500(T) Motion Control function manuals (https://support.industry.sie mens.com/cs/de/en/view/10 9751049)
· Positioning axis for position-controlled positioning of a drive
· Synchronous axis for interconnecting with a leading value. The axis follows the position of the leading axis in synchronous operation.
· External encoder for detecting the actual position of an encoder and its use as a leading value for synchronous operation
· Cam, cam track for position-dependent generation of switching signals
Extended motion control functions
· Measuring input for fast, accurate and event-dependent sensing of actual positions
You program the technology objects with Motion Control instructions according to PLCopen.
The SIMATIC Drive Controller contains a SIMATIC S7-1500 technology CPU. The technology CPU provides extended motion control functions:
· Extended synchronous operation functions Synchronization with specification of the synchronous position Actual value coupling Offset of leading value on following axis Camming
· Cam
· Up to four encoders or measuring systems as actual position for position control
· Control of kinematics, such as Cartesian portals Roller pickers Delta pickers SCARA
· Cross-PLC synchronous operation: Coupling between leading axis or external encoder and following axis via PROFINET IO with IRT
Integrated closed-loop · PID Compact (continuous PID controller)
control functionality
· PID 3Step (step controller for integrating actuators)
· PID Temp (temperature controller for heating and cooling with two separate actuators)
PID Control function manual (https://support.industry.sie mens.com/cs/ww/en/view/1 08210036)
SIMATIC Drive Controller
28
Equipment Manual, 11/2019, A5E46600370-AA
Product overview 2.4 Firmware functions of the CPU
Integrated safety
Function Know-how protection Copy protection Access protection Integrity protection
Password provider
Description
Additional information
The know-how protection protects user blocks against unauthorized access and modifications.
Copy protection links user blocks to the serial number of the SIMATIC memory card or to the serial number of the SIMATIC Drive Controller. User programs cannot run without the corresponding SIMATIC memory card or SIMATIC Drive Controller.
SIMATIC Drive Controller system manual (https://support.industry.sie mens.com/cs/ww/en/view/1 09766665)
Extended access protection provides high-quality protection against unauthorized configuration changes. You can use authorization levels to assign separate rights to different user groups.
The CPUs dispose of integrity protection by default. Integrity protection identifies possible manipulations of engineering data on the SIMATIC memory card or during data transfer between TIA Portal and CPU.
Integrity protection also checks the communication from a SIMATIC HMI system to the CPU for possible manipulations of engineering data.
If integrity protection identifies the manipulation of engineering data, the user receives a corresponding message.
As an alternative to manual password input you can connect a password provider to STEP 7. A password provider offers the following advantages:
· Convenient handling of passwords.
STEP 7 reads the password automatically for the blocks. This saves you time.
· Optimum block protection because the users themselves do not know the password.
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
29
Product overview 2.5 Firmware functions of SINAMICS Integrated
2.5
Firmware functions of SINAMICS Integrated
The drive control integrated in the SIMATIC Drive Controller is based on the drive control of the SINAMICS S120 Control Unit CU320-2 (firmware version V5.x).
SINAMICS Integrated provides a functional subset of the SINAMICS S120 CU320-2 drive functions that are relevant in the control context. You can find details at the end of the section under "Unsupported functions and components".
The integrated drive control supports the following:
Servo control, for maximum dynamic response
Vector control, for maximum torque accuracy
U/f control
You can expand the drive configuration limits of the SIMATIC Drive Controller using PROFINET IO IRT, for example with SINAMICS S120 Control Unit CU320-2.
Safety functionality of SINAMICS Integrated
SINAMICS Integrated of the SIMATIC Drive Controller supports the same Safety Integrated functions as SINAMICS S120 CU320-2.
Safety Integrated Basic Functions
Safety Integrated Extended Functions
Safety Integrated Advanced Functions
The safety functions correspond to the functions according to EN 61800-5-2 (to the extent they are defined there).
Supported SINAMICS functions requiring a license
SINAMICS Integrated supports only the following licensed functions of a SINAMICS S120 CU320-2:
SINAMICS Safety Integrated Extended Functions
SINAMICS Safety Integrated Advanced Functions
SINAMICS Technology Extension VIBX - Vibration Extinction
SINAMICS Technology Extension RAILCTRL - Rail Control/Multi-Carrier-System
The SINAMICS Technology Extensions VIBX and RAILCTRL are in preparation for the SIMATIC Drive Controller.
PROFIdrive Integrated
Cyclic communication between CPU and SINAMICS Integrated is based on PROFIdrive mechanisms.
The communications services used for this are based on PROFIBUS DP and are processed over an internal, high-performance interface.
SIMATIC Drive Controller
30
Equipment Manual, 11/2019, A5E46600370-AA
Product overview 2.5 Firmware functions of SINAMICS Integrated
Unsupported functions and components
SINAMICS Integrated provides a functional subset of the SINAMICS S120 CU320-2 drive functions that are relevant in the control context. The following functionalities/components are not supported by the SIMATIC Drive Controller: Basic positioner (EPOS) function module Integrated logic processing in the drive with Drive Control Chart (DCC) Drive Control Block (DCB) Free function blocks (FBLOCKS) SINAMICS web server SIMOTION-specific or SINUMERIK-specific DRIVE-CLiQ components (e.g. TM17
Terminal Modules, HLA Hydraulic Drive, CX32-2 Controller Extension, NX10.3/NX15.3 Numeric Control Extensions) Expansion boards, e.g. TB30, CBE20, CBE30-2
Note Use of SINAMICS S120 CU320-2 Control Units Additional CU320-2 Control Units on the SIMATIC Drive Controller have the full range of functions compared with SINAMICS Integrated.
Further information
You can find a detailed description of the functions of SINAMICS S120 CU320-2 in the SINAMICS S120 Drive Functions (https://support.industry.siemens.com/cs/us/en/view/109754299) function manual.
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
31
Product overview 2.6 Operator controls, displays and connection elements
2.6
Operator controls, displays and connection elements
2.6.1
View of SIMATIC Drive Controller with front covers
The following figure shows the front view of the SIMATIC Drive Controllers.
Top cover 3 LEDs for CPU (RUN, ERR, MT) 3 LEDs for SINAMICS Integrated (RDY, COM, third LED has no assigned function) Rings for access security Pushbutton for opening the bottom cover Bottom cover
Figure 2-4 SIMATIC Drive Controller front view
SIMATIC Drive Controller
32
Equipment Manual, 11/2019, A5E46600370-AA
2.6.2
Product overview 2.6 Operator controls, displays and connection elements
View of SIMATIC Drive Controller without front covers
The figure below shows the operator controls and interfaces on the front of the SIMATIC Drive Controller.
X122, X132: 12 DI + 8 DI/DQ (assigned to SINAMICS Integrated) X124: Connection for the 24 V DC supply voltage X126: PROFIBUS DP interface ACT LED: Display for access to SIMATIC memory card FUNCT button for diagnostic purposes, see section FUNCT button (Page 42) Protective conductor connection M5, Torx T25, tightening torque 3 Nm (26.6 lbf in) X142: 8 DI/DQ (assigned to CPU) PROFINET IO IRT (X150), with 3 ports: P1R, P2R, P3 PROFINET IO RT (X160), with 1 port (P1) Basic PROFINET services (X130), with 1 port (P1), 1000 Mbps LED displays 7-segment display, for diagnostic purposes X50: Slot for SIMATIC memory card Mode selector, see section Mode selector (Page 41) X125, X135: 2 × USB 3.0 interface (no function assigned at present)
Figure 2-5 SIMATIC Drive Controller display and operator controls as well as interfaces
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
33
Product overview 2.6 Operator controls, displays and connection elements
2.6.3
Top view of SIMATIC Drive Controller
The figure below shows the top of the SIMATIC Drive Controller with the four DRIVE-CLiQ interfaces X100 to X103.
X100 to X103: 4 × DRIVE-CLiQ interface
Figure 2-6 SIMATIC Drive Controller DRIVE-CLiQ interfaces
SIMATIC Drive Controller
34
Equipment Manual, 11/2019, A5E46600370-AA
2.6.4
Product overview 2.6 Operator controls, displays and connection elements
View of the SIMATIC Drive Controller from below
A DisplayPort interface (X140) is located on the underside of the SIMATIC Drive Controller. This interface is used exclusively for service purposes by Siemens and cannot be used to connect a display.
X140: DisplayPort
Figure 2-7 SIMATIC Drive Controller DisplayPort
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
35
Product overview 2.6 Operator controls, displays and connection elements
2.6.5
Front covers
The interfaces and operator controls on the front are concealed with covers. You must open the covers before you can connect cables to the interfaces or reach the operator controls of the Drive Controller.
Release catch for top cover Top cover Bottom cover Button for releasing the bottom cover Front nameplate with Data Matrix Code Label with MAC addresses and other information
Figure 2-8 SIMATIC Drive Controller front covers
NOTICE Possible damage of electronic components (ESD)
Only touch components, modules and devices when you have grounded yourself with one of the following measures: · Wear an ESD bracelet · Wear ESD shoes or ESD grounding strips in ESD areas with a conducting floor
SIMATIC Drive Controller
36
Equipment Manual, 11/2019, A5E46600370-AA
Product overview 2.6 Operator controls, displays and connection elements
Opening the top cover
To open the top cover, follow these steps:
1. Undo the release catch on the inside of the cover by gently pressing down on it. 2. Fold down the cover .
Note The layout and labeling of the interfaces is shown on the inside of the top cover.
Removing the top cover
To remove the top cover, follow these steps: 1. Open the top cover. 2. Release the cover by applying gentle pressure to the side of the hinge. 3. Swing the cover aside to remove it.
Opening the bottom cover
The operator controls of the SIMATIC Drive Controller and the slot for the SIMATIC memory card are located behind the bottom cover. To open the bottom cover, follow these steps:
1. Press the button to release the cover. 2. Fold down the cover . The MAC addresses of the SIMATIC Drive Controller and information about the device
can be found on the inside of the bottom cover.
Removing the bottom cover
To remove the bottom cover, follow these steps: 1. Open the bottom cover. 2. Release the cover by applying gentle pressure to the side of the hinge. 3. Swing the cover aside to remove it.
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
37
Product overview 2.6 Operator controls, displays and connection elements
2.6.6
Nameplates
The nameplates of the SIMATIC Drive Controller are described below. The contents of the individual nameplate fields of the device may differ from the contents described in this manual (e.g. advanced product version, approvals and markings not yet granted).
Side nameplate
The figure below shows the side nameplate.
Product name DMC (Data Matrix Code) Article number Material number MAC addresses Hardware functional status Serial number Approvals and markings
Figure 2-9 Side nameplate
SIMATIC Drive Controller
38
Equipment Manual, 11/2019, A5E46600370-AA
Product overview 2.6 Operator controls, displays and connection elements
Front nameplate
You will find the front nameplate when the bottom cover for the operator controls and displays is open. It contains information about the device and a Data Matrix Code with the MAC addresses of the SIMATIC Drive Controller.
Data Matrix Code
Figure 2-10 Front nameplate
Label on bottom cover
The inside of the bottom cover contains a label with the MAC addresses and additional device information of the SIMATIC Drive Controller.
MAC addresses Product name Article number Serial number and HW version Material number
Figure 2-11 Label with MAC addresses
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
39
Product overview 2.6 Operator controls, displays and connection elements
Evaluation of Data Matrix Code
You can evaluate the Data Matrix Code (DMC) using an appropriate reader or a smartphone app. Suitable is, for example, the Industry Online Support Mobile App. (https://support.industry.siemens.com/cs/ww/en/sc/2067)
Note Note that the DMC content may vary depending on the delivery state.
Nameplate Front nameplate
Side nameplate
DMC data string
1P6ES7615-4DF10-0AB0+ ST-L86065647 1Z FS: 01 SIMATIC S7-1500, CPU 1504D TF X150 00-1F-F8-4A-0D-BC X160 00-1F-F8-4A-0D-C0 X130 00-1F-F8-4A-0D-C2 1P6ES7615-4DF100AB0+23S001FF84A0DBC+ ST-L86065647
Feature Article number (1P) Serial number (S) Functional version (1Z) Module name
MAC address interface X150, X160, X130
Article number (1P) MAC address interface X150 (23S) Serial number (S)
Property (example) 6ES7615-4DF10-0AB0 T-L86065647 FS: 01 SIMATIC S7-1500, CPU 1504D TF X150 00-1F-F8-4A-0D-BC X160 00-1F-F8-4A-0D-C0 X130 00-1F-F8-4A-0D-C2 6ES7615-4DF10-0AB0 001FF84A0DBC
T-L86065647
For detailed information on assigning the MAC address, refer to "MAC address assignment" in the section PROFINET X150, X160 and X130 (Page 46).
SIMATIC Drive Controller
40
Equipment Manual, 11/2019, A5E46600370-AA
Product overview 2.7 Mode selector
2.7
Mode selector
The mode selector is designed as a toggle switch. You use the mode selector to set the operating mode of the CPU.
Mode selector
Figure 2-12 Mode selector
The following table shows the meaning of the three switch positions along with an explanation.
Table 2- 5 Mode selector switch positions
Switch position
RUN latching STOP latching (middle position) MRES not latching
Meaning RUN mode STOP mode
Memory reset
Explanation The CPU is running the user program The user program is not running.
Position for the memory reset of the CPU
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
41
Product overview 2.8 FUNCT button
2.8
FUNCT button
You can use the FUNCT button to select and initiate module functions.
FUNCT button
Figure 2-13 FUNCT button
One function is available at present: Function 1: Save service data on SIMATIC memory card
SIMATIC Drive Controller
42
Equipment Manual, 11/2019, A5E46600370-AA
Connecting
3
3.1
Supply voltage X124
24 V DC supply voltage (X124)
The SIMATIC Drive Controller is powered by an external 24 V DC power supply. Power supplies from the SITOP family, for example, can be used.
WARNING
Danger to life from hazardous voltage when an unsuitable power supply is connected
Design the 24 V direct voltage as protective extra-low voltage.
When an external 24 V DC power supply is connected, it must comply with the requirements for protective extra-low voltage (PELV) according to UL 61010. A backup fuse that reliably trips within 120 milliseconds in the event of a short-circuit at an ambient temperature of 0 °C must also be available.
When OVC III circuits up to 600 V AC (phase to neutral voltage) are the primary supply of the utilized power supply, ensure that the clearance between open contacts of the fuse or the single-fault-secure circuit is 3.0 mm according to UL 61010.
When using an external power supply, ensure that the trip rating of the utilized fuse corresponds to the maximum possible short-time short-circuit current of the utilized power supply.
Note
Ground potential and enclosure (PE) are connected to one another internally with low impedance. You must therefore observe the following: · Insulation monitoring devices are not permitted in the 24 V power supply. · If you are using external power supplies (e.g. SITOP), you must connect the ground
potential to the protective conductor terminal (PELV). · You must provide adequately dimensioned equipotential bonding connections between
the 24 V power supply and all grounded, locally separate loads.
You can find information on equipotential bonding in the SIMATIC Drive Controller system manual (https://support.industry.siemens.com/cs/ww/en/view/109766665).
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
43
Connecting 3.1 Supply voltage X124
The following table shows the pin assignment of the 4-pin connector.
Table 3- 1 Connector pin assignment for 24 V DC power supply
X124
Pin
Signal name
Meaning
1
+
Power supply
2
+
3
M
Ground
4
M
Technical specifications
24 V DC supply voltage (20.4 ... 28.8 V)
Current consumption, max.: 13.1 A
The 24 V supply is looped through via the 24 V connector. In the connector, pin 1 is jumpered to pin 2 and pin 3 is jumpered to pin 4. The maximum current can be limited by the current carrying capacity of the cable. The current carrying capacity of the cable depends on the cabling method (e.g. in a cable duct, on a cable rack), among other things.
Select the permissible conductor cross-section in conformance with national rules (NEC, VDE, etc.) from the following table "Interface X124". The basis for this can be the output current of the 24 V DC supply or the overcurrent device used in the 24 V circuit. If the shortcircuit current of the utilized 24 V power supply unit is greater than 50 A, an appropriate overcurrent device that limits the short-circuit current to this value must be used upstream of the product.
Note · The 24 V DC cable must be approved for temperatures of up to 75 °C. · The maximum permissible cable length is 10 m.
SIMATIC Drive Controller
44
Equipment Manual, 11/2019, A5E46600370-AA
Connecting 3.1 Supply voltage X124
Characteristics of the X124 interface
Table 3- 2 Interface X124
Properties
Version
Connector type
4-pin screw-type terminal
Number of connectable conductors
1
Connectable conductor types and conductor cross-sections
Solid
0.2 mm² ... 2.5 mm²
Flexible
0.2 mm² ... 2.5 mm²
Flexible with wire-end ferrule without plastic 0.2 mm² ... 2.5 mm² sleeve
Flexible with wire-end ferrule with plastic sleeve
0.2 mm² ... 1.5 mm²
AWG / kcmil
22 ... 12
Stripped length
6 ... 7 mm
Tool
Screwdriver 0.5 x 3 mm (M2.5)
Tightening torque
0.4 to 0.5 Nm (3.5 to 4.4 lbf in)
Max. current carrying capacity including loopthrough
20 A 1) (15 A according to UL/CSA)
1) This value must be ensured for the current carrying capacity of the power cable.
See also
SIMATIC Drive Controller block diagram (Page 57)
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
45
Connecting 3.2 PROFINET X150, X160 and X130
3.2
PROFINET X150, X160 and X130
PROFINET interface X150 with 3 ports (X150 P1R, X150 P2R, X150 P3)
The assignment corresponds to the Ethernet standard for an RJ45 connector. When autonegotiation is deactivated, the RJ45 socket is allocated as a switch (MDI-X). When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is
allocated either as data terminal equipment (MDI) or a switch (MDI-X).
PROFINET interface X160 with 1 port (X160 P1)
The assignment corresponds to the Ethernet standard for an RJ45 connector. Autocrossing is always active on X160. This means the RJ45 socket is allocated either as data terminal equipment (MDI) or a switch (MDI-X).
PROFINET interface X130 with 1 port (X130 P1)
The assignment corresponds to the Ethernet standard for an RJ45 connector.
Note PROFINET interface X130 with a transmission rate of 1000 Mbps PROFINET interface X130 supports a maximum transmission rate of 1000 Mbps. Requirements: · Devices must support the 1000 Mbps transmission rate. · The network infrastructure (network cables and outlets) must be category CAT 5e or
better. · For 1000 Mbps, you must use 8-wire cables (4x2) and the 1000 Mbit version of the 180°
FastConnect plug. You can use the 145° FastConnect plugs for PROFINET interface X130 only with a max. transmission rate of 100 Mbps. The "Transmission rate" parameter in the properties of the port (X130) must be set in STEP 7 as follows: · The "Autonegotiation" check box is selected. · "Automatic" is selected in the drop-down list.
SIMATIC Drive Controller
46
Equipment Manual, 11/2019, A5E46600370-AA
Connecting 3.2 PROFINET X150, X160 and X130
Pin assignment of interfaces X150, X160, X130
Table 3- 3 View
Pin assignment of interfaces X150, X160, X130 Pin Assignment in 10/100 Mbit mode
Assignment in 1000 Mbit mode
Signal name Description
Signal name Description
1 TXP
Transmit data +
DA+
Bidirectional pair A+
2 TXN
Transmit data -
DA-
Bidirectional pair
A-
3 RXP
Receive data +
DB+
Bidirectional pair B+
4 -
Reserved; no connection DC+
Bidirectional pair C+
5 -
Reserved; no connection DC-
Bidirectional pair C-
6 RXN
Receive data -
DB-
Bidirectional pair
B-
7 -
Reserved; no connection DD+
Bidirectional pair D+
8 -
Reserved; no connection DD-
Bidirectional pair D-
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
47
Connecting 3.2 PROFINET X150, X160 and X130
Assignment of MAC addresses
The SIMATIC Drive Controller has three PROFINET interfaces. Interface X150 is an interface with 3-port switch. The PROFINET interfaces each have a MAC address, and each of the PROFINET ports has its own MAC address, resulting in a total of 8 MAC addresses for the SIMATIC Drive Controller.
The MAC addresses of the PROFINET ports are needed for the LLDP protocol, for example, for the neighbor discovery function. The number range of the MAC addresses is sequential.
You will find the MAC addresses of the SIMATIC Drive Controller at the following places:
Side nameplate MAC addresses of the interfaces; the first MAC address is also contained in the Data Matrix Code
Front nameplate: The MAC addresses of the interfaces are contained in the Data Matrix Code.
On the inside of the bottom cover: MAC addresses of the interfaces
You can find detailed information on the nameplates in section Nameplates (Page 38).
The table below shows how the MAC addresses are assigned.
Table 3- 4
Assignment of MAC addresses Assignment
Side nameplate
Front nameplate
MAC address 1
MAC address 2 MAC address 3 MAC address 4 MAC address 5
MAC address 6 MAC address 7
MAC address 8
PROFINET interface X150
MAC address labeled
(visible in STEP 7 in accessible DMC with MAC ad-
devices)
dresses
Port X150 P1R (e.g. needed for LLDP)
Port X150 P2R (e.g. needed for LLDP)
Port X150 P3 (e.g. needed for LLDP)
PROFINET interface X160
MAC address labeled
(visible in STEP 7 in accessible devices)
Port X160 P1 (e.g. needed for LLDP)
PROFINET interface X130
MAC address labeled
(visible in STEP 7 in accessible devices)
Port X130 P1 (e.g. needed for LLDP)
DMC with MAC addresses
-
-
-
DMC with MAC addresses
-
DMC with MAC addresses
-
DMC: Data Matrix Code "-" means: MAC address is not labeled or marked
Label on bottom cover MAC address labeled
-
-
-
MAC address labeled
-
MAC address labeled
-
See also
Front covers (Page 36)
SIMATIC Drive Controller
48
Equipment Manual, 11/2019, A5E46600370-AA
Connecting 3.3 PROFIBUS X126
3.3
PROFIBUS X126
The SIMATIC Drive Controller has a PROFIBUS DP interface (X126).
Pin assignment of X126 interface
The table below shows the pin assignment of the PROFIBUS interface. The assignment corresponds to the standard assignment of an RS485 interface.
Table 3- 5
Pin assignment of PROFIBUS interface
View
Pin Signal name
Designation
1
-
-
2
-
-
3 RxD/TxD-P Data line B
4
RTS
Request to send
5
M5V2 Data reference potential (from station)
6
P5V2
Supply plus (from station)
7
-
-
8 RxD/TxD-N Data line A
9
-
-
Note
Supply of I/O devices
The SIMATIC Drive Controller does not make a 24 V DC supply voltage available at the PROFIBUS interface. I/O devices (for example, PC adapter USB 6ES7972-0CB20-0XA0) are only operational on the interface in conjunction with a plug-in power supply set for external power supply.
The innovated successor product, PC adapter USB A2 (6GK1571-0BA00-0AA0), obtains the needed supply voltage via the USB port. For this reason, it does not need a 24 V DC power supply. You can operate the PC adapter USB A2 without a plug-in power supply set for external power supply.
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
49
Connecting 3.4 Digital inputs and outputs of X122, X132 and X142
3.4
Digital inputs and outputs of X122, X132 and X142
The digital inputs and digital outputs at the X122, X132 and X142 sockets are intended for connection of sensors and actuators.
Characteristics of X122, X132 and X142
Table 3- 6 Interfaces X122, X132 and X142
Properties
Version
Connector type
Spring-loaded terminal, 14-pin
Number of connectable conductors
1
Connectable conductor types and conductor cross-sections
· Solid
0.2 mm² ... 1.5 mm²
· Flexible
0.2 mm² ... 1.5 mm²
· Flexible with wire-end ferrule without plastic sleeve
0.25 mm² ... 1.5 mm²
· Flexible with wire-end ferrule with plastic sleeve 0.25 mm² ... 0.75 mm²
· AWG/kcmil
24 ... 16
Stripped length
10 mm
Current-carrying capacity (ground)
6 A
Note The maximum permissible cable length is 30 m.
SIMATIC Drive Controller
50
Equipment Manual, 11/2019, A5E46600370-AA
Connecting 3.4 Digital inputs and outputs of X122, X132 and X142 Breakdown into digital inputs and digital outputs The figure below shows the breakdown of the X122/X132 and X142 interfaces into digital inputs and digital outputs. The X122 and X132 interfaces are allocated to SINAMICS Integrated of the SIMATIC Drive Controller. The X142 interface is allocated to the CPU of the SIMATIC Drive Controller.
Figure 3-1 Interface assignment of X122/X132 and X142
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
51
Connecting 3.4 Digital inputs and outputs of X122, X132 and X142
Pin assignment of the X122 and X132 interfaces
Table 3- 7 Digital inputs and digital inputs/outputs of X122
Pin Designation 1)
Signal type Notes
2)
1 DI0 2 DI1 3 DI2 4 DI3 5 DI16 6 DI17 7 M1
8 M 9 DI/DQ8
10 DI/DQ9
11 M 12 DI/DQ10
13 DI/DQ11
14 M
I I I I I I GND
GND B
B
GND B
B
GND
Digital input 0 Digital input 1 Digital input 2 Digital input 3 Digital input 16 Digital input 17 Ground for DI0 to DI3, DI16, DI17 (isolated from M) Ground Digital input/output 8 (also usable as measurement sensing input) Digital input/output 9 (also usable as measurement sensing input) Ground Digital input/output 10 (also usable as measurement sensing input) Digital input/output 11 (also usable as measurement sensing input) Ground
1) DI: Digital input; DI/DQ: Bidirectional digital input/output; M: Electronic ground; M1: Ground reference
2) B = Bidirectional; I = Input; GND = Reference potential (ground)
SIMATIC Drive Controller
52
Equipment Manual, 11/2019, A5E46600370-AA
Connecting 3.4 Digital inputs and outputs of X122, X132 and X142
Table 3- 8 Digital inputs and digital inputs/outputs of X132
Pin Designation 1) 1 DI4 2 DI5 3 DI6 4 DI7 5 DI20 6 DI21 7 M2
8 M 9 DI/DQ12
10 DI/DQ13
11 M 12 DI/DQ14
13 DI/DQ15
14 M
Signal type 2) I I I I I I GND
GND B
B
GND B
B
GND
Notes
Digital input 4 Digital input 5 Digital input 6 Digital input 7 Digital input 20 Digital input 21 Ground for DI4 to DI7, DI20, DI21 (isolated from M) Ground Digital input/output 12 (also usable as measurement sensing input) Digital input/output 13 (also usable as measurement sensing input) Ground Digital input/output 14 (also usable as measurement sensing input) Digital input/output 15 (also usable as measurement sensing input) Ground
1) DI: Digital input; DI/DQ: Bidirectional digital input/output; M: Electronic ground; M2: Ground reference
2) B = Bidirectional; I = Input; GND = Reference potential (ground)
Note
An open input is interpreted as "low". So that the digital inputs will function, connect terminal M1 or M2. The alternatives are as follows: · Connect the coupled reference ground of the digital inputs to M1 or M2.
· Connect a jumper to terminal M and terminal M1 (or between M and M2). This removes the electrical isolation for these digital inputs.
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
53
Connecting 3.4 Digital inputs and outputs of X122, X132 and X142
Pin assignment of X142 interface
Pin Designation 1) 1 2 3 DI/DQ0 4 DI/DQ1 5 M 6 DI/DQ2 7 DI/DQ3 8 M 9 DI/DQ4 10 DI/DQ5 11 M 12 DI/DQ6 13 DI/DQ7 14 M
Signal type 2) B B GND B B GND B B GND B B GND
Notes Reserved Reserved Digital input/output 0 Digital input/output 1 Ground for digital input/output Digital input/output 2 Digital input/output 3 Ground for digital input/output Digital input/output 4 Digital input/output 5 Ground for digital input/output Digital input/output 6 Digital input/output 7 Ground for digital input/output
1) DI/DQ: Bidirectional digital input/output; M: Electronic ground
2) B = Bidirectional; GND = Reference potential (ground)
SIMATIC Drive Controller
54
Equipment Manual, 11/2019, A5E46600370-AA
Connecting 3.4 Digital inputs and outputs of X122, X132 and X142
Digital outputs at the X142 interface
You configure each of the digital outputs as sourcing output or as high-speed output: Sourcing output: The digital output is a 24 V sourcing output in reference to M and can
carry a rated load current of 0.5 A. High-speed output: The digital output is a high-speed push-pull switch and can carry a
rated load current of 0.4 A. A push-pull switch is alternately switched to 24 V DC and ground. Very steep edges are possible as a result. The digital outputs are protected against overload and short-circuit. The direct connection of relays and contactors is possible without external wiring.
NOTICE Overheating of unsuitable loads A high-speed output generates edges that are very steep. This generates very powerful charge reversals for the connected load, which can overheat the load at very high switching frequencies. The connected load must therefore be suited for high input frequencies.
Note If you use a digital output as a sourcing output, its switch-off response/switch-off edge is dependent on the connected load. Thus it is possible that very short pulses cannot be output correctly.
Note For optimal interference immunity and high-accuracy signal acquisition, we recommend the use of shielded cables in the following cases: · Very brief signal levels or very fast signal changes occur at the digital inputs, e.g. when
used as timer DI/measurement sensing input, as oversampling DI or for event/period duration measurement · An input delay of 1 s is set for X142
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
55
Connecting 3.5 DRIVE-CLiQ interfaces X100 to X103
3.5
DRIVE-CLiQ interfaces X100 to X103
You connect all the components of the SINAMICS S120 drive system including motors and encoders using the DRIVE-CLiQ interface.
Properties of a DRIVE-CLiQ interface
Table 3- 9 DRIVE-CLiQ interfaces X100 to X103
Property Connector type Cable type, inside the control cabinet Cable type, outside the control cabinet Blanking plug for closing unused DRIVE-CLiQ interfaces
Version
DRIVE-CLiQ connector (RJ45 socket)
DRIVE-CLiQ standard
MOTION CONNECT
Blanking plugs are included in the scope of delivery of the SIMATIC Drive Controller. Additional blanking plugs are available as accessories.
Note The maximum permissible cable length is 100 m.
Pin assignment of a DRIVE-CLiQ interface
Table 3- 10 Pin assignment of DRIVE-CLiQ interfaces X100 to X103
View
Pin Signal name
1 TXP 2 TXN 3 RXP 4 5 6 RXN 7 8 A + (24 V)
B M (0 V)
Type of signal Meaning
Output
Transmit data +
Output
Transmit data -
Input
Receive data +
-
Reserved; no connection
-
Reserved; no connection
Input
Receive data -
-
Reserved; no connection
-
Reserved; no connection
Voltage Output Voltage supply for DRIVE-CLiQ, 450 mA
Voltage Output Ground for 24 V
SIMATIC Drive Controller
56
Equipment Manual, 11/2019, A5E46600370-AA
3.6
3.6.1
Wiring and block diagrams
Connecting 3.6 Wiring and block diagrams
SIMATIC Drive Controller block diagram
The figure below shows a simplified block diagram of the SIMATIC Drive Controller.
1) USB interfaces have no assigned function 2) No function (exception: lamp test at POWER ON)
Figure 3-2 SIMATIC Drive Controller block diagram
See also
Digital inputs and outputs of X122, X132 and X142 (Page 50)
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
57
Connecting 3.6 Wiring and block diagrams
3.6.2
Onboard digital inputs/digital outputs of X122, X132 and X142
The figure below shows the wiring and block diagram of the digital inputs and digital inputs/outputs of the SIMATIC Drive Controller.
Connection removes electrical isolation
Figure 3-3 Wiring and block diagram of onboard digital inputs and digital inputs/outputs
SIMATIC Drive Controller
58
Equipment Manual, 11/2019, A5E46600370-AA
Connecting 3.6 Wiring and block diagrams
Note Open input of digital inputs
An open input is interpreted as "low". So that the digital inputs will function, connect terminal M1 or M2. The alternatives are as follows: · Connect the coupled reference ground of the digital inputs to M1 or M2. · Connect a jumper to terminal M and terminal M1 (or between M and M2). This removes
the electrical isolation for these digital inputs.
The interfaces of the onboard I/O are described in section Digital inputs and outputs of X122, X132 and X142 (Page 50).
3.6.3
DRIVE-CLiQ interfaces X100 to X103
DRIVE-CLiQ wiring of an axis group
The figure below shows a possible DRIVE-CLiQ wiring of an axis group.
Figure 3-4 Example of a DRIVE-CLiQ wiring of an axis group
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
59
Connecting 3.6 Wiring and block diagrams
Wiring rules
Neither ring wiring nor double wiring of components is permitted in the DRIVE-CLiQ wiring. In the case of a Motor Module, you must connect the power cable to the motor and the associated encoder.
Further information
You can find more information on DRIVE-CLiQ wiring in the following:
SIMATIC Drive Controller (https://support.industry.siemens.com/cs/ww/en/view/109766665) system manual, section "Connecting"
SINAMICS S120 Drive Functions (https://support.industry.siemens.com/cs/us/en/view/109754299) function manual, section "Rules for wiring with DRIVE-CLiQ"
SIMATIC Drive Controller
60
Equipment Manual, 11/2019, A5E46600370-AA
Interrupts, diagnostics alarms, error messages and system alarms
4
4.1
Status and error displays
4.1.1
Overview
Location of status displays
The figure below shows the location of the status displays on the SIMATIC Drive Controller.
LEDs to indicate the operating states of the CPU. LEDs and indicate the operating states of SINAMICS Integrated. The 7-segment display shows additional status information in certain operating states. The ACT LED indicates write/read accesses to the
SIMATIC memory card.
RUN/STOP LED, green/yellow ERROR LED, red/yellow MAINT LED, yellow RDY LED, red/green/yellow COM LED, red/green/yellow No function (exception: LED is lit yellow during lamp test at POWER ON) 7-segment display ACT LED, yellow
Figure 4-1 SIMATIC Drive Controller status displays
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
61
Interrupts, diagnostics alarms, error messages and system alarms 4.1 Status and error displays
LED display during reset
At POWER ON, the SIMATIC Drive Controller performs a reset. During the reset, all LEDs are lit yellow (lamp test).
LED display in FREEZE state
The FREEZE state signifies a "continuous reset". You can only exit this reset by switching the power supply of the Drive Controller off and back on again. While in Freeze state, the LEDs retain their last display status and the RUN/STOP LED flashes red. The 7-segment display is reset, during which all 7 segments including the two dots are lit.
SIMATIC Drive Controller
62
Equipment Manual, 11/2019, A5E46600370-AA
Interrupts, diagnostics alarms, error messages and system alarms 4.1 Status and error displays
4.1.2
Status and error display of the CPU
Meaning of the RUN/STOP, ERROR and MAINT LEDs
The SIMATIC Drive Controller has three LEDs for displaying the current operating state and the diagnostics status of the CPU. The following table shows the meaning of the various combinations of colors for the RUN/STOP, ERROR and MAINT LEDs.
Table 4- 1 Meaning of the LEDs
RUN/STOP LED LED off LED off
LED lit green LED lit green LED lit green
LED lit green
LED lit yellow LED lit yellow LED lit yellow LED lit yellow LED flashes yel-
low
ERROR LED LED off
LED flashes red LED off
LED flashes red LED off
LED off
LED off LED off LED flashes red LED lit red LED off
MAINT LED LED off LED off
Meaning Missing or insufficient supply voltage on the CPU.
An error has occurred.
LED off LED off
LED lit yellow
LED flashes yellow
LED flashes yellow
LED off LED flashes yel-
low LED lit yellow
LED off
CPU is in RUN mode.
A diagnostics event is pending. Service data backup in RUN ended with error. Maintenance demanded for the plant. The affected hardware must be checked/replaced within a short period of time. Active Force job PROFIenergy pause Maintenance required for the plant. The affected hardware must be checked/replaced within a foreseeable period of time. Bad configuration Firmware update successfully completed.
CPU is in STOP mode.
The program on the SIMATIC memory card is causing an error. CPU defective
Update of an incompatible SINAMICS Integrated firmware was refused.
CPU is performing internal activities during STOP, e.g. startup after STOP. CPU stores service data Download of the user program from the SIMATIC memory card
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
63
Interrupts, diagnostics alarms, error messages and system alarms 4.1 Status and error displays
RUN/STOP LED LED lit yellow
LED flashes yellow/green LED flashes yel-
low
LED flashes yellow/green
LED lit yellow
LED flashes red
ERROR LED LED lit red LED off
LED off
LED flashes red
LED lit yellow X
Any LED status
MAINT LED LED off LED off
Meaning Service data backup in STOP ended with error
Startup (transition from RUN STOP)
LED flashes yellow
LED flashes yellow
LED lit yellow
X Any LED status
User action prompted after "Service data backup" during power up
Startup (CPU booting) Test of LEDs during startup, inserting a module. LED flashing test Lamp test at POWER ON Note: All six LEDs and the ACT-LED on the card slot are lit yellow. Freeze This state can only be exited by switching the component off and back on again.
SIMATIC Drive Controller
64
Equipment Manual, 11/2019, A5E46600370-AA
Interrupts, diagnostics alarms, error messages and system alarms 4.1 Status and error displays
4.1.3
Status and error display of SINAMICS Integrated
RDY LED states
Table 4- 2 SINAMICS Integrated RDY LED
RDY LED
Meaning
LED off LED lit green
Electronics power supply is missing or is outside the permissible tolerance range
The component is ready for operation. Cyclic DRIVE-CLiQ communication is active or SINAMICS Integrated is waiting for first commissioning. Commissioning/reset
LED flashes green (0.5 Hz)
LED lit yellow
LED flashes yellow (2 Hz)
System is booting and DRIVE-CLiQ communication is being established.
Firmware update of components is complete, waiting for POWER ON of the component. Remedy: Perform POWER ON of the respective component Firmware update of the connected DRIVE-CLiQ components in progress.
LED flashes yellow (0.5 Hz)
LED lit red
LED flashes red (2 Hz)
LED flashes greenyellow (2 Hz)
Component has at least one fault.
General errors Remedy: Check parameter assignment/configuration Firmware could not be started. (for example, update error, drive firmware not compatible with CPU or missing, CRC check failed) Component detection via LED is activated (p0124[0]). Note The two possibilities depend on the status of the LED at time of activation via p0124[0] = 1.
LED flashes redyellow (2 Hz)
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
65
Interrupts, diagnostics alarms, error messages and system alarms 4.1 Status and error displays
COM LED states
Table 4- 3 SINAMICS Integrated COM LED
COM LED LED off
LED lit green LED flashes green
(0.5 Hz)
LED flashes red (2 Hz)
Meaning Cyclic communication has not (yet) taken place. Note PROFIdrive is ready for communication when the SINAMICS Integrated is ready for operation (see RDY LED). Cyclic communication is active. Synchronization complete.
Cyclic communication is not yet fully active. Possible causes: · The controller is not transferring setpoints. · In isochronous mode, synchronization is not yet complete.
Cyclic bus communication has been interrupted or could not be established. Remedy: Eliminate fault
4.1.4
ACT LED and interface LEDs
Meaning of ACT LED
The ACT LED is located next to the memory card slot and indicates write/read accesses to the SIMATIC memory card.
Table 4- 4 ACT LED
ACT LED LED off
Meaning No access to the SIMATIC memory card
Access to the SIMATIC memory card
LED flickers yellow
If you remove the SIMATIC memory card during a write operation, the following problems may occur:
The data content of a file is incomplete.
The file is no longer readable or no longer exists.
The entire data content is corrupted.
Regarding the removal of the SIMATIC memory card, note also the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/59457183).
SIMATIC Drive Controller
66
Equipment Manual, 11/2019, A5E46600370-AA
Interrupts, diagnostics alarms, error messages and system alarms 4.1 Status and error displays
Meaning of the LEDs of the PROFINET interface X130, X150, X160
For diagnostic purposes, each of the RJ45 sockets is equipped with a LINK LED and and ACTIVITY LED. The LEDs are used to display the following status information of the respective PROFINET interface.
Table 4- 5 LEDs of PROFINET interface X130, X150, X160
RJ45 socket
LINK LED LED off
LED flashes green
LED lit green LED lit yellow LED lit green LED lit yellow
ACTIVITY LED LED off
Meaning
There is no communication connection between the PROFINET interface of the SIMATIC Drive Controller and the communication partner. No data is currently being sent/received via the PROFINET interface.
There is no LINK connection.
The "LED flashing test" is being performed.
LED flickers yellow
LED flickers yellow
A 10/100 Mbps communication connection exists between the PROFINET interface of the SIMATIC Drive Controller and a communication partner.
A 1000 Mbps communication connection exists between the PROFINET interface of the SIMATIC Drive Controller and a communication partner.
Data is currently being received/transmitted at 10/100 Mbps by a communication partner via the PROFINET interface of the SIMATIC Drive Controller.
Data is currently being received/transmitted at 1000 Mbps by a communication partner via the PROFINET interface of the SIMATIC Drive Controller.
See also
View of SIMATIC Drive Controller without front covers (Page 33)
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
67
Interrupts, diagnostics alarms, error messages and system alarms 4.1 Status and error displays
4.1.5
7-segment display
In addition to the LED display, the 7-segment display indicates further status information during commissioning and cyclic operation.
Table 4- 6 7-segment display
7-segment display
Meaning Missing or insufficient supply voltage on the CPU
HW states before the start of the CPU firmware
Startup of the CPU
Startup of CPU complete (0 = STOP or RUN state)
Function selection (1 = Save service data)
Save service data function active (d = data)
Exit function selection mode (E = Exit)
Reset See also
68
Freeze While in Freeze state, the LEDs retain their last display status and the RUN/STOP Led flashes red.
At POWER ON, the SIMATIC Drive Controller performs a reset. During a reset, all segments including the two dots are briefly lit (lamp test).
View of SIMATIC Drive Controller without front covers (Page 33)
SIMATIC Drive Controller Equipment Manual, 11/2019, A5E46600370-AA
4.2
4.2.1
Interrupts, diagnostics alarms, error messages and system alarms 4.2 Interrupts, diagnostics and system messages
Interrupts, diagnostics and system messages
Interrupts, diagnostics and system messages
For information on "Interrupts", refer to the STEP 7 online help. For information on "Diagnostics" and "System alarms", refer to the Diagnostics (https://support.industry.siemens.com/cs/ww/en/view/59192926) function manual.
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
69
Technical specifications
5
Technical specifications of SIMATIC Drive Controller
Article number General information
Product type designation HW functional status Product function · I&M data
6ES7615-4DF10-0AB0
CPU 1504D TF FS01
Yes; I&M0 to I&M3
6ES7615-7DF10-0AB0 CPU 1507D TF
· Isochronous mode
Yes; With minimum OB 6x cycle of 500 µs
Engineering with
· STEP 7 TIA Portal configurable/integrated as V16 of version
Integrated drive control
· Number of axes for servo control, max.
6
· Number of axes for vector control, max.
6
· Number of axes for V/f control, max.
12
· Remark
Configuration control via dataset
Control elements Number of keys Mode selector switch
Supply voltage Type of supply voltage permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Mains buffering · Mains/voltage failure stored energy time
Alternative control modes; drive control based on SINAMICS S120 CU320-2 (firmware version V5.x); functional subset compared to CU320-2: no DCC/DCB, EPOS, free function blocks, etc.); see manual for details
Yes
1; FUNCT button 1
24 V DC 20.4 V 28.8 V Yes
3 ms; Refers to the power supply on the CPU section
· Repeat rate, min.
1 event every 10 s
SIMATIC Drive Controller
70
Equipment Manual, 11/2019, A5E46600370-AA
Technical specifications
Article number Input current
Current consumption (rated value)
Current consumption, max. Inrush current, max. I²t Power loss Power loss, typ. Memory Number of slots for SIMATIC memory card SIMATIC memory card required Work memory · integrated (for program) · integrated (for data) Load memory · Plug-in (SIMATIC Memory Card), required · Plug-in (SIMATIC Memory Card), max. Backup · maintenance-free CPU-blocks Number of elements (total) DB · Number range
· Size, max.
FB · Number range · Size, max.
FC · Number range · Size, max.
OB · Size, max. · Number of free cycle OBs · Number of time alarm OBs · Number of delay alarm OBs · Number of cyclic interrupt OBs
6ES7615-4DF10-0AB0
6ES7615-7DF10-0AB0
0.65 A; Without load on inputs/outputs, without supply via DRIVECLiQ/USB interface 13.1 A; With load 6 A; Rated value 0.62 A²·s
52 W
1 Yes
2 Mbyte 4 Mbyte
6 Mbyte 20 Mbyte
12 Mbyte; Recommended at least when integrated drive is used 32 Gbyte
Yes
12 000; Blocks (OB, FB, FC, DB) and UDTs
1 ... 60 999; subdivided into: number range that can be used by the user: 1 ... 59 999, and number range of DBs created via SFC 86: 60 000 ... 60 999
4 Mbyte; For DBs with absolute addressing, the max. size is 64 KB
16 Mbyte; For DBs with absolute addressing, the max. size is 64 KB
0 ... 65 535 1 Mbyte
0 ... 65 535 1 Mbyte
1 Mbyte 100 20 20 20; with minimum OB 3x cycle of 100 µs
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
71
Technical specifications
Article number · Number of process alarm OBs
· Number of DPV1 alarm OBs
· Number of isochronous mode OBs
· Number of technology synchronous alarm OBs
· Number of startup OBs
· Number of asynchronous error OBs
· Number of synchronous error OBs
· Number of diagnostic alarm OBs Nesting depth
· per priority class Counters, timers and their retentivity S7 counter
· Number Retentivity
adjustable IEC counter
· Number Retentivity
adjustable S7 times
· Number Retentivity
adjustable IEC timer
· Number Retentivity
adjustable Data areas and their retentivity
Retentive data area (incl. timers, counters, flags), max. Flag · Number, max.
· Number of clock memories Data blocks
· Retentivity adjustable
· Retentivity preset
6ES7615-4DF10-0AB0 50 3 3 2
100 4 2 1
6ES7615-7DF10-0AB0
24; Up to 8 possible for F-blocks
2 048 Yes Any (only limited by the main memory) Yes 2 048 Yes Any (only limited by the main memory) Yes 768 kbyte; In total; available retentive memory for bit memories, timers, counters, DBs, and technology data (axes): 700 KB 16 kbyte 8; 8 clock memory bit, grouped into one clock memory byte Yes No
SIMATIC Drive Controller
72
Equipment Manual, 11/2019, A5E46600370-AA
Technical specifications
Article number Local data
· per priority class, max. Address area
Number of IO modules I/O address area
· Inputs · Outputs per integrated IO subsystem
Inputs (volume) Outputs (volume) Subprocess images · Number of subprocess images, max. Hardware configuration Number of distributed IO systems Number of DP masters · integrated · Via CM
Number of IO Controllers · integrated · Via CM
PtP CM · Number of PtP CMs
Time of day Clock
· Type · Backup time · Deviation per day, max. Operating hours counter · Number Clock synchronization · supported · to DP, master · in AS, master · in AS, slave · on Ethernet via NTP
6ES7615-4DF10-0AB0
6ES7615-7DF10-0AB0
64 kbyte; max. 16 KB per block
16 384; max. number of modules / submodules
32 kbyte; All inputs are in the process image 32 kbyte; All outputs are in the process image
32 kbyte 32 kbyte
32
64
1 Expansion via CMs / CPs (PROFIBUS, PROFINET, Ethernet) not possible; these CMs / CPs can only be operated in a central rack
2 Expansion via CMs / CPs (PROFIBUS, PROFINET, Ethernet) not possible; these CMs / CPs can only be operated in a central rack
The number of connectable PtP CMs (distributed) is only limited by the number of available slots
Hardware clock 6 wk; At 40 °C ambient temperature, typically 10 s; Typ.: 2.4 s
16
Yes Yes Yes Yes Yes
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
73
Technical specifications
Article number
6ES7615-4DF10-0AB0
6ES7615-7DF10-0AB0
Digital inputs
integrated channels (DI)
28; max. depending on parameterization
Digital inputs, parameterizable
Yes; 12 DI, 8 DI/DQ (X122/X132, SINAMICS Integrated) + 8 DI/DQ (X142, PLC)
Source/sink input
P-reading
Input characteristic curve in accordance with IEC Yes 61131, type 3
Digital input functions, parameterizable
· Freely usable digital input
Yes; Max. 20 (X122/X132) + max. 8 (X142)
· Probe
Yes; Max. 8 (X122/X132) + max. 8 (X142)
· Digital input with time stamp
Yes; Max. 8 (X142); e.g. for probes
· Counter
Yes; Max. 8 (X142); event/cycle duration measurement
· Digital input with oversampling
Yes; Max. 8 (X142); 32-fold oversampling
Input voltage
· Type of input voltage
DC
· Rated value (DC)
24 V
· for signal "0"
-3 to +5V
· for signal "1"
+15 to +30V
· permissible voltage at input, min.
-30 V
· permissible voltage at input, max.
30 V
Input current · for signal "1", typ.
4 mA
Input delay (for rated value of input voltage) · Minimum pulse width for program reactions
for standard inputs parameterizable
5 µs for X122/X132/X142 (DI/DQ as DI; for X142 with filter setting 1 µs)
No; For X122/X132
for "0" to "1", typ.
For X122/X132: 10 µs (DI) / 5 µs (DI/DQ as DI)
for interrupt inputs parameterizable
Yes; Identical to those for technological functions
for technological functions parameterizable
Yes; For X142, additionally adjustable input filter: 1 µs / 125 µs
with "0" to "1", typ.
5 µs; For X142; HW delay
with "1" to "0", typ.
5 µs; For X142; HW delay
Cable length · shielded, max.
· unshielded, max.
30 m; For technological functions: Shielding of the DI recommended depending on the requirements
30 m
SIMATIC Drive Controller
74
Equipment Manual, 11/2019, A5E46600370-AA
Technical specifications
Article number Digital outputs
Type of digital output integrated channels (DO) Current-sinking Current-sourcing
Digital outputs, parameterizable
Short-circuit protection · Response threshold, typ. Limitation of inductive shutdown voltage to Controlling a digital input minimum pulse duration Digital output functions, parameterizable · Freely usable digital output · Digital output with time stamp · PWM output
Cycle duration, parameterizable
ON period, min. ON period, max. Resolution of the duty cycle · Digital output with oversampling Switching capacity of the outputs · with resistive load, max. · on lamp load, max. Load resistance range · lower limit Output voltage · Type of output voltage · Rated value (DC) · for signal "0", max. · for signal "1", min. Output current · for signal "1" rated value · for signal "1" permissible range, min. · for signal "1" permissible range, max.
6ES7615-4DF10-0AB0
6ES7615-7DF10-0AB0
Transistor 16; max. depending on parameterization Yes; With High Speed output Yes; Optionally as a P-switch or high-speed push-pull switch (highspeed output) Yes; 8 DI/DQ (X122/X132, SINAMICS Integrated) + 8 DI/DQ (X142, PLC) Yes; electronic/thermal X122/X132: 1.4 A / X142: 0.9 A (high-speed output: 0.7 A)
X122/X132: max. -60 V / X142: max. -64.5 V Yes 2 µs; For high-speed output, single pulse
Yes; Max. 8 (X122/X132) + max. 8 (X142)
Yes; Max. 8 (X142); e.g. for output cams
Yes; Max. 8 (X142)
Yes; Base frequency 1 / 2 / 4 / 8 / 16 kHz; specification of interpulse period ratio over 32-bit pattern 0 % 100 % 3.125 % Yes; Max. 8 (X142)
0.5 A; 0.4 A for high-speed output 5 W
48 ; with 24 V DC supply
DC 24 V 28.8 V 20.4 V
0.5 A; 0.4 A for high-speed output 2 mA 0.6 A; 0.48 A for high-speed output
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
75
Technical specifications
Article number Output delay with resistive load
· "0" to "1", typ. · "1" to "0", typ. for technological functions
"0" to "1", typ. "1" to "0", typ. Parallel switching of two outputs · for logic links · for uprating · for redundant control of a load Switching frequency · with resistive load, max. · with inductive load, max. · on lamp load, max. Total current of the outputs · Current per module, max. Cable length · shielded, max. · unshielded, max. Interfaces Number of PROFINET interfaces Number of PROFIBUS interfaces Number of USB interfaces Number of DRIVE-CLiQ interfaces
1. Interface Interface types
· Number of ports · integrated switch · RJ 45 (Ethernet) Protocols · IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server · Media redundancy
76
6ES7615-4DF10-0AB0
6ES7615-7DF10-0AB0
100 µs; For X122/X132; at 48 ohm load 150 µs; For X122/X132; at 48 ohm load
1 µs; For X142 1 µs; For X142 as a high-speed output; 150 µs for standard output
Yes; For technological functions and high-speed outputs: No No Yes; For technological functions and high-speed outputs: No
35 kHz; With High Speed output, 1 kHz with standard output 2 Hz; Max. 1 J per channel 11 Hz
8 A
30 m 30 m
3 1 2; USB 3.0 (without function) 4; DRIVE-CLiQ interfaces (24 V / 450 mA per interface for connecting encoders/measuring systems)
3 Yes Yes; X150
Yes; IPv4 Yes Yes Yes Yes Yes Yes; MRP Automanager according to IEC 62439-2 Edition 2.0
SIMATIC Drive Controller Equipment Manual, 11/2019, A5E46600370-AA
Technical specifications
Article number PROFINET IO Controller Services
PG/OP communication
6ES7615-4DF10-0AB0 Yes
6ES7615-7DF10-0AB0
S7 routing
Yes
Isochronous mode
Yes
Direct data exchange
Yes; Requirement: IRT and isochronous mode (MRPD optional)
shortest clock pulse
500 µs
Open IE communication
Yes
IRT
Yes
MRP MRPD
Yes; MRP Automanager acc. to IEC 62439-2 Edition 2.0; MRP Manager; MRP Client; max. number of devices in the ring: 50
Yes; Requirement: IRT
PROFIenergy
Yes
Prioritized startup
Yes; Max. 32 PROFINET devices
Number of connectable IO Devices, max. 256; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
Of which IO devices with IRT, max.
64
Number of connectable IO Devices for 256 RT, max.
of which in line, max.
256
Number of IO Devices that can be simul- 8; in total across all interfaces taneously activated/deactivated, max.
Number of IO Devices per tool, max.
8
Updating times
Update time for IRT for send cycle of 500 µs
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
500 µs to 8 ms
for send cycle of 1 ms
1 ms to 16 ms
for send cycle of 2 ms
2 ms to 32 ms
for send cycle of 4 ms
4 ms to 64 ms
With IRT and parameterization of "odd" send cycles
Update time = set "odd" send clock (any multiple of 125 µs: 375 µs, 625 µs ... 3 875 µs)
Update time for RT for send cycle of 500 µs
500 µs to 256 ms
for send cycle of 1 ms
1 ms to 512 ms
for send cycle of 2 ms
2 ms to 512 ms
for send cycle of 4 ms
4 ms to 512 ms
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
77
Technical specifications
Article number PROFINET IO Device Services
PG/OP communication
6ES7615-4DF10-0AB0 Yes
6ES7615-7DF10-0AB0
S7 routing
Yes
Isochronous mode
No
shortest clock pulse
500 µs
Open IE communication
Yes
IRT
Yes
MRP MRPD
Yes; MRP Automanager acc. to IEC 62439-2 Edition 2.0; MRP Manager; MRP Client; max. number of devices in the ring: 50
Yes; Requirement: IRT
PROFIenergy
Yes; per user program
Shared device
Yes
Number of IO Controllers with shared de- 4 vice, max.
Asset management record
Yes; per user program
2. Interface
Interface types
· Number of ports
1
· integrated switch
No
· RJ 45 (Ethernet)
Yes; X160
Protocols · IP protocol
Yes; IPv4
· PROFINET IO Controller
Yes
· PROFINET IO Device
Yes
· SIMATIC communication
Yes
· Open IE communication
Yes
· Web server
Yes
· Media redundancy
No
PROFINET IO Controller
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Direct data exchange
No
Open IE communication
Yes
IRT
No
SIMATIC Drive Controller
78
Equipment Manual, 11/2019, A5E46600370-AA
Technical specifications
Article number MRP
6ES7615-4DF10-0AB0 No
6ES7615-7DF10-0AB0
MRPD
No
PROFIenergy
Yes
Prioritized startup
No
Number of connectable IO Devices, max. 128; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET
Number of connectable IO Devices for 128 RT, max.
of which in line, max.
128
Number of IO Devices that can be simul- 8; in total across all interfaces taneously activated/deactivated, max.
Number of IO Devices per tool, max.
8
Updating times
Update time for RT for send cycle of 1 ms
The minimum value of the update time also depends on communication share set for PROFINET IO, on the number of IO devices, and on the quantity of configured user data
1 ms to 512 ms
PROFINET IO Device
Services
PG/OP communication
Yes
S7 routing
Yes
Isochronous mode
No
Open IE communication
Yes
IRT
No
MRP
No
MRPD
No
PROFIenergy
Yes; per user program
Prioritized startup
No
Shared device
Yes
Number of IO Controllers with shared de- 4 vice, max.
Asset management record
Yes; per user program
3. Interface
Interface types
· Number of ports
1
· integrated switch
No
· RJ 45 (Ethernet)
Yes; X130
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
79
Technical specifications
Article number Protocols
· IP protocol · PROFINET IO Controller · PROFINET IO Device · SIMATIC communication · Open IE communication · Web server 4. Interface Interface types · Number of ports · RS 485 Protocols · PROFIBUS DP master · PROFIBUS DP slave · SIMATIC communication Interface types RJ 45 (Ethernet) · 100 Mbps · 1000 Mbps · Autonegotiation · Autocrossing · Industrial Ethernet status LED RS 485 · Transmission rate, max. Protocols Number of connections · Number of connections, max. · Number of connections reserved for
ES/HMI/web · Number of connections via integrated inter-
faces · Number of S7 routing paths
Redundancy mode · H-Sync forwarding
6ES7615-4DF10-0AB0
Yes; IPv4 No No Yes Yes Yes
6ES7615-7DF10-0AB0
1 Yes; X126
Yes No Yes
Yes Yes; Only at the X130 interface Yes Yes Yes; LINK and ACTIVITY
12 Mbit/s
320; Via integrated interfaces of the CPU 10
320
64; in total, only 16 S7-Routing connections are supported via PROFIBUS
Yes
SIMATIC Drive Controller
80
Equipment Manual, 11/2019, A5E46600370-AA
Technical specifications
Article number SIMATIC communication
· S7 communication, as server · S7 communication, as client · User data per job, max. Open IE communication · TCP/IP
Data length, max. several passive connections per port,
supported · ISO-on-TCP (RFC1006)
Data length, max. · UDP
Data length, max. UDP multicast · DHCP · SNMP · DCP · LLDP Web server · HTTP · HTTPS PROFIBUS DP master · Number of connections, max. Services PG/OP communication S7 routing Data record routing Isochronous mode Equidistance Number of DP slaves
Activation/deactivation of DP slaves
6ES7615-4DF10-0AB0
6ES7615-7DF10-0AB0
Yes Yes See online help (S7 communication, user data size)
Yes 64 kbyte Yes
Yes 64 kbyte Yes 2 kbyte; 1 472 bytes for UDP broadcast Yes; Max. 5 multicast circuits No Yes Yes Yes
Yes; Standard and user pages Yes; Standard and user pages
48; for the integrated PROFIBUS DP interface
Yes Yes Yes Yes Yes 125; In total, up to 1 000 distributed I/O devices can be connected via AS-i, PROFIBUS or PROFINET Yes
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
81
Technical specifications
Article number OPC UA
· Runtime license required
6ES7615-4DF10-0AB0 Yes; "Small" license required
6ES7615-7DF10-0AB0 Yes; "Large" license required
· OPC UA client
Yes
Application authentication
Yes
Security policies User authentication
Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256
"anonymous" or by user name & password
Number of connections, max.
40
Number of nodes of the client interfaces, 5 000 max.
Number of elements for one call of
300
OPC_UA_NodeGetHandleList/OPC_UA_
ReadList/OPC_UA_WriteList, max.
Number of elements for one call of
20
OPC_UA_NameSpaceGetIndexList, max.
Number of elements for one call of
100
OPC_UA_MethodGetHandleList, max.
Number of simultaneous calls of the cli- 1 ent instructions per connection (except OPC_UA_ReadList,OPC_UA_WriteList,O PC_UA_MethodCall), max.
Number of simultaneous calls of the cli- 5 ent instructions OPC_UA_ReadList,OPC_UA_WriteList and OPC_UA_MethodCall, max.
Number of registerable nodes, max.
5 000
Number of registerable method calls of 100 OPC_UA_MethodCall, max.
Number of inputs/outputs when calling 20 OPC_UA_MethodCall, max.
· OPC UA server Application authentication
Yes; Data access (read, write, subscribe), method call, custom address space
Yes
Security policies User authentication
Available security policies: None, Basic128Rsa15, Basic256Rsa15, Basic256Sha256
"anonymous" or by user name & password
Number of sessions, max.
64
Number of accessible variables, max.
200 000
Number of registerable nodes, max.
50 000
Number of subscriptions per session,
20
max.
Sampling interval, min.
10 ms
SIMATIC Drive Controller
82
Equipment Manual, 11/2019, A5E46600370-AA
Technical specifications
Article number Publishing interval, min.
6ES7615-4DF10-0AB0 10 ms
6ES7615-7DF10-0AB0
Number of server methods, max.
100
Number of inputs/outputs per server
20
method, max.
Number of monitored items, max.
10 000; for 1 s sampling interval and 1 s send interval
Number of server interfaces, max.
10
Number of nodes for user-defined server 30 000 interfaces, max.
Further protocols · MODBUS
Yes; MODBUS TCP
Media redundancy · Switchover time on line break, typ.
200 ms; For MRP, bumpless for MRPD
· Number of stations in the ring, max.
50
Isochronous mode
Isochronous operation (application synchronized Yes; With minimum OB 6x cycle of 500 µs up to terminal)
Equidistance
Yes
Jitter, max.
1 µs
S7 message functions
Number of login stations for message functions, 32 max.
Program alarms
Yes
Number of configurable program messages, max.
10 000; Program messages are generated by the "Program_Alarm" block, ProDiag or GRAPH
Number of loadable program messages in RUN, 5 000 max.
Number of simultaneously active program alarms
· Number of program alarms
1 000
· Number of alarms for system diagnostics
1 000
· Number of alarms for motion technology
160
objects
Test commissioning functions Joint commission (Team Engineering) Status block Single step Number of breakpoints
Yes; Parallel online access possible for up to 10 engineering systems Yes; Up to 16 simultaneously (in total across all ES clients) No 20
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
83
Technical specifications
Article number Status/control
· Status/control variable · Variables · Number of variables, max.
of which status variables, max. of which control variables, max. Forcing · Forcing, variables · Number of variables, max. Diagnostic buffer · present · Number of entries, max. of which powerfail-proof Traces · Number of configurable Traces Diagnostics indication LED · RUN/STOP LED · ERROR LED · MAINT LED · ACT LED · RDY LED · COM LED · Connection display LINK TX/RX Supported technology objects Motion Control · Number of available Motion Control resources for technology objects (except cam disks) · Required Motion Control resources per speed-controlled axis per positioning axis per synchronous axis per external encoder per output cam per cam track per probe
6ES7615-4DF10-0AB0
6ES7615-7DF10-0AB0
Yes Inputs/outputs, memory bits, DBs, distributed I/Os, timers, counters
200; per job 200; per job
Peripheral inputs/outputs 200
Yes 3 200 1 000
8; Up to 512 KB of data per trace are possible
Yes Yes Yes Yes; For memory card access Yes Yes Yes
Yes 2 400
12 800
40 80 160 80 20 160 40
SIMATIC Drive Controller
84
Equipment Manual, 11/2019, A5E46600370-AA
Technical specifications
Article number
· Number of available Extended Motion Control resources for technology objects
6ES7615-4DF10-0AB0 120
6ES7615-7DF10-0AB0 420
· Required Extended Motion Control resources
for each cam
2
for each set of kinematics
30
Per leading axis proxy
3
· Positioning axis
Number of positioning axes at motion
10
55
control cycle of 4 ms (typical value)
Number of positioning axes at motion
20
110
control cycle of 8 ms (typical value)
Controller · PID_Compact
Yes; Universal PID controller with integrated optimization
· PID_3Step
Yes; PID controller with integrated optimization for valves
· PID-Temp
Yes; PID controller with integrated optimization for temperature
Counting and measuring
· High-speed counter
Yes
Integrated Functions Number of counters Counting frequency (counter) max.
Counting functions · Continuous counting
8; Event/cycle duration measurement 32 kHz
Yes
Measuring functions Measuring range
Cycle duration measurement, min.
10 µs; 5 µs minimum pulse width
Cycle duration measurement, max.
178 s
Accuracy Cycle duration measurement
Sampling of the time period with 41.67 ns increments
Potential separation Potential separation digital inputs
· between the channels
Yes; 12 DI (X122/X132), in 2 groups of 6 DI each
Potential separation digital outputs · between the channels
No; 8 DI/DQ (X122/X132) and 8 DI/DQ (X142)
Isolation Isolation tested with
Degree and class of protection IP degree of protection
707 V DC (type test) IP20
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
85
Technical specifications
Article number Standards, approvals, certificates
CE mark cULus RCM (formerly C-TICK) KC approval EAC (formerly Gost-R) Suitable for safety functions Highest safety class achievable in safety mode
· Performance level according to ISO 13849-1
6ES7615-4DF10-0AB0
6ES7615-7DF10-0AB0
Yes Yes Yes Yes Yes Yes; e.g. emergency stop, acknowledgment button
PLd (PLe if exclusively F-CPU is used)
· SIL acc. to IEC 61508
SIL 2 (SIL 3 if exclusively F-CPU is used)
Probability of failure (for service life of 20 years and repair time of 100 hours)
Low demand mode: PFDavg in accordance with SIL2
< 14.00E-04
Low demand mode: PFDavg in accordance with SIL3
< 2.00E-05 PLd (if exclusively F-CPU is used)
High demand/continuous mode: PFH in < 14.00E-09 accordance with SIL2
High demand/continuous mode: PFH in < 1.00E-09 (if exclusively F-CPU is used) accordance with SIL3
Ambient conditions Ambient temperature during operation
· min.
0 °C
· max.
55 °C
Ambient temperature during storage/transportation
· min.
-40 °C; Long-term storage: -25 °C
· max.
70 °C; Long-term storage: +55 °C
Altitude during operation relating to sea level · Installation altitude above sea level, max.
· Ambient air temperature-barometric pressure-altitude
4 000 m; Above an altitude of 2 000 m, the max. ambient temperature decreases by 7 °C every 1 000 m
Permissible air pressure: 620 hPa ... 1 060 hPa
Configuration Programming Programming language
LAD
Yes; incl. failsafe
FBD
Yes; incl. failsafe
STL
Yes
SCL
Yes
GRAPH
Yes
SIMATIC Drive Controller
86
Equipment Manual, 11/2019, A5E46600370-AA
Technical specifications
Article number
6ES7615-4DF10-0AB0
Know-how protection
· User program protection/password protection Yes
6ES7615-7DF10-0AB0
· Copy protection
Yes
· Block protection
Yes
Access protection
· Protection level: Write protection
Yes
· Protection level: Read/write protection
Yes
· Protection level: Write protection for Failsafe Yes
· Protection level: Complete protection
Yes
Cycle time monitoring · lower limit
adjustable minimum cycle time
· upper limit
adjustable maximum cycle time
Dimensions Width Height Depth
Weights Weight, approx.
Other Note:
50 mm 300 mm 226 mm; 270 mm with spacer (included in scope of supply)
2 200 g
fanless operation
SIMATIC Drive Controller
Equipment Manual, 11/2019, A5E46600370-AA
87
Dimension drawing
A
Figure A-1 Dimension drawing of SIMATIC Drive Controller
Note If you install more than one SIMATIC Drive Controller or SINAMICS S120 CU320-2 side-byside, use a horizontal spacing of 50 mm for the drilled holes to compensate for the tolerances.
SIMATIC Drive Controller
88
Equipment Manual, 11/2019, A5E46600370-AA
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
SIMATIC ET 200MP IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Iann_ted_rsruy_ps_ttse,_md_ima_gens_os_astgi_cess_, e_rr_or____4_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______5_ _Di_m_en_si_on_d_ra_w_in_g ________A_ _Re_s_po_n_se_ti_m_es__________B_
08/2013
A5E32346748-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E32346748-AA 08/2013 Technical data subject to change
Copyright © Siemens AG 2013. All rights reserved
Preface
Purpose of the documentation
This technical manual supplements the ET 200MP distributed I/O system (http://support.automation.siemens.com/WW/view/en/59193214) system manual. Functions that generally relate to the system are described in this manual.
The information provided in this manual and in the system/function manuals support you in commissioning the system.
Conventions
Please also observe notes marked as follows:
Note A note contains important information on the product, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides automation and drive products with industrial security functions that support the secure operation of plants or machines. They are an important component in a holistic industrial security concept. With this in mind, our products undergo continuous development. We therefore recommend that you keep yourself informed with respect to our product updates. Please find further information and newsletters on this subject at: (http://support.automation.siemens.com)
To ensure the secure operation of a plant or machine it is also necessary to take suitable preventive action (e.g. cell protection concept) and to integrate the automation and drive components into a state-of-the-art holistic industrial security concept for the entire plant or machine. Any third-party products that may be in use must also be taken into account. Please find further information at: (http://www.siemens.com/industrialsecurity)
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
3
Preface
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
4
Manual, 08/2013, A5E32346748-AA
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................... 9
2.1
Properties .......................................................................................................................................9
3 Wiring ................................................................................................................................................... 11
3.1
Terminal assignment....................................................................................................................11
3.2
Block diagram ..............................................................................................................................12
3.3
Setting the PROFIBUS DP address.............................................................................................12
4 Interrupts, diagnostics, error and system messages .............................................................................. 15
4.1
Diagnostics via LED display.........................................................................................................15
4.2 4.2.1 4.2.2 4.2.3 4.2.4 4.2.5 4.2.6 4.2.7 4.2.8
Alarms ..........................................................................................................................................17 Diagnostics alarms.......................................................................................................................17 Slave diagnostics .........................................................................................................................18 Station statuses 1 to 3 .................................................................................................................19 Master PROFIBUS address.........................................................................................................20 Identifier-related diagnostics ........................................................................................................21 Module status...............................................................................................................................22 Channel-specific diagnostics .......................................................................................................23 Invalid configuration states of the ET 200MP on PROFIBUS DP................................................24
4.3 4.3.1 4.3.2 4.3.3
Interrupts ......................................................................................................................................25 Evaluating interrupts of ET 200MP ..............................................................................................31 Triggering of a diagnostic interrupt ..............................................................................................31 Triggering of a hardware interrupt................................................................................................32
5 Technical specifications ........................................................................................................................ 33
5.1
Technical specifications ...............................................................................................................33
A Dimension drawing ............................................................................................................................... 37
A.1
Dimension drawing IM 155-5 DP ST............................................................................................37
B Response times .................................................................................................................................... 39
B.1
Response times of the ET 200MP ...............................................................................................39
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
5
Table of contents
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
6
Manual, 08/2013, A5E32346748-AA
Documentation guide
1
Introduction
This modular documentation of the SIMATIC products covers diverse topics concerning your automation system.
The complete documentation for the ET 200MP distributed I/O system consists of a system manual, function manuals and product manuals.
The STEP 7 information system (Online Help) also helps you configure and program your automation system.
Overview of the documentation for the IM 155-5 DP ST interface module
Table 1- 1 Documentation for the IM 155-5 DP ST interface module
Topic System description
Communication
Documentation
System manual ET 200MP distributed I/O system (http://support.automation.siemens.com/WW/vi ew/en/59193214)
Most important contents · Application planning · Installation · Wiring · Commissioning
· Maintenance
Function manual: PROFIBUS with STEP 7 V12 ·
(http://support.automation.siemens.com/WW/vi ew/en/59193579)
·
·
PROFIBUS basics PROFIBUS functions PROFIBUS diagnostics
SIMATIC manuals
All current manuals for the SIMATIC products are available for download free of charge from the Internet (http://www.siemens.com/automation/service&support).
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
7
Documentation guide
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
8
Manual, 08/2013, A5E32346748-AA
Product overview
2.1
Properties
Order number
6ES7155-5BA00-0AB0
View of the module
2
Figure 2-1 View of the IM 155-5 DP ST interface module
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
9
Product overview 2.1 Properties
Properties
Technical properties Connects the ET 200MP distributed I/O system with PROFIBUS DP Bus connection via RS485 interface 24V DC power supply (SELV/PELV) Supports ET 200MP I/O modules
Supported system functions PROFIBUS DP Identification data I&M 0 to 3 Operation as DPV1 slave Firmware update via PROFIBUS DP. You can find additional information in the ET 200MP Distributed I/O System (http://support.automation.siemens.com/WW/view/en/59193214) system manual.
Maximum configuration
244 bytes I/O data per station
The integrated power supply of the interface module feeds 14 W into the backplane bus. The interface module can supply up to 12 I/O modules. The exact number of operable modules is determined by the power budget (see relevant section in the ET 200MP distributed I/O system (http://support.automation.siemens.com/WW/view/en/59193214) system manual).
PROFIBUS connector
The 9-pin sub D PROFIBUS connector is included in the product package of the IM 155-5 DP ST interface module and available as accessory.
You can find additional information in the function manual, Designing interference-free controllers (http://support.automation.siemens.com/WW/view/en/59193566) in the section Connecting the bus shield for bus cables.
See also
GSD file (http://support.automation.siemens.com/WW/view/en/10805317/133300)
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
10
Manual, 08/2013, A5E32346748-AA
Wiring
3
3.1
Terminal assignment
24V DC power supply
Table 3- 1
Terminal assignment 24V DC power supply
View
Signal name1) 1L+ 2L+ 1M 2M
Designation 24 V DC 24V DC (for looping through)2) Ground Ground (for looping through)2)
1) 1L+and 2L+, as well as 1Mand 2Mare bridged internally. 2) Permitted value 10 A
PROFIBUS DP with RS485 interface
The following table shows the signal names and the designations of the terminal assignment for the PROFIBUS DP interface.
Table 3- 2 Terminal assignment PROFIBUS DP with RS485 interface
View
Signal name 1 2 3 RxD/TxD-P 4 RTS 5 M5V2 6 P5V2 7 8 RxD/TxD-N 9 -
Designation Data line B Request To Send Ground (from station) Supply plus (from station) Data line A -
Additional information
You can find additional information on connecting the interface module and on the accessories in the ET 200MP Distributed I/O System (http://support.automation.siemens.com/WW/view/en/59193214) system manual.
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
11
Wiring 3.2 Block diagram
3.2
Block diagram
Block diagram
Figure 3-1 Block diagram of the IM155-5 DP ST interface module
3.3
Setting the PROFIBUS DP address
Introduction
Set the PROFIBUS DP address for the PROFIBUS DP on the IM 155-5 DP ST interface module. By setting the PROFIBUS DP address, you specify where the ET 200MP is to be addressed on the PROFIBUS DP.
Requirements
Valid PROFIBUS DP addresses are 1 to 125.
Each PROFIBUS DP address may be assigned only once on the PROFIBUS DP.
The set PROFIBUS DP address must match the PROFIBUS DP address specified for the ET 200MP in the configuration software.
Required tools
Screwdriver 3 - 3.5 mm
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
12
Manual, 08/2013, A5E32346748-AA
Wiring 3.3 Setting the PROFIBUS DP address
Setting the PROFIBUS DP address
1. Open the front cover of the interface module. 2. Use a screwdriver to set the required PROFIBUS address via the DIP switch. 3. Close the front cover.
Interface module IM 155-5 DP ST PROFIBUS DP address Example: PROFIBUS DP address
Figure 3-2 Setting the PROFIBUS DP address
Note Validity of the PROFIBUS DP address The IM 155-5 DP ST interface module does not apply a configured PROFIBUS DP address until after a POWER OFF/POWER ON transition.
Changing the PROFIBUS DP address
You can change the PROFIBUS DP address in exactly the same way as you set it. A change to the PROFIBUS DP address only takes effect for the ET 200MP after a POWER OFF/POWER ON transition on the interface module.
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
13
Wiring 3.3 Setting the PROFIBUS DP address
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
14
Manual, 08/2013, A5E32346748-AA
Interrupts, diagnostics, error and system messages
4
4.1
Diagnostics via LED display
Introduction
Diagnostics by means of LED display is an initial tool for error localization. In order to localize errors still further, you usually need to evaluate the display of the module status in STEP 7 or the diagnostics buffer of the CPU. The diagnostics buffer contains plain text information on the error that has occurred. For example, you can find the number of the relevant error OB in the plain text information.
LED display
The figure below shows the LED display on the interface module.
RUN (green) ERROR (red) MAINT (yellow)
Figure 4-1 LED display on the interface module
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
15
Interrupts, diagnostics, error and system messages 4.1 Diagnostics via LED display
Meaning of the RUN/ERROR/MAINT LED displays on the interface module
Table 4- 1 RUN Off On
Flashes
On Not relevant
On
Meaning of the RUN/ERROR/MAINT LED displays on the interface module
LEDs ERROR
Off On Off
Not relevant Flashes
On
MAINT Off On Off
Not relevant
Not relevant
Off
Meaning
Remedy
Supply voltage at interface module missing or too low
Check the supply voltage or switch it on on the interface module.
Test of LEDs during startup: The three LEDs light up simultaneously for approximately 0.25 s.
Interface module is deactivated.
Activate the interface module with the configuration software or the user program.
Interface module is not configured.
Configure the interface module with the configuration software.
ET 200MP starts up.
-
ET 200MP is configured.
ET 200MP is currently
-
exchanging data with the DP
master.
Group error and group error channels
Evaluate the diagnostics data and correct the error.
The set configuration does not correspond to the actual configuration of the ET 200MP.
Check the configuration of the ET 200MP to determine whether a module is missing or faulty, or whether a nonconfigured module has been plugged in.
Invalid configuration states
See section Invalid configuration states of the ET 200MP on PROFINET DP (Page 24).
Invalid PROFIBUS address (0,126,127)
Set the configured PROFIBUS address at the DIP switch and then switch on the interface module again.
Note Parameter assignment error in the I/O module
If incorrect parameters are assigned for an I/O module (for example, substitute value outside the value range), the I/O module switches to non-configured state. The RUN LED (green) flashes on the I/O module.
The IM 155-5 DP ST interface module does not indicate a parameter assignment error in the I/O module.
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
16
Manual, 08/2013, A5E32346748-AA
4.2
Alarms
Interrupts, diagnostics, error and system messages 4.2 Alarms
4.2.1
Diagnostics alarms
Actions after a diagnostics alarm in DPV1 mode
The error is entered in the channel diagnostics in the diagnostics frame: In DPV1 mode, diagnostics can be reported as diagnostic interrupts. After a diagnostics alarm, this is
Entered as diagnostic interrupt block in the diagnostics frame. Stored in the diagnostics buffer of the CPU. The ERROR LED of the interface module flashes. The diagnostic interrupt OB (OB 82) is called, if available. Acknowledgment of diagnostic interrupt (a new interrupt is then possible)
Maximum length of the diagnostics frame
The maximum frame length for the ET 200MP distributed I/O system with IM155-5 DP ST interface module (DPV1 mode) is 244 bytes.
Reading out the diagnostics data
Table 4- 2 Reading out the diagnostics data with STEP 7
Automation system with DP master
SIMATIC S7
Application
Slave diagnostics data as plain text in the "DP slave diagnostics" tab in the STEP 7 user interface Instruction "DP NRM_DG" (SFC 13) Reading out slave diagnostics (store in the data area of the user program) Instruction "RD_REC" (SFC 59) Reading out data records of the S7 diagnostics data (store in the data area of the user program) Instruction "RDREC" (SFB 52) Reading data records from the DP slave Instruction "RALRM" (SFB 54) Receiving interrupts from the interrupt OBs
See...
"Diagnosing hardware" in the STEP 7 online help SFC, see STEP 7 online help
See System and Standard Functions reference manual
SFB, see STEP 7 online help (system functions/function blocks)
SFB, see STEP 7 online help (system functions/function blocks)
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
17
Interrupts, diagnostics, error and system messages 4.2 Alarms
4.2.2
Slave diagnostics
The figure below shows the structure of the slave diagnostics.
Note The length of the diagnostics frame for the IM 155-5 DP ST varies between 6 and 244 bytes, depending on the number of diagnostic entries actually present. You can identify the length of the last received diagnostics frame in STEP 7 by referring to the RET_VAL parameter of the SFC 13.
Figure 4-2 Configuration of the slave diagnostics DP
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
18
Manual, 08/2013, A5E32346748-AA
Interrupts, diagnostics, error and system messages 4.2 Alarms
4.2.3
Station statuses 1 to 3
Station states 1 to 3 provide an overview of the status of a DP slave.
Structure of station status 1 (byte 0)
Table 4- 3 Structure of station status 1 (byte 0)
Bit
Meaning
Cause/Remedy
0
1: The DP slave is not responding to the DP · Is the correct PROFIBUS address set on
master.
the DP slave?
· Is the bus connector plugged in?
· Is the DP slave connected to the voltage supply?
· Is the RS485 repeater properly configured?
1
1: The DP slave is not yet ready to
exchange data.
· Wait, the DP slave is currently starting up.
2
1: The configuration data transferred from · Has the correct station type or the
the DP master to the DP slave does not
correct DP slave configuration been
match the DP slave configuration.
entered in the configuration software?
3
1: External diagnostics is available. (Group · Evaluate the ID-specific diagnostics, the
diagnostics display)
module status, and/or the channel
diagnostics. As soon as all errors have
been eliminated, bit 3 is reset. The bit is
set again when there is a new
diagnostics alarm in the bytes of the
above-mentioned diagnostics.
4
1: The required function is not supported by · Check the configuration.
the DP slave (for example, changing the
PROFIBUS address via software).
5
1: The DP master cannot interpret the
response of the DP slave.
· Check the bus configuration.
6
1: The DP slave type does not match the · Has the correct station type been
software configuration.
specified in the configuration software?
7
1: Parameters have been assigned to the · The bit is always 1, for example, if you
DP slave by a different DP master (not the
access the DP slave with the
one that currently has access to the DP slave).
programming device or another DP master.
· The "master PROFIBUS address" diagnostic byte contains the PROFIBUS address of the DP master that assigned parameters to the DP slave.
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
19
Interrupts, diagnostics, error and system messages 4.2 Alarms
Structure of station status 2 (byte 1)
Table 4- 4 Structure of station status 2 (byte 1)
Bit
Meaning
0
1: The DP slave parameters need to be reassigned.
1
1: A diagnostics alarm is present. The DP slave cannot operate until the problem is
eliminated (static diagnostics alarm).
2
1: The bit on the DP slave is always "1".
3
1: The watchdog is activated for this DP slave.
4
1: The DP slave has received the "FREEZE" control command.1
5
1: The DP slave has received the "SYNC" control command.1
6
0: Bit is always "0".
7
1: The DP slave is disabled, that is, it has been removed from the processing in
progress.
1 The bit is updated only if another diagnostics alarm changes also.
Structure of station status 3 (byte 2)
Table 4- 5 Structure of station status 3 (byte 2)
Bit 0 to 6
7
Meaning 0: Bits are always set to "0". 1: · There are more diagnostic alarms pending than the DP slave is able to store.
· The DP master cannot enter all the diagnostics alarms sent by the DP slave in its (channel) diagnostics buffer.
4.2.4
Master PROFIBUS address
The master PROFIBUS address diagnostics byte contains the PROFIBUS address of the DP master:
That assigned parameters to the DP slave
That has read and write access to the DP slave
The master PROFIBUS address is located in byte 3 of the slave diagnostics.
If the DP slave parameters were not assigned by the DP master, the master PROFIBUS diagnostic byte address contains "0xFF".
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
20
Manual, 08/2013, A5E32346748-AA
4.2.5
Interrupts, diagnostics, error and system messages 4.2 Alarms
Identifier-related diagnostics
The identifier-related diagnostics indicates whether or not modules of the ET 200MP distributed I/O system have errors. Identifier-related diagnostics starts at byte 6 and comprises 3 bytes. The following figure shows the structure of the identifier-rated diagnostics of the IM 1555 DP ST: interface module
Figure 4-3 Structure of the identifier-related diagnostics
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
21
Interrupts, diagnostics, error and system messages 4.2 Alarms
4.2.6
Module status
The module status indicates the status of the configured modules and provides more information on the identifier-related diagnostics with respect to the configuration. The module status begins after the identifier-related diagnostics and comprises 8 bytes.
The following figure shows the structure of the module status of the IM 155-5 DP ST interface module
Figure 4-4 Module status structure
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
22
Manual, 08/2013, A5E32346748-AA
4.2.7
Interrupts, diagnostics, error and system messages 4.2 Alarms
Channel-specific diagnostics
Channel-related diagnostics provide information about channel errors in modules and details of the identifier-related diagnostics. Channel-related diagnostic data starts after the module status. Channel-related diagnostics do not affect the module status. The following figure shows the structure of the identifier-rated diagnostics of the IM 155-5 DP ST interface module
Figure 4-5 Structure of the channel diagnostics
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
23
Interrupts, diagnostics, error and system messages 4.2 Alarms
4.2.8
Invalid configuration states of the ET 200MP on PROFIBUS DP
Invalid configuration states
The following tables shows invalid configuration states of the ET 200MP distributed I/O system. The incorrect configuration states lead to the failure of the interface module or prevent the exchange of user data with the I/O modules. Invalid configuration states are mapped to the module status of slot 1 (power status) or slot 2 (interface module).
Table 4- 6 Invalid configuration states on the ET 200MP
Invalid configuration states
Power budget fault (overload) Power supply module detected Permitted number of I/O modules exceeded No U connector detected on an IM port More than one bus master module (IM/CPU) detected Communication has failed with slot x
Signaling
Module status
Slot
Module fault (01) Slot 1 (power status) Wrong module (10) Slot 1 (power status) Module fault (01) Slot 2 (interface module) Module fault (01) Slot 2 (interface module) Module fault (01) Slot 2 (interface module) Module fault (01) Slot 2 (interface module)
You can find additional information on the module status in the section Module status (Page 22).
Additional information
You can find additional information on maximum configuration and on power budget in the ET 200MP Distributed I/O System (http://support.automation.siemens.com/WW/view/en/59193214) system manual.
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
24
Manual, 08/2013, A5E32346748-AA
Interrupts, diagnostics, error and system messages 4.3 Interrupts
4.3
Interrupts
Definition
The interrupt section of the slave diagnostic information indicates the interrupt type and the event that led to an interrupt being triggered. The interrupt section comprises a maximum 58 bytes.
Position in the diagnostic frame
The interrupt section is located after the channel diagnostics (only in DPV1 mode).
Example: If 3 channel-related diagnostic entries are pending, the interrupt section starts at byte 26.
Data record
The diagnostics data of a module can be up to 58 bytes in length and is located in data records 0 and 1:
Data record 0 contains 4 bytes of diagnostic data describing the current state of an automation system. DS0 is part of the header information of OB 82 (local data bytes 8 to 11).
Data record 1 contains the 4 bytes of diagnostic data that are also contained in data record 0, and additional 6 bytes DS1, and up to 8 channel diagnostic entries, each of which comprises 6 bytes in Siemens S7+ format.
DS0 and DS1 can be read with SFC 59 (RD_REC) or SFB 52 (RDREC).
List of Contents
The contents of the interrupt information depend on the interrupt type:
For diagnostic interrupts, diagnostic data record 1 (up to 58 bytes) is sent as interrupt status information (starting at byte x+4).
The status interruption for hardware interrupts is 4 bytes in length.
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
25
Interrupts, diagnostics, error and system messages 4.3 Interrupts
Structure of interrupts
The interrupt section for the ET 200MP distributed I/O system is structured as follows:
Figure 4-6 Structure of the interrupt status of the interrupt section
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
26
Manual, 08/2013, A5E32346748-AA
Diagnostic interrupt, byte x+4 to x+7 (DS 0)
Interrupts, diagnostics, error and system messages 4.3 Interrupts
Figure 4-7 Structure of bytes x+4 to x+7 for diagnostic interrupt (DS 0)
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
27
Interrupts, diagnostics, error and system messages 4.3 Interrupts Diagnostic interrupt from the modules, starting at byte x+8
Figure 4-8 Structure starting at byte x+8
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
28
Manual, 08/2013, A5E32346748-AA
Interrupts, diagnostics, error and system messages 4.3 Interrupts
Diagnostic interrupt from the modules, starting at byte x+14
The channel error entries start at byte x+14. A channel error entry is 6 bytes long and can occur up to 8 times starting at byte x+14.
Figure 4-9 Structure starting at byte x+14 The following table explains the channel error entries.
Channel number Channel properties
Channel error type
Description
0 to 0x7FFF: Channel number for channel error
0x8000: Entire submodule
Bit 0 to 7
00H: Free data type
01H: bit
02H: 2 bit
03H: 4 bit
04H: byte
05H: word
06H: Double word
07H: 2 double word
08H to FFH: Reserve
Bit 8
0B: Single channel
1B: Channel group
Bit 9, 10
00H: Diagnostics
01H: Maintenance demanded
02H: Maintenance required
03H: Reserve
Bit 11, 12 00H: Channel error-free
01H: Incoming diagnostics
02H: Outgoing diagnostics
03H: Outgoing diagnostics, but other diagnostics are also pending on this channel
Bit 13 to 15 00H: Reserve
01H: Input channel
02H: Output channel
03H: Input/output channel
Refer to respective manual for explanation.
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
29
Interrupts, diagnostics, error and system messages 4.3 Interrupts
Example of a Diagnostic Interrupt
Figure 4-10 Example of a Diagnostic Interrupt
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
30
Manual, 08/2013, A5E32346748-AA
Interrupts, diagnostics, error and system messages 4.3 Interrupts
Hardware interrupt of digital and analog input modules
Figure 4-11 Structure as of Byte x+4 for hardware interrupt
4.3.1
Evaluating interrupts of ET 200MP
Introduction
With certain process states/errors, the DP slave in each case creates an interrupt block with the corresponding information in the diagnostics frame (DPV1 interrupt mechanism). Regardless of this, the diagnostic status of the DP slave is displayed in the identifier-related diagnostics, in the module status, and in the channel diagnostics.
Interrupts in DPV1 mode
The ET 200MP distributed I/O system supports the following interrupts: Diagnostic interrupts Hardware interrupts
4.3.2
Triggering of a diagnostic interrupt
Triggering a diagnostic interrupt
For an incoming or outgoing event (e.g. wire break on a channel of an I/O module), the module triggers a diagnostic interrupt if this is configured accordingly.
The CPU interrupts processing of the user program and processes the diagnostic interrupt OB (OB 82). The event that triggered the interrupt is entered in the start information of the diagnostic interrupt OB.
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
31
Interrupts, diagnostics, error and system messages 4.3 Interrupts
4.3.3
Triggering of a hardware interrupt
Triggering a hardware interrupt
When a hardware interrupt occurs, the CPU interrupts user program execution and processes the hardware interrupt block OB, e.g., OB 40. The event that triggered the interrupt is added to the start information of the hardware interrupt OB.
Note Diagnostics "Hardware interrupt lost" (from I/O module)
Do not use hardware interrupts for functional purposes (e.g. cyclic generation of hardware interrupts).
If the hardware interrupt load is too high, hardware interrupts can get lost depending on the number of I/O modules and the communication load.
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
32
Manual, 08/2013, A5E32346748-AA
Technical specifications
5
5.1
Technical specifications
Technical specifications of the IM 155-5 DP ST
6ES7155-5BA00-0AB0
General information
Hardware version
01
Firmware version
V1.0.0
Vendor identifier (VendorID)
81AAh
Product function
I&M data
Yes; IM0 to IM3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V12.0 SP1
STEP 7 can be configured/integrated as of version as of V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / 5.1
Supply voltage
Type of supply voltage
DC
Rated value (DC)
24 V
Valid range low limit (DC)
20.4 V
Valid range high limit (DC)
28.8 V
Reverse polarity protection
Yes
Power and voltage failure backup
Power/voltage failure backup time
5 ms
Input current
Current consumption (rated value)
0.2 A; at 24 V DC and without load
Current consumption, max.
1.2 A; at 20.4 V DC and max. load
Inrush current, max.
4 A
I²t
0.09 A²s
Power
Incoming power to the backplane bus
14 W
Power loss
Power loss, typ.
4 W; typical
Address area
Address space per module
Address space per module, max.
128 byte; per input/output
Address space per station
Address space per station, max.
244 byte; per input/output
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
33
Technical specifications 5.1 Technical specifications
Hardware configuration System power supply can be plugged in to left of IM Number of permissible power segments Modules per rack, max. Interfaces Number of PROFIBUS interfaces 1. Interface Protocols
· PROFIBUS DP slave
Interface hardware RS 485 Transmission rate, max. Protocols PROFIBUS Services · SYNC capability
· FREECE capability
· DPV1
Interrupts/diagnostics/status information Status display Interrupts Interrupts Diagnostic alarms Diagnostic functions Diagnostic indicator LED RUN LED ERROR LED MAINT LED Electrical isolation between backplane bus and electronics between PROFIBUS DP and all other circuit components between supply and all other circuits Permitted potential difference Between different circuits Insulation Insulation tested with
6ES7155-5BA00-0AB0 No 1 12; I/O modules 1
Yes
12 Mbps
Yes Yes Yes
Yes Yes Yes Yes; green LED Yes; red LED Yes; yellow LED No Yes No 75 V DC / 60 V AC 707 V DC (type test)
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
34
Manual, 08/2013, A5E32346748-AA
Ambient conditions Operating temperature Horizontal installation, min. Horizontal installation, max. Vertical installation, min. Vertical installation, max. Dimensions Width Height Depth Weights Weight, approx.
Technical specifications 5.1 Technical specifications
6ES7155-5BA00-0AB0
0 °C 60 °C 0 °C 40 °C
35 mm 147 mm 129 mm
360 g
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
35
Technical specifications 5.1 Technical specifications
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
36
Manual, 08/2013, A5E32346748-AA
Dimension drawing
A
A.1
Dimension drawing IM 155-5 DP ST
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimensional drawings of the IM 155-5 DP ST interface module
Figure A-1 Dimensional drawing of the IM 155-5 DP ST interface module, front and side views
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
37
Dimension drawing A.1 Dimension drawing IM 155-5 DP ST Dimensional drawing of the IM 155-5 DP ST interface module, side view with open front cover
Figure A-2 Dimensional drawing of the IM 155-5 DP ST interface module, side view with open front cover
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
38
Manual, 08/2013, A5E32346748-AA
Response times
B
B.1
Response times of the ET 200MP
Introduction
The response time of the IM 155-5 DP ST is made up of: The minimum slave interval for the IM plus The backplane bus cycle time.
Backplane bus cycle time
The backplane bus cycle time is the time the interface module requires to output new output data, read new input data and then copy it to the PROFIBUS send buffer. The backplane bus cycle time in s is made up as follows: (amount of output data in bytes) x 1.6958 + 77.786 (rounded) plus (amount of input data in bytes) x 0.3481 + 33.587 (rounded) plus Operating system processing time (500 s).
Example configuration for the calculation of the backplane bus cycle time
The following are used in the example:
Table B- 1 Example configuration for the calculation of the backplane bus cycle time
I/O module
Analog output module AQ 4xU/I ST Analog output module AQ 4xU/I ST with value status Digital output module DQ 32x24VDC/0.5A ST with value status Digital input module DI 32x24VDC HF Analog input module AI 8xU/I/RTD/TC ST Sum
Output data in bytes 8 8 4 20
Input data in bytes 1 4 4 16 25
IM 155-5 DP ST interface module (6ES7155-5BA00-0AB0)
Manual, 08/2013, A5E32346748-AA
39
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
SIMATIC
ET 200MP Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual
Preface
S7-1500 / ET 200MP Documentation Guide
1
Product overview
2
Wiring
3
Interrupts and diagnostic, error, and system alarms
4
Technical specifications
5
Dimension drawing
A
08/2019
A5E38017683-AB
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E38017683-AB 08/2019 Subject to change
Copyright © Siemens AG 2017 - 2019. All rights reserved
Preface
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that can be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Purpose of the documentation
This manual supplements the system manual S7-1500, ET 200MP automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792). Functions that generally relate to the system are described in this manual.
The information provided in this manual and in the system/function manuals support you in commissioning the system.
Conventions
Please also observe notes marked as follows:
Note A note contains important information on the product, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
3
Table of contents
Preface ................................................................................................................................................... 3
1 S7-1500 / ET 200MP Documentation Guide ............................................................................................ 5
2 Product overview .................................................................................................................................... 7
2.1
Properties ................................................................................................................................. 7
2.2
Functions.................................................................................................................................. 9
3 Wiring ................................................................................................................................................... 12
3.1
Terminal assignment.............................................................................................................. 12
3.2
Block diagram ........................................................................................................................ 13
4 Interrupts and diagnostic, error, and system alarms............................................................................... 14
4.1
Status and error displays ....................................................................................................... 14
4.2 4.2.1 4.2.2
Interrupts ................................................................................................................................ 17 Triggering of a diagnostic interrupt ........................................................................................ 18 Triggering of a hardware interrupt.......................................................................................... 18
4.3 4.3.1 4.3.2 4.3.3 4.3.4
Alarms .................................................................................................................................... 19 Diagnostic alarms................................................................................................................... 19 Channel diagnostics............................................................................................................... 20 Invalid configuration states of the ET 200MP on PROFINET IO ........................................... 21 STOP of the IO controller and recovery of the IO device ...................................................... 21
5 Technical specifications ........................................................................................................................ 22
A Dimension drawing ............................................................................................................................... 26
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
4
Manual, 08/2019, A5E38017683-AB
S7-1500 / ET 200MP Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
5
S7-1500 / ET 200MP Documentation Guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
6
Manual, 08/2019, A5E38017683-AB
Product overview
2.1
Properties
Article number
6ES7155-5AA00-0AA0
View of the module
2
Properties
Figure 2-1 View of the IM 155-5 PN BA interface module
Technical properties Connects the ET 200MP distributed I/O system with PROFINET IO 24V DC power supply (SELV/PELV) PROFINET IO connection using RJ45 bus connector
Supported functions (Page 9)
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
7
Product overview 2.1 Properties
Maximum configuration
The integrated power supply of the interface module feeds 14 W into the backplane bus. Up to 12 I/O modules can be supplied this way. The exact number of operable modules is determined by the power budget (see relevant section in the S7-1500, ET 200MP automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual).
The interface module IM 155-5 PN BA does not support any additional power supply (PS) modules.
Maximum amount of I/O data
You can operate a maximum of 64 byte inputs and 64 byte outputs per station.
Accessories
A detailed list of the available accessories is available in the system manual S7-1500, ET 200MP automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
8
Manual, 08/2019, A5E38017683-AB
Product overview 2.2 Functions
2.2
Functions
PROFINET IO
The interface module supports the following PROFINET IO functions: Integrated switch with 2 ports Supported Ethernet services: ping, arp, SNMP, LLDP Port diagnostics Disabling ports Minimum update time 1 ms Device replacement without programming device Media redundancy (MRP) Shared device with two IO Controllers Module-internal Shared Input/Shared Output (MSI/MSO) Identification data I&M 0 to 3 Firmware update via PROFINET IO Reset to factory settings via PROFINET IO Module division into submodules PROFIsafe (as of FW version V4.3.0)
Note Docking system
The interface module IM155-5 PN BA cannot be used as a docking station. The use as a docking unit (function: IO devices changing during operation) in a docking system is supported.
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
9
Product overview 2.2 Functions
Requirements
The following requirements apply for the usage of the PROFINET IO functions with the IM 155-5 PN BA interface module:
You use the following as the design software:
STEP 7 (TIA Portal) as of V15.1 with HSP_V15_1_0187_001_ET200MP_PN_BA_4.3
With GSD file: The usability of the PROFINET IO functions depends on the configuration software (Siemens and/or third party). Below, the usability of the PROFINET IO functions is described for STEP 7 only.
STEP 7 as of V5.5 SP3
STEP 7 (TIA Portal as of V15.1)
The GSD file can be found on the Internet (https://support.industry.siemens.com/cs/ww/en/view/68189683).
With GSD file no F-modules can be used.GSD
Cabling with fixed connection setting
If you set a fixed connection setting of the port in STEP 7, you should also deactivate "Autonegotiation/Autocrossover".
You can find additional information in the STEP 7 online help and
as of STEP 7 V15, in the PROFINET with STEP 7 V15 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Device replacement without programming device
It is easy to replace IO devices that support this function:
The device name does not have to be assigned with the programming device.
The replaced IO device is assigned the device name by the IO controller. The IO controller uses the configured topology and the neighboring relationships determined by the IO devices for this purpose. All involved devices must support the LLDP protocol (Link Layer Discovery Protocol). The configured target topology must match the actual topology.
IO devices that have been used in another configuration must be reset to the factory settings before they can be used again (see S7-1500, ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual).
You can find additional information in the STEP 7 online help and
as of STEP 7 V15, in the PROFINET with STEP 7 V15 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
10
Manual, 08/2019, A5E38017683-AB
Product overview 2.2 Functions
Media redundancy
Function for safeguarding communication and system availability. A ring topology ensures that an alternative communication path is made available if a transmission link fails.
You can find additional information in the STEP 7 online help and
as of STEP 7 V15, in the PROFINET with STEP 7 V15 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Shared device
IO device which makes its data available to multiple IO Controllers.
You can find additional information in the STEP 7 online help and
as of STEP 7 V15, in the PROFINET with STEP 7 V15 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Submodules
The IM 155-5 PN BA interface module supports the module division of I/O modules into up to 9 submodules. This allows parts of an I/O module to be separately configured and assigned parameters. It is possible to assign each of these submodules to different IO controllers. The functions Firmware update Write I&M data Calibration can only be executed if you have configured Submodule 1 during configuration.
Module-internal Shared Input/Shared Output (MSI/MSO)
The Module-internal Shared Input function allows an input module to make its input data available to a further IO Controller. Each controller has read access to the same channels.
The Module-internal Shared Output function allows an output module to make its output data available to a further IO Controller. One IO controller has write access. A further IO controller can have read access to the same channels.
You can find more information on this topic in the STEP 7 online help and
As of STEP 7 V14, in the PROFINET with STEP 7 V14 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
11
Wiring
3
3.1
Terminal assignment
24 V DC supply voltage
The following table shows the signal names and the descriptions of the terminal assignment for a 24 V DC supply voltage.
Table 3- 1 Terminal assignment 24 V DC supply voltage
View
Signal name1 1L+ 2L+ 1M 2M
Description 24 V DC 24 V DC (for looping through)2 Ground Ground (for looping through)2
1 1L+ and 2L+ as well as 1M and 2M are bridged internally. 2 Maximum 10 A permitted.
PROFINET interface X1 Port 2
If autonegotiation is disabled, the RJ-45 socket (X1 Port 2) has the switch assignment (MDI-X).
Reference
You can find additional information on connecting the interface module and on the accessories (RJ45 bus connector) in the system manual S7-1500, ET 200MP automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
12
Manual, 08/2019, A5E38017683-AB
Wiring 3.2 Block diagram
3.2
Block diagram
Block diagram
The following figure shows the block diagram of the interface module IM 155-5 PN BA.
X80 24 VDC
PN X1 P1
Electronics PROFINET 2-port switch Backplane bus interface Internal supply voltage Infeed of supply voltage PROFINET interface X1 Port 1
PN X1 P2 PROFINET interface X1 Port 2
L+ M RN ER MT X1 P1, X1 P2
24 VDC supply voltage Ground LED RUN (green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX (green/yellow)
Figure 3-1 Block diagram of the IM 155-5 PN BA interface module
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
13
Interrupts and diagnostic, error, and system alarms
4
4.1
Status and error displays
Introduction
Diagnostics by means of LED display is an initial tool for error localization. To further limit the error, you usually evaluate the display of the CPU, the display of the module status in STEP 7 or the diagnostics buffer of the CPU. The buffer contains plain text information on the error that has occurred. For example, you will find the number of the appropriate error OB there.
LED display
The figure below shows the LED display on the IM 155-5 PN BA interface module.
RUN (green) ERROR (red) MAINT (yellow) P1 LINK/TX/RX (green/yellow) P2 LINK/TX/RX (green/yellow)
Figure 4-1 LED display on the interface module
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
14
Manual, 08/2019, A5E38017683-AB
Interrupts and diagnostic, error, and system alarms 4.1 Status and error displays
Meaning of the LEDs RUN / ERROR / MAINT
Table 4- 1 Meaning of the LEDs RUN / ERROR / MAINT
RUN Off On Flashes
On Not relevant
Flashes
LEDs ERROR
Off On Off
Not relevant Flashes
Flashes
Meaning
Remedy
MAINT Off On Off
Supply voltage not present at interface module or too small
Test of LEDs during startup: The three LEDs light up simultaneously for approximately 0.25 s. Interface module is deactivated.
Interface module is not configured.
Not relevant
ET 200MP starts up.
ET 200MP is reset to factory settings.
ET 200MP is currently exchanging data with the IO controller.
Check the supply voltage or turn it on at the interface module. ---
Activate the interface module with the configuration software or the user program. Configure the interface module with the configuration software. ---
Not relevant
Flashes
Group error and group error channels
The set configuration does not correspond to the actual configuration of the ET 200MP.
Invalid configuration states
Parameter assignment error in the I/O module
"Node flash test" is performed. (The LEDs P1 and P2 of the PROFINET interface are also flashing.) Hardware or firmware defective. (The LEDs P1 and P2 of the PROFINET interface are not flashing.)
Evaluate the diagnostics data and correct the error. Check the design of the ET 200MP to see whether a module is missing or defective, or whether a non-configured module is inserted. See chapter Invalid configuration states of the ET 200MP on PROFINET IO (Page 21) Evaluate the display of the module status in STEP 7 and correct the error in the corresponding I/O module. ---
Replace the interface module.
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
15
Interrupts and diagnostic, error, and system alarms 4.1 Status and error displays
Meaning of the LEDs P1 LINK/TX/RX, P2 LINK/TX/RX
Table 4- 2 Meaning of the LEDs P1 LINK/TX/RX, P2 LINK/TX/RX
LEDs P1 LINK/TX/RX, P2 LINK/TX/RX
Off
On
flickers Flashes
Meaning
Remedy
There is no Ethernet connection between the
Check whether the bus cable to the switch/IO
PROFINET interface of your PROFINET device controller is interrupted.
and a communication partner (e.g. IO controller).
There is an Ethernet connection between the
---
PROFINET interface of your PROFINET device
and a communication partner (e.g., IO controller).
There is active data traffic (sending/receiving) via --the Ethernet connection.
"Node flash test" is performed. (The LEDs
---
RUN/ERROR/MAINT are also flashing.)
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
16
Manual, 08/2019, A5E38017683-AB
Interrupts and diagnostic, error, and system alarms 4.2 Interrupts
4.2
Interrupts
Introduction
The I/O device generates interrupts as a reaction to specific error events. Interrupts are evaluated based on the I/O controller used.
Evaluating interrupts with I/O controllers
The ET 200MP distributed I/O system supports the following interrupts:
Diagnostic interrupts
Hardware interrupts
In the event of an interrupt, interrupt OBs are automatically called in the CPU of the IO controller.
Information on the cause and class of the error is already available, based on the OB number and start information.
Detailed information on the error event can be obtained in the error OB using the instruction "RALRM" (read additional interrupt information).
System diagnostics
In STEP 7 (TIA Portal) as of V14, innovative system diagnostics is available for devices of the S7-1500 automation system and ET 200MP. Independently of the cyclical user program, alarms are made available on the display of the S7-1500 CPU, to the S7-1500 CPU web server, to the HMI device and in STEP 7.
For additional information on the system diagnostics, refer to the System Diagnostics function manual. (https://support.industry.siemens.com/cs/ww/en/view/59192926).
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
17
Interrupts and diagnostic, error, and system alarms 4.2 Interrupts
4.2.1
Triggering of a diagnostic interrupt
Triggering of a diagnostic interrupt
For an incoming or outgoing event (e.g., wire break on a channel of an I/O module), the module triggers a diagnostic interrupt if this is configured accordingly in STEP 7 (TIA Portal).
The CPU interrupts user program execution and executes the diagnostic interrupt OB. The event that triggered the interrupt is entered in the start information of the diagnostic interrupt OB.
4.2.2
Triggering of a hardware interrupt
Triggering of a hardware interrupt
When a hardware interrupt occurs, the CPU interrupts execution of the user program and processes the hardware interrupt OB. The event that triggered the interrupt is entered in the start information of the hardware interrupt OB.
Note Diagnostics "Hardware interrupt lost" (from I/O module) Avoid creating hardware interrupts cyclically. If the hardware interrupt load is too high, hardware interrupts can get lost depending on the number of I/O modules and the communication load.
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
18
Manual, 08/2019, A5E38017683-AB
4.3
Alarms
Interrupts and diagnostic, error, and system alarms 4.3 Alarms
4.3.1
Diagnostic alarms
Requirement
In order to generate diagnostics, the IM 155-5 PN BA interface module parameters must have been assigned once.
Actions after a diagnostic alarm
There can be more than one diagnostic alarm at the same time. Actions initiated by diagnostic alarms:
The ERROR LED of the interface module flashes.
Diagnostic data is reported as diagnostic interrupts to the CPU of the IO controller and can be read via data records.
Incoming diagnostic alarms are saved to the diagnostic buffer of the IO controller.
The diagnostic interrupt OB is called.
You can find additional information in the STEP 7 online help.
Reading out the diagnostic data
Table 4- 3 Reading out the diagnostic data with STEP 7
Automation system with IO controller
SIMATIC S7
Application
See...
Diagnostic data as plain text in STEP 7 using online view and diagnostic view
Instruction "RDREC" Read data records from the IO device
Instruction "RALRM" Receive interrupts from the IO device
STEP 7 online help PROFINET with STEP 7 V15 function manual (https://support.industry.siemen s.com/cs/ww/en/view/49948856)
Additional information on the data records for PROFINET IO
You can find the structure of the diagnostic data records and programming examples in the programming manual From PROFIBUS DP to PROFINET IO (https://support.industry.siemens.com/cs/ww/en/view/19289930) and in the application example on the Internet (https://support.industry.siemens.com/cs/ww/en/view/24000238).
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
19
Interrupts and diagnostic, error, and system alarms 4.3 Alarms
Causes of error and troubleshooting
The error causes and corrective measures of the diagnostic alarms are described in the manuals for the I/O modules (https://support.industry.siemens.com/cs/ww/en/ps/14039/man) in the Interrupts/Diagnostic alarms section.
4.3.2
Channel diagnostics
Function
Channel diagnostics provides information about channel faults in modules. Channel faults are mapped as channel diagnostic data in IO diagnostic data records. The "RDREC" instruction is used to read the data record.
Structure of the diagnostic data records
The data records supported by the ET 200MP are based on the standard PROFINET IO Application Layer Service Definition V2.3.
You can purchase the standard from the PROFIBUS User Organization on the Internet (https://www.profibus.com).
Codes of the extended channel diagnostics
With the IM 155-5 PN BA interface module, the following extended channel diagnostics are reported by the Interface module in slot 1:
Table 4- 4 Extended channel diagnostics IM 155-6 PN BA
ChannelErrorType
0x0601 0x0602 0x0602 0x0602 0x0610
0x0610
ExtendedChannel ErrorType 0x0682 0x0692 0x0696 0x0697 0x06B1
0x06B2
Associated value Diagnostics (AddValue)
Slot
Slot 0
0
1 (Interface module slot) 0
Communication has failed with slot <No.> Permitted number of I/O modules exceeded No U connector detected on an IM port More than one bus master module (IM/CPU) detected Power budget error (overload has been detected in at least one power segment)
Error IM power supply: Power supply not active or power supply active
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
20
Manual, 08/2019, A5E38017683-AB
Interrupts and diagnostic, error, and system alarms 4.3 Alarms
Additional information
You can find additional information on maximum configuration, power budget and power segments in the S7-1500, ET 200MP automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
4.3.3
Invalid configuration states of the ET 200MP on PROFINET IO
Invalid configuration states
The following invalid configuration states of the ET 200MP lead to a short failure of the ET 200MP IO device or prevent the exchange of user data with the I/O modules.
Number of modules exceeds maximum configuration
Faulty backplane bus (e.g., additional IM present).
Additional information
You can find additional information on maximum configuration and on power budget in the s7-1500, ET 200MP automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
See also:
Status and error displays (Page 14)
4.3.4
STOP of the IO controller and recovery of the IO device
STOP of the SIMATIC IO controller
Diagnostic data received from the IO device while the IO controller is in STOP state does not initiate a call of the corresponding OBs when the IO controller goes into RUN. You have to read the data record E00CH using the "RDREC" in the startup OB. This record contains all diagnostic data for the slots assigned to an IO controller in an IO device.
Recovery of the SIMATIC IO device
If you want to read the diagnostic data in the STOP state of the IO controller, you have to read the E00CH data record using the "RDREC" instruction. This record contains all diagnostic data for the slots assigned to an IO controller in an IO device.
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
21
Technical specifications
5
Technical specifications of the IM 155-5 PN BA
Article number General information
Product type designation HW functional status Firmware version Vendor identification (VendorID) Device identifier (DeviceID) Product function · I&M data
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFINET as of GSD version/GSD revision
Configuration control via user data via dataset
Supply voltage Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection Short-circuit protection
Mains buffering · Mains/voltage failure stored energy time
Input current Current consumption (rated value) Current consumption, max. Inrush current, max. I²t
Power Infeed power to the backplane bus
6ES7155-5AA00-0AA0
IM 155-5 PN BA FS02 V4.3.0 0x002A 0X0312
Yes; I&M0 to I&M3
V15.1 with HSP 187
V5.5 SP3 / -
V2.3 / -
No No
24 V 20.4 V 28.8 V Yes Yes
5 ms
1 A 1.7 A 2.8 A 0.04 A²·s
14 W
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
22
Manual, 08/2019, A5E38017683-AB
Technical specifications
Article number Power loss
Power loss, typ. Address area Address space per module
· Address space per module, max. Address space per station
· Address space per station, max. Hardware configuration
Integrated power supply System power supply can be plugged in to left of IM Number of permissible power segments Rack · Modules per rack, max. Submodules · Number of submodules per station, max. Interfaces Number of PROFINET interfaces 1. Interface Interface types · Number of ports
· integrated switch
· RJ 45 (Ethernet)
· BusAdapter (PROFINET) Protocols
· PROFINET IO Device
· Media redundancy Interface types RJ 45 (Ethernet)
· Transmission procedure
· 100 Mbps
· Autonegotiation
· Autocrossing Protocols PROFINET IO Device Services
Isochronous mode Open IE communication
6ES7155-5AA00-0AA0 3 W
64 byte; per input / output
64 byte; per input / output
Yes No 1 12; I/O modules
108; 9 submodules / I/O modules
1; 2 ports (switch) RJ45
2 Yes Yes No
Yes Yes
PROFINET with 100 Mbit/s full duplex (100BASE-TX) Yes Yes Yes
No Yes
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
23
Technical specifications
Article number IRT
PROFIenergy
Prioritized startup Shared device
Number of IO Controllers with shared device, max.
Redundancy mode · MRP
· MRPD
· PROFINET system redundancy (S2) Open IE communication
· TCP/IP
· SNMP
· LLDP Isochronous mode
Isochronous operation (application synchronized up to terminal) Equidistance Interrupts/diagnostics/status information Status indicator Alarms Diagnostics function Diagnostics indication LED · RUN LED
· ERROR LED
· MAINT LED
· Connection display LINK TX/RX Potential separation
between backplane bus and electronics between PROFINET and all other circuits between supply and all other circuits Permissible potential difference between different circuits Isolation Isolation tested with Standards, approvals, certificates Network loading class
6ES7155-5AA00-0AA0 No No No Yes 2
Yes No No
Yes Yes Yes
No No
Yes Yes Yes
Yes; Green LED Yes; Red LED Yes; Yellow LED Yes; 2x green-yellow LEDs
No Yes; 1500 V AC No
Safety extra low voltage SELV
707 V DC (type test)
2
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
24
Manual, 08/2019, A5E38017683-AB
Technical specifications
Article number Ambient conditions Ambient temperature during operation
· horizontal installation, min.
· horizontal installation, max.
· vertical installation, min.
· vertical installation, max. Altitude during operation relating to sea level
· Installation altitude above sea level, max.
Dimensions Width Height Depth
Weights Weight, approx.
6ES7155-5AA00-0AA0
0 °C 60 °C 0 °C 40 °C
5 000 m; Restrictions for installation altitudes > 2 000 m, see manual
35 mm 147 mm 129 mm
236 g
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
25
Dimension drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimension drawings of the IM 155-5 PN BA interface module
Figure A-1 Dimension drawing of the IM 155-5 PN BA interface module, front and side views
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
26
Manual, 08/2019, A5E38017683-AB
Dimension drawing
Figure A-2 Dimension drawing of theIM 155-5 PN BA interface module, side view with open front cover
Interface module IM 155-5 PN BA (6ES7155-5AA00-0AA0)
Manual, 08/2019, A5E38017683-AB
27
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
SIMATIC
ET 200MP IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual
Preface
Guide to documentation
1
Product overview
2
Wiring
3
Parameter
4
Interrupts and diagnostic, error, and system alarms
5
Technical specifications
6
Dimension drawing
A
Response times
B
03/2020
A5E32840985-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E32840985-AC 03/2020 Subject to change
Copyright © Siemens AG 2014 - 2020. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500, ET 200MP Automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792). Functions that generally relate to the system are described in this manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the system.
Conventions
Please also observe notes labeled as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product, or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
4
Equipment Manual, 03/2020, A5E32840985-AC
Table of contents
Preface ................................................................................................................................................... 3
1 Guide to documentation .......................................................................................................................... 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ................................................................................................................................ 11
2.2 2.2.1 2.2.2 2.2.3
Functions ................................................................................................................................14 PROFINET IO .........................................................................................................................14 Configuration control (option handling)...................................................................................20 System redundancy on S7-400H............................................................................................20
3 Wiring ................................................................................................................................................... 21
3.1
Pin assignment .......................................................................................................................21
3.2
Block diagram .........................................................................................................................22
4 Parameter............................................................................................................................................. 23
4.1
Parameters .............................................................................................................................23
4.2 4.2.1 4.2.2
Description of parameters.......................................................................................................23 Connection to supply voltage L+ ............................................................................................23 Configuration control (option handling)...................................................................................25
4.3 4.3.1 4.3.2 4.3.3 4.3.4 4.3.5
Configuration control (option handling)...................................................................................25 Configuration control and control data record ........................................................................25 Feedback data record .............................................................................................................29 Configure configuration control without empty slots ...............................................................31 Extending the configuration ....................................................................................................33 Combining configurations .......................................................................................................35
5 Interrupts and diagnostic, error, and system alarms............................................................................... 37
5.1
Status and error displays ........................................................................................................37
5.2 5.2.1 5.2.2
Interrupts .................................................................................................................................40 Triggering of a diagnostic interrupt .........................................................................................41 Triggering of a hardware interrupt ..........................................................................................41
5.3 5.3.1 5.3.2 5.3.3 5.3.4 5.3.5
Alarms .....................................................................................................................................42 Diagnostic alarms ...................................................................................................................42 Maintenance events................................................................................................................44 Channel diagnostics................................................................................................................45 Invalid configuration states of the ET 200MP on PROFINET IO ............................................50 STOP of the IO controller and recovery of the IO device .......................................................51
6 Technical specifications ........................................................................................................................ 52
A Dimension drawing ............................................................................................................................... 56
B Response times .................................................................................................................................... 58
B.1
Response times of the ET 200MP ..........................................................................................58
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
5
Guide to documentation
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
7
Guide to documentation
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
8
Equipment Manual, 03/2020, A5E32840985-AC
Guide to documentation
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
9
Guide to documentation
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
10
Equipment Manual, 03/2020, A5E32840985-AC
Product overview
2.1
Properties
Order number
6ES7155-5AA00-0AC0
View of the module
2
Figure 2-1 View of the IM 155-5 PN HF interface module
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
11
Product overview 2.1 Properties
Properties
Technical properties Connects the ET 200MP distributed I/O system with PROFINET IO 24 VDC supply voltage (SELV/PELV) PROFINET IO connection using RJ45 bus connector Pulling and plugging I/O modules on the active backplane bus (multi hot swapping) You can find additional information, in the Active backplane bus (https://support.industry.siemens.com/cs/ww/en/view/109769815)Equipment Manual.
Supported functions (Page 14)
Maximum configuration
512 bytes I/O data per station
The integrated power supply of the interface module feeds 14 W into the backplane bus. Up to 12 I/O modules can be supplied with this. The exact number of operable modules is determined by the power budget (see relevant section in the system manual S7-1500, ET 200MP Automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792)).
A maximum of one power supply module (PS) upstream from the interface module and two downstream from the interface module is possible.
If you use a power supply module (PS) upstream from the interface module, the maximum possible configuration is a total of 32 modules (up to 30 modules downstream from the interface module).
Maximum amount of I/O data (PROFINET IO)
Maximum amount of I/O data The sum of the gross data for all I/O controllers for input and output data must not exceed the following value: 4000 bytes
Maximum gross data length per IO controller (for input and output data): Without system redundancy S2: 1020 bytes With system redundancy S2: 2 x 1020 bytes
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
12
Equipment Manual, 03/2020, A5E32840985-AC
Product overview 2.1 Properties
The actual gross data length for input and output data depends on the number and type of I/O modules used and is calculated as follows: Actual gross data length = net data length + number of I/O submodules (without user
data, input or output data) + number of I/O modules (input and output data) + 4 bytes for interface module + 1 byte for active backplane bus The result of the actual gross data length calculation applies to both input and output data.
Maximum gross data length per IO controller (for input and output data): Without system redundancy S2: 512 bytes With system redundancy S2: 2 x 512 bytes
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
13
Product overview 2.2 Functions
2.2
Functions
2.2.1
PROFINET IO
Introduction
The interface module supports the following PROFINET IO functions: Integrated switch with 2 ports Supported Ethernet services: ping, arp, SNMP, LLDP Port diagnostics Deactivating ports Isochronous real-time communication (IRT) Minimum update time 250 s Prioritized startup Device replacement without PG Media redundancy (MRP) Media redundancy with planned duplication (MRPD) Shared Device with up to four IO controllers Module-internal Shared Input/Shared Output (MSI/MSO) Isochronous mode of process data Identification data I&M 0 to 3 Firmware update via PROFINET IO Reset to factory settings via PROFINET IO Configuration control (option handling) System redundancy on S7-400H System redundancy S2 IO devices changing during operation ("alternative partners")
Docking station
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
14
Equipment Manual, 03/2020, A5E32840985-AC
Product overview 2.2 Functions
Requirements
The table below shows the software requirements for a configuration with the IM 155-5 PN HF interface module:
Table 2- 1 Requirements
PROFINET IO function
Real-time communication Isochronous real-time communication (IRT) Prioritized startup Device replacement without PG Media redundancy (MRP) Media redundancy with planned duplication (MRPD) Shared Device · with up to two IO control-
lers · with up to four IO control-
lers Isochronous mode System redundancy on S7-400H System redundancy S2 IO devices changing during operation ("alternative partners") · Docking station
Configuration software
with GSD file1)
STEP 7 V5.5 SP3 or higher
X X
STEP 7 (TIA Portal) V13 or higher X X
X
X
X
X
X
X
X
X
X -
X X As of V5.6
X2) X2)
As of V15.1
STEP 7 (TIA Portal) V13 or higher
X X
X X
X -
-
X -
As of V15.1 As of V15.1
1) The usability of the PROFINET IO functions depends on the configuration software (Siemens and/or third party). Below, the usability of the PROFINET IO functions is described for STEP 7 only.
2) No validity check of Shared Device projects
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
15
Product overview 2.2 Functions
Isochronous real-time communication
Synchronized transmission method for cyclic exchange of IRT data between PROFINET devices. A reserved bandwidth is available in the send cycle for IRT data. The reserved bandwidth ensures that IRT data can be transferred at reserved synchronized intervals, without being influenced by other network loads (e.g., TCP/IP communication, or additional real-time communication). A topological configuration is required for IRT.
Note IO controller as sync master with IRT communication We recommend operating the IO controller as sync master when configuring IRT communication. Otherwise, IO devices with IRT and RT configuration could fail as a result of sync master failure.
You can find additional information on configuration of synchronized PROFINET devices in sync domains in the STEP 7 online help and As of STEP 7 V12, in the PROFINET with STEP 7
(http://support.automation.siemens.com/WW/view/en/49948856) function manual As of STEP 7 V5.5, in the PROFINET System Description
(http://support.automation.siemens.com/WW/view/en/19292127) manual
Prioritized startup
Prioritized startup denotes the PROFINET functionality for accelerating the startup of IO devices operated in a PROFINET IO system with RT communication. The function reduces the time that the correspondingly configured IO devices require to return to the cyclic user data exchange in the following cases: After the supply voltage has returned After a station has returned After activation of IO devices
Note Dependency of the startup time The startup time depends on the number and type of modules. You can optimize the startup time by · Inserting no more than 12 I/O modules · Inserting no power supply module.
The prioritized startup function with the requirements listed in the note above is not available for IRT communication and media redundancy.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
16
Equipment Manual, 03/2020, A5E32840985-AC
Product overview 2.2 Functions
You can find additional information in the STEP 7 online help and As of STEP 7 V12, in the PROFINET with STEP 7
(http://support.automation.siemens.com/WW/view/en/49948856) function manual As of STEP 7 V5.5, in the PROFINET System Description
(http://support.automation.siemens.com/WW/view/en/19292127) manual
Cabling with fixed connection setting
If you set a fixed connection setting of the port in STEP 7, you should also deactivate "Autonegotiation/Autocrossover". You can find additional information in the STEP 7 online help and As of STEP 7 V12, in the PROFINET with STEP 7
(http://support.automation.siemens.com/WW/view/en/49948856) function manual As of STEP 7 V5.5, in the PROFINET System Description
(http://support.automation.siemens.com/WW/view/en/19292127) manual
Device replacement without PG
It is easy to replace IO devices that support this function: The device name does not have to be assigned with the PG. The replaced IO device is assigned the device name by the IO controller. The IO controller uses the configured topology and the neighbor relationships determined by the IO devices for this purpose. All involved devices must support the LLDP protocol (Link Layer Discovery Protocol). The configured preset topology must match the actual topology. IO devices that have been used in another configuration must be reset to the factory settings before they can be used again (see system manual S7-1500, ET 200MP Automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792)). You can find additional information in the STEP 7 online help and As of STEP 7 V12, in the PROFINET with STEP 7
(http://support.automation.siemens.com/WW/view/en/49948856) function manual As of STEP 7 V5.5, in the PROFINET System Description
(http://support.automation.siemens.com/WW/view/en/19292127) manual
Media redundancy (MRP)
Function for safeguarding communication and plant availability. A ring topology ensures that an alternative communication path is made available if a transmission route fails. You can find additional information in the STEP 7 online help and As of STEP 7 V12, in the PROFINET with STEP 7
(http://support.automation.siemens.com/WW/view/en/49948856) function manual As of STEP 7 V5.5, in the PROFINET System Description
(http://support.automation.siemens.com/WW/view/en/19292127) manual
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
17
Product overview 2.2 Functions
Media redundancy with planned duplication (MRPD)
If media redundancy is to be achieved in the case of short update times (together with IRT), you must use the MRP extension "Media redundancy with planned duplication (MRPD)".
You can find additional information in the STEP 7 online help and
As of STEP 7 V12, in the PROFINET with STEP 7 (http://support.automation.siemens.com/WW/view/en/49948856) function manual
As of STEP 7 V5.5, in the PROFINET System Description (http://support.automation.siemens.com/WW/view/en/19292127) manual
Shared Device
IO device that makes its data available to up to four IO controllers.
The interface module supports Shared Device operation at the submodule level. A prerequisite for using this function is that the I/O modules also support this.
Please note the following if the Engineering System does not perform a validity check of the Shared Device projects:
Make sure that the configurations are consistent. In particular, the modules or submodules may only be assigned to one controller. Multiple assignment will result in an error; the module will only be available in the first controller.
If you reconfigure Shared Device configurations without the validity check mentioned above, you have to commission the ET 200MP once again. This means that you have to reload the projects of all involved IO controllers to the specific CPU after reconfiguration and, if necessary, switch the interface module POWER OFF/POWER ON.
You can find additional information in the STEP 7 online help and
As of STEP 7 V12, in the PROFINET with STEP 7 (http://support.automation.siemens.com/WW/view/en/49948856) function manual
As of STEP 7 V5.5, in the PROFINET System Description (http://support.automation.siemens.com/WW/view/en/19292127) manual
Module-internal Shared Input/Shared Output (MSI/MSO)
The module-internal Shared Input function allows an input module to make its input data available to up to four IO controllers. Each controller has read access to the same channels.
The module-internal Shared Output function allows an output module to make its output data available to up to four IO controllers. One IO controller has write access. Up to three additional IO controllers can have read access to the same channels.
The combination of isochronous mode and Shared Device is not supported.
You can find additional information in the STEP 7 online help and
As of STEP 7 V12, in the PROFINET with STEP 7 (http://support.automation.siemens.com/WW/view/en/49948856) function manual
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
18
Equipment Manual, 03/2020, A5E32840985-AC
Product overview 2.2 Functions
Isochronous mode of process data
The process data, transmission cycles via PROFINET IO, and the user program are synchronized to achieve maximum deterministics. The input data and output data of distributed I/O devices in the plant are detected and output simultaneously. The isochronous PROFINET IO cycle forms the clock generator for this. The combination of isochronous mode and Shared Device is not supported. You can find additional information in the STEP 7 online help and As of STEP 7 V12, in the PROFINET with STEP 7
(http://support.automation.siemens.com/WW/view/en/49948856) function manual
System redundancy S2
An IO device with S2 system redundancy supports redundant ARs. In a redundant system, an IO device with system redundancy S2 has a redundant AR for each of the two CPUs (IO controllers). If one CPU fails, the IO device with S2 system redundancy remains accessible to the remaining IO controller via the AR. The interface module supports system redundancy S2 on S7-400H CPUs and on S71500R/H CPUs. You can find additional information in the STEP 7 online help and As of STEP 7 V12, in the PROFINET with STEP 7
(http://support.automation.siemens.com/WW/view/en/49948856) function manual
IO devices changing during operation ("alternative partners") - docking station
You can use the PROFINET functionality "IO devices changing during operation" ("alternative partners"), e.g. for tool change for robots. Typical tools include: Welding guns Positioning tools for manufacturing parts You can find additional information in the STEP 7 online help and As of STEP 7 V12, in the PROFINET with STEP 7
(http://support.automation.siemens.com/WW/view/en/49948856) function manual
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
19
Product overview 2.2 Functions
2.2.2
Configuration control (option handling)
Properties
Configuration control allows you to prepare your distributed I/O system for future extensions or changes. Configuration control means that you can configure the planned maximum configuration of your distributed I/O system in advance and vary it later in a flexible manner by means of the user program.
Reference
You can find more information In chapter Configuration control (option handling) (Page 25) On the Internet (http://support.automation.siemens.com/WW/view/en/29430270) In the STEP 7 online help.
2.2.3
System redundancy on S7-400H
Interface to H-CPUs with system redundancy
When system redundancy is used, you can connect the IM 155-5 PN HF (6ES7155-5AA000AC0) interface module to CPUs 41x-5H PN/DP (version 6.0 or higher) of the S7-400.
These CPUs allow you to operate the interface module as a component of a redundant system.
Requirements for the IM 155-5 PN HF interface module:
With STEP 7 V5.5 SP3 and higher, the IM 155-5 PN HF is configured as a system redundancy device.
The connection setting (transmission medium/duplex) must be set to "Full duplex".
Examples of system redundancy can be found in the manual Fault-tolerant systems S7400H (http://support.automation.siemens.com/WW/view/en/60458386).
Combination of system redundancy and Shared Device
The IM 155-5 PN HF interface module can be connected to up to four IO controllers but only to one H-CPU pair. As a result, a combination of system redundancy and Shared Device operation is not possible when redundancy operation is used exclusively.
However, you can operate some of the I/O modules of the interface module in system redundancy on the H-CPU pair and the other I/O modules with up to two additional IO controllers in Shared Device operation.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
20
Equipment Manual, 03/2020, A5E32840985-AC
Wiring
3
3.1
Pin assignment
24 V DC supply voltage (X80)
Table 3- 1 Terminal assignment 24 V DC supply voltage
View Connector
Signal name 1)
Designation
1 1L+ 2 1M 3 2M
4 2L+
+ 24 V DC of the supply voltage
Ground of the supply voltage
Ground of the supply voltage for loopthrough 2)
+ 24 V DC of the supply voltage for loopthrough 2)
1) 1L+ and 2L+ as well as 1M and 2M are bridged internally 2) Maximum 10 A permitted
PROFINET IO with RJ45
Table 3- 2 PROFINET IO pin assignment with RJ45
Bottom view IM
Signal name 1 TD 2 TD_N 3 RD 4 GND 5 GND 6 RD_N 7 GND 8 GND
Designation Transmit data + Transmit data Receive data + Ground Ground Receive data Ground Ground
Additional information
You can find additional information on connecting the interface module and on accessories (RJ45 bus connector) in the system manual S7-1500, ET 200MP Automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
21
Wiring 3.2 Block diagram
3.2
Block diagram
Block diagram
X80 24 V DC
PN X1 P1
Electronics PROFINET 2-port switch Backplane bus interface Internal supply voltage Infeed of supply voltage PROFINET interface X1 port 1
PN X1 P2 PROFINET interface X1 port 2
L+ M RN ER MT X1 P1, X1 P2
24 V DC supply voltage Ground RUN LED (green) ERROR LED (red) MAINT LED (yellow) Link TX/RX LED (green/yellow)
Figure 3-1 Block diagram of the IM 155-5 PN HF interface module
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
22
Equipment Manual, 03/2020, A5E32840985-AC
Parameter
4
4.1
Parameters
Table 4- 1 Parameters for IM 155-5 PN HF interface module
Parameters
Connection to supply voltage L+
Configuration control
Value range
Connection/No connection
Disable/enable
Default setting Connection
Disable
Efficiency range ET 200MP
ET 200MP
4.2
Description of parameters
4.2.1
Connection to supply voltage L+
Parameter "Connection to supply voltage L+"
This parameter is used
For diagnostics of the ET 200MP:
If the actual configuration is different from the preset configuration of the interface module supply voltage set with this parameter, the ET 200MP generates a diagnostic alarm.
To check the power budget for the configuration with STEP 7 V13:
Depending on how the parameter is set, either the infeed power for the interface module into the backplane bus or the power consumption from the backplane bus is entered into the calculation of the power budget.
The default setting "Connection to supply voltage L+ " means that the front of the interface module is supplied with 24 VDC and feeds power into the backplane bus.
Note
We recommend that you always supply the front of the interface module with 24 VDC because if you then insert a power supply module (PS) upstream of the interface module, both the power of the power supply module (PS) and the power of the integrated power supply of the interface module are available for the I/O modules (power addition of PS infeed power + IM infeed power in power segment 1).
In this case, you do not have to change the default setting of the parameter in STEP 7.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
23
Parameter 4.2 Description of parameters
The setting "No connection to supply voltage L+" means that the interface module is not supplied with 24 VDC on the front. This can only be the case when a power supply module (PS) is inserted upstream from the interface module and supplies the interface module and the downstream modules. In the case of an interface module without power supply, its power consumption from the backplane bus must be considered as consumer in the power budget and the power segments must be formed accordingly.
Reference
See the section on the power budget and the forming of power segments in the system manual S7-1500, ET 200MP Automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Requirement
In order to generate diagnostics, the IM 155-5 PN HF interface module parameters must have been assigned once.
See also
Diagnostic alarms (Page 42)
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
24
Equipment Manual, 03/2020, A5E32840985-AC
Parameter 4.3 Configuration control (option handling)
4.2.2
Configuration control (option handling)
"Configuration control" parameter
You can use this parameter to enable the configuration control function in the ET 200MP Distributed I/O System.
Note If you configure the enable, the ET 200MP distributed I/O system requires a control data record 196 from the user program in order for the ET 200MP distributed I/O system to operate the I/O modules.
Reference
You can find more information on the control data record in chapter Configuration control (option handling) (Page 25) and in the STEP 7 online help.
4.3
Configuration control (option handling)
4.3.1
Configuration control and control data record
Operating principle
You can use the configuration control to operate different real configurations (options) with a single configuration of the ET 200MP distributed I/O system. This is made possible by a configurable assignment of configured station modules to actually existing ones.
We distinguish between the following procedures:
Configuring configuration control without empty slots (option handling)
Expanding configuration (step-by-step commissioning)
Requirements
Enable the "Configuration control" parameter during configuration for this function. Control takes place with control data record 196 to specify the required configuration.
Configuration control is not ready for operation without control data record:
All I/O modules of the ET 200MP distributed I/O system fail (substitute value behavior, if configured).
The interface module continues to exchange data.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
25
Parameter 4.3 Configuration control (option handling)
Rules: Arrangement of the modules
The following table shows the slot number assignment:
Table 4- 2 Slot 0 1
2 - 31
Assignment of slot numbers
Modules
Note
Power supply module (optional)
Before the interface module
Interface module
Interface module (slot 1) is not an element of the configuration control, but rather controls this
I/O modules /
After the interface module
max. 2 power supply modules, depending
on the configuration variant
Control data record
A control data record 196 is defined for the configuration control that receives a slot assignment.
Table 4- 3 Control data record
Byte 0 1 2 3 4
5
: 4 + (max. slot - 1)
Element
Block length Block ID Version Version Assignment of configured slot 0 Assignment of configured slot 2 : Assignment of configured maximum slot
Code 4 + number of slots 196 3 0 Real slot 0
Real slot 2
: Real maximum slot
Explanation Header
Control element Describes in each element which real slot in the device is assigned to the configured slot.
Control element
Each element must include the following information about the slot: Assignment of configured slot real slot
Table 4- 4 Code of control element
Byte
Assignment of configured slot (e.g. in byte 5)
Bit 0 to 7
Meaning 01111111: Module not available 00000000 up to maximum slot: Real slot
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
26
Equipment Manual, 03/2020, A5E32840985-AC
Parameter 4.3 Configuration control (option handling)
Special features
Special features you have to observe:
Configuration control is controlled by the interface module (slot 1/submodule 1). To address the available data records:
In STEP 7 V5.5: use the diagnostic address of the interface module.
You can find it in the properties header of the interface module in the hardware configuration.
In STEP 7 (TIA Portal): use the HW ID of the interface module.
You can find it in the PLC tags > Default tag table > System constants. The default name is "IM155-5PN[Head]". Use the associated "value" for addressing.
You can find general information on writing a data record, for example, in the STEP 7 online help.
The control data record is saved retentively in the interface module, so that it is not necessary to write the control data record 196 again at a restart if the configuration is unchanged.
Slot entries outside the configured preset configuration are ignored.
The control data record can be shortened. It must contain the entries up to the last slot of the current preset configuration.
Each real slot may only exist once in the data record.
A real slot may only be assigned to one configured slot.
Power supply (PS) modules can also be subject to configuration control. Make sure to observe the information on maximum configuration (Page 11) and the section on the power budget in the system manual S7-1500, ET 200MP Automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792). Particularly for a power supply (PS) module on slot 0, we recommend that you avoid reconfiguration.
Note Modified configuration
When you write a control data record with modified configuration, there is a station failure followed by a restart of the station with the modified configuration.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
27
Parameter 4.3 Configuration control (option handling)
Combination of configuration control and Shared Device
The configuration control function in a Shared Device is therefore only for the modules of the IO controller that has subscribed to the interface module.
Modules that are assigned to another IO controller or not assigned at all cannot be specified as real slots (Shared Device on module level). A one-to-one assignment is implicitly assumed for the modules. When using the active backplane bus, a configured empty slot behaves in the same way as a module that is not assigned to an IO controller.
If a module intended for configuration control is subscribed by additional controllers (Shared Device on submodule level), only a one-to-one assignment is permitted for this module. Such a module cannot be deselected by the control data record (0x7F code for this slot in the control data record). This means the combination of "Configuration control" and "Shared Device on submodule level" is possible to a limited extent.
Error messages
The following error messages are returned if an error occurs during writing of the control data record:
Table 4- 5 Error messages
Error code 80B1H 80B5H 80B6H
80B8H
Meaning Invalid length Configuration control not configured Data record does not originate from the IO controller which subscribed to the interface module Parameter error
A parameter error may be caused by:
Incorrect block ID in the header (not equal to 196)
Invalid version identification in the header
A reserve bit was set
A configured slot was assigned to an invalid real slot (see section Combination of configuration control and Shared Device)
Several configured slots refer to the same real slot
With Shared Device on submodule level: Violation of defined restrictions (see section Combination of configuration control and Shared Device)
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
28
Equipment Manual, 03/2020, A5E32840985-AC
Parameter 4.3 Configuration control (option handling)
4.3.2
Feedback data record
Feedback data record
The feedback data record provides information on the accuracy of the module assignment and gives you the chance to detect assignment errors in the control data record. The feedback data record is mapped by a separate data record 197.
The feedback data record exists only when configuration control is configured and always refers to the maximum quantity framework without interface module, i.e., 31 slots.
The following applies here:
The power supply (PS) module is inserted in "Slot 0" before the interface module
Starting from "Slot 2", a maximum of 30 modules follow after the interface module.
Partial reading of the feedback data record is possible.
Table 4- 6 Feedback data record
Byte 0 1 2 3 4 5 6 7 : 64 65
Element Block length Block ID Version
Slot 0 status Reserved Slot 2 status Reserved : Slot n status Reserved
Code 66 197 2 0 0/1 0 0/1 0 : Maximum slot 0
Meaning Header
Bit 0 = 1: · Configured module is inserted · Slot is marked as not available in the control
data record Bit 0 = 0: · Module pulled · Wrong module inserted* Bits 1 to 15: Reserved
* Not possible if the slot is marked as not available.
Note
The data in the feedback data record are always mapped for all modules. In a Shared Device configuration it is therefore irrelevant which controller the respective modules are assigned to.
As long as no control data record was sent, a one-to-one module assignment is assumed for the compilation of data record 197 (preset configuration actual configuration).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
29
Parameter 4.3 Configuration control (option handling)
Error messages
The following error messages are returned if an error occurs during reading of the feedback data record:
Table 4- 7 Error messages
Error code 80B1H 80B5H 80B8H
Meaning Invalid length Configuration control not configured Parameter error
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
30
Equipment Manual, 03/2020, A5E32840985-AC
Parameter 4.3 Configuration control (option handling)
4.3.3
Configure configuration control without empty slots
Operating principle
The modules actually not required do not exist. The configuration is pushed together to the left in the direction of IM 155-5 PN HF.
Figure 4-1 Configure configuration control without empty slots
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
31
Parameter 4.3 Configuration control (option handling)
Data record of the example
The following table shows the structure of the control data record for the above example.
Table 4- 8 Data record for example "Configure configuration control without empty slots"
Byte 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
Element Block length Block ID Version Version Slot 0 Slot 2 Slot 3 Slot 4 Slot 5 Slot 6 Slot 7 Slot 8 Slot 9 Slot 10 Slot 11 Slot 12 Slot 13 Slot 14
Code 18 196 3 0 00000000B 00000010B 00000011B 00000100B 00000101B 01111111B 01111111B 00000110B 00000111B 01111111B 01111111B 00001000B 00001001B 00001010B
Explanation Header
The configured slot 0 is the real slot 0. The configured slot 2 is the real slot 2. The configured slot 3 is the real slot 3. The configured slot 4 is the real slot 4. The configured slot 5 is the real slot 5. The configured slot 6 does not exist. The configured slot 7 does not exist. The configured slot 8 is the real slot 6. The configured slot 9 is the real slot 7. The configured slot 10 does not exist. The configured slot 11 does not exist. The configured slot 12 is the real slot 8. The configured slot 13 is the real slot 9. The configured slot 14 is the real slot 10.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
32
Equipment Manual, 03/2020, A5E32840985-AC
Parameter 4.3 Configuration control (option handling)
4.3.4
Extending the configuration
Operating principle
You can add modules at the end of the configuration with this procedure. The configured configuration can also be extended from the center based on freely selectable slot assignment.
Figure 4-2 Extending the configuration
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
33
Parameter 4.3 Configuration control (option handling)
Data record of the example
The following table shows the structure of the control data record for the above example.
Table 4- 9 Data record for example "Extending the configuration"
Byte 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
Element Block length Block ID Version Version Slot 0 Slot 2 Slot 3 Slot 4 Slot 5 Slot 6 Slot 7 Slot 8 Slot 9 Slot 10 Slot 11 Slot 12 Slot 13
Code 17 196 3 0 00000000B 00000010B 00000011B 00000100B 00000101B 00001011B 00001100B 00001101B 00001001B 00001010B 00000110B 00000111B 00001000B
Explanation Header
The configured slot 0 is the real slot 0. The configured slot 2 is the real slot 2. The configured slot 3 is the real slot 3. The configured slot 4 is the real slot 4. The configured slot 5 is the real slot 5. The configured slot 6 is the real slot 11. The configured slot 7 is the real slot 12. The configured slot 8 is the real slot 13. The configured slot 9 is the real slot 9. The configured slot 10 is the real slot 10. The configured slot 11 is the real slot 6. The configured slot 12 is the real slot 7. The configured slot 13 is the real slot 8.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
34
Equipment Manual, 03/2020, A5E32840985-AC
Parameter 4.3 Configuration control (option handling)
4.3.5
Combining configurations
Operating principle
You can combine the different procedures with configuration control.
Figure 4-3 Combining configurations
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
35
Parameter 4.3 Configuration control (option handling)
Data record of the example
The following table shows the structure of the control data record for the above example.
Table 4- 10 Data record for example "Combining configurations"
Byte Element
0
Block length
1
Block ID
2
Version
3 Version
4
Slot 0
5 Slot 2
6
Slot 3
7
Slot 4
8
Slot 5
9 Slot 6
10 Slot 7
11 Slot 8
12 Slot 9
13 Slot 10
14 Slot 11
15 Slot 12
16 Slot 13
Code configuration 1 17 196 3 0 00000000B 00000010B 00000011B 00000100B 00000101B 01111111B
01111111B
00000110B
00000111B
00001000B
01111111B
01111111B
00001001B
Code configuration 2
00000000B 00000010B 00000011B 00000100B 00000101B 00000110B 00000111B 00001000B 00001001B 00001010B 00001100B 00001101B 00001011B
Explanation
Header
The configured slot 0 is the real slot 0. The configured slot 2 is the real slot 2. The configured slot 3 is the real slot 3. The configured slot 4 is the real slot 4. The configured slot 5 is the real slot 5. The configured slot 6 does not exist (configuration 1). The configured slot 6 is the real slot 6 (configuration 2). The configured slot 7 does not exist (configuration 1). The configured slot 7 is the real slot 7 (configuration 2). The configured slot 8 is the real slot 6 (configuration 1). The configured slot 8 is the real slot 8 (configuration 2). The configured slot 9 is the real slot 7 (configuration 1). The configured slot 9 is the real slot 9 (configuration 2). The configured slot 10 is the real slot 8 (configuration 1). The configured slot 10 is the real slot 10 (configuration 2). The configured slot 11 does not exist (configuration 1). The configured slot 11 is the real slot 12 (configuration 2). The configured slot 12 does not exist (configuration 1). The configured slot 12 is the real slot 13 (configuration 2). The configured slot 13 is the real slot 9 (configuration 1). The configured slot 13 is the real slot 11 (configuration 2).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
36
Equipment Manual, 03/2020, A5E32840985-AC
Interrupts and diagnostic, error, and system alarms
5
5.1
Status and error displays
Introduction
Diagnostics by means of LED display is an initial tool for error localization. To narrow down the error, you usually evaluate the display of the CPU, the display of the module status in STEP 7 or the diagnostics buffer of the CPU. The buffer contains plain text information on the error that has occurred. For example, you will find the number of the appropriate error OB there.
LED display
The figure below shows the LED display on the IM 155-5 PN HF interface module.
RUN (green) ERROR (red) MAINT (yellow) P1 LINK/TX/RX (green/yellow) P2 LINK/TX/RX (green/yellow)
Figure 5-1 LED display on the interface module
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
37
Interrupts and diagnostic, error, and system alarms 5.1 Status and error displays
Meaning of the LEDs RUN/ ERROR/ MAINT
Table 5- 1 Meaning of the LEDs RUN/ ERROR/ MAINT
RUN Off On Flashes
On Not relevant
Not relevant Flashes
LEDs ERROR
Off On Off
Not relevant Flashes
Not relevant Flashes
Meaning
Remedy
MAINT Off On Off
Not relevant
Supply voltage not present or too low at interface module
Test of LEDs during startup: The three LEDs light up simultaneously for approximately 0.25 s. Interface module is deactivated.
Interface module is not configured.
ET 200MP is starting up. ET 200MP is being reset to factory settings. ET 200MP is currently exchanging data with the IO controller.
Check the supply voltage or turn it on at the interface module. ---
Activate the interface module with the configuration software or the user program. Configure the interface module with the configuration software. ---
Not relevant
On Flashes
Group error and group error channels
The set configuration does not correspond to the actual configuration of the ET 200MP.
Invalid configuration states
Parameter assignment error in the I/O module
Maintenance
"Node flash test" is being performed. (The LEDs P1 and P2 of the PROFINET interface are also flashing.) Hardware or firmware defective. (The LEDs P1 and P2 of the PROFINET interface are not flashing.)
Evaluate the diagnostics and correct the error. Check the configuration of the ET 200MP to see whether a module is missing or defective, or whether a non-configured module is inserted. See section Invalid configuration states of the ET 200MP on PROFINET IO (Page 50) Evaluate the display of the module status in STEP 7 and correct the error in the corresponding I/O module. See section Maintenance events (Page 44)
---
Run a firmware update. If the error persists, contact Service & Support. Replace the interface module.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
38
Equipment Manual, 03/2020, A5E32840985-AC
Interrupts and diagnostic, error, and system alarms 5.1 Status and error displays
Meaning of the LEDs P1 LINK/TX/RX, P2 LINK/TX/RX
Table 5- 2 Meaning of the LEDs P1 LINK/TX/RX, P2 LINK/TX/RX
LEDs P1 LINK/TX/RX, P2 LINK/TX/RX
Off
On
Flickers Flashes
Meaning
Remedy
There is no Ethernet connection between the
Check whether the bus cable to the switch/IO
PROFINET interface of your PROFINET device controller is interrupted.
and a communication partner (e.g. IO controller).
There is an Ethernet connection between the
---
PROFINET interface of your PROFINET device
and a communication partner (e.g., IO controller).
There is active data traffic (sending/receiving) via --the Ethernet connection.
"Node flash test" is being performed. (The LEDs --RUN/ ERROR/ MAINT are also flashing.)
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
39
Interrupts and diagnostic, error, and system alarms 5.2 Interrupts
5.2
Interrupts
Introduction
The I/O device generates interrupts as a reaction to specific error events. Interrupts are evaluated based on the I/O controller used.
Evaluating interrupts with I/O controllers
The ET 200MP distributed I/O system supports the following interrupts:
Diagnostic interrupts
Hardware interrupts
In the event of an interrupt, interrupt OBs are automatically called in the CPU of the IO controller.
Information on the cause and class of the error is already available, based on the OB number and start information.
Detailed information on the error event can be obtained in the error OB using the instruction "RALRM" (read additional interrupt information).
System diagnostics
In STEP 7 (TIA Portal) as of V12, innovative system diagnostics is available for devices of the S7-1500 automation system and ET 200MP. Independently of the cyclical user program, alarms are made available on the display of the S7-1500 CPU, to the S7-1500 CPU web server, to the HMI device and in STEP 7.
For additional information on the system diagnostics, refer to the System diagnostics function manual (http://support.automation.siemens.com/WW/view/en/59192926).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
40
Equipment Manual, 03/2020, A5E32840985-AC
Interrupts and diagnostic, error, and system alarms 5.2 Interrupts
5.2.1
Triggering of a diagnostic interrupt
Triggering of a diagnostic interrupt
For an incoming or outgoing event (e.g., wire break on a channel of an I/O module), the module triggers a diagnostic interrupt if this is configured accordingly in STEP 7 (TIA Portal).
The CPU interrupts user program execution and executes the diagnostic interrupt OB. The event that triggered the interrupt is entered in the start information of the diagnostic interrupt OB.
5.2.2
Triggering of a hardware interrupt
Triggering of a hardware interrupt
When a hardware interrupt occurs, the CPU interrupts execution of the user program and processes the hardware interrupt OB. The event that triggered the interrupt is entered in the start information of the hardware interrupt OB.
Note Diagnostics "Hardware interrupt lost" (from I/O module) Avoid creating hardware interrupts cyclically. If the hardware interrupt load is too high, hardware interrupts can get lost depending on the number of I/O modules and the communication load.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
41
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
5.3
Alarms
5.3.1
Diagnostic alarms
Actions after a diagnostic alarm
There can be more than one diagnostic alarm at the same time. Each diagnostic alarm initiates the following actions:
The ERROR LED of the interface module flashes.
Diagnostics are reported as diagnostic interrupts to the CPU of the IO controller and can be read via data records.
Incoming diagnostic alarms are saved to the diagnostic buffer of the IO controller.
The diagnostic interrupt OB is called. If the diagnostic interrupt OB is not available, the IO controller goes into STOP mode.
You can find additional information in the STEP 7 online help.
Reading out the diagnostics
Table 5- 3 Reading out the diagnostics with STEP 7
Automation system with IO controller
SIMATIC S7
Application
See...
Diagnostics as plain text in STEP 7 using online view and diagnostic view
Instruction "RDREC" Read data records from the IO device
Instruction "RALRM" Receive interrupts from the IO device
Online help of STEP 7 and
· As of STEP 7 V12 PROFINET with STEP 7 V12 function manual (http://support.automation.si emens.com/WW/view/en/49 948856)
· As of STEP 7 V5.5 PROFINET System Description (http://support.automation.si emens.com/WW/view/en/19 292127) manual.
Additional information on the data records for PROFINET IO
You can find the structure of the diagnostic data records and programming examples in the programming manual From PROFIBUS DP to PROFINET IO (http://support.automation.siemens.com/WW/view/en/19289930) and in the application example on the Internet (http://support.automation.siemens.com/WW/view/en/24000238).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
42
Equipment Manual, 03/2020, A5E32840985-AC
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
Causes of error and corrective measures
The error causes and corrective measures of the diagnostic alarms are described in the manuals for the I/O modules (http://support.automation.siemens.com/WW/view/en/67296522/133300) in the Interrupts/Diagnostic alarms section.
See also
Channel diagnostics (Page 45)
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
43
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
5.3.2
Maintenance events
Triggering of a maintenance event
The PROFINET interface of the interface module supports the diagnostic concept and maintenance concept in PROFINET according to the IEC 61158-6-10 standard. The goal is to detect and remove potential problems as soon as possible.
For the interface module, maintenance events signal to the user when a network component must be checked or replaced.
The CPU interrupts user program execution and executes the diagnostic interrupt OB. The event that triggered the maintenance event is entered in the start information of the diagnostic interrupt OB.
The interface module signals a maintenance event to the higher-level diagnostic system in the case of the following events:
Table 5- 4 Triggering of a maintenance event
Maintenance alarm Maintenance demanded MAINT LED is lit
Event Synchronization loss
Maintenance event of an I/O module
Meaning · No synchronization frame received
No synchronization frame was received by the sync master within the timeout period after parameter assignment or during operation. · Successive synchronization frames are located outside permitted limits (jitter)
The maintenance event of a power supply module is passed through.
System alarms in STEP 7
The maintenance information is generated in STEP 7 with the following system alarms:
Maintenance demanded - indicated for each port by a yellow wrench icon device view or in the hardware configuration.
in the
You can find additional information in the STEP 7 online help.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
44
Equipment Manual, 03/2020, A5E32840985-AC
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
5.3.3
Channel diagnostics
Function
Channel diagnostics provides information about channel faults in modules. Channel faults are mapped as channel diagnostics in IO diagnostic data records. The "RDREC" instruction is used to read the data record.
Structure of the diagnostic data records
As of firmware version V4.2: The IM 155-5 PN HF interface module maps channel faults by means of extended channel diagnostics.
The data records supported by the ET 200MP are based on the standard PROFINET IO Application Layer Service Definition V2.3.
Firmware version lower than V4.2: The IM 155-5 PN HF interface module maps channel faults by means of manufacturer-specific diagnostic data records.
The data records are based on the PROFINET IO standard - Application Layer Service Definition V2.2.
You can purchase the standards from the PROFIBUS User Organization on the Internet (http://www.profibus.com).
Coding of the extended channel diagnostics (as of firmware version V4.2)
With the IM 155-5 PN HF interface module, the following extended channel diagnostics are reported by the interface module in slot 1:
Table 5- 5 Manufacturer-specific diagnostics in the USI
ChannelErrorType
0x0601 0x0602 0x0602 0x0602 0x0602 0x0602 0x0610
0x0610
ExtendedChannel ErrorType 0x0682 0x0692 0x069A 0x069B 0x0696 0x0697 0x06B1
0x06B2
Associated value Diagnostics (AddValue)
Slot
Communication with slot <No.> has failed
Slot
Permitted number of I/O modules exceeded
Slot
Interface module in incorrect slot
Slot
Permitted number of power supply modules exceeded
0
No U connector detected on an IM port
0
More than one bus master module (IM/CPU) detected
Slot
Power budget error (overload has been detected in at least one
power segment)
0
Error IM power supply: Power supply not active or power sup-
ply active
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
45
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
Structure of the manufacturer-specific diagnostic data records (firmware version lower than V4.2)
The structure of the diagnostic data records is differentiated by the BlockVersion. The following BlockVersion applies to the IM 155-5 PN HF interface modules:
Table 5- 6 Structure of the manufacturer-specific diagnostic data records
IM 155-5 PN HF interface module 6ES7155-5AA00-0AC0
BlockVersion W#16#0101
Manufacturer-specific diagnostics in the User Structure Identifier (USI)
The following manufacturer-specific diagnostics are signaled in the USI with the IM 155-5 PN HF interface module:
Table 5- 7 Manufacturer-specific diagnostics in the USI
USI no. W#16#... 0001 0002 0003 0004 0005 0006 0007
Diagnostics Power budget error (overload has been detected in at least one power segment) Permitted number of power supply modules exceeded Permitted number of I/O modules exceeded No U connector detected on an IM port More than one bus master module (IM/CPU) detected Communication with slot <No.> has failed Error IM power supply: Power supply not active or power supply active
Additional information
You can find additional information on maximum configuration, power budget and power segments in the system manual S7-1500, ET 200MP Automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Structure USI = W#16#0001
Table 5- 8 Structure of USI = W#16#0001
Data block name USI
Contents W#16#0001
Followed by 3 reserved bytes
Reserved
Reserved
Reserved
The first power segment with overload starts at slot: <No.>
Slot
B#16#00 to
B#16#1F
Note
Manufacturer-specific diagnostics in case of overload in an ET 200MP power segment
Bytes 2
1 1 1
1
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
46
Equipment Manual, 03/2020, A5E32840985-AC
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
Structure USI = W#16#0002
Table 5- 9 Structure of the USI = W#16#0002
Data block name USI
Contents W#16#0002
Followed by 3 reserved bytes
Reserved
Reserved
Reserved
The first surplus module is located in slot: <No.>
Slot
B#16#00 to
B#16#1F
Note
Manufacturer-specific diagnostics if the permitted number of power supply modules is exceeded
Bytes 2
1 1 1
1
USI structure = W#16#0003
Table 5- 10 USI structure = W#16#0003
Data block name USI
Contents W#16#0003
Followed by 3 reserved bytes
Reserved
Reserved
Reserved
The first surplus module is located in slot: <No.>
Slot
B#16#20 to B#16#FF
Note
Manufacturer-specific diagnostics if the permitted number of I/O modules is exceeded
Bytes 2
1 1 1
1
USI structure = W#16#0004
Table 5- 11 USI structure = W#16#0004
Data block name USI
Contents W#16#0004
Followed by 4 reserved bytes Reserved Reserved Reserved Reserved
Note
Manufacturer-specific diagnostics if no U connector is detected on an IM port
Bytes 2
1 1 1 1
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
47
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
USI structure = W#16#0005
Table 5- 12 USI structure = W#16#0005
Data block name USI
Contents W#16#0005
Followed by 4 reserved bytes Reserved Reserved Reserved Reserved
USI structure = W#16#0006
Table 5- 13 USI structure = W#16#0006
Data block name USI
Contents W#16#0006
Followed by 3 reserved bytes
Reserved
Reserved
Reserved
Communication has failed with slot: <No.>
Slot
B#16#00 to B#16#1F
Note
Manufacturer-specific diagnostics if there is more than one bus master module (IM/CPU)
Bytes 2
1 1 1 1
Note
Manufacturer-specific diagnostics if the communication with a slot has failed
Bytes 2
1 1 1
1
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
48
Equipment Manual, 03/2020, A5E32840985-AC
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
USI structure = W#16#0007
Table 5- 14 USI structure = W#16#0007
Data block name
Contents
Note
USI
W#16#0007
Manufacturer-specific diagnostics if
the configuration of the interface
module power supply is different from
the parameterized configuration
Followed by 3 reserved bytes
Reserved
Reserved
Reserved
Error IM power supply: Power supply <bit 0 in the least significant byte can be 0 or 1>
Power supply of the interface module
B#16#00
Power supply of the interface module is not active.
B#16#01
Power supply of the interface module is active.
Bytes 2
1 1 1 1
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
49
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
5.3.4
Invalid configuration states of the ET 200MP on PROFINET IO
Invalid configuration states
The following invalid configuration states of the ET 200MP lead to a short failure of the ET 200MP IO device or prevent the exchange of user data with the I/O modules.
More than two power supply modules (PS) inserted to the right of the interface module
Number of modules exceeds maximum configuration
Faulty backplane bus (e.g., additional IM present).
I/O modules of a power segment consume more power than can be provided (overload). In the case of an overload, the interface module provides diagnostic information, cyclically checks the connection to the backplane bus and re-establishes it as soon as possible.
Additional information
You can find additional information on maximum configuration, power budget and power segments in the system manual S7-1500, ET 200MP Automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792).
See also:
Status and error displays (Page 37)
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
50
Equipment Manual, 03/2020, A5E32840985-AC
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
5.3.5
STOP of the IO controller and recovery of the IO device
STOP of the SIMATIC IO controller
Diagnostics received from the IO device while the IO controller is in STOP state do not initiate a call of the corresponding OBs when the IO controller starts up. You have to read the data record E00CH using the "RDREC" instruction in the startup OB. This record contains all diagnostics for the slots assigned to an IO controller in an IO device.
Recovery of the SIMATIC IO device
If you want to read the diagnostics that occurred in the STOP state of the IO controller, you have to read the E00CH data record using the "RDREC" instruction. This record contains all diagnostics for the slots assigned to an IO controller in an IO device.
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
51
Technical specifications
6
Technical specifications of the IM 155-5 PN HF
The following table shows the technical specifications as of 03/2020. You will find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/de/de/pv/6ES7155-5AA00-0AC0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version · FW update possible
Vendor identification (VendorID) Device identifier (DeviceID) Product function · I&M data
· Module swapping during operation (hot swapping)
· Isochronous mode
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFINET as of GSD version/GSD revision
Configuration control via user data via dataset
Supply voltage Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection Short-circuit protection
Mains buffering · Mains/voltage failure stored energy time
6ES7155-5AA00-0AC0
IM 155-5 PN HF FS03 V4.4 Yes 002AH 0X0312
Yes; I&M0 to I&M3 Yes; In combination with active backplane bus
Yes
V16 with HSP 308
V5.5 SP3 / -
V2.3 / -
No Yes
24 V 20.4 V 28.8 V Yes Yes
5 ms
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
52
Equipment Manual, 03/2020, A5E32840985-AC
Technical specifications
Article number Input current
Current consumption (rated value) Current consumption, max. Inrush current, max. I²t Power Infeed power to the backplane bus Power available from the backplane bus Power loss Power loss, typ. Address area Address space per module · Address space per module, max.
Address space per station · Address space per station, max.
Hardware configuration Integrated power supply System power supply can be plugged in to left of IM Number of permissible power segments
Rack · Modules per rack, max.
Submodules · Number of submodules per station, max.
Interfaces Number of PROFINET interfaces
1. Interface Interface types
· Number of ports
· integrated switch
· RJ 45 (Ethernet) Protocols
· PROFINET IO Device
· Media redundancy Interface types RJ 45 (Ethernet)
· Transmission procedure
· 100 Mbps
· Autonegotiation
6ES7155-5AA00-0AC0 0.2 A 1.2 A 9 A 0.09 A²·s 14 W 2.3 W 4.5 W
256 byte; per input / output
512 byte; per input / output
Yes Yes 3 30; I/O modules
256
1
2 Yes Yes
Yes Yes
PROFINET with 100 Mbit/s full duplex (100BASE-TX) Yes Yes
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
53
Technical specifications
Article number · Autocrossing
Protocols PROFINET IO Device Services
Isochronous mode Open IE communication IRT PROFIenergy Prioritized startup Shared device Number of IO Controllers with shared
device, max. Redundancy mode
· MRP
· MRPD
· PROFINET system redundancy (S2) on S7-1500R/H on S7-400H
· Redundant PROFINET configuration (R1)
· H-Sync forwarding Open IE communication
· TCP/IP
· SNMP
· LLDP Isochronous mode
Isochronous operation (application synchronized up to terminal) Equidistance shortest clock pulse max. cycle Interrupts/diagnostics/status information Status indicator Alarms Diagnostics function Diagnostics indication LED · RUN LED
· ERROR LED
· MAINT LED
6ES7155-5AA00-0AC0 Yes
Yes Yes Yes No Yes Yes 4
Yes Yes Yes Yes Yes; With GSDML file as of STEP 7 V5.5 SP3 No Yes
Yes Yes Yes
Yes
Yes 250 µs 4 ms
Yes Yes Yes
Yes; green LED Yes; red LED Yes; Yellow LED
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
54
Equipment Manual, 03/2020, A5E32840985-AC
Technical specifications
Article number · Connection display LINK TX/RX
Potential separation between backplane bus and electronics between PROFINET and all other circuits between supply and all other circuits
Isolation Isolation tested with
Ambient conditions Ambient temperature during operation
· horizontal installation, min.
· horizontal installation, max.
· vertical installation, min.
· vertical installation, max. Altitude during operation relating to sea level
· Installation altitude above sea level, max.
Connection method ET-Connection
· via BU/BA Send Dimensions
Width Height Depth Weights Weight, approx.
6ES7155-5AA00-0AC0 Yes; 2x green-yellow LEDs
No Yes; 1 500 V AC No
707 V DC (type test)
0 °C 60 °C 0 °C 40 °C
5 000 m; Restrictions for installation altitudes > 2 000 m, see manual
No
35 mm 147 mm 129 mm
350 g
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
55
Dimension drawing
A
The dimension drawing of the module on the mounting rail, as well as a dimension drawing with open front panel, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimension drawings of the IM 155-5 PN HF interface module
Figure A-1 Dimension drawing of the IM 155-5 PN HF interface module, front and side views
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
56
Equipment Manual, 03/2020, A5E32840985-AC
Dimension drawing Dimension drawing of the IM 155-5 PN HF interface module, side view with open front cover
Figure A-2 Dimension drawing of the IM 155-5 PN HF interface module, side view with open front cover
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
57
Response times
B
B.1
Response times of the ET 200MP
Introduction
The response time of the IM 155-5 PN HF is made up of: The update time configured for the IM as IO device. plus The backplane bus cycle time.
Note Validity of the formula The following formula does not apply to Shared Device mode.
Backplane bus cycle time
The backplane bus cycle time is the time the interface module requires to output new output data, read new input data and then copy them to the PROFINET send buffer.
The backplane bus cycle time in s is made up as follows:
(Number of output data in bytes + number of output addresses) x 0.0668 + 1.6131 (rounded up)
plus
(Number of input data in bytes + number of input addresses) x 0.0959 + 2.5901 (rounded up)
plus
Operating system processing time (500 s).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
58
Equipment Manual, 03/2020, A5E32840985-AC
Response times B.1 Response times of the ET 200MP
Example configuration for the calculation of the backplane bus cycle time
The following are used in the example:
Table B- 1 Example configuration for the calculation of the backplane bus cycle time
I/O module
Analog output module AQ 4xU/I ST Analog output module AQ 4xU/I ST with value status Digital output module DQ 32x24VDC/0.5A ST with value status Digital input module DI 32x24VDC HF Analog input module AI 8xU/I/RTD/TC ST Sum
Output data in bytes
8 8
4
20
Input data in bytes
1
4
4 16 25
Number of output addresses
1 1
Number of input addresses
-
1
1
1
-
1
-
1
3
4
Example calculation of the backplane bus cycle time
Backplane bus cycle time in s: (20 + 3) x 0.0668 + 1.6131 = 3.1495 4 s (rounded up) plus (25 + 4) x 0.0959 + 2.5901 = 5.3712 6 s (rounded up) plus Operating system processing time 500 s Result of backplane bus cycle time Backplane bus cycle time = 510 s
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
Equipment Manual, 03/2020, A5E32840985-AC
59
Response times B.1 Response times of the ET 200MP
Calculating the response time
It is necessary to differentiate between two cases when calculating the response time of the IM 155-5 PN HF:
Case 1: The configured update time is greater than/equal to the backplane bus cycle time.
Then:
Response time in s = backplane bus cycle time + configured update time
Case 2: The configured update time is less than the backplane bus cycle time.
Then:
Response time in s = backplane bus cycle time + (configured update time x (backplane bus cycle time / configured update time)).
If the division of backplane bus cycle time / configured update time does not return an integer without remainder, an additional configured update time must be added next to the integer in the bracket.
Example calculation for case 1: The configured update time is greater than/equal to the backplane bus cycle time.
Configured update time is, for example, 750 s Backplane bus cycle time = 510 s Result of case 1 Response time of the IM 155-5 PN HF = 750 s + 510 s = 1260 s
Example calculation for case 2: The configured update time is less than the backplane bus cycle time.
Configured update time is, for example, 500 s Backplane bus cycle time = 510 s Result of case 2 Response time of the IM 155-5 PN HF = 510 s + (500 s x (510 s / 500 s) + 500 s) = 510 s + (500 s x 1 + 500 s) = 510 s + 1000 s = 1510 s
Reference
Additional information about performance measurements is available on the Internet (http://support.automation.siemens.com/WW/view/en/34677186/136000&cspltfrm=0&cssw=0 &csbinh=5).
IM 155-5 PN HF Interface Module (6ES7155-5AA00-0AC0)
60
Equipment Manual, 03/2020, A5E32840985-AC
SIMATIC
ET 200MP Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_nt_at_io_n _gu_id_e_______1_ _Pr_od_u_ct_ov_e_rv_ie_w _________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_r ____________4_ _Ienr_treor_rr,u_apn_tsd_asny_sd_ted_miag_anl_aors_mti_cs,_____5_ _Te_ch_n_ic_al_sp_e_cif_ic_at_ion_s______6_ _Di_m_en_si_on_d_ra_w_in_g _______A__ _Re_s_po_n_se_ti_m_es_________B__
11/2017
A5E03612323-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03612323-AC 09/2017 Subject to change
Copyright © Siemens AG 2013 - 2017. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500, ET 200MP automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792). Functions that generally relate to the system are described in this manual.
The information provided in this manual and in the system/function manuals support you in commissioning the system.
Conventions
Please also observe notes marked as follows:
Note A note contains important information on the product, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
4
Manual, 11/2017, A5E03612323-AC
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 11
2.1
Properties ................................................................................................................................ 11
2.2 2.2.1 2.2.2
Functions ................................................................................................................................13 PROFINET IO .........................................................................................................................13 Configuration control (option handling)...................................................................................19
3 Wiring ................................................................................................................................................... 20
3.1
Terminal assignment...............................................................................................................20
3.2
Block diagram .........................................................................................................................22
4 Parameter............................................................................................................................................. 23
4.1
Parameters .............................................................................................................................23
4.2 4.2.1 4.2.2
Description of parameters.......................................................................................................24 Connection to supply voltage L+ ............................................................................................24 Configuration control...............................................................................................................25
5 Interrupts and diagnostic, error, and system alarms............................................................................... 26
5.1
Status and error displays ........................................................................................................26
5.2 5.2.1 5.2.2
Interrupts .................................................................................................................................29 Triggering of a diagnostic interrupt .........................................................................................29 Triggering of a hardware interrupt ..........................................................................................30
5.3 5.3.1 5.3.2 5.3.3 5.3.4 5.3.5
Alarms .....................................................................................................................................30 Diagnostic alarms ...................................................................................................................30 Maintenance events................................................................................................................32 Channel diagnostics................................................................................................................33 Invalid configuration states of the ET 200MP on PROFINET IO ............................................38 STOP of the IO controller and recovery of the IO device .......................................................38
6 Technical specifications ........................................................................................................................ 39
A Dimension drawing ............................................................................................................................... 43
B Response times .................................................................................................................................... 45
B.1
Response times of the ET 200MP ..........................................................................................45
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
6
Manual, 11/2017, A5E03612323-AC
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
7
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
8
Manual, 11/2017, A5E03612323-AC
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
9
Documentation guide
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
10
Manual, 11/2017, A5E03612323-AC
Product overview
2.1
Properties
Article number
6ES7155-5AA01-0AB0
View of the module
2
Properties
Figure 2-1 View of the IM 155-5 PN ST interface module
Technical properties Connects the ET 200MP distributed I/O system with PROFINET IO 24V DC power supply (SELV/PELV) PROFINET IO connection using RJ45 bus connector
Supported functions (Page 13)
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
11
Product overview 2.1 Properties
Maximum configuration
512 bytes I/O data per station
The integrated power supply of the interface module feeds 14 W into the backplane bus. Up to 12 I/O modules can be supplied this way. The exact number of operable modules is determined by the power budget (see relevant section in the ET 200MP distributed I/O system (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual).
A maximum of one power supply module (PS) upstream from the interface module and two downstream from the interface module is possible.
If you use a power supply module (PS) upstream from the interface module, the maximum possible configuration is a total of 32 modules (up to 30 modules downstream from the interface module).
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
12
Manual, 11/2017, A5E03612323-AC
2.2
Functions
Product overview 2.2 Functions
2.2.1
PROFINET IO
Introduction
The interface module supports the following PROFINET IO functions: Integrated switch with 2 ports Supported Ethernet services: ping, arp, SNMP, LLDP Port diagnostics Disabling ports Isochronous real-time communication Minimum update time 250 s Prioritized startup Device replacement without PG (LLDP) Media redundancy (MRP) Shared device with up to two IO controllers Module-internal Shared Input/Shared Output (MSI/MSO) Isochronous mode of process data Identification data I&M 0 to 3 Firmware update via PROFINET IO Reset to factory settings via PROFINET IO Configuration control (option handling) Module division into submodules
Note Docking system You cannot use the IM155-5 PN ST interface module as docking station. The use as a docking unit (function: IO devices changing during operation) in a docking system is supported.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
13
Product overview 2.2 Functions
Requirements
The following requirements apply to a configuration with the IM 155-5 PN ST interface module:
Table 2- 1 Requirements
PROFINET IO function
Real-time communication Isochronous real-time communication Prioritized startup Device replacement without PG Media redundancy Shared device MSI/MSO Isochronous mode Interface module; order number 6ES7155-5AA010AB0
Configuration software
with GSD file1)
STEP 7 as of V5.5 SP3
STEP 7 (TIA Portal) as of V12
X
X
X
X
X
X
X
X
X
X
X
X
X
X
-
-
X
X
STEP 7 (TIA Portal) as of V12
X X
X X
X X2) X2) X X (STEP 7 V14 or higher with HSP 223)
1) The usability of the PROFINET IO functions depends on the configuration software (Siemens and/or third party). Below, the usability of the PROFINET IO functions is described for STEP 7 only.
2) Firmware version V2.0 or higher
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
14
Manual, 11/2017, A5E03612323-AC
Product overview 2.2 Functions
Isochronous real-time communication
Synchronized communication protocol for cyclic exchange of IRT data between PROFINET devices. A reserved bandwidth is available in the send cycle for IRT data. The reserved bandwidth ensures that IRT data can be transferred at reserved synchronized intervals, without being influenced by other network loads (e.g., TCP/IP communication, or additional real-time communication). A topological configuration is required for IRT.
Note IO controller as sync master with IRT communication We recommend operating the IO controller as sync master when configuring IRT communication. Otherwise, IO devices with IRT and RT configuration could fail as a result of sync master failure.
You can find additional information on configuration of synchronized PROFINET devices in sync domains in the STEP 7 online help and as of STEP 7 V12, in the PROFINET with STEP 7 V14
(https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual. as of STEP 7 V5.5 in the PROFINET System Description
(http://support.automation.siemens.com/WW/view/en/19292127) manual.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
15
Product overview 2.2 Functions
Prioritized startup
Prioritized startup denotes the PROFINET functionality for accelerating the startup of IO devices operated in a PROFINET IO system with RT communication. The function reduces the time that the correspondingly configured IO devices require to return to the cyclic user data exchange in the following cases: After the supply voltage has returned After a station has returned After activation of IO devices
Note Dependency on the startup time The startup time depends on the number and type of modules. You can optimize the startup time by · inserting no more than 12 I/O modules · inserting no power supply module.
The prioritized startup function with the requirements listed in the note above is not available for IRT communication and media redundancy. You can find additional information in the STEP 7 online help and as of STEP 7 V12, in the PROFINET with STEP 7 V14
(https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual. as of STEP 7 V5.5 in the PROFINET System Description
(http://support.automation.siemens.com/WW/view/en/19292127) manual.
Cabling with fixed connection setting
If you set a fixed connection setting of the port in STEP 7, you should also deactivate "Autonegotiation/Autocrossover". You can find additional information in the STEP 7 online help and as of STEP 7 V12, in the PROFINET with STEP 7 V14
(https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual. as of STEP 7 V5.5 in the PROFINET System Description
(http://support.automation.siemens.com/WW/view/en/19292127) manual.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
16
Manual, 11/2017, A5E03612323-AC
Product overview 2.2 Functions
Device replacement without PG
It is easy to replace IO devices that support this function:
The device name does not have to be assigned with the PG.
The replaced IO device is assigned the device name by the IO controller. The IO controller uses the configured topology and the neighboring relationships determined by the IO devices for this purpose. All involved devices must support the LLDP protocol (Link Layer Discovery Protocol). The configured target topology must match the actual topology.
IO devices that have been used in another configuration must be reset to the factory settings before they can be used again (see S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual).
You can find additional information in the STEP 7 online help and
as of STEP 7 V12, in the PROFINET with STEP 7 V14 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
as of STEP 7 V5.5 in the PROFINET System Description (http://support.automation.siemens.com/WW/view/en/19292127) manual.
Media redundancy
Function for safeguarding communication and system availability. A ring topology ensures that an alternative communication path is made available if a transmission link fails.
You can find additional information in the STEP 7 online help and
as of STEP 7 V12, in the PROFINET with STEP 7 V14 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
as of STEP 7 V5.5 in the PROFINET System Description (http://support.automation.siemens.com/WW/view/en/19292127) manual.
Shared device
IO device that makes its data available to up to two IO controllers.
As of firmware version V2.0, the interface module supports shared device functionality at the submodule level. A prerequisite for using this function is that the I/O modules also support this.
If the engineering system performs no plausibility check of the shared device projects, note the following: If you reconfigure shared device configurations without the above mentioned plausibility check, you must recommission the ET 200MP. This means that you have to reload the projects of all involved IO controllers in the specific CPU after reconfiguration and, if necessary, switch the interface module POWER OFF/POWER ON.
You can find additional information in the STEP 7 online help and
as of STEP 7 V5.5 in the PROFINET System Description (http://support.automation.siemens.com/WW/view/en/19292127) manual.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
17
Product overview 2.2 Functions
Module-internal Shared Input/Shared Output (MSI/MSO)
The Module-internal Shared Input function allows an input module to make its input data available to up to two additional IO controllers. Each controller has read access to the same channels.
The Module-internal Shared Output function allows an output module to make its output data available to up to two IO controllers. One IO controller has write access. A second IO controller can have read access to the same channels.
You can find more information on this topic in the STEP 7 online help and
As of STEP 7 V14, in the PROFINET with STEP 7 V14 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Isochronous mode of process data
The process data, transmission cycles via PROFINET IO, and the user program are synchronized to achieve ultimate deterministic. The input data and output data of distributed I/O devices in the system are detected and output simultaneously. The isochronous PROFINET IO cycle forms the corresponding clock generator.
To ensure problem-free isochronous mode, we recommend that you do not use acyclical services and that you limit diagnostic interrupts to the most crucial ones.
You can find additional information in the STEP 7 online help and
as of STEP 7 V12, in the PROFINET with STEP 7 V14 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Submodules
The IM 155-5 PN ST interface module supports the module division of I/O modules in up to 4 submodules. This allows parts of an I/O module to be separately configured and parameterized. It is possible to assign each of these submodules to different IO controllers. The functions: Firmware update Write I&M data Calibration can only be executed if you have configured submodule 1 during configuration.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
18
Manual, 11/2017, A5E03612323-AC
Product overview 2.2 Functions
2.2.2
Configuration control (option handling)
Properties
Configuration control allows you to prepare your distributed I/O system for future extensions or changes. Configuration control means that you can configure the planned maximum configuration of your distributed I/O system in advance and vary it later in a flexible manner by means of the user program.
Reference
You can find more information in the S7-1500, ET 200MP system manual
(http://support.automation.siemens.com/WW/view/en/59191792) on the Internet (http://support.automation.siemens.com/WW/view/en/29430270) in the STEP 7 online help.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
19
Wiring
3
3.1
Terminal assignment
24V DC power supply
The following table shows the signal names and the descriptions of the pin assignment for a 24 V DC supply voltage.
Table 3- 1 Pin assignment 24 V DC supply voltage
View
Signal name1 1L+ 2L+ 1M 2M
Designation 24 V DC 24 V DC (for looping through)2 Ground Ground (for looping through)2
1 1L+ and 2L+ as well as 1M and 2M are bridged internally. 2 Maximum 10 A permitted.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
20
Manual, 11/2017, A5E03612323-AC
Wiring 3.1 Terminal assignment
PROFINET interface X1 with 2-port switch (X1 P1 R and X1 P2 R)
The pin assignment of the ports depends on the setting of the port option "Activate autonegotiation".
Port P1 X1 R: When autonegotiation is deactivated, the RJ45 socket is allocated as data terminal equipment MDI (normal pin assignment).
Port P2 X1 R: When autonegotiation is deactivated, the RJ45 socket is allocated as a switch MDI-X (crossed pin assignment).
The following applies to both ports: When autonegotiation is activated, autocrossing is in effect and the RJ45 socket is allocated either as data terminal equipment MDI or a switch MDI-X.
The figure below shows the location of the PROFINET interface X1 and the connection socket for the 24 V DC supply voltage.
Port P1 X1 R (front) Port P2 X1 R (rear) Connection socket 24 V DC supply voltage
Figure 3-1 Location of the PROFINET ports and the 24 V DC connection socket (view from below)
Note You need a screwdriver (max. blade width 2.5 mm) to remove the PROFINET plug.
Note IM 155-5 PN ST interface module (6ES7155-5AA00-0AB0) For the IM 155-5 PN ST with order number 6ES7155-5AA00-0AB0, note that the ports of the PROFINET interface X1 are offset by 90°.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
21
Wiring 3.2 Block diagram
Additional information
You can find additional information on connecting the interface module and on accessories (RJ45 bus connector) in the ET 200MP distributed I/O system (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
3.2
Block diagram
Block diagram
The following figure shows a block diagram of the IM 155-5 PN ST interface module.
X80 24 V DC
PN X1 P1
PN X1 P2
Electronics PROFINET 2-port switch Backplane bus interface Internal supply voltage Infeed of supply voltage PROFINET interface X1 Port 1 PROFINET interface X1 Port 2
L+ M RN ER MT X1 P1, X1 P2
Figure 3-2 Block diagram of the IM 155-5 PN ST interface module
24 V DC supply voltage Ground RUN/STOP LED (yellow/green) ERROR LED (red) MAINT LED (yellow) LED Link TX/RX
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
22
Manual, 11/2017, A5E03612323-AC
Parameter
4
4.1
Parameters
Table 4- 1 Parameters for IM 155-5 PN ST interface module
Parameters Connection to supply voltage L+
Configuration control
Value range Connection/No connection
Disable/enable
Default setting Connection
Disable
Efficiency range ET 200MP
ET 200MP
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
23
Parameter 4.2 Description of parameters
4.2
Description of parameters
4.2.1
Connection to supply voltage L+
Parameter "Connection to supply voltage L+"
This parameter is used
for diagnostics of the ET 200MP:
If the actual configuration is different from the required configuration of the interface module supply voltage set with this parameter, the ET 200MP generates a diagnostic alarm.
to check the power budget for the configuration with STEP 7 V12:
Depending on how the parameter is set, either the infeed power for the interface module into the backplane bus or the power consumption from the backplane bus is entered into the calculation of the power budget.
The default setting "Connection to supply voltage L+ " means that the front of the interface module is supplied with 24 V DC and feeds power into the backplane bus.
Note
We recommend that you always supply the front of the interface module with 24V DC because if you then insert a power supply module (PS) upstream of the interface module, both the power of the power supply module (PS) and the power of the integrated power supply of the interface module are available for the I/O modules (power addition of PS infeed power + IM infeed power in power segment 1).
In this case, you do not have to change the default of the parameter in STEP 7.
The setting "No connection to supply voltage L+ means that the interface module is not supplied with 24 V DC on the front. This can only be the case when a power supply module (PS) is inserted upstream from the interface module and the power supply modules (PS) supply the interface module and the downstream modules. In the case of an interface module without power supply, its power consumption from the backplane bus must be considered as consumer in the power budget and the power segments must be formed accordingly.
Reference
See the section on the power budget and the forming of power segments in the ET 200MP distributed I/O system (https://support.industry.siemens.com/cs/ww/en/view/59191792) System Manual.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
24
Manual, 11/2017, A5E03612323-AC
Parameter 4.2 Description of parameters
Requirement
In order to generate a diagnostics, the IM 155-5 PN ST interface module must have been configured once.
See also
Diagnostic alarms (Page 30)
4.2.2
Configuration control
"Configuration control" parameter
You can use this parameter to enable the configuration control function in the ET 200MP distributed I/O system.
Note
If you configure the enable, the ET 200MP distributed I/O system requires a control data record 196 from the user program in order for the ET 200MP distributed I/O system to operate the I/O modules.
Reference
For more information on configuration control, refer to the S7-1500, ET 200MP system manual (https://support.industry.siemens.com/cs/ww/en/view/59191792) and to the STEP 7 online help.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
25
Interrupts and diagnostic, error, and system alarms
5
5.1
Status and error displays
Introduction
Diagnostics by means of LED display is an initial tool for error localization. To further limit the error, you usually evaluate the display of the CPU, the display of the module status in STEP 7 or the diagnostics buffer of the CPU. The buffer contains plain text information on the error that has occurred. For example, you will find the number of the appropriate error OB there.
LED display
The figure below shows the LED display on the IM 155-5 PN ST interface module.
RUN (green) ERROR (red) MAINT (yellow) P1 LINK/TX/RX (green/yellow) P2 LINK/TX/RX (green/yellow)
Figure 5-1 LED display on the interface module
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
26
Manual, 11/2017, A5E03612323-AC
Interrupts and diagnostic, error, and system alarms 5.1 Status and error displays
Meaning of the LEDs RUN/ ERROR/ MAINT
Table 5- 1 Meaning of the LEDs RUN/ ERROR/ MAINT
RUN Off On Flashes
On Not relevant
Not relevant Flashes
LEDs ERROR
Off On Off
Not relevant Flashes
Not relevant Flashes
MAINT Off On
Off
Meaning
Supply voltage not present at interface module or too small Test of LEDs during startup: The three LEDs light up simultaneously for approximately 0.25 s. Interface module is deactivated.
Interface module is not configured.
Not relevant
ET 200MP starts up.
ET 200MP is reset to factory settings.
ET 200MP is currently exchanging data with the IO controller.
Remedy
Check the supply voltage or turn it on at the interface module. ---
Activate the interface module with the configuration software or the user program. Configure the interface module with the configuration software. ---
Not relevant
On Flashes
Group error and group error channels
The set configuration does not correspond to the actual configuration of the ET 200MP.
Invalid configuration states
Parameter assignment error in the I/O module
Maintenance
"Node flash test" is performed. (The LEDs P1 and P2 of the PROFINET interface are also flashing.) Hardware or firmware defective. (The LEDs P1 and P2 of the PROFINET interface are not flashing.)
Evaluate the diagnostics data and correct the error. Check the design of the ET 200MP to see whether a module is missing or defective, or whether a non-configured module is inserted. See chapter Invalid configuration states of the ET 200MP on PROFINET IO (Page 38) Evaluate the display of the module status in STEP 7 and correct the error in the corresponding I/O module. See chapter Maintenance events (Page 32)
---
Replace the interface module.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
27
Interrupts and diagnostic, error, and system alarms 5.1 Status and error displays
Meaning of the LEDs P1 LINK/TX/RX, P2 LINK/TX/RX
Table 5- 2 Meaning of the LEDs P1 LINK/TX/RX, P2 LINK/TX/RX
LEDs P1 LINK/TX/RX, P2 LINK/TX/RX
Off
On
flickers Flashes
Meaning
Remedy
There is no Ethernet connection between the
Check whether the bus cable to the switch/IO
PROFINET interface of your PROFINET device controller is interrupted.
and a communication partner (e.g. IO controller).
There is an Ethernet connection between the
---
PROFINET interface of your PROFINET device
and a communication partner (e.g., IO controller).
There is active data traffic (sending/receiving) via --the Ethernet connection.
"Node flash test" is performed. (The LEDs
---
RUN/ERROR/MAINT are also flashing.)
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
28
Manual, 11/2017, A5E03612323-AC
Interrupts and diagnostic, error, and system alarms 5.2 Interrupts
5.2
Interrupts
Introduction
The I/O device generates interrupts as a reaction to specific error events. Interrupts are evaluated based on the I/O controller used.
Evaluating interrupts with I/O controllers
The ET 200MP distributed I/O system supports the following interrupts:
Diagnostic interrupts
Hardware interrupts
In the event of an interrupt, interrupt OBs are automatically called in the CPU of the IO controller.
Information on the cause and class of the error is already available, based on the OB number and start information.
Detailed information on the error event can be obtained in the error OB using the instruction "RALRM" (read additional interrupt information).
System diagnostics
In STEP 7 (TIA Portal) as of V12, innovative system diagnostics is available for devices of the S7-1500 automation system and ET 200MP. Independently of the cyclical user program, alarms are made available on the display of the S7-1500 CPU, to the S7-1500 CPU web server, to the HMI device and in STEP 7.
For additional information on the system diagnostics, refer to the System Diagnostics function manual. (https://support.industry.siemens.com/cs/ww/en/view/59192926).
5.2.1
Triggering of a diagnostic interrupt
Triggering of a diagnostic interrupt
For an incoming or outgoing event (e.g., wire break on a channel of an I/O module), the module triggers a diagnostic interrupt if this is configured accordingly in STEP 7 (TIA Portal).
The CPU interrupts user program execution and executes the diagnostic interrupt OB. The event that triggered the interrupt is entered in the start information of the diagnostic interrupt OB.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
29
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
5.2.2
Triggering of a hardware interrupt
Triggering of a hardware interrupt
When a hardware interrupt occurs, the CPU interrupts execution of the user program and processes the hardware interrupt OB. The event that triggered the interrupt is entered in the start information of the hardware interrupt OB.
Note Diagnostics "Hardware interrupt lost" (from I/O module) Avoid creating hardware interrupts cyclically. If the hardware interrupt load is too high, hardware interrupts can get lost depending on the number of I/O modules and the communication load.
5.3
Alarms
5.3.1
Diagnostic alarms
Actions after a diagnostic alarm
There can be more than one diagnostic alarm at the same time. Actions initiated by diagnostic alarms:
The ERROR LED of the interface module flashes.
Diagnostic data is reported as diagnostic interrupts to the CPU of the IO controller and can be read via data records.
Incoming diagnostic alarms are saved to the diagnostic buffer of the IO controller.
The diagnostic interrupt OB is called. If the diagnostic interrupt OB is not available, the IO controller goes into STOP mode.
You can find additional information in the STEP 7 online help.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
30
Manual, 11/2017, A5E03612323-AC
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
Reading out the diagnostic data
Table 5- 3 Reading out the diagnostic data with STEP 7
Automation system with IO controller
SIMATIC S7
Application
Diagnostic data as plain text in STEP 7 using online view and diagnostic view
Instruction "RDREC" Read data records from the IO device
Instruction "RALRM" Receive interrupts from the IO device
See...
Online help of STEP 7 and
· as of STEP 7 V12 PROFINET with STEP 7 V12 function manual (http://support.automation.siemens.c om/WW/view/en/49948856)
· as of STEP 7 V5.5 PROFINET System Description (https://support.industry.siemens.co m/cs/ww/en/view/19292127) manual.
Additional information on the data records for PROFINET IO
You can find the structure of the diagnostic data records and programming examples in the programming manual From PROFIBUS DP to PROFINET IO (https://support.industry.siemens.com/cs/ww/en/view/19289930) and in the application example on the Internet (https://support.industry.siemens.com/cs/ww/en/view/24000238).
Causes of error and troubleshooting
The causes of error and troubleshooting of the diagnostic alarms are described in the device manuals of the I/O modules in the section Interrupts/Diagnostic alarms.
See also
Channel diagnostics (Page 33)
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
31
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
5.3.2
Maintenance events
Triggering of a maintenance event
The PROFINET interface of the interface module supports the diagnostic concept and maintenance concept in PROFINET according to the IEC 61158-6-10 standard. The goal is to detect and remove potential problems as soon as possible.
For the interface module, maintenance events signal to the user when a network component must be checked or replaced.
The CPU interrupts user program execution and executes the diagnostic interrupt OB. The event that triggered the maintenance event is entered in the start information of the diagnostic interrupt OB.
The interface module signals a maintenance event to the higher-level diagnostic system in case of the following events:
Table 5- 4 Triggering of a maintenance event
Maintenance alarm Maintenance demanded MAINT LED is lit
Event Synchronization loss
Maintenance event of an I/O module
Meaning · No synchronization frame received
No synchronization frame was received by the sync master within the timeout period after parameter assignment or during operation. · Successive synchronization frames are located outside permitted limits (jitter)
The maintenance event of a power supply module is passed through.
System alarms in STEP 7
The maintenance information is generated in STEP 7 with the following system alarms:
Maintenance demanded - indicated for each port by a yellow wrench icon device view or in the hardware configuration.
in the
You can find additional information in the STEP 7 online help.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
32
Manual, 11/2017, A5E03612323-AC
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
5.3.3
Channel diagnostics
Function
Channel diagnostics provides information about channel faults in modules. Channel faults are mapped as channel diagnostic data in IO diagnostic data records. The "RDREC" instruction is used to read the data record.
Structure of the diagnostic data records
Firmware version V4.0 or higher: The IM 155-5 PN ST interface module maps channel faults by means of extended channel diagnostics.
The data records supported by the ET 200MP are based on the standard PROFINET IO Application Layer Service Definition V2.3.
Firmware version lower than V4.0: The IM 155-5 PN ST interface module maps channel faults by means of manufacturer-specific diagnostic data records.
The data records are based on the PROFINET IO standard - Application Layer Service Definition V2.2.
You can purchase the standards from the PROFIBUS User Organization on the Internet (http://www.profibus.com).
Coding of the extended channel diagnostics (as of firmware version V4.0)
With the IM 155-5 PN ST interface module, the following extended channel diagnostics are reported by the Interface module in slot 1:
Table 5- 5 Manufacturer-specific diagnostics in the USI
ChannelErrorType
0x0601 0x0602 0x0602 0x0602 0x0602 0x0610
0x0610
ExtendedChannel ErrorType 0x0682 0x0692 0x069B 0x0696 0x0697 0x06B1
0x06B2
Associated value Diagnostics (AddValue)
Slot
Communication with slot <No.> has failed
Slot
Permitted number of I/O modules exceeded
Slot
Permitted number of power supply modules exceeded
0
No U connector detected on an IM port
0
More than one bus master module (IM/CPU) detected
Slot
Power budget error (overload has been detected in at least one
power segment)
0
Error IM power supply: Power supply not active or power sup-
ply active
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
33
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
Structure of the manufacturer-specific diagnostic data records (firmware version lower than V4.0)
The structure of the diagnostic data records is differentiated by the BlockVersion. The following BlockVersion applies to the IM 155-5 PN ST interface modules:
Table 5- 6 Structure of the manufacturer-specific diagnostic data records
IM 155-5 PN ST interface module 6ES7155-5AA00-0AB0
BlockVersion W#16#0101
Manufacturer-specific diagnostics in the User Structure Identifier (USI)
The following manufacturer-specific diagnostic data is signaled in the USI with the IM 155-5 PN ST interface module:
Table 5- 7 Manufacturer-specific diagnostics in the USI
USI no. W#16#... 0001 0002 0003 0004 0005 0006 0007
Diagnostics Power budget error (overload has been detected in at least one power segment) Permitted number of power supply modules exceeded Permitted number of I/O modules exceeded No U connector detected on an IM port More than one bus master module (IM/CPU) detected Communication with slot <No.> has failed Error IM power supply: Power supply not active or power supply active
Structure USI = W#16#0001
Table 5- 8 Structure of USI = W#16#0001
Data block name USI
Contents W#16#0001
The first power segment with overload starts at slot: <No.>
Slot
B#16#00 to B#16#1F
Followed by 3 reserved bytes
Reserved
Reserved
Reserved
Note
Manufacturer-specific diagnostic data in case of overload in an ET 200MP power segment
Bytes 2
1
1 1 1
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
34
Manual, 11/2017, A5E03612323-AC
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
Structure USI = W#16#0002
Table 5- 9 Structure of the USI = W#16#0002
Data block name USI
Contents W#16#0002
The first surplus module is located in slot: <No.>
Slot
B#16#00 to B#16#1F
Followed by 3 reserved bytes
Reserved
Reserved
Reserved
Note
Manufacturer-specific diagnostic data if the permitted number of power supply modules is exceeded
Bytes 2
1
1 1 1
USI structure = W#16#0003
Table 5- 10 USI structure = W#16#0003
Data block name USI
Contents W#16#0003
The first surplus module is located in slot: <No.>
Slot
B#16#20 to B#16#FF
Followed by 3 reserved bytes
Reserved
Reserved
Reserved
Note
Manufacturer-specific diagnostic data if the permitted number of I/O modules is exceeded
Bytes 2
1
1 1 1
USI structure = W#16#0004
Table 5- 11 USI structure = W#16#0004
Data block name USI
Contents W#16#0004
Followed by 4 reserved bytes Reserved Reserved Reserved Reserved
Note
Manufacturer-specific diagnostic data if no U connector is detected on an IM port
Bytes 2
1 1 1 1
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
35
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
USI structure = W#16#0005
Table 5- 12 USI structure = W#16#0005
Data block name USI
Contents W#16#0005
Followed by 4 reserved bytes Reserved Reserved Reserved Reserved
USI structure = W#16#0006
Table 5- 13 USI structure = W#16#0006
Data block name USI
Contents W#16#0006
Communication has failed with slot: <No.>
Slot
B#16#00 to B#16#1F
Followed by 3 reserved bytes
Reserved
Reserved
Reserved
Note
Manufacturer-specific diagnostic data if there is more than one bus master module (IM/CPU)
Bytes 2
1 1 1 1
Note
Manufacturer-specific diagnostic data if the communication with a slot has failed
Bytes 2
1
1 1 1
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
36
Manual, 11/2017, A5E03612323-AC
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
USI structure = W#16#0007
Table 5- 14 USI structure = W#16#0007
Data block name
Contents
Note
USI
W#16#0007
Manufacturer-specific diagnostic data
if the configuration of the interface
module power supply is different from
the parameterized configuration
Error IM power supply: Power supply <bit 0 in the least significant byte can be 0 or 1>
Power supply of the interface module
B#16#00
Power supply of the interface module is not active.
B#16#01
Power supply of the interface module is active.
Followed by 3 reserved bytes
Reserved
Reserved
Reserved
Bytes 2
1
1 1 1
Additional information
You can find additional information on maximum configuration, power budget and power segments in the ET 200MP Distributed I/O System (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
37
Interrupts and diagnostic, error, and system alarms 5.3 Alarms
5.3.4
Invalid configuration states of the ET 200MP on PROFINET IO
Invalid configuration states
The following invalid configuration states of the ET 200MP lead to a short failure of the ET 200MP IO device or prevent the exchange of user data with the I/O modules.
More than two power supply modules (PS) inserted to the right of the interface module
Number of modules exceeds maximum configuration
Faulty backplane bus (e.g., additional IM present).
I/O modules of a power segment consume more power than can be provided (overload). In the case of an overload, the interface module provides diagnostic information, cyclically checks the connection to the backplane bus and re-establishes it as soon as possible.
Additional information
You can find additional information on maximum configuration, power budget and power segments in the ET 200MP distributed I/O system (https://support.industry.siemens.com/cs/ww/en/view/59191792) System Manual.
See also:
Status and error displays (Page 26)
5.3.5
STOP of the IO controller and recovery of the IO device
STOP of the SIMATIC IO controller
Diagnostic data received from the IO device while the IO controller is in STOP state does not initiate a call of the corresponding OBs when the IO controller goes into RUN. You have to read the data record E00CH using the "RDREC" in the startup OB. This record contains all diagnostic data for the slots assigned to an IO controller in an IO device.
Recovery of the SIMATIC IO device
If you want to read the diagnostic data in the STOP state of the IO controller, you have to read the E00CH data record using the "RDREC" instruction. This record contains all diagnostic data for the slots assigned to an IO controller in an IO device.
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
38
Manual, 11/2017, A5E03612323-AC
Technical specifications
Technical specifications of the IM 155-5 PN ST
Article number General information
Product type designation HW functional status Firmware version Vendor identification (VendorID) Device identifier (DeviceID) Product function · I&M data
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFINET as of GSD version/GSD revision
Configuration control via user data via dataset
Supply voltage Type of supply voltage Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection Short-circuit protection
Mains buffering · Mains/voltage failure stored energy time
Input current Current consumption (rated value) Current consumption, max. Inrush current, max. I²t
6ES7155-5AA01-0AB0
IM 155-5 PN ST FS01 V4.1.0 0x002A 0X0312
Yes; I&M0 to I&M3
V14 or higher with HSP 0223 / integrated with V15 or higher GSDML V2.32
V2.3 / -
No Yes
DC 24 V 20.4 V 28.8 V Yes Yes
10 ms
0.2 A 1.2 A 9 A 0.09 A²·s
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0) Manual, 11/2017, A5E03612323-AC
6
39
Technical specifications
Article number Power
Infeed power to the backplane bus Power available from the backplane bus Power loss Power loss, typ. Address area Address space per module · Address space per module, max. Address space per station · Address space per station, max. Hardware configuration Integrated power supply System power supply can be plugged in to left of IM Number of permissible power segments Rack · Modules per rack, max. Interfaces Number of PROFINET interfaces 1. Interface Interface types · Number of ports
· integrated switch
· RJ 45 (Ethernet) Functionality
· PROFINET IO Device
· Media redundancy Interface types RJ 45 (Ethernet)
· Transmission procedure
· 100 Mbps
· Autonegotiation
· Autocrossing
6ES7155-5AA01-0AB0 14 W 2.3 W 4.5 W
256 byte; per input / output
512 byte; per input / output
Yes Yes 3 30; I/O modules
1
2 Yes Yes
Yes Yes; PROFINET MRP
PROFINET with 100 Mbit/s full duplex (100BASE-TX) Yes Yes Yes
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
40
Manual, 11/2017, A5E03612323-AC
Article number PROFINET IO Device Services
Isochronous mode
IRT
MRP
MRPD
PROFINET system redundancy
PROFIenergy
Prioritized startup
Shared device
Number of IO Controllers with shared device, max.
Open IE communication · TCP/IP
· SNMP
· LLDP Isochronous mode
Isochronous operation (application synchronized up to terminal) Equidistance shortest clock pulse max. cycle Interrupts/diagnostics/status information Status indicator Alarms Diagnostic functions Diagnostics indication LED · RUN LED
· ERROR LED
· MAINT LED
· Connection display LINK TX/RX Potential separation
between backplane bus and electronics between PROFINET and all other circuits between supply and all other circuits Isolation Isolation tested with
6ES7155-5AA01-0AB0
Yes Yes Yes No No No Yes Yes 2
Yes Yes Yes
Yes
Yes 250 µs 4 ms
Yes Yes Yes
Yes; Green LED Yes; Red LED Yes; yellow LED Yes; 2x green-yellow LEDs
No Yes No
707 V DC (type test)
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0) Manual, 11/2017, A5E03612323-AC
Technical specifications 41
Technical specifications
Article number Ambient conditions Ambient temperature during operation
· horizontal installation, min. · horizontal installation, max. · vertical installation, min. · vertical installation, max. Connection method ET-Connection · via BU/BA Send Dimensions Width Height Depth
6ES7155-5AA01-0AB0
0 °C 60 °C 0 °C 40 °C
No
35 mm 147 mm 129 mm
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
42
Manual, 11/2017, A5E03612323-AC
Dimension drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimensional drawings of the IM 155-5 PN ST interface module
Figure A-1 Dimensional drawing of the IM 155-5 PN ST interface module, front and side views
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
43
Dimension drawing Dimensional drawing of the IM 155-5 PN ST interface module, side view with open front cover
Figure A-2 Dimensional drawing of the IM 155-5 PN ST interface module, side view with open front cover
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
44
Manual, 11/2017, A5E03612323-AC
Response times
B
B.1
Response times of the ET 200MP
Introduction
The response time of the IM 155-5 PN ST is made up of: the update time configured for the IM as IO device. plus the backplane bus cycle time.
Note Validity of the formula The following formula does not apply to shared device mode.
Backplane bus cycle time
The backplane bus cycle time is the time the interface module requires to output new output data, read new input data and then copy it to the PROFINET send buffer. The backplane bus cycle time in s is made up as follows: (number of output data in bytes + number of output addresses) x 0.0668 + 1.6131
(rounded) plus (number of input data in bytes + number of input addresses) x 0.0959 + 2.5901 (rounded) plus Operating system processing time (500 s).
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
45
Response times B.1 Response times of the ET 200MP
Example configuration for the calculation of the backplane bus cycle time
The following are used in the example:
Table B- 1 Example configuration for the calculation of the backplane bus cycle time
I/O module
Analog output module AQ 4xU/I ST Analog output module AQ 4xU/I ST with value status Digital output module DQ 32x24VDC/0.5A ST with value status Digital input module DI 32x24VDC HF Analog input module AI 8xU/I/RTD/TC ST Sum
Output data in bytes
8 8
4
20
Input data in bytes
1
4
4 16 25
Number of output addresses
1 1
Number of input addresses -
1
1
1
-
1
-
1
3
4
Example calculation of the backplane bus cycle time
Backplane bus cycle time in s: (20 + 3) x 0.0668 + 1.6131 = 3.1495 4 s (rounded) plus (25 + 4) x 0.0959 + 2.5901 = 5.3712 6 s (rounded) plus Operating system processing time 500 s Result of backplane bus cycle time Backplane bus cycle time = 510 s
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
46
Manual, 11/2017, A5E03612323-AC
Response times B.1 Response times of the ET 200MP
Calculating the response time
It is necessary to differentiate between two cases when calculating the response time of the IM 155-5 PN ST: Case 1: The configured update time is greater than/equal to the backplane bus cycle
time. Then: Response time in s = backplane bus cycle time + configured update time Case 2: The configured update time is less than the backplane bus cycle time. Then: Response time in s = backplane bus cycle time + (configured update time x (backplane bus cycle time / configured update time)). If the division backplane cycle time / configured update time does not return an integer without remainder, an additional configured update time must be added next to the integer in the bracket.
Example calculation Case 1: The configured update time is greater than/equal to the backplane bus cycle time.
Configured update time is, for example, 750 s Backplane bus cycle time = 510 s Result of case 1 Response time of the IM 155-5 PN ST = 750 s + 510 s = 1260 s
Example calculation Case 2: The configured update time is less than the backplane bus cycle time.
Configured update time is, for example, 500 s Backplane bus cycle time = 510 s Result of case 2 Response time of the IM 155-5 PN ST = 510 s + (500 s x (510 s / 500 s) + 500 s) ) = 510 s + (500 s x 1 + 500 s) = 510 s + 1000 s = 1510 s
Establishing the PROFINET response time for typical configurations on the PROFINET IO.
A typical PROFINET IO configuration consists of an IO controller with multiple IO devices that are connected by cable or IWLAN to the IO controller. Additional loads, such as programming devices (PGs), HMI devices (Panels) or additional S7 stations, can be present as data receiving stations on the PROFINET line. You can find the measured values of the PROFINET response time for a typical configuration in this application example (https://support.industry.siemens.com/cs/ww/en/view/21869080).
Interface module IM 155-5 PN ST (6ES7155-5AA01-0AB0)
Manual, 11/2017, A5E03612323-AC
47
SIMATIC
S7-1500/ET 200MP Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Ad_d_re_ss_s_pa_c_e __________4_ _Di_ag_n_os_tic_s_al_ar_m_s ________5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_
12/2016
A5E32363711-AD
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E32363711-AD 12/2016 Subject to change
Copyright © Siemens AG 2014 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change: Schematic circuit diagram has been updated.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system.
Please also observe notes marked as follows:
Note
A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
4
Manual, 12/2016, A5E32363711-AD
Preface
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
3.1
Wiring and block diagram ...................................................................................................... 13
4 Address space ...................................................................................................................................... 14
4.1
Address space ....................................................................................................................... 14
5 Diagnostics alarms................................................................................................................................ 18
5.1
Status and error displays ....................................................................................................... 18
6 Technical specifications ........................................................................................................................ 20
A Dimensional drawing............................................................................................................................. 23
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
6
Manual, 12/2016, A5E32363711-AD
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
8
Manual, 12/2016, A5E32363711-AD
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
10
Manual, 12/2016, A5E32363711-AD
Product overview
2.1
Properties
Part number:
6ES7521-1BL10-0AA0
View of the module
2
Properties
Figure 2-1 View of the DI 32x24VDC BA module
The module has the following technical properties: 32 digital inputs; electrically isolated in groups of 16 Rated input voltage 24 VDC Suitable for switches and 2-/3-/4-wire proximity switches Hardware compatible with digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
11
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware version of the module
Firmware update Identification data I&M0 to I&M3 Module-internal Shared Input (MSI)
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
Configurable submodules / submodules for Shared Device
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher, or
STEP 7 V5.5 SP3 or higher
V13 or higher
X
V13 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts:
Front connector (push-in terminals) including cable tie
Labeling strips
U connector
Universal front door
You can find additional information on accessories in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
12
Manual, 12/2016, A5E32363711-AD
Wiring
3
3.1
Wiring and block diagram
This section contains the block diagram of the module and outlines various wiring options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Wiring and block diagram
The figure below shows you how to wire the module and the assignment of the channels to the addresses (input byte a to input byte d).
Backplane bus interface
M Ground
CHx RUN ERROR
Channel or channel status LED (green) Status display LED (green) Error display LED (red)
Figure 3-1 Block diagram and terminal assignment
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
13
Address space
4
4.1
Address space
The module can be configured in various ways in STEP 7. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
Configuration options of DI 32x24VDC BA
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 1 Configuration options Configuration
Short designation/ module name in the
GSD file
1 x 32-channel without value status 4 x 8-channel without value status
DI 32x24VDC BA DI 32x24VDC BA S
1 x 32-channel with value status for DI 32x24VDC BA MSI module-internal Shared Input with up to 4 submodules
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher or
STEP 7 V5.5 SP3 or higher
V13 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
14
Address space 4.1 Address space
Address space for configuration as 1 x 32-channel DI 32x24VDC BA
The figure below shows the address space assignment for configuration as a 1 x 32-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. The letters "a" to "d" are printed on the module. "IB a", for example, stands for module start address input byte a.
Figure 4-1 Address space for configuration as 1 x 32-channel DI 32x24VDC BA
Address space for configuration as 4 x 8-channel DI 32x24VDC BA S
For the configuration as a 4 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. Unlike the 1 x 32-channel module configuration, each of the four submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 4 x 8-channel DI 32x24VDC BA S
Address space for configuration as 1 x 32-channel DI 32x24VDC BA MSI
The channels 0 to 31 of the module are copied to up to 4 submodules with configuration 1 x 32-channel module (Module-internal Shared Input, MSI). Channels 0 to 31 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels.
The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
15
Address space 4.1 Address space
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status is not relevant. For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready). The figure below shows the assignment of the address space with submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 32-channel DI 32x24VDC BA MSI with value status
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
16
Manual, 12/2016, A5E32363711-AD
Address space 4.1 Address space
The figure below shows the assignment of the address space with submodules 3 and 4.
Reference
Figure 4-4 Address space for configuration as 1 x 32-channel DI 32x24VDC BA MSI with value status
You can find information on the module-internal shared input/shared output (MSI/MSO) function in the section Module-internal shared input/shared output (MSI/MSO) of the function manual PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856).
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
17
Diagnostics alarms
5
The module has no selectable diagnostics. Diagnostics alarms, for example, cannot be output with STEP 7 (TIA Portal).
5.1
Status and error displays
LED displays
The figure below shows you the LED displays (status and error displays) of the DI 32x24VDC BA.
Figure 5-1 LED displays of the module DI 32x24VDC BA
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
18
Diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The tables below explain the meaning of the status and error displays.
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On
Flashes
Off Off Flashes
Module is starting up. Module is ready. Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Replace the module.
LED CHx
Table 5- 2 CHx status display
LED CHx Off On
Meaning 0 = Status of the input signal.
1 = Status of the input signal.
Remedy ---
---
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
19
Technical specifications
6
Technical specifications of the DI 32x24VDC BA
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7521-1BL10-0AA0
DI 32x24VDC BA FS01 V1.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V13 / V13
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
DI
Yes
Counters
No
MSI
Yes
Supply voltage
Rated value (DC)
24 V
Valid range, low limit (DC)
20.4 V
Valid range, high limit (DC)
28.8 V
Power
Power consumption from the backplane bus
1.05 W
Power loss
Power loss, typ.
3 W
Digital inputs
Number of inputs
32
Configurable digital inputs
No
Sinking/sourcing input
Sinking input
Input characteristic curve acc. to IEC 61131, type Yes 3
Input voltage
Type of input voltage
DC
Rated value (DC)
24 V
for signal "0"
-30 to +5 V
for signal "1"
+11 to +30 V
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
20
Technical specifications
Input current for signal "1", typ. Input delay (for rated value of input voltage) For standard inputs
· Configurable
2.7 mA
6ES7521-1BL10-0AA0
No
· with "0" to "1", min.
3 ms
· with "0" to "1", max.
4 ms
· with "1" to "0", min.
3 ms
· with "1" to "0", max.
4 ms
For interrupt inputs
· Configurable
No
for technological functions
· Configurable
No
Cable length shielded, max. unshielded, max. Encoders Connectable encoders 2-wire sensor
· Permitted quiescent current (2-wire sensor), max.
1000 m 600 m
Yes 1.5 mA
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
No
Interrupts
Diagnostics interrupt
No
Hardware interrupt
No
Diagnostics alarms
Monitoring of supply voltage
No
Wire break
No
Short-circuit
No
Diagnostics indicator LED
RUN LED
Yes; green LED
ERROR LED
Yes; red LED
Monitoring of supply voltage (PWR LED)
No
Channel status display
Yes; green LED
For channel diagnostics
No
For module diagnostics
No
Electrical isolation
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
21
Technical specifications
Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Between the channels and power supply of the electronics Isolation Isolation tested with Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed mode Prioritized startup Dimensions Width Height Depth Weights Weight, approx. Miscellaneous Note:
6ES7521-1BL10-0AA0
No 16 Yes No
707 V DC (type test)
0 °C 60 0 °C 40 °C
Yes
25 mm 147 mm 129 mm
260 g
Delivery includes 40-pin push-in front connector
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
22
Manual, 12/2016, A5E32363711-AD
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DI 32x24VDC BA module
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
Manual, 12/2016, A5E32363711-AD
23
Index
Figure A-2 Dimensional drawing of the DI 32x24VDC BA module, side view with open front cover
Digital input module DI 32x24VDC BA (6ES7521-1BL10-0AA0)
24
Manual, 12/2016, A5E32363711-AD
SIMATIC
S7-1500/ET 200MP DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/a_dd_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_ _Di_m_en_s_ion_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_
10/2018
A5E03485935-AG
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03485935-AG 10/2018 Subject to change
Copyright © Siemens AG 2013 - 2018. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following changes: Clock synchronization possible in counting mode. In the technical specifications, the
counting frequency is increased from 1 kHz to 3 kHz. New licensing conditions and copyright information of the Open Source Software New technical specifications
Conventions
CPU: The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system.
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
DI mode: DI 32x24VDC HF as digital input module with 32 digital inputs (channels 0 to 31).
Counting mode: DI 32x24VDC HF as digital input module with 2 counters (channels 0 and 1) and 30 digital inputs (channels 2 to 31).
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
4
Manual, 10/2018, A5E03485935-AG
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 10
2.1
Properties ................................................................................................................................ 10
2.2 2.2.1
Functions ................................................................................................................................13 Count....................................................................................................................................... 13
3 Wiring ................................................................................................................................................... 14
4 Parameters/address space ................................................................................................................... 16
4.1 4.1.1 4.1.2 4.1.3 4.1.4
Parameter ...............................................................................................................................16 Parameters DI mode...............................................................................................................16 Explanation of the parameters of the DI mode .......................................................................17 Parameters of the Counting mode..........................................................................................18 Explanation of the parameters of the Counting mode ............................................................20
4.2 4.2.1 4.2.2 4.2.3
Address space ........................................................................................................................22 Address space DI mode..........................................................................................................23 Address space Counting mode...............................................................................................27 Examples of counting..............................................................................................................31
5 Interrupts/diagnostics alarms................................................................................................................. 35
5.1
Status and error displays ........................................................................................................35
5.2
Interrupts .................................................................................................................................37
5.3
Diagnostics alarms..................................................................................................................39
6 Technical specifications ........................................................................................................................ 40
A Dimensional drawing............................................................................................................................. 44
B Parameter data records......................................................................................................................... 46
B.1
Parameter assignment and structure of the parameter data records.....................................46
B.2
Structure of the parameter data records DI mode ..................................................................47
B.3
Structure of the parameter data records Counting mode .......................................................49
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
6
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
7
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
8
Manual, 10/2018, A5E03485935-AG
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
9
Product overview
2.1
Properties
Article number:
6ES7521-1BL00-0AB0
View of the module
2
Figure 2-1 View of the DI 32x24VDC HF module
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
10
Manual, 10/2018, A5E03485935-AG
Product overview 2.1 Properties
Properties
The module has the following technical properties: 32 digital inputs; electrically isolated in groups of 16
of which channel 0 and 1 optionally with counter function Rated input voltage 24 V DC Configurable input delay: 0.05 ms to 20 ms Configurable diagnostics (per channel) Configurable hardware interrupt (per channel) Suitable for switches and 2-/3-/4-wire proximity switches Hardware compatible with digital input module DI 16x24VDC HF (6ES7521-1BH00-0AB0) The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Isochronous mode Module-internal Shared Input (MSI)
Configurable submodules / submodules for Shared Device
Channel 0 and 1 optionally with counter function*
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V2.0.0 or higher
V2.0.0 or higher
V2.1.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
V12 or higher
--- / X
V12 or higher
X
V12 or higher
X
V12 or higher
---
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
V13, SP1 with HSP 0118 or higher
X (PROFINET IO only)
* Requirement for counter function: Interface module IM 155-5 firmware version V3.0 or higher or CPU S7-15XX firmware version V1.7 or higher
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
11
Product overview 2.1 Properties
Compatibility
The following table shows the compatibility of the modules and the dependencies between hardware functional status (FS) and firmware version (FW) used:
Hardware functional status FS01 FS02
Firmware version V1.0.0 to V2.1.x V1.0.0 to V2.1.x
FS03 FS04
V2.1.2 to V2.1.x V2.2.0 or higher
Note Upgrade possible between V1.0.0 to V2.1.x
Downgrade possible from V2.1.x to V2.1.2
Downgrade possible from V2.1.1 to V1.0.0
Upgrade to downgrade possible between V2.1.2 and V2.1.x
Upgrade and downgrade possible between V2.2.0 and higher
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front door
Other components
The following component must be ordered separately:
Front connectors, including potential jumpers and cable ties
For more information on accessories, refer to the system manual S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792).
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
12
Manual, 10/2018, A5E03485935-AG
Product overview 2.2 Functions
2.2
Functions
2.2.1
Count
Introduction
As of firmware version V2.1.0 of the module you have the option of using channels 0 and 1 in the "Count" mode. The other channels can be used as standard inputs (DI mode).
If do not use channels 0 and 1 in the "Count" mode, these channels can also be used as digital inputs. The two channels 0 and 1 can only be used as counter inputs together.
When counting, the edges of the digital input are acquired and evaluated accordingly e.g.:
For counting single items up to a maximum limit
For applications with repeating counting procedures
Reference
You will find the basics and additional information on the counting function in the function manual Counting, measuring and position detection (http://support.automation.siemens.com/WW/view/en/59709820).
Counting with channel 0 and channel 1
You control the counting function via the IO addresses of the module. These IO addresses are also known as the control interface (output addresses) and feedback interface (input addresses), see section Address space Counting mode (Page 27). If you set the parameters of channels 0 and 1 for counting, you then have the following options: You influence the behavior if one of the counting limits is exceeded using
Stop counting.
Continue counting.
The bit STS_DQ (bit in the feedback interface) signals that the counted value is in one of the following ranges depending on the parameter assignment:
Between a comparison value and the high counting limit.
Between a comparison value and the low counting limit.
You can set a parameter for a hardware interrupt if a comparison event occurs for DQ.
You can define counting limits and comparison values for counting from 0 ... 4294967295 (232-1).
You can set start values or have the user program set load values for counting.
The count direction is only up.
Reference
You will find examples of counting with channels 0 and 1 in the section Examples of counting (Page 31)
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
13
Wiring
3
This section contains the block diagram of the module and outlines various wiring options. You will find information on wiring the front connector, establishing a cable shield, etc in the system manual S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) in section Wiring.
Wiring and block diagram
The figure below shows you how to wire the module and the assignment of the channels to the addresses (input byte a to input byte d). You can set parameters so that channels 0 and 1 are used for counting. Channels 2 to 31 can continue to be used as digital inputs.
Backplane bus interface
xL+ Supply voltage 24 V DC xM Ground
CHx RUN ERROR PWR
Figure 3-1 Block diagram and terminal assignment
Channel or channel status LED (green/red) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
14
Wiring
Resistor circuitry of the encoders
To detect a wire break, it is necessary that enough quiescent current is flowing even when the encoder contacts are open. Connect a resistor of 25 k to 45 k with 0.25 W to the encoder contacts for this reason.
Figure 3-2 Resistor circuitry of the encoders
Tip: Using the potential jumpers
If you want to supply both load groups with the same potential (non-isolated), use the potential jumpers supplied with the front connector. This helps you to avoid having to terminate two wires to one terminal. Proceed as follows: 1. Connect the 24 V DC supply voltage to terminals 19 and 20. 2. Insert the potential jumpers between terminals 19 and 39 (xL+) and between terminals 20
and 40 (xM). 3. Use the terminals 39 and 40 to distribute the potential to the next module
Figure 3-3 Using the potential jumpers
Note Ensure that the maximum current load of 8 A per potential jumper is not exceeded.
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
15
Parameters/address space
4
4.1
Parameter
DI 32x24VDC HF parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The parameters that can be set depend on whether you use the module in standard mode or in counter mode. You will find the parameters in section Parameters DI mode (Page 16) or section Parameters of the Counting mode (Page 18). The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
For parameter reassignment in the user program, the parameters are transferred to the module with the WRREC instruction (parameter reassignment in RUN) using data records; see section Parameter assignment and structure of the parameter data records (Page 46).
4.1.1
Parameters DI mode
Parameters of the DI 32x24VDC HF in the DI mode
In the following table, you will find the parameters in the "DI mode". These parameters apply to channels 0 to 31.
Table 4- 1 Settable parameters and their defaults in the DI mode
Parameter
Range of values Default setting
Diagnostics
· No
Yes/No
No
supply voltage L+
· Wire break
Yes/No
No
Parameter reassignment in RUN
Range of effectiveness with configuration software, e.g. STEP 7
Integrated in the hardware catalog as of STEP 7, V13 SP1 or GSD file PROFINET IO
GSD file PROFIBUS DP
Yes
Channel*
Channel
group**
Yes
Channel
Channel
group**
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
16
Manual, 10/2018, A5E03485935-AG
Parameters/address space 4.1 Parameter
Parameter
Range of values Default setting
Input delay
Hardware interrupt*** · Rising edge · Falling edge · Rising and falling edge
0.05 ms, 0.1 ms, 0.4 ms, 1.6 ms, 3.2 ms, 12.8 ms, 20 ms
3.2 ms; for isochronous mode 0.05 ms (cannot be changed)
Yes/No
No
Yes/No
No
Yes/No
No
Parameter reassignment in RUN
Yes
Range of effectiveness with configuration software, e.g. STEP 7
Integrated in the GSD file hardware catalog PROFIBUS DP as of STEP 7, V13 SP1 or GSD file PROFINET IO
Channel
Channel group**
Yes
Channel
Channel
Yes
Channel
Channel
Yes
Channel
Channel
* If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault.
You can prevent this message burst by enabling diagnostics for one channel only.
** The scope can be assigned for each channel during parameter assignment in RUN.
*** For the configuration as a 4 x 8-channel module, a maximum of 16 hardware interrupts can be configured (channels 0 to 15).
4.1.2
Explanation of the parameters of the DI mode
No supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Wire break
Enabling diagnostics if the line to the encoder is interrupted.
Input delay
This parameter can be used to suppress signal disruptions. Changes to the signal are only detected if they are constantly pending longer than the set input delay time.
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
17
Parameters/address space 4.1 Parameter
Hardware interrupt
Specifies whether or not a hardware interrupt is disabled or with which of the following events a hardware interrupt is generated. Rising edge Falling edge Rising and falling edge
4.1.3
Parameters of the Counting mode
Parameters of the DI 32x24VDC HF Count in the Counting mode
If you want to use the module for counting, you need to set the module parameters as DI 32x24VDC HF Count. For channels 0 and channel 1, the following parameter settings are then possible. For channels 2 to 31, the parameter settings apply as with the DI 32x24VDC HF, , see section Parameters DI mode (Page 16).
Table 4- 2 Settable parameters and their defaults in the Counting mode
Parameter
Diagnostics · No
supply voltage L+ · Wire break Input delay
Hardware interrupt
Range of values
Default setting
Parameter reassignment in RUN
Range of effectiveness with configuration software, e.g. STEP 7
Integrated in the hardware catalog as of STEP 7, V13 SP1 with HSP 0118 or GSD file PROFINET IO
GSD file PROFIBUS DP
Yes/No
No
Yes
Channel*
---
Yes/No
No
Yes
Channel
---
0.05 ms, 0.1 ms, 3.2 ms;
Yes
Channel
---
0.4 ms, 1.6 ms, for isochro-
3.2 ms, 12.8 ms, nous mode
20 ms
0.05 ms
(cannot be
changed)
· Disable
Disable
Yes
Channel
---
· Comparison event occurred for DQ
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
18
Manual, 10/2018, A5E03485935-AG
Parameters/address space 4.1 Parameter
Parameter
Set output DQ
Edge selection High counting limit Comparison value Start value Behavior when a counting limit is exceeded
Range of values
Default setting
Parameter reassignment in RUN
· Between a comparison value and the high counting limit
Between a Yes comparison value and the high counting limit
· Between a comparison value and the low counting limit
· On rising edge On rising
Yes
· On falling edge edge
· On rising and falling edge
0 ... 4294967295 4294967295 Yes
0 ... 4294967295** 1
Yes
0 ... 4294967295** 0
Yes
· Stop counting Stop counting Yes
· Continue counting
Range of effectiveness with configuration software, e.g. STEP 7
Integrated in the GSD file hardware catalog PROFIBUS DP as of STEP 7, V13 SP1 with HSP 0118 or GSD file PROFINET IO
Channel
---
Channel
---
Channel
---
Channel
---
Channel
---
Channel
---
* If you enable diagnostics for multiple channels, you will receive an alarm storm on failure of the supply voltage because each enabled channel will detect this fault. You can prevent this message burst by enabling diagnostics for one channel only.
** Comparison value or start value must be less than or equal to the value for the high counting limit.
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
19
Parameters/address space 4.1 Parameter
4.1.4
Explanation of the parameters of the Counting mode
Missing supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Wire break
Enabling diagnostics if the line to the encoder is interrupted.
Input delay
This parameter can be used to suppress signal disruptions. Changes to the signal are only detected if they are constantly pending longer than the set input delay time.
Hardware interrupt
Specifies whether or not a hardware interrupt is generated by the event "Comparison event occurred for DQ" (rising edge at STS_DQ).
Set output DQ
With this parameter, you specify the behavior of the STS_DQ bit in the feedback interface. You can assign this bit in the user program, for example, with a hardware output, see Address space Counting mode (Page 27).
Behavior
Meaning
Between a comparison value and the high counting limit
STS_DQ bit is set if the following condition is met: Comparison value < = counted value < = high counting limit
Between a
STS_DQ bit is set if the following condition is met:
comparison value and the low counting Low counting limit < = counted value < = comparison value limit
Edge selection
With this parameter you specify which edge is used to count. You can select the following options: On rising edge On falling edge On rising and falling edge
High counting limit
With this parameter you limit the counting range. You can enter a value up to 4294967295 (232 - 1).
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
20
Manual, 10/2018, A5E03485935-AG
Parameters/address space 4.1 Parameter
Comparison value
With this parameter you specify the count value at which the digital output DQ (STS_DQ bit of the feedback interface) switches due to the selected comparison event.
Start value
With this parameter, you specify the value at which counting begins and is continued if defined events occur. The following condition must be met:
Low counting limit < = start value < = high counting limit.
Behavior when a counting limit is exceeded
With this parameter, you specify the behavior if a counting limit is exceeded.
Behavior Stop counting
Continue counting
Meaning
After a counting limit is exceeded, the counting procedure is aborted and the STS_GATE bit (internal gate) is reset.
To restart the counting, the SW_GATE bit must be reset via the control interface and set again.
After a counting limit is exceeded, the counted value is set to the other counting limit and counting is continued.
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
21
Parameters/address space 4.2 Address space
4.2
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
The letters "a to d" are printed onto the module. "EB a" for example, stands for module start address input byte a.
Configuration options of DI 32x24VDC HF
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 3 Configuration options
Configuration
Short designation/ module name in the
GSD file
1 x 32-channel without value status 1 x 32-channel with value status 4 x 8-channel without value status
DI 32x24VDC HF DI 32x24VDC HF QI DI 32x24VDC HF S
4 x 8-channel with value status
DI 32x24VDC HF S QI
1 x 32-channel with value status for
DI 32x24VDC HF MSI
module-internal Shared Input with up to 4
submodules
1 x 32 channel with value status (channel DI 32x24VDC HF Count 0 and channel 1 for counting, channels 2 to 31 as digital inputs).
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5
SP3 or higher
V12 or higher
X
V12 or higher
X
V13 update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13, SP1 with HSP 0118 or higher
X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names: DI 32x24VDC HF QI DI 32x24VDC HF S QI DI 32x24VDC HF MSI DI 32x24VDC HF Count An additional bit is assigned to each channel for the value status. The value status bit indicates if the read in digital value is valid. (0 = value is incorrect).
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
22
Manual, 10/2018, A5E03485935-AG
Parameters/address space 4.2 Address space
4.2.1
Address space DI mode
Address space for configuration as 32-channel DI 32x24VDC HF QI
The following figure shows the assignment of the address space for the configuration as a 32-channel module with value status. You can freely assign the start address for the module. The addresses of the channels are derived from the start address.
Figure 4-1 Address space for configuration as 32-channel DI 32x24VDC HF QI
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
23
Parameters/address space 4.2 Address space
Address space for configuration as 4 x 8-channel DI 32x24VDC HF S QI
For the configuration as a 4 x 8-channel module, the channels of the module are divided into four submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of I/O controllers depends on the interface module being used. Observe the information in the manual for the particular interface module. Contrary to the 1 x 32-channel module configuration, each of the four submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 4 x 8-channel DI 32x24VDC HF S QI
Address space for configuration as 1 x 32-channel DI 32x24VDC HF MSI
The channels 0 to 31 of the module are copied in up to four submodules with configuration 1 x 32-channel module (Module-internal shared input, MSI). Channels 0 to 31 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels. The number of I/O controllers depends on the interface module being used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI)
The meaning of the value status depends on the submodule on which it occurs.
For the first submodule (=basic submodule), the value status 0 indicates that the value is incorrect.
For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
24
Manual, 10/2018, A5E03485935-AG
Parameters/address space 4.2 Address space
The following figure shows the assignment of the address space with submodules 1 and 2 and the value status.
Figure 4-3 Address space for configuration as 1 x 32-channel DI 32x24VDC HF MSI with value status
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
25
Parameters/address space 4.2 Address space
The following figure shows the assignment of the address space with submodules 3 and 4 and the value status.
Reference
Figure 4-4 Address space for configuration as 1 x 32-channel DI 32x24VDC HF MSI with value status
You can find information on the module-internal shared input/shared output (MSI/MSO) function in the section Module-internal shared input/shared output (MSI/MSO) of the function manual PROFINET with STEP 7 V15 (http://support.automation.siemens.com/WW/view/en/49948856).
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
26
Manual, 10/2018, A5E03485935-AG
Parameters/address space 4.2 Address space
4.2.2
Address space Counting mode
Address space for configuration as 1 x 32-channel DI 32x24VDC Count
The address space of channel 0 and channel 1 used for counting consists of the control and feedback interface. The Count function is controlled directly via the two interfaces. With suitable parameter assignment, a hardware interrupt is triggered.
If you use the module in the "Counting mode" (channels 0 and 1), the module occupies the following address areas:
16 bytes in the process image output (control interface).
24 bytes in the process image input (feedback interface).
Control interface
The following figure shows the address assignment of the module in the process image output. You use the control interface for example to start the counter or to set the counter value. With the "SW gate" control bit you open and close the software gate of the corresponding channel.
Figure 4-5 Assignment of the address space of the control interface of the DI 32x24VDC Count (bytes 0 to 7)
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
27
Parameters/address space 4.2 Address space
Figure 4-6 Assignment of the address space of the control interface of the DI 32x24VDC Count (bytes 8 to 15)
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
28
Manual, 10/2018, A5E03485935-AG
Parameters/address space 4.2 Address space
Feedback interface
The following figure shows the address assignment of the module in the process image input. The feedback interface for the counters (channels 0 and 1) begins at input byte x+8. Via the feedback interface, the user program receives current counted values and status information from the module.
Figure 4-7 Assignment of the address space of the feedback interface of the DI 32x24VDC Count (bytes 0 to 15)
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
29
Parameters/address space 4.2 Address space
Figure 4-8 Assignment of the address space of the feedback interface of the DI 32x24VDC Count (bytes 16 to 23)
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
30
Manual, 10/2018, A5E03485935-AG
Parameters/address space 4.2 Address space
4.2.3
Examples of counting
In this section, you will find examples of the behavior of the counter and how you can specify this behavior. You specify the properties of the counter in the parameter assignment.
Behavior when a counting limit is exceeded - Stop counting
The following section describes the effects of the parameter "Behavior when a counting limit is exceeded = Stop counting". To control the counter, the bits of the control byte of the control interface are used, see section Address space Counting mode (Page 27)
Counting begins at the current counted value (the SW_GATE is set in the control byte). Bit sequence in the control byte of the control interface 0000 1000.
After the high counting limit is violated, counting is aborted (counting stops) and the counted value jumps to the low counting limit = 0. The STS_GATE bit is reset.
To restart the counting, the SW_GATE bit must be reset via the control interface and set again.
Whether or not counting is started again with the current counter value or with the start value depends on the command byte in the control interface. Bit sequence in control byte of the control interface:
bit 0 to 2 = "000" Start with current counter value
bit 0 to 2 = "010" Start with start value
If the SW_GATE bit is reset in the control byte of the control interface before reaching the high counting limit, counting is stopped.
The following figure shows an example of the principle of stopping counting when a counting limit is exceeded.
Figure 4-9 Principle: Stop counting
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
31
Parameters/address space 4.2 Address space Behavior when a counting limit is exceeded - Continue counting
The following section describes the effects of the parameter "Behavior when a counting limit is exceeded = Continue counting". To control the counter, the bits of the control byte of the control interface are used, see section Address space Counting mode (Page 27), subsection Control interface. Counting begins at the current counted value (the SW-GATE is set in the control byte). Bit sequence in the control byte of the control interface 0000 1000. After the high counting limit is exceeded, the counted value jumps to the low counting limit = 0 and counting is continued. If the SW_GATE bit is reset in the control byte of the control interface before reaching the high counting limit, counting is stopped. The following figure shows an example of the principle of continuing counting when a counting limit is exceeded.
Figure 4-10 Principle: Continue counting
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
32
Manual, 10/2018, A5E03485935-AG
Parameters/address space 4.2 Address space
Set output DQ - behavior of the STS_DQ bit
The following section shows the behavior of the STS_DQ bit with the parameter assignment "Set output DQ = between comparison value and high counting limit". The STS_DQ bit is set to 1 when the comparison value < = counted value <= high counting limit is reached. As an option, a hardware interrupt can be enabled in the parameter assignment. This is generated with the parameter rising edge of the STS_DQ bit. The following figure shows an example of the behavior of the STS_DQ bit between the comparison value and high counting limit.
Figure 4-11 Behavior of the STS_DQ bit and hardware interrupt
The following section shows the behavior of the STS_DQ bit with the parameter assignment "Set output DQ = between low counting limit and comparison value". The STS_DQ bit is set to 1 when the low counting limit < = counted value < = comparison value is reached. As an option, a hardware interrupt can be enabled in the parameter assignment. This is generated with the parameter rising edge of the STS_DQ bit.
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
33
Parameters/address space 4.2 Address space
The following figure shows an example of the behavior of the STS_DQ bit between the low counting limit and comparison value.
Figure 4-12 Behavior of the STS_DQ bit and hardware interrupt
Counting limits
The counting limits define the range of values of the counted value used. The counting limits can be set in the parameters and can be changed with the user program during runtime.
Configurable high counting limit: 4294967295 (232 -1).
Low counting limit (not settable): 0
You can continue or terminate (automatic gate stop) counting if a counting limit is exceeded, see the parameter "Behavior when a counting limit is exceeded".
Start value/load value
The start value is specified in the parameter assignment with STEP 7 (TIA Portal). The load value can be changed by the user program. Both values must be between the low counting limit and high counting limit.
Comparison values
You specify a comparison value per channel that can control the feedback bit STS_DQ regardless of the user program. When the current counted value corresponds to the comparison condition set in the parameters, the feedback bit STS_DQ is set. You can use the feedback bit STS_DQ to control a digital output of a digital output module.
The comparison values can be set in the parameters and can be changed during runtime via the user program with parameter data record 0/1.
Gate control
The opening and closing of the software gate (SW-GATE) defines the time window in which the count signals are acquired. The software gate is controlled by the user program.
Reference
You can find additional information on the counting functionality in the function manual S71500, ET 200MP, ET 200SP counting, measuring and position detection (http://support.automation.siemens.com/WW/view/en/59709820).
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
34
Manual, 10/2018, A5E03485935-AG
Interrupts/diagnostics alarms
5
5.1
Status and error displays
LED displays
The following figure shows you the LED displays (status and error displays) of DI 32x24VDC HF.
Figure 5-1 LED displays of the module DI 32x24VDC HF
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
35
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic reports can be found in chapter Diagnostics alarms (Page 39).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Flashes
Off
On
Off
On
Flashes
Flashes Flashes
Meaning
Remedy
Voltage missing or too low at backplane bus
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are inserted.
The module starts and flashes until --the valid parameter assignment is set.
Module is configured
Indicates module errors (at least one Evaluate the diagnostics data and eliminate the error error at one channel, e.g., wire break). (e.g., wire break).
Hardware defective
Replace the module.
PWR1 and PWR2 LED
Table 5- 2 PWR1 and PWR2 status indication
LED PWR1 / PWR2 Off On
Meaning
Remedy
Supply voltage L+ too low or missing Check supply voltage L+.
Supply voltage L+ is present and OK ---
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
36
Manual, 10/2018, A5E03485935-AG
Interrupts/diagnostics alarms 5.2 Interrupts
CHx LED
Table 5- 3 CHx status display
LED CHx Off On On
Meaning
0 = Status of the input signal
---
Remedy
1 = Status of the input signal
---
Diagnostics: Wire break Supply voltage L+ too low or missing
Check the wiring. When using simple switches, deactivate diagnostics or connect a resistor (25 k ... 45 k) to the encoder contacts.
Check supply voltage L+
5.2
Interrupts
Digital input module DI 32x24VDC HF supports diagnostic and hardware interrupts.
You can find detailed information on the error event in the error organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostics interrupt
The module generates a diagnostic interrupt at the following events: Missing supply voltage L+ Wire break Parameter assignment error
Hardware interrupt
The module generates a hardware interrupt at the following events: Rising edge Falling edge Rising and falling edge Comparison event occurred for DQ (only in "Counting mode")
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
37
Interrupts/diagnostics alarms 5.2 Interrupts
The module channel that triggered the hardware interrupt is entered in the start information of the organization block. The figure below shows the assignment to the bits of the local data double word 8.
Figure 5-2 Start information of the organization block
Structure of the additional interrupt information
Table 5- 4 Structure of USI = W#16#0001
Data block name
Contents
USI
W#16#0001
(User Structure Identifier)
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#1F
It follows the error event that triggered the hardware interrupt.
Event
B#16#01
B#16#02
B#16#05
Comment
Additional interrupt info for hardware interrupts of the I/O module
Bytes 2
Number of the event-triggering channel (chan- 1 nel 0 to channel 31 of the module)
Rising edge
1
Falling edge
Comparison event occurred for DQ (only in "Counting mode")
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
38
Manual, 10/2018, A5E03485935-AG
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
Diagnostics alarms
A diagnostics alarm is generated and the ERROR-LED flashes for each diagnostics event on the module. The diagnostics alarms can, for example, be read out in the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 5 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Wire break*
Error code 6H
Parameter assign- 10H ment error
Load voltage missing 11H
Hardware interrupt 16H lost
Meaning Impedance of encoder circuit too high
Wire break between the module and sensor Channel not connected (open)
Corrective measures Use a different encoder type or modify the wiring, for example, using cables with larger cross-section Connect the cable
· Disable diagnostics
· Connect a resistor of 25 k to 45 k to the encoder contacts
· The module cannot evaluate parame- Correct the parameter assignment ters for the channel
· Incorrect parameter assignment
Supply voltage L+ of the module is missing
The module cannot trigger an interrupt because the previous interrupt was not acknowledged; possibly a configuration error
Connect supply voltage L+ to module/channel
· Change interrupt processing in the CPU and, if necessary, edit the module parameters.
· The error persists until the module is assigned new parameters
* If the supply voltage fails in case of a pending wire break diagnostics, the value status momentarily indicates an incorrect value.
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
39
Technical specifications
6
Technical specifications of the DI 32x24VDC HF
The following table shows the technical specifications as of 10/2018. You will find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7521-1BL00-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version · FW update possible
Product function · I&M data
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Operating mode · DI
· Counter
· Oversampling
· MSI
Supply voltage Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Input current Current consumption, max.
Power Power available from the backplane bus
6ES7521-1BL00-0AB0
DI 32x24VDC HF FS01 V2.2.0 Yes
Yes; I&M0 to I&M3
V13 SP1 / -
V5.5 SP3 / -
V1.0 / V5.1
V2.3 / -
Yes Yes No Yes
24 V 20.4 V 28.8 V Yes
40 mA; 20 mA per group with 24 V DC supply
1.1 W
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
40
Manual, 10/2018, A5E03485935-AG
Technical specifications
Article number Power loss
Power loss, typ. Digital inputs
Number of digital inputs Digital inputs, parameterizable Source/sink input Input characteristic curve in accordance with IEC 61131, type 3 Digital input functions, parameterizable · Gate start/stop
· Freely usable digital input
· Counter Number, max. Counting frequency, max. Counting width Counting direction up/down
Input voltage · Type of input voltage
· Rated value (DC)
· for signal "0"
· for signal "1" Input current
· for signal "1", typ. Input delay (for rated value of input voltage) for standard inputs
parameterizable at "0" to "1", min. at "0" to "1", max. at "1" to "0", min. at "1" to "0", max. for interrupt inputs parameterizable for technological functions parameterizable Cable length · shielded, max.
· unshielded, max.
6ES7521-1BL00-0AB0
4.2 W
32 Yes P-reading Yes
Yes Yes
2 3 kHz; FS04 and FW V2.2.0 or higher 32 bit Up
DC 24 V -30 to +5V +11 to +30V
2.5 mA
Yes; 0.05 / 0.1 / 0.4 / 1.6 / 3.2 / 12.8 / 20 ms 0.05 ms 20 ms 0.05 ms 20 ms
Yes
Yes
1 000 m 600 m
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
41
Technical specifications
Article number Encoder Connectable encoders
· 2-wire sensor
permissible quiescent current (2-wire sensor), max.
Isochronous mode Isochronous operation (application synchronized up to terminal) Filtering and processing time (TCI), min. Bus cycle time (TDP), min.
Interrupts/diagnostics/status information Diagnostics function
Alarms · Diagnostic alarm
· Hardware interrupt Diagnostic messages
· Monitoring the supply voltage
· Wire-break
· Short-circuit Diagnostics indication LED
· RUN LED
· ERROR LED
· Monitoring of the supply voltage (PWRLED)
· Channel status display
· for channel diagnostics
· for module diagnostics Potential separation Potential separation channels
· between the channels
· between the channels, in groups of
· between the channels and backplane bus
· between the channels and the power supply of the electronics
Isolation Isolation tested with
6ES7521-1BL00-0AB0
Yes 1.5 mA
Yes 80 µs; At 50 s filter time 250 µs Yes Yes Yes
Yes Yes; to I < 350 µA No
Yes; Green LED Yes; Red LED Yes; Green LED
Yes; Green LED Yes; Red LED Yes; Red LED
Yes 16 Yes No
707 V DC (type test)
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
42
Manual, 10/2018, A5E03485935-AG
Article number Ambient conditions Ambient temperature during operation
· horizontal installation, min.
· horizontal installation, max.
· vertical installation, min.
· vertical installation, max.
Decentralized operation Prioritized startup
Dimensions Width Height Depth
Weights Weight, approx.
6ES7521-1BL00-0AB0
0 °C 60 °C 0 °C 40 °C
Yes
35 mm 147 mm 129 mm
260 g
Tolerances of the programmable input delay
Table 6- 1 Tolerances of the programmable input delay
Input delay 0.05 ms 0.1 ms 0.4 ms 1.6 ms 3.2 ms (preset) 12.8 ms 20 ms
Tolerance range 43 s to 57 s 86 s to 114 s 344 s to 456 s 1.5 ms to 1.9 ms 3 ms to 4 ms 12 ms to 15 ms 19 ms to 23 ms
Technical specifications
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
43
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DI 32x24VDC HF module
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
44
Manual, 10/2018, A5E03485935-AG
Dimensional drawing
Figure A-2 Dimensional drawing of the DI 32x24VDC HF module, side view with open front cover
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
45
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
DI mode: no dependencies. You can assign the individual parameters in any combination.
Counting mode: The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Comparison value Start value
Dependent parameters 0 ... high counting limit 0 ... high counting limit
Parameter assignment in the user program
You have the option to reconfigure the module in RUN (e.g. the input delay values of selected channels can be edited without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 0 to 31. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
46
Parameter data records B.2 Structure of the parameter data records DI mode
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You get the diagnostics data records 0 and 1 for the read back parameter data records 0 and 1. You can find more information in the Interrupts section of the PROFIBUS DP interface module device manual on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
B.2
Structure of the parameter data records DI mode
Assignment of data record and channel
For the configuration with 1 x 32 channels, the parameters are located in data records 0 to 31 and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 ... Data record 30 for channel 30 Data record 31 for channel 31 For the configuration as a 4 x 8-channel module, the module has 4 submodules with eight channels each. The parameters for the channels are located in data records 0 to 7 and are assigned as follows: Data records 0 to 7 for channels 0 to 7 (submodule 1) Data records 0 to 7 for channels 8 to 15 (submodule 2) Data records 0 to 7 for channels 16 to 23 (submodule 3) Data records 0 to 7 for channels 24 to 31 (submodule 4) Address the respective submodule for data record transfer.
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
47
Parameter data records B.2 Structure of the parameter data records DI mode
Structure of a data record in the DI mode
The example in the following figure shows the structure of data record 0 for channel 0. The structure of channels 1 to 31 is identical. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Bytes 0 to 3
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
48
Manual, 10/2018, A5E03485935-AG
Parameter data records B.3 Structure of the parameter data records Counting mode
B.3
Structure of the parameter data records Counting mode
Assignment of data record and channel
For the configuration with 1 x 32 channels, the parameters are located in data records 0 to 31 and are assigned as follows: Data record 0 for channel 0 with counting function Data record 1 for channel 1 with counting function Data record 2 for channel 2 (structure as in DI mode) ... Data record 30 for channel 30 (structure as in DI mode) Data record 31 for channel 31 (structure as in DI mode)
Structure of data record 0 of the Counting mode
The example in the figure below shows the structure of data record 0 for channel 0. The structure of channel 1 is identical, the values are located in data record 1. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
49
Parameter data records B.3 Structure of the parameter data records Counting mode
Figure B-2 Structure of data record 0: Bytes 0 to 4
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
50
Manual, 10/2018, A5E03485935-AG
Parameter data records B.3 Structure of the parameter data records Counting mode
Figure B-3 Structure of data record 0: Bytes 5 to 17
Keep in mind that the counter is stopped and reset to the start value when you change count parameters. Changing the parameters "Diagnostics" and "Hardware interrupts" does not have an effect on the counter.
Structure of data records 2 to 31
The structure of data records 2 to 31 for channels 2 to 31 is identical to the structure in the DI mode, see section Structure of the parameter data records DI mode (Page 47), figure Structure of data record 0: Bytes 0 to 3.
DI 32x24VDC HF digital input module (6ES7521-1BL00-0AB0)
Manual, 10/2018, A5E03485935-AG
51
SIMATIC
S7-1500/ET 200MP Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Ad_d_re_ss_s_pa_c_e __________4_ _Di_ag_n_os_tic_s_al_ar_m_s ________5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_
12/2016
A5E32363114-AD
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E32363114-AD 12/2016 Subject to change
Copyright © Siemens AG 2014 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change: Schematic circuit diagram has been updated.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system.
Please also observe notes marked as follows:
Note
A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
4
Manual, 12/2016, A5E32363114-AD
Preface
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
3.1
Wiring and block diagram ...................................................................................................... 13
4 Address space ...................................................................................................................................... 14
4.1
Address space ....................................................................................................................... 14
5 Diagnostics alarms................................................................................................................................ 18
5.1
Status and error displays ....................................................................................................... 18
6 Technical specifications ........................................................................................................................ 20
A Dimensional drawing............................................................................................................................. 23
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
6
Manual, 12/2016, A5E32363114-AD
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
8
Manual, 12/2016, A5E32363114-AD
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
10
Manual, 12/2016, A5E32363114-AD
Product overview
2.1
Properties
Part number:
6ES7521-1BH10-0AA0
View of the module
2
Properties
Figure 2-1 View of the DI 16x24VDC BA module
The module has the following technical properties: 16 digital inputs; electrically isolated in groups of 16 Rated input voltage 24 VDC Suitable for switches and 2-/3-/4-wire proximity switches
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
11
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware version of the module
Firmware update Identification data I&M0 to I&M3 Module internal shared input (MSI)
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
Configurable submodules / submodules for Shared Device
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher,
or STEP 7 V5.5 SP3 or higher
V13 or higher
X
V13 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts:
Front connector (push-in terminals) including cable tie
Labeling strips
U connector
Universal front door
For more information on accessories, refer to the system manual S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792).
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
12
Manual, 12/2016, A5E32363114-AD
Wiring
3
3.1
Wiring and block diagram
This section contains the block diagram of the module and outlines various wiring options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Wiring and block diagram
The figure below shows you how to wire the module and the assignment of the channels to the addresses (input byte a to input byte b).
Backplane bus interface
M Ground
CHx RUN ERROR
Figure 3-1 Block diagram and terminal assignment
Channel or channel status LED (green) Status display LED (green) Error display LED (red)
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
13
Address space
4
4.1
Address space
The module can be configured in various ways in STEP 7. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
Configuration options of DI 16x24VDC BA
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 1 Configuration options
Configuration
Short designation/ module name in the
GSD file
1 x 16-channel without value status 2 x 8-channel without value status
DI 16x24VDC BA DI 16x24VDC BA S
1 x 16-channel with value status for DI 16x24VDC BA MSI module-internal Shared Input with up to 4 submodules
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher or
STEP 7 V5.5 SP3 or higher
V13 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
Address space for configuration as 1 x 16-channel DI 16x24VDC BA
The figure below shows the address space assignment for configuration as a 1 x 16-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address.
The letters "a" through "b" are printed on the module. "IB a", for example, stands for module start address input byte a.
Figure 4-1 Address space for configuration as 1 x 16-channel DI 16x24VDC BA
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
14
Address space 4.1 Address space
Address space for configuration as 2 x 8-channel DI 16x24VDC BA S
For the configuration as a 2 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Contrary to the 1 x 16-channel module configuration, each of the two submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 2 x 8-channel DI 16x24VDC BA S
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
15
Address space 4.1 Address space
Address space for configuration as 1 x 16-channel DI 16x24VDC BA MSI
The channels 0 to 15 of the module are copied in up to four submodules with configuration 1 x 16-channel module (Module-internal shared input, MSI). Channels 0 to 15 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status is not relevant. For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready). The figure below shows the assignment of the address space with submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 16-channel DI 16x24VDC BA MSI with value status
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
16
Manual, 12/2016, A5E32363114-AD
Address space 4.1 Address space
The figure below shows the assignment of the address space with submodules 3 and 4.
Reference
Figure 4-4 Address space for configuration as 1 x 16-channel DI 16x24VDC BA MSI with value status
You can find information on the module-internal shared input/shared output (MSI/MSO) function in the section Module-internal shared input/shared output (MSI/MSO) of the function manual PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856).
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
17
Diagnostics alarms
5
The module has no selectable diagnostics. Diagnostics alarms, for example, cannot be output with STEP 7 (TIA Portal).
5.1
Status and error displays
LED displays
The figure below shows you the LED displays (status and error displays) of the DI 16x24VDC BA.
Figure 5-1 LED displays of the module DI 16x24VDC BA
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
18
Diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The tables below explain the meaning of the status and error displays.
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Meaning
Voltage missing or too low at backplane bus.
Flashes On
Flashes
Off Off Flashes
Module is starting up. Module is ready. Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are inserted. ---
Replace the module.
LED CHx
Table 5- 2 CHx status display
LED CHx Off On
Meaning
0 = Status of the input signal.
---
1 = Status of the input signal.
---
Remedy
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
19
Technical specifications
6
Technical specifications of the DI 16x24VDC BA
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7521-1BH10-0AA0
DI 16x24VDC BA FS01 V1.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V13 / V13
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
DI
Yes
Counters
No
MSI
Yes
Supply voltage
Rated value (DC)
24 V
Valid range, low limit (DC)
20.4 V
Valid range, high limit (DC)
28.8 V
Power
Power consumption from the backplane bus
1.05 W
Power loss
Power loss, typ.
1.8 W
Digital inputs
Number of inputs
16
Configurable digital inputs
No
Sinking/sourcing input
Sinking input
Input characteristic curve acc. to IEC 61131, type Yes 3
Input voltage
Type of input voltage
DC
Rated value (DC)
24 V
for signal "0"
-30 to +5 V
for signal "1"
+11 to +30 V
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
20
Technical specifications
Input current for signal "1", typ. Input delay (for rated value of input voltage) For standard inputs
· Configurable
2.7 mA
6ES7521-1BH10-0AA0
No
· with "0" to "1", min.
3 ms
· with "0" to "1", max.
4 ms
· with "1" to "0", min.
3 ms
· with "1" to "0", max.
4 ms
For interrupt inputs
· Configurable
No
for technological functions
· Configurable
No
Cable length shielded, max. unshielded, max. Encoders Connectable encoders 2-wire sensor
· Permitted quiescent current (2-wire sensor), max.
1000 m 600 m
Yes 1.5 mA
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
No
Interrupts
Diagnostics interrupt
No
Hardware interrupt
No
Diagnostics alarms
Monitoring of supply voltage
No
Wire break
No
Short-circuit
No
Diagnostics indicator LED
RUN LED
Yes; green LED
ERROR LED
Yes; red LED
Monitoring of supply voltage (PWR LED)
No
Channel status display
Yes; green LED
For channel diagnostics
No
For module diagnostics
No
Electrical isolation
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
21
Technical specifications
Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Isolation Isolation tested with Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed mode Prioritized startup Dimensions Width Height Depth Weights Weight, approx. Miscellaneous Note:
6ES7521-1BH10-0AA0
No 16 Yes
707 V DC (type test)
0 °C 60 0 °C 40 °C
Yes
25 mm 147 mm 129 mm
230 g
Delivery includes 40-pin push-in front connector
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
22
Manual, 12/2016, A5E32363114-AD
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DI 16x24VDC BA module
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
Manual, 12/2016, A5E32363114-AD
23
Index
Figure A-2 Dimensional drawing of the DI 16x24VDC BA module, side view with open front cover
Digital input module DI 16x24VDC BA (6ES7521-1BH10-0AA0)
24
Manual, 12/2016, A5E32363114-AD
SIMATIC
S7-1500/ET 200MP DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_
08/2018
A5E03485952-AG
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03485952-AG 07/2018 Subject to change
Copyright © Siemens AG 2013 - 2018. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following changes: Clock synchronization possible in counting mode. In the technical specifications the
counting frequency increased from 1 kHz to 3 kHz. New licensing conditions and copyright information of the Open Source Software New technical specifications
Conventions
CPU: The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system.
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
DI mode: DI 16x24VDC HF as digital input module with 16 digital inputs (channels 0 to 15).
Counting mode: DI 16x24VDC HF as digital input module with 2 counters (channels 0 and 1) and 14 digital inputs (channels 2 to 15).
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
4
Manual, 08/2018, A5E03485952-AG
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 10
2.1
Properties ................................................................................................................................ 10
2.2 2.2.1
Functions ................................................................................................................................13 Count....................................................................................................................................... 13
3 Wiring ................................................................................................................................................... 14
4 Parameters/address space ................................................................................................................... 16
4.1 4.1.1 4.1.2 4.1.3 4.1.4 4.1.5
Parameter ...............................................................................................................................16 Parameters .............................................................................................................................16 Parameters DI mode...............................................................................................................17 Explanation of the parameters of the DI mode .......................................................................18 Parameters of the Counting mode..........................................................................................19 Explanation of the parameters of the Counting mode ............................................................20
4.2 4.2.1 4.2.2 4.2.3
Address space ........................................................................................................................22 Address space DI mode..........................................................................................................23 Address space Counting mode...............................................................................................25 Examples of counting..............................................................................................................30
5 Interrupts/diagnostics alarms................................................................................................................. 34
5.1
Status and error displays ........................................................................................................34
5.2
Interrupts .................................................................................................................................36
5.3
Diagnostics alarms..................................................................................................................38
6 Technical specifications ........................................................................................................................ 39
A Dimensional drawing............................................................................................................................. 43
B Parameter data records......................................................................................................................... 45
B.1
Parameter assignment and structure of the parameter data records.....................................45
B.2
Structure of the parameter data records DI mode ..................................................................47
B.3
Structure of the parameter data records Counting mode .......................................................49
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
6
Manual, 08/2018, A5E03485952-AG
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
7
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
8
Manual, 08/2018, A5E03485952-AG
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
9
Product overview
2.1
Properties
Article number:
6ES7521-1BH00-0AB0
View of the module
2
Properties
10
Figure 2-1 View of the DI 16x24VDC HF module
The module has the following technical properties: 16 digital inputs; electrically isolated in groups of 16
of which channel 0 and 1 optionally with counter function Rated input voltage 24 V DC Configurable input delay: 0.05 ms to 20 ms Configurable diagnostics (per channel) Configurable hardware interrupt (per channel) Suitable for switches and 2-/3-/4-wire proximity switches
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0) Manual, 08/2018, A5E03485952-AG
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Isochronous mode Module-internal Shared Input (MSI)
Configurable submodules / submodules for Shared Device
Channel 0 and 1 optionally with counter function*
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V2.0.0 or higher
V2.0.0 or higher
V2.1.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
V12 or higher
--- / X
V12 or higher
X
V12 or higher
X
V12 or higher
---
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
V13, SP1 with HSP 0118 or higher
X (PROFINET IO only)
* Requirement for counter function: Interface module IM 155-5 firmware version V3.0 or higher or CPU S7-15XX firmware version V1.7 or higher
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Compatibility
The following table shows the compatibility of the modules and the dependencies between hardware functional status (FS) and firmware version (FW) used:
Hardware functional status FS01 FS02
Firmware version V1.0.0 to V2.1.x V1.0.0 to V2.1.x
FS03 FS04
V2.1.2 to V2.1.x V2.2.0 or higher
Note Upgrade possible between V1.0.0 to V2.1.x
Downgrade possible from V2.1.x to V2.1.2
Downgrade possible from V2.1.1 to V1.0.0
Upgrade to downgrade possible between V2.1.2 and V2.1.x
Upgrade and downgrade possible between V2.2.0 and higher
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
11
Product overview 2.1 Properties
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front door
Other components
The following component must be ordered separately:
Front connectors, including potential jumpers and cable ties
For more information on accessories, refer to the system manual S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
12
Manual, 08/2018, A5E03485952-AG
2.2
Functions
Product overview 2.2 Functions
2.2.1
Count
Introduction
As of firmware version V2.1.0 of the module you have the option of using channels 0 and 1 in the "Count" mode. The other channels can be used as standard inputs (DI mode). If do not use channels 0 and 1 in the "Count" mode, these channels can also be used as digital inputs. The two channels 0 and 1 can only be used as counter inputs together. When counting, the edges of the digital input are acquired and evaluated accordingly e.g.: For counting single items up to a maximum limit
For applications with repeating counting procedures
Reference
You will find the basics and additional information on the counting function in the function manual Counting, measuring and position detection (http://support.automation.siemens.com/WW/view/en/59709820).
Counting with channel 0 and channel 1
You control the counting function via the IO addresses of the module. These IO addresses are also known as the control interface (output addresses) and feedback interface (input addresses), see section AUTOHOTSPOT.
If you set the parameters of channels 0 and 1 for counting, you then have the following options: You influence the behavior if one of the counting limits is exceeded using
Stop counting.
Continue counting.
The bit STS_DQ (bit in the feedback interface) signals that the counted value is in one of the following ranges depending on the parameter assignment:
Between a comparison value and the high counting limit.
Between a comparison value and the low counting limit.
You can set a parameter for a hardware interrupt if a comparison event occurs for DQ.
You can define counting limits and comparison values for counting from 0 ... 4294967295 (232-1).
You can set start values or have the user program set load values for counting.
The count direction is only up.
Reference
You will find examples of counting with channels 0 and 1 in the section Examples of counting (Page 30)
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
13
Wiring
3
This section contains the block diagram of the module and outlines various wiring options. You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Wiring and block diagram
The figure below shows you how to wire the module and the assignment of the channels to the addresses (input byte a to input byte b). You can set parameters so that channels 0 and 1 are used for counting. Channels 2 to 15 can continue to be used as digital inputs.
Backplane bus interface
L+ Supply voltage 24 V DC M Ground
CHx RUN ERROR PWR
Channel or channel status LED (green/red) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
Figure 3-1 Block diagram and terminal assignment
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
14
Manual, 08/2018, A5E03485952-AG
Wiring
Resistor circuitry of the encoders
To detect a wire break, it is necessary that enough quiescent current is flowing even when the encoder contacts are open. Connect a resistor of 25 k to 45 k with 0.25 W to the encoder contacts for this reason.
Figure 3-2 Resistor circuitry of the encoders
Tip: Using the potential jumpers
Use the potential jumpers supplied with the front connector if you want to distribute the 24V DC supply voltage to a neighboring module. This helps you to avoid having to terminate two wires to one terminal. Proceed as follows: 1. Connect the 24 V DC supply voltage to terminals 19 and 20. 2. Insert the potential jumpers between terminals 19 and 39 (L+) and between terminals 20
and 40 (M). 3. Use the terminals 39 and 40 to distribute the potential to the next module
Figure 3-3 Using the potential jumpers
Note Ensure that the maximum current load of 8 A per potential jumper is not exceeded.
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
15
Parameters/address space
4
4.1
Parameter
4.1.1
Parameters
DI 16x24VDC HF parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The parameters that can be set depend on whether you use the module in standard mode or in counter mode. You will find the parameters in section Parameters DI mode (Page 17) or section Parameters of the Counting mode (Page 19). The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
For parameter assignment in the user program, the parameters are transferred to the module using the WRREC instruction (parameter reassignment in RUN) and data records; see chapter Parameter assignment and structure of the parameter data records (Page 45).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
16
Parameters/address space 4.1 Parameter
4.1.2
Parameters DI mode
Parameters of the DI 16x24VDC HF in the DI mode
In the table below you will find the parameters in the DI mode. These parameters apply to channels 0 to 15.
Table 4- 1 Settable parameters and their defaults in the DI mode
Parameter
Range of values
Diagnostics · No
supply voltage L+ · Wire break
Input delay
Yes/No
Yes/No
0.05 ms, 0.1 ms, 0.4 ms, 1.6 ms, 3.2 ms, 12.8 ms, 20 ms
Hardware interrupt*** · Rising edge
Yes/No
· Falling edge
Yes/No
· Rising and falling edge Yes/No
Default setting
Parameter reassignment in RUN
Range of effectiveness with configuration software, e.g. STEP 7
Integrated in the GSD file hardware catalog PROFIBUS DP as of STEP 7, V13 SP1 or GSD file PROFINET IO
No
Yes
No
Yes
3.2 ms;
Yes
for isochronous
mode 0.05 ms
(cannot be
changed)
Channel* Channel Channel
Channel group**
Channel group**
Channel group**
No
Yes
Channel
Channel
No
Yes
Channel
Channel
No
Yes
Channel
Channel
* If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault.
You can prevent this alarm surge by enabling diagnostics for one channel only.
** The scope can be assigned for each channel during parameter assignment in RUN.
*** For the configuration as a 4 x 8-channel module, a maximum of 16 hardware interrupts can be configured (channels 0 to 15).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
17
Parameters/address space 4.1 Parameter
4.1.3
Explanation of the parameters of the DI mode
No supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Wire break
Enabling diagnostics if the line to the encoder is interrupted.
Input delay
This parameter can be used to suppress signal disruptions. Changes to the signal are only detected if they are constantly pending longer than the set input delay time.
Hardware interrupt
Specifies whether or not a hardware interrupt is disabled or with which of the following events a hardware interrupt is generated. Rising edge Falling edge Rising and falling edge
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
18
Manual, 08/2018, A5E03485952-AG
Parameters/address space 4.1 Parameter
4.1.4
Parameters of the Counting mode
Parameters of the DI 16x24VDC HF Count in the Counting mode
If you want to use the module for counting, you need to set the module parameters as DI 16x24VDC HF Count. For channels 0 and channel 1, the following parameter settings are then possible. For channels 2 to 15, the parameter settings apply as with the DI 16x24VDC HF, , see section Parameters DI mode (Page 17).
Table 4- 2 Settable parameters and their defaults in the Counting mode
Parameter
Range of values
Default setting
Parameter reassignment in RUN
Diagnostics · No
supply voltage L+ · Wire break Input delay
Hardware interrupt Set output DQ
Edge selection
High counting limit
Yes/No
No
Yes
Yes/No
No
Yes
0.05 ms, 0.1 ms, 0.4 ms, 1.6 ms, 3.2 ms, 12.8 ms, 20 ms
· Disable
3.2 ms; Yes for isochronous mode 0.05 ms (cannot be changed)
Disable Yes
· Comparison event occurred for DQ
· Between a comparison Between Yes
value and the high count- a compar-
ing limit
ison value and the
· Between a comparison high
value and the low count- counting
ing limit
limit
· On rising edge · On falling edge
On rising Yes edge
· On rising and falling edge
0 ... 4294967295
42949672 Yes 95
Range of effectiveness with configuration software, e.g. STEP 7
Integrated in the GSD file hardware catalog PROFIBUS DP as of STEP 7, V13 SP1 with HSP 0118 or GSD file PROFINET IO
Channel*
---
Channel
---
Channel
---
Channel
---
Channel
---
Channel
---
Channel
---
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
19
Parameters/address space 4.1 Parameter
Parameter
Range of values
Comparison value
Start value
Behavior when a counting limit is exceeded
0 ... 4294967295** 0 ... 4294967295** · Stop counting · Continue counting
Default setting
1 0 Stop counter
Parameter reassignment in RUN
Yes Yes Yes
Range of effectiveness with configuration software, e.g. STEP 7
Integrated in the hardware catalog as of STEP 7, V13 SP1 with HSP 0118 or GSD file PROFINET IO
GSD file PROFIBUS DP
Channel
---
Channel
---
Channel
---
* If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault.
You can prevent this alarm surge by enabling diagnostics for one channel only. ** Comparison value or start value must be less than or equal to the value for the high counting limit.
4.1.5
Explanation of the parameters of the Counting mode
Missing supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Wire break
Enabling diagnostics if the line to the encoder is interrupted.
Input delay
This parameter can be used to suppress signal disruptions. Changes to the signal are only detected if they are constantly pending longer than the set input delay time.
Hardware interrupt
Specifies whether or not a hardware interrupt is generated by the event "Comparison event occurred for DQ" (rising edge at STS_DQ).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
20
Manual, 08/2018, A5E03485952-AG
Parameters/address space 4.1 Parameter
Set output DQ
With this parameter, you specify the behavior of the STS_DQ bit in the feedback interface. You can assign this bit in the user program, for example, with a hardware output, see AUTOHOTSPOT.
Behavior
Meaning
Between a comparison value and the high counting limit
STS_DQ bit is set if the following condition is met: Comparison value < = counted value < = high counting limit
Between a
STS_DQ bit is set if the following condition is met:
comparison value and the low counting Low counting limit < = counted value < = comparison value limit
Edge selection
With this parameter you specify which edge is used to count. You can select the following options: On rising edge On falling edge On rising and falling edge
High counting limit
With this parameter you limit the counting range. You can enter a value up to 4294967295 (232 - 1).
Comparison value
With this parameter you specify the count value at which the digital output DQ (STS_DQ bit of the feedback interface) switches due to the selected comparison event.
Start value
With this parameter, you specify the value at which counting begins and is continued if defined events occur. The following condition must be met:
Low counting limit < = start value < = high counting limit.
Behavior when a counting limit is exceeded
With this parameter, you specify the behavior if a counting limit is exceeded.
Behavior Stop counting
Continue counting
Meaning
After a counting limit is exceeded, the counting procedure is aborted and the STS_GATE bit (internal gate) is reset.
To restart the counting, the SW_GATE bit must be reset via the control interface and set again.
After a counting limit is exceeded, the counted value is set to the other counting limit and counting is continued.
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
21
Parameters/address space 4.2 Address space
4.2
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
The letters "a to b" are printed onto the module. "EB a" for example, stands for module start address input byte a.
Configuration options of DI 16x24VDC HF
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 3 Configuration options
Configuration
Short designation/ module name in the
GSD file
1 x 16-channel without value status 1 x 16-channel with value status 2 x 8-channel without value status
DI 16x24VDC HF DI 16x24VDC HF QI DI 16x24VDC HF S
2 x 8-channel with value status
DI 16x24VDC HF S QI
1 x 16-channel with value status for
DI 16x24VDC HF MSI
module-internal shared input with up to 4
submodules
1 x 16-channel with value status (channel DI 16x24VDC HF 0 and channel 1 for counting, channels 2 Count to 15 as digital inputs)
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog STEP 7 (TIA Portal)
V12 or higher
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3
or higher
X
V12 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher (PROFINET IO only)
X (PROFINET IO only)
V13 Update 3 or higher (PROFINET IO only)
X (PROFINET IO only)
V13, SP1 with HSP 0118 or higher
X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names: DI 16x24VDC HF QI, DI 16x24VDC HF S QI DI 16x24VDC HF MSI DI 16x24VDC HF Count An additional bit is assigned to each channel for the value status. The value status bit indicates if the read in digital value is valid. (0 = value is incorrect).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
22
Manual, 08/2018, A5E03485952-AG
Parameters/address space 4.2 Address space
4.2.1
Address space DI mode
Address space for configuration as 16-channel DI 16x24VDC HF QI
The figure below shows the assignment of the address space for the configuration as a 16-channel module with value status. You can freely assign the start address for the module. The addresses of the channels are derived from the start address.
Figure 4-1 Address space for configuration as 16-channel DI 16x24VDC HF QI with value status
Address space for configuration as 2 x 8-channel DI 16x24VDC HF S QI
For the configuration as a 2 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Contrary to the 1 x 16-channel module configuration, each of the two submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 2 x 8-channel DI 16x24VDC HF S QI
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
23
Parameters/address space 4.2 Address space
Address space for configuration as 1 x 16-channel DI 16x24VDC HF MSI
The channels 0 to 15 of the module are copied in up to four submodules with configuration 1 x 16-channel module (Module-internal shared input, MSI). Channels 0 to 15 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels.
The number of IO controllers depends on the interface module being used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI)
The meaning of the value status depends on the submodule involved.
For the 1st submodule (= basic submodule), the value status 0 indicates that the value is incorrect.
For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
The following figure shows the assignment of the address space with submodules 1 and 2 and the value status.
Figure 4-3 Address space for configuration as 1 x 16-channel DI 16x24VDC HF MSI
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
24
Manual, 08/2018, A5E03485952-AG
Parameters/address space 4.2 Address space
The following figure shows the assignment of the address space with submodules 3 and 4 and the value status.
Reference
Figure 4-4 Address space for configuration as 1 x 16-channel DI 16x24VDC HF MSI
You can find information on the module-internal shared input/shared output (MSI/MSO) function in the section Module-internal shared input/shared output (MSI/MSO) of the function manual PROFINET with STEP 7 V13 (http://support.automation.siemens.com/WW/view/en/49948856).
4.2.2
Address space Counting mode
Address space for configuration as 1 x 16-channel DI 16x24VDC Count
The address space of channel 0 and channel 1 used for counting consists of the control and feedback interface. The Count function is controlled directly via the two interfaces. With suitable parameter assignment, a hardware interrupt is triggered.
If you use the module in the "Counting mode" (channels 0 and 1), the module occupies the following address areas:
16 bytes in the process image output (control interface).
20 bytes in the process image input (feedback interface).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
25
Parameters/address space 4.2 Address space
Control interface
The figure below shows the address assignment of the module in the process image output. You use the control interface, for example, to start the counter or to set the counter value. With the "SW gate" control bit you open and close the software gate of the corresponding channel.
Figure 4-5 Assignment of the address space of the control interface of the DI 16x24VDC Count (bytes 0 to 7)
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
26
Manual, 08/2018, A5E03485952-AG
Parameters/address space 4.2 Address space
Figure 4-6 Assignment of the address space of the control interface of the DI 16x24VDC Count (bytes 8 to 15)
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
27
Parameters/address space 4.2 Address space
Feedback interface
The figure below shows the address assignment of the module in the process image input. The feedback interface for the counters (channels 0 and 1) begins at input byte x+4. Via the feedback interface, the user program receives current counted values and status information from the module.
Figure 4-7 Assignment of the address space of the feedback interface of the DI 16x24VDC Count (bytes 0 to 11)
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
28
Manual, 08/2018, A5E03485952-AG
Parameters/address space 4.2 Address space
Figure 4-8 Assignment of the address space of the feedback interface of the DI 16x24VDC Count (bytes 12 to 19)
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
29
Parameters/address space 4.2 Address space
4.2.3
Examples of counting
In this section, you will find examples of the behavior of the counter and how you can specify this behavior. You specify the properties of the counter in the parameter assignment.
Behavior when a counting limit is exceeded - Stop counting
The following section describes the effects of the parameter "Behavior when a counting limit is exceeded = Stop counting". To control the counter, the bits of the control byte of the control interface are used, see section Address space Counting mode (Page 25)
Counting begins at the current counted value (the SW_GATE is set in the control byte). Bit sequence in the control byte of the control interface 0000 1000.
After the high counting limit is violated, counting is aborted (counting stops) and the counted value jumps to the low counting limit = 0. The STS_GATE bit is reset.
To restart the counting, the SW_GATE bit must be reset via the control interface and set again.
Whether or not counting is started again with the current counter value or with the start value depends on the command byte in the control interface. Bit sequence in control byte of the control interface:
bit 0 to 2 = "000" Start with current counter value
bit 0 to 2 = "010" Start with start value
If the SW_GATE bit is reset in the control byte of the control interface before reaching the high counting limit, counting is stopped.
The following figure shows an example of the principle of stopping counting when a counting limit is exceeded.
Figure 4-9 Principle: Stop counting
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
30
Manual, 08/2018, A5E03485952-AG
Parameters/address space 4.2 Address space
Behavior when a counting limit is exceeded - Continue counting
The following section describes the effects of the parameter "Behavior when a counting limit is exceeded = Continue counting". To control the counter, the bits of the control byte of the control interface are used, see section Address space Counting mode (Page 25), subsection Control interface. Counting begins at the current counted value (the SW-GATE is set in the control byte). Bit sequence in the control byte of the control interface 0000 1000. After the high counting limit is exceeded, the counted value jumps to the low counting limit = 0 and counting is continued. If the SW_GATE bit is reset in the control byte of the control interface before reaching the high counting limit, counting is stopped. The following figure shows an example of the principle of continuing counting when a counting limit is exceeded.
Figure 4-10 Principle: Continue counting
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
31
Parameters/address space 4.2 Address space
Set output DQ - behavior of the STS_DQ bit
The following section shows the behavior of the STS_DQ bit with the parameter assignment "Set output DQ = between comparison value and high counting limit". The STS_DQ bit is set to 1 when the comparison value < = counted value <= high counting limit is reached. As an option, a hardware interrupt can be enabled in the parameter assignment. This is generated with the parameter rising edge of the STS_DQ bit. The following figure shows an example of the behavior of the STS_DQ bit between the comparison value and high counting limit.
Figure 4-11 Behavior of the STS_DQ bit and hardware interrupt
The following section shows the behavior of the STS_DQ bit with the parameter assignment "Set output DQ = between low counting limit and comparison value". The STS_DQ bit is set to 1 when the low counting limit < = counted value < = comparison value is reached. As an option, a hardware interrupt can be enabled in the parameter assignment. This is generated with the parameter rising edge of the STS_DQ bit.
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
32
Manual, 08/2018, A5E03485952-AG
Parameters/address space 4.2 Address space
The following figure shows an example of the behavior of the STS_DQ bit between the low counting limit and comparison value.
Figure 4-12 Behavior of the STS_DQ bit and hardware interrupt
Counting limits
The counting limits define the range of values of the counted value used. The counting limits can be set in the parameters and can be changed with the user program during runtime.
Configurable high counting limit: 4294967295 (232 -1).
Low counting limit (not settable): 0
You can continue or terminate (automatic gate stop) counting if a counting limit is exceeded, see the parameter "Behavior when a counting limit is exceeded".
Start value/load value
The start value is specified in the parameter assignment with STEP 7 (TIA Portal). The load value can be changed by the user program. Both values must be between the low counting limit and high counting limit.
Comparison values
You specify a comparison value per channel that can control the feedback bit STS_DQ regardless of the user program. When the current counted value corresponds to the comparison condition set in the parameters, the feedback bit STS_DQ is set. You can use the feedback bit STS_DQ to control a digital output of a digital output module.
The comparison values can be set in the parameters and can be changed during runtime via the user program with parameter data record 0/1.
Gate control
The opening and closing of the software gate (SW-GATE) defines the time window in which the count signals are acquired. The software gate is controlled by the user program.
Reference
You can find additional information on the counting functionality in the function manual S71500, ET 200MP, ET 200SP counting, measuring and position detection (http://support.automation.siemens.com/WW/view/en/59709820).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
33
Interrupts/diagnostics alarms
5
5.1
Status and error displays
LED displays
The following figure shows the LED displays (status and error displays) of DI 16x24VDC HF.
Figure 5-1 LED displays of the DI 16x24VDC HF module
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
34
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic reports can be found in chapter Diagnostics alarms (Page 38).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Flashes
Off
On
Off
On
Flashes
Flashes Flashes
Meaning
Solution
Voltage missing or too low at backplane · Switch on the CPU and/or the system power supply
bus
modules.
· Verify that the U connectors are inserted.
· Check whether too many modules are inserted.
The module starts and flashes until the --valid parameter assignment is set.
Module is configured
Indicates module errors (at least one error at one channel, e.g., wire break).
Hardware defective
Evaluate the diagnostics data and eliminate the error (e.g., wire break).
Replace the module.
PWR LED
Table 5- 2 PWR status display
LED PWR Off On
Meaning Supply voltage L+ too low or missing
Supply voltage L+ is present and OK
Solution Check supply voltage L+.
---
CHx LED
Table 5- 3 CHx status display
LED CHx Off On On
Meaning 0 = Status of the input signal
1 = Status of the input signal
Diagnostics: Wire break
Supply voltage L+ too low or missing
Solution ---
---
Check the wiring. When using simple switches, deactivate diagnostics or connect a resistor (25 k ... 45 k) to the encoder contacts. Check supply voltage L+.
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
35
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
Digital input module DI 16x24VDC HF supports diagnostic and hardware interrupts.
You can find detailed information on the error event in the error organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostics interrupt
The module generates a diagnostic interrupt at the following events: Missing supply voltage L+ Wire break Parameter assignment error
Hardware interrupt
The module generates a hardware interrupt at the following events:
Rising edge
Falling edge
Rising and falling edge
Comparison event occurred for DQ (only in "Counting mode")
The module channel that triggered the hardware interrupt is entered in the start information of the organization block. The following figure shows the assignment to the bits of double word 8 in local data.
Figure 5-2 Start information of the organization block
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
36
Manual, 08/2018, A5E03485952-AG
Interrupts/diagnostics alarms 5.2 Interrupts
Structure of the additional interrupt information
Table 5- 4 Structure of USI = W#16#0001
Data block name
Contents
USI
W#16#0001
(User Structure Identifier)
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#0F
It follows the error event that triggered the hardware interrupt.
Event
B#16#01
B#16#02
B#16#05
Comment
Additional interrupt info for hardware interrupts of the I/O module
Bytes 2
Number of the event-triggering channel (chan- 1 nel 0 to channel 15 of the module)
Rising edge
1
Falling edge
Comparison event occurred for DQ (only in "Counting mode")
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
37
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
Diagnostics alarms
A diagnostics alarm is output for each diagnostics event and the ERROR LED flashes on the module. The diagnostics alarms can, for example, be read from the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 5 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Wire break*
Error code 6H
Parameter assign- 10H ment error
Load voltage missing 11H
Hardware interrupt 16H lost
Meaning Impedance of encoder circuit too high
Wire break between the module and sensor Channel not connected (open)
Corrective measures Use a different encoder type or modify the wiring, for example, using cables with larger cross-section Connect the cable
· Disable diagnostics
· Connect a resistor of 25 k to 45 k to the encoder contacts
· The module cannot evaluate parame- Correct the parameter assignment ters for the channel
· Incorrect parameter assignment
Supply voltage L+ of the module is missing
The module cannot trigger an interrupt because the previous interrupt was not acknowledged; possibly a configuration error
Connect supply voltage L+ to module/channel
· Change interrupt processing in the CPU and, if necessary, edit the module parameters.
· The error persists until the module is assigned new parameters
* If the supply voltage fails in case of a pending wire break diagnostics, the value status momentarily indicates an incorrect value.
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
38
Manual, 08/2018, A5E03485952-AG
Technical specifications
6
Technical specifications of the DI 16x24VDC HF
The following table shows the technical specifications as of 08/2018. You will find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7521-1BH00-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version · FW update possible
Product function · I&M data
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Operating mode · DI
· Counter
· Oversampling
· MSI
Supply voltage Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Input current Current consumption, max.
Power Power available from the backplane bus
6ES7521-1BH00-0AB0
DI 16x24VDC HF FS04 V2.2.0 Yes
Yes; I&M0 to I&M3
V13 SP1 / -
V5.5 SP3 / -
V1.0 / V5.1
V2.3 / -
Yes Yes No Yes
24 V 20.4 V 28.8 V Yes
20 mA; with 24 V DC supply
1.1 W
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
39
Manual, 08/2018, A5E03485952-AG
Technical specifications
Article number Power loss
Power loss, typ. Digital inputs
Number of digital inputs Digital inputs, parameterizable Source/sink input Input characteristic curve in accordance with IEC 61131, type 3 Digital input functions, parameterizable · Gate start/stop
· Freely usable digital input
· Counter Number, max. Counting frequency, max. Counting width Counting direction up/down
Input voltage · Type of input voltage
· Rated value (DC)
· for signal "0"
· for signal "1" Input current
· for signal "1", typ. Input delay (for rated value of input voltage) for standard inputs
parameterizable at "0" to "1", min. at "0" to "1", max. at "1" to "0", min. at "1" to "0", max. for interrupt inputs parameterizable for technological functions parameterizable Cable length · shielded, max.
· unshielded, max.
6ES7521-1BH00-0AB0
2.6 W
16 Yes P-reading Yes
Yes Yes
2 3 kHz 32 bit Up
DC 24 V -30 to +5V +11 to +30V
2.5 mA
Yes; 0.05 / 0.1 / 0.4 / 1.6 / 3.2 / 12.8 / 20 ms 0.05 ms 20 ms 0.05 ms 20 ms
Yes
Yes
1 000 m 600 m
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
40
Manual, 08/2018, A5E03485952-AG
Article number Encoder Connectable encoders
· 2-wire sensor permissible quiescent current (2-wire sensor), max.
Isochronous mode Isochronous operation (application synchronized up to terminal) Filtering and processing time (TCI), min. Bus cycle time (TDP), min.
Interrupts/diagnostics/status information Diagnostics function
Alarms · Diagnostic alarm
· Hardware interrupt Diagnostic messages
· Monitoring the supply voltage
· Wire-break
· Short-circuit Diagnostics indication LED
· RUN LED
· ERROR LED
· Monitoring of the supply voltage (PWRLED)
· Channel status display
· for channel diagnostics
· for module diagnostics Potential separation Potential separation channels
· between the channels
· between the channels, in groups of
· between the channels and backplane bus
· between the channels and the power supply of the electronics
Isolation Isolation tested with
6ES7521-1BH00-0AB0
Yes 1.5 mA
Yes 80 µs; At 50 s filter time 250 µs Yes Yes Yes
Yes Yes; to I < 350 µA No
Yes; Green LED Yes; Red LED Yes; Green LED
Yes; Green LED Yes; Red LED Yes; Red LED
No 16 Yes No
707 V DC (type test)
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0) Manual, 08/2018, A5E03485952-AG
Technical specifications 41
Technical specifications
Article number Ambient conditions Ambient temperature during operation
· horizontal installation, min.
· horizontal installation, max.
· vertical installation, min.
· vertical installation, max.
Decentralized operation Prioritized startup
Dimensions Width Height Depth
Weights Weight, approx.
6ES7521-1BH00-0AB0
0 °C 60 °C 0 °C 40 °C
Yes
35 mm 147 mm 129 mm
240 g
Tolerances of the programmable input delay
Table 6- 1 Tolerances of the programmable input delay
Input delay 0.05 ms 0.1 ms 0.4 ms 1.6 ms 3.2 ms (preset) 12.8 ms 20 ms
Tolerance range 43 s to 57 s 86 s to 114 s 344 s to 456 s 1.5 ms to 1.9 ms 3 ms to 4 ms 12 ms to 15 ms 19 ms to 23 ms
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
42
Manual, 08/2018, A5E03485952-AG
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DI 16x24VDC HF module
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
43
Manual, 08/2018, A5E03485952-AG
Dimensional drawing
Figure A-2 Dimensional drawing of the DI 16x24VDC HF module, side view with open front cover
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
44
Manual, 08/2018, A5E03485952-AG
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
DI mode: no dependencies. You can assign the individual parameters in any combination.
Counting mode: The following table lists the parameters that depend on one another:
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Comparison value Start value
Dependent parameters 0 ... high counting limit 0 ... high counting limit
Parameter assignment in the user program
You have the option to reconfigure the module in RUN (e.g. the input delay values of selected channels can be edited without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 0 to 15. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
45
Manual, 08/2018, A5E03485952-AG
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You get the diagnostics data records 0 and 1 for the read back parameter data records 0 and 1. You can find more information in the Interrupts section of the PROFIBUS DP interface module device manual on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
46
Manual, 08/2018, A5E03485952-AG
Parameter data records B.2 Structure of the parameter data records DI mode
B.2
Structure of the parameter data records DI mode
Assignment of data record and channel
For the configuration with 1 x 16 channels, the parameters are located in data records 0 to 15 and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 ... Data record 14 for channel 14 Data record 15 for channel 15 For the configuration as a 2 x 8-channel module, the module has two submodules with eight channels each. The parameters for the channels are located in data records 0 to 7 and are assigned as follows: Data records 0 to 7 for channels 0 to 7 (submodule 1) Data records 0 to 7 for channels 8 to 15 (submodule 2) Address the respective submodule for data record transfer.
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
47
Parameter data records B.2 Structure of the parameter data records DI mode
Structure of a data record in the DI mode
The example in the figure below shows the structure of data record 0 for channel 0. The structure of channels 1 to 15 is identical. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Bytes 0 to 3
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
48
Manual, 08/2018, A5E03485952-AG
Parameter data records B.3 Structure of the parameter data records Counting mode
B.3
Structure of the parameter data records Counting mode
Assignment of data record and channel
For the configuration with 1 x 16 channels, the parameters are located in data records 0 to 15 and are assigned as follows: Data record 0 for channel 0 with counting function Data record 1 for channel 1 with counting function Data record 2 for channel 2 (structure as in DI mode) ... Data record 14 for channel 14 (structure as in DI mode) Data record 15 for channel 15 (structure as in DI mode)
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
49
Parameter data records B.3 Structure of the parameter data records Counting mode
Structure of data record 0 of the Counting mode
The example in the figure below shows the structure of data record 0 for channel 0. The structure of channel 1 is identical, the values are located in data record 1. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-2 Structure of data record 0: Bytes 0 to 4
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
50
Manual, 08/2018, A5E03485952-AG
Parameter data records B.3 Structure of the parameter data records Counting mode
Figure B-3 Structure of data record 0: Bytes 5 to 17
Keep in mind that the counter is stopped and reset to the start value when you change count parameters. Changing the parameters "Diagnostics" and "Hardware interrupts" does not have an effect on the counter.
Structure of data records 2 to 15
The structure of data records 2 to 15 for channels 2 to 15 is identical to the structure in the DI mode, see section Structure of the parameter data records DI mode (Page 47), figure Structure of data record 0: Bytes 0 to 3.
DI 16x24VDC HF Digital Input Module (6ES7521-1BH00-0AB0)
Manual, 08/2018, A5E03485952-AG
51
SIMATIC
S7-1500/ET 200MP DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Ad_d_re_ss_s_pa_c_e __________4_ _Di_ag_n_os_tic_a_la_rm_s_________5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_
09/2016
A5E03486159-AD
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03486159-AD 09/2016 Subject to change
Copyright © Siemens AG 2013 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change:
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
4
Manual, 09/2016, A5E03486159-AD
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual, 09/2016, A5E03486159-AD
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
4 Address space ...................................................................................................................................... 15
4.1
Address space ....................................................................................................................... 15
5 Diagnostic alarms ................................................................................................................................. 19
5.1
Status and error displays ....................................................................................................... 19
6 Technical specifications ........................................................................................................................ 21
A Dimensional drawing............................................................................................................................. 24
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
6
Manual, 09/2016, A5E03486159-AD
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual, 09/2016, A5E03486159-AD
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
8
Manual, 09/2016, A5E03486159-AD
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual, 09/2016, A5E03486159-AD
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
10
Manual, 09/2016, A5E03486159-AD
Product overview
2.1
Properties
Article number
6ES7521-1BH50-0AA0
View of the module
2
Properties
Figure 2-1 View of the DI 16x24VDC SRC BA module
The module has the following technical properties: 16 digital inputs; electrically isolated in groups of 16 Reading M Rated input voltage 24 V DC Suitable for switches and 2-/3-/4-wire proximity switches
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual, 09/2016, A5E03486159-AD
11
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware version of the module
Firmware update
Identification data I&M0 to I&M3 Module-internal Shared Input (MSI)
Configurable submodules / submodules for Shared Device
Configurable after interface module IM 155-5 DP ST
V1.0.0 or higher V1.0.0 or higher V2.0.0 or higher
V2.0.0 or higher
V2.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
V12 or higher
X
V12 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 or higher
X
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front door
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
12
Manual, 09/2016, A5E03486159-AD
Wiring
3
This section contains the block diagram of the module and outlines various wiring options. You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Wiring and block diagram
The figure below shows you how to connect the module and channel addressing (input byte a to input byte b)
Backplane bus interface
L+ Supply voltage 24 V DC
CHx RUN ERROR
Figure 3-1 Block diagram and terminal assignment
Channel or channel status LED (green) Status display LED (green) Error display LED (red)
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual, 09/2016, A5E03486159-AD
13
Wiring
Tip: Using the potential jumpers
Use the potential jumpers supplied with the front connector if you want to distribute the 24V DC supply voltage to a neighboring module. This helps you to avoid having to terminate two wires to one terminal. Proceed as follows: 1. Connect the 24 V DC supply voltage to terminals 19 and 20. 2. Insert the potential jumpers between terminals 19 and 39 (L+) and between terminals 20
and 40 (M). 3. Use the terminals 39 and 40 to distribute the potential to the next module
Figure 3-2 Using the potential jumpers
Note Ensure that the maximum current load of 8 A per potential jumper is not exceeded.
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
14
Manual, 09/2016, A5E03486159-AD
Address space
4
4.1
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
Configuration options of DI 16x24VDC SRC BA
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 1 Configuration options
Configuration
Short designation/ module name in the
GSD file
1 x 16-channel without value status DI 16x24VDC SRC BA 2 x 8-channel without value status DI 16x24VDC SRC BA S
1 x 16-channel with value status for DI 16x24VDC SRC BA MSI module-internal shared input with up to 4 submodules
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog STEP 7 (TIA Portal)
V12 or higher
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3 or higher
X
V13 Update 3 or higher (PROFINET IO only)
X (PROFINET IO only)
V13 Update 3 or higher (PROFINET IO only)
X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the DI 16x24VDC SRC BA MSI module.
An additional bit is assigned to each channel for the value status. In contrast to the modules with diagnostics capability, the module only shows information regarding the parameter assignment of the first submodule (basic submodule) in the value status.
The module does not supply a value status for the read-in digital value.
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual, 09/2016, A5E03486159-AD
15
Address space 4.1 Address space
Address space for configuration as DI 16x24VDC SRC BA
The following figure shows the address space allocation for the configuration as 16-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. The letters "a to d" are printed on the module - "EB a", for example, stands for module start address input byte a.
Figure 4-1 Address space for configuration as 16-channel DI 16x24VDC SRC BA
Address space for configuration as 2 x 8-channel DI 16x24VDC SRC BA S
For the configuration as a 2 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Contrary to the 1 x 16-channel module configuration, each of the two submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 2 x 8-channel DI 16x24VDC SRC BA
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
16
Manual, 09/2016, A5E03486159-AD
Address space 4.1 Address space
Address space for configuration as 1 x 16-channel DI 16x24VDC SRC BA MSI
The channels 0 to 15 of the module are copied in up to four submodules with configuration 1 x 16-channel module (Module-internal shared input, MSI). Channels 0 to 15 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status is not relevant. For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the basic submodule parameters have not yet been assigned (not ready). The figure below shows the assignment of the address space with submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 16-channel DI 16x24VDC SRC BA MSI
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual, 09/2016, A5E03486159-AD
17
Address space 4.1 Address space
The figure below shows the assignment of the address space with submodules 3 and 4.
Reference
Figure 4-4 Address space for configuration as 1 x 16-channel DI 16x24VDC SRC BA MSI
You can find information on the module-internal shared input/shared output (MSI/MSO) function in the section Module-internal shared input/shared output (MSI/MSO) of the function manual PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856).
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
18
Manual, 09/2016, A5E03486159-AD
Diagnostic alarms
5.1
Status and error displays
LED displays
The following figure shows the LED displays (status and error displays) of DI 16x24VDC SRC BA.
5
Figure 5-1 LED displays of the module DI 16x24VDC SRC BA
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual, 09/2016, A5E03486159-AD
19
Diagnostic alarms 5.1 Status and error displays
Meaning of the LED displays
The following table explains the meaning of the status and error displays.
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On
Flashes
Off Off Flashes
Module starts up. Module is ready. Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Replace the module.
CHx LED
Table 5- 2 CHx status display
LED CHx Off On
Meaning 0 = Status of the input signal
1 = Status of the input signal
Remedy ---
---
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
20
Manual, 09/2016, A5E03486159-AD
Technical specifications
6
Technical specifications of the DI 16x24VDC SRC BA
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7521-1BH50-0AA0
DI 16x24VDC SRC BA FS01 V2.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V12 / V12
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
DI
Yes
Counters
No
MSI
Yes
Supply voltage
Valid range, low limit (DC) Valid range, high limit (DC)
20.4 V 28.8 V
Power
Power consumption from the backplane bus Power loss Power loss, typ.
0.9 W 2.8 W
Digital inputs
Number of inputs Configurable digital inputs Sinking/sourcing input Input characteristic curve acc. to IEC 61131, type 3 Input voltage Type of input voltage Rated value (DC) for signal "0" for signal "1"
16 No reading m Yes
DC 24 V -5 to +30 V -11 to -30 V
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual, 09/2016, A5E03486159-AD
21
Technical specifications
Input current for signal "1", typ. Input delay (for rated value of input voltage) For standard inputs
· Configurable
4.5 mA
6ES7521-1BH50-0AA0
No
· with "0" to "1", min.
3 ms
· with "0" to "1", max.
4 ms
· with "1" to "0", min.
3 ms
· with "1" to "0", max.
4 ms
For interrupt inputs
· Configurable
No
for technological functions
· Configurable
No
Cable length shielded, max. unshielded, max. Encoders Connectable encoders 2-wire sensor
· Permitted quiescent current (2-wire sensor), max.
1000 m 600 m
Yes 1.5 mA
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
No
Interrupts
Diagnostics interrupt
No
Hardware interrupt
No
Diagnostics alarms
Monitoring of supply voltage
No
Wire break
No
Short-circuit
No
Diagnostics indicator LED
RUN LED
Yes; green LED
ERROR LED
Yes; red LED
Monitoring of supply voltage (PWR LED)
No
Channel status display
Yes; green LED
For channel diagnostics
No
For module diagnostics
No
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
22
Manual, 09/2016, A5E03486159-AD
Technical specifications
Electrical isolation Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Isolation Isolation tested with Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed mode Prioritized startup Dimensions Width Height Depth Weights Weight, approx.
6ES7521-1BH50-0AA0
No 16 Yes
707 V DC (type test)
0 °C 60 0 °C 40 °C
Yes
35 mm 147 mm 129 mm
230 g
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual, 09/2016, A5E03486159-AD
23
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DI 16x24VDC SRC BA module
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
24
Manual, 09/2016, A5E03486159-AD
Dimensional drawing
Figure A-2 Dimensional drawing of the DI 16x24VDC SRC BA module, side view with open front cover
DI 16x24VDC SRC BA Digital Input Module (6ES7521-1BH50-0AA0)
Manual, 09/2016, A5E03486159-AD
25
SIMATIC
S7-1500/ET 200MP Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual
Preface
S7-1500 / ET 200MP Documentation Guide
1
Product overview
2
Wiring
3
Address space
4
Diagnostic alarms
5
Technical specifications
6
Dimensional drawing
A
07/2020
A5E48025116-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E48025116-AA 07/2020 Subject to change
Copyright © Siemens AG 2020. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system.
Please also observe notes marked as follows:
Note
A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
3
Preface
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
4
Equipment Manual, 07/2020, A5E48025116-AA
Table of contents
Preface ................................................................................................................................................... 3
1 S7-1500 / ET 200MP Documentation Guide ........................................................................................... 6
2 Product overview ................................................................................................................................... 8
2.1
Properties ............................................................................................................................ 8
3 Wiring .................................................................................................................................................. 10
3.1
Wiring and block diagrams ................................................................................................. 10
3.2
Terminal assignment X10 and X11. .................................................................................... 11
3.3
Connecting a module with a connection module ................................................................ 14
3.4
Wiring of the module ......................................................................................................... 16
3.5
Fuse .................................................................................................................................. 18
4 Address space ...................................................................................................................................... 20
5 Diagnostic alarms ................................................................................................................................ 26
5.1
Status and error displays .................................................................................................... 26
6 Technical specifications....................................................................................................................... 28
A Dimensional drawing........................................................................................................................... 32
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
5
S7-1500 / ET 200MP Documentation Guide
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
1
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
6
Equipment Manual, 07/2020, A5E48025116-AA
S7-1500 / ET 200MP Documentation Guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
7
Product overview
2.1
Properties
Article number
6ES7521-1BP00-0AA0
View of the module
2
Properties
Figure 2-1 View of the DI 64x24VDC SNK/SRC BA module
The module has the following technical properties: · 64 digital inputs; electrically isolated in 4 groups of 16 · Sourcing input or sinking input, depending on wiring · Rated input voltage 24 V DC · Suitable for switches and 2-/3-/4-wire proximity switches
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
8
Equipment Manual, 07/2020, A5E48025116-AA
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Module-internal Shared Input (MSI) Configurable submodules / submodules for Shared Device
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
as of V16 and HSP 0319
GSD file in STEP 7 (TIA Portal) V12 or higher,
or STEP 7 V5.5 SP3 or higher
X X X (PROFINET IO only) X (PROFINET IO only)
--- / X X X
(PROFINET IO only) X
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can be ordered as spare parts: · U connector · Universal front door with the article number: 6ES7 591-8AA00-0AA0 You can find additional information in the system manual S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792).
Other components
The following must be ordered separately: · SIMATIC TOP connect connection module · Pre-fabricated connecting cable with IDC connectors For additional information, see section Connecting a module with a connection module (Page 14)
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
9
Wiring
3
3.1
Wiring and block diagrams
This section contains the block diagram of the module and the terminal assignment.
Wiring and block diagram
The following figure shows the terminal assignment and the assignment of the channels. · Inputs: Channel 0 to 31 to connector X10 · Inputs: Channel 32 to 63 to connector X11
Backplane bus interface
CHx
Terminal for "sinking" operating mode RUN
Terminal for "sourcing" operating mode ERROR
Figure 3-1 Block diagram and terminal assignment
Channel Status display LED (green) Error display LED (red)
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
10
Equipment Manual, 07/2020, A5E48025116-AA
Wiring 3.2 Terminal assignment X10 and X11.
3.2
Terminal assignment X10 and X11.
The following figure shows the assignment of the channels to the addresses.
Figure 3-2 Front view of the module without front door
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
11
Wiring 3.2 Terminal assignment X10 and X11.
Terminal and address assignment
For connecting sensors or actuators, we recommend using the SIMATIC TOP connect preassembled connecting cables and the SIMATIC TOP connect connection modules. However, if you choose another wiring option, you will need the following tables.
Table 3- 1 Assignment for connector X10 of the module
Terminal 40 38 36 34 32 30 28 26 24 22 20 18 16 14 12 10 8 6 4 2
Channel ---
2COM * Channel 31 Channel 30 Channel 29 Channel 28 Channel 27 Channel 26 Channel 25 Channel 24
--2COM * Channel 23 Channel 22 Channel 21 Channel 20 Channel 19 Channel 18 Channel 17 Channel 16
Assignment for inputs to X10
Address -----
x+3.7 x+3.6 x+3.5 x+3.4 x+3.3 x+3.2 x+3.1 x+3.0 ----x+2.7 x+2.6 x+2.5 x+2.4 x+2.3 x+2.2 x+2.1 x+2.0
Terminal 39 37 35 33 31 29 27 25 23 21 19 17 15 13 11 9 7 5 3 1
Channel ---
1COM ** Channel 15 Channel 14 Channel 13 Channel 12 Channel 11 Channel 10 Channel 9 Channel 8
--1COM ** Channel 7 Channel 6 Channel 5 Channel 4 Channel 3 Channel 2 Channel 1 Channel 0
Address -----
x+1.7 x+1.6 x+1.5 x+1.4 x+1.3 x+1.2 x+1.1 x+1.0 -----
x.7 x.6 x.5 x.4 x.3 x.2 x.1 x.0
* 2M for Sinking (sinking input) connection type/ 2L+ for Sourcing (sourcing input) connection type ** 1M for Sinking (sinking input) connection type/ 1L+ for Sourcing (sourcing input) connection type
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
12
Equipment Manual, 07/2020, A5E48025116-AA
Wiring 3.2 Terminal assignment X10 and X11.
Table 3- 2 Assignment for the connector X11 of the module
Terminal 1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 31 33 35 37 39
Channel Channel 32 Channel 33 Channel 34 Channel 35 Channel 36 Channel 37 Channel 38 Channel 39
3COM * ---
Channel 40 Channel 41 Channel 42 Channel 43 Channel 44 Channel 45 Channel 46 Channel 47
3COM * ---
Assignment for inputs to X11
Address x+4.0 x+4.1 x+4.2 x+4.3 x+4.4 x+4.5 x+4.6 x+4.7 ----x+5.0 x+5.1 x+5.2 x+5.3 x+5.4 x+5.5 x+5.6 x+5.7 -----
Terminal 2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 38 40
Channel Channel 48 Channel 49 Channel 50 Channel 51 Channel 52 Channel 53 Channel 54 Channel 55 4COM **
--Channel 56 Channel 57 Channel 58 Channel 59 Channel 60 Channel 61 Channel 62 Channel 63 4COM **
---
Address x+6.0 x+6.1 x+6.2 x+6.3 x+6.4 x+6.5 x+6.6 x+6.7 ----x+7.0 x+7.1 x+7.2 x+7.3 x+7.4 x+7.5 x+7.6 x+7.7 -----
* 3M for Sinking (sinking input) connection type/ 3L+ for Sourcing (sourcing input) connection type ** 4M for Sinking (sinking input) connection type/ 4L+ for Sourcing (sourcing input) connection type
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
13
Wiring 3.3 Connecting a module with a connection module
3.3
Connecting a module with a connection module
Component for connecting
To connect sensors, you need 2 connection modules per module. The connection modules are connected to the module with pre-assembled connecting cables.
You can find additional information on the components of the SIMATIC TOP connect system cabling, e.g. for connecting connection modules, in the equipment manual SIMATIC TOP connect for S7-1500 and ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/95924607).
Note Common supply
If you use the listed SIMATIC TOP connect connection modules, then all 32 channels of a connection module have a common supply. This means that 2 groups of 16 channels each are supplied by common potential.
You can find the required components in the tables below.
Table 3- 3 SIMATIC TOP connect connection module
Components
Connection modules for digital inputs
Typ Description e
Connection technology
TP1 1-wire connection, without LED (sinking input)
- Screw terminals - Push-in system
1-wire connection, with LED (sink- - Screw terminals
ing input)
- Push-in system
1-wire connection, with LED (sourcing input)
- Screw terminals - Push-in system
TP3 3-wire connection, without LED - Screw terminals
(sinking input)
- Push-in system
3-wire connection, with LED (sink- - Screw terminals
ing input)
- Push-in system
Article number
6ES7924-2AA20-0AA0 6ES7924-2AA20-0AC0 6ES7924-2AA20-0BA0 6ES7924-2AA20-0BC0
6ES7924-2AK20-0BA0 6ES7924-2AK20-0BC0
6ES7924-2CA20-0AA0 6ES7924-2CA20-0AC0
6ES7924-2CA20-0BA0 6ES7924-2CA20-0BC0
Delivery quantity Pack of 1 Pack of 1 Pack of 1 Pack of 1
Pack of 1 Pack of 1
Pack of 1 Pack of 1
Pack of 1 Pack of 1
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
14
Equipment Manual, 07/2020, A5E48025116-AA
Wiring 3.3 Connecting a module with a connection module
Table 3- 4 Connecting cables SIMATIC TOP connect Components
Length
Pre-assembled connecting cable with IDC connector an both 1.0 m
ends
2.0 m
· IDC connector 40-pin for the I/O module
2.5 m
· IDC connector 50-pin for the SIMATIC TOP connect con- 3.0 m nection module
Article number
6ES7923-5BB00-0GB0 6ES7923-5BC00-0GB0 6ES7923-5BC50-0GB0 6ES7923-5BD00-0GB0
Delivery quantity Pack of 1 Pack of 1 Pack of 1 Pack of 1
Support for selecting hardware components
We recommend you use the TIA Selection Tool for planning your project. The TIA Selection Tool is available free of charge as a desktop version for download or as a cloud version, refer to the Internet (https://new.siemens.com/global/en/products/automation/topic-areas/tia/tiaselection-tool.html).
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
15
Wiring 3.4 Wiring of the module
3.4
Wiring of the module
Requirement
· The I/O modules are installed on the mounting rail. · The supply voltage of the station is switched off.
Procedure
1. Plug the two SIMATIC TOP connect connecting cables with the 40-pin IDC connector into X10 and X11.
Note when plugging: The nob on the left edge of connector X11 The nob on the right edge of connector X10
Figure 3-3 Connect the SIMATIC TOP connect 40-pin connecting cable to the module
2. Guide the SIMATIC TOP connect connecting cables down to the module. 3. Guide a cable tie around the module at the fixing points and connect the SIMATIC TOP
connect cables.
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
16
Equipment Manual, 07/2020, A5E48025116-AA
4. Tighten the cable tie for the strain relief.
Wiring 3.4 Wiring of the module
Figure 3-4 Fastening the cable tie for the strain relief
5. Plug the SIMATIC TOP connect connecting cables with the 50-pin IDC connector into the SIMATIC TOP connect connection module.
Additional information
You can find out how to wire the SIMATIC TOP connect connection module in the equipment manual SIMATIC TOP connect for S7-1500 and ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/95924607).
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
17
Wiring 3.5 Fuse
3.5
Fuse
Miniature circuit breaker
The supply lines of groups are to be protected with a 4 A miniature circuit breaker with tripping characteristic C or B.
Below, you see the connection for "Sourcing" mode and for "Sinking" mode.
Figure 3-5 "Sourcing" mode
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
18
Equipment Manual, 07/2020, A5E48025116-AA
Wiring 3.5 Fuse
Figure 3-6 "Sinking" mode
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
19
Address space
4
The module can be configured in various ways in STEP 7. Depending on the configuration, additional/different addresses are assigned in the process image output/input.
Configuration options of DI 64x24VDC SNK/SRC BA
You can configure the module with STEP 7 (TIA Portal) or with a GSD file. When you configure the module by means of the GSD file, the configurations are available under different short designations/module names. The following configurations are possible:
Table 4- 1 Configuration options
Configuration
1 x 64-channel without value status 8 x 8-channel without value status 1 x 64-channel with value status for moduleinternal Shared Input (MSI) with up to 4 submodules
Short designation/module name in the GSD file
DI 64x24VDC SNK/SRC BA DI 64x24VDC SNK/SRC BA S DI 64x24VDC SNK/SRC BA MSI
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in the hardware catalog
of STEP 7 (TIA Portal) as of V16 and HSP 0319
X X (PROFINET IO only) X (PROFINET IO only)
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3 or higher
X X (PROFINET IO only) X (PROFINET IO only)
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
20
Equipment Manual, 07/2020, A5E48025116-AA
Address space
Address space for configuration as 1 x 64-channel DI 64x24VDC SNK/SRC BA
The figure below shows the address space assignment for configuration as a 1 x 64-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "IB a" for example, stands for module start address input byte a.
Figure 4-1 Address space for configuration as 1 x 64-channel DI 64x24VDC SNK/SRC BA
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
21
Address space
Address space for configuration as 8 x 8-channel DI 64x24VDC SNK/SRC BA S
For the configuration as an 8 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Unlike the 1 x 64-channel module configuration, each of the eight submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 8 x 8-channel DI 64x24VDC SNK/SRC BA S
Address space for configuration as 1 x 64-channel DI 64x24VDC SNK/SRC BA MSI
The channels 0 to 63 of the module are copied in up to 4 submodules for the configuration as 1 x 64-channel module (module-internal shared input, MSI). Channels 0 to 63 are then available with identical input values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status is not relevant. For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
22
Equipment Manual, 07/2020, A5E48025116-AA
Address space The figure below shows the assignment of the address space with submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 64-channel DI 64x24VDC SNK/SRC BA MSI with value status
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
23
Address space The figure below shows the assignment of the address space with submodules 3 and 4.
Figure 4-4 Address space for configuration as 1 x 64-channel DI 64x24VDC SNK/SRC BA MSI with value status
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
24
Equipment Manual, 07/2020, A5E48025116-AA
Address space
Reference
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V16 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
25
Diagnostic alarms
5
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of the DI 64x24VDC SNK/SRC BA.
Figure 5-1 LED display of the module DI 64x24VDC SNK/SRC BA
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
26
Equipment Manual, 07/2020, A5E48025116-AA
Diagnostic alarms 5.1 Status and error displays
Meaning of the LED displays
The following table explains the meaning of the status and error displays.
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On
Flashes
Off Off Flashes
Module starts up Module is ready Hardware defective
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check whether too many modules are in-
serted. ---
Replace the module.
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
27
Technical specifications
6
Technical specifications of DI 64x24VDC SNK/SRC BA
The following table shows the technical specifications as of 07/2020. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td).
Enter the article number or the short designation of the module on the website.
Article number General information
Product type designation HW functional status Firmware version · FW update possible Product function · I&M data
· Isochronous mode
· Prioritized startup Engineering with
· STEP 7 TIA Portal configurable/integrated from version
· STEP 7 configurable/integrated from version
· PROFIBUS from GSD version/GSD revision Operating mode
· DI
· Counter
· Oversampling
· MSI Power
Power available from the backplane bus Power loss
Power loss, typ. Digital inputs
Number of digital inputs Digital inputs, parameterizable Source/sink input Input characteristic curve in accordance with IEC 61131, type 3
6ES7521-1BP00-0AA0
DI 64x24VDC BA From FS01 V1.0.0 Yes
Yes; I&M0 to I&M3 No No
V16 with HSP 0319 / V17
V5.5 SP3 / -
V1.0 / V5.1
Yes No No Yes
0.6 W
4.8 W
64 No Yes Yes
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
28
Equipment Manual, 07/2020, A5E48025116-AA
Technical specifications
Article number Number of simultaneously controllable inputs
· Number of simultaneously controllable inputs
Input voltage · Rated value (DC) 24 V DC · for signal "0"
· for signal "1" Input current
· for signal "1", typ. Input delay (for rated value of input voltage) for standard inputs
parameterizable at "0" to "1", min. at "0" to "1", max. at "1" to "0", min. at "1" to "0", max. for interrupt inputs parameterizable for technological functions parameterizable Cable length · shielded, max.
· unshielded, max. Encoder Connectable encoders
· 2-wire sensor permissible quiescent current (2-wire sensor), max.
Interrupts/diagnostics/status information Diagnostics function
Alarms · Diagnostic alarm
· Hardware interrupt Diagnostic messages
· Monitoring the supply voltage
· Wire-break
· Short-circuit
· Group error
6ES7521-1BP00-0AA0 64; see additional description in the manual
24 V Yes -30 to +5 V +11 to +30V
2.7 mA
No 3 ms 4 ms 3 ms 4 ms
No
No
1 000 m 600 m
Yes 1.5 mA
No No No
No No No No
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
29
Technical specifications
Article number Diagnostics indication LED
· RUN LED
6ES7521-1BP00-0AA0 Yes; green LED
· ERROR LED
Yes; red LED
· MAINT LED
No
· Monitoring of the supply voltage (PWR-LED) Yes; via SIMATIC TOP connect connection module
· Channel status display
Yes; via SIMATIC TOP connect connection module
· for channel diagnostics
No
· for module diagnostics
No
Potential separation
Potential separation channels
· between the channels
No
· between the channels, in groups of · between the channels and backplane bus
16; 32 when using SIMATIC TOP connect connection module
Yes
Isolation Isolation tested with
Standards, approvals, certificates Suitable for safety functions
Ambient conditions Ambient temperature during operation
· horizontal installation, min.
707 V DC (type test) No
-30 °C
· horizontal installation, max.
60 °C
· vertical installation, min.
-30 °C
· vertical installation, max.
40 °C
Altitude during operation relating to sea level · Installation altitude above sea level, max.
5 000 m
Dimensions Width Height Depth
Weights Weight, approx.
Other Note:
35 mm 147 mm 129 mm
250 g
Please order cable and connection modules separately
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
30
Equipment Manual, 07/2020, A5E48025116-AA
Technical specifications
Power reduction (derating) depending on the mounting position and ambient temperature (per module)
The following graphs show the number of channels that can be used simultaneously depending on the mounting position of the S7-1500/ET 200MP automation system and the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system Figure 6-1 Information on channels used simultaneously (per module)
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
31
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DI 64x24VDC SNK/SRC BA module
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
32
Equipment Manual, 07/2020, A5E48025116-AA
Dimensional drawing
Figure A-2 Dimension drawing of the DI 64x24VDC SNK/SRC BA module, side view with open front cover
Digital input module DI 64x24VDC SNK/SRC BA (6ES7521-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48025116-AA
33
SIMATIC
S7-1500/ET 200MP Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_a_la_rm_s____5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_
12/2016
A5E35681478-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E35681478-AC 12/2016 Subject to change
Copyright © Siemens AG 2015 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Functions that relate in general to the systems are described in these system manuals.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change: Technical specifications have been updated: Module is M/P reading.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
4
Manual, 12/2016, A5E35681478-AC
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
3.1
Wiring and block diagram ...................................................................................................... 13
4 Parameters/address space ................................................................................................................... 15
4.1
Parameters............................................................................................................................. 15
4.2
Declaration of parameters...................................................................................................... 16
4.3
Address space ....................................................................................................................... 17
5 Interrupts/diagnostic alarms .................................................................................................................. 21
5.1
Status and error displays ....................................................................................................... 21
5.2
Interrupts ................................................................................................................................ 23
5.3
Diagnostics alarms................................................................................................................. 25
6 Technical specifications ........................................................................................................................ 26
A Dimensional drawing............................................................................................................................. 30
A.1
Dimensional drawing.............................................................................................................. 30
B Parameter data records ........................................................................................................................ 32
B.1
Parameter assignment and structure of the parameter data records .................................... 32
B.2
Structure of the parameter data records ................................................................................ 33
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
6
Manual, 12/2016, A5E35681478-AC
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
8
Manual, 12/2016, A5E35681478-AC
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
10
Manual, 12/2016, A5E35681478-AC
Product overview
2.1
Properties
Part number:
6ES7521-7EH00-0AB0
View of the module
2
Properties
Figure 2-1 View of the module DI 16x24...125VUC HF
The module has the following technical properties: 16 digital inputs; electrically isolated in groups of 1 Rated input voltage 24 V UC to 125 V UC Configurable diagnostics (per channel) Configurable hardware interrupt (per channel) Programmable input delay (only with DC) Suitable for switches and 2-/3-/4-wire proximity switches
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
11
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Module internal shared input (MSI)
Configurable submodules / submodules for Shared Device
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal) as of V13 SP1
with HSP 0142
GSD file in STEP 7 (TIA Portal) as of V12 or STEP 7 as of V5.5 SP3
X
--- / X
X
X
X
X
X
X
(PROFINET IO only)
(PROFINET IO only)
X
X
(PROFINET IO only)
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front cover
Other components
The following component must be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the system manual S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792).
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
12
Manual, 12/2016, A5E35681478-AC
Wiring
3
3.1
Wiring and block diagram
This section contains the block diagram of the module and outlines various wiring options.
You can find information on wiring the front connector, establishing a cable shield, etc. in the system manual S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792).
Note Do not insert the potential jumpers included with the front connector!
Wiring and block diagram
The figure below shows you how to wire the module and the assignment of the channels to the addresses (input byte a to input byte b).
Backplane bus interface
CHx RUN ERROR
Channel or channel status LED (green/red) Status display LED (green) Error display LED (red)
Figure 3-1 Block diagram and terminal assignment
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
13
Wiring 3.1 Wiring and block diagram
Resistor circuitry of the encoders
To detect a wire break, it is necessary that enough quiescent current is flowing even when the encoder contacts are open. Connect a resistor to the encoder contacts for this reason, see figure below.
Rated input voltage: 24 VUC 48 VUC 125 VUC
Resistance: 16 k ... 21 k with 1.0 W 37 k ... 53 k with 0.5 W 101 k ... 156 k with 0.25 W
Figure 3-2 Resistor circuitry of the encoders
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
14
Manual, 12/2016, A5E35681478-AC
Parameters/address space
4
4.1
Parameters
DI 16x24...125VUC HF parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
For parameter assignment in the user program, the parameters are transferred to the module using the WRREC instruction (parameter assignment in RUN) and data records; see chapter Parameter assignment and structure of the parameter data records (Page 32).
Table 4- 1 Configurable parameters and their defaults
Parameter
Diagnostics · Wire break
Input delay
Hardware interrupt · Rising edge · Falling edge · Rising and falling
edge
Range of values
Default setting
Parameter reassignment in RUN
Range of effectiveness with configuration software, e.g. STEP 7
Integrated in the hardware catalog as of STEP 7, V13 SP1 or GSD file PROFINET IO
GSD file PROFIBUS DP
Yes/No
No
Yes
0.05 ms, 0.1 ms,
· 20 ms
Yes
0.4 ms, 1.6 ms, 3.2 ms, 12.8 ms, 20 ms
·
Fixed 20 ms for AC
Channel Channel
Channel group (CH0 to CH7, CH8 to CH15) Channel group (CH0 to CH7, CH8 to CH15)
Yes/No Yes/No Yes/No
No
Yes
Channel
Channel
No
Yes
Channel
Channel
No
Yes
Channel
Channel
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
15
Parameters/address space 4.2 Declaration of parameters
Note Input delay for AS input voltages
If you are operating channels of the module with an AC input voltage, you must set the input delay for these channels at 20 ms.
If you set a different input delay, the input signal might be incorrectly altered and the wrong value read.
4.2
Declaration of parameters
Wire break
Enabling diagnostics if the line to the encoder is interrupted.
Input delay
This parameter can be used to suppress signal disruptions. Changes to the signal are only detected if they are constantly pending longer than the set input delay time.
Hardware interrupt
Specifies whether or not a hardware interrupt is disabled or with which of the following events a hardware interrupt is generated. Rising edge Falling edge Rising and falling edge
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
16
Manual, 12/2016, A5E35681478-AC
Parameters/address space 4.3 Address space
4.3
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
The letters "a" and "b" are printed on the module. "IB a" for example, stands for module start address input byte a.
Configuration options of DI 16x24...125VUC HF
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 2 Configuration options
Configuration
Short designation/ module name in the
GSD file
1 x 16-channel without value status
1 x 16-channel with value status
2 x 8-channel without value status
DI 16x24...125VUC HF
DI 16x24...125VUC HF QI DI 16x24...125VUC HF S
2 x 8-channel with value status
DI 16x24...125VUC HF S QI
1 x 16-channel with value status for module-internal shared input with up to 4 submodules
DI 16x24...125VUC HF MSI
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in the hardware catalog as of STEP 7
(TIA Portal) V13 SP1 with HSP 0142
X
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5
SP3 or higher
X
X X (PROFINET IO only) X (PROFINET IO only) X (PROFINET IO only)
X X (PROFINET IO only) X (PROFINET IO only) X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names: DI 16x24...125VUC HF QI, DI 16x24...125VUC HF S QI DI 16x24...125VUC HF MSI An additional bit is assigned to each channel for the value status. The value status bit indicates if the read in digital value is valid. (0 = value is incorrect).
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
17
Parameters/address space 4.3 Address space
Address space for configuration as 16-channel DI 16x24...125VUC HF QI
The figure below shows the assignment of the address space for the configuration as a 16-channel module with value status. You can freely assign the start address for the module. The addresses of the channels are derived from the start address.
Figure 4-1 Address space for configuration as 16-channel DI 16x24...125VUC HF QI with value status
Address space for configuration as 2 x 8-channel DI 16x24...125VUC HF S QI
For the configuration as a 2 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Contrary to the 1 x 16-channel module configuration, each of the two submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 2 x 8-channel DI 16x24...125VUC HF S QI
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
18
Manual, 12/2016, A5E35681478-AC
Parameters/address space 4.3 Address space
Address space for configuration as 1 x 16-channel DI 16x24...125VUC HF MSI
The channels 0 to 15 of the module are copied in up to four submodules with configuration 1 x 16-channel module (Module-internal shared input, MSI). Channels 0 to 15 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels.
The number of IO controllers depends on the interface module being used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI)
The meaning of the value status depends on the submodule involved.
For the 1st submodule (= basic submodule), the value status 0 indicates that the value is incorrect.
For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
The following figure shows the assignment of the address space with submodules 1 and 2 and the value status.
Figure 4-3 Address space for configuration as 1 x 16-channel DI 16x24...125VUC HF MSI
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
19
Parameters/address space 4.3 Address space
The following figure shows the assignment of the address space with submodules 3 and 4 and the value status.
Reference
Figure 4-4 Address space for configuration as 1 x 16-channel DI 16x24...125VUC HF MSI
You can find information on the module-internal shared input/shared output (MSI/MSO) function in the section Module-internal shared input/shared output (MSI/MSO) of the function manual PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856).
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
20
Manual, 12/2016, A5E35681478-AC
Interrupts/diagnostic alarms
5
5.1
Status and error displays
LED displays
The following figure shows the LED displays (status and error displays) of module.
Figure 5-1 LED displays of the module DI 16x24...125VUC HF
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
21
Interrupts/diagnostic alarms 5.1 Status and error displays
Meaning of the LED displays
The tables below explain the meaning of the status and error displays.
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is ready.
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
LED CHx
Table 5- 2 CHx status display
LED CHx Off On On
Meaning 0 = Status of the input signal.
1 = Status of the input signal.
Diagnostics: Wire break or hardware interrupt lost
Remedy ---
---
Check the wiring. When using simple switches, disable diagnostics or connect a resistor to the encoder contacts.
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
22
Manual, 12/2016, A5E35681478-AC
Interrupts/diagnostic alarms 5.2 Interrupts
5.2
Interrupts
Digital input module DI 16x24...125VUC HF supports diagnostic and hardware interrupts.
You can find detailed information on the error event in the error organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostics interrupt
The module generates a diagnostic interrupt at the following events: Wire break Parameter assignment error Hardware interrupt lost
Hardware interrupt
The module generates a hardware interrupt at the following events:
Rising edge
Falling edge
Rising and falling edge
The module channel that triggered the hardware interrupt is entered in the start information of the organization block. The following figure shows the assignment to the bits of double word 8 in local data.
Figure 5-2 Start information of the organization block
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
23
Interrupts/diagnostic alarms 5.2 Interrupts
Structure of the additional interrupt information
Table 5- 3 Structure of USI = W#16#0001
Data block name
Contents
USI
W#16#0001
(User Structure Identifier)
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#0F
It follows the error event that triggered the hardware interrupt.
Event
B#16#01
B#16#02
Comment
Additional interrupt info for hardware interrupts of the I/O module
Bytes 2
Number of the event-triggering channel (chan- 1 nel 0 to channel 15 of the module)
Rising edge
1
Falling edge
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
24
Manual, 12/2016, A5E35681478-AC
Interrupts/diagnostic alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes for each diagnostics event on the module. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 4 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Wire break
Error code
6H
Parameter as-
10H
signment error
Hardware interrupt 16H lost
Meaning
Corrective measures
Impedance of encoder circuit too high
Wire break between the module and sensor Channel not connected (open)
Use a different encoder type or modify the wiring, for example, using cables with larger cross-section Connect the cable
· Disable diagnostics
· Connect encoder contacts with resistor: 16 k ... 21 k with 1.0 W at 24 VUC 37 k ... 53 k with 0.5 W at 48 VUC 101 k ... 156 k with 0.25 W at 125 VUC
· The module cannot evaluate parameters for the channel
Correct the parameter assignment
· Incorrect parameter assignment
The module cannot trigger an interrupt Change interrupt processing in the CPU and edit because the previous interrupt was the module parameters if necessary (the error pernot acknowledged; possibly a configu- sists until the module is assigned new parameters). ration error
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
25
Technical specifications
6
Technical specifications of the DI 16x24...125VUC HF
Order number General information
Product type designation HW functional status Firmware version · FW update possible
Product function · I&M data
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Operating mode · DI
· Counter
· Oversampling
· MSI
Power Power available from the backplane bus
Power loss Power loss, typ.
Digital inputs Number of digital inputs Digital inputs, parameterizable Source/sink input Input characteristic curve in accordance with IEC 61131, type 3
6ES7521-7EH00-0AB0
DI 16x24 ... 125VUC HF FS01 V1.0.0 Yes
Yes; I&M0 to I&M3
V13 SP1 / -
V5.5 SP3 / -
V1.0 / V5.1
V2.3 / -
Yes No No Yes
1.2 W
2.2 W; At 24 V DC; 6.0 W at 125 V AC
16 Yes Yes Yes; at 24 V DC
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
26
Manual, 12/2016, A5E35681478-AC
Technical specifications
Order number Input voltage
· Type of input voltage
· Rated value (DC)
· Rated value (AC)
· for signal "0"
· for signal "1" Input current
· for signal "1", typ. Input delay (for rated value of input voltage) for standard inputs
parameterizable
at "0" to "1", min. at "0" to "1", max. at "1" to "0", min. at "1" to "0", max. for interrupt inputs parameterizable for counter/technological functions parameterizable Cable length · shielded, max.
· unshielded, max. Encoder Connectable encoders
· 2-wire sensor permissible quiescent current (2-wire sensor), max.
Isochronous mode Isochronous operation (application synchronized up to terminal)
Interrupts/diagnostics/status information Diagnostics function
Alarms · Diagnostic alarm
· Hardware interrupt
6ES7521-7EH00-0AB0 AC/DC 24 V; 48 V, 125 V 24 V; 48 V, 125 V (50 - 60 Hz) -5 ... +5 V +11 V DC to +146 V DC
3 mA; at 24 V DC
Yes; 0.05 / 0.1 / 0.4 / 1.6 / 3.2 / 12.8 / 20 ms parameterizable with DC, 20 ms fixed with AC 0.05 ms 20 ms 0.05 ms 20 ms
Yes
No
1 000 m 600 m
Yes 1.5 mA
No
Yes Yes Yes
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
27
Technical specifications
Order number Diagnostic messages
· Monitoring the supply voltage
· Wire-break
· Short-circuit Diagnostics indication LED
· RUN LED
· ERROR LED
· Monitoring of the supply voltage (PWRLED)
· Channel status display
· for channel diagnostics
· for module diagnostics Potential separation Potential separation channels
· between the channels
· between the channels, in groups of
· between the channels and backplane bus Permissible potential difference
between different circuits Isolation
Isolation tested with Ambient conditions Ambient temperature during operation
· horizontal installation, min.
· horizontal installation, max.
· vertical installation, min.
· vertical installation, max. Decentralized operation
Prioritized startup Dimensions
Width Height Depth Weights Weight, approx.
6ES7521-7EH00-0AB0
No Yes; To I < 550 µA No
Yes; Green LED Yes; Red LED No
Yes; Green LED Yes; Red LED Yes; Red LED
Yes 1 Yes
146 V DC/132 V AC
2 000 V DC
0 °C 60 °C 0 °C 40 °C
Yes
35 mm 147 mm 129 mm
240 g
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
28
Manual, 12/2016, A5E35681478-AC
Technical specifications
Power reduction (derating) in relation to the mounting position and ambient temperature (per module)
The following graphs show the number of channels (CHx) that can be used simultaneously in relation to the mounting position of the S7-1500/ET 200MP automation system and the ambient temperature.
Figure 6-1 Information on channels used simultaneously (per module):
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
29
Dimensional drawing
A
A.1
Dimensional drawing
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of the DI 16x24...125VUC HF module
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
30
Manual, 12/2016, A5E35681478-AC
Dimensional drawing A.1 Dimensional drawing
Figure A-2 Dimension drawing of the DI 16x24...125VUC HF module, side view with open front cover
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
31
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When a GSD file is used to configure a module, dependencies can arise when "assigning the parameters".
There are no dependencies for this module. You can assign the individual parameters in any combination.
Parameter assignment in the user program
You have the option to reconfigure the module in RUN (e.g. the input delay values of selected channels can be edited without having an effect on the other channels).
Parameter assignment in RUN
The "WRREC" instruction is used to transfer the parameters to the module using data records 0 to 15. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You obtain the diagnostics data records 0 and 1 with the read back parameter data records 0 and 1. You can find additional information in the Interrupts section of the device manual for the PROFIBUS DP interface module in the Internet.
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
32
Manual, 12/2016, A5E35681478-AC
Parameter data records B.2 Structure of the parameter data records
B.2
Structure of the parameter data records
Assignment of data record and channel
For the configuration with 1 x 16-channel, the parameters are located in data records 0 to 15 and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 ... Data record 14 for channel 14 Data record 15 for channel 15 For the configuration as a 4 x 8-channel module, the module has 4 submodules with eight channels each. The parameters for the channels are located in data records 0 to 7 and are assigned as follows: Data records 0 to 7 for channels 0 to 7 (submodule 1) Data records 0 to 7 for channels 8 to 15 (submodule 2) Address the respective submodule for data record transfer.
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
Manual, 12/2016, A5E35681478-AC
33
Parameter data records B.2 Structure of the parameter data records
Data record structure
The figure below shows the structure of data record 0 for channel 0 as an example. The structure is identical for channels 1 to 15. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Bytes 0 to 3
Digital input module DI 16x24...125VUC HF (6ES7521-7EH00-0AB0)
34
Manual, 12/2016, A5E35681478-AC
SIMATIC
S7-1500/ET 200MP DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Ad_d_re_ss_s_pa_c_e __________4_ _Di_ag_n_os_tic_a_la_rm_s_________5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_
09/2016
A5E03485975-AD
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03485975-AD 09/2016 Subject to change
Copyright © Siemens AG 2013 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change:
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
4
Manual, 09/2016, A5E03485975-AD
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
Manual, 09/2016, A5E03485975-AD
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
4 Address space ...................................................................................................................................... 14
4.1
Address space ....................................................................................................................... 14
5 Diagnostic alarms ................................................................................................................................. 18
5.1
Status and error displays ....................................................................................................... 18
6 Technical specifications ........................................................................................................................ 20
A Dimensional drawing............................................................................................................................. 23
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
6
Manual, 09/2016, A5E03485975-AD
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
Manual, 09/2016, A5E03485975-AD
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
8
Manual, 09/2016, A5E03485975-AD
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
Manual, 09/2016, A5E03485975-AD
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
10
Manual, 09/2016, A5E03485975-AD
Product overview
2.1
Properties
Article number
6ES7521-1FH00-0AA0
View of the module
2
Properties
Figure 2-1 View of the DI 16x230VAC BA module
The module has the following technical properties: 16 digital inputs; electrically isolated in groups of 4 Rated input voltage 120/230 V AC Suitable for switches and 2-/3-/4-wire AC proximity switches (alternating voltage)
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
Manual, 09/2016, A5E03485975-AD
11
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware version of the module
Firmware update Identification data I&M0 to I&M3 Module-internal Shared Input (MSI)
V1.0.0 or higher V1.0.0 or higher V2.0.0 or higher
Configurable submodules / submodules for Shared Device
Configurable after interface module IM 155-5 DP ST
V2.0.0 or higher V2.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
V12 or higher
X
V12 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 or higher
X
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front door
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
12
Manual, 09/2016, A5E03485975-AD
Wiring
3
This section contains the block diagram of the module and outlines various wiring options. You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Note Do not insert the potential jumpers included with the front connector!
Wiring and block diagram
The figure below shows you how to wire the module and the assignment of the channels to the addresses (input byte a to input byte b).
Backplane bus interface
CHx
xN Supply voltage AC
RUN
ERROR
Figure 3-1 Block diagram and terminal assignment
Channel or channel status LED (green) Status display LED (green) Error display LED (red)
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
Manual, 09/2016, A5E03485975-AD
13
Address space
4
4.1
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
The letters "a to d" are printed on the module - "EB a", for example, stands for module start address input byte a.
Configuration options of DI 16x230VAC BA
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 1 Configuration options
Configuration
1 x 16-channel without value status 2 x 8-channel without value status 1 x 16-channel with value status for module-internal shared input with up to 4 submodules
Short designation/ module name in the
GSD file
DI 16x230VAC BA
DI 16x230VAC BA S
DI 16x230VAC BA MSI
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3 or higher
V12 or higher
X
V13 Update 3 or higher (PROFINET IO only)
V13 Update 3 or higher (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the DI 16x230VAC BA MSI module.
An additional bit is assigned to each channel for the value status. In contrast to the modules with diagnostics capability, the module only shows information regarding the parameter assignment of the first submodule (basic submodule) in the value status.
The module does not supply a value status for the read-in digital value.
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
14
Manual, 09/2016, A5E03485975-AD
Address space 4.1 Address space
Address space for configuration as DI 16x230VAC BA
The following figure shows the address space allocation for the configuration as 16-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address.
Figure 4-1 Address space for configuration as 16-channel DI 16x230VAC BA
Address space for configuration as 2 x 8-channel DI 16x230VAC BA S
For the configuration as a 2 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Contrary to the 1 x 16-channel module configuration, each of the two submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 2 x 8-channel DI 16x24VDC SRC BA S
Address space for configuration as 1 x 16-channel DI 16x230VAC BA MSI
The channels 0 to 15 of the module are copied in up to four submodules with configuration 1 x 16-channel module (Module-internal shared input, MSI). Channels 0 to 15 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels.
The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
Manual, 09/2016, A5E03485975-AD
15
Address space 4.1 Address space
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status is not relevant. For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the basic submodule parameters have not yet been assigned (not ready). The figure below shows the assignment of the address space with submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 16-channel DI 16x230VAC BA MSI
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
16
Manual, 09/2016, A5E03485975-AD
Address space 4.1 Address space
The figure below shows the assignment of the address space with submodules 3 and 4.
Reference
Figure 4-4 Address space for configuration as 1 x 16-channel DI 16x230VAC BA MSI
You can find information on the module-internal shared input/shared output (MSI/MSO) function in the section Module-internal shared input/shared output (MSI/MSO) of the function manual PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856).
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
Manual, 09/2016, A5E03485975-AD
17
Diagnostic alarms
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of the DI 16x230VAC BA.
5
Figure 5-1 LED displays of the module DI 16x230VAC BA
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
18
Manual, 09/2016, A5E03485975-AD
Diagnostic alarms 5.1 Status and error displays
Meaning of the LED displays
The following table explains the meaning of the status and error displays.
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On
Flashes
Off Off Flashes
Module starts up Module is ready Hardware defective
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Replace the module.
CHx LED
Table 5- 2 CHx status display
LED CHx Off On
Meaning 0 = Status of the input signal
1 = Status of the input signal
Remedy ---
---
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
Manual, 09/2016, A5E03485975-AD
19
Technical specifications
6
Technical specifications of the DI 16x230VAC BA
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7521-1FH00-0AA0
DI 16x230VAC BA FS01 V2.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V12 / V12
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
DI
Yes
Counters
No
MSI
Yes
Power
Power consumption from the backplane bus
1 W
Power loss
Power loss, typ.
4.9 W
Digital inputs Number of inputs Configurable digital inputs Sinking/sourcing input Input characteristic curve acc. to IEC 61131, type 1 Input voltage Type of input voltage Rated value (AC) for signal "0" for signal "1" Input current for signal "1", typ.
16 No Sinking input Yes
AC 230 V; 120/230 V AC, 50 / 60 Hz 0 V AC to 40 V AC 79 V AC to 264 V AC
11 mA; at 230 V AC and 5.5 mA at 120 V AC
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
20
Manual, 09/2016, A5E03485975-AD
Technical specifications
Input delay (for rated value of input voltage)
For standard inputs
· Configurable
No
6ES7521-1FH00-0AA0
· with "0" to "1", max.
25 ms
· with "1" to "0", max.
25 ms
For interrupt inputs
· Configurable
No
for technological functions
· Configurable
No
Cable length shielded, max. unshielded, max. Encoders Connectable encoders 2-wire sensor
· Permitted quiescent current (2-wire sensor), max.
1000 m 600 m
Yes 2 mA
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
No
Interrupts
Diagnostics interrupt
No
Hardware interrupt
No
Diagnostics alarms
Monitoring of supply voltage
No
Wire break
No
Short-circuit
No
Diagnostics indicator LED
RUN LED
Yes; green LED
ERROR LED
Yes; red LED
Monitoring of supply voltage (PWR LED)
No
Channel status display
Yes; green LED
For channel diagnostics
No
For module diagnostics
Yes; red LED
Electrical isolation
Electrical isolation of channels
Between the channels
No
Between the channels, in groups of
4
Between the channels and backplane bus
Yes
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
Manual, 09/2016, A5E03485975-AD
21
Technical specifications
Permitted potential difference Between different circuits
Isolation Isolation tested with Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed mode Prioritized startup Dimensions Width Height Depth Weights Weight, approx.
6ES7521-1FH00-0AA0
250 V AC between the channels and the backplane bus; 500 V AC between the channels
3100 V DC
0 °C 60 0 °C 40 °C
Yes
35 mm 147 mm 129 mm
300 g
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
22
Manual, 09/2016, A5E03485975-AD
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DI 16x24VAC BA module
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
Manual, 09/2016, A5E03485975-AD
23
Dimensional drawing
Figure A-2 Dimensional drawing of the DI 16x24VAC BA module, side view with open front cover
DI 16x230VAC BA Digital Input Module (6ES7521-1FH00-0AA0)
24
Manual, 09/2016, A5E03485975-AD
SIMATIC
S7-1500/ET 200MP Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Ad_d_re_ss_s_pa_c_e __________4_ _Di_ag_n_os_tic_s_al_ar_m_s ________5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_
09/2016
A5E32364205-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E32364205-AC 11/2016 Subject to change
Copyright © Siemens AG 2014 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change:
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
4
Manual, 09/2016, A5E32364205-AC
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
4 Address space ...................................................................................................................................... 15
4.1
Address space ....................................................................................................................... 15
5 Diagnostics alarms................................................................................................................................ 20
5.1
Status and error displays ....................................................................................................... 20
6 Technical specifications ........................................................................................................................ 22
A Dimensional drawing............................................................................................................................. 26
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
6
Manual, 09/2016, A5E32364205-AC
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
8
Manual, 09/2016, A5E32364205-AC
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
10
Manual, 09/2016, A5E32364205-AC
Product overview
2.1
Properties
Article number
6ES7522-1BL10-0AA0
View of the module
2
Figure 2-1 View of the DQ 32x24VDC/0.5A BA module
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
11
Product overview 2.1 Properties
Properties
The digital module has the following technical properties: 32 DO; electrically isolated in groups of 8 Rated output voltage 24 V DC Rated output current 0.5 A per channel Suitable for solenoid valves, DC contactors, and indicator lights Hardware compatible with digital output module DQ 16x24VDC/0.5A BA
(6ES7522-1BH10-0AA0) The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware version of the module
Firmware update Identification data I&M0 to I&M3 Module-internal Shared Output (MSO)
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
Configurable submodules / submodules for Shared Device
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
V13 or higher
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
--- / X
V13 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts:
Front connector (push-in terminals) including cable tie
Labeling strips
U connector
Universal front door
You can find additional information on accessories in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
12
Manual, 09/2016, A5E32364205-AC
Wiring
3
This section contains the block diagram of the module and outlines various wiring options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
13
Wiring
Wiring and block diagram
The example in the following figure shows the terminal assignment and the assignment of the channels to the addresses (output byte a to output byte d).
Backplane bus interface
xL+
Supply voltage 24 V DC
xM
Ground
CHx RUN ERROR PWR
Figure 3-1 Block diagram and terminal assignment
Channel or channel status LED (green) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
Note
Upon activation of the 24 V supply voltage, there is a "1" signal at the module outputs for approx. 50 s.
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
14
Manual, 09/2016, A5E32364205-AC
Address space
4
4.1
Address space
The module can be configured in various ways in STEP 7. Depending on the configuration, additional/different addresses are assigned in the process image output/input.
Configuration options of DQ 32x24VDC/0.5A BA
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different short designations/module names.
The following configurations are possible:
Table 4- 1 Configuration options
Configuration
Short designation/module name in the GSD file
1 x 32-channel without value status 4 x 8-channel without value status
DQ 32x24VDC/0.5A BA DQ 32x24VDC/0.5A BA S
1 x 32-channel with value status for module- DQ 32x24VDC/0.5A BA MSO internal Shared Output with up to 4 submodules
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3 or higher
V13 or higher
X
V13 Update 3 or higher
(PROFINET IO only)
X
(PROFINET IO only)
V13 Update 3 or higher
(PROFINET IO only)
X
(PROFINET IO only)
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
15
Address space 4.1 Address space
Address space for configuration as 1 x 32-channel DQ 32x24VDC/0.5A BA
The figure below shows the address space assignment for configuration as a 1 x 32-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. The letters "a to d" are printed on the module- "QB a", for example, stands for module start address output byte a.
Figure 4-1 Address space for configuration as 1 x 32-channel DQ 32x24VDC/0.5A BA with value status
Address space for configuration as 4 x 8-channel DQ 32x24VDC/0.5A BA S
For the configuration as a 4 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Unlike the 1 x 32-channel module configuration, each of the four submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 4 x 8-channel DQ 32x24VDC/0.5A BA S
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
16
Manual, 09/2016, A5E32364205-AC
Address space 4.1 Address space
Address space for configuration as 1 x 32-channel DQ 32x24VDC/0.5A BA MSO
For the configuration as a 1 x 32-channel module (module-internal Shared Output, MSO), channels 0 to 31 of the module are copied to multiple submodules. Channels 0 to 31 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device: The IO controller to which submodule 1 is assigned has write access to outputs 0 to 31. The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs
0 to 31. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: Value is incorrect, for example, because the supply voltage is missing. IO controller of the basic submodule is in STOP mode. For the 2nd to 4th submodule (=MSO submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: Value is incorrect, for example, because the supply voltage is missing. IO controller of the basic submodule is in STOP mode. The basic submodule is not yet configured.
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
17
Address space 4.1 Address space
The figure below shows the assignment of the address space for submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 32-channel DQ 32x24VDC/0.5A BA MSO with value status
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
18
Manual, 09/2016, A5E32364205-AC
Address space 4.1 Address space
The figure below shows the assignment of the address space with submodules 3 and 4.
Reference
Figure 4-4 Address space for configuration as 1 x 32-channel DQ 32x24VDC/0.5A BA MSO with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
19
Diagnostics alarms
5
The module has no selectable diagnostics. Diagnostics alarms, for example, cannot be output with STEP 7 (TIA Portal).
5.1
Status and error displays
LED displays
The figure below shows you the LED displays (status and error displays) of the DQ 32x24VDC/0.5A BA.
Figure 5-1 LED displays of the module DQ 32x24VDC/0.5A BA
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
20
Manual, 09/2016, A5E32364205-AC
Diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The tables below explain the meaning of the status and error displays.
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On
Flashes
Off Off Flashes
Module is starting up. Module is ready. Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Replace the module.
LED PWR1/PWR2/PWR3/PWR4
Table 5- 2 PWR1/PWR2/PWR3/PWR4 status display
LED PWRx Off On
Meaning Supply voltage L+ too low or missing.
Supply voltage L+ is present and OK.
Remedy Check the L+ supply voltage.
---
LED CHx
Table 5- 3 CHx status display
LED CHx Off On
Meaning 0 = Status of the output signal.
1 = Status of the output signal.
Remedy ---
---
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
21
Technical specifications
6
Technical specifications of the DQ 32x24VDC/0.5 A BA
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7522-1BL10-0AA0
DQ 32x24VDC/0,5A BA FS01 V1.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V13 / V13
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
DQ
Yes
DQ with energy-saving function
No
PWM
No
Oversampling
No
MSO
Yes
Supply voltage
Rated value (DC) Valid range, low limit (DC) Valid range, high limit (DC) Reverse polarity protection
Input current
24 V 20.4 V 28.8 V Yes; through internal protection with 7 A per group
Current consumption, max.
60 mA
Output voltage
Rated value (DC)
24 V
Power Power consumption from the backplane bus Power loss
1.15 W
Power loss, typ.
3.8 W
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
22
Manual, 09/2016, A5E32364205-AC
Technical specifications
Digital outputs Number of outputs Sourcing output Short-circuit protection · Response threshold, typ.
6ES7522-1BL10-0AA0
32 Yes Yes 1 A
Limitation of inductive shutdown voltage to Control of a digital input Switching capacity of outputs With resistive load, max. With lamp load, max. Load resistance range Low limit High limit Output voltage For signal "1", min. Output current For signal "1" rated value For signal "1" permitted range, max. For signal "0" residual current, max. Output delay with resistive load "0" to "1", max. "1" to "0", max. Parallel connection of two outputs For logic operations For increased performance For redundant control of a load Switching frequency With resistive load, max. With inductive load, max. With lamp load, max. Total current of outputs Current per channel, max. Current per group, max. Current per module, max. Cable length shielded, max. unshielded, max. Isochronous mode
L+ (-53 V) Yes
0.5 A 5 W
48 12 k
L+ (-0.8 V)
0.5 A 0.5 A 0.5 mA
100 µs 500 µs
Yes No Yes
100 Hz 0.5 Hz; according to IEC 60947-5-1, DC-13 10 Hz
0.5 A; see additional description in the manual 4 A; see additional description in the manual 16 A; see additional description in the manual
1000 m 600 m
Isochronous mode (application synchronized up to No terminal)
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
23
Technical specifications
Interrupts/diagnostics/status information Diagnostics function Substitute values can be applied Interrupts Diagnostic interrupt Diagnostics alarms Monitoring of supply voltage Wire break Short-circuit Group error Diagnostics indicator LED RUN LED ERROR LED Monitoring of supply voltage (PWR LED) Channel status display For channel diagnostics For module diagnostics Electrical isolation Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Insulation Insulation tested with Distributed operation Prioritized startup Dimensions Width Height Depth Weights Weight, approx. Miscellaneous Note:
6ES7522-1BL10-0AA0
No No
No
No No No No
Yes; green LED Yes; red LED Yes; green LED Yes; green LED No No
No 8 Yes
707 V DC (type test)
Yes
25 mm 147 mm 129 mm
280 g
Delivery includes 40-pin push-in front connector
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
24
Manual, 09/2016, A5E32364205-AC
Technical specifications Power reduction (derating) to aggregate current of outputs (per group)
The following graphs show the loading capacity of the outputs in relation to the mounting position of the S71500 automation system/ET 200MP distributed I/O system and the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Details on aggregate current of outputs (per group)
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
25
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DQ 32x24VDC/0.5A BA module
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
26
Manual, 09/2016, A5E32364205-AC
Dimensional drawing
Figure A-2 Dimensional drawing of the DQ 32x24VDC/0.5A BA module, side view with open front cover
Digital output module DQ 32x24VDC/0.5A BA (6ES7522-1BL10-0AA0)
Manual, 09/2016, A5E32364205-AC
27
SIMATIC
S7-1500/ET 200MP Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_
06/2018
A5E35683508-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E35683508-AC 08/2018 Subject to change
Copyright © Siemens AG 2015 - 2018. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change: New licensing conditions and copyright information of the Open Source Software The module features a switching cycle counter as of firmware version V1.1.0.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
4
Manual, 06/2018, A5E35683508-AC
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 10
2.1
Properties ................................................................................................................................ 10
2.2 2.2.1
Functions ................................................................................................................................13 Switching cycle counter ..........................................................................................................13
3 Wiring ................................................................................................................................................... 15
4 Parameters/address space ................................................................................................................... 17
4.1
Parameters .............................................................................................................................17
4.2
Description of parameters.......................................................................................................19
4.3
Address space ........................................................................................................................20
5 Interrupts/diagnostics alarms................................................................................................................. 26
5.1
Status and error displays ........................................................................................................26
5.2
Interrupts .................................................................................................................................28
5.3
Diagnostics alarms..................................................................................................................29
6 Technical specifications ........................................................................................................................ 30
A Dimensional drawing............................................................................................................................. 35
A.1
Dimensional drawing...............................................................................................................35
B Parameter data records......................................................................................................................... 37
B.1
Parameter assignment............................................................................................................37
B.2
Structure of parameter data sets DS 64 - 95 ..........................................................................39
B.3
Structure of data set DS 129 ..................................................................................................40
B.4
Structure of data set DS 130 ..................................................................................................42
B.5
Structure of data set DS 131 ..................................................................................................44
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
6
Manual, 06/2018, A5E35683508-AC
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
7
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
8
Manual, 06/2018, A5E35683508-AC
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
9
Product overview
2.1
Properties
Article number
6ES7522-1BL01-0AB0
View of the module
2
Figure 2-1 View of the DQ 32x24VDC/0.5A HF module
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
10
Manual, 06/2018, A5E35683508-AC
Product overview 2.1 Properties
Properties
The module has the following technical properties: 32 DO; electrically isolated in groups of 8 Rated output voltage 24 V DC Rated output current 0.5 A per channel Configurable substitute values (per channel) Configurable diagnostics (per channel) Suitable for solenoid valves, DC contactors, and indicator lights Switching cycle counter for connected actuators, e.g. solenoid valves Hardware compatible with digital output module:
DQ 16x24VDC/0.5A ST (6ES7522-1BH00-0AB0) DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0) DQ 32x24VDC/0.5A ST (6ES7522-1BL00-0AB0) The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Isochronous mode Module-internal Shared Output (MSO)
Configurable submodules / submodules for Shared Device Switching cycle counter
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
V1.1.0 or higher
Configuration software
STEP 7 (TIA Portal) as of V13, SP1
with HSP 0143
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
X
--- / X
X
X
X
X
X
---
X
X
(PROFINET IO only)
(PROFINET IO only)
X
X
(PROFINET IO only)
(PROFINET IO only)
as of V15.0 with HSP0247
X
· PROFINET IO only
(PROFINET IO only)
· Central operation with a S7-1500 CPU is supported
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
11
Product overview 2.1 Properties
Compatibility
The following table shows the compatibility of the modules and the dependencies between hardware functional status (FS) and firmware version (FW) used:
Hardware functional status FS01
FS02
Firmware version
V1.0.0 V1.1.0
Note
Upgrade to V1.1.0 not possible Upgrade and downgrade possible between V1.1.0 and higher
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front cover
Other components
The following component must be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
12
Manual, 06/2018, A5E35683508-AC
2.2
Functions
Product overview 2.2 Functions
2.2.1
Switching cycle counter
The function records the number of switching cycles of the output and thus the switching cycles of a connected actuator, such as those of solenoid valves. When the specified number of switching cycles is reached, the "Limit value warning" maintenance interrupt is triggered, provided it is configured and enabled. When replacing the actuator, you can reset the switching cycle counter from the user program.
When replacing modules, you have the option of pre-initializing the switching cycle counter from the user program.
Typical areas of application:
Recording the number of switching cycles of the connected devices, e.g. solenoid valves or load contactors
Predictive maintenance
Advantages
You configure this function instead of programming.
"Monitoring" of each individual channel is possible. You can select which outputs are "monitored".
You can adapt the plant configuration flexibly and individually.
Easy to service and maintain. You can enable and disable the switching cycle counter via the user program.
Increase in plant availability. You can schedule actuator replacement in advance for the next maintenance cycle.
Requirement
Firmware version as of V1.1.0 of the module.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
13
Product overview 2.2 Functions
Configuration
You configure the switching cycle counter with the following parameters: Switching cycle counter enabled/disabled Trigger maintenance interrupt when the limit is reached Set limit for maintenance interrupt
How it works
The module counts the switching cycles by evaluating the rising edges of an output signal. If the module detects a rising edge, the switching cycle counter (24-bit) for the respective channel is incremented. After an overflow of the switching cycle counter, it starts again with 0.
If you activate the "Maintenance switching cycles" parameter, the "Limit warning" of the maintenance interrupt is triggered when the limit is exceeded. Alternatively, activate the maintenance interrupt in the parameter data sets starting at DS 64.
The current counter states are stored on the module cyclically (approx. every 20 seconds) and retentively. The switching cycle counters are reset each time the module is restarted (power off/on).
You activate the function with the "Switching cycle counter" parameter or in the parameter data sets starting at DS 64.
You can read the current counter states with data set DS 129. Data set DS 129 contains the counter status for each channel in UDINT format.
You can read the limits for each channel in UDINT format with data set DS 130.
Data set DS 131 enables you to overwrite the current counter value for each switching cycle counter.
You can set a limit for each switching cycle counter with the "Switching cycle limit" parameter or with data set DS 131.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
14
Manual, 06/2018, A5E35683508-AC
Wiring
3
This section contains the block diagram of the module and outlines various wiring options. You can find information on wiring the front connector, establishing a cable shield, etc. in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Wiring and block diagram
The example in the following figure shows the terminal assignment and the assignment of the channels to the addresses (output byte a to output byte d).
Backplane bus interface
xL+ Supply voltage 24 V DC xM Ground CHx Channel or channel status LED
(green/red)
MAINT RUN ERROR PWR
Figure 3-1 Block diagram and terminal assignment
LED maintenance display (yellow) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
15
Wiring
Note When the 24 V supply voltage is switched on at each channel, there is a "1" signal at the module outputs for approx. 50 s.
Tip: Using the potential jumpers
Use the potential jumpers supplied with the front connector if you want to connect the four load groups to the same potential (non-isolated). This helps you to avoid having to terminate two wires to one terminal. Proceed as follows: 1. Connect the 24 V DC supply voltage to terminals 19 and 20. 2. Insert the potential jumpers between the following terminals:
9 and 29 (L+) 10 and 30 (M) 19 and 39 (L+) 20 and 40 (M). 3. Insert the jumpers between terminals 29 and 39, as well as 30 and 40. 4. Use the terminals 9 and 10 to loop the potential to the next module.
Figure 3-2 Using the potential jumpers
Note Ensure that the maximum current load of 8 A per potential jumper is not exceeded.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
16
Manual, 06/2018, A5E35683508-AC
Parameters/address space
4
4.1
Parameters
DQ 32x24VDC/0.5A HF parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
For parameter assignment in the user program, the parameters are transferred to the module using the WRREC instruction (parameter assignment in RUN) and data sets; see section Parameter assignment (Page 37)
Table 4- 1 Configurable parameters and their defaults
Parameters
Diagnostics · No supply voltage L+
· Short circuit to ground
· Maintenance switching cycles
· Switching cycle counter
Range of values
Default setting
Parameter assignment in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog as of STEP 7, V13 SP1 or GSD file PROFINET IO
GSD file PROFIBUS DP
Yes/No
No
Yes
Channel*
Channel group
(CH0 to CH7, CH8 to CH15,
CH16 to CH23, CH24 to CH31)
Yes/No
No
Yes
Channel*
Channel group
(CH0 to CH7, CH8 to CH15,
CH16 to CH23, CH24 to CH31)
Yes/No
No
Yes
Channel
---
(as of V15.0 with HSP0247)
Yes/No
No
Yes
Channel
---
(as of V15.0 with HSP0247)
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
17
Parameters/address space 4.1 Parameters
Parameters
· Wire break Reaction to CPU STOP Switching cycle limits Switching cycle limit
Range of values Default setting
Yes/No
No
· Turn off
Turn off
· Keep last value
· Output substitute value 1
Parameter assignment in RUN
Yes
Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog as of STEP 7, V13 SP1 or GSD file PROFINET IO
GSD file PROFIBUS DP
Channel*
Channel group
(CH0 to CH7, CH8 to CH15,
CH16 to CH23, CH24 to CH31)
Channel
Channel
0 ... 16777214 0
Yes
Channel
---
(as of V15.0 with HSP0247)
* If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault. You can prevent this message burst by assigning the diagnostics function to one channel only.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
18
Manual, 06/2018, A5E35683508-AC
Parameters/address space 4.2 Description of parameters
4.2
Description of parameters
No supply voltage
Enabling of the diagnostics, for lacking or insufficient supply voltage L+.
Short circuit to ground
Enabling of the diagnostics if a short-circuit of the actuator supply (CHx) to ground occurs.
Maintenance switching cycles
You use this parameter to enable the maintenance interrupt "Limit value warning" when the switching cycle limit is violated.
You configure the limit with the parameter "Switching cycle limit" for each channel CHx.
Switching cycle counter
Channel-by-channel enable of switching cycle counter (Page 13).
Wire break
Enabling of the diagnostics if the line to the actuator is broken.
Reaction to CPU STOP
Determines the reaction of the output when the CPU goes into the STOP state or when the connection to the CPU is interrupted.
Switching cycle limit
Defines the limit channel-by-channel. If this value is exceeded, the "Limit value warning" maintenance interrupt is signaled.
Enter an integer value between 0 and 16777214. Refer to the data sheet of the connected actuator. We recommend that you do not enter this maximum value, but instead set it to 80% or 90%, for example, so that you have enough time to replace the actuator as a preventive measure.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
19
Parameters/address space 4.3 Address space
4.3
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the outputs/inputs.
Configuration options of DQ 32x24VDC/0.5A HF
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 2 Configuration options Configuration
Abbreviation/module name in the GSD file
1 x 32-channel without value status 1 x 32-channel with value status
4 x 8-channel without value status
4 x 8-channel with value status
1 x 32-channel with value status for module-internal Shared Output with up to 4 submodules
DQ 32x24VDC/0.5A HF
DQ 32x24VDC/0.5A HF QI
DQ 32x24VDC/0.5A HF S
DQ 32x24VDC/0.5A HF S QI
DQ 32x24VDC/0.5A HF MSO
Configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7 (TIA Portal) as of V13 SP1 with HSP 0143
X
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3
or higher
X
X
X
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
Note Substitute value behavior in shared device operation with the following configuration (V1.0 only): · 4 x 8-channel with / without value status
If the system is in shared device mode and one of the IO controllers involved goes into STOP or fails due to a communication failure, for example, all submodules of the output module perform the configured substitute value reaction (e.g. shutdown).
This means that even when only one IO controller fails, the other IO controllers associated with the shared device no longer control the assigned submodule of the output module.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
20
Manual, 06/2018, A5E35683508-AC
Parameters/address space 4.3 Address space
Value status (Quality Information, QI)
The value status is always activated for the following module names: DQ 32x24VDC/0.5A HF QI DQ 32x24VDC/0.5A HF S QI DQ 32x24VDC/0.5A HF MSO An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Note The maintenance interrupt "Limit value warning" has no effect on the value status.
Address space for configuration as 32-channel DQ 32x24VDC/0.5A HF
The following figure shows the assignment of the address space for the configuration as a 32-channel module with value status. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. The letters "a to d" are printed onto the module. "QB a" stands for module start address output byte a.
Figure 4-1 Address space for configuration as 32-channel DQ 32x24VDC/0.5A HF with value status
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
21
Parameters/address space 4.3 Address space
Address space for configuration as 4 x 8-channel DQ 32x24VDC/0.5A HF S QI
For the configuration as a 4 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device.
The number of IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Contrary to the 1 x 32-channel module configuration, each of the four submodules has a freely assignable start address. The addresses for the respective value status of a submodule can also be assigned by the user.
Figure 4-2 Address space for configuration as 4 x 8-channel DQ 32x24VDC/0.5A HF S QI with value status
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
22
Manual, 06/2018, A5E35683508-AC
Parameters/address space 4.3 Address space
Address space for configuration as 1 x 32-channel DQ 32x24VDC/0.5A HF MSO
For the configuration as a 1 x 32-channel module (module-internal Shared Output, MSO), channels 0 to 31 of the module are copied to multiple submodules. Channels 0 to 31 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device: The IO controller to which submodule 1 is assigned has write access to outputs 0 to 31. The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs
0 to 31. The number of IO controllers depends on the interface module used. Observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule on which it occurs. For the first submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
23
Parameters/address space 4.3 Address space
The following figure shows the assignment of the address space for submodules 1 and 2 and the value status.
Figure 4-3 Address space for configuration as 1 x 32-channel DQ 32x24VDC/0.5A HF S MSO with value status
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
24
Manual, 06/2018, A5E35683508-AC
Parameters/address space 4.3 Address space
The following figure shows the assignment of the address space with submodules 3 and 4 and the value status.
Reference
Figure 4-4 Address space for configuration as 1 x 32-channel DQ 32x24VDC/0.5A HF S MSO with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
25
Interrupts/diagnostics alarms
5
5.1
Status and error displays
LED displays
The following figure shows the LED displays (status and error displays) of module.
Figure 5-1 LED displays of the DQ 32x24VDC/0.5A HF module
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
26
Manual, 06/2018, A5E35683508-AC
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The tables below explain the meaning of the status and error displays. Remedial measures for diagnostic reports can be found in section Diagnostics alarms (Page 29).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured
Indicates module errors (at least one error at one channel, e.g., short-circuit to ground). Hardware defective
Solution
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Evaluate the diagnostics data and eliminate the error (e.g., check the cables). Replace the module.
LED MAINT
Table 5- 2 MAINT status display
LED MAINT Off On
Meaning
0 = No maintenance interrupt is pending.
---
1 = The maintenance interrupt "Limit value
---
warning" is pending.
Solution
LED PWR1/PWR2/PWR3/PWR4
Table 5- 3 PWR1/PWR2/PWR3/PWR4 status display
LED PWRx Off On
Meaning Supply voltage L+ too low or missing
Supply voltage L+ is present and OK
Solution Check the L+ supply voltage.
---
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
27
Interrupts/diagnostics alarms 5.2 Interrupts
LED CHx
Table 5- 4 CHx status display
LED CHx Off On On
Meaning 0 = Status of the output signal
1 = Status of the output signal
· Wire break or short-circuit to ground · Supply voltage L+ missing or too low
Solution ---
---
· Correct the process wiring · Check the supply voltage.
5.2
Interrupts
The digital output module DQ 32x24VDC/0.5A HF supports diagnostic interrupts and maintenance interrupts
For detailed information on the error event, refer to the diagnostic interrupt organization block with the "RALRM" instruction (read additional interrupt information) and to the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: No supply voltage L+ Short circuit to ground Wire break Parameter assignment error
Maintenance interrupt
The module generates a maintenance interrupt at the following events: Limit value warning
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
28
Manual, 06/2018, A5E35683508-AC
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes for each diagnostics event on the module. You can read the diagnostics alarms, for example, in the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 5 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Short circuit to ground
Wire break*
Error code 1H
6H
Parameter assign- 10H ment error
Load voltage missing 11H Limit value warning 17H
Meaning Short-circuit or overload at the channel Actuator circuit impedance too high.
Wire break between the module and actuator Channel not connected (open)
Corrective measures Check the wiring/actuator. Check the ambient temperature. Use different actuator type or wire differently, e.g. use lines with bigger cross-section Connect the cable
· Disable diagnostics
· Connect an actuator to a resistor in the load resistance range
· The module cannot evaluate parameters for the channel
Correct the parameter assignment
· Incorrect parameter assignment
Supply voltage L+ of the module is missing
The configured limit for switching cycles has been exceeded.
Connect supply voltage L+ to module/channel
· Replace actuator as a precautionary measure
· Reset counter with DS131
* Wire break is also reported for short-circuit of actuator supply to L+. This can lead to inappropriate diagnostics for redundant load control.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
29
Technical specifications
6
Technical specifications of the DQ 32x24VDC/0.5 A HF
The following table shows the technical specifications as of 06/2018. You will find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/denpv/6ES7522-1BL01-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version Product function · I&M data Engineering with · STEP 7 TIA Portal configurable/integrated
as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Operating mode · DQ
· DQ with energy-saving function
· PWM
· Cam control (switching at comparison values)
· Oversampling
· MSO
· Integrated operating cycle counter Supply voltage
Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Input current Current consumption, max.
6ES7522-1BL01-0AB0
DQ 32x24VDC/0.5A HF FS02 V1.1.0
Yes; I&M0 to I&M3
V13 SP1 / -
V1.0 / V5.1
V2.3 / -
Yes No No No
No Yes Yes
24 V 20.4 V 28.8 V Yes; through internal protection with 7 A per group
60 mA
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
30
Manual, 06/2018, A5E35683508-AC
Technical specifications
Article number Output voltage
Rated value (DC) Power
Power available from the backplane bus Power loss
Power loss, typ. Digital outputs
Type of digital output Number of digital outputs Current-sourcing Short-circuit protection · Response threshold, typ. Limitation of inductive shutdown voltage to Controlling a digital input Switching capacity of the outputs · with resistive load, max.
· on lamp load, max. Load resistance range
· lower limit
· upper limit Output voltage
· for signal "1", min. Output current
· for signal "1" rated value
· for signal "1" permissible range, max.
· for signal "0" residual current, max. Output delay with resistive load
· "0" to "1", max.
· "1" to "0", max. Parallel switching of two outputs
· for logic links
· for uprating
· for redundant control of a load Switching frequency
· with resistive load, max.
· with inductive load, max.
· on lamp load, max.
6ES7522-1BL01-0AB0
24 V
1.1 W
3.5 W
Transistor 32 Yes Yes; Clocked electronically 1 A L+ (-53 V) Yes
0.5 A 5 W
48 12 k
L+ (-0.8 V)
0.5 A 0.5 A 0.5 mA
100 µs 500 µs
Yes No Yes
100 Hz 0.5 Hz; According to IEC 60947-5-1, DC-13 10 Hz
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
31
Technical specifications
Article number Total current of the outputs
· Current per channel, max.
· Current per group, max.
· Current per module, max. Cable length
· shielded, max.
· unshielded, max. Isochronous mode
Isochronous operation (application synchronized up to terminal) Execution and activation time (TCO), min. Bus cycle time (TDP), min. Interrupts/diagnostics/status information Diagnostics function Substitute values connectable Alarms · Diagnostic alarm Diagnostic messages · Monitoring the supply voltage
· Wire-break
· Short-circuit
· Group error Diagnostics indication LED
· RUN LED
· ERROR LED
· MAINT LED
· Monitoring of the supply voltage (PWRLED)
· Channel status display
· for channel diagnostics
· for module diagnostics Potential separation Potential separation channels
· between the channels
· between the channels, in groups of
· between the channels and backplane bus Isolation
Isolation tested with
6ES7522-1BL01-0AB0
0.5 A; see additional description in the manual 4 A; see additional description in the manual 16 A; see additional description in the manual
1 000 m 600 m
Yes 70 µs 250 µs
Yes Yes
Yes
Yes Yes Yes Yes
Yes; Green LED Yes; Red LED Yes; yellow LED Yes; Green LED
Yes; Green LED Yes; Red LED Yes; Red LED
No 8 Yes
707 V DC (type test)
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
32
Manual, 06/2018, A5E35683508-AC
Technical specifications
Article number
6ES7522-1BL01-0AB0
Standards, approvals, certificates
Suitable for safety-related tripping of standard Yes; From FS02 modules
Highest safety class achievable for safety-related tripping of standard modules
· Performance level according to ISO 13849- PL d 1
· Category according to ISO 13849-1
Cat. 3
· SILCL according to IEC 62061
SILCL 2
Decentralized operation Prioritized startup
Dimensions Width Height Depth
Weights Weight, approx.
Yes
35 mm 147 mm 129 mm
280 g
Residual current at signal state "0":
Note Due to the Diagnostics: Wire break function, there is a low level of residual current in the "0" signal state at the output, which may cause the display diodes to flicker. This residual current does not depend on the setting for the wire break diagnostics parameter.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
33
Technical specifications Power reduction (derating) to aggregate current of outputs (per group)
The following graphs show the loading capacity of the digital outputs in relation to the mounting position of the S71500 / Distributed I/O System ET 200MP automation system and the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Details on aggregate current of outputs (per group)
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
34
Manual, 06/2018, A5E35683508-AC
Dimensional drawing
A
A.1
Dimensional drawing
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of the DQ 32x24VDC/0.5A HF module
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
35
Dimensional drawing A.1 Dimensional drawing
Figure A-2 Dimension drawing of the DQ 32x24VDC/0.5A HF module, side view with open front cover
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
36
Manual, 06/2018, A5E35683508-AC
Parameter data records
B
B.1
Parameter assignment
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When a GSD file is used to configure a module, dependencies can arise when "setting the parameters".
There are no dependencies for this module. You can assign the individual parameters in any combination.
Parameter assignment in the user program
You have the option of changing the module parameters in RUN (e.g. the reaction of the individual channels to CPU STOP can be changed in RUN without affecting the other channels)
Changing parameters in RUN
The WRREC instruction is used to transfer the parameters to the module using data sets 64 to 95. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
37
Parameter data records B.1 Parameter assignment
Assignment of data record and channel
For the configuration as a 1 x 32-channel module, the parameters are located in data sets 64 to 95 and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 ... Data set 94 for channel 30 Data set 95 for channel 31 For the configuration as a 4 x 8-channel module, the module has 4 submodules with eight channels each. The parameters for the channels are located in data records 64 to 71 and are assigned as follows: Data records 64 to 71 for channels 0 to 7 (submodule 1) Data records 64 to 71 for channels 8 to 15 (submodule 2) Data sets 64 to 71 for channels 16 to 23 (submodule 3) Data sets 64 to 71 for channels 24 to 31 (submodule 4) Address the respective submodule for data record transfer.
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
38
Manual, 06/2018, A5E35683508-AC
Parameter data records B.2 Structure of parameter data sets DS 64 - 95
B.2
Structure of parameter data sets DS 64 - 95
Structure of data sets 64 to 95
The figure below shows the structure of data set 64 for channel 0 as an example. The structure is identical for channels 1 to 31. The values in byte 0 and byte 1 are fixed and may not be changed.
Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 64: Bytes 0 to 3
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
39
Parameter data records B.3 Structure of data set DS 129
B.3
Structure of data set DS 129
Structure of data set 129
You can read the current states of the switching cycle counters with data set 129. The counter status is supplied for each channel in UDINT format. The length of the data set results from the number of channels in the selected submodule.
The following figure shows you the structure of data set 129 for 32 channels.
Figure B-2 Structure of data set 129: Byte 0 to 127
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
40
Manual, 06/2018, A5E35683508-AC
Parameter data records B.3 Structure of data set DS 129 The following figure shows you the structure of data set 129 for 4 submodules with 8 channels each.
Figure B-3 Structure of data set 129: Byte 0 to 31
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
41
Parameter data records B.4 Structure of data set DS 130
B.4
Structure of data set DS 130
Structure of data set 130
The limits of the switching cycle counters are read out with data set 130. The set value is supplied for each channel in UDINT format. The length of the data set results from the number of channels in the selected submodule.
The following figure shows you the structure of data set 130 for 32 channels.
Figure B-4 Structure of data set 130: Byte 0 to 127
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
42
Manual, 06/2018, A5E35683508-AC
Parameter data records B.4 Structure of data set DS 130 The following figure shows you the structure of data set 130 for 4 submodules with 8 channels each.
Figure B-5 Structure of data set 130: Byte 0 to 31
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
Manual, 06/2018, A5E35683508-AC
43
Parameter data records B.5 Structure of data set DS 131
B.5
Structure of data set DS 131
Structure of data set 131
The following figure shows you the structure of data set 131. Enable a parameter by setting the corresponding bit to "1".
Figure B-6 Structure of data set 131: Bytes 0 to 7
Digital output module DQ 32x24VDC/0.5A HF (6ES7522-1BL01-0AB0)
44
Manual, 06/2018, A5E35683508-AC
SIMATIC
S7-1500/ET 200MP Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Ad_d_re_ss_s_pa_c_e __________4_ _Di_ag_n_os_tic_s_al_ar_m_s ________5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_
09/2016
A5E32364017-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E32364017-AC 11/2016 Subject to change
Copyright © Siemens AG 2014 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change:
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
4
Manual, 09/2016, A5E32364017-AC
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual, 09/2016, A5E32364017-AC
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
4 Address space ...................................................................................................................................... 15
4.1
Address space ....................................................................................................................... 15
5 Diagnostics alarms................................................................................................................................ 19
5.1
Status and error displays ....................................................................................................... 19
6 Technical specifications ........................................................................................................................ 21
A Dimensional drawing............................................................................................................................. 25
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
6
Manual, 09/2016, A5E32364017-AC
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual, 09/2016, A5E32364017-AC
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
8
Manual, 09/2016, A5E32364017-AC
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual, 09/2016, A5E32364017-AC
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
10
Manual, 09/2016, A5E32364017-AC
Product overview
2.1
Properties
Article number
6ES7522-1BH10-0AA0
View of the module
2
Properties
Figure 2-1 View of the DQ 16x24VDC/0.5A BA module
The digital module has the following technical properties: 16 digital outputs, electrically isolated in groups of 8 Rated output voltage 24 V DC Rated output current 0.5 A per channel Suitable for solenoid valves, DC contactors, and indicator lights
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual, 09/2016, A5E32364017-AC
11
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware version of the module
Firmware update Identification data I&M0 to I&M3 Module-internal Shared Output (MSO)
Configurable submodules / submodules for Shared Device
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher,
or STEP 7 V5.5 SP3 or higher
V13 or higher
--- / X
V13 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts:
Front connector (push-in terminals) including cable tie
Labeling strips
U connector
Universal front door
You can find additional information on accessories in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
12
Manual, 09/2016, A5E32364017-AC
Wiring
3
This section contains the block diagram of the module and outlines various wiring options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual, 09/2016, A5E32364017-AC
13
Wiring
Wiring and block diagram
The example in the following figure shows the terminal assignment and the assignment of the channels to the addresses (output byte a and output byte b).
Backplane bus interface
xL+ Supply voltage 24 V DC xM Ground
CHx RUN ERROR PWR
Figure 3-1 Block diagram and terminal assignment
Channel or channel status LED (green) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
Note
Upon activation of the 24 V supply voltage, there is a "1" signal at the module outputs for approx. 50 s.
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
14
Manual, 09/2016, A5E32364017-AC
Address space
4
4.1
Address space
The module can be configured in various ways in STEP 7. Depending on the configuration, additional/different addresses are assigned in the process image output/input.
Configuration options of DQ 16x24VDC/0.5A BA
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different short designations/module names.
The following configurations are possible:
Table 4- 1 Configuration options Configuration
Short designation/module name in the GSD file
1 x 16-channel without value status 2 x 8-channel without value status
DQ 16x24VDC/0.5A BA DQ 16x24VDC/0.5A BA S
1 x 16-channel with value status for DQ 16x24VDC/0.5A BA MSO module-internal Shared Output with up to 4 submodules
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3 or higher
V13 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual, 09/2016, A5E32364017-AC
15
Address space 4.1 Address space
Address space for configuration as 1 x 16-channel DQ 16x24VDC/0.5A BA
The figure below shows the address space assignment for configuration as a 1 x 16-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. The letters "a to d" are printed on the module- "QB a", for example, stands for module start address output byte a.
Figure 4-1 Address space for configuration as 1 x 16-channel DQ 16x24VDC/0.5A BA
Address space for configuration as 2 x 8-channel DQ 16x24VDC/0.5A BA S
For the configuration as a 2 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Unlike the 1 x 16-channel module configuration, each of the two submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 2 x 8-channel DQ 32x24VDC/0.5A BA S
Address space for configuration as 1 x 16-channel DQ 16x24VDC/0.5A BA MSO
For the configuration as a 1 x 16-channel module (module-internal Shared Output, MSO), channels 0 to 15 of the module are copied to multiple submodules. Channels 0 to 16 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device: The IO controller to which submodule 1 is assigned has write access to outputs 0 to 15. The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs
0 to 15. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
16
Manual, 09/2016, A5E32364017-AC
Address space 4.1 Address space
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: Value is incorrect, for example, because the supply voltage is missing. IO controller of the basic submodule is in STOP mode. For the 2nd to 4th submodule (=MSO submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: Value is incorrect, for example, because the supply voltage is missing. IO controller of the basic submodule is in STOP mode. The basic submodule is not yet configured. The figure below shows the assignment of the address space for submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 16-channel DQ 16x24VDC/0.5A BA MSO with value status
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual, 09/2016, A5E32364017-AC
17
Address space 4.1 Address space
The figure below shows the assignment of the address space with submodules 3 and 4.
Reference
Figure 4-4 Address space for configuration as 1 x 16-channel DQ 16x24VDC/0.5A BA MSO with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
18
Manual, 09/2016, A5E32364017-AC
Diagnostics alarms
5
The module has no selectable diagnostics. Diagnostics alarms, for example, cannot be output with STEP 7 (TIA Portal).
5.1
Status and error displays
LED displays
The figure below shows you the LED displays (status and error displays) of the DQ 16x24VDC/0.5A BA.
Figure 5-1 LED displays of the module DQ 16x24VDC/0.5A BA
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual, 09/2016, A5E32364017-AC
19
Diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The tables below explain the meaning of the status and error displays.
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On
Flashes
Off Off Flashes
Module is starting up. Module is ready. Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Replace the module.
LED PWR1/PWR2
Table 5- 2 PWR1/PWR2 status display
LED PWRx Off On
Meaning Supply voltage L+ too low or missing.
Supply voltage L+ is present and OK.
Remedy Check the L+ supply voltage.
---
LED CHx
Table 5- 3 CHx status display
LED CHx Off On
Meaning 0 = Status of the output signal.
1 = Status of the output signal.
Remedy ---
---
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
20
Manual, 09/2016, A5E32364017-AC
Technical specifications
6
Technical specifications of the DQ 16x24VDC/0.5A BA
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7522-1BH10-0AA0
DQ 16x24VDC/0,5A BA FS01 V1.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V13 / V13
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
DQ
Yes
DQ with energy-saving function
No
PWM
No
Oversampling
No
MSO
Yes
Supply voltage
Rated value (DC) Valid range, low limit (DC) Valid range, high limit (DC) Reverse polarity protection
Input current
24 V 20.4 V 28.8 V Yes; through internal protection with 7 A per group
Current consumption, max.
30 mA
Output voltage
Rated value (DC)
24 V
Power Power consumption from the backplane bus Power loss
1.15 W
Power loss, typ.
2.2 W
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual, 09/2016, A5E32364017-AC
21
Technical specifications
Digital outputs Number of outputs Sourcing output Short-circuit protection · Response threshold, typ.
6ES7522-1BH10-0AA0
16 Yes Yes 1 A
Limitation of inductive shutdown voltage to Control of a digital input Switching capacity of outputs With resistive load, max. With lamp load, max. Load resistance range Low limit High limit Output voltage For signal "1", min. Output current For signal "1" rated value For signal "1" permitted range, max. For signal "0" residual current, max. Output delay with resistive load "0" to "1", max. "1" to "0", max. Parallel connection of two outputs For logic operations For increased performance For redundant control of a load Switching frequency With resistive load, max. With inductive load, max. With lamp load, max. Total current of outputs Current per channel, max. Current per group, max. Current per module, max. Cable length shielded, max. unshielded, max. Isochronous mode
L+ (-53 V) Yes
0.5 A 5 W
48 12 k
L+ (-0.8 V)
0.5 A 0.5 A 0.5 mA
100 µs 500 µs
Yes No Yes
100 Hz 0.5 Hz; according to IEC 60947-5-1, DC-13 10 Hz
0.5 A; see additional description in the manual 4 A; see additional description in the manual 8 A; see additional description in the manual
1000 m 600 m
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
No
Substitute values can be applied
No
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
22
Manual, 09/2016, A5E32364017-AC
Technical specifications
Interrupts Diagnostic interrupt Diagnostics alarms Monitoring of supply voltage Wire break Short-circuit Group error Diagnostics indicator LED RUN LED ERROR LED Monitoring of supply voltage (PWR LED) Channel status display For channel diagnostics For module diagnostics Electrical isolation Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Insulation Insulation tested with Distributed operation Prioritized startup Dimensions Width Height Depth Weights Weight, approx. Miscellaneous Note:
6ES7522-1BH10-0AA0
No
No No No No
Yes; green LED Yes; red LED Yes; green LED Yes; green LED No No
No 8 Yes
707 V DC (type test)
Yes
25 mm 147 mm 129 mm
230 g
Delivery includes 40-pin push-in front connector
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual, 09/2016, A5E32364017-AC
23
Technical specifications Power reduction (derating) to aggregate current of outputs (per group)
The following derating graphs show the loading capacity of the outputs in relation to the mounting position of the S71500 automation system/ET 200MP distributed I/O system and the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Details on aggregate current of outputs (per group)
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
24
Manual, 09/2016, A5E32364017-AC
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DQ 16x24VDC/0.5A BA module
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
Manual, 09/2016, A5E32364017-AC
25
Dimensional drawing
Figure A-2 Dimensional drawing of the DQ 16x24VDC/0.5A BA module, side view with open front cover
Digital output module DQ 16x24VDC/0.5A BA (6ES7522-1BH10-0AA0)
26
Manual, 09/2016, A5E32364017-AC
SIMATIC
S7-1500/ET 200MP Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_
06/2018
A5E35683409-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E35683409-AC 08/2018 Subject to change
Copyright © Siemens AG 2015 - 2018. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change: New licensing conditions and copyright information of the Open Source Software The module features a switching cycle counter as of firmware version V1.1.0.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
4
Manual, 06/2018, A5E35683409-AC
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 10
2.1
Properties ................................................................................................................................ 10
2.2 2.2.1
Functions ................................................................................................................................13 Switching cycle counter ..........................................................................................................13
3 Wiring ................................................................................................................................................... 15
4 Parameters/address space ................................................................................................................... 17
4.1
Parameters .............................................................................................................................17
4.2
Description of parameters.......................................................................................................19
4.3
Address space ........................................................................................................................20
5 Interrupts/diagnostics alarms................................................................................................................. 25
5.1
Status and error displays ........................................................................................................25
5.2
Interrupts .................................................................................................................................27
5.3
Diagnostics alarms..................................................................................................................28
6 Technical specifications ........................................................................................................................ 29
A Dimensional drawing............................................................................................................................. 34
A.1
Dimensional drawing...............................................................................................................34
B Parameter data records......................................................................................................................... 36
B.1
Parameter assignment............................................................................................................36
B.2
Structure of parameter data sets DS 64 - 79 ..........................................................................38
B.3
Structure of data set DS 129 ..................................................................................................39
B.4
Structure of data set DS 130 ..................................................................................................41
B.5
Structure of data set DS 131 ..................................................................................................43
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
6
Manual, 06/2018, A5E35683409-AC
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
7
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
8
Manual, 06/2018, A5E35683409-AC
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
9
Product overview
2.1
Properties
Article number
6ES7522-1BH01-0AB0
View of the module
2
Figure 2-1 View of the DQ 16x24VDC/0.5A HF module
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
10
Manual, 06/2018, A5E35683409-AC
Product overview 2.1 Properties
Properties
The module has the following technical properties: 16 digital outputs, electrically isolated in groups of 8 Rated output voltage 24 V DC Rated output current 0.5 A per channel Configurable substitute values (per channel) Configurable diagnostics (per channel) Suitable for solenoid valves, DC contactors, and indicator lights Switching cycle counter for connected actuators, e.g. solenoid valves Hardware compatible with digital output module DQ 16x24VDC/0.5A ST
(6ES7522-1BH00-0AB0). The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Isochronous mode Module-internal Shared Output (MSO) Configurable submodules / submodules for Shared Device Switching cycle counter
Configuration software
Firmware version of the module
STEP 7 (TIA Portal) as of V13, SP1
with HSP 0143
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
V1.0.0 or higher
X
--- / X
V1.0.0 or higher
X
X
V1.0.0 or higher
X
X
V1.0.0 or higher
X
---
V1.0.0 or higher
X
X
(PROFINET IO only)
(PROFINET IO only)
V1.0.0 or higher
X
X
(PROFINET IO only)
(PROFINET IO only)
V1.1.0 or higher as of V15.0 with HSP0247
X
· PROFINET IO only
(PROFINET IO only)
· Central operation with a S7-1500 CPU is supported
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Compatibility
The following table shows the compatibility of the modules and the dependencies between hardware functional status (FS) and firmware version (FW) used:
Hardware functional status FS01 FS02
Firmware version V1.0.0 V1.1.0
Note Upgrade to V1.1.0 not possible
Upgrade and downgrade possible between V1.1.0 and higher
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
11
Product overview 2.1 Properties
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front cover
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
12
Manual, 06/2018, A5E35683409-AC
2.2
Functions
Product overview 2.2 Functions
2.2.1
Switching cycle counter
The function records the number of switching cycles of the output and thus the switching cycles of a connected actuator, such as those of solenoid valves. When the specified number of switching cycles is reached, the "Limit value warning" maintenance interrupt is triggered, provided it is configured and enabled. When replacing the actuator, you can reset the switching cycle counter from the user program.
When replacing modules, you have the option of pre-initializing the switching cycle counter from the user program.
Typical areas of application:
Recording the number of switching cycles of the connected devices, e.g. solenoid valves or load contactors
Predictive maintenance
Advantages
You configure this function instead of programming.
"Monitoring" of each individual channel is possible. You can select which outputs are "monitored".
You can adapt the plant configuration flexibly and individually.
Easy to service and maintain. You can enable and disable the switching cycle counter via the user program.
Increase in plant availability. You can schedule actuator replacement in advance for the next maintenance cycle.
Requirement
Firmware version as of V1.1.0 of the module.
Configuration
You configure the switching cycle counter with the following parameters: Switching cycle counter enabled/disabled Trigger maintenance interrupt when the limit is reached Set limit for maintenance interrupt
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
13
Product overview 2.2 Functions
How it works
The module counts the switching cycles by evaluating the rising edges of an output signal. If the module detects a rising edge, the switching cycle counter (24-bit) for the respective channel is incremented. After an overflow of the switching cycle counter, it starts again with 0.
If you activate the "Maintenance switching cycles" parameter, the "Limit warning" of the maintenance interrupt is triggered when the limit is exceeded. Alternatively, activate the maintenance interrupt in the parameter data sets starting at DS 64.
The current counter states are stored on the module cyclically (approx. every 20 seconds) and retentively. The switching cycle counters are reset each time the module is restarted (power off/on).
You activate the function with the "Switching cycle counter" parameter or in the parameter data sets starting at DS 64.
You can read the current counter states with data set DS 129. Data set DS 129 contains the counter status for each channel in UDINT format.
You can read the limits for each channel in UDINT format with data set DS 130.
Data set DS 131 enables you to overwrite the current counter value for each switching cycle counter.
You can set a limit for each switching cycle counter with the "Switching cycle limit" parameter or with data set DS 131.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
14
Manual, 06/2018, A5E35683409-AC
Wiring
3
This section contains the block diagram of the module and outlines various wiring options. You can find information on wiring the front connector, establishing a cable shield, etc. in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Wiring and block diagram
The example in the following figure shows the terminal assignment and the assignment of the channels to the addresses (output byte a and output byte b).
Backplane bus interface
xL+ Supply voltage 24 V DC xM Ground CHx Channel or channel status LED
(green/red)
MAINT RUN ERROR PWR
LED maintenance display (yellow) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
Figure 3-1 Block diagram and terminal assignment
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
15
Wiring
Note When the 24 V supply voltage is switched on at each channel, there is a "1" signal at the module outputs for approx. 50 s.
Tip: Using the potential jumpers
If you want to supply both load groups with the same potential (non-isolated), use the potential jumpers supplied with the front connector. This helps you to avoid having to terminate two wires to one terminal. Proceed as follows: 1. Connect the 24 V DC supply voltage to terminals 19 and 20. 2. Insert the potential jumpers between terminals
9 and 29 (L+) 10 and 30 (M) 19 and 39 (L+) 20 and 40 (M) 3. Insert the jumpers between terminals 29 and 39, as well as 30 and 40. 4. Use the terminals 19 and 20 to distribute the potential to the next module.
Figure 3-2 Using the potential jumpers
Note Ensure that the maximum current load of 8 A per potential jumper is not exceeded.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
16
Manual, 06/2018, A5E35683409-AC
Parameters/address space
4
4.1
Parameters
DQ 16x24VDC/0.5 HF parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
For parameter assignment in the user program, the parameters are transferred to the module using the WRREC instruction (parameter assignment in RUN) and data sets; see section Parameter assignment (Page 36)
Table 4- 1 Configurable parameters and their defaults
Parameters
Range of values
Default setting
Diagnostics
· No supply voltage L+
Yes/No
No
· Short circuit to ground
Yes/No
No
· Maintenance switching
Yes/No
No
cycles
· Switching cycle counter
Yes/No
No
· Wire break
Yes/No
No
Parameter assignment in RUN
Yes Yes Yes Yes Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the GSD file hardware catalog PROFIBUS DP as of STEP 7, V13 SP1 or GSD file PROFINET IO
Channel*
Channel*
Channel (as of V15.0 with HSP0247) Channel (as of V15.0 with HSP0247) Channel*
Channel group (CH0 to CH7, CH8 to CH15) Channel group (CH0 to CH7, CH8 to CH15) ---
---
Channel group (CH0 to CH7, CH8 to CH15)
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
17
Manual, 06/2018, A5E35683409-AC
Parameters/address space 4.1 Parameters
Parameters Reaction to CPU STOP
Range of values
Default setting
· Turn off
Turn off
· Keep last value
· Output substitute value 1
Parameter assignment in RUN
Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the GSD file hardware catalog PROFIBUS DP as of STEP 7, V13 SP1 or GSD file PROFINET IO
Channel
Channel
Switching cycle limits Switching cycle limit
0 ... 16777214
0
Yes
Channel
---
(as of V15.0 with HSP0247)
* If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault. You can prevent this message burst by assigning the diagnostics function to one channel only.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
18
Manual, 06/2018, A5E35683409-AC
Parameters/address space 4.2 Description of parameters
4.2
Description of parameters
No supply voltage
Enabling of the diagnostics, for lacking or insufficient supply voltage L+.
Short circuit to ground
Enabling of the diagnostics if a short-circuit of the actuator supply (CHx) to ground occurs.
Maintenance switching cycles
You use this parameter to enable the maintenance interrupt "Limit value warning" when the switching cycle limit is violated.
You configure the limit with the parameter "Switching cycle limit" for each channel CHx.
Switching cycle counter
Channel-by-channel enable of switching cycle counter (Page 13).
Wire break
Enabling of the diagnostics if the line to the actuator is broken.
Reaction to CPU STOP
Determines the reaction of the output when the CPU goes into the STOP state or when the connection to the CPU is interrupted.
Switching cycle limit
Defines the limit channel-by-channel. If this value is exceeded, the "Limit value warning" maintenance interrupt is signaled.
Enter an integer value between 0 and 16777214. Refer to the data sheet of the connected actuator. We recommend that you do not enter this maximum value, but instead set it to 80% or 90%, for example, so that you have enough time to replace the actuator as a preventive measure.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
19
Parameters/address space 4.3 Address space
4.3
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the outputs/inputs.
Configuration options of DQ 16x24VDC/0.5A HF
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 2 Configuration options
Configuration
Short designation/module name in the GSD file
Configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7 (TIA Portal) as of V13 SP1 with
HSP 0143
GSD file in STEP 7 (TIA Portal) V12
or higher or STEP 7 V5.5 SP3 or higher
1 x 16-channel without value status
DQ 16x24VDC/0.5A HF
X
X
1 x 16-channel with value status
DQ 16x24VDC/0.5A HF QI
X
X
2 x 8-channel without value status
DQ 16x24VDC/0.5A HF S
X
X
(PROFINET IO only) (PROFINET IO only)
2 x 8-channel with value status
DQ 16x24VDC/0.5A HF S QI
X
X
(PROFINET IO only) (PROFINET IO only)
1 x 16-channel with value status for
DQ 16x24VDC/0.5A HF
module-internal Shared Output with up to MSO
4 submodules
X (PROFINET IO only)
X (PROFINET IO only)
Note Substitute value behavior in shared device operation with the following configuration (V1.0 only): · 2 x 8-channel with / without value status
If the system is in shared device mode and one of the IO controllers involved goes into STOP or fails due to a communication failure, for example, all submodules of the output module perform the configured substitute value reaction (e.g. shutdown).
This means that even when only one IO controller fails, the other IO controllers associated with the shared device no longer control the assigned submodule of the output module.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
20
Manual, 06/2018, A5E35683409-AC
Parameters/address space 4.3 Address space
Value status (Quality Information, QI)
The value status is always activated for the following module names: DQ 16x24VDC/0.5A HF QI DQ 16x24VDC/0.5A HF S QI DQ 16x24VDC/0.5A HF MSO An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Note The maintenance interrupt "Limit value warning" has no effect on the value status.
Address space for configuration as 16-channel DQ 16x24VDC/0.5A HF
The following figure shows the assignment of the address space for the configuration as a 16-channel module with value status. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. The letters "a to d" are printed onto the module. "QB a" stands for module start address output byte a.
Figure 4-1 Address space for configuration as 16-channel DQ 16x24VDC/0.5A HF with value status
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
21
Parameters/address space 4.3 Address space
Address space for configuration as 2 x 8-channel DQ 16x24VDC/0.5A HF S QI
For the configuration as a 2 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device.
The number of IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Contrary to the 1 x 16-channel module configuration, each of the two submodules has a freely assignable start address. The addresses for the respective value status of a submodule can also be assigned by the user.
Figure 4-2 Address space for configuration as 2 x 8-channel DQ 16x24VDC/0.5A HF S QI with value status
Address space for configuration as 1 x 16-channel DQ 16x24VDC/0.5A HF MSO
For the configuration as a 1 x 16-channel module (module-internal shared output, MSO), channels 0 to 15 of the module are copied to multiple submodules. Channels 0 to 15 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device:
The IO controller to which submodule 1 is assigned has write access to outputs 0 to 15.
The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs 0 to 15.
The number of IO controllers depends on the interface module used. Observe the information in the manual for the particular interface module.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
22
Manual, 06/2018, A5E35683409-AC
Parameters/address space 4.3 Address space
Value status (Quality Information, QI) The meaning of the value status depends on the submodule on which it occurs. For the first submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state. The following figure shows the assignment of the address space for submodules 1 and 2 and the value status.
Figure 4-3 Address space for configuration as 1 x 16-channel DQ 16x24VDC/0.5A HF S MSO with value status
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
23
Parameters/address space 4.3 Address space
The following figure shows the assignment of the address space with submodules 3 and 4 and the value status.
Reference
Figure 4-4 Address space for configuration as 1 x 16-channel DQ 16x24VDC/0.5A HF S MSO with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
24
Manual, 06/2018, A5E35683409-AC
Interrupts/diagnostics alarms
5
5.1
Status and error displays
LED displays
The following figure shows the LED displays (status and error displays) of module.
Figure 5-1 LED displays of the DQ 16x24VDC/0.5A HF module
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
25
Manual, 06/2018, A5E35683409-AC
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The tables below explain the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in section Diagnostic alarms (Page 28).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured
Indicates module errors (at least one error at one channel, e.g., short-circuit to ground). Hardware defective
Solution
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Evaluate the diagnostics data and eliminate the error (e.g., check the cables). Replace the module.
LED MAINT
Table 5- 2 MAINT status display
LED MAINT Off On
Meaning
0 = No maintenance interrupt is pending.
---
1 = The maintenance interrupt "Limit value
---
warning" is pending.
Solution
PWR1 and PWR2 LED
Table 5- 3 PWR1 and PWR2 status indication
LED PWRx Off On
Meaning Supply voltage L+ too low or missing
Supply voltage L+ is present and OK
Solution Check the L+ supply voltage.
---
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
26
Manual, 06/2018, A5E35683409-AC
LED CHx
Table 5- 4 CHx status display
LED CHx Off On On
Meaning 0 = Status of the output signal
1 = Status of the output signal
· Wire break or short-circuit to ground · Supply voltage L+ missing or too low
Interrupts/diagnostics alarms 5.2 Interrupts
Solution ----· Correct the process wiring · Check the supply voltage.
5.2
Interrupts
The digital output module DQ 16x24VDC/0.5A HF supports diagnostic interrupts and maintenance interrupts.
You can find detailed information on the event in the error organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: No supply voltage L+ Short circuit to ground Wire break Parameter assignment error
Maintenance interrupt
The module generates a maintenance interrupt at the following events: Limit value warning
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
27
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes for each diagnostics event on the module. You can read the diagnostics alarms, for example, in the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 5 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Short circuit to ground
Wire break*
Error code 1H
6H
Parameter assignment 10H error
Load voltage missing
11H
Limit value warning
17H
Meaning Short-circuit or overload at the channel Actuator circuit impedance too high.
Wire break between the module and actuator Channel not connected (open)
· The module cannot evaluate parameters for the channel.
· Incorrect parameter assignment Supply voltage L+ of the module is missing The configured limit for switching cycles has been exceeded.
Corrective measures Check the wiring/actuator. Check the ambient temperature. Use different actuator type or wire differently, e.g. use lines with bigger cross-section Connect the cable
· Disable diagnostics · Connect a resistor to the actuator
contacts in the load resistance range Correct the parameter assignment
Connect supply voltage L+ to module/channel · Replace actuator as a precaution-
ary measure · Reset counter with DS131
* Wire break is also reported for short-circuit of actuator supply to L+. This can lead to inappropriate diagnostics for redundant load control.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
28
Manual, 06/2018, A5E35683409-AC
Technical specifications
6
Technical specifications of the DQ 16x24VDC/0.5A HF
The following table shows the technical specifications as of 06/2018. You will find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7522-1BH01-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version · FW update possible Product function · I&M data Engineering with · STEP 7 TIA Portal configurable/integrated
as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Operating mode · DQ
· DQ with energy-saving function
· PWM
· Cam control (switching at comparison values)
· Oversampling
· MSO
· Integrated operating cycle counter Supply voltage
Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
6ES7522-1BH01-0AB0
DQ 16x24VDC/0.5A HF FS02 V1.1.0 Yes
Yes; I&M0 to I&M3
V13 SP1 / -
V1.0 / V5.1
V2.3 / -
Yes No No No
No Yes Yes
24 V 20.4 V 28.8 V Yes; through internal protection with 7 A per group
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
29
Manual, 06/2018, A5E35683409-AC
Technical specifications
Article number Input current
Current consumption, max. Output voltage
Rated value (DC) Power
Power available from the backplane bus Power loss
Power loss, typ. Digital outputs
Type of digital output Number of digital outputs Current-sourcing Short-circuit protection · Response threshold, typ. Limitation of inductive shutdown voltage to Controlling a digital input Switching capacity of the outputs · with resistive load, max.
· on lamp load, max. Load resistance range
· lower limit
· upper limit Output voltage
· for signal "1", min. Output current
· for signal "1" rated value
· for signal "1" permissible range, max.
· for signal "0" residual current, max. Output delay with resistive load
· "0" to "1", max.
· "1" to "0", max. Parallel switching of two outputs
· for logic links
· for uprating
· for redundant control of a load
6ES7522-1BH01-0AB0
30 mA
24 V
1.1 W
2 W
Transistor 16 Yes Yes; Clocked electronically 1 A L+ (-53 V) Yes
0.5 A 5 W
48 12 k
L+ (-0.8 V)
0.5 A 0.5 A 0.5 mA
100 µs 500 µs
Yes No Yes
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
30
Manual, 06/2018, A5E35683409-AC
Technical specifications
Article number Switching frequency
· with resistive load, max.
· with inductive load, max.
· on lamp load, max. Total current of the outputs
· Current per channel, max.
· Current per group, max.
· Current per module, max. Cable length
· shielded, max.
· unshielded, max. Isochronous mode
Isochronous operation (application synchronized up to terminal) Execution and activation time (TCO), min. Bus cycle time (TDP), min. Interrupts/diagnostics/status information Diagnostics function Substitute values connectable Alarms · Diagnostic alarm Diagnostic messages · Monitoring the supply voltage
· Wire-break
· Short-circuit
· Group error Diagnostics indication LED
· RUN LED
· ERROR LED
· MAINT LED
· Monitoring of the supply voltage (PWRLED)
· Channel status display
· for channel diagnostics
· for module diagnostics
6ES7522-1BH01-0AB0
100 Hz 0.5 Hz; According to IEC 60947-5-1, DC-13 10 Hz
0.5 A; see additional description in the manual 4 A; see additional description in the manual 8 A; see additional description in the manual
1 000 m 600 m
Yes 70 µs 250 µs
Yes Yes
Yes
Yes Yes Yes Yes
Yes; Green LED Yes; Red LED Yes; yellow LED Yes; Green LED
Yes; Green LED Yes; Red LED Yes; Red LED
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
31
Technical specifications
Article number Potential separation Potential separation channels
· between the channels
6ES7522-1BH01-0AB0 No
· between the channels, in groups of
8
· between the channels and backplane bus Yes
Isolation
Isolation tested with
707 V DC (type test)
Standards, approvals, certificates
Suitable for safety-related tripping of standard Yes; From FS02 modules
Highest safety class achievable for safety-related tripping of standard modules
· Performance level according to ISO 13849- PL d 1
· Category according to ISO 13849-1
Cat. 3
· SILCL according to IEC 62061
SILCL 2
Ambient conditions
Ambient temperature during operation
· horizontal installation, min.
0 °C
· horizontal installation, max.
60 °C
· vertical installation, min.
0 °C
· vertical installation, max.
60 °C
Decentralized operation Prioritized startup
Dimensions Width Height Depth
Weights Weight, approx.
Yes
35 mm 147 mm 129 mm
230 g
Residual current at signal state "0":
Note Due to the Diagnostics: Wire break function, there is a low level of residual current in the "0" signal state at the output, which may cause the display diodes to flicker. This residual current does not depend on the setting for the wire break diagnostics parameter.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
32
Manual, 06/2018, A5E35683409-AC
Technical specifications Power reduction (derating) to aggregate current of outputs (per group)
The following graphs show the loading capacity of the digital outputs in relation to the mounting position of the S71500 / Distributed I/O System ET 200MP automation system and the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Details on aggregate current of outputs (per group)
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
33
Dimensional drawing
A
A.1
Dimensional drawing
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of the DQ 16x24VDC/0.5A HF module
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
34
Dimensional drawing A.1 Dimensional drawing
Figure A-2 Dimension drawing of the DQ 16x24VDC/0.5A HF module, side view with open front cover
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
35
Parameter data records
B
B.1
Parameter assignment
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When a GSD file is used to configure a module, dependencies can arise when "assigning the parameters".
There are no dependencies for this module. You can assign the individual parameters in any combination.
Parameter assignment in the user program
You have the option to reconfigure the modules in RUN (e.g. the response of selected channels to the CPU-STOP state can be changed in RUN without having an effect on the other channels)
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data sets 64 to 79. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
36
Parameter data records B.1 Parameter assignment
Assignment of data record and channel
For the configuration as a 1 x 16-channel module, the parameters are located in data sets 64 to 79 and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 ... Data set 78 for channel 14 Data set 79 for channel 15 For the configuration as a 2 x 8-channel module, the module has 2 submodules with eight channels each. The parameters for the channels are located in data records 64 to 71 and are assigned as follows: Data records 64 to 71 for channels 0 to 7 (submodule 1) Data records 64 to 71 for channels 8 to 15 (submodule 2) Address the respective submodule for data record transfer.
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
37
Parameter data records B.2 Structure of parameter data sets DS 64 - 79
B.2
Structure of parameter data sets DS 64 - 79
Structure of data sets 64 to 79
The figure below shows the structure of data set 64 for channel 0 as an example. The structure is identical for channels 1 to 15. The values in byte 0 and byte 1 are fixed and may not be changed.
Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 64: Bytes 0 to 3
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
38
Manual, 06/2018, A5E35683409-AC
Parameter data records B.3 Structure of data set DS 129
B.3
Structure of data set DS 129
Structure of data set 129
You can read the current states of the switching cycle counters with data set 129. The counter status is supplied for each channel in UDINT format. The length of the data set results from the number of channels in the selected submodule.
The following figure shows you the structure of data set 129 for 16 channels.
Figure B-2 Structure of data set 129: Byte 0 to 63
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
39
Parameter data records B.3 Structure of data set DS 129
The following figure shows you the structure of data set 129 for 2 submodules with 8 channels each.
Figure B-3 Structure of data set 129: Byte 0 to 31
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
40
Manual, 06/2018, A5E35683409-AC
Parameter data records B.4 Structure of data set DS 130
B.4
Structure of data set DS 130
Structure of data set 130
The limits of the switching cycle counters are read out with data set 130. The set value is supplied for each channel in UDINT format. The length of the data set results from the number of channels in the selected submodule.
The following figure shows you the structure of data set 130 for 16 channels.
Figure B-4 Structure of data set 130: Byte 0 to 63
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
41
Parameter data records B.4 Structure of data set DS 130
The following figure shows you the structure of data set 130 for 2 submodules with 8 channels each.
Figure B-5 Structure of data set 130: Byte 0 to 31
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
42
Manual, 06/2018, A5E35683409-AC
Parameter data records B.5 Structure of data set DS 131
B.5
Structure of data set DS 131
Structure of data set 131
The following figure shows you the structure of data set 131. Enable a parameter by setting the corresponding bit to "1".
Figure B-6 Structure of data set 131: Bytes 0 to 7
Digital output module DQ 16x24VDC/0.5A HF (6ES7522-1BH01-0AB0)
Manual, 06/2018, A5E35683409-AC
43
_Pr_ef_ac_e_______________
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
SIMATIC
S7-1500/ET 200MP Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual
_Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_
_Di_m_en_si_on_a_l d_ra_w_in_g _______A_
_Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_
09/2016
A5E35683139-AB
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E35683139-AB 11/2016 Subject to change
Copyright © Siemens AG 2015 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in these system manuals.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change:
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
4
Manual, 09/2016, A5E35683139-AB
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
4 Parameters/address space ................................................................................................................... 15
4.1
Parameters............................................................................................................................. 15
4.2
Description of parameters ...................................................................................................... 15
4.3
Address space ....................................................................................................................... 16
5 Interrupts/diagnostics alarms................................................................................................................. 21
5.1
Status and error displays ....................................................................................................... 21
5.2
Interrupts ................................................................................................................................ 23
5.3
Diagnostics alarms................................................................................................................. 23
6 Technical specifications ........................................................................................................................ 24
A Dimensional drawing............................................................................................................................. 27
A.1
Dimensional drawing.............................................................................................................. 27
B Parameter data records ........................................................................................................................ 29
B.1
Parameter assignment and structure of the parameter data records .................................... 29
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
6
Manual, 09/2016, A5E35683139-AB
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
8
Manual, 09/2016, A5E35683139-AB
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
10
Manual, 09/2016, A5E35683139-AB
Product overview
2.1
Properties
Article number
6ES7522-5EH00-0AB0
View of the module
2
Properties
Figure 2-1 View of the DQ 16x24...48VUC/125VDC/0.5A ST module
The module has the following technical properties: 16 digital outputs; electrically isolated in groups of 1 Rated output voltage 24 V DC (24 V DC to 125 V DC / 24 V UC to 48 V UC) Rated output current 0.5 A per channel Configurable substitute values (per channel) Suitable for solenoid valves, DC contactors, and indicator lights
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
11
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Module-internal Shared Output (MSO)
Configurable submodules / submodules for Shared Device
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal) as of V13,
SP1 with HSP 0142
GSD file in STEP 7 (TIA Portal) V12 or higher,
or STEP 7 V5.5 SP3 or higher
X
--- / X
X
X
X
X
X
X
(PROFINET IO only)
(PROFINET IO only)
X
X
(PROFINET IO only)
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front cover
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
12
Manual, 09/2016, A5E35683139-AB
Wiring
3
This section contains the block diagram of the module and outlines various wiring options.
You can find information on wiring the front connector, establishing a cable shield, etc. in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
13
Wiring
Wiring and block diagram
The example in the following figure shows the terminal assignment and the assignment of the channels to the addresses (output byte a and output byte b). Note Do not insert the potential jumpers included with the front connector!
Backplane bus interface
CHx RUN ERROR
Figure 3-1 Block diagram and terminal assignment
Channel or channel status LED (green) Status display LED (green) Error display LED (red)
Note
When the supply voltage is switched on at each channel, there is a "1" signal at the module outputs for approx. 50 s.
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
14
Manual, 09/2016, A5E35683139-AB
Parameters/address space
4
4.1
Parameters
DQ 16x24...48VUC/125VDC/0.5A ST parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
For parameter assignment in the user program, the parameters are transferred to the module using the WRREC instruction (parameter assignment in RUN) and data records; see chapter Parameter assignment and structure of the parameter data records (Page 29).
Table 4- 1 Configurable parameters and their defaults
Parameters
Range of values
Default setting
Parameter assignment in RUN
Reaction to CPU · Turn off
STOP
· Keep last value
Turn off Yes
· Output substitute value 1
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog as of STEP 7, V13 SP1 or GSD file PROFINET IO
GSD file PROFIBUS DP
Channel
Channel
4.2
Description of parameters
Reaction to CPU STOP
Determines the reaction of the output when the CPU goes into the STOP state or when the connection to the CPU is interrupted.
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
15
Parameters/address space 4.3 Address space
4.3
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the outputs/inputs.
The letters "a and b" are printed onto the module. "IB a" for example, stands for module start address input byte a.
Configuration options of DQ 16x24...48VUC/125VDC/0.5A ST
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 2 Configuration options
Configuration
Short designation/module name in the GSD file
Configuration software, e.g., STEP 7 (TIA Portal)
1 x 16-channel without value status
DQ 16x24...48VUC/125VDC/0.5A ST
Integrated in the hardware catalog STEP 7 (TIA Portal) as of V13 SP1 with
HSP 0142
X
GSD file in STEP 7 (TIA Portal) V12
or higher or STEP 7 V5.5 SP3 or higher
X
1 x 16-channel with value DQ 16x24...48VUC/125VDC/0.5A ST QI
X
X
status
2 x 8-channel without value DQ 16x24...48VUC/125VDC/0.5A ST S status
X (PROFINET IO only)
X (PROFINET IO only)
2 x 8-channel with value status
DQ 16x24...48VUC/125VDC/0.5A ST S QI
X
(PROFINET IO only)
X (PROFINET IO only)
1 x 16-channel with value status for module-internal Shared Output with up to 4 submodules
DQ 16x24...48VUC/125VDC/0.5A ST MSO
X (PROFINET IO only)
X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names:
DQ 16x24...48VUC/125VDC/0.5A ST QI
DQ 16x24...48VUC/125VDC/0.5A ST S QI
DQ 16x24...48VUC/125VDC/0.5A ST MSO
An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
16
Manual, 09/2016, A5E35683139-AB
Parameters/address space 4.3 Address space
Address space for configuration as 16-channel DQ 16x24...48VUC/125VDC/0.5A ST
The following figure shows the assignment of the address space for the configuration as a 16-channel module with value status. You can freely assign the start address for the module. The addresses of the channels are derived from the start address.
Figure 4-1 Address space for configuration as 16-channel DQ 16x24...48VUC/125VDC/0.5A ST with value status
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
17
Parameters/address space 4.3 Address space
Address space for configuration as 2 x 8-channel DQ 16x24...48VUC/125VDC/0.5A ST S QI
For the configuration as a 2 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device.
The number of IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Contrary to the 1 x 16-channel module configuration, each of the two submodules has a freely assignable start address. The addresses for the respective value status of a submodule can also be assigned by the user.
Figure 4-2 Address space for configuration as 2 x 8-channel DQ 16x24...48VUC/125VDC/0.5A ST S QI with value status
Address space for configuration as 1 x 16-channel DQ 16x24...48VUC/125VDC/0.5A ST MSO
For the configuration as a 1 x 16-channel module (module-internal shared output, MSO), channels 0 to 15 of the module are copied to multiple submodules. Channels 0 to 15 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device:
The IO controller to which submodule 1 is assigned has write access to outputs 0 to 15.
The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs 0 to 15.
The number of IO controllers depends on the interface module used. Observe the information in the manual for the particular interface module.
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
18
Manual, 09/2016, A5E35683139-AB
Parameters/address space 4.3 Address space
Value status (Quality Information, QI) The meaning of the value status depends on the submodule on which it occurs. For the first submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state. The following figure shows the assignment of the address space for submodules 1 and 2 and the value status.
Figure 4-3 Address space for configuration as 1 x 16-channel DQ 16x24...48VUC/125VDC/0.5A ST S MSO with value status
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
19
Parameters/address space 4.3 Address space
The following figure shows the assignment of the address space with submodules 3 and 4 and the value status.
Reference
Figure 4-4 Address space for configuration as 1 x 16-channel DQ 16x24...48VUC/125VDC/0.5A ST S MSO with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
20
Manual, 09/2016, A5E35683139-AB
Interrupts/diagnostics alarms
5
5.1
Status and error displays
LED displays
The following figure shows the LED displays (status and error displays) of module.
Figure 5-1 LED displays of the module DQ 16x24...48VUC/125VDC/0.5A ST
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
21
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The tables below explain the meaning of the status and error displays. Remedial measures for diagnostics alarms can be found in section Diagnostics alarms (Page 23).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set.
Module is configured
Indicates module errors (at least one error at one channel, e.g., parameter assignment error). Hardware defective
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Evaluate the diagnostics data and eliminate the error (e.g., check the cables).
Replace the module.
CHx LED
Table 5- 2 CHx status display
LED CHx Off On
Meaning 0 = Status of the output signal
1 = Status of the output signal
Remedy ---
---
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
22
Manual, 09/2016, A5E35683139-AB
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST supports diagnostic interrupts.
For detailed information on the error event, refer to the diagnostic interrupt organization block with the "RALRM" instruction (read additional interrupt information) and to the STEP 7 online help.
Diagnostics interrupt
The module generates a diagnostic interrupt at the following event: Parameter assignment error
5.3
Diagnostics alarms
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes for each diagnostics event on the module. You can read the diagnostics alarms, for example, in the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
Table 5- 3 Diagnostics alarm, meaning and corrective measures
Diagnostics alarm
Parameter assignment error
Error code 10H
Meaning
· The module cannot evaluate parameters for the channel.
· Incorrect parameter assignment
Corrective measures Correct the parameter assignment
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
23
Technical specifications
6
Technical specifications of the DQ 16x24...125VUC/0.5A ST
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7522-5EH00-0AB0
DQ 16x24 ... 48VUC/125VDC/0,5A ST FS01 V1.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V13 SP1 / -
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
DQ
Yes
DQ with energy-saving function
No
PWM
No
Oversampling
No
MSO
Yes
Output voltage
Rated value (DC) Rated value (AC)
24 V; 48 V, 125 V 24 V; 48 V (50 - 60 Hz)
Power
Power consumption from the backplane bus Power loss Power loss, typ.
2 W 3.8 W
Digital outputs
Number of outputs Sinking output Sourcing output Limitation of inductive shutdown voltage to Control of a digital input
16 Yes Yes 200 V (suppressor diode) Yes
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
24
Manual, 09/2016, A5E35683139-AB
Technical specifications
6ES7522-5EH00-0AB0
Switching capacity of outputs
With resistive load, max.
0.5 A
With lamp load, max.
40 W; at 125 VDC, 10 W at 48 VUC, 5 W at 24 VUC
Output voltage
For signal "1", min.
L+ (-1.0 V)
Output current
For signal "1" rated value
0.5 A
For signal "1" permitted range, max.
0.6 A
Output delay with resistive load
"0" to "1", max.
5 ms
"1" to "0", max.
5 ms
Parallel connection of two outputs
For logic operations
Yes
For increased performance
No
For redundant control of a load
Yes
Switching frequency
With resistive load, max.
25 Hz
With inductive load, max.
0.5 Hz
With lamp load, max.
10 Hz
Total current of outputs
Current per channel, max.
0.5 A
Current per group, max.
0.5 A
Current per module, max.
8 A
Cable length
shielded, max.
1000 m
unshielded, max.
600 m
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
No
Substitute values can be applied
Yes
Interrupts
Diagnostic interrupt
No
Diagnostics alarms
Monitoring of supply voltage
No
Wire break
No
Short-circuit
No
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
25
Technical specifications
Diagnostics indicator LED RUN LED ERROR LED Monitoring of supply voltage (PWR LED) Channel status display For channel diagnostics For module diagnostics Electrical isolation Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Permitted potential difference Between different circuits Insulation Insulation tested with Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed operation Prioritized startup Dimensions Width Height Depth Weights Weight, approx.
6ES7522-5EH00-0AB0
Yes; green LED Yes; red LED No Yes; green LED No Yes; red LED
Yes 1 Yes
125 V DC / 48 V AC
2000 V DC
0 °C 60 0 °C 40 °C
Yes
35 mm 147 mm 129 mm
230 g
Note External fuse for outputs
The outputs have to be protected by an external fuse. Recommendation: Siemens 2A 3NW6002-4 in fuse holder 3NW7014-4.
When installed in a danger area according to the National Electric Code (NEC), the fuse must only be removed with the correct tool when the module is not in an explosion-proof zone.
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
26
Manual, 09/2016, A5E35683139-AB
Dimensional drawing
A
A.1
Dimensional drawing
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of the DQ 16x24...48VUC/125VDC/0.5A ST module
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
27
Dimensional drawing A.1 Dimensional drawing
Figure A-2 Dimension drawing of the DQ 16x24...48VUC/125VDC/0.5A ST module, side view with open front cover
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
28
Manual, 09/2016, A5E35683139-AB
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When a GSD file is used to configure a module, dependencies can arise when "assigning the parameters".
There are no dependencies for this module. You can assign the individual parameters in any combination.
Parameter assignment in the user program
You have the option to reconfigure the modules in RUN (e.g. the response of selected channels to the CPU-STOP state can be changed in RUN without having an effect on the other channels)
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 64 to 79. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
Manual, 09/2016, A5E35683139-AB
29
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Assignment of data record and channel
For the configuration as a 1 x 16-channel module, the parameters are located in data records 64 to 79 and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 ... Data record 78 for channel 14 Data record 79 for channel 15 For the configuration as a 2 x 8-channel module, the module has 2 submodules with eight channels each. The parameters for the channels are located in data records 64 to 71 and are assigned as follows: Data records 64 to 71 for channels 0 to 7 (submodule 1) Data records 64 to 71 for channels 8 to 15 (submodule 2) Address the respective submodule for data record transfer.
Data record structure
The figure below shows the structure of data record 64 for channel 0 as an example. The structure is identical for channels 1 to 15. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 64: Bytes 0 to 3
Digital output module DQ 16x24...48VUC/125VDC/0.5A ST (6ES7522-5EH00-0AB0)
30
Manual, 09/2016, A5E35683139-AB
SIMATIC
S7-1500/ET 200MP Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _Di_ag_n_os_tic_a_la_rm_s_________5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_
09/2016
A5E34934069-AB
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E34934069-AB 11/2016 Subject to change
Copyright © Siemens AG 2015 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change:
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
CPU: The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system.
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note
A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
4
Manual, 09/2016, A5E34934069-AB
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
4 Parameters/address space ................................................................................................................... 15
4.1
Parameters............................................................................................................................. 15
4.2
Declaration of parameters...................................................................................................... 15
4.3
Address space ....................................................................................................................... 16
5 Diagnostic alarms ................................................................................................................................. 21
5.1
Status and error displays ....................................................................................................... 21
6 Technical specifications ........................................................................................................................ 23
A Dimensional drawing............................................................................................................................. 27
B Parameter data records ........................................................................................................................ 29
B.1
Parameter assignment and structure of the parameter data records .................................... 29
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
6
Manual, 09/2016, A5E34934069-AB
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
8
Manual, 09/2016, A5E34934069-AB
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
10
Manual, 09/2016, A5E34934069-AB
Product overview
2.1
Properties
Article number
6ES7522-5FH00-0AB0
View of the module
2
Properties
Figure 2-1 View of the DQ 16x230VAC/1A ST module
The module has the following technical properties: 16 digital outputs (Triac) Rated output voltage 120 V/230 V AC Rated output current 1A (per channel) Configurable substitute values (per channel) Suitable for solenoid valves, DC contactors, indicator lights and smaller single phase
drives
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
11
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware version of the module
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Module-internal Shared Output (MSO)
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
Configurable submodules/submodules for shared device
V1.0.0 or higher
Configuration software
STEP 7 as of V13 SP1 with
HSP 0119
GSD file in STEP 7 , V12 or higher STEP 7 V5.5 SP3 or higher
X
--- / X
X
--- / X
X
X
X
X
(PROFINET IO only)
(PROFINET IO only)
X
X
(PROFINET IO only)
(PROFINET IO only)
You can configure the module with STEP 7 and with a GSD file.
Accessories
The following components are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front door
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
For more information on accessories, refer to the S7-1500, ET 200MP system manual (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
12
Manual, 09/2016, A5E34934069-AB
Wiring
3
This section contains the block diagram of the module and outlines various wiring options. You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the S7-1500, ET 200MP system manual (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Note Do not insert the potential jumpers included with the front connector!
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
13
Wiring
Wiring and block diagram
The example in the following figure shows the terminal assignment and the assignment of the channels. The individual channels are connected with a TRIAC (Triode for Alternating Current).
TRIAC 16x Backplane bus interface
CHx RUN ERROR
Channel or channel status LED (green) Status display LED (green) Error display LED (red)
Figure 3-1 Block diagram and terminal assignment
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
14
Manual, 09/2016, A5E34934069-AB
Parameters/address space
4
4.1
Parameters
DQ 16x230VAC/1A ST parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The table below lists the parameters that can be set. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
For parameter assignment in the user program, the parameters are transferred to the module using the WRREC instruction (reconfiguration in RUN) and data records; see chapter Parameter assignment and structure of the parameter data records (Page 29).
Table 4- 1 Configurable parameters and their defaults
Parameter
Range of values
Default
Reaction to CPU · Turn off
STOP
· Keep last value
· Output substitute value 1
Turn off
Reconfiguration in RUN
Yes
Range of effectiveness with configuration software, e.g. STEP 7
Integrated in the hardware catalog STEP 7, SP1 with HSP 0119 or GSD file PROFINET IO
GSD file PROFIBUS DP
Channel
Channel
4.2
Declaration of parameters
Reaction to CPU STOP
Determines the reaction of the output to the CPU going into STOP state or when the connection to the CPU is interrupted.
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
15
Parameters/address space 4.3 Address space
4.3
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image output/input.
Configuration options of DQ 16x230VAC/1A ST
You can configure the module with STEP 7 or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different short designations/module names.
The following configurations are possible:
Table 4- 2 Configuration options
Configuration
1 x 16-channel without value status 2 x 8-channel without value status 1 x 16-channel with value status for module-internal Shared Output with up to 4 submodules
Short designation/module name in the GSD file
DQ 16x230VAC/1A ST DQ 16x230VAC/1A ST S DQ 16x230VAC/1A ST MSO
Configuration software, e.g., STEP 7
Integrated in hardware catalog STEP 7 V13,
SP1 or higher with HSP 0119
X
GSD file in STEP 7 V12 or higher or
STEP 7 V5.5 SP3 or higher
X
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the DQ 16x230VAC/1A ST MSO.
An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
16
Manual, 09/2016, A5E34934069-AB
Parameters/address space 4.3 Address space
Address space for configuration as 16-channel DQ 16x230VAC/1A ST
The figure below shows the address space allocation for the configuration as 16-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. The letters "a to b" are printed on the module; "QB a", for example, stands for module start address output byte a.
Figure 4-1 Address space for configuration as 16-channel DQ 16x230VAC/1A ST
Address space for configuration as 2 x 8-channel DQ 16x230VAC/1A ST S
For the configuration as a 2 x 8-channel module, the channels of the module are divided into two submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of I/O controllers depends on the interface module being used. Please observe the information in the manual for the particular interface module. Unlike the 1 x 16-channel module configuration, each of the two submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 2 x 8-channel DQ 16x230VAC/1A ST S
Note Substitute value behavior in shared device operation with 2 x 8-channel configuration If the system is in shared device mode and one of the associated IO controllers goes into STOP or fails due to, for example, a communication failure, all submodules of the output module follow the configured substitute value behavior (e.g. switch off). This means that even when only one IO controller fails, the other IO controllers associated with the shared device no longer control the assigned submodule of the output module.
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
17
Parameters/address space 4.3 Address space
Address space for configuration as 1 x 16-channel DQ 16x230VAC/1A ST MSO
For the configuration as a 1 x 16-channel module (module-internal Shared Output, MSO), channels 0 to 15 of the module are copied to multiple submodules. Channels 0 to 15 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device: The IO controller to which submodule 1 is assigned has write access to outputs 0 to 15. The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs
0 to 15. The number of IO controllers depends on the interface module being used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For the 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state.
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
18
Manual, 09/2016, A5E34934069-AB
Parameters/address space 4.3 Address space
The following figure shows the assignment of the address space for submodules 1 and 2 and the value status.
Figure 4-3 Address space for configuration as 1 x 16-channel DQ 16x230VAC/1A ST MSO with value status
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
19
Parameters/address space 4.3 Address space
The figure below shows the assignment of the address space for submodules 3 and 4 and the value status.
Reference
Figure 4-4 Address space for configuration as 1 x 16-channel DQ 16x230VAC/1A ST MSO with value status
You will find information on the module-internal shared input/shared output (MSI/MSO) function in the function manual PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) in the section Moduleinternal shared input/shared output (MSI/MSO).
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
20
Manual, 09/2016, A5E34934069-AB
Diagnostic alarms
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of DQ 16x230VAC/1A ST.
5
Figure 5-1 LED displays of the module DQ 16x230VAC/1A ST
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
21
Diagnostic alarms 5.1 Status and error displays
Meaning of the LED displays
The following table explains the meaning of the status and error displays.
RUN and ERROR LED
Table 5- 1 RUN and ERROR status and error displays
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On
Flashes
Off Off Flashes
The module starts and flashes until the valid parameter assignment is set. Module parameters assigned
Hardware defective
Solution
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check whether too many modules are in-
serted. ---
Replace the module.
CHx LED
Table 5- 2 CHx status display
LED CHx Off On
Meaning 0 = Status of the output signal
1 = Status of the output signal
Solution ---
---
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
22
Manual, 09/2016, A5E34934069-AB
Technical specifications
6
Technical specifications of the DQ 16x230VAC/1A ST
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7522-5FH00-0AB0
DQ 16x230VAC/1A ST (Triac) FS01 V1.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V13 SP1 / -
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
DQ
Yes
DQ with energy-saving function
No
PWM
No
Oversampling
No
MSO
Yes
Output voltage
Rated value (AC)
120/230 V AC, 50 / 60 Hz
Power Power consumption from the backplane bus Power loss Power loss, typ. Digital outputs
1.2 W 11.1 W
Number of outputs Sinking output Sourcing output Short-circuit protection Switching capacity of outputs With resistive load, max. With lamp load, max.
16 Yes Yes No
1 A 50 W
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
23
Technical specifications
6ES7522-5FH00-0AB0
Output voltage
For signal "1", min.
L1 (-1.5 V) at maximum output current; L1 (-8.5 V) at minimum output current
Output current
For signal "1" rated value
1 A
For signal "1" permitted range, min.
10 mA
For signal "1" permitted range, max.
15 A; max. 1 AC cycle
For signal "0" residual current, max.
2 mA
Output delay with resistive load
"0" to "1", max.
1 AC cycle
"1" to "0", max.
1 AC cycle
Parallel connection of two outputs
For logic operations
No
For increased performance
No
For redundant control of a load
Yes
Switching frequency
With resistive load, max.
10 Hz
With inductive load, max.
0.5 Hz
With lamp load, max.
1 Hz
Total current of outputs
Current per channel, max.
1 A; see additional description in the manual
Current per group, max.
2 A; see additional description in the manual
Current per module, max.
10 A; see additional description in the manual
Triac outputs
Size of motor starter according to NEMA, max.
4
Cable length
shielded, max.
1000 m
unshielded, max.
600 m
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
No
Substitute values can be applied
Yes
Interrupts
Diagnostic interrupt
No
Diagnostics alarms
Monitoring of supply voltage
No
Wire break
No
Short-circuit
No
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
24
Manual, 09/2016, A5E34934069-AB
Technical specifications
Diagnostics indicator LED RUN LED ERROR LED Monitoring of supply voltage (PWR LED) Channel status display For channel diagnostics For module diagnostics Electrical isolation Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Permitted potential difference Between different circuits
Insulation Insulation tested with Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed operation Prioritized startup Dimensions Width Height Depth Weights Weight, approx.
6ES7522-5FH00-0AB0
Yes; green LED Yes; red LED No Yes; green LED No Yes; red LED
No 2 Yes
250 V AC between the channels and the backplane bus; 500 V AC between the channels
3100 V DC
0 °C 60 0 °C 60
Yes
35 mm 147 mm 129 mm
310 g
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
25
Technical specifications
Power reduction (derating) to aggregate current of outputs (per module)
The following graphs show the loading capacity of the outputs in relation to the mounting position of the S71500 automation system/ET 200MP distributed I/O system and the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Details on aggregate current of outputs (per module)
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
26
Manual, 09/2016, A5E34934069-AB
Dimensional drawing
A
The dimension drawing of the module on the mounting rail, as well as a dimension drawing with open front cover, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of the DQ 16x230VAC/1A ST module
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
27
Dimensional drawing
Figure A-2 Dimension drawing of the DQ 16x230VAC/1A ST module, side view with open front cover
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
28
Manual, 09/2016, A5E34934069-AB
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When a GSD file is used to configure a module, dependencies can arise when "assigning the parameters".
There are no dependencies for this module. You can assign the individual parameters in any combination.
Parameter assignment in the user program
You have the option to reconfigure the module in RUN (e.g. the response of selected channels to the CPU STOP state can be changed in RUN without having an effect on the other channels).
Changing parameters in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 64 to 79. The parameters set in STEP 7 are not changed in the CPU, which means the parameters set in STEP 7 are valid again after a restart.
The parameters are only checked for plausibility by the module after the transfer.
STATUS output parameter
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You get the diagnostics data records 0 and 1 for the read back parameter data records 0 and 1. You can find more information in the Interrupts section of the PROFIBUS DP interface module device manual on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
Manual, 09/2016, A5E34934069-AB
29
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Assignment of data record and channel
For the configuration as a 1 x 16-channel module, the parameters are located in data records 64 to 79 and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 ... Data record 78 for channel 14 Data record 79 for channel 15
For the configuration as a 2 x 8-channel module, the module has 2 submodules with eight channels each. The parameters for the channels are located in data records 64 to 71 and are assigned as follows: Data records 64 to 71 for channels 0 to 7 (submodule 1) Data records 64 to 71 for channels 8 to 15 (submodule 2) Address the respective submodule for data record transfer.
Data record structure
The example in the figure below shows the structure of data record 64 for channel 0. The structure of channels 1 to 16 is identical. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 64: Bytes 0 to 3
Digital output module DQ 16x230VAC/1A ST Triac (6ES7522-5FH00-0AB0)
30
Manual, 09/2016, A5E34934069-AB
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
SIMATIC
S7-1500/ET 200MP Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual
Preface
Documentation guide
1
Product overview
2
Wiring
3
Parameters/address space
4
5 Interrupts/diagnostics alarms
Technical specifications
6
Dimensional drawing
A
Parameter data records
B
04/2020
A5E34934019-AD
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E34934019-AD 05/2020 Subject to change
Copyright © Siemens AG 2015 - 2020. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version Compared to the previous version, this manual contains the following change: The module features a switching cycle counter as of firmware version V1.1.0.
Conventions
CPU: The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system.
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note
A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that can be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
4
Equipment Manual, 04/2020, A5E34934019-AD
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide ................................................................................................................................. 6
2 Product overview ..................................................................................................................................... 10
2.1
Properties ................................................................................................................................ 10
2.2 2.2.1
Functions ................................................................................................................................13 Switching cycle counter ..........................................................................................................13
3 Wiring ...................................................................................................................................................... 15
4 Parameters/address space ...................................................................................................................... 18
4.1
Parameters .............................................................................................................................18
4.2
Declaration of parameters ......................................................................................................19
4.3
Address space ........................................................................................................................20
5 Interrupts/diagnostics alarms ................................................................................................................... 26
5.1
Status and error displays ........................................................................................................26
5.2
Interrupts .................................................................................................................................28
5.3
Diagnostics alarms..................................................................................................................29
6 Technical specifications ........................................................................................................................... 30
A Dimensional drawing ............................................................................................................................... 36
B Parameter data records ........................................................................................................................... 38
B.1
Parameter assignment and structure of the parameter data records.....................................38
B.2
Structure of data sets 64 to 79................................................................................................40
B.3
Structure of data set DS 129 ..................................................................................................41
B.4
Structure of data set DS 130 ..................................................................................................43
B.5
Structure of data set DS 131 ..................................................................................................45
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
6
Equipment Manual, 04/2020, A5E34934019-AD
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
7
Documentation guide
Application examples The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
8
Equipment Manual, 04/2020, A5E34934019-AD
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
9
Product overview
2.1
Properties
Article number 6ES7522-5HH00-0AB0
View of the module
2
Figure 2-1 View of the DQ 16x230VAC/2A ST module
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
10
Equipment Manual, 04/2020, A5E34934019-AD
Product overview 2.1 Properties
Properties
The module has the following technical properties: 16 digital outputs (relays) Supply voltage of the 24 V DC relay coils Rated output voltage 230 V AC (24 V DC up to 120 V DC/24 V AC up to 230 V AC) Rated output current 2 A per channel Configurable substitute values (per channel) Configurable diagnostics Switching cycle counter for relay contacts Suitable for solenoid valves, DC contactors, and indicator lights The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Module-internal Shared Output (MSO)
Configurable submodules / submodules for Shared Device Switching cycle counter
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
V1.1.0 or higher
Configuration software
STEP 7 (TIA Portal) as of V13 SP1 with
HSP 0119
GSD file in
STEP 7 (TIA Portal) as of V12 or
X X X X (PROFINET IO only) X (PROFINET IO only) V15.1 or higher with HSP0282
· PROFINET IO only
· Central operation with an S7-1500 CPU
STEP 7 V5.5 SP3 or higher --- / X --- / X X X
(PROFINET IO only) X
(PROFINET IO only) X
(PROFINET IO only)
You configure the module with STEP 7 (TIA Portal) or with a GSD file.
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
11
Product overview 2.1 Properties
Compatibility
The following table shows the compatibility of the modules and the dependencies between hardware functional status (FS) and firmware version (FW) used:
Hardware functional status FS01 FS02
Firmware version V1.0.0 V1.1.0
Note
Upgrade to V1.1.0 not possible
Upgrade and downgrade possible between V1.1.0 and higher
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front door
Other components
For example, you order the front connector including the potential bridge and cable tie separately.
You can find additional information on accessories and the article numbers in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
12
Equipment Manual, 04/2020, A5E34934019-AD
2.2
Functions
Product overview 2.2 Functions
2.2.1
Switching cycle counter
The "Switching cycle counter" function records the number of switching cycles of the integrated relay contact. When the "Limit value warning" maintenance alarm is configured and enabled, the "Limit value warning" maintenance alarm is triggered when the specified number of switching cycles is reached.
Typical areas of application:
Recording the number of switching cycles of the integrated relay contacts
Predictive maintenance so maintenance and service intervals are more predictable, for example
Advantages
No programming required, because the switching cycle counter is integrated into the module.
"Monitoring" of each individual channel is possible. Select which outputs are "monitored".
The system configuration is flexible and individually adaptable.
Increase in plant availability. You can foresee a module or actuator replacement in advance for the next maintenance cycle.
Requirement
Firmware version as of V1.1.0 of the module.
Configuration
The switching cycle counter for the integrated relay contacts is always activated. Configure the maintenance alarm to monitor the channels with the following parameters: Trigger maintenance interrupt when the limit is reached Set limit for maintenance interrupt
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
13
Product overview 2.2 Functions
How it works
The module counts the switching cycles by evaluating the rising edges of an output signal. If the module detects a rising edge, the switching cycle counter (24-bit) for the respective channel is incremented. The counter stops when the high limit is reached.
If you activate the "Maintenance switching cycles" parameter, the "Limit value warning" of the maintenance alarm is signaled when the limit is exceeded. Alternatively, activate the maintenance interrupt in the parameter data sets starting at DS 64.
The current counter states are stored on the module cyclically (approx. every 20 seconds) and retentively. The switching cycle counters are reset each time the module is restarted (power off/on). If there is no supply voltage, the switching cycle counter stops.
You can read the current counter states with data set DS 129 (Page 41). Data set DS 129 contains the counter status for each channel in UDINT format.
You can read the limits for each channel in UDINT format with data set DS 130 (Page 43).
You can set a limit for each switching cycle counter with the "Switching cycle limit" parameter or data set DS 131 (Page 45).
Note:
The number of permissible switching cycles depends on the type and size of the load. We recommend setting the switching cycle counter to 90% of the actual service life of the contacts, for example. You then still have adequate time to preemptively replace the module.
You can find the permissible number of switching cycles in theTechnical specifications (Page 30).
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
14
Equipment Manual, 04/2020, A5E34934019-AD
Wiring
3
This section contains the block diagram of the module and outlines various wiring options.
You will find information on wiring the front connector, establishing a cable shield, etc in the S7-1500/ET 200MP system manual (https://support.industry.siemens.com/cs/ww/en/view/59191792) in section Wiring.
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
15
Wiring
Wiring and block diagram The example in the following figure shows the terminal assignment and the assignment of the channels. The individual channels are connected with a relay.
Note Note that the 24 V DC supply voltage for this module must always be supplied by terminals 19/20 and 39/40. Use the supplied potential jumpers for this purpose.
Relay 16x Backplane bus interface
L+ Power supply 24 V DC for relay contacts
M Ground
CHx RUN ERROR
MAINT PWR
Figure 3-1 Block diagram and terminal assignment
Channel or channel status LED (green) Status display LED (green) Error display LED (red)
LED maintenance display (yellow) POWER supply voltage LED (green)
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
16
Equipment Manual, 04/2020, A5E34934019-AD
Wiring
Tip: Using the potential jumpers Use the potential jumpers supplied with the front connector if you want to distribute the 24 V DC supply voltage to a neighboring module. This helps you to avoid having to terminate two wires to one terminal. Proceed as follows: 1. Connect the 24 V DC supply voltage to terminals 19 and 20. 2. Insert the potential jumpers between terminals 19 and 39 (L+) and between terminals 20 and 40 (M). 3. Use the terminals 39 and 40 to loop the potential to the next module.
Figure 3-2 Using the potential jumpers
Note Ensure that the maximum current load of 8 A per potential jumper is not exceeded.
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
17
Parameters/address space
4
4.1
Parameters
DQ 16x230VAC/2A ST parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The table below lists the parameters that can be set. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
For parameter assignment in the user program, the parameters are transferred to the module with the WRREC instruction (reconfiguration in RUN) using data records; see section Parameter assignment and structure of the parameter data records (Page 38).
Table 4- 1 Configurable parameters and their defaults
Parameter
Range of values
Default
Diagnostics No supply voltage L+ Reaction to CPU STOP
Maintenance switching cycle counter Switching cycle limits Switching cycle counter limit
Yes/No
· Turn off · Keep last value · Output substitute
value 1
No Turn off
Yes/No
No
0 to 16777214
0
Reconfiguration Range of effectiveness with configu-
in RUN
ration software, e.g. STEP 7
GSD file PROFINET IO
GSD file PROFIBUS DP
Yes
Module
Module
Yes
Channel
Channel
Yes Yes
Channel
---
Channel
---
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
18
Equipment Manual, 04/2020, A5E34934019-AD
Parameters/address space 4.2 Declaration of parameters
4.2
Declaration of parameters
No supply voltage L+ Enabling of the diagnostics at no or insufficient supply voltage L+.
Reaction to CPU STOP Determines the reaction of the output to the CPU going into STOP state or when the connection to the CPU is interrupted.
Maintenance switching cycles You use this parameter to enable the maintenance alarm "Limit value warning" when the switching cycle counter limit is violated. You configure the limit with the parameter "Switching cycle limit" for each channel CHx.
Switching cycle limit Defines the limit value channel-by-channel. If this value is exceeded, the "Limit value warning" maintenance alarm is signaled. Enter an integer value between 0 and 16777214.
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
19
Parameters/address space 4.3 Address space
4.3
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image output/input.
Configuration options of DQ 16x230VAC/2A ST You can configure the module with STEP 7 or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different short designations/module names.
The following configurations are possible:
Table 4- 2 Configuration options
Configuration
Short designation/module name in the GSD file
1 x 16-channel without value status 1 x 16-channel with value status 2 x 8-channel without value status
DQ 16x230VAC/2A ST DQ 16x230VAC/2A ST QI DQ 16x230VAC/2A ST S
2 x 8-channel with value status
DQ 16x230VAC/2A ST S QI
1 x 16-channel with value status for module-internal Shared Output with up to 4 submodules
DQ 16x230VAC/2A ST MSO
Configuration software, e.g., STEP 7
Integrated in hardware catalog STEP 7 V13,
SP1 or higher with HSP 0119
X X X (PROFINET IO only) X (PROFINET IO only) X (PROFINET IO only)
GSD file in STEP 7 as of V12 or
STEP 7 as of V5.5 SP3
X X X (PROFINET IO only) X (PROFINET IO only) X (PROFINET IO only)
Note Substitute value behavior in shared device operation with the following configuration (V1.0 only): · 2 x 8-channel with / without value status
If the system is in shared device mode and one of the IO controllers involved goes into STOP or fails due to a communication failure, for example, all submodules of the output module perform the configured substitute value reaction (e.g. shutdown).
This means that even when only one IO controller fails, the other IO controllers associated with the shared device no longer control the assigned submodule of the output module.
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
20
Equipment Manual, 04/2020, A5E34934019-AD
Parameters/address space 4.3 Address space
Value status (Quality Information, QI) The value status is always activated for the following modules: DQ 16x230VAC/2A ST QI DQ 16x230VAC/2A ST S QI DQ 16x230VAC/2A ST MSO An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Note Limit value warning The maintenance alarm "Limit value warning" has no effect on the value status.
Address space for configuration as 16-channel DQ 16x230VAC/2A ST QI The following figure shows the assignment of the address space for the configuration as a 16-channel module with value status. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. The letters "a to b" are printed on the module; "QB a", for example, stands for module start address output byte a.
Figure 4-1 Address space for configuration as 16-channel DQ 16x230VAC/2A ST QI with value status
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
21
Parameters/address space 4.3 Address space Address space for configuration as 2 x 8-channel DQ 16x230VAC/2A ST S QI
For the configuration as a 2 x 8-channel module, the channels of the module are divided into two submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of IO controllers depends on the interface module being used. Please observe the information in the manual for the particular interface module. Unlike the 1 x 16-channel module configuration, each of the two submodules has a freely assignable start address. The addresses for the respective value status of a submodule can also be assigned by the user.
Figure 4-2 Address space for configuration as 2 x 8-channel DQ 16x230VAC/2A ST S QI with value status
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
22
Equipment Manual, 04/2020, A5E34934019-AD
Parameters/address space 4.3 Address space
Address space for configuration as 1 x 16-channel DQ 16x230VAC/2A ST MSO For the configuration as a 1 x 16-channel module (module-internal Shared Output, MSO), channels 0 to 15 of the module are copied to multiple submodules. Channels 0 to 15 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device: The IO controller to which submodule 1 is assigned has write access to outputs 0 to 15. The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs 0 to 15. The number of IO controllers depends on the interface module being used. Observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule on which it occurs. For the first submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For the 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state.
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
23
Parameters/address space 4.3 Address space
The figure below shows the assignment of the address space for submodules 1 and 2 and the value status.
Figure 4-3 Address space for configuration as 1 x 16-channel DQ 16x230VAC/2A ST MSO with value status
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
24
Equipment Manual, 04/2020, A5E34934019-AD
Parameters/address space 4.3 Address space
The figure below shows the assignment of the address space for submodules 3 and 4 and the value status.
Reference
Figure 4-4 Address space for configuration as 1 x 16-channel DQ 16x230VAC/2A ST MSO with value status
You can find information on the module-internal shared input/shared output (MSI/MSO) function in the section Module-internal shared input/shared output (MSI/MSO) of the function manual PROFINET with STEP 7 V15 (http://support.automation.siemens.com/WW/view/en/49948856).
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
25
Interrupts/diagnostics alarms
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of the DQ 16x230VAC/2A ST.
5
Figure 5-1 LED displays of the DQ 16x230VAC/2A ST module
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
26
Equipment Manual, 04/2020, A5E34934019-AD
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Corrective measures for diagnostics alarms can be found in the section Diagnostics alarms (Page 29).
RUN and ERROR LED
Table 5- 1 RUN and ERROR status and error displays
LED
RUN
ERROR
Off
Off
Flashes
Off
On
Off
On
Flashes
Flashes Flashes
Meaning Voltage missing or too low at backplane bus
The module starts and flashes until the valid parameter assignment is set. Module parameters assigned Indicates module error because supply voltage L+ is missing Hardware defective
Solution
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check whether too many modules are in-
serted. ---
Check the supply voltage L+ at the terminals 19 and 20 or 39 and 40. Replace the module.
LED MAINT
Table 5- 2 MAINT status display
LED MAINT Off On
Meaning 0 = No maintenance interrupt is pending.
1 = The maintenance interrupt "Limit value warning" is pending.
Solution ---
Perform maintenance.
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
27
Interrupts/diagnostics alarms 5.2 Interrupts
PWR LED
Table 5- 3 PWR status display
LED PWR Off On
Meaning Supply voltage L+ too low or missing
Supply voltage L+ is present and OK
CHx LED
Table 5- 4 CHx status display
LED CHx Off On
Meaning 0 = Status of the output signal
1 = Status of the output signal
Solution Check the supply voltage L+ at the terminals 19 and 20 or 39 and 40. ---
Solution -----
5.2
Interrupts
The digital output module DQ 16x230VAC/2A ST supports diagnostics interrupts and maintenance alarms.
Diagnostic interrupt The module generates a diagnostic interrupt at the following event: Missing supply voltage L+ Parameter assignment error
Maintenance alarm The module generates a maintenance alarm at the following event: Limit value warning.
Detailed information You can find detailed information on the event in the error organization block with the "RALRM" instruction (read alarm status information) and in the STEP 7 online help.
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
28
Equipment Manual, 04/2020, A5E34934019-AD
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
Diagnostics alarms
A diagnostic interrupt is generated and the ERROR LED flashes on the module for each diagnostics message. You can read out the diagnostics interrupts, for example, in the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)" on the Internet (https://support.industry.siemens.com/cs/ww/en/view/78324181).
Table 5- 5 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm
Parameter assignment error
Error code 10H
No load voltage
11H
Limit value warning
17H
Meaning
The module cannot evaluate parameters for the channel
Incorrect parameter assignment
Supply voltage L+ of the module is missing
The configured limit for switching cycles has been exceeded.
Corrective measures Correct the parameter assignment
Connect supply voltage L+ to module/channel · Replace module / actuator as a
precautionary measure
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
29
Technical specifications
6
Technical specifications of the DQ 16x230VAC/2A ST
The following table shows the technical specifications as of 04/2020. You will find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7522-5HH00-0AB0/td?dl=en).
Article number General information
HW functional status Firmware version · FW update possible Product function · I&M data
· Isochronous mode Engineering with
· STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Operating mode · DQ
· DQ with energy-saving function
· PWM
· Oversampling
· MSO
· Integrated operating cycle counter Supply voltage
Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
6ES7522-5HH00-0AB0
From FS02 V1.1.0 Yes
Yes; I&M0 to I&M3 No
V13 SP1 / -
V5.5 SP3 / -
V1.0 / V5.1
V2.3 / -
Yes No No No Yes Yes; FW V1.1.0 or higher
24 V 20.4 V 28.8 V Yes
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
30
Equipment Manual, 04/2020, A5E34934019-AD
Technical specifications
Article number Input current
Current consumption, max. Output voltage
Rated value (AC)
Power Power available from the backplane bus
Power loss Power loss, typ.
Digital outputs Type of digital output Number of digital outputs Current-sinking Current-sourcing Digital outputs, parameterizable Short-circuit protection Controlling a digital input Size of motor starters according to NEMA, max.
Switching capacity of the outputs · on lamp load, max.
Output current · for signal "1" rated value
· for signal "1" permissible range, min.
· for signal "1" permissible range, max.
· for signal "0" residual current, max. Parallel switching of two outputs
· for logic links
· for uprating
· for redundant control of a load Switching frequency
· with resistive load, max.
· with inductive load, max.
· on lamp load, max. Total current of the outputs
· Current per channel, max.
· Current per group, max.
· Current per module, max.
6ES7522-5HH00-0AB0
185 mA
230 V; 24 V DC to 120 V DC / 24 V AC to 230 V AC
0.8 W
5 W
Relays 16 Yes Yes Yes No Yes 5
50 W (230 V AC), 5 W (24 V DC)
2 A 10 mA; 10 V 2 A; thermal continuous current 0 A
Yes No Yes
1 Hz 0.5 Hz 1 Hz
2 A; see additional description in the manual 4 A; see additional description in the manual 32 A; see additional description in the manual
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
31
Technical specifications
Article number Relay outputs
· Number of relay outputs · Rated supply voltage of relay coil L+ (DC) · Current consumption of relays (coil current
of all relays), typ. · external protection for relay outputs · Contact connection (internal) · Number of operating cycles, max. · Relay approved acc. to UL 508 Switching capacity of contacts
with inductive load, max. with resistive load, max. Cable length · shielded, max. · unshielded, max. Interrupts/diagnostics/status information Diagnostics function Substitute values connectable Alarms · Diagnostic alarm Diagnostic messages · Monitoring the supply voltage · Wire-break · Short-circuit Diagnostics indication LED · RUN LED · ERROR LED · MAINT LED · Monitoring of the supply voltage (PWRLED) · Channel status display · for channel diagnostics · for module diagnostics
6ES7522-5HH00-0AB0
16 24 V 185 mA
Miniature circuit breaker B10 / B16 No see additional description in the manual No
2 A; see additional description in the manual 2 A; see additional description in the manual
1 000 m 600 m
Yes Yes
Yes
Yes No No
Yes; green LED Yes; red LED Yes; Yellow LED Yes; green LED
Yes; green LED No Yes; red LED
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
32
Equipment Manual, 04/2020, A5E34934019-AD
Technical specifications
Article number Potential separation Potential separation channels
· between the channels
6ES7522-5HH00-0AB0 No
· between the channels, in groups of
2
· between the channels and backplane bus Yes
· Between the channels and load voltage L+ Yes
Permissible potential difference between different circuits
Isolation Isolation tested with
Standards, approvals, certificates Suitable for safety functions
Ambient conditions Ambient temperature during operation
· horizontal installation, min.
250 V AC between the channels and the supply voltage L+; 250 V AC between the channels and the backplane bus; 500 V AC between the channels
Between channels: 3 100 V DC; between channels backplane bus: 3 100 V DC; between L+ and backplane bus: 707 V DC (type test)
No
-25 °C; From FS02
· horizontal installation, max.
60 °C
· vertical installation, min.
-25 °C; From FS02
· vertical installation, max.
40 °C
Decentralized operation Prioritized startup
Dimensions Width Height Depth
Weights Weight, approx.
Yes
35 mm 147 mm 129 mm
350 g
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
33
Technical specifications
Details on the number of switching cycles
The following tables list the permissible number of switching cycles depending on the applied voltage and current load. Different values apply in each case to resistive and inductive loads.
Table 6- 1 Switching capacity and service life of relay contacts for resistive load
For resistive load Voltage
24 V DC
60 V DC 120 V DC 24 V AC 48 V AC 60 V AC 120 V AC
230 V AC
Current
2.0 A 1.0 A 0.5 A 0.5 A 0.2 A 1.5 A 1.5 A 1.0 A 2.0 A 1.0 A 0.5 A 2.0 A 1.0 A 0.5 A
Number of switching cycles (typ.) 0.1 million 0.2 million 1.0 million 0.2 million 0.6 million 1.5 million 1.5 million 1.5 million 1.0 million 1.5 million 2.0 million 1.0 million 1.5 million 2.0 million
Table 6- 2 Switching capacity and lifetime of the relay contacts for inductive load
For inductive load Voltage
24 V DC
60 V DC 120 V DC 24 V AC 48 V AC 60 V AC 120 V AC
230 V AC
Current
2.0 A 1.0 A 0.5 A 0.5 A 0.2 A 1.5 A 1.5 A 1.5 A 2.0 A 1.0 A 0.5 A 2.0 A 1.0 A 0.5 A
Number of switching cycles (typ.) 0.05 million 0.1 million 0.5 million 0.1 million 0.3 million 1.0 million 1.0 million 1.0 million 0.7 million 1.0 million 1.5 million 0.7 million 1.0 million 1.5 million
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
34
Equipment Manual, 04/2020, A5E34934019-AD
Technical specifications
Power reduction (derating) of outputs according to number of channels The following graphs show the number of usable channels in relation to the mounting position of the S71500 automation system/ET 200MP distributed I/O system and the ambient temperature. The total current of the outputs remains unaffected.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Information on power reduction of outputs according to number of channels
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
35
Dimensional drawing
A
The dimension drawing of the module on the mounting rail, as well as a dimension drawing with open front cover, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of the DQ 16x230VAC/2A ST module
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
36
Equipment Manual, 04/2020, A5E34934019-AD
Dimensional drawing
Figure A-2 Dimension drawing of the DQ 16x230VAC/2A ST module, side view with open front cover
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
37
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When a GSD file is used to configure a module, dependencies can arise when "assigning the parameters".
There are no dependencies for this module. You can assign the individual parameters in any combination.
Parameter assignment in the user program
You have the option to reconfigure the module in RUN (e.g. the response of selected channels to the CPU STOP state can be changed in RUN without having an effect on the other channels).
Changing parameters in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 64 to 79. The parameters set in STEP 7 are not changed in the CPU, which means the parameters set in STEP 7 are valid again after a restart.
The parameters are only checked for plausibility by the module after the transfer.
STATUS output parameter
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You obtain the diagnostics data records 0 and 1 with the read back parameter data records 0 and 1. You can find additional information in the Interrupts section of the manual for the PROFIBUS DP interface module in the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
38
Equipment Manual, 04/2020, A5E34934019-AD
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Assignment of data record and channel For the configuration as a 1 x 16-channel module, the parameters are located in data records 64 to 79 and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 ... Data record 78 for channel 14 Data record 79 for channel 15
For the configuration as a 2 x 8-channel module, the module has 2 submodules with eight channels each. The parameters for the channels are located in data records 64 to 71 and are assigned as follows: Data records 64 to 71 for channels 0 to 7 (submodule 1) Data records 64 to 71 for channels 8 to 15 (submodule 2) Address the respective submodule for data record transfer.
Assignment of data record for the switching cycle counter The parameters for the switching cycle counter are located in the data records 129 to 130 and are assigned as follows: Data record 129 for channels 0 to 15 to read the counter values Data record 130 for channels 0 to 15 to read the limit values
For the configuration as a 2 x 8-channel module, the module has 2 submodules with eight channels each. The parameters for the switching cycle counter are located in the data records 129 to 130 and are assigned as follows: Data records 129 for channels 0 to 7 (submodule 1) and channels 8 to 15 (submodule 2) Data records 130 for channels 0 to 7 (submodule 1) and channels 8 to 15 (submodule 2) Address the respective submodule for data record transfer.
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
39
Parameter data records B.2 Structure of data sets 64 to 79
B.2
Structure of data sets 64 to 79
Data record structure
The figure below shows the structure of data record 64 for channel 0 as an example. The structure is identical for channels 1 to 16. The values in byte 0 and byte 1 are fixed and may not be changed.
Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 64: Bytes 0 to 3
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
40
Equipment Manual, 04/2020, A5E34934019-AD
Parameter data records B.3 Structure of data set DS 129
B.3
Structure of data set DS 129
Structure of data set 129
You can read the current states of the switching cycle counters with data set 129. The counter status is supplied for each channel in UDINT format. The length of the data set results from the number of channels in the selected submodule.
The following figure shows you the structure of data set 129 for 16 channels.
Figure B-2 Structure of data set 129: Byte 0 to 63
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
41
Parameter data records B.3 Structure of data set DS 129
The following figure shows you the structure of data set 129 for 2 submodules with 8 channels each.
Figure B-3 Structure of data set 129: Byte 0 to 31
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
42
Equipment Manual, 04/2020, A5E34934019-AD
Parameter data records B.4 Structure of data set DS 130
B.4
Structure of data set DS 130
Structure of data set 130
The limits of the switching cycle counters are read out with data set 130. The set value is supplied for each channel in UDINT format. The length of the data set results from the number of channels in the selected submodule.
The following figure shows you the structure of data set 130 for 16 channels.
Figure B-4 Structure of data set 130: Byte 0 to 63
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
43
Parameter data records B.4 Structure of data set DS 130
The following figure shows you the structure of data set 130 for 2 submodules with 8 channels each.
Figure B-5 Structure of data set 130: Byte 0 to 31
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
44
Equipment Manual, 04/2020, A5E34934019-AD
Parameter data records B.5 Structure of data set DS 131
B.5
Structure of data set DS 131
Structure of data set 131 The following figure shows you the structure of data set 131 for 16 channels. Enable a parameter by setting the corresponding bit to "1".
Figure B-6 Structure of data set 131: Bytes 0 to 7
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
Equipment Manual, 04/2020, A5E34934019-AD
45
Parameter data records B.5 Structure of data set DS 131
The following figure shows you the structure of data set 131 for 2 submodules with 8 channels each.
Figure B-7 Structure of data set 131: Bytes 0 to 7
Digital output module DQ 16x230VAC/2A ST Relay (6ES7522-5HH00-0AB0)
46
Equipment Manual, 04/2020, A5E34934019-AD
SIMATIC
S7-1500/ET 200MP Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _Di_ag_n_os_tic_a_la_rm_s_________5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_
09/2016
A5E03485733-AD
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03485733-AD 11/2016 Subject to change
Copyright © Siemens AG 2013 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change:
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
4
Manual, 09/2016, A5E03485733-AD
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
4 Parameters/address space ................................................................................................................... 14
4.1
Parameters............................................................................................................................. 14
4.2
Address space ....................................................................................................................... 15
5 Diagnostic alarms ................................................................................................................................. 18
5.1
Status and error displays ....................................................................................................... 18
6 Technical specifications ........................................................................................................................ 20
A Dimensional drawing............................................................................................................................. 24
B Parameter data records ........................................................................................................................ 26
B.1
Parameter assignment and structure of the parameter data records .................................... 26
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
6
Manual, 09/2016, A5E03485733-AD
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
8
Manual, 09/2016, A5E03485733-AD
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
10
Manual, 09/2016, A5E03485733-AD
Product overview
2.1
Properties
Article number
6ES7522-5FF00-0AB0
View of the module
2
Properties
Figure 2-1 View of the DQ 8x230VAC/2A ST module
The module has the following technical properties: 8 digital outputs (Triac) Rated output voltage 120 V/230 V AC Rated output current 2 A Configurable substitute values (per channel) Suitable for solenoid valves, DC contactors, indicator lights and smaller single phase
drives
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
11
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware version of the module
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Module-internal Shared Output (MSO)
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V2.0.0 or higher
Configurable after interface module IM 155-5 DP ST
V2.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
V12 or higher
--- / X
V12 or higher
X
V12 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 or higher
X
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following components are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front door
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
12
Manual, 09/2016, A5E03485733-AD
Wiring
3
This section contains the block diagram of the module and outlines various wiring options. You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Note Do not insert the potential jumpers included with the front connector!
Wiring and block diagram
The example in the following figure shows the terminal assignment and the assignment of the channels.
Backplane bus interface
CHx RUN ERROR
Channel or channel status LED (green/red) Status display LED (green) Error display LED (red)
Figure 3-1 Block diagram and terminal assignment
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
13
Parameters/address space
4
4.1
Parameters
DQ 8x230VAC/2A ST parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
For parameter assignment in the user program, the parameters are transferred to the module using the WRREC instruction (parameter reassignment in RUN) and data records; see chapter Parameter assignment and structure of the parameter data records (Page 26).
Table 4- 1 Configurable parameters and their defaults
Parameters
Range of values
Diagnostics
Reaction to CPU STOP
· Turn off · Keep last value · Output substitute value 1
Default setting Parameter assignment in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
GSD file
GSD file
PROFINET IO PROFIBUS DP
Turn off
Yes
Channel
Channel
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
14
Manual, 09/2016, A5E03485733-AD
Parameters/address space 4.2 Address space
4.2
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image output/input.
Configuration options of DQ 8x230VAC/2A ST
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different short designations/module names.
The following configurations are possible:
Table 4- 2 Configuration options
Configuration
1 x 8-channel without value status 1 x 8-channel with value status for module-internal Shared Output with up to 4 submodules
Short designation/module name in the GSD file
DQ 8x230VAC/2A ST DQ 8x230VAC/2A ST MSO
Configuration software, e.g., STEP 7 (TIA Portal)
Integrated in hardware catalog
STEP 7 (TIA Portal)
X
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5
SP3 or higher
X
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the DQ 8x230VAC/2A ST MSO module. An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Address space for configuration as 8-channel DQ 8x230VAC/2A ST
The following figure shows the assignment of the address space for the configuration as a 8-channel module with value status. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. The letters "a to d" are printed on the module; "QB a", for example, stands for module start address output byte a.
Figure 4-1 Address space for configuration as 8-channel DQ 8x230VAC/2A ST
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
15
Parameters/address space 4.2 Address space
Address space for configuration as 1 x 8-channel DQ 8x230VAC/2A ST MSO
For the configuration as a 1 x 8-channel module (module-internal Shared Output, MSO), channels 0 to 7 of the module are copied to multiple submodules. Channels 0 to 7 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device: The IO controller to which submodule 1 is assigned has write access to outputs 0 to 7. The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs
0 to 7. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For the 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state.
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
16
Manual, 09/2016, A5E03485733-AD
Parameters/address space 4.2 Address space
The following figure shows the assignment of the address space for submodules 1, 2, 3, and 4 and the value status.
Reference
Figure 4-2 Address space for configuration as 1 x 8-channel DQ 8x230VAC/2A ST S MSO with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
17
Diagnostic alarms
5.1
Status and error displays
LED displays
The following figure shows the LED displays (status and error displays) of DQ 8x230VAC/2A ST.
5
Figure 5-1 LED displays of the module DQ 8x230VAC/2A ST
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
18
Manual, 09/2016, A5E03485733-AD
Diagnostic alarms 5.1 Status and error displays
Meaning of the LED displays
The following table explains the meaning of the status and error displays.
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On
Flashes
Off Off Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured
Hardware defective
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Replace the module.
CHx LED
Table 5- 2 CHx status display
LED CHx Off On
Meaning 0 = Status of the output signal
1 = Status of the output signal
Remedy ---
---
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
19
Technical specifications
6
Technical specifications of the DQ 8x230VAC/2A ST
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7522-5FF00-0AB0
DQ 8x230VAC/2A ST (Triac) FS01 V2.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V12 / V12
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
DQ
Yes
DQ with energy-saving function
No
PWM
No
Oversampling
No
MSO
Yes
Output voltage
Rated value (AC)
120/230 V AC, 50 / 60 Hz
Power Power consumption from the backplane bus Power loss Power loss, typ. Digital outputs
0.9 W 10.8 W
Number of outputs Sourcing output Short-circuit protection Switching capacity of outputs With resistive load, max. With lamp load, max. Output voltage For signal "1", min.
8 Yes No
2 A 50 W
L1 (-1.5 V) at maximum output current; L1 (-8.5 V) at minimum output current
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
20
Manual, 09/2016, A5E03485733-AD
Technical specifications
6ES7522-5FF00-0AB0
Output current
For signal "1" rated value
2 A
For signal "1" permitted range, min.
10 mA
For signal "1" permitted range, max.
15 A; max. 1 AC cycle
For signal "0" residual current, max.
2 mA
Output delay with resistive load
"0" to "1", max.
1 AC cycle
"1" to "0", max.
1 AC cycle
Parallel connection of two outputs
For logic operations
No
For increased performance
No
For redundant control of a load
Yes
Switching frequency
With resistive load, max.
10 Hz
With inductive load, max.
0.5 Hz
With lamp load, max.
1 Hz
Total current of outputs
Current per channel, max.
2 A; see additional description in the manual
Current per group, max.
2 A; see additional description in the manual
Current per module, max.
10 A; see additional description in the manual
Triac outputs
Size of motor starter according to NEMA, max.
5
Cable length
shielded, max.
1000 m
unshielded, max.
600 m
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
No
Substitute values can be applied
Yes
Interrupts
Diagnostic interrupt
No
Diagnostics alarms
Monitoring of supply voltage
No
Wire break
No
Short-circuit
No
Diagnostics indicator LED
RUN LED
Yes; green LED
ERROR LED
Yes; red LED
Monitoring of supply voltage (PWR LED)
No
Channel status display
Yes; green LED
For channel diagnostics
No
For module diagnostics
Yes; red LED
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
21
Technical specifications
Electrical isolation Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Between the channels and load voltage L1 Permitted potential difference Between different circuits
Insulation Insulation tested with Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed operation Prioritized startup Dimensions Width Height Depth Weights Weight, approx.
6ES7522-5FF00-0AB0
Yes 1 Yes Yes
250 V AC between the channels and the backplane bus; 500 V AC between the channels
3100 V DC
0 °C 60 0 °C 40 °C
Yes
35 mm 147 mm 129 mm
290 g
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
22
Manual, 09/2016, A5E03485733-AD
Technical specifications
Power reduction (derating) to aggregate current of outputs (per module)
The following graphs show the loading capacity of the outputs in relation to the mounting position of the S71500 automation system/ET 200MP distributed I/O system and the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Details on aggregate current of outputs (per module)
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
23
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in the appendix. Always observe the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DQ 8x230VAC/2A ST module
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
24
Manual, 09/2016, A5E03485733-AD
Dimensional drawing
Figure A-2 Dimensional drawing of the DQ 8x230VAC/2A ST module, side view with open front cover
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
25
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When a GSD file is used to configure a module, dependencies can arise when "assigning the parameters".
There are no dependencies for this module. You can assign the individual parameters in any combination.
Parameter assignment in the user program
You have the option to reconfigure the module in RUN (e.g. the response of selected channels to the CPU-STOP state can be changed in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 64 to 71. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You get the diagnostics data records 0 and 1 for the read back parameter data records 0 and 1. You can find more information in the Interrupts section of the PROFIBUS DP interface module device manual on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
26
Manual, 09/2016, A5E03485733-AD
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Assignment of data record and channel
The channel parameters of the module are included in data records 64 to 71 and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 Data record 66 for channel 2 Data record 67 for channel 3 Data record 68 for channel 4 Data record 69 for channel 5 Data record 70 for channel 6 Data record 71 for channel 7
Data record structure
The example in the following figure shows the structure of data record 64 for channel 0. The structure of channels 1 to 7 is identical. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 64: Bytes 0 to 3
Digital output module DQ 8x230VAC/2A ST Triac (6ES7522-5FF00-0AB0)
Manual, 09/2016, A5E03485733-AD
27
SIMATIC
S7-1500/ET 200MP DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_
06/2018
A5E03485650-AF
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03485650-AF 08/2018 Subject to change
Copyright © Siemens AG 2013 - 2018. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change: New licensing conditions and copyright information of the Open Source Software The module features a switching cycle counter as of firmware version V2.2.0.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
4
Manual, 06/2018, A5E03485650-AF
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 10
2.1
Properties ................................................................................................................................ 10
2.2 2.2.1 2.2.2
Functions ................................................................................................................................13 Pulse-width modulation (PWM) ..............................................................................................13 Switching cycle counter ..........................................................................................................17
3 Wiring ................................................................................................................................................... 19
4 Parameters/address space ................................................................................................................... 21
4.1 4.1.1 4.1.2 4.1.3 4.1.4
Parameters .............................................................................................................................21 DQ operating mode parameter ...............................................................................................22 Explanation of the parameters of DQ mode ...........................................................................23 Pulse width modulation operating mode parameter ...............................................................24 Explanation of the parameters of pulse width modulation mode ............................................25
4.2 4.2.1 4.2.2
Address space ........................................................................................................................26 Address space operating mode DQ........................................................................................27 Address space operating mode pulse-width modulation ........................................................29
5 Interrupts/diagnostics alarms................................................................................................................. 30
5.1
Status and error displays ........................................................................................................30
5.2
Interrupts .................................................................................................................................32
5.3
Diagnostics alarms..................................................................................................................33
6 Technical specifications ........................................................................................................................ 34
A Dimensional drawing............................................................................................................................. 41
B Parameter data records......................................................................................................................... 43
B.1
Parameter assignment............................................................................................................43
B.2
Structure of parameter data sets DS 64 - 71 ..........................................................................45
B.3
Structure of data set DS 129 ..................................................................................................46
B.4
Structure of data set DS 130 ..................................................................................................47
B.5
Structure of data set DS 131 ..................................................................................................48
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
6
Manual, 06/2018, A5E03485650-AF
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
7
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
8
Manual, 06/2018, A5E03485650-AF
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
9
Product overview
2.1
Properties
Article number
6ES7522-1BF00-0AB0
View of the module
2
Figure 2-1 View of the DQ 8x24VDC/2A HF module
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
10
Manual, 06/2018, A5E03485650-AF
Product overview 2.1 Properties
Properties
The module has the following technical properties: 8 digital outputs, electrically isolated in groups of 4
of which optional channels 0 and 4 are available for pulse width modulation (PWM). Rated output voltage 24 V DC Rated output current 2 A Configurable substitute values (per channel) Configurable diagnostics (per channel) Suitable for solenoid valves, contactors, DC contactors and indicator lights Switching cycle counter for connected actuators, e.g. solenoid valves The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Module-internal Shared Output (MSO) Pulse-width modulation (PWM) for channel 0 and 4 Switching cycle counter
Configuration software
Firmware version of the module
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
V1.0.0 or higher
V12 or higher
--- / X
V1.0.0 or higher
V12 or higher
X
V1.0.0 or higher
V12 or higher
X
V2.0.0 or higher
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V2.1.0 or higher
as of V13, SP1 with HSP 0178
X (PROFINET IO only)
V2.2.0 or higher as of V15.0 with HSP0247
X
· PROFINET IO only
(PROFINET IO only)
· Central operation with a S7-1500 CPU is supported
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
11
Product overview 2.1 Properties
Compatibility
The following table shows the compatibility of the modules and the dependencies between hardware functional status (FS) and firmware version (FW) used:
Hardware functional status FS01
FS02
FS03
Firmware version Note
V1.0.0 to V2.1.0 V1.0.0 to V2.1.0 V2.2.0
Upgrade and downgrade possible between V1.0.0 and V2.1.0
Upgrade and downgrade possible between V1.0.0 and V2.1.0
Upgrade and downgrade possible between V2.2.0 and higher
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front cover
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the system manual S7-1500/ET 200MP. (https://support.industry.siemens.com/cs/ww/en/view/59191792)
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
12
Manual, 06/2018, A5E03485650-AF
2.2
Functions
Product overview 2.2 Functions
2.2.1
Pulse-width modulation (PWM)
Channels 0 and 4 of the module support the pulse width modulation (PWM) function. The pulse width modulation function can be used to easily generate periodic pulses with a constant rated voltage and a variable pulse duration for the above-mentioned channels.
Advantages
Automatic generation of periodic signals (without user program). Possibility of power reduction, e.g. in solenoid valves.
Typical areas of application:
Control of proportional valves and way values (e.g. energy saving by reducing the holding current).
Heating control e.g. via an external additional power unit.
Requirement
Firmware version as of V2.1.0 of the module.
Rules
Channels 0 and 4 can be used together and individually in pulse width modulation mode. The remaining channels can continue to be used as digital outputs.
Configuration
You configure the pulse width modulation with the following parameters: Pulse width modulation mode for activating the function Pulse width modulation (time period)
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
13
Product overview 2.2 Functions
How it works
In the pulse width modulation mode, the two outputs (channels 0 and 4) provide one pulse width modulated output signal.
Pulse width modulation is characterized by its time period (frequency) and its duty factor (also referred to as ON period or Duty Cycle ). The duty factor describes the relation between pulse duration and time period.
The pulse duration is derived from the time period and the duty factor: Pulse duration = duty factor x time period.
Example for duty factor of 50% and time period of 10 ms:
Pulse duration 0.5 x 10 ms = 5 ms
You define the duty factor for channels 0 and 4 in the user program using the output value (0 ... 1000) in the process image output; see section Address space operating mode pulsewidth modulation (Page 29).
The output signal is a square wave signal (pulse sequence of on and off pulses).
Time period T (2 to 100 ms); Frequency of the pulse width modulation: f = 1/T (10 to 500 Hz) Pulse duration (duty factor x time period)
Figure 2-2 How pulse width modulation works
Minimum pulse duration
The minimum pulse duration is 300 s due to the hardware. The duty factor can be adjusted from 0.0 to 100.0%. The time period can be adjusted from 2 to 100 ms. Example: If you configure a time period of 2 ms and set a duty factor of 10% for the output, this results in a pulse duration of 200 s. In fact, the output works with a minimum pulse duration of 300 s.
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
14
Manual, 06/2018, A5E03485650-AF
Product overview 2.2 Functions
Pulse waveform
The pulse duration of the actual signal profile is slightly longer than the specified, ideal pulse duration. The figure below shows the reaction of the output to control by PWM. The blue line shows the specified, ideal signal profile (square wave signal), with which the output is controlled. The red dashed line shows the actual signal profile on the output terminal, caused by the externally connected load.
Time period Pulse duration (duty factor x time period)
Figure 2-3 Pulse waveform at output terminal
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
15
Product overview 2.2 Functions
Example for energy saving by reducing the holding current
High starting current is required to activate a solenoid valve. When the solenoid valve is activated, the current requirement is lower; it only has to be held in position. This timedependent current requirement can be met well with the PWM function.
The "ValveControl" function block shown below sets the holding current required by a solenoid valve only after the configured time (HoldTime) has expired. You can generate the required holding current with a duty factor (PWM duty cycle << 100%). While "HoldTime" is running, the output is set (duty factor = 100 %) to generate a high starting torque for the solenoid valve.
FUNCTION_BLOCK "ValveControl" { S7_Optimized_Access := 'FALSE' } VERSION : 0.1 VAR_INPUT
OutputTrigger : Bool; // Binary control of the output HoldTime : Time; // Lenght of time until the PWM output begins PWM_DutyCycle : Int; // PWM duty cycle after hold time END_VAR VAR_OUTPUT PWM_Out : Int; // Value for PWM output END_VAR VAR Hold_TON {OriginalPartName := 'TON'; LibVersion := '1.0'} : TON; END_VAR
BEGIN
#Hold_TON(IN:=#OutputTrigger, PT:=#HoldTime);
IF #OutputTrigger = FALSE THEN #PWM_Out := 0; RETURN;
END_IF; IF #Hold_TON.Q THEN // Hold time expired => switch to PWM mode #PWM_Out := #PWM_DutyCycle;
ELSE // Control output to 100% during hold time #PWM_Out := 1000;
END_IF;
END_FUNCTION_BLOCK
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
16
Manual, 06/2018, A5E03485650-AF
Product overview 2.2 Functions
2.2.2
Switching cycle counter
The function records the number of switching cycles of the output and thus the switching cycles of a connected actuator, such as those of solenoid valves. When the specified number of switching cycles is reached, the "Limit value warning" maintenance interrupt is triggered, provided it is configured and enabled. When replacing the actuator, you can reset the switching cycle counter from the user program.
When replacing modules, you have the option of pre-initializing the switching cycle counter from the user program.
Typical areas of application:
Recording the number of switching cycles of the connected devices, e.g. solenoid valves or load contactors
Predictive maintenance
Advantages
You configure this function instead of programming.
"Monitoring" of each individual channel is possible. You can select which outputs are "monitored".
You can adapt the plant configuration flexibly and individually.
Easy to service and maintain. You can enable and disable the switching cycle counter via the user program.
Increase in plant availability. You can schedule actuator replacement in advance for the next maintenance cycle.
Requirement
Firmware version as of V2.2.0 of the module.
Configuration
You configure the switching cycle counter with the following parameters: Switching cycle counter enabled/disabled Trigger maintenance interrupt when the limit is reached Set limit for maintenance interrupt
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
17
Product overview 2.2 Functions
How it works
The module counts the switching cycles by evaluating the rising edges of an output signal. If the module detects a rising edge, the switching cycle counter (24-bit) for the respective channel is incremented. After an overflow of the switching cycle counter, it starts again with 0.
If you activate the "Maintenance switching cycles" parameter, the "Limit warning" of the maintenance interrupt is triggered when the limit is exceeded. Alternatively, activate the maintenance interrupt in the parameter data sets starting at DS 64.
The current counter states are stored on the module cyclically (approx. every 20 seconds) and retentively. The switching cycle counters are reset each time the module is restarted (power off/on).
You activate the function with the "Switching cycle counter" parameter or in the parameter data sets starting at DS 64.
You can read the current counter states with data set DS 129. Data set DS 129 contains the counter status for each channel in UDINT format.
You can read the limits for each channel in UDINT format with data set DS 130.
Data set DS 131 enables you to overwrite the current counter value for each switching cycle counter.
You can set a limit for each switching cycle counter with the "Switching cycle limit" parameter or with data set DS 131.
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
18
Manual, 06/2018, A5E03485650-AF
Wiring
3
This section contains the block diagram of the module and outlines various wiring options. You can find information on wiring the front connector, establishing a cable shield, etc. in the "Wiring" section of system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Wiring and block diagram
The example in the following figure shows the terminal assignment and the assignment of the channels. You can optionally assign parameters to channels 0 and channel 4 for pulse width modulation mode.
Backplane bus interface
xL+
Supply voltage 24 V DC
xM
Ground
CHx
Channel or channel status LED
(green/red)
Figure 3-1 Block diagram and terminal assignment
MAINT RUN ERROR PWR
LED maintenance display (yellow) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
19
Wiring Wiring of the outputs for channels 0 and 4 for inductive load
If you set the channel 0 and channel 4 for the pulse width modulation mode, then you need to wire the outputs CH0 and CH4 with an external diode (blocking voltage UR > 60 V; letthrough current IF > 1.5 A); see figure below.
Figure 3-2 Wiring of the outputs for inductive load
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
20
Manual, 06/2018, A5E03485650-AF
Parameters/address space
4
4.1
Parameters
DQ 8x24VDC/2A HF parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
For parameter assignment in the user program, the parameters are transferred to the module using the WRREC instruction (parameter assignment in RUN) and data records; see chapter Parameter assignment (Page 43).
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
21
Parameters/address space 4.1 Parameters
4.1.1
DQ operating mode parameter
DQ 8x24VDC/2A HF parameters
The table below lists the parameters in DQ mode. These parameters apply to channels 0 to 7.
Table 4- 1 Configurable parameters and their defaults
Parameters
Range of values
Default setting
Parameter assignment in RUN
Diagnostics · No supply voltage L+
· Short circuit to ground
· Maintenance switching cycles
Yes/No Yes/No Yes/No
· Switching cycle counter Yes/No
No
Yes
No
Yes
No
Yes
No
Yes
Reaction to CPU STOP
· Turn off
Turn off
Yes
· Keep last value
· Output substitute value 1
Switching cycle limits
Switching cycle limit
0 ... 16777214
0
Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7 (TIA Portal) as of V12 or GSD file PROFINET IO
GSD file PROFIBUS DP
Channel*
Channel
Channel (as of V15.0 with HSP0247) Channel (as of V15.0 with HSP0247) Channel
Channel group Channel group ---
---
Channel
Channel
---
(as of V15.0 with HSP0247)
* If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault. You can prevent this message burst by assigning the diagnostics function to one channel only.
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
22
Manual, 06/2018, A5E03485650-AF
Parameters/address space 4.1 Parameters
4.1.2
Explanation of the parameters of DQ mode
No supply voltage
Enabling of the diagnostics, for lacking or insufficient supply voltage L+.
Short circuit to ground
Enabling of the diagnostics if a short-circuit of the actuator supply to ground occurs.
Maintenance switching cycles
You use this parameter to enable the maintenance interrupt "Limit value warning" when the switching cycle limit is violated.
You configure the limit with the parameter "Switching cycle limit" for each channel CHx.
Switching cycle counter
Channel-by-channel enable of switching cycle counter (Page 17).
Reaction to CPU STOP
Determines the reaction of the output when the CPU goes into the STOP state or when the connection to the CPU is interrupted.
Switching cycle limit
Defines the limit channel-by-channel. If this value is exceeded, the "Limit value warning" maintenance interrupt is signaled.
Enter an integer value between 0 and 16777214. Refer to the data sheet of the connected actuator. We recommend that you do not enter this maximum value, but instead set it to 80% or 90%, for example, so that you have enough time to replace the actuator as a preventive measure.
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
23
Parameters/address space 4.1 Parameters
4.1.3
Pulse width modulation operating mode parameter
DQ 8x24VDC/2A HF parameters
The table below lists the parameters in pulse width modulation mode. These parameters apply to channels 0 and 4.
Table 4- 2 Configurable parameters and their defaults
Parameters
Range of values
Default setting Parameter assignment in RUN
Diagnostics
· No supply voltage L+
Yes/No
No
Yes
· Short circuit to ground
Yes/No
No
Yes
Reaction to CPU
· Turn off
Turn off
Yes
STOP
· Keep last value
Operating mode
· Digital output (DQ) Digital output Yes · Pulse width modula- DQ
tion
Pulse width modulati- 2 ... 100 ms* on
(Period duration)
10 ms
No
* 20 ... 1000 [x 0.1] with GSD file
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog as of STEP 7 (TIA Portal) as of V 13 SP1 GSD file PROFINET IO
GSD file PROFIBUS DP
Channel
---
Channel
---
Channel
---
Channel
---
Module
---
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
24
Manual, 06/2018, A5E03485650-AF
Parameters/address space 4.1 Parameters
4.1.4
Explanation of the parameters of pulse width modulation mode
Missing supply voltage
Enabling of the diagnostics for missing or insufficient supply voltage L+.
Short-circuit to ground
Enabling of the diagnostics if a short-circuit of the actuator supply to ground occurs.
Reaction to CPU STOP
Determines the reaction of the output when the CPU goes into the STOP state or when the connection to the CPU is interrupted.
Operating mode
Specifies the operating mode in which the channels 0 and 4 of the module are operated. Digital output DQ as digital output channel Pulse width modulation, see section Pulse-width modulation (PWM) (Page 13)
Pulse width modulation time period
Specifies the period duration and therefore the frequency of the pulse width modulation. See sectionPulse-width modulation (PWM) (Page 13)
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
25
Parameters/address space 4.2 Address space
4.2
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the outputs/inputs.
Configuration options of DQ 8x24VDC/2A HF
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 3 Configuration options
Configuration
1 x 8-channel without value status 1 x 8-channel with value status 1 x 8-channel with value status for module-internal Shared Output with up to 4 submodules 1 x 8-channel with value status (channel 0 and channel 4 for PWM)
Short designation/module name in the GSD file
DQ 8x24VDC/2A HF DQ 8x24VDC/2A HF QI DQ 8x24VDC/2A HF MSO
DQ 8x24VDC/2A HF PWM
Configuration software, e.g., STEP 7 (TIA Portal)
Integrated in hardware catalog
STEP 7 (TIA Portal)
X
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5
SP3 or higher
X
X
X
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
as of V13 SP1 with HSP 0178
X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names: DQ 8x24VDC/2A HF QI DQ 8x24VDC/2A HF MSO DQ 8x24VDC/2A HF PWM An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Note The maintenance interrupt "Limit value warning" has no effect on the value status.
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
26
Manual, 06/2018, A5E03485650-AF
Parameters/address space 4.2 Address space
4.2.1
Address space operating mode DQ
Address space for configuration as 8-channel DQ 8x24VDC/2A HF
The following figure shows the assignment of the address space for the configuration as a 8channel module with value status. You can freely assign the start address for the module. The addresses of the channels are derived from the start address.
The letter "a" is are printed on the module; "AB a" stands for module start address output byte a.
Figure 4-1 Address space for configuration as 8-channel DQ 8x24VDC/2A HF with value status
Address space for configuration as 1 x 8-channel DQ 8x24VDC/2A HF MSO
For the configuration as a 1 x 8-channel module (module-internal Shared Output, MSO), channels 0 to 7 of the module are copied to multiple submodules. Channels 0 to 7 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device: The IO controller to which submodule 1 is assigned has write access to outputs 0 to 7. The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs
0 to 7. The number of usable IO controllers depends on the interface module used. Observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule on which it occurs. For the first submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state.
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
27
Parameters/address space 4.2 Address space
The following figure shows the assignment of the address space for submodules 1, 2, 3, and 4 and the value status.
Reference
Figure 4-2 Address space for configuration as 1 x 8-channel DQ 8x24VDC/2A HF MSO with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
28
Manual, 06/2018, A5E03485650-AF
Parameters/address space 4.2 Address space
4.2.2
Address space operating mode pulse-width modulation
Address space for configuration as 1 x 8-channel DQ 8x24VDC/2A PWM
If you use the module in the "Pulse width modulation mode" (channels 0 and 4), the module uses the following address spaces:
6 bytes in the process image output
1 byte in the process image input
Allocation of the process image
If you have set "Pulse width modulation" mode for channels 0 and 4 in the parameter, bits 0 and 4 have no significance. Enter the on-load factor (duty factor) in the following output bytes; see the figure below.
Figure 4-3 Allocation in the process image output The figure below shows the address assignment of the module.
Figure 4-4 Allocation in the process image of the inputs
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
29
Interrupts/diagnostics alarms
5.1
Status and error displays
LED displays
The following figure shows the LED displays (status and error displays) of DQ 8x24VDC/2A HF.
5
Figure 5-1 LED displays of the DQ 8x24VDC/2A HF module
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
30
Manual, 06/2018, A5E03485650-AF
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following table explains the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in section Diagnostic alarms (Page 33).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured.
Indicates module errors (at least one error at one channel, e.g., short-circuit to ground). Hardware defective.
Solution
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Evaluate the diagnostics data and eliminate the error (e.g., check the cables). Replace the module.
LED MAINT
Table 5- 2 MAINT status display
LED MAINT Off On
Meaning
0 = No maintenance interrupt is pending.
---
1 = The maintenance interrupt "Limit value
---
warning" is pending.
Solution
LED PWR
Table 5- 3 PWR status display
LED PWR Off On
Meaning Supply voltage L+ too low or missing.
Supply voltage L+ is present and OK.
Solution Check supply voltage L+.
---
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
31
Interrupts/diagnostics alarms 5.2 Interrupts
LED CHx
Table 5- 4 CHx status display
LED CHx Off On On
Meaning 0 = Status of the output signal.
Solution ---
1 = Status of the output signal.
---
Channel parameters assigned (channel fault pending; a short-circuit to ground is pending at the respective channel).
Supply voltage L+ too low or missing.
Check the wiring and remedy the short-circuit to ground.
Check supply voltage L+.
5.2
Interrupts
The digital output module DQ 8x24VDC/2A HF supports diagnostic interrupts and maintenance interrupts.
You can find detailed information on the error event in the error organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: No supply voltage L+ Short circuit to ground Parameter assignment error
Maintenance interrupt
The module generates a maintenance interrupt at the following events: Limit value warning
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
32
Manual, 06/2018, A5E03485650-AF
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes for each diagnostics event on the module. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 5 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Short-circuit to ground*
Error code 1H
Parameter assignment 10H error
Load voltage missing
11H
Limit value warning
17H
Meaning Short-circuit or overload at the channel
· The module cannot evaluate parameters for the channel
· Incorrect parameter assignment
Supply voltage L+ of the module is missing The configured limit for switching cycles has been exceeded.
Corrective measures Check the wiring/actuator. Check the ambient temperature. Correct the parameter assignment
Connect supply voltage L+ to module/channel · Replace actuator as a precaution-
ary measure · Reset counter with DS131
* This diagnostic message can be output with pulse duration <500 microseconds in pulse width modulation mode. Disable the diagnostics of pulse duration < 500 µs.
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
33
Technical specifications
6
Technical specifications of the DQ 8x24VDC/2A HF
The following table shows the technical specifications as of 06/2018. You will find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7522-1BF00-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version · FW update possible Product function · I&M data Engineering with · STEP 7 TIA Portal configurable/integrated
as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Operating mode · DQ
· DQ with energy-saving function
· PWM
· Cam control (switching at comparison values)
· Oversampling
· MSO
· Integrated operating cycle counter
6ES7522-1BF00-0AB0
DQ 8x24VDC/2A HF FS03 V2.2.0 Yes
Yes; I&M0 to I&M3
V13 SP1 / -
V5.5 SP3 / -
V1.0 / V5.1
V2.3 / -
Yes Yes; with an application Yes No
No Yes Yes
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
34
Manual, 06/2018, A5E03485650-AF
Technical specifications
Article number Supply voltage
Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Input current Current consumption, max.
Output voltage Rated value (DC)
Power Power available from the backplane bus
Power loss Power loss, typ.
Digital outputs Type of digital output Number of digital outputs Current-sourcing Short-circuit protection · Response threshold, typ. Limitation of inductive shutdown voltage to Controlling a digital input
Digital output functions, parameterizable · Freely usable digital output
· PWM output
Number, max. Cycle duration, parameterizable ON period, min. ON period, max. Resolution of the duty cycle Minimum pulse duration Switching capacity of the outputs · on lamp load, max. Load resistance range · lower limit
· upper limit Output voltage
· for signal "1", min.
6ES7522-1BF00-0AB0
24 V 20.4 V 28.8 V Yes; through internal protection with 10 A per group
40 mA; 20 mA per group, no output is activated.
24 V
0.9 W
5.6 W; 6.8 W for PWM operation
Transistor 8 Yes Yes 3 A -17 V Yes
Yes Yes 2 Yes; 2 ... 100 ms continuous 0 % 100 % 0.1 % 300 µs
10 W
12 4 k
L+ (-0.8 V)
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
35
Technical specifications
Article number Output current
· for signal "1" rated value · for signal "1" permissible range, max.
· for signal "0" residual current, max. Output delay with resistive load
· "0" to "1", typ. · "0" to "1", max. · "1" to "0", typ. · "1" to "0", max. Parallel switching of two outputs · for logic links · for uprating · for redundant control of a load Switching frequency · with resistive load, max. · with inductive load, max.
· on lamp load, max. Total current of the outputs
· Current per channel, max. · Current per group, max. · Current per module, max. Cable length · shielded, max. · unshielded, max. Isochronous mode Isochronous operation (application synchronized up to terminal) Interrupts/diagnostics/status information Diagnostics function Substitute values connectable Alarms · Diagnostic alarm
6ES7522-1BF00-0AB0
2 A 2.4 A; Note derating specification for PWM operation 0.5 mA
80 µs 100 µs 300 µs 500 µs
Yes No Yes
100 Hz; With PWM operation: 500 Hz 0.5 Hz; According to IEC 60947-5-1, DC-13; max. 500 Hz with PWM operation only with external circuit; see additional description in the manual 10 Hz
2 A; see additional description in the manual 8 A; see additional description in the manual 16 A; see additional description in the manual
1 000 m 600 m
No
Yes Yes
Yes
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
36
Manual, 06/2018, A5E03485650-AF
Article number Diagnostic messages
· Monitoring the supply voltage
6ES7522-1BF00-0AB0 Yes
· Wire-break
No
· Short-circuit
Yes
· Group error
Yes
Diagnostics indication LED · RUN LED
Yes; Green LED
· ERROR LED
Yes; Red LED
· MAINT LED
Yes; yellow LED
· Monitoring of the supply voltage (PWRLED)
Yes; Green LED
· Channel status display
Yes; Green LED
· for channel diagnostics
Yes; Red LED
· for module diagnostics
Yes; Red LED
Potential separation
Potential separation channels
· between the channels
No
· between the channels, in groups of
4
· between the channels and backplane bus Yes
Isolation
Isolation tested with
707 V DC (type test)
Standards, approvals, certificates
Suitable for safety-related tripping of standard Yes; From FS03 modules
Highest safety class achievable for safety-related tripping of standard modules
· Performance level according to ISO 13849- PL d 1
· Category according to ISO 13849-1
Cat. 3
· SILCL according to IEC 62061
SILCL 2
Decentralized operation Prioritized startup
Dimensions Width Height Depth
Weights Weight, approx.
Yes
35 mm 147 mm 129 mm
240 g
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0) Manual, 06/2018, A5E03485650-AF
Technical specifications 37
Technical specifications
Power reduction (derating) to aggregate current of outputs (per group)
The following graphs show the loading capacity of the outputs in relation to the mounting position and the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Details on total current of outputs (per group)
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
38
Manual, 06/2018, A5E03485650-AF
Technical specifications
DQ mode and PWM mode with switching frequency max. 100 Hz
The following graphs apply to resistive loads and inductive loads with max. 2 A total current of the outputs per channel. Inductive loads in PWM mode require additional wiring to an external diode; see section Wiring (Page 19). You can find the total current of the outputs for each channel or for each module in the technical specifications.
Horizontal mounting of the system
Vertical mounting of the system
Figure 6-2 Details on total current of outputs (per group) in the DQ and PWM operating modes
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
39
Technical specifications
PWM mode with switching frequency max. 500 Hz
The following graphs apply to resistive loads and inductive loads with max. 2 A total current of the outputs per channel. Inductive loads require additional wiring with an external diode, see section Wiring (Page 19). You can find the total current of the outputs for each channel or for each module in the technical specifications.
Horizontal mounting of the system
Vertical mounting of the system
Figure 6-3 Details on total current of outputs (per group) in the PWM operating mode
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
40
Manual, 06/2018, A5E03485650-AF
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in the appendix. Always observe the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DQ 8x24VDC/2A HF module
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
41
Dimensional drawing
Figure A-2 Dimensional drawing of the DQ 8x24VDC/2A HF module, side view with open front cover
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
42
Manual, 06/2018, A5E03485650-AF
Parameter data records
B
B.1
Parameter assignment
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When a GSD file is used to configure a module, dependencies can arise when "assigning the parameters".
There are no dependencies for this module. You can assign the individual parameters in any combination.
Parameter assignment in the user program
You have the option to reconfigure the module in RUN (e.g. the response of selected channels to the CPU-STOP state can be changed in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data sets 64 to 71. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
43
Parameter data records B.1 Parameter assignment
Assignment of data record and channel
The channel parameters of the module are included in data sets 64 to 71 and are assigned as follows: Data set 64 for channel 0 (PWM operating mode possible) Data record 65 for channel 1 Data set 66 for channel 2 Data set 67 for channel 3 Data set 68 for channel 4 (PWM operating mode possible) Data set 69 for channel 5 Data set 70 for channel 6 Data set 71 for channel 7
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
44
Manual, 06/2018, A5E03485650-AF
Parameter data records B.2 Structure of parameter data sets DS 64 - 71
B.2
Structure of parameter data sets DS 64 - 71
Structure of data sets 64 to 71
The figure below shows the structure of data set 64 for channel 0 as an example. The structure is identical for channels 1 to 7. The values in byte 0 and byte 1 are fixed and may not be changed.
Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data set 64: Bytes 0 to 3
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
45
Parameter data records B.3 Structure of data set DS 129
B.3
Structure of data set DS 129
Structure of data set 129
You can read the current states of the switching cycle counters with data set 129. The counter status is supplied for each channel in UDINT format.
The following figure shows you the structure of data set 129.
Figure B-2 Structure of data set 129: Byte 0 to 31
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
46
Manual, 06/2018, A5E03485650-AF
Parameter data records B.4 Structure of data set DS 130
B.4
Structure of data set DS 130
Structure of data set 130
The limits of the switching cycle counters are read out with data set 130. The set value is supplied for each channel in UDINT format.
The following figure shows you the structure of data set 130.
Figure B-3 Structure of data set 130: Byte 0 to 31
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
Manual, 06/2018, A5E03485650-AF
47
Parameter data records B.5 Structure of data set DS 131
B.5
Structure of data set DS 131
Structure of data set 131
The following figure shows you the structure of data set 131. Enable a parameter by setting the corresponding bit to "1".
Figure B-4 Structure of data set 131: Bytes 0 to 7
DQ 8x24VDC/2A HF Digital Output Module (6ES7522-1BF00-0AB0)
48
Manual, 06/2018, A5E03485650-AF
SIMATIC
S7-1500/ET 200MP Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual
Preface
S7-1500 / ET 200MP Documentation Guide
1
Product overview
2
Wiring
3
Address space
4
Diagnostics alarms
5
Technical specifications
6
Dimensional drawing
A
07/2020
A5E48024569-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E48024569-AA 07/2020 Subject to change
Copyright © Siemens AG 2020. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system.
Also observe notes marked as follows:
Note
A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
3
Preface
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
4
Equipment Manual, 07/2020, A5E48024569-AA
Table of contents
Preface ................................................................................................................................................... 3
1 S7-1500 / ET 200MP Documentation Guide ........................................................................................... 6
2 Product overview ................................................................................................................................... 8
2.1
Properties ............................................................................................................................ 8
3 Wiring .................................................................................................................................................. 10
3.1
Wiring and block diagram .................................................................................................. 10
3.2
Terminal assignment X10 and X11. .................................................................................... 11
3.3
Connecting a module with a connection module ................................................................ 14
3.4
Wiring of the module ......................................................................................................... 15
3.5
Fuse .................................................................................................................................. 17
4 Address space ...................................................................................................................................... 18
5 Diagnostics alarms............................................................................................................................... 25
5.1
Status and error displays .................................................................................................... 25
6 Technical specifications....................................................................................................................... 27
A Dimensional drawing........................................................................................................................... 31
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
5
S7-1500 / ET 200MP Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
6
Equipment Manual, 07/2020, A5E48024569-AA
S7-1500 / ET 200MP Documentation Guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
7
Product overview
2.1
Properties
Article number
6ES7522-1BP00-0AA0
View of the module
2
Properties
Figure 2-1 View of the DQ 64x24VDC/0.3A BA module
The digital module has the following technical properties: · 64 digital outputs, electrically isolated in 4 groups of 16
P switching (sourcing) · Rated output voltage 24 V DC · Rated output current 0.3 A per channel · Suitable for solenoid valves, DC contactors, and indicator lights
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
8
Equipment Manual, 07/2020, A5E48024569-AA
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Module-internal Shared Output (MSO) Configurable submodules / submodules for Shared Device
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
as of V16 and HSP 0319
GSD file in STEP 7 (TIA Portal) V12 or higher,
or STEP 7 V5.5 SP3 or higher
X X X (PROFINET IO only) X (PROFINET IO only)
--- / X X X
(PROFINET IO only) X
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can be ordered as spare parts: · U connector · Universal front door with the article number: 6ES7 591-8AA00-0AA0 You can find additional information in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Other components
The following must be ordered separately: · SIMATIC TOP connect connection module · Pre-fabricated connecting cable with IDC connectors For additional information, see section Connecting a module with a connection module (Page 14)
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
9
Wiring
3
3.1
Wiring and block diagram
This section contains the block diagram of the module and the terminal assignment.
Wiring and block diagram
The following figure shows the terminal assignment and the assignment of the channels. · Outputs: Channel 0 to 31 to connector X10. · Outputs: Channel 32 to 63 to connector X11
Backplane bus interface
CHx RUN ERROR
Figure 3-1 Block diagram and terminal assignment
Channel Status display LED (green) Error display LED (red)
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
10
Equipment Manual, 07/2020, A5E48024569-AA
Wiring 3.2 Terminal assignment X10 and X11.
3.2
Terminal assignment X10 and X11.
The following figure shows the assignment of the channels to the addresses.
Figure 3-2 Front view of the module without front door
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
11
Wiring 3.2 Terminal assignment X10 and X11.
Terminal and address assignment
For connecting actuators, we recommend using the SIMATIC TOP connect pre-assembled connecting cables and SIMATIC TOP connect connection modules. However, if you choose another wiring option, you will need the following tables.
Table 3- 1 Assignment for connector X10 of the module
Terminal 40 38 36 34 32 30 28 26 24 22 20 18 16 14 12 10 8 6 4 2
Channel 2L+ 2M
Channel 31 Channel 30 Channel 29 Channel 28 Channel 27 Channel 26 Channel 25 Channel 24
2L+ 2M Channel 23 Channel 22 Channel 21 Channel 20 Channel 19 Channel 18 Channel 17 Channel 16
Assignment for outputs to X10
Address -----
x+3.7 x+3.6 x+3.5 x+3.4 x+3.3 x+3.2 x+3.1 x+3.0
----x+2.7 x+2.6 x+2.5 x+2.4 x+2.3 x+2.2 x+2.1 x+2.0
Terminal 39 37 35 33 31 29 27 25 23 21 19 17 15 13 11 9 7 5 3 1
Channel 1L+ 1M
Channel 15 Channel 14 Channel 13 Channel 12 Channel 11 Channel 10 Channel 9 Channel 8
1L+ 1M Channel 7 Channel 6 Channel 5 Channel 4 Channel 3 Channel 2 Channel 1 Channel 0
Address -----
x+1.7 x+1.6 x+1.5 x+1.4 x+1.3 x+1.2 x+1.1 x+1.0
----x.7 x.6 x.5 x.4 x.3 x.2 x.1 x.0
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
12
Equipment Manual, 07/2020, A5E48024569-AA
Wiring 3.2 Terminal assignment X10 and X11.
Table 3- 2 Assignment for the connector X11 of the module
Terminal 1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 31 33 35 37 39
Assignment for outputs to X11
Channel Channel 32 Channel 33 Channel 34 Channel 35 Channel 36 Channel 37 Channel 38 Channel 39
3M 3L+ Channel 40 Channel 41 Channel 42 Channel 43 Channel 44 Channel 45 Channel 46 Channel 47 3M 3L+
Address x+4.0 x+4.1 x+4.2 x+4.3 x+4.4 x+4.5 x+4.6 x+4.7 ----x+5.0 x+5.1 x+5.2 x+5.3 x+5.4 x+5.5 x+5.6 x+5.7 -----
Terminal 2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 38 40
Channel Channel 48 Channel 49 Channel 50 Channel 51 Channel 52 Channel 53 Channel 54 Channel 55
4M 4L+ Channel 56 Channel 57 Channel 58 Channel 59 Channel 60 Channel 61 Channel 62 Channel 63 4M 4L+
Address x+6.0 x+6.1 x+6.2 x+6.3 x+6.4 x+6.5 x+6.6 x+6.7 ----x+7.0 x+7.1 x+7.2 x+7.3 x+7.4 x+7.5 x+7.6 x+7.7 -----
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
13
Wiring 3.3 Connecting a module with a connection module
3.3
Connecting a module with a connection module
Component for connecting
To connect actuators, you need 2 connection modules per module. The connection modules are connected to the module with pre-assembled connecting cables.
You can find additional information on the components of the SIMATIC TOP connect system cabling, e.g. for connecting connection modules, in the equipment manual SIMATIC TOP connect for S7-1500 and ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/95924607).
Note Common supply
If you use the listed SIMATIC TOP connect connection modules, then all 32 channels of a connection module have a common supply. This means that 2 groups of 16 channels each are supplied by common potential.
You can find the required components in the tables below.
Table 3- 3 SIMATIC TOP connect connection module
Components
Connection modules for digital outputs
Typ Description e
Connection technology
TP1 1-wire connection, without LED - Screw terminals - Push-in system
1-wire connection, with LED - Screw terminals - Push-in system
TP3 3-wire connection, without LED - Screw terminals - Push-in system
3-wire connection, with LED
- Screw terminals - Push-in system
Article number
Delivery quantity
6ES7924-2AA20-0AA0 Pack of 1 6ES7924-2AA20-0CA0 Pack of 1
6ES7924-2AA20-0BA0 Pack of 1 6ES7924-2AA20-0BC0 Pack of 1
6ES7924-2CA20-0AA0 Pack of 1 6ES7924-2CA20-0AC0 Pack of 1
6ES7924-2CA20-0
Pack of 1
BA0 6ES7924-2CA20- Pack of 1 0BC0
Table 3- 4 Connecting cables SIMATIC TOP connect
Components
Length
Pre-assembled connecting cable with IDC connector an both ends
· IDC connector 40-pin for the I/O module
· IDC connector 50-pin for the SIMATIC TOP connect connection module
1.0 m 2.0 m 2.5 m 3.0 m
Article number
Delivery quantity
6ES7923-5BB00-0GB0 Pack of 1
6ES7923-5BC00-0GB0 Pack of 1
6ES7923-5BC50-0GB0 Pack of 1
6ES7923-5BD00-0GB0 Pack of 1
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
14
Equipment Manual, 07/2020, A5E48024569-AA
Wiring 3.4 Wiring of the module
Support for selecting hardware components
We recommend you use the TIA Selection Tool for planning your project. The TIA Selection Tool is available free of charge as a desktop version for download or as a cloud version, refer to the Internet (https://new.siemens.com/global/en/products/automation/topic-areas/tia/tiaselection-tool.html).
3.4
Wiring of the module
Requirement
· The I/O modules are installed on the mounting rail. · The supply voltage of the station is switched off.
Procedure
1. Plug the two SIMATIC TOP connect connecting cables with the 40-pin IDC connector into X10 and X11.
Note when plugging: The nob on the left edge of connector X11 The nob on the right edge of connector X10
Figure 3-3 Connect the SIMATIC TOP connect 40-pin connecting cable to the module
2. Guide the SIMATIC TOP connect connecting cables down to the module. 3. Guide a cable tie around the module at the fixing points and connect the SIMATIC TOP
connect cables.
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
15
Wiring 3.4 Wiring of the module
4. Tighten the cable tie for the strain relief.
Figure 3-4 Fastening the cable tie for the strain relief 5. Plug the SIMATIC TOP connect connecting cables with the 50-pin IDC connector into the
SIMATIC TOP connect connection module.
Additional information
You can find out how to wire the SIMATIC TOP connect connection module in the equipment manual SIMATIC TOP connect for S7-1500 and ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/95924607).
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
16
Equipment Manual, 07/2020, A5E48024569-AA
Wiring 3.5 Fuse
3.5
Fuse
Miniature circuit breaker
The supply lines are to be protected with a 6 A miniature circuit breaker with tripping characteristic B.
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
17
Address space
4
The module can be configured in various ways in STEP 7. Depending on the configuration, additional/different addresses are assigned in the process image output/input.
Configuration options of DQ 64x24VDC/0.3A BA
You can configure the module with STEP 7 (TIA Portal) or with a GSD file. When you configure the module by means of the GSD file, the configurations are available under different short designations/module names. The following configurations are possible:
Table 4- 1 Configuration options Configuration
1 x 64-channel without value status 8 x 8-channel without value status 1 x 64-channel with value status for moduleinternal Shared Output (MSO) with up to 4 submodules
Short designation/module name in the
GSD file
DQ 64x24VDC/0.3A BA DQ 64x24VDC/0.3A BA S DQ 64x24VDC/0.3A BA MSO
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in the hardware catalog
of STEP 7 (TIA Portal) as of V16 and HSP 0319
X X (PROFINET IO only) X (PROFINET IO only)
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3 or higher
X X (PROFINET IO only) X (PROFINET IO only)
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
18
Equipment Manual, 07/2020, A5E48024569-AA
Address space
Address space for configuration as 1 x 64-channel DQ 64x24VDC/0.3A BA
The figure below shows the address space assignment for configuration as a 1 x 64-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "QB a" stands for module start address output byte a.
Figure 4-1 Address space for configuration as 1 x 64-channel DQ 64x24VDC/0.3A BA
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
19
Address space
Address space for configuration as 8 x 8-channel DQ 64x24VDC/0.3A BA S
For the configuration as an 8 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Unlike the 1 x 64-channel module configuration, each of the eight submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 8 x 8-channel DQ 64x24VDC/0.3A BA S
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
20
Equipment Manual, 07/2020, A5E48024569-AA
Address space
Address space for configuration as 1 x 64-channel DQ 64x24VDC/0.3A BA MSO
For the configuration as a 1 x 64-channel module (module-internal Shared Output, MSO), channels 0 to 63 of the module are copied to multiple submodules. Channels 0 to 63 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device: · The IO controller to which submodule 1 is assigned has write access to outputs 0 to 63. · The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs 0
to 63. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: · Value is incorrect, for example, because the supply voltage is missing. · IO controller of the basic submodule is in STOP mode. For the 2nd to 4th submodule (=MSO submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: · Value is incorrect, for example, because the supply voltage is missing. · IO controller of the basic submodule is in STOP mode. · The basic submodule is not yet configured.
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
21
Address space The figure below shows the assignment of the address space for submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 64-channel DQ 64x24VDC/0.3A BA MSO with value status
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
22
Equipment Manual, 07/2020, A5E48024569-AA
Address space The figure below shows the assignment of the address space with submodules 3 and 4.
Figure 4-4 Address space for configuration as 1 x 64-channel DQ 64x24VDC/0.3A BA MSO with value status
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
23
Address space
Reference
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V16 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
24
Equipment Manual, 07/2020, A5E48024569-AA
Diagnostics alarms
5
The module has no selectable diagnostics. Diagnostics alarms, for example, cannot be output with STEP 7 (TIA Portal).
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of DQ 64x24VDC/0.3A BA.
Figure 5-1 LED displays of the module DQ 64x24VDC/0.3A BA
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
25
Diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The tables below explain the meaning of the status and error displays.
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Meaning
Voltage missing or too low at backplane bus.
Flashes On
Flashes
Off Off Flashes
Module is starting up. Module is ready. Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check whether too many modules are inserted. ---
Replace the module.
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
26
Equipment Manual, 07/2020, A5E48024569-AA
Technical specifications
6
Technical specifications of DQ 64x24VDC/0.3A BA
The following table shows the technical specifications as of 07/2020. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td).
Enter the article number or the short designation of the module on the website.
Article number General information
Product type designation HW functional status Firmware version · FW update possible Product function · I&M data
· Isochronous mode
· Prioritized startup Engineering with
· STEP 7 TIA Portal configurable/integrated from version
· STEP 7 configurable/integrated from version
· PROFIBUS from GSD version/GSD revision Operating mode
· DQ
· DQ with energy-saving function
· PWM
· Cam control (switching at comparison values)
· Oversampling
· MSO
· Integrated operating cycle counter
6ES7522-1BP00-0AA0
DQ 64x24VDC/0.3A BA From FS01 V1.0.0 Yes
Yes; I&M0 to I&M3 No No
V16 with HSP 0319 / V17
V5.5 SP3 / -
V1.0 / V5.1
Yes No No No
No Yes No
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
27
Technical specifications
Article number Supply voltage
Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Input current Current consumption, max.
Output voltage Rated value (DC)
Power Power available from the backplane bus
Power loss Power loss, typ.
Digital outputs Type of digital output Number of digital outputs Current-sinking Current-sourcing Digital outputs, parameterizable Short-circuit protection Limitation of inductive shutdown voltage to Controlling a digital input
Switching capacity of the outputs · with resistive load, max.
· on lamp load, max. Load resistance range
· lower limit
· upper limit Output voltage
· for signal "1", min. Output current
· for signal "1" rated value
· for signal "1" permissible range, max.
· for signal "0" residual current, max. Output delay with resistive load
· "0" to "1", max.
· "1" to "0", max.
6ES7522-1BP00-0AA0
24 V 19.2 V 28.8 V Yes; through internal protection with 7 A per group
90 mA; without load
24 V
0.6 W
3.5 W
Transistor 64 No Yes No Yes L+ (-53 V) Yes
0.3 A 5 W
80 10 k
L+ (-0.8 V)
0.3 A 0.3 A 0.5 mA
100 µs 500 µs
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
28
Equipment Manual, 07/2020, A5E48024569-AA
Technical specifications
Article number Parallel switching of two outputs
· for logic links
· for uprating
· for redundant control of a load Switching frequency
· with resistive load, max.
· with inductive load, max.
· on lamp load, max. Total current of the outputs
· Current per channel, max.
· Current per group, max.
· Current per module, max. Total current of the outputs (per module) horizontal installation
up to 60 °C, max. vertical installation
up to 40 °C, max. Cable length
· shielded, max.
· unshielded, max. Interrupts/diagnostics/status information
Diagnostics function Substitute values connectable Alarms · Diagnostic alarm
· Maintenance interrupt Diagnostic messages
· Monitoring the supply voltage
· Wire-break
· Short-circuit
· Group error
6ES7522-1BP00-0AA0 Yes No Yes
100 Hz 0.5 Hz; According to IEC 60947-5-1, DC-13 10 Hz
0.3 A 2 A 8 A
8 A
8 A
1 000 m 600 m
No No No No
No No No No
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
29
Technical specifications
Article number Diagnostics indication LED
· RUN LED
6ES7522-1BP00-0AA0 Yes; green LED
· ERROR LED
Yes; red LED
· MAINT LED
No
· Monitoring of the supply voltage (PWR-LED) Yes; via SIMATIC TOP connect connection module
· Channel status display
Yes; via SIMATIC TOP connect connection module
· for channel diagnostics
No
· for module diagnostics
No
Potential separation
Potential separation channels
· between the channels
No
· between the channels, in groups of · between the channels and backplane bus
16; 32 when using SIMATIC TOP connect connection module
Yes
Isolation Isolation tested with
Standards, approvals, certificates Suitable for safety functions Suitable for safety-related tripping of standard modules
Ambient conditions Ambient temperature during operation
· horizontal installation, min.
707 V DC (type test) No No
-30 °C
· horizontal installation, max.
60 °C
· vertical installation, min.
-30 °C
· vertical installation, max.
40 °C
Altitude during operation relating to sea level · Installation altitude above sea level, max.
5 000 m
Dimensions Width Height Depth
Weights Weight, approx.
Other Note:
35 mm 147 mm 129 mm
270 g
Please order cable and connection modules separately
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
30
Equipment Manual, 07/2020, A5E48024569-AA
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DQ 64x24VDC/0.3A BA module
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
Equipment Manual, 07/2020, A5E48024569-AA
31
Dimensional drawing
Figure A-2 Dimension drawing of the DQ 64x24VDC/0.3A BA module, side view with open front cover
Digital output module DQ 64x24VDC/0.3A BA (6ES7522-1BP00-0AA0)
32
Equipment Manual, 07/2020, A5E48024569-AA
SIMATIC
S7-1500/ET 200MP Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual
Preface
S7-1500 / ET 200MP Documentation Guide
1
Product overview
2
Wiring
3
Address space
4
Diagnostics alarms
5
Technical specifications
6
Dimensional drawing
A
07/2020
A5E48024817-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E48024817-AA 07/2020 Subject to change
Copyright © Siemens AG 2020. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system.
Please also observe notes marked as follows:
Note
A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
3
Preface
Open Source Software Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
4
Equipment Manual, 07/2020, A5E48024817-AA
Table of contents
Preface ................................................................................................................................................... 3
1 S7-1500 / ET 200MP Documentation Guide ........................................................................................... 6
2 Product overview................................................................................................................................... 8
2.1
Properties ............................................................................................................................ 8
3 Wiring .................................................................................................................................................. 10
3.1
Wiring and block diagram .................................................................................................. 10
3.2
Terminal assignment X10 and X11. .................................................................................... 11
3.3
Connecting a module with a connection module ................................................................ 14
3.4
Wiring of the module ......................................................................................................... 15
3.5
Fuse .................................................................................................................................. 17
4 Address space ...................................................................................................................................... 18
5 Diagnostics alarms............................................................................................................................... 25
5.1
Status and error displays .................................................................................................... 25
6 Technical specifications....................................................................................................................... 27
A Dimensional drawing........................................................................................................................... 31
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
5
S7-1500 / ET 200MP Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
6
Equipment Manual, 07/2020, A5E48024817-AA
S7-1500 / ET 200MP Documentation Guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
7
Product overview
2.1
Properties
Article number 6ES7522-1BP50-0AA0
View of the module
2
Properties
Figure 2-1 View of the DQ 64x24VDC/0.3A SNK BA module
The digital module has the following technical properties: · 64 digital outputs, electrically isolated in 4 groups of 16
M switching (sinking) · Rated output voltage 24 V DC · Rated output current 0.3 A per channel · Suitable for solenoid valves, DC contactors, and indicator lights
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
8
Equipment Manual, 07/2020, A5E48024817-AA
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Module-internal Shared Output (MSO) Configurable submodules / submodules for Shared Device
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal) as of V16 and HSP 0319
X X X (PROFINET IO only) X (PROFINET IO only)
GSD file in STEP 7 (TIA Portal) V12 or higher,
or STEP 7 V5.5 SP3 or higher
--- / X X X
(PROFINET IO only) X
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can be ordered as spare parts: · U connector · Universal front door with the article number: 6ES7 591-8AA00-0AA0 You can find additional information in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Other components The following must be ordered separately: · SIMATIC TOP connect connection module · Pre-fabricated connecting cable with IDC connectors For additional information, see section Connecting a module with a connection module (Page 14)
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
9
Wiring
3
3.1
Wiring and block diagram
This section contains the block diagram of the module and the terminal assignment.
Wiring and block diagram The following figure shows the terminal assignment and the assignment of the channels. · Outputs: Channel 0 to 31 to connector X10 · Outputs: Channel 32 to 63 to connector X11
Backplane bus interface Figure 3-1 Block diagram and terminal assignment
CHx RUN ERROR
Channel Status display LED (green) Error display LED (red)
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
10
Equipment Manual, 07/2020, A5E48024817-AA
Wiring 3.2 Terminal assignment X10 and X11.
3.2
Terminal assignment X10 and X11.
The following figure shows the assignment of the channels to the addresses.
Figure 3-2 Front view of the module without front door
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
11
Wiring 3.2 Terminal assignment X10 and X11.
Terminal and address assignment
For connecting sensors or actuators, we recommend using the SIMATIC TOP connect preassembled connecting cables and the SIMATIC TOP connect connection modules. However, if you choose another wiring option, you will need the following tables.
Table 3- 1 Assignment for connector X10 of the module
Terminal 40 38 36 34 32 30 28 26 24 22 20 18 16 14 12 10 8 6 4 2
Assignment for outputs to X10
Channel
Address
Terminal
2L+
---
39
2M
---
37
Channel 31
x+3.7
35
Channel 30
x+3.6
33
Channel 29
x+3.5
31
Channel 28
x+3.4
29
Channel 27
x+3.3
27
Channel 26
x+3.2
25
Channel 25
x+3.1
23
Channel 24
x+3.0
21
2L+
---
19
2M
---
17
Channel 23
x+2.7
15
Channel 22
x+2.6
13
Channel 21
x+2.5
11
Channel 20
x+2.4
9
Channel 19
x+2.3
7
Channel 18
x+2.2
5
Channel 17
x+2.1
3
Channel 16
x+2.0
1
Channel 1L+ 1M
Channel 15 Channel 14 Channel 13 Channel 12 Channel 11 Channel 10 Channel 9 Channel 8
1L+ 1M Channel 7 Channel 6 Channel 5 Channel 4 Channel 3 Channel 2 Channel 1 Channel 0
Address -----
x+1.7 x+1.6 x+1.5 x+1.4 x+1.3 x+1.2 x+1.1 x+1.0
----x.7 x.6 x.5 x.4 x.3 x.2 x.1 x.0
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
12
Equipment Manual, 07/2020, A5E48024817-AA
Wiring 3.2 Terminal assignment X10 and X11.
Table 3- 2 Assignment for the connector X11 of the module
Terminal
1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 31 33 35 37 39
Channel /
Channel 32 Channel 33 Channel 34 Channel 35 Channel 36 Channel 37 Channel 38 Channel 39
3M 3L+ Channel 40 Channel 41 Channel 42 Channel 43 Channel 44 Channel 45 Channel 46 Channel 47 3M 3L+
Assignment for outputs to X11
Address
Terminal
x+4.0
2
x+4.1
4
x+4.2
6
x+4.3
8
x+4.4
10
x+4.5
12
x+4.6
14
x+4.7
16
---
18
---
20
x+5.0
22
x+5.1
24
x+5.2
26
x+5.3
28
x+5.4
30
x+5.5
32
x+5.6
34
x+5.7
36
---
38
---
40
Channel / address Channel 48 Channel 49 Channel 50 Channel 51 Channel 52 Channel 53 Channel 54 Channel 55
4M 4L+ Channel 56 Channel 57 Channel 58 Channel 59 Channel 60 Channel 61 Channel 62 Channel 63 4M 4L+
Address
x+6.0 x+6.1 x+6.2 x+6.3 x+6.4 x+6.5 x+6.6 x+6.7
----x+7.0 x+7.1 x+7.2 x+7.3 x+7.4 x+7.5 x+7.6 x+7.7 -----
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
13
Wiring 3.3 Connecting a module with a connection module
3.3
Connecting a module with a connection module
Component for connecting
To connect actuators, you need 2 connection modules per module. The connection modules are connected to the module with pre-assembled connecting cables.
You can find additional information on the components of the SIMATIC TOP connect system cabling, e.g. for connecting connection modules, in the equipment manual SIMATIC TOP connect for S7-1500 and ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/95924607).
Note Common supply
If you use the listed SIMATIC TOP connect connection modules, then all 32 channels of the connection module have a common supply. This means that 2 groups of 16 channels each are supplied by common potential.
You can find the required components in the tables below.
Table 3- 3 SIMATIC TOP connect connection module
Components
Connection modules for digital outputs
Typ Description e
Connection technology Article number
TP1 1-wire connection, without LED - Screw terminals - Push-in system
6ES7924-2AA20-0AA0 6ES7924-2AA20-0AC0
1-wire connection, with LED - Screw terminals - Push-in system
TP3 3-wire connection, without LED - Screw terminals - Push-in system
6ES7924-2AM20-0BA0 6ES7924-2AM20-0BC0 6ES7924-2CA20-0AA0 6ES7924-2CA20-0AC0
Delivery quantity Pack of 1 Pack of 1 Pack of 1 Pack of 1 Pack of 1 Pack of 1
Table 3- 4 Connecting cables SIMATIC TOP connect
Components
Pre-assembled connecting cable with IDC connector an both ends · IDC connector 40-pin for the I/O module · IDC connector 50-pin for the SIMATIC TOP connect connection
module
Length
1.0 m 2.0 m 2.5 m 3.0 m
Article number
6ES7923-5BB00-0GB0 6ES7923-5BC00-0GB0 6ES7923-5BC50-0GB0 6ES7923-5BD00-0GB0
Delivery quantity Pack of 1 Pack of 1 Pack of 1 Pack of 1
Support for selecting hardware components
We recommend you use the TIA Selection Tool for planning your project. The TIA Selection Tool is available free of charge as a desktop version for download or as a cloud version, refer to the Internet (https://new.siemens.com/global/en/products/automation/topic-areas/tia/tiaselection-tool.html).
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
14
Equipment Manual, 07/2020, A5E48024817-AA
Wiring 3.4 Wiring of the module
3.4
Wiring of the module
Requirement
· The I/O modules are installed on the mounting rail. · The supply voltage of the station is switched off.
Procedure
1. Plug the two SIMATIC TOP connect connecting cables with the 40-pin IDC connector into X10 and X11.
Note when plugging: The nob on the left edge of connector X11 The nob on the right edge of connector X10
Figure 3-3 Connect the SIMATIC TOP connect 40-pin connecting cable to the module
2. Guide the SIMATIC TOP connect connecting cables down to the module. 3. Guide a cable tie around the module at the fixing points and connect the SIMATIC TOP
connect cables.
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
15
Wiring 3.4 Wiring of the module
4. Tighten the cable tie for the strain relief.
Figure 3-4 Fastening the cable tie for the strain relief
5. Plug the SIMATIC TOP connect connecting cables with the 50-pin IDC connector into the SIMATIC TOP connect connection module.
Additional information You can find out how to wire the SIMATIC TOP connect connection module in the equipment manual SIMATIC TOP connect for S7-1500 and ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/95924607).
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
16
Equipment Manual, 07/2020, A5E48024817-AA
Wiring 3.5 Fuse
3.5
Fuse
Miniature circuit breaker
The supply lines, max. 16 outputs of a group, are to be protected with a 4 A miniature circuit breaker with tripping characteristic B or C.
The connection module is to be protected with a 6 A miniature circuit breaker with tripping characteristic B.
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
17
Address space
4
The module can be configured in various ways in STEP 7. Depending on the configuration, additional/different addresses are assigned in the process image output/input.
Configuration options of DQ 64x24VDC/0.3A SNK BA You can configure the module with STEP 7 (TIA Portal) or with a GSD file. When you configure the module by means of the GSD file, the configurations are available under different short designations/module names. The following configurations are possible:
Table 4- 1 Configuration options Configuration
1 x 64-channel without value status 8 x 8-channel without value status 1 x 64-channel with value status for moduleinternal Shared Output (MSO) with up to 4 submodules
Short designation/module name in the
GSD file
DQ 64x24VDC/0.3A SNK BA DQ 64x24VDC/0.3A BA SNK S DQ 64x24VDC/0.3A BA SNK MSO
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in the hardware catalog
of STEP 7 (TIA Portal) as of V16 and HSP 0319
X
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3 or higher
X
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
18
Equipment Manual, 07/2020, A5E48024817-AA
Address space Address space for configuration as 1 x 64-channel DQ 64x24VDC/0.3A SNK BA
The figure below shows the address space assignment for configuration as a 1 x 64-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "QB a" stands for module start address output byte a.
Figure 4-1 Address space for configuration as 1 x 64-channel DQ 64x24VDC/0.3A SNK BA
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
19
Address space Address space for configuration as 8 x 8-channel DQ 64x24VDC/0.3A SNK BA S
For the configuration as an 8 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Unlike the 1 x 64-channel module configuration, each of the eight submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 8 x 8-channel DQ 64x24VDC/0.3A SNK BA S
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
20
Equipment Manual, 07/2020, A5E48024817-AA
Address space
Address space for configuration as 1 x 64-channel DQ 64x24VDC/0.3A SNK BA MSO For the configuration as a 1 x 64-channel module (module-internal Shared Output, MSO), channels 0 to 63 of the module are copied to multiple submodules. Channels 0 to 63 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device: · The IO controller to which submodule 1 is assigned has write access to outputs 0 to 63. · The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs 0 to 63. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: IO controller of the basic submodule is in STOP mode. For the 2nd to 4th submodule (=MSO submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: · IO controller of the basic submodule is in STOP mode. · The basic submodule is not yet configured.
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
21
Address space The figure below shows the assignment of the address space for submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 64-channel DQ 64x24VDC/0.3A SNK BA MSO with value status
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
22
Equipment Manual, 07/2020, A5E48024817-AA
Address space The figure below shows the assignment of the address space with submodules 3 and 4.
Figure 4-4 Address space for configuration as 1 x 64-channel DQ 64x24VDC/0.3A SNK BA MSO with value status
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
23
Address space
Reference
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V16 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
24
Equipment Manual, 07/2020, A5E48024817-AA
Diagnostics alarms
5
The module has no selectable diagnostics. Diagnostics alarms, for example, cannot be output with STEP 7 (TIA Portal).
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of DQ 64x24VDC/0.3A SNK BA.
Figure 5-1 LED displays of the DQ 64x24VDC/0.3A SNK BA module
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
25
Diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays The tables below explain the meaning of the status and error displays.
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On
Flashes
Off Off Flashes
Module is starting up. Module is ready. Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check whether too many modules are in-
serted. ---
Replace the module.
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
26
Equipment Manual, 07/2020, A5E48024817-AA
Technical specifications
6
Technical specifications of DQ 64x24VDC/0.3A SNK BA
The following table shows the technical specifications as of 07/2020. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td).
Enter the article number or the short designation of the module on the website.
Article number General information
Product type designation HW functional status Firmware version · FW update possible Product function · I&M data
· Isochronous mode
· Prioritized startup Engineering with
· STEP 7 TIA Portal configurable/integrated from version
· STEP 7 configurable/integrated from version
· PROFIBUS from GSD version/GSD revision Operating mode
· DQ
· DQ with energy-saving function
· PWM
· Cam control (switching at comparison values)
· Oversampling
· MSO
· Integrated operating cycle counter
6ES7522-1BP50-0AA0
DQ 64x24VDC/0.3A BA From FS01 V1.0.0 Yes
Yes; I&M0 to I&M3 No No
V16 with HSP 0319 / V17
V5.5 SP3 / -
V1.0 / V5.1
Yes No No No
No Yes No
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
27
Technical specifications
Article number Supply voltage
Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Input current Current consumption, max.
Output voltage Rated value (DC)
Power Power available from the backplane bus
Power loss Power loss, typ.
Digital outputs Type of digital output Number of digital outputs Current-sinking Current-sourcing Digital outputs, parameterizable Short-circuit protection
Limitation of inductive shutdown voltage to Controlling a digital input Switching capacity of the outputs · with resistive load, max.
· on lamp load, max. Load resistance range
· lower limit
· upper limit Output voltage
· for signal "1", min. Output current
· for signal "1" rated value
· for signal "1" permissible range, max.
· for signal "0" residual current, max. Output delay with resistive load
· "0" to "1", max.
· "1" to "0", max.
6ES7522-1BP50-0AA0
24 V 19.2 V 28.8 V Yes; Through internal protection with 4 A per group
90 mA; without load
24 V
0.6 W
4.7 W
Transistor 64 Yes No No No; external fusing necessary, max. 4 A per group, tripping characteristic type B or C L+ (-53 V) Yes
0.3 A 5 W
80 10 k
M+ (0.5 V)
0.3 A 0.3 A 0.5 mA
100 µs 500 µs
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
28
Equipment Manual, 07/2020, A5E48024817-AA
Technical specifications
Article number Parallel switching of two outputs
· for logic links
· for uprating
· for redundant control of a load Switching frequency
· with resistive load, max.
· with inductive load, max.
· on lamp load, max. Total current of the outputs
· Current per channel, max.
· Current per group, max.
· Current per module, max. Total current of the outputs (per module) horizontal installation
up to 60 °C, max. vertical installation
up to 40 °C, max. Cable length
· shielded, max.
· unshielded, max. Interrupts/diagnostics/status information
Diagnostics function Substitute values connectable Alarms · Diagnostic alarm
· Maintenance interrupt Diagnostic messages
· Monitoring the supply voltage
· Wire-break
· Short-circuit
· Group error
6ES7522-1BP50-0AA0 Yes No Yes
100 Hz 0.5 Hz; According to IEC 60947-5-1, DC-13 10 Hz
0.3 A 2 A 8 A
8 A
8 A
1 000 m 600 m
No No No No
No No No No
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
29
Technical specifications
Article number Diagnostics indication LED
· RUN LED
6ES7522-1BP50-0AA0 Yes; green LED
· ERROR LED
Yes; red LED
· MAINT LED
No
· Monitoring of the supply voltage (PWR-LED) Yes; via SIMATIC TOP connect connection module
· Channel status display
Yes; via SIMATIC TOP connect connection module
· for channel diagnostics
No
· for module diagnostics
No
Potential separation
Potential separation channels
· between the channels
No
· between the channels, in groups of · between the channels and backplane bus
16; 32 when using SIMATIC TOP connect connection module
Yes
Isolation Isolation tested with
Standards, approvals, certificates Suitable for safety functions Suitable for safety-related tripping of standard modules
Ambient conditions Ambient temperature during operation
· horizontal installation, min.
707 V DC (type test) No No
-30 °C
· horizontal installation, max.
60 °C
· vertical installation, min.
-30 °C
· vertical installation, max.
40 °C
Altitude during operation relating to sea level · Installation altitude above sea level, max.
5 000 m
Dimensions Width Height Depth
Weights Weight, approx.
Other Note:
35 mm 147 mm 129 mm
270 g
Please order cable and connection modules separately
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
30
Equipment Manual, 07/2020, A5E48024817-AA
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DQ 64x24VDC/0.3A SNK BA module
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48024817-AA
31
Dimensional drawing
Figure A-2 Dimension drawing of the DQ 64x24VDC/0.3A SNK BA module, side view with open front cover
Digital output module DQ 64x24VDC/0.3A SNK BA (6ES7522-1BP50-0AA0)
32
Equipment Manual, 07/2020, A5E48024817-AA
SIMATIC
S7-1500/ET 200MP Digital input/output module DI 32x24VDC SNK/SRC/ DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual
Preface
S7-1500 / ET 200MP Documentation Guide
1
Product overview
2
Wiring
3
Address space
4
Diagnostics alarms
5
Technical specifications
6
Dimensional drawing
A
07/2020
A5E48027024-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E48027024-AA 07/2020 Subject to change
Copyright © Siemens AG 2020. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system.
Please also observe notes marked as follows:
Note
A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
3
Preface
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
4
Equipment Manual, 07/2020, A5E48027024-AA
Table of contents
Preface ................................................................................................................................................... 3
1 S7-1500 / ET 200MP Documentation Guide ........................................................................................... 6
2 Product overview ................................................................................................................................... 8
2.1
Properties ............................................................................................................................ 8
3 Wiring .................................................................................................................................................. 11
3.1
Wiring and block diagram .................................................................................................. 11
3.2
Terminal assignment X10 and X11 ..................................................................................... 12
3.3
Connecting a module with a connection module ................................................................ 15
3.4
Wiring of the module ......................................................................................................... 17
3.5
Fuse .................................................................................................................................. 19
4 Address space ...................................................................................................................................... 21
5 Diagnostics alarms............................................................................................................................... 29
5.1
Status and error displays .................................................................................................... 29
6 Technical specifications....................................................................................................................... 31
A Dimensional drawing........................................................................................................................... 36
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
5
S7-1500 / ET 200MP Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
6
Equipment Manual, 07/2020, A5E48027024-AA
S7-1500 / ET 200MP Documentation Guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
7
Product overview
2.1
Properties
Part number:
6ES7523-1BP50-0AA0
2
Figure 2-1 View of the module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
8
Equipment Manual, 07/2020, A5E48027024-AA
Product overview 2.1 Properties
Properties
The module has the following technical properties: · Digital inputs
32 digital inputs; electrically isolated in 2 groups of 16 Sourcing input or sinking input, depending on wiring Rated input voltage 24 VDC Suitable for switches and 2-/3-/4-wire proximity switches · Digital outputs 32 digital outputs, electrically isolated in 2 groups of 16 Sinking output Rated output voltage 24 VDC Rated output current 0.3 A per channel Suitable for solenoid valves, DC contactors, and indicator lights The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Module-internal Shared Input (MSI) / Shared Output (MSO) Configurable submodules / submodules for Shared Device
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
as of V16 and HSP 0319
GSD file in STEP 7 (TIA Portal) V12 or higher,
or STEP 7 V5.5 SP3 or higher
X X X (PROFINET IO only) X (PROFINET IO only)
--- / X X X
(PROFINET IO only) X
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can be ordered as spare parts: · U connector · Universal front door with the article number: 6ES7 591-8AA00-0AA0 You can find additional information in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
9
Product overview 2.1 Properties
Other components
The following must be ordered separately: · SIMATIC TOP connect connection module · Pre-fabricated connecting cable with IDC connectors For additional information, see section Connecting a module with a connection module (Page 15)
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
10
Equipment Manual, 07/2020, A5E48027024-AA
Wiring
3
3.1
Wiring and block diagram
This section contains the block diagram of the module and the terminal assignment.
Wiring and block diagram
The following figure shows the terminal assignment and the assignment of the channels. · Inputs: Channel 0 to 31 to connector X10. · Outputs: Channel 0 to 31 to connector X11.
Backplane bus interface
Connection type sinking
Connection type sourcing
CHx RUN ERROR
Figure 3-1 Block diagram and terminal assignment
Channel Status display LED (green) Error display LED (red)
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
11
Wiring 3.2 Terminal assignment X10 and X11
3.2
Terminal assignment X10 and X11
The following figure shows the assignment of the channels to the addresses.
Figure 3-2 Front view of the module without front door
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
12
Equipment Manual, 07/2020, A5E48027024-AA
Wiring 3.2 Terminal assignment X10 and X11
Terminal and address assignment
For connecting sensors or actuators, we recommend using the SIMATIC TOP connect preassembled connecting cables and the SIMATIC TOP connect connection modules. However, if you choose another wiring option, you will need the following tables.
Table 3- 1 Assignment for connector X10 of the module
Terminal 40 38 36 34 32 30 28 26 24 22 20 18 16 14 12 10 8 6 4 2
Channel ---
2COM * Channel 31 Channel 30 Channel 29 Channel 28 Channel 27 Channel 26 Channel 25 Channel 24
--2COM * Channel 23 Channel 22 Channel 21 Channel 20 Channel 19 Channel 18 Channel 17 Channel 16
Assignment for inputs to X10
Address -----
x+3.7 x+3.6 x+3.5 x+3.4 x+3.3 x+3.2 x+3.1 x+3.0 ----x+2.7 x+2.6 x+2.5 x+2.4 x+2.3 x+2.2 x+2.1 x+2.0
Terminal 39 37 35 33 31 29 27 25 23 21 19 17 15 13 11 9 7 5 3 1
Channel ---
1COM ** Channel 15 Channel 14 Channel 13 Channel 12 Channel 11 Channel 10 Channel 9 Channel 8
--1COM ** Channel 7 Channel 6 Channel 5 Channel 4 Channel 3 Channel 2 Channel 1 Channel 0
Address -----
x+1.7 x+1.6 x+1.5 x+1.4 x+1.3 x+1.2 x+1.1 x+1.0
----x.7 x.6 x.5 x.4 x.3 x.2 x.1 x.0
* 2M for Sinking (sinking input) connection type/ 2L+ for Sourcing (sourcing input) connection type ** 1M for Sinking (sinking input) connection type/ 1L+ for Sourcing (sourcing input) connection type
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
13
Wiring 3.2 Terminal assignment X10 and X11
Table 3- 2 Assignment for the connector X11 of the module
Terminal 1 3 5 7 9 11 13 15 17 19 21 23 25 27 29 31 33 35 37 39
Channel Channel 0 Channel 1 Channel 2 Channel 3 Channel 4 Channel 5 Channel 6 Channel 7
3M 3L+ Channel 8 Channel 9 Channel 10 Channel 11 Channel 12 Channel 13 Channel 14 Channel 15 3M 3L+
Assignment for outputs to X11
Address x.0 x.1 x.2 x.3 x.4 x.5 x.6 x.7 -----
x+1.0 x+1.1 x+1.2 x+1.3 x+1.4 x+1.5 x+1.6 x+1.7
-----
Terminal 2 4 6 8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 38 40
Channel Channel 16 Channel 17 Channel 18 Channel 19 Channel 20 Channel 21 Channel 22 Channel 23
4M 4L+ Channel 24 Channel 25 Channel 26 Channel 27 Channel 28 Channel 29 Channel 30 Channel 31 4M 4L+
Address x+2.0 x+2.1 x+2.2 x+2.3 x+2.4 x+2.5 x+2.6 x+2.7 ----x+3.0 x+3.1 x+3.2 x+3.3 x+3.4 x+3.5 x+3.6 x+3.7 -----
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
14
Equipment Manual, 07/2020, A5E48027024-AA
Wiring 3.3 Connecting a module with a connection module
3.3
Connecting a module with a connection module
Component for connecting
To connect actuators or sensors, you need 2 connection modules per module. The connection modules are connected to the module with pre-assembled connecting cables.
You can find additional information on the components of the SIMATIC TOP connect system cabling, e.g. for connecting connection modules, in the equipment manual SIMATIC TOP connect for S7-1500 and ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/95924607).
Note Common supply
If you use the listed SIMATIC TOP connect connection modules, then all 32 channels of a connection module have a common supply. This means that 2 groups of 16 channels each are supplied by common potential.
You can find the required components in the tables below.
Table 3- 3 SIMATIC TOP connect connection module
Components
Connection modules for digital inputs
Typ Description e
Connection technology
TP1 1-wire connection, without LED - Screw terminals
(sinking input)
- Push-in system
1-wire connection, with LED (sinking input)
- Screw terminals - Push-in system
Article number
6ES7924-2AA20-0AA0 6ES7924-2AA20-0AC0 6ES7924-2AA20-0BA0 6ES7924-2AA20-0BC0
Delivery quantity Pack of 1 Pack of 1 Pack of 1 Pack of 1
1-wire connection, with LED (sourcing input)
- Screw terminals - Push-in system
6ES7924-2AK20-0BA0 6ES7924-2AK20-0BC0
Pack of 1 Pack of 1
TP3 3-wire connection, without LED - Screw terminals
(sinking input)
- Push-in system
6ES7924-2CA20-0AA0 6ES7924-2CA20-0AC0
Pack of 1 Pack of 1
3-wire connection, with LED (sinking input)
- Screw terminals - Push-in system
6ES7924-2CA20-0BA0 6ES7924-2CA20-0BC0
Pack of 1 Pack of 1
Connection modules for digital outputs
TP1 1-wire connection, without LED - Screw terminals
(sinking output)
- Push-in system
1-wire connection, with LED (sinking output)
- Screw terminals - Push-in system
TP3 3-wire connection, without LED - Screw terminals
(sinking output)
- Push-in system
6ES7924-2AA20-0AA0 6ES7924-2AA20-0AC0
6ES7924-2AM20-0BA0 6ES7924-2AM20-0BC0 6ES7924-2CA20-0AA0 6ES7924-2CA20-0AC0
Pack of 1 Pack of 1 Pack of 1 Pack of 1 Pack of 1 Pack of 1
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
15
Wiring 3.3 Connecting a module with a connection module
Table 3- 4 Connecting cables SIMATIC TOP connect Components
Length
Pre-assembled connecting cable with IDC connector an both ends · IDC connector 40-pin for the I/O module · IDC connector 50-pin for the SIMATIC TOP connect connection
module
1.0 m 2.0 m 2.5 m 3.0 m
Article number
6ES7923-5BB00-0GB0 6ES7923-5BC00-0GB0 6ES7923-5BC50-0GB0 6ES7923-5BD00-0GB0
Delivery quantity Pack of 1 Pack of 1 Pack of 1 Pack of 1
Support for selecting hardware components
We recommend you use the TIA Selection Tool for planning your project. The TIA Selection Tool is available free of charge as a desktop version for download or as a cloud version, refer to the Internet (https://new.siemens.com/global/en/products/automation/topic-areas/tia/tiaselection-tool.html).
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
16
Equipment Manual, 07/2020, A5E48027024-AA
Wiring 3.4 Wiring of the module
3.4
Wiring of the module
Requirement
· The I/O modules are installed on the mounting rail. · The supply voltage of the station is switched off.
Procedure
1. Plug the two SIMATIC TOP connect connecting cables with the 40-pin IDC connector into X10 and X11.
Note when plugging: The nob on the left edge of connector X11 The nob on the right edge of connector X10
Figure 3-3 Connect the SIMATIC TOP connect 40-pin connecting cable to the module
2. Guide the SIMATIC TOP connect connecting cables down to the module. 3. Guide a cable tie around the module at the fixing points and connect the SIMATIC TOP
connect cables.
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
17
Wiring 3.4 Wiring of the module
4. Tighten the cable tie for the strain relief.
Figure 3-4 Fastening the cable tie for the strain relief 5. Plug the SIMATIC TOP connect connecting cables with the 50-pin IDC connector into the
SIMATIC TOP connect connection module.
Additional information
You can find out how to wire the SIMATIC TOP connect connection module in the equipment manual SIMATIC TOP connect for S7-1500 and ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/95924607).
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
18
Equipment Manual, 07/2020, A5E48027024-AA
Wiring 3.5 Fuse
3.5
Fuse
Miniature circuit breaker
Inputs
The supply lines of groups are to be protected with a 4 A miniature circuit breaker with tripping characteristic C or B.
Below, you see the connection for "Sourcing" mode and for "Sinking" mode.
Outputs
The supply lines, max. 16 outputs of a group, are to be protected with a 4 A miniature circuit breaker with tripping characteristic B or C.
The connection module is to be protected with a 6 A miniature circuit breaker with tripping characteristic B.
Figure 3-5 "Sourcing" mode for the inputs
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
19
Wiring 3.5 Fuse
Figure 3-6 "Sinking" mode for the inputs
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
20
Equipment Manual, 07/2020, A5E48027024-AA
Address space
4
The module can be configured in various ways in STEP 7. Depending on the configuration, additional/different addresses are assigned in the process image input/output.
Configuration options of DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA
You can configure the module with STEP 7 (TIA Portal) or with a GSD file. When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names. The following configurations are possible:
Table 4- 1 Configuration options Configuration
1 x 64-channel without value status (1 x 32 digital inputs and 1 x 32 digital outputs) 8 x 8-channel without value status (4 x 8 digital inputs and 4 x 8 digital outputs)
1 x 64-channel with value status for up to 4 submodules (each 1 x 32 channels for module-internal Shared Input or module-internal Shared Output)
Short designation/ module name in the
GSD file
DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA S DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA MSI or MSO
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in the hardware catalog of STEP 7 (TIA Portal)
as of V16 and HSP 0319
X
GSD file in STEP 7 (TIA Portal) V12
or higher or STEP 7
V5.5 SP3 or higher
X
X
X
(PROFINET IO only) (PROFINET IO only)
X
X
(PROFINET IO only) (PROFINET IO only)
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
21
Address space
Address space for configuration as 1 x 64-channel DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA
The figure below shows the address space assignment for configuration as a 1 x 64-channel module (32 digital inputs / 32 digital outputs). You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "EB a (IB a)" stands for module start address input byte and "AB x (QB x)" stands for module start address output byte.
Figure 4-1 Address space for configuration as 1 x 64-channel DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
22
Equipment Manual, 07/2020, A5E48027024-AA
Address space
Address space for configuration as 8 x 8-channel DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA S
For the configuration as an 8 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Unlike the 1 x 64-channel module configuration, each of the eight submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 8 x 8-channel DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA S
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
23
Address space
Address space for configuration as 1 x 64-channel DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA MSI/MSO
For configuration as a 1 x 64-channel module (module-internal Shared Input, MSI / moduleinternal Shared Output, MSO), the channels for inputs or outputs are copied to multiple submodules. Each of the channels are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a Shared Device: · The IO controller to which submodule 1 is assigned has write access to output channels
0 to 31 and read access to the input channels 0 to 31. · The IO controllers to which submodule 2, 3 or 4 is assigned have read access to the input
channels or output channels 0 to 31. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) for inputs The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status is not relevant. For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
Value status (Quality Information, QI) for outputs The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: IO controller of the basic submodule is in STOP mode. For the 2nd to 4th submodule (=MSO submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: · IO controller of the basic submodule is in STOP mode. · The basic submodule is not yet configured.
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
24
Equipment Manual, 07/2020, A5E48027024-AA
Address space
The figure below shows the assignment of the address space with submodule 1 and the value status.
Figure 4-3 Address space for configuration as 1 x 64-channel DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA MSI/MSO
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
25
Address space
The figure below shows the assignment of the address space with submodule 2 and the value status.
Figure 4-4 Address space for configuration as 1 x 64-channel DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA MSI/MSO
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
26
Equipment Manual, 07/2020, A5E48027024-AA
Address space
The figure below shows the assignment of the address space with submodule 3 and the value status.
Figure 4-5 Address space for configuration as 1 x 64-channel DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA MSI/MSO
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
27
Address space
The figure below shows the assignment of the address space with submodule 4 and the value status.
Reference
Figure 4-6 Address space for configuration as 1 x 64-channel DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA MSI/MSO
You can find information on the module-internal shared input/shared output (MSI/MSO) function in the section "Module-internal shared input / Module-internal shared output (MSI/MSO)" of the function manual PROFINET with STEP 7 V16 (https://support.industry.siemens.com/cs/ww/en/view/49948856).
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
28
Equipment Manual, 07/2020, A5E48027024-AA
Diagnostics alarms
5
The module has no selectable diagnostics. Diagnostics alarms, for example, cannot be output with STEP 7 (TIA Portal).
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA.
Figure 5-1 LED displays of the DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA module
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
29
Diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The tables below explain the meaning of the status and error displays.
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On
Flashes
Off Off Flashes
Module is starting up. Module is ready. Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check whether too many modules are in-
serted. ---
Replace the module.
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
30
Equipment Manual, 07/2020, A5E48027024-AA
Technical specifications
6
Technical specifications of the DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA
The following table shows the technical specifications as of 07/2020. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td).
Enter the article number or the short designation of the module on the website.
Article number General information
Product type designation HW functional status Firmware version · FW update possible Product function · I&M data
· Isochronous mode
· Prioritized startup Engineering with
· STEP 7 TIA Portal configurable/integrated from version
· STEP 7 configurable/integrated from version
· PROFIBUS from GSD version/GSD revision Operating mode
· DI
· Counter
· DQ
· DQ with energy-saving function
· PWM
· Cam control (switching at comparison values)
· Oversampling
· MSI
· MSO
· Integrated operating cycle counter
6ES7523-1BP50-0AA0
DI 32 x 24 V DC / DQ 32 x 24 V DC/0.3A SNK BA From FS01 V1.0.0 Yes
Yes; I&M0 to I&M3 No No
V16 with HSP 0319 / V17
V5.5 SP3 / -
V1.0 / V5.1
Yes No Yes No No No
No Yes Yes No
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
31
Technical specifications
Article number Supply voltage
Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Input current Current consumption, max.
Output voltage Rated value (DC)
Power Power available from the backplane bus
Power loss Power loss, typ.
Digital inputs Number of digital inputs Digital inputs, parameterizable Source/sink input Input characteristic curve in accordance with IEC 61131, type 3
Number of simultaneously controllable inputs · Number of simultaneously controllable inputs
horizontal installation up to 60 °C, max.
vertical installation up to 40 °C, max.
Input voltage · Rated value (DC)
· for signal "0"
· for signal "1"
Input current · for signal "1", typ.
Input delay (for rated value of input voltage) for standard inputs
parameterizable
at "0" to "1", min.
at "0" to "1", max.
at "1" to "0", min.
at "1" to "0", max. for interrupt inputs
parameterizable
6ES7523-1BP50-0AA0 24 V 19.2 V 28.8 V Yes; Through internal protection with 4 A per group 45 mA; without load 24 V 0.6 W 4.7 W 32 No Yes Yes
32
32
16
24 V -30 to +5 V +11 to +30V
2.7 mA
No 3 ms 4 ms 3 ms 4 ms
No
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
32
Equipment Manual, 07/2020, A5E48027024-AA
Technical specifications
Article number for technological functions
parameterizable Cable length
· shielded, max.
· unshielded, max. Digital outputs
Type of digital output Number of digital outputs Current-sinking Current-sourcing Digital outputs, parameterizable Short-circuit protection
Limitation of inductive shutdown voltage to Controlling a digital input Switching capacity of the outputs · with resistive load, max.
· on lamp load, max. Load resistance range
· lower limit
· upper limit Output voltage
· for signal "1", min. Output current
· for signal "1" rated value
· for signal "1" permissible range, max.
· for signal "0" residual current, max. Output delay with resistive load
· "0" to "1", max.
· "1" to "0", max. Parallel switching of two outputs
· for logic links
· for uprating
· for redundant control of a load Switching frequency
· with resistive load, max.
· with inductive load, max.
· on lamp load, max.
6ES7523-1BP50-0AA0
No
1 000 m 600 m
Transistor 32 Yes No No No; external fusing necessary, max. 4 A per group, tripping characteristic type B or C L+ (-53 V) Yes
0.3 A 5 W
80 10 k
M+ (0.5 V)
0.3 A 0.3 A 0.5 mA
100 µs 500 µs
Yes No Yes
100 Hz 0.5 Hz; According to IEC 60947-5-1, DC-13 10 Hz
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
33
Technical specifications
Article number Total current of the outputs
· Current per channel, max.
6ES7523-1BP50-0AA0 0.3 A
· Current per group, max.
2 A
· Current per module, max.
4 A
Total current of the outputs (per module)
horizontal installation
up to 60 °C, max.
4 A
vertical installation
up to 40 °C, max.
4 A
Cable length · shielded, max.
1 000 m
· unshielded, max.
600 m
Encoder
Connectable encoders
· 2-wire sensor
Yes
permissible quiescent current (2-wire sensor), max.
1.5 mA
Interrupts/diagnostics/status information
Diagnostics function
No
Substitute values connectable
No
Alarms
· Diagnostic alarm
No
· Maintenance interrupt
No
· Hardware interrupt
No
Diagnostic messages
· Monitoring the supply voltage
No
· Wire-break
No
· Short-circuit
No
· Group error
No
Diagnostics indication LED · RUN LED
Yes; green LED
· ERROR LED
Yes; red LED
· MAINT LED
No
· Monitoring of the supply voltage (PWR-LED) Yes; via SIMATIC TOP connect connection module
· Channel status display
Yes; via SIMATIC TOP connect connection module
· for channel diagnostics
No
· for module diagnostics
No
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
34
Equipment Manual, 07/2020, A5E48027024-AA
Technical specifications
Article number Potential separation Potential separation channels
· between the channels
· between the channels, in groups of
· between the channels and backplane bus Isolation
Isolation tested with Ambient conditions Ambient temperature during operation
· horizontal installation, min.
· horizontal installation, max.
· vertical installation, min.
· vertical installation, max. Altitude during operation relating to sea level
· Installation altitude above sea level, max. Dimensions
Width Height Depth Weights Weight, approx. Other Note:
6ES7523-1BP50-0AA0
No 16; 32 when using SIMATIC TOP connect connection module Yes
707 V DC (type test)
-30 °C 60 °C -30 °C 40 °C
5 000 m
35 mm 147 mm 129 mm
250 g
Please order cable and connection modules separately
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
35
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA module
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
36
Equipment Manual, 07/2020, A5E48027024-AA
Dimensional drawing
Figure A-2 Dimension drawing of the DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA module, side view with open front cover
Digital input/output module DI 32x24VDC SNK/SRC/DQ 32x24VDC/0.3A SNK BA (6ES7523-1BP50-0AA0)
Equipment Manual, 07/2020, A5E48027024-AA
37
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
SIMATIC
S7-1500/ET 200MP Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual
Preface
Documentation guide
1
Product overview
2
Wiring
3
Parameters/address space
4
5 Interrupts/diagnostics alarms
Technical specifications
6
Dimensional drawing
A
Parameter data records
B
04/2020
A5E03485590-AE
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03485590-AE 04/2020 Subject to change
Copyright © Siemens AG 2013 - 2020. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version Compared to the previous version, this manual contains the following change: The module features a switching cycle counter as of firmware version V2.1.0.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that can be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
4
Equipment Manual, 04/2020, A5E03485590-AE
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide ................................................................................................................................. 6
2 Product overview ..................................................................................................................................... 10
2.1
Properties ................................................................................................................................ 10
2.2 2.2.1
Functions ................................................................................................................................12 Switching cycle counter ..........................................................................................................12
3 Wiring ...................................................................................................................................................... 14
4 Parameters/address space ...................................................................................................................... 17
4.1
Parameters .............................................................................................................................17
4.2
Explanation of parameters......................................................................................................18
4.3
Address space ........................................................................................................................19
5 Interrupts/diagnostics alarms ................................................................................................................... 22
5.1
Status and error displays ........................................................................................................22
5.2
Interrupts .................................................................................................................................24
5.3
Diagnostics alarms..................................................................................................................25
6 Technical specifications ........................................................................................................................... 26
A Dimensional drawing ............................................................................................................................... 33
B Parameter data records ........................................................................................................................... 35
B.1
Parameter assignment and structure of the parameter data records.....................................35
B.2
Structure of the data records DS 64 to 71 ..............................................................................37
B.3
Structure of data set DS 129 ..................................................................................................38
B.4
Structure of data set DS 130 ..................................................................................................39
B.5
Structure of data set DS 131 ..................................................................................................40
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
6
Equipment Manual, 04/2020, A5E03485590-AE
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
7
Documentation guide
Application examples The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
8
Equipment Manual, 04/2020, A5E03485590-AE
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
9
Product overview
2.1
Properties
Article number 6ES7522-5HF00-0AB0
View of the module
2
Figure 2-1 View of the DQ 8x230VAC/5A ST module
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
10
Equipment Manual, 04/2020, A5E03485590-AE
Product overview 2.1 Properties
Properties
The module has the following technical properties: 8 digital outputs (relays) Supply voltage of the 24 V DC relay coils Rated output voltage 230 V AC (24 V DC up to 120 V DC/24 V AC up to 230 V AC) Rated output current 5 A Configurable substitute values (per channel) Assignable diagnostics (per channel group) Switching cycle counter for relay contacts Suitable for solenoid valves, DC contactors, and indicator lights The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Module-internal Shared Output (MSO)
Switching cycle counter
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V2.0.0 or higher
V2.1.0 or higher
Configuration software
STEP 7 (TIA Portal)
V12 or higher V12 or higher V12 or higher V13 Update 3 or higher (PROFINET IO only) V15.1 or higher with
HSP0282 · PROFINET IO only
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
--- / X X X X
(PROFINET IO only) X
(PROFINET IO only)
· Central operation with a S7-1500 CPU
You configure the module with STEP 7 (TIA Portal) or with a GSD file.
Compatibility
The following table shows the compatibility of the modules and the dependencies between hardware functional status (FS) and firmware version (FW) used:
Hardware functional status FS01
Firmware version V1.0.0 to V2.0.0
FS02
V1.0.0 to V2.0.0
FS03
V2.1.0
Note
Upgrade and downgrade possible between V1.0.0 and V2.0.0
Upgrade and downgrade possible between V1.0.0 and V2.0.0
Upgrade and downgrade possible between V2.1.0 and higher
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
11
Product overview 2.2 Functions
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Labeling strips U connector Universal front door
Other components
For example, you order the front connector including the potential bridge and cable tie separately.
You can find additional information on accessories and the article numbers in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
2.2
Functions
2.2.1
Switching cycle counter
The "Switching cycle counter" function records the number of switching cycles of the integrated relay contact. When the "Limit value warning" maintenance alarm is configured and enabled, the "Limit value warning" maintenance alarm is triggered when the specified number of switching cycles is reached.
Typical areas of application:
Recording the number of switching cycles of the integrated relay contacts
Predictive maintenance so maintenance and service intervals are more predictable, for example
Advantages
No programming required, because the switching cycle counter is integrated into the module.
"Monitoring" of each individual channel is possible. Select which outputs are "monitored".
The system configuration is flexible and individually adaptable.
Increase in plant availability. You can foresee a module or actuator replacement in advance for the next maintenance cycle.
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
12
Equipment Manual, 04/2020, A5E03485590-AE
Product overview 2.2 Functions
Requirement
Firmware version V2.1.0 or higher of the module.
Configuration
The switching cycle counter for the integrated relay contacts is always activated. Configure the maintenance alarm to monitor the channels with the following parameters: Trigger maintenance alarm when the limit is reached Set limit for maintenance alarm
How it works
The module counts the switching cycles by evaluating the rising edges of an output signal. If the module detects a rising edge, the switching cycle counter (24-bit) for the respective channel is incremented. The counter stops when the high limit is reached.
If you activate the "Maintenance switching cycles" parameter, the "Limit value warning" of the maintenance alarm is signaled when the limit is exceeded. Alternatively, activate the maintenance alarm in the parameter data records starting at DS 64.
The current counter states are stored on the module cyclically (approx. every 20 seconds) and retentively. The switching cycle counters are reset each time the module is restarted (power off/on). If there is no supply voltage, the switching cycle counter stops.
You can read the current counter states with data set DS 129 (Page 38). Data set DS 129 contains the counter status for each channel in UDINT format.
You can read the limits for each channel in UDINT format with data set DS 130 (Page 39).
You can set a limit for each switching cycle counter with the "Switching cycle limit" parameter or data set DS 131 (Page 40).
Note:
The number of permissible switching cycles depends on the type and size of the load. We recommend setting the switching cycle counter to 90 % of the actual service life of the contacts, for example. You then still have adequate time to preemptively replace the module.
You can find the permissible number of switching cycles in theTechnical specifications (Page 26).
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
13
Wiring
3
This section contains the block diagram of the module and outlines various wiring options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
14
Equipment Manual, 04/2020, A5E03485590-AE
Wiring
Wiring and block diagram The example in the following figure shows the terminal assignment and the assignment of the channels.
Note Note that the 24V DC supply voltage for this module must always be supplied by terminals 19/20 and terminals 39/40. Use the included potential jumpers for this purpose.
Relay 8x Backplane bus interface
L+ Power supply 24 V DC for relay contacts
M Ground
CHx RUN ERROR MAINT PWR
Channel or channel status LED (green) Status display LED (green) Error display LED (red) LED maintenance display (yellow) POWER supply voltage LED (green)
Figure 3-1 Block diagram and terminal assignment
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
15
Wiring
Tip: Using the potential jumpers Use the potential jumpers supplied with the front connector if you want to distribute the 24 V DC supply voltage to a neighboring module. This helps you to avoid having to terminate two wires to one terminal. Proceed as follows: 1. Connect the 24 V DC supply voltage to terminals 19 and 20. 2. Insert the potential jumpers between terminals 19 and 39 (L+) and between terminals 20 and 40 (M). 3. Use the terminals 39 and 40 to loop the potential to the next module.
Figure 3-2 Using the potential jumpers
Note Ensure that the maximum current load of 8 A per potential jumper is not exceeded.
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
16
Equipment Manual, 04/2020, A5E03485590-AE
Parameters/address space
4
4.1
Parameters
DQ 8x230VAC/5A ST parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
For parameter assignment in the user program, the parameters are transferred to the module using the WRREC instruction (parameter reassignment in RUN) and data records; see chapter Parameter assignment and structure of the parameter data records (Page 35).
Table 4- 1 Configurable parameters and their defaults
Parameters
Range of values
Default setting
Parameter assignment in RUN
Diagnostics
· Missing supply voltage L+ Yes/No
No
Yes
Reaction to CPU STOP
· Turn off
Turn off
Yes
· Keep last value
· Output substitute value 1
Maintenance switching cycle
Yes/No
No
Yes
counter
Switching cycle limits
Switching cycle counter limit
0 to 16777214 0
Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
GSD file PROFINET IO
GSD file PROFIBUS DP
Channel group Channel
Channel group Channel
Channel
---
Channel
---
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
17
Parameters/address space 4.2 Explanation of parameters
4.2
Explanation of parameters
No supply voltage Enabling of the diagnostics, for lacking or insufficient supply voltage L+.
Reaction to CPU STOP Determines the reaction of the output when the CPU goes into the STOP state or when the connection to the CPU is interrupted.
Maintenance switching cycles You use this parameter to enable the maintenance alarm "Limit value warning" when the switching cycle counter limit is violated. You configure the limit with the parameter "Switching cycle limit" for each channel CHx.
Switching cycle limit Defines the limit value channel-by-channel. If this value is exceeded, the "Limit value warning" maintenance alarm is signaled. Enter an integer value between 0 and 16777214.
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
18
Equipment Manual, 04/2020, A5E03485590-AE
Parameters/address space 4.3 Address space
4.3
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image output/input.
Configuration options of DQ 8x230VAC/5A ST You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different short designations/module names.
The following configurations are possible:
Table 4- 2 Configuration options
Configuration
1 x 8-channel without value status 1 x 8-channel with value status 1 x 8-channel with value status for module-internal Shared Output with up to 4 submodules
Short designation/module name in the GSD file
DQ 8x230VAC/5A ST DQ 8x230VAC/5A ST QI DQ 8x230VAC/5A ST MSO
Configuration software, e.g., STEP 7 (TIA Portal)
Integrated in hardware catalog STEP 7
(TIA Portal)
X X V13 Update 3 or higher (PROFINET IO only)
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5
SP3 or higher
X
X
X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names:
DQ 8x230VAC/5A ST QI
DQ 8x230VAC/5A ST MSO
An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Note Limit value warning The maintenance alarm "Limit value warning" has no effect on the value status.
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
19
Parameters/address space 4.3 Address space
Address space for configuration as 8-channel DQ 8x230VAC/5A ST The following figure shows the assignment of the address space for the configuration as a 8-channel module with value status. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. The letters "a to d" are printed on the module; "QB a", for example, stands for module start address output byte a.
Figure 4-1 Address space for configuration as 8-channel DQ 8x230VAC/5A ST with value status
Address space for configuration as 1 x 8-channel DQ 8x230VAC/5A ST MSO For the configuration as a 1 x 8-channel module (module-internal Shared Output, MSO), channels 0 to 7 of the module are copied to multiple submodules. Channels 0 to 7 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device: The IO controller to which submodule 1 is assigned has write access to outputs 0 to 7. The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs 0 to 7. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule involved. For the first submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For the 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state.
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
20
Equipment Manual, 04/2020, A5E03485590-AE
Parameters/address space 4.3 Address space
The following figure shows the assignment of the address space for submodules 1, 2, 3, and 4 and the value status.
Reference
Figure 4-2 Address space for configuration as 1 x 8-channel DQ 8x230VAC/5A ST S MSO with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V15 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
21
Interrupts/diagnostics alarms
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of the DQ 8x230VAC/5A ST.
5
Figure 5-1 LED displays of the DQ 8x230VAC/5A ST module
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
22
Equipment Manual, 04/2020, A5E03485590-AE
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Corrective measures for diagnostics alarms can be found in the section Diagnostics alarm (Page 25).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Flashes
Off
On
Off
On
Flashes
Flashes Flashes
Meaning Voltage missing or too low at backplane bus
The module starts and flashes until the valid parameter assignment is set. Module is configured Indicates module error because supply voltage L+ is missing Hardware defective
Solution
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Evaluate the diagnostics data and eliminate the error. Replace the module.
LED MAINT
Table 5- 2 MAINT status display
LED MAINT Off On
Meaning 0 = No maintenance interrupt is pending.
1 = The maintenance interrupt "Limit value warning" is pending.
Solution ---
Perform maintenance.
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
23
Interrupts/diagnostics alarms 5.2 Interrupts
PWR LED
Table 5- 3 PWR status display
LED PWR Off On
Meaning Supply voltage L+ too low or missing
Supply voltage L+ is present and OK
CHx LED
Table 5- 4 CHx status display
LED CHx Off On
Meaning 0 = Status of the output signal
1 = Status of the output signal
Solution Check the L+ supply voltage. ---
Solution -----
5.2
Interrupts
The digital output module DQ 8x230VAC/5A ST supports diagnostics interrupts and maintenance alarms.
Diagnostics interrupt The module generates a diagnostics interrupt at the following event: Missing supply voltage L+ Parameter assignment error
Maintenance alarm The module generates a maintenance alarm at the following event: Limit value warning.
Detailed information You can find detailed information on the event in the error organization block with the "RALRM" instruction (read alarm status information) and in the STEP 7 online help.
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
24
Equipment Manual, 04/2020, A5E03485590-AE
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes on the module for each diagnostics event. You can read out the diagnostics alarms, for example, in the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)" on the Internet (https://support.industry.siemens.com/cs/ww/en/view/78324181).
Table 5- 5 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm
Parameter assignment error
Error code 10H
Load voltage missing
11H
Limit value warning
17H
Meaning
· The module cannot evaluate parameters for the channel
· Incorrect parameter assignment
Supply voltage L+ of the module is missing The configured limit for switching cycles has been exceeded.
Corrective measures Correct the parameter assignment
Connect supply voltage L+ to module/channel · Replace module / actuator as a
precautionary measure
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
25
Technical specifications
6
Technical specifications of the DQ 8x230VAC/5A ST
The following table shows the technical specifications as of 04/2020. You will find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7522-5HF00-0AB0/td?dl=en).
Article number General information
HW functional status Firmware version · FW update possible Product function · I&M data
· Isochronous mode Engineering with
· STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Operating mode · DQ
· DQ with energy-saving function
· PWM
· Oversampling
· MSO
· Integrated operating cycle counter Supply voltage
Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
6ES7522-5HF00-0AB0
FS02 V2.1.0 Yes
Yes; I&M0 to I&M3 No
V12 / V12
V5.5 SP3 / -
V1.0 / V5.1
V2.3 / -
Yes No No No Yes Yes; FW V2.1.0 or higher
24 V 20.4 V 28.8 V Yes
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
26
Equipment Manual, 04/2020, A5E03485590-AE
Technical specifications
Article number Input current
Current consumption, max. Output voltage
Rated value (AC)
Power Power available from the backplane bus
Power loss Power loss, typ.
Digital outputs Type of digital output Number of digital outputs Current-sinking Current-sourcing Digital outputs, parameterizable Short-circuit protection Controlling a digital input Size of motor starters according to NEMA, max.
Switching capacity of the outputs · on lamp load, max.
6ES7522-5HF00-0AB0
80 mA
230 V; 24 V DC to 120 V DC / 24 V AC to 230 V AC
0.8 W
5 W
Relays 8 Yes Yes Yes No possible 5
1 500 W; 10 000 operating cycles
· Low energy/fluorescent lamps with electronic control gear
10x 58 W (25 000 operating cycles)
· Fluorescent tubes, conventionally compen- 1x 58 W (25 000 operating cycles) sated
· Fluorescent tubes, uncompensated
10x 58 W (25 000 operating cycles)
Output current
· for signal "1" rated value
5 A
· for signal "1" permissible range, min.
5 mA; 10 V
· for signal "1" permissible range, max.
8 A; thermal continuous current
· for signal "0" residual current, max.
0 A
Parallel switching of two outputs
· for logic links
Yes
· for uprating
No
· for redundant control of a load
Yes
Switching frequency · with resistive load, max.
2 Hz
· with inductive load, max.
0.5 Hz
· on lamp load, max.
2 Hz
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
27
Technical specifications
Article number Total current of the outputs
· Current per channel, max. · Current per group, max. · Current per module, max. Relay outputs · Number of relay outputs · Rated supply voltage of relay coil L+ (DC) · Current consumption of relays (coil current
of all relays), typ. · external protection for relay outputs
· Contact connection (internal) · Number of operating cycles, max.
· Relay approved acc. to UL 508
Switching capacity of contacts with inductive load, max. with resistive load, max.
Cable length · shielded, max. · unshielded, max.
Interrupts/diagnostics/status information Diagnostics function Substitute values connectable
Alarms · Diagnostic alarm
Diagnostic messages · Monitoring the supply voltage · Wire-break · Short-circuit
6ES7522-5HF00-0AB0
8 A; see additional description in the manual 8 A; see additional description in the manual 64 A; see additional description in the manual
8 24 V 80 mA
With miniature circuit breaker with characteristic B for: cos 1.0: 600 A cos 0.5 ... 0.7: 900 A with 8 A Diazed fuse: 1 000 A No 4 000 000; see additional description in the manual Yes; 250 V AC/5 A g.p.; 120 V AC TV-4 tungsten; A300, R300
see additional description in the manual see additional description in the manual
1 000 m 600 m
Yes Yes
Yes
Yes No No
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
28
Equipment Manual, 04/2020, A5E03485590-AE
Technical specifications
Article number Diagnostics indication LED
· RUN LED
6ES7522-5HF00-0AB0 Yes; green LED
· ERROR LED
Yes; red LED
· MAINT LED
Yes; Yellow LED
· Monitoring of the supply voltage (PWRLED)
Yes; green LED
· Channel status display
Yes; green LED
· for channel diagnostics
No
· for module diagnostics
Yes; red LED
Potential separation Potential separation channels
· between the channels
Yes; Switching of different phases permitted
· between the channels, in groups of
1
· between the channels and backplane bus Yes
· Between the channels and load voltage L+ Yes
Permissible potential difference between different circuits
Isolation Isolation tested with
Standards, approvals, certificates Suitable for safety functions
Ambient conditions Ambient temperature during operation
· horizontal installation, min.
250 V AC between the channels and the supply voltage L+; 250 V AC between the channels and the backplane bus; 500 V AC between the channels
Between channels: 3 100 V DC; between channels backplane bus: 3 100 V DC; between L+ and backplane bus: 707 V DC (type test)
No
-30 °C; From FS03
· horizontal installation, max.
60 °C
· vertical installation, min.
-30 °C; From FS03
· vertical installation, max.
40 °C
Decentralized operation Prioritized startup
Dimensions Width Height Depth
Weights Weight, approx.
Yes
35 mm 147 mm 129 mm
350 g
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
29
Technical specifications
Power reduction (derating) to aggregate current of outputs (per channel) The following graphs show the loading capacity of the relay contacts in relation to the mounting position of the S71500 automation system/ET 200MP distributed I/O system and the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Details on aggregate current of outputs (per channel)
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
30
Equipment Manual, 04/2020, A5E03485590-AE
Technical specifications
Details on the number of switching cycles
The following tables list the permissible number of switching cycles depending on the applied voltage and current load. Different values apply in each case to resistive and inductive loads.
Table 6- 1 Switching capacity and service life of relay contacts for resistive load
For resistive load Voltage 24 V DC
60 V DC 120 V DC 24 V AC 48 V AC 60 V AC 120 V AC
230 V AC
Current
8.0 A 5.0 A 2.5 A 2.0 A 1.5 A 0.5 A 0.5 A 0.2 A 0.1 A 8.0 A 8.0 A 2.0 A 8.0 A 2.0 A 8.0 A 5.0 A 4.0 A 2.0 A 1.0 A 0.5 A 8.0 A 5.0 A 4.0 A 2.5 A 2.0 A 1.0 A 0.5 A 0.2 A 0.1 A
Number of switching cycles (typ.) 0.1 million 0.2 million 0.7 million 1.0 million 2.0 million 4.0 million 4.0 million 1.6 million 2.0 million 0.1 million 0.1 million 1.6 million 0.1 million 1.2 million 0.1 million 0.2 million 0.3 million 0.5 million 0.7 million 1.5 million 0.1 million 0.2 million 0.3 million 0.4 million 0.5 million 0.7 million 1.5 million 1.7 million 2.0 million
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
31
Technical specifications
Table 6- 2 Switching capacity and lifetime of the relay contacts for inductive load
For inductive load Voltage 24 V DC
60 V DC 120 V DC 24 V AC 48 V AC 60 V AC 120 V AC
230 V AC
Current
2.5 A 2.0 A 1.0 A 0.5 A 0.2 A 0.5 A 0.3 A 0.1 A 0.2 A 3.0 A 1.5 A 3.0 A 1.5 A 3.0 A 5.0 A 3.0 A 2.0 A 1.0 A 0.5 A 5.0 A 3.0 A 2.5 A 2.0 A 1.0 A 0.5 A 0.2 A 0.1 A
Number of switching cycles (typ.) 0.25 million 0.3 million 0.5 million 1.0 million 2.0 million 0.5 million 1.0 million 1.2 million 0.5 million 0.5 million 1.0 million 0.4 million 1.0 million 0.3 million 0.1 million 0.2 million 0.3 million 0.7 million 2.0 million 0.1 million 0.2 million 0.4 million 0.3 million 0.7 million 2.0 million 3.0 million 4.0 million
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
32
Equipment Manual, 04/2020, A5E03485590-AE
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in the appendix. Always observe the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DQ 8x230VAC/5A ST module
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
33
Dimensional drawing
Figure A-2 Dimensional drawing of the DQ 8x230VAC/5A ST module, side view with open front cover
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
34
Equipment Manual, 04/2020, A5E03485590-AE
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When a GSD file is used to configure a module, dependencies can arise when "assigning the parameters".
There are no dependencies for this module. You can assign the individual parameters in any combination.
Parameter assignment in the user program
You have the option to reconfigure the module in RUN (e.g. the response of selected channels to the CPU-STOP state can be changed in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 64 to 71. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You obtain the diagnostics data records 0 and 1 with the read back parameter data records 0 and 1. You can find additional information in the Interrupts section of the manual for the PROFIBUS DP interface module in the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
35
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Assignment of data record and channel The channel parameters of the module are included in data records 64 to 71 and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 Data record 66 for channel 2 Data record 67 for channel 3 Data record 68 for channel 4 Data record 69 for channel 5 Data record 70 for channel 6 Data record 71 for channel 7
Assignment of data record for the switching cycle counter The parameters for the switching cycle counter are located in the data records 129 to 130 and are assigned as follows: Data record 129 for channel 0 to 7 to read the counter values Data record 130 for channel 0 to 7 to read the limit values
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
36
Equipment Manual, 04/2020, A5E03485590-AE
Parameter data records B.2 Structure of the data records DS 64 to 71
B.2
Structure of the data records DS 64 to 71
Data record structure
The figure below shows the structure of data record 64 for channel 0 as an example. The structure is identical for channels 1 to 7. The values in byte 0 and byte 1 are fixed and may not be changed.
Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 64: Bytes 0 to 3
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
37
Parameter data records B.3 Structure of data set DS 129
B.3
Structure of data set DS 129
Structure of data set 129
You can read the current states of the switching cycle counters with data set 129. The counter status is supplied for each channel in UDINT format.
The following figure shows you the structure of data set 129.
Figure B-2 Structure of data set 129: Byte 0 to 31
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
38
Equipment Manual, 04/2020, A5E03485590-AE
Parameter data records B.4 Structure of data set DS 130
B.4
Structure of data set DS 130
Structure of data set 130
The limits of the switching cycle counters are read out with data set 130. The set value is supplied for each channel in UDINT format.
The following figure shows you the structure of data set 130.
Figure B-3 Structure of data set 130: Byte 0 to 31
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
Equipment Manual, 04/2020, A5E03485590-AE
39
Parameter data records B.5 Structure of data set DS 131
B.5
Structure of data set DS 131
Structure of data set 131 The following figure shows you the structure of data set 131. Enable a parameter by setting the corresponding bit to "1".
Figure B-4 Structure of data set 131: Bytes 0 to 7
Digital output module DQ 8x230VAC/5A ST Relay (6ES7522-5HF00-0AB0)
40
Equipment Manual, 04/2020, A5E03485590-AE
_Pr_ef_ac_e_______________
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
SIMATIC
_Pr_od_u_ct_o_ve_rv_ie_w_________2_
S7-1500/ET 200MP
_W_iri_ng_______________3_
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA
_Ad_d_re_ss_s_pa_c_e __________4_
(6ES7523-1BL00-0AA0)
Manual
_Di_ag_n_os_tic_s_a_lar_m_s ________5_
_Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_
_Di_m_en_s_ion_a_l d_ra_w_in_g _______A_
09/2016
A5E32364588-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E32364588-AC 09/2016 Subject to change
Copyright © Siemens AG 2014 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual.
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change:
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
4
Manual, 09/2016, A5E32364588-AC
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
3.1
Wiring and block diagram ...................................................................................................... 13
4 Address space ...................................................................................................................................... 14
4.1
Address space ....................................................................................................................... 14
5 Diagnostics alarms................................................................................................................................ 21
5.1
Status and error displays ....................................................................................................... 21
6 Technical specifications ........................................................................................................................ 23
A Dimensional drawing............................................................................................................................. 28
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
6
Manual, 09/2016, A5E32364588-AC
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
8
Manual, 09/2016, A5E32364588-AC
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
10
Manual, 09/2016, A5E32364588-AC
Product overview
2.1
Properties
Part number:
6ES7523-1BL00-0AA0
View of the module
2
Figure 2-1 View of the DI 16x24VDC/DQ 16x24VDC/0.5A BA module
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
11
Product overview 2.1 Properties
Properties
The module has the following technical properties: Digital inputs
16 digital inputs; electrically isolated in groups of 16 Rated input voltage 24 VDC Suitable for switches and 2-/3-/4-wire proximity switches Digital outputs 16 digital outputs, electrically isolated in groups of 8 Rated output voltage 24 VDC Rated output current 0.5 A per channel Suitable for solenoid valves, DC contactors, and indicator lights The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Module-internal Shared Input (MSI) / Shared Output (MSO) Configurable submodules / submodules for Shared Device
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher, or
STEP 7 V5.5 SP3 or higher
V13 or higher
X
V13 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following components are supplied with the module and can also be ordered separately as spare parts:
Front connector (push-in terminals) including cable tie
Labeling strips
U connector
Universal front door
You can find additional information on accessories in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
12
Manual, 09/2016, A5E32364588-AC
Wiring
3
3.1
Wiring and block diagram
This section contains the block diagram of the module and outlines various wiring options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Wiring and block diagram
The figure below shows you how to connect the module and the assignment of the channels to the addresses (input byte a and b, output byte c and d).
Backplane bus interface
xL+ Supply voltage 24 V DC xM Ground
CHx RUN ERROR PWR
Channel or channel status LED (green) Status display LED (green) Error display LED (red) POWER supply voltage LED (green)
Figure 3-1 Block diagram and terminal assignment
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
13
Address space
4
4.1
Address space
The module can be configured in various ways in STEP 7. Depending on the configuration, additional/different addresses are assigned in the process image input/output.
Configuration options of DI 16x24VDC/DQ 16x24VDC/0.5A BA
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 1 Configuration options Configuration
Short designation/ module name in the GSD
file
1 x 32-channel without value status (1 x 16 digital inputs and 1 x 16 digital outputs)
4 x 8-channel without value status (2 x 8 digital inputs and 2 x 8 digital outputs)
DI 16x24VDC/ DQ 16x24VDC/0.5 BA
DI 16x24VDC/ DQ 16x24VDC/0.5 BA S
1 x 32-channel with value status for up to 4 submodules (each 1 x 16 channels for moduleinternal Shared Input or Shared Output)
DI 16x24VDC/ DQ 16x24VDC/0.5 BA MSI or MSO
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3 or higher
V13 or higher
X
V13 Update 3 or higher (PROFINET IO only)
V13 Update 3 or higher (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
14
Manual, 09/2016, A5E32364588-AC
Address space 4.1 Address space
Address space for configuration as 1 x 32-channel DI 16x24VDC/DQ 16x24VDC/0.5A BA
The figure below shows the address space assignment for configuration as a 1 x 32-channel module (16 digital inputs / 16 digital outputs). You can freely assign the start address for the module. The addresses of the channels are derived from the start address. The letters "a to d" are printed on the module- "EB a", for example, stands for module start address input byte a.
Figure 4-1 Address space for configuration as 32-channel DI 16x24VDC/DQ 16x24VDC/0.5A BA
Address space for configuration as 4 x 8-channel DI 16x24VDC/DQ 16x24VDC/0.5A BA S
For the configuration as a 4 x 8-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Unlike the 1 x 32-channel module configuration, each of the four submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 4 x 8-channel DI 16x24VDC/DQ 16x24VDC/0.5A BA S
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
15
Address space 4.1 Address space
Address space for configuration as 1 x 32-channel DI 16x24VDC/DQ 16x24VDC/0.5A BA MSI/MSO
For configuration as a 1 x 32-channel module (module-internal Shared Input, MSI/Shared Output, MSO), the channels for inputs or outputs 0 to 15 of the module are copied to multiple submodules. Each of the channels 0 to 15 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a Shared Device: The IO controller to which submodule 1 is assigned has write access to output channels 0
to 15 and read access to the input channels 0 to 15. The IO controllers to which submodule 2, 3 or 4 is assigned have read access to the input
channels or output channels 0 to 15. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) for inputs The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status is not relevant. For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
Value status (Quality Information, QI) for outputs The meaning of the value status depends on the submodule involved. For the 1st submodule (=basic submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: Value is incorrect, for example, because the supply voltage is missing. IO controller of the basic submodule is in STOP mode. For the 2nd to 4th submodule (=MSO submodule), the value status 1 indicates that the output value specified by the user program is actually output at the module terminal. Possible causes for value status = 0: Value is incorrect, for example, because the supply voltage is missing. IO controller of the basic submodule is in STOP mode. The basic submodule is not yet configured.
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
16
Manual, 09/2016, A5E32364588-AC
Address space 4.1 Address space The figure below shows the assignment of the address space with submodule 1 and the value status.
Figure 4-3 Address space for configuration as 1 x 32-channel DI 16x24VDC/DQ 16x24VDC/0.5A BA MSI/MSO
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
17
Address space 4.1 Address space
The figure below shows the assignment of the address space with submodule 2 and the value status.
Figure 4-4 Address space for configuration as 1 x 32-channel DI 16x24VDC/DQ 16x24VDC/0.5A BA MSI/MSO
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
18
Manual, 09/2016, A5E32364588-AC
Address space 4.1 Address space
The figure below shows the assignment of the address space with submodule 3 and the value status.
Figure 4-5 Address space for configuration as 1 x 32-channel DI 16x24VDC/DQ 16x24VDC/0.5A BA MSI/MSO
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
19
Address space 4.1 Address space
The figure below shows the assignment of the address space with submodule 4 and the value status.
Reference
Figure 4-6 Address space for configuration as 1 x 32-channel DI 16x24VDC/DQ 16x24VDC/0.5A BA MSI/MSO
You can find information on the module-internal shared input/shared output (MSI/MSO) function in the section Module-internal shared input/shared output (MSI/MSO) of the function manual PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856).
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
20
Manual, 09/2016, A5E32364588-AC
Diagnostics alarms
5
The module has no selectable diagnostics. Diagnostics alarms, for example, cannot be output with STEP 7 (TIA Portal).
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of the DI 16x24VDC/DQ 16x24VDC/0.5A BA.
Figure 5-1 LED displays of the module DI 16x24VDC/DQ 16x24VDC/0.5A BA
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
21
Diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The tables below explain the meaning of the status and error displays.
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On
Flashes
Off Off Flashes
Module is starting up. Module is ready. Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Replace the module.
LED PWRx
Table 5- 2 PWRx status display
LED PWRx Off On
Meaning Supply voltage L+ too low or missing
Supply voltage L+ is present and OK.
Remedy Check supply voltage L+.
---
LED CHx
Table 5- 3 CHx status display
LED CHx
Meaning
0 = Status of the input/output signal.
---
Off
1 = Status of the input/output signal.
---
On
Remedy
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
22
Manual, 09/2016, A5E32364588-AC
Technical specifications
6
Technical specifications of the DI 16x24VDC/DQ 16x24VDC/0.5A BA
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7523-1BL00-0AA0
DI 16x24VDC / DQ16x24VDC/0.5A BA FS01 V1.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V13 / V13
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
DI
Yes
Counters
No
DQ
Yes
DQ with energy-saving function
No
PWM
No
Oversampling
No
MSI
Yes
MSO
Yes
Supply voltage
Rated value (DC) Valid range, low limit (DC) Valid range, high limit (DC) Reverse polarity protection Input current Current consumption, max.
24 V 20.4 V 28.8 V Yes; with internal protection with 7 A per group
30 mA
Output voltage
Rated value (DC)
24 V
Power
Power consumption from the backplane bus Power loss Power loss, typ.
1.1 W 3.45 W
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
23
Technical specifications
Digital inputs Number of inputs Configurable digital inputs Sinking/sourcing input Input characteristic curve acc. to IEC 61131, type 3 Input voltage Type of input voltage Rated value (DC) for signal "0" for signal "1" Input current for signal "1", typ. Input delay (for rated value of input voltage) For standard inputs · Configurable
· with "0" to "1", min.
· with "0" to "1", max.
· with "1" to "0", min.
· with "1" to "0", max.
For interrupt inputs · Configurable
Cable length shielded, max. unshielded, max. Digital outputs Number of outputs Sourcing output Short-circuit protection · Response threshold, typ.
Limitation of inductive shutdown voltage to Activation of a digital input Switching capacity of the outputs With resistive load, max. With lamp load, max. Load resistance range Low limit High limit Output voltage for signal "1", min.
6ES7523-1BL00-0AA0
16 No Sinking input Yes
DC 24 V -30 to +5 V +11 to +30 V
2.7 mA
No 3 ms 4 ms 3 ms 4 ms
No
1000 m 600 m
16 Yes Yes 1 A L+ (-53 V) Yes
0.5 A 5 W
48 12 k
L+ (-0.8 V)
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
24
Manual, 09/2016, A5E32364588-AC
Technical specifications
Output current For signal "1" rated value For signal "1" permitted range, max. For signal "0" residual current, max. Output delay with resistive load "0" to "1", max. "1" to "0", max. Parallel connection of two outputs For logical operations For increased performance For redundant activation of a load Switching frequency With resistive load, max. With inductive load, max. With lamp load, max. Total current of the outputs Current per channel, max. Current per group, max. Current per module, max. Cable length shielded, max. unshielded, max. Encoders Connectable encoders 2-wire sensor
· Permitted quiescent current (2-wire sensor), max.
6ES7523-1BL00-0AA0
0.5 A 0.5 A 0.5 mA
100 µs 500 µs
Yes No Yes
100 Hz 0.5 Hz 10 Hz
0.5 A; see additional description in the manual 4 A; see additional description in the manual 8 A; see additional description in the manual
1000 m 600 m
Yes 1.5 mA
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
No
Substitute values can be applied
No
Interrupts
Diagnostics interrupt
No
Hardware interrupt
No
Diagnostics alarms
Monitoring of supply voltage
No
Wire break
No
Short-circuit
No
Group error
No
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
25
Technical specifications
Diagnostics indicator LED RUN LED ERROR LED Monitoring of supply voltage (PWR LED) Channel status display For channel diagnostics For module diagnostics Electrical isolation Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Isolation Isolation tested with Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed mode Prioritized startup Dimensions Width Height Depth Weights Weight, approx. Miscellaneous Note:
6ES7523-1BL00-0AA0
Yes; green LED Yes; red LED Yes; green LED Yes; green LED No No
No 8 Yes
707 V DC (type test)
0 °C 60 0 °C 40 °C
Yes
25 mm 147 mm 129 mm
280 g
Delivery includes 40-pin push-in front connector
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
26
Manual, 09/2016, A5E32364588-AC
Technical specifications Power reduction (derating) to total current of outputs (per group)
The following graphs show the loading capacity of the outputs in relation to the mounting position of the S71500 automation system/ET 200MP distributed I/O system and the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Details on total current of outputs (per group)
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
27
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front cover, are provided in this appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the DI 16x24VDC/DQ 16x24VDC/0.5A BA module
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
28
Manual, 09/2016, A5E32364588-AC
Dimensional drawing
Figure A-2 Dimensional drawing of the DI 16x24VDC/DQ 16x24VDC/0.5A BA module, side view with open front cover
Digital input/output module DI 16x24VDC/DQ 16x24VDC/0.5A BA (6ES7523-1BL00-0AA0)
Manual, 09/2016, A5E32364588-AC
29
SIMATIC
S7-1500/ET 200MP Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _Rvae_lpu_rees_se_n_ta_tio_n _of_a_na_lo_g ____C__
09/2016
A5E36649087-AB
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E36649087-AB 09/2016 Subject to change
Copyright © Siemens AG 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Functions that relate in general to the systems are described in these system manuals.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following changes: As of firmware version V1.1.0, the module supports the following functions:
Measuring range adjustment Scaling of measured values Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information regarding the product described in the documentation or its handling, or draws special attention to a section of the documentation.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
4
Manual, 09/2016, A5E36649087-AB
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109739516).
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
2.2 2.2.1 2.2.2
Functions................................................................................................................................ 14 Measuring range adjustment ................................................................................................. 14 Scaling of measured values ................................................................................................... 17
3 Wiring ................................................................................................................................................... 21
4 Parameters/address space ................................................................................................................... 25
4.1
Measuring types and ranges.................................................................................................. 25
4.2
Parameters............................................................................................................................. 26
4.3
Declaration of parameters...................................................................................................... 29
4.4
Address space ....................................................................................................................... 32
5 Interrupts/diagnostics alarms................................................................................................................. 39
5.1
Status and error displays ....................................................................................................... 39
5.2
Interrupts ................................................................................................................................ 41
5.3
Diagnostics alarms................................................................................................................. 43
6 Technical specifications ........................................................................................................................ 44
A Dimensional drawing............................................................................................................................. 48
B Parameter data records ........................................................................................................................ 50
B.1
Parameter assignment ........................................................................................................... 50
B.2
Structure of the parameter data records without scaling of measured values ...................... 52
B.3
Structure of the parameter data records with scaling of measured values ........................... 55
B.4
Codes for measurement types/measuring ranges and limits for hardware interrupts ........... 58
C Representation of analog values ........................................................................................................... 60
C.1
Representation of input ranges.............................................................................................. 61
C.2
Representation of analog values in voltage measuring ranges ............................................. 62
C.3
Representation of analog values in the current measuring ranges ....................................... 63
C.4
Measured values for wire break diagnostic ........................................................................... 64
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
6
Manual, 09/2016, A5E36649087-AB
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
8
Manual, 09/2016, A5E36649087-AB
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
10
Manual, 09/2016, A5E36649087-AB
Product overview
2.1
Properties
Article number
6ES7531-7NF00-0AB0
View of the module
2
Figure 2-1 View of the AI 8xU/I HF module
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
11
Product overview 2.1 Properties
Properties
The module has the following technical properties: 8 electrically isolated analog inputs Voltage measurement type can be set per channel Current measurement type can be set per channel Two operating modes
Fast: shortest integration time 2.5 ms Standard: shortest integration time 7.5 ms Resolution 16 bits including sign Configurable diagnostics (per channel) Hardware interrupt on limit violation can be set per channel (two low and two high limits per channel) The module supports the following functions:
Table 2- 1
Version dependencies of the module functions
Function
Firmware version of the module
Configuration software
STEP 7 (TIA Portal) as of V13,
SP1 and HSP 0166
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Module internal Shared Input (MSI)
Configurable submodules / submodules for Shared Device Measuring range adjustment Scaling of measured values
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
V1.1.0 or higher
X X X X (PROFINET IO only) X (PROFINET IO only) V14 or higher and HSP 0186 (only PROFINET IO)
--- / X X X X
(PROFINET IO only) X
(PROFINET IO only) X
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
12
Manual, 09/2016, A5E36649087-AB
Product overview 2.1 Properties
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Shield bracket Shield terminal Power supply element Labeling strips U connector Universal front cover
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
13
Product overview 2.2 Functions
2.2
Functions
2.2.1
Measuring range adjustment
Introduction
The measuring range adjustment is available for current and voltage measuring ranges. Live zero measuring ranges are not supported.
Function
The measuring range adjustment is an adjustment of the measuring range at the sensor.
It allows you to increase the resolution for a configurable part of the measuring range in S7 format.
You activate the function in STEP 7 (TIA Portal) via the "Measuring range adjustment" parameter.
The "Measuring range adjustment high limit" parameter sets the high limit of the measuring range in mV or A.
The "Measuring range adjustment low limit" parameter sets the low limit of the measuring range in mV or A.
Note · The "Measuring range adjustment" function can be used in combination with the
"Measured value scaling" function, see also Scaling of measured values (Page 17). · When the "Measuring range adjustment high limit" and "Measuring range adjustment low
limit" parameters are too close together, resolution may be lost, which means it may no longer be possible to show every value.
Rules
The limits of the measuring range adjustment must be selected within the nominal range of the base measuring range. They are specified in integers.
The measuring range adjustment is resolved depending on the base measuring range from 0H to 6C00H or 9400H to 6C00H.
Underranges/overranges apply in accordance with the S7 format and the base measuring range.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
14
Manual, 09/2016, A5E36649087-AB
Example
Product overview 2.2 Functions
The following values result, for example:
Table 2- 2 Example of measuring range adjustment
Measuring range adjustment
Base measuring range Adjusted measuring range Measuring range adjustment high limit
Measuring range adjustment low limit
Measuring range resolution
Bipolar
Unipolar
±10 V
0 mA to 20 mA
+2 V to +5 V
+2 mA to +15 mA
5000 mV (S7: +27648)
15 mA (S7: +27648)
2000 mV (S7: -27648)
2 mA (S7: 0)
The following example illustrates the effect of a measuring range adjustment:
Figure 2-2 Example of a measuring range adjustment
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
15
Product overview 2.2 Functions
Example of a configuration
The following figure shows an example of a configuration with a measuring range adjustment of 2000 mV to 5000 mV.
Figure 2-3 Example of a measuring range adjustment in STEP 7 (TIA Portal)
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
16
Manual, 09/2016, A5E36649087-AB
2.2.2
Scaling of measured values
Product overview 2.2 Functions
Introduction
The measured value scaling can be combined with the measuring range adjustment. In this case, the measuring range is adjusted first and then the representation of the measuring range is scaled.
Function
With measured value scaling, the user data of the module is displayed in REAL format (32bit floating point) instead of S7 format.
The representation of the measuring range is defined by the following parameters:
The "Scaled high nominal range limit" parameter sets the desired display value (in REAL format) for the high nominal range limit of the measuring range.
The "Scaled low nominal range limit" parameter sets the desired display value (in REAL format) for the low nominal range limit of the measuring range.
Note
Effects of inversion
·
It is possible to set the "Scaled high nominal range limit" parameter lower than the
"Scaled low nominal range limit" parameter, whereby the representation of the measuring
range will be inverted compared to the terminal value (V, mA).
·
Overflow/underflow and hardware interrupts are always based on representation in
REAL format. A terminal value of > 11.76 V triggered an underflow for an inverted
measured value scaling. Hardware interrupts react similarly.
Substitute value for underflow/overflow
With measured value scaling, the substitute value is minus infinity for underflow (FF80 0000H) and plus infinity for overflow (7F80 0000H).
Resolution at the parameter "Scaled high/low nominal range limit"
When the Parameter "Scaled high nominal range limit" and "Scaled low nominal range limit" parameters are too close together, resolution may be lost, which means it may no longer be possible to show every value.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
17
Product overview 2.2 Functions
Example
The following values result, for example:
Table 2- 3 Example of measured value scaling
Base measuring range S7 format Scaling of measured values
Low nominal range limit -10 V -27648 1.00
High nominal range limit +10 V +27648 7.00
As shown in the table, -10 V corresponds to 1.00 and +10 V corresponds to 7.00.
Combination with measuring range adjustment
If the measuring range adjustment is enabled in addition to measured value scaling, first the measuring range is adjusted and then the representation of the measuring range scaled. The table below shows an example of the combination of measured value scaling and measuring range adjustment.
Table 2- 4 Example for a combination of measured value scaling and measuring range adjustment
Measuring range adjustment S7 format Scaling of measured values
Low nominal range limit -4000 mV -27648 1.00
High nominal range limit 8000 mV +27648 7.00
As shown in the table, -4 V corresponds to 1.00 and +8 V corresponds to 7.00.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
18
Manual, 09/2016, A5E36649087-AB
Product overview 2.2 Functions
Configuration
The following figures show examples of a configuration in STEP 7 (TIA Portal): Configuration of measured value scaling
Figure 2-4 Configuration of measured value scaling
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
19
Product overview 2.2 Functions
Configuration with measuring range adjustment and measured value scaling In the configuration example, a measuring range adjustment of -4000 mV to 8000 mV is displayed and additionally converted to a scaled high and low nominal range limit of 1.00 to 7.00.
Figure 2-5 Configuration with measuring range adjustment and measured value scaling
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
20
Manual, 09/2016, A5E36649087-AB
Wiring
3
The section below includes the block diagram of the module and various wiring options. You can find information on wiring the front connector, establishing a cable shield, etc in the Wiring section of the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Note · You may use and combine the different wiring options for all channels. · Do not insert the potential jumpers included with the front connector!
Abbreviations used
Meaning of the abbreviations used in the following figures:
Un+/UnIn+/InL+ M
Voltage input channel n (voltage only) Current input channel n (current only) Supply voltage connection Ground connection
Pin assignment for the power supply element
The power supply element is plugged onto the front connector for powering the analog module. Wire the supply voltage to terminals 41 (L+) and 44 (M). Use terminals 42 (L+) and 43 (M) to loop the potential to the next module.
Figure 3-1 Power supply element wiring
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
21
Wiring
Block diagram and pin assignment for voltage measurement
The example in the figure below shows the pin assignment for a voltage measurement.
Analog-to-Digital Converter (ADC) Electrical isolation Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-2 Block diagram and pin assignment for voltage measurement
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
22
Manual, 09/2016, A5E36649087-AB
Wiring
Block diagram and terminal assignment for 4-wire transducer for current measurement
The example in the following figure shows the pin assignment for current measurement with 4-wire transducers.
Connector 4-wire transducer Analog-to-Digital Converter (ADC) Electrical isolation Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-3 Block diagram and terminal assignment for 4-wire transducer for current measurement
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
23
Wiring
Block diagram and terminal assignment for 2-wire transducer for current measurement
The example in the following figure shows the pin assignment for current measurement with 2-wire transducers.
Connector 2-wire transducer
Analog-to-Digital Converter (ADC) Electrical isolation Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx
RUN ERROR PWR
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-4 Block diagram and terminal assignment for 2-wire transducer for current measurement
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
24
Manual, 09/2016, A5E36649087-AB
Parameters/address space
4
4.1
Measuring types and ranges
Introduction
The module is set to voltage measuring type with measuring range ±10 V by default. You need to reassign the module parameters with STEP 7 if you want to use a different measuring type or range.
The following table shows the measuring types and the respective measuring range.
Measurement type Voltage
Current 2WMT (2-wire transducer) Current 4WMT (4-wire transducer) Deactivated
Measuring range
1 V to 5 V ±2.5 V ±5 V ±10 V 4 mA to 20 mA
4 mA to 20 mA 0 mA to 20 mA ±20 mA -
Representation of analog values
See Appendix Representation of analog values in voltage measuring ranges (Page 62).
See Appendix Representation of analog values in the current measuring ranges (Page 63).
The tables of the input ranges, overflow, undershoot range, etc. are available in appendix Representation of analog values (Page 60).
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
25
Parameters/address space 4.2 Parameters
4.2
Parameters
Parameters of AI 8xU/I HF
The AI 8xU/I HF is usually already integrated in the hardware catalog of STEP 7 (TIA Portal). In this case, STEP 7 (TIA Portal) checks the configured properties for plausibility during configuration.
However, you can also assign parameters to the module by means of a GSD file and the configuration software of any provider. The module does not check the validity of the configured properties until after the configuration has been loaded.
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
When assigning parameters in the user program, use the WRREC instruction to transfer the parameters to the module by means of data records; refer to the section Parameter assignment (Page 50).
The following parameter settings for the channels are possible:
Table 4- 1 Configurable parameters and their defaults
Parameters
Range of values
Default setting
Diagnostics
· Missing supply voltage Yes/No
No
L+
· Overflow
Yes/No
No
· Underflow
Yes/No
No
· Wire break
· Current limit for wire break diagnostics 2)
Yes/No (Voltage: 1 V to 5 V Current: 4 mA to 20 mA)
1.185 mA or 3.6 mA
No 1.185 mA
Configuration in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware cata-
log STEP 7 (TIA Portal) as of V13 or GSD file PROFINET
IO
GSD file PROFIBUS DP
Yes
Channel 1)
Module 3)
Yes
Channel
Module 3)
Yes
Channel
Module 3)
Yes
Channel
Module 3)
Yes
Channel
--- 4)
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
26
Manual, 09/2016, A5E36649087-AB
Parameters/address space 4.2 Parameters
Parameters
Range of values
Default setting
Measuring · Measurement type · Measuring range
See section Measur- Voltage
ing types and rang-
es (Page 25)
±10 V
· Operating mode
Standard Fast
Standard
· Interference frequency 400 Hz
suppression
60 Hz
50 Hz
50 Hz
10 Hz
· Smoothing
None/low/medium/hi None gh
· Measuring range adjustment
· Disable · Enable
Disable
· Measuring range ad- Value within the
High limit
justment high limit (mV nominal range of the
or µA)
measuring range
greater than lower
limit
· Measuring range adjustment low limit (mV or µA)
Value within the
Low limit
nominal range of the
measuring range
smaller than high
limit
· Scaled high nominal range limit
Scale · High limit
High limit
· Low limit
· Scaled low nominal range limit
Scale · High limit
Low limit
· Low limit
Configuration in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware cata-
log STEP 7 (TIA Portal) as of V13 or GSD file PROFINET
IO
GSD file PROFIBUS DP
Yes
Channel
Channel
Yes
Channel
Channel
Yes
Channel
--- 4)
Yes
Channel
Module
Yes
Channel
Channel
Yes
Channel
Channel
Yes
Channel
Channel 4)
Yes
Channel
Channel 4)
Yes
Channel
---
Yes
Channel
---
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
27
Parameters/address space 4.2 Parameters
Parameters
Range of values
Hardware interrupt · Hardware interrupt high Yes/No
limit 1
· Hardware interrupt low Yes/No limit 1
· Hardware interrupt high Yes/No limit 2
· Hardware interrupt low Yes/No limit 2
Default setting
Configuration in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware cata-
log STEP 7 (TIA Portal) as of V13 or GSD file PROFINET
IO
GSD file PROFIBUS DP
No
Yes
Channel
--- 4)
No
Yes
Channel
--- 4)
No
Yes
Channel
--- 4)
No
Yes
Channel
--- 4)
1) If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault.
You can prevent this message burst by assigning the diagnostics function to one channel only.
2) When "Wire break" diagnostics is disabled, the current limit of 1.185 mA applies to the value status. For measured values below 1.185 mA, the value status is always: 0 = fault.
3) You can set the effective range of the diagnostics for each channel in the user program with data records 0 to 7.
4) You can set the current limit for wire break diagnostics, the "Hardware interrupt" parameter, the "Measuring range adjustment high and low limit" and the hardware interrupt limits in the user program with data records 0 to 7.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
28
Manual, 09/2016, A5E36649087-AB
Parameters/address space 4.3 Declaration of parameters
4.3
Declaration of parameters
Missing supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Overflow
Enabling of the diagnostics if the measured value violates the high limit.
Underflow
Enabling of the diagnostics if the measured value violates the low limit.
Wire break
Enabling of the diagnostics if the module has no current flow or the current is too weak for the measurement at the corresponding configured input or the applied voltage is too low.
Current limit for wire break diagnostics
Threshold for reporting wire breaks. The value can be set to 1.185 mA or 3.6 mA, depending on the sensor used.
Interference frequency suppression
Suppresses the interference affecting analog input modules that is caused by the frequency of the AC voltage network used.
The frequency of the AC voltage network can negatively affect the measured value, in particular when measuring in low voltage ranges and with thermocouples. With this parameter, the user specifies the line frequency that is predominant in the plant.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
29
Parameters/address space 4.3 Declaration of parameters
Smoothing
The individual measured values are smoothed using filtering. The smoothing can be set in 4 levels.
Smoothing time = number of module cycles (k) x cycle time of the module.
The following figure shows after how many module cycles the smoothed analog value is almost 100%, depending on the set smoothing. Is valid for each signal change at the analog input.
None (k = 1) Weak (k = 4) Medium (k = 16) Strong (k = 32)
Figure 4-1 Smoothing with AI 8xU/I HF
Hardware interrupt 1 or 2
Enable a hardware interrupt at violation of high limit 1 or 2 or low limit 1 or 2.
Low limit 1 or 2
Specifies the low limit threshold that triggers hardware interrupt 1 or 2.
High limit 1 or 2
Specifies the high limit threshold that triggers hardware interrupt 1 or 2.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
30
Manual, 09/2016, A5E36649087-AB
Parameters/address space 4.3 Declaration of parameters
Operating mode Fast / Standard
You can use this parameter to determine the operating mode for the module. Fast mode; easy integration time with less frequency suppression (minimal integration
time 2.5 ms) Standard mode; triple integration time with higher frequency suppression (minimal
integration time 7.5 ms)
Measuring range adjustment
With this parameter, you disable or enable the measuring range adjustment function.
Measuring range adjustment high limit
With this parameter, you specify the high limit of the measuring range.
Measuring range adjustment low limit
With this parameter, you specify the low limit of the measuring range.
Scaled high nominal range limit
With this parameter, you set the desired display value (in REAL) for the high nominal range limit of the measuring range.
Scaled low nominal range limit
With this parameter, you set the desired display value (in REAL) for the low nominal range limit of the measuring range.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
31
Parameters/address space 4.4 Address space
4.4
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
Configuration options of AI 8xU/I HF
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 2 Configuration options
Configuration
1 x 8-channel without value status 1 x 8-channel with value status 8 x 1-channel without value status
8 x 1-channel with value status
1 x 8-channel with value status for moduleinternal shared input with up to 4 submodules 1 x 8-channel with value status for scaling of measured values
Short designation/ module name in the
GSD file
AI 8xU/I HF AI 8xU/I HF QI AI 8xU/I HF S AI 8xU/I HF S QI AI 8xU/I HF MSI
AI 8xU/I HF Scale
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7 (TIA Portal)
as of V13, SP1 and HSP 0166
X
GSD file in STEP 7 (TIA Portal)
V12 or higher or STEP 7 V5.5 SP3 or
higher
X
X
X
X
X
(PROFINET IO only)
(PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
V14 or higher with HSP 0186
(PROFINET IO only)
X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names: AI 8xU/I HF QI AI 8xU/I HF S QI AI 8xU/I HF MSI AI 8xU/I HF Scale An additional bit is assigned to each channel for the value status. The value status bit indicates if the read in digital value is valid. (0 = value is incorrect).
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
32
Manual, 09/2016, A5E36649087-AB
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 8-channel AI 8xU/I HF and AI 8xU/I HF QI
The figure below shows the address space assignment with the configuration as 1 x 8channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "IB x" stands, for example, for the module start address input byte x.
Figure 4-2 Address space for configuration as 1 x 8-channel AI 8xU/I HF with value status
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
33
Parameters/address space 4.4 Address space
Address space for configuration as 8 x 1-channel AI 8xU/I HF S and AI 8xU/I HF S QI
For the configuration as a 8 x 1-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable submodules is dependent on the interface module used. Observe the information in the manual for the particular interface module. Contrary to the 1 x 8-channel module configuration, each of the eight submodules has a freely assignable start address.
Figure 4-3 Address space for configuration as 8 x 1-channel AI 8xU/I HF S QI with value status
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
34
Manual, 09/2016, A5E36649087-AB
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 8-channel AI 8xU/I HF MSI
The channels 0 to 7 of the module are copied in up to four submodules with configuration 1 x 8-channel module (Module-internal shared input, MSI). Channels 0 to 7 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels.
The number of IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI)
The meaning of the value status depends on the submodule on which it occurs.
For the 1st submodule (= basic submodule), the value status 0 indicates that the value is incorrect.
For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
35
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodules 1 and 2.
Figure 4-4 Address space for configuration as 1 x 8-channel AI 8xU/I HF MSI with value status
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
36
Manual, 09/2016, A5E36649087-AB
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodules 3 and 4.
Figure 4-5 Address space for configuration as 1 x 8-channel AI 8xU/I HF MSI with value status
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
37
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 8-channel AI 8xU/I HF and Scale
The figure below shows the address space assignment for configuration as a 1 x 8-channel module for scaling (Scale) of the measured values. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "IB x" stands, for example, for the module start address input byte x.
Reference
Figure 4-6 Address space for configuration as 1 x 8-channel AI 8xU/I HF MSI Scale with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
38
Manual, 09/2016, A5E36649087-AB
Interrupts/diagnostics alarms
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of AI 8xU/I HF.
5
Figure 5-1 LED displays of the module AI 8xU/I HF
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
39
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in section Diagnostic alarms (Page 43).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED RUN ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured.
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules. · Verify that the U connectors are inserted. · Check whether too many modules are inserted. ---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
PWR LED
Table 5- 2 PWR status display
LED PWR Off On
Meaning Supply voltage L+ to module too low or missing
Supply voltage L+ is present and OK.
Remedy Check supply voltage L+.
---
CHx LED
Table 5- 3 CHx status display
LED CHx Off On On
Meaning Channel disabled
Channel configured and OK.
Channel is configured (channel error pending). Diagnostic alarm: e.g. wire break
Remedy ---
---
Check the wiring. Disable diagnostics.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
40
Manual, 09/2016, A5E36649087-AB
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
Analog input module AI 8xU/I HF supports the following diagnostic and hardware interrupts.
You can find detailed information on the event in the error organization block with the RALRM instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: Missing supply voltage L+ Wire break Overflow Underflow Parameter assignment error
Hardware interrupt
The module generates a hardware interrupt at the following events:
Low limit violated 1
High limit violated 1
Low limit violated 2
Violation of high limit 2
The module channel that triggered the hardware interrupt is entered in the start information of the organization block. The following figure shows the assignment of the local data double word 8 by the start information of the hardware interrupt organization block.
Figure 5-2 OB start information
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
41
Interrupts/diagnostics alarms 5.2 Interrupts
Reaction when reaching limits 1 and 2 at the same time
If the two high limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for high limit 1 first. The configured value for high limit 2 is irrelevant. After processing the hardware interrupt for high limit 1, the module triggers the hardware interrupt for high limit 2.
The module has the same reaction when the low limits are reached at the same time. If the two low limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for low limit 1 first. After processing the hardware interrupt for low limit 1, the module triggers the hardware interrupt for low limit 2.
Structure of the additional interrupt information
Table 5- 4 Structure of USI = W#16#0001
Data block name
Contents
USI
W#16#0001
(User Structure Identifier)
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#n
It follows the error event that triggered the hardware interrupt.
Event
B#16#03
B#16#04
B#16#05
B#16#06
Remark
Additional interrupt info for hardware interrupts of the I/O module
Bytes 2
Number of the event-triggering channel (n = 1 number of module channels -1)
Low limit violated 1
1
High limit violated 1
Low limit violated 2
Violation of high limit 2
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
42
Manual, 09/2016, A5E36649087-AB
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes for each diagnostics event on the module. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 5 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Wire break
Error code 6H
Overflow
7H
Underflow
8H
Parameter assignment 10H error
Load voltage missing
11H
Meaning Impedance of sensor circuit too high
Wire break between the module and sensor Channel not connected (open)
Measuring range violated Measuring range violated · The module cannot evaluate pa-
rameters for the channel · Incorrect parameter assignment. Supply voltage L+ of the module is missing
Remedy Use a different encoder type or modify the wiring, for example, using cables with larger cross-section Connect the cable
· Disable diagnostics · Connect the channel Check the measuring range Check the measuring range Correct the parameter assignment
Connect supply voltage L+ to module/channel
Diagnostics alarms with value status (QI)
If you configure the module with value status (QI), the module always checks all errors even if the respective diagnostics is not enabled. But the module cancels the inspection as soon as it detects the first error, regardless if the respective diagnostics has been enabled or not. The result may be that enabled diagnostics may not be displayed.
Example: You have enabled "Underflow" diagnostics, but the module detects the previous "Wire break" diagnostics and aborts after this error message. The "Underflow" diagnostics is not detected.
Recommendation: To ensure that all errors are subjected to the diagnostics, select all check boxes under "Diagnostics".
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
43
Technical specifications
6
Technical specifications of the AI 8xU/I HF
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7531-7NF00-0AB0
AI 8xU/I HF FS01 V1.1.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Measuring range scalable
No
Measured values scalable
Yes
Measuring range adjustment
Yes
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V14 / -
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
Oversampling
No
MSI
Yes
CiR Configuration in RUN
Configuration in RUN possible Calibration in RUN possible Supply voltage Rated value (DC) Valid range, low limit (DC) Valid range, high limit (DC) Reverse polarity protection
Yes Yes
24 V 20.4 V 28.8 V Yes
Input current
Current consumption, max.
50 mA; with 24 V DC supply
Power Power consumption from the backplane bus Power loss
0.85 W
Power loss, typ.
1.9 W
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
44
Manual, 09/2016, A5E36649087-AB
Technical specifications
Analog inputs Number of analog inputs · For current measurement
· For voltage measurement
Permissible input voltage for voltage input (destruction limit), max. Permissible input current for current input (destruction limit), max. Input ranges (rated values), voltages 1 V to 5 V Input resistance (1 V to 5 V) -10 V to +10 V Input resistance (-10 V to +10 V) -2.5 to +2.5 V Input resistance (-2.5 to +2.5 V) -5 V to +5 V Input resistance (-5 V to +5 V) Input ranges (rated values), currents 0 mA to 20 mA Input resistance (0 mA to 20 mA)
-20 mA to +20 mA Input resistance (-20 mA to +20 mA)
4 mA to 20 mA Input resistance (4 mA to 20 mA)
Cable length shielded, max. Analog value generation for the inputs Integration and conversion time/resolution per channel Resolution with overrange (bit including sign), max. Configurable integration time Integration time (ms)
Basic conversion time, including integration time (ms) Interference voltage suppression for interference frequency f1 in Hz Basic execution time of the module (all channels enabled)
8 8 8 28.8 V
40 mA
6ES7531-7NF00-0AB0
Yes 100 k Yes 100 k Yes 100 k Yes 100 k
Yes 25 ; plus approx. 42 ohm for overvoltage protection by PTC Yes 25 ; plus approx. 42 ohm for overvoltage protection by PTC Yes 25 ; plus approx. 42 ohm for overvoltage protection by PTC
800 m
16 bit
Yes Fast mode: 2.5 / 16.67 / 20 / 100 ms; standard mode: 7.5 / 50 / 60 / 300 ms Fast mode: 4 / 18 / 22 / 102 ms; standard mode: 9 / 52 / 62 / 302 ms 400 / 60 / 50 / 10 Hz
Corresponds to the channel with the highest basic conversion time
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
45
Technical specifications
6ES7531-7NF00-0AB0
Smoothing of the measured values
Configurable
Yes
Level: None
Yes
Level: Weak
Yes
Level: Medium
Yes
Level: Strong
Yes
Encoders
Connection of the signal encoders
For voltage measurement
Yes
for current measurement as 2-wire transducer
Yes; with external transmitter supply
for current measurement as 4-wire transducer
Yes
Errors/accuracies
Linearity error (in relation to input range), (+/-)
0.02%
Temperature error (in relation to input range), (+/-) 0.005%/K
Crosstalk between the inputs, max.
-80 dB
Repeat accuracy in settled state at 25 °C (in rela- 0.02% tion to input range), (+/-)
Operational limit in overall temperature range
Voltage in relation to input range, (+/-)
0.1%
Current in relation to input range, (+/-)
0.1%
Basic error limit (operational limit at 25 °C)
Voltage in relation to input range, (+/-)
0.05%
Current in relation to input range, (+/-)
0.05%
Interference voltage suppression for f = n x (f1 +/1 %), f1 = interference frequency
Series-mode interference (peak of the interference 80 dB; in Standard mode, 40 dB in Fast mode < rated value of the input range), min.
Common mode voltage, max.
60 V DC / 30 V AC
Common mode interference, min.
80 dB
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
Yes
Interrupts
Diagnostic interrupt
Yes
Limit interrupt
Yes; two high limits and two low limits each
Diagnostics alarms
Monitoring of supply voltage
Yes
Wire break
Yes; only for 1 to 5 V and 4 to 20 mA
Overflow/underflow
Yes
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
46
Manual, 09/2016, A5E36649087-AB
Technical specifications
Diagnostics indicator LED RUN LED ERROR LED Monitoring of supply voltage (PWR LED) Channel status display For channel diagnostics For module diagnostics Electrical isolation Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Between the channels and power supply of the electronics Permitted potential difference Between different circuits
Isolation Isolation tested with
Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed mode Prioritized startup Dimensions Width Height Depth Weights Weight, approx.
6ES7531-7NF00-0AB0
Yes; green LED Yes; red LED Yes; green LED Yes; green LED Yes; red LED Yes; red LED
Yes 1 Yes Yes
60 V DC / 30 V AC; Isolation measured for 120 V AC basic isolation: Between the channels and supply voltage L+, between the channels and the backplane bus, between the channels
2000 V DC between the channels and the supply voltage L+, 2000 V DC between the channels and the backplane bus, 2000 V DC between the channels, 707 V DC (type test) between the supply voltage L+ and the backplane bus
0 °C 60 °C 0 °C 40 °C
Yes
35 mm 147 mm 129 mm
280 g
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
47
Dimensional drawing
A
This appendix contains the dimensional drawing of the module installed on a mounting rail and with a shield bracket. Always adhere to the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of the AI 8xU/I HF module
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
48
Manual, 09/2016, A5E36649087-AB
Dimensional drawing
Figure A-2 Dimension drawing of the AI 8xU/I HF module, side view with open front cover
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
49
Parameter data records
B
B.1
Parameter assignment
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Current limit for wire break Wire break
Hardware interrupt limits
Dependent parameters
Only for measuring type current with measuring range 4 mA to 20 mA.
Only for measuring type resistance with measuring range 1V to 5 V and current with measuring range 4 mA to 20 mA.
Only if hardware interrupts are enabled.
Parameter assignment in the user program
You have the option to assign module parameters in RUN (e.g., the voltage or current values of selected channels can be edited in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 0 to 7. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart. The parameters are only checked for plausibility by the module after the transfer to the module.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter. The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
50
Manual, 09/2016, A5E36649087-AB
Parameter data records B.1 Parameter assignment
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You obtain the diagnostics data records 0 and 1 with the read back parameter data records 0 and 1. You can find additional information in the Interrupts section of the manual for the PROFIBUS DP interface module on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Assignment of data record and channel
For the configuration as a 1 x 8-channel module, the parameters are located in data records 0 to 7 and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 ... Data record 6 for channel 6 Data record 7 for channel 7 For configuration 8 x 1-channel, the module has 8 submodules with one channel each. The parameters for the channel are available in data record 0 and are assigned as follows: Data record 0 for channel 0 (submodule 1) Data record 0 for channel 1 (submodule 2) ... Data record 0 for channel 6 (submodule 7) Data record 0 for channel 7 (submodule 8) Address the respective submodule for data record transfer.
Dependency of the parameter data records
The structure of the parameter data record differs depending on the configuration: 28 bytes data length for configuration without scaling of the measured values, see section
Structure of the parameter data records without scaling of measured values (Page 52). 40 bytes data length for configuration with scaling of the measured values, see section
Structure of the parameter data records with scaling of measured values (Page 55).
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
51
Parameter data records B.2 Structure of the parameter data records without scaling of measured values
B.2
Structure of the parameter data records without scaling of measured
values
Structure of a data record without scaling of the measured values
The figure below shows the structure of data record 0 for channel 0 as an example. The structure is identical for channels 1 to 7. The values in byte 0 and byte 1 are fixed and may not be changed.
Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Byte 0 to 6 without scaling of measured values
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
52
Manual, 09/2016, A5E36649087-AB
Parameter data records B.2 Structure of the parameter data records without scaling of measured values
Figure B-2 Structure of data record 0: Byte 7 to 11 without scaling of measured values
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
53
Parameter data records B.2 Structure of the parameter data records without scaling of measured values
See also
Figure B-3 Structure of data record 0: Byte 12 to 27 without scaling of measured values
Codes for measurement types/measuring ranges and limits for hardware interrupts (Page 58)
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
54
Manual, 09/2016, A5E36649087-AB
B.3
Parameter data records B.3 Structure of the parameter data records with scaling of measured values
Structure of the parameter data records with scaling of measured values
Structure of a data record with scaling of the measured values The example in the figure below shows the structure of data record 0 for channel 0 for scaling of measured values. The structure is identical for channels 1 to 7. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-4 Structure of data record 0: Byte 0 to 6 for scaling of measured values
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
55
Parameter data records B.3 Structure of the parameter data records with scaling of measured values
Figure B-5 Structure of data record 0: Byte 7 to 11 for scaling of measured values
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
56
Manual, 09/2016, A5E36649087-AB
Parameter data records B.3 Structure of the parameter data records with scaling of measured values
See also
Figure B-6 Structure of data record 0: Byte 12 to 39 for scaling of measured values
Codes for measurement types/measuring ranges and limits for hardware interrupts (Page 58)
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
57
Parameter data records B.4 Codes for measurement types/measuring ranges and limits for hardware interrupts
B.4
Codes for measurement types/measuring ranges and limits for
hardware interrupts
Codes for measuring types
The following table lists all measuring types of the analog input module along with their codes. Enter these codes in byte 2 of the respective data record.
Table B- 2 Code for the measuring type
Measurement type Deactivated Voltage Current 4-wire transducer Current 2-wire transducer
Code 0000 0000 0000 0001 0000 0010 0000 0011
Codes for measuring ranges
The following table lists all measuring ranges of the analog input module along with their codes. Enter these codes in byte 3 of the respective data record.
Table B- 3 Code for the measuring range
Measuring range Voltage ±2.5 V ±5 V ±10 V 1 V to 5 V Current 4-wire transducer 0 mA to 20 mA 4 mA to 20 mA ±20 mA Current 2-wire transducer 4 mA to 20 mA
Code
0000 0111 0000 1000 0000 1001 0000 1010
0000 0010 0000 0011 0000 0100
0000 0011
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
58
Manual, 09/2016, A5E36649087-AB
Parameter data records B.4 Codes for measurement types/measuring ranges and limits for hardware interrupts
Hardware interrupt limits
The following tables list the valid hardware interrupt limits. The limit values depend on the selected measuring type and range. The values that you can set for hardware interrupts (high/low limit) must not exceed the respective rated measuring range.
Enter the limits in bytes 12 to 19 or 12 to 27 of the corresponding data record.
Table B- 4 Limits of hardware interrupts for voltage and current
Voltage
Current
±2.5 V, ±5 V, ±10 V 1 V to 5 V ±20 mA
32510 -32511
32510 -4863
32510 -32511
4 mA to 20 mA, 0 mA to 20 mA
32510
-4863
High limit Low limit
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
59
Representation of analog values
C
Introduction
This appendix shows the analog values for all measuring ranges supported by the AI 8xU/I HF analog module.
Measured value resolution
Each analog value is written left aligned to the tags. The bits marked with "x" are set to "0".
Table C- 1 Resolution of the analog values
Resolution in bits including sign
16
Values
Decimal 1
Hexadecimal 1H
Analog value
High byte
Low byte
Sign 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
60
Manual, 09/2016, A5E36649087-AB
Representation of analog values C.1 Representation of input ranges
C.1
Representation of input ranges
The tables below set out the digitized representation of the input ranges separately for bipolar and unipolar input ranges. The resolution is 16 bits.
Table C- 2 Bipolar input ranges
Units
Measured value in %
32767 32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 <-117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0000000001 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Rated range 1 1 1 1 1 1 1111111111 1 0 0 1 0 1 0000000000 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Table C- 3 Unipolar input ranges
Units
Measured value in %
32767 32511 27649 27648 1 0 -1 -4864 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -17.593 <-17.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 Rated range 0 0 0 0 0 0 0000000000 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Undershoot 1 1 1 0 1 1 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
61
Representation of analog values C.2 Representation of analog values in voltage measuring ranges
C.2
Representation of analog values in voltage measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible voltage measuring ranges.
Table C- 4 Voltage measuring ranges ±10 V, ±5 V and ±2.5 V
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±10 V
±5 V
>11.759 V >5.879 V
11.759 V 5.879 V
±2.5 V >2.939 V 2.939 V
10 V 7.5 V 361.7 µV 0 V
5 V 3.75 V 180.8 µV 0 V
2.5 V 1.875 V 90.4 µV 0 V
-7.5 V -10 V
-3.75 V -5 V
- 1.875 V - 2.5 V
-11.759 V -5.879 V
< -
< -5.879 V
11.759 V
- 2.939 V <-2.939 V
Range Overflow Overshoot range Rated range
Undershoot range Underflow
Table C- 5 Voltage measuring range 1 to 5 V
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Voltage measuring range 1 to 5 V >5.704 V 5.704 V
5 V 4 V 1 V + 144.7 µV 1 V
0.296 V < 0.296 V
Range Overflow Overshoot range Rated range
Undershoot range Underflow
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
62
Manual, 09/2016, A5E36649087-AB
C.3
Representation of analog values C.3 Representation of analog values in the current measuring ranges
Representation of analog values in the current measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible current measuring ranges.
Table C- 6 Current measuring range ±20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Current measuring range ±20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-15 mA -20 mA
-23.52 mA < -23.52 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
Table C- 7 Current measuring ranges 0 to 20 mA and 4 to 20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Current measuring range
0 to 20 mA
4 to 20 mA
>23.52 mA
>22.81 mA
23.52 mA
22.81 mA
20 mA 15 mA 723.4 nA 0 mA
20 mA 16 mA 4 mA + 578.7 nA 4 mA
-3.52 mA <- 3.52 mA
1.185 mA < 1.185 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
Manual, 09/2016, A5E36649087-AB
63
Representation of analog values C.4 Measured values for wire break diagnostic
C.4
Measured values for wire break diagnostic
Measured values on diagnostic event "wire break", dependent on diagnostics enables
Error events initiate a diagnostics entry and trigger a diagnostics interrupt if configured accordingly.
Table C- 8 Measured values for wire break diagnostic
Format S7
Parameter assignment
· "Wire break" diagnostics enabled · "Overflow/Underflow" diagnostics
enabled or disabled ("Wire break" diagnostics takes priority over "Overflow/Underflow" diagnostics)
· "Wire break" diagnostics disabled · "Overflow/Underflow" diagnostics
enabled
· "Wire break" diagnostics disabled · "Overflow/Underflow" diagnostics
disabled
Measured values
32767
7FFFH
-32767 8000 H -32767 8000 H
Explanation "Wire break" or "Open circuit" diagnostic alarm
· Measured value after leaving the undershoot range
· Diagnostic alarm "Low limit violated" Measured value after leaving the undershoot range
Analog Input Module AI 8xU/I HF (6ES7531-7NF00-0AB0)
64
Manual, 09/2016, A5E36649087-AB
SIMATIC
S7-1500/ET 200MP Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _Rvae_lpu_rees_se_n_ta_tio_n _of_a_na_lo_g ____C__
12/2016
A5E03484886-AE
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03484886-AE 12/2016 Subject to change
Copyright © Siemens AG 2013 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) automation system.
Functions that relate in general to the systems are described in these system manuals.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following changes: Updated technical specifications "common mode interference"
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system.
Please also observe notes marked as follows:
Note
A note contains important information regarding the product described in the documentation or its handling, or draws special attention to a section of the documentation.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
4
Manual, 12/2016, A5E03484886-AE
Preface
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109739516).
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
2.2 2.2.1
Functions................................................................................................................................ 13 Oversampling for inputs ......................................................................................................... 13
3 Wiring ................................................................................................................................................... 15
4 Parameters/address space ................................................................................................................... 19
4.1
Measuring types and ranges.................................................................................................. 19
4.2
Parameters............................................................................................................................. 20
4.3
Declaration of parameters...................................................................................................... 22
4.4
Address space ....................................................................................................................... 24
5 Interrupts/diagnostics alarms................................................................................................................. 31
5.1
Status and error displays ....................................................................................................... 31
5.2
Interrupts ................................................................................................................................ 33
5.3
Diagnostics alarms................................................................................................................. 35
6 Technical specifications ........................................................................................................................ 36
A Dimensional drawing............................................................................................................................. 42
B Parameter data records ........................................................................................................................ 44
B.1
Parameter assignment and structure of the parameter data records .................................... 44
C Representation of analog values ........................................................................................................... 49
C.1
Representation of input ranges.............................................................................................. 50
C.2
Representation of analog values in voltage measuring ranges ............................................. 51
C.3
Representation of analog values in the current measuring ranges ....................................... 52
C.4
Measured values for wire break diagnostic ........................................................................... 53
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
6
Manual, 12/2016, A5E03484886-AE
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
8
Manual, 12/2016, A5E03484886-AE
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
10
Manual, 12/2016, A5E03484886-AE
Product overview
2.1
Properties
Article number
6ES7531-7NF10-0AB0
View of the module
2
Figure 2-1 View of the AI 8xU/I HS module
Properties
The module has the following technical properties: 8 analog inputs Voltage or current measuring type can be set per channel Resolution 16 bits including sign Configurable diagnostics (per channel) Hardware interrupt on limit violation can be set per channel (two low and two high limits
per channel) High-speed update of measured values
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
11
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Isochronous mode Calibration in runtime Module internal Shared Input (MSI)
Configurable submodules / submodules for Shared Device Oversampling
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V2.0.0 or higher
V2.0.0 or higher
V2.1.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher,
or STEP 7 V5.5 SP3 or higher
V12 or higher
--- / X
V12 or higher
X
V12 or higher
X
V12 or higher
---
V12 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V14 or higher and HSP 0186
---
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file. The oversampling function requires isochronous mode and can therefore only be configured with STEP 7 (TIA Portal).
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Shield bracket Shield terminal Power supply element Labeling strips U connector Universal front door
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
12
Manual, 12/2016, A5E03484886-AE
2.2
Functions
Product overview 2.2 Functions
2.2.1
Oversampling for inputs
Function
Oversampling is defined as the transfer of data in constant bus cycle segments (sub-cycles), whereby n sub-cycles correspond to one PROFINET bus cycle. The configured number n of sub-cycles corresponds to one data cycle. Each sub-cycle reads in a measured value.
Oversampling is useful whenever you require acquisition of data with high time resolution but without using an extremely short PROFINET bus cycle and thus fast CPU cycles.
With oversampling, a PROFINET bus cycle is divided into constant bus sub-cycles:
One 16-bit value is read in per channel in each sub-cycle.
The shortest possible sub-cycle is 62.5 s.
Sub-cycles are possible in increments of 2 to 16. The following applies here: Isochronous data cycle / number of sub-cycles permitted sub-cycle duration (62.5 s).
Typical areas of applications
Quality-monitoring measurements, for example when recording pressure trends during the blowing process of PET bottle production.
Requirements
Firmware version V2.1.0 or higher of the module. Isochronous mode has to be set.
Configuration
You configure the oversampling function by means of the sampling rate parameter.
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
13
Product overview 2.2 Functions
Chronological sequence
The recorded input data of a data cycle (send clock) is copied into the interface module in the next data cycle and is available for the module in the data cycle after that. The figure below shows the chronological sequence for oversampling with 10 sub-cycles.
n
Recorded value from Cycle n
Figure 2-2 Chronological sequence with oversampling
Sampling interval
The duration of a sub-cycle corresponds to the sampling time. The bus cycle time TDP (send clock for isochronous mode) is specified in the configuration software. The actual sampling interval of the module results from this time divided by the set sampling rate (2-16).
Figure 2-3 Example for the calculation of the sampling interval
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
14
Manual, 12/2016, A5E03484886-AE
Wiring
3
This section contains the block diagram of the module and various wiring options. You can find information on wiring the front connector, establishing a cable shield, etc in the Wiring section of the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792)hotspot text system manual.
Note · You may use and combine the different wiring options for all channels. · Do not insert the potential jumpers included with the front connector!
Abbreviations used
Meaning of the abbreviations used in the following figures:
Un+/UnIn+/InUVn L+ M MANA CHx PWR
Voltage input channel n (voltage only) Current input channel n (current only) Supply voltage at channel n for 2-wire transmitters (2WT) Supply voltage connection Ground connection Reference potential of the analog circuit Channel or display of the channel status Display for the supply voltage
Pin assignment for the power supply element
The power supply element is plugged onto the front connector for powering the analog module. Wire the supply voltage to terminals 41 (L+) and 44 (M). Use terminals 42 (L+) and 43 (M) to loop the potential to the next module.
Figure 3-1 Power supply element wiring
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
15
Wiring
Block diagram and pin assignment for voltage measurement
The example in the figure below shows the pin assignment for a voltage measurement.
Analog-to-Digital Converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Figure 3-2 Block diagram and pin assignment for voltage measurement
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
16
Manual, 12/2016, A5E03484886-AE
Wiring
Block diagram and pin assignment for 4-wire transmitter for current measurement
The example in the following figure shows the pin assignment for current measurement with 4-wire transmitters.
Wiring 4-wire transmitter Analog-to-Digital Converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-3 Block diagram and pin assignment for 4-wire transmitter for current measurement
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
17
Wiring
Block diagram and pin assignment for 2-wire transmitter for current measurement
The example in the following figure shows the pin assignment for current measurement with 2-wire transmitters.
Wiring 2-wire transmitter Analog-to-Digital Converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-4 Block diagram and pin assignment for 2-wire transmitter for current measurement
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
18
Manual, 12/2016, A5E03484886-AE
Parameters/address space
4
4.1
Measuring types and ranges
Introduction
The module is set to voltage measuring type with measuring range ±10 V by default. You need to reassign the module parameters with STEP 7 if you want to use a different measuring type or range.
The following table shows the measuring types and the respective measuring range.
Measuring type Voltage
Current 2WMT (2-wire transmitter) Current 4WMT (4-wire transmitter)
Deactivated
Measuring range 1 V to 5 V ±5 V ±10 V 4 mA to 20 mA
4 mA to 20 mA 0 mA to 20 mA ±20 mA -
The tables of the input ranges, overflow, undershoot range, etc. are available in appendix Representation of analog values (Page 49).
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
19
Parameters/address space 4.2 Parameters
4.2
Parameters
Parameters of the AI 8xU/I HS
The AI 8xU/I HS is usually already integrated in the hardware catalog of STEP 7 (TIA Portal). In this case, STEP 7 (TIA Portal) checks the configured properties for plausibility during configuration.
However, you can also assign parameters to the module by means of a GSD file and the configuration software of any provider. The module does not check the validity of the configured properties until after the configuration has been loaded.
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
When assigning parameters in the user program, use the WRREC instruction to transfer the parameters to the module by means of data records; refer to the section Parameter assignment and structure of the parameter data records (Page 44).
The following parameter settings are possible:
Table 4- 1 Configurable parameters and their defaults
Parameters
Range of values Default setting
AI configuration Sampling rate (for the oversampling function) Diagnostics · Missing supply volt-
age L+
· Overflow
· Underflow
· Wire break
1...16 val-
1
ues/cycle
Yes/No
No
Yes/No
No
Yes/No
No
Yes/No
No
(Voltage: 1 V to 5 V
Current: 4 mA to 20 mA)
Parameter assignment in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7 (TIA Portal) as of V12 or GSD file PROFINET IO
GSD file PROFIBUS DP
No
Module
---
(not GSD file)
Yes
Channel 1)
Yes
Channel
Yes
Channel
Yes
Channel
Module 3)
Module 3) Module 3) Module 3)
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
20
Manual, 12/2016, A5E03484886-AE
Parameters/address space 4.2 Parameters
Parameters
· Current limit for wire break diagnostics 2)
Measuring · Measurement type · Measuring range
· Smoothing: Hardware interrupt · Hardware interrupt
high limit 1 · Hardware interrupt
low limit 1 · Hardware interrupt
high limit 2 · Hardware interrupt
low limit 2
Range of values
1.185 mA or 3.6 mA
Default setting
1.185 mA
Parameter assignment in RUN
Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7 (TIA Portal) as of V12 or GSD file PROFINET IO
Channel
GSD file PROFIBUS DP
--- 4)
See section
Voltage Yes
Measuring types
and ranges
±10 V
Yes
(Page 19)
None/low/medium None
Yes
/high
Yes/No
No
Yes
Yes/No
No
Yes
Yes/No
No
Yes
Yes/No
No
Yes
Channel Channel Channel
Channel Channel Channel Channel
Channel Channel Channel
--- 4) --- 4) --- 4) --- 4)
1) If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault.
You can prevent this message burst by assigning the diagnostics function to one channel only.
2) When "Wire break" diagnostics is disabled, the current limit of 1.185 mA applies to the value status. For measured values below 1.185 mA, the value status is always: 0 = fault.
3) You can set the effective range of the diagnostics for each channel in the user program with data records 0 to 7.
4) You can set the current limit for wire break diagnostics, the "Hardware interrupt" parameter and the hardware interrupt limits in the user program with data records 0 to 7.
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
21
Parameters/address space 4.3 Declaration of parameters
4.3
Declaration of parameters
Sampling rate
Specifies the number of sub-cycles per isochronous data cycle for the for the oversampling function.
Missing supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Overflow
Enabling of the diagnostics if the measured value violates the high limit.
Underflow
Enabling of the diagnostics if the measured value violates the low limit.
Wire break
Enabling of the diagnostics if the module has no current flow or the current is too weak for the measurement at the corresponding configured input or the applied voltage is too low.
Current limit for wire break diagnostics
Threshold for reporting wire breaks. The value can be set to 1.185 mA or 3.6 mA, depending on the sensor used.
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
22
Manual, 12/2016, A5E03484886-AE
Smoothing
Parameters/address space 4.3 Declaration of parameters
The individual measured values are smoothed using filtering. The smoothing can be set in 4 levels. Smoothing time = number of module cycles (k) x cycle time of the module. The following figure shows after how many module cycles the smoothed analog value is almost 100%, depending on the set smoothing. Is valid for each signal change at the analog input.
None (k = 1) Weak (k = 4) Medium (k = 16) Strong (k = 32)
Figure 4-1 Smoothing with AI 8xU/I HS
Hardware interrupt 1 or 2
Enable a hardware interrupt at violation of high limit 1 or 2 or low limit 1 or 2.
Low limit 1 or 2
Specifies the low limit threshold that triggers hardware interrupt 1 or 2.
High limit 1 or 2
Specifies the high limit threshold that triggers hardware interrupt 1 or 2.
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
23
Parameters/address space 4.4 Address space
4.4
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
Configuration options of AI 8xU/I HS
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 2 Configuration options
Configuration
1 x 8-channel without value status 1 x 8-channel with value status 8 x 1-channel without value status
8 x 1-channel with value status
1 x 8-channel with value status for module-internal shared input with up to 4 submodules 1 x 8-channel without value status for oversampling
Short designation/ module name in the
GSD file
AI 8xU/I HS AI 8xU/I HS QI AI 8xU/I HS S
AI 8xU/I HS S QI
AI 8xU/I HS MSI
---
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog STEP 7 (TIA Portal)
V12 or higher
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3
or higher
X
V12 or higher
X
V13 Update 3 or higher (PROFINET IO only)
X (PROFINET IO only)
V13 Update 3 or higher (PROFINET IO only)
X (PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V14 or higher with HSP 0186
---
(PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names: AI 8xU/I HS QI AI 8xU/I HS S QI AI 8xU/I HS MSI An additional bit is assigned to each channel for the value status. The value status bit indicates if the read in digital value is valid. (0 = value is incorrect).
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
24
Manual, 12/2016, A5E03484886-AE
Parameters/address space 4.4 Address space
Address space of the AI 8xU/I HS and AQ 8xU/I HS QI
The following figure shows the address space allocation for the configuration as 8-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "IB x" stands, for example, for the module start address input byte x.
Figure 4-2 Address space for configuration as 1 x 8-channel AI 8xU/I HS with value status
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
25
Parameters/address space 4.4 Address space
Address space for configuration as 8 x 1-channel AI 8xU/I HS QI and AI 8xU/I HS S QI
For the configuration as a 8 x 1-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable submodules is dependent on the interface module used. Observe the information in the manual for the particular interface module. Contrary to the 1 x 8-channel module configuration, each of the eight submodules has a freely assignable start address.
Figure 4-3 Address space for configuration as 8 x 1-channel AI 8xU/I HS S QI with value status
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
26
Manual, 12/2016, A5E03484886-AE
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 8-channel AI 8xU/I HS MSI
The channels 0 to 7 of the module are copied in up to four submodules with configuration 1 x 8-channel module (Module-internal shared input, MSI). Channels 0 to 7 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels.
The number of usable submodules is dependent on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI)
The meaning of the value status depends on the submodule on which it occurs.
For the 1st submodule (= basic submodule), the value status 0 indicates that the value is incorrect.
For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
27
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodules 1 and 2.
Figure 4-4 Address space for configuration as 1 x 8-channel AI 8xU/I HS MSI with value status
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
28
Manual, 12/2016, A5E03484886-AE
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodules 3 and 4.
Reference
Figure 4-5 Address space for configuration as 1 x 8-channel AI 8xU/I HS MSI with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
29
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 8-channel AI 8xU/I HS for oversampling
The following figure shows the address space assignment with the configuration as 8-channel module for the oversampling function. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. Writing always starts from IB x. If fewer than 16 sub-cycles are set, the addresses that are then unused are filled with 7FFFH. "IB x" stands, for example, for the module start address input byte x.
Figure 4-6 Address space for configuration as 1 x 8-channel AI 8xU/I HS for oversampling
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
30
Manual, 12/2016, A5E03484886-AE
Interrupts/diagnostics alarms
5.1
Status and error displays
LED displays
The following figure shows the LED displays (status and error displays) of AI 8xU/I HS.
5
Figure 5-1 LED displays of the module AI 8xU/I HS
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
31
Manual, 12/2016, A5E03484886-AE
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in section Diagnostic alarms.
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
Meaning
Remedy
RUN Off
ERROR
Voltage missing or too low at backplane bus. · Switch on the CPU and/or the system power
Off
supply modules.
· Verify that the U connectors are inserted.
· Check to see if too many modules are inserted.
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured.
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective.
---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
PWR LED
Table 5- 2 PWR status display
LED PWR Off On
Meaning Supply voltage L+ to module too low or missing
Supply voltage L+ is present and OK.
Remedy Check supply voltage L+.
---
CHx LED
Table 5- 3 CHx status display
LED CHx Off On On
Meaning Channel disabled
Remedy ---
Channel configured and OK.
---
Channel is configured (channel error pending). Check the wiring.
Diagnostic alarm: e.g. wire break
Disable diagnostics.
See also
Diagnostics alarms (Page 35)
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
32
Manual, 12/2016, A5E03484886-AE
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
Analog input module AI 8xU/I HS supports the following diagnostic and hardware interrupts.
You can find detailed information on the event in the error organization block with the RALRM instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: Missing supply voltage L+ Wire break Overflow Underflow Parameter assignment error
Hardware interrupt
The module generates a hardware interrupt at the following events:
Low limit violated 1
High limit violated 1
Low limit violated 2
Violation of high limit 2
The module channel that triggered the hardware interrupt is entered in the start information of the organization block. The diagram below shows the assignment to the bits of double word 8 in local data.
Figure 5-2 OB start information
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
33
Interrupts/diagnostics alarms 5.2 Interrupts
Reaction when reaching limits 1 and 2 at the same time
If the two high limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for high limit 1 first. The configured value for high limit 2 is irrelevant. After processing the hardware interrupt for high limit 1, the module triggers the hardware interrupt for high limit 2.
The module has the same reaction when the low limits are reached at the same time. If the two low limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for low limit 1 first. After processing the hardware interrupt for low limit 1, the module triggers the hardware interrupt for low limit 2.
Structure of the additional interrupt information
Table 5- 4 Structure of USI = W#16#0001
Data block name
Contents
USI
W#16#0001
(User Structure Identifier)
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#n
It follows the error event that triggered the hardware interrupt.
Event
B#16#03
B#16#04
B#16#05
B#16#06
Remark
Additional interrupt info for hardware interrupts of the I/O module
Bytes 2
Number of the event-triggering channel (n = 1 number of module channels -1)
Low limit violated 1
1
High limit violated 1
Low limit violated 2
Violation of high limit 2
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
34
Manual, 12/2016, A5E03484886-AE
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes on the module for each diagnostics event. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 5 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Wire break
Error code 6H
Overflow
7H
Underflow
8H
Parameter assignment 10H error
Load voltage missing
11H
Meaning Impedance of sensor circuit too high
Wire break between the module and sensor Channel not connected (open)
Measuring range violated Measuring range violated · The module cannot evaluate pa-
rameters for the channel · Incorrect parameter assignment. Supply voltage L+ of the module is missing
Remedy Use a different encoder type or modify the wiring, for example, using cables with larger cross-section Connect the cable
· Disable diagnostics · Connect the channel Check the measuring range Check the measuring range Correct the parameter assignment
Connect supply voltage L+ to module/channel
Diagnostics alarms with value status (QI)
If you configure the module with value status (QI), the module always checks all errors even if the respective diagnostics is not enabled. But the module cancels the inspection as soon as it detects the first error, regardless if the respective diagnostics has been enabled or not. The result may be that enabled diagnostics may not be displayed.
Example: You have enabled "Underflow" diagnostics, but the module detects the "Wire break" diagnostics first and aborts after this error message. The "Underflow" diagnostics is not detected.
Recommendation: To ensure that all errors can be diagnosed reliably, select all check boxes under "Diagnostics".
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
35
Technical specifications
6
Technical specifications of the AI 8xU/I HS
Order number General information
Product type designation HW functional status Firmware version · FW update possible Product function · I&M data
· Measuring range scalable
· Scalable measured values
· Adjustment of measuring range Engineering with
· STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision Operating mode
· Oversampling
· MSI CiR Configuration in RUN
Reparameterization possible in RUN Calibration possible in RUN Supply voltage Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection Input current Current consumption, max. Encoder supply 24 V encoder supply · Short-circuit protection
· Output current, max.
6ES7531-7NF10-0AB0
AI 8xU/I HS FS01 V2.1.0 Yes
Yes; I&M0 to I&M3 No No No
V14 / V5.5 SP3 / V1.0 / V5.1 V2.3 / -
Yes Yes
Yes Yes
24 V 20.4 V 28.8 V Yes
240 mA; with 24 V DC supply
Yes 53 mA
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
36
Technical specifications
Order number Power
Power available from the backplane bus Power loss
Power loss, typ. Analog inputs
Number of analog inputs · For current measurement · For voltage measurement permissible input voltage for voltage input (destruction limit), max. permissible input current for current input (destruction limit), max. Input ranges (rated values), voltages · 0 to +5 V · 0 to +10 V · 1 V to 5 V · Input resistance (1 V to 5 V) · -10 V to +10 V · Input resistance (-10 V to +10 V) · -2.5 V to +2.5 V · -25 mV to +25 mV · -250 mV to +250 mV · -5 V to +5 V · Input resistance (-5 V to +5 V) · -50 mV to +50 mV · -500 mV to +500 mV · -80 mV to +80 mV Input ranges (rated values), currents · 0 to 20 mA · Input resistance (0 to 20 mA)
· -20 mA to +20 mA · Input resistance (-20 mA to +20 mA)
· 4 mA to 20 mA · Input resistance (4 mA to 20 mA)
6ES7531-7NF10-0AB0
1.15 W
3.4 W
8 8 8 28.8 V 40 mA
No No Yes 50 k Yes 100 k No No No Yes 50 k No No No
Yes 41 ; Plus approx. 42 ohms for overvoltage protection by PTC Yes 41 ; Plus approx. 42 ohms for overvoltage protection by PTC Yes 41 ; Plus approx. 42 ohms for overvoltage protection by PTC
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
37
Technical specifications
Order number Input ranges (rated values), thermocouples
· Type B · Type C · Type E · Type J · Type K · Type L · Type N · Type R · Type S · Type T · Type TXK/TXK(L) to GOST Input ranges (rated values), resistance thermometer · Cu 10 · Cu 10 according to GOST · Cu 50 · Cu 50 according to GOST · Cu 100 · Cu 100 according to GOST · Ni 10 · Ni 10 according to GOST · Ni 100 · Ni 100 according to GOST · Ni 1000 · Ni 1000 according to GOST · LG-Ni 1000 · Ni 120 · Ni 120 according to GOST · Ni 200 · Ni 200 according to GOST · Ni 500 · Ni 500 according to GOST · Pt 10 · Pt 10 according to GOST
38
6ES7531-7NF10-0AB0
No No No No No No No No No No No
No No No No No No No No No No No No No No No No No No No No No
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0) Manual, 12/2016, A5E03484886-AE
Technical specifications
Order number · Pt 50 · Pt 50 according to GOST · Pt 100 · Pt 100 according to GOST · Pt 1000 · Pt 1000 according to GOST · Pt 200 · Pt 200 according to GOST · Pt 500 · Pt 500 according to GOST
Input ranges (rated values), resistors · 0 to 150 ohms · 0 to 300 ohms · 0 to 600 ohms · 0 to 3000 ohms · 0 to 6000 ohms · PTC
Cable length · shielded, max.
Analog value generation for the inputs Integration and conversion time/resolution per channel
· Resolution with overrange (bit including sign), max. · Basic execution time of the module (all channels released)
Smoothing of measured values · parameterizable · Step: None · Step: low · Step: Medium · Step: High
6ES7531-7NF10-0AB0 No No No No No No No No No No
No No No No No No
800 m
16 bit 62.5 µs; independent of number of activated channels
Yes Yes Yes Yes Yes
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
39
Technical specifications
Order number Encoder Connection of signal encoders
· for voltage measurement
6ES7531-7NF10-0AB0 Yes
· for current measurement as 2-wire transducer
Yes
Burden of 2-wire transmitter, max.
820
· for current measurement as 4-wire transducer
Yes
· for resistance measurement with two-wire connection
No
· for resistance measurement with three-wire connection
No
· for resistance measurement with four-wire connection
No
Errors/accuracies Linearity error (relative to input range), (+/-) Temperature error (relative to input range), (+/-) Crosstalk between the inputs, max. Repeat accuracy in steady state at 25 °C (relative to input range), (+/)
Operational error limit in overall temperature range
· Voltage, relative to input range, (+/-)
0.02 % 0.005 %/K -60 dB 0.02 %
0.3 %
· Current, relative to input range, (+/-)
0.3 %
Basic error limit (operational limit at 25 °C) · Voltage, relative to input range, (+/-)
0.2 %
· Current, relative to input range, (+/-)
0.2 %
Interference voltage suppression for f = n x (f1 +/- 1 %), f1 = interference frequency
· Common mode voltage, max.
10 V
Isochronous mode Isochronous operation (application synchronized up to terminal) Filtering and processing time (TCI), min. Bus cycle time (TDP), min.
Interrupts/diagnostics/status information Diagnostics function
Alarms
· Diagnostic alarm
Yes 80 µs 250 µs
Yes
Yes
· Limit value alarm
Diagnostic messages · Monitoring the supply voltage
Yes; two upper and two lower limit values in each case
Yes
· Wire-break
Yes; only for 1 ... 5 V and 4 ... 20 mA
· Overflow/underflow
Yes
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
40
Manual, 12/2016, A5E03484886-AE
Technical specifications
Order number Diagnostics indication LED
· RUN LED
· ERROR LED
· Monitoring of the supply voltage (PWR-LED)
· Channel status display
· for channel diagnostics
· for module diagnostics Potential separation Potential separation channels
· between the channels
· between the channels, in groups of
· between the channels and backplane bus
· between the channels and the power supply of the electronics Permissible potential difference
between the inputs (UCM) Between the inputs and MANA (UCM) Isolation Isolation tested with Ambient conditions Ambient temperature during operation · horizontal installation, min.
· horizontal installation, max.
· vertical installation, min.
· vertical installation, max. Decentralized operation
Prioritized startup Dimensions
Width Height Depth Weights Weight, approx.
6ES7531-7NF10-0AB0
Yes; Green LED Yes; Red LED Yes; Green LED Yes; Green LED Yes; Red LED Yes; Red LED
No 8 Yes Yes
20 V DC 10 V DC
707 V DC (type test)
0 °C 60 °C 0 °C 40 °C
Yes
35 mm 147 mm 129 mm
300 g
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
41
Dimensional drawing
A
This appendix contains the dimensional drawing of the module installed on a mounting rail and with a shield bracket. Always adhere to the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the AI 8xU/I HS module
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
42
Dimensional drawing
Figure A-2 Dimensional drawing of the AI 8xU/I HS module, side view with open front panel
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
43
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Current limit for wire break Wire break
Hardware interrupt limits
Dependent parameters Only for measuring type current with measuring range 4 mA to 20 mA.
Only for measuring type resistance with measuring range 1V to 5 V and current with measuring range 4 mA to 20 mA.
Only if hardware interrupts are enabled.
Parameter assignment in the user program
You have the option to assign module parameters in RUN (e.g., the voltage or current values of selected channels can be edited in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 0 to 7. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer to the module.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
44
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You obtain the diagnostics data records 0 and 1 with the read back parameter data records 0 and 1. You can find additional information in the Interrupts section of the manual for the PROFIBUS DP interface module on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Assignment of data record and channel
For the configuration as a 1 x 8-channel module, the parameters are located in data records 0 to 7 and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 ... Data record 6 for channel 6 Data record 7 for channel 7 For configuration 8 x 1-channel, the module has 8 submodules with one channel each. The parameters for the channel are available in data record 0 and are assigned as follows: Data record 0 for channel 0 (submodule 1) Data record 0 for channel 1 (submodule 2) ... Data record 0 for channel 6 (submodule 7) Data record 0 for channel 7 (submodule 8) Address the respective submodule for data record transfer.
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
45
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Data record structure
The figure below shows the structure of data record 0 for channel 0 as an example. The structure is identical for channels 1 to 7. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Bytes 0 to 6
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
46
Manual, 12/2016, A5E03484886-AE
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Figure B-2 Structure of data record 0: Bytes 7 to 27
Note · You can only configure the oversampling function with STEP 7 (TIA Portal) via the
sampling rate parameter.
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
47
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Codes for measuring types
The following table lists all measuring types of the analog input module along with their codes. Enter these codes at byte 2 of the respective data record (see previous figure).
Table B- 2 Code for the measuring type
Measurement type Deactivated Voltage Current 4-wire transmitter Current 2-wire transmitter
Code 0000 0000 0000 0001 0000 0010 0000 0011
Codes for measuring ranges
The following table lists all measuring ranges of the analog input module along with their codes. Enter these codes at byte 3 of the respective data record (see previous figure).
Table B- 3 Code for the measuring range
Measuring range Voltage ±5 V ±10 V 1 V to 5 V Current 4-wire transmitter 0 mA to 20 mA 4 mA to 20 mA ±20 mA Current 2-wire transmitter 4 mA to 20 mA
Code
0000 1000 0000 1001 0000 1010
0000 0010 0000 0011 0000 0100
0000 0011
Hardware interrupt limits
The values that you can set for hardware interrupts (high/low limit) must not exceed the respective rated measuring range.
The following tables list the valid hardware interrupt limits. The limit values depend on the selected measuring type and range.
Table B- 4 Limits of hardware interrupts for voltage and current
Voltage ± 5 V, ± 10 V 1 V to 5 V
Current ±20 mA
32510 -32511
32510 -4863
32510 -32511
4 mA to 20 mA, 0 mA to 20 mA
32510
-4863
High limit Low limit
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
48
Manual, 12/2016, A5E03484886-AE
Representation of analog values
C
Introduction
This chapter shows the analog values for all measuring ranges supported by the AI 8xU/I HS analog module.
Measured value resolution
Each analog value is written left aligned to the tags. The bits marked with "x" are set to "0".
Table C- 1 Resolution of the analog values
Resolution in bits including sign
16
Values
Decimal 1
Hexadecimal 1H
Analog value
High byte
Low byte
Sign 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
49
Manual, 12/2016, A5E03484886-AE
Representation of analog values C.1 Representation of input ranges
C.1
Representation of input ranges
The following tables set out the digitalized representation of the input ranges by bipolar and unipolar range. The resolution is 16 bits.
Table C- 2 Bipolar input ranges
Units
Measured value in %
32767 32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 <-117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0000000001 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Rated range 1 1 1 1 1 1 1111111111 1 0 0 1 0 1 0000000000 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Table C- 3 Unipolar input ranges
Units
Measured value in %
32767 32511 27649 27648 1 0 -1 -4864 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -17.593 <-17.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 Rated range 0 0 0 0 0 0 0000000000 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Undershoot 1 1 1 0 1 1 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
50
Manual, 12/2016, A5E03484886-AE
C.2
Representation of analog values C.2 Representation of analog values in voltage measuring ranges
Representation of analog values in voltage measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible voltage measuring ranges.
Table C- 4 Voltage measuring range ±10 V and ±5 V
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±10 V
±5 V
>11.759 V >5.879 V
11.759 V 5.879 V
10 V 7.5 V 361.7 µV 0 V
5 V 3.75 V 180.8 µV 0 V
-7.5 V -10 V
-3.75 V -5 V
-11.759 V -5.879 V < -11.759 V < -5.879 V
Range Overflow Overshoot range Rated range
Undershoot range Underflow
Table C- 5 Voltage measuring range 1 to 5 V
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Voltage measuring range 1 to 5 V >5.704 V 5.704 V
5 V 4 V 1 V + 144.7 µV 1 V
0.296 V < 0.296 V
Range Overflow Overshoot range Rated range
Undershoot range Underflow
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
51
Representation of analog values C.3 Representation of analog values in the current measuring ranges
C.3
Representation of analog values in the current measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible current measuring ranges.
Table C- 6 Current measuring range ±20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Current measuring range ±20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-15 mA -20 mA
-23.52 mA < -23.52 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
Table C- 7 Current measuring ranges 0 to 20 mA and 4 to 20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Current measuring range
0 to 20 mA
4 to 20 mA
>23.52 mA
>22.81 mA
23.52 mA
22.81 mA
20 mA 15 mA 723.4 nA 0 mA
20 mA 16 mA 4 mA + 578.7 nA 4 mA
-3.52 mA <- 3.52 mA
1.185 mA < 1.185 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
52
Manual, 12/2016, A5E03484886-AE
Representation of analog values C.4 Measured values for wire break diagnostic
C.4
Measured values for wire break diagnostic
Measured values on diagnostic event "wire break", dependent on diagnostics enables
Error events initiate a diagnostics entry and trigger a diagnostics interrupt if configured accordingly.
Table C- 8 Measured values for wire break diagnostic
Format S7
Parameter assignment
· "Wire break" diagnostics enabled · "Overflow/Underflow" diagnostics
enabled or disabled ("Wire break" diagnostics takes priority over "Overflow/Underflow" diagnostics)
· "Wire break" diagnostics disabled · "Overflow/Underflow" diagnostics
enabled
· "Wire break" diagnostics disabled · "Overflow/Underflow" diagnostics
disabled
Measured values
32767
7FFFH
-32767 8000 H -32767 8000 H
Explanation "Wire break" or "Open circuit" diagnostic alarm
· Measured value after leaving the undershoot range
· Diagnostic alarm "Low limit violated" Measured value after leaving the undershoot range
Analog Input Module AI 8xU/I HS (6ES7531-7NF10-0AB0)
Manual, 12/2016, A5E03484886-AE
53
SIMATIC
S7-1500/ET 200MP Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
_Pr_od_u_ct_o_ve_rv_ie_w_________2_
_W_iri_ng_______________3_
_Pa_ra_m_e_te_rs_/a_dd_re_ss_s_pa_c_e ____4_
_In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_
_Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_
_Di_m_en_s_ion_a_l d_ra_w_in_g _______A_
_Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_
Representation of analog values
C
03/2019
A5E44792324-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E44792324-AA 02/2019 Subject to change
Copyright © Siemens AG 2019. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that can be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
4
Manual, 03/2019, A5E44792324-AA
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 10
2.1
Properties ................................................................................................................................ 10
3 Wiring ................................................................................................................................................... 13
4 Parameters/address space ................................................................................................................... 18
4.1
Measuring types and ranges ..................................................................................................18
4.2
Parameters .............................................................................................................................20
4.3
Declaration of parameters ......................................................................................................23
4.4
Address space ........................................................................................................................25
5 Interrupts/diagnostics alarms................................................................................................................. 31
5.1
Status and error displays ........................................................................................................31
5.2
Interrupts .................................................................................................................................33
5.3
Diagnostics alarms..................................................................................................................35
6 Technical specifications ........................................................................................................................ 36
A Dimensional drawing............................................................................................................................. 43
B Parameter data records......................................................................................................................... 45
B.1
Parameter assignment and structure of the parameter data records.....................................45
C Representation of analog values ........................................................................................................... 52
C.1
Representation of input ranges...............................................................................................53
C.2
Representation of analog values in voltage measuring ranges..............................................54
C.3
Representation of analog values in the current measuring ranges ........................................55
C.4
Representation of the analog values of resistance-based sensors/resistance
thermometers ..........................................................................................................................56
C.5
Measured values for wire break diagnostic ............................................................................59
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
6
Manual, 03/2019, A5E44792324-AA
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
7
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
8
Manual, 03/2019, A5E44792324-AA
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
9
Product overview
2.1
Properties
Article number
6ES7531-7QF00-0AB0
View of the module
2
Figure 2-1 View of the AI 8xU/I/R/RTD BA module
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
10
Manual, 03/2019, A5E44792324-AA
Product overview 2.1 Properties
Properties
The module has the following technical properties: 8 analog inputs Voltage measurement type can be set per channel Current measurement type can be set per channel Resistor measurement type can be set per channel Resistance thermometer (RTD) measuring type can be set per channel Resolution 16 bits including sign Configurable diagnostics (per channel) Hardware interrupt on limit violation can be set per channel (two low and two high limits
per channel) The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Isochronous mode Calibration in runtime Module-internal Shared Input (MSI)
Configurable submodules / submodules for Shared Device
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
----V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal) as of V15.1 and
HSP 0275
X
GSD file in STEP 7 (TIA Portal) V12 or higher,
or STEP 7 V5.5 SP3 or higher
X
X
X
X
X
---
---
---
---
X
X
(PROFINET IO only)
(PROFINET IO only)
X
X
(PROFINET IO only)
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Shield bracket Shield terminal Power supply element Labeling strips U connector Universal front door
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
11
Product overview 2.1 Properties
Other components
For example, you order the front connector including the potential bridge and cable tie separately. You can find additional information on accessories and the article number in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
12
Manual, 03/2019, A5E44792324-AA
Wiring
3
This section contains the block diagram of the module and outlines various connection options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Note · You may use and combine the different wiring options for all channels. · Do not insert the potential jumpers supplied with the front connector.
Abbreviations used
Meaning of the abbreviations used in the following figures:
Un+/UnMn+/MnIn+/InIc n+/Ic nMANA
Voltage input channel n (voltage only) Measuring input channel n Current input channel n (current only) Current output for RTD, channel n Reference potential of the analog circuit
Infeed element
The module does not require supply voltage through the infeed element. The infeed element is inserted on the front connector and serves solely for shielding.
Figure 3-1 Infeed element
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
13
Wiring
Block diagram and pin assignment for voltage measurement
The example in the following figure shows the pin assignment for voltage measurement.
Analog-to-digital converter (ADC) Backplane bus interface Infeed element (for shielding only) Equipotential bonding cable (optional)
CHx RUN ERROR
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red)
Figure 3-2 Block diagram and pin assignment for voltage measurement
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
14
Manual, 03/2019, A5E44792324-AA
Wiring
Connection: 4-wire transmitters for current measurement
The example in the following figure shows the pin assignment for current measurement with 4-wire transmitters.
Analog-to-digital converter (ADC) Backplane bus interface Infeed element (for shielding only) Equipotential bonding cable (optional)
CHx RUN ERROR
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red)
Figure 3-3 Block diagram and pin assignment for current measurement
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
15
Wiring
Connection: 2-wire transmitters for current measurement
The example in the following figure shows the pin assignment for current measurement with 2-wire transmitters.
Analog-to-digital converter (ADC) Backplane bus interface Infeed element (for shielding only) Equipotential bonding cable (optional)
CHx RUN ERROR
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red)
Figure 3-4 Block diagram and pin assignment for current measurement
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
16
Manual, 03/2019, A5E44792324-AA
Wiring
Connection: 2-wire and 3-wire connection of resistance sensors or resistance thermometers (RTD)
The example in the following figure shows the pin assignment for 2-wire and 3-wire connections of resistance sensors or resistance thermometers.
3-wire connection 2-wire connection Analog-to-digital converter (ADC) Backplane bus interface Infeed element (for shielding only)
CHx RUN ERROR
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red)
Figure 3-5 Block diagram and pin assignment for 2-wire, 3-wire connection
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
17
Parameters/address space
4
4.1
Measuring types and ranges
Introduction
18
The module is set to voltage measurement type with measuring range ±10 V by default. You need to reassign the module parameters with STEP 7 if you want to use a different measurement type or range.
Deactivate the input if it is not going to be used. The module cycle time is shortened and the interference factors that lead to failure of the module (for example, triggering a hardware interrupt) are avoided.
The following table shows the measurement types and the respective measuring range.
Table 4- 1 Measurement types and measuring ranges
Measurement type Voltage
Current 2WMT (2-wire transmitter) Current 4WMT (4-wire transmitter) Resistor (2-wire connection) Resistor (3-wire connection) Thermal resistor RTD (3-wire connection)
Disabled
Measuring range ±50 mV ±500 mV ±1 V 1 V to 5 V ±5 V ±10 V 4 mA to 20 mA
0 mA to 20 mA 4 mA to 20 mA ±20 mA
PTC 600 6000 PT100 Standard/Climate PT1000 Standard/Climate Ni100 Standard/Climate Ni1000 Standard/Climate LG-Ni1000 Standard/Climatic -
Representation of analog values See Representation of analog values in voltage measuring ranges (Page 54)
See Representation of analog values in the current measuring ranges (Page 55)
See Representation of the analog values of resistance-based sensors/resistance thermometers (Page 56)
-
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0) Manual, 03/2019, A5E44792324-AA
Parameters/address space 4.1 Measuring types and ranges
The tables of the input ranges, overflow, underrange, etc. are available in the appendix Representation of analog values (Page 52).
Note Wire break in voltage measuring ranges "Wire break" diagnosis can be configured for the "Voltage" measurement type with the "Measuring range 1 to 5 V". No "wire break" diagnostics is available for the other measuring ranges. If there is a wire break for these measuring ranges, the channel supplies a random value as an input value. This random value can also lie within the valid value range.
Using PTC resistors
PTC resistors are suitable for temperature monitoring of electrical devices, such as motors, drives, and transformers. Use Type A PTC resistors (PTC thermistor) in accordance with DIN/VDE 0660, part 302. In doing so, follow these steps: 1. Choose "Resistor (2-wire terminal)" and "PTC" in STEP 7. 2. Connect the PTC using 2-wire connection technology. If you enable the "Underflow" diagnostics in STEP 7, it will be signaled for resistance values <18 . In this case, this diagnostic signifies "Short-circuit in the wiring". The following figure shows the address space assignment for the AI 8xU/I/R/RTD BA module with PTC resistors.
Figure 4-1 Address space for the AI 8xU/I/R/RTD BA module with PTC resistors
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
19
Parameters/address space 4.2 Parameters
The diagram below shows the temperature profile and the corresponding switching points.
Figure 4-2 Temperature profile and the corresponding switching points
4.2
Parameters
Parameters of AI 8xU/I/R/RTD BA
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
When assigning parameters in the user program, use the WRREC instruction to transfer the parameters to the module by means of data records; refer to the section Parameter assignment and structure of the parameter data records (Page 45).
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
20
Manual, 03/2019, A5E44792324-AA
Parameters/address space 4.2 Parameters
The following parameter settings for the channels are possible:
Table 4- 2 Configurable parameters and their defaults
Parameters
Range of values
Default setting
Parameter assignment in RUN
Diagnostics · Overflow · Underflow · Common mode error · Wire break 1) Measuring · Measuring type · Measuring range · Temperature coefficient
· Temperature unit
· Interference frequency suppression
· Smoothing
Yes/No Yes/No Yes/No Yes/No
No
Yes
No
Yes
No
Yes
No
Yes
See chapter Meas- Voltage Yes
uring types and
ranges (Page 18)
±10 V
Yes
Pt: 0.003851
0.003851 Yes
Pt: 0.003902
Pt: 0.003916
Pt: 0.003920
Ni: 0.00618
Ni: 0.00672
LG-Ni: 0.005000
· Kelvin (K)
°C
Yes
· Fahrenheit (°F) · Celsius (°C)
400 Hz
50 Hz
Yes
60 Hz
50 Hz
10 Hz
None/low/medium/hi None
Yes
gh
Scope with configuration software, e.g., STEP 7 (TIA Portal)
GSD file
GSD file
PROFINET IO PROFIBUS DP
Channel Channel Channel Channel
Module 2) Module 2) Module 2) Module 2)
Channel Channel Channel
Channel Channel Channel
Channel
Module
Channel
Module
Channel
Channel
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
21
Parameters/address space 4.2 Parameters
Parameters
Range of values
Hardware interrupts · Hardware interrupt low
limit 1
· Hardware interrupt high limit 1
· Hardware interrupt low limit 2
· Hardware interrupt high limit 2
Yes/No Yes/No Yes/No Yes/No
Default setting
No
Parameter assignment in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
GSD file
GSD file
PROFINET IO PROFIBUS DP
Yes
Channel
--- 3)
No
Yes
Channel
--- 3)
No
Yes
Channel
--- 3)
No
Yes
Channel
--- 3)
1) If "Wire break" diagnostics and "Value status" are deactivated, the module reports overflow / underflow (7FFFH / 8000H) in the event of a wiring error. The alarm depends on whether the connected cables are faulty.
Recommendation: Activate the "Wire break" diagnostics to obtain the correct value. 2) You can set the effective range of the diagnostics for each channel in the user program with data records 0 to 7. 3) You can configure the limits for hardware interrupts in the user program with data records 0 to 7.
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
22
Manual, 03/2019, A5E44792324-AA
Parameters/address space 4.3 Declaration of parameters
4.3
Declaration of parameters
Overflow
Enabling of the diagnostics if the measured value violates the high limit.
Underflow
Enabling of the diagnostics when the measured value violates the low limit.
Common mode error
Enabling of diagnostics if the valid common mode voltage is exceeded.
Wire break
Enabling of the diagnostics if the module has no current flow or the current is too weak for the measurement at the corresponding configured input or the applied voltage is too low.
Temperature coefficient
The temperature coefficient depends on the chemical composition of the material. In Europe, only one value is used per sensor type (default value).
The temperature coefficient ( value) indicates by how much the resistance of a specific material changes relatively if the temperature increases by 1 °C.
The further values facilitate a sensor-specific setting of the temperature coefficient and enhance accuracy.
Interference frequency suppression
At analog input modules, this suppresses interference caused by the frequency of the AC network.
The frequency of the AC voltage network may interfere with measured values, particularly for measurements within narrow voltage ranges. For this parameter, the user defines the mains frequency prevailing on his system.
Smoothing
The individual measured values are smoothed using filtering. The smoothing can be set in 4 levels.
Smoothing time = number of module cycles (k) x cycle time of the module.
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
23
Parameters/address space 4.3 Declaration of parameters
The following figure shows the number of module cycles after which the smoothed analog value is almost 100%, depending on the set smoothing. It is valid for each signal change at the analog input.
None (k = 1) Weak (k = 4) Medium (k = 16) Strong (k = 32)
Figure 4-3 Smoothing for AI 8xU/I/R/RTD BA
Hardware interrupt 1 or 2
Enabling of a hardware interrupt at violation of high limit 1 or 2 or low limit 1 or 2.
Low limit 1 or 2
Specifies the low limit threshold that triggers hardware interrupt 1 or 2.
High limit 1 or 2
Specifies the high limit threshold that triggers hardware interrupt 1 or 2.
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
24
Manual, 03/2019, A5E44792324-AA
Parameters/address space 4.4 Address space
4.4
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
Configuration options of AI 8xU/I/R/RTD BA
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 3 Configuration options
Configuration
1 x 8-channel without value status 1 x 8-channel with value status 8 x 1-channel without value status 8 x 1-channel with value status 1 x 8-channel with value status for module-internal shared input with up to 4 submodules
Short designation/ module name in the
GSD file
AI 8xU/I/R/RTD BA AI 8xU/I/R/RTD BA QI AI 8xU/I/R/RTD BA S
AI 8xU/I/R/RTD BA S QI AI 8xU/I/R/RTD BA MSI
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrate in the hardware catalog STEP 7 (TIA Portal) as of V15.1 and HSP 0275 or
V16
X
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5
SP3 or higher
X
X
X
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X
X
(PROFINET IO only)
(PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names: AI 8xU/I/R/RTD BA QI AI 8xU/I/R/RTD BA S QI AI 8xU/I/R/RTD BA MSI An additional bit is assigned to each channel for the value status. The value status bit indicates if the read in digital value is valid. (0 = value is incorrect).
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
25
Parameters/address space 4.4 Address space
Address space of AI 8xU/I/R/RTD BA
The following figure shows the address space allocation for the configuration as 8-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "IB x" stands, for example, for the module start address input byte x.
Figure 4-4 Address space for configuration as 1 x 8-channel AI 8xU/I/R/RTD BA with value status
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
26
Manual, 03/2019, A5E44792324-AA
Parameters/address space 4.4 Address space
Address space for configuration as 8 x 1-channel AI 8xU/I/R/RTD BA QI
For the configuration as a 8 x 1-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Observe the information in the manual for the particular interface module. Contrary to the 1 x 8-channel module configuration, each of the eight submodules has a freely assignable start address.
Figure 4-5 Address space for configuration as 8 x 1-channel AI 8xU/I/R/RTD BA S QI with value status
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
27
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 8-channel AI 8xU/I/R/RTD BA MSI
The channels 0 to 7 of the module are copied in up to four submodules with configuration 1 x 8-channel module (Module-internal shared input, MSI). Channels 0 to 7 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels.
The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI)
The meaning of the value status depends on the submodule on which it occurs.
For the first submodule (=basic submodule), the value status 0 indicates that the value is incorrect.
For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
28
Manual, 03/2019, A5E44792324-AA
Parameters/address space 4.4 Address space
The figure below shows the assignment of the address space with submodules 1 and 2.
Figure 4-6 Address space for configuration as 1 x 8-channel AI 8xU/I/R/RTD BA MSI with value status
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
29
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodule 3 and 4.
Reference
30
Figure 4-7 Address space for configuration as 1 x 8-channel AI 8xU/I/R/RTD BA MSI with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V15 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0) Manual, 03/2019, A5E44792324-AA
Interrupts/diagnostics alarms
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of AI 8xU/I/R/RTD BA.
5
Figure 5-1 LED displays of the AI 8xU/I/R/RTD BA module
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
31
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in section Diagnostic alarms (Page 35).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LEDs RUN ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured.
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are insert-
ed. ---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
CHx LED
Table 5- 2 CHx status display
LED CHx/COMP Off On On
Meaning Channel disabled
Channel configured and OK.
Channel is configured (channel error pending). Diagnostic alarm: e.g. wire break
Remedy ---
---
Check the wiring. Disable diagnostics.
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
32
Manual, 03/2019, A5E44792324-AA
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
Analog input module AI 8xU/I/R/RTD BA supports the following diagnostic and hardware interrupts.
You can find detailed information on the event in the error organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: Wire break Overflow Underflow Common mode error Parameter assignment error
Hardware interrupt
The module generates a hardware interrupt at the following events:
Low limit violated 1
High limit violated 1
Low limit violated 2
Above high limit 2
The module channel that triggered the hardware interrupt is entered in the start information of the organization block. The diagram below shows the assignment to the bits of double word 8 in local data.
Figure 5-2 OB start information
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
33
Interrupts/diagnostics alarms 5.2 Interrupts
Reaction when reaching limits 1 and 2 at the same time
If the two high limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for high limit 1 first. The configured value for high limit 2 is irrelevant. After processing the hardware interrupt for high limit 1, the module triggers the hardware interrupt for high limit 2.
The module has the same reaction when the low limits are reached at the same time. If the two low limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for low limit 1 first. After processing the hardware interrupt for low limit 1, the module triggers the hardware interrupt for low limit 2.
Structure of the additional interrupt information
Table 5- 3 Structure of USI = W#16#0001
Data block name
Contents
USI (User Structure Identifier)
W#16#0001
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#n
The event that triggered the hardware interrupt follows.
Event
B#16#03
B#16#04
B#16#05
B#16#06
Remark
Additional interrupt info for hardware interrupts of the I/O module
Bytes 2
Number of the event-triggering channel (n = 1 number of module channels -1)
Low limit violated 1
1
High limit violated 1
Low limit violated 2
Violation of high limit 2
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
34
Manual, 03/2019, A5E44792324-AA
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes on the module for each diagnostics event. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)" on the Internet (https://support.industry.siemens.com/cs/ww/en/view/78324181).
Table 5- 4 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Wire break
Error code 6H
Overflow
7H
Underflow
8H
Parameter assignment 10H error
Common mode error 118H
Meaning Impedance of encoder circuit too high
Wire break between the module and sensor Channel not connected (open)
Solution Use a different encoder type or modify the wiring, for example, using cables with larger cross-section Connect the cable
· Disable diagnostics · Connect the channel
Measuring range violated Measuring range violated
· The module cannot evaluate parameters for the channel
Check the measuring range Check the measuring range Correct the parameter assignment
· Incorrect parameter assignment
Valid common mode voltage exceeded
Check the wiring, e.g. sensor ground connections, use equipotential cables
Diagnostics alarms with value status (QI)
If you configure the module with value status (QI), the module always checks all errors even if the respective diagnostics is not enabled. But the module cancels the inspection as soon as it detects the first error, regardless if the respective diagnostics has been enabled or not. The result may be that enabled diagnostics may not be displayed.
Example: You have enabled "Underflow" diagnostics, but the module detects the "Wire break" diagnostics first and aborts after this error message. The "Underflow" diagnostics is not detected.
Recommendation: To ensure that all errors can be diagnosed reliably, select all check boxes under "Diagnostics".
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
35
Technical specifications
6
Technical specifications of AI 8xU/I/R/RTD BA
The following table shows the technical specifications as of 03/2019. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7531-7QF00-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version · FW update possible
Product function · I&M data
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Operating mode · Oversampling
· MSI
CiR Configuration in RUN Reparameterization possible in RUN Calibration possible in RUN
Power Power available from the backplane bus
Power loss Power loss, typ.
6ES7531-7QF00-0AB0 AI 8xU/I/R/RTD BA FS01 V1.0.0 Yes
Yes; I&M0 to I&M3
V15.1 / V16 V5.5 SP3 / V1.0 / V5.1 V2.3 / -
No Yes
Yes No 0.85 W 0.9 W
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
36
Manual, 03/2019, A5E44792324-AA
Technical specifications
Article number Analog inputs
Number of analog inputs · For current measurement
· For voltage measurement
· For resistance/resistance thermometer measurement
permissible input voltage for voltage input (destruction limit), max. permissible input current for current input (destruction limit), max. Constant measurement current for resistancetype transmitter, typ. Technical unit for temperature measurement adjustable Input ranges (rated values), voltages · 0 to +5 V
· 0 to +10 V
· 1 V to 5 V
· Input resistance (1 V to 5 V)
· -1 V to +1 V
· Input resistance (-1 V to +1 V)
· -10 V to +10 V
· Input resistance (-10 V to +10 V)
· -2.5 V to +2.5 V
· -25 mV to +25 mV
· -250 mV to +250 mV
· -5 V to +5 V
· Input resistance (-5 V to +5 V)
· -50 mV to +50 mV
· Input resistance (-50 mV to +50 mV)
· -500 mV to +500 mV
· Input resistance (-500 mV to +500 mV)
· -80 mV to +80 mV
6ES7531-7QF00-0AB0
8 8 8 8
12 V; 12 V continuous, 30 V for max. 1 s
40 mA
230 ... 370 µA
Yes; °C/°F/K
No No Yes 10 M Yes 10 M Yes 10 M No No No Yes 10 M Yes 10 M Yes 10 M No
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
37
Technical specifications
Article number Input ranges (rated values), currents
· 0 to 10 mA
6ES7531-7QF00-0AB0 No
· 0 to 20 mA
Yes
· Input resistance (0 to 20 mA) · -20 mA to +20 mA
25 ; Plus approx. 42 ohms for overvoltage protection by PTC
Yes
· Input resistance (-20 mA to +20 mA) · 4 mA to 20 mA
25 ; Plus approx. 42 ohms for overvoltage protection by PTC
Yes
· Input resistance (4 mA to 20 mA)
Input ranges (rated values), thermocouples · Type B
25 ; Plus approx. 42 ohms for overvoltage protection by PTC
No
· Type C
No
· Type E
No
· Type J
No
· Type K
No
· Type L
No
· Type N
No
· Type R
No
· Type S
No
· Type T
No
· Type U
No
· Type TXK/TXK(L) to GOST
No
Input ranges (rated values), resistance thermometer
· Cu 10
No
· Cu 10 according to GOST
No
· Cu 50
No
· Cu 50 according to GOST
No
· Cu 100
No
· Cu 100 according to GOST
No
· Ni 10
No
· Ni 10 according to GOST
No
· Ni 100
Yes; Standard/climate
· Input resistance (Ni 100)
10 M
· Ni 100 according to GOST
No
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
38
Manual, 03/2019, A5E44792324-AA
Article number · Ni 1000 · Input resistance (Ni 1000) · Ni 1000 according to GOST · LG-Ni 1000 · Input resistance (LG-Ni 1000) · Ni 120 · Ni 120 according to GOST · Ni 200 · Ni 200 according to GOST · Ni 500 · Ni 500 according to GOST · Pt 10 · Pt 10 according to GOST · Pt 50 · Pt 50 according to GOST · Pt 100 · Input resistance (Pt 100) · Pt 100 according to GOST · Pt 1000 · Input resistance (Pt 1000) · Pt 1000 according to GOST · Pt 200 · Pt 200 according to GOST · Pt 500 · Pt 500 according to GOST
Input ranges (rated values), resistors · 0 to 150 ohms · 0 to 300 ohms · 0 to 600 ohms · Input resistance (0 to 600 ohms) · 0 to 3000 ohms · 0 to 6000 ohms · Input resistance (0 to 6000 ohms) · PTC · Input resistance (PTC)
6ES7531-7QF00-0AB0 Yes; Standard/climate 10 M No Yes; Standard/climate 10 M No No No No No No No No No No Yes; Standard/climate 10 M No Yes; Standard/climate 10 M No No No No No
No No Yes 10 M No Yes 10 M Yes 10 M
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0) Manual, 03/2019, A5E44792324-AA
Technical specifications 39
Technical specifications
Article number Cable length
· shielded, max.
6ES7531-7QF00-0AB0 200 m; 50 m at 50 mV
Analog value generation for the inputs Measurement principle
Integration and conversion time/resolution per channel
· Resolution with overrange (bit including sign), max.
integrating 16 bit
· Integration time, parameterizable
Yes
· Integration time (ms)
2,5 / 16,67 / 20 / 100 ms
· Basic conversion time, including integration 10 / 24 / 27 / 107 ms time (ms)
additional conversion time for wirebreak monitoring
4 ms (to be considered in R/RTD/U 1 to 5 V measurement)
additional conversion time for resistance measurement
8 ms
· Interference voltage suppression for inter- 400 / 60 / 50 / 10 Hz ference frequency f1 in Hz
Smoothing of measured values
· parameterizable
Yes
· Step: None
Yes
· Step: low
Yes
· Step: Medium
Yes
· Step: High
Yes
Encoder
Connection of signal encoders
· for voltage measurement
Yes
· for current measurement as 2-wire transducer
Yes; with external supply
· for current measurement as 4-wire trans- Yes ducer
· for resistance measurement with two-wire Yes; Only for PTC connection
· for resistance measurement with three-wire Yes; All measuring ranges except PTC; internal
connection
compensation of the cable resistances
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
40
Manual, 03/2019, A5E44792324-AA
Technical specifications
Article number
6ES7531-7QF00-0AB0
Errors/accuracies
Linearity error (relative to input range), (+/-) 0.1 %
Temperature error (relative to input range), (+/- 0.006 %/K )
Crosstalk between the inputs, max.
-50 dB
Repeat accuracy in steady state at 25 °C (rela- 0.1 % tive to input range), (+/-)
Operational error limit in overall temperature range
· Voltage, relative to input range, (+/-)
0.5 %
· Current, relative to input range, (+/-)
0.5 %
· Resistance, relative to input range, (+/-)
0.5 %
· Resistance thermometer, relative to input range, (+/-)
Ptxxx Standard: ±1.2 K, Ptxxx Climate: ±0.8 K, Nixxx Standard: ±0.8 K, Nixxx Climate: ±0.8 K
Basic error limit (operational limit at 25 °C) · Voltage, relative to input range, (+/-)
0.3 %
· Current, relative to input range, (+/-)
0.3 %
· Resistance, relative to input range, (+/-)
0.3 %
· Resistance thermometer, relative to input range, (+/-)
Ptxxx Standard: ±1.0 K, Ptxxx Climate: ±0.5 K, Nixxx Standard: ±0.5 K, Nixxx Climate: ±0.5 K
Interference voltage suppression for f = n x (f1 +/1 %), f1 = interference frequency
· Series mode interference (peak value of interference < rated value of input range), min.
40 dB
· Common mode voltage, max.
4 V
· Common mode interference, min.
60 dB
Interrupts/diagnostics/status information
Diagnostics function
Yes
Alarms
· Diagnostic alarm
Yes
· Limit value alarm
Diagnostic messages · Monitoring the supply voltage
Yes; two upper and two lower limit values in each case
No
· Wire-break
Yes; Only for 1 ... 5 V, 4 ... 20 mA, R, and RTD
· Short-circuit
No
· Group error
No
· Overflow/underflow
Yes
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
41
Technical specifications
Article number Diagnostics indication LED
· RUN LED
· ERROR LED
· MAINT LED
· Monitoring of the supply voltage (PWRLED)
· Channel status display
· for channel diagnostics
· for module diagnostics Potential separation Potential separation channels
· between the channels
· between the channels, in groups of
· between the channels and backplane bus Permissible potential difference
between the inputs (UCM) Between the inputs and MANA (UCM) Isolation Isolation tested with Ambient conditions Ambient temperature during operation · horizontal installation, min.
· horizontal installation, max.
· vertical installation, min.
· vertical installation, max. Decentralized operation
Prioritized startup Dimensions
Width Height Depth Weights Weight, approx.
6ES7531-7QF00-0AB0
Yes; Green LED Yes; Red LED No No
Yes; Green LED Yes; Red LED Yes; Red LED
No 8 Yes
8 V DC 4 V DC
707 V DC (type test)
0 °C 60 °C 0 °C 40 °C
No
35 mm 147 mm 129 mm
250 g
Additional information
You can learn how to calculate the cycle time of the module with an example provided on the Internet (https://support.industry.siemens.com/cs/ww/en/view109761283).
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
42
Manual, 03/2019, A5E44792324-AA
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel are provided in the appendix. Always adhere to the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the AI 8xU/I/R/RTD BA module
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
43
Dimensional drawing
Figure A-2 Dimension drawing of the AI 8xU/I/R/RTD BA module, side view with open front cover
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
44
Manual, 03/2019, A5E44792324-AA
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Wire break
Common mode error Measurement type resistance (3-wireconnection) Hardware interrupt limits Temperature unit Kelvin (K)
Dependent parameters Only for measurement type resistance 3-wire connection, thermal resistor RTD, voltage with measuring range 1 to 5 V and current with measuring range 4 to 20 mA. Only with measurement type voltage and current Only with measuring range 600 and 6000 .
Only if hardware interrupts are enabled. Only with measurement type thermal resistor (RTD) standard.
Parameter assignment in the user program
The module parameters can be assigned in RUN (for example, measuring ranges of selected channels can be edited in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 0 to 7. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer to the module.
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
45
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter. The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You obtain the diagnostics data records 0 and 1 with the read back parameter data records 0 and 1. You can find additional information in the Interrupts section of the manual for the PROFIBUS DP interface module on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Assignment of data record and channel
For the configuration as a 1 x 8-channel module, the parameters are located in data records 0 to 7 and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 ... Data record 6 for channel 6 Data record 7 for channel 7 For configuration 8 x 1-channel, the module has 8 submodules with one channel each. The parameters for the channel are available in data record 0 and are assigned as follows: Data record 0 for channel 0 (submodule 1) Data record 0 for channel 1 (submodule 2) ... Data record 0 for channel 6 (submodule 7) Data record 0 for channel 7 (submodule 8) Address the respective submodule for data record transfer.
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
46
Manual, 03/2019, A5E44792324-AA
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Data record structure
The figure below shows the structure of data record 0 for channel 0 as an example. The structure is identical for channels 1 to 7. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Bytes 0 to 6
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
47
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Figure B-2 Structure of data record 0: Bytes 7 to 27
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
48
Manual, 03/2019, A5E44792324-AA
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Codes for measurement types
The following table lists all measurement types of the analog input module along with their codes. Enter these codes at byte 2 of the data record for the corresponding channel (see the figure Structure of data record 0: Bytes 7 to 27).
Table B- 2 Code for the measurement type
Measurement type Deactivated Voltage Current, 2-wire transmitter Current, 4-wire transmitter Resistance, 3-wire-connection *) Resistance, 2-wire connection **) Thermal resistor linear, 3-wire connection
Code 0000 0000 0000 0001 0000 0011 0000 0010 0000 0101 0000 0110 0000 1000
*) Only for the following measuring ranges: 600 , 6 k **) only for measuring range PTC
Codes for measuring ranges
The following table lists all measuring ranges of the analog input module along with their codes. Enter these codes accordingly at byte 3 of the data record for the corresponding channel (see the figure Structure of data record 0: Bytes 7 to 27).
Table B- 3 Code for the measuring range
Measuring range Voltage ±50 mV ±500 mV ±1 V ±5 V ±10 V 1 V to 5 V Current, 4-wire transmitter 0 mA to 20 mA 4 mA to 20 mA ±20 mA
Code
0000 0001 0000 0100 0000 0101 0000 1000 0000 1001 0000 1010
0000 0010 0000 0011 0000 0100
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
49
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Current, 2-wire transmitter 4 mA to 20 mA Resistor 600 6 k PTC Thermal resistor Pt100 Climate Ni100 Climate Pt100 standard Ni100 standard Pt1000 standard Ni1000 standard Pt1000 Climate Ni1000 Climate LG-Ni1000 standard LG-Ni1000 Climate
0000 0011
0000 0011 0000 0101 0000 1111
0000 0000 0000 0001 0000 0010 0000 0011 0000 0101 0000 0110 0000 1001 0000 1010 0001 1100 0001 1101
Codes for temperature coefficients
The following table lists all temperature coefficients along with their codes for temperature measurements with the thermal resistors. You need to enter these codes in byte 4 of the data records 0 to 6 (see Fig. Structure of data record 0: bytes 0 to 6).
Table B- 4 Codes for temperature coefficient
Temperature coefficient Pt xxx 0.003851 0.003916 0.003902 0.003920 Ni xxx 0.006180 0.006720 LG-Ni 0.005000
Code
0000 0000 0000 0001 0000 0010 0000 0011
0000 1000 0000 1001
0000 1010
Hardware interrupt limits
The values that you can set for hardware interrupts (high/low limit) must not violate the over/underrange of the respective rated measuring range.
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
50
Manual, 03/2019, A5E44792324-AA
Parameter data records B.1 Parameter assignment and structure of the parameter data records
The following tables list the valid hardware interrupt limits. The limits depend on the selected measurement type and measuring range.
Table B- 5 Voltage limits
Voltage ±50 mV, ±500 mV, ±1 V, ±5 V, ±10 V 32510 -32511
1 V to 5 V 32510 -4863
High limit Low limit
Table B- 6 Current and resistance limits
Current ±20 mA
32510 -32511
4 mA to 20 mA / 0 mA to 20 mA
32510
-4863
Resistor (all configurable measuring ranges)
32510 1
High limit Low limit
Table B- 7 Limits for thermal resistor Pt xxx Standard and Pt xxx Climatic
Thermal resistor
Pt xxx Standard
°C
°F
K
9999
18319
12731
-2429
-4053
303
°C 15499 -14499
Pt xxx Climate
°F
K
31099
---
-22899
---
High limit Low limit
Table B- 8 Limits for thermal resistor Ni xxx Standard and Ni xxx Climatic
Thermal resistor
Ni xxx Standard
°C
°F
K
2949
5629
5681
-1049
-1569
1683
°C 15499 -10499
Ni xxx Climate
°F
K
31099
---
-15699
---
High limit Low limit
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
51
Representation of analog values
C
Introduction
This appendix shows the analog values for all measuring ranges supported by the AI 8xU/I/R/RTD BA analog module.
Measured value resolution
Each analog value is written left aligned to the tags. The bits marked with "x" are set to "0".
Note This resolution does not apply to temperature values. The digitalized temperature values are the result of a conversion in the analog module.
Table C- 1 Resolution of the analog values
Resolution in bits including sign
16
Values
Decimal 1
Hexadecimal 1H
Analog value
High byte
Low byte
Sign 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
52
Manual, 03/2019, A5E44792324-AA
Representation of analog values C.1 Representation of input ranges
C.1
Representation of input ranges
The following tables set out the digitalized representation of the input ranges by bipolar and unipolar range. The resolution is 16 bits.
Table C- 2 Bipolar input ranges
Dec. value
Measured value in %
32767 32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 <-117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0000000001 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Rated range 1 1 1 1 1 1 1111111111 1 0 0 1 0 1 0000000000 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Table C- 3 Unipolar input ranges
Dec. value
Measured value in %
32767 32511 27649 27648 1 0 -1 -4864 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -17.593 <-17.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 Rated range 0 0 0 0 0 0 0000000000 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Undershoot 1 1 1 0 1 1 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
53
Representation of analog values C.2 Representation of analog values in voltage measuring ranges
C.2
Representation of analog values in voltage measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible voltage measuring ranges.
Table C- 4 Voltage measuring ranges ±10 V, ±5 V, ±1 V,
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±10 V
±5 V
>11.759 V
>5.879 V
11.759 V
5.879 V
10 V 7.5 V 361.7 µV 0 V
5 V 3.75 V 180.8 µV 0 V
-7.5 V -10 V
-3.75 V -5 V
-11.759 V < -11.759 V
-5.879 V < -5.879 V
±1 V > 1.176 V 1.176 V
1 V 0.75 V 36.17 µV 0 V
-0.75 V -1 V
-1.176 V < -1.176 V
Range Overflow Overshoot range Rated range
Undershoot range Underflow
Table C- 5 Voltage measuring ranges ±500 mV and ±50 mV
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±500 mV
±50 mV
>587.9 mV
> 58.8 mV
587.9 mV
58.8 mV
500 mV 375 mV 18.08 µV 0 mV
50 mV 37.5 mA 1.81 µV 0 mV
-375 mV -500 mV
-37.5 mV -50 mV
-587.9 mV <-587.9 mV
-58.8 mV < -58.8 mV
Range Overflow Overshoot range Rated range
Undershoot range Underflow
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
54
Manual, 03/2019, A5E44792324-AA
C.3
Representation of analog values C.3 Representation of analog values in the current measuring ranges
Table C- 6 Voltage measuring range 1 to 5 V
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Voltage measuring range 1 to 5 V >5.704 V 5.704 V
5 V 4 V 1 V + 144.7 µV 1 V
0.296 V < 0.296 V
Range Overflow Overshoot range Rated range
Undershoot range Underflow
Representation of analog values in the current measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible current measuring ranges.
Table C- 7 Current measuring range ±20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Current measuring range ±20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-15 mA -20 mA
-23.52 mA < -23.52 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
55
Representation of analog values C.4 Representation of the analog values of resistance-based sensors/resistance thermometers
Table C- 8 Current measuring ranges 0 to 20 mA and 4 to 20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Current measuring range 0 to 20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-3.52 mA <- 3.52 mA
4 to 20 mA >22.81 mA 22.81 mA
20 mA 16 mA 4 mA + 578.7 nA 4 mA
1.185 mA < 1.185 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
C.4
Representation of the analog values of resistance-based
sensors/resistance thermometers
The following tables list the decimal and hexadecimal values (codes) of the possible resistance-based sensor ranges.
Table C- 9 Resistance sensors of 600 and 6000
Values dec 32767 32511 27649 27648 20736 1 0
hex 7FFF 7EFF 6C01 6C00 5100 1 0
Resistive transmitter range
600
6000
>705.53
>7055.3
705.53
7055.3
600 450 21.70 m 0
6000 4500 217 m 0
Overflow Overshoot range
Rated range
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
56
Manual, 03/2019, A5E44792324-AA
Representation of analog values C.4 Representation of the analog values of resistance-based sensors/resistance thermometers
The following tables list the decimal and hexadecimal values (codes) of the supported resistance thermometers.
Table C- 10 Resistance thermometers Pt 100 and Pt 1000 Standard
Pt x00 Standard in °C (1 digit = 0.1°C) > 1000.0 1000.0 : 850.1 850.0 : -200.0 -200.1 : -243.0 < -243.0
Values dec
32767 10000 : 8501 8500 : -2000 -2001 : -2430 -32768
hex
7FFF 2710 : 2135 2134 : F830 F82F : F682 8000
Pt x00 Standard in °F (1 digit = 0.1 °F) > 1832.0 1832.0 : 1562.1 1562.0 : -328.0 -328.1 : -405.4 < -405.4
Values dec
32767 18320 : 15621 15620 : -3280 -3281 : -4054 -32768
hex
7FFF 4790 : 3D05 3D04 : F330 F32F : F02A 8000
Pt x00 Standard in K (1 digit = 0.1 K) > 1273.2 1273.2 : 1123.3 1123.2 : 73.2 73.1 : 30.2 < 30.2
Values dec
32767 12732 : 11233 11232 : 732 731 : 302 32768
hex
7FFF 31BC : 2BE1 2BE0 : 2DC 2DB : 12E 8000
Range
Overflow Overshoot range Rated range
Undershoot range Underflow
Table C- 11 Resistance thermometers Pt 100 and Pt 1000 Climate
Pt x00 Climate/ in °C (1 digit = 0.01 °C) > 155.00 155.00 : 130.01 130.00 : -120.00 -120.01 : -145.00 < -145.00
Values dec
32767 15500 : 13001 13000 : -12000 -12001 : -14500 -32768
hex
7FFF 3C8C : 32C9 32C8 : D120 D11F : C75C 8000
Pt x00 Climate/ in °F (1 digit = 0.01 °F) > 311.00 311.00 : 266.01 266.00 : -184.00 -184.01 : -229.00 < -229.00
Values dec
32767 31100 : 26601 26600 : -18400 -18401 : -22900 -32768
hex
7FFF 797C : 67E9 67E8 : B820 B81F : A68C 8000
Range
Overflow Overshoot range
Rated range
Undershoot range
Underflow
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
57
Representation of analog values C.4 Representation of the analog values of resistance-based sensors/resistance thermometers
Table C- 12 Thermal resistors Ni 100, Ni 1000, LG-Ni 1000 Standard
Ni x00 standard in °C (1 digit = 0.1 °C) > 295.0 295.0 : 250.1 250.0 : -60.0 -60.1 : -105.0 < -105.0
Values dec
32767 2950 : 2501 2500 : -600 -601 : -1050 -32768
hex
7FFF B86 : 9C5 9C4 : FDA8 FDA7 : FBE6 8000
Ni x00 Standard in °F (1 digit = 0.1 °F) > 563.0 563.0 : 482.1 482.0 : -76.0 -76.1 : -157.0 < -157.0
Values dec
32767 5630 : 4821 4820 : -760 -761 : -1570 -32768
hex
7FFF 15FE : 12D5 12D4 : FD08 FD07 : F9DE 8000
Ni x00 Standard in K (1 digit = 0.1 K) > 568.2 568.2 : 523.3 523.2 : 213.2 213.1 : 168.2 < 168.2
Values dec
32767 5682 : 5233 5232 : 2132 2131 : 1682 32768
hex
7FFF 1632 : 1471 1470 : 854 853 : 692 8000
Range
Overflow Overshoot range Rated range
Undershoot range Underflow
Table C- 13 Thermal resistors Ni 100, Ni 1000, LG-Ni 1000 Climate
Ni x00 Climate in °C Values
(1 digit = 0.01 °C)
dec
> 155.00 155.00 : 130.01 130.00 : -60.00 -60.01 : -105.00 < - 105.00
32767 15500 : 13001 13000 : -6000 -6001 : -10500 -32768
hex
7FFF 3C8C : 32C9 32C8 : E890 E88F : D6FC 8000
Ni x00 Climate in °F (1 digit = 0.01 °F) > 311.00 311.00 : 266.01 266.00 : -76.00 -76.01 : -157.00 < - 157.00
Values dec
32767 31100 : 26601 26600 : -7600 -7601 : -15700 -32768
hex
7FFF 797C : 67E9 67E8 : E250 E24F : C2AC 8000
Range
Overflow Overshoot range
Rated range
Undershoot range
Underflow
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
58
Manual, 03/2019, A5E44792324-AA
Representation of analog values C.5 Measured values for wire break diagnostic
C.5
Measured values for wire break diagnostic
Measured values on diagnostic event "wire break", dependent on diagnostics enables
Error events initiate a diagnostics entry and trigger a diagnostics interrupt if configured accordingly.
Table C- 14 Measured values for wire break diagnostic
Format S7
Parameter assignment
· "Wire break" diagnostics enabled · "Overflow/Underflow" diagnostics
enabled or disabled ("Wire break" diagnostics takes priority over "Overflow/Underflow" diagnostics)
· "Wire break" diagnostics disabled · "Overflow/Underflow" diagnostics
enabled
· "Wire break" diagnostics disabled · "Overflow/Underflow" diagnostics
disabled
Measured values
32767
7FFFH
-32767 8000 H -32767 8000 H
Explanation "Wire break" or "Open circuit" diagnostic alarm
· Measured value after leaving the undershoot range
· Diagnostic alarm "Low limit violated" Measured value after leaving the undershoot range
Analog Input Module AI 8xU/I/R/RTD BA (6ES7531-7QF00-0AB0)
Manual, 03/2019, A5E44792324-AA
59
SIMATIC
S7-1500/ET 200MP Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _Rvae_lpu_rees_se_n_ta_tio_n _of_a_na_lo_g ____C__
08/2018
A5E03484864-AE
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03484864-AE 07/2018 Subject to change
Copyright © Siemens AG 2014 - 2018. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following changes: New licensing conditions and copyright information of the Open Source Software New technical specifications
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
4
Manual, 08/2018, A5E03484864-AE
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 10
2.1
Properties ................................................................................................................................ 10
3 Wiring ................................................................................................................................................... 13
4 Parameters/address space ................................................................................................................... 21
4.1
Measuring types and ranges ..................................................................................................21
4.2
Parameters .............................................................................................................................24
4.3
Declaration of parameters ......................................................................................................27
4.4
Address space ........................................................................................................................30
5 Interrupts/diagnostics alarms................................................................................................................. 36
5.1
Status and error displays ........................................................................................................36
5.2
Interrupts .................................................................................................................................39
5.3
Diagnostics alarms..................................................................................................................41
6 Technical specifications ........................................................................................................................ 42
A Dimensional drawing............................................................................................................................. 52
B Parameter data records......................................................................................................................... 54
B.1
Parameter assignment and structure of the parameter data records.....................................54
B.2
Structure of a data record for dynamic reference temperature...............................................65
C Representation of analog values ........................................................................................................... 67
C.1
Representation of input ranges...............................................................................................68
C.2
Representation of analog values in voltage measuring ranges..............................................69
C.3
Representation of analog values in the current measuring ranges ........................................71
C.4
Representation of the analog values of resistance-based sensors/resistance
thermometers ..........................................................................................................................72
C.5
Representation of analog values for thermocouples ..............................................................75
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
6
Manual, 08/2018, A5E03484864-AE
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
7
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
8
Manual, 08/2018, A5E03484864-AE
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
9
Product overview
2.1
Properties
Article number
6ES7531-7KF00-0AB0
View of the module
2
Figure 2-1 View of the AI 8xU/I/RTD/TC ST module
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
10
Manual, 08/2018, A5E03484864-AE
Product overview 2.1 Properties
Properties
The module has the following technical properties: 8 analog inputs Voltage measurement type can be set per channel Current measurement type can be set per channel Measuring type resistance adjustable for channel 0, 2, 4 and 6 Measuring type resistance thermometers (RTD) adjustable for channel 0, 2, 4 and 6 Thermocouple (TC) measurement type can be set per channel Resolution 16 bits including sign Configurable diagnostics (per channel) Hardware interrupt on limit violation can be set per channel (two low and two high limits
per channel) The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Isochronous mode Calibration in runtime Module-internal Shared Input (MSI)
Configurable submodules / submodules for Shared Device
Configurable after interface module IM 155-5 DP ST
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V2.0.0 or higher
V2.0.0 or higher
V2.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
V12 or higher
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
X
V12 or higher
X
V12 or higher
X
V12 or higher
---
V12 or higher
X
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
V13 or higher
X
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
11
Product overview 2.1 Properties
Compatibility
The following table shows the compatibility of the modules and the dependencies between hardware functional status (FS) and firmware version (FW) used:
Hardware functional status FS01 FS02 FS03
Firmware version V1.0.0 to V2.0.x V1.0.0 to V2.0.x V2.1.0 to V2.1.x
FS04
V2.2.0 or higher
Note Upgrade to downgrade possible between V1.0.0 and V2.0.x
Upgrade to downgrade possible between V2.1.0 and V2.1.x
Upgrade and downgrade possible between V2.2.0 and higher
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Shield bracket Shield terminal Power supply element Labeling strips U connector Universal front door
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
12
Manual, 08/2018, A5E03484864-AE
Wiring
3
This section contains the block diagram of the module and outlines various connection options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
You can find additional information on compensating the reference junction temperature in the function manual Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094), the structure of a data record in the section Structure of a data record for dynamic reference temperature (Page 65).
Note · You may use and combine the different wiring options for all channels. · Do not insert the potential jumpers supplied with the front connector.
Abbreviations used
Meaning of the abbreviations used in the following figures:
Un+/UnMn+/MnIn+/InIc n+/Ic nUVn Comp+/CompIComp+/ICompL+ M MANA
Voltage input channel n (voltage only) Measuring input channel n Current input channel n (current only) Current output for RTD, channel n Supply voltage at channel n for 2-wire transmitters (2WMT) Compensation input Current output for compensation Connection for supply voltage Ground connection Reference potential of the analog circuit
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
13
Wiring Pin assignment for the power supply element
The power supply element is plugged onto the front connector for powering the analog module. Wire the supply voltage to terminals 41 (L+) and 44 (M). You can use terminals 42 (L+) and 43 (M) to loop the potential to the next module.
Figure 3-1 Power supply element wiring
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
14
Manual, 08/2018, A5E03484864-AE
Wiring
Block diagram and pin assignment for voltage measurement
The example in the following figure shows the pin assignment for voltage measurement.
Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 9 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-2 Block diagram and pin assignment for voltage measurement
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
15
Wiring
Connection: 4-wire transmitters for current measurement
The example in the following figure shows the pin assignment for current measurement with 4-wire transmitters.
Wiring 4-wire transmitter Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 9 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-3 Block diagram and pin assignment for current measurement
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
16
Manual, 08/2018, A5E03484864-AE
Wiring
Connection: 2-wire transmitters for current measurement
The example in the following figure shows the pin assignment for current measurement with 2-wire transmitters.
Wiring 2-wire transmitter Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 9 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-4 Block diagram and pin assignment for current measurement
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
17
Wiring
Connection: 2-, 3- and 4-wire connection of resistance-based sensors or thermal resistors (RTD)
The example in the following figure shows the pin assignment for 2-, 3- and 4-wire connections of resistance-based sensors or thermal resistors.
4-wire connection 3-wire connection 2-wire connection Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 9 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-5 Block diagram and pin assignment for 2-, 3- and 4-wire connections
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
18
Manual, 08/2018, A5E03484864-AE
Wiring
Connection: Non-grounded thermocouples for external/internal compensation and connection of a resistance thermometer (RTD) at the reference channel
The following figure shows an example of the pin assignment of non-grounded thermocouples for external/internal compensation and the connection of a resistance thermometer (RTD) at the reference channel.
Wiring of a thermocouple (non-grounded) for internal compen- CHx
sation
Wiring of a thermocouple (non-grounded) for external compen- RUN
sation
Wiring of a resistance thermometer (RTD) at the reference
ERROR
channel
Analog-to-digital converter (ADC)
PWR
Backplane bus interface
Supply voltage via power supply element
Equipotential bonding cable (optional)
Channel or 9 x channel status (green/red) Status display LED (green)
Error display LED (red)
LED for power supply (green)
Figure 3-6 Block diagram and pin assignment for non-grounded thermocouples and resistance thermometers
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
19
Wiring
Connection: Grounded thermocouples for internal compensation
The following figure shows an example of the pin assignment for grounded thermocouples for internal compensation.
Wiring of a thermocouple (grounded) for internal compen-
sation
Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx
RUN ERROR PWR
Channel or 9 x channel status (green/red)
Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-7 Block diagram and pin assignment for grounded thermocouples
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
20
Manual, 08/2018, A5E03484864-AE
Parameters/address space
4
4.1
Measuring types and ranges
Introduction
The module is set to voltage measurement type with measuring range ±10 V by default. You need to reassign the module parameters with STEP 7 if you want to use a different measurement type or range.
Deactivate the input if it is not going to be used. The module cycle time is shortened and the interference factors that lead to failure of the module (for example, triggering a hardware interrupt) are avoided.
The following table shows the measurement types and the respective measuring range.
Table 4- 1 Measurement types and measuring ranges
Measurement type Voltage
Current 2WMT (2-wire transmitter) Current 4WMT (4-wire transmitter) Resistor (2-wire connection) Resistor (3-wire connection) (4-wire connection)
Measuring range ±50 mV ±80 mV ±250 mV ±500 mV ±1 V ±2.5 V 1 V to 5 V ±5 V ±10 V 4 mA to 20 mA
0 mA to 20 mA 4 mA to 20 mA ±20 mA
PTC 150 300 600 6000
Representation of analog values See Representation of analog values in voltage measuring ranges (Page 69)
See Representation of analog values in the current measuring ranges (Page 71)
See Representation of the analog values of resistance-based sensors/resistance thermometers (Page 72)
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
21
Parameters/address space 4.1 Measuring types and ranges
Measurement type Thermal resistor RTD (3-wire connection) (4-wire connection)
Thermocouple (TC)
Disabled
Measuring range PT100 Standard/Climate
PT200 Standard/Climate
PT500 Standard/Climate
PT1000 Standard/Climate
Ni100 Standard/Climate Ni1000 Standard/Climate LG-Ni1000 Standard/Climatic
Type B Type E Type J
Type K Type N
Type R Type S
Type T
-
Representation of analog values
See Representation of analog values for thermocouples (Page 75) -
The tables of the input ranges, overflow, underrange, etc. are available in the appendix Representation of analog values (Page 67).
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
22
Manual, 08/2018, A5E03484864-AE
Parameters/address space 4.1 Measuring types and ranges
Using PTC resistors
PTC resistors are suitable for temperature monitoring of electrical devices, such as motors, drives, and transformers. Use Type A PTC resistors (PTC thermistor) in accordance with DIN/VDE 0660, part 302. In doing so, follow these steps: 1. Choose "Resistor (2-wire terminal)" and "PTC" in STEP 7. 2. Connect the PTC using 2-wire connection technology. If you enable the "Underflow" diagnostics in STEP 7, it will be signaled for resistance values <18 . In this case, this diagnostic signifies "Short-circuit in the wiring". The following figure shows the address space assignment for the AI 8xU/I/RTD/TC ST module with PTC resistors.
Figure 4-1 Address space for the AI 8xU/I/RTD/TC ST module with PTC resistors The diagram below shows the temperature profile and the corresponding switching points.
Figure 4-2 Temperature profile and the corresponding switching points
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
23
Parameters/address space 4.2 Parameters
Measured value acquisition with PTC resistors
If faults occur (for example supply voltage L+ missing) that make it impossible to acquire measured values with PTC resistors, the corresponding channels (IR x/IR x+1) report overflow (7FFFH). If the value status (QI) is enabled, the value 0 = incorrect is output in the corresponding bit.
4.2
Parameters
AI 8xU/I/RTD/TC ST parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
When assigning parameters in the user program, use the WRREC instruction to transfer the parameters to the module by means of data records; refer to the section Parameter assignment and structure of the parameter data records (Page 54).
The following parameter settings for the channels are possible:
Table 4- 2 Configurable parameters and their defaults
Parameters
Range of values
Default setting
Parameter assignment in RUN
Diagnostics · Missing supply voltage L+ Yes/No
No
Yes
· Overflow
Yes/No
No
Yes
· Underflow
Yes/No
No
Yes
· Common mode error
Yes/No
No
Yes
· Reference channel error Yes/No
No
Yes
· Wire break 1)
Yes/No
No
Yes
· Current limit for wire break 1.185 mA or 3.6 mA 1.185 mA Yes diagnostics 2)
Scope with configuration software, e.g., STEP 7 (TIA Portal)
GSD file
GSD file
PROFINET IO PROFIBUS DP
Channel 3) Channel Channel Channel Channel Channel Channel
Module 4) Module 4) Module 4) Module 4) Module 4) Module 4) --- 5)
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
24
Manual, 08/2018, A5E03484864-AE
Parameters/address space 4.2 Parameters
Parameters
Range of values
Default setting
Parameter assignment in RUN
Measuring · Measuring type · Measuring range
See chapter Meas- Voltage Yes
uring types and
ranges (Page 21)
±10 V
Yes
· Temperature coefficient · Temperature unit
Pt: 0.003851 Pt: 0.003902 Pt: 0.003916 Pt: 0.003920 Ni: 0.00618 Ni: 0.00672 LG-Ni: 0.005000
· Kelvin (K)
0.003851 Yes
°C
Yes
· Fahrenheit (°F)
· Celsius (°C)
· Interference frequency suppression
400 Hz 60 Hz
50 Hz
Yes
50 Hz
10 Hz
· Smoothing
None/low/medium/hi None
Yes
gh
· Reference junction for TC · Fixed reference Internal
Yes
temperature
reference
· Dynamic refer- junction
ence tempera-
ture
· Internal reference junction
· Reference channel of the module
· Fixed reference tempera- Temperature ture
25 °C
Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
GSD file
GSD file
PROFINET IO PROFIBUS DP
Channel Channel Channel
Channel Channel Channel
Channel
Module
Channel
Module
Channel Channel
Channel
Module 5) · Dynamic ref-
erence temperature · Internal reference junction
Channel
--- 5)
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
25
Parameters/address space 4.2 Parameters
Parameters
Range of values
Hardware interrupts · Hardware interrupt low
limit 1
· Hardware interrupt high limit 1
· Hardware interrupt low limit 2
· Hardware interrupt high limit 2
Yes/No Yes/No Yes/No Yes/No
Default setting
No
Parameter assignment in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
GSD file
GSD file
PROFINET IO PROFIBUS DP
Yes
Channel
--- 5)
No
Yes
Channel
--- 5)
No
Yes
Channel
--- 5)
No
Yes
Channel
--- 5)
1) Only for measurement type Resistance, Resistance Thermometer RTD: If "Wire break" diagnostics and "Value status" are deactivated, the module reports overflow or underflow (7FFFh or 8000h) in case of a wiring error. The alarm depends on whether the connected cables are faulty.
Recommendation: Activate the "Wire break" diagnostics. The active check for wire break reliably detects wiring errors and the module reports overflow (7FFFH).
2) When "Wire break" diagnostics is disabled, the current limit of 1.185 mA applies to the value status. For measured values below 1.185 mA, the value status is always: 0 = fault.
3) If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault.
You can prevent this message burst by assigning the diagnostics function to one channel only. 4) You can set the effective range of the diagnostics for each channel in the user program with data records 0 to 7. 5) You can set the current limit for wire break diagnostics, the setting "Fixed reference temperature" and "Reference chan-
nel of the module" as well as the limits for hardware interrupts in the user program with data records 0 to 7.
Parameters of the reference channel
You cannot configure the reference channel with GSD file. You have to transfer the reference channel to the module with data record 8.
If you want to change the default settings, you have to transfer the parameters to the module with data record 8, see chapter Parameter assignment and structure of the parameter data records (Page 54).
The diagnostics "Common mode error" and "Reference channel error" cannot be configured for the reference channel.
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
26
Manual, 08/2018, A5E03484864-AE
Parameters/address space 4.3 Declaration of parameters
4.3
Declaration of parameters
Missing supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Overflow
Enabling of the diagnostics if the measured value violates the high limit.
Underflow
Enabling of the diagnostics when the measured value violates the low limit.
Common mode error
Enabling of diagnostics if the valid common mode voltage is exceeded.
Enable the Common mode error diagnostics when 2WMT is connected, for example, to check for a short circuit to MANA or a wire break. If you do not need the Common mode error diagnostics, disable the parameter.
Reference channel error
Enable diagnostics for an error at the temperature compensation channel, e.g. wire break.
Dynamic reference temperature compensation type is configured and no reference temperature has been transferred to the module yet.
Wire break
Enabling of the diagnostics if the module has no current flow or the current is too weak for the measurement at the corresponding configured input or the applied voltage is too low.
Current limit for wire break diagnostics
Threshold for reporting wire breaks. The value can be set to 1.185 mA or 3.6 mA, depending on the sensor used.
Temperature coefficient
The temperature coefficient depends on the chemical composition of the material. In Europe, only one value is used per sensor type (default value).
The temperature coefficient ( value) indicates by how much the resistance of a specific material changes relatively if the temperature increases by 1 °C.
The further values facilitate a sensor-specific setting of the temperature coefficient and enhance accuracy.
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
27
Parameters/address space 4.3 Declaration of parameters
Interference frequency suppression
At analog input modules, this suppresses interference caused by the frequency of the AC network.
The frequency of the AC network may corrupt measurements, particularly in the low voltage ranges and when thermocouples are being used. For this parameter, the user defines the mains frequency prevailing on his system.
Smoothing
The individual measured values are smoothed using filtering. The smoothing can be set in 4 levels.
Smoothing time = number of module cycles (k) x cycle time of the module.
The following figure shows the number of module cycles after which the smoothed analog value is almost 100%, depending on the set smoothing. It is valid for each signal change at the analog input.
None (k = 1) Weak (k = 4) Medium (k = 16) Strong (k = 32)
Figure 4-3 Smoothing with AI 8xU/I/RTD/TC ST
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
28
Manual, 08/2018, A5E03484864-AE
Parameters/address space 4.3 Declaration of parameters
Reference junction for TC
The following settings can be configured for the reference junction parameter:
Table 4- 3 Possible parameter assignments for the reference junction parameter TC
Setting Fixed reference temperature Dynamic reference temperature
Internal reference junction Reference channel of the module
Description
The reference junction temperature is configured and stored in the module as a fixed value.
The reference junction temperature is transferred in the user program from the CPU to the module by data records 192 to 199 using the WRREC (SFB 53) instruction.
The reference junction temperature is determined using an integrated sensor of the module.
The reference junction temperature is determined using an external resistance thermometer (RTD) at the reference channel (COMP) of the module.
Hardware interrupt 1 or 2
Enabling of a hardware interrupt at violation of high limit 1 or 2 or low limit 1 or 2.
Low limit 1 or 2
Specifies the low limit threshold that triggers hardware interrupt 1 or 2.
High limit 1 or 2
Specifies the high limit threshold that triggers hardware interrupt 1 or 2.
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
29
Parameters/address space 4.4 Address space
4.4
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
Configuration options of AI 8xU/I/RTD/TC ST
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 4 Configuration options
Configuration
Short designation/
module name in the GSD file
1 x 8-channel without value status 1 x 8-channel with value status 8 x 1-channel without value status
AI 8xU/I/RTD/T C ST
AI 8xU/I/RTD/T C ST QI
AI 8xU/I/RTD/T C ST S
8 x 1-channel with value status
AI 8xU/I/RTD/T C ST S QI
1 x 8-channel with value status for module- AI 8xU/I/RTD/T internal shared input with up to 4 submod- C ST MSI ules
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog STEP 7 (TIA Portal)
V12 or higher
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5
SP3 or higher
X
V12 or higher
X
V13 Update 3 or higher (PROFINET IO only)
V13 Update 3 or higher (PROFINET IO only)
V13 Update 3 or higher (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names: AI 8xU/I/RTD/TC ST QI AI 8xU/I/RTD/TC ST S QI AI 8xU/I/RTD/TC ST MSI An additional bit is assigned to each channel for the value status. The value status bit indicates if the read in digital value is valid. (0 = value is incorrect).
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
30
Manual, 08/2018, A5E03484864-AE
Parameters/address space 4.4 Address space
Address space of AI 8xU/I/RTD/TC ST
The following figure shows the address space allocation for the configuration as 8-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "IB x" stands, for example, for the module start address input byte x.
Figure 4-4 Address space for configuration as 1 x 8-channel AI 8xU/I/RTD/TC ST with value status
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
31
Parameters/address space 4.4 Address space
Address space for configuration as 8 x 1-channel AI 8xU/I/RTD/TC ST QI
For the configuration as a 8 x 1-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Observe the information in the manual for the particular interface module. Contrary to the 1 x 8-channel module configuration, each of the eight submodules has a freely assignable start address.
Figure 4-5 Address space for configuration as 8 x 1-channel AI 8xU/I/RTD/TC ST S QI with value status
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
32
Manual, 08/2018, A5E03484864-AE
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 8-channel AI 8xU/I/RTD/TC ST MSI
The channels 0 to 7 of the module are copied in up to four submodules with configuration 1 x 8-channel module (Module-internal shared input, MSI). Channels 0 to 7 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels.
The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI)
The meaning of the value status depends on the submodule on which it occurs.
For the 1st submodule (= basic submodule), the value status 0 indicates that the value is incorrect.
For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
33
Parameters/address space 4.4 Address space
The figure below shows the assignment of the address space with submodules 1 and 2.
Figure 4-6 Address space for configuration as 1 x 8-channel AI 8xU/I/RTD/TC ST MSI with value status
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
34
Manual, 08/2018, A5E03484864-AE
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodule 3 and 4.
Reference
Figure 4-7 Address space for configuration as 1 x 8-channel AI 8xU/I/RTD/TC ST MSI with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
35
Interrupts/diagnostics alarms
5.1
Status and error displays
LED displays
The following figure shows the LED displays (status and error displays) of AI 8xU/I/RTD/TC ST.
5
Figure 5-1 LED displays of the module AI 8xU/I/RTD/TC ST
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
36
Manual, 08/2018, A5E03484864-AE
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in section Diagnostic alarms.
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LEDs RUN ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured.
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are insert-
ed. ---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
PWR LED
Table 5- 2 PWR status display
LED PWR Off On
Meaning Supply voltage L+ to module too low or missing
Supply voltage L+ is present and OK.
Remedy Check supply voltage L+.
---
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
37
Interrupts/diagnostics alarms 5.1 Status and error displays
CHx and COMP LED
Table 5- 3 CHx and COMP status indication
LED CHx/COMP Off On On
Meaning Channel disabled
Channel configured and OK.
Channel is configured (channel error pending). Diagnostic alarm: e.g. wire break
Remedy ---
---
Check the wiring. Disable diagnostics.
See also
Diagnostics alarms (Page 41)
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
38
Manual, 08/2018, A5E03484864-AE
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
Analog input module AI 8xU/I/RTD/TC ST supports the following diagnostic and hardware interrupts.
You can find detailed information on the event in the error organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: Missing supply voltage L+ Wire break Overflow Underflow Common mode error Reference channel error Parameter assignment error
Hardware interrupt
The module generates a hardware interrupt at the following events:
Low limit violated 1
High limit violated 1
Low limit violated 2
Above high limit 2
The module channel that triggered the hardware interrupt is entered in the start information of the organization block. The diagram below shows the assignment to the bits of double word 8 in local data.
Figure 5-2 OB start information
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
39
Interrupts/diagnostics alarms 5.2 Interrupts
Reaction when reaching limits 1 and 2 at the same time
If the two high limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for high limit 1 first. The configured value for high limit 2 is irrelevant. After processing the hardware interrupt for high limit 1, the module triggers the hardware interrupt for high limit 2.
The module has the same reaction when the low limits are reached at the same time. If the two low limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for low limit 1 first. After processing the hardware interrupt for low limit 1, the module triggers the hardware interrupt for low limit 2.
Structure of the additional interrupt information
Table 5- 4 Structure of USI = W#16#0001
Data block name
Contents
USI (User Structure Identifier)
W#16#0001
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#n
The event that triggered the hardware interrupt follows.
Event
B#16#03
B#16#04
B#16#05
B#16#06
Remark
Additional interrupt info for hardware interrupts of the I/O module
Bytes 2
Number of the event-triggering channel (n = 1 number of module channels -1)
Low limit violated 1
1
High limit violated 1
Low limit violated 2
Violation of high limit 2
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
40
Manual, 08/2018, A5E03484864-AE
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes on the module for each diagnostics event. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 5 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Wire break
Error code
6H
Overflow
7H
Underflow
8H
Parameter assignment 10H error
Load voltage missing 11H
Reference channel
15H
error
Common mode error 118H
Meaning
Solution
Impedance of encoder circuit too high
Wire break between the module and sensor Channel not connected (open)
Use a different encoder type or modify the wiring, for example, using cables with larger cross-section Connect the cable
· Disable diagnostics · Connect the channel
Measuring range violated Measuring range violated
· The module cannot evaluate parameters for the channel
· Incorrect parameter assignment
Check the measuring range Check the measuring range Correct the parameter assignment
Supply voltage L+ of the module is missing Connect supply voltage L+ to module/channel
Invalid reference temperature for the used TC channel with compensation
Check the resistance thermometer. For the compensation with data record, restore communication to the module/station.
Valid common mode voltage exceeded Causes when a 2WT is connected, e.g.:
Check the wiring, e.g. sensor ground connections, use equipotential cables
· Wire break · Galvanic connection to MANA
Diagnostics alarms with value status (QI)
If you configure the module with value status (QI), the module always checks all errors even if the respective diagnostics is not enabled. But the module cancels the inspection as soon as it detects the first error, regardless if the respective diagnostics has been enabled or not. The result may be that enabled diagnostics may not be displayed.
Example: You have enabled "Underflow" diagnostics, but the module detects the "Wire break" diagnostics first and aborts after this error message. The "Underflow" diagnostics is not detected.
Recommendation: To ensure that all errors can be diagnosed reliably, select all check boxes under "Diagnostics".
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
41
Technical specifications
6
Technical specifications of the AI 8xU/I/RTD/TC ST
The following table shows the technical specifications as of 08/2018. You will find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7531-7KF00-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version · FW update possible
Product function · I&M data
· Measuring range scalable
· Scalable measured values
· Adjustment of measuring range
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Operating mode · Oversampling
· MSI
CiR Configuration in RUN Reparameterization possible in RUN Calibration possible in RUN
Supply voltage Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
6ES7531-7KF00-0AB0
AI 8xU/I/RTD/TC ST FS04 V2.0.0 Yes
Yes; I&M0 to I&M3 No No No
V12 / V12
V5.5 SP3 / -
V1.0 / V5.1
V2.3 / -
No Yes
Yes Yes
24 V 20.4 V 28.8 V Yes
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
42
Technical specifications
Article number Input current
Current consumption, max. Encoder supply 24 V encoder supply
· Short-circuit protection
· Output current, max.
Power Power available from the backplane bus
Power loss Power loss, typ.
Analog inputs Number of analog inputs · For current measurement
· For voltage measurement
· For resistance/resistance thermometer measurement
· For thermocouple measurement permissible input voltage for voltage input (destruction limit), max. permissible input current for current input (destruction limit), max. Constant measurement current for resistancetype transmitter, typ.
Technical unit for temperature measurement adjustable
6ES7531-7KF00-0AB0
240 mA; with 24 V DC supply
Yes 20 mA; Max. 47 mA per channel for a duration < 10 s
0.7 W
2.7 W
8 8 8 4
8 28.8 V
40 mA
150 Ohm, 300 Ohm, 600 Ohm, Pt100, Pt200, Ni100: 1.25 mA; 6 000 Ohm, Pt500, Pt1000, Ni1000, LG-Ni1000: 0.625 mA; PTC: 0.472 mA Yes; °C/°F/K
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
43
Technical specifications
Article number Input ranges (rated values), voltages
· 0 to +5 V · 0 to +10 V · 1 V to 5 V · Input resistance (1 V to 5 V) · -1 V to +1 V · Input resistance (-1 V to +1 V) · -10 V to +10 V · Input resistance (-10 V to +10 V) · -2.5 V to +2.5 V · Input resistance (-2.5 V to +2.5 V) · -25 mV to +25 mV · -250 mV to +250 mV · Input resistance (-250 mV to +250 mV) · -5 V to +5 V · Input resistance (-5 V to +5 V) · -50 mV to +50 mV · Input resistance (-50 mV to +50 mV) · -500 mV to +500 mV · Input resistance (-500 mV to +500 mV) · -80 mV to +80 mV · Input resistance (-80 mV to +80 mV) Input ranges (rated values), currents · 0 to 20 mA · Input resistance (0 to 20 mA)
· -20 mA to +20 mA · Input resistance (-20 mA to +20 mA)
· 4 mA to 20 mA · Input resistance (4 mA to 20 mA)
6ES7531-7KF00-0AB0
No No Yes 100 k Yes 10 M Yes 100 k Yes 10 M No Yes 10 M Yes 100 k Yes 10 M Yes 10 M Yes 10 M
Yes 25 ; Plus approx. 42 ohms for overvoltage protection by PTC Yes 25 ; Plus approx. 42 ohms for overvoltage protection by PTC Yes 25 ; Plus approx. 42 ohms for overvoltage protection by PTC
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
44
Manual, 08/2018, A5E03484864-AE
Article number Input ranges (rated values), thermocouples
· Type B · Input resistance (Type B) · Type C · Type E · Input resistance (Type E) · Type J · Input resistance (type J) · Type K · Input resistance (Type K) · Type L · Type N · Input resistance (Type N) · Type R · Input resistance (Type R) · Type S · Input resistance (Type S) · Type T · Input resistance (Type T) · Type TXK/TXK(L) to GOST
6ES7531-7KF00-0AB0
Yes 10 M No Yes 10 M Yes 10 M Yes 10 M No Yes 10 M Yes 10 M Yes 10 M Yes 10 M No
Technical specifications
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
45
Technical specifications
Article number
6ES7531-7KF00-0AB0
Input ranges (rated values), resistance thermometer
· Cu 10
No
· Cu 10 according to GOST
No
· Cu 50
No
· Cu 50 according to GOST
No
· Cu 100
No
· Cu 100 according to GOST
No
· Ni 10
No
· Ni 10 according to GOST
No
· Ni 100
Yes; Standard/climate
· Input resistance (Ni 100)
10 M
· Ni 100 according to GOST
No
· Ni 1000
Yes; Standard/climate
· Input resistance (Ni 1000)
10 M
· Ni 1000 according to GOST
No
· LG-Ni 1000
Yes; Standard/climate
· Input resistance (LG-Ni 1000)
10 M
· Ni 120
No
· Ni 120 according to GOST
No
· Ni 200 according to GOST
No
· Ni 500
No
· Ni 500 according to GOST
No
· Pt 10
No
· Pt 10 according to GOST
No
· Pt 50
No
· Pt 50 according to GOST
No
· Pt 100
Yes; Standard/climate
· Input resistance (Pt 100)
10 M
· Pt 100 according to GOST
No
· Pt 1000
Yes; Standard/climate
· Input resistance (Pt 1000)
10 M
· Pt 1000 according to GOST
No
· Pt 200
Yes; Standard/climate
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
46
Manual, 08/2018, A5E03484864-AE
Technical specifications
Article number · Input resistance (Pt 200)
6ES7531-7KF00-0AB0 10 M
· Pt 200 according to GOST
No
· Pt 500
Yes; Standard/climate
· Input resistance (Pt 500)
10 M
· Pt 500 according to GOST
No
Input ranges (rated values), resistors
· 0 to 150 ohms
Yes
· Input resistance (0 to 150 ohms)
10 M
· 0 to 300 ohms
Yes
· Input resistance (0 to 300 ohms)
10 M
· 0 to 600 ohms
Yes
· Input resistance (0 to 600 ohms)
10 M
· 0 to 3000 ohms
No
· 0 to 6000 ohms
Yes
· Input resistance (0 to 6000 ohms)
10 M
· PTC
Yes
· Input resistance (PTC)
10 M
Thermocouple (TC)
Temperature compensation
parameterizable
Yes
internal temperature compensation
Yes
external temperature compensation via Yes RTD
Compensation for 0 °C reference point Yes; fixed value can be set temperature
Reference channel of the module
Yes
Cable length · shielded, max.
800 m; for U/I, 200 m for R/RTD, 50 m for TC
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
47
Technical specifications
Article number Analog value generation for the inputs Integration and conversion time/resolution per channel
· Resolution with overrange (bit including sign), max.
6ES7531-7KF00-0AB0 16 bit
· Integration time, parameterizable
Yes
· Integration time (ms)
2,5 / 16,67 / 20 / 100 ms
· Basic conversion time, including integration 9 / 23 / 27 / 107 ms time (ms)
additional conversion time for wirebreak monitoring
9 ms (to be considered in R/RTD/TC measurement)
additional conversion time for resistance measurement
· Interference voltage suppression for interference frequency f1 in Hz
150 ohm, 300 ohm, 600 ohm, Pt100, Pt200, Ni100: 2 ms, 6000 ohm, Pt500, Pt1000, Ni1000, LG-Ni1000, PTC: 4 ms
400 / 60 / 50 / 10 Hz
· Time for offset calibration (per module)
Basic conversion time of the slowest channel
Smoothing of measured values
· parameterizable
Yes
· Step: None
Yes
· Step: low
Yes
· Step: Medium
Yes
· Step: High
Yes
Encoder
Connection of signal encoders
· for voltage measurement
Yes
· for current measurement as 2-wire trans- Yes ducer
Burden of 2-wire transmitter, max.
820
· for current measurement as 4-wire trans- Yes ducer
· for resistance measurement with two-wire Yes; Only for PTC connection
· for resistance measurement with three-wire Yes; All measuring ranges except PTC; internal
connection
compensation of the cable resistances
· for resistance measurement with four-wire Yes; All measuring ranges except PTC connection
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
48
Manual, 08/2018, A5E03484864-AE
Technical specifications
Article number
6ES7531-7KF00-0AB0
Errors/accuracies
Linearity error (relative to input range), (+/-) 0.02 %
Temperature error (relative to input range), (+/- 0.005 %/K; With TC type T 0.02 ± % / K )
Crosstalk between the inputs, max.
-80 dB
Repeat accuracy in steady state at 25 °C (rela- 0.02 % tive to input range), (+/-)
Temperature error of internal compensation ±6 °C
Operational error limit in overall temperature range
· Voltage, relative to input range, (+/-)
0.3 %
· Current, relative to input range, (+/-)
0.3 %
· Resistance, relative to input range, (+/-)
0.3 %
· Resistance thermometer, relative to input range, (+/-)
Ptxxx standard: ±1.5 K, Ptxxx climate: ±0.5 K, Nixxx standard: ±0.5 K, Nixxx climate: ±0.3 K
· Thermocouple, relative to input range, (+/-)
Basic error limit (operational limit at 25 °C) · Voltage, relative to input range, (+/-)
Type B: > 600 °C ±4.6 K, type E: > -200 °C ±1.5 K, type J: > -210 °C ±1.9 K, type K: > -200 °C ±2.4 K, type N: > -200 °C ±2.9 K, type R: > 0 °C ±4.7 K, type S: > 0 °C ±4.6 K, type T: > -200 °C ±2.4 K
0.1 %
· Current, relative to input range, (+/-)
0.1 %
· Resistance, relative to input range, (+/-)
0.1 %
· Resistance thermometer, relative to input range, (+/-)
Ptxxx standard: ±0.7 K, Ptxxx climate: ±0.2 K, Nixxx standard: ±0.3 K, Nixxx climate: ±0.15 K
· Thermocouple, relative to input range, (+/-)
Interference voltage suppression for f = n x (f1 +/1 %), f1 = interference frequency
· Series mode interference (peak value of interference < rated value of input range), min.
Type B: > 600 °C ±1.7 K, type E: > -200 °C ±0.7 K, type J: > -210 °C ±0.8 K, type K: > -200 °C ±1.2 K, type N: > -200 °C ±1.2 K, type R: > 0 °C ±1.9 K, type S: > 0 °C ±1.9 K, type T: > -200 °C ±0.8 K
40 dB
· Common mode voltage, max.
10 V
· Common mode interference, min.
60 dB
Isochronous mode
Isochronous operation (application synchro- No nized up to terminal)
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
49
Technical specifications
Article number Interrupts/diagnostics/status information
Diagnostics function Alarms
· Diagnostic alarm
· Limit value alarm
Diagnostic messages · Monitoring the supply voltage
· Wire-break
· Overflow/underflow Diagnostics indication LED
· RUN LED
· ERROR LED
· Monitoring of the supply voltage (PWRLED)
· Channel status display
· for channel diagnostics
· for module diagnostics Potential separation Potential separation channels
· between the channels
· between the channels, in groups of
· between the channels and backplane bus
· between the channels and the power supply of the electronics
Permissible potential difference between the inputs (UCM) Between the inputs and MANA (UCM)
Isolation Isolation tested with
Standards, approvals, certificates Suitable for applications according to AMS 2750 Suitable for applications according to CQI-9
6ES7531-7KF00-0AB0
Yes
Yes Yes; two upper and two lower limit values in each case
Yes Yes; Only for 1 to 5 V, 4 to 20 mA, TC, R, and RTD Yes
Yes; Green LED Yes; Red LED Yes; Green LED
Yes; Green LED Yes; Red LED Yes; Red LED
No 8 Yes Yes
20 V DC 10 V DC
707 V DC (type test)
Yes; Declaration of Conformity, see online support entry 109757262 Yes; Based on AMS 2750 E
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
50
Manual, 08/2018, A5E03484864-AE
Article number Ambient conditions Ambient temperature during operation
· horizontal installation, min.
· horizontal installation, max.
· vertical installation, min.
· vertical installation, max.
Decentralized operation Prioritized startup
Dimensions Width Height Depth
Weights Weight, approx.
Other Note:
Technical specifications
6ES7531-7KF00-0AB0
0 °C 60 °C 0 °C 40 °C
No
35 mm 147 mm 129 mm
310 g
Additional basic error and noise for integration time = 2.5 ms: Voltage: ±250 mV (±0.02%), ±80 mV (±0.05%), ±50 mV (±0.05%); resistance: 150 ohms ±0.02%; resistance thermometer: Pt100 climate: ±0.08 K, Ni100 climate: ±0.08 K; thermocouple: Type B, R, S: ±3 K, type E, J, K, N, T: ±1 K
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
51
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel are provided in the appendix. Always adhere to the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the AI 8xU/I/RTD/TC ST module
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
52
Dimensional drawing
Figure A-2 Dimensional drawing of the AI 8xU/I/RTD/TC ST module, side view with open front panel
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
53
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Current limit for wire break Wire break
Common mode error Reference channel error Measuring type resistance (4-wire connection, 3-wire connection) Measuring type resistance (4-wire connection, 3-wire connection, 2-wire connection) Measuring type thermal resistor RTD (4-wire connection, 3-wire connection) Hardware interrupt limits Fixed reference temperature
Temperature unit Kelvin (K)
Dependent parameters Only for measuring type current with measuring range 4 mA to 20 mA. Only for measuring type resistance, thermal resistor RTD, thermocouple TC, voltage with measuring range 1V to 5 V and current with measuring range 4 mA to 20 mA. Only for measuring type voltage, current and thermocouple TC. Only for measuring type thermocouple TC. Only for measuring range 150 , 300 , 600 and 6000 .
Configurable for even channels (0, 2, 4 and 6) only. The following odd channel (1, 3, 5, 7) must be deactivated.
Only if hardware interrupts are enabled. Only if the value Fixed reference temperature is configured at parameter Reference junction for TC. Only for measuring type thermal resistor RTD and for thermocouple TC.
Parameter assignment in the user program
The module parameters can be assigned in RUN (for example, measuring ranges of selected channels can be edited in RUN without having an effect on the other channels).
Parameter assignment in RUN
Instruction WRREC is used to transfer the parameters by means of data records 0 to 7 and 8. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer to the module.
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
54
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter. The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You obtain the diagnostics data records 0 and 1 with the read back parameter data records 0 and 1. You can find additional information in the Interrupts section of the manual for the PROFIBUS DP interface module on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Assignment of data record and channel
The parameters in data records 0 to 7 and in data record 8 are available for 1x 8-channel configuration and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 ... Data record 6 for channel 6 Data record 7 for channel 7 Data record 8 for the reference channel (COMP) For configuration 8 x 1-channel, the module has 8 submodules with one channel each and one submodule for the reference channel. The parameters for the channel are available in data record 0 and are assigned as follows: Data record 0 for channel 0 (submodule 1) Data record 0 for channel 1 (submodule 2) ... Data record 0 for channel 6 (submodule 7) Data record 0 for channel 7 (submodule 8) Data record 0 for the reference channel (COMP) (submodule 9) Address the respective submodule for data record transfer.
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
55
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Data record structure
The figure below shows the structure of data record 0 for channel 0 as an example. The structure is identical for channels 1 to 7. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Bytes 0 to 6
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
56
Manual, 08/2018, A5E03484864-AE
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Figure B-2 Structure of data record 0: Bytes 7 to 27
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
57
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Structure of data record 8, reference channel (COMP) of the module
The reference channel compensates the measured value for channels 0 to 7. The figure below shows the structure of data record 8. Enable a parameter by setting the corresponding bit to "1".
Figure B-3 Structure of data record 8, reference channel of the module: Bytes 0 to 27
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
58
Manual, 08/2018, A5E03484864-AE
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Codes for measurement types
The following table lists all measurement types of the analog input module along with their codes. Enter these codes at byte 2 of the data record for the corresponding channel (see the figure Structure of data record 0: Bytes 7 to 27).
Table B- 2 Code for the measurement type
Measurement type Deactivated Voltage Current, 2-wire transmitter Current, 4-wire transmitter Resistance, 4-wire connection *) **) Resistance, 3-wire connection *) **) Resistance, 2-wire connection *) ***) Thermal resistor linear, 4-wire connection *) Thermal resistor linear, 3-wire connection *) Thermocouple
Code 0000 0000 0000 0001 0000 0011 0000 0010 0000 0100 0000 0101 0000 0110 0000 0111 0000 1000 0000 1010
*) only possible for channels 0, 2, 4 and 6 **) only for the following measuring ranges: 150 , 300 , 600 , 6 k ***) only for measuring range PTC
Special feature for configuration
If you configure one of the following measuring types at one of the channels 0, 2, 4 and 6: Resistance, 4-wire connection Resistance, 3-wire connection Resistance, 2-wire connection Thermal resistor linear, 4-wire connection Thermal resistor linear, 3-wire connection then one of the following channels must be disabled. Example: You have configured "Resistance, 4-wire connection" at channel 0; channel 1 must be disabled. You have configured "Resistance, 2-wire connection" at channel 2; channel 3 must be disabled.
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
59
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Codes for measuring ranges
The following table lists all measuring ranges of the analog input module along with their codes. Enter these codes accordingly at byte 3 of the data record for the corresponding channel (see the figure Structure of data record 0: Bytes 7 to 27).
Table B- 3 Code for the measuring range
Measuring range Voltage ±50 mV ±80 mV ±250 mV ±500 mV ±1 V ±2.5 V ±5 V ±10 V 1 V to 5 V Current, 4-wire transmitter 0 mA to 20 mA 4 mA to 20 mA ±20 mA Current, 2-wire transmitter 4 mA to 20 mA Resistor 150 300 600 6 k PTC
Code
0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0111 0000 1000 0000 1001 0000 1010
0000 0010 0000 0011 0000 0100
0000 0011
0000 0001 0000 0010 0000 0011 0000 0101 0000 1111
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
60
Manual, 08/2018, A5E03484864-AE
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Thermal resistor Pt100 Climate Ni100 Climate Pt100 standard Ni100 standard Pt500 standard Pt1000 standard Ni1000 standard Pt200 Climate Pt500 Climate Pt1000 Climate Ni1000 Climate Pt200 standard LG-Ni1000 standard LG-Ni1000 Climate Thermocouple B N E R S J T K
0000 0000 0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0110 0000 0111 0000 1000 0000 1001 0000 1010 0000 1011 0001 1100 0001 1101
0000 0000 0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0111 0000 1000
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
61
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Codes for measuring ranges, reference channel (COMP) of the module
The following table lists all measuring ranges along with their codes for the reference channel (COMP). Enter these codes in byte 3 of data record 8 (see figure Structure of data record 8, reference channel of the module: Bytes 0 to 27).
Table B- 4 Code for the measuring range, reference channel (COMP)
Measuring range Thermal resistor Pt100 Climate Ni100 Climate Pt100 standard Ni100 standard Pt500 standard Pt1000 standard Ni1000 standard Pt200 Climate Pt500 Climate Pt1000 Climate Ni1000 Climate Pt200 standard LG-Ni1000 standard LG-Ni1000 Climate
Code
0000 0000 0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0110 0000 0111 0000 1000 0000 1001 0000 1010 0000 1011 0001 1100 0001 1101
Codes for temperature coefficients
The following table lists all temperature coefficients along with their codes for temperature measurements with the thermal resistors. You need to enter these codes in
byte 4 of data record 8 (see figure, Structure of data record 8, reference channel of the module: bytes 0 to 27) and
byte 4 of data records 0, 2, 4, 6 and 8 (see figure, Structure of data record 0: Bytes 0 to 6)
Table B- 5 Codes for temperature coefficient
Temperature coefficient Pt xxx 0.003851 0.003916 0.003902 0.003920 Ni xxx 0.006180 0.006720 LG-Ni 0.005000
Code
0000 0000 0000 0001 0000 0010 0000 0011
0000 1000 0000 1001
0000 1010
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
62
Manual, 08/2018, A5E03484864-AE
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Valid values for fixed reference temperatures
The values that you can set for fixed reference temperatures must be in the valid range of values. The resolution is a tenth of a degree.
Table B- 6 Valid values for fixed reference temperatures
Temperature unit Celsius (default) Fahrenheit (default) Kelvin (default)
Decimal -1450 to 1550 -2290 to 3110 1282 to 3276
Hexadecimal FA56H to 60EH F70EH to CCCH 502H to 10BAH
Hardware interrupt limits
The values that you can set for hardware interrupts (high/low limit) must not violate the over/underrange of the respective rated measuring range.
The following tables list the valid hardware interrupt limits. The limits depend on the selected measurement type and measuring range.
Table B- 7 Voltage limits
Voltage ±50 mV, ±80 mV, ±250 mV, ±500 mV, ±1 V, ±2.5 V, ±5 V, ±10 V 32510
-32511
1 V to 5 V
32510 -4863
High limit Low limit
Table B- 8 Current and resistance limits
Current ±20 mA
32510 -32511
4 mA to 20 mA / 0 mA to 20 mA
32510
-4863
Resistor (all configurable measuring ranges)
32510 1
High limit Low limit
Table B- 9 Limits for thermocouple types B, C, E, and J
Thermocouple
Type B
°C
°F
K
20699 32765 23431
1
321 2733
°C 11999 -2699
Type E
°F
K
21919 14731
-4539 33
°C 14499 -2099
Type J °F
26419 -3459
K 17231
633
High limit Low limit
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
63
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Table B- 10 Limits for thermocouples type K, N, R, and S
Thermocouple
Type K
°C
°F
16219 29515
-2699 -4539
K 18951
33
°C 15499 -2699
Type N
°F
K
28219 18231
-4539 33
Types R, S
°C
°F
K
20189 32765 22921
-1699 -2739 1033
High limit Low limit
Table B- 11 Limits for thermocouple type T
Thermocouple
Type T
°C
°F
5399 10039
-2699 -4539
K 8131
33
High limit Low limit
Table B- 12 Limits for thermal resistor Pt xxx Standard and Pt xxx Climatic
Thermal resistor
Pt xxx Standard
°C
°F
K
9999
18319
12731
-2429
-4053
303
°C 15499 -14499
Pt xxx Climate
°F
K
31099
---
-22899
---
High limit Low limit
Table B- 13 Limits for thermal resistor Ni xxx Standard and Ni xxx Climatic
Thermal resistor
Ni xxx Standard
°C
°F
K
2949
5629
5681
-1049
-1569
1683
°C 15499 -10499
Ni xxx Climate
°F
K
31099
---
-15699
---
High limit Low limit
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
64
Manual, 08/2018, A5E03484864-AE
Parameter data records B.2 Structure of a data record for dynamic reference temperature
B.2
Structure of a data record for dynamic reference temperature
The WRREC instruction is used to transfer the reference junction temperature via data record 192 to data record 199 to the module.
The description of the WRREC instruction can be found in the online help from STEP 7.
If you have set the "Dynamic reference temperature" value for the "Reference junction" parameter, the module expects a new data record at least every 5 minutes. If the module does not receive a new data record within this time, it generates the "Reference channel error" diagnostics message.
Assignment of data record and channel
The following assignment applies if no submodules (1 x 8-channel) are configured for the module: Data record 192 for channel 0 Data record 193 for channel 1 Data record 194 for channel 2 Data record 195 for channel 3 Data record 196 for channel 4 Data record 197 for channel 5 Data record 198 for channel 6 Data record 199 for channel 7 If eight submodules (8 x 1-channel) are configured for the module, each submodule has only one channel. The parameters of the channel are in data record 192. Background: Each submodule you address for the data record transfer has only one channel.
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
65
Parameter data records B.2 Structure of a data record for dynamic reference temperature
Structure of data record 192 for dynamic reference temperature
The following figure shows an example of the structure of data record 192 for channel 0. The structure for data records 193 to 199 is identical.
Figure B-4 Structure of data record 192
Valid values for fixed temperature compensation
You can enter the selectable values at byte 1 of the data record for the corresponding channel. The selectable values must lie within the permitted value range, see following table. The resolution is a tenth of a degree.
Table B- 14 Valid values for temperature compensation via data record
Temperature unit Celsius (default) Fahrenheit (default) Kelvin (default) Celsius (climatic) Fahrenheit (climatic) Kelvin (climatic)
Decimal -1450 to 1550 -2290 to 3110 1282 to 3276 -14500 to 15500 -22900 to 31100 12820 to 32760
Hexadecimal FA56H to 60EH F70EH to C26H 502H to CCCH C75CH to 3C8CH A68CH to 797CH 3214H to 7FF8H
Additional information
For more information on compensation of the reference junction temperature via data record refer to the Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094) function manual in the internet.
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
66
Manual, 08/2018, A5E03484864-AE
Representation of analog values
C
Introduction
This chapter shows the analog values for all measuring ranges supported by the AI 8xU/I/RTD/TC ST analog module.
Measured value resolution
Each analog value is written left aligned to the tags. The bits marked with "x" are set to "0".
Note This resolution does not apply to temperature values. The digitalized temperature values are the result of a conversion in the analog module.
Table C- 1 Resolution of the analog values
Resolution in bits including sign
16
Values
Decimal 1
Hexadecimal 1H
Analog value
High byte
Low byte
Sign 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
67
Manual, 08/2018, A5E03484864-AE
Representation of analog values C.1 Representation of input ranges
C.1
Representation of input ranges
The following tables set out the digitalized representation of the input ranges by bipolar and unipolar range. The resolution is 16 bits.
Table C- 2 Bipolar input ranges
Dec. value
Measured value in %
32767 32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 <-117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0000000001 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Rated range 1 1 1 1 1 1 1111111111 1 0 0 1 0 1 0000000000 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Table C- 3 Unipolar input ranges
Dec. value
Measured value in %
32767 32511 27649 27648 1 0 -1 -4864 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -17.593 <-17.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 Rated range 0 0 0 0 0 0 0000000000 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Undershoot 1 1 1 0 1 1 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
68
Manual, 08/2018, A5E03484864-AE
C.2
Representation of analog values C.2 Representation of analog values in voltage measuring ranges
Representation of analog values in voltage measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible voltage measuring ranges.
Table C- 4 Voltage measuring ranges ±10 V, ±5 V, ±2.5 V, ±1 V,
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±10 V
±5 V
>11.759 V >5.879 V
11.759 V 5.879 V
±2.5 V >2.940 V 2.940 V
±1 V > 1.176 V 1.176 V
Range
Overflow Overshoot range
10 V 7.5 V 361.7 µV 0 V
5 V 3.75 V 180.8 µV 0 V
2.5 V 1.875 V 90.4 µV 0 V
1 V 0.75 V 36.17 µV 0 V
Rated range
-7.5 V -10 V
-3.75 V -5 V
-11.759 V -5.879 V < -11.759 V < -5.879 V
-1.875 V -2.5 V
-2.940 V < -2.940 V
-0.75 V -1 V
-1.176 V < -1.176 V
Undershoot range
Underflow
Table C- 5 Voltage measuring ranges ±500 mV, ±250 mV, ±80 mV, and ±50 mV,
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±500 mV
±250 mV
>587.9 mV > 294.0 mV
587.9 mV 294.0 mV
±80 mV > 94.1 mV 94.1 mV
±50 mV > 58.8 mV 58.8 mV
Range
Overflow Overshoot range
500 mV 375 mV 18.08 µV 0 mV
250 mV 187.5 mV 9.04 µV 0 mV
80 mV 60 mV 2.89 µV 0 mV
50 mV 37.5 mA 1.81 µV 0 mV
Rated range
-375 mV -500 mV
-187.5 mV -250 mV
-60 mV -80 mV
-587.9 mV -294.0 mV -94.1 mV <-587.9 mV < -294.0 mV < -94.1 mV
-37.5 mV -50 mV
-58.8 mV < -58.8 mV
Undershoot range
Underflow
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
69
Representation of analog values C.2 Representation of analog values in voltage measuring ranges
Table C- 6 Voltage measuring range 1 to 5 V
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Voltage measuring range 1 to 5 V >5.704 V 5.704 V
5 V 4 V 1 V + 144.7 µV 1 V
0.296 V < 0.296 V
Range Overflow Overshoot range Rated range
Undershoot range Underflow
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
70
Manual, 08/2018, A5E03484864-AE
C.3
Representation of analog values C.3 Representation of analog values in the current measuring ranges
Representation of analog values in the current measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible current measuring ranges.
Table C- 7 Current measuring range ±20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Current measuring range ±20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-15 mA -20 mA
-23.52 mA < -23.52 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
Table C- 8 Current measuring ranges 0 to 20 mA and 4 to 20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Current measuring range 0 to 20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-3.52 mA <- 3.52 mA
4 to 20 mA >22.81 mA 22.81 mA
20 mA 16 mA 4 mA + 578.7 nA 4 mA
1.185 mA < 1.185 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
71
Representation of analog values C.4 Representation of the analog values of resistance-based sensors/resistance thermometers
C.4
Representation of the analog values of resistance-based
sensors/resistance thermometers
The following tables list the decimal and hexadecimal values (codes) of the possible resistance-based sensor ranges.
Table C- 9 Resistance-based sensors of 150 , 300 , 600 , and 6000
Values dec 32767 32511 27649 27648 20736 1 0
hex 7FFF 7EFF 6C01 6C00 5100 1 0
Resistive transmitter range
150
300
>176.38
>352.77
176.38
352.77
150 112.5 5.43 m 0
300 225 10.85 m 0
600 >705.53 705.53
600 450 21.70 m 0
6000 >7055.3 7055.3
6000 4500 217 m 0
Overflow Overshoot range
Rated range
The following tables list the decimal and hexadecimal values (codes) of the supported resistance thermometers.
Table C- 10 Thermal resistors Pt 100, Pt 200, Pt 500 and Pt 1000 Standard
Pt x00 Standard in °C (1 digit = 0.1°C) > 1000.0 1000.0 : 850.1 850.0 : -200.0 -200.1 : -243.0 < -243.0
Values dec
32767 10000 : 8501 8500 : -2000 -2001 : -2430 -32768
hex
7FFF 2710 : 2135 2134 : F830 F82F : F682 8000
Pt x00 Standard in °F (1 digit = 0.1 °F) > 1832.0 1832.0 : 1562.1 1562.0 : -328.0 -328.1 : -405.4 < -405.4
Values dec
32767 18320 : 15621 15620 : -3280 -3281 : -4054 -32768
hex
7FFF 4790 : 3D05 3D04 : F330 F32F : F02A 8000
Pt x00 Standard in K (1 digit = 0.1 K) > 1273.2 1273.2 : 1123.3 1123.2 : 73.2 73.1 : 30.2 < 30.2
Values dec
32767 12732 : 11233 11232 : 732 731 : 302 32768
hex
7FFF 31BC : 2BE1 2BE0 : 2DC 2DB : 12E 8000
Range
Overflow Overshoot range Rated range
Undershoot range Underflow
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
72
Manual, 08/2018, A5E03484864-AE
Representation of analog values C.4 Representation of the analog values of resistance-based sensors/resistance thermometers
Table C- 11 Thermal resistors Pt 100, Pt 200, Pt 500 and Pt 1000 Climate
Pt x00 Climate/ in °C (1 digit = 0.01 °C) > 155.00 155.00 : 130.01 130.00 : -120.00 -120.01 : -145.00 < -145.00
Values dec
32767 15500 : 13001 13000 : -12000 -12001 : -14500 -32768
hex
7FFF 3C8C : 32C9 32C8 : D120 D11F : C75C 8000
Pt x00 Climate/ in °F (1 digit = 0.01 °F) > 311.00 311.00 : 266.01 266.00 : -184.00 -184.01 : -229.00 < -229.00
Values dec
32767 31100 : 26601 26600 : -18400 -18401 : -22900 -32768
hex
7FFF 797C : 67E9 67E8 : B820 B81F : A68C 8000
Range
Overflow Overshoot range
Rated range
Undershoot range
Underflow
Table C- 12 Thermal resistors Ni 100, Ni 1000, LG-Ni 1000 Standard
Ni x00 standard in °C (1 digit = 0.1 °C) > 295.0 295.0 : 250.1 250.0 : -60.0 -60.1 : -105.0 < -105.0
Values dec
32767 2950 : 2501 2500 : -600 -601 : -1050 -32768
hex
7FFF B86 : 9C5 9C4 : FDA8 FDA7 : FBE6 8000
Ni x00 Standard in °F (1 digit = 0.1 °F) > 563.0 563.0 : 482.1 482.0 : -76.0 -76.1 : -157.0 < -157.0
Values dec
32767 5630 : 4821 4820 : -760 -761 : -1570 -32768
hex
7FFF 15FE : 12D5 12D4 : FD08 FD07 : F9DE 8000
Ni x00 Standard in K (1 digit = 0.1 K) > 568.2 568.2 : 523.3 523.2 : 213.2 213.1 : 168.2 < 168.2
Values dec
32767 5682 : 5233 5232 : 2132 2131 : 1682 32768
hex
7FFF 1632 : 1471 1470 : 854 853 : 692 8000
Range
Overflow Overshoot range Rated range
Undershoot range Underflow
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
73
Representation of analog values C.4 Representation of the analog values of resistance-based sensors/resistance thermometers
Table C- 13 Thermal resistors Ni 100, Ni 1000, LG-Ni 1000 Climate
Ni x00 Climate in °C Values
(1 digit = 0.01 °C)
dec
> 155.00 155.00 : 130.01 130.00 : -60.00 -60.01 : -105.00 < - 105.00
32767 15500 : 13001 13000 : -6000 -6001 : -10500 -32768
hex
7FFF 3C8C : 32C9 32C8 : E890 E88F : D6FC 8000
Ni x00 Climate in °F (1 digit = 0.01 °F) > 311.00 311.00 : 266.01 266.00 : -76.00 -76.01 : -157.00 < - 157.00
Values dec
32767 31100 : 26601 26600 : -7600 -7601 : -15700 -32768
hex
7FFF 797C : 67E9 67E8 : E250 E24F : C2AC 8000
Range
Overflow Overshoot range
Rated range
Undershoot range
Underflow
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
74
Manual, 08/2018, A5E03484864-AE
Representation of analog values C.5 Representation of analog values for thermocouples
C.5
Representation of analog values for thermocouples
The following tables list the decimal and hexadecimal values (codes) of the supported thermocouples.
Table C- 14 Thermocouple type B
Type B in °C
> 2070.0 2070.0 : 1820.1 1820.0 : 250.0 249.9 : 0.0 < 0.0
Values
dec 32767 20700 : 18201 18200 : 2500 2499 : 0 -32768
hex 7FFF 50DC : 4719 4718 : 09C4 09C3 : 0 8000
Type B in °F
> 3276.6 3276.6 : 2786.6 2786.5 : 482.0 481.9 : 32.0 < 32.0
Values
dec 32767 32766 : 27866 27865 : 4820 4819 : 320 -32768
hex 7FFF 7FFE : 6CDA 6CD9 : 12D4 12D3 : 0140 8000
Type B in K
> 2343.2 2343.2 : 2093.3 2093.2 : 523.2 523.1 : 273.2 < 273.2
Values
dec 32767 23432 : 20933 20932 : 5232 5231 : 2732 32768
hex 7FFF 5B88 : 51C5 51C4 : 1470 1469 : 0AAC 8000
Range
Overflow Overshoot range
Rated range
Undershoot range
Underflow
Table C- 15 Thermocouple type E
Type E in °C
> 1200.0 1200.0 : 1000.1 1000.0 : -270.0 < -270.0
Values dec 32767 12000 : 10001 10000 : -2700 -32768
hex 7FFF 2EE0 : 2711 2710 : F574 8000
Type E in °F
> 2192.0 2192.0 : 1832.2 1832.0 : -454.0 < -454.0
Values dec 32767 21920 : 18322 18320 : -4540 -32768
hex 7FFF 55A0 : 4792 4790 : EE44 8000
Type E in K
> 1473.2 1473.2 : 1273.3 1273.2 : 0 <0
Values dec 32767 14732 : 12733 12732 : 0 -32768
hex 7FFF 398C : 31BD 31BC : 0000 8000
Range Overflow Overshoot range
Rated range
Underflow
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
75
Representation of analog values C.5 Representation of analog values for thermocouples
Table C- 16 Thermocouple type J
Type J in °C
> 1450.0 1450.0 : 1200.1 1200.0 : -210.0 < -210.0
Values dec 32767 14500 : 12001 12000 : -2100 -32768
hex 7FFF 38A4 : 2EE1 2EE0 : F7CC 8000
Type J in °F
> 2642.0 2642.0 : 2192.2 2192.0 : -346.0 < -346.0
Values dec 32767 26420 : 21922 21920 : -3460 -32768
hex 7FFF 6734 : 55A2 55A0 : F27C 8000
Type J in K
> 1723.2 1723.2 : 1473.3 1473.2 : 63.2 < 63.2
Values dec 32767 17232 : 14733 14732 : 632 -32768
hex 7FFF 4350 : 398D 398C : 0278 8000
Range Overflow Overshoot range
Rated range
Underflow
Table C- 17 Thermocouple type K
Type K in °C
> 1622.0 1622.0 : 1372.1 1372.0 : -270.0 < -270.0
Values dec 32767 16220 : 13721 13720 : -2700 -32768
hex 7FFF 3F5C : 3599 3598 : F574 8000
Type K in °F
> 2951.6 2951.6 : 2501.7 2501.6 : -454.0 < -454.0
Values dec 32767 29516 : 25017 25016 : -4540 -32768
hex 7FFF 734C : 61B9 61B8 : EE44 8000
Type K in K
> 1895.2 1895.2 : 1645.3 1645.2 : 0 < 0
Values dec 32767 18952 : 16453 16452 : 0 -32768
hex 7FFF 4A08 : 4045 4044 : 0000 8000
Range Overflow Overshoot range
Rated range
Underflow
Table C- 18 Thermocouple type N
Type N in °C
> 1550.0 1550.0 : 1300.1 1300.0 : -270.0 < -270.0
Values
dec 32767 15500 : 13001 13000 : -2700 -32768
hex 7FFF 3C8C : 32C9 32C8 : F574 8000
Type N in °F
> 2822.0 2822.0 : 2372.2 2372.0 : -454.0 < -454.0
Values
dec 32767 28220 : 23722 23720 : -4540 -32768
hex 7FFF 6E3C : 5CAA 5CA8 : EE44 8000
Type N in K
> 1823.2 1823.2 : 1573.3 1573.2 : 0 < 0
Values
dec 32767 18232 : 15733 15732 : 0 -32768
hex 7FFF 4738 : 3D75 3D74 : 0000 8000
Range Overflow Overshoot range
Rated range
Underflow
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
76
Manual, 08/2018, A5E03484864-AE
Representation of analog values C.5 Representation of analog values for thermocouples
Table C- 19 Thermocouple type R and S
Type R, S Values
in °C
dec
> 2019.0 32767
2019.0 20190
:
:
1769.1 17691
1769.0 17690
:
:
-50.0
-500
-50.1
-501
:
:
-170.0 -1700
< -170.0 -32768
hex 7FFF 4EDE : 451B 451A : FE0C FE0B : F95C 8000
Type R, S Values
in °F
dec
> 3276.6 32767
3276.6 32766
:
:
3216.4 32164
3216.2 32162
:
:
-58.0
-580
-58.1
-581
:
:
-274.0 -2740
< -274.0 -32768
hex 7FFF 7FFE : 7DA4 7DA2 : FDBC FDBB : F54C 8000
Types R, S in K
> 2292.2 2292.2 : 2042.3 2042.2 : 223.2 223.1 : 103.2 < 103.2
Values
dec 32767 22922 : 20423 20422 : 2232 2231 : 1032 < 1032
hex 7FFF 598A : 4FC7 4FC6 : 08B8 08B7 : 0408 8000
Range
Overflow Overshoot range
Rated range
Undershoot range
Underflow
Table C- 20 Thermocouple type T
Type T in °C
> 540.0 540.0 : 400.1 400.0 : -270.0 < -270.0
Values dec 32767 5400 : 4001 4000 : -2700 -32768
hex 7FFF 1518 : 0FA1 0FA0 : F574 8000
Type T in °F
> 1004.0 1004.0 : 752.2 752.0 : -454.0 < -454.0
Values dec 32767 10040 : 7522 7520 : -4540 -32768
hex 7FFF 2738 : 1D62 1D60 : EE44 8000
Type T in K
> 813.2 813.2 : 673.3 673.2 : 3.2 < 3.2
Values dec 32767 8132 : 6733 6732 : 32 -32768
hex 7FFF 1FC4 : 1AAD 1AAC : 0020 8000
Range Overflow Overshoot range
Rated range
Underflow
Analog input module AI 8xU/I/RTD/TC ST (6ES7531-7KF00-0AB0)
Manual, 08/2018, A5E03484864-AE
77
ein
SIMATIC
S7-1500/ET 200MP Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _Rvae_lpu_rees_se_n_ta_tio_n _of_a_na_lo_g ____C__
09/2016
A5E36647959-AB
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E36647959-AB 09/2016 Subject to change
Copyright © Siemens AG 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Functions that relate in general to the systems are described in these system manuals.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following changes:
As of firmware version V1.1.0, the module supports the scalable measuring range function.
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information regarding the product described in the documentation or its handling, or draws special attention to a section of the documentation.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
4
Manual, 09/2016, A5E36647959-AB
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109739516).
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
2.2 2.2.1 2.2.2
Functions................................................................................................................................ 13 Scalable measuring range ..................................................................................................... 13 Configuration.......................................................................................................................... 18
3 Wiring ................................................................................................................................................... 19
4 Parameters/address space ................................................................................................................... 24
4.1
Measuring types and ranges.................................................................................................. 24
4.2
Parameters............................................................................................................................. 27
4.3
Declaration of parameters...................................................................................................... 31
4.4
Address space ....................................................................................................................... 34
5 Interrupts/diagnostics alarms................................................................................................................. 41
5.1
Status and error displays ....................................................................................................... 41
5.2
Interrupts ................................................................................................................................ 43
5.3
Diagnostics alarms................................................................................................................. 45
6 Technical specifications ........................................................................................................................ 46
A Dimensional drawing............................................................................................................................. 54
B Parameter data records ........................................................................................................................ 56
B.1
Parameter assignment and structure of the parameter data records .................................... 56
B.2
Structure of the data record for dynamic reference temperature........................................... 66
B.3
Structure of data record 235 for scalable measuring range .................................................. 68
C Representation of analog values ........................................................................................................... 71
C.1
Representation of input ranges.............................................................................................. 72
C.2
Representation of analog values in voltage measuring ranges ............................................. 73
C.3
C.3.1 C.3.2 C.3.3 C.3.4 C.3.5 C.3.6
Analog value representation for resistance-type transmitters / resistance thermometers ......................................................................................................................... 74 Resistance-type transmitters 150, 300, 600, 6000 Ohm ....................................................... 74 Thermal resistor Pt 10, 50, 100, 200, 500, 1000 Standard/GOST ........................................ 74 Thermal resistor Ni 10, 100, 120, 200, 500, 1000, LG-Ni 1000 Standard ............................. 75 Thermal resistor Ni 10, 100, 120, 200, 500, 1000, LG-Ni 1000 Climatic ............................... 76 Thermal resistor Ni 10, 100, 120, 200, 500, 1000 GOST Standard ...................................... 77 Thermal resistor Cu 10, 50, 100 Standard/Climatic/GOST ................................................... 78
C.4
Representation of analog values for thermocouples ............................................................. 80
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
6
Manual, 09/2016, A5E36647959-AB
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
8
Manual, 09/2016, A5E36647959-AB
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
10
Manual, 09/2016, A5E36647959-AB
Product overview
2.1
Properties
Article number
6ES7531-7PF00-0AB0
View of the module
2
Figure 2-1 View of the AI 8xU/R/RTD/TC HF module
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
11
Product overview 2.1 Properties
Properties
The module has the following technical properties: 9 electrically isolated analog inputs Measurement type can be set for each channel:
Voltage Resistor Thermal resistor (RTD) Thermocouple (TC) including external compensation via CH 8 (reference channel) Resolution 16 bits including sign Two operating modes: Fast: shortest integration time 2.5 ms Standard: shortest integration time 7.5 ms Configurable diagnostics (per channel) Hardware interrupt on limit violation can be set per channel (two low and two high limits per channel) Supports thermoresistors and thermocouples according to the GOST standard The module supports the following functions:
Table 2- 1
Version dependencies of the module functions
Function
Configuration software
Firmware version of the module
STEP 7 (TIA Portal) as of V13,
SP1 and HSP 0166
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Module internal Shared Input (MSI)
Configurable submodules / submodules for Shared Device Scalable measuring range
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
V1.1.0 or higher
X X X X (PROFINET IO only) X (PROFINET IO only) V14 or higher and HSP 0186 (only PROFINET IO)
--- / X X X X
(PROFINET IO only) X
(PROFINET IO only) X
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
12
Manual, 09/2016, A5E36647959-AB
Product overview 2.2 Functions
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Shield bracket Shield terminal Power supply element Labeling strips U connector Universal front cover
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
2.2
Functions
2.2.1
Scalable measuring range
Introduction
The scalable measuring range is available for the temperature measuring ranges of thermal resistors (RTD) standard and thermocouples (TC). The measuring ranges for voltage, resistor and thermal resistor climatic are not supported.
Function
The scalable measuring range is a limited section of a measuring range supported by the module.
It allows you to increase the resolution for a configurable section.
The "Measuring range resolution" parameter determines the resolution to 2 or 3 decimal places.
The "Measuring range center" parameter determines the temperature over which the scalable measuring range is symmetrically spanned.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
13
Product overview 2.2 Functions
Typical areas of applications
Temperature measurements and temperature controls with high resolution save energy and are required for: Manufacturing of special glass Manufacturing of semiconductors Heat processes / heat treatment in metals for the aerospace industry.
Value ranges
Table 2- 2 Value ranges for the scalable measuring range
Scalable measuring range
Overflow High limit Measuring range center Low limit Underflow
Measuring range resolution
2 decimal places > 325.11
3 decimal places > 32.511
325.11
32.511
0
0
-325.12
-32.512
<-325.12
<-32.512
Values hex.
7FFFH 7EFFH 0H 8100H 8000H
To obtain the absolute temperature, the measuring range center in the user program (as offset) must be calculated with the value of the user data of the scalable measuring range.
The measuring range center is always output in the user data as the value "0". The user data is correspondingly mapped to the bipolar input ranges in S7 format. Underflow/overflow is also formed in accordance with the limits of S7.
Rules
The measuring range center must be within the nominal range of the underlying measuring range. It is specified in integers.
The scalable measuring range is spanned symmetrically over the measuring range center. Depending on the resolution, different value ranges result.
The scalable measuring range is limited by underflow and overflow of the underlying measuring range:
If the low limit is violated, the scaled measuring range is cut off at the underflow.
If the high limit is violated, the scaled measuring range is cut off at the overflow.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
14
Manual, 09/2016, A5E36647959-AB
Examples
Product overview 2.2 Functions
The following example shows the scaled measuring range with 2 decimal places for a thermal resistor Pt 100 standard. At the scaled measuring range with 2 decimal places, the measured value lies between 325.12 K and +325.11 K around the measuring range center. In the figure, the measuring range center is drawn at 300 °C.
Figure 2-2 Scalable measuring range with 2 decimal places
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
15
Product overview 2.2 Functions
The following example shows the scaled measuring range with 3 decimal places for a thermal resistor Pt 100 standard. At the scaled measuring range with 3 decimal places, the measured value lies between 32.512 K and +32.511 K around the measuring range center. In the figure, the measuring range center is drawn at 300 °C.
Figure 2-3 Scalable measuring range with 3 decimal places
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
16
Manual, 09/2016, A5E36647959-AB
Product overview 2.2 Functions
The following example shows the scaled measuring range with 2 decimal places for a thermal resistor Pt 100 standard. At the scaled measuring range with 2 decimal places, the measured value lies between 325.12 K and +325.11 K around the measuring range center. In the figure, the measuring range center is drawn at 850 °C. The measuring range is cut off at 150.00 K, because the limit to the overflow has been exceeded at 1000 °C (clipping).
Figure 2-4 Scalable measuring range with 2 decimal places that is cut off at the overflow (clipping).
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
17
Product overview 2.2 Functions
2.2.2
Configuration
Requirements
Firmware version V1.1.0 or higher of the module. Selection of a valid temperature measuring range.
Configuration
The function is activated using the "Scalable measuring range" parameter. The following figure shows an example for the configuration:
Reference
Figure 2-5 Configuration for the scalable measuring range
You can find additional information on configuration in the STEP 7 online help. In the user program, you can evaluate the status and the limits of the scalable measuring range with data record 235, see Appendix (Page 68).
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
18
Manual, 09/2016, A5E36647959-AB
Wiring
3
This section contains the block diagram of the module and outlines various connection options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
You can find additional information on compensating the reference junction temperature in the function manual Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094), the structure of a data record in the section Structure of the data record for dynamic reference temperature (Page 66).
Note · You may use and combine the different wiring options for all channels. · Do not insert the potential jumpers included with the front connector!
Abbreviations used
Meaning of the abbreviations used in the following figures:
Un+/UnMn+/MnIc n+/Ic nL+ M
Voltage input channel n (voltage only) Measuring input channel n Current output for RTD, channel n Supply voltage connection Ground connection
Pin assignment for the power supply element
The power supply element is plugged onto the front connector for powering the analog module. Wire the supply voltage to terminals 41 (L+) and 44 (M). You can use terminals 42 (L+) and 43 (M) to loop the potential to the next module.
Figure 3-1 Power supply element wiring
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
19
Wiring
Block diagram and pin assignment for voltage measurement
The example in the following figure shows the pin assignment for voltage measurement.
Analog-to-Digital Converter (ADC) Electrical isolation Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 9 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-2 Block diagram and pin assignment for voltage measurement
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
20
Manual, 09/2016, A5E36647959-AB
Wiring
Connection: 2, 3 and 4-wire connection of resistance-type transmitters or resistance thermometers (RTD)
The example in the following figure shows the pin assignment for 2, 3 and 4-wire connections of resistance-type transmitters or resistance thermometers.
4-wire connection
3-wire connection 2-wire connection Analog-to-Digital Converter (ADC) Electrical isolation Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx
RUN ERROR PWR
Channel or 9 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-3 Block diagram and terminal assignment for 2, 3, and 4-wire connection
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
21
Wiring
Connection: Non-grounded thermocouples for external/internal compensation and connection of a resistance thermometer (RTD) to channel 8 (CH8) or the reference channel
The following figure shows an example of the pin assignment of non-grounded thermocouples for external/internal compensation and the connection of a resistance thermometer (RTD) at the reference channel.
Wiring of a thermocouple (non-grounded) for internal compensa- CHx
tion
Wiring of a thermocouple (non-grounded) for external compensa- RUN
tion
Analog-to-Digital Converter (ADC)
ERROR
Electrical isolation
PWR
Backplane bus interface
Supply voltage via power supply element
Backplane bus interface potential bonding cable (optional)
Channel or 9 x channel status (green/red) Status display LED (green)
Error display LED (red) LED for power supply (green)
Figure 3-4 Block diagram and pin assignment for non-grounded thermocouples and resistance thermometers
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
22
Manual, 09/2016, A5E36647959-AB
Wiring
Connection: Grounded thermocouples for internal compensation
The following figure shows an example of the pin assignment for grounded thermocouples for internal compensation.
Wiring of a thermocouple (grounded) for internal compensa-
tion
Analog-to-Digital Converter (ADC) Electrical isolation Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx
RUN ERROR PWR
Figure 3-5 Block diagram and pin assignment for grounded thermocouples
Channel or 9 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
23
Parameters/address space
4
4.1
Measuring types and ranges
Introduction
The module has a default measurement type resistance thermometer RTD (4-wire connection) and the measuring range Pt100 Standard. You need to reassign the module parameters with STEP 7 if you want to use a different measurement type or range.
You use temperature coefficients to determine the measuring ranges for resistance thermometers / thermocouples according to the GOST standard. You can find the adjustable temperature coefficients in the Parameter assignment and structure of the parameter data records (Page 56) section in the table Coding for temperature coefficient.
You can find the analog values for the usable resistance thermometer / thermocouples in the sections Analog value representation for resistance-type transmitters / resistance thermometers (Page 74) and Representation of analog values for thermocouples (Page 80).
The following table shows the measuring types and the respective measuring range.
Table 4- 1 Measuring types and ranges
Measurement type Voltage
Resistor (2-wire connection)
Resistor (3-wire connection) (4-wire connection)
Measuring range ±25 mV ±50 mV ±80 mV ±250 mV ±500 mV ±1 V 150 300 600 6000 PTC 150 300 600 6000
Representation of analog values
See Appendix Representation of analog values in voltage measuring ranges (Page 73).
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
24
Manual, 09/2016, A5E36647959-AB
Parameters/address space 4.1 Measuring types and ranges
Measurement type Thermal resistor RTD (2-wire connection) (3-wire connection) (4-wire connection)
Thermocouple TC
Deactivated
Measuring range Pt10 Standard/Climatic Pt50 Standard/Climatic Pt100 Standard/Climatic Pt200 Standard/Climatic Pt500 Standard/Climatic Pt1000 Standard/Climatic Ni10 Standard/Climatic Ni100 standard/climate Ni120 Standard/Climatic Ni200 Standard/Climatic Ni500 Standard/Climatic Ni1000 standard/climate LG-Ni1000 standard/climate Cu10 Standard/Climatic Cu50 Standard/Climatic Cu100 Standard/Climatic Type B Type C Type E Type J Type K Type N Type R Type S Type T Type TXK -
Representation of analog values
See Appendix Representation of analog values for thermocouples (Page 80).
The tables of the input ranges, overflow, undershoot range, etc. are available in appendix Representation of analog values (Page 71).
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
25
Parameters/address space 4.1 Measuring types and ranges
Using PTC resistors
PTC resistors are suitable for temperature monitoring of electrical devices, such as motors, drives, and transformers. Use Type A PTC resistors (PTC thermistor) in accordance with DIN/VDE 0660, part 302. In doing so, follow these steps: 1. Select "Resistor 2-wire terminal" and "PTC" in STEP 7. 2. Connect the PTC using 2-wire connection technology. If you enable the "Underflow" diagnostics in STEP 7, it will be signaled for resistance values <18 . In this case, this diagnostic signifies "Short-circuit in the wiring". The following figure shows the address space assignment for the AI 8xU/R/RTD/TC HF module with PTC resistors.
Figure 4-1 Address space for the AI 8xU/R/RTD/TC HF module with PTC resistors The diagram below shows the temperature profile and the corresponding switching points.
Figure 4-2 Temperature profile and the corresponding switching points
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
26
Manual, 09/2016, A5E36647959-AB
Parameters/address space 4.2 Parameters
Measured value acquisition with PTC resistors
If faults occur (for example supply voltage L+ missing) that make it impossible to acquire measured values with PTC resistors, the corresponding channels (IB x/IB x+1) report overflow (7FFFH). If the value status (QI) is enabled, the value 0 = fault is output in the corresponding bit.
4.2
Parameters
Parameters of AI 8xU/R/RTD/TC HF
The AI 8xU/R/RTD/TC HF is usually already integrated in the hardware catalog of STEP 7 (TIA Portal). In this case, STEP 7 (TIA Portal) checks the configured properties for plausibility during configuration.
However, you can also assign parameters to the module by means of a GSD file and the configuration software of any provider. The module does not check the validity of the configured properties until after the configuration has been loaded.
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
When assigning parameters in the user program, use the WRREC instruction to transfer the parameters to the module by means of data records; refer to the section Parameter assignment and structure of the parameter data records (Page 56).
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
27
Parameters/address space 4.2 Parameters
The following parameter settings for the channels are possible:
Table 4- 2 Configurable parameters and their defaults
Parameters
Range of values
Diagnostics · Missing supply voltage L+ · Overflow · Underflow · Reference channel error · Wire break Measuring · Measurement type
Yes/No Yes/No Yes/No Yes/No Yes/No
See section Measuring types and ranges (Page 24)
· Measuring range
· Operating mode · Temperature coefficient
· Temperature unit
· Standard · Fast
Pt: 0.003851 Pt: 0.003902 Pt: 0.003910 GOST Pt: 0.003916 Pt: 0.003920 Ni: 0.006170 GOST Ni: 0.006180 Ni: 0.006720 Cu: 0.00426 GOST Cu: 0.00427 Cu: 0.00428 GOST LG-Ni: 0.005000
· Kelvin (K) · Fahrenheit (°F) · Celsius (°C)
Default setting
Parameter assignment in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7 (TIA Portal) as of V12 or GSD file PROFINET IO
GSD file PROFIBUS DP
No
Yes
Channel 1)
Module 2)
No
Yes
Channel
Module 2)
No
Yes
Channel
Module 2)
No
Yes
Channel
Module 2)
No
Yes
Channel
Module 2)
Thermal
Yes
resistor RTD
(4-wire con-
nection
Pt100 stand- Yes ard
Standard
Yes
Channel
Channel
Channel Channel
Channel --- 4)
0.003851
Yes
Channel
Channel
°C
Yes
Channel
Module
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
28
Manual, 09/2016, A5E36647959-AB
Parameters/address space 4.2 Parameters
Parameters
· Interference frequency suppression
· Smoothing · Reference junction for TC
Range of values
Default setting
400 Hz
50 Hz
60 Hz
50 Hz
10 Hz
None/low/medium/hig None h
· Fixed reference temperature
Internal reference junction
· Dynamic reference temperature
· Internal reference junction
· Reference channel of the module 3)
Parameter assignment in RUN
Yes
Yes Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7 (TIA Portal) as of V12 or GSD file PROFINET IO
GSD file PROFIBUS DP
Channel
Module
Channel Channel
Channel
Module 4) · Dynamic ref-
erence temperature · Internal reference junction · Reference channel of the module
· Fixed reference tempera- Temperature ture
25 °C
Yes
· Scalable measuring range · Disable
Disable
Yes
· Enable
· Measuring range resolu- · 2 decimal places 2 decimal
Yes
tion
· 3 decimal places places
· Measuring range center Value within the nomi- 0
Yes
nal range of the
measuring range
Channel Channel Channel Channel
--- 4) Channel 4) Channel 4) Channel 4)
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
29
Parameters/address space 4.2 Parameters
Parameters
Range of values
Hardware interrupts · Hardware interrupt low
limit 1
· Hardware interrupt high limit 1
· Hardware interrupt low limit 2
· Hardware interrupt high limit 2
Yes/No Yes/No Yes/No Yes/No
Default setting
Parameter assignment in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7 (TIA Portal) as of V12 or GSD file PROFINET IO
GSD file PROFIBUS DP
No
Yes
Channel
--- 4)
No
Yes
Channel
--- 4)
No
Yes
Channel
--- 4)
No
Yes
Channel
--- 4)
1) If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault. You can prevent this message burst by assigning the diagnostics function to one channel only.
2) You can set the effective range of the diagnostics for each channel in the user program with data records 0 to 8.
3) The setting is only possible for channels 0 to 7. If you use the "Reference channel of the module" setting for at least one channel, you need to operate channel 8 with the resistance thermometer RTD measurement type.
4) You can configure the "Fixed reference temperature" setting and the limits for hardware interrupts in the user program with data records 0 to 8.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
30
Manual, 09/2016, A5E36647959-AB
Parameters/address space 4.3 Declaration of parameters
4.3
Declaration of parameters
Missing supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Overflow
Enabling of the diagnostics if the measured value violates the high limit.
Underflow
Enabling of the diagnostics when the measured value falls below the underrange or for voltage measurement ranges of ± 25 mV to ± 1.0 V if the inputs are not connected.
Reference channel error
Enable diagnostics for an error at the temperature compensation channel, e.g. wire break.
Dynamic reference temperature compensation type is configured and no reference temperature has been transferred to the module yet.
Wire break
Enable for diagnostics to check the cable resistances.
Temperature coefficient
The temperature coefficient depends on the chemical composition of the material. In Europe, only one value is used per sensor type (default value).
The temperature coefficient ( value) indicates by how much the resistance of a specific material changes relatively if the temperature increases by 1 °C.
The further values facilitate a sensor-specific setting of the temperature coefficient and enhance accuracy.
Interference frequency suppression
Suppresses the interference affecting analog input modules that is caused by the frequency of the AC voltage network used.
The frequency of the AC voltage network can negatively affect the measured value, in particular when measuring in low voltage ranges and with thermocouples. With this parameter, the user specifies the line frequency that is predominant in the plant.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
31
Parameters/address space 4.3 Declaration of parameters
Smoothing
The individual measured values are smoothed using filtering. The smoothing can be set in 4 levels.
Smoothing time = number of module cycles (k) x cycle time of the module.
The following figure shows after how many module cycles the smoothed analog value is almost 100%, depending on the set smoothing. Is valid for each signal change at the analog input.
None (k = 1) Weak (k = 4) Medium (k = 16) Strong (k = 32)
Figure 4-3 Smoothing with AI 8xU/R/RTD/TC HF
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
32
Manual, 09/2016, A5E36647959-AB
Parameters/address space 4.3 Declaration of parameters
Reference junction for TC
The following settings can be configured for the reference junction parameter:
Table 4- 3 Possible parameter assignments for the reference junction parameter TC
Setting Fixed reference temperature Dynamic reference temperature
Internal reference junction Reference channel of the module
Description
The reference junction temperature is configured and stored in the module as a fixed value.
The reference junction temperature is transferred in the user program from the CPU to the module by data records 192 to 200 using the WRREC (SFB 53) instruction.
The reference junction temperature is determined using an integrated sensor of the module.
The reference junction temperature is determined using an external resistance thermometer (RTD) at the reference channel (CH8) of the module.
Hardware interrupt 1 or 2
Enable a hardware interrupt at violation of high limit 1 or 2 or low limit 1 or 2.
Low limit 1 or 2
Specifies the low limit threshold that triggers hardware interrupt 1 or 2.
High limit 1 or 2
Specifies the high limit threshold that triggers hardware interrupt 1 or 2.
Operating mode Fast / Standard
You can use this parameter to determine the operating mode for the module.
Fast mode; easy integration time with less frequency suppression (minimal integration time 2.5 ms)
Standard mode; triple integration time with higher frequency suppression (minimal integration time 7.5 ms)
Scalable measuring range
With this parameter, you disable or enable the scalable measuring range function.
Measuring range resolution
With this parameter, you determine the resolution to 2 or 3 decimal places.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
33
Parameters/address space 4.4 Address space
Measuring range center
With this parameter, you determine the temperature over which the scaled measuring range is symmetrically spanned. The value must be within the nominal range of the underlying measuring range. It is specified in integers. Maximum = overflow (scaled measuring range) Minimum = underflow (scaled measuring range)
4.4
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
Configuration options of AI 8xU/R/RTD/TC HF
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 4 Configuration options
Configuration
1 x 9-channel without value status 1 x 9-channel with value status 9 x 1-channel without value status 9 x 1-channel with value status 1 x 9-channel with value status for module-internal shared input with up to 4 submodules
Short designation/ module name in the GSD file
AI 8xU/R/RTD/TC HF AI 8xU/R/RTD/TC HF QI AI 8xU/R/RTD/TC HF S AI 8xU/R/RTD/TC HF S QI AI 8xU/R/RTD/TC HF MSI
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7 (TIA Portal) as of V13, SP1 and HSP 0166
X
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5
SP3 or higher
X
X
X
X
X
(PROFINET IO only)
(PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
34
Manual, 09/2016, A5E36647959-AB
Parameters/address space 4.4 Address space
Value status (Quality Information, QI)
The value status is always activated for the following module names: AI 8xU/R/RTD/TC HF QI AI 8xU/R/RTD/TC HF S QI AI 8xU/R/RTD/TC HF MSI An additional bit is assigned to each channel for the value status. The value status bit indicates if the read in digital value is valid. (0 = value is incorrect).
Address space of the AI 8xU/R/RTD/TC HF and AI 8xU/R/RTD/TC HF QI
The following figure shows the address space allocation for the configuration as a 9-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "IB x" stands, for example, for the module start address input byte x.
Figure 4-4 Address space for configuration as 1 x 9-channel AI 8xU/R/RTD/TC HF with value status
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
35
Parameters/address space 4.4 Address space
Address space for configuration as 9 x 1-channel AI 8xU/R/RTD/TC HF S and AI 8xU/R/RTD/TC HF S QI
For the configuration as a 9 x 1-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device.
The number of usable submodules is dependent on the interface module used. Observe the information in the manual for the particular interface module.
In contrast to the 1 x 9-channel module configuration, each of the nine submodules has a freely assignable start address.
Figure 4-5 Address space for configuration as 9 x 1-channel AI 8xU/R/RTD/TC HF S QI with value status
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
36
Manual, 09/2016, A5E36647959-AB
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 9-channel AI 8xU/R/RTD/TC HF MSI
The channels 0 to 8 of the module are copied in up to 4 submodules for the configuration as 1 x 9-channel module (module-internal shared input, MSI). Channels 0 to 8 are then available with identical input values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels.
The number of usable submodules is dependent on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI)
The meaning of the value status depends on the submodule on which it occurs.
For the 1st submodule (= basic submodule), the value status 0 indicates that the value is incorrect.
For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
37
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodules 1 and 2.
Figure 4-6 Address space for configuration as 1 x 9-channel AI 8xU/R/RTD/TC HF MSI with value status
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
38
Manual, 09/2016, A5E36647959-AB
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodules 3 and 4.
Figure 4-7 Address space for configuration as 1 x 9-channel AI 8xU/R/RTD/TC HF MSI with value status
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
39
Parameters/address space 4.4 Address space
Reference
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
40
Manual, 09/2016, A5E36647959-AB
Interrupts/diagnostics alarms
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of AI 8xU/R/RTD/TC HF.
5
Figure 5-1 LED displays of the module AI 8xU/R/RTD/TC HF
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
41
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in section Diagnostic alarms (Page 45).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LEDs RUN ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured.
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective.
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check whether too many modules are insert-
ed. ---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
PWR LED
Table 5- 2 PWR status display
LED PWR Off On
Meaning Supply voltage L+ to module too low or missing
Supply voltage L+ is present and OK.
Remedy Check supply voltage L+.
---
CHx LED
Table 5- 3 CHx status display
LED CHx Off On On
Meaning Channel disabled
Channel configured and OK.
Channel is configured (channel error pending). Diagnostic alarm: e.g. wire break
Remedy ---
---
Check the wiring. Disable diagnostics.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
42
Manual, 09/2016, A5E36647959-AB
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
Analog input module AI 8xU/R/RTD/TC HF supports the following diagnostic and hardware interrupts.
You can find detailed information on the event in the error organization block with the RALRM instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: Missing supply voltage L+ Wire break Overflow Underflow Reference channel error Parameter assignment error
Hardware interrupt
The module generates a hardware interrupt at the following events:
Low limit violated 1
High limit violated 1
Low limit violated 2
Violation of high limit 2
The module channel that triggered the hardware interrupt is entered in the start information of the organization block. The following figure shows the assignment of the local data double word 8 by the start information of the hardware interrupt organization block.
Figure 5-2 OB start information
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
43
Interrupts/diagnostics alarms 5.2 Interrupts
Reaction when reaching limits 1 and 2 at the same time
If the two high limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for high limit 1 first. The configured value for high limit 2 is irrelevant. After processing the hardware interrupt for high limit 1, the module triggers the hardware interrupt for high limit 2.
The module has the same reaction when the low limits are reached at the same time. If the two low limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for low limit 1 first. After processing the hardware interrupt for low limit 1, the module triggers the hardware interrupt for low limit 2.
Structure of the additional interrupt information
Table 5- 4 Structure of USI = W#16#0001
Data block name
Contents
USI (User Structure Identifier)
W#16#0001
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#n
It follows the error event that triggered the hardware interrupt.
Event
B#16#03
B#16#04
B#16#05
B#16#06
Remark
Additional interrupt info for hardware interrupts of the I/O module
Bytes 2
Number of the event-triggering channel (n = 1 number of module channels -1)
Low limit violated 1
1
High limit violated 1
Low limit violated 2
Violation of high limit 2
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
44
Manual, 09/2016, A5E36647959-AB
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes for each diagnostics event on the module. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 5 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Wire break
Error code 6H
Overflow
7H
Underflow
8H
Parameter assignment 10H error
Load voltage missing 11H
Reference channel
15H
error
Meaning Impedance of encoder circuit too high
Wire break between the module and sensor Channel not connected (open)
Remedy Use a different encoder type or modify the wiring, for example, using cables with larger cross-section Connect the cable
· Disable diagnostics
· Connect the channel
Measuring range violated Measuring range violated
· The module cannot evaluate parameters for the channel
· Incorrect parameter assignment.
Check the measuring range Check the measuring range Correct the parameter assignment
Supply voltage L+ of the module is missing
Invalid reference temperature for the used TC channel with compensation
Connect supply voltage L+ to module
Check compensation with reference channel parameterization or thermoresistor. Check communication to the module/station for the compensation with data record.
Diagnostics alarms with value status (QI)
If you configure the module with value status (QI), the module always checks all errors even if the respective diagnostics is not enabled. But the module cancels the inspection as soon as it detects the first error, regardless if the respective diagnostics has been enabled or not. The result may be that enabled diagnostics may not be displayed.
Example: You have enabled "Underflow" diagnostics, but the module detects the previous "Wire break" diagnostics and aborts after this error message. The "Underflow" diagnostics is not detected.
Recommendation: To ensure that all errors are subjected to the diagnostics, select all check boxes under "Diagnostics".
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
45
Technical specifications
6
Technical specifications of the AI 8xU/R/RTD/TC HF
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7531-7PF00-0AB0
AI 8xU/R/RTD/TC HF FS01 V1.1.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Measuring range scalable
Yes
Measured values scalable
No
Measuring range adjustment
No
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V14 / -
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
Oversampling
No
MSI
Yes
CiR Configuration in RUN
Configuration in RUN possible
Yes
Calibration in RUN possible
Yes
Supply voltage
Rated value (DC) Valid range, low limit (DC) Valid range, high limit (DC) Reverse polarity protection Input current Current consumption, max.
24 V 20.4 V 28.8 V Yes
55 mA; with 24 V DC supply
Power
Power consumption from the backplane bus Power loss Power loss, typ.
0.85 W 1.9 W
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
46
Manual, 09/2016, A5E36647959-AB
Technical specifications
Analog inputs Number of analog inputs
· For voltage measurement
· For resistance/resistance thermometer measurement
· for thermocouple measurement
Permissible input voltage for voltage input (destruction limit), max. Technical unit for temperature measurement, can be set Input ranges (rated values), voltages -1 to +1 V Input resistance (-1 to +1 V) -25 mV to +25 mV Input resistance (-25 mV to +25 mV) -250 to +250 mV Input resistance (-250 to +250 mV) -50 mV to +50 mV Input resistance (-50 mV to +50 mV) -500 mV to +500 mV Input resistance (-500 mV to +500 mV) -80 mV to +80 mV Input resistance (-80 mV to +80 mV) Input ranges (rated values), thermocouples Type B Input resistance (type B) Type C Input resistance (Type C) Type E Input resistance (type E) Type J Input resistance (type J) Type K Input resistance (type K) Type N Input resistance (type N) Type R Input resistance (type R) Type S Input resistance (type S) Type T Input resistance (type T) Type TXK/TXK(L) according to GOST
6ES7531-7PF00-0AB0
8; plus an additional RTD (reference) channel 8; plus an additional RTD (reference) channel 8; plus an additional RTD (reference) channel
8; plus an additional RTD (reference) channel 20 V
Yes; °C / °F / K
Yes 10 M Yes 10 M Yes 10 M Yes 10 M Yes 10 M Yes 10 M
Yes 10 M Yes 10 M Yes 10 M Yes 10 M Yes 10 M Yes 10 M Yes 10 M Yes 10 M Yes 10 M Yes
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
47
Technical specifications
Input resistance (Type TXK/TXK(L) according to GOST) Input ranges (rated values), resistance thermometer Cu 10 Input resistance (Cu 10) Cu 10 according to GOST Input resistance (Cu 10 according to GOST) Cu 50 Input resistance (Cu 50) Cu 50 according to GOST Input resistance (Cu 50 according to GOST) Cu 100 Input resistance (Cu 100) Cu 100 according to GOST Input resistance (Cu 100 according to GOST) Ni 10 Input resistance (Ni 10) Ni 10 to GOST Input resistance (Ni 10 according to GOST) Ni 100 Input resistance (Ni 100) Ni 100 according to GOST Input resistance (Ni 100 according to GOST) Ni 1000 Input resistance (Ni 1000) Ni 1000 to GOST Input resistance (Ni 1000 according to GOST) LG-Ni 1000 Input resistance (LG-Ni 1000) Ni 120 Input resistance (Ni 120) Ni 120 to GOST Input resistance (Ni 120 according to GOST) Ni 200 Input resistance (Ni 200) Ni 200 to GOST Input resistance (Ni 200 according to GOST) Ni 500 Input resistance (Ni 500) Ni 500 to GOST Input resistance (Ni 500 according to GOST) Pt 10 Input resistance (Pt 10)
10 M
6ES7531-7PF00-0AB0
Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
48
Manual, 09/2016, A5E36647959-AB
Technical specifications
Pt 10 according to GOST Input resistance (Pt 10 according to GOST) Pt 50 Input resistance (Pt 50) Pt 50 according to GOST Input resistance (Pt 50 according to GOST) Pt 100 Input resistance (Pt 100) Pt 100 according to GOST Input resistance (Pt 100 according to GOST) Pt 1000 Input resistance (Pt 1000) Pt 1000 according to GOST Input resistance (Pt 1000 according to GOST) Pt 200 Input resistance (Pt 200) Pt 200 according to GOST Input resistance (Pt 200 according to GOST) Pt 500 Input resistance (Pt 500) Pt 500 according to GOST Input resistance (Pt 500 according to GOST) Input ranges (rated values), resistors 0 to 150 ohm Input resistance (0 to 150 ohm) 0 to 300 ohm Input resistance (0 to 300 ohm) 0 to 600 ohm Input resistance (0 to 600 ohm) 0 to 6000 ohm Input resistance (0 to 6000 ohm) PTC Input resistance (PTC)
6ES7531-7PF00-0AB0 Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M Yes; Standard/Climatic 10 M
Yes 10 M Yes 10 M Yes 10 M Yes 10 M Yes 10 M
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
49
Technical specifications
Thermocouple (TC) Temperature compensation · Configurable
6ES7531-7PF00-0AB0 Yes
· Internal temperature compensation
Yes
· External temperature compensation via RTD Yes
· Compensation for 0 °C reference point temperature
Yes, fixed value can be set
· Reference channel of the module
Yes; 9th channel that can be used regardless of the parameterization of the other channels than as the genuine 9th RTD channel or for compensation for TC measurement
Cable length
shielded, max.
800 m; with U; 200 m with R/RTD/TC
Analog value generation for the inputs
Integration and conversion time/resolution per channel
Resolution with overrange (bit including sign), max.
16 bit
Configurable integration time
Yes
Integration time (ms)
Fast mode: 2.5 / 16.67 / 20 / 100 ms; standard mode: 7.5 / 50 / 60 / 300 ms
Basic conversion time, including integration time Fast mode: 4 / 18 / 22 / 102 ms; standard mode:
(ms)
9 / 52 / 62 / 302 ms
· Additional conversion time for wire break moni- Thermocouples. 150 Ohm, 300 Ohm, 600 Ohm,
toring
Cu10, Cu50, Cu100, Ni10, Ni50, Ni100, Ni120,
Ni200, Pt10, Pt50, Pt100, Pt200: 4 ms; 6 kilohm,
Ni500, Ni1000, LG-Ni1000, Pt500, Pt1000: 13 ms
Interference voltage suppression for interference 400 / 60 / 50 / 10 Hz frequency f1 in Hz
Basic execution time of the module (all channels Corresponds to the channel with the highest
enabled)
basic conversion time
Smoothing of the measured values
Configurable
Yes
Level: None
Yes
Level: Weak
Yes
Level: Medium
Yes
Level: Strong
Yes
Encoders
Connection of the signal encoders
For voltage measurement
Yes
for resistance measurement with two-wire connec- Yes tion
for resistance measurement with three-wire con- Yes; all measuring ranges except PTC; internal
nection
compensation of line resistance
For resistance measurement with four-wire connection
Yes; all measuring ranges except PTC
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
50
Manual, 09/2016, A5E36647959-AB
Technical specifications
6ES7531-7PF00-0AB0
Errors/accuracies
Linearity error (in relation to input range), (+/-)
0.02%
Temperature error (in relation to input range), (+/-) 0.005%/K
Crosstalk between the inputs, max.
-80 dB
Repeat accuracy in settled state at 25 °C (in rela- 0.02% tion to input range), (+/-)
Temperature errors of internal compensation
+/-1.5 °C
Operational limit in overall temperature range
Voltage in relation to input range, (+/-)
0.1%
Resistance in relation to input range, (+/-)
0.1%
Resistance thermometer in relation to input range, Cuxxx Standard: ±0.5 K, Cuxxx Climatic: ±0.5 K,
(+/-)
Ptxxx Standard: ±1 K, Ptxxx Climatic: ±0.5 K,
Nixxx Standard: ±0.5 K, Nixxx Climatic: ±0.3 K
Thermocouple, relative to input range, (+/-)
Type B: > 600 °C ±2 K, Type E: > -200 °C ±1 K, Type J: > -210 °C ±1 K, Type K: > -200 °C ±2 K, Type N: > -200 °C ±2 K, Type R: > 0 °C ±2 K, Type S: > 0 °C ±2 K, Type T: > -200 °C ±1 K, Type C: ±4 K, Type TXK/TXK(L): ±1 K
Basic error limit (operational limit at 25 °C)
Voltage in relation to input range, (+/-)
0.05%
Resistance in relation to input range, (+/-)
0.05%
Resistance thermometer in relation to input range, Cuxxx Standard: ±0.3 K, Cuxxx Climatic: ±0.2 K,
(+/-)
Ptxxx Standard: ±0.5 K, Ptxxx Climatic: ±0.2 K,
Nixxx Standard: ±0.3 K, Nixxx Climatic: ±0.15 K
Thermocouple, relative to input range, (+/-)
Type B: > 600 °C ±1 K, Type E: > -200 °C ±0.5 K, Type J: > -210 °C ±0.5 K, Type K: > -200 °C ±1 K, Type N: > -200 °C ±1 K, Type R: > 0 °C ±1 K, Type S: > 0 °C ±1 K, Type T: > -200 °C ±0.5 K, Type C: ±2 K, Type TXK/TXK(L): ±0.5 K
Interference voltage suppression for f = n x (f1 +/1 %), f1 = interference frequency
Series-mode interference (peak of the interference 80 dB; in Standard mode, 40 dB in Fast mode < rated value of the input range), min.
Common mode voltage, max.
60 V DC / 30 V AC
Common mode interference, min.
80 dB
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
Yes
Interrupts
Diagnostic interrupt
Yes
Limit interrupt
Yes; two high limits and two low limits each
Diagnostics alarms
Monitoring of supply voltage
Yes
Wire break
Yes; only for TC. R. RTD
Overflow/underflow
Yes
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
51
Technical specifications
Diagnostics indicator LED RUN LED ERROR LED Monitoring of supply voltage (PWR LED) Channel status display For channel diagnostics For module diagnostics Electrical isolation Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Between the channels and power supply of the electronics Permitted potential difference Between different circuits
Isolation Isolation tested with
Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed mode Prioritized startup Dimensions Width Height Depth Weights Weight, approx. Miscellaneous Note:
6ES7531-7PF00-0AB0
Yes; green LED Yes; red LED Yes; green LED Yes; green LED Yes; red LED Yes; red LED
Yes 1 Yes Yes
60 V DC / 30 V AC; Isolation measured for 120 V AC basic isolation: Between the channels and supply voltage L+, between the channels and the backplane bus, between the channels
2000 V DC between the channels and the supply voltage L+, 2000 V DC between the channels and the backplane bus, 2000 V DC between the channels, 707 V DC (type test) between the supply voltage L+ and the backplane bus
0 °C 60 °C 0 °C 40 °C
Yes
35 mm 147 mm 129 mm
290 g
Cable compensation is performed alternately to measurement with the R/RTD three-wire measurement. Two module cycles are thus required for a measured value.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
52
Manual, 09/2016, A5E36647959-AB
Technical specifications
Additional information
You can learn how to calculate the cycle time of the module with an example provided on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109037127).
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
53
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel are provided in the appendix. Always adhere to the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of the AI 8xU/R/RTD/TC HF module
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
54
Manual, 09/2016, A5E36647959-AB
Dimensional drawing
Figure A-2 Dimension drawing of the AI 8xU/R/RTD/TC HF module, side view with open front cover
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
55
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Wire break
Reference channel error Resistance measurement type (4-wire connection. 3-wire connection) Hardware interrupt limits Fixed reference temperature
Temperature unit Kelvin (K)
Dependent parameters Only for measurement type Resistance, Resistance Thermometer RTD, Thermocouple TC. Only for measuring type thermocouple TC. Only for measuring range 150 , 300 , 600 and 6000 .
Only if hardware interrupts are enabled. Only if the value Fixed reference temperature is configured at parameter Reference junction for TC. Only for measuring type thermistor RTD and for thermocouple TC.
Parameter assignment in the user program
The module parameters can be assigned in RUN (for example, measuring ranges of selected channels can be edited in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters via data records 0 to 8. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer to the module.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
56
Manual, 09/2016, A5E36647959-AB
Parameter data records B.1 Parameter assignment and structure of the parameter data records
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You obtain the diagnostics data records 0 and 1 with the read back parameter data records 0 and 1. You can find additional information in the Interrupts section of the manual for the PROFIBUS DP interface module on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Assignment of data record and channel
The parameters in data records 0 to 9 and in data record 9 are available for 1x 9-channel configuration and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 ... Data record 6 for channel 6 Data record 7 for channel 7 Data record 8 for channel 8 (reference channel) For configuration 9 x 1-channel, the module has 9 submodules with one channel each and one submodule for the reference channel. The parameters for the channel are available in data record 0 and are assigned as follows: Data record 0 for channel 0 (submodule 1) Data record 0 for channel 1 (submodule 2) ... Data record 0 for channel 6 (submodule 7) Data record 0 for channel 7 (submodule 8) Data record 0 for channel 8 (submodule 9) or reference channel Address the respective submodule for data record transfer.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
57
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Data record structure
The figure below shows the structure of data record 0 for channel 0 as an example. The structure is identical for channels 1 to 8. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Byte 0 to 5
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
58
Manual, 09/2016, A5E36647959-AB
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Figure B-2 Structure of data record 0: Byte 6 to 9
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
59
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Figure B-3 Structure of data record 0: Byte 10 to 27:
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
60
Manual, 09/2016, A5E36647959-AB
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Codes for measuring types
The following table lists all measuring types of the analog input module along with their codes. Enter these codes at byte 2 of the data record for the corresponding channel (see the figure Structure of data record 0: Bytes 7 to 27).
Table B- 2 Code for the measuring type
Measurement type Deactivated Voltage Resistor, 4-wire connection *) Resistor, 3-wire connection *) Resistor, 2-wire connection Thermal resistor linear, 4-wire connection Thermal resistor linear, 3-wire connection Thermal resistor linear, 2-wire connection Thermocouple TC
Code 0000 0000 0000 0001 0000 0100 0000 0101 0000 0110 0000 0111 0000 1000 0000 1001 0000 1010
*) Only for the following measuring ranges: 150 , 300 , 600 , 6 k
Codes for measuring ranges
The following table lists all measuring ranges of the analog input module along with their codes. Enter these codes accordingly at byte 3 of the data record for the corresponding channel (see the figure Structure of data record 0: Bytes 7 to 27).
Table B- 3 Code for the measuring range
Measuring range Voltage ±25 mV ±50 mV ±80 mV ±250 mV ±500 mV ±1 V Resistor 150 300 600 6000 PTC
Code
0000 0000 0000 0001 0000 0010 0000 0011 0000 0100 0000 0101
0000 0001 0000 0010 0000 0011 0000 0101 0000 1111
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
61
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Thermal resistor Pt100 climate Ni100 climate Pt100 standard Ni100 standard Pt500 standard Pt1000 standard Ni1000 standard Pt200 climate Pt500 climate Pt1000 climate Ni1000 climate Pt200 standard Ni120 Standard Ni120 Climatic Cu10 Climatic Cu10 Standard Ni200 Standard Ni200 Climatic Ni500 Standard Ni500 Climatic Pt10 Standard Pt10 Climatic Pt50 Standard Pt50 Climatic Cu50 Standard Cu50 Climatic Cu100 Standard Cu100 Climatic LG-Ni1000 standard LG-Ni1000 climate Ni10 Standard Ni10 Climatic Thermocouple B N E R S J T K C TXK
0000 0000 0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0110 0000 0111 0000 1000 0000 1001 0000 1010 0000 1011 0000 1100 0000 1101 0000 1110 0000 1111 0001 0000 0001 0001 0001 0010 0001 0011 0001 0100 0001 0101 0001 0110 0001 0111 0001 1000 0001 1001 0001 1010 0001 1011 0001 1100 0001 1101 0001 1110 0001 1111
0000 0000 0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0111 0000 1000 0000 1010 0000 1011
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
62
Manual, 09/2016, A5E36647959-AB
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Codes for temperature coefficients
The following table lists all temperature coefficients along with their codes for temperature measurements with the resistance thermometers. You need to enter these codes in byte 4 of the data records 0, 2, 4, 6 and 8 (see Fig. Structure of data record 0: bytes 0 to 6).
Table B- 4 Codes for temperature coefficient
Temperature coefficient Pt xxx 0.003851 0.003916 0.003902 0.003920 0.003910 GOST Ni xxx 0.006180 0.006720 0.006170 GOST LG-Ni 0.005000 Cu xxx 0.00426 GOST 0.00427 0.00428 GOST
Code
0000 0000 0000 0001 0000 0010 0000 0011 0000 0101
0000 1000 0000 1001 0000 0111
0000 1010
0000 1011 0000 1100 0000 1101
Valid values for fixed reference temperatures
The values that you can set for fixed reference temperatures must be within the nominal range of the thermocouple used and within the permitted value range. See table below. The resolution is a tenth of a degree.
Table B- 5 Valid values for fixed reference temperatures
Temperature unit Celsius (default) Fahrenheit (default) Kelvin (default)
Decimal -1450 to 1550 -2290 to 3110 1282 to 3276
Hexadecimal FA56H to 60EH F70EH to CCCH 502H to 10BAH
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
63
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Hardware interrupt limits
The values that you can set for hardware interrupts (high/low limit) must not exceed the over/underrange of respective rated measuring range.
The following tables list the valid hardware interrupt limits. The limit values depend on the selected measuring type and range.
Table B- 6 Limits for voltage and resistance
Voltage ±25 mV, ±50 mV, ±80 mV, ±250 mV, ±500 mV, ±1 V
32510
-32511
Resistor 150 , 300 , 600 , 6 k
32510 1
High limit Low limit
Table B- 7 Limits for thermocouple types B, C, E, and J
Thermocouple
Type B
Type C
°C °F
K
°C °F
K
2069 3276 2343 2499 3276 2773
9
5
1
9
5
1
1 321 2733 -1199 -1839 1533
Type E
°C °F
K
1199 2191 1473
9
9
1
-2699 -4539 33
Type J
°C
°F
K
1449 2641 1723
9
9
1
-2099 -3459 633
High limit
Low limit
Table B- 8 Limits for thermocouples type K, N, R, and S
Thermocouple
Type K
°C
°F
16219 29515
-2699 -4539
K 18951
33
°C 15499 -2699
Type N
°F
K
28219 18231
-4539 33
Types R, S
°C
°F
K
20189 32765 22921
-1699 -2739 1033
High limit Low limit
Table B- 9 Limits for thermocouple type T and TXK
Thermocouple
Type T
°C
°F
5399 10039
-2699 -4539
K 8131
33
°C 10499 -1999
Type TXK
°F
K
19219 13231
-3279 733
High limit Low limit
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
64
Manual, 09/2016, A5E36647959-AB
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Table B- 10 Limits for resistance thermometer Pt xxx Standard and Pt xxx Climate
Thermal resistor
Pt xxx standard
(0.003851, 0.003902, 0.003910, 0.003916, 0.003920)
°C
°F
K
9999
18319
12731
-2429
-4053
303
Pt xxx climate
(0.003851, 0.003902, 0.003916, 0.003910, 0.003920)
°C
°F
K
15499
31099
---
-14499
-22899
---
High limit Low limit
Table B- 11 Limits for resistance thermometer Ni xxx Standard and Ni xxx Climate
Thermal resistor
Ni xxx Standard
(0.006180, 0.006720)
°C
°F
K
2949
5629
5681
-1049
-1569
1683
Ni xxx Climate
(0.006180, 0.006720)
°C
°F
K
15499
31099
---
-10499
-15699
---
High limit Low limit
Table B- 12 Limits for resistance thermometer Ni 0.006170 Standard and Ni 0.006170 Air
Thermal resistor
Ni 0.006170 Standard
°C
°F
K
2123
4142
4855
-1049
-1569
1683
Ni 0.006170 Climatic
°C
°F
K
15499
31099
---
-10499
-15699
---
High limit Low limit
Table B- 13 Limits for resistance thermometer Cu xxx Standard
Thermal resistor
Cu 0.00426 Standard
°C
°F
K
2399 4639 5131
-599 -759 2133
Cu 0.00427 Standard
°C
°F
K
3119 5935 5851
-2399 -3999
333
Cu 0.00428 Standard
°C
°F
K
2399 4639 5131
-2199 -3639 533
High limit Low limit
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
65
Parameter data records B.2 Structure of the data record for dynamic reference temperature
Table B- 14 Limits for resistance thermometer Cu xxx Climatic
Thermal resistor
Cu xxx Climatic
(0.00426, 0.00427, 0.00428)
°C
°F
K
17999 32765 ---
-5999 -7599 ---
High limit Low limit
B.2
Structure of the data record for dynamic reference temperature
The WRREC instruction is used to transfer the reference junction temperature via data record 192 to data record 200 to the module.
The description of the WRREC instruction can be found in the online help from STEP 7.
If you have set the "Dynamic reference temperature" value for the "Reference junction" parameter, the module expects a new data record at least every 5 minutes. If the module does not receive a new data record within this time, it generates the "Reference channel error" diagnostics message.
Assignment of data record and channel
The following assignment applies if no submodules (1 x 9-channel) are configured for the module: Data record 192 for channel 0 Data record 193 for channel 1 Data record 194 for channel 2 Data record 195 for channel 3 Data record 196 for channel 4 Data record 197 for channel 5 Data record 198 for channel 6 Data record 199 for channel 7 Data record 200 for channel 8 If nine submodules (9 x 1-channel) are configured for the module, each submodule has only one channel. The parameters of the channel are in data record 192. Background: Each submodule you address for the data record transfer has only one channel.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
66
Manual, 09/2016, A5E36647959-AB
Parameter data records B.2 Structure of the data record for dynamic reference temperature
Structure of data record 192 for dynamic reference temperature
The following figure shows you an example of the structure of data record 192 for channel 0. The structure for data records 193 to 200 is identical.
Figure B-4 Structure of data record 192
Valid values for fixed temperature compensation
You can enter the selectable values at byte 1 of the data record for the corresponding channel. The values that you can set must be within the nominal range of the thermocouple used and within the permitted value range. See table below. The resolution corresponds to one tenth of a degree with the "Standard" temperature unit and one hundredth of a degree with the "Climatic" temperature unit.
Table B- 15 Valid values for temperature compensation via data record
Temperature unit Celsius (default) Fahrenheit (default) Kelvin (default) Celsius (climatic) Fahrenheit (climatic) Kelvin (climatic)
Decimal -1450 to 1550 -2290 to 3110 1282 to 3276 -14500 to 15500 -22900 to 31100 12820 to 32760
Hexadecimal FA56H to 60EH F70EH to C26H 502H to CCCH C75CH to 3C8CH A68CH to 797CH 3214H to 7FF8H
Additional information
You can find additional information on compensation of the reference junction temperature via data record in the Analog value processing function manual (https://support.industry.siemens.com/cs/ww/en/view/67989094) on the Internet.
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
67
Parameter data records B.3 Structure of data record 235 for scalable measuring range
B.3
Structure of data record 235 for scalable measuring range
Evaluation in the user program
In the user program, you can evaluate the status and the limits of the scalable measuring range with data record 235, which may result by reaching underflow/overflow.
Structure of data record 235
Figure B-5 Structure of data record 235
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
68
Manual, 09/2016, A5E36647959-AB
Parameter data records B.3 Structure of data record 235 for scalable measuring range
Header information
The figure below shows the structure of the header information.
Figure B-6 Structure header information of data record 235
Parameters
The figure below shows the structure of the parameter. If the corresponding bit is set to "1", the parameter is activated. * x = 2 + (channel number x 8)
Figure B-7 Structure of data record 235 - channel parameter byte x to x+7
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
69
Parameter data records B.3 Structure of data record 235 for scalable measuring range
Description of the parameters from data record 235
Table B- 16 Description of the parameters from data record 235
Parameter Scalable measuring range enabled Clipping
Resolution Measuring range center
Overflow/underflow
Description 1 = Function is active for this channel.
1 = Scalable measuring range cut off at the overflow/underflow of the underlying measuring range.
2 or 3 decimal places
Temperature in whole °C / °F / K ("working point" for the scaling)
Limits of the scalable measuring range
Example
The following example shows the values for a thermal resistor Pt 100 Standard, °C:
Table B- 17 Example of a thermal resistor Pt 100 Standard
Hex. value 10H 08H 03H 02H 02EEH 61A8H
8100H
Dec. value 16 8 3 2 750 25000
-32512
Evaluation of data record 235 V1.0 8 bytes Scalable measuring range active and clipped (clipping) Resolution: 2 decimal places Measuring range center: 750 °C Overflow (Maximum): 250.00 + 750 = 1000.00 °C Scalable measuring range is clipped at the overflow. Underflow (Minimum): -325.12 + 750 = 424.88 °C
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
70
Manual, 09/2016, A5E36647959-AB
Representation of analog values
C
Introduction
This appendix shows the analog values for all measuring ranges supported by the AI 8xU/R/RTD/TC HF analog module.
Measured value resolution
Each analog value is written left aligned to the tags. The bits marked with "x" are set to "0".
Note This resolution does not apply to temperature values. The digitalized temperature values are the result of a conversion in the analog module.
Table C- 1 Resolution of the analog values
Resolution in bits including sign
16
Values
Decimal 1
Hexadecimal 1H
Analog value
High byte
Low byte
Sign 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
71
Representation of analog values C.1 Representation of input ranges
C.1
Representation of input ranges
The tables below set out the digitized representation of the input ranges separately for bipolar and unipolar input ranges. The resolution is 16 bits.
Table C- 2 Bipolar input ranges
Dec. value
Measured value in %
32767 32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 <-117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0000000001 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Rated range 1 1 1 1 1 1 1111111111 1 0 0 1 0 1 0000000000 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Table C- 3 Unipolar input ranges
Dec. value
Measured value in %
32767 32511 27649 27648 1 0 -1 -4864 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -17.593 <-17.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 Rated range 0 0 0 0 0 0 0000000000 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Undershoot 1 1 1 0 1 1 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
72
Manual, 09/2016, A5E36647959-AB
C.2
Representation of analog values C.2 Representation of analog values in voltage measuring ranges
Representation of analog values in voltage measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible voltage measuring ranges.
Table C- 4 Voltage measuring ranges ±25 mV and ±1 V,
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±25 mV
±1 V
>29.4 mV > 1.176 V
29.4 mV
1.176 V
Range
Overflow Overshoot range
25 mV 18.75 mV 904.2 µV 0 V
1 V 0.75 V 36.17 µV 0 V
Rated range
-18.75 mV -25 mV
-0.75 V -1 V
-29.4 mV
-1.176 V
<-29.40 mV < -1.176 V
Undershoot range Underflow
Table C- 5 Voltage measuring ranges ±500 mV, ±250 mV, ±80 mV, and ±50 mV,
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±500 mV
±250 mV
>587.9 mV > 294.0 mV
587.9 mV 294.0 mV
±80 mV > 94.1 mV 94.1 mV
±50 mV > 58.8 mV 58.8 mV
Range
Overflow Overshoot range
500 mV 375 mV 18.08 µV 0 mV
250 mV 187.5 mV 9.04 µV 0 mV
80 mV 60 mV 2.89 µV 0 mV
50 mV 37.5 mA 1.81 µV 0 mV
Rated range
-375 mV -500 mV
-187.5 mV -250 mV
-60 mV -80 mV
-587.9 mV -294.0 mV -94.1 mV <-587.9 mV < -294.0 mV < -94.1 mV
-37.5 mV -50 mV
-58.8 mV < -58.8 mV
Undershoot range
Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
73
Representation of analog values C.3 Analog value representation for resistance-type transmitters / resistance thermometers
C.3
Analog value representation for resistance-type transmitters /
resistance thermometers
C.3.1
Resistance-type transmitters 150, 300, 600, 6000 Ohm
The following tables list the decimal and hexadecimal values (codes) of the possible resistance-based sensor ranges.
Table C- 6 Resistance-based sensors of 150 , 300 , 600 , and 6000
Values dec 32767 32511 27649 27648 20736 1 0
hex 7FFF 7EFF 6C01 6C00 5100 1 0
Resistive transmitter range
150
300
>176.38
>352.77
176.38
352.77
150 112.5 5.43 m 0
300 225 10.85 m 0
600 >705.53 705.53
600 450 21.70 m 0
6000 >7055.3 7055.3
6000 4500 217 m 0
Overflow Overshoot range
Rated range
C.3.2
Thermal resistor Pt 10, 50, 100, 200, 500, 1000 Standard/GOST
Thermal resistor Pt x0 Standard and Pt x0 GOST Standard
Table C- 7 Thermal resistor Pt x0 Standard (0.003851, 0.003916, 0.003902, 0.003920) and Pt x0 GOST Standard (0.003910)
Pt x0 Standard in °C (1 digit = 0.1°C) > 1000.0 1000.0 : 850.1 850.0 : -200.0 -200.1 : -243.0 < -243.0
Units dec hex
32767 10000 : 8501 8500 : -2000 -2001 : -2430 -32768
7FFF 2710 : 2135 2134 : F830 F82F : F682 8000
Pt x0 Standard in °F (1 digit = 0.1 °F) > 1832.0 1832.0 : 1562.1 1562.0 : -328.0 -328.1 : -405.4 < -405.4
Units dec
32767 18320 : 15621 15620 : -3280 -3281 : -4054 -32768
hex
7FFF 4790 : 3D05 3D04 : F330 F32F : F02A 8000
Pt x00 Standard in K (1 digit = 0.1 K) > 1273.2 1273.2 : 1123.3 1123.2 : 73.2 73.1 : 30.2 < 30.2
Units dec
32767 12732 : 11233 11232 : 732 731 : 302 32768
hex
7FFF 31BC : 2BE1 2BE0 : 2DC 2DB : 12E 8000
Range
Overflow Overshoot range Rated range
Undershoot range Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
74
Manual, 09/2016, A5E36647959-AB
Representation of analog values C.3 Analog value representation for resistance-type transmitters / resistance thermometers
Thermal resistor Pt x0 and Pt x0 GOST Climatic
Table C- 8 Thermal resistor Pt x0 Standard (0.003851, 0.003916, 0.003902, 0.003920) and Pt x0 GOST Climatic (0.003910)
Pt x0 Climatic in °C (1 digit = 0.01 °C)
> 155.00 155.00 : 130.01 130.00 : -120.00 -120.01 : -145.00 < -145.00
Units
dec 32767 15500 : 13001 13000 : -12000 -12001 : -14500 -32768
hex 7FFF 3C8C : 32C9 32C8 : D120 D11F : C75C 8000
Pt x0 Climatic in °F Units (1 digit = 0.01 °F) dec
> 311.00
32767
311.00
31100
:
:
266.01
26601
266.00
26600
:
:
-184.00
-18400
-184.01
-18401
:
:
-229.00
-22900
< -229.00
-32768
hex 7FFF 797C : 67E9 67E8 : B820 B81F : A68C 8000
Range
Overflow Overshoot range
Rated range
Undershoot range
Underflow
C.3.3
Thermal resistor Ni 10, 100, 120, 200, 500, 1000, LG-Ni 1000 Standard
The following tables list the decimal and hexadecimal values (codes) of the possible resistance thermometer ranges.
Table C- 9 Thermal resistor Ni x0, LG-Ni 1000 Standard (0.00500, 0.006180, 0.006720)
Ni x0 Standard in °C (1 digit = 0.1 °C) > 295.0 295.0 : 250.1 250.0 : -60.0 -60.1 : -105.0 < -105.0
Units
dec
hex
32767 2950 : 2501 2500 : -600 -601 : -1050 -32768
7FFF B86 : 9C5 9C4 : FDA8 FDA7 : FBE6 8000
Ni x0 Standard in °F (1 digit = 0.1 °F) > 563.0 563.0 : 482.1 482.0 : -76.0 -76.1 : -157.0 < -157.0
Units
dec
hex
32767 5630 : 4821 4820 : -760 -761 : -1570 -32768
7FFF 15FE : 12D5 12D4 : FD08 FD07 : F9DE 8000
Ni x0 Standard in K (1 digit = 0.1 K) > 568.2 568.2 : 523.3 523.2 : 213.2 213.1 : 168.2 < 168.2
Units dec
32767 5682 : 5233 5232 : 2132 2131 : 1682 32768
hex
7FFF 1632 : 1471 1470 : 854 853 : 692 8000
Range
Overflow Overshoot range Rated range
Undershoot range Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
75
Representation of analog values C.3 Analog value representation for resistance-type transmitters / resistance thermometers
C.3.4
Thermal resistor Ni 10, 100, 120, 200, 500, 1000, LG-Ni 1000 Climatic
The following tables list the decimal and hexadecimal values (codes) of the possible resistance thermometer ranges.
Table C- 10 Thermal resistor Ni x0 and LG-Ni 1000 Climatic (0.00500. 0.006180. 0.006720) and Ni x0 GOST Climatic (0.006170)
Ni x0 Climatic in °C (1 digit = 0.01 °C) > 155.00 155.00 : 130.01 130.00 : -60.00 -60.01 : -105.00 < - 105.00
Units dec
32767 15500 : 13001 13000 : -6000 -6001 : -10500 -32768
hex
7FFF 3C8C : 32C9 32C8 : E890 E88F : D6FC 8000
Ni x0 Climatic in °F (1 digit = 0.01 °F) > 311.00 311.00 : 266.01 266.00 : -76.00 -76.01 : -157.00 < - 157.00
Units dec
32767 31100 : 26601 26600 : -7600 -7601 : -15700 -32768
hex
7FFF 797C : 67E9 67E8 : E250 E24F : C2AC 8000
Range
Overflow Overshoot range Rated range
Undershoot range Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
76
Manual, 09/2016, A5E36647959-AB
Representation of analog values C.3 Analog value representation for resistance-type transmitters / resistance thermometers
C.3.5
Thermal resistor Ni 10, 100, 120, 200, 500, 1000 GOST Standard
The following tables list the decimal and hexadecimal values (codes) of the possible resistance thermometer ranges.
Table C- 11 Thermal resistor Ni x0 GOST Standard (0.006170)
Ni x0 GOST Standard in °C (1 digit = 0.1 °C) > 212.4 212.4 : 180.1 180.0 : -60.0 -60.1 : -105.0 < -105.0
Units dec. hex.
32767 2124 : 1801 1800 : -600 -601 : -1050 -32768
7FFF 084C : 0709 0708 : FDA8 FDA7 : FBE6 8000
Ni x0 GOST Standard in °F (1 digit = 0.1 °F) > 414.3 414.3 : 356.1 356.0 : -76.0 -76.1 : -157.0 < -157.0
Units
dec.
hex.
32767 4143 : 3561 3560 : -760 -761 : -1570 -32768
7FFF 102F : 0DE9 0DE8 : FD08 FD07 : F9DE 8000
Ni x0 GOST Standard in K (1 digit = 0.1 K) > 485.6 486.6 : 453.3 453.2 : 213.2 213.1 : 168.2 < 168.2
Units dec.
32767 4856 : 4533 4532 : 2132 2131 : 1682 32768
hex.
7FFF 12F8 : 11B5 11B4 : 854 853 : 692 8000
Range
Overflow Overrange Rated range Underrange Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
77
Representation of analog values C.3 Analog value representation for resistance-type transmitters / resistance thermometers
C.3.6
Thermal resistor Cu 10, 50, 100 Standard/Climatic/GOST
Thermal resistor Cu 10, 50, 100 Standard (0.00427)
Table C- 12 Thermal resistor Cu 10, 50, 100 Standard (0.00427)
Cu 10 standard in °C (1 digit = 0.1 °C) > 312.0 312.0 : 260.1 260.0 : -200.0 -200.1 : -240.0 < -240.0
Units dec.
32767 3120 : 2601 2600 : -2000 -2001 : -2400 -32768
hex.
7FFF C30 : A29 A28 : F830 F82F : F6A0 8000
Cu 10 standard in °F (1 digit = 0.1 °F) > 593.6 593.6 : 500.1 500.0 : -328.0 -328.1 : -400.0 < -400.0
Units dec.
32767 5936 : 5001 5000 : -3280 -3281 : -4000 -32768
hex.
7FFF 1730 : 12D5 1389 : F330 F32F : F060 8000
Cu 10 standard in K (1 digit = 0.1 K) > 585.2 585.2 : 533.3 533.2 : 73.2 73.1 : 33.2 < 33.2
Units dec.
32767 5852 : 5333 5332 : 732 731 : 332 32768
hex.
7FFF 16DC : 14D5 14D4 : 2DC 2DB : 14C 8000
Range
Overflow Overrange Nominal range Underrange Underflow
Thermal resistor Cu 10, 50, 100 GOST Standard (0.00426)
Table C- 13 Thermal resistor Cu 10, 50, 100 GOST Standard (0.00426)
Cu x0 Standard in °C (1 digit = 0.1 °C) > 240.0 240.0 : 200.1 200.0 : -50.0 -50.1 : -60.0 < - 60.00
Units dec.
32767 2400 : 2001 2000 : -500 -501 : -600 -32768
hex.
7FFF 0960 : 07D1 07D0 : FE0C FE0B : FDA8 8000
Cu x0 standard in °F (1 digit = 0.1 °F) > 464.0 464.0 : 392.1 392.0 : -58.0 -58.1 : -76.0 < - 76.0
Units dec.
32767 4640 : 3921 3920 : -580 -581 : -760 -32768
hex.
7FFF 1220 : 0F51 0F50 : FDBC FDBB : FD08 8000
Cu x0 standard in K (1 digit = 0.1 K) > 513.2 513.2 : 473.3 473.2 : 222.2 223.1 : 213.2 < 213.2
Units dec.
32767 5132 : 4733 4732 : 2232 2231 : 2132 32768
hex.
7FFF 140C : 127D 127C : 8B8 8B7 : 854 8000
Range
Overflow Overrange
Nominal range Underrange Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
78
Manual, 09/2016, A5E36647959-AB
Representation of analog values C.3 Analog value representation for resistance-type transmitters / resistance thermometers
Thermal resistor Cu 10, 50, 100 GOST Standard (0.00428)
Table C- 14 Thermal resistor Cu 10, 50, 100 GOST Standard (0.00428)
Cu x0 standard in °C (1 digit = 0.1 °C) > 240.0 240.0 : 200.1 200.0 : -180.0 -180.1 : -220.0 < - 220.0
Units dec.
32767 2400 : 2001 2000 : -1800 -1801 : -2200 -32768
hex.
7FFF 0960 : 07D1 07D0 : F8F8 F8F7 : F768 8000
Cu x0 standard in °F (1 digit = 0.1 °F) > 464.0 464.0 : 392.1 392.0 : -292.0 -292.1 : -364.0 < - 364.0
Units dec.
32767 4640 : 3921 3920 : -2920 -2921 : -3640 -32768
hex.
7FFF 1220 : 0F51 0F50 : F498 F497 : F1C8 8000
Cu x0 standard in K (1 digit = 0.1 K) > 513.2 513.2 : 473.3 473.2 : 93.2 93.1 : 53.2 < 53.2
Units dec.
32767 5132 : 4733 4732 : 932 931 : 532 32768
hex.
7FFF 140C : 127D 127C : 3A4 3A3 : 214 8000
Range
Overflow Overrange
Nominal range Underrange Underflow
Thermal resistor Cu x0 Climatic (0.00427) and Cu x0 Gost Climatic (0.00426 and 0.00428)
Table C- 15 Thermal resistor Cu 10, 50, 100 Climatic and Cu 10, 50, 100 GOST Climatic
Cu x0 Climatic Units
in °C
dec.
(1 digit = 0.01 °C)
> 180.00 180.00 : 150.01 150.00 : -50.00 -50.01 : -60.00 < - 60.00
32767 18000 : 15001 15000 : -5000 -5001 : -6000 -32768
hex.
7FFF 4650 : 3A99 3A98 : EC78 EC77 : E890 8000
Cu x0 Climatic in °F (1 digit = 0.01 °F) > 325.11 327.66 : 280.01 280.00 : - 58.00 -58.01 : -76.00 < - 76.00
Units dec.
32767 32766 : 28001 28000 : -5800 -5801 : -7600 -32768
hex.
7FFF 7FFE : 6D61 6D60 : I958 E957 : E250 8000
Range
Overflow Overrange Nominal range Underrange Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
79
Representation of analog values C.4 Representation of analog values for thermocouples
C.4
Representation of analog values for thermocouples
The following tables list the decimal and hexadecimal values (codes) of the supported thermocouples.
Table C- 16 Thermocouple type B
Type B in °C
> 2070.0 2070.0 : 1820.1 1820.0 : 250.0 249.9 : 0.0 < 0.0
Values
dec. 32767 20700 : 18201 18200 : 2500 2499 : 0 -32768
hex. 7FFF 50DC : 4719 4718 : 09C4 09C3 : 0 8000
Type B in °F
> 3276.6 3276.6 : 2786.6 2786.5 : 482.0 481.9 : 32.0 < 32.0
Values
dec. 32767 32766 : 27866 27865 : 4820 4819 : 320 -32768
hex. 7FFF 7FFE : 6CDA 6CD9 : 12D4 12D3 : 0140 8000
Type B in K
> 2343.2 2343.2 : 2093.3 2093.2 : 523.2 523.1 : 273.2 < 273.2
Values
dec. 32767 23432 : 20933 20932 : 5232 5231 : 2732 32768
hex. 7FFF 5B88 : 51C5 51C4 : 1470 1469 : 0AAC 8000
Range Overflow Overrange
Nominal range Underrange
Underflow
Table C- 17 Thermocouple Type C
Type C in °C
> 2500.0 2500.0 : 2300.1 2300.0 : 0.0 -0.1 : -120.0 < -120.0
Values
dec. 32767 25000 : 23001 23000 : 0 -1 : -1200 -32768
hex. 7FFF 61A8 : 59D9 59D8 : 0000 FFFF : FB50 8000
Type C in °F
> 3276.6 3276.6 : 2786.6 2786.5 : 32.0 31.9 : -184.0 < -184.0
Values
dec. 32767 32766 : 27866 27865 : 320 319 : -1840 -32768
hex. 7FFF 7FFE : 6CDA 6CD9 : 0140 013F : F8D0 8000
Type C in °K
> 2773.2 2773.2 : 2573.3 2573.2 : 273.2 273.1 : 153.2 < 153.2
Values
dec. 32767 27732 : 25733 25732 : 2732 2731 : 1532 32768
hex. 7FFF 6C54 : 6485 6484 : 0AAC 0AAB : 05FC 8000
Range Overflow Overrange
Nominal range Underrange
Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
80
Manual, 09/2016, A5E36647959-AB
Representation of analog values C.4 Representation of analog values for thermocouples
Table C- 18 Thermocouple type E
Type E in °C
> 1200.0 1200.0 : 1000.1 1000.0 : -270.0 < -270.0
Values dec. 32767 12000 : 10001 10000 : -2700 -32768
hex. 7FFF 2EE0 : 2711 2710 : F574 8000
Type E in °F
> 2192.0 2192.0 : 1832.2 1832.0 : -454.0 < -454.0
Values dec. 32767 21920 : 18322 18320 : -4540 -32768
hex. 7FFF 55A0 : 4792 4790 : EE44 8000
Type E in K
> 1473.2 1473.2 : 1273.3 1273.2 : 3.2 < 3.2
Values dec. 32767 14732 : 12733 12732 : 32 -32768
hex. 7FFF 398C : 31BD 31BC : 0020 8000
Range Overflow Overrange
Nominal range
Underflow
Table C- 19 Thermocouple type J
Type J in °C
> 1450.0 1450.0 : 1200.1 1200.0 : -210.0 < -210.0
Values dec. 32767 14500 : 12001 12000 : -2100 -32768
hex. 7FFF 38A4 : 2EE1 2EE0 : F7CC 8000
Type J in °F
> 2642.0 2642.0 : 2192.2 2192.0 : -346.0 < -346.0
Values dec. 32767 26420 : 21922 21920 : -3460 -32768
hex. 7FFF 6734 : 55A2 55A0 : F27C 8000
Type J in K
> 1723.2 1723.2 : 1473.3 1473.2 : 63.2 < 63.2
Values dec. 32767 17232 : 14733 14732 : 632 -32768
hex. 7FFF 4350 : 398D 398C : 0278 8000
Range Overflow Overrange
Nominal range
Underflow
Table C- 20 Thermocouple type K
Type K in °C
> 1622.0 1622.0 : 1372.1 1372.0 : -270.0 < -270.0
Values
dec. 32767 16220 : 13721 13720 : -2700 -32768
hex. 7FFF 3F5C : 3599 3598 : F574 8000
Type K in °F
> 2951.6 2951.6 : 2501.7 2501.6 : -454.0 < -454.0
Values
dec. 32767 29516 : 25017 25016 : -4540 -32768
hex. 7FFF 734C : 61B9 61B8 : EE44 8000
Type K in K
> 1895.2 1895.2 : 1645.3 1645.2 : 3.2 < 3.2
Values
dec. 32767 18952 : 16453 16452 : 32 -32768
hex. 7FFF 4A08 : 4045 4044 : 0020 8000
Range Overflow Overrange
Nominal range
Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
81
Representation of analog values C.4 Representation of analog values for thermocouples
Table C- 21 Thermocouple type N
Type N in °C
> 1550.0 1550.0 : 1300.1 1300.0 : -270.0 < -270.0
Values dec. 32767 15500 : 13001 13000 : -2700 -32768
hex. 7FFF 3C8C : 32C9 32C8 : F574 8000
Type N in °F
> 2822.0 2822.0 : 2372.2 2372.0 : -454.0 < -454.0
Values dec. 32767 28220 : 23722 23720 : -4540 -32768
hex. 7FFF 6E3C : 5CAA 5CA8 : EE44 8000
Type N in K
> 1823.2 1823.2 : 1573.3 1573.2 : 3.2 < 3.2
Values dec. 32767 18232 : 15733 15732 : 32 -32768
hex. 7FFF 4738 : 3D75 3D74 : 0020 8000
Range Overflow Overrange
Nominal range
Underflow
Table C- 22 Thermocouple type R and S
Type R, S Values
in °C
dec.
> 2019.0 32767
2019.0 20190
:
:
1769.1 17691
1769.0 17690
:
:
-50.0
-500
-50.1
-501
:
:
-170.0 -1700
< -170.0 -32768
hex. 7FFF 4EDE : 451B 451A : FE0C FE0B : F95C 8000
Type R, S Values
in °F
dec.
> 3276.6 32767
3276.6 32766
:
:
3216.4 32164
3216.2 32162
:
:
-58.0
-580
-58.1
-581
:
:
-274.0 -2740
< -274.0 -32768
hex. 7FFF 7FFE : 7DA4 7DA2 : FDBC FDBB : F54C 8000
Types R, S in K
> 2292.2 2292.2 : 2042.3 2042.2 : 223.2 223.1 : 103.2 < 103.2
Values
dec. 32767 22922 : 20423 20422 : 2232 2231 : 1032 < 1032
hex. 7FFF 598A : 4FC7 4FC6 : 08B8 08B7 : 0408 8000
Range Overflow Overrange
Nominal range Underrange
Underflow
Table C- 23 Thermocouple type T
Type T in °C
> 540.0 540.0 : 400.1 400.0 : -270.0 < -270.0
Values dec. 32767 5400 : 4001 4000 : -2700 -32768
hex. 7FFF 1518 : 0FA1 0FA0 : F574 8000
Type T in °F
> 1004.0 1004.0 : 752.2 752.0 : -454.0 < -454.0
Values dec. 32767 10040 : 7522 7520 : -4540 -32768
hex. 7FFF 2738 : 1D62 1D60 : EE44 8000
Type T in K
> 813.2 813.2 : 673.3 673.2 : 3.2 < 3.2
Values dec. 32767 8132 : 6733 6732 : 32 -32768
hex. 7FFF 1FC4 : 1AAD 1AAC : 0020 8000
Range Overflow Overrange
Nominal range
Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
82
Manual, 09/2016, A5E36647959-AB
Representation of analog values C.4 Representation of analog values for thermocouples
Table C- 24 Thermocouple type TXK/XKL GOST
Type
Values
TXK /XKL dec. in °C
> 1050.0 32767
1050.0 10500
:
:
800.1
8001
800.0
8000
:
:
-200.0 -2000
< -200.0 -32768
hex.
7FFF 2904 : 1FA1 1F40 : F830 8000
Type
Values
TXK /XKL dec. in °F
> 1922.0 32767
1922.0 19220
:
:
1472.1 14721
1472.0 14720
:
:
-328.0 -3280
< -328.0 -32768
hex.
7FFF 4B14 : 3981 3980 : F330 8000
Type TXK/XKL in K > 1323.2 1323.2 : 1073.3 1073.2 : 73.2 < 73.2
Values dec.
32767 13232 : 10733 10732 : 732 -32768
hex.
7FFF 33B0 : 29ED 29EC : 02DC 8000
Range
Overflow Overrange
Nominal range Underflow
Analog Input Module AI 8xU/R/RTD/TC HF (6ES7531-7PF00-0AB0)
Manual, 09/2016, A5E36647959-AB
83
SIMATIC
S7-1500/ET 200MP Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual
_Pr_ef_ac_e_______________ _G_uid_e_to_d_o_cu_m_en_ta_tio_n______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_d_ra_w_in_g ________A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _Rvae_lpu_rees_se_n_ta_tio_n _of_a_na_lo_g ____C__
09/2016
A5E32366209-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E32366209-AC 11/2016 Subject to change
Copyright © Siemens AG 2014 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change:
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
4
Manual, 09/2016, A5E32366209-AC
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
5
Table of contents
Preface ................................................................................................................................................... 4
1 Guide to documentation .......................................................................................................................... 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 14
3.1
Wiring and block diagrams..................................................................................................... 14
4 Parameters/address space ................................................................................................................... 23
4.1
Measurement types and ranges ............................................................................................ 23
4.2
Parameters............................................................................................................................. 26
4.3
Declaration of parameters...................................................................................................... 29
4.4
Address space ....................................................................................................................... 32
5 Interrupts/diagnostics alarms................................................................................................................. 37
5.1
Status and error displays ....................................................................................................... 37
5.2
Interrupts ................................................................................................................................ 39
5.3
Diagnostics alarms................................................................................................................. 41
6 Technical specifications ........................................................................................................................ 42
A Dimension drawing ............................................................................................................................... 50
B Parameter data records ........................................................................................................................ 52
B.1
Parameter assignment and structure of the parameter data records .................................... 52
B.2
Structure of a data record for dynamic reference temperature.............................................. 61
C Representation of analog values ........................................................................................................... 63
C.1
Representation of input ranges.............................................................................................. 64
C.2
Representation of analog values in voltage measuring ranges ............................................. 65
C.3
Representation of analog values in the current measuring ranges ....................................... 66
C.4
Representation of the analog values of resistance-based sensors/resistance
thermometers ......................................................................................................................... 67
C.5
Representation of analog values for thermocouples ............................................................. 70
C.6
Measured values for wire break diagnostics.......................................................................... 73
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
6
Manual, 09/2016, A5E32366209-AC
Guide to documentation
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
7
Guide to documentation
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
8
Manual, 09/2016, A5E32366209-AC
Guide to documentation
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
9
Guide to documentation
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
10
Manual, 09/2016, A5E32366209-AC
Product overview
2.1
Properties
Article number
6ES7531-7QD00-0AB0
View of the module
2
Figure 2-1 View of the AI 4xU/I/RTD/TC ST module
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
11
Product overview 2.1 Properties
Properties
The module has the following technical properties: 4 analog inputs Resolution 16 bits including sign Voltage measurement type can be set per channel Current measurement type can be set per channel Resistance measurement type can be set for channel 0 and 2 Resistance thermometer (RTD) measurement type can be set for channel 0 and 2 Thermocouple (TC) measurement type can be set per channel Configurable diagnostics (per channel) Hardware interrupt on limit violation can be set per channel (two low and two high limits
per channel) The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware version of the module
Firmware update Calibration in runtime Identification data I&M0 to I&M3 Parameter assignment in RUN Module-internal Shared Input (MSI)
Configurable submodules / submodules for Shared Device
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
V13 or higher with HSP 0102
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3
or higher
X
V13 or higher with
X
HSP 0102
V13 or higher with
X
HSP 0102
V13 or higher with
X
HSP 0102
V13 Update 3 or higher (PROFINET IO only)
X (PROFINET IO only)
V13 Update 3 or higher (PROFINET IO only)
X (PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
12
Manual, 09/2016, A5E32366209-AC
Product overview 2.1 Properties
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Front connector (push-in terminals) including cable tie Shield bracket Shield terminal Power supply element (push-in terminals) Labeling strips U connector Universal front door You can find additional information on accessories in the system manual System manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792)
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
13
Wiring
3
3.1
Wiring and block diagrams
This section contains the block diagram of the module and outlines various connection options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
You can find additional information on compensating the reference junction temperature in the function manual Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094), the structure of a data record in the section Structure of a data record for dynamic reference temperature (Page 61).
Note You may use and combine the different wiring options for all channels.
Abbreviations used
Un+/UnMn+/MnIn+/InIc n+/Ic nUVn L+ M MANA
Voltage input channel n (voltage only) Measuring input channel n Current input channel n (current only) Current output for RTD, channel n Supply voltage at channel n for 2-wire transmitters (2WMT) Connection for supply voltage Ground connection Reference potential of the analog circuit
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
14
Manual, 09/2016, A5E32366209-AC
Wiring 3.1 Wiring and block diagrams Pin assignment for the power supply element The power supply element is plugged onto the front connector for powering the analog module. Wire the supply voltage to terminals 41 (L+) and 43 (M).
Figure 3-1 Power supply element wiring
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
15
Wiring 3.1 Wiring and block diagrams
Connection: Voltage measurement
The example in the following figure shows the pin assignment for voltage measurement.
Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 4 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-2 Block diagram and pin assignment for voltage measurement
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
16
Manual, 09/2016, A5E32366209-AC
Wiring 3.1 Wiring and block diagrams
Connection: 4-wire transmitters for current measurement
The example in the following figure shows the pin assignment for current measurement with 4-wire transmitters.
Wiring 4-wire transmitter Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Figure 3-3 Block diagram and pin assignment for current measurement
Channel or 4 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
17
Wiring 3.1 Wiring and block diagrams
Connection: 2-wire transmitters for current measurement
The example in the following figure shows the pin assignment for current measurement with 2-wire transmitters.
Wiring 2-wire transmitter Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 4 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-4 Block diagram and pin assignment for current measurement with 2-wire transmitter
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
18
Manual, 09/2016, A5E32366209-AC
Wiring 3.1 Wiring and block diagrams
Connection: 2-wire connection of resistance-based sensors or thermal resistors (RTD)
The example in the figure below shows the pin assignment for 2-wire connection of resistance sensors or thermal resistors.
2-wire connection Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Figure 3-5 Block diagram and pin assignment for 2-wire connection
Channel or 4 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
19
Wiring 3.1 Wiring and block diagrams
Connection: 3- and 4-wire connection of resistance sensors or thermal resistors (RTD)
The example in the figure below shows the pin assignment for 3- and 4-wire connection of resistance-based sensors or thermal resistors.
4-wire connection 3-wire connection Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Channel or 4 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-6 Block diagram and pin assignment for 3- and 4-wire connection
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
20
Manual, 09/2016, A5E32366209-AC
Wiring 3.1 Wiring and block diagrams
Connection: Thermocouples for external/internal compensation
The figure below shows an example of the pin assignment for thermocouples for external or internal compensation.
Wiring of a thermocouple for internal compensation Wiring of a thermocouple for external compensation Analog digital converter Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx RUN ERROR PWR
Figure 3-7 Block diagram and pin assignment for the thermocouple
Channel or 4 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
21
Wiring 3.1 Wiring and block diagrams
Connection: Grounded thermocouples for internal compensation
The following figure shows an example of the pin assignment for grounded thermocouples for internal compensation.
Wiring of a thermocouple (grounded) for internal
compensation
Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional)
CHx
RUN ERROR PWR
Channel or 4 x channel status (green/red)
Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-8 Block diagram and pin assignment for grounded thermocouple
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
22
Manual, 09/2016, A5E32366209-AC
Parameters/address space
4
4.1
Measurement types and ranges
Introduction
The module is set to voltage measurement type with measuring range ±10 V by default. You need to reassign the module parameters with STEP 7 if you want to use a different measurement type or range.
Deactivate the input if it is not going to be used. The module cycle time is shortened and the interference factors that lead to failure of the module (for example, triggering a hardware interrupt) are avoided.
Measurement types and ranges
The following table shows the measurement types and the respective measuring range.
Table 4- 1 Measurement types and measuring ranges
Measurement type Voltage
Current 2WMT (2-wire transmitter) Current 4WMT (4-wire transmitter) Resistor (2-wire connection) Resistor (3-wire connection) (4-wire connection)
Measuring range ±50 mV ±80 mV ±250 mV ±500 mV ±1 V ±2.5 V 1 V to 5 V ±5 V ±10 V 4 mA to 20 mA
0 mA to 20 mA 4 mA to 20 mA ±20 mA
PTC 150 300 600 6000
Representation of analog values See Representation of analog values in voltage measuring ranges (Page 65)
See Representation of analog values in the current measuring ranges (Page 66)
See Representation of the analog values of resistance-based sensors/resistance thermometers (Page 67)
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
23
Parameters/address space 4.1 Measurement types and ranges
Measurement type Thermal resistor RTD (3-wire connection) (4-wire connection)
Thermocouple (TC)
Disabled
Measuring range PT100 Standard/Climate PT200 Standard/Climate PT500 Standard/Climate PT1000 Standard/Climate Ni100 Standard/Climate Ni1000 Standard/Climate LG-Ni1000 Standard/Climatic Type B Type E Type J Type K Type N Type R Type S Type T -
Representation of analog values
See Representation of analog values for thermocouples (Page 70)
The tables of the input ranges, overflow, underrange, etc. are available in the appendix Representation of analog values (Page 63).
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
24
Manual, 09/2016, A5E32366209-AC
Parameters/address space 4.1 Measurement types and ranges
Special features for the use of PTC resistors
PTC resistors are suitable for temperature monitoring of electrical devices, such as motors, drives, and transformers. Use Type A PTC resistors (PTC thermistor) in accordance with DIN/VDE 0660, part 302. In doing so, follow these steps: 1. Choose "Resistor (2-wire terminal)" and "PTC" in STEP 7. 2. Connect the PTC using 2-wire connection technology. If you enable the "Underflow" diagnostics in STEP 7, it will be signaled for resistance values <18 . In this case, this diagnostic signifies "Short-circuit in the wiring". The figure below shows the address space assignment for AI 4xU/I/RTD/TC ST with PTC resistors.
Figure 4-1 Address space for AI 4xU/I/RTD/TC ST with PTC resistors The diagram below shows the temperature profile and the corresponding switching points.
Figure 4-2 Temperature profile and the corresponding switching points
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
25
Parameters/address space 4.2 Parameters
Special features of the measured value acquisition with PTC resistors
If faults occur (for example supply voltage L+ missing) that make it impossible to acquire measured values with PTC resistors, the corresponding channels (IB x/IB x+1) report overflow (7FFFH). If the value status (QI) is enabled, the value 0 = incorrect is output in the corresponding bit.
4.2
Parameters
AI 4xU/I/RTD/TC ST parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
When assigning parameters in the user program, use the WRREC instruction to transfer the parameters to the module by means of data records; refer to the section Parameter assignment and structure of the parameter data records (Page 52).
The following parameter settings are possible:
Table 4- 2 Configurable parameters and their defaults
Parameters
Range of values
Default setting
Diagnostics
· No supply voltage L+
Yes/No
No
· Overflow
Yes/No
No
· Underflow
Yes/No
No
· Common mode error
Yes/No
No
· Reference junction
Yes/No
No
· Wire break
Yes/No
No
· Current limit for wire break 1.185 mA or 3.6 mA 1.185 mA diagnostics 2)
Reconfiguration in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7, as of V13 or GSD file PROFINET IO
GSD file PROFIBUS DP
Yes
Channel 1)
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Module 3) Module 3) Module 3) Module 3) Module 3) Module 3) --- 4)
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
26
Manual, 09/2016, A5E32366209-AC
Parameters/address space 4.2 Parameters
Parameters
Measuring · Measurement type · Measuring range · Temperature coefficient
· Temperature unit · Interference frequency
suppression · Smoothing · Reference junction
· Fixed reference temperature
Range of values
Default setting
See section Measurement types and ranges (Page 23)
Voltage ±10 V
Pt: 0.003851 Pt: 0.003902 Pt: 0.003916 Pt: 0.003920 Ni: 0.00618 Ni: 0.00672 LG-Ni: 0.005000
· Kelvin (K) · Fahrenheit (°F)
0.003851 °C
· Celsius (°C)
400 Hz 60 Hz 50 Hz 10 Hz
None/low/medium/hi gh
· Fixed reference temperature
· Dynamic reference temperature
50 Hz
None Internal reference junction
· Internal reference junction
Temperature
25 °C
Reconfiguration in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7, as of V13 or GSD file PROFINET IO
GSD file PROFIBUS DP
Yes
Channel
Yes
Channel
Yes
Channel
Channel Channel Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Module
Module
Channel Module 4) · Dynamic ref-
erence temperature · Internal reference junction
--- 4)
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
27
Parameters/address space 4.2 Parameters
Parameters
Range of values
Hardware interrupts · Hardware interrupt low
limit 1
· Hardware interrupt high limit 1
· Hardware interrupt low limit 2
· Hardware interrupt high limit 2
Yes/No Yes/No Yes/No Yes/No
Default setting
No
Reconfiguration in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7, as of V13 or GSD file PROFINET IO
GSD file PROFIBUS DP
Yes
Channel
--- 4)
No
Yes
Channel
--- 4)
No
Yes
Channel
--- 4)
No
Yes
Channel
--- 4)
1) If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault. You can prevent this alarm surge by assigning the diagnostics function to one channel only.
2) When "Wire break" diagnostics is disabled, the current limit of 1.185 mA is applied to the value status. For measured values below 1.185 mA, the value status is always: 0 = fault.
3) You can set the effective range of the diagnostics for each channel in the user program with data records 0 to 3.
4) You can set the current limit for wire break diagnostics, the setting "Fixed reference temperature" as well as the limits for hardware interrupts in the user program with data records 0 to 3.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
28
Manual, 09/2016, A5E32366209-AC
Parameters/address space 4.3 Declaration of parameters
4.3
Declaration of parameters
No supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Overflow
Enabling of the diagnostics if the measured value violates the high limit.
Underflow
Enabling of the diagnostics when the measured value falls below the underrange or for voltage measurement ranges of ± 50 mV to ± 2.5 V if the inputs are not connected.
Common mode error
Enabling of diagnostics if the valid common mode voltage is exceeded.
Enable the Common mode error diagnostics when 2WMT is connected, for example, to check for a short circuit to groundANA or a wire break. If you do not need the Common mode error diagnostics, disable the parameter.
Reference junction
Enabling of the diagnostics reference junction when the TC channel has no reference temperature or incorrect reference temperature.
Wire break
Enabling of the diagnostics if the module has no current flow or the current is too weak for the measurement at the corresponding configured input or the applied voltage is too low.
Current limit for wire break diagnostics
Threshold for reporting wire breaks. The value can be set to 1.185 mA or 3.6 mA, depending on the sensor used.
Temperature coefficient
The temperature coefficient depends on the chemical composition of the material. In Europe, only one value is used per sensor type (default value).
The temperature coefficient ( value) indicates by how much the resistance of a specific material changes relatively if the temperature increases by 1 °C.
The further values facilitate a sensor-specific setting of the temperature coefficient and enhance accuracy.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
29
Parameters/address space 4.3 Declaration of parameters
Interference frequency suppression
At analog input modules, this suppresses interference caused by the frequency of AC mains.
The frequency of AC network may corrupt measurements, particularly in the low voltage ranges, and when thermocouples are being used. For this parameter, the user defines the mains frequency prevailing on his system.
Smoothing
The individual measured values are smoothed using filtering. The smoothing can be set in 4 levels.
Smoothing time = number of module cycles (k) x cycle time of the module.
The following figure shows the number of module cycles after which the smoothed analog value is almost 100%, depending on the set smoothing. It is valid for each signal change at the analog input.
None (k = 1) Weak (k = 4) Medium (k = 16) Strong (k = 32)
Figure 4-3 Smoothing with AI 4xU/I/RTD/TC ST
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
30
Manual, 09/2016, A5E32366209-AC
Parameters/address space 4.3 Declaration of parameters
Reference junction
The following settings can be configured for the reference junction parameter:
Table 4- 3 Possible parameter assignments for the reference junction parameter TC
Setting Fixed reference temperature Dynamic reference temperature
Internal reference junction
Description
The reference junction temperature is configured and stored in the module as a fixed value.
The reference junction temperature is transferred in the user program from the CPU to the module by data records 192 to 195 using the WRREC (SFB 53) instruction.
The reference junction temperature is determined using an integrated sensor of the module.
Hardware interrupt 1 or 2
Enabling of a hardware interrupt at violation of high limit 1 or 2 or low limit 1 or 2.
Low limit 1 or 2
Specifies the low limit threshold that triggers hardware interrupt 1 or 2.
High limit 1 or 2
Specifies the high limit threshold that triggers hardware interrupt 1 or 2.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
31
Parameters/address space 4.4 Address space
4.4
Address space
The module can be configured in various ways in STEP 7. Depending on the configuration, additional/different addresses are assigned in the process image of the inputs.
Configuration options of AI 4xU/I/RTD/TC ST
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 4 Configuration options Configuration
Short designation/module name in the GSD file
1 x 4-channel without value status 1 x 4-channel with value status 4 x 1-channel without value status
AI 4xU/I/RTD/TC ST AI 4xU/I/RTD/TC ST QI AI 4xU/I/RTD/TC ST S
4 x 1-channel with value status
AI 4xU/I/RTD/TC ST S QI
1 x 4-channel with value status for module- AI 4xU/I/RTD/TC ST MSI internal shared input with up to 4 submodules
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog
STEP 7 (TIA Portal)
V13 or higher with HSP 0102
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3 or higher
X
V13 or higher with
X
HSP 0102
V13 Update 3 or higher
(PROFINET IO only)
X
(PROFINET IO only)
V13 Update 3 or higher
(PROFINET IO only)
X
(PROFINET IO only)
V13 Update 3 or higher
(PROFINET IO only)
X
(PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names: AI 4xU/I/RTD/TC ST QI AI 4xU/I/RTD/TC ST S QI AI 4xU/I/RTD/TC ST MSI An additional bit is assigned to each channel for the value status. The value status bit indicates if the read in digital value is valid. (0 = value is incorrect).
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
32
Manual, 09/2016, A5E32366209-AC
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 4-channel AI 4xU/I/RTD/TC ST QI
The figure below shows the address space assignment for configuration as a 1 x 4-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "IB x" stands, for example, for the module start address input byte x.
Figure 4-4 Address space for configuration as 1 x 4-channel AI 4xU/I/RTD/TC ST QI with value status
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
33
Parameters/address space 4.4 Address space
Address space for configuration as 4 x 1-channel AI 4xU/I/RTD/TC ST S QI
For the configuration as a 4 x 1-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Unlike the 1 x 4-channel module configuration, each of the four submodules has a freely assignable start address.
Figure 4-5 Address space for configuration as 4 x 1-channel AI 4xU/I/RTD/TC ST S QI with value status
Address space for configuration as 1 x 4-channel AI 4xU/I/RTD/TC ST MSI
The channels 0 to 3 of the module are copied in up to 4 submodules with configuration 1 x 4-channel module (Module-internal shared input, MSI). Channels 0 to 3 are then available with identical input values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels.
The number of available submodules depends on the used interface module. Please observe the information in the manual for the particular interface module.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
34
Manual, 09/2016, A5E32366209-AC
Parameters/address space 4.4 Address space
Value status (Quality Information, QI) The meaning of the value status depends on the submodule on which it occurs. For the 1st submodule (= basic submodule), the value status 0 indicates that the value is incorrect. For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready). The figure below shows the assignment of the address space with submodules 1 and 2.
Figure 4-6 Address space for configuration as 1 x 4-channel AI 4xU/I/RTD/TC ST MSI with value status
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
35
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodule 3 and 4.
Reference
Figure 4-7 Address space for configuration as 1 x 4-channel AI 4xU/I/RTD/TC ST MSI with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
36
Manual, 09/2016, A5E32366209-AC
Interrupts/diagnostics alarms
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of AI 4xU/I/RTD/TC ST.
5
Figure 5-1 LED displays of the module AI 4xU/I/RTD/TC ST
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
37
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Corrective measures for diagnostics alarms can be found in the section Diagnostics alarms (Page 41).
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LEDs RUN ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid configuration is set. Module is configured.
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective.
Solution
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are insert-
ed. ---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
PWR LED
Table 5- 2 PWR status display
LED PWR Off On
Meaning Supply voltage L+ to module too low or missing
Supply voltage L+ is present and OK.
Solution Check supply voltage L+.
---
CHx LED
Table 5- 3 CHx status display
LED CHx Off On On
Meaning Channel disabled.
Channel configured and OK.
Channel is configured (channel error pending). Diagnostics alarm: e.g. wire break
Solution ---
---
Check the wiring Disable diagnostics.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
38
Manual, 09/2016, A5E32366209-AC
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
Analog input module AI 4xU/I/RTD/TC ST supports the following diagnostic and hardware interrupts.
You can find detailed information on the event in the error organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: Missing supply voltage L+ Wire break Overflow Underflow Common mode error Reference junction Parameter assignment error
Hardware interrupt
The module generates a hardware interrupt at the following events:
Low limit violated 1
High limit violated 1
Low limit violated 2
Above high limit 2
The module channel that triggered the hardware interrupt is entered in the start information of the organization block. The diagram below shows the assignment to the bits of double word 8 in local data.
Figure 5-2 OB start information
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
39
Interrupts/diagnostics alarms 5.2 Interrupts
Reaction when reaching limits 1 and 2 at the same time
If the two high limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for high limit 1 first. The configured value for high limit 2 is irrelevant. After processing the hardware interrupt for high limit 1, the module triggers the hardware interrupt for high limit 2.
The module has the same reaction when the low limits are reached at the same time. If the two low limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for low limit 1 first. After processing the hardware interrupt for low limit 1, the module triggers the hardware interrupt for low limit 2.
Structure of the additional interrupt information
Table 5- 4 Structure of USI = W#16#0001
Data block name
Contents
USI (User Structure Identifier)
W#16#0001
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#n
The event that triggered the hardware interrupt follows.
Event
B#16#03
B#16#04
B#16#05
B#16#06
Remark
Additional interrupt info for hardware interrupts of the I/O module
Bytes 2
Number of the event-triggering channel (n = 1 number of module channels -1)
Low limit violated 1
1
High limit violated 1
Low limit violated 2
Violation of high limit 2
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
40
Manual, 09/2016, A5E32366209-AC
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Table 5- 5
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes on the module for each diagnostics event. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Wire break
Error code 6H
Overflow
7H
Underflow
8H
Parameter assignment 10H error
Load voltage missing 11H
Reference channel
15H
error
Common mode error 118H
Channel temporarily
1FH
unavailable
Meaning Impedance of encoder circuit too high
Wire break between the module and sensor Channel not connected (open)
Solution Use a different encoder type or modify the wiring, for example, using cables with larger cross-section Connect the cable
· Disable diagnostics · Connect the channel
Measuring range violated Measuring range violated
· The module cannot evaluate parameters for the channel
· Incorrect parameter assignment
Check the measuring range Check the measuring range Correct the parameter assignment
Supply voltage L+ of the module is missing
Reference temperature of the reference junction for the operated TC channel with compensation is invalid.
Valid common mode voltage exceeded
Causes when a 2WT is connected, e.g.:
Connect supply voltage L+ to module/channel
Check the resistance thermometer. For the compensation with data record, restore communication to the module/station.
Check the wiring, e.g. sensor ground connections, use equipotential cables
· Wire break · Galvanic connection to MANA
User calibration is active.
Channel currently not providing current/valid values.
Exit user calibration.
Diagnostics alarms with value status (QI)
If you configure the module with value status (QI), the module always checks all errors even if the respective diagnostics is not enabled. But the module cancels the inspection as soon as it detects the first error, regardless if the respective diagnostics has been enabled or not. The result may be that enabled diagnostics may not be displayed.
Example: You have enabled "Underflow" diagnostics, but the module detects the "Wire break" diagnostics first and aborts after this error message. The "Underflow" diagnostics is not detected.
Recommendation: To ensure that all errors can be diagnosed reliably, select all check boxes under "Diagnostics".
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
41
Technical specifications
6
Technical specifications of the AI 4xU/I/RTD/TC ST
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7531-7QD00-0AB0
AI 4xU/I/RTD/TC ST FS01 V1.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Scalable measuring range
No
Scalable measured values
No
Measuring range adjustment
No
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V13 / V13.0.2
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
Oversampling
No
MSI
Yes
CiR Configuration in RUN
Parameter assignment in RUN possible
Yes
Calibration in RUN possible
Yes
Supply voltage
Rated value (DC) Valid range, low limit (DC) Valid range, high limit (DC) Reverse polarity protection Input current Current consumption, max.
24 V 20.4 V 28.8 V Yes
140 mA; with 24 V DC supply
Encoder supply
24 V encoder supply Short-circuit protection Output current, max. Power Power consumption from backplane bus
Yes 53 mA
0.7 W
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
42
Technical specifications
Power loss Power loss, typ. Analog inputs Number of analog inputs
· For current measurement
· For voltage measurement
· For resistance/resistance thermometer measurement
· For thermocouple measurement
Permissible input voltage for voltage input (destruction limit), max. Permissible input current for current input (destruction limit), max. Technical unit for temperature measurement, can be set Analog input with oversampling Standardization of measured values Input ranges (rated values), voltages 0 to +5 V 0 to +10 V 1 V to 5 V Input resistance (1 V to 5 V) -1 V to +1 V Input resistance (-1 V to +1 V) -10 V to +10 V Input resistance (-10 V to +10 V) -2.5 V to +2.5 V Input resistance (-2.5 V to +2.5 V) -25 mV to +25 mV -250 mV to +250 mV Input resistance (-250 mV to +250 mV) -5 V to +5 V Input resistance (-5 V to +5 V) -50 mV to +50 mV Input resistance (-50 mV to +50 mV) -500 mV to +500 mV Input resistance (-500 mV to +500 mV) -80 mV to +80 mV Input resistance (-80 mV to +80 mV)
6ES7531-7QD00-0AB0
2.3 W
4 4 4 2
4 28.8 V
40 mA
Yes; °C / °F / K
No No
No No Yes 100 k Yes 10 M Yes 100 k Yes 10 M No Yes 10 M Yes 100 k Yes 10 M Yes 10 M Yes 10 M
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
43
Technical specifications
Input ranges (rated values), currents 0 mA to 20 mA Input resistance (0 mA to 20 mA)
-20 mA to +20 mA Input resistance (-20 mA to +20 mA)
4 mA to 20 mA Input resistance (4 mA to 20 mA)
Input ranges (rated values), thermocouples Type B Input resistance (type B) Type C Type E Input resistance (type E) Type J Input resistance (type J) Type K Input resistance (type K) Type L Type N Input resistance (type N) Type R Input resistance (type R) Type S Input resistance (type S) Type T Input resistance (type T) Type U Type TXK/TXK(L) according to GOST Input ranges (rated values), resistance thermometer Cu 10 Cu 10 according to GOST Cu 50 Cu 50 according to GOST Cu 100 Cu 100 according to GOST Ni 10 Ni 10 according to GOST Ni 100 Input resistance (Ni 100) Ni 100 according to GOST
6ES7531-7QD00-0AB0
Yes 25 ; plus approx. 42 ohm for overvoltage protection by PTC Yes 25 ; plus approx. 42 ohm for overvoltage protection by PTC Yes 25 ; plus approx. 42 ohm for overvoltage protection by PTC
Yes 10 M No Yes 10 M Yes 10 M Yes 10 M No Yes 10 M Yes 10 M Yes 10 M Yes 10 M No No
No No No No No No No No Yes; Standard/Climate 10 M No
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
44
Manual, 09/2016, A5E32366209-AC
Ni 1000 Input resistance (Ni 1000) Ni 1000 according to GOST LG-Ni 1000 Input resistance (LG-Ni 1000) Ni 120 Ni 120 according to GOST Ni 200 Ni 200 according to GOST Ni 500 Ni 500 according to GOST Pt 10 Pt 10 according to GOST Pt 50 Pt 50 according to GOST Pt 100 Input resistance (Pt 100) Pt 100 according to GOST Pt 1000 Input resistance (Pt 1000) Pt 1000 according to GOST Pt 200 Input resistance (Pt 200) Pt 200 according to GOST Pt 500 Input resistance (Pt 500) Pt 500 according to GOST Input ranges (rated values), resistors 0 ohm to 150 ohm Input resistance (0 ohm to 150 ohm) 0 ohm to 300 ohm Input resistance (0 ohm to 300 ohm) 0 ohm to 600 ohm Input resistance (0 ohm to 600 ohm) 0 to 3000 Ohm 0 ohm to 6000 ohm Input resistance (0 ohm to 6000 ohm) PTC Input resistance (PTC)
Technical specifications
6ES7531-7QD00-0AB0 Yes; Standard/Climate 10 M No Yes; Standard/Climate 10 M No No No No No No No No No No Yes; Standard/Climate 10 M No Yes; Standard/Climate 10 M No Yes; Standard/Climate 10 M No Yes; Standard/Climate 10 M No
Yes 10 M Yes 10 M Yes 10 M No Yes 10 M Yes 10 M
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
45
Technical specifications
Thermocouple (TC) Temperature compensation · Configurable
6ES7531-7QD00-0AB0 Yes
· Internal temperature compensation
Yes
· External temperature compensation via RTD Yes
· Compensation for 0 °C reference point temperature
Yes, fixed value can be set
· Reference channel of the module
No
Cable length
shielded, max.
800 m; for U/I, 200 m for R/RTD, 50 m for TC
Analog value generation for the inputs
Integration and conversion time/resolution per channel
Resolution with overrange (bit including sign), max.
16 bit
Configurable integration time
Yes
Integration time (ms)
2.5 / 16.67 / 20 / 100 ms
Basic conversion time including integration time (ms)
9 / 23 / 27 / 107 ms
· Additional conversion time for wire break moni- 9 ms (to be included in R/RTD/TC measurement) toring
· Additional conversion time for wire break measurement
Interference voltage suppression at interference frequency f1 in Hz Time for offset calibration (per module) Smoothing of the measured values Configurable Level: None Level: Weak Level: Medium Level: Strong Encoders Connection of the signal encoders For voltage measurement for current measurement as 2-wire transducer · Load of 2-wire transmitter, max.
150 Ohm, 300 Ohm, 600 Ohm, Pt100. Pt200. Ni100: 2 ms, 6000 Ohm, Pt500. Pt1000. Ni1000. LG-Ni1000. PTC: 4 ms 400 / 60 / 50 / 10
Basic conversion time of the slowest channel
Yes Yes Yes Yes Yes
Yes Yes 820
for current measurement as 4-wire transducer
for resistance measurement with two-wire connection
for resistance measurement with three-wire connection
For resistance measurement with four-wire connection
Yes Yes; only for PTC
Yes; all measuring ranges except PTC; internal compensation of line resistance Yes; all measuring ranges except PTC
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
46
Manual, 09/2016, A5E32366209-AC
Technical specifications
6ES7531-7QD00-0AB0
Errors/accuracies
Linearity error (in relation to input range), (+/-)
0.02%
Temperature error (in relation to input range), (+/-) 0.005%/K; for TC typ. T 0.02 +/- %/K
Crosstalk between the inputs, max.
-80 dB
Repeat accuracy in settled state at 25 °C (in rela- 0.02% tion to input range), (+/-)
Temperature errors of internal compensation
+/-6 °C
Operational limit in the entire temperature range
Voltage in relation to input range, (+/-)
0.3%
Current in relation to input range, (+/-)
0.3%
Resistance in relation to input range, (+/-)
0.3%
Resistance thermometer in relation to input range, 0.3%; Ptxxx Standard: ±1.5 K, Ptxxx Climatic:
(+/-)
±0.5 K, Nixxx Standard: ±0.5 K, Nixxx Climatic:
±0.3 K
Thermocouple in relation to input range, (+/-)
0.3%; Type B: > 600 °C ±4.6 K, Type E: > -200 °C ±1.5 K, Type J: > -210 °C ±1.9 K, Type K: > 200 °C ±2.4 K, Type N: > -200 °C ±2.9 K, Type R: > 0 °C ±4.7 K, Type S: > 0 °C ±4.6 K, Type T: > -200 °C ±2.4 K
Basic error limit (operational limit at 25 °C)
Voltage in relation to input range, (+/-)
0.1%
Current in relation to input range, (+/-)
0.1%
Resistance in relation to input range, (+/-)
0.1%
Resistance thermometer in relation to input range, 0.1%; Ptxxx Standard: ±0.7 K, Ptxxx Climatic:
(+/-)
±0.2 K, Nixxx Standard: ±0.3 K, Nixxx Climatic:
±0.15 K
Thermocouple in relation to input range, (+/-)
0.1%; Type B: > 600 °C ±1.7 K, Type E: > -200 °C ±0.7 K, Type J: > -210 °C ±0.8 K, Type K: > 200 °C ±1.2 K, Type N: > -200 °C ±1.2 K, Type R: > 0 °C ±1.9 K, Type S: > 0 °C ±1.9 K, Type T: > -200 °C ±0.8 K
Interference voltage suppression for f = n x (f1 +/1 %), f1 = interference frequency
Series mode interference (peak value of interfer- 40 dB ence < rated value of input range), min.
Common mode voltage, max.
10 V
Common mode interference, min.
60 dB
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
Yes
Interrupts
Diagnostic interrupt
Yes
Limit interrupt
Yes; two high limits and two low limits each
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
47
Technical specifications
Diagnostics alarms Monitoring of supply voltage Wire break
Overflow/underflow Diagnostics display LED RUN LED ERROR LED Monitoring of supply voltage (PWR LED) Channel status display For channel diagnostics For module diagnostics Electrical isolation Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Between the channels and power supply of the electronics Permissible potential difference Between the inputs (UCM) Between the inputs and MANA (UCM) Insulation Insulation tested with Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed mode Prioritized startup
6ES7531-7QD00-0AB0
Yes Yes; only for 1 ... 5 V, 4 ... 20 mA, TC, R and RTD Yes
Yes; green LED Yes; red LED Yes; green LED Yes; green LED Yes; red LED Yes; red LED
No 4 Yes Yes
20 V DC 10 V DC
707 V DC (type test)
0 °C 60 0 °C 40 °C
No
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
48
Manual, 09/2016, A5E32366209-AC
Dimensions Width Height Depth Weights Weight, approx. Miscellaneous Note:
Technical specifications
6ES7531-7QD00-0AB0
25 mm 147 mm 129 mm
210 g
Package includes 40-pin push-in front connector Additional basic error and noise for integration time = 2.5 ms: Voltage: ±250 mV (±0.02%), ±80 mV (±0.05%), ±50 mV (±0.05%); resistance: 150 Ohm (±0.02%); resistance thermometer: Pt100 Climatic: ±0.08 K, Ni100 Climatic: ±0.08 K; thermocouple: Type B, R, S: ±3 K, Type E, J, K, N, T: ±1 K
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
49
Dimension drawing
A
The dimension drawing of the module on the mounting rail, as well as a dimension drawing with open front panel are provided in the appendix. Always adhere to the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of the AI 4xU/I/RTD/TC ST module
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
50
Dimension drawing
Figure A-2 Dimension drawing of the AI 4xU/I/RTD/TC ST module, side view with open front panel
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
51
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Current limit for wire break Wire break
Common mode error Reference junction Measurement type resistance (4-wire connection, 3-wire connection, 2-wire connection) Measurement type thermistor RTD (4-wire connection, 3-wire connection) Hardware interrupt limits Fixed reference temperature
Dependent parameters Only for measurement type current with measuring range 4 to 20 mA. Only for measurement type resistance, thermistor RTD, thermocouple TC, voltage with measuring range 1V to 5 V and current with measuring range 4 to 20 mA. Only for measuring type voltage, current and thermocouple TC. Only for measurement type thermocouple TC. Configurable for even channels (0 and 2) only. The next odd channel (1 and 3) must be disabled.
Only if hardware interrupts are enabled. Only if the Reference junction parameter and the Fixed reference temperature value is configured.
Parameter assignment in the user program
The module parameters can be assigned in RUN (for example, measuring ranges of selected channels can be edited in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 0 to 3. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer to the module.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
52
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Output parameter STATUS
If errors occur during the transfer of parameters with the WRREC instruction, the module continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter. The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Operation of the module downstream from a PROFIBUS DP interface module
If the module is operated downstream from a IM PROFIBUS DP interface module, the parameter data records 0 and 1 cannot be read back. You get the diagnostics data records 0 and 1 for the read back parameter data records 0 and 1. You can find more information in the Interrupts section of the PROFIBUS DP interface module product manual on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Assignment of data record and channel
For the configuration as a 1 x 4-channel module, the parameters are located in data records 0 to 3 and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 Data record 2 for channel 2 Data record 3 for channel 3 For configuration 1 x 4-channel, the module has 4 submodules with one channel each. The parameters for the channel are available in data record 0 and are assigned as follows: Data record 0 for channel 0 (submodule 1) Data record 0 for channel 1 (submodule 2) Data record 0 for channel 2 (submodule 3) Data record 0 for channel 3 (submodule 4) Address the respective submodule for data record transfer.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
53
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Data record structure
The example in the following figure shows the structure of data record 0 for channel 0. The structure of channels 1 to 3 is identical. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Bytes 0 to 6
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
54
Manual, 09/2016, A5E32366209-AC
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Figure B-2 Structure of data record 0: Bytes 7 to 27
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
55
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Codes for measurement types
The following table lists all measurement types of the analog input module along with their codes. Enter these codes at byte 2 of the data record for the corresponding channel (see the figure Structure of data record 0: Bytes 7 to 27).
Table B- 2 Code for the measurement type
Measurement type Disabled Voltage Current, 2-wire transmitter Current, 4-wire transmitter Resistance, 4-wire connection *) **) Resistance, 3-wire connection *) **) Resistance, 2-wire connection *) ***) Thermal resistor linear, 4-wire connection *) Thermal resistor linear, 3-wire connection *) Thermocouple
Code 0000 0000 0000 0001 0000 0011 0000 0010 0000 0100 0000 0101 0000 0110 0000 0111 0000 1000 0000 1010
*) only possible for channels 0 and 2 **) only for the following measuring ranges: 150 , 300 , 600 , 6 k ***) only for measuring range PTC
Special feature for configuration
When you set one of the following measurement types at channel 0 or channel 2: Resistance, 4-wire connection Resistance, 3-wire connection Resistance, 2-wire connection Thermal resistor linear, 4-wire connection Thermal resistor linear, 3-wire connection then one of the following channels must be disabled. Example: You have configured "Resistance, 4-wire connection" at channel 0; channel 1 must be disabled. You have configured "Resistance, 2-wire connection" at channel 2; channel 3 must be disabled.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
56
Manual, 09/2016, A5E32366209-AC
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Codes for measuring ranges
The following table lists all measuring ranges of the analog input module along with their codes. Enter these codes accordingly at byte 3 of the data record for the corresponding channel (see the figure Structure of data record 0: Bytes 7 to 27).
Table B- 3 Code for the measuring range
Measuring range Voltage ±50 mV ±80 mV ±250 mV ±500 mV ±1 V ±2.5 V ±5 V ±10 V 1 V to 5 V Current, 4-wire transmitter 0 mA to 20 mA 4 mA to 20 mA ±20 mA Current, 2-wire transmitter 4 mA to 20 mA Resistor 150 300 600 6 k PTC
Code
0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0111 0000 1000 0000 1001 0000 1010
0000 0010 0000 0011 0000 0100
0000 0011
0000 0001 0000 0010 0000 0011 0000 0101 0000 1111
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
57
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Thermal resistor Pt100 climatic Ni100 climatic Pt100 standard Ni100 standard Pt500 standard Pt1000 standard Ni1000 standard Pt200 Climatic Pt500 climatic Pt1000 climatic Ni1000 Climatic Pt200 standard LG-Ni1000 standard LG-Ni1000 Climatic Thermocouple B N E R S J T K
0000 0000 0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0110 0000 0111 0000 1000 0000 1001 0000 1010 0000 1011 0001 1100 0001 1101
0000 0000 0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0111 0000 1000
Codes for temperature coefficients
The following table lists all temperature coefficients along with their codes for temperature measurements with the thermal resistors. These codes must be entered in byte 4 of the corresponding data record.
Table B- 4 Codes for temperature coefficient
Temperature coefficient Pt xxx 0.003851 0.003916 0.003902 0.003920 Ni xxx 0.006180 0.006720 LG-Ni 0.005000
Code
0000 0000 0000 0001 0000 0010 0000 0011
0000 1000 0000 1001
0000 1010
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
58
Manual, 09/2016, A5E32366209-AC
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Valid values for fixed reference temperatures
The values that you can set for fixed reference temperatures must be in the valid range of values. The resolution is a tenth of a degree.
Table B- 5 Valid values for fixed reference temperatures
Temperature unit Celsius (default) Fahrenheit (default) Kelvin (default)
Dec -1450 to 1550 -2290 to 3110 1282 to 3276
Hex FA56H to 60EH F70EH to CCCH 502H to 10BAH
Hardware interrupt limits
The values that you can set for hardware interrupts (high/low limit) must not violate the over/underrange of the respective rated measuring range.
The following tables list the valid hardware interrupt limits. The limits depend on the selected measurement type and measuring range.
Table B- 6 Voltage limits
Voltage ±50 mV, ±80 mV, ±250 mV, ±500 mV, ±1 V, ±2.5 V, ±5 V, ±10 V 32510
-32511
1 V to 5 V
32510 -4863
High limit Low limit
Table B- 7 Current and resistance limits
Current ±20 mA
32510 -32511
4 to 20 mA / 0 to 20 mA
32510
-4863
Resistor (all configurable measuring ranges)
32510 1
High limit Low limit
Table B- 8 Limits for thermocouple types B, C, E, and J
Thermocouple
Type B
°C
°F
K
20699 32765 23431
1
321 2733
°C 11999 -2699
Type E
°F
K
21919 14731
-4539 33
°C 14499 -2099
Type J °F
26419 -3459
K 17231
633
High limit Low limit
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
59
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Table B- 9 Limits for thermocouples type K, N, R, and S
Thermocouple
Type K
°C
°F
16219 29515
-2699 -4539
K 18951
33
°C 15499 -2699
Type N
°F
K
28219 18231
-4539 33
Types R, S
°C
°F
K
20189 32765 22921
-1699 -2739 1033
High limit Low limit
Table B- 10 Limits for thermocouple type T
Thermocouple
Type T
°C
°F
5399 10039
-2699 -4539
K 8131
33
High limit Low limit
Table B- 11 Limits for thermal resistor Pt xxx Standard and Pt xxx Climatic
Thermal resistor
Pt xxx Standard
°C
°F
K
9999
18319
12731
-2429
-4053
303
°C 15499 -14499
Pt xxx Climatic
°F
K
31099
---
-22899
---
High limit Low limit
Table B- 12 Limits for thermal resistor Ni xxx Standard and Ni xxx Climatic
Thermal resistor
Ni xxx Standard
°C
°F
K
2949
5629
5681
-1049
-1569
1683
°C 15499 -10499
Ni xxx Climatic
°F
K
31099
---
-15699
---
High limit Low limit
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
60
Manual, 09/2016, A5E32366209-AC
Parameter data records B.2 Structure of a data record for dynamic reference temperature
B.2
Structure of a data record for dynamic reference temperature
The WRREC instruction is used to transfer the reference junction temperature via data record 192 to data record 195 to the module.
The description of the WRREC instruction can be found in the online help from STEP 7.
If you have set the "Dynamic reference temperature" value for the "Reference junction" parameter, the module expects a new data record at least every 5 minutes. If the module does not receive a new data record within this time, it generates the "Reference channel error" diagnostics message.
Assignment of data record and channel
The following assignment applies if no submodules (1 x 4-channel) are configured for the module: Data record 192 for channel 0 Data record 193 for channel 1 Data record 194 for channel 2 Data record 195 for channel 3
Structure of data record 192 for dynamic reference temperature
The following figure shows an example of the structure of data record 192 for channel 0. The structure for data records 193 to 195 is identical.
Figure B-3 Structure of data record 192
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
61
Parameter data records B.2 Structure of a data record for dynamic reference temperature
Valid values for fixed temperature compensation
You can enter the selectable values at bytes 2 and 3 of the data record for the corresponding channel. The selectable values must lie within the permitted value range, see following table. The resolution is a tenth of a degree.
Table B- 13 Valid values for temperature compensation via data record
Temperature unit Celsius (default) Fahrenheit (default) Kelvin (default) Celsius (climatic) Fahrenheit (climatic) Kelvin (climatic)
Dec -1450 to 1550 -2290 to 3110 1282 to 3276 -14500 to 15500 -22900 to 31100 12820 to 32760
Hex FA56H to 60EH F70EH to C26H 502H to CCCH C75CH to 3C8CH A68CH to 797CH 3214H to 7FF8H
Additional information
For more information on compensation of the reference junction temperature via data record refer to the Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094) function manual in the internet.
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
62
Manual, 09/2016, A5E32366209-AC
Representation of analog values
C
Introduction
This section shows the analog values for all measuring ranges supported by the AI 4xU/I/RTD/TC ST analog module.
Measured value resolution
Each analog value is written left aligned to the tags. The bits marked with "x" are set to "0".
Note This resolution does not apply to temperature values. The digitalized temperature values are the result of a conversion in the analog module.
Table C- 1 Resolution of the analog values
Resolution in bits including sign
16
Values
Dec
Hex
1
1H
Analog value
High byte
Low byte
Sign 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
63
Manual, 09/2016, A5E32366209-AC
Representation of analog values C.1 Representation of input ranges
C.1
Representation of input ranges
The tables below set out the digitized representation of the input ranges by bipolar and unipolar input ranges. The resolution is 16 bits.
Table C- 2 Bipolar input ranges
Dec. value
Measured value in %
32767 32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 <-117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0000000001 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Rated range 1 1 1 1 1 1 1111111111 1 0 0 1 0 1 0000000000 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Table C- 3 Unipolar input ranges
Dec. value
Measured value in %
32767 32511 27649 27648 1 0 -1 -4864 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -17.593 <-17.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 Rated range 0 0 0 0 0 0 0000000000 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Undershoot 1 1 1 0 1 1 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
64
Manual, 09/2016, A5E32366209-AC
C.2
Representation of analog values C.2 Representation of analog values in voltage measuring ranges
Representation of analog values in voltage measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible voltage measuring ranges.
Table C- 4 Voltage measuring ranges ±10 V, ±5 V, ±2.5 V, ±1 V,
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±10 V
±5 V
>11.759 V >5.879 V
11.759 V 5.879 V
±2.5 V >2.940 V 2.940 V
±1 V > 1.176 V 1.176 V
Range
Overflow Overshoot range
10 V 7.5 V 361.7 µV 0 V
5 V 3.75 V 180.8 µV 0 V
2.5 V 1.875 V 90.4 µV 0 V
1 V 0.75 V 36.17 µV 0 V
Rated range
-7.5 V -10 V
-3.75 V -5 V
-11.759 V -5.879 V < -11.759 V < -5.879 V
-1.875 V -2.5 V
-2.940 V < -2.940 V
-0.75 V -1 V
-1.176 V < -1.176 V
Undershoot range
Underflow
Table C- 5 Voltage measuring ranges ±500 mV, ±250 mV, ±80 mV, and ±50 mV,
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±500 mV
±250 mV
>587.9 mV > 294.0 mV
587.9 mV 294.0 mV
±80 mV > 94.1 mV 94.1 mV
±50 mV > 58.8 mV 58.8 mV
Range
Overflow Overshoot range
500 mV 375 mV 18.08 µV 0 mV
250 mV 187.5 mV 9.04 µV 0 mV
80 mV 60 mV 2.89 µV 0 mV
50 mV 37.5 mA 1.81 µV 0 mV
Rated range
-375 mV -500 mV
-187.5 mV -250 mV
-60 mV -80 mV
-587.9 mV -294.0 mV -94.1 mV <-587.9 mV < -294.0 mV < -94.1 mV
-37.5 mV -50 mV
-58.8 mV < -58.8 mV
Undershoot range
Underflow
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
65
Representation of analog values C.3 Representation of analog values in the current measuring ranges
Table C- 6 Voltage measuring range 1 V to 5 V
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Voltage measuring range 1 V to 5 V >5.704 V 5.704 V
5 V 4 V 1 V + 144.7 µV 1 V
0.296 V < 0.296 V
Range Overflow Overshoot range Rated range
Undershoot range Underflow
C.3
Representation of analog values in the current measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible current measuring ranges.
Table C- 7 Current measuring range ±20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Current measuring range ±20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-15 mA -20 mA
-23.52 mA <-23.52 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
66
Manual, 09/2016, A5E32366209-AC
Representation of analog values C.4 Representation of the analog values of resistance-based sensors/resistance thermometers
Table C- 8 Current measuring ranges 0 to 20 mA and 4 to 20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Current measuring range 0 mA to 20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-3.52 mA <- 3.52 mA
4 mA to 20 mA >22.81 mA 22.81 mA
20 mA 16 mA 4 mA + 578.7 nA 4 mA
1.185 mA < 1.185 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
C.4
Representation of the analog values of resistance-based
sensors/resistance thermometers
The following tables list the decimal and hexadecimal values (codes) of the possible resistance-based sensor ranges.
Table C- 9 Resistance-based sensors of 150 , 300 , 600 , and 6000
Values dec 32767 32511 27649 27648 20736 1 0
hex 7FFF 7EFF 6C01 6C00 5100 1 0
Resistance-based sensor range
150
300
>176.38
>352.77
176.38
352.77
150 112.5 5.43 m 0
300 225 10.85 m 0
600 >705.53 705.53
600 450 21.70 m 0
6000 >7055.3 7055.3
6000 4500 217 m 0
Overflow Overshoot range
Rated range
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
67
Representation of analog values C.4 Representation of the analog values of resistance-based sensors/resistance thermometers
The following tables list the decimal and hexadecimal values (codes) of the supported resistance thermometers.
Table C- 10 Resistance thermometers Pt 100, Pt 200, Pt 500 and Pt 1000 Standard
Pt x00 Standard in °C (1 digit = 0.1°C) > 1000.0 1000.0 : 850.1 850.0 : -200.0 -200.1 : -243.0 < -243.0
Values dec
32767 10000 : 8501 8500 : -2000 -2001 : -2430 -32768
hex
7FFF 2710 : 2135 2134 : F830 F82F : F682 8000
Pt x00 Standard in °F (1 digit = 0.1 °F) > 1832.0 1832.0 : 1562.1 1562.0 : -328.0 -328.1 : -405.4 < -405.4
Values dec
32767 18320 : 15621 15620 : -3280 -3281 : -4054 -32768
hex
7FFF 4790 : 3D05 3D04 : F330 F32F : F02A 8000
Pt x00 Standard in K (1 digit = 0.1 K) > 1273.2 1273.2 : 1123.3 1123.2 : 73.2 73.1 : 30.2 < 30.2
Values dec
32767 12732 : 11233 11232 : 732 731 : 302 32768
hex
7FFF 31BC : 2BE1 2BE0 : 2DC 2DB : 12E 8000
Range
Overflow Overshoot range Rated range
Undershoot range Underflow
Table C- 11 Thermal resistors Pt 100, Pt 200, Pt 500 and Pt 1000 Climatic
Pt x00 Climatic/ in °C (1 digit = 0.01 °C) > 155.00 155.00 : 130.01 130.00 : -120.00 -120.01 : -145.00 < -145.00
Values dec
32767 15500 : 13001 13000 : -12000 -12001 : -14500 -32768
hex
7FFF 3C8C : 32C9 32C8 : D120 D11F : C75C 8000
Pt x00 Climatic/ in °F (1 digit = 0.01 °F) > 311.00 311.00 : 266.01 266.00 : -184.00 -184.01 : -229.00 < -229.00
Values dec
32767 31100 : 26601 26600 : -18400 -18401 : -22900 -32768
hex
7FFF 797C : 67E9 67E8 : B820 B81F : A68C 8000
Range
Overflow Overshoot range
Rated range
Undershoot range
Underflow
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
68
Manual, 09/2016, A5E32366209-AC
Representation of analog values C.4 Representation of the analog values of resistance-based sensors/resistance thermometers
Table C- 12 Thermal resistors Ni 100, Ni 1000, LG-Ni 1000 Standard
Ni x00 standard in °C (1 digit = 0.1 °C) > 295.0 295.0 : 250.1 250.0 : -60.0 -60.1 : -105.0 < -105.0
Values dec
32767 2950 : 2501 2500 : -600 -601 : -1050 -32768
hex
7FFF B86 : 9C5 9C4 : FDA8 FDA7 : FBE6 8000
Ni x00 Standard in °F (1 digit = 0.1 °F) > 563.0 563.0 : 482.1 482.0 : -76.0 -76.1 : -157.0 < -157.0
Values dec
32767 5630 : 4821 4820 : -760 -761 : -1570 -32768
hex
7FFF 15FE : 12D5 12D4 : FD08 FD07 : F9DE 8000
Ni x00 Standard in K (1 digit = 0.1 K) > 568.2 568.2 : 523.3 523.2 : 213.2 213.1 : 168.2 < 168.2
Values dec
32767 5682 : 5233 5232 : 2132 2131 : 1682 32768
hex
7FFF 1632 : 1471 1470 : 854 853 : 692 8000
Range
Overflow Overshoot range Rated range
Undershoot range Underflow
Table C- 13 Thermal resistors Ni 100, Ni 1000, LG-Ni 1000 Climatic
Ni x00 Climatic in °C (1 digit = 0.01 °C)
> 155.00 155.00 : 130.01 130.00 : -60.00 -60.01 : -105.00 < - 105.00
Values
dec 32767 15500 : 13001 13000 : -6000 -6001 : -10500 -32768
hex 7FFF 3C8C : 32C9 32C8 : E890 E88F : D6FC 8000
Ni x00 climatic in °F Values (1 digit = 0.01 °F) dec
> 311.00
32767
311.00
31100
:
:
266.01
26601
266.00
26600
:
:
-76.00
-7600
-76.01
-7601
:
:
-157.00
-15700
< - 157.00
-32768
hex 7FFF 797C : 67E9 67E8 : E250 E24F : C2AC 8000
Range
Overflow Overshoot range
Rated range
Undershoot range
Underflow
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
69
Representation of analog values C.5 Representation of analog values for thermocouples
C.5
Representation of analog values for thermocouples
The following tables list the decimal and hexadecimal values (codes) of the supported thermocouples.
Table C- 14 Thermocouple type B
Type B in °C
> 2070,0 2070,0 : 1820.1 1820.0 : 250.0 249.9 : 0,0 < 0.0
Values
dec 32767 20700 : 18201 18200 : 2500 2499 : 0 -32768
hex 7FFF 50DC : 4719 4718 : 09C4 09C3 : 0 8000
Type B in °F
> 3276.6 3276.6 : 2786.6 2786.5 : 482.0 481,9 : 32,0 < 32.0
Values
dec 32767 32766 : 27866 27865 : 4820 4819 : 320 -32768
hex 7FFF 7FFE : 6CDA 6CD9 : 12D4 12D3 : 0140 8000
Type B in K
> 2343.2 2343.2 : 2093.3 2093.2 : 523.2 523,1 : 273,2 < 273.2
Values
dec 32767 23432 : 20933 20932 : 5232 5231 : 2732 32768
hex 7FFF 5B88 : 51C5 51C4 : 1470 1469 : 0AAC 8000
Range
Overflow Overshoot range
Rated range
Undershoot range
Underflow
Table C- 15 Thermocouple type E
Type E in °C
> 1200.0 1200,0 : 1000.1 1000.0 : -270.0 < -270.0
Values dec 32767 12000 : 10001 10000 : -2700 -32768
hex 7FFF 2EE0 : 2711 2710 : F574 8000
Type E in °F
> 2192,0 2192.0 : 1832.2 1832.0 : -454.0 < -454.0
Values dec 32767 21920 : 18322 18320 : -4540 -32768
hex 7FFF 55A0 : 4792 4790 : EE44 8000
Type E in K
> 1473.2 1473.2 : 1273.3 1273.2 : 0 <0
Values dec 32767 14732 : 12733 12732 : 0 -32768
hex 7FFF 398C : 31BD 31BC : 0000 8000
Range Overflow Overshoot range
Rated range
Underflow
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
70
Manual, 09/2016, A5E32366209-AC
Representation of analog values C.5 Representation of analog values for thermocouples
Table C- 16 Thermocouple type J
Type J in °C
> 1450.0 1450,0 : 1200.1 1200.0 : -210.0 < -210.0
Values dec 32767 14500 : 12001 12000 : -2100 -32768
hex 7FFF 38A4 : 2EE1 2EE0 : F7CC 8000
Type J in °F
> 2642.0 2642.0 : 2192.2 2192.0 : -346.0 < -346.0
Values dec 32767 26420 : 21922 21920 : -3460 -32768
hex 7FFF 6734 : 55A2 55A0 : F27C 8000
Type J in K
> 1723.2 1723.2 : 1473.3 1473.2 : 63.2 < 63.2
Values dec 32767 17232 : 14733 14732 : 632 -32768
hex 7FFF 4350 : 398D 398C : 0278 8000
Range Overflow Overshoot range
Rated range
Underflow
Table C- 17 Thermocouple type K
Type K in °C
> 1622.0 1622.0 : 1372.1 1372.0 : -270.0 < -270.0
Values dec 32767 16220 : 13721 13720 : -2700 -32768
hex 7FFF 3F5C : 3599 3598 : F574 8000
Type K in °F
> 2951.6 2951.6 : 2501.7 2501.6 : -454.0 < -454.0
Values dec 32767 29516 : 25017 25016 : -4540 -32768
hex 7FFF 734C : 61B9 61B8 : EE44 8000
Type K in K
> 1895,2 1895.2 : 1645.3 1645,2 : 0 < 0
Values dec 32767 18952 : 16453 16452 : 0 -32768
hex 7FFF 4A08 : 4045 4044 : 0000 8000
Range Overflow Overshoot range
Rated range
Underflow
Table C- 18 Thermocouple type N
Type N in °C
> 1550,0 1550,0 : 1300,1 1300,0 : -270,0 < -270,0
Values
dec 32767 15500 : 13001 13000 : -2700 -32768
hex 7FFF 3C8C : 32C9 32C8 : F574 8000
Type N in °F
> 2822,0 2822,0 : 2372,2 2372,0 : -454,0 < -454,0
Values
dec 32767 28220 : 23722 23720 : -4540 -32768
hex 7FFF 6E3C : 5CAA 5CA8 : EE44 8000
Type N in K
> 1823,2 1823,2 : 1573,3 1573,2 : 0 < 0
Values
dec 32767 18232 : 15733 15732 : 0 -32768
hex 7FFF 4738 : 3D75 3D74 : 0000 8000
Range Overflow Overshoot range
Rated range
Underflow
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
71
Representation of analog values C.5 Representation of analog values for thermocouples
Table C- 19 Thermocouple type R and S
Type R, S Values
in °C
dec
> 2019.0 32767
2019.0 20190
:
:
1769.1 17691
1769.0 17690
:
:
-50.0
-500
-50,1
-501
:
:
-170,0 -1700
< -170.0 -32768
hex 7FFF 4EDE : 451B 451A : FE0C FE0B : F95C 8000
Type R, S Values
in °F
dec
> 3276.6 32767
3276.6 32766
:
:
3216.4 32164
3216.2 32162
:
:
-58.0
-580
-58,1
-581
:
:
-274,0 -2740
< -274.0 -32768
hex 7FFF 7FFE : 7DA4 7DA2 : FDBC FDBB : F54C 8000
Types R, S in K
> 2292.2 2292.2 : 2042.3 2042,2 : 223,2 223.1 : 103.2 < 103.2
Values
dec 32767 22922 : 20423 20422 : 2232 2231 : 1032 < 1032
hex 7FFF 598A : 4FC7 4FC6 : 08B8 08B7 : 0408 8000
Range
Overflow Overshoot range
Rated range
Undershoot range
Underflow
Table C- 20 Thermocouple type T
Type T in °C
> 540,0 540,0 : 400,1 400,0 : -270,0 < -270,0
Values dec 32767 5400 : 4001 4000 : -2700 -32768
hex 7FFF 1518 : 0FA1 0FA0 : F574 8000
Type T in °F
> 1004,0 1004,0 : 752,2 752,0 : -454,0 < -454,0
Values dec 32767 10040 : 7522 7520 : -4540 -32768
hex 7FFF 2738 : 1D62 1D60 : EE44 8000
Type T in K
> 813,2 813,2 : 673,3 673,2 : 3,2 < 3,2
Values dec 32767 8132 : 6733 6732 : 32 -32768
hex 7FFF 1FC4 : 1AAD 1AAC : 0020 8000
Range Overflow Overshoot range
Rated range
Underflow
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
72
Manual, 09/2016, A5E32366209-AC
Representation of analog values C.6 Measured values for wire break diagnostics
C.6
Measured values for wire break diagnostics
Measured values on diagnostics event "wire break", dependent on diagnostics enables
Error events initiate a diagnostics entry and trigger a diagnostics interrupt if configured accordingly.
Table C- 21 Measured values for wire break diagnostics
Format S7
Parameter assignment
· "Wire break" diagnostics enabled · "Overflow/Underflow" diagnostics
enabled or disabled ("Wire break" diagnostics takes priority over "Overflow/Underflow" diagnostics)
· "Wire break" diagnostics disabled · "Overflow/Underflow" diagnostics
enabled
· "Wire break" diagnostics disabled · "Overflow/Underflow" diagnostics
disabled
Measured values
32767
7FFFH
-32767 8000 H -32767 8000 H
Explanation "Wire break" or "Open circuit" diagnostics alarm
· Measured value after leaving the undershoot range
· Diagnostics alarm "Low limit violated" Measured value after leaving the undershoot range
Analog Input Module AI 4xU/I/RTD/TC ST (6ES7531-7QD00-0AB0)
Manual, 09/2016, A5E32366209-AC
73
SIMATIC
S7-1500/ET 200MP Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _Rvae_lpu_rees_se_n_ta_tio_n _of_a_na_lo_g ____C__
09/2016
A5E03484776-AD
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03484776-AD 09/2016 Subject to change
Copyright © Siemens AG 2013 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792) automation system.
Functions that relate in general to the systems are described in these manuals.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following changes:
As of firmware version V2.1.0, the module supports the oversampling function.
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information regarding the product described in the documentation or its handling, or draws special attention to a section of the documentation.
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
4
Manual, 09/2016, A5E03484776-AD
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109739516).
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
2.2 2.2.1
Functions................................................................................................................................ 13 Oversampling for outputs ....................................................................................................... 13
3 Wiring ................................................................................................................................................... 15
4 Parameters/address space ................................................................................................................... 18
4.1
Output ranges ........................................................................................................................ 18
4.2
Parameters............................................................................................................................. 19
4.3
Declaration of parameters...................................................................................................... 21
4.4
Address space ....................................................................................................................... 22
5 Interrupts/diagnostics alarms................................................................................................................. 30
5.1
Status and error displays ....................................................................................................... 30
5.2
Interrupts ................................................................................................................................ 32
5.3
Diagnostics alarms................................................................................................................. 33
6 Technical specifications ........................................................................................................................ 34
A Dimensional drawing............................................................................................................................. 40
B Parameter data records ........................................................................................................................ 42
B.1
Parameter assignment and structure of the parameter data records .................................... 42
C Representation of analog values ........................................................................................................... 46
C.1
Representation of output ranges............................................................................................ 47
C.2
Representation of analog values in the voltage output ranges.............................................. 48
C.3
Representation of analog values in the current output ranges .............................................. 49
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
6
Manual, 09/2016, A5E03484776-AD
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
8
Manual, 09/2016, A5E03484776-AD
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
10
Manual, 09/2016, A5E03484776-AD
Product overview
2.1
Properties
Article number
6ES7532-5HF00-0AB0
View of the module
2
Figure 2-1 View of the AQ 8xU/I HS module
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
11
Product overview 2.1 Properties
Properties
The module has the following technical properties: Channel-based selection of 8 analog outputs Selection of channels for current output Selection of channels for voltage output Resolution: 16 bits including sign Configurable diagnostics (per channel) Fast updating of the output values The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Isochronous mode Calibration in runtime Module-internal Shared Output (MSO)
Configurable submodules / submodules for Shared Device
Oversampling
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V2.0.0 or higher
V2.0.0 or higher
V2.1.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
V12 or higher
X
V12 or higher
X
V12 or higher
X
V12 or higher
---
V12 or higher
X
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
V14 or higher and
---
HSP 0186
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file. The oversampling function requires isochronous mode and can therefore only be configured with STEP 7 (TIA Portal).
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
12
Manual, 09/2016, A5E03484776-AD
Product overview 2.2 Functions
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Shield bracket Shield terminal Power supply element Labeling strips U connector Universal front door
Other components
The following component can be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find additional information on accessories in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
2.2
Functions
2.2.1
Oversampling for outputs
Function
Oversampling is defined as the transfer of data in constant bus cycle segments (sub-cycles), whereby n sub-cycles correspond to one PROFINET bus cycle. A data packet is transmitted from the controller to the module, which outputs the packet in n constant bus sub-cycles.
Oversampling is useful whenever you require output of data with high time resolution but without using an extremely short PROFINET bus cycle and thus fast CPU cycles.
With oversampling, a PROFINET bus cycle is divided into constant bus sub-cycles:
Each sub-cycle outputs a 16-bit value per channel.
The shortest possible sub-cycle is 125 s.
Sub-cycles are possible in increments of 2 to 16. The following applies here: Isochronous data cycle / number of sub-cycles permitted sub-cycle duration (125 s).
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
13
Product overview 2.2 Functions
Typical area of application
Controlling of a feed valve because output data can be controlled exactly at the current position of the machine.
Requirements
Firmware version V2.1.0 or higher of the module. Isochronous mode has to be set.
Configuration
You configure the oversampling function by means of the output rate parameter.
Chronological sequence
The existing output data of a data cycle (send clock) is copied into the interface module in the next data cycle and is available for the module in the data cycle after that.
The figure below shows the chronological sequence for oversampling with 10 sub-cycles.
n
Output value from cycle n
Figure 2-2 Chronological sequence with oversampling
Output interval
The duration of a sub-cycle corresponds to the output interval. The bus cycle time TDP (send clock for isochronous mode) is specified in the configuration software. The actual output interval of the module results from this time divided by the set sampling rate (2-16).
Figure 2-3 Example for the calculation of the output interval
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
14
Manual, 09/2016, A5E03484776-AD
Wiring
3
This section contains the block diagram of the module and outlines various connection options.
You can find information on wiring the front connector, establishing a cable shield, etc in the Wiring section of the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Note · You may use and combine the different wiring options for all channels. · Do not insert the potential jumpers included with the front connector!
Abbreviations used
Meaning of the abbreviations used in the figures below:
QVn QIn Sn+/SnL+ M MANA CHx PWR
Voltage output channel Current output channel Sense line channel Supply voltage connection Ground connection Reference potential of the analog circuit Channel or display of the channel status Display for the supply voltage
Pin assignment for the power supply element
The power supply element is plugged onto the front connector for powering the analog module. Wire the supply voltage to terminals 41 (L+) and 44 (M). Use terminals 42 (L+) and 43 (M) to loop the potential to the next module.
Figure 3-1 Power supply element wiring
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
15
Wiring
Block diagram and terminal assignment for the voltage output
The example in the figure below shows the pin assignment for a voltage measurement. 2-wire connection, no compensation for line impedance. 4-wire connection with compensation for line impedance is displayed.
2-wire connection (jumper at the front connector) 4-wire connection Digital Analog Converter (DAC) Backplane bus interface Supply voltage via power supply element
CHx RUN ERROR PWR
Figure 3-2 Block diagram and terminal assignment for the voltage output
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
16
Manual, 09/2016, A5E03484776-AD
Wiring
Block diagram and terminal assignment for a current output
The following figure shows an example of the terminal assignment for current output circuitry.
Load on current outputs Digital Analog Converter (DAC) Backplane bus interface Supply voltage via power supply element
CHx RUN ERROR PWR
Channel or 8 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-3 Block diagram and terminal assignment for a current output
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
17
Parameters/address space
4
4.1
Output ranges
The module is set to voltage output type by default with output range ±10 V. You need to edit the module parameters with STEP 7 if you want to use a different output range or output type.
Output type and output ranges
Output type Voltage
Current
Deactivated
Output range
1 V to 5 V 0 V to 10 V ±10 V
0 mA to 20 mA 4 mA to 20 mA ±20 mA
-
Representation of analog values
See Appendix Representation of analog values in the voltage output ranges (Page 48).
See Appendix Representation of analog values in the current output ranges (Page 49).
The tables of the output ranges, overflow, overrange, etc. are available in the Appendix Representation of analog values (Page 46).
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
18
Manual, 09/2016, A5E03484776-AD
Parameters/address space 4.2 Parameters
4.2
Parameters
Parameters of AQ 8xU/I HS
The AQ 8xU/I HS is usually already integrated in the hardware catalog of STEP 7 (TIA Portal). In this case, STEP 7 (TIA Portal) checks the configured properties for plausibility during configuration.
However, you can also assign parameters to the module by means of a GSD file and the configuration software of any provider. The module does not check the validity of the configured properties until after the configuration has been loaded.
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
When assigning parameters in the user program, use the WRREC instruction to transfer the parameters to the module by means of data records; refer to chapter Parameter assignment and structure of the parameter data records (Page 42).
Table 4- 1 Configurable parameters and their defaults
Parameters
AQ configuration Output rate (for the oversampling function) Diagnostics · Missing supply voltage
L+ · Wire break · Short circuit to ground · Overflow · Underflow
Range of values Default setting
1...16 val-
1
ues/cycle
Yes/No
No
Yes/No
No
Yes/No
No
Yes/No
No
Yes/No
No
Parameter assignment in RUN
No
No No No No No
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the GSD file hardware cata- PROFIBUS DP log STEP 7 (TIA Portal) as of V12 or GSD file PROFINET IO
Module
---
(not GSD file)
Channel 1)
Channel Channel Channel Channel
Module 2)
Module 2) Module 2) Module 2) Module 2)
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
19
Parameters/address space 4.2 Parameters
Parameters
Output · Output type · Output range · Reaction to CPU STOP
Range of values Default setting Parameter assignment in RUN
Voltage/current Voltage
Yes
See chapter
±10 V
Yes
output ranges
(Page 18)
· Turn off
Turn off
Yes
· Keep last value
· Output substitute value
4)
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the GSD file hardware cata- PROFIBUS DP log STEP 7 (TIA Portal) as of V12 or GSD file PROFINET IO
Channel Channel
Channel Channel
Channel
Channel 3)
· Turn off · Keep last
value
· Substitute value
See Parameter 0
Yes
Channel
--- 3)
assignment and
structure of the
parameter data
records
(Page 42)
1) If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault.
You can prevent this message burst by assigning the diagnostics function to one channel only. 2) You can set the effective range of the diagnostics for each channel in the user program with data records 64 to 71. 3) You can configure the setting "Output substitute value" and the substitute value in the user program by means of data
records 64 to 71.
Short-circuit detection
The diagnostics for short circuit to ground can be configured for the voltage output type. A short-circuit detection is not possible for small output values; the output voltages must therefore be below -0.5 V or above +0.5 V.
Open-circuit detection
The diagnostics for open circuit can be configured for the current output type. An open-circuit detection is not possible for small output values; the output voltages must therefore be below -3 mA or above +3 mA.
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
20
Manual, 09/2016, A5E03484776-AD
Parameters/address space 4.3 Declaration of parameters
4.3
Declaration of parameters
Output rate
Specifies the number of sub-cycles per isochronous data cycle for the for the oversampling function.
Missing supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Wire break
Enabling of the diagnostics if the line to the actuator is broken.
Short circuit to ground
Enabling of the diagnostics if a short-circuit of the output to MANA occurs.
Overflow
Enabling of the diagnostics when the output value exceeds the overrange.
Underflow
Enabling of the diagnostics when the output value violates the underrange.
Reaction to CPU STOP
Determines the reaction of the output to the CPU going into STOP state.
Substitute value
The substitute value is the value that the module outputs in case of a CPU STOP.
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
21
Parameters/address space 4.4 Address space
4.4
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the outputs/inputs.
Configuration options of AQ 8xU/I HS
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 2 Configuration options
Configuration
Abbreviation/module name in the GSD file
1 x 8-channel without value status 1 x 8-channel with value status 8 x 1-channel without value status
AQ 8xU/I HS AQ 8xU/I HS QI AQ 8xU/I HS S
8 x 1-channel with value status
AQ 8xU/I HS S QI
1 x 8-channel with value status for moduleinternal Shared Output with up to 4 submodules
1 x 8-channel without value status for oversampling
AQ 8xU/I HS MSO ---
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12
or higher or STEP 7 V5.5 SP3 or higher
V12 or higher
X
V12 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V14 or higher with HSP
---
0186
(PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names:
AQ 8xU/I HS QI
AQ 8xU/I HS S QI
AQ 8xU/I HS MSO
An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
22
Manual, 09/2016, A5E03484776-AD
Parameters/address space 4.4 Address space
Address space of the AQ 8xU/I HS and AQ 8xU/I HS QI
The following figure shows the address space allocation for the configuration as 8-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "QB x" stands, for example, for the module start address output byte x.
Figure 4-1 Address space for configuration as 1 x 8-channel AQ 8xU/I HS with value status
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
23
Parameters/address space 4.4 Address space
Address space for configuration as 8 x 1-channel AQ 8xU/I HS QI and AQ 8xU/I HS S QI
For the configuration as a 8 x 1-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable submodules is dependent on the interface module used. Observe the information in the manual for the particular interface module. Contrary to the 1 x 8-channel module configuration, each of the eight submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 8 x 1-channel AQ 8xU/I HS S QI with value status
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
24
Manual, 09/2016, A5E03484776-AD
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 8-channel AQ 8xU/I HS MSO
For the configuration as a 1 x 8-channel module (module-internal Shared Output, MSO), channels 0 to 7 of the module are copied to multiple submodules. Channels 0 to 7 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. The IO controller to which submodule 1 is assigned has write access to outputs 0 to 7. The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs
0 to 7. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule on which it occurs. For the 1st submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For the 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state.
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
25
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 8-channel AQ 8xU/I HS MSO with value status
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
26
Manual, 09/2016, A5E03484776-AD
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodules 3 and 4.
Figure 4-4 Address space for configuration as 1 x 8-channel AQ 8xU/I HS MSO with value status
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
27
Parameters/address space 4.4 Address space
Reference
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Address space for configuration as 1 x 8-channel AQ 8xU/I HS for oversampling
The following figure shows the address space assignment with the configuration as 8channel module for the oversampling function. You can freely assign the start address for the module. The addresses of the channels are derived from the start address.
Writing always starts from QB x. If fewer than 16 sub-cycles are set, the addresses that are then unused are ignored.
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
28
Manual, 09/2016, A5E03484776-AD
Parameters/address space 4.4 Address space
"QB x" stands, for example, for the module start address output byte x.
Figure 4-5 Address space for configuration as 1 x 8-channel AI 8xU/I HS for oversampling
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
29
Interrupts/diagnostics alarms
5
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of the AQ 8xU/I HS.
Figure 5-1 LED displays of the AQ 8xU/I HS module
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
30
Manual, 09/2016, A5E03484776-AD
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in section Diagnostic alarms.
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective
Remedy
· Switch on the CPU and/or the system power supply modules. · Verify that the U connectors are inserted. · Check to see if too many modules are inserted. ---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
PWR LED
Table 5- 2 PWR status display
LED PWR Off On
Meaning Supply voltage L+ too low or missing
Supply voltage L+ is present and OK
Remedy Check the L+ supply voltage.
---
CHx LED
Table 5- 3 CHx status display
LED CHx Off On On
Meaning Channel deactivated
Channel configured and OK
Diagnostic alarm: e.g., wire break, overflow, underflow
Remedy ---
---
Check the wiring. Disable diagnostics.
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
31
Interrupts/diagnostics alarms 5.2 Interrupts
See also
Diagnostics alarms (Page 33)
5.2
Interrupts
The analog output module AQ 8xU/I HS supports diagnostic interrupts.
You can find detailed information on the event in the error organization block with the RALRM instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: Missing supply voltage L+ Short circuit to ground Wire break Overflow Underflow Parameter assignment error
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
32
Manual, 09/2016, A5E03484776-AD
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes on the module for each diagnostics event. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 4 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm
Error code
Short circuit to ground 1H
Wire break
6H
Meaning Overload at output Short-circuit of output QV to MANA Encoder circuit impedance too high
Wirebreak between the module and actuator
Channel not connected (open)
Overflow
7H
Underflow
8H
Parameter assignment 10H error
Load voltage missing 11H
The output value set by the user program exceeds the valid rated range/overshoot range.
The output value set by the user program undershoots the valid rated range/undershoot range.
· The module cannot evaluate parameters for the channel
· Incorrect parameter assignment.
Supply voltage L+ of the module is missing
Remedy Eliminate overload Eliminate the short-circuit Use a different actuator type or modify the wiring, for example, use cables with larger cross-section Connect the cable
· Disable the channel ("output type" parameter)
· Connect the channel Correct the output value
Correct the output value
Correct the parameter assignment
Connect supply voltage L+ to module
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
33
Technical specifications
6
Technical specifications of the AQ 8xU/I HS
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7532-5HF00-0AB0
AQ 8xU/I HS FS01 V2.1.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Scalable output range
No
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V14 / -
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
Oversampling
Yes
MSO
Yes
CiR Configuration in RUN
Configuration in RUN possible
Yes
Calibration in RUN possible
Yes
Supply voltage
Rated value (DC) Valid range, low limit (DC) Valid range, high limit (DC) Reverse polarity protection Input current Current consumption, max.
24 V 20.4 V 28.8 V Yes
260 mA; with 24 V DC supply
Power
Power consumption from the backplane bus
1.15 W
Power loss
Power loss, typ.
7 W
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
34
Manual, 09/2016, A5E03484776-AD
Technical specifications
Analog outputs Number of analog outputs Voltage output, short-circuit protection Voltage output, short-circuit current, max. Current output, open-circuit voltage, max. Cycle time (all channels), min.
Output ranges, voltage 0 V to 10 V 1 V to 5 V -10 V to +10 V Output ranges, current 0 mA to 20 mA -20 mA to +20 mA 4 mA to 20 mA Connection of actuators for voltage output two-wire connection for voltage output four-wire connection for current output two-wire connection Load resistance (in the rated output range) for voltage outputs, min. for voltage outputs, capacitive load, max. for current outputs, max. for current outputs, inductive load, max. Cable length shielded, max. Analog value generation for the outputs Integration and conversion time/resolution per channel Resolution with overrange (bit including sign), max. Conversion time (per channel)
Settling time for resistive load for capacitive load for inductive load
6ES7532-5HF00-0AB0
8 Yes 45 mA 20 V 125 µs; regardless of the number of activated channels
Yes Yes Yes
Yes Yes Yes
Yes Yes Yes
1 k 100 nF 500 1 mH
200 m
16 bit
50 µs; regardless of the number of activated channels
30 µs; see additional description in the manual 100 µs; see additional description in the manual 100 µs; see additional description in the manual
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
35
Technical specifications
6ES7532-5HF00-0AB0
Errors/accuracies
Output ripple (relative to output range, bandwidth 0.02% 0 to 50 kHz), (+/-)
Linearity error (relative to output range), (+/-)
0.15%
Temperature error (in relation to output range), (+/-)
0.002%/K
Crosstalk between outputs, max.
-100 dB
Repeat accuracy in settled state at 25 °C (in rela- 0.05% tion to output range), (+/-)
Operational limit in overall temperature range
Voltage in relation to output range, (+/-)
0.3%
Current in relation to output range, (+/-)
0.3%
Basic error limit (operational limit at 25 °C)
Voltage in relation to output range, (+/-)
0.2%
Current in relation to output range, (+/-)
0.2%
Isochronous mode
Isochronous mode (application synchronized up to Yes terminal)
Execution and activation time (TCO), min.
100 µs
Bus cycle time (TDP), min.
250 µs
Interrupts/diagnostics/status information
Diagnostics function
Yes
Substitute values can be applied
Yes
Interrupts
Diagnostic interrupt
Yes
Diagnostics alarms
Monitoring of supply voltage
Yes
Wire break
Yes; only for output type current
Short-circuit
Yes; only for output type voltage
Overflow/underflow
Yes
Diagnostics indicator LED
RUN LED
Yes; green LED
ERROR LED
Yes; red LED
Monitoring of supply voltage (PWR LED)
Yes; green LED
Channel status display
Yes; green LED
For channel diagnostics
Yes; red LED
For module diagnostics
Yes; red LED
Electrical isolation
Electrical isolation of channels
Between the channels
No
Between the channels, in groups of
8
Between the channels and backplane bus
Yes
Between the channels and load voltage L+
Yes
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
36
Manual, 09/2016, A5E03484776-AD
Technical specifications
Permitted potential difference between S- and MANA (UCM) Isolation Isolation tested with Distributed mode Prioritized startup Dimensions Width Height Depth Weights Weight, approx.
6ES7532-5HF00-0AB0
8 V DC
707 V DC (type test)
No
35 mm 147 mm 129 mm
325 g
Derating depending on overall length, ambient temperature and output type (per module)
The following trends show the number of channels (CHx) that can be used simultaneously in horizontal and vertical installation of the S7-1500 automation system/ET 200MP distributed I/O system depending on the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Information on channels used simultaneously (per module) for output type: Current and voltage
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
37
Technical specifications
Note All eight channels can be used in the case of voltage outputs with load resistances > 5 k and ambient temperatures up to 40° (vertical installation) or up to 60° (horizontal installation).
Settling times for voltage outputs
The settling time for voltage outputs is influenced mainly by the capacitive load.
Figure 6-2 Typical settling times for voltage outputs
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
38
Manual, 09/2016, A5E03484776-AD
Technical specifications
Settling times for current outputs
The settling time for current outputs increases when the load impedance rises.
See also
Figure 6-3 Typical settling times for current outputs Parameters (Page 19)
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
39
Dimensional drawing
A
This appendix contains the dimensional drawing of the module installed on a mounting rail and with a shield bracket. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the AQ 8xU/I HS module
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
40
Manual, 09/2016, A5E03484776-AD
Dimensional drawing
Figure A-2 Dimensional drawing of the AQ 8xU/I HS module, side view with open front panel
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
41
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Short circuit to ground Wire break Substitute value
Dependent parameters
With output type voltage only With output type current only Only if Reaction to CPU STOP -> Output substitute value is configured
Parameter assignment in the user program
You have the option to assign module parameters in RUN (e.g., the voltage or current values of selected channels can be edited in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 64 to 71. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer to the module.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
42
Manual, 09/2016, A5E03484776-AD
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You obtain the diagnostics data records 0 and 1 with the read back parameter data records 0 and 1. You can find additional information in the Interrupts section of the manual for the PROFIBUS DP interface module on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Assignment of data record and channel
The channel parameters in data records 64 to 71 are available for 1x 8-channel configuration and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 ... Data record 70 for channel 6 Data record 71 for channel 7 For configuration 8 x 1-channel, the module has 8 submodules with one channel each. The parameters for the channel are available in data record 64 and are assigned as follows: Data record 64 for channel 0 (submodule 1) Data record 64 for channel 1 (submodule 2) ... Data record 64 for channel 5 (submodule 6) Data record 64 for channel 6 (submodule 7) Data record 64 for channel 7 (submodule 8) Address the respective submodule for data record transfer.
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
43
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Data record structure
The figure below shows the structure of data record 64 for channel 0 as an example. The structure is identical for channels 1 to 7. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Data record structure: Bytes 0 to 7
Note You can only configure the oversampling function with STEP 7 (TIA Portal) via the output rate parameter.
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
44
Manual, 09/2016, A5E03484776-AD
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Output type codes
The following table lists all output types of the analog output module along with their codes. Enter these codes at byte 2 of the data record for the corresponding channel (see the previous figure).
Table B- 2 Code for the output type
Output type Deactivated Voltage Current
Code 0000 0000 0000 0001 0000 0010
Codes for the output ranges
The table below contains all output ranges of the analog output module with their codes. Enter these codes at byte 3 of the data record for the corresponding channel (see the previous figure).
Table B- 3 Output range code
Output range for voltage 1 V to 5 V 0 V to 10 V ±10 V Output range for current 0 mA to 20 mA 4 mA to 20 mA ±20 mA
Code 0000 0011 0000 0010 0000 0000 Code 0000 0001 0000 0010 0000 0000
Valid substitute values
The following table lists all output ranges for the valid substitute values. Enter these substitute values at bytes 6 and 7 of the data record for the corresponding channel (see the previous figure). You can find the binary representation of the output ranges in section Representation of analog values (Page 46).
Table B- 4 Valid substitute value for the output range
Output range ±10 V 1 V to 5 V 0 V to 10 V ±20 mA 4 mA to 20 mA 0 mA to 20 mA
Valid substitute value -32512 ... +32511 -6912 ... +32511 0 ... +32511 -32512 ... +32511 -6912 ... +32511 0 ... +32511
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
45
Representation of analog values
C
Introduction
This appendix describes the analog values for all output ranges supported by the AQ 8xU/I HS analog module.
Measured value resolution
Each analog value is written left aligned to the tags. The bits marked with "x" are set to "0".
Table C- 1 Resolution of the analog values
Resolution in bits including sign
16
Values
dec
hex
1
1H
Analog value
high byte
low byte
Sign 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
46
Manual, 09/2016, A5E03484776-AD
Representation of analog values C.1 Representation of output ranges
C.1
Representation of output ranges
The tables below set out the digitalized representation of the output ranges by bipolar and unipolar range. The resolution is 16 bits.
Table C- 2 Bipolar output ranges
Value dec.
32511
32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32512
Output value in %
117,589
117,589 100,004 100,000 0,003617 0,000 -0,003617 -100,000 -100,004 -117,593 -117,593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot range 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Rated range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot range 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < -32512 are specified, the output value is limited to -117.593%.
Table C- 3 Unipolar output ranges
Value dec.
32511
32511 27649 27648 1 0 0
Output value in %
117,589
117,589 100,004 100,000 0,003617 0,000 0
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 x x x x x x x x Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot range 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Rated range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < 0 are specified, the output value is limited to 0%.
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
47
Representation of analog values C.2 Representation of analog values in the voltage output ranges
C.2
Representation of analog values in the voltage output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible voltage output ranges.
Table C- 4 Voltage output range ±10 V
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 %
-75 % -100 %
-117.593 % <-117.593 %
dec >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 <-32512
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 <8100
Voltage output range ±10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V -361.7 µV -7.5 V -10 V
-11.76 V -11.76 V
Range Maximum output value Overshoot range
Rated range Undershoot range Minimum output value
Table C- 5 Voltage output range 0 V to 10 V
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 % <0 %
dec >32511 32511 27649 27648 20736 1 0 <0
hex >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Voltage output range 0 V to 10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V 0 V
Range Maximum output value Overshoot range
Rated range Minimum output value
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
48
Manual, 09/2016, A5E03484776-AD
C.3
Representation of analog values C.3 Representation of analog values in the current output ranges
Table C- 6 Voltage output range 1 V to 5 V
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 %
-25 % <-25 %
dec >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 <E500
Voltage output range 1 V to 5 V 5.70 V 5.70 V
5 V 4 V 1 V +144.7 µV 1 V 1 V -144.7 µV 0 V 0 V
Range Maximum output value Overshoot range
Rated range Undershoot range Minimum output value
Representation of analog values in the current output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible current output ranges.
Table C- 7 Current output range ±20 mA
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 %
-75 % -100 %
-117.593 % <-117.593 %
dec >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 <-32512
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 <8100
Current output range ±20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA -723.4 nA -15 mA -20 mA
-23.52 mA -23.52 mA
Range Maximum output value Overshoot range
Rated range Undershoot range Minimum output value
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
Manual, 09/2016, A5E03484776-AD
49
Representation of analog values C.3 Representation of analog values in the current output ranges
Table C- 8 Current output range 0 to 20 mA
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 % <0 %
dec >32511 32511 27649 27648 20736 1 0 <0
hex >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Current output range 0 mA to 20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA 0 mA
Range Maximum output value Overshoot range
Rated range Minimum output value
Table C- 9 Current output range 4 to 20 mA
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 %
-25 % <-25 %
dec >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 <E500
Current output range 4 mA to 20 mA 22.81 mA 22.81 mA
20 mA 16 mA 4 mA 4 mA
0 mA 0 mA
Range Maximum output value Overshoot range
Rated range Undershoot range Minimum output value
Analog output module AQ 8xU/I HS (6ES7532-5HF00-0AB0)
50
Manual, 09/2016, A5E03484776-AD
SIMATIC
S7-1500/ET 200MP Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _Rvae_lpu_rees_se_n_ta_tio_n _of_a_na_lo_g ____C__
09/2016
A5E36633205-AB
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E36633205-AB 09/2016 Subject to change
Copyright © Siemens AG 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Functions that relate in general to the systems are described in these manuals.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following changes:
As of firmware version V1.1.0, the module supports the isochronous mode function.
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016:
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information regarding the product described in the documentation or its handling, or draws special attention to a section of the documentation.
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
4
Manual, 09/2016, A5E36633205-AB
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109739516).
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
5
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
4 Parameters/address space ................................................................................................................... 16
4.1
Output ranges ........................................................................................................................ 16
4.2
Parameters............................................................................................................................. 17
4.3
Declaration of parameters...................................................................................................... 19
4.4
Address space ....................................................................................................................... 20
5 Interrupts/diagnostics alarms................................................................................................................. 25
5.1
Status and error displays ....................................................................................................... 25
5.2
Interrupts ................................................................................................................................ 27
5.3
Diagnostics alarms................................................................................................................. 28
6 Technical specifications ........................................................................................................................ 29
A Dimensional drawing............................................................................................................................. 35
B Parameter data records ........................................................................................................................ 37
B.1
Parameter assignment and structure of the parameter data records .................................... 37
C Representation of analog values ........................................................................................................... 41
C.1
Representation of output ranges............................................................................................ 42
C.2
Representation of analog values in the voltage output ranges.............................................. 43
C.3
Representation of analog values in the current output ranges .............................................. 45
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
6
Manual, 09/2016, A5E36633205-AB
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
8
Manual, 09/2016, A5E36633205-AB
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
9
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
10
Manual, 09/2016, A5E36633205-AB
Product overview
2.1
Properties
Article number
6ES7532-5ND00-0AB0
View of the module
2
Figure 2-1 View of the AQ 4xU/I HF module
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
11
Product overview 2.1 Properties
Properties
The module has the following technical properties: 4 electrically isolated analog outputs Selection of channels for voltage output Selection of channels for current output Resolution: 16 bits including sign Configurable diagnostics (per channel)
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Isochronous mode
Calibration in runtime Module-internal Shared Output (MSO)
Configurable submodules / submodules for Shared Device
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.1.0 or higher
V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal) as of V13,
SP1 and HSP 0166
X
GSD file in STEP 7 (TIA Portal) as of V12 or STEP 7 as of V5.5 SP3
--- / X
X
X
X
X
V14 or higher and
---
HSP 0186
(PROFINET IO only)
X
---
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
X (PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Shield bracket Shield terminal Power supply element Labeling strips U connector Universal front cover
Other components
The following component can be ordered separately: Front connectors, including potential jumpers and cable ties You can find additional information on accessories in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
12
Manual, 09/2016, A5E36633205-AB
Wiring
3
This section contains the block diagram of the module and outlines various connection options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Note · You may use and combine the different wiring options for all channels. · Do not insert the potential jumpers included with the front connector!
Abbreviations used
Meaning of the abbreviations used in the following figures:
QVn QIn Sn+/SnL+ M MANA 0 bis 3
Voltage output channel Current output channel Sense line channel Supply voltage connection Ground connection Reference potential of the analog circuit
Pin assignment for the power supply element
The power supply element is plugged onto the front connector for powering the analog module. Wire the supply voltage to terminals 41 (L+) and 44 (M). Use terminals 42 (L+) and 43 (M) to loop the potential to the next module.
Figure 3-1 Power supply element wiring
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
13
Wiring
Block diagram and terminal assignment for the voltage output
The following figure shows an example of the wiring options: 2-wire connection, without compensation for line resistances. 4-wire connection, with compensation for line resistances.
2-wire connection (jumper at the front connector) 4-wire connection Digital Analog Converter (DAC) Electrical isolation Backplane bus interface Power via supply module
CHx RUN ERROR PWR
Figure 3-2 Block diagram and terminal assignment for the voltage output
Channel or 4 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
14
Manual, 09/2016, A5E36633205-AB
Wiring
Block diagram and terminal assignment for the current output
The following figure shows an example of the terminal assignment for current output circuitry.
Load on current outputs Digital Analog Converter (DAC) Electrical isolation Backplane bus interface Power via supply module
CHx RUN ERROR PWR
Figure 3-3 Block diagram and terminal assignment for the current output
Channel or 4 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
15
Parameters/address space
4
4.1
Output ranges
The module is set to voltage output type by default with output range ±10 V. You need to edit the module parameters with STEP 7 if you want to use a different output range or output type.
Output type and output ranges
The following table shows the output type and the respective output ranges.
Table 4- 1 Output type and output ranges
Output type Voltage
Current
Deactivated
Output range 1 V to 5 V 0 V to 10 V ±10 V 0 to 20 mA 4 to 20 mA ±20 mA -
Representation of analog values See Appendix Representation of analog values in the voltage output ranges (Page 43).
See Appendix Representation of analog values in the current output ranges (Page 45).
-
The tables of the output ranges, overflow, overshoot range, etc. are available in the appendix Representation of analog values (Page 41).
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
16
Manual, 09/2016, A5E36633205-AB
Parameters/address space 4.2 Parameters
4.2
Parameters
Parameters of AQ 4xU/I HF
The AQ 4xU/I HF is usually already integrated in the hardware catalog of STEP 7 (TIA Portal). In this case, STEP 7 (TIA Portal) checks the configured properties for plausibility during configuration.
However, you can also assign parameters to the module by means of the GSD file and the configuration software of any provider. The module does not check the validity of the parameterized properties until after the configuration has been loaded.
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
When assigning parameters in the user program, use the WRREC instruction to transfer the parameters to the module by means of data records; see chapter Parameter assignment and structure of the parameter data record. (Page 37)
The following parameter settings for the channels are possible:
Table 4- 2 Configurable parameters and their defaults
Parameters
Diagnostics · Missing supply voltage
L+ · Wire break · Short circuit to M · Underflow · Overflow
Range of values
Default setting
Parameter assignment in RUN
Yes/No
No
Yes
Yes/No
No
Yes
Yes/No
No
Yes
Yes/No
No
Yes
Yes/No
No
Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog as of STEP 7 (TIA Portal) as of V13 or GSD file PROFINET IO
GSD file PROFIBUS DP
Channel 1)
Module 2)
Channel Channel Channel Channel
Module 2) Module 2) Module 2) Module 2)
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
17
Parameters/address space 4.3 Declaration of parameters
Parameters
Output · Output type
Range of values
Default setting
Parameter assignment in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog as of STEP 7 (TIA Portal) as of V13 or GSD file PROFINET IO
GSD file PROFIBUS DP
Current/voltage Voltage
Yes
Channel
Channel
· Output range
See section
±10 V
Yes
Output ranges
(Page 16)
· Reaction to CPU STOP · Turn off
Turn off
Yes
· Keep last value
· Output substitute value
Channel Channel
Channel Channel
· Substitute value
See Table B-4 0 Valid substitute value for the output range (Page 40)
Yes
Channel
Channel
1) If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault. You can prevent this message burst by assigning the diagnostics function to one channel only.
2) You can set the effective range of the diagnostics for each channel in the user program with data records 64 to 67.
Short-circuit detection
The diagnostics for short circuit to ground can be configured for the voltage output type. Short-circuit detection is not possible for small output values. The output voltages must therefore be below -0.1 V or above +0.1 V.
Open-circuit detection
The diagnostics for open circuit can be configured for the current output type. Wire break detection is not possible for small output values; the output voltages must therefore be below -0.4 mA or above +0.4 mA.
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
18
Manual, 09/2016, A5E36633205-AB
Parameters/address space 4.3 Declaration of parameters
4.3
Declaration of parameters
Missing supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Wire break
Enabling of the diagnostics if the line to the actuator is broken.
Short-circuit to ground
Enabling of the diagnostics if a short-circuit of the output to MANA occurs.
Overflow
Enabling of the diagnostics when the output value exceeds the overrange.
Underflow
Enabling of the diagnostics when the output value violates the underrange.
Reaction to CPU STOP
Determines the reaction of the output to the CPU going into STOP state.
Substitute value
The substitute value is the value that the module outputs in case of a CPU STOP.
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
19
Parameters/address space 4.4 Address space
4.4
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the outputs/inputs.
Configuration options of AQ 4xU/I HF
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 3 Configuration options
Configuration
Abbreviation/module name
in the GSD file
1 x 4-channel without value status 1 x 4-channel with value status 4 x 1-channel without value status
AQ 4xU/I HF AQ 4xU/I HF QI AQ 4xU/I HF S
4 x 1-channel with value status
AQ 4xU/I HF S QI
1 x 4-channel with value status for module- AQ 4xU/I HF MSO internal Shared Output with up to 4 submodules
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7 (TIA Portal)
as of V13 SP1 with HSP 0166
X
GSD file in STEP 7 (TIA Portal)
V12 or higher or STEP 7 V5.5 SP3 or
higher
X
X
X
X
X
(PROFINET IO only)
(PROFINET IO only)
X
X
(PROFINET IO only)
(PROFINET IO only)
X
X
(PROFINET IO only)
(PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names:
AQ 4xU/I HF QI
AQ 4xU/I HF S QI
AQ 4xU/I HF MSO
An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
20
Manual, 09/2016, A5E36633205-AB
Parameters/address space 4.4 Address space
Address space of the AQ 4xU/I HF
The following figure shows the address space allocation for the configuration as 4-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "QB x" stands, for example, for the module start address output byte x.
Figure 4-1 Address space for configuration as 1 x 4-channel AQ 4xU/I HF with value status
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
21
Parameters/address space 4.4 Address space
Address space for configuration as 4 x 1-channel AQ 4xU/I HF S QI
For the configuration as a 4 x 1-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable submodules is dependent on the interface module used. Observe the information in the manual for the particular interface module. Contrary to the 1 x 4-channel module configuration, each of the four submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 4 x 1-channel AQ 4xU/I HF S QI with value status
Address space for configuration as 1 x 4-channel AQ 4xU/I HF MSO
For the configuration as a 1 x 4-channel module (module-internal Shared Output, MSO), channels 0 to 3 of the module are copied to multiple submodules. Channels 0 to 3 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device.
The IO controller to which submodule 1 is assigned has write access to outputs 0 to 3.
The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs 0 to 3.
The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
22
Manual, 09/2016, A5E36633205-AB
Parameters/address space 4.4 Address space
Value status (Quality Information, QI) The meaning of the value status depends on the submodule on which it occurs. For the 1st submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For the 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state. The following figure shows the assignment of the address space with submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 4-channel AQ 4xU/I HF MSO with value status
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
23
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodules 3 and 4.
Reference
Figure 4-4 Address space for configuration as 1 x 4-channel AQ 4xU/I HF MSO with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
24
Manual, 09/2016, A5E36633205-AB
Interrupts/diagnostics alarms
5
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of AQ 4xU/I HF.
Figure 5-1 LED displays of the module AQ 4xU/I HF
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
25
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic reports can be found in chapter Diagnostics alarms (Page 28).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective
Remedy
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check whether too many modules are in-
serted. ---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
PWR LED
Table 5- 2 PWR status display
LED PWR Off On
Meaning Supply voltage L+ too low or missing
Supply voltage L+ is present and OK
Remedy Check the supply voltage.
---
CHx LED
Table 5- 3 CHx status display
LED CHx Off On On
Meaning Channel deactivated
Channel configured and OK
Diagnostic alarm: e.g., wire break, overflow, underflow
Remedy ---
---
Check the wiring. Disable diagnostics.
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
26
Manual, 09/2016, A5E36633205-AB
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
The analog output module AQ 4xU/I HF supports diagnostics interrupts.
You can find detailed information on the event in the error organization block with the RALRM instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: Missing supply voltage L+ Short circuit to ground Wire break Overflow Underflow Parameter assignment error
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
27
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes for each diagnostics event on the module. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 4 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Short-circuit to ground
Wire break
Error code 1H
6H
Meaning Overload at output Short-circuit of output QV to MANA Encoder circuit impedance too high
Wirebreak between the module and actuator
Channel not connected (open)
Overflow
7H
Underflow
8H
Parameter assignment error 10H
Load voltage missing
11H
The output value set by the user program exceeds the valid rated range/overshoot range.
The output value set by the user program undershoots the valid rated range/undershoot range.
· The module cannot evaluate parameters for the channel
· Incorrect parameter assignment.
Supply voltage L+ of the module is missing
Remedy Eliminate overload Eliminate the short-circuit Use a different actuator type or modify the wiring, for example, use cables with larger cross-section Connect the cable
· Disable the channel ("output type" parameter)
· Connect the channel Correct the output value
Correct the output value
Correct the parameter assignment
Connect supply voltage L+ to module
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
28
Manual, 09/2016, A5E36633205-AB
Technical specifications
6
Technical specifications of the AQ 4xU/I HF
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7532-5ND00-0AB0
AQ 4xU/I HF FS01 V1.1.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V14 / -
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
Oversampling
No
MSO
Yes
CiR Configuration in RUN
Configuration in RUN possible
Yes
Calibration in RUN possible
Yes
Supply voltage
Rated value (DC) Valid range, low limit (DC) Valid range, high limit (DC) Reverse polarity protection Input current Current consumption, max.
24 V 20.4 V 28.8 V Yes
160 mA; with 24 V DC supply
Power
Power consumption from the backplane bus
0.95 W
Power loss
Power loss, typ.
5 W
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
29
Technical specifications
Analog outputs Number of analog outputs Voltage output, short-circuit protection Voltage output, short-circuit current, max. Current output, open-circuit voltage, max. Cycle time (all channels), min.
Output ranges, voltage 0 V to 10 V 1 V to 5 V -10 V to +10 V Output ranges, current 0 mA to 20 mA -20 mA to +20 mA 4 mA to 20 mA Connection of actuators for voltage output two-wire connection for voltage output four-wire connection for current output two-wire connection Load resistance (in the rated output range) for voltage outputs, min. for voltage outputs, capacitive load, max. for current outputs, max. for current outputs, inductive load, max. Cable length shielded, max. Analog value generation for the outputs Integration and conversion time/resolution per channel Resolution with overrange (bit including sign), max. Conversion time (per channel)
Settling time for resistive load for capacitive load for inductive load
6ES7532-5ND00-0AB0
4 Yes 24 mA 22 V 125 µs; regardless of the number of activated channels
Yes Yes Yes
Yes Yes Yes
Yes Yes Yes
1 kOhm; 0.5 kOhm at 1 to 5 V 1 µF 750 10 mH
800 m; for current, 200 m for voltage
16 bit
125 µs; regardless of the number of activated channels
0.2 ms; see additional description in the manual 1.8 ms; see additional description in the manual 2 ms; see additional description in the manual
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
30
Manual, 09/2016, A5E36633205-AB
Technical specifications
6ES7532-5ND00-0AB0
Errors/accuracies
Output ripple (relative to output range, bandwidth 0.02% 0 to 50 kHz), (+/-)
Linearity error (relative to output range), (+/-)
0.015 %
Temperature error (in relation to output range), (+/-)
0.002%/K
Crosstalk between outputs, max.
-100 dB
Repeat accuracy in settled state at 25 °C (in rela- 0.005 % tion to output range), (+/-)
Operational limit in overall temperature range
Voltage in relation to output range, (+/-)
±10 V; 0 V to 10 V: ±0.12 %; 1 V to 5 V: ±0.1 %
Current in relation to output range, (+/-)
±20 mA; 0 mA to 20 mA: ±0.2 %; 4 mA to 20 mA: ±0.12 %
Basic error limit (operational limit at 25 °C)
Voltage in relation to output range, (+/-)
0.06 %
Current in relation to output range, (+/-)
0.1%
Isochronous mode
Isochronous mode (application synchronized up to Yes terminal)
Execution and activation time (TCO), min.
100 µs
Bus cycle time (TDP), min.
250 µs
Interrupts/diagnostics/status information
Diagnostics function
Yes
Substitute values can be applied
Yes
Interrupts
Diagnostic interrupt
Yes
Diagnostics alarms
Monitoring of supply voltage
Yes
Wire break
Yes; only for output type current
Short-circuit
Yes; only for output type voltage
Overflow/underflow
Yes
Diagnostics indicator LED
RUN LED
Yes; green LED
ERROR LED
Yes; red LED
Monitoring of supply voltage (PWR LED)
Yes; green LED
Channel status display
Yes; green LED
For channel diagnostics
Yes; red LED
For module diagnostics
Yes; red LED
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
31
Technical specifications
Electrical isolation Electrical isolation of channels Between the channels Between the channels, in groups of Between the channels and backplane bus Between the channels and load voltage L+ Permitted potential difference Between different circuits
Isolation Isolation tested with
Distributed mode Prioritized startup Dimensions Width Height Depth Weights Weight, approx.
6ES7532-5ND00-0AB0
Yes 1 Yes Yes
60 V DC / 30 V AC; Isolation measured for 120 V AC basic isolation: Between the channels and supply voltage L+, between the channels and the backplane bus, between the channels
2000 V DC between the channels and the supply voltage L+, 2000 V DC between the channels and the backplane bus, 2000 V DC between the channels, 707 V DC (type test) between the supply voltage L+ and the backplane bus
Yes
35 mm 147 mm 129 mm
300 g
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
32
Manual, 09/2016, A5E36633205-AB
Technical specifications
Settling times for voltage outputs
The settling time for voltage outputs is influenced mainly by the capacitive load.
Figure 6-1 Typical settling times for voltage outputs
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
33
Technical specifications
Settling times for current outputs
The figure below illustrates the dependence of the settling time of load resistance and the inductive load.
Figure 6-2 Typical settling times for current outputs
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
34
Manual, 09/2016, A5E36633205-AB
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of the AQ 4xU/I HF module
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
35
Dimensional drawing
Figure A-2 Dimension drawing of the AQ 4xU/I HF module, side view with open front cover
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
36
Manual, 09/2016, A5E36633205-AB
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other.
The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Short circuit to M Wire break Substitute value
Dependent parameters
With output type voltage only With output type current only Only if Reaction to CPU STOP -> Output substitute value is configured
Parameter assignment in the user program
You have the option to assign module parameters in RUN (e.g., the voltage or current values of selected channels can be edited in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 64 to 67. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer to the module.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
37
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Assignment of data record and channel
The channel parameters in data records 64 to 67 are available for 1x 4-channel configuration and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 Data record 66 for channel 2 Data record 67 for channel 3 For configuration 4 x 1-channel, the module has 4 submodules with one channel each. The parameters for the channel are available in data record 64 and are assigned as follows: Data record 64 for channel 0 (submodule 1) Data record 64 for channel 1 (submodule 2) Data record 64 for channel 2 (submodule 3) Data record 64 for channel 3 (submodule 4) Address the respective submodule for data record transfer.
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
38
Manual, 09/2016, A5E36633205-AB
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Data record structure
The figure below shows the structure of data record 64 for channel 0 as an example. The structure is identical for channels 1 to 3. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 64: Bytes 0 to 7
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
39
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Output type codes
The following table lists all output types of the analog output module along with their codes. Enter these codes at byte 2 of the data record for the corresponding channel (see the previous figure).
Table B- 2 Code for the output type
Output type Deactivated Voltage Current
Code 0000 0000 0000 0001 0000 0010
Codes for the output ranges
The following table lists all voltage and current output ranges of the analog output module along with their codes. In each case, enter these codes at byte 3 of the respective data record (see previous figure).
Table B- 3 Output range code
Output range for voltage 1 V to 5 V 0 V to 10 V ±10 V Output range for current 0 mA to 20 mA 4 mA to 20 mA ±20 mA
Code 0000 0011 0000 0010 0000 0000 Code 0000 0001 0000 0010 0000 0000
Valid substitute values
The following table lists all output ranges for the valid substitute values. Enter these substitute values at bytes 6 and 7 of the data record for the corresponding channel (see the previous figure). The binary representation of output ranges is available on the Internet in the function manual Analog value processing for SIMATIC in the appendix (Page 42).
Table B- 4 Valid substitute value for the output range
Output range ±10 V 1 V to 5 V 0 V to 10 V ±20 mA 4 mA to 20 mA 0 mA to 20 mA
Valid substitute value -32512 ... +32511 -6912 ... +32511 0 ... +32511 -32512 ... +32511 -6912 ... +32511 0 ... +32511
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
40
Manual, 09/2016, A5E36633205-AB
Representation of analog values
C
Introduction
This appendix describes the analog values for all output ranges supported by the AQ 4xU/I HF analog module.
Measured value resolution
Each analog value is written left aligned to the tags. The bits marked with "x" are set to "0".
Table C- 1 Resolution of the analog values
Resolution in bits including sign
Values
dec
hex
16
1
1H
Analog value
high byte
low byte
Sign 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
41
Representation of analog values C.1 Representation of output ranges
C.1
Representation of output ranges
The tables below set out the digitalized representation of the output ranges separately for bipolar and unipolar ranges. The resolution is 16 bits.
Table C- 2 Bipolar output ranges
Value dec.
32511
32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32512
Output value in %
117.589
117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 -117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot range 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Rated range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot range 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < -32512 are specified, the output value is limited to -117.593%.
Table C- 3 Unipolar output ranges
Value dec.
32511
32511 27649 27648 1 0 0
Output value in %
117.589
117.589 100.004 100.000 0.003617 0.000 0
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 x x x x x x x x Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot range 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Rated range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < 0 are specified, the output value is limited to 0%.
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
42
Manual, 09/2016, A5E36633205-AB
C.2
Representation of analog values C.2 Representation of analog values in the voltage output ranges
Representation of analog values in the voltage output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible voltage output ranges.
Table C- 4 Voltage output range ±10 V
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 %
-75 % -100 %
dec >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400
Voltage output range ±10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V -361.7 µV -7.5 V -10 V
-117.593 % <-117.593 %
-27649 -32512 <-32512
93FF 8100 < 8100
-11.76 V -11.76 V
Range Maximum output value Overshoot range
Rated range
Undershoot range Minimum output value
Table C- 5 Voltage output range 0 V to 10 V
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 % <0 %
dec >32511 32511 27649 27648 20736 1 0 <0
hex >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Voltage output range 0 V to 10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V 0 V
Range Maximum output value Overshoot range Rated range
Minimum output value
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
43
Representation of analog values C.2 Representation of analog values in the voltage output ranges
Table C- 6 Voltage output range 1 V to 5 V
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 %
-25 % <-25 %
dec >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 < E500
Voltage output range 1 V to 5 V 5.70 V 5.70 V
5 V 4 V 1 V +144.7 µV 1 V 1 V -144.7 µV 0 V 0 V
Range Maximum output value Overshoot range Rated range
Undershoot range Minimum output value
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
44
Manual, 09/2016, A5E36633205-AB
C.3
Representation of analog values C.3 Representation of analog values in the current output ranges
Representation of analog values in the current output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible current output ranges.
Table C- 7 Current output range ±20 mA
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 %
-75 % -100 %
-117.593 % <-117.593 %
dec >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 <-32512
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 <8100
Current output range ±20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA -723.4 nA -15 mA -20 mA
-23.52 mA -23.52 mA
Range Maximum output value Overshoot range
Rated range Undershoot range Minimum output value
Table C- 8 Current output range 0 to 20 mA
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 % <0 %
dec >32511 32511 27649 27648 20736 1 0 <0
hex >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Current output range 0 mA to 20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA 0 mA
Range Maximum output value Overshoot range
Rated range Minimum output value
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
Manual, 09/2016, A5E36633205-AB
45
Representation of analog values C.3 Representation of analog values in the current output ranges
Table C- 9 Current output range 4 to 20 mA
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 %
-25 % <-25 %
dec >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 <E500
Current output range 4 mA to 20 mA 22.81 mA 22.81 mA
20 mA 16 mA 4 mA 4 mA
0 mA 0 mA
Range Maximum output value Overshoot range
Rated range Undershoot range Minimum output value
Analog Output Module AQ 4xU/I HF (6ES7532-5ND00-0AB0)
46
Manual, 09/2016, A5E36633205-AB
SIMATIC
S7-1500/ET 200MP Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _Rvae_lpu_rees_se_n_ta_tio_n _of_a_na_lo_g ____C__
08/2018
A5E03484696-AE
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03484696-AE 07/2018 Subject to change
Copyright © Siemens AG 2012 - 2018. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in these manuals.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following changes: New licensing conditions and copyright information of the Open Source Software New technical specifications
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109757558).
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
4
Manual, 08/2018, A5E03484696-AE
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 10
2.1
Properties ................................................................................................................................ 10
3 Wiring ................................................................................................................................................... 13
4 Parameters/address space ................................................................................................................... 16
4.1
Output ranges .........................................................................................................................16
4.2
Parameters .............................................................................................................................17
4.3
Declaration of parameters ......................................................................................................19
4.4
Address space ........................................................................................................................20
5 Interrupts/diagnostics alarms................................................................................................................. 25
5.1
Status and error displays ........................................................................................................25
5.2
Interrupts .................................................................................................................................27
5.3
Diagnostics alarms..................................................................................................................28
6 Technical specifications ........................................................................................................................ 29
A Dimensional drawing............................................................................................................................. 33
B Parameter data records......................................................................................................................... 35
B.1
Parameter assignment and structure of the parameter data records.....................................35
C Representation of analog values ........................................................................................................... 39
C.1
Representation of output ranges ............................................................................................40
C.2
Representation of analog values in the voltage output ranges ..............................................41
C.3
Representation of analog values in the current output ranges ...............................................43
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
6
Manual, 08/2018, A5E03484696-AE
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
7
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
8
Manual, 08/2018, A5E03484696-AE
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
9
Product overview
2.1
Properties
Article number
6ES7532-5HD00-0AB0
View of the module
2
Properties
Figure 2-1 View of the AQ 4xU/I ST module
The module has the following technical properties: 4 analog outputs Selection of channels for voltage output Selection of channels for current output Resolution: 16 bits including sign Configurable diagnostics (per channel)
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
10
Manual, 08/2018, A5E03484696-AE
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M3 Parameter assignment in RUN Calibration in runtime Module-internal Shared Output (MSO)
Configurable submodules / submodules for Shared Device
Configurable after interface module IM 155-5 DP ST
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V2.0.0 or higher
V2.0.0 or higher
V2.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
V12 or higher
--- / X
V12 or higher
X
V12 or higher
X
V12 or higher
X
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
V13 Update 3 or higher
(PROFINET IO only)
X (PROFINET IO only)
V13 or higher
X
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Compatibility
The following table shows the compatibility of the modules and the dependencies between hardware functional status (FS) and firmware version (FW) used:
Accessories
Hardware functional status FS01 FS02 FS03 FS04
Firmware version V1.0.0 to V2.0.x V1.0.0 to V2.0.x V2.1.0 V2.2.0 or higher
Note Upgrade to downgrade possible between V1.0.0 and V2.0.x
No upgrade or downgrade possible Upgrade and downgrade possible between V2.2.0 and higher
The following accessories are supplied with the module and can also be ordered separately as spare parts: Shield bracket Shield terminal Power supply element Labeling strips U connector Universal front door
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
11
Product overview 2.1 Properties
Other components
The following component can be ordered separately: Front connectors, including potential jumpers and cable ties You can find additional information on accessories in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
12
Manual, 08/2018, A5E03484696-AE
Wiring
3
This section contains the block diagram of the module and outlines various connection options. You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Note You may use and combine the different wiring options for all channels. Do not insert the potential jumpers supplied with the front connector.
Abbreviations used
QVn QIn Sn+/SnL+ M MANA
Voltage output channel Current output channel Sense line channel Connection for supply voltage Ground connection Reference potential of the analog circuit
Pin assignment for the power supply element
The power supply element is plugged onto the front connector for powering the analog module. Wire the supply voltage to terminals 41 (L+) and 44 (M). Use terminals 42 (L+) and 43 (M) to loop the potential to the next module.
Figure 3-1 Power supply element wiring
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
13
Wiring
Block diagram and pin assignment for the voltage output
The following figure shows an example of the wiring options: 2-wire connection, without compensation for line resistances. 4-wire connection, with compensation for line resistances.
2-wire connection (jumper at the front connector) CHx
4-wire connection
RUN
Digital-to-analog converter (DAC)
ERROR
Backplane bus interface
PWR
Supply voltage via power supply module
Channel or 4 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-2 Block diagram and pin assignment for the voltage output
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
14
Manual, 08/2018, A5E03484696-AE
Wiring
Block diagram and pin assignment for the current output
The following figure shows an example of the pin assignment for current output circuitry.
Load on current outputs Digital-to-analog converter (DAC) Backplane bus interface Supply voltage via power supply module
CHx RUN ERROR PWR
Channel or 4 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-3 Block diagram and pin assignment for the current output
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
15
Parameters/address space
4
4.1
Output ranges
The module is set to voltage output type by default with output range ±10 V. You need to edit the module parameters with STEP 7 if you want to use a different output range or output type.
Output type and output ranges
The following table shows the output type and the respective output ranges.
Table 4- 1 Output type and output ranges
Output type Voltage
Current
Disabled
Output range 1 V to 5 V 0 V to 10 V ±10 V 0 mA to 20 mA 4 mA to 20 mA ±20 mA -
Representation of analog values See Representation of analog values in the voltage output ranges (Page 41)
See Representation of analog values in the current output ranges (Page 43)
-
The tables of the output ranges, overflow, overrange, etc. are provided in the appendix Representation of analog values (Page 39).
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
16
Manual, 08/2018, A5E03484696-AE
Parameters/address space 4.2 Parameters
4.2
Parameters
AQ 4xU/I ST parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
When assigning parameters in the user program, use the WRREC instruction to transfer the parameters to the module by means of data records; see chapter Parameter assignment and structure of the parameter data record. (Page 35)
Table 4- 2 Configurable parameters and their defaults
Parameters
Diagnostics · Missing supply voltage
L+ · Wire break · Short circuit to M · Underflow · Overflow
Range of values Default setting Parameter assignment in RUN
Yes/No
No
Yes
Yes/No
No
Yes
Yes/No
No
Yes
Yes/No
No
Yes
Yes/No
No
Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
GSD file
GSD file
PROFINET IO PROFIBUS DP
Channel*
Module**
Channel Channel Channel Channel
Module** Module** Module** Module**
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
17
Parameters/address space 4.2 Parameters
Parameters
Range of values Default setting Parameter assignment in RUN
Output · Output type
Current/voltage Voltage
Yes
· Output range
See chapter
±10 V
Yes
Output ranges
(Page 16)
· Reaction to CPU STOP · Turn off
Turn off
Yes
· Keep last value
· Output substitute value
· Substitute value
See Table B-4 0
Yes
Valid substitute
value for the
output range
(Page 38)
Scope with configuration software, e.g., STEP 7 (TIA Portal)
GSD file
GSD file
PROFINET IO PROFIBUS DP
Channel Channel
Channel Channel
Channel
Channel
Channel
Channel
* If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault. You can prevent this message burst by assigning the diagnostics function to one channel only.
** You can set the effective range of the diagnostics for each channel in the user program with data records 64 to 67.
Short-circuit detection
The diagnostics for short circuit to ground can be configured for the voltage output type. A short-circuit detection is not possible for small output values; the output voltages must therefore be below -0.1 V or above +0.1 V.
Open-circuit detection
The diagnostics for open circuit can be configured for the current output type. An open-circuit detection is not possible for small output values; the output voltages must therefore be below -0.2 mA or above +0.2 mA.
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
18
Manual, 08/2018, A5E03484696-AE
Parameters/address space 4.3 Declaration of parameters
4.3
Declaration of parameters
Missing supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Wire break
Enabling of the diagnostics if the line to the actuator is broken.
Short-circuit to ground
Enabling of the diagnostics if a short-circuit of the output to MANA occurs.
Overflow
Enabling of the diagnostics when the output value exceeds the overrange.
Underflow
Enabling of the diagnostics when the output value violates the underrange.
Reaction to CPU STOP
Determines the reaction of the output to the CPU going into STOP state.
Substitute value
The substitute value is the value that the module outputs in case of a CPU STOP.
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
19
Parameters/address space 4.4 Address space
4.4
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image of the outputs/inputs.
Configuration options of AQ 4xU/I ST
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 3 Configuration options
Configuration
Abbreviation/module name
in the GSD file
1 x 4-channel without value status 1 x 4-channel with value status 4 x 1-channel without value status
AQ 4xU/I ST AQ 4xU/I ST QI AQ 4xU/I ST S
4 x 1-channel with value status
AQ 4xU/I ST S QI
1 x 4-channel with value status for module- AQ 4xU/I ST MSO internal Shared Output with up to 4 submodules
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog STEP 7 (TIA Portal)
V12 or higher
GSD file in STEP 7 (TIA Portal)
V12 or higher or STEP 7 V5.5 SP3 or
higher
X
V12 or higher
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names:
AQ 4xU/I ST QI
AQ 4xU/I ST S QI
AQ 4xU/I ST MSO
An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
20
Manual, 08/2018, A5E03484696-AE
Parameters/address space 4.4 Address space
Address space of the AQ 4xU/I ST
The following figure shows the address space allocation for the configuration as 4-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "QB x" stands, for example, for the module start address output byte x.
Figure 4-1 Address space for configuration as 1 x 4-channel AQ 4xU/I ST with value status
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
21
Parameters/address space 4.4 Address space
Address space for configuration as 4 x 1-channel AQ 4xU/I ST S QI
For the configuration as a 4 x 1-channel module, the channels of the module are divided into multiple submodules. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Observe the information in the manual for the particular interface module. Unlike the 1 x 4-channel module configuration, each of the four submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 4 x 1-channel AQ 4xU/I ST S QI with value status
Address space for configuration as 1 x 4-channel AQ 4xU/I ST MSO
For the configuration as a 1 x 4-channel module (module-internal Shared Output, MSO), channels 0 to 3 of the module are copied to multiple submodules. Channels 0 to 3 are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device.
The IO controller to which submodule 1 is assigned has write access to outputs 0 to 3.
The IO controllers to which submodule 2, 3, or 4 is assigned have read access to outputs 0 to 3.
The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
22
Manual, 08/2018, A5E03484696-AE
Parameters/address space 4.4 Address space
Value status (Quality Information, QI) The meaning of the value status depends on the submodule on which it occurs. For the 1st submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For the 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state. The figure below shows the assignment of the address space with submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 4-channel AQ 4xU/I ST MSO with value status
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
23
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodule 3 and 4.
Reference
Figure 4-4 Address space for configuration as 1 x 4-channel AQ 4xU/I ST MSO with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
24
Manual, 08/2018, A5E03484696-AE
Interrupts/diagnostics alarms
5
5.1
Status and error displays
LED displays
The following figure shows the LED displays (status and error displays) of AQ 4xU/I ST.
Figure 5-1 LED displays of the AQ 4xU/I ST module
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
25
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic reports can be found in chapter Diagnostics alarms (Page 28).
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid parameter assignment is set. Module is configured
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective
Solution
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check whether too many modules are in-
serted. ---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
PWR LED
Table 5- 2 PWR status display
LED PWR Off On
Meaning Supply voltage L+ too low or missing
Supply voltage L+ is present and OK
Solution Check the supply voltage.
---
CHx LED
Table 5- 3 CHx status display
LED CHx Off On On
Meaning Channel deactivated
Channel configured and OK
Diagnostics alarm: e.g., wire break, overflow, underflow
Solution ---
---
Check the wiring. Disable diagnostics.
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
26
Manual, 08/2018, A5E03484696-AE
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
The analog output module AQ 4xU/I ST supports diagnostic interrupts.
You can find detailed information on the event in the error organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: Missing supply voltage L+ Short-circuit to ground Wire break Overflow Underflow Parameter assignment error
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
27
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes on the module for each diagnostics event. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
If the module is operated distributed with PROFIBUS DP in an ET 200MP system, you have the option to read out diagnostics data with the instruction RDREC or RD_REC using data record 0 and 1. The structure of the data records is available on the Internet in the "Manual for interface module IM 155-5 DP ST (6ES7155-5BA00-0AB0)".
Table 5- 4 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Short-circuit to ground
Wire break
Error code 1H
6H
Overflow
7H
Underflow
8H
Parameter assign- 10H ment error
Load voltage missing 11H
Meaning Overload at output Short-circuit of output QV to MANA Actuator circuit impedance too high
Wirebreak between the module and actuator Channel not connected (open)
Solution Eliminate overload Eliminate the short-circuit Use a different actuator type or modify the wiring, for example, use cables with larger cross-section Connect the cable
· Disable the channel ("output type" parameter)
· Connect the channel
The output value set by the user program violates the valid rated range/overrange.
The output value set by the user program violates the valid rated range/underrange.
· The module cannot evaluate parameters for the channel
· Incorrect parameter assignment
Correct the output value Correct the output value Correct the parameter assignment
Supply voltage L+ of the module is miss- Connect supply voltage L+ to module ing
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
28
Manual, 08/2018, A5E03484696-AE
Technical specifications
6
Technical specifications of the AQ 4xU/I ST
The following table shows the technical specifications as of 08/2018. You will find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/de/en/pv/6ES7532-5HD00-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version · FW update possible
Product function · I&M data
· Output range scalable
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Operating mode · Oversampling
· MSO
CiR Configuration in RUN Reparameterization possible in RUN Calibration possible in RUN
Supply voltage Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Input current Current consumption, max.
6ES7532-5HD00-0AB0
AQ 4xU/I ST FS04 V2.2.0 Yes
Yes; I&M0 to I&M3 No
V12 / V12
V5.5 SP3 / -
V1.0 / V5.1
V2.3 / -
No Yes
Yes Yes
24 V 20.4 V 28.8 V Yes
190 mA; with 24 V DC supply
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
29
Technical specifications
Article number Power
Power available from the backplane bus Power loss
Power loss, typ. Analog outputs
Number of analog outputs Voltage output, short-circuit protection Voltage output, short-circuit current, max. Current output, no-load voltage, max. Cycle time (all channels), min.
Output ranges, voltage · 0 to 10 V
· 1 V to 5 V
· -5 V to +5 V
· -10 V to +10 V Output ranges, current
· 0 to 20 mA
· -20 mA to +20 mA
· 4 mA to 20 mA Connection of actuators
· for voltage output two-wire connection
· for voltage output four-wire connection
· for current output two-wire connection Load impedance (in rated range of output)
· with voltage outputs, min.
· with voltage outputs, capacitive load, max.
· with current outputs, max.
· with current outputs, inductive load, max. Cable length
· shielded, max. Analog value generation for the outputs Integration and conversion time/resolution per channel
· Resolution with overrange (bit including sign), max.
· Conversion time (per channel)
6ES7532-5HD00-0AB0
0.6 W
4 W
4 Yes 24 mA 22 V 3.2 ms; independent of number of activated channels
Yes Yes No Yes
Yes Yes Yes
Yes Yes Yes
1 k; 0.5 kOhm at 1 to 5 V 1 µF 750 10 mH
800 m; for current, 200 m for voltage
16 bit
0.5 ms
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
30
Manual, 08/2018, A5E03484696-AE
Technical specifications
Article number Settling time
· for resistive load
6ES7532-5HD00-0AB0 1.5 ms
· for capacitive load
2.5 ms
· for inductive load
2.5 ms
Errors/accuracies
Output ripple (relative to output range, bandwidth 0 to 50 kHz), (+/-)
0.02 %
Linearity error (relative to output range), (+/-) 0.15 %
Temperature error (relative to output range), (+/-)
0.002 %/K
Crosstalk between the outputs, max.
-100 dB
Repeat accuracy in steady state at 25 °C (rela- 0.05 % tive to output range), (+/-)
Operational error limit in overall temperature range
· Voltage, relative to output range, (+/-)
0.3 %
· Current, relative to output range, (+/-)
0.3 %
Basic error limit (operational limit at 25 °C) · Voltage, relative to output range, (+/-)
0.2 %
· Current, relative to output range, (+/-)
0.2 %
Isochronous mode
Isochronous operation (application synchro- No nized up to terminal)
Interrupts/diagnostics/status information
Diagnostics function
Yes
Substitute values connectable
Yes
Alarms
· Diagnostic alarm
Yes
Diagnostic messages
· Monitoring the supply voltage
Yes
· Wire-break
Yes; Only for output type "current"
· Short-circuit
Yes; Only for output type "voltage"
· Overflow/underflow
Yes
Diagnostics indication LED · RUN LED
Yes; Green LED
· ERROR LED
Yes; Red LED
· Monitoring of the supply voltage (PWRLED)
Yes; Green LED
· Channel status display
Yes; Green LED
· for channel diagnostics
Yes; Red LED
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
31
Technical specifications
Article number · for module diagnostics
6ES7532-5HD00-0AB0 Yes; Red LED
Potential separation
Potential separation channels
· between the channels
No
· between the channels, in groups of
4
· between the channels and backplane bus Yes
· Between the channels and load voltage L+ Yes
Permissible potential difference between S- and MANA (UCM)
Isolation Isolation tested with
Decentralized operation Prioritized startup
Dimensions Width Height Depth
Weights Weight, approx.
8 V DC
707 V DC (type test)
No
35 mm 147 mm 129 mm
310 g
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
32
Manual, 08/2018, A5E03484696-AE
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the AQ 4xU/I ST module
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
33
Dimensional drawing
Figure A-2 Dimensional drawing of the AQ 4xU/I ST module, side view with open front panel
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
34
Manual, 08/2018, A5E03484696-AE
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Short circuit to M Wire break Substitute value
Dependent parameters
With output type voltage only With output type current only Only if Reaction to CPU STOP -> Output substitute value is configured
Parameter assignment in the user program
You have the option to assign module parameters in RUN (e.g., the voltage or current values of selected channels can be edited in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 64 to 67. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer to the module.
Output parameter STATUS
The module ignores errors that occurred during the transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
35
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Operation of the module behind a PROFIBUS DP interface module
If the module is operated behind a PROFIBUS DP interface module, the parameter data records 0 and 1 are not read back. You get the diagnostics data records 0 and 1 for the read back parameter data records 0 and 1. You can find more information in the Interrupts section of the PROFIBUS DP interface module device manual on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Assignment of data record and channel
The channel parameters in data records 64 to 67 are available for 1x 4-channel configuration and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 Data record 66 for channel 2 Data record 67 for channel 3 For configuration 4 x 1-channel, the module has 4 submodules with one channel each. The parameters for the channel are available in data record 64 and are assigned as follows: Data record 64 for channel 0 (submodule 1) Data record 64 for channel 1 (submodule 2) Data record 64 for channel 2 (submodule 3) Data record 64 for channel 3 (submodule 4) Address the respective submodule for data record transfer.
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
36
Manual, 08/2018, A5E03484696-AE
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Data record structure
The example in the following figure shows the structure of data record 64 for channel 0. The structure of channels 1 to 3 is identical. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 64: Bytes 0 to 7
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
37
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Output type codes
The following table lists all output types of the analog output module along with their codes. Enter these codes at byte 2 of the data record for the corresponding channel (see the previous figure).
Table B- 2 Code for the output type
Output type Deactivated Voltage Current
Code 0000 0000 0000 0001 0000 0010
Codes for the output ranges
The following table lists all voltage and current output ranges of the analog output module along with their codes. In each case, enter these codes at byte 3 of the respective data record (see previous figure).
Table B- 3 Output range code
Output range for voltage 1 V to 5 V 0 V to 10 V ±10 V Output range for current 0 mA to 20 mA 4 mA to 20 mA ±20 mA
Code 0000 0011 0000 0010 0000 0000 Code 0000 0001 0000 0010 0000 0000
Valid substitute values
The following table lists all output ranges for the valid substitute values. Enter these substitute values at bytes 6 and 7 of the data record for the corresponding channel (see the previous figure). The binary representation of output ranges is available on the Internet in Function Manual Analog value processing for SIMATIC.
Table B- 4 Valid substitute value for the output range
Output range ±10 V 1 V to 5 V 0 V to 10 V ±20 mA 4 mA to 20 mA 0 mA to 20 mA
Valid substitute value -32512 ... +32511 -6912 ... +32511 0 ... +32511 -32512 ... +32511 -6912 ... +32511 0 ... +32511
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
38
Manual, 08/2018, A5E03484696-AE
Representation of analog values
C
Introduction
This appendix describes the analog values for all output ranges supported by the AQ 4xU/I ST analog module.
Measured value resolution
Each analog value is written left aligned to the tags. The bits marked with "x" are set to "0".
Table C- 1 Resolution of the analog values
Resolution in bits including sign
Values
dec
hex
16
1
1H
Analog value
high byte
low byte
Sign 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
39
Representation of analog values C.1 Representation of output ranges
C.1
Representation of output ranges
The tables below set out the digitalized representation of the output ranges by bipolar and unipolar range. The resolution is 16 bits.
Table C- 2 Bipolar output ranges
Value dec.
32511
32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32512
Output value in %
117,589
117,589 100,004 100,000 0,003617 0,000 -0,003617 -100,000 -100,004 -117,593 -117,593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot range 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Rated range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot range 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < -32512 are specified, the output value is limited to -117.593%.
Table C- 3 Unipolar output ranges
Value dec.
32511
32511 27649 27648 1 0 0
Output value in %
117,589
117,589 100,004 100,000 0,003617 0,000 0
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 x x x x x x x x Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot range 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Rated range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < 0 are specified, the output value is limited to 0%.
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
40
Manual, 08/2018, A5E03484696-AE
C.2
Representation of analog values C.2 Representation of analog values in the voltage output ranges
Representation of analog values in the voltage output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible voltage output ranges.
Table C- 4 Voltage output range ±10 V
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 %
-75 % -100 %
dec >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400
Voltage output range ±10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V -361.7 µV -7.5 V -10 V
-117.593 % <-117.593 %
-27649 -32512 <-32512
93FF 8100 < 8100
-11.76 V -11.76 V
Range Maximum output value Overshoot range
Rated range
Undershoot range Minimum output value
Table C- 5 Voltage output range 0 V to 10 V
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 % <0 %
dec >32511 32511 27649 27648 20736 1 0 <0
hex >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Voltage output range 0 V to 10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V 0 V
Range Maximum output value Overshoot range Rated range
Minimum output value
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
41
Representation of analog values C.2 Representation of analog values in the voltage output ranges
Table C- 6 Voltage output range 1 V to 5 V
Values
>117.589 % 117.589 %
100 % 75 % 0.003617 % 0 %
-25 % <-25 %
dec >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 < E500
Voltage output range 1 V to 5 V 5.70 V 5.70 V
5 V 4 V 1 V +144.7 µV 1 V 1 V -144.7 µV 0 V 0 V
Range Maximum output value Overshoot range Rated range
Undershoot range Minimum output value
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
42
Manual, 08/2018, A5E03484696-AE
C.3
Representation of analog values C.3 Representation of analog values in the current output ranges
Representation of analog values in the current output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible current output ranges.
Table C- 7 Current output range ±20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-75% -100%
-117.593% <-117.593%
dec >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 <-32512
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 <8100
Current output range ±20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA -723.4 nA -15 mA -20 mA
-23.52 mA -23.52 mA
Range Maximum output value Overshoot range
Rated range Undershoot range Minimum output value
Table C- 8 Current output range 0 mA to 20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0% <0%
dec >32511 32511 27649 27648 20736 1 0 <0
hex >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Current output range 0 mA to 20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA 0 mA
Range Maximum output value Overshoot range
Rated range Minimum output value
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
Manual, 08/2018, A5E03484696-AE
43
Representation of analog values C.3 Representation of analog values in the current output ranges
Table C- 9 Current output range 4 mA to 20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-25% <-25%
dec >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 <E500
Current output range 4 mA to 20 mA 22.81 mA 22.81 mA
20 mA 16 mA 4 mA + 578.7 nA 4 mA 4 mA - 578.7 nA 0 mA 0 mA
Range Maximum output value Overshoot range
Rated range Undershoot range Minimum output value
Analog output module AQ 4xU/I ST (6ES7532-5HD00-0AB0)
44
Manual, 08/2018, A5E03484696-AE
SIMATIC
S7-1500/ET 200MP Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual
_Pr_ef_ac_e_______________ _G_uid_e_to_d_o_cu_m_en_ta_tio_n______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_d_ra_w_in_g ________A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _Rvae_lpu_rees_se_n_ta_tio_n _of_a_na_lo_g ____C__
09/2016
A5E32366632-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E32366632-AC 11/2016 Subject to change
Copyright © Siemens AG 2014 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in these manuals.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change:
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
4
Manual, 09/2016, A5E32366632-AC
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
5
Table of contents
Preface ................................................................................................................................................... 4
1 Guide to documentation .......................................................................................................................... 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 13
3.1
Wiring and block diagrams..................................................................................................... 13
4 Parameters/address space ................................................................................................................... 16
4.1
Output ranges ........................................................................................................................ 16
4.2
Parameters............................................................................................................................. 17
4.3
Explanation of parameters ..................................................................................................... 18
4.4
Address space ....................................................................................................................... 19
5 Interrupts/diagnostics alarms................................................................................................................. 23
5.1
Status and error displays ....................................................................................................... 23
5.2
Interrupts ................................................................................................................................ 25
5.3
Diagnostics alarms................................................................................................................. 25
6 Technical specifications ........................................................................................................................ 26
A Dimension drawing ............................................................................................................................... 30
B Parameter data records ........................................................................................................................ 32
B.1
Parameter assignment and structure of the parameter data records .................................... 32
C Representation of analog values ........................................................................................................... 36
C.1
Representation of output ranges............................................................................................ 36
C.2
Representation of analog values in the voltage output ranges.............................................. 37
C.3
Representation of analog values in the current output ranges .............................................. 39
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
6
Manual, 09/2016, A5E32366632-AC
Guide to documentation
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
7
Guide to documentation
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
8
Manual, 09/2016, A5E32366632-AC
Guide to documentation
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
9
Guide to documentation
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
10
Manual, 09/2016, A5E32366632-AC
Product overview
2.1
Properties
Article number
6ES7532-5NB00-0AB0
View of the module
2
Properties
Figure 2-1 View of the AQ 2xU/I ST module
The module has the following technical properties: 2 analog outputs Resolution: 16 bits including sign Selection of channels for voltage output Selection of channels for current output Configurable diagnostics (per channel)
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
11
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Calibration in runtime Identification data I&M0 to I&M3 Parameter assignment in RUN Module-internal Shared Output (MSO) Configurable submodules / submodules for Shared Device
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
GSD file in STEP 7 (TIA Portal) V12 or higher, or STEP 7 V5.5 SP3 or higher
V13 or higher with HSP 0102
--- / X
V13 or higher with HSP 0102
X
V13 or higher with HSP 0102
X
V13 or higher with HSP 0102
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Front connector (push-in terminals) including cable tie Shield bracket Shield terminal Power supply element (push-in terminals) Labeling strips U connector Universal front door You can find additional information on accessories in the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
12
Manual, 09/2016, A5E32366632-AC
Wiring
3
3.1
Wiring and block diagrams
This section contains the block diagram of the module and outlines various connection options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Note You may use and combine the different wiring options for all channels.
Abbreviations used
QVn QIn Sn+/SnL+ M MANA
Voltage output channel Current output channel Sense line channel Connection for supply voltage Ground connection Reference potential of the analog circuit
Pin assignment for the power supply element
The power supply element is plugged onto the front connector for powering the analog module. Wire the supply voltage to terminals 41 (L+) and 43 (M).
Figure 3-1 Power supply element wiring
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
13
Wiring 3.1 Wiring and block diagrams
Connection: Voltage output
The example in the figure below shows the pin assignment for voltage outputs with: 2-wire connection, without compensation for line resistances. 4-wire connection, with compensation for line resistances.
2-wire connection 4-wire connection Digital-to-analog converter (DAC) Backplane bus interface Supply voltage via power supply module
CHx RUN ERROR PWR
Channel or 2 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-2 Block diagram and pin assignment for the voltage output
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
14
Manual, 09/2016, A5E32366632-AC
Wiring 3.1 Wiring and block diagrams
Connection: Current output
The example in the figure below shows the pin assignment for current outputs.
Load on current outputs Digital-to-analog converter (DAC) Backplane bus interface Supply voltage via power supply module
CHx RUN ERROR PWR
Channel or 2 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-3 Block diagram and pin assignment for the current output
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
15
Parameters/address space
4
4.1
Output ranges
Introduction
The module is set to voltage output type by default with output range ±10 V. You need to edit the module parameters with STEP 7 if you want to use a different output range or output type.
Output type and output ranges
The following table shows the output type and the respective output ranges.
Table 4- 1 Output type and output ranges
Output type Voltage
Current
Disabled
Output range 1 V to 5 V 0 V to 10 V ±10 V 0 mA to 20 mA 4 mA to 20 mA ±20 mA -
Representation of analog values See Representation of analog values in the voltage output ranges (Page 37)
See Representation of analog values in the current output ranges (Page 39)
-
The tables of the output ranges, overflow, overrange, etc. are provided in the appendix Representation of analog values (Page 36).
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
16
Manual, 09/2016, A5E32366632-AC
Parameters/address space 4.2 Parameters
4.2
Parameters
AQ 2xU/I ST parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
When assigning parameters in the user program, use the WRREC instruction to transfer the parameters to the module by means of data records; see section Parameter assignment and structure of the parameter data record. (Page 32)
Table 4- 2 Configurable parameters and their defaults
Parameters
Range of values
Default setting
Diagnostics
· No supply voltage L+ Yes/No
No
· Wire break
Yes/No
No
· Short-circuit to
Yes/No
No
ground
· Underflow
Yes/No
No
· Overflow
Yes/No
No
Output parameters · Output type
Current/voltage
Voltage
· Output range
· Reaction to CPU STOP
See section Output ranges (Page 16)
· Turn off
· Keep last value
±10 V Turn off
· Output substitute value
· Substitute value
Must be in the valid volt-
0
age/current output range; see
Table B-4 Valid substitute
value for the output range
(Page 35)
Parameter assignment in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7, as of V13 or GSD file PROFINET IO
GSD file PROFIBUS DP
Yes
Channel*
Yes
Channel
Yes
Channel
Module Module Module
Yes
Channel
Yes
Channel
Module Module
Yes
Channel
Yes
Channel
Yes
Channel
Channel Channel
Channel
Yes
Channel
Channel
* If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault. You can prevent this alarm surge by assigning the diagnostics function to one channel only.
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
17
Parameters/address space 4.3 Explanation of parameters
Short-circuit detection
The diagnostics for short circuit to ground can be configured for the voltage output type. A short-circuit detection is not possible for small output values; the output voltages must therefore be below -0.1 V or above +0.1 V.
Wire break detection
The diagnostics for wire break can be configured for the current output type. Wire break detection is not possible for small output values; the output voltages must therefore be below -0.2 mA or above +0.2 mA.
4.3
Explanation of parameters
No supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Wire break
Enabling of the diagnostics if the line to the actuator is broken.
Short-circuit to ground
Enabling of the diagnostics if a short-circuit of the output to MANA occurs.
Overflow
Enabling of the diagnostics when the output value exceeds the over range.
Underflow
Enabling of the diagnostics when the output value violates the under range.
Reaction to CPU STOP
Determines the reaction of the output to the CPU going into STOP state.
Substitute value
The substitute value is the value that the module outputs in case of a CPU STOP.
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
18
Manual, 09/2016, A5E32366632-AC
Parameters/address space 4.4 Address space
4.4
Address space
The module can be configured in various ways in STEP 7. Depending on the configuration, additional/different addresses are assigned in the process image of the outputs/inputs.
Configuration options of AQ 2xU/I ST
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 3 Configuration options
Configuration
Short designation/module name
in the GSD file
1 x 2-channel without value status 1 x 2-channel with value status 2 x 1-channel without value status
AQ 2xU/I ST AQ 2xU/I ST QI AQ 2xU/I ST S
2 x 1-channel with value status
AQ 2xU/I ST S QI
1 x 2-channel with value status for AQ 2xU/I ST MSO module-internal shared output with up to 4 submodules
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog STEP 7 (TIA Portal)
V13 or higher with HSP 0102
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7
V5.5 SP3 or higher
X
V13 or higher with HSP 0102
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
Value status (Quality Information, QI)
The value status is always activated for the following module names:
AQ 2xU/I ST QI
AQ 2xU/I ST S QI
AQ 2xU/I ST MSO
An additional bit is assigned to each channel for the value status. The bit for the value status indicates if the output value specified by the user program is actually pending at the module terminal (0 = value is incorrect).
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
19
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 2-channel AQ 2xU/I ST
The figure below shows the address space assignment for configuration as a 1 x 2-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "QB x" stands, for example, for the module start address output byte x.
Figure 4-1 Address space for configuration as 1 x 2-channel AQ 2xU/I ST with value status
Address space for configuration as 2 x 1-channel AQ 2xU/I ST S QI
The channels of the module are divided up into several submodules with configuration as 2 x 1-channel module. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Observe the information in the manual for the particular interface module. Unlike the 1 x 2-channel module configuration, each of the four submodules has a freely assignable start address.
Figure 4-2 Address space for configuration as 2 x 1-channel AQ 2xU/I ST S QI with value status
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
20
Manual, 09/2016, A5E32366632-AC
Parameters/address space 4.4 Address space
Address space for configuration as 1 x 2-channel AQ 2xU/I ST MSO
The channels 0 to 1 of the module are copied to several submodules with configuration as 1 x 2-channel module (module internal Shared Output, MSO). Channels 0 to 1 are then available with identical values in different submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device. The IO controller to which submodule 1 is assigned has write access to the outputs 0 and
1. The IO controllers to which submodules 2, 3 or 4 are assigned have write access to the
outputs 0 and 1. The number of IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) The meaning of the value status depends on the submodule on which it occurs. For the 1st submodule (= basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state. For the 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred: The basic submodule is not yet configured (not ready). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state. The figure below shows the assignment of the address space with submodules 1 and 2.
Figure 4-3 Address space for configuration as 1 x 2-channel AQ 2xU/I ST MSO with value status
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
21
Parameters/address space 4.4 Address space
The following figure shows the assignment of the address space with submodule 3 and 4.
Reference
Figure 4-4 Address space for configuration as 1 x 2-channel AQ 2xU/I ST MSO with value status
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
22
Manual, 09/2016, A5E32366632-AC
Interrupts/diagnostics alarms
5
5.1
Status and error displays
LED displays
The following figure shows you the LED displays (status and error displays) of AQ 2xU/I ST.
Figure 5-1 LED displays of the module AQ 2xU/I ST
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
23
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Corrective measures for diagnostics alarms can be found in section Diagnostics alarms (Page 25).
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid configuration is set. Module is configured
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective
Solution
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are in-
serted. ---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
PWR LED
Table 5- 2 PWR status display
LED PWR Off On
Meaning Supply voltage L+ too low or missing
Supply voltage L+ is present and OK
Solution Check supply voltage L+.
---
CHx LED
Table 5- 3 CHx status display
LED CHx Off On On
Meaning Channel disabled
Channel configured and OK
Diagnostics alarm: e.g., wire break, overflow, underflow
Solution ---
---
Check the wiring. Disable diagnostics.
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
24
Manual, 09/2016, A5E32366632-AC
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
The analog output module AQ 2xU/I ST supports diagnostic interrupts.
You can find detailed information on the error event in the error organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events: Missing supply voltage L+ Short-circuit to ground Wire break Overflow Underflow Parameter assignment error
5.3
Table 5- 4
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes on the module for each diagnostics event. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm Short-circuit to ground
Error code
1H
Wire break
6H
Overflow
7H
Underflow
8H
Parameter assignment 10H error
Load voltage missing 11H
Channel temporarily
1FH
unavailable
Meaning
Solution
Overload at output
Eliminate overload
Short-circuit of output QV to MANA
Eliminate the short-circuit
Actuator circuit impedance too high
Use a different actuator type or modify the wiring, for example, use cables with larger cross-section
Wirebreak between the module and actuator Connect the cable
Channel not connected (open)
· Disable the channel ("output type" parameter)
· Connect the channel
The output value set by the user program violates the valid rated range/overrange.
Correct the output value
The output value set by the user program violates the valid rated range/underrange.
Correct the output value
· The module cannot evaluate parameters Correct the parameter assignment for the channel
· Incorrect parameter assignment
Supply voltage L+ of the module is missing Connect supply voltage L+ to module
User calibration is active.
Exit user calibration.
Channel currently not providing current/valid values.
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
25
Technical specifications
6
Technical specifications of the AQ 2xU/I ST
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7532-5NB00-0AB0
AQ 2xU/I ST FS01 V1.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Scalable output range
No
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V13 / V13.0.2
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
Oversampling
No
MSO
Yes
CiR Configuration in RUN
Parameter assignment in RUN possible
Yes
Calibration in RUN possible
Yes
Supply voltage
Rated value (DC) Valid range, low limit (DC) Valid range, high limit (DC) Reverse polarity protection Input current Current consumption, max.
24 V 20.4 V 28.8 V Yes
110 mA; with 24 V DC supply
Power
Power consumption from backplane bus
0.65 W
Power loss
Power loss, typ.
2.7 W
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
26
Manual, 09/2016, A5E32366632-AC
Technical specifications
Analog outputs Number of analog outputs Voltage output, short-circuit protection Voltage output, short-circuit current, max. Current output, open-circuit voltage, max. Cycle time (all channels), min.
Output ranges, voltage 0 V to 10 V 1 V to 5 V -5 V to +5 V -10 V to +10 V Output ranges, current 0 mA to 20 mA -20 mA to +20 mA 4 mA to 20 mA Connection of actuators for voltage output two-wire connection for voltage output four-wire connection for current output two-wire connection Load resistance (in the rated output range) for voltage outputs, min. for voltage outputs, capacitive load, max. for current outputs, max. for current outputs, inductive load, max. Cable length shielded, max. Analog value generation for the outputs Integration and conversion time/resolution per channel Resolution with overrange (bit including sign), max. Conversion time (per channel) Settling time for resistive load for capacitive load for inductive load Errors/accuracies Output ripple (in relation to output range, bandwidth 0 kHz to 50 kHz), (+/-) Linearity error (in relation to output range), (+/-) Temperature error (in relation to output range), (+/-) Crosstalk between outputs, max. Repeat accuracy in settled state at 25 °C (in relation to output range), (+/-)
6ES7532-5NB00-0AB0
2 Yes 24 mA 22 V 3.2 ms; regardless of the number of activated channels
Yes Yes No Yes
Yes Yes Yes
Yes Yes Yes
1 kOhm; 0.5 kOhm at 1 to 5 V 1 µF 750 10 mH
800 m; for current, 200 m for voltage
16 bit
0.5 ms
1.5 ms 2.5 ms 2.5 ms
0.02%
0.15% 0.002%/K
-100 dB 0.05%
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
27
Technical specifications
6ES7532-5NB00-0AB0
Operational limit in the entire temperature range
Voltage in relation to output range, (+/-)
0.3%
Current in relation to output range, (+/-)
0.3%
Basic error limit (operational limit at 25 °C)
Voltage in relation to output range, (+/-)
0.2%
Current in relation to output range, (+/-)
0.2%
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
Yes
Substitute values can be applied
Yes
Interrupts
Diagnostic interrupt
Yes
Diagnostics alarms
Monitoring of supply voltage
Yes
Wire break
Yes; only for output type current
Short-circuit
Yes; only for output type voltage
Overflow/underflow
Yes
Diagnostics display LED
RUN LED
Yes; green LED
ERROR LED
Yes; red LED
Monitoring of supply voltage (PWR LED)
Yes; green LED
Channel status display
Yes; green LED
For channel diagnostics
Yes; red LED
For module diagnostics
Yes; red LED
Electrical isolation
Electrical isolation of channels
Between the channels
No
Between the channels, in groups of
2
Between the channels and backplane bus
Yes
Between the channels and load voltage L+
Yes
Permissible potential difference
between S- and MANA (UCM)
8 V DC
Insulation
Insulation tested with
707 V DC (type test)
Ambient conditions
Ambient temperature during operation
Horizontal mounting position, min.
0 °C
Horizontal mounting position, max.
60
Vertical mounting position, min.
0 °C
Vertical mounting position, max.
40 °C
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
28
Manual, 09/2016, A5E32366632-AC
Distributed mode Prioritized startup Dimensions Width Height Depth Weights Weight, approx. Miscellaneous Note:
Technical specifications
6ES7532-5NB00-0AB0 No 25 mm 147 mm 129 mm 200 g Package includes 40-pin push-in front connector
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
29
Dimension drawing
A
The dimension drawing of the module on the mounting rail, as well as a dimension drawing with open front panel are provided in the appendix. Always adhere to the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimension drawing of the AQ 2xU/I ST module
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
30
Manual, 09/2016, A5E32366632-AC
Dimension drawing
Figure A-2 Dimension drawing of the AQ 2xU/I ST module, side view with open front panel
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
31
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Short-circuit to ground Wire break Substitute value
Dependent parameters
Only with voltage output type With current output type only Only if Reaction to CPU STOP -> Output substitute value is configured
Parameter assignment in the user program
You have the option to assign module parameters in RUN (e.g., the voltage or current values of selected channels can be edited in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records 64 and 65. The parameters set in STEP 7 do not change in the CPU, which means the parameters set in STEP 7 are still valid after a restart.
The parameters are only checked for plausibility by the module after the transfer to the module.
Output parameter STATUS
If errors occur during the transfer of parameters with the WRREC instruction, the module continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
32
Manual, 09/2016, A5E32366632-AC
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Assignment of data record and channel
For the configuration as a 1 x 2-channel module, the parameters are located in data records 64 and 65 and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 For configuration 2 x 1-channel, the module has 2 submodules with one channel each. The parameters for the channel are available in data record 64 and are assigned as follows: Data record 64 for channel 0 (submodule 1) Data record 64 for channel 1 (submodule 2) Address the respective submodule for data record transfer.
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
33
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Data record structure
The example in the figure below shows the structure of data record 64 for channel 0. The structure of channel 1 is identical. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 64: Bytes 0 to 7
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
34
Manual, 09/2016, A5E32366632-AC
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Codes for the output type
The following table lists all output types of the analog output module along with their codes. Enter these codes at byte 2 of the data record for the corresponding channel (see the previous figure).
Table B- 2 Code for the output type
Output type Disabled Voltage Current
Code 0000 0000 0000 0001 0000 0010
Codes for the output ranges
The following table lists all voltage and current output ranges of the analog output module along with their codes. In each case, enter these codes at byte 3 of the respective data record (see previous figure).
Table B- 3 Code for the output range
Output range for voltage 1 V to 5 V 0 V to 10 V ±10 V Output range for current 0 mA to 20 mA 4 mA to 20 mA ±20 mA
Code 0000 0011 0000 0010 0000 0000 Code 0000 0001 0000 0010 0000 0000
Valid substitute values
The following table lists all output ranges for the valid substitute values. Enter these substitute values at bytes 6 and 7 of the data record for the corresponding channel (see the previous figure). The binary representation of output ranges is available on the Internet in the function manual Analog value processing for SIMATIC.
Table B- 4 Valid substitute value for the output range
Output range ±10 V 1 V to 5 V 0 V to 10 V ±20 mA 4 mA to 20 mA 0 mA to 20 mA
Valid substitute value -32512 ... +32511 -6912 ... +32511 0 ... +32511 -32512 ... +32511 -6912 ... +32511 0 ... +32511
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
35
Representation of analog values
C
Introduction
This appendix describes the analog values for all output ranges supported by the AQ 2xU/I ST analog module.
Measured value resolution
Each analog value is written left aligned to the tags. The bits marked with "x" are set to "0".
Table C- 1 Resolution of the analog values
Resolution in bits including sign
16
Values
Dec
Hex
1
1H
Analog value
High byte
Low byte
Sign 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
C.1
Representation of output ranges
The tables below set out the digitized representation of the output ranges, separated by bipolar and unipolar input ranges. The resolution is 16 bits.
Table C- 2 Bipolar output ranges
Dec. value
32511
32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32512
Output value in %
117.589
117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 -117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot range 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Rated range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot range 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < -32512 are specified, the output value is limited to -117.593%.
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
36
Manual, 09/2016, A5E32366632-AC
Representation of analog values C.2 Representation of analog values in the voltage output ranges
Table C- 3 Unipolar output ranges
Dec. value
32511
32511 27649 27648 1 0 0
Output value in %
117.589
117.589 100.004 100.000 0.003617 0.000 0
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 x x x x x x x x Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot range 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Rated range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < 0 are specified, the output value is limited to 0%.
C.2
Representation of analog values in the voltage output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible voltage output ranges.
Table C- 4 Voltage output range ±10 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-75% -100%
dec >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400
Voltage output range ±10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V -361.7 µV -7.5 V -10 V
-117.593% <-117.593%
-27649 -32512 <-32512
93FF 8100 < 8100
-11.76 V -11.76 V
Range Maximum output value Overshoot range
Rated range
Undershoot range Minimum output value
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
37
Representation of analog values C.2 Representation of analog values in the voltage output ranges
Table C- 5 Voltage output range 0 V to 10 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0% <0%
dec >32511 32511 27649 27648 20736 1 0 <0
hex >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Voltage output range 0 V to 10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V 0 V
Table C- 6 Voltage output range 1 V to 5 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-25% <-25%
dec >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 < E500
Voltage output range 1 V to 5 V 5.70 V 5.70 V
5 V 4 V 1 V +144.7 µV 1 V 1 V -144.7 µV 0 V 0 V
Range Maximum output value Overshoot range Rated range
Minimum output value
Range Maximum output value Overshoot range Rated range
Undershoot range Minimum output value
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
38
Manual, 09/2016, A5E32366632-AC
C.3
Representation of analog values C.3 Representation of analog values in the current output ranges
Representation of analog values in the current output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible current output ranges.
Table C- 7 Current output range ±20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-75% -100%
-117.593% <-117.593%
dec >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 <-32512
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 <8100
Current output range ±20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA -723.4 nA -15 mA -20 mA
-23.52 mA -23.52 mA
Range Maximum output value Overshoot range
Rated range Undershoot range Minimum output value
Table C- 8 Current output range 0 mA to 20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0% <0%
dec >32511 32511 27649 27648 20736 1 0 <0
hex >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Current output range 0 mA to 20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA 0 mA
Range Maximum output value Overshoot range
Rated range Minimum output value
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
Manual, 09/2016, A5E32366632-AC
39
Representation of analog values C.3 Representation of analog values in the current output ranges
Table C- 9 Current output range 4 mA to 20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-25% <-25%
dec >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 <E500
Current output range 4 mA to 20 mA 22.81 mA 22.81 mA
20 mA 16 mA 4 mA + 578.7 nA 4 mA 4 mA - 578.7 nA 0 mA 0 mA
Range Maximum output value Overshoot range
Rated range Undershoot range Minimum output value
Analog Output Module AQ 2xU/I ST (6ES7532-5NB00-0AB0)
40
Manual, 09/2016, A5E32366632-AC
SIMATIC
S7-1500/ET 200MP Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual
_Pr_ef_ac_e_______________ _G_uid_e_to_d_o_cu_m_en_ta_ti_on______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs_/a_dd_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_s_al_ar_m_s ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_ _Di_m_en_s_ion_d_ra_w_in_g ________A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_s______B_ _An_a_lo_g _va_lu_e _pr_oc_es_s_ing_____C__
09/2016
A5E32368757-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E32368757-AC 11/2016 Subject to change
Copyright © Siemens AG 2014 - 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that relate in general to the systems are described in this system manual.
The information provided in this manual and in the system/function manuals supports you in commissioning the systems.
Changes compared to previous version
Compared to the previous version, this manual contains the following change:
Original texts of the license conditions and copyright notes for open-source software are available on the Internet as of 09/2016.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system, as well as for interface modules of the ET 200MP distributed I/O system. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
4
Manual, 09/2016, A5E32368757-AC
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
5
Table of contents
Preface ................................................................................................................................................... 4
1 Guide to documentation .......................................................................................................................... 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ............................................................................................................................... 11
3 Wiring ................................................................................................................................................... 14
3.1
Wiring and block diagrams..................................................................................................... 14
4 Parameters/address space ................................................................................................................... 25
4.1
Measurement types and ranges ............................................................................................ 25
4.2
Output type and output ranges .............................................................................................. 28
4.3
Parameters............................................................................................................................. 29
4.4
Explanation of parameters ..................................................................................................... 33
4.5
Address space ....................................................................................................................... 37
5 Interrupts/diagnostics alarms................................................................................................................. 45
5.1
Status and error displays ....................................................................................................... 45
5.2
Interrupts ................................................................................................................................ 47
5.3
Diagnostics alarms................................................................................................................. 49
6 Technical specifications ........................................................................................................................ 51
A Dimension drawing ............................................................................................................................... 60
B Parameter data records ........................................................................................................................ 62
B.1
Parameter assignment and structure of the parameter data records .................................... 62
B.2
Structure of a data record for input channels......................................................................... 64
B.3
Structure of a data record for output channels ...................................................................... 72
B.4
Structure of a data record for dynamic reference temperature.............................................. 75
C Analog value processing ....................................................................................................................... 77
C.1 C.1.1 C.1.2 C.1.3
C.1.4 C.1.5
Representation of input ranges.............................................................................................. 78 Representation of analog values in voltage measuring ranges ............................................. 79 Representation of analog values in the current measuring ranges ....................................... 80 Representation of the analog values of resistance-based sensors/resistance thermometers ......................................................................................................................... 81 Representation of analog values for thermocouples ............................................................. 84 Measured values for wire break diagnostics.......................................................................... 87
C.2 C.2.1 C.2.2
Representation of output ranges............................................................................................ 88 Representation of analog values in the voltage output ranges.............................................. 89 Representation of analog values in the current output ranges .............................................. 90
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
6
Manual, 09/2016, A5E32368757-AC
Guide to documentation
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
7
Manual, 09/2016, A5E32368757-AC
Guide to documentation
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
8
Manual, 09/2016, A5E32368757-AC
Guide to documentation
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system - separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
9
Guide to documentation
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
10
Manual, 09/2016, A5E32368757-AC
Product overview
2.1
Properties
Article number
6ES7534-7QE00-0AB0
View of the module
2
Figure 2-1 View of the AI 4xU/I/RTD/TC/ AQ 2xU/I ST module
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
11
Manual, 09/2016, A5E32368757-AC
Product overview 2.1 Properties
Properties
The module has the following technical properties: Analog inputs
4 analog inputs Resolution 16 bits including sign Voltage measurement type can be set per channel Current measurement type can be set per channel Resistance measurement type can be set for channel 0 and 2 Resistance thermometer (RTD) measurement type can be set for channel 0 and 2 Thermocouple (TC) measurement type can be set per channel Configurable diagnostics (per channel) Hardware interrupt on limit violation can be set per channel (two low and two high
limits per channel) Analog outputs
2 analog outputs Resolution: 16 bits including sign Selection of channels for voltage output Selection of channels for current output Configurable diagnostics (per channel) The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware version of the module
Firmware update Calibration in runtime Identification data I&M0 to I&M3 Parameter assignment in RUN Module-internal Shared Input (MSI) / Shared Output (MSO)
Configurable submodules / submodules for Shared Device
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal)
V13 or higher with HSP 0102
GSD file in STEP 7 (TIA Portal) V12 or higher, or
STEP 7 V5.5 SP3 or higher
X
V13 or higher with HSP 0102
X
V13 or higher with HSP 0102
X
V13 or higher with HSP 0102
X
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
V13 Update 3 or higher
X
(PROFINET IO only)
(PROFINET IO only)
You can configure the module with STEP 7 (TIA Portal) and with a GSD file.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
12
Manual, 09/2016, A5E32368757-AC
Product overview 2.1 Properties
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts: Front connector (push-in terminals) including cable tie Shield bracket Shield terminal Power supply element (push-in terminals) Labeling strips U connector Universal front door You can find additional information on accessories in the system manual S7-1500/ET 20MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
13
Wiring
3
3.1
Wiring and block diagrams
This section contains the block diagram of the module and outlines various connection options.
You can find information on wiring the front connector, creating a cable shield, etc. in the Wiring section of the system manual S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/59191792).
You can find additional information on compensating the reference junction temperature in the function manual Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094), the structure of a data record in the section Structure of a data record for dynamic reference temperature (Page 75).
Note You may use and combine the different wiring options for all channels.
Abbreviations used
Un+/UnMn+/MnIn+/InIc n+/Ic nUVn QVn QIn Sn+/SnL+ M MANA
Voltage input channel n (voltage only) Measuring input channel n Current input channel n (current only) Current output for RTD, channel n Supply voltage at channel n for 2-wire transmitters (2WMT) Voltage output channel Current output channel Sense line channel Connection for supply voltage Ground connection Reference potential of the analog circuit
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
14
Wiring 3.1 Wiring and block diagrams Pin assignment for the power supply element The power supply element is plugged onto the front connector for powering the analog module. Wire the supply voltage to terminals 41 (L+) and 43 (M).
Figure 3-1 Power supply element wiring
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
15
Wiring 3.1 Wiring and block diagrams
Connection: Voltage measurement
The example in the following figure shows the pin assignment for voltage measurement.
Digital-to-analog converter (DAC) Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional) Voltage measurement
CHx RUN ERROR PWR
Channel or 6 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-2 Block diagram and pin assignment for voltage measurement
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
16
Manual, 09/2016, A5E32368757-AC
Wiring 3.1 Wiring and block diagrams
Connection: 4-wire transmitters for current measurement
The example in the following figure shows the pin assignment for current measurement with 4-wire transmitters.
Digital-to-analog converter (DAC) Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional) Wiring 4-wire transmitter
CHx RUN ERROR PWR
Channel or 6 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-3 Block diagram and pin assignment for 4-wire transmitters for current measurement
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
17
Wiring 3.1 Wiring and block diagrams
Connection: 2-wire transmitters for current measurement
The example in the following figure shows the pin assignment for current measurement with 2-wire transmitters.
Digital-to-analog converter (DAC) Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable (optional) Wiring 2-wire transmitter
CHx RUN ERROR PWR
Channel or 6 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-4 Block diagram and pin assignment for 2-wire transmitters for current measurement
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
18
Manual, 09/2016, A5E32368757-AC
Wiring 3.1 Wiring and block diagrams
Connection: 2-wire connection of resistance-based sensors or thermal resistors (RTD)
The example in the figure below shows the pin assignment for 2-wire connection of resistance sensors or thermal resistors.
Digital-to-analog converter (DAC) Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable 2-wire connection
CHx RUN ERROR PWR
Figure 3-5 Block diagram and pin assignment for 2-wire connection
Channel or 6 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
19
Wiring 3.1 Wiring and block diagrams
Connection: 3- and 4-wire connection of resistance-based sensors or thermal resistors (RTD)
The example in the figure below shows the pin assignment for 3- and 4-wire connection of resistance-based sensors or thermal resistors.
Digital-to-analog converter (DAC) Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable 4-wire connection 3-wire connection
CHx RUN ERROR PWR
Channel or 6 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-6 Block diagram and pin assignment for 3- and 4-wire connection
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
20
Manual, 09/2016, A5E32368757-AC
Wiring 3.1 Wiring and block diagrams
Connection: Thermocouples for external / internal compensation
The figure below shows an example of the pin assignment for thermocouples for external or internal compensation.
Digital-to-analog converter (DAC) Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable Wiring of a thermocouple for internal compensation Wiring of a thermocouple for external compensation
CHx RUN ERROR PWR
Channel or 6 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-7 Block diagram and pin assignment for thermocouples and resistance thermometers
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
21
Wiring 3.1 Wiring and block diagrams
Connection: Grounded thermocouples for internal compensation
The following figure shows an example of the pin assignment for grounded thermocouples for internal compensation.
Digital-to-analog converter (DAC) Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Equipotential bonding cable Wiring of a thermocouple (grounded) for internal
compensation
CHx RUN ERROR PWR
Figure 3-8 Block diagram and pin assignment for grounded thermocouples
Channel or 6 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
22
Manual, 09/2016, A5E32368757-AC
Wiring 3.1 Wiring and block diagrams
Connection: Voltage output
The figure below shows an example of the pin assignment for the circuits of the voltage outputs with: 2-wire connection, without compensation for line resistances. 4-wire connection, with compensation for line resistances.
Digital-to-analog converter (DAC) Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element 2-wire connection 4-wire connection
CHx RUN ERROR PWR
Figure 3-9 Block diagram and pin assignment for the voltage output
Channel or 6 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
23
Wiring 3.1 Wiring and block diagrams
Connection: Current output
The following figure shows an example of the pin assignment for current output circuitry.
Digital-to-analog converter (DAC) Analog-to-digital converter (ADC) Backplane bus interface Supply voltage via power supply element Current output
CHx RUN ERROR PWR
Channel or 6 x channel status (green/red) Status display LED (green) Error display LED (red) LED for power supply (green)
Figure 3-10 Block diagram and pin assignment for the current output
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
24
Manual, 09/2016, A5E32368757-AC
Parameters/address space
4
4.1
Measurement types and ranges
Introduction
By default, the module has the voltage measurement type and the measuring range ±10 V for the inputs You need to reassign the module parameters with STEP 7 if you want to use a different measurement type or range.
Deactivate the input if it is not going to be used. The module cycle time is shortened and the interference factors that lead to failure of the module (for example, triggering a hardware interrupt) are avoided.
Measurement types and ranges
The following table shows the measurement types and the respective measuring range.
Table 4- 1 Measurement types and measuring ranges
Measurement type Voltage
Current 2WMT (2-wire transmitter) Current 4WMT (4-wire transmitter) Resistor (2-wire connection) Resistor (3-wire connection) (4-wire connection)
Measuring range ±50 mV ±80 mV ±250 mV ±500 mV ±1 V ±2.5 V 1 V to 5 V ±5 V ±10 V 4 mA to 20 mA
0 mA to 20 mA 4 mA to 20 mA ±20 mA
PTC 150 300 600 6000
Representation of analog values See Representation of analog values in voltage measuring ranges (Page 79)
See Representation of analog values in the current measuring ranges (Page 80)
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
25
Manual, 09/2016, A5E32368757-AC
Parameters/address space 4.1 Measurement types and ranges
Measurement type Thermal resistor RTD (3-wire connection) (4-wire connection)
Thermocouple (TC)
Disabled
Measuring range PT100 Standard/Climate PT200 Standard/Climate PT500 Standard/Climate PT1000 Standard/Climate Ni100 Standard/Climate Ni1000 Standard/Climate LG-Ni1000 Standard/Climatic Type B Type E Type J Type K Type N Type R Type S Type T -
Representation of analog values See Representation of the analog values of resistance-based sensors/resistance thermometers (Page 81)
See Representation of analog values for thermocouples (Page 84)
The tables of the input ranges, overflow, underrange, etc. are available in the appendix Representation of input ranges (Page 78).
Special features for the use of PTC resistors
PTC resistors are suitable for temperature monitoring of electrical devices, such as motors, drives, and transformers.
Use Type A PTC resistors (PTC thermistor) in accordance with DIN/VDE 0660, part 302. In doing so, follow these steps:
1. Choose "Resistor (2-wire terminal)" and "PTC" in STEP 7.
2. Connect the PTC using 2-wire connection technology.
If you enable the "Underflow" diagnostics in STEP 7, it will be signaled for resistance values <18 . In this case, this diagnostic signifies "Short-circuit in the wiring".
The figure below shows the address space assignment for AI 4xU/I/RTD/TC/ AQ 2xU/I ST with PTC resistors.
Figure 4-1 Address space for AI 4xU/I/RTD/TC/ AQ 2xU/I ST with PTC resistors
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
26
Manual, 09/2016, A5E32368757-AC
Parameters/address space 4.1 Measurement types and ranges The diagram below shows the temperature profile and the corresponding switching points.
Figure 4-2 Temperature profile and the corresponding switching points
Special features of the measured value acquisition with PTC resistors
If faults occur (for example supply voltage L+ missing) that make it impossible to acquire measured values with PTC resistors, the corresponding channels (IB x/IB x+1) report overflow (7FFFH). If the value status (QI) is enabled, the value 0 = incorrect is output in the corresponding bit.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
27
Parameters/address space 4.2 Output type and output ranges
4.2
Output type and output ranges
Introduction
The module is set to voltage output type for the outputs by default with output range ±10 V. You need to edit the module parameters with STEP 7 if you want to use a different output range or output type.
Output types and output ranges
The following table shows the output type and the respective output ranges.
Table 4- 2 Output type and output ranges
Output type Voltage
Current
Disabled
Output range 1 V to 5 V 0 V to 10 V ±10 V 0 mA to 20 mA 4 mA to 20 mA ±20 mA -
Representation of analog values See Representation of analog values in the voltage output ranges (Page 89)
See Representation of analog values in the current output ranges (Page 90)
-
The tables of the output ranges, nominal range, overrange, etc. are provided in the appendix Representation of output ranges (Page 88).
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
28
Manual, 09/2016, A5E32368757-AC
Parameters/address space 4.3 Parameters
4.3
Parameters
AI 4xU/I/RTD/TC/ AQ 2xU/I ST parameters
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the configurable parameters depends on the type of configuration. The following configurations are possible:
Central operation with a S7-1500 CPU
Distributed operation on PROFINET IO in an ET 200MP system
Distributed operation on PROFIBUS DP in an ET 200MP system
When assigning parameters in the user program, use the WRREC instruction to transfer the parameters to the module by means of data records; refer to the section Parameter assignment and structure of the parameter data records (Page 62).
The following parameter settings are possible:
Table 4- 3 Configurable parameters and their defaults
Parameters
Range of values
Inputs Diagnostics · No supply voltage L+ Yes/No
· Overflow
Yes/No
· Underflow
Yes/No
· Common mode error Yes/No
· Reference junction Yes/No
· Wire break
Yes/No
· Current limit for wire 1.185 mA or break diagnostics 2) 3.6 mA
Default setting
Reconfiguration in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7, as of V13 or GSD file PROFINET IO
GSD file PROFIBUS DP
No
Yes
No
Yes
No
Yes
No
Yes
No
Yes
No
Yes
1.185 mA Yes
Channel 1) Channel Channel Channel Channel Channel Channel
Module 3) Module 3) Module 3) Module 3) Module 3) Module 3) --- 4)
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
29
Parameters/address space 4.3 Parameters
Parameters
Range of values
Default setting
Measuring · Measurement type · Measuring range · Temperature coeffi-
cient
· Temperature unit
· Reference junction
· Fixed reference temperature
· Interference frequency suppression
· Smoothing
See section Measurement types and ranges (Page 25)
Voltage ±10 V
Pt: 0.003851 Pt: 0.003902 Pt: 0.003916 Pt: 0.003920 Ni: 0.00618 Ni: 0.00672 LG-Ni: 0.005000
· Kelvin (K)
0.003851 °C
· Fahrenheit (°F)
· Celsius (°C)
· Fixed reference Internal
temperature
reference
· Dynamic refe- junction
rence tempera-
ture
· Internal reference junction
Temperature
25 °C
400 Hz
50 Hz
60 Hz
50 Hz
10 Hz
No-
None
ne/low/medium/high
Reconfiguration in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7, as of V13 or GSD file PROFINET IO
GSD file PROFIBUS DP
Yes
Channel
Yes
Channel
Yes
Channel
Channel Channel Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Module
Module 4) · Dynamic reference
temperature · Internal reference
junction
--- 4) Module
Channel
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
30
Manual, 09/2016, A5E32368757-AC
Parameters/address space 4.3 Parameters
Parameters
Range of values
Default setting
Hardware interrupts
· Hardware interrupt Yes/No
No
low limit 1
· Hardware interrupt Yes/No
No
high limit 1
· Hardware interrupt Yes/No
No
low limit 2
· Hardware interrupt Yes/No
No
high limit 2
Outputs
Diagnostics
· No supply voltage L+ Yes/No
No
· Wire break
Yes/No
No
· Short-circuit to
Yes/No
No
ground
· Overflow
Yes/No
No
· Underflow
Yes/No
No
Output parameters · Output type · Output range
See section Output Voltage type and output ranges (Page 28) ±10 V
· Reaction to CPU STOP
· Turn off
Turn off
· Keep last value
· Output substitute value
Reconfiguration in RUN
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7, as of V13 or GSD file PROFINET IO
GSD file PROFIBUS DP
Yes
Channel
--- 4)
Yes
Channel
--- 4)
Yes
Channel
--- 4)
Yes
Channel
--- 4)
Yes
Channel 1)
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Module 3) Module 3) Module 3)
Module 3) Module 3)
Channel Channel Channel
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
31
Parameters/address space 4.3 Parameters
Parameters · Substitute value
Range of values
Default setting
Must be in the valid 0 voltage/current output range; see table Valid substitute value for the output range
Reconfiguration in RUN
Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware catalog STEP 7, as of V13 or GSD file PROFINET IO
GSD file PROFIBUS DP
Channel
Channel
1) If you enable diagnostics for multiple channels, you will receive an alarm surge on failure of the supply voltage because each enabled channel will detect this fault. You can prevent this alarm surge by assigning the diagnostics function to one channel only.
2) When "Wire break" diagnostics is disabled, the current limit of 1.185 mA is applied to the value status. For measured values below 1.185 mA, the value status is always: 0 = fault.
3) You can set the effective range of the diagnostics for each channel in the user program with data records 0 to 3.
4) You can set the current limit for wire break diagnostics, the setting "Fixed reference temperature" as well as the limits for hardware interrupts in the user program with data records 0 to 3.
Short-circuit detection
The diagnostics for short circuit to ground can be configured for the voltage output type. A short-circuit detection is not possible for small output values; the output voltages must therefore be below -0.1 V or above +0.1 V.
Wire break detection
The diagnostics for wire break can be configured for the current output type. Wire break detection is not possible for small output values; the output voltages must therefore be below -0.2 mA or above +0.2 mA.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
32
Manual, 09/2016, A5E32368757-AC
Parameters/address space 4.4 Explanation of parameters
4.4
Explanation of parameters
Missing supply voltage L+
Enabling of the diagnostics, with missing or too little supply voltage L+.
Overflow
Enabling of the diagnostics when the measured value or output value violates the overrange.
Underflow
Enabling of the diagnostics when the measured value or output value violates the underrange.
Common mode error
Enabling of diagnostics if the valid common mode voltage is exceeded.
Enable the Common mode error diagnostics when 2WMT is connected, for example, to check for a short circuit to groundANA or a wire break. If you do not need the Common mode error diagnostics, disable the parameter.
Reference junction
Enabling of the diagnostics reference junction when the TC channel has no reference temperature or incorrect reference temperature.
Wire break
Enabling of the diagnostics if the module has no current flow or the current is too weak for the measurement at the corresponding configured input, the applied voltage is too low, or the wire to the actuator is broken.
Current limit for wire break diagnostics
Threshold for reporting wire breaks. The value can be set to 1.185 mA or 3.6 mA, depending on the sensor used.
Temperature coefficient
The temperature coefficient depends on the chemical composition of the material. In Europe, only one value is used per sensor type (default value).
The temperature coefficient ( value) indicates by how much the resistance of a specific material changes relatively if the temperature increases by 1 °C.
The further values facilitate a sensor-specific setting of the temperature coefficient and enhance accuracy.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
33
Parameters/address space 4.4 Explanation of parameters
Reference junction
The following settings can be configured for the reference junction parameter:
Table 4- 4 Possible settings for the reference junction parameter
Setting Fixed reference temperature Dynamic reference temperature
Internal reference junction
Description
The reference junction temperature is configured and stored in the module as a fixed value.
The reference junction temperature is transferred in the user program from the CPU to the module by data records 192 to 195 using the WRREC (SFB 53) instruction.
The reference junction temperature is determined using an integrated sensor of the module.
Interference frequency suppression
At analog input modules, this suppresses interference caused by the frequency of the AC network.
The frequency of the AC network may corrupt measurements, particularly in the low voltage ranges and when thermocouples are being used. For this parameter, the user defines the mains frequency prevailing on his system.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
34
Manual, 09/2016, A5E32368757-AC
Smoothing
Parameters/address space 4.4 Explanation of parameters
The individual measured values are smoothed using filtering. The smoothing can be set in 4 levels. Smoothing time = number of module cycles (k) x cycle time of the module. The following figure shows the number of module cycles after which the smoothed analog value is almost 100%, depending on the set smoothing. It is valid for each signal change at the analog input.
None (k = 1) Weak (k = 4) Medium (k = 16) Strong (k = 32)
Figure 4-3 Smoothing with AI 4xU/I/RTD/TC/ AQ 2xU/I ST
Hardware interrupt 1 or 2
Enabling of a hardware interrupt at violation of high limit 1 or 2 or low limit 1 or 2.
Low limit 1 or 2
Specifies the low limit threshold that triggers hardware interrupt 1 or 2.
High limit 1 or 2
Specifies the high limit threshold that triggers hardware interrupt 1 or 2.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
35
Parameters/address space 4.4 Explanation of parameters
Short-circuit to ground
Enabling of the diagnostics if a short-circuit of the output to MANA occurs.
Reaction to CPU STOP
Determines the reaction of the output to the CPU going into STOP state.
Substitute value
The substitute value is the value that the module outputs in case of a CPU STOP.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
36
Manual, 09/2016, A5E32368757-AC
Parameters/address space 4.5 Address space
4.5
Address space
The module can be configured differently in STEP 7; see following table. Depending on the configuration, additional/different addresses are assigned in the process image input/output.
Configuration options of AI 4xU/I/RTD/TC/ AQ 2xU/I ST
You can configure the module with STEP 7 (TIA Portal) or with a GSD file.
When you configure the module by means of the GSD file, the configurations are available under different abbreviations/module names.
The following configurations are possible:
Table 4- 5 Configuration options Configuration
1 x 6-channel without value status 1 x 6-channel with value status 6 x 1-channel without value status
6 x 1-channel with value status
1 x 6-channel with value status with up to 4 submodules (1 x 4-channel for module-internal Shared Input and 1 x 2-channel for module-internal Shared Output)
Short designation/module name in the GSD file
AI 4xU/I/RTD/TC/ AQ 2xU/I ST AI 4xU/I/RTD/TC/ AQ 2xU/I ST QI AI 4xU/I/RTD/TC/ AQ 2xU/I ST S
AI 4xU/I/RTD/TC/ AQ 2xU/I ST S QI
AI 4xU/I/RTD/TC/ AQ 2xU/I ST MSI or MSO
Configuration software, e.g., with STEP 7 (TIA Portal)
Integrated in hardware catalog
STEP 7 (TIA Portal)
V13 or higher with HSP 0102
GSD file in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3 or higher
X
V13 or higher with
X
HSP 0102
V13 Update 3 or higher
(PROFINET IO only)
X
(PROFINET IO only)
V13 Update 3 or higher
(PROFINET IO only)
X
(PROFINET IO only)
V13 Update 3 or higher
(PROFINET IO only)
X
(PROFINET IO only)
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
37
Parameters/address space 4.5 Address space
Value status (Quality Information, QI)
The value status is always activated for the following module names: AI 4xU/I/RTD/TC/ AQ 2xU/I ST QI AI 4xU/I/RTD/TC/ AQ 2xU/I ST S QI AI 4xU/I/RTD/TC/ AQ 2xU/I ST MSI An additional bit is assigned to each channel for the value status. The value status bit indicates whether the read in digital value is valid. (0 = value is incorrect). whether the output value specified by the user program is actually pending at the module
terminal (0 = value is incorrect).
Address space for configuration as 1 x 6-channel AI 4xU/I/RTD/TC/ AQ 2xU/I ST QI
The figure below shows the address space assignment for configuration as a 1 x 6-channel module. You can freely assign the start address for the module. The addresses of the channels are derived from the start address. "IB x" for example, stands for module start address input byte x. "QB x" for example, stands for module start address output byte x.
Figure 4-4 Address space for configuration as 1 x 6-channel AI 4xU/I/RTD/TC/ AQ 2xU/I ST QI with value status
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
38
Manual, 09/2016, A5E32368757-AC
Parameters/address space 4.5 Address space
Address space for configuration as 6 x 1-channel AI 4xU/I/RTD/TC/ AQ 2xU/I ST S QI
The channels of the module are divided up into several submodules with configuration as 6 x 1-channel module. The submodules can be assigned to different IO controllers when the module is used in a shared device. The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module. Unlike the 1 x 6-channel module configuration, each of the six submodules has a freely assignable start address.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
39
Parameters/address space 4.5 Address space
Figure 4-5 Address space for configuration as 6 x 1-channel AI 4xU/I/RTD/TC/ AQ 2xU/I ST S QI with value status
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
40
Manual, 09/2016, A5E32368757-AC
Parameters/address space 4.5 Address space
Address space for configuration as 1 x 6-channel AI 4xU/I/RTD/TC/ AQ 2xU/I ST MSI/MSO
For the configuration as a 1 x 6-channel module (module-internal Shared Input, MSI/Shared Output, MSO), the channels for inputs 0 to 3 and outputs 0 to 1 of the module are copied to 4 submodules. Each of the input/output channels are then available with identical values in various submodules. These submodules can be assigned to up to four IO controllers when the module is used in a shared device.
The IO controller to which submodule 1 is assigned has write access to output channels 0 and 1 and read access to the input channels 0 to 3.
The IO controllers to which submodule 2, 3 or 4 is assigned have read access to output channels 0 and 1 and read access to the input channels 0 to 3.
The number of usable IO controllers depends on the interface module used. Please observe the information in the manual for the particular interface module.
Value status (Quality Information, QI) for inputs
The meaning of the value status depends on the submodule on which it occurs.
For the 1st submodule (= basic submodule), the value status 0 indicates that the value is incorrect.
For the 2nd to 4th submodule (=MSI submodule), the value status 0 indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
Value status (Quality Information, QI) for outputs
The meaning of the value status depends on the submodule on which it occurs.
For the 1st submodule (=basic submodule), the value status 0 indicates that the value is incorrect or that the IO controller of the basic submodule is in STOP state.
For the 2nd to 4th submodule (=MSO submodule), the value status 0 indicates that the value is incorrect or one of the following errors has occurred:
The basic submodule is not yet configured (not ready).
The connection between the IO controller and the basic submodule has been interrupted.
The IO controller of the basic submodule is in STOP or POWER OFF state.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
41
Parameters/address space 4.5 Address space
The figure below shows the assignment of the address space with submodules 1 and 2.
Figure 4-6 Address space for configuration as 1 x 6-channel AI 4xU/I/RTD/TC/ AQ 2xU/I ST MSI/MSO with value status
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
42
Manual, 09/2016, A5E32368757-AC
Parameters/address space 4.5 Address space
The following figure shows the assignment of the address space with submodule 3 and 4.
Figure 4-7 Address space for configuration as 1 x 6-channel AI 4xU/I/RTD/TC/ AQ 2xU/I ST MSI/MSO with value status
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
43
Parameters/address space 4.5 Address space
Reference
You can find information on the Shared Input/Output (MSI/MSO) function in the section Module-Internal Shared Input/Output (MSI/MSO) of the PROFINET with STEP 7 V13 (https://support.industry.siemens.com/cs/ww/en/view/49948856) function manual.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
44
Manual, 09/2016, A5E32368757-AC
Interrupts/diagnostics alarms
5.1
Status and error displays
LED displays
The figure below shows the LED displays (status and error displays) of AI 4xU/I/RTD/TC/ AQ2xU/I ST.
5
Figure 5-1 LED displays of the module AI 4xU/I/RTD/TC/ AQ2xU/I ST
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
45
Manual, 09/2016, A5E32368757-AC
Interrupts/diagnostics alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Corrective measures for diagnostics alarms can be found in the section Diagnostics alarms (Page 49).
LED RUN/ERROR
Table 5- 1 RUN/ERROR status and error displays
LEDs RUN ERROR
Off
Off
Meaning Voltage missing or too low at backplane bus.
Flashes On On
Flashes
Off Off Flashes Flashes
The module starts and flashes until the valid configuration is set. Module is configured.
Indicates module errors (at least one error at one channel, e.g., wire break). Hardware defective.
PWR LED
Solution
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted. · Check to see if too many modules are insert-
ed. ---
Evaluate the diagnostics data and eliminate the error (e.g., wire break). Replace the module.
Table 5- 2 PWR status display
LED PWR Off On
Meaning Supply voltage L+ to module too low or missing
Supply voltage L+ is present and OK.
Solution Check supply voltage L+.
---
CHx LED
Table 5- 3 CHx status display
LED CHx Off On On
Meaning Channel disabled.
Channel configured and OK.
Channel is configured (channel error pending). Diagnostics alarm: e.g. wire break
Solution ---
---
Check the wiring. Disable diagnostics.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
46
Manual, 09/2016, A5E32368757-AC
Interrupts/diagnostics alarms 5.2 Interrupts
5.2
Interrupts
Analog input module AI 4xU/I/RTD/TC/ AQ 2xU/I ST supports diagnostics and hardware interrupts.
You can find detailed information on the event in the error organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Diagnostic interrupt
The module generates a diagnostic interrupt at the following events:
Table 5- 4 Diagnostics interrupt for inputs and outputs
Event
Missing supply voltage L+ Overflow Underflow Common mode error Reference junction Wire break Short-circuit to ground Parameter assignment error
Inputs x x x x x x --x
Diagnostic interrupt
Outputs x x x ----x x x
Hardware interrupt for inputs
The module generates a hardware interrupt at the following events: Low limit violated 1 High limit violated 1 Low limit violated 2 Above high limit 2
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
47
Interrupts/diagnostics alarms 5.2 Interrupts
The module channel that triggered the hardware interrupt is entered in the start information of the organization block. The diagram below shows the assignment to the bits of double word 8 in local data.
Figure 5-2 OB start information
Reaction when reaching limits 1 and 2 at the same time
If the two high limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for high limit 1 first. The configured value for high limit 2 is irrelevant. After processing the hardware interrupt for high limit 1, the module triggers the hardware interrupt for high limit 2.
The module has the same reaction when the low limits are reached at the same time. If the two low limits 1 and 2 are reached at the same time, the module always signals the hardware interrupt for low limit 1 first. After processing the hardware interrupt for low limit 1, the module triggers the hardware interrupt for low limit 2.
Structure of the additional interrupt information
Table 5- 5 Structure of USI = W#16#0001
Data block name
Contents
USI (User Structure Identifier)
W#16#0001
The channel that triggered the hardware interrupt follows.
Channel
B#16#00 to B#16#n
The event that triggered the hardware interrupt follows.
Event
B#16#03
B#16#04
B#16#05
B#16#06
Remark
Additional interrupt info for hardware interrupts of the I/O module
Bytes 2
Number of the event-triggering channel (n = 1 number of module channels -1)
Low limit violated 1
1
High limit violated 1
Low limit violated 2
Violation of high limit 2
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
48
Manual, 09/2016, A5E32368757-AC
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
5.3
Diagnostics alarms
A diagnostics alarm is generated and the ERROR LED flashes on the module for each diagnostics event. The diagnostics alarms can be read out in the diagnostics buffer of the CPU, for example. You can evaluate the error codes with the user program.
Table 5- 6 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm
Error code
Short-circuit to ground 1H
Wire break
6H
Overflow
7H
Underflow
8H
Parameter assignment 10H error
Load voltage missing 11H
Reference channel
15H
error
Common mode error 118H
Channel temporarily
1FH
unavailable
Meaning Overload at output Short-circuit of output QV to MANA Impedance of encoder circuit too high
Wire break between the module and sensor Channel not connected (open)
Solution Eliminate overload Eliminate the short-circuit Use a different encoder type or modify the wiring, for example, using cables with larger cross-section Connect the cable
· Disable diagnostics · Connect the channel
Measuring range violated
The output value set by the user program violates the valid rated range/overrange
Measuring range violated
The output value set by the user program violates the valid rated range/underrange
· The module cannot evaluate parameters for the channel
· Incorrect parameter assignment
Check the measuring range Correct the output value
Check the measuring range Correct the output value
Correct the parameter assignment
Supply voltage L+ of the module is missing
Reference temperature of the reference junction for the operated TC channel with compensation is invalid.
Valid common mode voltage exceeded
Causes when a 2WT is connected, e.g.:
Connect supply voltage L+ to module/channel
Check the resistance thermometer. For the compensation with data record, restore communication to the module/station.
Check the wiring, e.g. sensor ground connections, use equipotential cables
· Wire break · Galvanic connection to MANA
User calibration is active.
Channel currently not providing current/valid values.
Exit user calibration.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
49
Interrupts/diagnostics alarms 5.3 Diagnostics alarms
Diagnostics alarms with value status (QI)
If you configure the module with value status (QI), the module always checks all errors even if the respective diagnostics is not enabled. But the module cancels the inspection as soon as it detects the first error, regardless if the respective diagnostics has been enabled or not. The result may be that enabled diagnostics may not be displayed.
Example: You have enabled "Underflow" diagnostics, but the module detects the "Wire break" diagnostics first and aborts after this error message. The "Underflow" diagnostics is not detected.
Recommendation: To ensure that all errors can be diagnosed reliably, select all check boxes under "Diagnostics".
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
50
Manual, 09/2016, A5E32368757-AC
Technical specifications
6
Technical specifications of the AI 4xU/I/RTD/TC/ AQ 2xU/I ST
General information Product type designation Hardware functional status Firmware version · FW update possible
6ES7534-7QE00-0AB0
AI 4xU/I/RTD/TC / AQ 2xU/I ST FS01 V1.0.0 Yes
Product function
I&M data
Yes; I&M0 to I&M3
Scalable measuring range
No
Scalable measured values
No
Measuring range adjustment
No
Scalable output range
No
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
V13 / V13.0.2
STEP 7 can be configured/integrated as of version V5.5 SP3 / -
PROFIBUS as of GSD version/GSD revision
V1.0 / V5.1
PROFINET as of GSD version/GSD revision
V2.3 / -
Operating mode
Oversampling
No
MSI
Yes
MSO
Yes
CiR Configuration in RUN
Parameter assignment in RUN possible
Yes
Calibration in RUN possible
Yes
Supply voltage Rated value (DC) Valid range, low limit (DC) Valid range, high limit (DC) Reverse polarity protection
24 V 20.4 V 28.8 V Yes
Input current
Current consumption, max.
200 mA; with 24 V DC supply
Encoder supply
24 V encoder supply Short-circuit protection Output current, max.
Yes 61 mA
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
51
Manual, 09/2016, A5E32368757-AC
Technical specifications
Power Power consumption from backplane bus Power loss Power loss, typ. Analog inputs Number of analog inputs
· For current measurement
· For voltage measurement
· For resistance/resistance thermometer measurement
· For thermocouple measurement
Permissible input voltage for voltage input (destruction limit), max. Permissible input current for current input (destruction limit), max. Technical unit for temperature measurement, can be set Analog input with oversampling Standardization of measured values Input ranges (rated values), voltages 0 to +5 V 0 to +10 V 1 V to 5 V Input resistance (1 V to 5 V) -1 V to +1 V Input resistance (-1 V to +1 V) -10 V to +10 V Input resistance (-10 V to +10 V) -2.5 V to +2.5 V Input resistance (-2.5 V to +2.5 V) -25 mV to +25 mV -250 mV to +250 mV Input resistance (-250 mV to +250 mV) -5 V to +5 V Input resistance (-5 V to +5 V) -50 mV to +50 mV Input resistance (-50 mV to +50 mV) -500 mV to +500 mV Input resistance (-500 mV to +500 mV) -80 mV to +80 mV Input resistance (-80 mV to +80 mV)
6ES7534-7QE00-0AB0
0.7 W
3.3 W
4 4 4 2
4 28.8 V
40 mA
Yes; °C / °F / K
No No
No No Yes 100 k Yes 10 M Yes 100 k Yes 10 M No Yes 10 M Yes 100 k Yes 10 M Yes 10 M Yes 10 M
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
52
Manual, 09/2016, A5E32368757-AC
Technical specifications
Input ranges (rated values), currents 0 mA to 20 mA Input resistance (0 mA to 20 mA)
-20 mA to +20 mA Input resistance (-20 mA to +20 mA)
4 mA to 20 mA Input resistance (4 mA to 20 mA)
Input ranges (rated values), thermocouples Type B Input resistance (type B) Type C Type E Input resistance (type E) Type J Input resistance (type J) Type K Input resistance (type K) Type L Type N Input resistance (type N) Type R Input resistance (type R) Type S Input resistance (type S) Type T Input resistance (type T) Type U Type TXK/TXK(L) according to GOST Input ranges (rated values), resistance thermometer Cu 10 Cu 10 according to GOST Cu 50 Cu 50 according to GOST Cu 100 Cu 100 according to GOST Ni 10 Ni 10 according to GOST Ni 100 Input resistance (Ni 100) Ni 100 according to GOST
6ES7534-7QE00-0AB0
Yes 25 ; plus approx. 42 ohm for overvoltage protection by PTC Yes 25 ; plus approx. 42 ohm for overvoltage protection by PTC Yes 25 ; plus approx. 42 ohm for overvoltage protection by PTC
Yes 10 M No Yes 10 M Yes 10 M Yes 10 M No Yes 10 M Yes 10 M Yes 10 M Yes 10 M No No
No No No No No No No No Yes; Standard/Climate 10 M No
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
53
Technical specifications
Ni 1000 Input resistance (Ni 1000) Ni 1000 according to GOST LG-Ni 1000 Input resistance (LG-Ni 1000) Ni 120 Ni 120 according to GOST Ni 200 Ni 200 according to GOST Ni 500 Ni 500 according to GOST Pt 10 Pt 10 according to GOST Pt 50 Pt 50 according to GOST Pt 100 Input resistance (Pt 100) Pt 100 according to GOST Pt 1000 Input resistance (Pt 1000) Pt 1000 according to GOST Pt 200 Input resistance (Pt 200) Pt 200 according to GOST Pt 500 Input resistance (Pt 500) Pt 500 according to GOST Input ranges (rated values), resistors 0 ohm to 150 ohm Input resistance (0 ohm to 150 ohm) 0 ohm to 300 ohm Input resistance (0 ohm to 300 ohm) 0 ohm to 600 ohm Input resistance (0 ohm to 600 ohm) 0 to 3000 Ohm 0 ohm to 6000 ohm Input resistance (0 ohm to 6000 ohm) PTC Input resistance (PTC)
6ES7534-7QE00-0AB0 Yes; Standard/Climate 10 M No Yes; Standard/Climate 10 M No No No No No No No No No No Yes; Standard/Climate 10 M No Yes; Standard/Climate 10 M No Yes; Standard/Climate 10 M No Yes; Standard/Climate 10 M No
Yes 10 M Yes 10 M Yes 10 M No Yes 10 M Yes 10 M
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
54
Manual, 09/2016, A5E32368757-AC
Technical specifications
Thermocouple (TC) Temperature compensation · Configurable
· Internal temperature compensation
· External temperature compensation via RTD
· Compensation for 0 °C reference point temperature
· Reference channel of the module
Cable length shielded, max. Analog outputs Number of analog outputs Voltage output, short-circuit protection Voltage output, short-circuit current, max. Current output, open-circuit voltage, max. Cycle time (all channels), min.
Output ranges, voltage 0 V to 10 V 1 V to 5 V -5 V to +5 V -10 V to +10 V Output ranges, current 0 mA to 20 mA -20 mA to +20 mA 4 mA to 20 mA Connection of actuators for voltage output two-wire connection for voltage output four-wire connection for current output two-wire connection Load resistance (in the rated output range) for voltage outputs, min. for voltage outputs, capacitive load, max. for current outputs, max. for current outputs, inductive load, max. Cable length shielded, max.
6ES7534-7QE00-0AB0
Yes Yes Yes Yes, fixed value can be set
No
800 m; for U/I, 200 m for R/RTD, 50 m for TC
2 Yes 24 mA 22 V 3.2 ms; ±0.5 ms, regardless of the number of activated channels
Yes Yes No Yes
Yes Yes Yes
Yes Yes Yes
1 kOhm; 0.5 kOhm at 1 to 5 V 1 µF 750 10 mH
800 m; for current, 200 m for voltage
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
55
Technical specifications
6ES7534-7QE00-0AB0
Analog value generation for the inputs
Integration and conversion time/resolution per channel
Resolution with overrange (bit including sign), max.
16 bit
Configurable integration time
Yes
Integration time (ms)
2.5 / 16.67 / 20 / 100 ms
Basic conversion time including integration time (ms)
9 / 23 / 27 / 107 ms
· Additional conversion time for wire break moni- 9 ms toring
· Additional conversion time for wire break measurement
Interference voltage suppression at interference frequency f1 in Hz Time for offset calibration (per module) Smoothing of the measured values Configurable Level: None Level: Weak Level: Medium Level: Strong Analog value generation for the outputs Integration and conversion time/resolution per channel Resolution with overrange (bit including sign), max. Conversion time (per channel) Settling time for resistive load for capacitive load for inductive load Encoders Connection of the signal encoders For voltage measurement for current measurement as 2-wire transducer
· Load of 2-wire transmitter, max.
150 Ohm, 300 Ohm, 600 Ohm, Pt100. Pt200. Ni100: 2 ms, 6000 Ohm, Pt500. Pt1000. Ni1000. LG-Ni1000. PTC: 4 ms 400 / 60 / 50 / 10
Basic conversion time of the slowest channel
Yes Yes Yes Yes Yes
16 bit
0.5 ms
1.5 ms 2.5 ms 2.5 ms
Yes Yes 820
for current measurement as 4-wire transducer
Yes
for resistance measurement with two-wire connec- Yes; only for PTC tion
for resistance measurement with three-wire con- Yes; all measuring ranges except PTC; internal
nection
compensation of line resistance
For resistance measurement with four-wire connection
Yes; all measuring ranges except PTC
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
56
Manual, 09/2016, A5E32368757-AC
Technical specifications
Errors/accuracies Linearity error (in relation to input range), (+/-) Temperature error (in relation to input range), (+/-) Crosstalk between the inputs, max. Repeat accuracy in settled state at 25 °C (in relation to input range), (+/-) Output ripple (in relation to output range, bandwidth 0 kHz to 50 kHz), (+/-) Linearity error (in relation to output range), (+/-) Temperature error (in relation to output range), (+/-) Crosstalk between outputs, max. Repeat accuracy in settled state at 25 °C (in relation to output range), (+/-) Temperature errors of internal compensation Operational limit in the entire temperature range Voltage in relation to input range, (+/-) Current in relation to input range, (+/-) Resistance in relation to input range, (+/-) Resistance thermometer in relation to input range, (+/-)
Thermocouple in relation to input range, (+/-)
Voltage in relation to output range, (+/-) Current in relation to output range, (+/-) Basic error limit (operational limit at 25 °C) Voltage in relation to input range, (+/-) Current in relation to input range, (+/-) Resistance in relation to input range, (+/-) Resistance thermometer in relation to input range, (+/-)
Thermocouple in relation to input range, (+/-)
Voltage in relation to output range, (+/-) Current in relation to output range, (+/-)
6ES7534-7QE00-0AB0
0.02% 0.005%/K; for TC typ. T 0.02 +/- %/K -80 dB 0.02%
0.02%
0.15% 0.002%/K
-100 dB 0.05%
+/-6 °C
0.3% 0.3% 0.3% 0.3%; Ptxxx Standard: ±1.5 K, Ptxxx Climatic: ±0.5 K, Nixxx Standard: ±0.5 K, Nixxx Climatic: ±0.3 K 0.3%; Type B: > 600 °C ±4.6 K, Type E: > -200 °C ±1.5 K, Type J: > -210 °C ±1.9 K, Type K: > 200 °C ±2.4 K, Type N: > -200 °C ±2.9 K, Type R: > 0 °C ±4.7 K, Type S: > 0 °C ±4.6 K, Type T: > -200 °C ±2.4 K 0.3% 0.3%
0.1% 0.1% 0.1% 0.1%; Ptxxx Standard: ±0.7 K, Ptxxx Climatic: ±0.2 K, Nixxx Standard: ±0.3 K, Nixxx Climatic: ±0.15 K 0.1%; Type B: > 600 °C ±1.7 K, Type E: > -200 °C ±0.7 K, Type J: > -210 °C ±0.8 K, Type K: > 200 °C ±1.2 K, Type N: > -200 °C ±1.2 K, Type R: > 0 °C ±1.9 K, Type S: > 0 °C ±1.9 K, Type T: > -200 °C ±0.8 K 0.2% 0.2%
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
57
Technical specifications
6ES7534-7QE00-0AB0
Interference voltage suppression for f = n x (f1 +/1 %), f1 = interference frequency
Series mode interference (peak value of interfer- 40 dB ence < rated value of input range), min.
Common mode voltage, max.
10 V
Common mode interference, min.
60 dB
Isochronous mode
Isochronous mode (application synchronized up to No terminal)
Interrupts/diagnostics/status information
Diagnostics function
Yes
Substitute values can be applied
Yes
Interrupts
Diagnostic interrupt
Yes
Limit interrupt
Yes; two high limits and two low limits each
Diagnostics alarms
Monitoring of supply voltage
Yes
Wire break
Yes; only for input type 1 ... 5 V, 4 ... 20 mA, TC, R, RTD and output type current
Short-circuit
Yes; only for output type voltage
Overflow/underflow
Yes
Diagnostics display LED
RUN LED
Yes; green LED
ERROR LED
Yes; red LED
Monitoring of supply voltage (PWR LED)
Yes; green LED
Channel status display
Yes; green LED
For channel diagnostics
Yes; red LED
For module diagnostics
Yes; red LED
Electrical isolation
Electrical isolation analog inputs
Between the channels
No
Between the channels, in groups of
4
Between the channels and backplane bus
Yes
Between the channels and load voltage L+
Yes
Electrical isolation analog outputs
Between the channels
No
Between the channels, in groups of
2
Between the channels and backplane bus
Yes
Between the channels and load voltage L+
Yes
Permissible potential difference
Between the inputs (UCM)
20 V DC
Between the inputs and MANA (UCM)
10 V DC
between S- and MANA (UCM)
8 V DC
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
58
Manual, 09/2016, A5E32368757-AC
Insulation Insulation tested with Ambient conditions Ambient temperature during operation Horizontal mounting position, min. Horizontal mounting position, max. Vertical mounting position, min. Vertical mounting position, max. Distributed mode Prioritized startup Dimensions Width Height Depth Weights Weight, approx. Miscellaneous Note:
Technical specifications
6ES7534-7QE00-0AB0
707 V DC (type test)
0 °C 60 0 °C 40 °C
No
25 mm 147 mm 129 mm
250 g
Package includes 40-pin push-in front connector Additional basic error and noise for integration time = 2.5 ms: Voltage: ±250 mV (±0.02%), ±80 mV (±0.05%), ±50 mV (±0.05%); resistance: 150 Ohm (±0.02%); resistance thermometer: Pt100 Climatic: ±0.08 K, Ni100 Climatic: ±0.08 K; thermocouple: Type B, R, S: ±3 K, Type E, J, K, N, T: ±1 K
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
59
Dimension drawing
A
The dimension drawing of the module on the mounting rail, as well as a dimension drawing with open front panel are provided in the appendix. Always adhere to the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1Dimension drawing of the AI 4xU/I/RTD/TC/ AQ 2xU/I ST module
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
60
Dimension drawing
Figure A-2 Dimension drawing of the AI 4xU/I/RTD/TC/ AQ 2xU/I ST module, side view with open front panel
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
61
Parameter data records
B
B.1
Parameter assignment and structure of the parameter data records
The data records of the module have an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO.
Dependencies for configuration with GSD file
When configuring the module with a GSD file, remember that the settings of some parameters are dependent on each other. The parameters are only checked for plausibility by the module after the transfer to the module.
The following table lists the parameters that depend on one another.
Table B- 1 Dependencies of parameters for configuration with GSD file
Device-specific parameters (GSD file) Current limit for wire break
Wire break
Common mode error Reference junction Measurement type resistance (4-wire connection, 3-wire connection, 2-wire connection) Measurement type thermistor RTD (4-wire connection, 3-wire connection) Hardware interrupt limits Fixed reference temperature
Short-circuit to ground Wire break Substitute value
Dependent parameters Only for measurement type current with measuring range 4 mA to 20 mA. Only for measurement type resistance, thermistor RTD, thermocouple TC, voltage with measuring range 1V to 5 V and current with measuring range 4 to 20 mA. Only for measuring type voltage, current and thermocouple TC. Only for measurement type thermocouple TC.
Configurable for even channels (0 and 2) only. The next odd channel (1 and 3) must be disabled.
Only if hardware interrupts are enabled. Only if the Reference junction parameter and the Fixed reference temperature value is configured. With output type voltage only With output type current only Only if Reaction to CPU STOP -> Output substitute value is configured
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
62
Parameter data records B.1 Parameter assignment and structure of the parameter data records
Parameter assignment in the user program
The module parameters can be assigned in RUN (for example, measuring ranges of selected channels can be edited in RUN without having an effect on the other channels).
Parameter assignment in RUN
The WRREC instruction is used to transfer the parameters to the module using data records. The parameters set with STEP 7 are not changed in the CPU, which means the parameters set in STEP 7 will be valid after a restart. The parameters are only checked for plausibility by the module after the transfer to the module.
Output parameter STATUS
If errors occur during the transfer of parameters with the WRREC instruction, the module continues operation with the previous parameter assignment. However, a corresponding error code is written to the STATUS output parameter. The description of the WRREC instruction and the error codes is available in the STEP 7 online help.
Operation of the module downstream from a PROFIBUS DP interface module
If the module is operated downstream from a IM PROFIBUS DP interface module, the parameter data records 0 and 1 cannot be read back. You get the diagnostics data records 0 and 1 for the read back parameter data records 0 and 1. You can find more information in the Interrupts section of the PROFIBUS DP interface module product manual on the Internet (http://support.automation.siemens.com/WW/view/en/78324181).
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
63
Parameter data records B.2 Structure of a data record for input channels
B.2
Structure of a data record for input channels
Assignment of data record and channel
For the configuration as a 1 x 4-channel module, the parameters are located in data records 0 to 3 and are assigned as follows: Data record 0 for channel 0 Data record 1 for channel 1 Data record 2 for channel 2 Data record 3 for channel 3 For configuration 4 x 1-channel, the module has 4 submodules with one channel each. The parameters for the channel are available in data record 0 and are assigned as follows: Data record 0 for channel 0 (submodule 1) Data record 0 for channel 1 (submodule 2) Data record 0 for channel 2 (submodule 3) Data record 0 for channel 3 (submodule 4) Address the respective submodule for data record transfer.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
64
Manual, 09/2016, A5E32368757-AC
Parameter data records B.2 Structure of a data record for input channels
Data record structure
The figure below shows the structure of data record 0 for channel 0 as an example. The structure is identical for channels 1 to 3. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-1 Structure of data record 0: Bytes 0 to 6
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
65
Parameter data records B.2 Structure of a data record for input channels
Figure B-2 Structure of data record 0: Bytes 7 to 27
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
66
Manual, 09/2016, A5E32368757-AC
Parameter data records B.2 Structure of a data record for input channels
Codes for measurement types
The following table lists all measurement types of the analog input module along with their codes. Enter these codes at byte 2 of the data record for the corresponding channel (see the figure Structure of data record 0: Bytes 7 to 27).
Table B- 2 Code for the measurement type
Measurement type Disabled Voltage Current, 2-wire transmitter Current, 4-wire transmitter Resistance, 4-wire connection *) **) Resistance, 3-wire connection *) **) Resistance, 2-wire connection *) ***) Thermal resistor linear, 4-wire connection *) Thermal resistor linear, 3-wire connection *) Thermocouple
Code 0000 0000 0000 0001 0000 0011 0000 0010 0000 0100 0000 0101 0000 0110 0000 0111 0000 1000 0000 1010
*) only possible for channels 0 and 2 **) only for the following measuring ranges: 150 , 300 , 600 , 6 k ***) only for measuring range PTC
Special feature for configuration
If you assign one of the following measurement types on channel 0 or 2, then the next channel must always be disabled.
Resistance, 4-wire connection
Resistance, 3-wire connection
Resistance, 2-wire connection
Thermal resistor linear, 4-wire connection
Thermal resistor linear, 3-wire connection
Example:
You have configured "Resistance, 4-wire connection" at channel 0; channel 1 must be disabled. You have configured "Resistance, 2-wire connection" at channel 2; channel 3 must be disabled.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
67
Parameter data records B.2 Structure of a data record for input channels
Codes for measuring ranges
The following table lists all measuring ranges of the analog input module along with their codes. Enter these codes accordingly at byte 3 of the data record for the corresponding channel (see the figure Structure of data record 0: Bytes 7 to 27).
Table B- 3 Code for the measuring range
Measuring range Voltage ±50 mV ±80 mV ±250 mV ±500 mV ±1 V ±2.5 V ±5 V ±10 V 1 V to 5 V Current, 4-wire transmitter 0 mA to 20 mA 4 mA to 20 mA ±20 mA Current, 2-wire transmitter 4 mA to 20 mA Resistor 150 300 600 6 k PTC
Code
0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0111 0000 1000 0000 1001 0000 1010
0000 0010 0000 0011 0000 0100
0000 0011
0000 0001 0000 0010 0000 0011 0000 0101 0000 1111
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
68
Manual, 09/2016, A5E32368757-AC
Parameter data records B.2 Structure of a data record for input channels
Thermal resistor Pt100 Climate Ni100 Climate Pt100 standard Ni100 standard Pt500 standard Pt1000 standard Ni1000 standard Pt200 Climate Pt500 Climate Pt1000 Climate Ni1000 Climate Pt200 standard LG-Ni1000 standard LG-Ni1000 Climate Thermocouple B N E R S J T K
0000 0000 0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0110 0000 0111 0000 1000 0000 1001 0000 1010 0000 1011 0001 1100 0001 1101
0000 0000 0000 0001 0000 0010 0000 0011 0000 0100 0000 0101 0000 0111 0000 1000
Codes for temperature coefficient
The following table lists all temperature coefficients along with their codes for temperature measurements with the thermal resistors. You must enter these codes in each case in byte 4 of the data record for the corresponding channel (refer to the figure Structure of data record 0: Bytes 0 to 6)
Table B- 4 Codes for temperature coefficient
Temperature coefficient Pt xxx 0.003851 0.003916 0.003902 0.003920 Ni xxx 0.006180 0.006720 LG-Ni 0.005000
Code
0000 0000 0000 0001 0000 0010 0000 0011
0000 1000 0000 1001
0000 1010
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
69
Parameter data records B.2 Structure of a data record for input channels
Valid values for fixed reference temperatures
The values that you can set for fixed reference temperatures must be in the valid range of values. The resolution is a tenth of a degree.
Table B- 5 Valid values for fixed reference temperatures
Temperature unit Celsius (default) Fahrenheit (default) Kelvin (default)
Dec -1450 to 1550 -2290 to 3110 1282 to 3276
Hex FA56H to 60EH F70EH to CCCH 502H to 10BAH
Hardware interrupt limits
The values that you can set for hardware interrupts (high/low limit) must not violate the over/underrange of the respective rated measuring range.
The following tables list the valid hardware interrupt limits. The limits depend on the selected measurement type and measuring range.
Table B- 6 Voltage limits
Voltage ±50 mV, ±80 mV, ±250 mV, ±500 mV, ±1 V, ±2.5 V, ±5 V, ±10 V 32510
-32511
1 V to 5 V
32510 -4863
High limit Low limit
Table B- 7 Current and resistance limits
Current ±20 mA
32510 -32511
4 mA to 20 mA / 0 mA to 20 mA
32510
-4863
Resistor (all configurable measuring ranges)
32510 1
High limit Low limit
Table B- 8 Limits for thermocouple types B, C, E, and J
Thermocouple
Type B
°C
°F
20699 32765
1
321
K 23431
2733
°C 11999 -2699
Type E
°F
K
21919 14731
-4539 33
°C 14499 -2099
Type J °F
26419 -3459
K 17231
633
High limit Low limit
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
70
Manual, 09/2016, A5E32368757-AC
Parameter data records B.2 Structure of a data record for input channels
Table B- 9 Limits for thermocouples type K, N, R, and S
Thermocouple
Type K
°C
°F
K
16219 29515 18951
-2699 -4539 33
°C 15499 -2699
Type N
°F
K
28219 18231
-4539 33
Types R, S
°C
°F
K
20189 32765 22921
-1699 -2739 1033
High limit Low limit
Table B- 10 Limits for thermocouple type T
Thermocouple
Type T
°C
°F
5399 10039
-2699 -4539
K 8131
33
High limit Low limit
Table B- 11 Limits for thermal resistor Pt xxx Standard and Pt xxx Climatic
Thermal resistor
Pt xxx Standard
°C
°F
K
9999
18319
12731
-2429
-4053
303
°C 15499 -14499
Pt xxx Climate
°F
K
31099
---
-22899
---
High limit Low limit
Table B- 12 Limits for thermal resistor Ni xxx Standard and Ni xxx Climatic
Thermal resistor
Ni xxx Standard
°C
°F
K
2949
5629
5681
-1049
-1569
1683
°C 15499 -10499
Ni xxx Climate
°F
K
31099
---
-15699
---
High limit Low limit
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
71
Parameter data records B.3 Structure of a data record for output channels
B.3
Structure of a data record for output channels
Assignment of data record and channel
For the configuration as a 1 x 2-channel module, the parameters are located in data records 64 and 65 and are assigned as follows: Data record 64 for channel 0 Data record 65 for channel 1 For configuration 2 x 1-channel, the module has 2 submodules with one channel each. The parameters for the channel are available in data record 64 and are assigned as follows: Data record 64 for channel 0 (submodule 1) Data record 64 for channel 1 (submodule 2) Address the respective submodule for data record transfer.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
72
Manual, 09/2016, A5E32368757-AC
Parameter data records B.3 Structure of a data record for output channels
Data record structure
The example in the figure below shows the structure of data record 64 for channel 0. The structure of channel 1 is identical. The values in byte 0 and byte 1 are fixed and may not be changed. Enable a parameter by setting the corresponding bit to "1".
Figure B-3 Structure of data record 64: Bytes 0 to 7
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
73
Parameter data records B.3 Structure of a data record for output channels
Codes for the output type
The following table lists all output types of the analog output module along with their codes. Enter these codes at byte 2 of the data record for the corresponding channel (see the previous figure).
Table B- 13 Code for the output type
Output type Disabled Voltage Current
Code 0000 0000 0000 0001 0000 0010
Codes for the output ranges
The following table lists all voltage and current output ranges of the analog output module along with their codes. In each case, enter these codes at byte 3 of the respective data record (see previous figure).
Table B- 14 Code for the output range
Output range for voltage 1 V to 5 V 0 V to 10 V ±10 V Output range for current 0 mA to 20 mA 4 mA to 20 mA ±20 mA
Code 0000 0011 0000 0010 0000 0000 Code 0000 0001 0000 0010 0000 0000
Valid substitute values
The following table lists all output ranges for the valid substitute values. Enter these substitute values at bytes 6 and 7 of the data record for the corresponding channel (see the previous figure). The binary representation of output ranges is available on the Internet in the function manual Analog value processing for SIMATIC.
Table B- 15 Valid substitute value for the output range
Output range ±10 V 1 V to 5 V 0 V to 10 V ±20 mA 4 mA to 20 mA 0 mA to 20 mA
Valid substitute value -32512 ... +32511 -6912 ... +32511 0 ... +32511 -32512 ... +32511 -6912 ... +32511 0 ... +32511
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
74
Manual, 09/2016, A5E32368757-AC
Parameter data records B.4 Structure of a data record for dynamic reference temperature
B.4
Structure of a data record for dynamic reference temperature
The WRREC instruction is used to transfer the reference junction temperature via data record 192 to data record 195 to the module. Data records 192 to 195 cannot be read back.
The description of the WRREC instruction can be found in the STEP 7 online help.
If you have set the "Dynamic reference temperature" value for the "Reference junction" parameter, the module expects a new data record at least every 5 minutes. If the module does not receive a new data record within this time, it generates the "Reference channel error" diagnostics message.
Assignment of data record and channel
Data records and channels are assigned as follows: Data record 192 for channel 0 Data record 193 for channel 1 Data record 194 for channel 2 Data record 195 for channel 3
Structure of data record 192 for dynamic reference temperature
The following figure shows an example of the structure of data record 192 for channel 0. The structure for data records 193 to 195 is identical.
Figure B-4 Structure of data record 192
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
75
Parameter data records B.4 Structure of a data record for dynamic reference temperature
Valid values for temperature compensation
You can enter the selectable values at bytes 2 and 3 of the data record for the corresponding channel. The selectable values must lie within the permitted value range, see following table. The resolution is a tenth of a degree.
Table B- 16 Valid values for temperature compensation via data record
Temperature unit Celsius (standard) Fahrenheit (standard) Kelvin (standard) Celsius (climatic) Fahrenheit (climatic) Kelvin (climatic)
Dec -1450 to 1550 -2290 to 3110 1282 to 3276 -14500 to 15500 -22900 to 31100 12820 to 32760
Hex FA56H to 60EH F70EH to C26H 502H to CCCH C75CH to 3C8CH A68CH to 797CH 3214H to 7FF8H
Additional information
For more information on compensation of the reference junction temperature via data record refer to the Analog value processing (http://support.automation.siemens.com/WW/view/en/67989094) function manual in the internet.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
76
Manual, 09/2016, A5E32368757-AC
Analog value processing
C
Introduction
This section shows the analog values for all measuring ranges supported by the AI 4xU/I/RTD/TC/ AQ 2xU/I ST analog module.
Measured value resolution
Each analog value is written left aligned to the tags. The bits marked with "x" are set to "0".
Note This resolution does not apply to temperature values. The digitalized temperature values are the result of a conversion in the analog module.
Table C- 1 Resolution of the analog values
Resolution in bits including sign
16
Values
Dec
Hex
1
1H
Analog value
High byte
Low byte
Sign 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
77
Manual, 09/2016, A5E32368757-AC
Analog value processing C.1 Representation of input ranges
C.1
Representation of input ranges
The tables below set out the digitized representation of the input ranges by bipolar and unipolar input ranges. The resolution is 16 bits.
Table C- 2 Bipolar input ranges
Dec. value
Measured value in %
32767 32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 <-117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0000000001 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Rated range 1 1 1 1 1 1 1111111111 1 0 0 1 0 1 0000000000 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Table C- 3 Unipolar input ranges
Dec. value
Measured value in %
32767 32511 27649 27648 1 0 -1 -4864 -32768
>117.589 117.589 100.004 100.000 0.003617 0.000 -0.003617 -17.593 <-17.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Overflow 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 range 0 1 1 0 1 1 0000000000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 Rated range 0 0 0 0 0 0 0000000000 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Undershoot 1 1 1 0 1 1 0 1 0 0 0 0 0 0 0 0 range 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Underflow
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
78
Manual, 09/2016, A5E32368757-AC
C.1.1
Analog value processing C.1 Representation of input ranges
Representation of analog values in voltage measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible voltage measuring ranges.
Table C- 4
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
Voltage measuring ranges ±10 V, ±5 V, ±2.5 V, ±1 V,
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±10 V
±5 V
>11.759 V >5.879 V
11.759 V 5.879 V
±2.5 V >2.940 V 2.940 V
±1 V > 1.176 V 1.176 V
10 V 7.5 V 361.7 µV 0 V
5 V 3.75 V 180.8 µV 0 V
2.5 V 1.875 V 90.4 µV 0 V
1 V 0.75 V 36.17 µV 0 V
-7.5 V -10 V
-3.75 V -5 V
-1.875 V -2.5 V
-0.75 V -1 V
-11.759 V -5.879 V <-11.759 V <-5.879 V
-2.940 V <-2.940 V
-1.176 V <-1.176 V
Range Overflow Over range Rated range
Under range Underflow
Table C- 5 Voltage measuring ranges ±500 mV, ±250 mV, ±80 mV, and ±50 mV
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Voltage measuring range
±500 mV
±250 mV
>587.9 mV > 294.0 mV
587.9 mV 294.0 mV
±80 mV > 94.1 mV 94.1 mV
±50 mV > 58.8 mV 58.8 mV
Range
Overflow Over range
500 mV 375 mV 18.08 µV 0 mV
250 mV 187.5 mV 9.04 µV 0 mV
80 mV 60 mV 2.89 µV 0 mV
50 mV 37.5 mA 1.81 µV 0 mV
Rated range
-375 mV -500 mV
-187.5 mV -250 mV
-60 mV -80 mV
-587.9 mV -294.0 mV -94.1 mV <-587.9 mV <-294.0 mV <-94.1 mV
-37.5 mV -50 mV
-58.8 mV <-58.8 mV
Under range Underflow
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
79
Analog value processing C.1 Representation of input ranges
Table C- 6 Voltage measuring range 1 V to 5 V
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Voltage measuring range 1 V to 5 V >5.704 V 5.704 V
5 V 4 V 1 V + 144.7 µV 1 V
0.296 V < 0.296 V
Range Overflow Over range Rated range
Under range Underflow
C.1.2
Representation of analog values in the current measuring ranges
The following tables list the decimal and hexadecimal values (codes) of the possible current measuring ranges.
Table C- 7 Current measuring range ±20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 8000
Current measuring range ±20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-15 mA -20 mA
-23.52 mA <-23.52 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
80
Manual, 09/2016, A5E32368757-AC
Analog value processing C.1 Representation of input ranges
Table C- 8 Current measuring ranges 0 mA to 20 mA and 4 mA to 20 mA
Values dec 32767 32511 27649 27648 20736 1 0 -1 -4864 -32768
hex 7FFF 7EFF 6C01 6C00 5100 1 0 FFFF ED00 8000
Current measuring range 0 mA to 20 mA >23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA
-3.52 mA <- 3.52 mA
4 mA to 20 mA >22.81 mA 22.81 mA
20 mA 16 mA 4 mA + 578.7 nA 4 mA
1.185 mA < 1.185 mA
Overflow Overshoot range Rated range
Undershoot range Underflow
C.1.3
Representation of the analog values of resistance-based sensors/resistance thermometers
The following tables list the decimal and hexadecimal values (codes) of the possible resistance-based sensor ranges.
Table C- 9 Resistance-based sensors of 150 , 300 , 600 , and 6000
Values dec 32767 32511 27649 27648 20736 1 0
hex 7FFF 7EFF 6C01 6C00 5100 1 0
Resistance-based sensor range
150
300
>176.38
>352.77
176.38
352.77
150 112.5 5.43 m 0
300 225 10.85 m 0
600 >705.53 705.53
600 450 21.70 m 0
6000 >7055.3 7055.3
6000 4500 217 m 0
Overflow Overshoot range
Rated range
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
81
Analog value processing C.1 Representation of input ranges
The following tables list the decimal and hexadecimal values (codes) of the supported resistance thermometers.
Table C- 10 Resistance thermometers Pt 100, Pt 200, Pt 500 and Pt 1000 Standard
Pt x00 Standard in °C (1 digit = 0.1°C) > 1000.0 1000.0 : 850.1 850.0 : -200.0 -200.1 : -243.0 < -243.0
Values dec
32767 10000 : 8501 8500 : -2000 -2001 : -2430 -32768
hex
7FFF 2710 : 2135 2134 : F830 F82F : F682 8000
Pt x00 Standard in °F (1 digit = 0.1 °F) > 1832.0 1832.0 : 1562.1 1562.0 : -328.0 -328.1 : -405.4 < -405.4
Values dec
32767 18320 : 15621 15620 : -3280 -3281 : -4054 -32768
hex
7FFF 4790 : 3D05 3D04 : F330 F32F : F02A 8000
Pt x00 Standard in K (1 digit = 0.1 K) > 1273.2 1273.2 : 1123.3 1123.2 : 73.2 73.1 : 30.2 < 30.2
Values dec
32767 12732 : 11233 11232 : 732 731 : 302 32768
hex
7FFF 31BC : 2BE1 2BE0 : 2DC 2DB : 12E 8000
Range
Overflow Overshoot range Rated range
Under range
Underflow
Table C- 11 Resistance thermometers Pt 100, Pt 200, Pt 500 and Pt 1000 Climatic
Pt x00 Climatic/ in °C (1 digit = 0.01 °C) > 155.00 155.00 : 130.01 130.00 : -120.00 -120.01 : -145.00 < -145.00
Values dec
32767 15500 : 13001 13000 : -12000 -12001 : -14500 -32768
hex
7FFF 3C8C : 32C9 32C8 : D120 D11F : C75C 8000
Pt x00 Climatic/ in °F (1 digit = 0.01 °F) > 311.00 311.00 : 266.01 266.00 : -184.00 -184.01 : -229.00 < -229.00
Values dec
32767 31100 : 26601 26600 : -18400 -18401 : -22900 -32768
hex
7FFF 797C : 67E9 67E8 : B820 B81F : A68C 8000
Range
Overflow Overshoot range Rated range
Under range
Underflow
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
82
Manual, 09/2016, A5E32368757-AC
Analog value processing C.1 Representation of input ranges
Table C- 12 Resistance thermometers Ni 100, Ni 1000, LG-Ni 1000 Standard
Ni x00 standard in °C (1 digit = 0.1 °C) > 295.0 295.0 : 250.1 250.0 : -60.0 -60.1 : -105.0 < -105.0
Values dec
32767 2950 : 2501 2500 : -600 -601 : -1050 -32768
hex
7FFF B86 : 9C5 9C4 : FDA8 FDA7 : FBE6 8000
Ni x00 Standard in °F (1 digit = 0.1 °F) > 563.0 563.0 : 482.1 482.0 : -76.0 -76.1 : -157.0 < -157.0
Values dec
32767 5630 : 4821 4820 : -760 -761 : -1570 -32768
hex
7FFF 15FE : 12D5 12D4 : FD08 FD07 : F9DE 8000
Ni x00 Standard in K (1 digit = 0.1 K) > 568.2 568.2 : 523.3 523.2 : 213.2 213.1 : 168.2 < 168.2
Values dec
32767 5682 : 5233 5232 : 2132 2131 : 1682 32768
hex
7FFF 1632 : 1471 1470 : 854 853 : 692 8000
Range
Overflow Overshoot range Rated range
Under range
Underflow
Table C- 13 Resistance thermometers Ni 100, Ni 1000, LG-Ni 1000 Climatic
Ni x00 Climatic in °C (1 digit = 0.01 °C)
> 155.00 155.00 : 130.01 130.00 : -60.00 -60.01 : -105.00 < - 105.00
Values
dec 32767 15500 : 13001 13000 : -6000 -6001 : -10500 -32768
hex 7FFF 3C8C : 32C9 32C8 : E890 E88F : D6FC 8000
Ni x00 climatic in °F Values (1 digit = 0.01 °F) dec
> 311.00
32767
311.00
31100
:
:
266.01
26601
266.00
26600
:
:
-76.00
-7600
-76.01
-7601
:
:
-157.00
-15700
< - 157.00
-32768
hex 7FFF 797C : 67E9 67E8 : E250 E24F : C2AC 8000
Range Overflow Overshoot range Rated range
Under range
Underflow
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
83
Analog value processing C.1 Representation of input ranges
C.1.4
Representation of analog values for thermocouples
The following tables list the decimal and hexadecimal values (codes) of the supported thermocouples.
Table C- 14 Thermocouple type B
Type B in C
> 2070.0 2070.0 : 1820.1 1820.0 : 250.0 249.9 : 0.0 < 0.0
Values
dec 32767 20700 : 18201 18200 : 2500 2499 : 0 -32768
hex 7FFF 50DC : 4719 4718 : 09C4 09C3 : 0 8000
Type B in °F
> 3276.6 3276.6 : 2786.6 2786.5 : 482.0 481.9 : 32.0 < 32.0
Values
dec 32767 32766 : 27866 27865 : 4820 4819 : 320 -32768
hex 7FFF 7FFE : 6CDA 6CD9 : 12D4 12D3 : 0140 8000
Type B in K
> 2343.2 2343.2 : 2093.3 2093.2 : 523.2 523.1 : 273.2 < 273.2
Values
dec 32767 23432 : 20933 20932 : 5232 5231 : 2732 32768
hex 7FFF 5B88 : 51C5 51C4 : 1470 1469 : 0AAC 8000
Range Overflow Over range
Rated range
Under range
Underflow
Table C- 15 Thermocouple type E
Type E in °C
> 1200.0 1200.0 : 1000.1 1000.0 : -270.0 < -270.0
Values dec 32767 12000 : 10001 10000 : -2700 -32768
hex 7FFF 2EE0 : 2711 2710 : F574 8000
Type E in °F
> 2192.0 2192.0 : 1832.2 1832.0 : -454.0 < -454.0
Values dec 32767 21920 : 18322 18320 : -4540 -32768
hex 7FFF 55A0 : 4792 4790 : EE44 8000
Type E in K
> 1473.2 1473.2 : 1273.3 1273.2 : 0 <0
Values dec 32767 14732 : 12733 12732 : 0 -32768
hex 7FFF 398C : 31BD 31BC : 0000 8000
Range Overflow Over range
Rated range
Underflow
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
84
Manual, 09/2016, A5E32368757-AC
Analog value processing C.1 Representation of input ranges
Table C- 16 Thermocouple type J
Type J in °C
> 1450.0 1450.0 : 1200.1 1200.0 : -210.0 < -210.0
Values dec 32767 14500 : 12001 12000 : -2100 -32768
hex 7FFF 38A4 : 2EE1 2EE0 : F7CC 8000
Type J in °F
> 2642.0 2642.0 : 2192.2 2192.0 : -346.0 < -346.0
Values dec 32767 26420 : 21922 21920 : -3460 -32768
hex 7FFF 6734 : 55A2 55A0 : F27C 8000
Type J in K
> 1723.2 1723.2 : 1473.3 1473.2 : 63.2 < 63.2
Values dec 32767 17232 : 14733 14732 : 632 -32768
hex 7FFF 4350 : 398D 398C : 0278 8000
Range Overflow Over range
Rated range
Underflow
Table C- 17 Thermocouple type K
Type K in °C
> 1622.0 1622.0 : 1372.1 1372.0 : -270.0 < -270.0
Values dec 32767 16220 : 13721 13720 : -2700 -32768
hex 7FFF 3F5C : 3599 3598 : F574 8000
Type K in °F
> 2951.6 2951.6 : 2501.7 2501.6 : -454.0 < -454.0
Values dec 32767 29516 : 25017 25016 : -4540 -32768
hex 7FFF 734C : 61B9 61B8 : EE44 8000
Type K in K
> 1895.2 1895.2 : 1645.3 1645.2 : 0 < 0
Values dec 32767 18952 : 16453 16452 : 0 -32768
hex 7FFF 4A08 : 4045 4044 : 0000 8000
Range Overflow Over range
Rated range
Underflow
Table C- 18 Thermocouple type N
Type N in °C
> 1550.0 1550.0 : 1300.1 1300.0 : -270.0 < -270.0
Values
dec 32767 15500 : 13001 13000 : -2700 -32768
hex 7FFF 3C8C : 32C9 32C8 : F574 8000
Type N in °F
> 2822.0 2822.0 : 2372.2 2372.0 : -454.0 < -454.0
Values
dec 32767 28220 : 23722 23720 : -4540 -32768
hex 7FFF 6E3C : 5CAA 5CA8 : EE44 8000
Type N in K
> 1823.2 1823.2 : 1573.3 1573.2 : 0 < 0
Values
dec 32767 18232 : 15733 15732 : 0 -32768
hex 7FFF 4738 : 3D75 3D74 : 0000 8000
Range Overflow Over range
Rated range
Underflow
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
85
Analog value processing C.1 Representation of input ranges
Table C- 19 Thermocouple type R and S
Type R, S Values
in °C
dec
> 2019.0 32767
2019.0 20190
:
:
1769.1 17691
1769.0 17690
:
:
-50.0
-500
-50.1
-501
:
:
-170.0 -1700
< -170.0 -32768
hex 7FFF 4EDE : 451B 451A : FE0C FE0B : F95C 8000
Type R, S Values
in °F
dec
> 3276.6 32767
3276.6 32766
:
:
3216.4 32164
3216.2 32162
:
:
-58.0
-580
-58.1
-581
:
:
-274.0 -2740
< -274.0 -32768
hex 7FFF 7FFE : 7DA4 7DA2 : FDBC FDBB : F54C 8000
Types R, S in K
> 2292.2 2292.2 : 2042.3 2042.2 : 223.2 223.1 : 103.2 < 103.2
Values
dec 32767 22922 : 20423 20422 : 2232 2231 : 1032 < 1032
hex 7FFF 598A : 4FC7 4FC6 : 08B8 08B7 : 0408 8000
Range Overflow Over range
Rated range
Under range
Underflow
Table C- 20 Thermocouple type T
Type T in °C
> 540.0 540.0 : 400.1 400.0 : -270.0 < -270.0
Values dec 32767 5400 : 4001 4000 : -2700 -32768
hex 7FFF 1518 : 0FA1 0FA0 : F574 8000
Type T in °F
> 1004.0 1004.0 : 752.2 752.0 : -454.0 < -454.0
Values dec 32767 10040 : 7522 7520 : -4540 -32768
hex 7FFF 2738 : 1D62 1D60 : EE44 8000
Type T in K
> 813.2 813.2 : 673.3 673.2 : 3.2 < 3.2
Values dec 32767 8132 : 6733 6732 : 32 -32768
hex 7FFF 1FC4 : 1AAD 1AAC : 0020 8000
Range Overflow Over range
Rated range
Underflow
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
86
Manual, 09/2016, A5E32368757-AC
Analog value processing C.1 Representation of input ranges
C.1.5
Measured values for wire break diagnostics
Measured values on diagnostics event "wire break", dependent on diagnostics enables
Error events initiate a diagnostics entry and trigger a diagnostics interrupt if configured accordingly.
Table C- 21 Measured values for wire break diagnostics
Format S7
Parameter assignment
· "Wire break" diagnostics enabled · "Overflow/Underflow" diagnostics
enabled or disabled ("Wire break" diagnostics takes priority over "Overflow/Underflow" diagnostics)
· "Wire break" diagnostics disabled · "Overflow/Underflow" diagnostics
enabled
· "Wire break" diagnostics disabled · "Overflow/Underflow" diagnostics
disabled
Measured values
32767
7FFFH
-32767 8000 H -32767 8000 H
Explanation "Wire break" or "Open circuit" diagnostics alarm
· Measured value after leaving the under range
· Diagnostics alarm "Low limit violated" Measured value after leaving the under range
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
87
Analog value processing C.2 Representation of output ranges
C.2
Representation of output ranges
The tables below set out the digitalized representation of the output ranges by bipolar and unipolar range. The resolution is 16 bits.
Table C- 22 Bipolar output ranges
Dec. value
32511
32511 27649 27648 1 0 -1 -27648 -27649 -32512 -32512
Output value in %
117.589
117.589 100.004 100.000 0.003617 0.000 -0.003617 -100.000 -100.004 -117.593 -117.593
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot range 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Rated range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 1 1 1 1 1 1 1 1 1 1 Undershoot range 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < -32512 are specified, the output value is limited to -117.593%.
Table C- 23 Unipolar output ranges
Dec. value
32511
32511 27649 27648 1 0 0
Output value in %
117.589
117.589 100.004 100.000 0.003617 0.000 0
Data word
Range
215 214 213 212 211 210 29 28 27 26 25 24 23 22 21 20 0 1 1 1 1 1 1 1 x x x x x x x x Maximum output
value* 0 1 1 1 1 1 1 0 1 1 1 1 1 1 1 1 Overshoot range 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 1 0 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 Rated range 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Minimum output
value**
* When values > 32511 are specified, the output value is limited to 117.589%. ** When values < 0 are specified, the output value is limited to 0%.
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
88
Manual, 09/2016, A5E32368757-AC
C.2.1
Analog value processing C.2 Representation of output ranges
Representation of analog values in the voltage output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible voltage output ranges.
Table C- 24 Voltage output range ±10 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-75% -100%
dec >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400
Voltage output range ±10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V -361.7 µV -7.5 V -10 V
-117.593% <-117.593%
-27649 -32512 <-32512
93FF 8100 < 8100
-11.76 V -11.76 V
Range Maximum output value Over range
Rated range
Under range Minimum output value
Table C- 25 Voltage output range 0 V to 10 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0% <0%
dec >32511 32511 27649 27648 20736 1 0 <0
hex >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Voltage output range 0 V to 10 V 11.76 V 11.76 V
10 V 7.5 V 361.7 µV 0 V 0 V
Range Maximum output value Over range Rated range
Minimum output value
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
89
Analog value processing C.2 Representation of output ranges
Table C- 26 Voltage output range 1 V to 5 V
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-25% <-25%
dec >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 < E500
Voltage output range 1 V to 5 V 5.70 V 5.70 V
5 V 4 V 1 V +144.7 µV 1 V 1 V -144.7 µV 0 V 0 V
Range Maximum output value Over range Rated range
Under range Minimum output value
C.2.2
Representation of analog values in the current output ranges
The tables below list the decimal and hexadecimal values (codes) of the possible current output ranges.
Table C- 27 Current output range ±20 mA
Values
>117.589% 117.589%
100 % 75% 0.003617 % 0%
-75% -100%
-117.593% <-117.593%
dec >32511 32511 27649 27648 20736 1 0 -1 -20736 -27648 -27649 -32512 <-32512
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF AF00 9400 93FF 8100 <8100
Current output range ±20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA -723.4 nA -15 mA -20 mA
-23.52 mA -23.52 mA
Range Maximum output value Over range
Rated range Under range Minimum output value
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
90
Manual, 09/2016, A5E32368757-AC
Analog value processing C.2 Representation of output ranges
Table C- 28 Current output range 0 mA to 20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0% <0%
dec >32511 32511 27649 27648 20736 1 0 <0
hex >7EFF 7EFF 6C01 6C00 5100 1 0 <0
Current output range 0 mA to 20 mA 23.52 mA 23.52 mA
20 mA 15 mA 723.4 nA 0 mA 0 mA
Range Maximum output value Over range
Rated range Minimum output value
Table C- 29 Current output range 4 mA to 20 mA
Values
>117.589% 117.589%
100% 75% 0.003617% 0%
-25% <-25%
dec >32511 32511 27649 27648 20736 1 0 -1 -6912 <-6912
hex >7EFF 7EFF 6C01 6C00 5100 1 0 FFFF E500 <E500
Current output range 4 mA to 20 mA 22.81 mA 22.81 mA
20 mA 16 mA 4 mA 4 mA
0 mA 0 mA
Range Maximum output value Over range
Rated range Under range Minimum output value
Analog Input/Output Module AI 4xU/I/RTD/TC/ AQ 2xU/I ST (6ES7534-7QE00-0AB0)
Manual, 09/2016, A5E32368757-AC
91
_Pr_ef_ac_e_______________
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
SIMATIC
S7-1500/ET 200MP Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual
_Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Co_n_fig_u_rin_g/_ad_d_re_ss_s_pa_c_e ____4_ _Imn_etes_rsrua_pg_tess/_di_ag_n_os_tic________5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_
_Di_m_en_si_on_a_l d_ra_w_in_g _______A_
_Pa_ra_m_e_te_r d_a_ta_re_co_rd_______B_
06/2018
A5E31870371-AB
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E31870371-AB 05/2018 Subject to change
Copyright © Siemens AG 2018. All rights reserved
Preface
Purpose of the documentation
This manual includes module-specific information on wiring, diagnostics and the technical specifications of the technology module.
General information regarding design and commissioning of the S7-1500 or ET 200MP is available in the S7-1500 or ET 200MP system manuals.
The counting and measuring functions of the TM Count 2x24V technology module are described in more detail in the Counting, Measurement and Position Detection (http://support.automation.siemens.com/WW/view/en/59709820) Function Manual.
Conventions
Please observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
3
Preface
Open Source Software
Open-source software is used in the firmware of the product described. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information on this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109740777).
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
4
Manual, 06/2018, A5E31870371-AB
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ................................................................................................................................ 11
2.2 2.2.1 2.2.2 2.2.3 2.2.4 2.2.5
Functions ................................................................................................................................14 Detection of counting signals ..................................................................................................14 Measured value determination ...............................................................................................15 Switching the outputs at comparison values ..........................................................................15 Position input for Motion Control.............................................................................................16 Additional functions.................................................................................................................16
3 Wiring ................................................................................................................................................... 18
3.1
Pin assignment and block diagram.........................................................................................18
4 Configuring/address space.................................................................................................................... 23
4.1 4.1.1 4.1.2 4.1.3 4.1.4 4.1.5
Operating with "Counting and measurement" technology object ...........................................23 Configuring .............................................................................................................................. 23 Reaction to CPU STOP ..........................................................................................................24 Parameter setting....................................................................................................................25 Address space ........................................................................................................................30 Isochronous mode ..................................................................................................................31
4.2 4.2.1 4.2.2 4.2.3 4.2.4
Position input for "Motion Control" technology object.............................................................32 Configuring .............................................................................................................................. 32 Parameter setting....................................................................................................................33 Address space ........................................................................................................................35 Isochronous mode ..................................................................................................................35
4.3 4.3.1 4.3.2 4.3.3 4.3.4 4.3.5 4.3.5.1 4.3.5.2 4.3.6
Manual operation (without technology object) ........................................................................36 Configuring .............................................................................................................................. 36 Reaction to CPU STOP ..........................................................................................................38 Parameter setting....................................................................................................................39 Address space ........................................................................................................................44 Control and feedback interface...............................................................................................45 Assignment of the control interface ........................................................................................45 Assignment of the feedback interface.....................................................................................48 Isochronous mode ..................................................................................................................52
5 Interrupts/diagnostic messages ............................................................................................................. 53
5.1
Status and error display ..........................................................................................................53
5.2
Diagnostic alarms ...................................................................................................................56
5.3
Hardware interrupts ................................................................................................................59
6 Technical specifications ........................................................................................................................ 61
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
5
Table of contents
A Dimensional drawing............................................................................................................................. 69
B Parameter data record .......................................................................................................................... 71
B.1
Parameter assignment and structure of parameter data record ............................................ 71
B.2
Parameter validation error ..................................................................................................... 77
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
6
Manual, 06/2018, A5E31870371-AB
Documentation guide
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
1
Basic information The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA. You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx). Changes and supplements to the manuals are documented in a Product Information. You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
7
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
8
Manual, 06/2018, A5E31870371-AB
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
9
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
10
Manual, 06/2018, A5E31870371-AB
Product overview
2
2.1
Properties
Article number
6ES7550-1AA00-0AB0
Firmware version
This manual describes the properties of the module with firmware version V1.3.
View of the module
Figure 2-1 View of the TM Count 2x24V module
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
11
Product overview 2.1 Properties
Properties
The TM Count 2x24V technology module has the following properties: Technical properties
Two channels Interfaces:
24 V encoder signals A, B and N from sourcing, sinking or push-pull encoders and sensors 24 V encoder supply, short-circuit-proof DI0, DI1 and DI2 digital input signals (per channel) DQ0 and DQ1 digital output signals (per channel) Supply voltage L+ Count range: 32 bits Monitoring of encoder signals for wire break channel by channel Hardware interrupts can be configured channel by channel Input filters for suppression of interferences at encoder inputs and digital inputs can be configured Supported encoder/signal types 24 V incremental encoder with N signal 24 V incremental encoder without N signal 24 V pulse encoder with direction signal 24 V pulse encoder without direction signal 24 V pulse encoder with up/down counting signal Supported system functions Isochronous mode Firmware update Identification data I&M
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
12
Manual, 06/2018, A5E31870371-AB
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the functions
Function
Firmware update
I&M identification data
Parameter reassignment in RUN
Isochronous mode
Counting/measuring
Operating with "Counting and measurement" technology object Position input for "Motion Control" technology object Operating with "Measuring input" technology object Position value range of 32 bits
Firmware version of
module
V1.0 or higher
V1.0 or higher
V1.0 or higher
V1.0 or higher
V1.0 or higher
V1.0 or higher
V1.0 or higher
V1.3 or higher
V1.3 or higher
Configurable as of
STEP 7 (TIA Portal)
GSD
PROFINET IO
PROFIBUS DP
V13
X
--
V13
X
X
V13
X
X
V13
--
--
V13
X
X
V13
--
--
V13
--
--
V15 with
--
--
HSP0256
V15 with
X
X
HSP0256
Accessories
The following components are supplied with the technology module and can also be ordered separately as spare parts: Shield bracket Shield terminal Power supply element Labeling strip U-connector
Other components
The following component needs to be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find information on the front connector in system manual S7-1500 / ET 200MP Automation System (http://support.automation.siemens.com/WW/view/en/59191792), section "Accessories".
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
13
Product overview 2.2 Functions
2.2
Functions
2.2.1
Detection of counting signals
Counting is the detecting and adding up of events. The counters of the technology module detect encoder signals and pulses and evaluate them accordingly. The count direction can be specified using encoder or pulse signals or through the user program.
You can control the counting processes with the digital inputs. In addition, you can read the signal state of the respective digital input via the feedback interface.
You can specify the counter characteristics using the functions described below.
Counting limits
The counting limits define the counter value range used. The counting limits are configurable and can be modified during runtime with the user program.
You can configure the behavior of the counter at the counting limits.
Start value
You can configure a start value within the counting limits. The start value can be modified during runtime with the user program.
Gate control
You can define the time window in which the count signals are acquired with the hardware gate (HW gate) and software gate (SW gate).
Capture (Latch)
You can configure an external reference signal edge that triggers the saving of the current counter value as Capture value. The following external signals can trigger the Capture function:
Rising or falling edge of a digital input
Both edges of a digital input
Rising edge of the N signal at the encoder input
The "Frequency of Capture function" parameter specifies whether the function is executed at each configured edge or only once after each enable.
Measuring input
If you use Position input for Motion Control (Page 16), you can use the "Measuring input" technology object to execute a measuring input function with a hardware digital input.
Hardware interrupts
The technology module can trigger a hardware interrupt in the CPU, for example, if a comparison event occurs, in the event of overflow or underflow, in the event of a zero crossing of the counter and/or of a change of count direction (direction reversal). You can specify which events during operation are to trigger a hardware interrupt.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
14
Manual, 06/2018, A5E31870371-AB
Product overview 2.2 Functions
2.2.2
Measured value determination
The following high-accuracy measurement functions are available (accuracy up to 100 ppm): Frequency measurement with the unit of hertz Period measurement with the unit of seconds Velocity measurement with a flexibly adaptable unit
Update time
You can configure the interval at which the technology module updates the measured values cyclically as the update time.
Gate control
You can define the time window in which the count signals are acquired with the hardware gate (HW gate) and software gate (SW gate).
2.2.3
Switching the outputs at comparison values
The available digital outputs DQ0 and DQ1 can be directly activated/switched by the specified comparison values or via the user program. The comparison values are configurable and can be modified during runtime with the user program. This enables very fast reaction times to be achieved.
Comparison values in the Counting mode
You define two comparison values in the Counting mode. If the current counter value meets the configured comparison condition, the corresponding digital output can be set to directly initiate control processes in the process.
Comparison values in the Measuring mode
You define two comparison values in the Measuring mode. If the current measured value meets the configured comparison condition, the corresponding digital output can be set to directly initiate control processes in the process.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
15
Product overview 2.2 Functions
2.2.4
Position input for Motion Control
You can use the technology module for position detection for the following axis technology objects of S7-1500 Motion Control :
TO_PositioningAxis
TO_SynchronousAxis
TO_ExternalEncoder
In this operating mode, you can use the measuring input technology object (TO_MeasuringInput) to execute a measuring input function with hardware digital input DI1.
Additional information
You can find a detailed description of the use of Motion Control and its configuration in the following:
Function manual S7-1500 Motion Control available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/59381279)
Function manual S7-1500T Motion Control available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109481326)
2.2.5
Additional functions
Synchronization
You can configure the edge of an external reference signal that loads the counter with the specified start value. The following external signals can trigger a synchronization:
Rising or falling edge of a digital input
Rising edge of signal N at the encoder input
Rising edge of signal N at the encoder input depending on the level of the assigned digital input
The "Frequency of synchronization" parameter specifies whether the function is executed at each configured edge or only once after each enable.
Hysteresis
You can specify a hysteresis for the comparison values within which a digital output will be prevented from switching again.
Diagnostic interrupt
The technology module can trigger diagnostic interrupts. You enable the diagnostic interrupts in the device configuration.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
16
Manual, 06/2018, A5E31870371-AB
Product overview 2.2 Functions
Input filter
To suppress interference, you can configure an input filter for the 24 V encoder inputs and for the digital inputs.
Isochronous mode
The technology module supports the "Isochronous mode" system function. This system function enables counter values and measured values to be acquired in a defined system cycle.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
17
Wiring
3
3.1
Pin assignment and block diagram
You connect the encoder signals, the digital input and output signals and the encoder supplies to the 40-pin front connector of the technology module. In addition, you connect the supply voltage for supplying the module and digital outputs and for producing the encoder supply voltages to the 4-pin power supply element.
You can find the pin assignment of the front connector and the power supply element in the following two sections.
You can find information on wiring the front connector, shielding the cable, etc., in system manual S7-1500 / ET 200MP Automation System (http://support.automation.siemens.com/WW/view/en/59191792), section Wiring.
Supply voltage L+/M
You connect the supply voltage to terminals L+ (terminal 41/42) and M (terminal 43/44). An internal protection circuit protects the technology module from reverse polarity of the supply voltage. The technology module monitors whether the supply voltage is connected.
Pin assignment for the power supply element
The power supply element is plugged onto the front connector and serves to supply the technology module. For this, you must connect the supply voltage to terminal 41 (L+) and terminal 44 (M). Use terminal 42 (L+) and terminal 43 (M) to loop the supply voltage through to the next module.
Figure 3-1 Connection of power supply element
L+
Supply voltage 24 V DC
M
Ground for supply voltage
Encoder supply
For supplying the encoders and sensors connected to the digital inputs, the technology module provides a 24 V DC supply voltage at output 24VDC (terminal 9) with reference to M (terminal 10). The voltage is monitored for short-circuit and overload.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
18
Manual, 06/2018, A5E31870371-AB
Wiring 3.1 Pin assignment and block diagram
Digital inputs DI0, DI1 and DI2
The digital inputs are used for gate control, synchronization and the Capture function. The digital inputs of the two counter channels are not isolated from one another.
Input delay for digital inputs
In order to suppress signal noise you can configure an input delay for the digital inputs.
Note If you select the "None" or "0.05 ms" option, you must use shielded cables for connection of the digital inputs.
Digital outputs DQ0 and DQ1
The digital outputs of the two counter channels are not isolated from one another. The digital outputs are 24 V sourcing outputs in reference to M and can carry a rated load current of 0.5 A. They are protected against overload and short-circuit. Relays and contactors can be directly connected without an external protective circuit. You can find information on the maximum possible operating frequencies and the inductance values of the inductive loads connected to the digital outputs in section Technical specifications (Page 61).
24 V encoder signals/count signals
The 24 V encoder signals are designated with the letters A, B and N. You can connect the following encoder types: Incremental encoder with N signal:
The A, B and N signals are connected using the correspondingly marked terminals. The A and B signals are the two 90° phase-shifted incremental signals. N is the zero mark signal that supplies one pulse per revolution. Incremental encoder without N signal: The A and B signals are connected using the correspondingly marked terminals. The A and B signals are the two 90° phase-shifted incremental signals. The N terminal remains unconnected. Pulse encoder without direction signal: The counting signal is connected to the A terminal. The count direction can be specified via the control interface. The B and N terminals remain unconnected.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
19
Wiring 3.1 Pin assignment and block diagram
Pulse encoder with direction signal:
The counting signal is connected to the A terminal. The direction signal is connected to the B terminal. Counting down takes place at a high level of the direction signal. The N terminal remains unconnected.
Pulse encoder with up/down counting signal:
The up count signal is connected to the A terminal. The down counting signal is connected to the B terminal. The N terminal remains unconnected.
The inputs of the two counter channels are not isolated from each other. The inputs are isolated from the backplane bus.
You can connect the following encoders or sensors to the A, B and N inputs:
Sourcing output: The A, B and N inputs are switched by the encoder or sensor to 24VDC .
Sinking output: The A, B and N inputs are switched by the encoder or sensor to ground M .
Push-pull: The A, B and N inputs are switched by the encoder or sensor alternately to 24VDC and ground M . Monitoring for wire break is possible with this type of encoder/sensor. The procedure of the wire break detection (alternate switching) requires that, in the event of a fault (wire break), the count can also change without a counting pulse until the wire break is detected.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
20
Manual, 06/2018, A5E31870371-AB
Wiring 3.1 Pin assignment and block diagram
Pin assignment for the front connector
The table below shows the pin assignment of the front connector.
Table 3- 1 Pin assignment of the front connector
View
Signal name
Designation
24 V incremental encoder
24 V pulse encoder
Counter channel 0
with signal N
without signal N
with direction signal
without direction signal
Up/ Down
1 CH0.A
Encoder signal A
Counting signal A
Up counting signal A
2 CH0.B
Encoder signal B
Direction signal
--
Down count-
B
ing signal B
3 CH0.N Encoder sig-
--
nal N
4 DI0.0
Digital input DI0
5 DI0.1
Digital input DI1
6 DI0.2
Digital input DI2
7 DQ0.0
Digital output DQ0
8 DQ0.1
Digital output DQ1
Encoder supply and ground of the two counter channels
9 24VDC
Encoder supply 24 V DC
10 M
Ground for encoder supply, digital inputs and digital outputs
Counter channel 1
11 CH1.A
Encoder signal A
Counting signal A
Up counting signal A
12 CH1.B
Encoder signal B
Direction signal
--
Down count-
B
ing signal B
13 CH1.N Encoder sig-
--
nal N
14 DI1.0
Digital input DI0
15 DI1.1
Digital input DI1
16 DI1.2
Digital input DI2
17 DQ1.0
Digital output DQ0
18 DQ1.1
Digital output DQ1
19 - --
--
40
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
21
Wiring 3.1 Pin assignment and block diagram
Block diagram
You must ground the shields of the cables between encoder and technology module both through the shield support at the front connector (shield bracket and terminal) and at the encoder.
The figure below shows the block diagram of the technology module with two connected incremental encoders.
Electrical isolation
Shield support at the front connector
Technology and backplane bus interface
Input filter
Supply voltage via power supply element
Equipotential bonding
Incremental encoder
Figure 3-2 Block diagram with two incremental encoders
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
22
Manual, 06/2018, A5E31870371-AB
Configuring/address space
4
4.1
Operating with "Counting and measurement" technology object
4.1.1
Configuring
Introduction
You configure the technology module and assign its parameters with STEP 7 (TIA Portal). The technology object is used to control and monitor the functions of the technology module.
System environment
The technology module can be used in the following system environments:
Applications
Components required
Central operation
· S7-1500 automation system
with an S7-1500 CPU · TM Count 2x24V
Distributed operation · with an S7-1500 CPU ·
·
S7-1500 automation system ET 200MP distributed I/O system TM Count 2x24V
Configuration software STEP 7 (TIA Portal):
· Device configuration with hardware configuration
· Parameter setting with High_Speed_Counter technology object
In the user program
High_Speed_Counter instruction
Additional information
You can find a detailed description of the counting and measurement functions and their configuration in the following:
Function manual Counting, Measurement and Position Detection available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820)
Information system of STEP 7 (TIA Portal) under "Using technology functions > Counting, measurement and position input > Counting, measurement and position input (S7-1500)"
You can find a detailed description of the use of Motion Control and its configuration in the following:
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
23
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
Hardware Support Packages (HSP)
If firmware version V1.3 of the module is not yet integrated in your TIA Portal Version V15, you can integrate a corresponding module using HSP0256. You can find the Hardware Support Packages (HSP) for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/72341852). You can also access this download from the menu bar of STEP 7 (TIA Portal): "Options > Support packages > Download from the Internet".
4.1.2
Reaction to CPU STOP
You set the reaction of the technology module to a STOP of the CPU on a channel-bychannel basis in the basic parameters of the device configuration.
Table 4- 1 Reaction of technology module to CPU STOP
Option Continue operation Output substitute value
Keep last value
Meaning
The technology module remains fully functional. Incoming count pulses are processed. The digital outputs continue to switch according to the parameter assignment.
The technology module outputs the configured substitute values at the digital outputs until the next CPU STOP-RUN transition.
The technology module is returned to its startup state after a STOP-RUN transition: The counter value is set to the start value and the digital outputs switch according to the parameter assignment.
The technology module outputs the values at the digital outputs that were valid when the transition to STOP took place until the next CPU STOP-RUN transition.
If a digital output with the "At comparison value for a pulse duration" function is set at CPU STOP, the digital output is reset after the pulse duration elapses.
The technology module is returned to its startup state after a STOP-RUN transition: The counter value is set to the start value and the digital outputs switch according to the parameter assignment.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
24
Manual, 06/2018, A5E31870371-AB
4.1.3
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
Parameter setting
You specify the properties of the technology module using various parameters. Depending on the settings, not all parameters are available. When parameters are assigned in the user program, the parameters are transferred to the module with the "WRREC" instruction and data record 128 (Page 71).
You set the parameters of the module as follows in this operating mode:
1. Insert the module from the hardware catalog under "Technology modules".
2. Set the device configuration in the hardware configuration. "Operating with "Counting and measurement" technology object" must be set as the operating mode.
3. Insert the High_Speed_Counter technology object from the project tree in folder "Technology objects > Add new object > Counting and measurement". You can find information on configuring with a technology object in function manual Counting, measurement and position detection (http://support.automation.siemens.com/WW/view/en/59709820).
4. Open the configuration of the High_Speed_Counter technology object, e.g. using the Configuration button in the instruction for the technology object.
5. Set the parameters of the technology object.
6. Download the project to the CPU.
Note
The "Operating with "Counting and measurement" technology object" and "Manual operation (without technology object)" operating modes apply to one channel in each case. As a result, you can also use a module with both operating modes.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
25
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
Parameters of the TM Count 2x24V
The following parameter settings are possible in the hardware configuration:
Table 4- 2 Settable parameters and their default setting
Parameter
Value range
Reaction to CPU STOP
· Output substitute value
· Keep last value
· Continue operation
Enable diagnostic interrupt · Deactivated
on wire break
· Activated
Enable additional diagnos- · Deactivated
tic interrupts
· Activated
Hardware interrupt: New Capture value available
· Deactivated · Activated
Hardware interrupt: Syn- · Deactivated
chronization of the counter by an external signal
·
Activated
Hardware interrupt: Gate start
· Deactivated · Activated
Hardware interrupt: Gate stop
· Deactivated · Activated
Hardware interrupt: Overflow (high counting limit violated)
Hardware interrupt:Underflow (low counting limit violated)
Hardware interrupt: Direction reversal
· Deactivated · Activated
· Deactivated · Activated
· Deactivated · Activated
Hardware interrupt: Zero crossing
· Deactivated · Activated
Hardware interrupt: Comparison event for DQ0 occurred
Hardware interrupt: Comparison event for DQ1 occurred
· Deactivated · Activated
· Deactivated · Activated
Default setting
Output substitute value
Parameter reassignment in
RUN
Yes
Scope HSP for STEP 7
(TIA Portal)
Channel
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Channel Channel Channel Channel
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Channel Channel Channel
Deactivated
Yes
Channel
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Channel Channel Channel
Deactivated
Yes
Channel
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
26
Manual, 06/2018, A5E31870371-AB
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
The following parameter settings are possible in the technology object:
Table 4- 3 Settable parameters and their default setting
Parameter
Value range
Default setting
Signal type
· Pulse (A) · Pulse (A) and direction (B)
Pulse (A) and direction (B)
· Count up (A), count down (B) · Incremental encoder (A, B phase-
shifted) · Incremental encoder (A, B, N)
Signal evaluation for counter inputs
· Single · Double
Single
· Quadruple
Invert direction (counter inputs)
· Deactivated · Activated
Deactivated
Filter frequency for counter inputs
· 100 Hz · 200 Hz · 500 Hz
200 kHz
· 1 kHz
· 2 kHz · 5 kHz
· 10 kHz
· 20 kHz · 50 kHz
· 100 kHz
· 200 kHz
Sensor type
· Sourcing output
Sourcing output
· Sinking output
· Push-pull (sinking and sourcing output)
Reaction to signal N
· No reaction to signal N · Synchronization at signal N · Capture at signal N
No reaction to signal N
Frequency of synchronization
· Once · Periodic
Once
Frequency of Capture func- · Once
tion
· Periodic
Once
Parameter reassignment in
RUN
Yes
Scope HSP for STEP 7
(TIA Portal)
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
27
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
Parameter
Value range
Counting high limit Start value Counting low limit Reaction to violation of a counting limit
-2147483648...2147483647 -2147483648...2147483647 -2147483648...2147483647 · Stop counting · Continue counting
Reset when counting limit is violated
· To opposite counting limit · To start value
Reaction to gate start
· Set to start value · Continue with current value
Set function of DI
· Gate start/stop (level-triggered)
· Gate start (edge-triggered)
· Gate stop (edge-triggered)
· Synchronization
· Enable synchronization at signal N
· Capture
· Digital input without function
Input delay for digital inputs · None
· 0.05 ms
· 0.1 ms · 0.4 ms
· 0.8 ms
· 1.6 ms · 3.2 ms
· 12.8 ms
· 20 ms
Edge selection for DI
· At rising edge
· At falling edge
· At rising and falling edge
Select level for DI
· Active with high level · Active with low level
Behavior of counter value after Capture with DI
· Continue counting
· Set to start value and continue counting
Comparison value 0 Comparison value 1
-2147483648...2147483647 -2147483648...2147483647
Default setting
Parameter reassignment in
RUN
2147483647
Yes
0
Yes
-2147483648
Yes
Continue counting Yes
Scope HSP for STEP 7
(TIA Portal)
Channel Channel Channel Channel
To opposite
Yes
counting limit
Continue with
Yes
current value
· DI0: Gate
Yes
start/stop (lev-
el-triggered)
· DI1: Digital input without function
· DI2: Digital input without function
0.1 ms
Yes
Channel Channel Channel
Channel
At rising edge
Yes
Channel
Active with high Yes level
Continue counting Yes
0
Yes
10
Yes
Channel Channel
Channel Channel
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
28
Manual, 06/2018, A5E31870371-AB
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
Parameter Operating mode
Value range
Default setting
· Use count value as reference
Use count value
· Use measured value as reference as reference
Parameter reassignment in
RUN
No
Scope HSP for STEP 7
(TIA Portal)
Channel
Set output
· Use by user program
· Between comparison value and high limit / measured value >= comparison value
DQ0, DQ1:
Yes
Between comparison value and high limit
Channel
· Between comparison value and low limit / measured value <= comparison value
· At comparison value for a pulse duration
· After set command from CPU until comparison value
· Between comparison value 0 and 1
· Not between comparison value 0 and 1
Count direction of DQ func- · Up
tion
· Down
· In both directions
In both directions Yes
Channel
Pulse duration [ms/10] Substitute value for DQ0
0...65535 · 0
5000 (corre-
Yes
sponds to 0.5 s)
0
Yes
Channel Channel
· 1
Substitute value for DQ1 · 0
0
Yes
Channel
· 1
Hysteresis (in increments) Measured variable
0...255 · Frequency · Period
0
Yes
Channel
Frequency
Yes
Channel
· Velocity
Update time [ms] of measuring function
Time base for velocity measurement
0...25000
· 1 ms · 10 ms
10
Yes
Channel
60 s
Yes
Channel
· 100 ms · 1s
· 60 s
Increments per unit
1...65535
1
Yes
Channel
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
29
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
Explanation of parameters
You can find a detailed description of the parameters in function manual Counting, Measurement and Position Detection in sections Basic parameters and Configuring the High_Speed_Counter available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820).
4.1.4
Address space
Address space of the technology module
Table 4- 4 Size of input and output addresses of the TM Count 2x24V when operating with "Counting and measurement" technology object
Size per counting channel Total size
Inputs 16 bytes 32 bytes
Outputs 12 bytes 24 bytes
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
30
Manual, 06/2018, A5E31870371-AB
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
4.1.5
Isochronous mode
The technology module supports the "Isochronous mode" system function. This system function enables counter values and measured values to be acquired in a defined system cycle.
In isochronous mode, the cycle of the user program, the transmission of the input signals and processing in the technology module are synchronized. The output signals switch immediately if the relevant comparison condition is met. A status change of a digital input immediately triggers the specified reaction of the technology module and the change of the status bit of the digital input in the feedback interface.
Use an OB of type "Synchronous Cycle" (e.g. OB61) in this operating mode. The High_Speed_Counter instruction is called in the assigned OB.
The update time for the measured value is synchronized with the system cycle in a suitable ratio and, if necessary, adapted in length. If you set "0", the measured value is updated once per system cycle.
Data processing
The data that was transmitted to the technology module in the current bus cycle via the control interface takes effect when it is processed in the internal technology module cycle. At the time the input data is read in (Ti), the counter value and the measured value as well as status bits are acquired and made available in the feedback interface for retrieval in the current bus cycle.
Isochronous mode parameters
In isochronous mode, the "Filter frequency" parameter can affect the isochronous mode parameters of the sync domain.
Because the isochronous mode parameters are not checked in RUN, overflows can occur if you change the parameters in RUN. To prevent overflows, select the option with the largest time required in the offline parameter assignment.
Additional information
You can find a detailed description of isochronous mode in the following:
Function manual Isochronous Mode (STEP 7 (TIA Portal) V15.1 or higher) available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109755401)
Function manual PROFINET with STEP 7 available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/49948856)
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
31
Configuring/address space 4.2 Position input for "Motion Control" technology object
4.2
Position input for "Motion Control" technology object
4.2.1
Configuring
Introduction
You configure the technology module and assign its parameters with STEP 7 (TIA Portal). The technology object is used to control and monitor the functions of the technology module.
System environment
The technology module can be used in the following system environments:
Applications
Components required
Central operation
· S7-1500 automation system
with an S7-1500 CPU · TM Count 2x24V
Distributed operation · with an S7-1500 CPU ·
S7-1500 automation system
ET 200MP distributed I/O system
· TM Count 2x24V
Configuration software STEP 7 (TIA Portal):
· Device configuration with hardware configuration
· Parameter setting with axis and measuring input technology objects
In the user program Motion Control instructions
Additional information
You can find a detailed description of the use of Motion Control and its configuration in the following: Function manual S7-1500 Motion Control available for download on the Internet
(https://support.industry.siemens.com/cs/ww/en/view/59381279) Function manual S7-1500T Motion Control available for download on the Internet
(https://support.industry.siemens.com/cs/ww/en/view/109481326) Information system of STEP 7 (TIA Portal) under "Using technology functions > Motion
Control > Motion Control (S7-1200, S7-1500)" You can find a description of configuring the technology module for position detection in the following: Function manual Counting, Measurement and Position Detection available for download
on the Internet (http://support.automation.siemens.com/WW/view/en/59709820) Information system of STEP 7 (TIA Portal) under "Using technology functions > Counting,
measurement and position input > Counting, measurement and position input (S7-1500)"
Hardware Support Packages (HSP)
If firmware version V1.3 of the module is not yet integrated in your TIA Portal Version V15, you can integrate a corresponding module using HSP0256. You can find the Hardware Support Packages (HSP) for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/72341852). You can also access this download from the menu bar of STEP 7 (TIA Portal): "Options > Support packages > Download from the Internet".
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
32
Manual, 06/2018, A5E31870371-AB
4.2.2
Configuring/address space 4.2 Position input for "Motion Control" technology object
Parameter setting
You specify the properties of the technology module using various parameters. Depending on the settings, not all parameters are available. You set the parameters of the module as follows in this operating mode: 1. Insert the module from the hardware catalog under "Technology modules". 2. Set the device configuration and the parameters of the module in the hardware
configuration. "Position input for "Motion Control" technology object" must be set as the operating mode. 3. Insert the axis technology object and, if necessary, the measuring input technology object from the project tree in folder "Technology objects > Add new object > Motion Control". You can find information on configuring with axis technology objects in function manual S7-1500T Motion Control (https://support.industry.siemens.com/cs/ww/en/view/109481326). 4. Open the configuration of the axis technology object, e.g. using the Configuration button
in the respective instruction for the technology object. 5. Set the parameters of the technology objects. 6. Download the project to the CPU.
Note This operating mode applies automatically to both channels of the technology module.
Parameters of the TM Count 2x24V
The following parameter settings are possible:
Table 4- 5 Settable parameters and their default setting
Parameter
Value range
Signal type
Invert direction (counter inputs) Signal evaluation for counter inputs
· Pulse (A) · Pulse (A) and direction (B) · Count up (A), count down (B) · Incremental encoder (A, B phase-
shifted) · Incremental encoder (A, B, N)
· Deactivated · Activated
· Single · Double · Quadruple
Default setting
Pulse (A) and direction (B)
Scope
HSP for STEP 7 (TIA Portal)
Channel
Deactivated Single
Channel Channel
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
33
Configuring/address space 4.2 Position input for "Motion Control" technology object
Parameter
Value range
Default setting
Filter frequency for counter inputs
Sensor type
Signal selection for reference mark 0 Measuring input Increments per revolution / steps per revolution Reference speed Enable diagnostic interrupt on wire break Enable additional diagnostic interrupts
· 100 Hz
200 kHz
· 200 Hz
· 500 Hz
· 1 kHz
· 2 kHz
· 5 kHz
· 10 kHz
· 20 kHz
· 50 kHz
· 100 kHz
· 200 kHz
· Sourcing output
Sourcing output
· Sinking output
· Push-pull (sinking and sourcing output)
· DI0
DI0
· Signal N of incremental encoder
DI1
DI1
1...65535
1
6.00...210000.00 U/min · Deactivated · Activated
· Deactivated · Activated
3000.00 U/min Deactivated
Deactivated
Scope HSP for STEP 7
(TIA Portal) Channel
Channel
Channel Channel Channel Channel Channel Channel
Explanation of parameters
You can find a detailed description of the parameters in function manual Counting, Measurement and Position Detection, section Module parameters (position input for Motion Control) available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820).
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
34
Manual, 06/2018, A5E31870371-AB
Configuring/address space 4.2 Position input for "Motion Control" technology object
4.2.3
Address space
Address space of the technology module
Table 4- 6 Size of input and output addresses of the TM Count 2x24V with position input for "Motion Control" technology object
Size per counting channel Total size
Inputs 16 bytes 32 bytes
Outputs 4 bytes 8 bytes
4.2.4
Isochronous mode
The technology module supports the "Isochronous mode" system function. Counter values can be acquired in a fixed system cycle with this system function.
In isochronous mode, the cycle of the user program, the transmission of the input signals and processing in the technology module are synchronized. A status change of a digital input immediately triggers the specified reaction of the technology module and the change of the status bit of the digital input in the feedback interface.
Use an OB of type "MC-Servo" in this operating mode. Isochronous mode is needed when using the output cam and cam track technology objects. When the measuring input technology is used in combination with hardware digital input DI1, isochronous mode is not needed.
Data processing
The data that was transmitted to the technology module in the current bus cycle via the control interface takes effect when it is processed in the internal technology module cycle. At the time the input data is read in (Ti), the counter value and the status bits are acquired and made available in the feedback interface for retrieval in the current bus cycle.
Isochronous mode parameters
In isochronous mode, the "Filter frequency" parameter can affect the isochronous mode parameters of the sync domain.
Because the isochronous mode parameters are not checked in RUN, overflows can occur if you change the parameters in RUN. To prevent overflows, select the option with the largest time required in the offline parameter assignment.
Additional information
You can find a detailed description of isochronous mode in the following:
Function manual Isochronous Mode (STEP 7 (TIA Portal) V15.1 or higher) available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109755401)
Function manual PROFINET with STEP 7 available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/49948856)
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
35
Configuring/address space 4.3 Manual operation (without technology object)
4.3
Manual operation (without technology object)
4.3.1
Configuring
Introduction
You configure the technology module and assign its parameters with the configuration software.
The functions of the technology module are controlled and checked by the user program via the control and feedback interface.
System environment
The technology module can be used in the following system environments:
Applications
Components required
Central operation
· S7-1500 automation system
with an S7-1500 CPU · TM Count 2x24V
Configuration software STEP 7 (TIA Portal):
· Device configuration and parameter setting with hardware configuration
In the user program
Direct access to control and feedback interface in the I/O data
Distributed operation · with an S7-1500 CPU ·
·
S7-1500 automation system ET 200MP distributed I/O system TM Count 2x24V
STEP 7 (TIA Portal):
· Device configuration and parameter setting with hardware configuration
Distributed operation · S7-300/400 or S7-1200 auto-
with an S7-300/400
mation system
CPU
· ET 200MP distributed I/O
system
· TM Count 2x24V
Distributed operation · with an S7-1200 CPU
·
S7-300/400 or S7-1200 automation system
ET 200MP distributed I/O system
STEP 7 (TIA Portal):
Device configuration and parameter setting with hardware configuration
STEP 7:
Device configuration and parameter setting with GSD file
STEP 7 (TIA Portal):
Device configuration and parameter setting with hardware configuration
· TM Count 2x24V
Distributed operation · Third-party automation system Third-party configuration soft-
in a third-party system
· ET 200MP distributed I/O system
ware:
Device configuration and parameter setting with GSD file
· TM Count 2x24V
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
36
Manual, 06/2018, A5E31870371-AB
Configuring/address space 4.3 Manual operation (without technology object)
Additional information
You can find a detailed description of the counting and measurement functions and their configuration in the following:
Function manual Counting, Measurement and Position Detection available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820)
Information system of STEP 7 (TIA Portal) under "Using technology functions > Counting, measurement and position input > Counting, measurement and position input (S7-1500)"
Hardware Support Packages (HSP)
If firmware version V1.3 of the module is not yet integrated in your TIA Portal Version V15, you can integrate a corresponding module using HSP0256.
You can find the Hardware Support Packages (HSP) for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/72341852).
You can also access this download from the menu bar of STEP 7 (TIA Portal): "Options > Support packages > Download from the Internet".
GSD file
You can find the respective GSD file for the ET 200SP distributed I/O system for download on the Internet:
GSD file for PROFINET IO (http://support.automation.siemens.com/WW/view/en/68189683)
GSD file for PROFIBUS DP (http://support.automation.siemens.com/WW/view/en/80206700)
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
37
Configuring/address space 4.3 Manual operation (without technology object)
4.3.2
Reaction to CPU STOP
You set the reaction of the technology module to a STOP of the CPU on a channel-bychannel basis in the basic parameters of the device configuration.
Table 4- 7 Reaction of technology module to CPU STOP
Option Continue operation Output substitute value
Keep last value
Meaning
The technology module remains fully functional. Incoming count pulses are processed. The digital outputs continue to switch according to the parameter assignment.
The technology module outputs the configured substitute values at the digital outputs until the next CPU STOP-RUN transition.
The technology module is returned to its startup state after a STOP-RUN transition: The counter value is set to the start value and the digital outputs switch according to the parameter assignment.
The technology module outputs the values at the digital outputs that were valid when the transition to STOP took place until the next CPU STOP-RUN transition.
If a digital output with the "At comparison value for a pulse duration" function is set at CPU STOP, the digital output is reset after the pulse duration elapses.
The technology module is returned to its startup state after a STOP-RUN transition: The counter value is set to the start value and the digital outputs switch according to the parameter assignment.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
38
Manual, 06/2018, A5E31870371-AB
Configuring/address space 4.3 Manual operation (without technology object)
4.3.3
Parameter setting
You specify the properties of the technology module using various parameters. Depending on the settings, not all parameters are available. When parameters are assigned in the user program, the parameters are transferred to the module with the "WRREC" instruction and data record 128 (Page 71).
You set the parameters of the module as follows in this operating mode:
Parameter setting using...
Basic procedure
Hardware configuration in STEP 7 1. Insert the module from the hardware catalog under "Technology modules".
(TIA Portal)
2. Set the device configuration and the parameters of the module in the hardware
configuration.
"Manual operation (without technology object)" must be set as the operating mode.
3. Download the project to the CPU.
Hardware configuration with GSD file for distributed operation on PROFINET IO
1. Install the current PROFINET GSD file. You will then find the module in the hardware catalog under "Other field devices > PROFINET IO > I/O".
2. Set the parameters in the hardware configuration. You can find information on the respective dependencies of the parameters in function manual Counting, Measurement and Position Detection (http://support.automation.siemens.com/WW/view/en/59709820).
3. Download the project to the CPU.
Hardware configuration with GSD file for distributed operation on PROFIBUS DP
1. Install the current PROFIBUS GSD file. You will then find the module in the hardware catalog under "Other field devices > PROFIBUS DP > I/O".
2. Set the parameters in the hardware configuration. You can find information on the respective dependencies of the parameters in function manual Counting, Measurement and Position Detection (http://support.automation.siemens.com/WW/view/en/59709820). The parameters marked with 1 in the following tables are not configurable in the PROFIBUS GSD file.
3. Download the project to the CPU. The parameters marked with 1 in the following tables are downloaded with their default setting.
4. If necessary, set the parameters marked with 1 in the user program using data record 128.
Note
The "Operating with "Counting and measurement" technology object" and "Manual operation (without technology object)" operating modes apply to one channel in each case. As a result, you can also use a module with both operating modes.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
39
Configuring/address space 4.3 Manual operation (without technology object)
Parameters of the TM Count 2x24V
The following parameter settings are possible:
Table 4- 8 Settable parameters and their default setting
Parameter
Value range
Operating mode3
· Counting · Measuring
Reaction to CPU STOP1
· Output substitute value · Keep last value · Continue operation
Substitute value for DQ01
· 0 · 1
Substitute value for DQ11
· 0 · 1
Enable diagnostic interrupt · Deactivated
on wire break2
· Activated
Enable additional diagnostic · Deactivated
interrupts
· Activated
Hardware interrupt: New Capture value available1
· Deactivated · Activated
Hardware interrupt: Synchronization of the counter by an external signal1
Hardware interrupt: Gate start1
· Deactivated · Activated
· Deactivated · Activated
Hardware interrupt: Gate stop1
· Deactivated · Activated
Hardware interrupt: Overflow (high counting limit violated)1
Hardware interrupt:Underflow (low counting limit violated)1
Hardware interrupt: Direction reversal1
· Deactivated · Activated
· Deactivated · Activated
· Deactivated · Activated
Hardware interrupt: Zero crossing1
· Deactivated · Activated
Default setting Counting
Parameter reassignment in
RUN
No
Scope
HSP for STEP 7 (TIA Portal); GSD file
Channel
Output substitute Yes value
Channel
0
Yes
0
Yes
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Channel Channel Channel Channel Channel Channel
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Channel Channel Channel
Deactivated
Yes
Channel
Deactivated
Yes
Deactivated
Yes
Channel Channel
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
40
Manual, 06/2018, A5E31870371-AB
Configuring/address space 4.3 Manual operation (without technology object)
Parameter
Hardware interrupt: Comparison event for DQ0 occurred1 Hardware interrupt: Comparison event for DQ1 occurred1 Signal type
Invert direction (counter inputs)1 Signal evaluation for counter inputs Filter frequency for counter inputs1
Sensor type
Reaction to signal N1
Frequency of synchronization1
Value range
· Deactivated · Activated
Default setting Deactivated
Parameter reassignment in
RUN
Yes
Scope
HSP for STEP 7 (TIA Portal); GSD file
Channel
· Deactivated · Activated
Deactivated
Yes
Channel
· Pulse (A) · Pulse (A) and direction (B) · Count up (A), count down (B) · Incremental encoder (A, B
phase-shifted) · Incremental encoder (A, B, N)
· Deactivated · Activated
· Single · Double · Quadruple
· 100 Hz · 200 Hz · 500 Hz · 1 kHz · 2 kHz · 5 kHz · 10 kHz · 20 kHz · 50 kHz · 100 kHz · 200 kHz
· Sourcing output · Sinking output · Push-pull (sinking and sourc-
ing output)
· No reaction to signal N · Synchronization at signal N · Capture at signal N
· Once · Periodic
Pulse (A) and direc- Yes tion (B)
Deactivated
Yes
Single
Yes
200 kHz
Yes
Sourcing output
Yes
No reaction to sig- Yes nal N
Once
Yes
Channel Channel Channel Channel
Channel Channel Channel
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
41
Configuring/address space 4.3 Manual operation (without technology object)
Parameter
Value range
Default setting
Parameter reassignment in
RUN
Frequency of Capture func- · Once
tion1
· Periodic
Once
Yes
High counting limit1 Start value1 Counting low limit1
Reaction to violation of a counting limit
-2147483648...2147483647 -2147483648...2147483647 -2147483648...2147483647 · Stop counting · Continue counting
2147483647
Yes
0
Yes
-2147483648
Yes
Continue counting Yes
Reset when counting limit is · To opposite counting limit
violated
· To start value
To opposite count- Yes ing limit
Reaction to gate start
· Set to start value · Continue with current value
Continue with cur- Yes rent value
Set function of DI
· Gate start/stop (leveltriggered)
· Gate start (edge-triggered) · Gate stop (edge-triggered) · Synchronization · Enable synchronization at
signal N · Capture · Digital input without function
· DI0: Gate
Yes
start/stop (level-
triggered)
· DI1: Digital input without function
· DI2: Digital input without function
Select level for DI1
· Active with high level · Active with low level
Active with high
Yes
level
Edge selection for DI1
· At rising edge
At rising edge
Yes
· At falling edge
· At rising and falling edge
Behavior of counter value after Capture with DI 1
· Continue counting
Continue counting Yes
· Set to start value and continue counting
Scope HSP for STEP 7
(TIA Portal); GSD file
Channel Channel Channel Channel Channel Channel Channel Channel
Channel Channel
Channel
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
42
Manual, 06/2018, A5E31870371-AB
Configuring/address space 4.3 Manual operation (without technology object)
Parameter
Value range
Default setting
Input delay for digital inputs1 · · · · · · · · ·
None 0.05 ms 0.1 ms 0.4 ms 0.8 ms 1.6 ms 3.2 ms 12.8 ms 20 ms
0.1 ms
Set output
· Use by user program
· Between comparison value and high limit / measured value >= comparison value
DQ0, DQ1:
Between comparison value and high limit
· Between comparison value and low limit / measured value <= comparison value
· At comparison value for a pulse duration
· After set command from CPU until comparison value
· Between comparison value 0 and 1
· Not between comparison value 0 and 1
Comparison value 01
Comparison value 11
Count direction of DQ function1
-2147483648...2147483647 -2147483648...2147483647 · Up · Down · In both directions
0 10 In both directions
Pulse duration [ms/10]1
0...65535
Hysteresis (in increments)1 Measured variable
0...255 · Frequency · Period · Velocity
5000 (corresponds to 0.5 s)
0
Frequency
Update time [ms] of the
0...25000
10
measuring function1
Parameter reassignment in
RUN Yes
Yes
Yes Yes Yes Yes Yes Yes Yes
Scope HSP for STEP 7
(TIA Portal); GSD file
Channel
Channel
Channel Channel Channel Channel Channel Channel Channel
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
43
Configuring/address space 4.3 Manual operation (without technology object)
Parameter
Value range
Time base for velocity measurement1
Increments per unit1
· 1 ms · 10 ms · 100 ms · 1s · 60 s 1...65535
Default setting 60 s
Parameter reassignment in
RUN
Yes
Scope
HSP for STEP 7 (TIA Portal); GSD file
Channel
1
Yes
Channel
1 Because the number of parameters is limited to a maximum of 244 bytes per station in the PROFIBUS GSD configuration, the possible parameter assignments are limited. The parameters are preassigned default settings in the module. If your PROFIBUS master supports the "Write/read data record" function, you can set these parameters using data record 128.
2 When a GSD file is used, this diagnostic interrupt is enabled with the "Enable additional diagnostic interrupts" parameter and is then not separately configurable.
3 When configuring with a GSD file, you determine the operating mode when you select the module name.
Explanation of parameters
You can find a detailed description of the parameters in function manual Counting, Measurement and Position Detection, sections Basic parameters and Manual operation available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820).
4.3.4
Address space
Address space of the technology module
Table 4- 9 Size of input and output addresses of the TM Count 2x24V with manual operation
Size per counting channel Total size
Inputs 16 bytes 32 bytes
Outputs 12 bytes 24 bytes
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
44
Manual, 06/2018, A5E31870371-AB
4.3.5
Configuring/address space 4.3 Manual operation (without technology object)
Control and feedback interface
Note The control and feedback interface is compatible with the control and feedback interface of the TM Count 1x24V, TM PosInput 2 and TM PosInput 1 technology modules of the S7-1500 automation system.
4.3.5.1
Assignment of the control interface
The user program uses the control interface to influence the behavior of the technology module.
Control interface per channel
The following table shows the assignment of the control interface:
Byte offset from start address Channel
0/1
0 12 ... ... 3 15
Bit 7
4 16 ... ... 7 19
8 20
9 21
EN_
CAPTURE
10 22 SET_DIR
11 23
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
SLOT_0:
DINT or REAL: Load value (meaning of the value is specified in LD_SLOT_0)
Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
SLOT_1:
DINT or REAL: Load value (meaning of the value is specified in LD_SLOT_1)
Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
LD_SLOT_1
LD_SLOT_0
EN_
EN_
SET_DQ1 SET_DQ0
TM_
TM_
SYNC_DN SYNC_UP
CTRL_DQ1 CTRL_DQ0
Reserved
RES_ EVENT
Reserved
SW_GATE
RES_ ERROR
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
45
Configuring/address space 4.3 Manual operation (without technology object)
Explanations
Control bit/value EN_CAPTURE EN_SYNC_DN EN_SYNC_UP LD_SLOT_m
RES_EVENT RES_ERROR Reserved SET_DIR SET_DQ0 SET_DQ1
Explanations Use this bit to enable the Capture function. Resetting this bit resets a set EVENT_CAP in the feedback interface. Use this bit to enable the synchronization of the counter when counting in downward direction with an incremental encoder or pulse encoder. Resetting this bit resets a set EVENT_SYNC in the feedback interface. Use this bit to enable the synchronization of the counter when counting in upward direction with an incremental encoder or pulse encoder. Resetting this bit resets a set EVENT_SYNC in the feedback interface. Use this load request to specify the meaning of the value in SLOT_m:
· 0000 means: No action, idle
· 0001 means: Load counter value
· 0010 not permitted
· 0011 means: Load start value
· 0100 means: Load comparison value 0
· 0101 means: Load comparison value 1
· 0110 means: Load counting low limit
· 0111 means: Load counting high limit
· 1000 to 1111 not permitted The technology module executes the respective action as soon as LD_SLOT_m changes. If values are loaded simultaneously using LD_SLOT_0 and LD_SLOT_1, the value from SLOT_0 is internally applied first and then the value from SLOT_1 . This can produce unexpected intermediate states. Use this bit to trigger the reset of the saved events in the EVENT_ZERO, EVENT_OFLW, EVENT_UFLW, EVENT_CMP0, EVENT_CMP1 feedback bits. Use this bit to trigger the reset of the saved error states LD_ERROR and ENC_ERROR . Reserve bits must be set to 0. Use this bit to specify the count direction for signal type "Pulse (A)".
· 0 means: Up
· 1 means: Down
Use this bit to set digital output DQ0 when TM_CTRL_DQ0 is set to 0. In the case of the function "After set command from CPU until comparison value", SET_DQ0 is effective regardless of TM_CTRL_DQ0 as long as the counter value is not equal to the comparison value. Use this bit to set digital output DQ1 when TM_CTRL_DQ1 is set to 0. In the case of the function "After set command from CPU until comparison value", SET_DQ1 is effective regardless of TM_CTRL_DQ1 as long as the counter value is not equal to the comparison value.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
46
Manual, 06/2018, A5E31870371-AB
Control bit/value SW_GATE
TM_CTRL_DQ0 TM_CTRL_DQ1
Configuring/address space 4.3 Manual operation (without technology object)
Explanations Use this bit to open and close the software gate when using an incremental encoder or pulse encoder. Together, the software gate and the hardware gate form the internal gate. The technology module only counts when the internal gate is open. · 0 means: Software gate closed · 1 means: Software gate open The digital inputs of the technology module externally control the hardware gate. The hardware gate can be activated by parameter assignment. The software gate cannot be deactivated. Use this bit to enable the technological function of digital output DQ0. · 0 means: SET_DQ0 defines the state of DQ0 · 1 means: assigned function defines the state of DQ0 Use this bit to enable the technological function of digital output DQ1. · 0 means: SET_DQ1 defines the state of DQ1 · 1 means: assigned function defines the state of DQ1
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
47
Configuring/address space 4.3 Manual operation (without technology object)
4.3.5.2
Assignment of the feedback interface
The user program receives current values and status information from the technology module by means of the feedback interface.
Feedback interface per channel
The following table shows the assignment of the feedback interface:
Byte offset from start address Channel
0/1
0 16 ... ... 3 19
4 20 ... ... 7 23
8 24 ... ... 11 27
12 28
13 29
Bit 7
Bit 6
Reserved
14 30 STS_DI2
15 31 STS_M_ INTERVAL
STS_DI1
EVENT_ CAP
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
COUNT_VALUE: DINT: Current counter value
CAPTURED_VALUE: DINT: The last acquired Capture value
MEASURED_VALUE: REAL: Current measured value
Reserved
STS_ SW_GATE
STS_DI0 EVENT_
SYNC
STS_ READY
STS_DQ1 EVENT_
CMP1
LD_STS_ SLOT_1
STS_DQ0 EVENT_
CMP0
LD_ERROR
LD_STS _SLOT_0
STS_GATE EVENT_ OFLW
ENC_ ERROR
RES _EVENT
_ACK
STS_CNT
EVENT_ UFLW
Bit 0
POWER_ ERROR Reserved STS_DIR EVENT_ ZERO
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
48
Manual, 06/2018, A5E31870371-AB
Configuring/address space 4.3 Manual operation (without technology object)
Explanations
Feedback bit/value Explanations CAPTURED_VALUE This DINT value indicates the last acquired Capture value.
The following external signals can trigger the Capture function:
· Rising or falling edge of a digital input
· Both edges of a digital input
The "Frequency of Capture function" parameter specifies whether the function is executed at each configured edge or only once after each enable.
COUNT_VALUE
This DINT value indicates the current counter value.
ENC_ERROR
This bit indicates that one of the following errors has occurred at the encoder signals (retentive) for the respective technology module:
· Wire break of digital input A, B or N (with push-pull encoder)
· Invalid transition of A/B signals (with incremental encoder)
If you have enabled the diagnostic interrupts, the respective diagnostic interrupt is triggered in the event of encoder signal errors. For information on the meaning of the diagnostic interrupts, refer to the manual for the respective technology module.
The bit is reset once you have acknowledged the error with RES_ERROR .
EVENT_CAP
This bit indicates that a Capture event has occurred and a counter value has been saved in CAPTURED_VALUE . You reset the status by resetting EN_CAPTURE .
EVENT_CMP0
This bit indicates the saved status that a comparison event (status change) has occurred for the digital output DQ0 based on the selected comparison condition. You reset the status by acknowledgment with RES_EVENT.
If the counter value is set to the start value in counting mode, EVENT_CMP0 is not set.
EVENT_CMP1
This bit indicates the saved status that a comparison event (status change) has occurred for the digital output DQ1 based on the selected comparison condition. You reset the status by acknowledgment with RES_EVENT.
If the counter value is set to the start value in counting mode, EVENT_CMP1 is not set.
EVENT_OFLW
This bit indicates the saved status that the counter value had an overflow. You reset the status by acknowledgment with RES_EVENT.
EVENT_SYNC
When an incremental or pulse encoder is used, this bit indicates the saved status that the counter was loaded with the start value by an external reference signal (synchronization). You reset the status by resetting EN_SYNC_UP or EN_SYNC_DN .
EVENT_UFLW
This bit indicates the saved status that the counter value had an underflow. You reset the status by acknowledgment with RES_EVENT.
EVENT_ZERO
This bit indicates the saved status that the counter value or position value had a zero crossing. You reset the status by acknowledgment with RES_EVENT.
When the "Zero crossing" hardware interrupt is enabled, for system-related reasons it can also be triggered if "0" is outside the configured value range.
LD_ERROR
This bit indicates that an error occurred (latching) during loading via the control interface. The loaded values were not applied. When using an incremental or pulse encoder, one of the following conditions is not fulfilled:
· Low counting limit <= counter value <= high counting limit
· Low counting limit <= start value <= high counting limit
· Low counting limit <= comparison value 0/1 <= high counting limit The bit is reset once you have acknowledged the error with RES_ERROR .
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
49
Configuring/address space 4.3 Manual operation (without technology object)
Feedback bit/value Explanations
LD_STS_SLOT_0
This bit indicates by a status change (toggling) that the load request for SLOT_0 (LD_SLOT_0) was detected and performed.
LD_STS_SLOT_1
This bit indicates by a status change (toggling) that the load request for SLOT_1 (LD_SLOT_1) was detected and performed.
MEASURED_VALUE This value indicates the current measured value with data type REAL:
· Frequency: The mean frequency is calculated from the time profile of the count pulses or position value changes in one measurement interval and returned as a floating-point number in the unit of hertz.
· Period: The mean period is calculated from the time profile of the count pulses or position value changes in one measurement interval and returned as a floating-point number in the unit of seconds.
POWER_ERROR
RES_EVENT_ACK Reserved STS_CNT STS_DI0 STS_DI1 STS_DI2 STS_DIR
· Velocity: The mean velocity is calculated from the time profile of the count pulses or position value changes in one measurement interval and returned as a floating-point number in the configured unit.
The measured values are returned as a signed value. The sign indicates whether the counter value went up or down in the relevant time interval.
The update time is asynchronous to the opening of the internal gate, i.e. the update time is not started when the gate opens. After the internal gate closes, the last calculated measured value continues to be returned.
This bit indicates that supply voltage L+ is not present or is too low or the front connector is not inserted. If you have enabled the diagnostic interrupts (Page 56), the diagnostics interrupt "Supply voltage missing" is triggered at a supply voltage error.
When supply voltage L+ is available at a sufficient level once again, POWER_ERROR is automatically set to 0.
This bit indicates that the reset of event bit EVENT_SYNC, EVENT_CMP0, EVENT_CMP1, EVENT_OFLW, EVENT_UFLW, EVENT_ZERO is active.
Reserved bits are set to 0.
This bit indicates that at least one count pulse or a position value change has occurred in the last ca. 0.5 s.
This bit indicates the status of digital input DI0.
This bit indicates the status of digital input DI1.
This bit indicates the status of digital input DI2.
This bit indicates the count direction of the last count pulse or the direction of the last position value change.
· 0 means: Down · 1 means: Up
STS_DQ0 STS_DQ1 STS_GATE
This bit indicates the status of digital output DQ0. This bit indicates the status of digital output DQ1. This bit indicates the status of the internal gate when using an incremental or pulse encoder.
· 0 means: Gate closed
· 1 means: Gate open
STS_M_INTERVAL This bit indicates that at least one count pulse or a position value change was detected in the previous measurement interval.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
50
Manual, 06/2018, A5E31870371-AB
Configuring/address space 4.3 Manual operation (without technology object)
Feedback bit/value STS_READY
STS_SW_GATE
Explanations This bit indicates that the technology module supplies valid user data. The technology module has been started up and configured. This bit indicates the status of the software gate.
· 0 means: Gate closed · 1 means: Gate open
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
51
Configuring/address space 4.3 Manual operation (without technology object)
4.3.6
Isochronous mode
The technology module supports the "Isochronous mode" system function. This system function enables counter values and measured values to be acquired in a defined system cycle.
In isochronous mode, the cycle of the user program, the transmission of the input signals and processing in the technology module are synchronized. The output signals switch immediately if the relevant comparison condition is met. A status change of a digital input immediately triggers the specified reaction of the technology module and the change of the status bit of the digital input in the feedback interface.
Use an OB of type "Synchronous Cycle" (e.g. OB61) in this operating mode. The input and output data are processed in the assigned OB.
The update time for the measured value is synchronized with the system cycle in a suitable ratio and, if necessary, adapted in length. If you set "0", the measured value is updated once per system cycle.
Data processing
The data that was transmitted to the technology module in the current bus cycle via the control interface takes effect when it is processed in the internal technology module cycle. At the time the input data is read in (Ti), the counter value and the measured value as well as status bits are acquired and made available in the feedback interface for retrieval in the current bus cycle.
Isochronous mode parameters
In isochronous mode, the "Filter frequency" parameter can affect the isochronous mode parameters of the sync domain.
Because the isochronous mode parameters are not checked in RUN, overflows can occur if you change the parameters in RUN. To prevent overflows, select the option with the largest time required in the offline parameter assignment.
Additional information
You can find a detailed description of isochronous mode in the following:
Function manual Isochronous Mode (STEP 7 (TIA Portal) V15.1 or higher) available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109755401)
Function manual PROFINET with STEP 7 available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/49948856)
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
52
Manual, 06/2018, A5E31870371-AB
Interrupts/diagnostic messages
5
5.1
LEDs
Status and error display
The following figure shows you the LED displays (status and error displays) of TM Count 2x24V.
Figure 5-1 LED displays of the TM Count 2x24V
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
53
Interrupts/diagnostic messages 5.1 Status and error display
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in section Diagnostic alarms (Page 56).
Table 5- 1 Status and error displays RUN/ERROR/MAINT
RUN Off
Flashes On On
Flashes
LEDs ERROR
Off
Off Off Flashes Flashes
MAINT Off
Off Off Off Flashes
Meaning
Remedy
Missing or insufficient voltage on the backplane bus
Switch on the CPU and/or the system power supply modules.
· Check whether the U connectors are plugged in correctly.
· Check whether too many modules are plugged in.
Technology module parameters not set ---
Technology module parameters set and no module diagnostics
Technology module parameters set and module diagnostics (at least one error is present)
Hardware or firmware defective
Evaluate the diagnostic alarms and eliminate the error.
Replace the technology module.
Table 5- 2 PWR/24VDC/ERROR status displays
PWR Off Off On On On
LEDs 24VDC
Off Off On Off Off
ERROR Off
Flashing1 Off Off
Flashing1
Meaning
Remedy
Supply voltage too low or missing
· Check the supply voltage.
· Make sure that the front connector is correctly inserted.
Supply voltage is present and OK
---
Short-circuit or overload at the encoder ·
supply
·
·
Correct the encoder wiring. Check the loads connected to the encoder supply. Check the supply voltage.
1 Only when diagnostic interrupts enabled
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
54
Manual, 06/2018, A5E31870371-AB
Interrupts/diagnostic messages 5.1 Status and error display
Channel LEDs
The CHn.A, CHn.B, CHn.N and DIn.m LEDs indicate the current level of the associated signals. The LEDs of the DQn.m digital outputs indicate the desired state.
The UP and DN LEDs indicate the logical counting direction.
The flashing frequency of the channel LEDs is limited to approximately 12 Hz. If higher frequencies are present, the channel LEDs will flash at 12 Hz instead of indicating the current status.
Table 5- 3 Status displays CHn.m/DIn.m/DQn.m
LEDs CHn.m/DIn.m/DQn.m
Off
On
On (CHn.m/DQn.m)
Meaning
Counter input/digital input/digital output at 0 level Counter input/digital input/digital output at 1 level Diagnostic alarm: e.g. wire break, short-circuit
Remedy ----Check the wiring or the connected load.
Table 5- 4 Status displays CHn.UP/CHn.DN
CHn.UP
LEDs
CHn.DN
Off
Off
On
Off
Off
On
On
On
Meaning
No count pulse has been detected for the last 0.5 s.
The last count pulse has incremented the counter and took place no more than 0.5 s ago. The last count pulse has decremented the counter and took place no more than 0.5 s ago. Invalid transition of A/B signals
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
55
Interrupts/diagnostic messages 5.2 Diagnostic alarms
5.2
Diagnostic alarms
Enabling of diagnostic interrupts
You enable the diagnostic interrupts in the device configuration with the basic parameters. The technology module can trigger the following diagnostic interrupts:
Table 5- 5 Possible diagnostic interrupts
Diagnostic interrupt · Parameter error · Hardware interrupt lost1 · Internal error · Watchdog tripped. Module is defective. · Wire break at digital input A, B or N
· Supply voltage missing · Short-circuit / overload at external encoder supply · Error at digital outputs · Supply voltage error2 · Invalid transition of A/B signals · Overtemperature
Monitoring Monitoring is always active. A diagnostic interrupt is triggered each time an error is detected.
Monitoring is active if a push-pull switching encoder has been configured. When an error is detected, a diagnostic interrupt is only triggered if "Enable diagnostic interrupt on wire break" is activated in the device configuration. Monitoring is always active. When an error is detected, a diagnostic interrupt is only triggered if "Enable additional diagnostic interrupts" is activated in the device configuration.
1 Not available in "Position input for "Motion Control"" technology object" operating mode
2 No longer available as of module version V1.3. This case is then taken into account by the diagnostic interrupt "Supply voltage missing".
Reactions to a diagnostic interrupt
The following happens when an event occurs that triggers a diagnostic interrupt:
The ERROR LED flashes red.
Once you have remedied the error, the ERROR LED goes out.
The S7-1500 CPU interrupts processing of the user program. The diagnostic interrupt OB (e.g. OB 82) is called. The event that triggered the interrupt is entered in the start information of the diagnostic interrupt OB.
The S7-1500 CPU remains in RUN even if no diagnostic interrupt OB is present in the CPU. The technology module continues working unchanged if this is possible despite the error.
You can obtain detailed information on the error event in the error organization block with instruction "RALRM" (Read additional alarm information), in the information system of STEP 7 and in function manual Diagnostics (https://support.industry.siemens.com/cs/ww/en/view/59192926), section "System diagnostics in user program".
If the module is operated as a distributed module with PROFIBUS DP in an ET 200MP system, you have the option of reading out diagnostic data with the RDREC or RD_REC instruction using data record 0 and 1. You can find the structure of the data records in the manual for the IM 155-5 DP ST interface module available for download on the Internet (https://support.industry.siemens.com/cs/ww/de/view/78324181).
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
56
Manual, 06/2018, A5E31870371-AB
Interrupts/diagnostic messages 5.2 Diagnostic alarms
Diagnostic alarms
The display of diagnostics is in plain text in STEP 7 (TIA Portal) in the online and diagnostics view. You can evaluate the error codes with the user program.
The following diagnostics can be signaled:
Table 5- 6 Diagnostic alarms, their meaning and remedies
Diagnostic alarm
Parameter error Hardware interrupt lost
Error code 10H
16H
Internal error
Watchdog tripped. Module is defective.
100H 103H
Supply voltage miss- 10AH ing
Short-circuit / overload at external encoder supply
10EH
Error at digital out- 10FH puts
Supply voltage error1
110H
Invalid transition of 500H A/B signals
Meaning
Remedy
The received parameter data record is invalid Check parameter data record
· Module cannot issue interrupt because a preceding interrupt has not yet been processed
· Change interrupt processing in the CPU and re-assign technology module parameters correspondingly
· Possible cause: Too many hardware inter- · Check frequency of interrupts from the
rupts in too short a time
process
Technology module defective Firmware error Technology module defective · Missing or insufficient supply voltage L+ · Wiring of supply voltage L+ faulty · Front connector not inserted correctly
Replace technology module Run firmware update Replace technology module · Check supply voltage L+ · Check wiring of supply voltage L+ · Insert front connector correctly
· Error at encoder supply · Possible causes:
Short circuit Overload
· Check encoder wiring
· Check consumers connected to encoder supply
· Error at the digital outputs (LED display DQn.m lit red)
· Possible causes: Short circuit Overload
· Check encoder wiring at the digital outputs
· Check consumers connected to the digital outputs
· Error at supply voltage L+ · Possible causes:
Low voltage Wiring of supply voltage L+ faulty
· Check supply voltage L+ · Check wiring of supply voltage L+
· Time profile of signals A and B of the incremental encoder does not meet certain requirements (relative phase shift of the two signals is too small)
· Possible causes: Signal frequency too high Encoder faulty Process wiring faulty
· Check process wiring · Check encoder/sensor · Check parameter assignment
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
57
Interrupts/diagnostic messages 5.2 Diagnostic alarms
Diagnostic alarm
Wire break at digital input A, B or N
Error code
505H
Overtemperature
506H
Meaning
Remedy
Channel not connected Resistance of encoder circuit too high
Interruption of the line between technology module and encoder Sensor used is sourcing output or sinking output only Possible causes: · Short-circuit or overload at the digital out-
puts or output of the encoder supply · Ambient temperature outside specifica-
tions · Contamination in the module prevents
cooling
Connect the channel · Use a different encoder type or modify
the wiring, for example, use shorter cables with larger cross-sections · Check encoders Check process wiring
Correct parameter assignment
· Check process wiring · Improve cooling · Check connected loads
1 No longer available as of module version V1.3. This case is then taken into account by the diagnostic interrupt "Supply voltage missing".
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
58
Manual, 06/2018, A5E31870371-AB
Interrupts/diagnostic messages 5.3 Hardware interrupts
5.3
Hardware interrupts
Introduction
For the technology module, you can configure which events are to trigger a hardware interrupt during operation.
What is a hardware interrupt?
The technology module will trigger a hardware interrupt as configured in response to specific events/states. When a hardware interrupt occurs, the CPU interrupts execution of the user program and processes the assigned hardware interrupt OB. The event that triggered the interrupt is entered in the start information of the assigned hardware interrupt OB by the CPU.
Lost hardware interrupt
If an event occurs that is to trigger a hardware interrupt and the preceding event has not yet been processed, another hardware interrupt cannot be triggered. The hardware interrupt is lost and the diagnostic interrupt "Lost hardware interrupt" is triggered.
Enabling of hardware interrupts
A hardware interrupt is triggered when the condition for the change of the respective status or event bit in the feedback interface is met. You enable the hardware interrupts in the device configuration with the basic parameters. You can configure hardware interrupts to be triggered for the following event types: Opening of internal gate (gate start) Closing of internal gate (gate stop) Overflow (high counting limit violated) Underflow (low counting limit violated) Comparison event for DQ0 has occurred Comparison event for DQ1 has occurred Zero crossing3 New Capture value available1 Synchronization of the counter by an external signal Direction reversal2 1 Only configurable in Counting mode 2 Feedback bit STS_DIR is preassigned with "0". If the first counter value change occurs in the downwards direction directly after switching on the technology module, no hardware interrupt is triggered.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
59
Interrupts/diagnostic messages 5.3 Hardware interrupts
3 When the "Zero crossing" hardware interrupt is enabled, for system-related reasons it can also be triggered if "0" is outside the configured value range. You can activate any combination of events to trigger hardware interrupts. You can obtain detailed information on the event in the hardware interrupt organization block with instruction "RALRM" (Read additional alarm information) and in the information system of STEP 7. Which channel of the module and which event has triggered the hardware interrupt is entered in the start information of the organization block. The following figure shows the assignment to the bits of the local data double word 8.
Figure 5-2 Start information of the organization block
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
60
Manual, 06/2018, A5E31870371-AB
Technical specifications
6
Article number General information
Product type designation Firmware version · FW update possible Product function · I&M data Engineering with · PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision Installation type/mounting
Rail mounting Supply voltage Load voltage L+
· Rated value (DC)
· permissible range, lower limit (DC)
· permissible range, upper limit (DC)
· Reverse polarity protection Input current
Current consumption, max. Encoder supply
Number of outputs 24 V encoder supply
· 24 V
· Short-circuit protection
· Output current, max. Power
Power available from the backplane bus Power loss
Power loss, typ. Address area Occupied address area
· Inputs
· Outputs
6ES7550-1AA00-0AB0 TM Count 2x24V V1.3 Yes
Yes; I&M0 to I&M3
GSD Revision 5 V2.3 / -
Yes; S7-1500 mounting rail
24 V 19.2 V 28.8 V Yes
75 mA; without load 1; A common 24V encoder supply for both channels Yes; L+ (-0.8 V) Yes 1 A; total current of all encoders/channels
1.3 W 4 W
16 byte; Per channel 12 byte; per channel; 4 bytes for Motion Control
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
61
Technical specifications
Article number Digital inputs
Number of digital inputs Digital inputs, parameterizable Input characteristic curve in accordance with IEC 61131, type 3 Digital input functions, parameterizable · Gate start/stop · Capture · Synchronization · Freely usable digital input Input voltage · Type of input voltage · Rated value (DC) · for signal "0" · for signal "1" · permissible voltage at input, min.
· permissible voltage at input, max. Input current
· for signal "1", typ. Input delay (for rated value of input voltage) for standard inputs
parameterizable at "0" to "1", min. at "1" to "0", min. for counter/technological functions parameterizable Cable length · shielded, max. · unshielded, max.
6ES7550-1AA00-0AB0
6; 3 per channel Yes Yes
Yes Yes Yes Yes
DC 24 V -5 ... +5 V +11 to +30V -30 V; -5 V continuous, -30 V brief reverse polarity protection 30 V
2.5 mA
Yes; none / 0.05 / 0.1 / 0.4 / 0.8 / 1.6 / 3.2 / 12.8 / 20 ms 6 µs; for parameterization "none" 6 µs; for parameterization "none"
Yes
1 000 m 600 m
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
62
Manual, 06/2018, A5E31870371-AB
Technical specifications
Article number Digital outputs
Type of digital output Number of digital outputs Digital outputs, parameterizable Short-circuit protection · Response threshold, typ. Limitation of inductive shutdown voltage to Controlling a digital input Digital output functions, parameterizable · Switching tripped by comparison values · Freely usable digital output Switching capacity of the outputs · with resistive load, max. · on lamp load, max. Load resistance range · lower limit · upper limit Output voltage · Type of output voltage · for signal "1", min. Output current · for signal "1" rated value · for signal "1" permissible range, max. · for signal "1" minimum load current · for signal "0" residual current, max. Output delay with resistive load · "0" to "1", max. · "1" to "0", max. Switching frequency · with resistive load, max. · with inductive load, max.
· on lamp load, max. Total current of the outputs
· Current per module, max. Cable length
· shielded, max. · unshielded, max.
6ES7550-1AA00-0AB0
Transistor 4; 2 per channel Yes Yes; electronic/thermal 1 A L+ (-33 V) Yes
Yes Yes
0.5 A; Per digital output 5 W
48 12 k
DC 23.2 V; L+ (-0.8 V)
0.5 A; Per digital output 0.6 A; Per digital output 2 mA 0.5 mA
50 µs 50 µs
10 kHz 0.5 Hz; Acc. to IEC 60947-5-1, DC-13; observe derating curve 10 Hz
2 A
1 000 m 600 m
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
63
Technical specifications
Article number Encoder Connectable encoders
· 2-wire sensor
6ES7550-1AA00-0AB0 Yes
permissible quiescent current (2-wire sensor), max.
1.5 mA
Encoder signals, incremental encoder (asymmetrical) · Input voltage
24 V
· Input frequency, max.
200 kHz
· Counting frequency, max.
800 kHz; with quadruple evaluation
· Cable length, shielded, max. · Signal filter, parameterizable
600 m; depending on input frequency, encoder and cable quality; max. 50 m at 200 kHz
Yes
· Incremental encoder with A/B tracks, 90° phase offset Yes
· Incremental encoder with A/B tracks, 90° phase offset Yes and zero track
· Pulse encoder
Yes
· Pulse encoder with direction
Yes
· Pulse encoder with one impulse signal per count
Yes
direction
Encoder signal 24 V permissible voltage at input, min.
-30 V
permissible voltage at input, max.
30 V
Interface types
· Source/sink input
Yes
· Input characteristic curve in accordance with IEC
Yes
61131, type 3
Isochronous mode Isochronous operation (application synchronized up to terminal) Filtering and processing time (TCI), min. Bus cycle time (TDP), min.
Yes
130 µs 250 µs
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
64
Manual, 06/2018, A5E31870371-AB
Technical specifications
Article number Interrupts/diagnostics/status information Alarms
· Diagnostic alarm · Hardware interrupt Diagnostic messages · Monitoring the supply voltage · Wire-break · Short-circuit · A/B transition error at incremental encoder Diagnostics indication LED · RUN LED · ERROR LED · MAINT LED · Monitoring of the supply voltage (PWR-LED) · Channel status display · for channel diagnostics · Status indicator backward counting (green) · Status indicator forward counting (green) Integrated Functions Number of counters Counting frequency (counter) max. Counting functions · Can be used with TO High_Speed_Counter · Continuous counting · Counter response parameterizable · Hardware gate via digital input · Software gate · Event-controlled stop · Synchronization via digital input · Counting range, parameterizable Comparator
Number of comparators Direction dependency Can be changed from user program
6ES7550-1AA00-0AB0
Yes Yes
Yes Yes Yes Yes
Yes; Green LED Yes; Red LED Yes; yellow LED Yes; Green LED Yes; Green LED Yes; Red LED Yes Yes
2 800 kHz; with quadruple evaluation
Yes Yes Yes Yes Yes Yes Yes Yes
2; Per channel Yes Yes
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
65
Technical specifications
Article number Position detection
· Incremental acquisition · Suitable for S7-1500 Motion Control Measuring functions · Measuring time, parameterizable · Dynamic measurement period adjustment · Number of thresholds, parameterizable Measuring range
Frequency measurement, min. Frequency measurement, max. Cycle duration measurement, min. Cycle duration measurement, max. Accuracy Frequency measurement
Cycle duration measurement
Velocity measurement
Potential separation Potential separation channels
· between the channels · between the channels and backplane bus · Between the channels and load voltage L+ Isolation Isolation tested with Ambient conditions Ambient temperature during operation · horizontal installation, min. · horizontal installation, max. · vertical installation, min. · vertical installation, max. Decentralized operation to SIMATIC S7-300 to SIMATIC S7-400 to SIMATIC S7-1200 to SIMATIC S7-1500 to standard PROFIBUS master to standard PROFINET controller
66
6ES7550-1AA00-0AB0
Yes Yes
Yes Yes 2
0.04 Hz 800 kHz 1.25 µs 25 s
100 ppm; depending on measuring interval and signal evaluation 100 ppm; depending on measuring interval and signal evaluation 100 ppm; depending on measuring interval and signal evaluation
No Yes No
707 V DC (type test)
0 °C 60 °C; Please note derating for inductive loads 0 °C 40 °C; Please note derating for inductive loads
Yes Yes Yes Yes Yes Yes
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0) Manual, 06/2018, A5E31870371-AB
Article number Dimensions
Width Height Depth Weights Weight, approx.
6ES7550-1AA00-0AB0
35 mm 147 mm 129 mm
250 g
Technical specifications
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
67
Technical specifications
Derating information for total current of outputs
If the digital outputs of the TM Count 2x24V are operated with inductive loads, you should derate the total current of the loads at the digital outputs of the technology module. The total current is the sum of the load currents at all digital outputs of the module (all channels, without encoder supply). The following derating curve shows the load capacity of the digital outputs depending on the ambient temperature and mounting position under the following conditions: Maximum switching frequency at digital outputs of 0.5 Hz Load resistance: 48 (IEC 947-5-1) Load inductance: 1150 mH (IEC 947-5-1)
Vertical installation of the system Horizontal installation of the system
Figure 6-1 Total current depending on ambient temperature and mounting position for inductive loads
Note If the switching frequency is greater than 0.5 Hz or there is greater inductance at the digital outputs, the total current must be reduced further.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
68
Manual, 06/2018, A5E31870371-AB
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the TM Count 2x24V technology module
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
69
Dimensional drawing
Figure A-2 Dimensional drawing of the TM Count 2x24V module, side view with open front panel
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
70
Manual, 06/2018, A5E31870371-AB
Parameter data record
B
B.1
Parameter assignment and structure of parameter data record
You have the option of reassigning module parameters with the user program while the CPU is in RUN. The parameters are transferred to the module using data record 128, e.g. with the WRREC instruction.
If an error occurs while transferring or validating parameters with the WRREC instruction, the module continues operating with the existing parameter assignment. A corresponding error code is then written to the STATUS output parameter. If no errors occur, the STATUS output parameter contains the length of the actually transferred data.
You can find a description of the WRREC instruction and the error codes in section Parameter validation error (Page 77) or in the online help of STEP 7 (TIA Portal).
Structure of data record 128 for operation with technology object and manual operation
The following table shows you the structure of data record 128 for TM Count 2x24V with 2 channels for operation with technology object and manual operation without technology object. The values in byte 0 to byte 3 are fixed and must not be changed. The value in byte 4 can only be changed by means of new parameter assignment and not in RUN mode.
Note
After each writing of data record 128, the module is set to its startup state and the counter value is set to the start value. If "Continue operation" is set for Reaction to CPU STOP, the module is then only set to its startup state when data record 128 has been changed.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
71
Parameter data record B.1 Parameter assignment and structure of parameter data record
Table B- 1 Data record 128: Operating modes "Operating with "Counting and measurement" technology object", "Manual operation (without technology object)"
Bit
Byte channel
0/1
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
0...3
Header
0
Major Version = 0
Minor Version = 2
1
Length of the parameter data per channel = 48
2
Reserved2
3
Reserved2
4...51
Counter channel 0
52...99
Counter channel 1
4/52
Operating mode
4/52 Reserved2
Operating mode:
0000B: Not permitted
0001B: Counting
0010B: Measuring
0011 to 1111B: Not permitted
5/53
Basic parameters
5/53 Reserved2
Enable additional diagnostic interrupts1
Reaction to CPU STOP:
00B: Output substitute value
01B: Keep last value
10B: Continue operation
11B: Not permitted
6...7/ 54...55
Counter inputs
6/54 Sensor type:
Signal evaluation:
Signal type:
00B: Sourcing output
00B: Single
0000B: Pulse (A)
01B: Sinking output
01B: Double
0001B: Pulse (A) and direction (B)
10B: Push-pull (sinking and sourcing output)
10B: Quadruple
0010B: Count up (A), count down (B)
11B: Not permitted
11B: Not permitted
0011B: Incremental encoder (A, B phase-shifted)
0100B: Incremental encoder (A, B, N)
0101 to 1111B: Not permitted
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
72
Manual, 06/2018, A5E31870371-AB
Parameter data record B.1 Parameter assignment and structure of parameter data record
Bit
Byte channel
0/1
Bit 7
Bit 6
7/55 Reaction to signal N:
00B: No reaction to signal N
01B: Synchronization at signal N
Bit 5
Bit 4
Bit 3
Bit 2
Invert direction1
Enable diagnostic interrupt on wire break1
Filter frequency3: 0000B: 100 Hz 0001B: 200 Hz 0010B: 500 Hz 0011B: 1 kHz
Bit 1
Bit 0
10B: Capture at signal N
0100B: 2 kHz
11B: Not permitted
0101B: 5 kHz
0110B: 10 kHz
0111B: 20 kHz
1000B: 50 kHz
1001B: 100 kHz
1010B: 200 kHz
8...9/ 56...57
1011 to 1111B: Not permitted Hardware interrupts1
8/56 Reserved2 Reserved2 Reserved2 Change of Underflow Overflow Gate stop
direction (low count- (high count-
ing limit
ing limit
violated) violated)
Gate start
9/57 Synchroni- New Capzation of the ture value counter by available an external signal
Reserved2
Zero cross- Reserved2 ing
Comparison event for DQ1 has occurred
Reserved2
Comparison event for DQ0 has occurred
10...15/ 58...63
Behavior of DQ0/1
10/58 Set output (DQ1):
Set output (DQ0):
0000B: Use by user program
0000B: Use by user program
0001B: Between comparison value and high limit; Measuring: Measured value >= comparison value
0001B: Between comparison value and high limit; Measuring: Measured value >= comparison value
0010B: Between comparison value and low limit; Measuring: Measured value <= comparison value
0010B: Between comparison value and low limit; Measuring: Measured value <= comparison value
0011B: At comparison value for a pulse duration
0011B: At comparison value for a pulse duration
0100B: Between comparison value 0 and 1
0100B: Not permitted
0101B: After set command from CPU until comparison 0101B: After set command from CPU until comparison
value
value
0110B: Not between comparison value 0 and 1
0110 to 1111B: Not permitted
0111 to 1111B: Not permitted
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
73
Parameter data record B.1 Parameter assignment and structure of parameter data record
Bit
Byte channel
0/1
Bit 7
Bit 6
11/59 Count direction (DQ1):
00B: Not permitted
01B: Up
Bit 5
Bit 4
Count direction (DQ0): 00B: Not permitted 01B: Up
Bit 3
Bit 2
Bit 1
Bit 0
Reserved2
Reserved2
Substitute value for DQ1
Substitute value for DQ0
10B: Down
10B: Down
11B: In both directions
11B: In both directions
12/60
Pulse duration (DQ0):
13/61
WORD: Value range in ms/10: 0 to 65535D
14/62
Pulse duration (DQ1):
15/63
WORD: Value range in ms/10: 0 to 65535D
16/64
Behavior of DI0
16/64
Behavior of counter value after Capture (DI0):
Edge selection (DI0): 00B: Not permitted4 01B: At rising edge 10B: At falling edge
Select level Reserved2 (DI0):
0B: Active with high level
Set function of DI (DI0): 000B: Gate start/stop (level-triggered) 001B: Gate start (edge-triggered) 010B: Gate stop (edge-triggered)
0B: Contin- 11B: At rising and falling ue counting edge
1B: Active with low level
011B: Synchronization 100B: Enable synchronization at signal N
1B: Set to start value and continue counting
101B: Capture 110B: Digital input without function 111B: Not permitted
17/65
Behavior of DI1:
See Byte 16
18/66
Behavior of DI2:
See Byte 16
19/67
Frequency of synchronization:
Reserved2
Frequency of Capture function:
Input delay: 0000B: None 0001B: 0.05 ms
0B: Once
0B: Once 0010B: 0.1 ms
0011B: 0.4 ms
1B: Periodic
1B: Periodic 0100B: 0.8 ms
0101B: 1.6 ms
0110B: 3.2 ms
0111B: 12.8 ms
1000B: 20 ms
1001 to 1111B: Not permitted
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
74
Manual, 06/2018, A5E31870371-AB
Parameter data record B.1 Parameter assignment and structure of parameter data record
Bit
Byte channel
0/1
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
20...43/ 68...91
Values
20...23/ 68...71
High counting limit: DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
24...27/ 72...75
Comparison value 0: Operating mode Counting: DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH;
Measuring operating mode: REAL: Floating-point number in the configured unit of the measured quantity
28...31/
Comparison value 1:
76...79 Operating mode Counting: DWORD: Value range: 2147483648 to 2147483647D: or 80000000 to 7FFFFFFFH;
Measuring operating mode: REAL: Floating-point number in the configured unit of the measured quantity
32...35/ 80...83
Start value: DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
36...39/ 84...87
Low counting limit: DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
40...43/ 88...91
Update time: DWORD: Value range in s: 0 to 25000000D
44/92
Counter behavior at limits and gate start
44/92 Reaction to gate start:
Reaction to violation of a counting limit: Reset when counting limit is violated:
00B: Set to start value
000B: Stop counting
000B: To opposite counting limit
01B: Continue with current 001B: Continue counting value
001B: To start value
10 to 11B: Not permitted 010 to 111B: Not permitted
010 to 111B: Not permitted
45/93
Specify measured value
45/93 Reserved2
Time base for velocity measurement: Measured variable:
000B: 1 ms
00B: Frequency
001B: 10 ms
01B: Period
010B: 100 ms
10B: Velocity
011B: 1 s
11B: Not permitted
100B: 60 s/1 min
101 to 111B: Not permitted
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
75
Parameter data record B.1 Parameter assignment and structure of parameter data record
Bit Byte channel 0/1
46/94 47/95 48/96
49...51/ 97...99
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Increments per unit: WORD: Value range: 1 to 65535D
Set hysteresis range: Value range: 0 to 255D
Reserved2
Bit 1
Bit 0
1 You activate the respective parameter by setting the associated bit to 1.
2 Reserved bits must be set to 0.
3 In isochronous mode, the parameter can affect the isochronous mode parameters of the sync domain. Because the isochronous mode parameters are not checked in RUN, overflows can occur if you change the parameter in RUN. To prevent overflows, select the option with the largest time required in the offline parameter assignment.
4 Applies to: Set function of DI = 001B; 010B; 011B; 101B
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
76
Manual, 06/2018, A5E31870371-AB
Parameter data record B.2 Parameter validation error
B.2
WRREC
Parameter validation error
If you make the parameter settings in STEP 7 (TIA Portal) or in STEP 7 , the parameter values are checked before they are transferred to the technology module. This process prevents parameter errors.
In other use cases, the technology module checks the transferred parameter data record. If the technology module finds invalid or inconsistent parameter values, it outputs an error code (see below). The new parameter data record is rejected in this case, and work continues with the current parameter values until a valid parameter data record has been transferred.
When the CPU is in RUN, you can change the parameter data record with the instruction WRREC (Write Record). In case of errors, the WRREC instruction returns corresponding error codes in the STATUS parameter.
Example:
Let us assume that an invalid value, for example 9, is written to the module for the operating mode with WRREC. As a consequence, the module rejects the entire parameter data record. You can recognize this by evaluating the STATUS output parameter of the WRREC instruction. The STATUS output parameter is output as an ARRAY[1..4] of BYTE data with the value 16#DF80E111:
Example of WRREC STATUS data DFH 80H
E1H 11H
Address
Meaning
STATUS[1] STATUS[2]
STATUS[3] STATUS[4]
Error when writing a data record via PROFINET IO (IEC 61158-6) Error when reading or writing a data record via PROFINET IO (IEC 61158-6) Module-specific error Error code from the table below: The "Operating mode" parameter has an invalid value.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
77
Parameter data record B.2 Parameter validation error
Error codes
The following table shows the module-specific error codes and their meaning for parameter data record 128.
Table B- 2 Error codes for parameter validation
Error code in STATUS parame- Meaning ter (hexadecimal)
Byte 0 Byte 1 Byte 2 Byte 3
DF 80
B0
00
Data record number unknown
DF 80
B1
01
Length of data record incorrect
DF 80
B2
00
Slot invalid or not accessible
Remedy
Enter valid number for data record. Enter valid value for data record length. · Check whether module is inserted or removed.
· Check assigned values for parameters of the WRREC instruction.
DF 80
E0
01
Wrong version
· Check byte 0.
· Enter valid values.
DF 80
E0
02
Error in the header information
· Check byte 1.
· Correct the length of the parameter blocks.
DF 80
E1
00
Parameter invalid: No detailed information
available
Check all parameter values.
DF 80
E1
11
"Operating mode" parameter invalid
Enter valid parameter value.
DF 80
E1
12
"Reaction to CPU STOP" parameter invalid
Enter valid parameter value.
DF 80
E1
13
"Signal type" parameter invalid
Enter valid parameter value.
DF 80
E1
14
"Sensor type" parameter invalid
Enter valid parameter value.
DF 80
E1
15
"Filter frequency" parameter invalid
Enter valid parameter value.
DF 80
E1
16
"Reaction to signal N" parameter invalid
Enter valid parameter value.
DF 80
E1
17
"Set function of DI" parameter invalid
Enter valid parameter value.
DF 80
E1
18
"Set function of DI" parameter configured the Enter different parameter values for DIn.0 and DIn.1.
same for DIn.0 and DIn.1.
DF 80
E1
19
· "Edge selection" parameter invalid
· Enter valid parameter value.
· "Gate start (edge-triggered)" configured as function for DIn.m and "At rising and falling edge"
· Configure "Gate start (edge-triggered)" as function for DIn.m only together with "At rising edge" or "At falling edge"
· "Gate stop (edge-triggered)" configured as function for DIn.m and "At rising and falling edge"
· Configure "Gate stop (edge-triggered)" as function for DIn.m only together with "At rising edge" or "At falling edge"
· "Synchronization" configured as function for · Configure "Synchronization" as function for DIn.m
DIn.m and "At rising and falling edge"
only together with "At rising edge" or "At falling
edge"
DF 80
E1
1A
"Input delay" parameter invalid
Enter valid parameter value.
DF 80
E1
1B
"Set output" parameter invalid
Enter valid parameter value.
DF 80
E1
1C
"Count direction" parameter invalid
Enter valid parameter value.
DF 80
E1
1D
"Reset when counting limit is violated" parame- Enter valid parameter value.
ter invalid
DF 80
E1 1E "Reaction to violation of a counting limit" parameter invalid
Enter valid parameter value.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
78
Manual, 06/2018, A5E31870371-AB
Parameter data record B.2 Parameter validation error
Error code in STATUS parame- Meaning ter (hexadecimal)
Byte 0 Byte 1 Byte 2 Byte 3
DF 80
E1
20
"Reaction to gate start" parameter invalid
DF
80
E1
211,5 · Low counting limit > comparison value 0
Remedy
Enter valid parameter value. · Low counting limit < comparison value 0
· Low counting limit > comparison value 1
· Low counting limit < comparison value 1
DF
80
E1
221,5 · Counting high limit < comparison value 0
· High counting limit > comparison value 0
· Counting high limit < comparison value 1 · High counting limit > comparison value 1
DF 80
E1
23
· "Start value" parameter invalid
· "Low counting limit" parameter invalid
Enter valid parameter value: Start value > low counting limit
DF 80
E1
24
· "Start value" parameter invalid
· "High counting limit" parameter invalid
Enter valid parameter value: Start value < high counting limit
DF 80
E1
25
"Update time" parameter invalid
Enter parameter value from range 0 to 25000000D.
DF
80
E1
262 "Reference speed" parameter invalid
Enter parameter value from range 6.00 to 210000.00D.
DF 80
E1
27
"Measured variable" parameter invalid
Enter valid parameter value.
DF 80
E1
28
"Time base for velocity measurement" parame- Enter valid parameter value.
ter invalid
DF 80
E1
29
"Increments per unit" parameter invalid
Enter valid parameter value.
DF 80
E1
2A
· "High counting limit" parameter invalid
· "Low counting limit" parameter invalid
Enter valid parameter value: Low counting limit < high counting limit
DF
80
E1
2B3 · "Comparison value 0" parameter invalid
· "Comparison value 1" parameter invalid
Enter valid parameter value: Comparison value 0 < comparison value 1
DF 80
E1
2C
"Signal evaluation" parameter invalid
Enter valid parameter value.
DF 80
E1
2D
· "Between comparison value 0 and 1" con- · Configure "Between comparison value 0 and 1"
figured for DQn.0
only for DQn.1
· "Not between comparison value 0 and 1" configured for DQn.0
· "Not between comparison value 0 and 1" configured only for DQn.1
· "Between comparison value 0 and 1" configured for DQn.1, but "Use by user program" not configured for DQn.0
· Only configure "Between comparison value 0 and 1" for DQn.1 when "Use by user program" is configured for DQn.0
· "Not between comparison value 0 and 1" · Only configure "Not between comparison value 0
configured for DQn.1, but "Use by user pro-
and 1" for DQn.1 when "Use by user program" is
gram" not configured for DQn.0
configured for DQn.0
DF 80
E1
2E
"Capture" configured for DIn.m in "Measuring" Do not configure "Capture" for DIn.m in "Measuring"
operating mode
operating mode.
DF
80
E1
364 "Counting high limit" parameter invalid
Enter valid parameter value.
DF
80
E1
374,5 · "Comparison value 0" parameter invalid
Enter valid parameter value.
· "Comparison value 1" parameter invalid
DF
80
E1
384 "Start value" parameter invalid
DF
80
E1
394 "Counting low limit" parameter invalid
Enter valid parameter value. Enter valid parameter value.
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
Manual, 06/2018, A5E31870371-AB
79
Parameter data record B.2 Parameter validation error
Error code in STATUS parame- Meaning ter (hexadecimal)
Byte 0 Byte 1 Byte 2 Byte 3
DF 80
E1
3A4 "Count direction for synchronization" parameter
invalid
DF 80
E1
F0
Reserved bit is not set to 0.
Remedy
Enter valid parameter value. Set reserved bit to 0.
1 Only for "Counting" operating mode 2 Only for "Position input for technology object "Motion Control"" operating mode 3 Only for DQn.1 functions "Between comparison value 0 and 1" and "Not between comparison value 0 and 1" 4 Only for operating mode "Fast Mode" 5 Not for DQn.m function "Use by user program" or "Digital output without function"
Technology module TM Count 2x24V (6ES7550-1AA00-0AB0)
80
Manual, 06/2018, A5E31870371-AB
SIMATIC
S7-1500/ET 200MP Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Co_n_fig_u_rin_g/_ad_d_re_ss_s_pa_c_e ____4_ _Imn_etes_rsrua_pg_tess/_di_ag_n_os_tic________5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_______B_
06/2018
A5E03982218-AB
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03982218-AB 05/2018 Subject to change
Copyright © Siemens AG 2018. All rights reserved
Preface
Purpose of the documentation
This manual includes module-specific information on wiring, diagnostics and the technical specifications of the technology module.
General information regarding design and commissioning of the S7-1500 or ET 200MP is available in the S7-1500 and ET 200MP System Manuals.
The counting and measuring functions and position input of the TM PosInput 2 technology module are described in more detail in the Counting, measurement and position input (http://support.automation.siemens.com/WW/view/en/59709820) Function Manual.
Conventions
Please observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
3
Preface
Open Source Software
Open-source software is used in the firmware of the product described. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information on this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109740777).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
4
Manual, 06/2018, A5E03982218-AB
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 7
2 Product overview .................................................................................................................................. 11
2.1
Properties ................................................................................................................................ 11
2.2 2.2.1 2.2.1.1 2.2.1.2 2.2.2 2.2.3 2.2.4 2.2.5
Functions ................................................................................................................................14 Acquisition of encoder signals ................................................................................................14 Position input with SSI absolute encoder ...............................................................................14 Counting with incremental or pulse encoder ..........................................................................16 Measured value determination ...............................................................................................17 Switching the outputs at comparison values ..........................................................................17 Position input for Motion Control.............................................................................................18 Additional functions.................................................................................................................19
3 Wiring ................................................................................................................................................... 20
3.1
SSI encoder signals ................................................................................................................22
3.2
RS422 encoder signals...........................................................................................................24
3.3
TTL encoder signals ...............................................................................................................28
4 Configuring/address space.................................................................................................................... 32
4.1 4.1.1 4.1.2 4.1.3 4.1.3.1 4.1.3.2 4.1.4 4.1.5
Operating with "Counting and measurement" technology object ...........................................32 Configuring .............................................................................................................................. 32 Reaction to CPU STOP ..........................................................................................................33 Parameter setting....................................................................................................................34 Parameters (SSI absolute encoder) .......................................................................................35 Parameters (incremental or pulse encoder) ...........................................................................39 Address space ........................................................................................................................43 Isochronous mode ..................................................................................................................43
4.2 4.2.1 4.2.2 4.2.2.1 4.2.2.2 4.2.3 4.2.4
Position input for ""Motion Control"" technology object ..........................................................45 Configuring .............................................................................................................................. 45 Parameter setting....................................................................................................................46 Parameters (SSI absolute encoder) .......................................................................................47 Parameters (incremental or pulse encoder) ...........................................................................49 Address space ........................................................................................................................50 Isochronous mode ..................................................................................................................51
4.3 4.3.1 4.3.2 4.3.3 4.3.3.1 4.3.3.2
Manual operation (without technology object) ........................................................................52 Configuring .............................................................................................................................. 52 Reaction to CPU STOP ..........................................................................................................54 Parameter setting....................................................................................................................55 Parameters (SSI absolute encoder) .......................................................................................56 Parameters (incremental or pulse encoder) ...........................................................................60
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
5
Table of contents
4.3.4 4.3.5 4.3.5.1 4.3.5.2 4.3.6
Address space ....................................................................................................................... 64 Control and feedback interface .............................................................................................. 65 Assignment of the control interface........................................................................................ 65 Assignment of the feedback interface.................................................................................... 68 Isochronous mode ................................................................................................................. 72
5 Interrupts/diagnostic messages ............................................................................................................. 73
5.1
Status and error display ......................................................................................................... 73
5.2
Diagnostic alarms................................................................................................................... 76
5.3
Hardware interrupts ............................................................................................................... 80
6 Technical specifications ........................................................................................................................ 82
A Dimensional drawing............................................................................................................................. 91
B Parameter data record .......................................................................................................................... 93
B.1
Parameter assignment and structure of parameter data record ............................................ 93
B.2
Parameter validation error ................................................................................................... 100
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
6
Manual, 06/2018, A5E03982218-AB
Documentation guide
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
1
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
7
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
8
Manual, 06/2018, A5E03982218-AB
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
9
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
10
Manual, 06/2018, A5E03982218-AB
Product overview
2
2.1
Properties
Article number
6ES7551-1AB00-0AB0
Firmware version
This manual describes the properties of the module with firmware version V1.3.
View of the module
Figure 2-1 View of the TM PosInput 2 module
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
11
Product overview 2.1 Properties
Properties
The TM PosInput 2 technology module has the following properties: Technical properties
Two channels Interfaces:
SSI encoder signals D und C or RS422/TTL encoder signals A, B and N 5 V and 24 V encoder supply, short-circuit-proof DI0 and DI1 digital input signals (per channel) DQ0 and DQ1 digital output signals (per channel) Supply voltage L+ Count range: 32 bits Channel-by-channel monitoring of encoder signals for wire break, short-circuit and faulty supply voltage Hardware interrupts can be configured channel by channel Input filters for suppression of interferences at encoder inputs and digital inputs can be configured Supported encoder/signal types SSI absolute encoder RS422/TTL incremental encoder with N signal RS422/TTL incremental encoder without N signal RS422/TTL pulse encoder with direction signal RS422/TTL pulse encoder without direction signal RS422/TTL pulse encoder with up/down count signal Supported system functions Isochronous mode Firmware update Identification data I&M
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
12
Manual, 06/2018, A5E03982218-AB
Product overview 2.1 Properties
The module supports the following functions:
Table 2- 1 Version dependencies of the functions
Function
Firmware update I&M identification data Parameter reassignment in RUN Isochronous mode Counting/measuring Operating with "Counting and measurement" technology object Position input for "Motion Control" technology object Operating with "Measuring input" technology object Position value range of 32 bits
Firmware version of module
V1.0 or higher V1.0 or higher V1.0 or higher V1.0 or higher V1.0 or higher V1.0 or higher
Configurable as of
STEP 7 (TIA Portal)
GSD
PROFINET IO
PROFIBUS DP
V13
X
--
V13
X
X
V13
X
X
V13
--
--
V13
X
X
V13
--
--
V1.0 or higher
V13
--
--
V1.3 or higher V15 with
--
--
HSP0256
V1.3 or higher V15 with
X
X
HSP0256
Accessories
The following components are supplied with the technology module and can also be ordered separately as spare parts: Shield bracket Shield terminal Power supply element Labeling strip U-connector
Other components
The following component needs to be ordered separately:
Front connectors, including potential jumpers and cable ties
You can find information on the front connector in system manual S7-1500 / ET 200MP Automation System (http://support.automation.siemens.com/WW/view/en/59191792), section "Accessories".
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
13
Product overview 2.2 Functions
2.2
Functions
2.2.1
Acquisition of encoder signals
2.2.1.1
Position input with SSI absolute encoder
You can use the TM PosInput 2 technology module with an SSI absolute encoder for position detection. The technology module reads the position via a synchronous, serial interface from the SSI absolute encoder and sends it to the controller.
You can switch the digital outputs of the technology module exactly at defined position values, independently of the user program. Position input with an SSI absolute encoder does not involve gate control.
Gray-code and dual-code
Gray-code and dual-code SSI absolute encoders are supported.
Range for position value
You can specify a frame length of 10 bits to 40 bits for the SSI absolute encoder. The configurable bit numbers of the LSB and the MSB of the position value in the frame define the value range. The technology module can read in a position value with a maximum length of 32 bits and transfer it to the controller.
Complete SSI frame
Instead of having a measured variable returned, you can choose to have the least significant 32 bit of the current unprocessed SSI frame returned. This provides you with encoderspecific additional bits, such as error bits, in addition to the position value. If the SSI frame is shorter than 32 bits, the complete SSI frame is returned right-aligned and the top unused bits are returned with "0" in the feedback interface.
Capture (Latch)
You can configure the edge of an external reference signal that triggers saving of the current position value as a Capture value. The following external signals can trigger the Capture function:
Rising or falling edge of a digital input
Both edges of a digital input
The "Frequency of Capture function" parameter specifies whether the function is executed at each configured edge or only once after each enable.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
14
Manual, 06/2018, A5E03982218-AB
Product overview 2.2 Functions
Measuring input
If you use Position input for Motion Control (Page 18), you can use the "Measuring input" technology object to execute a measuring input function with a hardware digital input.
Hardware interrupts
The technology module can trigger a hardware interrupt in the CPU when a comparison event, zero crossing and/or direction reversal occurs. You can specify which events during operation are to trigger a hardware interrupt.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
15
Product overview 2.2 Functions
2.2.1.2
Counting with incremental or pulse encoder
Counting is the detecting and adding up of events. The counters of the technology module detect encoder signals and pulses and evaluate them accordingly. The count direction can be specified using encoder or pulse signals or through the user program.
You can control the counting processes with the digital inputs. In addition, you can read the signal state of the respective digital input via the feedback interface.
You can specify the counter characteristics using the functions described below.
Counting limits
The counting limits define the counter value range used. The counting limits are configurable and can be modified during runtime with the user program.
You can configure the behavior of the counter at the counting limits.
Start value
You can configure a start value within the counting limits. The start value can be modified during runtime with the user program.
Gate control
You can define the time window in which the count signals are acquired with the hardware gate (HW gate) and software gate (SW gate).
Capture (Latch)
You can configure an external reference signal edge that triggers the saving of the current counter value as Capture value. The following external signals can trigger the Capture function:
Rising or falling edge of a digital input
Both edges of a digital input
Rising edge of signal N at the encoder input
The "Frequency of Capture function" parameter specifies whether the function is executed at each configured edge or only once after each enable.
Measuring input
If you use Position input for Motion Control (Page 18), you can use the "Measuring input" technology object to execute a measuring input function with a hardware digital input.
Hardware interrupts
The technology module can trigger a hardware interrupt in the CPU when, for example, a comparison event, zero crossing and/or a change of count direction (direction reversal) occurs. You can specify which events during operation are to trigger a hardware interrupt.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
16
Manual, 06/2018, A5E03982218-AB
Product overview 2.2 Functions
2.2.2
Measured value determination
The following high-accuracy measurement functions are available (accuracy up to 100 ppm): Frequency measurement with the unit of hertz Period measurement with the unit of seconds Velocity measurement with a flexibly adaptable unit Complete SSI frame instead of a measured quantity
Update time
You can configure the interval at which the technology module updates the measured values cyclically as the update time.
Gate control for incremental and pulse encoders
You can define the time window in which the count signals are acquired with the hardware gate (HW gate) and software gate (SW gate).
2.2.3
Switching the outputs at comparison values
The available digital outputs DQ0 and DQ1 can be directly activated/switched by the specified comparison values or via the user program. The comparison values are configurable and can be modified during runtime with the user program. This enables very fast reaction times to be achieved.
Comparison values in the Counting/Position input operating mode
In Counting/Position input operating mode you specify two position or counter values as comparison values depending on the encoder. If the current position or counter value meets the configured comparison condition, the corresponding digital output can be set to directly initiate control processes in the process.
Comparison values in the Measuring mode
You define two comparison values in the Measuring mode. If the current measured value meets the configured comparison condition, the corresponding digital output can be set to directly initiate control processes in the process.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
17
Product overview 2.2 Functions
2.2.4
Position input for Motion Control
You can use the technology module for position detection for the following axis technology objects of S7-1500 Motion Control :
TO_PositioningAxis
TO_SynchronousAxis
TO_ExternalEncoder
In this operating mode, you can use the measuring input technology object (TO_MeasuringInput) to execute a measuring input function with hardware digital input DI1.
Additional information
You can find a detailed description of the use of Motion Control and its configuration in the following:
Function manual S7-1500 Motion Control available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/59381279)
Function manual S7-1500T Motion Control available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109481326)
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
18
Manual, 06/2018, A5E03982218-AB
Product overview 2.2 Functions
2.2.5
Additional functions
Synchronization for incremental and pulse encoder
You can configure the edge of an external reference signal that loads the counter with the specified start value. The following external signals can trigger a synchronization:
Rising or falling edge of a digital input
Rising edge of signal N at the encoder input
Rising edge of signal N at the encoder input depending on the level of the assigned digital input
The "Frequency of synchronization" parameter specifies whether the function is executed at each configured edge or only once after each enable.
Hysteresis
You can specify a hysteresis for the comparison values within which a digital output will be prevented from switching again.
Diagnostic interrupt
The technology module can trigger diagnostic interrupts. You enable the diagnostic interrupts in the device configuration.
Input filter
To suppress interference, you can configure an input filter for the RS422/TTL encoder inputs and for the digital inputs.
Isochronous mode
The technology module supports the "Isochronous mode" system function. This system function enables position, counter and measured values to be acquired in a defined system cycle.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
19
Wiring
3
You connect the encoder signals, the digital input and output signals and the encoder supplies to the 40-pin front connector of the technology module. In addition, you connect the supply voltage for supplying the module and digital outputs and for producing the encoder supply voltages to the 4-pin power supply element.
You can find the pin assignment of the front connector and the power supply element in the following two sections.
You can find information on wiring the front connector, shielding the cable, etc., in system manual S7-1500 / ET 200MP Automation System (http://support.automation.siemens.com/WW/view/en/59191792), section Wiring.
Supply voltage L+/M
You connect the supply voltage to terminals L+ (terminal 41/42) and M (terminal 43/44). An internal protection circuit protects the technology module from reverse polarity of the supply voltage. The technology module monitors whether the supply voltage is connected.
Pin assignment for the power supply element
The power supply element is plugged onto the front connector and serves to supply the technology module. For this, you must connect the supply voltage to terminal 41 (L+) and terminal 44 (M). Use terminal 42 (L+) and terminal 43 (M) to loop the supply voltage through to the next module.
Figure 3-1 Connection of power supply element
L+
Supply voltage 24 V DC
M
Ground for supply voltage
Encoder supplies
For supplying the encoders and sensors connected to the digital inputs, the technology module provides 24 V DC and 5 V DC supply voltages at outputs 24VDC (terminal 9/29) and 5VDC (terminal 7/27) with reference to M (terminal 8/28). For supplying the sensors connected to the digital inputs, the technology module provides a 24 V DC supply voltage at output 24VDC (terminal 9/29). Both voltages are monitored for short-circuit and overload.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
20
Manual, 06/2018, A5E03982218-AB
Wiring
Digital inputs DI0 and DI1
The digital inputs are used for gate control, synchronization and the Capture function. The digital inputs of the two channels are not isolated from one another.
Input delay for digital inputs
You can use this parameter to suppress signal noise at the digital inputs of a channel. Changes to the signal are only detected if they remain stable for longer than the configured input delay time.
Note If you select the "None" or "0.05 ms" option, you must use shielded cables for connection of the digital inputs.
Digital outputs DQ0 and DQ1
The digital outputs of the two channels are not isolated from one another. The digital outputs are 24 V sourcing outputs in reference to M and can carry a rated load current of 0.5 A. They are protected against overload and short-circuit. Relays and contactors can be directly connected without an external protective circuit. You can find information on the maximum possible operating frequencies and the inductance values of the inductive loads connected to the digital outputs in section Technical specifications (Page 82).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
21
Wiring 3.1 SSI encoder signals
3.1
SSI encoder signals
SSI encoder signals
The TM PosInput 2 can process SSI encoder signals. These are designated with data and clock and use the RS422 signal standard.
An RS422 encoder signal uses a pair of wires and the information is transmitted as differential voltage. This ensures interference-free transmission of RS422 encoder signals even with high frequencies over long distances. The RS422 wire pairs must be twisted together in the cable.
The SSI encoder signals data and clock are connected via the D and C terminals. The N terminals remain unconnected. The inputs are not isolated from each other. The inputs are isolated from the backplane bus.
Pin assignment for the front connector
The table below shows the pin assignment of the front connector.
Table 3- 1 Pin assignment of the front connector
Designation
Channel 0 SSI data signal +D SSI data signal -D SSI clock signal +C SSI clock signal -C -- -- Encoder supply 5 V DC Ground for encoder supplies and digital inputs
Signal name
+CH0.A/D
1
-CH0.A/D
2
+CH0.B/C
3
-CH0.B/C
4
+CH0.N
5
-CH0.N
6
5VDC
7
M
8
Encoder supply 24 V DC 24VDC
9
Ground for encoder sup- M
10
plies and digital inputs
Digital input DI0 Digital input DI1 -- -- Digital output DQ0 Digital output DQ1 -- Digital output ground --
DI0.0 DI0.1 -- -- DQ0.0 DQ0.1 -- M --
11 12 13 14 15 16 17 18 19 - 20
View
Signal name
Channel 1 21 +CH1.A/D 22 -CH1.A/D 23 +CH1.B/C 24 -CH1.B/C 25 +CH1.N 26 -CH1.N 27 5VDC 28 M
29 24VDC 30 M
31 32 33 34 35 36 37 38 39 - 40
DI1.0 DI1.1 -- -- DQ1.0 DQ1.1 -- M --
Designation
SSI data signal +D SSI data signal -D SSI clock signal +C SSI clock signal -C
-- -- Encoder supply 5 V DC Ground for encoder supplies and digital inputs Encoder supply 24 V DC Ground for encoder supplies and digital inputs Digital input DI0 Digital input DI1 -- -- Digital output DQ0 Digital output DQ1 -- Digital output ground --
Note Potential jumpers may not be inserted in the front connector.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
22
Manual, 06/2018, A5E03982218-AB
Wiring 3.1 SSI encoder signals
Block diagram
You must ground the shields of the cables between encoder and technology module both through the shield support at the front connector (shield bracket and terminal) and at the encoder.
The figure below shows the block diagram of the technology module with one connected SSI absolute encoder.
Electrical isolation
Encoder supply, optionally 5 V DC or 24 V DC, according to the specification of the encoder manufacturer
Technology and backplane bus interface
Shield support at the front connector
Input filter
Supply voltage via power supply element
Equipotential bonding
RS422 incremental encoder
Figure 3-2 Block diagram with SSI absolute encoder
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
23
Wiring 3.2 RS422 encoder signals
3.2
RS422 encoder signals
RS422 encoder signals/count signals
The TM PosInput 2 can process encoder signals that use the RS422 signal standard. These counting encoder signals are designated with the letters A, B and N.
An RS422 encoder signal uses a pair of wires and the counter information is transmitted as differential voltage. This ensures interference-free transmission of RS422 encoder signals even with high frequencies over long distances. The RS422 wire pairs must be twisted together in the cable.
You can connect the following encoder types:
RS422 incremental encoder with N signal:
The encoder signals A, B and N are connected using the correspondingly marked terminals. A and B are the two incremental signals phase-shifted by 90°. N is the zero mark signal that supplies one pulse per revolution.
RS422 incremental encoder without N signal:
The encoder signals A and B are connected using the correspondingly marked terminals. A and B are the two incremental signals phase-shifted by 90°. The N terminals remain unconnected.
RS422 pulse encoder without direction signal:
The counting signal is connected to the A terminals. The count direction can be specified via the control interface. The B and N terminals remain unconnected.
RS422 pulse encoder with direction signal:
The counting signal is connected to the A terminals. The direction signal is connected to the B terminals. Counting down takes place at a high level of the direction signal. The N terminals remain unconnected.
RS422 pulse encoder with up/down count signal
The up counting signal is connected to the A terminals. The down counting signal is connected to the B terminals. The N terminals remain unconnected.
The inputs are not isolated from each other. The inputs are isolated from the backplane bus.
Note
The RS422 signal standard offers greater interference immunity than the TTL signal standard. If your incremental encoder or pulse encoder supports the RS422 and the TTL signal standard, we recommend using the RS422 signal standard.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
24
Manual, 06/2018, A5E03982218-AB
Wiring 3.2 RS422 encoder signals
Pin assignment for the front connector
The table below shows the pin assignment of the front connector.
Table 3- 2 Pin assignment of the front connector
View
Signal name
Channel 0 1 +CH0.A/D
2 -CH0.A/D
3 +CH0.B/C
4 -CH0.B/C
5 +CH0.N
6 -CH0.N
7 5VDC 8 M 9 24VDC 10 M 11 DI0.0 12 DI0.1 13 -- 14 -- 15 DQ0.0 16 DQ0.1 17 -- 18 M 19 - -- 20
RS422 incremental encoder
with signal N
without signal N
Designation RS422 pulse encoder
with direction without direc-
signal
tion signal
Up/ Down
Encoder signal +A
Counting signal +A
Up counting signal +A
Encoder signal -A
Counting signal -A
Up counting signal -A
Encoder signal +B Direction signal
--
+B
Down counting signal +B
Encoder signal -B
Direction signal
--
-B
Down counting signal -B
Encoder
--
signal +N
Encoder
--
signal -N
Encoder supply 5 V DC
Ground for encoder supplies and digital inputs
Encoder supply 24 V DC
Ground for encoder supplies and digital inputs
Digital input DI0
Digital input DI1
--
--
Digital output DQ0
Digital output DQ1
--
Digital output ground
--
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
25
Wiring 3.2 RS422 encoder signals
View
Signal name
Channel 1 21 +CH1.A/D
22 -CH1.A/D
23 +CH1.B/C
24 -CH1.B/C
25 +CH1.N
26 -CH1.N
27 5VDC 28 M 29 24VDC 30 M 31 DI1.0 32 DI1.1 33 -- 34 -- 35 DQ1.0 36 DQ1.1 37 -- 38 M 39 - -- 40
RS422 incremental encoder
with signal N
without signal N
Designation RS422 pulse encoder
with direction without direc-
signal
tion signal
Up/ Down
Encoder signal +A
Counting signal +A
Up counting signal +A
Encoder signal -A
Counting signal -A
Up counting signal -A
Encoder signal +B Direction signal
--
Down counting
+B
signal +B
Encoder signal -B
Direction signal
--
Down counting
-B
signal -B
Encoder
--
signal +N
Encoder
--
signal -N
Encoder supply 5 V DC
Ground for encoder supplies and digital inputs
Encoder supply 24 V DC
Ground for encoder supplies and digital inputs
Digital input DI0
Digital input DI1
--
--
Digital output DQ0
Digital output DQ1
--
Digital output ground
--
Note Potential jumpers may not be inserted in the front connector.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
26
Manual, 06/2018, A5E03982218-AB
Wiring 3.2 RS422 encoder signals
Block diagram
You must ground the shields of the cables between encoder and technology module both through the shield support at the front connector (shield bracket and terminal) and at the encoder.
The figure below shows the block diagram of the technology module with one connected RS422 incremental encoder.
Electrical isolation
Encoder supply, optionally 5 V DC or 24 V DC, according to the specification of the encoder manufacturer
Technology and backplane bus interface
Shield support at the front connector
Input filter
Supply voltage via power supply element
Equipotential bonding
RS422 incremental encoder
Figure 3-3 Block diagram with RS422 incremental encoder
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
27
Wiring 3.3 TTL encoder signals
3.3
TTL encoder signals
TTL encoder signals/counting signals
The TM PosInput 2 can process encoder signals that use the TTL signal standard. The counting encoder signals are designated with the letters A, B and N. An encoder signal with TTL standard uses a single cable.
You can connect the following encoder types:
TTL incremental encoder with N signal:
The encoder signals A, B and N are connected using the correspondingly marked terminals. A and B are the two incremental signals phase-shifted by 90°. N is the zero mark signal that supplies one pulse per revolution.
TTL incremental encoder without N signal:
The encoder signals A and B are connected using the correspondingly marked terminals. A and B are the two incremental signals phase-shifted by 90°. The N terminal remains unconnected.
TTL pulse encoder without direction signal:
The counting signal is connected to the A terminal. The count direction can be specified via the control interface. The B and N terminals remain unconnected.
TTL pulse encoder with direction signal:
The counting signal is connected to the A terminal. The direction signal is connected to the B terminal. Counting down takes place at a high level of the direction signal. The N terminal remains unconnected.
TTL pulse encoder with up/down counting signal
The up counting signal is connected to the A terminal. The down counting signal is connected to the B terminal. The N terminal remains unconnected.
The inputs are not isolated from each other. The inputs are isolated from the backplane bus.
Note
The RS422 signal standard offers greater interference immunity than the TTL signal standard. If your incremental encoder or pulse encoder supports the RS422 and the TTL signal standard, we recommend using the RS422 signal standard.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
28
Manual, 06/2018, A5E03982218-AB
Wiring 3.3 TTL encoder signals
Pin assignment for the front connector
The table below shows the pin assignment of the front connector.
Table 3- 3 Pin assignment of the front connector
View
Signal name
Channel 0 1 +CH0.A/D
2 -CH0.A/D 3 +CH0.B/C
4 -CH0.B/C 5 +CH0.N
6 -CH0.N 7 5VDC 8 M 9 24VDC 10 M 11 DI0.0 12 DI0.1 13 -- 14 -- 15 DQ0.0 16 DQ0.1 17 -- 18 M 19 - -- 20
TTL incremental encoder
with signal N
without signal N
Designation
TTL pulse encoder
with direction without direc-
signal
tion signal
Up/ Down
Encoder signal A
Counting signal A
Up counting signal A
--
Encoder signal B
Direction signal
--
B
Down counting signal B
--
Encoder
--
signal N
--
Encoder supply 5 V DC
Ground for encoder supplies and digital inputs
Encoder supply 24 V DC
Ground for encoder supplies and digital inputs
Digital input DI0
Digital input DI1
--
--
Digital output DQ0
Digital output DQ1
--
Digital output ground
--
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
29
Wiring 3.3 TTL encoder signals
View
Signal name
Designation
TTL incremental encoder
TTL pulse encoder
with signal N
without signal N
with direction without direc-
signal
tion signal
Up/ Down
Channel 1
21 +CH1.A/D
Encoder signal A
Counting signal A
Up counting signal A
22 -CH1.A/D
--
23 +CH1.B/C
Encoder signal B
Direction signal
--
Down counting
B
signal B
24 -CH1.B/C
--
25 +CH1.N
Encoder
--
signal N
26 -CH1.N
--
27 5VDC
Encoder supply 5 V DC
28 M
Ground for encoder supplies and digital inputs
29 24VDC
Encoder supply 24 V DC
30 M
Ground for encoder supplies and digital inputs
31 DI1.0
Digital input DI0
32 DI1.1
Digital input DI1
33 --
--
34 --
--
35 DQ1.0
Digital output DQ0
36 DQ1.1
Digital output DQ1
37 --
--
38 M
Digital output ground
39 - --
--
40
Note Potential jumpers may not be inserted in the front connector.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
30
Manual, 06/2018, A5E03982218-AB
Wiring 3.3 TTL encoder signals
Block diagram
You must ground the shields of the cables between encoder and technology module both through the shield support at the front connector (shield bracket and terminal) and at the encoder.
The figure below shows the block diagram of the technology module with one connected TTL incremental encoder.
Electrical isolation
Encoder supply, optionally 5 V DC or 24 V DC, according to the specification of the encoder manufacturer
Technology and backplane bus interface
Shield support at the front connector
Input filter
Supply voltage via power supply element
Equipotential bonding
RS422 incremental encoder
Figure 3-4 Block diagram with TTL incremental encoder
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
31
Configuring/address space
4
4.1
Operating with "Counting and measurement" technology object
4.1.1
Configuring
Introduction
You configure the technology module and assign its parameters with STEP 7 (TIA Portal). The technology object is used to control and monitor the functions of the technology module.
System environment
The technology module can be used in the following system environments:
Applications
Components required
Central operation
· S7-1500 automation system
with an S7-1500 CPU · TM PosInput 2
Distributed operation · with an S7-1500 CPU ·
S7-1500 automation system
ET 200MP distributed I/O system
· TM PosInput 2
Configuration software STEP 7 (TIA Portal):
· Device configuration with hardware configuration
· Parameter setting with "Counting and measurement" technology object
In the user program
For incremental/pulse encoder:
High_Speed_Counter instruction
For SSI absolute encoder:
SSI_Absolute_Encoder instruction
Additional information
You can find a detailed description of the counting and measurement functions and their configuration in the following: Function manual Counting, Measurement and Position Detection available for download
on the Internet (http://support.automation.siemens.com/WW/view/en/59709820) Information system of STEP 7 (TIA Portal) under "Using technology functions > Counting,
measurement and position input > Counting, measurement and position input (S7-1500)"
Hardware Support Packages (HSP)
If firmware version V1.3 of the module is not yet integrated in your TIA Portal Version V15, you can integrate a corresponding module using HSP0256. You can find the Hardware Support Packages (HSP) for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/72341852). You can also access this download from the menu bar of STEP 7 (TIA Portal): "Options > Support packages > Download from the Internet".
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
32
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
4.1.2
Reaction to CPU STOP
Reaction to CPU STOP
You set the reaction of the technology module to a STOP of the CPU on a channel-bychannel basis in the basic parameters of the device configuration.
Table 4- 1 Reaction of technology module to CPU STOP
Option Continue operation Output substitute value
Keep last value
Meaning
The technology module remains fully functional. Incoming count pulses are processed or the position value is read in. The digital outputs continue to switch according to the parameter assignment.
The technology module outputs the configured substitute values at the digital outputs until the next CPU STOP-RUN transition.
The technology module is returned to its startup state after a STOP-RUN transition: The counter value is set to the Start value (with incremental encoders or pulse encoders) and the digital outputs switch according to the parameter assignment.
The technology module outputs the values at the digital outputs that were valid when the transition to STOP took place until the next CPU STOP-RUN transition.
If a digital output with the "At comparison value for a pulse duration" function is set at CPU STOP, the digital output is reset after the pulse duration elapses.
The technology module is returned to its startup state after a STOP-RUN transition: The counter value is set to the Start value (with incremental encoders or pulse encoders) and the digital outputs switch according to the parameter assignment.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
33
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
4.1.3
Parameter setting
You specify the properties of the technology module using various parameters. Depending on the settings, not all parameters are available. When parameters are assigned in the user program, the parameters are transferred to the module with the "WRREC" instruction and data record 128 (Page 93).
You set the parameters of the module as follows in this operating mode:
1. Insert the module from the hardware catalog under "Technology modules".
2. Set the device configuration in the hardware configuration. "Operating with "Counting and measurement" technology object" must be set as the operating mode.
3. Insert the High_Speed_Counter or SSI_Absolute_Encoder technology object from the project tree in folder "Technology objects > Add new object > Counting and measurement". You can find information on configuring with a technology object in function manual Counting, Measurement and Position Detection (http://support.automation.siemens.com/WW/view/en/59709820).
4. Open the configuration of the respective technology object, e.g. using the Configuration button in the respective instruction for the technology object.
5. Set the parameters of the technology object.
6. Download the project to the CPU.
Note
The "Operating with "Counting and measurement" technology object" and "Manual operation (without technology object)" operating modes apply to one channel in each case. As a result, you can also use a module with both operating modes.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
34
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
4.1.3.1
Parameters (SSI absolute encoder)
Parameters of the TM PosInput 2 with SSI absolute encoder
The following parameter settings are possible in the hardware configuration:
Table 4- 2 Settable parameters and their default setting (SSI absolute encoder)
Parameter
Value range
Default setting
Reaction to CPU STOP
Enable diagnostic interrupt on wire break
Enable additional diagnostic interrupts
Hardware interrupt: New Capture value available
Hardware interrupt: Direction reversal
Hardware interrupt: Zero crossing
Hardware interrupt: Comparison event for DQ0 occurred Hardware interrupt: Comparison event for DQ1 occurred
· Output substitute value · Keep last value · Continue operation · Deactivated · Activated
· Deactivated · Activated · Deactivated · Activated · Deactivated · Activated · Deactivated · Activated · Deactivated · Activated
· Deactivated · Activated
Output substitute value
Deactivated Deactivated Deactivated Deactivated Deactivated Deactivated Deactivated
Parameter reassignment in
RUN
Yes
Scope HSP for STEP 7
(TIA Portal)
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
35
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
The following parameter settings are possible in the technology object:
Table 4- 3 Settable parameters and their default setting (SSI absolute encoder)
Parameter
Value range
Default setting
Frame length Code type Transmission rate
Monoflop time
Parity
Bit number LSB of the position value Bit number MSB of the position value Invert direction (counter inputs) Set function of DI
10 bits...40 bits · Gray · Dual
· 125 kHz · 250 kHz · 500 kHz · 1 MHz · 1.5 MHz · 2 MHz
· Automatically · 16 µs · 32 µs · 48 µs · 64 µs
· None · Even · Odd 0...38
1...39
· Deactivated · Activated
· Capture · Digital input without function
Input delay for digital inputs · None · 0.05 ms · 0.1 ms · 0.4 ms · 0.8 ms · 1.6 ms · 3.2 ms · 12.8 ms · 20 ms
13 bits Gray 125 kHz
Automatically
None
0 12 Deactivated DI0, DI1: Digital input without function 0.1 ms
Parameter reassignment in
RUN Yes
Yes
Scope HSP for STEP 7
(TIA Portal)
Channel Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
36
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
Parameter
Value range
Edge selection for DI
· At rising edge
Default setting At rising edge
Parameter reassignment in
RUN
Yes
Scope HSP for STEP 7
(TIA Portal)
Channel
· At falling edge · At rising and falling edge
Frequency of Capture func- · Once tion
· Periodic
Once
Yes
Channel
Comparison value 0 Comparison value 1 Operating mode
-2147483648...2147483647
0
Yes
-2147483648...2147483647
10
Yes
· Use position value (SSI abso- Use position value No
lute value) as reference
(SSI absolute value) as reference
· Use measured value as refer-
ence
Channel Channel Channel
Set output
· Use by user program
· Between comparison value and high limit / measured value >= comparison value
DQ0, DQ1:
Yes
Between comparison value and high limit
Channel
· Between comparison value and low limit / measured value <= comparison value
· At comparison value for a pulse duration
· After set command from CPU until comparison value
· Between comparison value 0 and 1
· Not between comparison value 0 and 1
Count direction of DQ func- · Up tion
· Down · In both directions
In both directions
Yes
Channel
Pulse duration [ms/10] Substitute value for DQ0
0...65535 · 0
5000 (corresponds to Yes 0.5 s)
0
Yes
Channel Channel
· 1
Substitute value for DQ1 · 0
0
Yes
Channel
· 1
Hysteresis (in increments) 0...255
0
Yes
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
37
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
Parameter
Value range
Measured variable
Update time [ms] of measuring function Time base for velocity measurement
Increments per unit
· Frequency · Period · Velocity · Complete SSI frame 0...25000
· 1 ms · 10 ms · 100 ms · 1s · 60 s 1...65535
Default setting Frequency
Parameter reassignment in
RUN
Yes
Scope HSP for STEP 7
(TIA Portal)
Channel
10
Yes
Channel
60 s
Yes
Channel
1
Yes
Channel
NOTICE
Too high an encoder speed can supply the wrong rotation direction
If an SSI absolute encoder rotates so fast that more than half the value range is covered within one module cycle1, the velocity and rotation direction are no longer calculated correctly. As a result, the following may function incorrectly: · DQ functions · Feedback bits EVENT_OFLW, EVENT_UFLW, EVENT_ZERO, EVENT_CMP0,
EVENT_CMP1 and STS_DIR
1 Non-isochronous mode: 500 s; isochronous mode: PROFINET cycle time
Note
If you use an SSI absolute encoder whose value range does not correspond to a power of 2, the calculated velocity measurement can be incorrect at the moment of the overflow.
Explanation of parameters
You can find a detailed description of the parameters in function manual Counting, Measurement and Position Detection in sections Basic parameters and Configuring the SSI_Absolute_Encoder available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
38
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
4.1.3.2
Parameters (incremental or pulse encoder)
Parameters of the TM PosInput 2 with incremental or pulse encoder
The following parameter settings are possible in the hardware configuration:
Table 4- 4 Settable parameters and their default setting (incremental or pulse encoder)
Parameter
Value range
Reaction to CPU STOP
· Output substitute value · Keep last value
· Continue operation
Enable diagnostic interrupt · Deactivated
on wire break
· Activated
Enable additional diagnos- · Deactivated
tic interrupts
· Activated
Hardware interrupt: New Capture value available
· Deactivated · Activated
Hardware interrupt: Synchronization of the counter by an external signal
Hardware interrupt: Gate start
· Deactivated · Activated
· Deactivated · Activated
Hardware interrupt: Gate stop
· Deactivated · Activated
Hardware interrupt: Overflow (high counting limit violated)
Hardware interrupt:Underflow (low counting limit violated)
Hardware interrupt: Direction reversal
· Deactivated · Activated
· Deactivated · Activated
· Deactivated · Activated
Hardware interrupt: Zero crossing
· Deactivated · Activated
Hardware interrupt: Comparison event for DQ0 occurred
Hardware interrupt: Comparison event for DQ1 occurred
· Deactivated · Activated
· Deactivated · Activated
Default setting
Output substitute value
Parameter reassignment in
RUN
Yes
Scope HSP for STEP 7
(TIA Portal)
Channel
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Channel Channel Channel Channel
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Channel Channel Channel
Deactivated
Yes
Channel
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Channel Channel Channel
Deactivated
Yes
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
39
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
The following parameter settings are possible in the technology object:
Table 4- 5 Settable parameters and their default setting (incremental or pulse encoder)
Parameter
Value range
Default setting
Signal type
Signal evaluation for counter inputs Invert direction (counter inputs) Filter frequency for counter inputs
Interface standard Reaction to signal N
Frequency of synchronization Frequency of Capture function Counting high limit Start value Counting low limit
· Pulse (A) · Pulse (A) and direction (B) · Count up (A), count down (B) · Incremental encoder (A, B phase-
shifted) · Incremental encoder (A, B, N)
· Single · Double · Quadruple
· Deactivated · Activated
· 100 Hz · 200 Hz · 500 Hz · 1 kHz · 2 kHz · 5 kHz · 10 kHz · 20 kHz · 50 kHz · 100 kHz · 200 kHz · 500 kHz · 1 MHz
· RS422, symmetrical · TTL (5 V), asymmetrical
· No reaction to signal N · Synchronization at signal N · Capture at signal N
· Once · Periodic
· Once · Periodic -2147483648...2147483647 -2147483648...2147483647 -2147483648...2147483647
Pulse (A) and direction (B)
Single Deactivated 200 kHz
RS422, symmetrical No reaction to signal N Once Once 2147483647 0 -2147483648
Parameter reassignment in
RUN Yes
Scope HSP for STEP 7
(TIA Portal)
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
40
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
Parameter
Value range
Reaction to violation of a counting limit
· Stop counting · Continue counting
Reset when counting limit is violated
· To opposite counting limit · To start value
Reaction to gate start
· Set to start value
· Continue with current value
Set function of DI
· Gate start/stop (level-triggered)
· Gate start (edge-triggered)
· Gate stop (edge-triggered)
· Synchronization
· Enable synchronization at signal N
· Capture
· Digital input without function
Input delay for digital inputs · None
· 0.05 ms
· 0.1 ms
· 0.4 ms
· 0.8 ms
· 1.6 ms
· 3.2 ms
· 12.8 ms
· 20 ms
Edge selection for DI
· At rising edge
· At falling edge
· At rising and falling edge
Select level for DI
· Active with high level
· Active with low level
Behavior of counter value after Capture with DI
· Continue counting · Set to start value and continue
counting
Comparison value 0
-2147483648...2147483647
Comparison value 1 Operating mode
-2147483648...2147483647 · Use count value as reference
· Use measured value as reference
Default setting Continue counting
Parameter reassignment in
RUN Yes
To opposite
Yes
counting limit
Continue with
Yes
current value
· DI0: Gate
Yes
start/stop (level-
triggered)
· DI1: Digital input without function
0.1 ms
Yes
At rising edge
Yes
Active with high Yes level
Continue counting Yes
0
Yes
10
Yes
Use count value No as reference
Scope HSP for STEP 7
(TIA Portal) Channel Channel Channel Channel
Channel
Channel Channel Channel Channel Channel Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
41
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
Parameter
Set output
Count direction of DQ function Pulse duration [ms/10] Substitute value for DQ0 Substitute value for DQ1 Hysteresis (in increments) Measured variable Update time [ms] of measuring function Time base for velocity measurement
Increments per unit
Value range
Default setting
· Use by user program
· Between comparison value and high limit / measured value >= comparison value
DQ0, DQ1:
Between comparison value and high limit
· Between comparison value and low limit / measured value <= comparison value
· At comparison value for a pulse duration
· After set command from CPU until comparison value
· Between comparison value 0 and 1
· Not between comparison value 0 and 1
· Up
In both directions
· Down
· In both directions
0...65535 · 0
5000 (corresponds to 0.5 s)
0
· 1
· 0
0
· 1
0...255
0
· Frequency
Frequency
· Period
· Velocity
0...25000
10
· 1 ms
60 s
· 10 ms
· 100 ms
· 1s
· 60 s
1...65535
1
Parameter reassignment in
RUN Yes
Yes Yes Yes Yes Yes Yes Yes Yes
Yes
Scope HSP for STEP 7
(TIA Portal) Channel
Channel Channel Channel Channel Channel Channel Channel Channel
Channel
Explanation of parameters
You can find a detailed description of the parameters in function manual Counting, Measurement and Position Detection in sections Basic parameters and Configuring the High_Speed_Counter available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
42
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
4.1.4
Address space
Address space of the technology module
Table 4- 6 Size of input and output addresses of the TM PosInput 2 when operating with "Counting and measurement" technology object
Size per channel Total size
Inputs 16 bytes 32 bytes
Outputs 12 bytes 24 bytes
4.1.5
Isochronous mode
The technology module supports the "Isochronous mode" system function. This system function enables position, counter and measured values to be acquired in a defined system cycle.
In isochronous mode, the cycle of the user program, the transmission of the input signals and processing in the technology module are synchronized. The output signals switch immediately if the relevant comparison condition is met. A status change of a digital input immediately triggers the specified reaction of the technology module and the change of the status bit of the digital input in the feedback interface.
Use an OB of type "Synchronous Cycle" (e.g. OB61) in this operating mode. The High_Speed_Counter or SSI_Absolute_Encoder instruction is called in the assigned OB.
The update time for the measured value is synchronized with the system cycle in a suitable ratio and, if necessary, adapted in length. If you set "0", the measured value is updated once per system cycle.
Data processing
The data that was transmitted to the technology module in the current bus cycle via the control interface takes effect when it is processed in the internal technology module cycle. At the time the input data is read in (Ti), the position or counter value and the measured value as well as status bits are acquired and made available in the feedback interface for retrieval in the current bus cycle.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
43
Configuring/address space 4.1 Operating with "Counting and measurement" technology object
Isochronous mode parameters
In isochronous mode, the following parameter can affect the isochronous mode parameters of the sync domain. Filter frequency Frame length Transmission rate Monoflop time Parity Because the isochronous mode parameters are not checked in RUN, overflows can occur if you change one or more of the indicated parameters in RUN. To prevent overflows, select the option with the largest time required in the offline parameter assignment.
Additional information
You can find a detailed description of isochronous mode in the following: Function manual Isochronous Mode (STEP 7 (TIA Portal) V15.1 or higher) available for
download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109755401) Function manual PROFINET with STEP 7 available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/49948856)
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
44
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.2 Position input for ""Motion Control"" technology object
4.2
Position input for ""Motion Control"" technology object
4.2.1
Configuring
Introduction
You configure the technology module and assign its parameters with STEP 7 (TIA Portal). The technology object is used to control and monitor the functions of the technology module.
System environment
The technology module can be used in the following system environments:
Applications
Components required
Central operation
· S7-1500 automation system
with an S7-1500 CPU · TM PosInput 2
Distributed operation · with an S7-1500 CPU ·
S7-1500 automation system
ET 200MP distributed I/O system
· TM PosInput 2
Configuration software STEP 7 (TIA Portal):
· Device configuration with hardware configuration
· Parameter setting with axis and measuring input technology objects
In the user program Motion Control instructions
Additional information
You can find a detailed description of the use of Motion Control and its configuration in the following: Function manual S7-1500 Motion Control available for download on the Internet
(https://support.industry.siemens.com/cs/ww/en/view/59381279)
Function manual S7-1500T Motion Control available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109481326)
Information system of STEP 7 (TIA Portal) under "Using technology functions > Motion Control > Motion Control (S7-1200, S7-1500)"
You can find a description of configuring the technology module for position detection in the following: Function manual Counting, Measurement and Position Detection available for download
on the Internet (http://support.automation.siemens.com/WW/view/en/59709820)
Information system of STEP 7 (TIA Portal) under "Using technology functions > Counting, measurement and position input > Counting, measurement and position input (S7-1500)"
Hardware Support Packages (HSP)
If firmware version V1.3 of the module is not yet integrated in your TIA Portal Version V15, you can integrate a corresponding module using HSP0256. You can find the Hardware Support Packages (HSP) for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/72341852). You can also access this download from the menu bar of STEP 7 (TIA Portal): "Options > Support packages > Download from the Internet".
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
45
Configuring/address space 4.2 Position input for ""Motion Control"" technology object
4.2.2
Parameter setting
You specify the properties of the technology module using various parameters. Depending on the settings, not all parameters are available.
You set the parameters of the module as follows in this operating mode:
1. Insert the module from the hardware catalog under "Technology modules".
2. Set the device configuration and the parameters of the module in the hardware configuration. "Position input for "Motion Control" technology object" must be set as the operating mode.
3. Insert an axis technology object and, if necessary, the measuring input technology object from the project tree in folder "Technology objects > Add new object > Motion Control" . You can find information on configuring with axis technology objects in function manual S7-1500T Motion Control (https://support.industry.siemens.com/cs/ww/en/view/109481326).
4. Open the configuration of the axis technology object, e.g. using the Configuration button in the respective instruction for the technology object.
5. Set the parameters of the technology objects.
6. Download the project to the CPU.
Note
This operating mode applies automatically to both channels of the technology module.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
46
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.2 Position input for ""Motion Control"" technology object
4.2.2.1
Parameters (SSI absolute encoder)
Parameters of the TM PosInput 2 with SSI absolute encoder
The following parameter settings are possible:
Table 4- 7 Settable parameters and their default setting (SSI absolute encoder)
Parameter
Value range
Default setting
Invert direction (counter inputs)
· Deactivated · Activated
Frame length Code type
10 bits...40 bits · Gray · Dual
Transmission rate
· 125 kHz · 250 kHz · 500 kHz · 1 MHz · 1.5 MHz · 2 MHz
Monoflop time
· Automatically · 16 µs · 32 µs · 48 µs · 64 µs
Parity
· None · Even · Odd
Bit number LSB of the position value
Bit number MSB of the position value
Measuring input
Steps per revolution Number of revolutions1 (read-only)
Reference speed
0...38
1...39
DI1 1...65535 --
6.00...210000.00 U/min
Deactivated 13 bits Gray 125 kHz
Automatically
None
0 12 DI1 1 -- 3000.00 U/min
Scope HSP for STEP 7
(TIA Portal) Channel Channel Channel Channel
Channel
Channel
Channel Channel Channel Channel Channel Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
47
Configuring/address space 4.2 Position input for ""Motion Control"" technology object
Parameter
Value range
Enable diagnostic interrupt on wire break
Enable additional diagnostic interrupts
· Deactivated · Activated
· Deactivated · Activated
1 STEP 7 (TIA Portal) V15.1 or higher
Default setting Deactivated Deactivated
Scope HSP for STEP 7
(TIA Portal) Channel
Channel
NOTICE Too high an encoder speed can falsify a position value The function of an axis technology object is based on the assumption that an SSI absolute encoder never changes by more than half the value range within one module cycle1. Ensure that this condition is always met when configuring your system. 1 Non-isochronous mode: 500 s; isochronous mode: PROFINET cycle time
Explanation of parameters
You can find a detailed description of the parameters in function manual Counting, Measurement and Position Detection, section Module parameters (position input for Motion Control) available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
48
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.2 Position input for ""Motion Control"" technology object
4.2.2.2
Parameters (incremental or pulse encoder)
Parameters of the TM PosInput 2 with incremental or pulse encoder
The following parameter settings are possible:
Table 4- 8 Settable parameters and their default setting (incremental or pulse encoder)
Parameter
Value range
Signal type
Invert direction (counter inputs) Signal evaluation for counter inputs Filter frequency for counter inputs
Interface standard Signal selection for reference mark 0 Measuring input Increments per revolution / steps per revolution
· Pulse (A) · Pulse (A) and direction (B) · Count up (A), count down (B) · Incremental encoder (A, B phase-
shifted) · Incremental encoder (A, B, N)
· Deactivated · Activated
· Single · Double · Quadruple
· 100 Hz · 200 Hz · 500 Hz · 1 kHz · 2 kHz · 5 kHz · 10 kHz · 20 kHz · 50 kHz · 100 kHz · 200 kHz · 500 kHz · 1 MHz
· RS422, symmetrical · TTL (5 V), asymmetrical
· DI0 · Signal N of incremental encoder DI1 1...65535
Default setting
Pulse (A) and direction (B)
Scope
HSP for STEP 7 (TIA Portal)
Channel
Deactivated Single 200 kHz
Channel Channel Channel
RS422, symmetrical Channel
DI0
Channel
DI1
Channel
1
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
49
Configuring/address space 4.2 Position input for ""Motion Control"" technology object
Parameter
Value range
Reference speed Enable diagnostic interrupt on wire break
Enable additional diagnostic interrupts
6.00...210000.00 U/min · Deactivated · Activated
· Deactivated · Activated
1 STEP 7 (TIA Portal) V15.1 or higher
Default setting
3000.00 U/min Deactivated
Scope
HSP for STEP 7 (TIA Portal)
Channel Channel
Deactivated
Channel
Explanation of parameters
You can find a detailed description of the parameters in function manual Counting, Measurement and Position Detection, section Module parameters (position input for Motion Control) available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820).
4.2.3
Address space
Address space of the technology module
Table 4- 9 Size of input and output addresses of the TM PosInput 2 with position input for "Motion Control" technology object
Size per channel Total size
Inputs 16 bytes 32 bytes
Outputs 4 bytes 8 bytes
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
50
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.2 Position input for ""Motion Control"" technology object
4.2.4
Isochronous mode
The technology module supports the "Isochronous mode" system function. Position and counter values can be acquired in a fixed system cycle with this system function.
In isochronous mode, the cycle of the user program, the transmission of the input signals and processing in the technology module are synchronized. A status change of a digital input immediately triggers the specified reaction of the technology module and the change of the status bit of the digital input in the feedback interface.
Use an OB of type "MC-Servo" in this operating mode. Isochronous mode is needed when using the output cam and cam track technology objects. When the measuring input technology is used in combination with hardware digital input DI1, isochronous mode is not needed.
Data processing
The data that was transmitted to the technology module in the current bus cycle via the control interface takes effect when it is processed in the internal technology module cycle. At the time the input data is read in (Ti), the position or counter value as well as status bits are acquired and made available in the feedback interface for retrieval in the current bus cycle.
Isochronous mode parameters
In isochronous mode, the following parameter can affect the isochronous mode parameters of the sync domain. Filter frequency Frame length Transmission rate Monoflop time Parity Because the isochronous mode parameters are not checked in RUN, overflows can occur if you change one or more of the indicated parameters in RUN. To prevent overflows, select the option with the largest time required in the offline parameter assignment.
Additional information
You can find a detailed description of isochronous mode in the following:
Function manual Isochronous Mode (STEP 7 (TIA Portal) V15.1 or higher) available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109755401)
Function manual PROFINET with STEP 7 available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/49948856)
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
51
Configuring/address space 4.3 Manual operation (without technology object)
4.3
Manual operation (without technology object)
4.3.1
Configuring
Introduction
You configure the technology module and assign its parameters with the configuration software.
The functions of the technology module are controlled and checked by the user program via the control and feedback interface.
System environment
The technology module can be used in the following system environments:
Applications
Components required
Central operation
· S7-1500 automation system
with an S7-1500 CPU · TM PosInput 2
Configuration software STEP 7 (TIA Portal):
· Device configuration and parameter setting with hardware configuration
In the user program
Direct access to control and feedback interface in the I/O data
Distributed operation · with an S7-1500 CPU ·
·
S7-1500 automation system ET 200MP distributed I/O system TM PosInput 2
STEP 7 (TIA Portal):
· Device configuration and parameter setting with hardware configuration
Distributed operation · S7-300/400 or S7-1200 auto-
with an S7-300/400
mation system
CPU
· ET 200MP distributed I/O
system
· TM PosInput 2
Distributed operation · with an S7-1200 CPU
·
S7-300/400 or S7-1200 automation system
ET 200MP distributed I/O system
STEP 7 (TIA Portal):
Device configuration and parameter setting with hardware configuration
STEP 7:
Device configuration and parameter setting with GSD file
STEP 7 (TIA Portal):
Device configuration and parameter setting with hardware configuration
· TM PosInput 2
Distributed operation · Third-party automation system Third-party configuration soft-
in a third-party system
· ET 200MP distributed I/O system
ware:
Device configuration and parameter setting with GSD file
· TM PosInput 2
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
52
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.3 Manual operation (without technology object)
Additional information
You can find a detailed description of the counting and measurement functions and their configuration in the following:
Function manual Counting, Measurement and Position Detection available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820)
Information system of STEP 7 (TIA Portal) under "Using technology functions > Counting, measurement and position input > Counting, measurement and position input (S7-1500)"
Hardware Support Packages (HSP)
If firmware version V1.3 of the module is not yet integrated in your TIA Portal Version V15, you can integrate a corresponding module using HSP0256.
You can find the Hardware Support Packages (HSP) for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/72341852).
You can also access this download from the menu bar of STEP 7 (TIA Portal): "Options > Support packages > Download from the Internet".
GSD file
You can find the respective GSD file for the ET 200MP distributed I/O system for download on the Internet:
GSD file for PROFINET IO (http://support.automation.siemens.com/WW/view/en/68189683)
GSD file for PROFIBUS DP (http://support.automation.siemens.com/WW/view/en/80206700)
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
53
Configuring/address space 4.3 Manual operation (without technology object)
4.3.2
Reaction to CPU STOP
Reaction to CPU STOP
You set the reaction of the technology module to a STOP of the CPU on a channel-bychannel basis in the basic parameters of the device configuration.
Table 4- 10 Reaction of technology module to CPU STOP
Option Continue operation Output substitute value
Keep last value
Meaning
The technology module remains fully functional. Incoming count pulses are processed or the position value is read in. The digital outputs continue to switch according to the parameter assignment.
The technology module outputs the configured substitute values at the digital outputs until the next CPU STOP-RUN transition.
The technology module is returned to its startup state after a STOP-RUN transition: The counter value is set to the Start value (with incremental encoders or pulse encoders) and the digital outputs switch according to the parameter assignment.
The technology module outputs the values at the digital outputs that were valid when the transition to STOP took place until the next CPU STOP-RUN transition.
If a digital output with the "At comparison value for a pulse duration" function is set at CPU STOP, the digital output is reset after the pulse duration elapses.
The technology module is returned to its startup state after a STOP-RUN transition: The counter value is set to the Start value (with incremental encoders or pulse encoders) and the digital outputs switch according to the parameter assignment.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
54
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.3 Manual operation (without technology object)
4.3.3
Parameter setting
You specify the properties of the technology module using various parameters. Depending on the settings, not all parameters are available. When parameters are assigned in the user program, the parameters are transferred to the module with the "WRREC" instruction and data record 128 (Page 93).
You set the parameters of the module as follows in this operating mode:
Parameter setting using... Hardware configuration in STEP 7 (TIA Portal)
Hardware configuration with GSD file for distributed operation on PROFINET IO
Hardware configuration with GSD file for distributed operation on PROFIBUS DP
Basic procedure
1. Insert the module from the hardware catalog under "Technology modules".
2. Set the device configuration and the parameters of the module in the hardware configuration. "Manual operation (without technology object)" must be set as the operating mode.
3. Download the project to the CPU.
1. Install the current PROFINET GSD file. You will then find the module in the hardware catalog under "Other field devices > PROFINET IO > I/O".
2. Set the parameters in the hardware configuration. You can find information on the respective dependencies of the parameters in function manual Counting, Measurement and Position Detection (http://support.automation.siemens.com/WW/view/en/59709820).
3. Download the project to the CPU.
1. Install the current PROFIBUS GSD file. You will then find the module in the hardware catalog under "Other field devices > PROFIBUS DP > I/O".
2. Set the parameters in the hardware configuration. You can find information on the respective dependencies of the parameters in function manual Counting, Measurement and Position Detection (http://support.automation.siemens.com/WW/view/en/59709820). The parameters marked with 1 in the following tables are not configurable in the PROFIBUS GSD file.
3. Download the project to the CPU. The parameters marked with 1 in the following tables are downloaded with their default setting.
4. If necessary, set the parameters marked with 1 in the user program using data record 128.
Note
The "Operating with "Counting and measurement" technology object" and "Manual operation (without technology object)" operating modes apply to one channel in each case. As a result, you can also use a module with both operating modes.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
55
Configuring/address space 4.3 Manual operation (without technology object)
4.3.3.1
Parameters (SSI absolute encoder)
Parameters of the TM PosInput 2 with SSI absolute encoder
The following parameter settings are possible:
Table 4- 11 Settable parameters and their default setting (SSI absolute encoder)
Parameter
Value range
Default setting
Operating mode3
· Position input · Measuring
Reaction to CPU STOP1
· Output substitute value · Keep last value · Continue operation
Substitute value for DQ01
· 0 · 1
Substitute value for DQ11
· 0 · 1
Enable diagnostic interrupt · Deactivated
on wire break2
· Activated
Enable additional diagnostic · Deactivated
interrupts
· Activated
Hardware interrupt: New Capture value available1
· Deactivated · Activated
Hardware interrupt: Direction reversal1
· Deactivated · Activated
Hardware interrupt: Zero crossing1
· Deactivated · Activated
Hardware interrupt: Comparison event for DQ0 occurred1
Hardware interrupt: Comparison event for DQ1 occurred1
Invert direction1 (counter inputs)
· Deactivated · Activated
· Deactivated · Activated
· Deactivated · Activated
Frame length Code type
10 bits...40 bits · Gray · Dual
Counting Output substitute value
0 0 Deactivated Deactivated Deactivated Deactivated Deactivated Deactivated Deactivated Deactivated 13 bits Gray
Parameter reassignment in
RUN
No
Scope
HSP for STEP 7 (TIA Portal); GSD file
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
56
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.3 Manual operation (without technology object)
Parameter
Value range
Transmission rate
· 125 kHz · 250 kHz · 500 kHz · 1 MHz · 1.5 MHz · 2 MHz
Monoflop time1
· Automatically · 16 µs · 32 µs · 48 µs · 64 µs
Parity
· None · Even · Odd
Bit number LSB of the position value
Bit number MSB of the position value
Set function of DI
0...38 1...39
· Capture · Digital input without function
Input delay for digital inputs1
· None · 0.05 ms · 0.1 ms · 0.4 ms · 0.8 ms · 1.6 ms · 3.2 ms · 12.8 ms · 20 ms
Edge selection for DI1
· At rising edge · At falling edge · At rising and falling edge
Frequency of Capture func- · Once
tion1
· Periodic
Default setting 125 kHz
Parameter reassignment in
RUN
Yes
Scope
HSP for STEP 7 (TIA Portal); GSD file
Channel
Automatically
Yes
Channel
None
Yes
Channel
0
Yes
12
Yes
DI0, DI1: Digital
Yes
input without func-
tion
0.1 ms
Yes
Channel Channel Channel
Channel
At rising edge
Yes
Channel
Once
Yes
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
57
Configuring/address space 4.3 Manual operation (without technology object)
Parameter Set output
Comparison value 01 Comparison value 11 Count direction of DQ function1 Pulse duration [ms/10]1 Hysteresis (in increments)1 Measured variable
Update time [ms] of the measuring function1
Value range
Default setting
· Use by user program
DQ0, DQ1:
· Between comparison value
Between compari-
and high limit / measured value son value and high
>= comparison value
limit
· Between comparison value and low limit / measured value <= comparison value
· At comparison value for a pulse duration
· After set command from CPU until comparison value
· Between comparison value 0 and 1
· Not between comparison value 0 and 1
-2147483648...2147483647 -2147483648...2147483647 · Up
0 10 In both directions
· Down
· In both directions
0...65535
0...255 · Frequency
5000 (corresponds to 0.5 s)
0
Frequency
· Period · Velocity
· Complete SSI frame
0...25000
10
Parameter reassignment in
RUN Yes
Yes Yes Yes
Yes Yes Yes
Yes
Scope HSP for STEP 7
(TIA Portal); GSD file
Channel
Channel Channel Channel
Channel Channel Channel
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
58
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.3 Manual operation (without technology object)
Parameter
Value range
Time base for velocity measurement1
Increments per unit1
· 1 ms · 10 ms · 100 ms · 1s · 60 s 1...65535
Default setting 60 s
Parameter reassignment in
RUN
Yes
Scope
HSP for STEP 7 (TIA Portal); GSD file
Channel
1
Yes
Channel
1 Because the number of parameters is limited to a maximum of 244 bytes per station in the PROFIBUS GSD configuration, the possible parameter assignments are limited. The parameters are preassigned default settings in the module. If your PROFIBUS master supports the "Write/read data record" function, you can set these parameters using data record 128.
2 When a GSD file is used, this diagnostic interrupt is enabled with the "Enable additional diagnostic interrupts" parameter and is then not separately configurable.
3 When configuring with a GSD file, you determine the operating mode when you select the module name.
NOTICE Too high an encoder speed can supply the wrong rotation direction If an SSI absolute encoder rotates so fast that more than half the value range is covered within one module cycle1, the velocity and rotation direction are no longer calculated correctly. As a result, the following may function incorrectly: · DQ functions · Feedback bits EVENT_OFLW, EVENT_UFLW, EVENT_ZERO, EVENT_CMP0,
EVENT_CMP1 and STS_DIR
1 Non-isochronous mode: 500 s; isochronous mode: PROFINET cycle time
Note If you use an SSI absolute encoder whose value range does not correspond to a power of 2, the calculated velocity measurement can be incorrect at the moment of the overflow.
Explanation of parameters
You can find a detailed description of the parameters in function manual Counting, Measurement and Position Detection, sections Basic parameters and Manual operation available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
59
Configuring/address space 4.3 Manual operation (without technology object)
4.3.3.2
Parameters (incremental or pulse encoder)
Parameters of the TM PosInput 2 with incremental or pulse encoder
The following parameter settings are possible:
Table 4- 12 Settable parameters and their default setting (incremental or pulse encoder)
Parameter
Value range
Operating mode3
· Counting · Measuring
Reaction to CPU STOP1
· Output substitute value · Keep last value · Continue operation
Substitute value for DQ01
· 0 · 1
Substitute value for DQ11
· 0 · 1
Enable diagnostic interrupt · Deactivated
on wire break2
· Activated
Enable additional diagnostic · Deactivated
interrupts
· Activated
Hardware interrupt: New Capture value available1
· Deactivated · Activated
Hardware interrupt: Synchronization of the counter by an external signal1
Hardware interrupt: Gate start1
· Deactivated · Activated
· Deactivated · Activated
Hardware interrupt: Gate stop1
· Deactivated · Activated
Hardware interrupt: Overflow (high counting limit violated)1
Hardware interrupt:Underflow (low counting limit violated)1
Hardware interrupt: Direction reversal1
· Deactivated · Activated
· Deactivated · Activated
· Deactivated · Activated
Default setting Counting
Parameter reassignment in RUN
Scope
HSP for STEP 7 (TIA Portal); GSD file
No
Channel
Output substitute Yes value
Channel
0
Yes
0
Yes
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Channel Channel Channel Channel Channel Channel
Deactivated
Yes
Deactivated
Yes
Deactivated
Yes
Channel Channel Channel
Deactivated
Yes
Channel
Deactivated
Yes
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
60
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.3 Manual operation (without technology object)
Parameter
Hardware interrupt: Zero crossing1 Hardware interrupt: Comparison event for DQ0 occurred1 Hardware interrupt: Comparison event for DQ1 occurred1 Signal type
Signal evaluation for counter inputs Filter frequency for counter inputs1
Invert direction1 (counter inputs) Reaction to signal N1
Frequency of synchronization1
Value range
· Deactivated · Activated · Deactivated · Activated
Default setting Deactivated
Parameter reassignment in RUN
Scope
HSP for STEP 7 (TIA Portal); GSD file
Yes
Channel
Deactivated
Yes
Channel
· Deactivated · Activated
Deactivated
Yes
Channel
· Pulse (A) · Pulse (A) and direction (B) · Count up (A), count down (B) · Incremental encoder (A, B
phase-shifted) · Incremental encoder (A, B, N)
· Single · Double · Quadruple
· 100 Hz · 200 Hz · 500 Hz · 1 kHz · 2 kHz · 5 kHz · 10 kHz · 20 kHz · 50 kHz · 100 kHz · 200 kHz · 500 kHz · 1 MHz
· Deactivated · Activated
· No reaction to signal N · Synchronization at signal N · Capture at signal N
· Once · Periodic
Pulse (A) and direc- Yes tion (B)
Single
Yes
200 kHz
Yes
Deactivated
Yes
No reaction to sig- Yes nal N
Once
Yes
Channel Channel Channel
Channel Channel Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
61
Configuring/address space 4.3 Manual operation (without technology object)
Parameter
Value range
Frequency of Capture func- · Once
tion1
· Periodic
Default setting Once
Parameter reassignment in RUN
Scope
HSP for STEP 7 (TIA Portal); GSD file
Yes
Channel
Interface standard
· RS422, symmetrical · TTL (5 V), asymmetrical
RS422, symmetrical Yes
Channel
Counting high limit1 Start value1 Counting low limit1 Reaction to violation of a counting limit
-2147483648...2147483647 -2147483648...2147483647 -2147483648...2147483647 · Stop counting · Continue counting
2147483647
Yes
0
Yes
-2147483648
Yes
Continue counting Yes
Channel Channel Channel Channel
Reset when counting limit is · To opposite counting limit
violated
· To start value
To opposite count- Yes ing limit
Channel
Reaction to gate start
· Set to start value · Continue with current value
Continue with cur- Yes rent value
Channel
Set function of DI
· Gate start/stop (level-triggered) · DI0: Gate
Yes
· Gate start (edge-triggered) · Gate stop (edge-triggered) · Synchronization · Enable synchronization at
start/stop (leveltriggered)
· DI1: Digital input without function
signal N
· Capture
· Digital input without function
Channel
Select level for DI1
· Active with high level · Active with low level
Active with high
Yes
level
Channel
Edge selection for DI1
· At rising edge
At rising edge
Yes
· At falling edge
· At rising and falling edge
Channel
Behavior of counter value · Continue counting
Continue counting Yes
after Capture with DI 1
· Set to start value and continue
counting
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
62
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.3 Manual operation (without technology object)
Parameter Input delay for digital inputs1
Set output
Comparison value 01 Comparison value 11 Count direction of DQ function1 Pulse duration [ms/10]1 Hysteresis (in increments)1 Measured variable Update time [ms] of the measuring function1
Value range
Default setting
· None
0.1 ms
· 0.05 ms
· 0.1 ms
· 0.4 ms
· 0.8 ms
· 1.6 ms
· 3.2 ms
· 12.8 ms
· 20 ms
· Use by user program
DQ0, DQ1:
· Between comparison value
Between compari-
and high limit / measured value son value and high
>= comparison value
limit
· Between comparison value and low limit / measured value <= comparison value
· At comparison value for a pulse duration
· After set command from CPU until comparison value
· Between comparison value 0 and 1
· Not between comparison value 0 and 1
-2147483648...2147483647 -2147483648...2147483647 · Up
0 10 In both directions
· Down
· In both directions
0...65535
0...255 · Frequency
5000 (corresponds to 0.5 s)
0
Frequency
· Period
· Velocity
0...25000
10
Parameter reassignment in RUN
Scope
HSP for STEP 7 (TIA Portal); GSD file
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
63
Configuring/address space 4.3 Manual operation (without technology object)
Parameter
Value range
Time base for velocity measurement1
Increments per unit1
· 1 ms · 10 ms · 100 ms · 1s · 60 s 1...65535
Default setting 60 s
Parameter reassignment in RUN
Scope
HSP for STEP 7 (TIA Portal); GSD file
Yes
Channel
1
Yes
Channel
1 Because the number of parameters is limited to a maximum of 244 bytes per station in the PROFIBUS GSD configuration, the possible parameter assignments are limited. The parameters are preassigned default settings in the module. If your PROFIBUS master supports the "Write/read data record" function, you can set these parameters using data record 128.
2 When a GSD file is used, this diagnostic interrupt is enabled with the "Enable additional diagnostic interrupts" parameter and is then not separately configurable.
3 When configuring with a GSD file, you determine the operating mode when you select the module name.
Explanation of parameters
You can find a detailed description of the parameters in function manual Counting, Measurement and Position Detection, sections Basic parameters and Manual operation available for download on the Internet (http://support.automation.siemens.com/WW/view/en/59709820).
4.3.4
Address space
Address space of the technology module
Table 4- 13 Size of input and output addresses of the TM PosInput 2 with manual operation
Size per channel Total size
Inputs 16 bytes 32 bytes
Outputs 12 bytes 24 bytes
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
64
Manual, 06/2018, A5E03982218-AB
4.3.5
Configuring/address space 4.3 Manual operation (without technology object)
Control and feedback interface
Note The control and feedback interface is compatible with the control and feedback interface of the TM PosInput 1, TM Count 2x24V and TM Count 1x24V technology modules of the S7-1500 automation system.
4.3.5.1
Assignment of the control interface
The user program uses the control interface to influence the behavior of the technology module.
Control interface per channel
The following table shows the assignment of the control interface:
Byte offset from start address Channel
0/1
0 12 ... ... 3 15
Bit 7
4 16 ... ... 7 19
8 20
9 21
EN_
CAPTURE
10 22 SET_DIR
11 23
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
SLOT_0:
DINT or REAL: Load value (meaning of the value is specified in LD_SLOT_0)
Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
SLOT_1:
DINT or REAL: Load value (meaning of the value is specified in LD_SLOT_1)
Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
LD_SLOT_1
LD_SLOT_0
EN_
EN_
SET_DQ1 SET_DQ0
TM_
TM_
SYNC_DN SYNC_UP
CTRL_DQ1 CTRL_DQ0
Reserved
RES_ EVENT
Reserved
SW_GATE
RES_ ERROR
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
65
Configuring/address space 4.3 Manual operation (without technology object)
Explanations
Control bit/value EN_CAPTURE EN_SYNC_DN EN_SYNC_UP LD_SLOT_m
RES_EVENT Reserved RES_ERROR SET_DIR SET_DQ0 SET_DQ1
Explanations Use this bit to enable the Capture function. Resetting this bit resets a set EVENT_CAP in the feedback interface. Use this bit to enable the synchronization of the counter when counting in downward direction with an incremental encoder or pulse encoder. Resetting this bit resets a set EVENT_SYNC in the feedback interface. Use this bit to enable the synchronization of the counter when counting in upward direction with an incremental encoder or pulse encoder. Resetting this bit resets a set EVENT_SYNC in the feedback interface. Use this load request to specify the meaning of the value in SLOT_m:
· 0000 means: No action, idle
· 0001 means: Load counter value (for incremental or pulse encoder)
· 0010 not permitted
· 0011 means: Load start value (for incremental or pulse encoder)
· 0100 means: Load comparison value 0
· 0101 means: Load comparison value 1
· 0110 means: Load counting low limit (for incremental or pulse encoder)
· 0111 means: Load counting high limit (for incremental or pulse encoder)
· 1000 to 1111 not permitted The technology module executes the respective action as soon as LD_SLOT_m changes. If values are loaded simultaneously using LD_SLOT_0 and LD_SLOT_1, the value from SLOT_0 is internally applied first and then the value from SLOT_1 . This can produce unexpected intermediate states. Use this bit to trigger the reset of the saved events in the EVENT_ZERO, EVENT_OFLW, EVENT_UFLW, EVENT_CMP0, EVENT_CMP1 feedback bits. Reserve bits must be set to 0. Use this bit to trigger the reset of the saved error states LD_ERROR and ENC_ERROR . Use this bit to specify the count direction for signal type "Pulse (A)".
· 0 means: Up
· 1 means: Down
Use this bit to set digital output DQ0 when TM_CTRL_DQ0 is set to 0. In the case of the function "After set command from CPU until comparison value", SET_DQ0 is effective regardless of TM_CTRL_DQ0 as long as the counter value is not equal to the comparison value. Use this bit to set digital output DQ1 when TM_CTRL_DQ1 is set to 0. In the case of the function "After set command from CPU until comparison value", SET_DQ1 is effective regardless of TM_CTRL_DQ1 as long as the counter value is not equal to the comparison value.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
66
Manual, 06/2018, A5E03982218-AB
Control bit/value SW_GATE
TM_CTRL_DQ0 TM_CTRL_DQ1
Configuring/address space 4.3 Manual operation (without technology object)
Explanations Use this bit to open and close the software gate when using an incremental encoder or pulse encoder. Together, the software gate and the hardware gate form the internal gate. The technology module only counts when the internal gate is open. · 0 means: Software gate closed · 1 means: Software gate open The digital inputs of the technology module externally control the hardware gate. The hardware gate can be activated by parameter assignment. The software gate cannot be deactivated. Use this bit to enable the technological function of digital output DQ0. · 0 means: SET_DQ0 defines the state of DQ0 · 1 means: assigned function defines the state of DQ0 Use this bit to enable the technological function of digital output DQ1. · 0 means: SET_DQ1 defines the state of DQ1 · 1 means: assigned function defines the state of DQ1
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
67
Configuring/address space 4.3 Manual operation (without technology object)
4.3.5.2
Assignment of the feedback interface
The user program receives current values and status information from the technology module by means of the feedback interface.
Feedback interface per channel
The following table shows the assignment of the feedback interface:
Byte offset from start address Channel
0/1 0 16 ... ... 3 19 4 20 ... ... 7 23 8 24 ... ... 11 27 12 28
13 29
14 30 15 31
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
COUNT_VALUE: DINT: Current counter value or position value
CAPTURED_VALUE: DINT: The last acquired Capture value
MEASURED_VALUE: REAL: Current measured value or DWORD: Complete SSI frame
Reserved
Reserved
STS_M_ INTERVAL
STS_DI1
EVENT_ CAP
Reserved
STS_SW_ GATE
STS_DI0 EVENT_
SYNC
STS_ READY
STS_DQ1
EVENT_ CMP1
LD_STS_ SLOT_1
STS_DQ0
EVENT_ CMP0
LD_ERROR ENC_ ERROR
LD_STS_ RES_EVEN
SLOT_0
T_ACK
STS_GATE STS_CNT
EVENT_ OFLW
EVENT_ UFLW
Bit 0
POWER_ ERROR Reserved STS_DIR EVENT_ ZERO
Note Validity of the position value
The position value of an SSI absolute encoder is valid when STS_READY is set to 1 and ENC_ERROR is set to 0. STS_READY is set to 0 while the module starts up.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
68
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.3 Manual operation (without technology object)
Explanations
Feedback bit/value Explanations CAPTURED_VALUE This DINT value indicates the last acquired Capture value.
The following external signals can trigger the Capture function:
· Rising or falling edge of a digital input
· Both edges of a digital input
The "Frequency of Capture function" parameter specifies whether the function is executed at each configured edge or only once after each enable.
COUNT_VALUE
This DINT value indicates the current counter value or position value.
If you use an SSI absolute encoder with a position value length up to 31 bits, the position value is treated as unsigned and as a positive value and can assume values between 0 and 2(MSB-LSB+1)-1. If you use an SSI absolute encoder with a position value length of 32 bits, the MSB of the position value corresponds to the sign and the position value can assume values between 2147483648 and 2147483647. If you use a 32-bit position value for the comparison function, the position value is interpreted as DINT.
ENC_ERROR
This bit indicates that one of the following errors has occurred at the encoder signals (retentive) for the respective technology module:
· Invalid transition of A/B signals (with incremental encoder)
· RS422/TTL error
· SSI encoder error or SSI frame error (with SSI absolute encoder)
If you have enabled the diagnostic interrupts, the respective diagnostic interrupt is triggered in the event of encoder signal errors. For information on the meaning of the diagnostic interrupts, refer to the manual for the respective technology module.
The bit is reset once you have acknowledged the error with RES_ERROR .
EVENT_CAP
This bit indicates that a Capture event has occurred and a counter value has been saved in CAPTURED_VALUE . You reset the status by resetting EN_CAPTURE .
EVENT_CMP0
This bit indicates the saved status that a comparison event (status change) has occurred for the digital output DQ0 based on the selected comparison condition. You reset the status by acknowledgment with RES_EVENT.
If the counter value is set to the start value in counting mode, EVENT_CMP0 is not set.
EVENT_CMP1
This bit indicates the saved status that a comparison event (status change) has occurred for the digital output DQ1 based on the selected comparison condition. You reset the status by acknowledgment with RES_EVENT.
If the counter value is set to the start value in counting mode, EVENT_CMP1 is not set.
EVENT_OFLW
This bit indicates the saved status that the counter value had an overflow. You reset the status by acknowledgment with RES_EVENT.
EVENT_SYNC
When an incremental or pulse encoder is used, this bit indicates the saved status that the counter was loaded with the start value by an external reference signal (synchronization). You reset the status by resetting EN_SYNC_UP or EN_SYNC_DN .
EVENT_UFLW
This bit indicates the saved status that the counter value had an underflow. You reset the status by acknowledgment with RES_EVENT.
EVENT_ZERO
This bit indicates the saved status that the counter value or position value had a zero crossing. You reset the status by acknowledgment with RES_EVENT.
When the "Zero crossing" hardware interrupt is enabled, for system-related reasons it can also be triggered if "0" is outside the configured value range.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
69
Configuring/address space 4.3 Manual operation (without technology object)
Feedback bit/value LD_ERROR
Explanations
This bit indicates that an error occurred (latching) during loading via the control interface. The loaded values were not applied. When using an incremental or pulse encoder, one of the following conditions is not fulfilled:
· Low counting limit <= counter value <= high counting limit
· Low counting limit <= start value <= high counting limit
· Low counting limit <= comparison value 0/1 <= high counting limit When using an SSI absolute encoder, one of the following conditions is not fulfilled:
· 0 <= position value <= maximum position value
· 0 <= comparison value 0/1 <= maximum position value The bit is reset once you have acknowledged the error with RES_ERROR .
LD_STS_SLOT_0 LD_STS_SLOT_1
This bit indicates by a status change (toggling) that the load request for SLOT_0 (LD_SLOT_0) was detected and performed.
This bit indicates by a status change (toggling) that the load request for SLOT_1 (LD_SLOT_1) was detected and performed.
MEASURED_VALUE This value indicates the current measured value with data type REAL or the complete SSI frame with data type DWORD:
· Frequency: The mean frequency is calculated from the time profile of the count pulses or position value changes in one measurement interval and returned as a floating-point number in the unit of hertz.
· Period: The mean period is calculated from the time profile of the count pulses or position value changes in one measurement interval and returned as a floating-point number in the unit of seconds.
· Velocity: The mean velocity is calculated from the time profile of the count pulses or position value changes in one measurement interval and returned as a floating-point number in the configured unit.
· Complete SSI frame: Instead of a measured quantity, the least significant 32 bits of the unprocessed current SSI frame are returned. This provides you with encoder-specific additional bits, such as error bits, in addition to the position value. If the SSI frame is shorter than 32 bits, the complete SSI frame is returned right-aligned and the top unused bits are returned with "0" in the feedback interface.
The measured values are returned as a signed value. The sign indicates whether the counter value or position value went up or down in the relevant time interval.
The update time is asynchronous to the opening of the internal gate, i.e. the update time is not started when the gate opens. After the internal gate closes, the last calculated measured value continues to be returned.
POWER_ERROR RES_EVENT_ACK
This bit indicates that supply voltage L+ is not present or is too low or the front connector is not inserted. If you have enabled the diagnostic interrupts (Page 76), the diagnostic interrupt "Load voltage missing" is triggered at a supply voltage error.
When supply voltage L+ is available at a sufficient level once again, POWER_ERROR is automatically set to 0.
This bit indicates that the reset of event bit EVENT_SYNC, EVENT_CMP0, EVENT_CMP1, EVENT_OFLW, EVENT_UFLW, EVENT_ZERO is active.
Reserved
Reserved bits are set to 0.
STS_CNT STS_DI0
This bit indicates that at least one count pulse or a position value change has occurred in the last ca. 0.5 s.
This bit indicates the status of digital input DI0.
STS_DI1
This bit indicates the status of digital input DI1.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
70
Manual, 06/2018, A5E03982218-AB
Configuring/address space 4.3 Manual operation (without technology object)
Feedback bit/value STS_DIR
STS_DQ0 STS_DQ1 STS_GATE
STS_M_INTERVAL STS_READY STS_SW_GATE
Explanations This bit indicates the count direction of the last count pulse or the direction of the last position value change.
· 0 means: Down
· 1 means: Up
This bit indicates the status of digital output DQ0.
This bit indicates the status of digital output DQ1.
This bit indicates the status of the internal gate when using an incremental or pulse encoder.
· 0 means: Gate closed
· 1 means: Gate open Note: In order for the counting logic including the gate control to operate correctly, the startup of the technology module must finish correctly at least once with a connected incremental or pulse encoder (STS_READY auf 1). If a connected encoder is not yet ready during the startup, the function of feedback bit STS_GATE is delayed until the encoder for the technology module is available. When the technology module starts up without a connected encoder, the startup does not finish correctly and STS_READY as well as STS_GATE remain set to 0. As soon as an encoder is connected, the startup finishes and STS_GATE functions correctly. An encoder error after a finished startup has no effect on STS_GATE.
This bit indicates that at least one count pulse or a position value change was detected in the previous measurement interval.
This bit indicates that the technology module supplies valid user data. The technology module has been started up and configured.
This bit indicates the status of the software gate.
· 0 means: Gate closed
· 1 means: Gate open
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
71
Configuring/address space 4.3 Manual operation (without technology object)
4.3.6
Isochronous mode
The technology module supports the "Isochronous mode" system function. This system function enables position, counter and measured values to be acquired in a defined system cycle.
In isochronous mode, the cycle of the user program, the transmission of the input signals and processing in the technology module are synchronized. The output signals switch immediately if the relevant comparison condition is met. A status change of a digital input immediately triggers the specified reaction of the technology module and the change of the status bit of the digital input in the feedback interface.
Use an OB of type "Synchronous Cycle" (e.g. OB61) in this operating mode. The input and output data are processed in the assigned OB.
The update time for the measured value is synchronized with the system cycle in a suitable ratio and, if necessary, adapted in length. If you set "0", the measured value is updated once per system cycle.
Data processing
The data that was transmitted to the technology module in the current bus cycle via the control interface takes effect when it is processed in the internal technology module cycle. At the time the input data is read in (Ti), the position or counter value and the measured value as well as status bits are acquired and made available in the feedback interface for retrieval in the current bus cycle.
Isochronous mode parameters
In isochronous mode, the following parameter can affect the isochronous mode parameters of the sync domain.
Filter frequency
Frame length
Transmission rate
Monoflop time
Parity
Because the isochronous mode parameters are not checked in RUN, overflows can occur if you change one or more of the indicated parameters in RUN. To prevent overflows, select the option with the largest time required in the offline parameter assignment.
Additional information
You can find a detailed description of isochronous mode in the following:
Function manual Isochronous Mode (STEP 7 (TIA Portal) V15.1 or higher) available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109755401)
Function manual PROFINET with STEP 7 available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/49948856)
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
72
Manual, 06/2018, A5E03982218-AB
Interrupts/diagnostic messages
5
5.1
LEDs
Status and error display
The following figure shows you the LED displays (status and error displays) of TM PosInput 2.
Figure 5-1 LED displays of the TM PosInput 2
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
73
Interrupts/diagnostic messages 5.1 Status and error display
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in section Diagnostic alarms (Page 76).
Table 5- 1 Status and error displays RUN/ERROR/MAINT
RUN Off
Flashes On On
Flashes
LEDs ERROR
Off
Off Off Flashes Flashes
MAINT Off
Off Off Off Flashes
Meaning
Remedy
Missing or insufficient voltage on the backplane bus
Switch on the CPU and/or the system power supply modules.
· Check whether the U connectors are plugged in correctly.
· Check whether too many modules are plugged in.
Technology module parameters not set ---
Technology module parameters set and no module diagnostics
Technology module parameters set and module diagnostics (at least one error is present)
Hardware or firmware defective
Evaluate the diagnostic alarms and eliminate the error.
Replace the technology module.
Table 5- 2 PWR/24VDC/5VDC/ERROR status displays
PWR
Off Off On On On
LEDs 24VDC/ 5VDC
Off
Off
On
Off
Off
ERROR
Meaning
Remedy
Off Flashing1
Off Off Flashing1
Supply voltage too low or missing
· Check the supply voltage.
· Make sure that the front connector is correctly inserted.
Supply voltage is present and OK
---
Short-circuit or overload at the encoder ·
supply
·
·
Correct the encoder wiring. Check the loads connected to the encoder supply. Check the supply voltage.
1 Only when diagnostic interrupts enabled
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
74
Manual, 06/2018, A5E03982218-AB
Interrupts/diagnostic messages 5.1 Status and error display
Channel LEDs
The CHn.A, CHn.B, CHn.N and DIn.m LEDs indicate the current level of the associated signals. The LEDs of the DQn.m digital outputs indicate the desired state.
The flashing frequency of the channel LEDs is limited to approximately 12 Hz. If higher frequencies are present, the channel LEDs will flash at 12 Hz instead of indicating the current status.
When an SSI absolute encoder is used, the CHn.D and CHn.C LEDs are lit green during transfer of the encoder frame and are lit red if an error occurred. The CHn.D and CHn.C LEDs are off when no encoder frame is being transferred or if an error has occurred for which the diagnostic interrupt is not enabled.
Table 5- 3 Status displays CHn.m/DIn.m/DQn.m
LEDs CHn.m/DIn.m/DQn.
m
Off
On
On (CHn.m/DQn.m)
Meaning
Counter input/digital input/digital output at 0 level Counter input/digital input/digital output at 1 level Diagnostic alarm: e.g. wire break, short-circuit
Remedy
----Check the wiring or the connected load.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
75
Interrupts/diagnostic messages 5.2 Diagnostic alarms
5.2
Diagnostic alarms
Enabling of diagnostic interrupts
You enable the diagnostic interrupts in the device configuration with the basic parameters. The technology module can trigger the following diagnostic interrupts:
Table 5- 4 Possible diagnostic interrupts
Diagnostic interrupt · Parameter error · Hardware interrupt lost1 · Internal error · Watchdog tripped. Module is defective. · RS422/TTL error
· Supply voltage missing · Short-circuit / overload at external encoder supply · Error at digital outputs · Supply voltage error2 · SSI encoder error · Invalid transition of A/B signals · Overtemperature
Monitoring Monitoring is always active. A diagnostic interrupt is triggered each time an error is detected.
Monitoring is always active. When an error is detected, a diagnostic interrupt is only triggered if "Enable diagnostic interrupt on wire break" is activated in the device configuration. Monitoring is always active. When an error is detected, a diagnostic interrupt is only triggered if "Enable additional diagnostic interrupts" is activated in the device configuration.
1 Not available in "Position input for "Motion Control"" technology object" operating mode
2 No longer available as of module version V1.3. This case is then taken into account by the diagnostic interrupt "Supply voltage missing".
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
76
Manual, 06/2018, A5E03982218-AB
Interrupts/diagnostic messages 5.2 Diagnostic alarms
Reactions to a diagnostic interrupt
The following happens when an event occurs that triggers a diagnostic interrupt:
The ERROR LED flashes red.
Once you have remedied the error, the ERROR LED goes out.
The S7-1500 CPU interrupts processing of the user program. The diagnostic interrupt OB (e.g. OB 82) is called. The event that triggered the interrupt is entered in the start information of the diagnostic interrupt OB.
The S7-1500 CPU remains in RUN even if no diagnostic interrupt OB is present in the CPU. The technology module continues working unchanged if this is possible despite the error.
You can obtain detailed information on the error event in the error organization block with instruction "RALRM" (Read additional alarm information), in the information system of STEP 7 and in function manual Diagnostics (https://support.industry.siemens.com/cs/ww/en/view/59192926), section "System diagnostics in user program".
If the module is operated as a distributed module with PROFIBUS DP in an ET 200MP system, you have the option of reading out diagnostic data with the RDREC or RD_REC instruction using data record 0 and 1. You can find the structure of the data records in the manual for the IM 155-5 DP ST interface module available for download on the Internet (https://support.industry.siemens.com/cs/ww/de/view/78324181).
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
77
Interrupts/diagnostic messages 5.2 Diagnostic alarms
Diagnostic alarms
The display of diagnostics is in plain text in STEP 7 (TIA Portal) in the online and diagnostics view. You can evaluate the error codes with the user program.
The following diagnostics can be signaled:
Table 5- 5 Diagnostic alarms, their meaning and remedies
Diagnostic alarm Parameter error
Error code
10H
Hardware interrupt lost 16H
Internal error
Watchdog tripped. Module is defective.
100H 103H
Supply voltage missing 10AH
Short-circuit / overload 10EH at external encoder supply
Error at digital outputs 10FH
Supply voltage error1 110H
Meaning
Remedy
The received parameter data record is invalid
Check parameter data record
· Module cannot issue interrupt because · Change interrupt processing in the
a preceding interrupt has not yet been
CPU and re-assign technology module
processed
parameters correspondingly
· Possible cause: Too many hardware · Check frequency of interrupts from the
interrupts in too short a time
process
Technology module defective Firmware error Technology module defective
Replace technology module Run firmware update Replace technology module
· Missing or insufficient supply voltage L+
· Wiring of supply voltage L+ faulty · Front connector not inserted correctly
· Check supply voltage L+ · Check wiring of supply voltage L+ · Insert front connector correctly
· Error at encoder supply · Possible causes:
Short circuit Overload
· Check encoder wiring
· Check consumers connected to encoder supply
· Error at the digital outputs (LED display DQn.m lit red)
· Possible causes: Short circuit Overload
· Check encoder wiring at the digital outputs
· Check consumers connected to the digital outputs
· Error at supply voltage L+ · Possible causes:
Low voltage Wiring of supply voltage L+ faulty
· Check supply voltage L+ · Check wiring of supply voltage L+
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
78
Manual, 06/2018, A5E03982218-AB
Interrupts/diagnostic messages 5.2 Diagnostic alarms
Diagnostic alarm
Invalid transition of A/B signals
Error code
500H
RS422/TTL error
502H
SSI encoder error
503H
Overtemperature
506H
Meaning
Remedy
· Time profile of signals A and B of the incremental encoder does not meet certain requirements (relative phase shift of the two signals is too small)
· Possible causes: Signal frequency too high Encoder faulty Process wiring faulty
· Check process wiring · Check encoder/sensor · Check parameter assignment
· Error at connection of the RS422 encoder, TTL encoder or SSI absolute encoder
· Possible causes: Wire break No encoder connected Cable too long Short circuit Overload External voltage Overtemperature Parameter assignment error
· Check process wiring · Check encoder/sensor · Check parameter assignment
· Error at SSI absolute encoder connec- · Check process wiring
tion
· Check SSI absolute encoder
· Possible causes:
· Check parameter assignment
Wire break
Cable too long
Frame error (error of the start bit or stop bit)
Parity error
Parameter assignment error
· Short-circuit or overload at the digital · Check process wiring
outputs or outputs of the encoder sup- · Improve cooling
ply
· Check connected loads
· Ambient temperature outside specifi-
cations
· Contamination in the module prevents cooling
1 No longer available as of module version V1.3. This case is then taken into account by the diagnostic interrupt "Supply voltage missing".
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
79
Interrupts/diagnostic messages 5.3 Hardware interrupts
5.3
Hardware interrupts
Introduction
For the technology module, you can configure which events are to trigger a hardware interrupt during operation.
What is a hardware interrupt?
The technology module will trigger a hardware interrupt as configured in response to specific events/states. When a hardware interrupt occurs, the CPU interrupts execution of the user program and processes the assigned hardware interrupt OB. The event that triggered the interrupt is entered in the start information of the assigned hardware interrupt OB by the CPU.
Lost hardware interrupt
If an event occurs that is to trigger a hardware interrupt and the preceding event has not yet been processed, another hardware interrupt cannot be triggered. The hardware interrupt is lost and the diagnostic interrupt "Lost hardware interrupt" is triggered.
Enabling of hardware interrupts
A hardware interrupt is triggered when the condition for the change of the respective status or event bit in the feedback interface is met. You enable the hardware interrupts in the device configuration with the basic parameters. You can configure hardware interrupts to be triggered for the following event types: Opening of internal gate (gate start)1 Closing of internal gate (gate stop)1 Overflow (counting high limit violated)1 Underflow (counting low limit violated)1 Comparison event for DQ0 has occurred Comparison event for DQ1 has occurred Zero crossing4 New Capture value available2 Synchronization of the counter by an external signal1 Direction reversal3 1 Not for SSI absolute encoder 2 Only configurable in the Counting/Position input operating mode 3 Feedback bit STS_DIR is preassigned with "0". A hardware interrupt is not triggered when the first counter value or position value is changed immediately after switching on the technology module in down direction. 4 When the hardware interrupt is enabled, for system-related reasons it can also be triggered if "0" is outside the configured value range.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
80
Manual, 06/2018, A5E03982218-AB
Interrupts/diagnostic messages 5.3 Hardware interrupts
You can activate any combination of events to trigger hardware interrupts. You can obtain detailed information on the event in the hardware interrupt organization block with instruction "RALRM" (Read additional alarm information) and in the information system of STEP 7. Which channel of the module and which event has triggered the hardware interrupt is entered in the start information of the organization block. The following figure shows the assignment to the bits of the local data double word 8.
Figure 5-2 Start information of the organization block
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
81
Technical specifications
6
Article number General information
Product type designation Firmware version · FW update possible Product function · I&M data Engineering with · PROFIBUS as of GSD version/GSD revision · PROFINET as of GSD version/GSD revision Installation type/mounting Rail mounting Supply voltage Load voltage L+ · Rated value (DC) · permissible range, lower limit (DC) · permissible range, upper limit (DC) · Reverse polarity protection Input current Current consumption, max. Encoder supply Number of outputs 5 V encoder supply · 5V · short-circuit protection · Output current, max. 24 V encoder supply · 24 V · Short-circuit protection · Output current, max. Power Power available from the backplane bus Power loss Power loss, typ.
82
6ES7551-1AB00-0AB0 TM PosInput 2 V1.3 Yes
Yes; I&M0 to I&M3
GSD Revision 5 V2.3 / -
Yes; S7-1500 mounting rail
24 V 19.2 V 28.8 V Yes
75 mA; without load 4; One 5V and 24V encoder supply per channel Yes; 5.2 V ±2 % Yes 300 mA; Per channel
Yes; L+ (-0.8 V) Yes 300 mA; Per channel
1.3 W 5.5 W
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0) Manual, 06/2018, A5E03982218-AB
Technical specifications
Article number Address area Occupied address area
· Inputs · Outputs Digital inputs Number of digital inputs Digital inputs, parameterizable Input characteristic curve in accordance with IEC 61131, type 3 Digital input functions, parameterizable · Gate start/stop · Capture · Synchronization · Freely usable digital input Input voltage · Type of input voltage · Rated value (DC) · for signal "0" · for signal "1" · permissible voltage at input, min.
· permissible voltage at input, max. Input current
· for signal "1", typ. Input delay (for rated value of input voltage) for standard inputs
parameterizable at "0" to "1", min. at "1" to "0", min. for counter/technological functions parameterizable Cable length · shielded, max. · unshielded, max.
6ES7551-1AB00-0AB0
16 byte; Per channel 12 byte; per channel; 4 bytes for Motion Control
4; 2 per channel Yes Yes
Yes; only for pulse and incremental encoders Yes Yes; only for pulse and incremental encoders Yes
DC 24 V -5 ... +5 V +11 to +30V -30 V; -5 V continuous, -30 V brief reverse polarity protection 30 V
2.5 mA
Yes; none / 0.05 / 0.1 / 0.4 / 0.8 / 1.6 / 3.2 / 12.8 / 20 ms 6 µs; for parameterization "none" 6 µs; for parameterization "none"
Yes
1 000 m 600 m
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
83
Technical specifications
Article number Digital outputs
Type of digital output Number of digital outputs Digital outputs, parameterizable Short-circuit protection · Response threshold, typ. Limitation of inductive shutdown voltage to Controlling a digital input Digital output functions, parameterizable · Switching tripped by comparison values · Freely usable digital output Switching capacity of the outputs · with resistive load, max. · on lamp load, max. Load resistance range · lower limit · upper limit Output voltage · Type of output voltage · for signal "1", min. Output current · for signal "1" rated value · for signal "1" permissible range, max. · for signal "1" minimum load current · for signal "0" residual current, max. Output delay with resistive load · "0" to "1", max. · "1" to "0", max. Switching frequency · with resistive load, max. · with inductive load, max.
· on lamp load, max. Total current of the outputs
· Current per module, max. Cable length
· shielded, max. · unshielded, max.
84
6ES7551-1AB00-0AB0
Transistor 4; 2 per channel Yes Yes; electronic/thermal 1 A L+ (-33 V) Yes
Yes Yes
0.5 A; Per digital output 5 W
48 12 k
DC 23.2 V; L+ (-0.8 V)
0.5 A; Per digital output 0.6 A; Per digital output 2 mA 0.5 mA
50 µs 50 µs
10 kHz 0.5 Hz; Acc. to IEC 60947-5-1, DC-13; observe derating curve 10 Hz
2 A
1 000 m 600 m
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0) Manual, 06/2018, A5E03982218-AB
Technical specifications
Article number Encoder signals, incremental encoder (symmetrical)
· Input voltage
6ES7551-1AB00-0AB0 RS 422
· Input frequency, max.
1 MHz
· Counting frequency, max.
4 MHz; with quadruple evaluation
· Cable length, shielded, max.
32 m; at 1 MHz
· Signal filter, parameterizable
Yes
· Incremental encoder with A/B tracks, 90° phase offset Yes
· Incremental encoder with A/B tracks, 90° phase offset Yes and zero track
· Pulse encoder
Yes
· Pulse encoder with direction
Yes
· Pulse encoder with one impulse signal per count
Yes
direction
Encoder signals, incremental encoder (asymmetrical) · Input voltage
5 V TTL (push-pull encoders only)
· Input frequency, max.
1 MHz
· Counting frequency, max.
4 MHz; with quadruple evaluation
· Signal filter, parameterizable
Yes
· Incremental encoder with A/B tracks, 90° phase offset Yes
· Incremental encoder with A/B tracks, 90° phase offset Yes and zero track
· Pulse encoder
Yes
· Pulse encoder with direction
Yes
· Pulse encoder with one impulse signal per count
Yes
direction
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
85
Technical specifications
Article number Encoder signals, absolute encoder (SSI)
· Input signal · Telegram length, parameterizable · Clock frequency, max.
· Binary code · Gray code · Cable length, shielded, max.
· Parity bit, parameterizable · Monoflop time · Multiturn · Singleturn Interface types · TTL 5 V · RS 422 Isochronous mode Isochronous operation (application synchronized up to terminal) Filtering and processing time (TCI), min. Bus cycle time (TDP), min. Interrupts/diagnostics/status information Alarms · Diagnostic alarm · Hardware interrupt Diagnostic messages · Monitoring the supply voltage · Wire-break · Short-circuit · A/B transition error at incremental encoder · Telegram error at SSI encoder
6ES7551-1AB00-0AB0
to RS-422 10 ... 40 bit 2 MHz; 125 kHz, 250 kHz, 500 kHz, 1 MHz, 1.5 MHz or 2 MHz Yes Yes 320 m; Cable length, RS-422 SSI absolute encoders, Siemens type 6FX2001-5, 24 V supply: 125 kHz, 320 meters shielded, max.; 250 kHz, 160 meters shielded, max.; 500 kHz, 60 meters shielded, max.; 1 MHz, 20 meters shielded, max. 1.5 MHz, 10 meters shielded, max.; 2 MHz, 8 meters shielded, max. Yes 16, 32, 48, 64 µs & automatic Yes Yes
Yes; push-pull encoders only Yes
Yes
130 µs; only for pulse and incremental encoders 250 µs
Yes Yes
Yes Yes Yes Yes Yes
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
86
Manual, 06/2018, A5E03982218-AB
Technical specifications
Article number Diagnostics indication LED
· RUN LED · ERROR LED · MAINT LED · Monitoring of the supply voltage (PWR-LED) · Channel status display · for channel diagnostics Integrated Functions Number of counters Counting frequency (counter) max. Counting functions · Can be used with TO High_Speed_Counter · Continuous counting · Counter response parameterizable · Hardware gate via digital input · Software gate · Event-controlled stop · Synchronization via digital input · Counting range, parameterizable Comparator
Number of comparators Direction dependency Can be changed from user program Position detection · Incremental acquisition · Absolute acquisition · Suitable for S7-1500 Motion Control
6ES7551-1AB00-0AB0
Yes; Green LED Yes; Red LED Yes; yellow LED Yes; Green LED Yes; Green LED Yes; Red LED
2 4 MHz; with quadruple evaluation
Yes; only for pulse and incremental encoders Yes Yes Yes Yes Yes Yes Yes
2; Per channel Yes Yes
Yes Yes Yes
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
87
Technical specifications
Article number Measuring functions
· Measuring time, parameterizable · Dynamic measurement period adjustment · Number of thresholds, parameterizable Measuring range
Frequency measurement, min. Frequency measurement, max. Cycle duration measurement, min. Cycle duration measurement, max. Accuracy Frequency measurement
Cycle duration measurement
Velocity measurement
Potential separation Potential separation channels
· between the channels · between the channels and backplane bus · Between the channels and load voltage L+ Isolation Isolation tested with Ambient conditions Ambient temperature during operation · horizontal installation, min. · horizontal installation, max. · vertical installation, min. · vertical installation, max. Decentralized operation to SIMATIC S7-300 to SIMATIC S7-400 to SIMATIC S7-1200 to SIMATIC S7-1500 to standard PROFIBUS master to standard PROFINET controller
6ES7551-1AB00-0AB0
Yes Yes 2
0.04 Hz 4 MHz 0.25 µs 25 s
100 ppm; depending on measuring interval and signal evaluation 100 ppm; depending on measuring interval and signal evaluation 100 ppm; depending on measuring interval and signal evaluation
No Yes No
707 V DC (type test)
0 °C 60 °C; Please note derating for inductive loads 0 °C 40 °C; Please note derating for inductive loads
Yes Yes Yes Yes Yes Yes
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
88
Manual, 06/2018, A5E03982218-AB
Article number Dimensions
Width Height Depth Weights Weight, approx.
6ES7551-1AB00-0AB0
35 mm 147 mm 129 mm
325 g
Technical specifications
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
89
Technical specifications
Derating information for total current of outputs
If the digital outputs of the TM PosInput 2 are operated with inductive loads, you should derate the total current of the loads at the digital outputs of the respective channel. The total current is the sum of the load currents at all digital outputs of a channel (without encoder supply). The following derating curve shows the load capacity of the digital outputs depending on the ambient temperature and mounting position under the following conditions: Maximum switching frequency at digital outputs of 0.5 Hz Load resistance: 48 (IEC 947-5-1) Load inductance: 1150 mH (IEC 947-5-1)
Vertical installation of the system
Horizontal installation of the system
Figure 6-1 Total current depending on ambient temperature and mounting position for inductive loads
Note
If the switching frequency is greater than 0.5 Hz or there is greater inductance at the digital outputs, the total current must be reduced further.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
90
Manual, 06/2018, A5E03982218-AB
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the TM PosInput 2 technology module
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
91
Dimensional drawing
Figure A-2 Dimensional drawing of the TM PosInput 2 module, side view with open front panel
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
92
Manual, 06/2018, A5E03982218-AB
Parameter data record
B
B.1
Parameter assignment and structure of parameter data record
You have the option of reassigning module parameters with the user program while the CPU is in RUN. The parameters are transferred to the module using data record 128, e.g. with the WRREC instruction.
If an error occurs while transferring or validating parameters with the WRREC instruction, the module continues operating with the existing parameter assignment. A corresponding error code is then written to the STATUS output parameter. If no errors occur, the STATUS output parameter contains the length of the actually transferred data.
You can find a description of the WRREC instruction and the error codes in section Parameter validation error (Page 100) or in the online help of STEP 7 (TIA Portal).
Structure of data record 128 for operation with technology object and manual operation
The following table shows you the structure of data record 128 for TM PosInput 2 with 2 channels for operation with technology object and manual operation without technology object. The values in byte 0 to byte 3 are fixed and must not be changed. The value in byte 4 can only be changed by means of new parameter assignment and not in RUN mode.
Note
After each writing of data record 128, the module is set to its startup state and the counter value is set to the start value. If "Continue operation" is set for Reaction to CPU STOP, the module is then only set to its startup state when data record 128 has been changed.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
93
Parameter data record B.1 Parameter assignment and structure of parameter data record
Table B- 1 Data record 128: Operating modes "Operating with "Counting and measurement" technology object", "Manual operation (without technology object)"
Bit
Byte channel
0/1
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
0...3
Header
0
Major Version = 0
Minor Version = 2
1
Length of the parameter data per channel = 48
2
Reserved2
3
Reserved2
4...51
Channel 0
52...99
Channel 1
4/52
Operating mode
4/52 Reserved2
Operating mode:
0000B: Not permitted
0001B: Counting / Position input
0010B: Measuring
0011 to 1111B: Not permitted
5/53
Basic parameters
5/53 Interface standard:
Reserved2
Enable additional diagnostic interrupts1
Reaction to CPU STOP:
00B: Output substitute value
01B: Keep last value
0B: RS422, symmetrical
10B: Continue operation
1B: TTL (5 V), asymmetrical
11B: Not permitted
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
94
Manual, 06/2018, A5E03982218-AB
Parameter data record B.1 Parameter assignment and structure of parameter data record
Bit
Byte channel
0/1
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
6...7/ 54...55
Counter inputs (parameters for incremental and pulse encoders)
6/54 Reserved2
Signal evaluation:
Signal type:
00B: Single
0000B: Pulse (A)
01B: Double
0001B: Pulse (A) and direction (B)
10B: Quadruple
0010B: Count up (A), count down (B)
11B: Not permitted
0011B: Incremental encoder (A, B phase-shifted)
0100B: Incremental encoder (A, B, N)
0101B: Absolute encoder (SSI)
7/55 Reaction to signal N:
00B: No reaction to signal N
01B: Synchronization at signal N
Invert direction1
Enable diagnostic interrupt on wire break1
0110 to 1111B: Not permitted Filter frequency4: 0000B: 100 Hz
0001B: 200 Hz
10B: Capture at signal N
0010B: 500 Hz
11B: Not permitted
0011B: 1 kHz
0100B: 2 kHz
0101B: 5 kHz
0110B: 10 kHz
0111B: 20 kHz
1000B: 50 kHz
1001B: 100 kHz
1010B: 200 kHz
1011B: 500 kHz
1100B: 1 MHz
1101 to 1111B: Not permitted
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
95
Parameter data record B.1 Parameter assignment and structure of parameter data record
Bit
Byte channel
0/1
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
6...7/ 54...55
Counter inputs (parameters for SSI absolute encoder)
6/54 Monoflop time4:
Code type: Signal type:
000B: Automatically
0B: Gray
0000B: Pulse (A)
001B: 16 µs
1B: Dual
0001B: Pulse (A) and direction (B)
010B: 32 µs
0010B: Count up (A), count down (B)
011B: 48 µs
0011B: Incremental encoder (A, B phase-shifted)
100B: 64 µs
0100B: Incremental encoder (A, B, N)
101 to 111B: Not permitted
0101B: Absolute encoder (SSI)
7/55
Parity4: 00B: None 01B: Even 10B: Odd
Invert direction1
Enable diagnostic interrupt on wire break1
0110 to 1111B: Not permitted Reserved2 Transmission rate4:
000B: 125 kHz 001B: 250 kHz 010B: 500 kHz
11B: Not permitted
011B: 1 MHz
100B: 1.5 MHz
101B: 2 MHz
8...9/ 56...57
Hardware interrupts1)
110 to 111B: Not permitted
8/56
Reserved2
Reserved2
Reserved2
Change of direction
Underflow (low counting limit violated)
Overflow (high counting limit violated)
Gate stop3
Gate start3
9/57
Synchronization of the counter by an external signal3)
New Capture value available
Reserved2
Zero cross- Reserved2 ing
Comparison event for DQ1 has occurred
Reserved2
Comparison event for DQ0 has occurred
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
96
Manual, 06/2018, A5E03982218-AB
Parameter data record B.1 Parameter assignment and structure of parameter data record
Bit
Byte channel
0/1
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
10...15/ 58...63
Behavior of a DQ
10/58 Set output (DQ1):
Set output (DQ0):
0000B: Use by user program
0000B: Use by user program
0001B: Between comparison value and high limit; Measuring: Measured value >= comparison value
0001B: Between comparison value and high limit; Measuring: Measured value >= comparison value
0010B: Between comparison value and low limit; Measuring: Measured value <= comparison value
0010B: Between comparison value and low limit; Measuring: Measured value <= comparison value
0011B: At comparison value for a pulse duration
0011B: At comparison value for a pulse duration
0100B: Between comparison value 0 and 1
0100B: Not permitted
0101B: After set command from CPU until comparison 0101B: After set command from CPU until comparison
value
value
0110B: Not between comparison value 0 and 1
0110 to 1111B: Not permitted
11/59
0111 to 1111B: Not permitted
Count direction (DQ1):
Count direction (DQ0):
00B: Not permitted
00B: Not permitted
01B: Up
01B: Up
Reserved2
Reserved2
Substitute value for DQ1
Substitute value for DQ0
10B: Down
10B: Down
11B: In both directions
11B: In both directions
12/60
Pulse duration (DQ0):
13/61
WORD: Value range in ms/10: 0 to 65535D
14/62
Pulse duration (DQ1):
15/63
WORD: Value range in ms/10: 0 to 65535D
16/64
Behavior of DI0
16/64
Behavior of counter value after Capture3 (DI0):
Edge selection (DI0): 00B: Not permitted5 01B: At rising edge 10B: At falling edge
Select level Reserved2 (DI0):
0B: Active with high level
Set function of DI (DI0): 000B: Gate start/stop (level-triggered)3 001B: Gate start (edge-triggered)3 010B: Gate stop (edge-triggered)3
0B: Contin- 11B: At rising and falling ue counting edge
1B: Active with low level
011B: Synchronization3 100B: Enable synchronization at signal N3
1B: Set to start value and continue counting
101B: Capture 110B: Digital input without function 111B: Not permitted
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
97
Parameter data record B.1 Parameter assignment and structure of parameter data record
Bit
Byte channel
0/1
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
17/65
Behavior of DI1:
See Byte 16
18/66
Reserved2
19/67
Frequency of synchronization:4
Reserved2
Frequency of Capture function:
Input delay: 0B: Once 0001B: 0.05 ms
0B: Once
0B: Once 0010B: 0.1 ms
0011B: 0.4 ms
1B: Periodic
1B: Periodic 0100B: 0.8 ms
0101B: 1.6 ms
0110B: 3.2 ms
0111B: 12.8 ms
1000B: 20 ms
1001 to 1111B: Not permitted
20...43/ 68...91
Values
20...23/ 68...71
Counting high limit3: DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
24...27/ 72...75
Comparison value 0: Operating mode Counting: DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH;
Measuring operating mode: REAL: Floating-point number in the configured unit of the measured quantity
28...31/ 76...79
Comparison value 1: Operating mode Counting: DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH;
Measuring operating mode: REAL: Floating-point number in the configured unit of the measured quantity
32...35/ 80...83
36...39/ 84...87
Start value3: DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
Counting low limit3 DWORD: Value range: 2147483648 to 2147483647D or 80000000 to 7FFFFFFFH
40...43/ 88...91
Update time: DWORD: Value range in s: 0 to 25000000D
44/92
Counter behavior at limits and gate start
44/92 Behavior at gate start3: Reaction to violation of a counting limit3: Reset when counting limit is violated3:
00B: Set to start value
000B: Stop counting
000B: To opposite counting limit
01B: Continue with current 001B: Continue counting value
001B: To start value
10 to 11B: Not permitted 010 to 111B: Not permitted
010 to 111B: Not permitted
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
98
Manual, 06/2018, A5E03982218-AB
Parameter data record B.1 Parameter assignment and structure of parameter data record
Bit
Byte channel
0/1
Bit 7
45/93
45/93 Reserved2
Bit 6
46/94 47/95 48/96
49...51/ 97...99 49/97 Reserved2
50/98 Reserved2
51/99 Reserved2
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
Specify measured value Time base for velocity measurement: 000B: 1 ms 001B: 10 ms 010B: 100 ms 011B: 1 s 100B: 60 s/1 min 101 to 111B: Not permitted
Increments per unit: WORD: Value range: 1 to 65535D
Set hysteresis range: Value range: 0 to 255D Parameters for SSI absolute encoder
Measured variable: 00B: Frequency 01B: Period 10B: Velocity 11B: Complete SSI frame
Frame length4: Value range: 10 to 40D Bit number LSB of the position value: Value range: 0 to 38D Bit number MSB of the position value: Value range: 1 to 39D
1 You activate the respective parameter by setting the associated bit to 1. 2 Reserved bits must be set to 0 3 For signal type "Absolute encoder (SSI)", the following applies: Reserved2 4 In isochronous mode, the parameter can affect the isochronous mode parameters of the sync domain. Because the
isochronous mode parameters are not checked in RUN, overflows can occur if you change the parameter in RUN. To prevent overflows, select the option with the largest time required in the offline parameter assignment. 5 Applies to: Set function of DI = 001B; 010B; 011B; 101B
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0)
Manual, 06/2018, A5E03982218-AB
99
Parameter data record B.2 Parameter validation error
B.2
WRREC
Parameter validation error
If you make the parameter settings in STEP 7 (TIA Portal) or in STEP 7 , the parameter values are checked before they are transferred to the technology module. This process prevents parameter errors.
In other use cases, the technology module checks the transferred parameter data record. If the technology module finds invalid or inconsistent parameter values, it outputs an error code (see below). The new parameter data record is rejected in this case, and work continues with the current parameter values until a valid parameter data record has been transferred.
When the CPU is in RUN, you can change the parameter data record with the instruction WRREC (Write Record). In case of errors, the WRREC instruction returns corresponding error codes in the STATUS parameter.
Example:
Let us assume that an invalid value, for example 9, is written to the module for the operating mode with WRREC. As a consequence, the module rejects the entire parameter data record. You can recognize this by evaluating the STATUS output parameter of the WRREC instruction. The STATUS output parameter is output as an ARRAY[1..4] of BYTE data with the value 16#DF80E111:
Example of WRREC STATUS data DFH 80H
E1H 11H
Address
Meaning
STATUS[1] STATUS[2]
STATUS[3] STATUS[4]
Error when writing a data record via PROFINET IO (IEC 61158-6) Error when reading or writing a data record via PROFINET IO (IEC 61158-6) Module-specific error Error code from the table below: The "Operating mode" parameter has an invalid value.
100
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0) Manual, 06/2018, A5E03982218-AB
Parameter data record B.2 Parameter validation error
Error codes
The following table shows the module-specific error codes and their meaning for parameter data record 128 when using an incremental or pulse encoder.
Table B- 2 Error codes for parameter validation (incremental or pulse encoder)
Error code in STATUS parame- Meaning ter (hexadecimal)
Byte 0 Byte 1 Byte 2 Byte 3
DF 80
B0
00
Data record number unknown
DF 80
B1
01
Length of data record incorrect
DF 80
B2
00
Slot invalid or not accessible
Remedy
Enter valid number for data record. Enter valid value for data record length. · Check whether module is inserted or removed.
· Check assigned values for parameters of the WRREC instruction.
DF 80
E0
01
Wrong version
· Check byte 0.
· Enter valid values.
DF 80
E0
02
Error in the header information
· Check byte 1.
· Correct the length of the parameter blocks.
DF 80
E1
00
Parameter invalid: No detailed information
available
Check all parameter values.
DF 80
E1
11
"Operating mode" parameter invalid
Enter valid parameter value.
DF 80
E1
12
"Reaction to CPU STOP" parameter invalid
Enter valid parameter value.
DF 80
E1
13
"Signal type" parameter invalid
Enter valid parameter value.
DF 80
E1
15
"Filter frequency" parameter invalid
Enter valid parameter value.
DF 80
E1
16
"Reaction to signal N" parameter invalid
Enter valid parameter value.
DF 80
E1
17
"Set function of DI" parameter invalid
Enter valid parameter value.
DF 80
E1
18
"Set function of DI" parameter configured the Enter different parameter values for DIn.0 and DIn.1.
same for DIn.0 and DIn.1.
DF 80
E1
19
· "Edge selection" parameter invalid
· Enter valid parameter value.
· "Gate start (edge-triggered)" configured as · Configure "Gate start (edge-triggered)" as function
function for DIn.m and "At rising and falling
for DIn.m only together with "At rising edge" or "At
edge"
falling edge"
· "Gate stop (edge-triggered)" configured as · Configure "Gate stop (edge-triggered)" as function
function for DIn.m and "At rising and falling
for DIn.m only together with "At rising edge" or "At
edge"
falling edge"
· "Synchronization" configured as function for · Configure "Synchronization" as function for DIn.m
DIn.m and "At rising and falling edge"
only together with "At rising edge" or "At falling
edge"
DF 80
E1
1A
"Input delay" parameter invalid
Enter valid parameter value.
DF 80
E1
1B
"Set output" parameter invalid
Enter valid parameter value.
DF 80
E1
1C
"Count direction" parameter invalid
Enter valid parameter value.
DF 80
E1
1D
"Reset when counting limit is violated" parame- Enter valid parameter value.
ter invalid
DF 80
E1 1E "Reaction to violation of a counting limit" parameter invalid
Enter valid parameter value.
DF 80
E1
20
"Reaction to gate start" parameter invalid
Enter valid parameter value.
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0) Manual, 06/2018, A5E03982218-AB
101
Parameter data record B.2 Parameter validation error
Error code in STATUS parame- Meaning ter (hexadecimal)
Byte 0 Byte 1 Byte 2 Byte 3
DF 80
E1
211,4 · Low counting limit > comparison value 0
· Low counting limit > comparison value 1
Remedy
· Low counting limit < comparison value 0 · Low counting limit < comparison value 1
DF 80
E1
221,4 · Counting high limit < comparison value 0
· High counting limit > comparison value 0
· Counting high limit < comparison value 1 · High counting limit > comparison value 1
DF 80
E1
23
· "Start value" parameter invalid
· "Low counting limit" parameter invalid
Enter valid parameter value: Start value > low counting limit
DF 80
E1
24
· "Start value" parameter invalid
· "High counting limit" parameter invalid
Enter valid parameter value: Start value < high counting limit
DF 80
E1
25
"Update time" parameter invalid
Enter parameter value from range 0 to 25000000D.
DF 80
E1
262 "Reference speed" parameter invalid
Enter parameter value from range 6.00 to 210000.00D.
DF 80
E1
27
"Measured variable" parameter invalid
Enter valid parameter value.
DF 80
E1
28
"Time base for velocity measurement" parame- Enter valid parameter value.
ter invalid
DF 80
E1
29
"Increments per unit" parameter invalid
Enter valid parameter value.
DF 80
E1
2A
· "High counting limit" parameter invalid
· "Low counting limit" parameter invalid
Enter valid parameter value: Low counting limit < high counting limit
DF 80
E1
2B3 · "Comparison value 0" parameter invalid
· "Comparison value 1" parameter invalid
Enter valid parameter value: Comparison value 0 < comparison value 1
DF 80
E1
2C
"Signal evaluation" parameter invalid
Enter valid parameter value.
DF 80
E1
2D
· "Between comparison value 0 and 1" con- · Configure "Between comparison value 0 and 1"
figured for DQn.0
only for DQn.1
· "Not between comparison value 0 and 1" configured for DQn.0
· "Not between comparison value 0 and 1" configured only for DQn.1
· "Between comparison value 0 and 1" configured for DQn.1, but "Use by user program" not configured for DQn.0
· Only configure "Between comparison value 0 and 1" for DQn.1 when "Use by user program" is configured for DQn.0
· "Not between comparison value 0 and 1" · Only configure "Not between comparison value 0
configured for DQn.1, but "Use by user pro-
and 1" for DQn.1 when "Use by user program" is
gram" not configured for DQn.0
configured for DQn.0
DF 80
E1
2E
"Capture" configured for DIn.m in "Measuring" Do not configure "Capture" for DIn.m in "Measuring"
operating mode
operating mode.
DF 80
E1
F0
Reserved bit is not set to 0.
Set reserved bit to 0.
1 Only for "Counting" operating mode 2 Only for "Position input for "Motion Control"" technology object 3 Only for DQn.1 functions "Between comparison value 0 and 1" and "Not between comparison value 0 and 1" 4 Not for DQn.m function "Use by user program"
102
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0) Manual, 06/2018, A5E03982218-AB
Parameter data record B.2 Parameter validation error
The following table shows the module-specific error codes and their meaning for parameter data record 128 when using an SSI absolute encoder.
Table B- 3 Error codes for parameter validation (SSI absolute encoder)
Error code in STATUS parame- Meaning ter (hexadecimal)
Byte 0 Byte 1 Byte 2 Byte 3
DF 80
B0
00
Data record number unknown
DF 80
B1
01
Length of data record incorrect
DF 80
B2
00
Slot invalid or not accessible
Remedy
Enter valid number for data record. Enter valid value for data record length. · Check whether module is inserted or removed.
· Check assigned values for parameters of the WRREC instruction.
DF 80
E0
01
Wrong version
· Check byte 0.
· Enter valid values.
DF 80
E0
02
Error in the header information
· Check byte 1.
· Correct the length of the parameter blocks.
DF 80
E1
00
Parameter invalid: No detailed information
available
Check all parameter values.
DF 80
E1
11
"Operating mode" parameter invalid
Enter valid parameter value.
DF 80
E1
12
"Reaction to CPU STOP" parameter invalid
Enter valid parameter value.
DF 80
E1
13
"Signal type" parameter invalid
Enter valid parameter value.
DF 80
E1
18
"Set function of DI" parameter configured the Enter different parameter values for DIn.0 and DIn.1.
same for DIn.0 and DIn.1.
DF 80
E1
19
· "Edge selection" parameter invalid
Enter valid parameter value.
DF 80
E1
1A
"Input delay" parameter invalid
Enter valid parameter value.
DF 80
E1
1B
"Set output" parameter invalid
Enter valid parameter value.
DF 80
E1
1C
"Count direction" parameter invalid
Enter valid parameter value.
DF 80
E1
25
"Update time" parameter invalid
Enter parameter value from range 0 to 25000000D.
DF
80
E1
261 "Reference speed" parameter invalid
Enter parameter value from range 6.00 to 210000.00D.
DF 80
E1
27
"Measured variable" parameter invalid
Enter valid parameter value.
DF 80
E1
28
"Time base for velocity measurement" parame- Enter valid parameter value.
ter invalid
DF 80
E1
29
"Increments per unit" parameter invalid
Enter valid parameter value.
DF
80
E1
2B2 · "Comparison value 0" parameter invalid
· "Comparison value 1" parameter invalid
Enter valid parameter value: Comparison value 0 < comparison value 1
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0) Manual, 06/2018, A5E03982218-AB
103
Parameter data record B.2 Parameter validation error
Error code in STATUS parame- Meaning ter (hexadecimal)
Byte 0 Byte 1 Byte 2 Byte 3
DF 80
E1
2D
· "Between comparison value 0 and 1" con-
figured for DQn.0
Remedy
· Configure "Between comparison value 0 and 1" only for DQn.1
· "Not between comparison value 0 and 1" configured for DQn.0
· "Not between comparison value 0 and 1" configured only for DQn.1
· "Between comparison value 0 and 1" configured for DQn.1, but "Use by user program" not configured for DQn.0
· Only configure "Between comparison value 0 and 1" for DQn.1 when "Use by user program" is configured for DQn.0
· "Not between comparison value 0 and 1" · Only configure "Not between comparison value 0
configured for DQn.1, but "Use by user pro-
and 1" for DQn.1 when "Use by user program" is
gram" not configured for DQn.0
configured for DQn.0
DF 80
E1
2E
"Capture" configured for DIn.m in "Measuring" Do not configure "Capture" for DIn.m in "Measuring"
operating mode
operating mode.
DF 80
E1
2F
"Set function of DI" parameter invalid
Enter valid parameter value.
DF 80
E1
30
"Monoflop time" parameter invalid
Enter valid parameter value.
DF 80
E1
31
"Transmission rate" parameter invalid
Enter valid parameter value.
DF 80
E1
32
"Parity" parameter invalid
Enter valid parameter value.
DF 80
E1
33
"Frame length" parameter invalid
Enter valid parameter value.
DF 80
E1
34
· Bit number LSB of the position value < 0
· Bit number LSB of the position value >= 0
· Bit number LSB of the position value > Bit number MSB of the position value
· Bit number LSB of the position value < Bit number MSB of the position value
· (Bit number MSB of the position value) (Bit number LSB of the position value) >= 31
· Bit number MSB of the position value > Frame length
· (Bit number MSB of the position value) (Bit number LSB of the position value) < 32
· Bit number MSB of the position value <= Frame length
DF 80
E1
35
"0" configured for "Pulse duration" parameter Enter valid parameter value.
DF 80
E1
F0
Reserved bit is not set to 0.
Set reserved bit to 0.
1 Only for "Position input for "Motion Control"" technology object" operating mode 2 Only for DQn.1 functions "Between comparison value 0 and 1" and "Not between comparison value 0 and 1"
104
Technology module TM PosInput 2 (6ES7551-1AB00-0AB0) Manual, 06/2018, A5E03982218-AB
Technology module
TSMIMTAiTmICer DIDQ 16x24V (6ES75521AA000AB0) ET 200MP/S7-1500 Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Co_n_ne_c_tin_g____________3_ _Co_n_fig_u_rin_g/_ad_d_re_ss_s_pa_c_e ____4_ _Imn_etes_rsrua_pg_tess/_di_ag_n_os_tic________5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_ _Di_m_en_s_ion_d_ra_w_in_g ________A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_______B_ _O_pe_n_S_ou_rc_e_So_ft_w_ar_e _____C__
08/2014
A5E34078538-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E34078538-AA 08/2014 Subject to change
Copyright © Siemens AG 2014. All rights reserved
Preface
Purpose of the documentation
This manual includes module-specific information on wiring, diagnostics and the technical specifications of the technology module.
General information regarding design and commissioning of the ET 200MP or S7-1500 is available in the ET 200MP or S7-1500 system manuals.
The "Time-based IO" technology supported by the TM Timer DIDQ 16x24V technology module is described in detail in the function manual High-precision input/output with Timebased IO (http://support.automation.siemens.com/WW/view/en/82527590).
Conventions
Please observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, solutions, machines, equipment and/or networks. They are important components in a holistic industrial security concept. With this in mind, Siemens' products and solutions undergo continuous development. Siemens recommends strongly that you regularly check for product updates.
For the secure operation of Siemens products and solutions, it is necessary to take suitable preventive action (e.g. cell protection concept) and integrate each component into a holistic, state-of-the-art industrial security concept. Third-party products that may be in use should also be considered. You can find more information about industrial security on the Internet (http://www.siemens.com/industrialsecurity).
To stay informed about product updates as they occur, sign up for a product-specific newsletter. You can find more information on the Internet (http://support.automation.siemens.com).
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
4
Manual, 08/2014, A5E34078538-AA
Preface
Open Source Software Open-source software is used in the firmware of the product described. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this in the appendix.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
5
Table of contents
Preface ...................................................................................................................................................... 4
1 Documentation guide ................................................................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
Properties................................................................................................................................. 9
2.2 2.2.1 2.2.2 2.2.3
Functions................................................................................................................................ 12 Detection of the input signals................................................................................................. 12 Switching the outputs ............................................................................................................. 14 Additional functions ................................................................................................................ 16
3 Connecting .............................................................................................................................................. 17
3.1
Pin assignment....................................................................................................................... 17
4 Configuring/address space ...................................................................................................................... 29
4.1
Configuring............................................................................................................................. 29
4.2
Reaction to CPU STOP ......................................................................................................... 30
4.3
Address space ....................................................................................................................... 31
4.4
Parameters............................................................................................................................. 31
4.5 4.5.1 4.5.2
Control and feedback interface .............................................................................................. 33 Assignment of the control interface........................................................................................ 33 Assignment of the feedback interface.................................................................................... 37
5 Interrupts/diagnostic messages ............................................................................................................... 41
5.1
Status and error displays ....................................................................................................... 41
5.2
Trigger a diagnostic interrupt ................................................................................................. 44
5.3
Diagnostic alarms................................................................................................................... 45
6 Technical specifications ........................................................................................................................... 46
A Dimension drawing .................................................................................................................................. 54
B Parameter data record ............................................................................................................................. 56
C Open Source Software ............................................................................................................................ 61
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
6
Manual, 08/2014, A5E34078538-AA
Documentation guide
1
Introduction
This modular documentation of the SIMATIC products covers diverse topics concerning your automation system.
The complete documentation for the ET 200MP and S7-1500 systems consists of the respective system manuals, function manuals and device manuals.
The STEP 7 information system (TIA Portal) also helps you to configure and program your automation system.
Overview of the documentation for TM Timer DIDQ 16x24V technology module
The following table lists further documentation that you will need when using the TM Timer DIDQ 16x24V technology module.
Table 1- 1 Documentation for TM Timer DIDQ 16x24V technology module
Topic System description
Configuring interference-free controllers
Documentation
Most important contents
System Manual
·
ET 200MP Distributed I/O System (http://support.automation.siemens.com/WW/
·
view/en/59193214)
·
·
S7-1500 Automation System (http://support.automation.siemens.com/WW/ view/en/59191792) system manual
Application planning Installation Connecting Commissioning
·
Designing interference-free controllers (http://support.automation.siemens.com/WW/
·
view/en/59193566) Function Manual
·
Basics Electromagnetic compatibility Lightning protection
Time-based IO
Function manual
·
High-precision input/output with Time-based IO
·
(http://support.automation.siemens.com/WW/ ·
view/en/82527590)
·
Basics Configuration Programming Diagnostics
Isochronous mode PROFINET with STEP 7
·
(http://support.automation.siemens.com/WW/ view/en/49948856) function manual
·
·
Benefits Use Parameter settings
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
7
Documentation guide
SIMATIC manuals All current manuals for the SIMATIC products are available for download free of charge from the Internet (http://www.siemens.com/automation/service&support).
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
8
Manual, 08/2014, A5E34078538-AA
Product overview
2.1
Properties
Article number 6ES7552-1AA00-0AB0
View of the module
2
Figure 2-1 View of the TM Timer DIDQ 16x24V module
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
9
Product overview 2.1 Properties
Properties
The TM Timer DIDQ 16x24V technology module has the following properties: Technical properties
16 digital inputs and outputs, electrically isolated in groups of 8 Various combinations of digital inputs and outputs can be configured:
0 digital inputs and 16 digital outputs (for cam applications with numerous outputs) 3 digital inputs and 13 digital outputs (for applications similar to FM 352 applications) 4 digital inputs and 12 digital outputs (for flexible mixed operation) 8 digital inputs and 8 digital outputs (for probe and incremental encoder) Rated output voltage 24V DC Rated output current 0.5 A or 0.1 A (high-speed operation) per digital output 24 V encoder supply output, short-circuit proof Configurable substitute values (per digital output) Two supply voltages L+ Configurable diagnostics Configurable input filters for suppression of interference at digital inputs Supported encoder/signal types for digital inputs 24 V incremental encoder with A and B signals 24 V pulse encoder with one signal Supported functions Time stamp function for inputs and outputs (resolution 1 s) Counting (counting range 32-bit) Oversampling for inputs and outputs Pulse width modulation Supported system functions Isochronous mode Firmware Update Identification data I&M
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
10
Manual, 08/2014, A5E34078538-AA
Product overview 2.1 Properties
Accessories
The following components are supplied with the technology module and can also be ordered separately as spare parts: Shield bracket Shield terminal Labeling strip U-connector
Other components The following component needs to be ordered separately: Front connectors, including potential jumpers and cable ties
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
11
Product overview 2.2 Functions
2.2
Functions
2.2.1
Detection of the input signals
You can configure up to eight digital inputs for the technology module. You can evaluate the signals at the digital inputs for the following functions:
Time stamp detection (Timer DI)
The technology module can detect an associated time stamp for an edge at a digital input. The time stamp indicates when the edge was detected in relation to a time base. These time stamps can be used, for example, to calculate a time difference.
The time stamp is based on the "Time-based IO" technology supported by the technology module and requires isochronous mode.
Hardware enable (HW enable)
You can configure a hardware enable by a digital input for the detection of time stamps. A hardware enable defines the time window in which the time stamps are acquired. You can override the hardware enable via the control interface (Page 33) with the respective SETEN bit.
The figure below shows an example for the detection of time stamps at rising and falling edges with enable of the DI0 through the high level of the DI1:
Counting
R Associated time stamp detected at rising DI0-edge
F
Associated time stamp detected at falling DI0 edge
Counting refers to the recording and adding up of events. You can configure up to four counters for the technology module. You can use incremental encoders and pulse encoders at the digital inputs. The two phase-shifted signals from an incremental encoder are evaluated four times. Only the rising or falling edges are counted with the signal of a pulse encoder.
A counter starts at 0, goes up to 232-1 and starts again at 0 (overflow). The technology module can also count down if an incremental encoder is used. The counter value is returned in the feedback interface (Page 37) as a 32-bit value for each digital input.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
12
Manual, 08/2014, A5E34078538-AA
Product overview 2.2 Functions
Oversampling
The Oversampling function is used by the technology module to detect the status of the respective digital input for each application cycle (for example, OB61) at 32 points in time at regular intervals. The 32 states are returned together in the feedback interface (Page 37) as a 32-bit value.
Oversampling requires isochronous mode. If the OB of the type "Synchronous Cycle" works with a clock different than the send clock, you must use the TIO_SYNC instruction.
The figure below shows an example for Oversampling of DI0:
TAPP MSB LSB
Application cycle Most significant bit Least significant bit
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
13
Product overview 2.2 Functions
2.2.2
Switching the outputs
You can configure up to 16 digital outputs for the technology module. You can configure the following functions for switching the digital outputs:
Time-controlled switching (Timer DQ)
The use of time stamps enables reproducibility of controlled operations with very accurate time. Using this function, the technology module outputs edges at the respective digital output at precisely defined points in time. For example, you can implement a defined reaction time between input and output in conjunction with a digital input.
The Timer function is based on Time-based IO and requires isochronous mode.
Hardware enable (HW enable)
You can configure a hardware enable by means of a digital input for a Timer digital output. A hardware enable defines the time window in which the respective digital output can be set. The resetting of the digital output is independent of the hardware enable. You can override the hardware enable via the control interface (Page 33) with the respective SETEN bit.
The figure below shows an example for the output of rising and falling edges with enable of the DQ0 through the high level of the DI1:
R Specified time of a rising DQ0-edge
F
Specified time of a falling DQ0-edge
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
14
Manual, 08/2014, A5E34078538-AA
Product overview 2.2 Functions
Pulse width modulation (PWM)
The Pulse width modulation function enables you to specify the time period in the hardware configuration and the pulse-pause ratio in the control interface (Page 33) for the respective digital output. The setpoint for the pulse-pause ratio is a percentage and is evaluated with an accuracy of about 3%.
Oversampling
The Oversampling function is used by the technology module to output 32 states at regular intervals for each application cycle (for example, OB61). This allows up to 32 edges at the respective digital output per application cycle.
The 32 states are sent via the control interface (Page 33) as a 32-bit string for the respective digital output to the technology module.
Oversampling requires isochronous mode. If the OB of the type "Synchronous Cycle" works with a clock different than the send clock, you must use the TIO_SYNC instruction.
The figure below shows an example for Oversampling of DQ0:
TAPP MSB LSB
Application cycle Most significant bit Least significant bit
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
15
Product overview 2.2 Functions
2.2.3
Additional functions
Isochronous mode The technology module supports the system function "isochronous mode" in distributed mode on PROFINET. This system function is required for the following functions of the technology module: Time stamp detection (Timer DI) Time-controlled switching (Timer DQ) Oversampling of digital input Oversampling of digital output In isochronous mode, the cycle of the user program, the transmission of the input signals and processing in the technology module are synchronized.
Data processing The time stamp, counter values and Oversampling bit string as well as status bits are detected at the time Ti and made available in the feedback interface for retrieval in the current bus cycle. The output of the current Oversampling bit stings is started at the time To.
Diagnostic interrupt The technology module can trigger a diagnostic interrupt (Page 44), among other things, if no supply voltage is available or if there is an error at the digital outputs.
Input filter
To suppress interferences, you can configure an input filter for the digital inputs.
Distributed application You can use the technology module in a distributed system by means of an interface module in the ET 200MP distributed I/O device. The following applications are possible:
Distributed operation in an S7-1500 system
Distributed operation in an S7-300/400 system
Centralized application You can use the technology module centrally in the S7-1500 automation system.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
16
Manual, 08/2014, A5E34078538-AA
Connecting
3
3.1
Pin assignment
You connect the encoder signals, digital input and digital output signals, encoder supplies and the supply voltage to the 40-pin front connector of the technology module to supply the module and the digital outputs.
Information on wiring the front connector, creating the cable shield, etc. is available in the ET 200MP Distributed I/O System (http://support.automation.siemens.com/WW/view/en/59193214) system manual and in the Connecting section of the S7-1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Pin assignment for the front connector
The pin assignment of the front connector depends on the channel configuration of the TM Timer DIDQ 16x24V.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
17
Connecting 3.1 Pin assignment
The following table shows the pin assignment of the front connector for channel configuration "0 inputs, 16 outputs".
Table 3- 1 Pin assignment of the front connector , channel configuration "0 inputs, 16 outputs"
Designation --
Ground for digital outputs DQ0 to DQ7
Supply voltage DC 24 V for digital outputs DQ0 to DQ7*
Ground for supply voltage 1L+
Signal name -- 1
2 3 4 5 6 7 8 9 1M 10 1M 11 1M 12 1M 13 1M 14 1M 15 1M 16 1M 17 1M 18 1L+ 19
1M 20
View
Signal name
Designation
21 DQ0
Digital output DQ0
22 DQ1
Digital output DQ1
23 DQ2
Digital output DQ2
24 DQ3
Digital output DQ3
25 DQ4
Digital output DQ4
26 DQ5
Digital output DQ5
27 DQ6
Digital output DQ6
28 DQ7
Digital output DQ7
29 --
--
30
31 DQ8
Digital output DQ8
32 DQ9
Digital output DQ9
33 DQ10
Digital output DQ10
34 DQ11
Digital output DQ11
35 DQ12
Digital output DQ12
36 DQ13
Digital output DQ13
37 DQ14
Digital output DQ14
38 DQ15
Digital output DQ15
39 2L+
Supply voltage DC 24 V for
digital outputs DQ8 to DQ15*
40 2M Ground for supply voltage 2L+
* If you would like to supply both load groups with a shared voltage, insert the potential jumpers between terminals 19 and 39 as well as 20 and 40.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
18
Manual, 08/2014, A5E34078538-AA
Connecting 3.1 Pin assignment
The following table shows the pin assignment of the front connector for channel configuration "3 inputs, 13 outputs".
Table 3- 2 Pin assignment of the front connector , channel configuration "3 inputs, 13 outputs"
Designation Digital input DI0 Digital input DI1
-- Digital input DI3
--
Ground for encoder supply, digital inputs DI0, DI1 and DI3 and digital
outputs DQ2 and DQ4 to DQ7
Supply voltage DC 24 V for digital inputs DI0, DI1 and DI3 and digital
outputs DQ2 and DQ4 to DQ7* Ground for supply voltage 1L+
Signal name DI0 1 DI1 2 -- 3 DI3 4 -- 5
6 7 8 9 1M 10 1M 11 1M 12 1M 13 1M 14 1M 15 1M 16 1M 17 1M 18 1L+ 19
1M 20
View
Signal name
Designation
21 DQ0 Encoder supply 24 V for DI0
22 DQ1 Encoder supply 24 V for DI1
23 DQ2
Digital output DQ2
24 DQ3 Encoder supply 24 V for DI3
25 DQ4
Digital output DQ4
26 DQ5
Digital output DQ5
27 DQ6
Digital output DQ6
28 DQ7
Digital output DQ7
29 --
--
30
31 DQ8
Digital output DQ8
32 DQ9
Digital output DQ9
33 DQ10
Digital output DQ10
34 DQ11
Digital output DQ11
35 DQ12
Digital output DQ12
36 DQ13
Digital output DQ13
37 DQ14
Digital output DQ14
38 DQ15
Digital output DQ15
39 2L+ Supply voltage DC 24 V for digital outputs DQ8 to DQ15*
40 2M
Ground for supply voltage 2L+
* If you would like to supply both load groups with a shared voltage, insert the potential jumpers between terminals 19 and 39 as well as 20 and 40.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
19
Connecting 3.1 Pin assignment
The following table shows the pin assignment of the front connector for channel configuration "4 inputs, 12 outputs".
Table 3- 3 Pin assignment of the front connector , channel configuration "4 inputs, 12 outputs"
Designation
-- Digital input DI1
-- Digital input DI3
-- Digital input DI5
-- Digital input DI7
-- Ground for encoder supply, digital inputs DI1, DI3, DI5 and DI7 and digital outputs DQ0, DQ2, DQ4 and DQ6
Supply voltage DC 24 V for digital inputs DI1, DI3, DI5 and DI7 and digital outputsDQ0, DQ2, DQ4 and
DQ6* Ground for supply voltage 1L+
Signal name -- 1 DI1 2 -- 3 DI3 4 -- 5 DI5 6 -- 7 DI7 8 -- 9 1M 10 1M 11 1M 12 1M 13 1M 14 1M 15 1M 16 1M 17 1M 18 1L+ 19
1M 20
View
Signal name
Designation
21 DQ0
Digital output DQ0
22 DQ1 Encoder supply 24 V for DI1
23 DQ2
Digital output DQ2
24 DQ3 Encoder supply 24 V for DI3
25 DQ4
Digital output DQ4
26 DQ5 Encoder supply 24 V for DI5
27 DQ6
Digital output DQ6
28 DQ7 Encoder supply 24 V for DI7
29
--
--
30
31 DQ8
Digital output DQ8
32 DQ9
Digital output DQ9
33 DQ10
Digital output DQ10
34 DQ11
Digital output DQ11
35 DQ12
Digital output DQ12
36 DQ13
Digital output DQ13
37 DQ14
Digital output DQ14
38 DQ15
Digital output DQ15
39
2L+ Supply voltage DC 24 V for
digital outputs DQ8 to DQ15*
40
2M
Ground for supply voltage
2L+
* If you would like to supply both load groups with a shared voltage, insert the potential jumpers between terminals 19 and 39 as well as 20 and 40.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
20
Manual, 08/2014, A5E34078538-AA
Connecting 3.1 Pin assignment
The following table shows the pin assignment of the front connector for channel configuration "8 inputs, 8 outputs".
Table 3- 4 Pin assignment of the front connector , channel configuration "8 inputs, 8 outputs"
Designation
Digital input DI0 Digital input DI1 Digital input DI2 Digital input DI3 Digital input DI4 Digital input DI5 Digital input DI6 Digital input DI7
-- Ground for encoder supply and digital inputs DI0 to DI7
Supply voltage DC 24 V for digital inputs DI0 to DI7*
Ground for supply voltage 1L+
Signal name DI0 1 DI1 2 DI2 3 DI3 4 DI4 5 DI5 6 DI6 7 DI7 8 -- 9 1M 10 1M 11 1M 12 1M 13 1M 14 1M 15 1M 16 1M 17 1M 18 1L+ 19
1M 20
View
Signal name
Designation
21 DQ0 Encoder supply 24 V for DI0
22 DQ1 Encoder supply 24 V for DI1
23 DQ2 Encoder supply 24 V for DI2
24 DQ3 Encoder supply 24 V for DI3
25 DQ4 Encoder supply 24 V for DI4
26 DQ5 Encoder supply 24 V for DI5
27 DQ6 Encoder supply 24 V for DI6
28 DQ7 Encoder supply 24 V for DI7
29 --
--
30
31 DQ8
Digital output DQ8
32 DQ9
Digital output DQ9
33 DQ10
Digital output DQ10
34 DQ11
Digital output DQ11
35 DQ12
Digital output DQ12
36 DQ13
Digital output DQ13
37 DQ14
Digital output DQ14
38 DQ15
Digital output DQ15
39 2L+
Supply voltage DC 24 V for
digital outputs DQ8 to DQ15*
40 2M Ground for supply voltage 2L+
* If you would like to supply both load groups with a shared voltage, insert the potential jumpers between terminals 19 and 39 as well as 20 and 40.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
21
Connecting 3.1 Pin assignment
Block diagram
The figure below shows the block diagram of the technology module for the use of all 16 digital outputs.
Electrical isolation Technology and backplane bus interface Input filter for supply voltage
Figure 3-1 Block diagram for use of 16 digital outputs
When you connect the encoder you must, depending on the configured input delay and potential effect of interference, ground the shields of the cables between encoder and technology module both through the shield connection element at the front connector (shield bracket and terminal) and at the encoder.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
22
Manual, 08/2014, A5E34078538-AA
Connecting 3.1 Pin assignment
The figure below shows the block diagram of the technology module with four connected incremental encoders.
Electrical isolation Technology and backplane bus interface 24 V supply for respective incremental encoder Input filter for supply voltage Equipotential bonding Shield support at the front connector Incremental encoder with A and B signals
Figure 3-2 Block diagram with incremental encoders
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
23
Connecting 3.1 Pin assignment
The following figure shows the block diagram of the technology module to which four pulse encoders and four sensors are connected.
Electrical isolation Technology and backplane bus interface 24 V supplies for pulse encoders and sensors Input filter for supply voltage Equipotential bonding Shield support at the front connector Pulse encoder with signal A
Figure 3-3 Block diagram with pulse encoders and sensors
Note
If you want to use Timer digital inputs and high-speed outputs at the same time, you should minimize the effects of interference by electrically isolating the supply to the inputs and outputs via the terminal pairs 19 and 20 and 39 and 40.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
24
Manual, 08/2014, A5E34078538-AA
Connecting 3.1 Pin assignment
Supply voltage
The digital inputs and outputs of the technology module are divided into two load groups that are supplied with DC 24 V. The digital inputs DI0 to DI7 and digital outputs DQ0 to DQ7 are supplied via the 1L+ and 1M connections. The digital outputs DQ8 to DQ15 are supplied via the 2L+ and 2M connections.
You can supply both load groups electrically isolated or non-isolated. If you want to supply both load groups with the same potential (non-isolated), use potential jumpers to loopthrough the supply voltage from the load group already supplied to another load group.
The technology module monitors the supply voltage connections. When a load group is not supplied, the lack of supply voltage generates a diagnostic interrupt (Page 45). If you want to prevent this reaction when using only one load group, insert the potential jumpers.
An internal protective circuit protects the technology module against damage due to reversed polarity of the supply voltage. Unexpected conditions can occur at the digital outputs with reversed polarity of the supply voltage.
Note Note that a maximum current load of 8 A per potential jumper must not be exceeded.
Digital inputs DI0 to DI7
You can use three, four or eight digital inputs, whereby the number of digital outputs that can be used is reduced accordingly. The technology module can evaluate the edges at the digital inputs for the following functions:
Table 3- 5 Evaluation of the signals at the digital inputs
Evaluation of the signals for ... Usable digital inputs
DI0 DI1 DI2 DI3 DI4 DI5 DI6 DI7
Time stamp detection
Hardware enable for time stamp detection
--
--
--
--
Hardware enable for timecontrolled switching
--
--
--
--
Counting with incremental
encoder with signals A and B
Counting with pulse encoder
--
--
--
--
with signal A
Oversampling
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
25
Connecting 3.1 Pin assignment
When you use the counting function, you can connect the following encoder types with 24 V signals to the digital inputs:
Incremental encoder with signals A and B:
Signals A and B are each connected via the connections of the digital input pairs DI0/DI1, DI2/DI3, DI4/DI5 and DI6/DI7. Signals A and B are the two incremental signals phaseshifted by 90°.
Pulse encoder / sensor with signal A:
Signal A is connected via the connection of the digital input DI0, DI2, DI4 or DI6.
The digital inputs are not electrically isolated from each other or from the digital outputs DQ0 to DQ7. The digital inputs are electrically isolated from the digital outputs DQ8 to DQ15 and the backplane bus.
Input filters for digital inputs You can configure an input filter for each digital input to suppress interference. Signals with a pulse duration below the configured input delay are suppressed.
You can specify the following values for the input delay:
None (input delay of 4 s, minimum pulse width of 3 s)
0.05 ms
0.1 ms (default)
0.4 ms
0.8 ms
The input delay has the following effect on the functions of the signal evaluation at the digital inputs:
Table 3- 6 Influence of the input delay
Function Time stamp detection Counting
Oversampling
Influence of the input delay
The detected time stamp is moved by the input delay. The counter value that was valid at time Ti minus the input delay is returned. The detected states are moved together by the input delay.
Note
If you select the "None" or "0.05 ms" option, you have to use shielded cables for connection of the digital inputs. To increase the accuracy of the time stamp function, we recommend the use of shielded cables even for longer input delays. The use of shielded cables limits the jitter to maximum of 1 s.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
26
Manual, 08/2014, A5E34078538-AA
Connecting 3.1 Pin assignment
Encoder supply When you use the digital inputs, you can connect incremental encoders and pulse encoders. The terminal opposite the digital input provides the respective DC 24 V supply voltage with reference to 1M and a rated load current of 0.5 A to supply an encoder. The voltage is fed from the 1L+/1M supply voltage and monitored for short-circuit and overload.
Note Note that a total current of 1.2 A for all encoder supplies must not be exceeded.
Note The outputs of the technology module are disabled during its startup. As a result. the encoder supply can be disabled briefly after an interruption of the PROFINET connection of the associated system.
Digital outputs DQ0 to DQ15 You can use 8, 12, 13 or 16 digital outputs, whereby the number of digital inputs that can be used is reduced accordingly. The digital outputs can be switched directly at defined points in time or via the user program. Alternatively, you can output pulse width modulation or Oversampling at the respective digital output. The digital outputs DQ0 to DQ7 are electrically isolated from the digital outputs DQ8 to DQ15 and the backplane bus, but not from the digital inputs. The digital outputs DQ8 to DQ15 are electrically isolated from the digital outputs DQ0 to DQ7; the digital inputs are electrically isolated from the backplane bus. You can use each of the digital outputs as a high-speed output or as a sourcing output: High-speed output (default): The digital output works as fast push-pull switch and can carry a rated load current of 0.1 A. A push-pull switch is alternately switched to DC 24 V and ground. This makes for very steep edges. Sourcing output: The digital output works as 24 V sourcing output in reference to M and can carry a rated load current of 0.5 A.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
27
Connecting 3.1 Pin assignment
The digital outputs are protected from overload and short-circuit.
NOTICE Overtemperature from unsuitable loads A high-speed output generates edges that are very steep. This creates very powerful charge reversals for the connected load, which can overheat the load at very high switching frequencies. The connected load must therefore be approved for high input frequencies.
Note If you use a digital output as sourcing output, the switch-off response / switch-off edge depends on the load. Thus, it is possible that very short pulses cannot be output correctly.
Note Relays and contactors can be connected direct without external circuitry.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
28
Manual, 08/2014, A5E34078538-AA
Configuring/address space
4
4.1
Configuring
Introduction
The technology module is configured and assigned parameters with the configuration software.
The technology module functions are controlled and monitored by the user program.
System environment The technology module can be used in the following system environments:
Table 4- 1 Applications of the technology module with PROFINET IO
Applications
Distributed operation in an S7-1500 system
Components required
· S7-1500 automation system
· ET 200MP distributed I/O system
· TM Timer DIDQ 16x24V
Configuration software
STEP 7 (TIA Portal):
Device configuration and parameter settings with hardware configuration (HWCN)
Central operation in an · S7-1500 system
·
Distributed operation ·
in an S7-300/400 sys-
tem
·
·
S7-1500 automation system TM Timer DIDQ 16x24V
S7-300/400 automation system ET 200MP distributed I/O system TM Timer DIDQ 16x24V
STEP 7 (TIA Portal):
Device configuration and parameter settings with hardware configuration (HWCN)
STEP 7 (TIA Portal):
Device configuration and parameter settings with hardware configuration (HWCN)
* on request
In the user program
Time stamp functions:
TIO instructions TIO_SYNC, TIO_DI and TIO_DQ
Counting, PWM and Oversampling:
Direct access to the control and feedback interface (Page 33) of the TM Timer DIDQ 16x24V in the I/O data
Counting and PWM:
Direct access to the control and feedback interface (Page 33) of the TM Timer DIDQ 16x24V in the I/O data
Time stamp functions*, counting, PWM and Oversampling:
Direct access to the control and feedback interface (Page 33) of the TM Timer DIDQ 16x24V in the I/O data
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
29
Configuring/address space 4.2 Reaction to CPU STOP
Additional information You can find a detailed description of the time stamp functions and their configuration with the TIO instructions TIO_SYNC, TIO_DI and TIO_DQ in: High-precision input/output with Time-based IO function manual available as download on the Internet (http://support.automation.siemens.com/WW/view/en/82527590) In the STEP 7 (TIA Portal) information system under "Using technology functions > Counting, measurement and position input > Counting, measurement and position input (S7-1500)"
4.2
Reaction to CPU STOP
You set the response of the technology module to CPU STOP for each channel in the basic parameters.
Table 4- 2 Response of the technology module to CPU STOP depending on parameter assignment
Reaction to CPU STOP Output substitute value
Keep last value
Meaning
The technology module outputs the configured substitute values at the digital outputs until the next CPU STOP-RUN transition.
The technology module is returned to its startup state after a STOP-RUN transition: If you are using counters, the counter values are set to 0 and the digital outputs switch according to the parameter assignment and the setpoints.
The technology module outputs the values at the digital outputs that were valid when the transition to STOP took place until the next CPU STOP-RUN transition. The last valid period duration with the last valid pulse-pause ratio is output for a configured pulse width modulation until the next STOP-RUN transition.
The technology module is returned to its startup state after a STOP-RUN transition: If you are using counters, the counter values are set to 0 and the digital outputs switch according to the parameter assignment and the setpoints.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
30
Manual, 08/2014, A5E34078538-AA
Configuring/address space 4.3 Address space
4.3
Address space
Address space of the technology module
Table 4- 3 Range
Range of the input addresses and output addresses of the TM Timer DIDQ 16x24V
Inputs 44 bytes
Outputs 74 bytes
Additional information
A description on how to use the control and feedback interface of TM Timer DIDQ 16x24V can be found in the chapter Control and feedback interface (Page 33).
4.4
Parameters
You can use various parameters in the hardware configuration to define the properties of the technology module in STEP 7 (TIA Portal). Depending on the settings, not all parameters are available. You can change the parameter assignment in the user program using data record 128 (Page 56).
Parameters of the TM Timer DIDQ 16x24V You can configure the following parameters:
Table 4- 4 Configurable parameters and their defaults
Parameter Channel configuration of the module PWM period for the digital outputs
Reaction to CPU STOP
Value range Basic parameters · 0 inputs, 16 outputs · 3 inputs, 13 outputs · 4 inputs, 12 outputs · 8 inputs, 8 outputs
· 10 ms · 5 ms · 2 ms · 1 ms · 0.5 ms · 0.2 ms
· Output substitute value · Keep last value
Default setting 0 inputs, 16 outputs 10 ms
Output substitute value
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
31
Configuring/address space 4.4 Parameters
Parameter Enable diagnostic interrupts
Operating mode of the digital output
Substitute value for the digital output High-speed output (0.1 A) Invert input or output signal HW enable by the digital input Level selection for HW enable Configuration DI group
Invert counting direction (incremental encoder) Operating mode of the digital input
Input delay for the digital input
Signal evaluation for counters Configuration DQ/DI group
Value range · Disabled · Enabled
Channel parameters · Timer DQ · Oversampling · Pulse width modulation PWM
· 0 · 1
· Disabled · Enabled
· Disabled · Enabled
· Level-triggered · Edge-triggered
· Active with high level · Active with low level
· Incremental encoder (A, B phase-shifted) · Timer-DI with enable input · Use inputs individually
· Disabled · Enabled
· Counter · Timer-DI · Oversampling
· None · 0.05 ms · 0.1 ms · 0.4 ms · 0.8 ms
· At rising edge · At falling edge
· Timer DQ with enable input · Use input/output individually
Default setting Disabled
Timer DQ
0 Enabled Disabled Level-triggered Active with high level Incremental encoder (A, B phase-shifted) Disabled Timer-DI
0.1 ms
At rising edge Timer DQ with enable input
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
32
Manual, 08/2014, A5E34078538-AA
Configuring/address space 4.5 Control and feedback interface
4.5
Control and feedback interface
Direct access to the control and feedback interface on the PROFINET is not necessary for distributed operation in a S7-1500 system to use the time stamp functions. The TIO instructions TIO_SYNC, TIO_DI and TIO_DQ are available for this case. You can find a detailed description of the use of the TIO instructions in the High-precision input/output with Time-based IO function manual available as download on the Internet (http://support.automation.siemens.com/WW/view/en/82527590).
Additional information on using the control and feedback interface is available in the section Configuring (Page 29).
4.5.1
Assignment of the control interface
The user program uses the control interface to influence the behavior of the technology module.
Control interface The following table shows control interface assignment:
Table 4- 5 Control interface of the technology module
Offset to the start address
Byte 0
Parameter
SET_DQ (DQ0 ... DQ7)
Byte 1
SET_DQ (DQ8 ... DQ15)
Meaning
Bit 7: Set DQ7 Bit 6: Set DQ6 Bit 5: Set DQ5 Bit 4: Set DQ4 Bit 3: Set DQ3 Bit 2: Set DQ2 Bit 1: Set DQ1 Bit 0: Set DQ0 Bit 7: Set DQ15 Bit 6: Set DQ14 Bit 5: Set DQ13 Bit 4: Set DQ12 Bit 3: Set DQ11 Bit 2: Set DQ10 Bit 1: Set DQ9 Bit 0: Set DQ8
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
33
Configuring/address space 4.5 Control and feedback interface
Offset to the start address
Byte 2
Parameter
SETEN (DI0/DQ0 ... DI7/DQ7)
Byte 3 Bytes 4 to 7
SETEN (DQ8 ... DQ15)
TEC_OUT (DQ0)
Bytes 8 to 11 Bytes 12 to 15 Bytes 16 to 19 Bytes 20 to 23 Bytes 24 to 27 Bytes 28 to 31 Bytes 32 to 35 Bytes 36 to 39 Bytes 40 to 43 Bytes 44 to 47 Bytes 48 to 51 Bytes 52 to 55 Bytes 56 to 59 Bytes 60 to 63 Bytes 64 to 67
TEC_OUT (DQ1) TEC_OUT (DQ2) TEC_OUT (DQ3) TEC_OUT (DQ4) TEC_OUT (DQ5) TEC_OUT (DQ6) TEC_OUT (DQ7) TEC_OUT (DQ8) TEC_OUT (DQ9) TEC_OUT (DQ10) TEC_OUT (DQ11) TEC_OUT (DQ12) TEC_OUT (DQ13) TEC_OUT (DQ14) TEC_OUT (DQ15)
Meaning
Bit 7: Override hardware enable for DI7 or DQ7 Bit 6: Override hardware enable for DI6 or DQ6 Bit 5: Override hardware enable for DI5 or DQ5 Bit 4: Override hardware enable for DI4 or DQ4 Bit 3: Override hardware enable for DI3 or DQ3 Bit 2: Override hardware enable for DI2 or DQ2 Bit 1: Override hardware enable for DI1 or DQ1 Bit 0: Override hardware enable for DI0 or DQ0 Bits 0 to 7: Override hardware enable for DQ8 to DQ15
For DQ operating mode "Timer DQ":
Byte 0...1: OFF TIME: Starting time stamp of the module for resetting the DQ0 Bytes 2 to 3: ON TIME: Starting time stamp of the module for setting the DQ0
See bytes 4 to 7
For DQ operating mode "Oversampling":
Bytes 0 to 3:
32 states for Oversampling
For DQ operating mode "Pulse width modulation PWM":
Bytes 0 to 2:
Reserved; bits must be set to 0
Byte 3:
Pulse-pause ratio for PWM as a percentage
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
34
Manual, 08/2014, A5E34078538-AA
Configuring/address space 4.5 Control and feedback interface
Offset to the start address
Byte 68
Parameter
SEL EDGESEL (DI1)
Byte 69 Byte 70 Byte 71 Bytes 72 to 73
REARM SEL EDGESEL (DI0) REARM SEL (DI3) SEL (DI2) SEL (DI5) SEL (DI4) SEL (DI7) SEL (DI6) STW MSL
-- SYN
Meaning
Bits 5...7: edge selection for time stamp detection DI1: 000B: Reserved 001B: Rising edges only 010B: Falling edges only 011B: Rising and falling edge (order depending on occurrence) 100B: Reserved 101B: First rising, then falling edge 110B: First falling, then rising edge 111B: Reserved Bit 4: cyclic time stamp detection for DI1 Bits 0...3: See SEL (DI1)
See byte 68
See byte 68
See byte 68
Bits 12...15: sign of life counter (Master Sign of Life) Bits 1...11: Reserved; bits must be set to 0 Bit 0: Synchronization of the module with the user program
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
35
Configuring/address space 4.5 Control and feedback interface
Notes on the control bits
Control bit SEL (DIm) SET_DQm SETEN (DIm/DQm)
STW
TEC_OUT (DQm)
Notes
This value is supplied by the TIO instruction TIO_DI.
You can use this bit to set the DQm digital output in the DQ operating mode "Timer DQ".
You can use this bit to override the hardware enable that is configured for a digital input DIm or digital output DQm.
This value is controlled by the TIO instruction TIO_SYNC.
Detailed information is available on request.
If you use the time stamp function for the respective digital output DQm, the TIO instruction TIO_DQ returns the two output time stamps for the module in this value.
If you use the Oversampling function for the respective digital output DQm, you specify the 32 states with this value.
If you use pulse width modulation for the respective digital output DQm, you specify the pulsepause ratio with this value as percentage. The following overview shows how the technology module evaluates the specified percentage.
Pulse-pause ratio for PWM
You specify the setpoint for the pulse-pause ratio as a percentage. The technology module outputs the following pulse-pause ratio in each case:
Setpoint in %
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
Output value in %
0
3.13
6.25
9.38
12.50
15.63
18.75
21.88
24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51
25
28.13
31.25
34.38
37.50
40.63
43.75
46.88
50
52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79
53.13
56.25
59.38
62.50
65.63
68.75
71.88
75
78.13
80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100
81.25
84.38
87.50
90.63
93.75
96.88
100
Additional information
Detailed information about the time stamp function is available from Technical Supporton request.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
36
Manual, 08/2014, A5E34078538-AA
Configuring/address space 4.5 Control and feedback interface
4.5.2
Assignment of the feedback interface
The user program receives current values and status information from the technology module by means of the feedback interface.
Feedback interface The following table shows the assignment of the feedback interface:
Table 4- 6 Feedback interface of the technology module
Offset to the start address Byte 0
Byte 1
Byte 2
Byte 3
Parameter
Meaning
STS_DI (DI0 ... DI7)
QI (DI0 ... DI7)
QI (DQ0 ... DQ7)
QI (DQ08 ... DQ15)
Bit 7: Status DI7 (when DI7 is used) Bit 6: Status DI6 (when DI6 is used) Bit 5: Status DI5 (when DI5 is used) Bit 4: Status DI4 (when DI4 is used) Bit 3: Status DI3 (when DI3 is used) Bit 2: Status DI2 (when DI2 is used) Bit 1: Status DI1 (when DI1 is used) Bit 0: Status DI0 (when DI0 is used) Bit 7: Quality Information DI7 Bit 6: Quality Information DI6 Bit 5: Quality Information DI5 Bit 4: Quality Information DI4 Bit 3: Quality Information DI3 Bit 2: Quality Information DI2 Bit 1: Quality Information DI1 Bit 0: Quality Information DI0 Bit 7: Quality Information DQ7 Bit 6: Quality Information DQ6 Bit 5: Quality Information DQ5 Bit 4: Quality Information DQ4 Bit 3: Quality Information DQ3 Bit 2: Quality Information DQ2 Bit 1: Quality Information DQ1 Bit 0: Quality Information DQ0 Bit 7: Quality Information DQ15 Bit 6: Quality Information DQ14 Bit 5: Quality Information DQ13 Bit 4: Quality Information DQ12 Bit 3: Quality Information DQ11 Bit 2: Quality Information DQ10 Bit 1: Quality Information DQ9 Bit 0: Quality Information DQ8
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
37
Configuring/address space 4.5 Control and feedback interface
Offset to the start address Bytes 4 to 7
Bytes 8 to 11 Bytes 12 to 15 Bytes 16 to 19 Bytes 20 to 23 Bytes 24 to 27 Bytes 28 to 31 Bytes 32 to 35 Byte 36
Byte 37
Byte 38
Byte 39
Byte 40
Parameter
Meaning
TEC_IN (DI0)
TEC_IN (DI1) TEC_IN (DI2) TEC_IN (DI3) TEC_IN (DI4) TEC_IN (DI5) TEC_IN (DI6) TEC_IN (DI7) EN (DI1/DQ1) LEC (DI1) EN (DI0/DQ0) LEC (DI0) EN (DI3/DQ3) LEC (DI3) EN (DI2/DQ2) LEC (DI2) EN (DI5/DQ5) LEC (DI5) EN (DI4/DQ4) LEC (DI4) EN (DI7/DQ7) LEC (DI7) EN (DI6/DQ6) LEC (DI6) EN (DQ15) EN (DQ14) EN (DQ13) EN (DQ12) EN (DQ11) EN (DQ10) EN (DQ9) EN (DQ8)
For DI operating mode "Timer DI":
Byte 0...1: 2nd TIME/OFF TIME: Second input time stamp of module Byte 2...3: 1st TIME/ON TIME: First input time stamp of module See bytes 4 to 7
For DI operating mode "Incremental encoder (A, B phase-shifted)" or "Counter":
Current counter value
Bit 7: DI1 active as Timer DI or DQ1 active as Timer DQ Bit 4...6: Lost edge counter for DI1 Bit 3: DI0 active as Timer DI or DQ0 active as Timer DQ Bit 0...2: Lost edge counter for DI0 See byte 36
Bit 7: DQ15 active as Timer DQ Bit 6: DQ14 active as Timer DQ Bit 5: DQ13 active as Timer DQ Bit 4: DQ12 active as Timer DQ Bit 3: DQ11 active as Timer DQ Bit 2: DQ10 active as Timer DQ Bit 1: DQ9 active as Timer DQ Bit 0: DQ8 active as Timer DQ
For DI operating mode "Oversampling":
Oversampling value
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
38
Manual, 08/2014, A5E34078538-AA
Configuring/address space 4.5 Control and feedback interface
Offset to the start address Byte 41 Bytes 42 to 43
Parameter
Meaning
Layout Property Module-specific value
ZSW SSL
Bits 12...15: sign of life counter (Slave Sign of Life)
--
Bits 10 to 11: Reserved
SYNC Bit 8: Module is synchronized with the user program
Channel Bits 4 to 7 and 9: Number of the respective DI or DQ address
Channel Bits 0 to 3: Operating mode of the respective DI or DQ mode
Notes on the feedback bits
Feedback bit STS_DI (DIm) EN (DIm/DQm)
Layout Property LEC (DIm) QI (DIm)
QI (DQm)
TEC_IN (DIm)
ZSW
Notes
This bit indicates the status of respective digital input DIm.
This bit indicates that
· The respective digital input is active as Timer DI and, if required, is enabled, or
· The respective digital output is active as Timer DQ and, if required, is enabled. For digital inputs and digital outputs with the operating modes "Counter", "Oversampling", "Pulse Width Modulation PWM" and for level-controlled hardware enable, this bit is permanently "0".
This value is a module-specific constant and used by the TIO instructions for the recognition of the technology module.
This value indicates the number of edges at the respective digital input DIm for which no time stamp could be stored. The module can count a maximum of seven edges per application cycle. The counter is reset with each new application cycle.
This bit indicates that an error has occurred at the respective digital input.
0 means: Supply voltage 1L+ not available or too low or front connector is not plugged
1 means: Supply voltage is present and OK
If the diagnostic interrupts are enabled, a diagnostic interrupt is triggered when there is a problem with the 1L+ supply voltage. Refer to the section Diagnostic alarms (Page 45) for details on the diagnostic interrupts.
This bit indicates that an error has occurred at the respective digital output.
0 means: Short-circuit, overload or overtemperature
1 means: Supply voltage is present and OK
If the diagnostic interrupts are enabled, a diagnostic interrupt is triggered when there is fault at the digital output. Refer to the section Diagnostic alarms (Page 45) for details on the diagnostic interrupts.
If you use the time stamp function for the respective digital input DIm, this value returns the two input time stamps for the module. The input time stamps are read by the TIO instruction TIO_DI and converted to the TIO_Time.
If you use the counting function for the respective digital input DIm, this value returns the current counter value.
If you use the Oversampling function for the respective digital input DIm, this value returns the 32 states of the DIm.
This value is controlled by the technology module and is used for communication with the TIO instruction TIO_SYNC.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
39
Configuring/address space 4.5 Control and feedback interface
Additional information Detailed information about the time stamp function is available from Technical Supporton request.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
40
Manual, 08/2014, A5E34078538-AA
Interrupts/diagnostic messages
5
5.1
LEDs
Status and error displays
The figure below shows the LEDs (status and error displays) of the TM Timer DIDQ 16x24V.
Figure 5-1 LEDs of the TM Timer DIDQ 16x24V
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
41
Interrupts/diagnostic messages 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in the section Diagnostic alarms (Page 45).
Table 5- 1 Status and error displays RUN/ERROR/MAINT
RUN Off
Flashes On On
Flashes
LEDs ERROR
Off
Off
Off Flashes Flashes
MAINT Off Off Off Off
Flashes
Meaning
To correct or avoid errors
Supply voltage from CPU/power supply Check or switch on the supply voltage
module not present or too low
at the PS, at the CPU or at the interface
module.
The technology module starts and
--
flashes until parameter assignment is
complete
The parameters of the technology module have been assigned.
Indicates a group error (at least one error pending)
Evaluate the diagnostic alarms and eliminate the error.
Hardware or firmware defective
Replace the technology module.
Table 5- 2 PWRm/DQm*/ERROR status displays
PWRm Off
On On
LEDs DQm*
Off
On On
ERROR Flashes
Off Flashes
Meaning
To correct or avoid errors
Supply voltage too low or missing Supply voltage is present and OK
· Check the supply voltage. · Make sure that the front connector is
correctly inserted.
--
Short-circuit or overload at the encoder · Correct the encoder wiring.
supply
· Check the loads connected to the
encoder supply.
* Applies for DQ0 to DQ7 when used as encoder supply
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
42
Manual, 08/2014, A5E34078538-AA
Interrupts/diagnostic messages 5.1 Status and error displays
ChannelLEDs
The DIm LEDs indicate the current level of the associated signals. The LEDs of the digital outputs DQm indicate the desired state.
The flashing frequency of the channel LEDs is limited to approximately 14 Hz. If higher frequencies are present, the channel LEDs will flash at 14 Hz instead of indicating the current status.
Table 5- 3 Status displays DIm/DQm*
LEDs DIm/DQm* Off On On
(DQm)
Meaning Digital input / digital output at 0 level
Digital input / digital output at 1 level
Diagnostic alarm: e.g. "Error at digital outputs"
* Applies for DQm when used as digital output
To correct or avoid errors --
--
Check the wiring or the connected load.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
43
Interrupts/diagnostic messages 5.2 Trigger a diagnostic interrupt
5.2
Trigger a diagnostic interrupt
Enabling the diagnostic interrupts You enable the diagnostic interrupts at the basic parameters. The technology module can trigger the following diagnostic interrupts:
Table 5- 4 Possible diagnostic interrupts
Diagnostic interrupt · Internal error · Watchdog tripped. Module is defective.
· No supply voltage · Short-circuit or overload at encoder supply · Error at the digital outputs · Supply voltage error · Overtemperature
Monitoring
Monitoring is always active. A diagnostic interrupt is triggered each time an error is detected.
Monitoring is always active. A detected error only triggers a diagnostic interrupt if "Enable diagnostic interrupts" has been enabled in the device parameters. The diagnostic interrupts are not enabled in the default setting.
Reactions to a diagnostic interrupt
The following happens when an event occurs that triggers a diagnostic interrupt:
The ERROR LED flashes.
Once you have remedied the error, the ERROR LED goes out.
The S7-1500 CPU interrupts processing of the user program. The diagnostic interrupt OB (e.g. OB 82) is called. The event that triggered the interrupt is entered in the start information of the diagnostic interrupt OB.
The S7-1500 CPU remains in RUN even if no diagnostic interrupt OB is present in the CPU. The technology module continues working unchanged if this is possible despite the error.
Detailed information on the error event is available with the instruction "RALRM" (read additional interrupt information).
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
44
Manual, 08/2014, A5E34078538-AA
Interrupts/diagnostic messages 5.3 Diagnostic alarms
5.3
Diagnostic alarms
Diagnostic alarms
If a diagnostic alarm is pending, the ERROR-LED is flashing.
The diagnostics are displayed as plain text in STEP 7 (TIA Portal) in the online and diagnostics view. You can evaluate the error codes with the user program.
The technology module only has one channel as far as diagnostics is concerned. Channel number "0" is therefore displayed for each diagnostic.
The following diagnostics can be signaled:
Table 5- 5 Diagnostic alarms, their meaning and remedies
Diagnostic alarm Error Meaning code
To correct or avoid errors
Internal error
Watchdog tripped. Module is defective.
No supply voltage
100H 103H
10AH
Short-circuit or overload at encoder supply
10EH
Error at the digital 10FH outputs
Supply voltage error
110H
Overtemperature 506H
Technology module defective Firmware error Technology module defective
Replace technology module Run firmware update Replace technology module
No 1L+ and/or 2L+ supply voltage for the technology module
Front connector not inserted correctly · Error at encoder supply · Possible causes:
Short-circuit Overload
Feed 1L+ supply voltage (terminal 19) and/or 2L+ (terminal 39) to the technology module
Insert front connector correctly
· Correct encoder wiring
· Check consumers connected to encoder supply
· Error at the digital outputs (DQm LED lights up red)
· Possible causes: Short-circuit Overload
· Correct wiring at the digital outputs
· Check consumers connected to the digital outputs
· Error at 1L+ and/or 2L+ supply voltage
· Possible causes: Low voltage Wiring of 1L+ and/or 2L+ supply voltage defective
· Check the 1L+ and/or 2L+ supply voltage
· Check the wiring of 1L+ and/or 2L+ supply voltage
· Possible causes:
Short-circuit or overload at the digital outputs or output of the encoder supply
Ambient temperature outside specifications
· Correct process wiring · Improve cooling · Check connected loads
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
45
Technical specifications
6
Product type designation General information Product function I&M data Engineering with STEP 7 TIA Portal can be configured/integrated as of version Installation type/mounting Rail mounting possible Supply voltage Load voltage 1L+ Rated value (DC) Low limit of valid range (DC) High limit of valid range (DC) Reverse polarity protection Load voltage 2L+ Rated value (DC) Low limit of valid range (DC) High limit of valid range (DC) Reverse polarity protection Input current from load voltage 1L+ (no load), max. from load voltage 2L+ (no load), max. Encoder supply Number of outputs 24 V encoder supply 24 V Short-circuit protection Output current, max.
Power Power from the backplane bus Power loss Power loss, typ.
6ES7552-1AA00-0AB0 TM Timer DIDQ 16x24V
Yes; I&M 0
V13 Update 3
Yes; S7-1500 mounting rail
24 V 19.2 V 28.8 V Yes; against destruction
24 V 19.2 V 28.8 V Yes; against destruction
40 mA; without load 30 mA; without load
8; max. depending on parameter assignment
Yes; L+ (-0.8 V) Yes 1.2 A; total current of all encoders / channels, max. 0.5 A per output
1.3 W
5 W
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
46
Technical specifications
Address area Occupied address area Inputs Outputs Digital inputs Number of inputs · In groups of Digital inputs, configurable Input characteristics to IEC 61131, Type 3 Digital input functions, configurable Digital input with time stamp · Number, max. Counter · Number, max. Counter for incremental encoder · Number, max. Digital input with oversampling · Number, max. Hardware enable for digital input · Number, max. Hardware enable for digital output · Number, max. Input voltage Type of input voltage Rated value, DC For signal "0" For signal "1" Permitted voltage at input, min. Permitted voltage at input, max. Input current for signal "1", typ. Input delay (at rated value of input voltage) Minimum pulse width for program reaction For standard inputs · Configurable
· at "0" to "1", min.
· at "1" to "0", min.
6ES7552-1AA00-0AB0
44 bytes 74 bytes
8; max. depending on parameter assignment 8 Yes Yes
Yes 8 Yes 4 Yes 4 Yes 8 Yes 4 Yes 4
DC 24 V -30 V to +5 V +11 V to +30 V -30 V 30 V
2.5 mA
3 µs; with parameter assignment "none"
Yes; none / 0.05 / 0.1 / 0.4 / 0.8 ms) 4 µs; with parameter assignment "none" 4 µs; with parameter assignment "none"
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
47
Technical specifications
Cable length Cable length shielded, max.
Cable length unshielded, max.
Digital outputs Type of digital output Number of outputs · In groups of M switching Sourcing Digital outputs, configurable Short-circuit protection · Response threshold, typ.
Limiting of inductive shutdown voltage to Control of a digital input Digital output functions, configurable Digital output with time stamp · Number, max. PWM output · Number, max. Digital output with oversampling · Number, max. Output switching capacity With resistive load, max. With lamp load, max. Load resistance range Low limit High limit Output voltage Type of output voltage for signal "0", max. for signal "1", min. Output current for signal "1" rated value for signal "1" permissible range, max.
for signal "1" minimum load current for signal "0" residual current, max.
6ES7552-1AA00-0AB0
1000 m; depending on sensor, cable quality and edge slope 600 m; depending on sensor, cable quality and edge slope
Transistor 16; max. depending on parameter assignment 8 Yes; with high-speed output Yes Yes Yes; electronic/thermal 1.7 A with standard output; 0.5 A with high-speed output -0.8 V Yes
Yes 16 Yes 16 Yes 16
0.5 A; 0.1 A with high-speed output 5 W; 1 W with high-speed output
48 ; 240 Ohm with high-speed output 12 k
DC 1 V; with high-speed output 23.2 V; L+ (-0.8 V)
0.5 A; 0.1 A with high-speed output, note derating 0.6 A; 0.12 A with high-speed output, note derating 2 mA 0.5 mA
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
48
Manual, 08/2014, A5E34078538-AA
Technical specifications
Output delay with resistive load "0" to "1", max.
"1" to "0", max.
Switching frequency With resistive load, max.
With lamp load, max. Total current of outputs Max. current per group Max. current per module Cable length Cable length shielded, max. Cable length unshielded, max. Encoders Supported encoders Incremental encoder (asymmetric) 24 V initiator 2-wire sensor · Permitted quiescent current (2-wire sensor),
max.
6ES7552-1AA00-0AB0
1 µs; for high-speed output, 5 µs with standard output 1 µs; for high-speed output, 6 µs with standard output
100 kHz; for high-speed output, 10 kHz with standard output 10 Hz
4 A 8 A; note derating
1000 m; depending on load and cable quality 600 m; depending on load and cable quality
Yes Yes Yes 1.5 mA
Encoder signals, incremental encoders (asymmetrical) Input voltage Input frequency, max. Counting frequency, max. Cable length shielded, max.
Incremental encoder with A/B tracks, phaseshifted by 90° Pulse encoder 24 V encoder signal · Permitted voltage at input, min.
24 V 50 kHz 200 kHz; with quadruple evaluation 600 m; depends on input frequency, encoder and cable quality; max. 200 m with 50 kHz Yes
Yes
-30 V
· Permitted voltage at input, max.
30 V
Interface hardware Input characteristics to IEC 61131, Type 3 Isochronous mode Isochronous mode (application synchronized until terminal) Bus cycle time (TDP), min. Jitter, max.
Yes
Yes 250 µs 1 µs
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
49
Technical specifications
Interrupts/diagnostics/status information Activation of substitute values Interrupts Diagnostic interrupt Diagnostic alarms Diagnostics Monitoring of supply voltage Short-circuit LED diagnostics display RUN LED ERROR LED MAINT LED Monitoring of supply voltage (PWR LED) Channel status display For channel diagnostics Integrated functions Number of counters Counting frequency (counters), max. Counting functions Continuous counting Electrical isolation Electrical isolation channels Between the channels and the backplane bus Permitted potential difference Between different circuits Isolation Isolation tested with Ambient conditions Operating temperature Horizontal installation, min. Horizontal installation, max. Vertical installation, min. Vertical installation, max. Distributed operation At SIMATIC S7-1500 Dimensions Width Height Depth Weights Weight, approx.
6ES7552-1AA00-0AB0
Yes
Yes
Yes Yes Yes
Yes; green LED Yes; red LED Yes; yellow LED Yes; green LED Yes; green LED Yes; red LED
4 200 kHz; with quadruple evaluation
Yes
Yes
75 V DC / 60 V AC (basic isolation)
707 V DC (type test)
0 °C 60 °C 0 °C 40 °C; note derating
Yes
35 mm 147 mm 129 mm
320 g
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
50
Manual, 08/2014, A5E34078538-AA
Technical specifications
Derating information for standardized total current of outputs If the digital outputs of the TM Timer DIDQ 16x24V are operated with resistive loads, you should derate the standardized total current of the loads at the digital outputs for each load group of the technology module. The standardized total current is the standardized total of the mean output currents at all digital outputs and encoder supplies related to its nominal current in each case. You should derate only if the system is mounted vertically. The following derating curve shows the load capacity of the digital outputs for each load group depending on the ambient temperature and mounting position:
Vertical installation of the system Horizontal installation of the system
Figure 6-1 Standardized total current for each load group depending on ambient temperature and mounting position for resistive loads
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
51
Technical specifications
Example
The following table shows the calculation of the standardized total current for each load group for the channel configuration "3 inputs, 13 outputs":
Table 6- 1 Calculation of the standardized total current (1L+)
Digital output
DQ0 DQ1 DQ2 DQ3 DQ4 DQ5 DQ6 DQ7
Load group of the supply voltage 1L+
Use as encoder High-speed
supply
output (0.1 A)
Output current
Nominal value according to parameter as-
signment
Mean value
Mean value in relation to the nominal value
Yes
--
0.5 A
0.3 A
60 %
Yes
--
0.5 A
0.4 A
80 %
No
No
0.5 A
0.5 A
100 %
Yes
--
0.5 A
0.4 A
80 %
No
Yes
0.1 A
0.05 A
50 %
No
No
0.5 A
0.15 A
30 %
No
Yes
0.1 A
0.09 A
90 %
No
No
0.5 A
0.35 A
70 %
Total
560 %
Standardized total current = total / number of outputs = 560 % / 8 outputs
70 %
Table 6- 2 Calculation of the standardized total current (2L+)
Digital output
DQ8 DQ9 DQ10 DQ11 DQ12 DQ13 DQ14 DQ15
Load group of the supply voltage 2L+
Use as encoder High-speed
supply
output (0.1 A)
Output current
Nominal value according to parameter as-
signment
Mean value
Mean value in relation to the nominal value
--
Yes
0.1 A
0.05 A
50 %
--
Yes
0.1 A
0.07 A
70 %
--
No
0.5 A
0.5 A
100 %
--
No
0.5 A
0.4 A
80 %
--
Yes
0.1 A
0.09 A
90 %
--
No
0.5 A
0.15 A
30 %
--
Yes
0.1 A
0.04 A
40 %
--
No
0.5 A
0.25 A
50 %
Total
510 %
Standardized total current = total / number of outputs = 510 % / 8 outputs
64 %
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
52
Manual, 08/2014, A5E34078538-AA
Technical specifications
For the determination of the maximum ambient temperature for the technology module, the higher standardized total current of the two load groups is considered. In this example, it amounts to 70 %. With a standardized total current of 70 % and vertical mounting of the system, the ambient temperature according to the derating curve may amount to a maximum of approx. 38 °C.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
53
Dimension drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the TM Timer DIDQ 16x24V technology module
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
54
Dimension drawing
Figure A-2 Dimensional drawing of the TM Timer DIDQ 16x24V module, side view with open front panel
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
55
Parameter data record
B
You may edit the module parameters in RUN. The WRREC instruction is used to transfer the parameters to the module using data record 128.
If errors occur during the transfer or validation of parameters with the WRREC instruction, the module continues operation with the previous parameter assignment. A corresponding error code is then written to the STATUS output parameter. If no errors occur, the STATUS output parameter contains the length of the actually transferred data.
The description of the WRREC instruction and the error codes is available in the STEP 7 online help (TIA Portal).
Structure of data record
The following table shows you the structure of data record 128 for TM Timer DIDQ 16x24V. The values in byte 0 to byte 3 are fixed and may not be changed.
Table B- 1 Parameter data record 128
Bit Byte
0...3
0 1 2 3 4...7 4
5
6 7
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
Reserved2)
Major Version = 0
Length of the parameter data = 36
Reserved2)
Header Minor Version = 1
Reserved2)
Reserved2) Reserved2)
Basic parameters
PWM period for the digital outputs:
0000B: 10 ms
0001B: 5 ms
0010B: 2 ms
0011B: 1 ms
0100B: 0.5 ms
0101B: 0.2 ms
0110 to 1111B: Reserved
Enable diagnostic interrupt1)
Reaction to CPU STOP:
00B: Output substitute value
01B: Keep last value
10 to 11B: Reserved
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
56
Parameter data record
Bit
Byte
8...9 8
Bit 7 Reserved2)
Bit 6
9 Reserved2)
8...9
8 High-speed Substitute
output
value
(0.1 A)1
9 10...11
10
Reserved2) Reserved2)
11 Reserved2)
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
Invert input signal1
Invert output signal1
Channel parameters for DI0
HW enable with next digital input1
Operating mode of the digital input: 0000B: Timer-DI 0001B: Reserved
0010B: Oversampling
0011B: Counter
0100B: Incremental encoder (A, B phase-shifted)
0101 to 1111B: Reserved
Input delay / Filter frequency:
0000B: None
0001B: 0.05 ms
0010B: 0.1 ms
0011B: 0.4 ms
0100B: 0.8 ms
0101 to 1110B: Reserved
1111B: 50 kHz
Channel parameters for DQ0
HW enable with next digital input1
Operating mode of the digital output: 0000 to 0111B: Reserved 1000B: Timer DQ
1001B: Reserved
1010B: Oversampling
1011B: PWM
1100 to 1111B: Reserved
Invert input signal1
Channel parameters for DI1 Reserved2) Operating mode of the digital input:
0000B: Timer-DI 0001B: Reserved 0010B: Oversampling 0011 to 1111B: Reserved Input delay: 0000B: None 0001B: 0.05 ms 0010B: 0.1 ms 0011B: 0.4 ms 0100B: 0.8 ms 0101 to 1111B: Reserved
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
57
Parameter data record
Bit
Byte
Bit 7
10...11
10 High-speed output (0.1 A)1
Bit 6
Substitute value
11 Reserved2) 12...13 14...15 16...17 18...19 20...21 22...23 24...25 26...27 28...29 30...31 32...33 34...35 36...37 38...39
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Invert output signal1
Channel parameters for DQ1 Reserved2) Operating mode of the digital output:
0000 to 0111B: Reserved 1000B: Timer DQ 1001B: Reserved 1010B: Oversampling 1011B: PWM 1100 to 1111B: Reserved
Channel parameters for DI2/DQ2: See bytes 8 and 9
Channel parameters for DI3/DQ3: See bytes 10 and 11
Channel parameters for DI4/DQ4: See bytes 8 and 9
Channel parameters for DI5/DQ5: See bytes 10 and 11
Channel parameters for DI6/DQ6: See bytes 8 and 9
Channel parameters for DI7/DQ7: See bytes 10 and 11
Channel parameters for DQ8: See bytes 10 and 11
Channel parameters for DQ9: See bytes 10 and 11
Channel parameters for DQ10: See bytes 10 and 11
Channel parameters for DQ11: See bytes 10 and 11
Channel parameters for DQ12: See bytes 10 and 11
Channel parameters for DQ13: See bytes 10 and 11
Channel parameters for DQ14: See bytes 10 and 11
Channel parameters for DQ15: See bytes 10 and 11
1) You enable a specific parameter by setting the corresponding bit to 1. 2) Must be set to 0.
Bit 0
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
58
Manual, 08/2014, A5E34078538-AA
Parameter data record
Counting
The following table shows the properties for counting that you can set in the channel parameters of the respective digital input:
Table B- 2 Setting options for counting
Operating mode for counting
Counter (0011B)
Usable digital inputs
· DI0 · DI1 · DI2
"Invert input signal" set to...
0
Counting of rising edges
1
Counting of falling edges
Incremental en- ·
coder (A, B phase-
shifted) (0100B)
·
·
·
DI0 with DI1 (all bits of the channel parameters for DI1 are set to 0)
DI2 with DI3 (all bits of the channel parameters for DI3 are set to 0)
DI4 with DI5 (all bits of the channel parameters for DI5 are set to 0)
DI6 with DI7 (all bits of the channel parameters for DI7 are set to 0)
Counting direction not inverted
Counting direction inverted
Hardware enable (HW enable)
You can use a hardware enable by an enable input for the operating modes "Timer DI" and "Timer DQ". You set a hardware enable with bit 4 of the respective channel parameter.
You can set a hardware enable for the following inputs and outputs:
Table B- 3 Hardware enable options
Digital input / digital output DI0 or DQ0 DI2 or DQ2 DI4 or DQ4 DI6 or DQ6
Hardware enable by digital input... DI1 DI3 DI5 DI7
You set a hardware enable with the channel parameters of the enable input "Operating mode" and "Invert" signal input:
Table B- 4 Setting options for enable input
Operating mode
"Invert input signal" set to...
0
1
Oversampling (0010B) Hardware enable by High level
Hardware enable by Low level
Timer DI (0000B)
When using the SIMOTION control system only
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
59
Parameter data record
Input filter
The following overview shows the input filters that can be set for specific operating modes of a digital input:
Table B- 5 Setting options for the input filter
Operating mode of the digital input · Timer DI (0000B) · Oversampling (0010B)
Type of input filter Input delay
· Counter (0011B)
· Incremental encoder (A, B phaseshifted) (0100B)
Filter frequency
Assignable values
· None · 0.05 ms · 0.1 ms · 0.4 ms · 0.8 ms
50 kHz (cannot be changed)
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
60
Manual, 08/2014, A5E34078538-AA
Open Source Software
C
For Resellers: In order to avoid infringements of the license conditions by the reseller or the buyer, the instructions and license conditions provided here must be passed on to the buyers.
License Conditions and Disclaimers for Open Source Software and other licensing software
The Open Source software listed below is used in unmodified form or in a form we have modified as well as other license software listed below in the "digital modules, analog modules, technology modules, communication modules and power supply modules of the SIMATIC S7-1500, ET 200MP" Copyright Siemens AG, 2013-2014 (hereinafter referred to as "Product").
Liability for Open Source Software
The Open Source software is provided free of charge. We are liable for the Product including the Open Source software contained in it pursuant to the license conditions applicable to the Product. We explicitly reject any liability for the use of Open Source software beyond the program sequence intended for the Product. Furthermore, any liability for defects resulting from modifications to the Open Source software is excluded.
We do not provide any technical support for the Product if it has been modified.
Please read the license conditions and copyright information of Open Source software as well as other licensing software:
Component
Dinkumware C/C++ Library - 5.01
Open Source Software[Yes/No]
NO
GNU GCC libstdc++ / YES libsupc++ - 4.4.1
libgcc - 4.4.1
YES
Acknowledgements
Copyright Information / File
LICENSE AND COPYRIGHT INFORMATION FOR COMPONENT DINKUMWARE C/C++ LIBRARY - 5.01
LICENSE AND COPYRIGHT INFORMATION FOR COMPONENT GNU GCC LIBSTDC++ / LIBSUPC++ - 4.4.1
LICENSE AND COPYRIGHT INFORMATION FOR COMPONENT LIBGCC - 4.4.1
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
61
Manual, 08/2014, A5E34078538-AA
Open Source Software
Commercial Software: Dinkumware C/C++ Library - 5.01
Enclosed you'll find the license conditions and copyright notices applicable for Commercial Software Dinkumware C/C++ Library - 5.01
License conditions:
1 Copyright (c) 1991-1999 Unicode, Inc. All Rights reserved. This file is provided as-is by Unicode, Inc. (The Unicode Consortium).No claims are made as to fitness for any particular purpose. Nowarranties of any kind are expressed or implied. The recipientagrees to determine applicability of information provided. If thisfile has been provided on optical media by Unicode, Inc., the soleremedy for any claim will be exchange of defective media within 90days of receipt.Unicode, Inc. hereby grants the right to freely use the informationsupplied in this file in the creation of products supporting theUnicode Standard, and to make copies of this file in any form forinternal or external distribution as long as this notice remainsattached.
2 © Copyright William E. Kempf 2001 Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. William E. Kempf makes no representations about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.
3 Copyright © 1994 Hewlett-Packard CompanyPermission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. HewlettPackard Company makes no representations about the suitability of this software for any purpose. It is provided ``as is'' without express or implied warranty.
Copyrights:
copyright 1992 - 2006 by p.j. plauger and jim brodie. all rights reserved.
copyright 1992-2006 by p.j. plauger. all rights reserved.ip
copyright 1992-2006 by p.j. plauger. portions derived from work copyright 1994 by hewlettpackard company. all rights reserved
Copyright 1992-2006 by dinkumware, ltd. all rights reserved
copyright 1992-2006 by dinkumware, ltd. portions derived from work copyright 2001 by william e. kempf. all rights reserved
copyright 1994 hewlettpackard company
copyright 1994 by hewlettpackard company
copyright william e. kempf 2001
copyright 1989-2006 by p.j. plauger. all rights reserved
copyright (c) by p.j. plauger. all rights reserved.
copyright (c) by dinkumware, ltd. all rights reserved.
copyright (c) unicode, inc. all rights reserved.
(c) copyright william e. kempf 2001
copyright (c) hewlettpackard company
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
62
Manual, 08/2014, A5E34078538-AA
Open Source Software
copyright (c) by p.j. plauger. all rights reserved. copyright 2006 by dinkumware, ltd. copyright (c) by p.j. plauger, licensed by dinkumware, ltd. all rights reserved. the dinkum cec++ library reference is copyright (c) by p.j. plauger. this code is protected by copyright. all rights reserved. the dinkum cc++ library reference is copyright (c) by p.j. plauger. this code is protected by copyright. all rights reserved. dinkum compleat library, vc++ package (vc++ compilers only) the dinkum compleat library and the dinkum compleat library reference are copyright (c) by p.j. plauger. all rights reserved.
Open Source Software: GNU GCC libstdc++ / libsupc++ - 4.4.1 Enclosed you'll find the license conditions and copyright notices applicable for Open Source Software GNU GCC libstdc++ / libsupc++ - 4.4.1
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
63
Open Source Software
License conditions:
1 License
There are two licenses affecting GNU libstdc++: one for the code, and one for the documentation.
There is a license section in the FAQ regarding common questions. If you have more questions, ask the FSF or the gcc mailing list. The Code: GPL
The source code is distributed under the GNU General Public License version 3, with the addition under section 7 of an exception described in the "GCC Runtime Library Exception, version 3.1" as follows (or see the file COPYING.RUNTIME):
GCC RUNTIME LIBRARY EXCEPTION
Version 3.1, 31 March 2009
Copyright (C) 2009 Free Software Foundation, Inc.
Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.
This GCC Runtime Library Exception ("Exception") is an additional permission under section 7 of the GNU General Public License, version 3 ("GPLv3"). It applies to a given file (the "Runtime Library") that bears a notice placed by the copyright holder of the file stating that the file is governed by GPLv3 along with this Exception.
When you use GCC to compile a program, GCC may combine portions of certain GCC header files and runtime libraries with the compiled program. The purpose of this Exception is to allow compilation of non-GPL (including proprietary) programs to use, in this way, the header files and runtime libraries covered by this Exception.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
64
Manual, 08/2014, A5E34078538-AA
Open Source Software
0. Definitions.
A file is an "Independent Module" if it either requires the Runtime Library for execution after a Compilation Process, or makes use of an interface provided by the Runtime Library, but is not otherwise based on the Runtime Library.
"GCC" means a version of the GNU Compiler Collection, with or without modifications, governed by version 3 (or a specified later version) of the GNU General Public License (GPL) with the option of using any subsequent versions published by the FSF.
"GPL-compatible Software" is software whose conditions of propagation, modification and use would permit combination with GCC in accord with the license of GCC.
"Target Code" refers to output from any compiler for a real or virtual target processor architecture, in executable form or suitable for input to an assembler, loader, linker and/or execution phase. Notwithstanding that, Target Code does not include data in any format that is used as a compiler intermediate representation, or used for producing a compiler intermediate representation.
The "Compilation Process" transforms code entirely represented in non-intermediate languages designed for human-written code, and/or in Java Virtual Machine byte code, into Target Code. Thus, for example, use of source code generators and preprocessors need not be considered part of the Compilation Process, since the Compilation Process can be understood as starting with the output of the generators or preprocessors.
A Compilation Process is "Eligible" if it is done using GCC, alone or with other GPL-compatible software, or if it is done without using any work based on GCC. For example, using non-GPL-compatible Software to optimize any GCC intermediate representations would not qualify as an Eligible Compilation Process.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
65
Open Source Software
1. Grant of Additional Permission.
You have permission to propagate a work of Target Code formed by combining the Runtime Library with Independent Modules, even if such propagation would otherwise violate the terms of GPLv3, provided that all Target Code was generated by Eligible Compilation Processes. You may then convey such a combination under terms of your choice, consistent with the licensing of the Independent Modules.
2. No Weakening of GCC Copyleft.
The availability of this Exception does not imply any general presumption that third-party software is unaffected by the copyleft requirements of the license of GCC.
Hopefully that text is self-explanatory. If it isn't, you need to speak to your lawyer, or the Free Software Foundation. The Documentation: GPL, FDL
The documentation shipped with the library and made available over the web, excluding the pages generated from source comments, are copyrighted by the Free Software Foundation, and placed under the GNU Free Documentation License version 1.2. There are no Front-Cover Texts, no Back-Cover Texts, and no Invariant Sections.
For documentation generated by doxygen or other automated tools via processing source code comments and markup, the original source code license applies to the generated files. Thus, the doxygen documents are licensed GPL.
If you plan on making copies of the documentation, please let us know. We can probably offer suggestions. 2 This library is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3, or (at your option) any later version. This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. Under Section 7 of GPL version 3, you are granted additional permissions described in the GCC Runtime Library Exception, version 3.1, as published by the Free Software Foundation. You should have received a copy of the GNU General Public License and a copy of the GCC Runtime Library Exception along with this program; see the files COPYING3 and COPYING.RUNTIME respectively. If not, see <http://www.gnu.org/licenses/>.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
66
Manual, 08/2014, A5E34078538-AA
Open Source Software
3 // This file is part of the GNU ISO C++ Library. This library is free // software; you can redistribute it and/or modify it under the // terms of the GNU General Public License as published by the // Free Software Foundation; either version 3, or (at your option) // any later version. // This library is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // Under Section 7 of GPL version 3, you are granted additional // permissions described in the GCC Runtime Library Exception, version // 3.1, as published by the Free Software Foundation. // You should have received a copy of the GNU General Public License and // a copy of the GCC Runtime Library Exception along with this program; // see the files COPYING3 and COPYING.RUNTIME respectively. If not, see // <http://www.gnu.org/licenses/>. // (C) Copyright Jeremy Siek 2000. Permission to copy, use, modify, // sell and distribute this software is granted provided this // copyright notice appears in all copies. This software is provided // "as is" without express or implied warranty, and with no claim as // to its suitability for any purpose.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
67
Open Source Software
4 // This file is part of the GNU ISO C++ Library. This library is free // software; you can redistribute it and/or modify it under the // terms of the GNU General Public License as published by the // Free Software Foundation; either version 3, or (at your option) // any later version. // This library is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // Under Section 7 of GPL version 3, you are granted additional // permissions described in the GCC Runtime Library Exception, version // 3.1, as published by the, 2009 Free Software Foundation. // You should have received a copy of the GNU General Public License and // a copy of the GCC Runtime Library Exception along with this program; // see the files COPYING3 and COPYING.RUNTIME respectively. If not, see // <http://www.gnu.org/licenses/>. /* * * Copyright (c) 1994 * Hewlett-Packard Company * * Permission to use, copy, modify, distribute and sell this software * and its documentation for any purpose is hereby granted without fee, * provided that the above copyright notice appear in all copies and * that both that copyright notice and this permission notice appear * in supporting documentation. Hewlett-Packard Company makes no * representations about the suitability of this software for any * purpose. It is provided "as is" without express or implied warranty. * * Copyright (c) 1996,1997 * Silicon Graphics * * Permission to use, copy, modify, distribute and sell this software * and its documentation for any purpose is hereby granted without fee, * provided that the above copyright notice appear in all copies and * that both that copyright notice and this permission notice appear * in supporting documentation. Silicon Graphics makes no * representations about the suitability of this software for any * purpose. It is provided "as is" without express or implied warranty.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
68
Manual, 08/2014, A5E34078538-AA
Open Source Software
5 // This file is part of the GNU ISO C++ Library. This library is free // software; you can redistribute it and/or modify it under the // terms of the GNU General Public License as published by the // Free Software Foundation; either version 3, or (at your option) // any later version. // This library is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // Under Section 7 of GPL version 3, you are granted additional // permissions described in the GCC Runtime Library Exception, version // 3.1, as published by the Free Software Foundation. // You should have received a copy of the GNU General Public License and // a copy of the GCC Runtime Library Exception along with this program; // see the files COPYING3 and COPYING.RUNTIME respectively. If not, see // <http://www.gnu.org/licenses/>. /* * * Copyright (c) 1996,1997 * Silicon Graphics Computer Systems, Inc. * * Permission to use, copy, modify, distribute and sell this software * and its documentation for any purpose is hereby granted without fee, * provided that the above copyright notice appear in all copies and * that both that copyright notice and this permission notice appear * in supporting documentation. Silicon Graphics makes no * representations about the suitability of this software for any * purpose. It is provided "as is" without express or implied warranty. * * * Copyright (c) 1994 * Hewlett-Packard Company * * Permission to use, copy, modify, distribute and sell this software * and its documentation for any purpose is hereby granted without fee, * provided that the above copyright notice appear in all copies and * that both that copyright notice and this permission notice appear * in supporting documentation. Hewlett-Packard Company makes no * representations about the suitability of this software for any * purpose. It is provided "as is" without express or implied warranty.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
69
Open Source Software
6 This library is free // software; you can redistribute it and/or modify it under the terms // of the GNU General Public License as published by the Free Software // Foundation; either version 3, or (at your option) any later // version. // This library is distributed in the hope that it will be useful, but // WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU // General Public License for more details. // Under Section 7 of GPL version 3, you are granted additional // permissions described in the GCC Runtime Library Exception, version // 3.1, as published by the Free Software Foundation. // You should have received a copy of the GNU General Public License and // a copy of the GCC Runtime Library Exception along with this program; // see the files COPYING3 and COPYING.RUNTIME respectively. If not, see // <http://www.gnu.org/licenses/>. // Copyright (C) 2004 Ami Tavory and Vladimir Dreizin, IBM-HRL. // Permission to use, copy, modify, sell, and distribute this software // is hereby granted without fee, provided that the above copyright // notice appears in all copies, and that both that copyright notice // and this permission notice appear in supporting documentation. None // of the above authors, nor IBM Haifa Research Laboratories, make any // representation about the suitability of this software for any // purpose. It is provided "as is" without express or implied // warranty. /** * @file splay_tree_.hpp * Contains an implementation class for splay_tree_. */ /* * This implementation uses an idea from the SGI STL (using a "header" node * which is needed for efficient iteration). Following is the SGI STL * copyright. * * Copyright (c) 1996,1997 * Silicon Graphics Computer Systems, Inc. * * Permission to use, copy, modify, distribute and sell this software * and its documentation for any purpose is hereby granted without fee, * provided that the above copyright notice appear in all copies and * that both that copyright notice and this permission notice appear * in supporting documentation. Silicon Graphics makes no * representations about the suitability of this software for any * purpose. It is provided "as is" without express or implied warranty. * * * Copyright (c) 1994 * Hewlett-Packard Company *
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
70
Manual, 08/2014, A5E34078538-AA
Open Source Software
* Permission to use, copy, modify, distribute and sell this software * and its documentation for any purpose is hereby granted without fee, * provided that the above copyright notice appear in all copies and * that both that copyright notice and this permission notice appear * in supporting documentation. Hewlett-Packard Company makes no * representations about the suitability of this software for any * purpose. It is provided "as is" without express or implied warranty.
7 This library is free // software; you can redistribute it and/or modify it under the // terms of the GNU General Public License as published by the // Free Software Foundation; either version 3, or (at your option) // any later version. // This library is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // Under Section 7 of GPL version 3, you are granted additional // permissions described in the GCC Runtime Library Exception, version // 3.1, as published by the Free Software Foundation. // You should have received a copy of the GNU General Public License and // a copy of the GCC Runtime Library Exception along with this program; // see the files COPYING3 and COPYING.RUNTIME respectively. If not, see // <http://www.gnu.org/licenses/>. /* * Copyright (c) 1997 * Silicon Graphics Computer Systems, Inc. * * Permission to use, copy, modify, distribute and sell this software * and its documentation for any purpose is hereby granted without fee, * provided that the above copyright notice appear in all copies and * that both that copyright notice and this permission notice appear * in supporting documentation. Silicon Graphics makes no * representations about the suitability of this software for any * purpose. It is provided "as is" without express or implied warranty.
8 Verbatim copying and distribution of this entire article are permitted worldwide, without royalty, in any medium, provided this notice is preserved.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
71
Open Source Software
9 GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007
Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/> Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.
Preamble
The GNU General Public License is a free, copyleft license for software and other kinds of works.
The licenses for most software and other practical works are designed to take away your freedom to share and change the works. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change all versions of a program--to make sure it remains free software for all its users. We, the Free Software Foundation, use the GNU General Public License for most of our software; it applies also to any other work released this way by its authors. You can apply it to your programs, too.
When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for them if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs, and that you know you can do these things.
To protect your rights, we need to prevent others from denying you these rights or asking you to surrender the rights. Therefore, you have certain responsibilities if you distribute copies of the software, or if you modify it: responsibilities to respect the freedom of others.
For example, if you distribute copies of such a program, whether gratis or for a fee, you must pass on to the recipients the same freedoms that you received. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights.
Developers that use the GNU GPL protect your rights with two steps: (1) assert copyright on the software, and (2) offer you this License giving you legal permission to copy, distribute and/or modify it.
For the developers' and authors' protection, the GPL clearly explains that there is no warranty for this free software. For both users' and authors' sake, the GPL requires that modified versions be marked as changed, so that their problems will not be attributed erroneously to authors of previous versions.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
72
Manual, 08/2014, A5E34078538-AA
Open Source Software
Some devices are designed to deny users access to install or run modified versions of the software inside them, although the manufacturer can do so. This is fundamentally incompatible with the aim of protecting users' freedom to change the software. The systematic pattern of such abuse occurs in the area of products for individuals to use, which is precisely where it is most unacceptable. Therefore, we have designed this version of the GPL to prohibit the practice for those products. If such problems arise substantially in other domains, we stand ready to extend this provision to those domains in future versions of the GPL, as needed to protect the freedom of users.
Finally, every program is threatened constantly by software patents. States should not allow patents to restrict development and use of software on general-purpose computers, but in those that do, we wish to avoid the special danger that patents applied to a free program could make it effectively proprietary. To prevent this, the GPL assures that patents cannot be used to render the program non-free.
The precise terms and conditions for copying, distribution and modification follow.
TERMS AND CONDITIONS
0. Definitions.
"This License" refers to version 3 of the GNU General Public License.
"Copyright" also means copyright-like laws that apply to other kinds of works, such as semiconductor masks.
"The Program" refers to any copyrightable work licensed under this License. Each licensee is addressed as "you". "Licensees" and "recipients" may be individuals or organizations.
To "modify" a work means to copy from or adapt all or part of the work in a fashion requiring copyright permission, other than the making of an exact copy. The resulting work is called a "modified version" of the earlier work or a work "based on" the earlier work.
A "covered work" means either the unmodified Program or a work based on the Program.
To "propagate" a work means to do anything with it that, without permission, would make you directly or secondarily liable for infringement under applicable copyright law, except executing it on a computer or modifying a private copy. Propagation includes copying, distribution (with or without modification), making available to the public, and in some countries other activities as well.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
73
Open Source Software
To "convey" a work means any kind of propagation that enables other parties to make or receive copies. Mere interaction with a user through a computer network, with no transfer of a copy, is not conveying.
An interactive user interface displays "Appropriate Legal Notices" to the extent that it includes a convenient and prominently visible feature that (1) displays an appropriate copyright notice, and (2) tells the user that there is no warranty for the work (except to the extent that warranties are provided), that licensees may convey the work under this License, and how to view a copy of this License. If the interface presents a list of user commands or options, such as a menu, a prominent item in the list meets this criterion.
1. Source Code.
The "source code" for a work means the preferred form of the work for making modifications to it. "Object code" means any non-source form of a work.
A "Standard Interface" means an interface that either is an official standard defined by a recognized standards body, or, in the case of interfaces specified for a particular programming language, one that is widely used among developers working in that language.
The "System Libraries" of an executable work include anything, other than the work as a whole, that (a) is included in the normal form of packaging a Major Component, but which is not part of that Major Component, and (b) serves only to enable use of the work with that Major Component, or to implement a Standard Interface for which an implementation is available to the public in source code form. A "Major Component", in this context, means a major essential component (kernel, window system, and so on) of the specific operating system (if any) on which the executable work runs, or a compiler used to produce the work, or an object code interpreter used to run it.
The "Corresponding Source" for a work in object code form means all the source code needed to generate, install, and (for an executable work) run the object code and to modify the work, including scripts to control those activities. However, it does not include the work's System Libraries, or general-purpose tools or generally available free programs which are used unmodified in performing those activities but which are not part of the work. For example, Corresponding Source includes interface definition files associated with source files for the work, and the source code for shared libraries and dynamically linked subprograms that the work is specifically designed to require, such as by intimate data communication or control flow between those subprograms and other parts of the work.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
74
Manual, 08/2014, A5E34078538-AA
Open Source Software
The Corresponding Source need not include anything that users can regenerate automatically from other parts of the Corresponding Source.
The Corresponding Source for a work in source code form is that same work.
2. Basic Permissions.
All rights granted under this License are granted for the term of copyright on the Program, and are irrevocable provided the stated conditions are met. This License explicitly affirms your unlimited permission to run the unmodified Program. The output from running a covered work is covered by this License only if the output, given its content, constitutes a covered work. This License acknowledges your rights of fair use or other equivalent, as provided by copyright law.
You may make, run and propagate covered works that you do not convey, without conditions so long as your license otherwise remains in force. You may convey covered works to others for the sole purpose of having them make modifications exclusively for you, or provide you with facilities for running those works, provided that you comply with the terms of this License in conveying all material for which you do not control copyright. Those thus making or running the covered works for you must do so exclusively on your behalf, under your direction and control, on terms that prohibit them from making any copies of your copyrighted material outside their relationship with you.
Conveying under any other circumstances is permitted solely under the conditions stated below. Sublicensing is not allowed; section 10 makes it unnecessary.
3. Protecting Users' Legal Rights From Anti-Circumvention Law.
No covered work shall be deemed part of an effective technological measure under any applicable law fulfilling obligations under article 11 of the WIPO copyright treaty adopted on 20 December 1996, or similar laws prohibiting or restricting circumvention of such measures.
When you convey a covered work, you waive any legal power to forbid circumvention of technological measures to the extent such circumvention is effected by exercising rights under this License with respect to the covered work, and you disclaim any intention to limit operation or modification of the work as a means of enforcing, against the work's users, your or third parties' legal rights to forbid circumvention of technological measures.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
75
Open Source Software
4. Conveying Verbatim Copies.
You may convey verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice; keep intact all notices stating that this License and any non-permissive terms added in accord with section 7 apply to the code; keep intact all notices of the absence of any warranty; and give all recipients a copy of this License along with the Program.
You may charge any price or no price for each copy that you convey, and you may offer support or warranty protection for a fee.
5. Conveying Modified Source Versions.
You may convey a work based on the Program, or the modifications to produce it from the Program, in the form of source code under the terms of section 4, provided that you also meet all of these conditions:
a) The work must carry prominent notices stating that you modified it, and giving a relevant date.
b) The work must carry prominent notices stating that it is released under this License and any conditions added under section 7. This requirement modifies the requirement in section 4 to "keep intact all notices".
c) You must license the entire work, as a whole, under this License to anyone who comes into possession of a copy. This License will therefore apply, along with any applicable section 7 additional terms, to the whole of the work, and all its parts, regardless of how they are packaged. This License gives no permission to license the work in any other way, but it does not invalidate such permission if you have separately received it.
d) If the work has interactive user interfaces, each must display Appropriate Legal Notices; however, if the Program has interactive interfaces that do not display Appropriate Legal Notices, your work need not make them do so.
A compilation of a covered work with other separate and independent works, which are not by their nature extensions of the covered work, and which are not combined with it such as to form a larger program, in or on a volume of a storage or distribution medium, is called an "aggregate" if the compilation and its resulting copyright are not used to limit the access or legal rights of the compilation's users beyond what the individual works permit. Inclusion of a covered work in an aggregate does not cause this License to apply to the other parts of the aggregate.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
76
Manual, 08/2014, A5E34078538-AA
Open Source Software
6. Conveying Non-Source Forms.
You may convey a covered work in object code form under the terms of sections 4 and 5, provided that you also convey the machine-readable Corresponding Source under the terms of this License, in one of these ways:
a) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by the Corresponding Source fixed on a durable physical medium customarily used for software interchange.
b) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by a written offer, valid for at least three years and valid for as long as you offer spare parts or customer support for that product model, to give anyone who possesses the object code either (1) a copy of the Corresponding Source for all the software in the product that is covered by this License, on a durable physical medium customarily used for software interchange, for a price no more than your reasonable cost of physically performing this conveying of source, or (2) access to copy the Corresponding Source from a network server at no charge.
c) Convey individual copies of the object code with a copy of the written offer to provide the Corresponding Source. This alternative is allowed only occasionally and noncommercially, and only if you received the object code with such an offer, in accord with subsection 6b.
d) Convey the object code by offering access from a designated place (gratis or for a charge), and offer equivalent access to the Corresponding Source in the same way through the same place at no further charge. You need not require recipients to copy the Corresponding Source along with the object code. If the place to copy the object code is a network server, the Corresponding Source may be on a different server (operated by you or a third party) that supports equivalent copying facilities, provided you maintain clear directions next to the object code saying where to find the Corresponding Source. Regardless of what server hosts the Corresponding Source, you remain obligated to ensure that it is available for as long as needed to satisfy these requirements.
e) Convey the object code using peer-to-peer transmission, provided you inform other peers where the object code and Corresponding Source of the work are being offered to the general public at no charge under subsection 6d.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
77
Open Source Software
A separable portion of the object code, whose source code is excluded from the Corresponding Source as a System Library, need not be included in conveying the object code work.
A "User Product" is either (1) a "consumer product", which means any tangible personal property which is normally used for personal, family, or household purposes, or (2) anything designed or sold for incorporation into a dwelling. In determining whether a product is a consumer product, doubtful cases shall be resolved in favor of coverage. For a particular product received by a particular user, "normally used" refers to a typical or common use of that class of product, regardless of the status of the particular user or of the way in which the particular user actually uses, or expects or is expected to use, the product. A product is a consumer product regardless of whether the product has substantial commercial, industrial or non-consumer uses, unless such uses represent the only significant mode of use of the product.
"Installation Information" for a User Product means any methods, procedures, authorization keys, or other information required to install and execute modified versions of a covered work in that User Product from a modified version of its Corresponding Source. The information must suffice to ensure that the continued functioning of the modified object code is in no case prevented or interfered with solely because modification has been made.
If you convey an object code work under this section in, or with, or specifically for use in, a User Product, and the conveying occurs as part of a transaction in which the right of possession and use of the User Product is transferred to the recipient in perpetuity or for a fixed term (regardless of how the transaction is characterized), the Corresponding Source conveyed under this section must be accompanied by the Installation Information. But this requirement does not apply if neither you nor any third party retains the ability to install modified object code on the User Product (for example, the work has been installed in ROM).
The requirement to provide Installation Information does not include a requirement to continue to provide support service, warranty, or updates for a work that has been modified or installed by the recipient, or for the User Product in which it has been modified or installed. Access to a network may be denied when the modification itself materially and adversely affects the operation of the network or violates the rules and protocols for communication across the network.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
78
Manual, 08/2014, A5E34078538-AA
Open Source Software
Corresponding Source conveyed, and Installation Information provided, in accord with this section must be in a format that is publicly documented (and with an implementation available to the public in source code form), and must require no special password or key for unpacking, reading or copying.
7. Additional Terms.
"Additional permissions" are terms that supplement the terms of this License by making exceptions from one or more of its conditions. Additional permissions that are applicable to the entire Program shall be treated as though they were included in this License, to the extent that they are valid under applicable law. If additional permissions apply only to part of the Program, that part may be used separately under those permissions, but the entire Program remains governed by this License without regard to the additional permissions.
When you convey a copy of a covered work, you may at your option remove any additional permissions from that copy, or from any part of it. (Additional permissions may be written to require their own removal in certain cases when you modify the work.) You may place additional permissions on material, added by you to a covered work, for which you have or can give appropriate copyright permission.
Notwithstanding any other provision of this License, for material you add to a covered work, you may (if authorized by the copyright holders of that material) supplement the terms of this License with terms:
a) Disclaiming warranty or limiting liability differently from the terms of sections 15 and 16 of this License; or
b) Requiring preservation of specified reasonable legal notices or author attributions in that material or in the Appropriate Legal Notices displayed by works containing it; or
c) Prohibiting misrepresentation of the origin of that material, or requiring that modified versions of such material be marked in reasonable ways as different from the original version; or
d) Limiting the use for publicity purposes of names of licensors or authors of the material; or
e) Declining to grant rights under trademark law for use of some trade names, trademarks, or service marks; or
f) Requiring indemnification of licensors and authors of that material by anyone who conveys the material (or modified versions of it) with contractual assumptions of liability to the recipient, for any liability that these contractual assumptions directly impose on those licensors and authors.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
79
Open Source Software
All other non-permissive additional terms are considered "further restrictions" within the meaning of section 10. If the Program as you received it, or any part of it, contains a notice stating that it is governed by this License along with a term that is a further restriction, you may remove that term. If a license document contains a further restriction but permits relicensing or conveying under this License, you may add to a covered work material governed by the terms of that license document, provided that the further restriction does not survive such relicensing or conveying.
If you add terms to a covered work in accord with this section, you must place, in the relevant source files, a statement of the additional terms that apply to those files, or a notice indicating where to find the applicable terms.
Additional terms, permissive or non-permissive, may be stated in the form of a separately written license, or stated as exceptions; the above requirements apply either way.
8. Termination.
You may not propagate or modify a covered work except as expressly provided under this License. Any attempt otherwise to propagate or modify it is void, and will automatically terminate your rights under this License (including any patent licenses granted under the third paragraph of section 11).
However, if you cease all violation of this License, then your license from a particular copyright holder is reinstated (a) provisionally, unless and until the copyright holder explicitly and finally terminates your license, and (b) permanently, if the copyright holder fails to notify you of the violation by some reasonable means prior to 60 days after the cessation.
Moreover, your license from a particular copyright holder is reinstated permanently if the copyright holder notifies you of the violation by some reasonable means, this is the first time you have received notice of violation of this License (for any work) from that copyright holder, and you cure the violation prior to 30 days after your receipt of the notice.
Termination of your rights under this section does not terminate the licenses of parties who have received copies or rights from you under this License. If your rights have been terminated and not permanently reinstated, you do not qualify to receive new licenses for the same material under section 10.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
80
Manual, 08/2014, A5E34078538-AA
Open Source Software
9. Acceptance Not Required for Having Copies.
You are not required to accept this License in order to receive or run a copy of the Program. Ancillary propagation of a covered work occurring solely as a consequence of using peer-to-peer transmission to receive a copy likewise does not require acceptance. However, nothing other than this License grants you permission to propagate or modify any covered work. These actions infringe copyright if you do not accept this License. Therefore, by modifying or propagating a covered work, you indicate your acceptance of this License to do so.
10. Automatic Licensing of Downstream Recipients.
Each time you convey a covered work, the recipient automatically receives a license from the original licensors, to run, modify and propagate that work, subject to this License. You are not responsible for enforcing compliance by third parties with this License.
An "entity transaction" is a transaction transferring control of an organization, or substantially all assets of one, or subdividing an organization, or merging organizations. If propagation of a covered work results from an entity transaction, each party to that transaction who receives a copy of the work also receives whatever licenses to the work the party's predecessor in interest had or could give under the previous paragraph, plus a right to possession of the Corresponding Source of the work from the predecessor in interest, if the predecessor has it or can get it with reasonable efforts.
You may not impose any further restrictions on the exercise of the rights granted or affirmed under this License. For example, you may not impose a license fee, royalty, or other charge for exercise of rights granted under this License, and you may not initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging that any patent claim is infringed by making, using, selling, offering for sale, or importing the Program or any portion of it.
11. Patents.
A "contributor" is a copyright holder who authorizes use under this License of the Program or a work on which the Program is based. The work thus licensed is called the contributor's "contributor version".
A contributor's "essential patent claims" are all patent claims owned or controlled by the contributor, whether already acquired or hereafter acquired, that would be infringed by some manner, permitted by this License, of making, using, or selling its contributor version, but do not include claims that would be infringed only as a consequence of further modification of the contributor version. For purposes of this definition, "control" includes the right to grant patent sublicenses in a manner consistent with the requirements of this License.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
81
Open Source Software
Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version.
In the following three paragraphs, a "patent license" is any express agreement or commitment, however denominated, not to enforce a patent (such as an express permission to practice a patent or covenant not to sue for patent infringement). To "grant" such a patent license to a party means to make such an agreement or commitment not to enforce a patent against the party.
If you convey a covered work, knowingly relying on a patent license, and the Corresponding Source of the work is not available for anyone to copy, free of charge and under the terms of this License, through a publicly available network server or other readily accessible means, then you must either (1) cause the Corresponding Source to be so available, or (2) arrange to deprive yourself of the benefit of the patent license for this particular work, or (3) arrange, in a manner consistent with the requirements of this License, to extend the patent license to downstream recipients. "Knowingly relying" means you have actual knowledge that, but for the patent license, your conveying the covered work in a country, or your recipient's use of the covered work in a country, would infringe one or more identifiable patents in that country that you have reason to believe are valid.
If, pursuant to or in connection with a single transaction or arrangement, you convey, or propagate by procuring conveyance of, a covered work, and grant a patent license to some of the parties receiving the covered work authorizing them to use, propagate, modify or convey a specific copy of the covered work, then the patent license you grant is automatically extended to all recipients of the covered work and works based on it.
A patent license is "discriminatory" if it does not include within the scope of its coverage, prohibits the exercise of, or is conditioned on the non-exercise of one or more of the rights that are specifically granted under this License. You may not convey a covered work if you are a party to an arrangement with a third party that is in the business of distributing software, under which you make payment to the third party based on the extent of your activity of conveying the work, and under which the third party grants, to any of the parties who would receive the covered work from you, a discriminatory patent license (a) in connection with copies of the covered work
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
82
Manual, 08/2014, A5E34078538-AA
Open Source Software
conveyed by you (or copies made from those copies), or (b) primarily for and in connection with specific products or compilations that contain the covered work, unless you entered into that arrangement, or that patent license was granted, prior to 28 March 2007.
Nothing in this License shall be construed as excluding or limiting any implied license or other defenses to infringement that may otherwise be available to you under applicable patent law.
12. No Surrender of Others' Freedom.
If conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot convey a covered work so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not convey it at all. For example, if you agree to terms that obligate you to collect a royalty for further conveying from those to whom you convey the Program, the only way you could satisfy both those terms and this License would be to refrain entirely from conveying the Program.
13. Use with the GNU Affero General Public License.
Notwithstanding any other provision of this License, you have permission to link or combine any covered work with a work licensed under version 3 of the GNU Affero General Public License into a single combined work, and to convey the resulting work. The terms of this License will continue to apply to the part which is the covered work, but the special requirements of the GNU Affero General Public License, section 13, concerning interaction through a network will apply to the combination as such.
14. Revised Versions of this License.
The Free Software Foundation may publish revised and/or new versions of the GNU General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns.
Each version is given a distinguishing version number. If the Program specifies that a certain numbered version of the GNU General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that numbered version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of the GNU General Public License, you may choose any version ever published by the Free Software Foundation.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
83
Open Source Software
If the Program specifies that a proxy can decide which future versions of the GNU General Public License can be used, that proxy's public statement of acceptance of a version permanently authorizes you to choose that version for the Program.
Later license versions may give you additional or different permissions. However, no additional obligations are imposed on any author or copyright holder as a result of your choosing to follow a later version.
15. Disclaimer of Warranty.
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
16. Limitation of Liability.
IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
84
Manual, 08/2014, A5E34078538-AA
Open Source Software
17. Interpretation of Sections 15 and 16.
If the disclaimer of warranty and limitation of liability provided above cannot be given local legal effect according to their terms, reviewing courts shall apply local law that most closely approximates an absolute waiver of all civil liability in connection with the Program, unless a warranty or assumption of liability accompanies a copy of the Program in return for a fee.
END OF TERMS AND CONDITIONS
How to Apply These Terms to Your New Programs
If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms.
To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively state the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found.
<one line to give the program's name and a brief idea of what it does.> Copyright (C) <year> <name of author>
This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>.
Also add information on how to contact you by electronic and paper mail.
If the program does terminal interaction, make it output a short notice like this when it starts in an interactive mode:
<program> Copyright (C) <year> <name of author> This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details.
The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, your program's commands might be different; for a GUI interface, you would use an "about box".
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
85
Open Source Software
You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU GPL, see <http://www.gnu.org/licenses/>.
The GNU General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License. But first, please read <http://www.gnu.org/philosophy/why-not-lgpl.html>.
10 Disclaimer and Copyright</h2> <p>Revised 16 February, 2004</p>© Copyright Ami Tavory and Vladimir Dreizin, IBM-HRL, 2004, and Benjamin Kosnik, Red Hat, 2004. <p>Permission to use, copy, modify, sell, and distribute this software is hereby granted without fee, provided that the above copyright notice appears in all copies, and that both that copyright notice and this permission notice appear in supporting documentation.</p> <p>None of the above authors, nor IBM Haifa Research Laboratories, Red Hat, or both, make any representation about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.<
11 # This file file be copied and used freely without restrictions. It can # be used in projects which are not available under the GNU Public License # but which still want to provide support for the GNU gettext functionality. # Please note that the actual code is *not* freely available.
12 This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
13 Free Software Foundation, Inc. This file is free software; the Free Software Foundation gives unlimited permission to copy and/or distribute it, with or without modifications, as long as this notice is preserved. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY, to the extent permitted by law; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
14 This file is free software; the Free Software Foundation gives unlimited permission to copy and/or distribute it, with or without modifications, as long as this notice is preserved.
15 Permission to use, copy, modify, sell, and distribute this software is hereby granted without fee, provided that the above copyright notice appears in all copies, and that both that copyright notice and this permission notice appear in supporting documentation. None of the above authors, nor IBM Haifa Research Laboratories, make any representation about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
86
Manual, 08/2014, A5E34078538-AA
Open Source Software
16 This configure script is free software; the Free Software Foundation gives unlimited permission to copy, distribute and modify it.
17 This Makefile.in is free software; the Free Software Foundation gives unlimited permission to copy and/or distribute it, with or without modifications, as long as this notice is preserved. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY, to the extent permitted by law; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
18 Distributed under the Boost Software License, Version 1.0. (See accompanying file LICENSE_1_0.txt or copy at http:www.boost.org/LICENSE_1_0.txt) ----------------------------------------------------------------------------Boost Software License - Version 1.0 - August 17th, 2003
Permission is hereby granted, free of charge, to any person or organization obtaining a copy of the software and accompanying documentation covered by this license (the "Software") to use, reproduce, display, distribute, execute, and transmit the Software, and to prepare derivative works of the Software, and to permit third-parties to whom the Software is furnished to do so, all subject to the following:
The copyright notices in the Software and this entire statement, including the above license grant, this restriction and the following disclaimer, must be included in all copies of the Software, in whole or in part, and all derivative works of the Software, unless such copies or derivative works are solely in the form of machine-executable object code generated by a source language processor.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Copyrights:
C) Copyright Jeremy Siek 2000
Copyright 1994 Hewlett-Packard Company
Copyright 1998 by Information Technology Industry Council
Copyright © 2007 Free Software Foundation, Inc
Copyright (C) Microsoft Corporation 1984-2002
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
87
Open Source Software
Copyright (C) 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 Free Software Foundation, Inc.
Copyright (C) 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation
Copyright (C) 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc.
Copyright (C) 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2009 Free Software Foundation
Copyright (C) 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2009 Free Software Foundation
Copyright (C) 1994, 1995, 1996, 1998, 1999, 2000, 2001, 2004, 2009 Free Software Foundation
Copyright (C) 1994, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2007, 2009 Free Software Foundation
Copyright (C) 1994, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2007, 2009 Free Software Foundation
Copyright (C) 1994, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2007, 2009 Free Software Foundation
Copyright (C) 1994, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2009 Free Software Foundation
Copyright (C) 1994, 1999, 2000, 2003, 2005, 2009 Free Software Foundation, Inc.
Copyright (C) 1994, 1999, 2000, 2003, 2009 Free Software Foundation, Inc.
Copyright (C) 1994, 1999, 2001, 2002, 2003, 2009 Free Software Foundation, Inc.
Copyright (C) 1994, 1999, 2001, 2003, 2009 Free Software Foundation, Inc.
Copyright (C) 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation
Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 Free Software Foundation, Inc.
Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation
Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 Free Software Foundation, Inc.
Copyright (C) 1996, 1997, 2000, 2001, 2003, 2005 Free Software Foundation, Inc.
Copyright (C) 1996, 1998, 2000, 2001, 2002, 2003, 2004, 2005 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
88
Manual, 08/2014, A5E34078538-AA
Open Source Software
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005 2006, 2007, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2008, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2005, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2008, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2004, 2005, 2006, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2004, 2005, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2004, 2006, 2009 Free Software Foundation, Inc.
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2004, 2009 Free Software Foundation
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2005, 2006, 2009 Free Software Foundation, Inc.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
89
Open Source Software
Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2000, 2001, 2004, 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2000, 2001, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2000, 2001, 2004, 2009 Free Software Foundation Copyright (C) 1997, 1998, 1999, 2000, 2002, 2003, 2004, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2000, 2002, 2003, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2000, 2002, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2000, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2000, 2004, 2007, 2009 Free Software Foundation Copyright (C) 1997, 1998, 1999, 2000, 2004, 2009 Free Software Foundation Copyright (C) 1997, 1998, 1999, 2001, 2002, 2005, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2001, 2002, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2002, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2002, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2003, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 1999, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1998, 2009, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006 Free Software Foundation, Inc. Copyright (C) 1997, 1999, 2000, 2001, 2003, 2005 Free Software Foundation, Inc. Copyright (C) 1997, 1999, 2000, 2001, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 1999, 2001, 2002, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1997, 2000, 2001, 2003, 2004, 2005 Free Software Foundation, Inc. Copyright (C) 1997-1999, 2001, 2009 Free Software Foundation, Inc. Copyright (C) 1997-1999, 2009 Free Software Foundation, Inc. Copyright (C) 1998, 1999 Greg Colvin and Beman Dawes Copyright (C) 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 1998, 1999, 2003, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 1998, 1999, 2003, 2009 Free Software Foundation, Inc.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
90
Manual, 08/2014, A5E34078538-AA
Open Source Software
Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2009 Free Software Foundation Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2009 Free Software Foundation Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2001, 2002, 2003, 2005, 2009 Free Software Foundation Copyright (C) 1999, 2000, 2001, 2002, 2003, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2001, 2002, 2003, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2001, 2002, 2003, 2009 Free Software Foundation Copyright (C) 1999, 2000, 2001, 2002, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2001, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2001, 2003, 2009 Free Software Foundation Copyright (C) 1999, 2000, 2001, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2002, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2002, 2003, 2005, 2009 Free Software Foundation Copyright (C) 1999, 2000, 2002, 2003, 2009 Free Software Foundation Copyright (C) 1999, 2000, 2002, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2003, 2009 Free Software Foundation Copyright (C) 1999, 2000, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2000, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2001, 2002, 2003, 2004, 2005, 2006, 2009 Free Software Foundation Copyright (C) 1999, 2001, 2002, 2003, 2004, 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2001, 2002, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2001, 2002, 2003, 2004, 2009 Free Software Foundation Copyright (C) 1999, 2001, 2002, 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2001, 2003, 2004, 2009 Free Software Foundation
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
91
Open Source Software
Copyright (C) 1999, 2001, 2003, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2001, 2003, 2009 Free Software Foundation Copyright (C) 1999, 2001, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2001, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2002, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2002, 2003, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2002, 2003, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2002, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2002, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2002, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2003, 2005, 2009 Free Software Foundation Copyright (C) 1999, 2003, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2003, 2009 Free Software Foundation Copyright (C) 1999, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 1999, 2009 Free Software Foundation, Inc. Copyright (C) 1999-2001, 2002, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 1999-2001, 2002, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2002 Free Software Foundation Copyright (C) 2000, 2001, 2002 Free Software Foundation Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2009 Free Software Foundation Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2009 Free Software Foundation, Inc.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
92
Manual, 08/2014, A5E34078538-AA
Open Source Software
Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2002, 2003, 2004, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2002, 2003, 2004, 2009 Free Software Foundation Copyright (C) 2000, 2001, 2002, 2003, 2005, 2009 Free Software Foundation Copyright (C) 2000, 2001, 2002, 2003, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2002, 2003, 2007, 2009 Free Software Foundation Copyright (C) 2000, 2001, 2002, 2003, 2009 Free Software Foundation Copyright (C) 2000, 2001, 2002, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2002, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2003, 2004, 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2003, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2003, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2001, 2009 Free Software Foundation Copyright (C) 2000, 2002, 2003, 2004, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2002, 2003, 2004, 2009 Free Software Foundation Copyright (C) 2000, 2002, 2003, 2005, 2009 Free Software Foundation Copyright (C) 2000, 2002, 2003, 2009 Free Software Foundation Copyright (C) 2000, 2002, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2002, 2004, 2005, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2002, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2002, 2005, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2002, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2002, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2002, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2003, 2004, 2009 Free Software Foundation Copyright (C) 2000, 2003, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2003, 2009 Free Software Foundation Copyright (C) 2000, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 2000, 2005, 2009 Free Software Foundation, Inc.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
93
Open Source Software
Copyright (C) 2000, 2009 Free Software Foundation, Inc. Copyright (C) 2001 Free Software Foundation, Inc. Copyright (C) 2001 Free Software Foundation, Inc Benjamin Kosnik <bkoz@redhat.com>, 2001. Copyright (C) 2001, 2002, 2003 Peter Dimov Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006, 2009 Free Software Foundation Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2004, 2005, 2006, 2009 Free Software Foundation Copyright (C) 2001, 2002, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2004, 2005, 2009 Free Software Foundation Copyright (C) 2001, 2002, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2004, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2004, 2009 Free Software Foundation Copyright (C) 2001, 2002, 2003, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2005 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2005, 2006, 2009 Free Software Foundation Copyright (C) 2001, 2002, 2003, 2005, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2005, 2009 Free Software Foundation Copyright (C) 2001, 2002, 2003, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2003, 2009 Free Software Foundation Copyright (C) 2001, 2002, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2004, 2005, 2006, 2009 Free Software Foundation, Inc.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
94
Manual, 08/2014, A5E34078538-AA
Open Source Software
Copyright (C) 2001, 2002, 2004, 2005, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2004, 2005, 2008 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2004, 2005, 2009 Free Software Foundation Copyright (C) 2001, 2002, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2004, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2005, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2005, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2002, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2003, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2003, 2005 Free Software Foundation, Inc. Copyright (C) 2001, 2003, 2005, 2009 Free Software Foundation Copyright (C) 2001, 2003, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2003, 2009 Free Software Foundation Copyright (C) 2001, 2003, 2009 Free Software Foundation Copyright (C) 2001, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2004, 2005, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2001, 2009 Free Software Foundation Copyright (C) 2001, 2009 Free Software Foundation, Inc. Copyright (C) 2002 Peter Dimov Copyright (C) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation Copyright (C) 2002, 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2003, 2004, 2005, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2003, 2004, 2005, 2009 Free Software Foundation Copyright (C) 2002, 2003, 2004, 2005, 2009 Free Software Foundation, Inc.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
95
Open Source Software
Copyright (C) 2002, 2003, 2004, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2003, 2005 Free Software Foundation, Inc. Copyright (C) 2002, 2003, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2003, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2003, 2009 Free Software Foundation Copyright (C) 2002, 2003, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2004, 2005, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2004, 2006, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2004, 2009 Free Software Foundation Copyright (C) 2002, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2005, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2002, 2009 Free Software Foundation Copyright (C) 2002, 2009 Free Software Foundation, Inc. Copyright (C) 2003 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2005 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation Copyright (C) 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation Copyright (C) 2003, 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2005, 2006, 2009 Free Software Foundation Copyright (C) 2003, 2004, 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2005, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2005, 2007, 2009 Free Software Foundation Copyright (C) 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2004, 2009 Free Software Foundation Copyright (C) 2003, 2004, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2005, 2006, 2009 Free Software Foundation, Inc.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
96
Manual, 08/2014, A5E34078538-AA
Open Source Software
Copyright (C) 2003, 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2005, 2009 Free Software Foundation Copyright (C) 2003, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2009 Free Software Foundation, Inc. Copyright (C) 2003, 2009 Free Software Foundation Copyright (C) 2003, 2009 Free Software Foundation, Inc. Copyright (C) 2004 Ami Tavory and Vladimir Dreizin, IBM-HRL. Copyright (C) 2004, 2005 Free Software Foundation, Inc. Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2005, 2006, 2007, 2009 Free Software Foundation Copyright (C) 2004, 2005, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2005, 2006, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2005, 2006, 2009 Free Software Foundation Copyright (C) 2004, 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2005, 2007, 2009 Free Software Foundation Copyright (C) 2004, 2005, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2005, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2005, 2009 Free Software Foundation Copyright (C) 2004, 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2006, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2004, 2009 Free Software Foundation Copyright (C) 2004, 2009 Free Software Foundation, Inc. Copyright (C) 2005 Free Software Foundation, Inc. Copyright (C) 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2005, 2006, 2007, 2008, 2009 Free Software Foundation Copyright (C) 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
97
Open Source Software
Copyright (C) 2005, 2006, 2007, 2009 Free Software Foundation Copyright (C) 2005, 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2005, 2006, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2005, 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2005, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2005, 2008, 2009 Free Software Foundation Copyright (C) 2005, 2009 Free Software Foundation Copyright (C) 2005, 2009 Free Software Foundation, Inc. Copyright (C) 2006 Free Software Foundation, Inc. Copyright (C) 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2006, 2007, 2008, 2009 Free Software Foundation Copyright (C) 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2006, 2007, 2009 Free Software Foundation Copyright (C) 2006, 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2006, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2006, 2009 Free Software Foundation Copyright (C) 2006, 2009 Free Software Foundation Copyright (C) 2006, 2009 Free Software Foundation, Inc. Copyright (C) 2006-2007, 2009 Free Software Foundation, Inc. Copyright (C) 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2007, 2008, 2009 Free Software Foundation Copyright (C) 2007, 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2007, 2009 Free Software Foundation Copyright (C) 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2008, 2009 Free Software Foundation Copyright (C) 2008, 2009 Free Software Foundation, Inc. Copyright (C) 2009 Free Software Foundation Copyright (C) 2009 Free Software Foundation, Inc. Copyright (c) 1994 Hewlett-Packard Company Copyright (c) 1996 Silicon Graphics Computer Systems, Inc. Copyright (c) 1996,1997 Silicon Graphics
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
98
Manual, 08/2014, A5E34078538-AA
Open Source Software
Copyright (c) 1996,1997 Silicon Graphics Computer Systems, Inc. Copyright (c) 1996-1997 Silicon Graphics Computer Systems, Inc. Copyright (c) 1996-1998 Silicon Graphics Computer Systems, Inc. Copyright (c) 1996-1999 Silicon Graphics Computer Systems, Inc. Copyright (c) 1997 Silicon Graphics Computer Systems, Inc. Copyright (c) 1997-1999 Silicon Graphics Computer Systems, Inc. Copyright (c) 1998 Silicon Graphics Computer Systems, Inc. Copyright (c) 2001, 2002, 2003 Peter Dimov and Multi Media Ltd. Copyright 2008 FSF Copyright Ami Tavory and Vladimir Dreizin, IBM-HRL, 2004, and Benjamin Kosnik, Red Hat, 2004. Copyright © 1999 The Open Group/The Institute of Electrical and Electronics Engineers, Inc. Copyright © 1999 ISO Copyright © 2000 Addison Wesley Longman, Inc. Copyright © 2000 Addison Wesley, Inc. Copyright © 2002 OOPSLA Copyright © 2004, 2005, 2006, 2007 Free Software Foundation, Inc Copyright © 2004, 2005, 2006, 2007 Free Software Foundation, Inc Copyright © 2007 FSF Copyright © 2007 Free Software Foundation, Inc.
Open Source Software: libgcc - 4.4.1 Enclosed you'll find the license conditions and copyright notices applicable for Open Source Software libgcc - 4.4.1
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0)
Manual, 08/2014, A5E34078538-AA
99
Open Source Software
License conditions:
1 GCC is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3, or (at your option) any later version. GCC is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. Under Section 7 of GPL version 3, you are granted additional permissions described in the GCC Runtime Library Exception, version 3.1, as published by the Free Software Foundation. You should have received a copy of the GNU General Public License and a copy of the GCC Runtime Library Exception along with this program; see the files COPYING3 and COPYING.RUNTIME respectively. If not, see <http://www.gnu.org/licenses/>.
GCC RUNTIME LIBRARY EXCEPTION
Version 3.1, 31 March 2009
Copyright (C) 2009 Free Software Foundation, Inc. <http://fsf.org/>
Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.
This GCC Runtime Library Exception ("Exception") is an additional permission under section 7 of the GNU General Public License, version 3 ("GPLv3"). It applies to a given file (the "Runtime Library") that bears a notice placed by the copyright holder of the file stating that the file is governed by GPLv3 along with this Exception.
When you use GCC to compile a program, GCC may combine portions of certain GCC header files and runtime libraries with the compiled program. The purpose of this Exception is to allow compilation of non-GPL (including proprietary) programs to use, in this way, the header files and runtime libraries covered by this Exception.
100
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
Open Source Software
0. Definitions.
A file is an "Independent Module" if it either requires the Runtime Library for execution after a Compilation Process, or makes use of an interface provided by the Runtime Library, but is not otherwise based on the Runtime Library.
"GCC" means a version of the GNU Compiler Collection, with or without modifications, governed by version 3 (or a specified later version) of the GNU General Public License (GPL) with the option of using any subsequent versions published by the FSF.
"GPL-compatible Software" is software whose conditions of propagation, modification and use would permit combination with GCC in accord with the license of GCC.
"Target Code" refers to output from any compiler for a real or virtual target processor architecture, in executable form or suitable for input to an assembler, loader, linker and/or execution phase. Notwithstanding that, Target Code does not include data in any format that is used as a compiler intermediate representation, or used for producing a compiler intermediate representation.
The "Compilation Process" transforms code entirely represented in non-intermediate languages designed for human-written code, and/or in Java Virtual Machine byte code, into Target Code. Thus, for example, use of source code generators and preprocessors need not be considered part of the Compilation Process, since the Compilation Process can be understood as starting with the output of the generators or preprocessors.
A Compilation Process is "Eligible" if it is done using GCC, alone or with other GPL-compatible software, or if it is done without using any work based on GCC. For example, using non-GPL-compatible Software to optimize any GCC intermediate representations would not qualify as an Eligible Compilation Process.
1. Grant of Additional Permission.
You have permission to propagate a work of Target Code formed by combining the Runtime Library with Independent Modules, even if such propagation would otherwise violate the terms of GPLv3, provided that all Target Code was generated by Eligible Compilation Processes. You may then convey such a combination under terms of your choice, consistent with the licensing of the Independent Modules.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
101
Open Source Software
2. No Weakening of GCC Copyleft.
The availability of this Exception does not imply any general presumption that third-party software is unaffected by the copyleft requirements of the license of GCC.
GNU GENERAL PUBLIC LICENSE
Version 3, 29 June 2007
Copyright © 2007 Free Software Foundation, Inc. <http://fsf.org/>
Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble
The GNU General Public License is a free, copyleft license for software and other kinds of works.
The licenses for most software and other practical works are designed to take away your freedom to share and change the works. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change all versions of a program--to make sure it remains free software for all its users. We, the Free Software Foundation, use the GNU General Public License for most of our software; it applies also to any other work released this way by its authors. You can apply it to your programs, too.
When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for them if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs, and that you know you can do these things.
To protect your rights, we need to prevent others from denying you these rights or asking you to surrender the rights. Therefore, you have certain responsibilities if you distribute copies of the software, or if you modify it: responsibilities to respect the freedom of others.
For example, if you distribute copies of such a program, whether gratis or for a fee, you must pass on to the recipients the same freedoms that you received. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights.
Developers that use the GNU GPL protect your rights with two steps: (1) assert copyright on the software, and (2) offer you this License giving you legal permission to copy, distribute and/or modify it.
For the developers' and authors' protection, the GPL clearly explains that there is no warranty for this free software. For both users' and authors' sake, the GPL requires that modified versions be marked as changed, so that their problems will not be attributed erroneously to authors of previous versions.
102
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
Open Source Software
Some devices are designed to deny users access to install or run modified versions of the software inside them, although the manufacturer can do so. This is fundamentally incompatible with the aim of protecting users' freedom to change the software. The systematic pattern of such abuse occurs in the area of products for individuals to use, which is precisely where it is most unacceptable. Therefore, we have designed this version of the GPL to prohibit the practice for those products. If such problems arise substantially in other domains, we stand ready to extend this provision to those domains in future versions of the GPL, as needed to protect the freedom of users.
Finally, every program is threatened constantly by software patents. States should not allow patents to restrict development and use of software on general-purpose computers, but in those that do, we wish to avoid the special danger that patents applied to a free program could make it effectively proprietary. To prevent this, the GPL assures that patents cannot be used to render the program non-free.
The precise terms and conditions for copying, distribution and modification follow. TERMS AND CONDITIONS
0. Definitions.
"This License" refers to version 3 of the GNU General Public License.
"Copyright" also means copyright-like laws that apply to other kinds of works, such as semiconductor masks.
"The Program" refers to any copyrightable work licensed under this License. Each licensee is addressed as "you". "Licensees" and "recipients" may be individuals or organizations.
To "modify" a work means to copy from or adapt all or part of the work in a fashion requiring copyright permission, other than the making of an exact copy. The resulting work is called a "modified version" of the earlier work or a work "based on" the earlier work.
A "covered work" means either the unmodified Program or a work based on the Program.
To "propagate" a work means to do anything with it that, without permission, would make you directly or secondarily liable for infringement under applicable copyright law, except executing it on a computer or modifying a private copy. Propagation includes copying, distribution (with or without modification), making available to the public, and in some countries other activities as well.
To "convey" a work means any kind of propagation that enables other parties to make or receive copies. Mere interaction with a user through a computer network, with no transfer of a copy, is not conveying.
An interactive user interface displays "Appropriate Legal Notices" to the extent that it includes a convenient and prominently visible feature that (1) displays an appropriate copyright notice, and (2) tells the user that there is no warranty for the work (except to the extent that warranties are provided),
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
103
Open Source Software
that licensees may convey the work under this License, and how to view a copy of this License. If the interface presents a list of user commands or options, such as a menu, a prominent item in the list meets this criterion.
1. Source Code.
The "source code" for a work means the preferred form of the work for making modifications to it. "Object code" means any non-source form of a work.
A "Standard Interface" means an interface that either is an official standard defined by a recognized standards body, or, in the case of interfaces specified for a particular programming language, one that is widely used among developers working in that language.
The "System Libraries" of an executable work include anything, other than the work as a whole, that (a) is included in the normal form of packaging a Major Component, but which is not part of that Major Component, and (b) serves only to enable use of the work with that Major Component, or to implement a Standard Interface for which an implementation is available to the public in source code form. A "Major Component", in this context, means a major essential component (kernel, window system, and so on) of the specific operating system (if any) on which the executable work runs, or a compiler used to produce the work, or an object code interpreter used to run it.
The "Corresponding Source" for a work in object code form means all the source code needed to generate, install, and (for an executable work) run the object code and to modify the work, including scripts to control those activities. However, it does not include the work's System Libraries, or general-purpose tools or generally available free programs which are used unmodified in performing those activities but which are not part of the work. For example, Corresponding Source includes interface definition files associated with source files for the work, and the source code for shared libraries and dynamically linked subprograms that the work is specifically designed to require, such as by intimate data communication or control flow between those subprograms and other parts of the work.
The Corresponding Source need not include anything that users can regenerate automatically from other parts of the Corresponding Source.
The Corresponding Source for a work in source code form is that same work.
2. Basic Permissions.
All rights granted under this License are granted for the term of copyright on the Program, and are irrevocable provided the stated conditions are met. This License explicitly affirms your unlimited permission to run the unmodified Program. The output from running a covered work is covered by this License only if the output, given its content, constitutes a covered work. This License acknowledges your rights of fair use or other equivalent, as provided by copyright law.
104
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
Open Source Software
You may make, run and propagate covered works that you do not convey, without conditions so long as your license otherwise remains in force. You may convey covered works to others for the sole purpose of having them make modifications exclusively for you, or provide you with facilities for running those works, provided that you comply with the terms of this License in conveying all material for which you do not control copyright. Those thus making or running the covered works for you must do so exclusively on your behalf, under your direction and control, on terms that prohibit them from making any copies of your copyrighted material outside their relationship with you.
Conveying under any other circumstances is permitted solely under the conditions stated below. Sublicensing is not allowed; section 10 makes it unnecessary.
3. Protecting Users' Legal Rights From Anti-Circumvention Law.
No covered work shall be deemed part of an effective technological measure under any applicable law fulfilling obligations under article 11 of the WIPO copyright treaty adopted on 20 December 1996, or similar laws prohibiting or restricting circumvention of such measures.
When you convey a covered work, you waive any legal power to forbid circumvention of technological measures to the extent such circumvention is effected by exercising rights under this License with respect to the covered work, and you disclaim any intention to limit operation or modification of the work as a means of enforcing, against the work's users, your or third parties' legal rights to forbid circumvention of technological measures.
4. Conveying Verbatim Copies.
You may convey verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice; keep intact all notices stating that this License and any non-permissive terms added in accord with section 7 apply to the code; keep intact all notices of the absence of any warranty; and give all recipients a copy of this License along with the Program.
You may charge any price or no price for each copy that you convey, and you may offer support or warranty protection for a fee.
5. Conveying Modified Source Versions.
You may convey a work based on the Program, or the modifications to produce it from the Program, in the form of source code under the terms of section 4, provided that you also meet all of these conditions:
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
105
Open Source Software
a) The work must carry prominent notices stating that you modified it, and giving a relevant date. b) The work must carry prominent notices stating that it is released under this License and any conditions added under section 7. This requirement modifies the requirement in section 4 to "keep intact all notices". c) You must license the entire work, as a whole, under this License to anyone who comes into possession of a copy. This License will therefore apply, along with any applicable section 7 additional terms, to the whole of the work, and all its parts, regardless of how they are packaged. This License gives no permission to license the work in any other way, but it does not invalidate such permission if you have separately received it. d) If the work has interactive user interfaces, each must display Appropriate Legal Notices; however, if the Program has interactive interfaces that do not display Appropriate Legal Notices, your work need not make them do so.
A compilation of a covered work with other separate and independent works, which are not by their nature extensions of the covered work, and which are not combined with it such as to form a larger program, in or on a volume of a storage or distribution medium, is called an "aggregate" if the compilation and its resulting copyright are not used to limit the access or legal rights of the compilation's users beyond what the individual works permit. Inclusion of a covered work in an aggregate does not cause this License to apply to the other parts of the aggregate.
6. Conveying Non-Source Forms.
You may convey a covered work in object code form under the terms of sections 4 and 5, provided that you also convey the machine-readable Corresponding Source under the terms of this License, in one of these ways:
a) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by the Corresponding Source fixed on a durable physical medium customarily used for software interchange. b) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by a written offer, valid for at least three years and valid for as long as you offer spare parts or customer support for that product model, to give anyone who possesses the object code either (1) a copy of the Corresponding Source for all the software in the product that is covered by this License, on a durable physical medium customarily used for software interchange, for a price no more than your reasonable cost of physically performing this conveying of source, or (2) access to copy the Corresponding Source from a network server at no charge. c) Convey individual copies of the object code with a copy of the written offer to provide the Corresponding Source. This alternative is allowed only occasionally and noncommercially, and only if you received the object code with such an offer, in accord with subsection 6b.
106
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
Open Source Software
d) Convey the object code by offering access from a designated place (gratis or for a charge), and offer equivalent access to the Corresponding Source in the same way through the same place at no further charge. You need not require recipients to copy the Corresponding Source along with the object code. If the place to copy the object code is a network server, the Corresponding Source may be on a different server (operated by you or a third party) that supports equivalent copying facilities, provided you maintain clear directions next to the object code saying where to find the Corresponding Source. Regardless of what server hosts the Corresponding Source, you remain obligated to ensure that it is available for as long as needed to satisfy these requirements. e) Convey the object code using peer-to-peer transmission, provided you inform other peers where the object code and Corresponding Source of the work are being offered to the general public at no charge under subsection 6d.
A separable portion of the object code, whose source code is excluded from the Corresponding Source as a System Library, need not be included in conveying the object code work.
A "User Product" is either (1) a "consumer product", which means any tangible personal property which is normally used for personal, family, or household purposes, or (2) anything designed or sold for incorporation into a dwelling. In determining whether a product is a consumer product, doubtful cases shall be resolved in favor of coverage. For a particular product received by a particular user, "normally used" refers to a typical or common use of that class of product, regardless of the status of the particular user or of the way in which the particular user actually uses, or expects or is expected to use, the product. A product is a consumer product regardless of whether the product has substantial commercial, industrial or non-consumer uses, unless such uses represent the only significant mode of use of the product.
"Installation Information" for a User Product means any methods, procedures, authorization keys, or other information required to install and execute modified versions of a covered work in that User Product from a modified version of its Corresponding Source. The information must suffice to ensure that the continued functioning of the modified object code is in no case prevented or interfered with solely because modification has been made.
If you convey an object code work under this section in, or with, or specifically for use in, a User Product, and the conveying occurs as part of a transaction in which the right of possession and use of the User Product is transferred to the recipient in perpetuity or for a fixed term (regardless of how the transaction is characterized), the Corresponding Source conveyed under this section must be accompanied by the Installation Information. But this requirement does not apply if neither you nor any third party retains the ability to install modified object code on the User Product (for example, the work has been installed in ROM).
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
107
Open Source Software
The requirement to provide Installation Information does not include a requirement to continue to provide support service, warranty, or updates for a work that has been modified or installed by the recipient, or for the User Product in which it has been modified or installed. Access to a network may be denied when the modification itself materially and adversely affects the operation of the network or violates the rules and protocols for communication across the network.
Corresponding Source conveyed, and Installation Information provided, in accord with this section must be in a format that is publicly documented (and with an implementation available to the public in source code form), and must require no special password or key for unpacking, reading or copying.
7. Additional Terms.
Additional permissions" are terms that supplement the terms of this License by making exceptions from one or more of its conditions. Additional permissions that are applicable to the entire Program shall be treated as though they were included in this License, to the extent that they are valid under applicable law. If additional permissions apply only to part of the Program, that part may be used separately under those permissions, but the entire Program remains governed by this License without regard to the additional permissions.
When you convey a copy of a covered work, you may at your option remove any additional permissions from that copy, or from any part of it. (Additional permissions may be written to require their own removal in certain cases when you modify the work.) You may place additional permissions on material, added by you to a covered work, for which you have or can give appropriate copyright permission.
Notwithstanding any other provision of this License, for material you add to a covered work, you may (if authorized by the copyright holders of that material) supplement the terms of this License with terms:
a) Disclaiming warranty or limiting liability differently from the terms of sections 15 and 16 of this License; or b) Requiring preservation of specified reasonable legal notices or author attributions in that material or in the Appropriate Legal Notices displayed by works containing it; or c) Prohibiting misrepresentation of the origin of that material, or requiring that modified versions of such material be marked in reasonable ways as different from the original version; or d) Limiting the use for publicity purposes of names of licensors or authors of the material; or e) Declining to grant rights under trademark law for use of some trade names, trademarks, or service marks; or f) Requiring indemnification of licensors and authors of that material by anyone who conveys the material (or modified versions of it) with contractual assumptions of liability to the recipient, for any liability that these contractual assumptions directly impose on those licensors and authors.
108
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
Open Source Software
All other non-permissive additional terms are considered "further restrictions" within the meaning of section 10. If the Program as you received it, or any part of it, contains a notice stating that it is governed by this License along with a term that is a further restriction, you may remove that term. If a license document contains a further restriction but permits relicensing or conveying under this License, you may add to a covered work material governed by the terms of that license document, provided that the further restriction does not survive such relicensing or conveying.
If you add terms to a covered work in accord with this section, you must place, in the relevant source files, a statement of the additional terms that apply to those files, or a notice indicating where to find the applicable terms.
Additional terms, permissive or non-permissive, may be stated in the form of a separately written license, or stated as exceptions; the above requirements apply either way.
8. Termination.
You may not propagate or modify a covered work except as expressly provided under this License. Any attempt otherwise to propagate or modify it is void, and will automatically terminate your rights under this License (including any patent licenses granted under the third paragraph of section 11).
However, if you cease all violation of this License, then your license from a particular copyright holder is reinstated (a) provisionally, unless and until the copyright holder explicitly and finally terminates your license, and (b) permanently, if the copyright holder fails to notify you of the violation by some reasonable means prior to 60 days after the cessation.
Moreover, your license from a particular copyright holder is reinstated permanently if the copyright holder notifies you of the violation by some reasonable means, this is the first time you have received notice of violation of this License (for any work) from that copyright holder, and you cure the violation prior to 30 days after your receipt of the notice.
Termination of your rights under this section does not terminate the licenses of parties who have received copies or rights from you under this License. If your rights have been terminated and not permanently reinstated, you do not qualify to receive new licenses for the same material under section 10.
9. Acceptance Not Required for Having Copies.
You are not required to accept this License in order to receive or run a copy of the Program. Ancillary propagation of a covered work occurring solely as a consequence of using peer-to-peer transmission to receive a copy likewise does not require acceptance. However, nothing other than this License grants you permission to propagate or modify any covered work. These actions infringe copyright if you do not accept this License. Therefore, by modifying or propagating a covered work, you indicate your acceptance of this License to do so.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
109
Open Source Software
10. Automatic Licensing of Downstream Recipients.
Each time you convey a covered work, the recipient automatically receives a license from the original licensors, to run, modify and propagate that work, subject to this License. You are not responsible for enforcing compliance by third parties with this License.
An "entity transaction" is a transaction transferring control of an organization, or substantially all assets of one, or subdividing an organization, or merging organizations. If propagation of a covered work results from an entity transaction, each party to that transaction who receives a copy of the work also receives whatever licenses to the work the party's predecessor in interest had or could give under the previous paragraph, plus a right to possession of the Corresponding Source of the work from the predecessor in interest, if the predecessor has it or can get it with reasonable efforts.
You may not impose any further restrictions on the exercise of the rights granted or affirmed under this License. For example, you may not impose a license fee, royalty, or other charge for exercise of rights granted under this License, and you may not initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging that any patent claim is infringed by making, using, selling, offering for sale, or importing the Program or any portion of it.
11. Patents.
A "contributor" is a copyright holder who authorizes use under this License of the Program or a work on which the Program is based. The work thus licensed is called the contributor's "contributor version".
A contributor's "essential patent claims" are all patent claims owned or controlled by the contributor, whether already acquired or hereafter acquired, that would be infringed by some manner, permitted by this License, of making, using, or selling its contributor version, but do not include claims that would be infringed only as a consequence of further modification of the contributor version. For purposes of this definition, "control" includes the right to grant patent sublicenses in a manner consistent with the requirements of this License.
Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version.
In the following three paragraphs, a "patent license" is any express agreement or commitment, however denominated, not to enforce a patent (such as an express permission to practice a patent or covenant not to sue for patent infringement). To "grant" such a patent license to a party means to make such an agreement or commitment not to enforce a patent against the party.
110
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
Open Source Software
If you convey a covered work, knowingly relying on a patent license, and the Corresponding Source of the work is not available for anyone to copy, free of charge and under the terms of this License, through a publicly available network server or other readily accessible means, then you must either (1) cause the Corresponding Source to be so available, or (2) arrange to deprive yourself of the benefit of the patent license for this particular work, or (3) arrange, in a manner consistent with the requirements of this License, to extend the patent license to downstream recipients. "Knowingly relying" means you have actual knowledge that, but for the patent license, your conveying the covered work in a country, or your recipient's use of the covered work in a country, would infringe one or more identifiable patents in that country that you have reason to believe are valid.
If, pursuant to or in connection with a single transaction or arrangement, you convey, or propagate by procuring conveyance of, a covered work, and grant a patent license to some of the parties receiving the covered work authorizing them to use, propagate, modify or convey a specific copy of the covered work, then the patent license you grant is automatically extended to all recipients of the covered work and works based on it.
A patent license is "discriminatory" if it does not include within the scope of its coverage, prohibits the exercise of, or is conditioned on the non-exercise of one or more of the rights that are specifically granted under this License. You may not convey a covered work if you are a party to an arrangement with a third party that is in the business of distributing software, under which you make payment to the third party based on the extent of your activity of conveying the work, and under which the third party grants, to any of the parties who would receive the covered work from you, a discriminatory patent license (a) in connection with copies of the covered work conveyed by you (or copies made from those copies), or (b) primarily for and in connection with specific products or compilations that contain the covered work, unless you entered into that arrangement, or that patent license was granted, prior to 28 March 2007.
Nothing in this License shall be construed as excluding or limiting any implied license or other defenses to infringement that may otherwise be available to you under applicable patent law.
12. No Surrender of Others' Freedom.
If conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot convey a covered work so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not convey it at all. For example, if you agree to terms that obligate you to collect a royalty for further conveying from those to whom you convey the Program, the only way you could satisfy both those terms and this License would be to refrain entirely from conveying the Program.
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
111
Open Source Software
13. Use with the GNU Affero General Public License.
Notwithstanding any other provision of this License, you have permission to link or combine any covered work with a work licensed under version 3 of the GNU Affero General Public License into a single combined work, and to convey the resulting work. The terms of this License will continue to apply to the part which is the covered work, but the special requirements of the GNU Affero General Public License, section 13, concerning interaction through a network will apply to the combination as such.
14. Revised Versions of this License.
The Free Software Foundation may publish revised and/or new versions of the GNU General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns.
Each version is given a distinguishing version number. If the Program specifies that a certain numbered version of the GNU General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that numbered version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of the GNU General Public License, you may choose any version ever published by the Free Software Foundation.
If the Program specifies that a proxy can decide which future versions of the GNU General Public License can be used, that proxy's public statement of acceptance of a version permanently authorizes you to choose that version for the Program.
Later license versions may give you additional or different permissions. However, no additional obligations are imposed on any author or copyright holder as a result of your choosing to follow a later version.
15. Disclaimer of Warranty.
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
112
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
Open Source Software
16. Limitation of Liability.
IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
17. Interpretation of Sections 15 and 16.
If the disclaimer of warranty and limitation of liability provided above cannot be given local legal effect according to their terms, reviewing courts shall apply local law that most closely approximates an absolute waiver of all civil liability in connection with the Program, unless a warranty or assumption of liability accompanies a copy of the Program in return for a fee.
END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs
If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms.
To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively state the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found.
<one line to give the program's name and a brief idea of what it does.> Copyright (C) <year> <name of author>
This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>.
Also add information on how to contact you by electronic and paper mail.
If the program does terminal interaction, make it output a short notice like this when it starts in an interactive mode:
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
113
Open Source Software
<program> Copyright (C) <year> <name of author> This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details.
The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, your program's commands might be different; for a GUI interface, you would use an "about box".
You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU GPL, see <http://www.gnu.org/licenses/>.
The GNU General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License. But first, please read <http://www.gnu.org/philosophy/why-not-lgpl.html>. 2 This configure script is free software; the Free Software Foundation gives unlimited permission to copy, distribute and modify it.
Copyrights: Copyright (C) 2003 Free Software Foundation, Inc. Copyright (C) 2005, 2006, 2009 Free Software Foundation Copyright (C) 2007, 2009 Free Software Foundation, Inc. Copyright (C) 2008, 2009 Free Software Foundation, Inc. Copyright 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.
114
Technology module TM Timer DIDQ 16x24V (6ES75521AA000AB0) Manual, 08/2014, A5E34078538-AA
SIMATIC
S7-1500/ET 200MP Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Co_n_ne_c_tin_g____________3_ _Co_n_fig_u_rin_g/_ad_d_re_ss_s_pa_c_e ____4_ _In_te_rru_p_ts/_di_ag_n_os_tic_a_la_rm_s____5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_ _Di_m_en_s_ion_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_______B_
12/2016
A5E38896703-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E38896703-AA 12/2016 Subject to change
Copyright © Siemens AG 2016. All rights reserved
Preface
Purpose of the documentation
This manual includes module-specific information on wiring, diagnostics and the technical specifications of the technology module.
Generally-applicable information on installation and commissioning of the S7-1500 or ET 200MP is available in System Manual "S7-1500, ET 200MP Automation System".
Conventions
Please observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
4
Manual, 12/2016, A5E38896703-AA
Preface
Open Source Software Open-source software is used in the firmware of the product described. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information on this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109740777).
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
5
Table of contents
Preface ...................................................................................................................................................... 4
1 Documentation guide ................................................................................................................................. 7
2 Product overview ..................................................................................................................................... 11
2.1
Properties............................................................................................................................... 11
2.2 2.2.1 2.2.2
Functions................................................................................................................................ 14 Pulse Train Output (PTO) ...................................................................................................... 14 Isochronous mode ................................................................................................................. 16
3 Connecting .............................................................................................................................................. 17
3.1
Pin assignment....................................................................................................................... 17
4 Configuring/address space ...................................................................................................................... 26
4.1
Configuring............................................................................................................................. 26
4.2
Reaction to CPU STOP ......................................................................................................... 28
4.3
Address space ....................................................................................................................... 28
4.4
Parameters............................................................................................................................. 29
4.5 4.5.1 4.5.2 4.5.3
Control and feedback interface .............................................................................................. 34 Assignment of the control interface........................................................................................ 34 Assignment of the feedback interface.................................................................................... 38 Enabling the pulse output ...................................................................................................... 42
5 Interrupts/diagnostic alarms..................................................................................................................... 44
5.1
Status and error displays ....................................................................................................... 44
5.2
Diagnostic alarms................................................................................................................... 47
6 Technical specifications ........................................................................................................................... 49
A Dimensional drawing ............................................................................................................................... 54
B Parameter data record ............................................................................................................................. 56
B.1
Parameter assignment and structure of the parameter data record...................................... 56
B.2
Parameter validation error ..................................................................................................... 61
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
6
Manual, 12/2016, A5E38896703-AA
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
7
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
8
Manual, 12/2016, A5E38896703-AA
Documentation guide
"mySupport" - CAx data In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
9
Documentation guide
SIMATIC Automation Tool You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
10
Manual, 12/2016, A5E38896703-AA
Product overview
2.1
Properties
Article number 6ES7553-1AA00-0AB0
View of the module
2
Figure 2-1 View of the TM PTO 4 module
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
11
Product overview 2.1 Properties
Introduction
The technology module enables you to connect up to four stepper motor axes to an S7-1500 system. The module is linked to technology objects by means of an implementation of the PROFIdrive frame 3 and forms the interface to the drive. The number of steps that are output is returned as the actual position value.
Properties
The TM PTO 4 technology module has the following properties: Technical properties
4 channels, quantity can be configured, channel-by-channel parameter assignment Interfaces:
RS422/TTL(5 V) or 24 V pulse output signals P/A and D/B for the PTO function (per channel, max. 1 MHz for RS422, max. 200 kHz for 24 V / TTL (5 V)) Digital input signals DI0 and DI1 for the reference switch, measuring input, ready input functions (per channel) Digital output signal DQ0 for the PTO or drive enable function (per channel) Digital output signal DQ1 for the PTO function (per channel) Digital input/output signal DIQ2 for the drive enable or ready input function (per channel) Supply voltage L+ Configurable diagnostics (per channel) Configurable interpulse period for auto reverse Configurable input delay: none, 0.05 ms ... 20 ms Supported signal types for pulse output Pulse encoder with direction signal Pulse encoder with forward signal and backward signal Incremental encoder with two signals with a 90° phase shift Supported system functions Isochronous mode Firmware Update Identification data I&M
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
12
Manual, 12/2016, A5E38896703-AA
Product overview 2.1 Properties
Accessories
The following components are supplied with the technology module and can also be ordered separately as spare parts: Shield bracket Shield clamp Infeed element Labeling strip U-connector
Other components The following component needs to be ordered separately: Front connectors, including potential jumpers and cable ties
See also
For more information on accessories, see System Manual S7-1500, ET 200MP Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
13
Product overview 2.2 Functions
2.2
Functions
2.2.1
Pulse Train Output (PTO)
Applications
Pulse Train Output is a simple and universal interface between a SIMATIC controller and a drive. PTO is supported worldwide by many stepper and servo drives and is used in many positioning applications, such as for adjustment axes and feed axes.
PTO is also referred to as the pulse/direction interface. The pulse/direction interface comprises two signals. The frequency of the pulse output represents the speed and the number of pulses that are output represents the distance to be traversed. The direction output defines the traversing direction. The position specification is thereby accurate to within one increment. The pulse/direction interface is especially well-suited for operation with the technology objects TO_SpeedAxis, TO_PositioningAxis and TO_SynchronousAxis.
Control
The control of the pulse output channels is provided above all with S7-1500 Motion Control by means of the technology objects TO_SpeedAxis, TO_PositioningAxis and TO_SynchronousAxis . The control and feedback interface (Page 34) of the channels is an implementation of the PROFIdrive interface with standard frame 3.
For a detailed description of configuring the technology module with the axis technology objects, see Function Manual S7-1500T Motion Control, section "Configuring", which is available for download on theInternet (https://support.industry.siemens.com/cs/ww/en/view/109481326).
Signal types
The technology module supports the following four signal types:
Pulse (P) and direction (D): One output (P) controls the pulses and one output (D) controls the direction. D is 'high' (active) when pulses are generated in the negative direction. D is 'low' (inactive) when pulses are generated in the positive direction.
Positive direction of rotation Negative direction of rotation
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
14
Manual, 12/2016, A5E38896703-AA
Product overview 2.2 Functions
Count up (A), count down (B): One output (A) outputs pulses for positive directions and another output (B) outputs pulses for negative directions.
Positive direction of rotation Negative direction of rotation
Incremental encoder (A, B phase-shifted): Output pulses are output by both outputs at the specified velocity, but phase-shifted by 90 degrees. This involves a single pulse output in which the duration of the pulse is the time between two transitions of signal A while signal B is in low state. A positive direction of rotation is generated at a positive edge of signal A while signal B is in low state. A negative direction of rotation is generated at a negative edge of signal A while signal B is in low state.
A precedes B (positive direction of rotation)
A follows B (negative direction of rotation)
Number of pulses
Number of pulses
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
15
Product overview 2.2 Functions
Incremental encoder (A, B phase-shifted, quadruple): Output pulses are output by both outputs at the specified velocity, but phase-shifted by 90 degrees. This signal type involves a quadruple pulse output in which each edge transition corresponds to one increment. Therefore, a complete period of signal A contains four increments. In this way, it is possible, for example, to use two outputs, each with 100 kHz signal frequency, to output a control signal that supplies 400,000 increments per second. Whether count pulses are generated in the positive or negative direction of rotation depends on the edge direction of one signal and the logic state of the other signal in each case.
A precedes B (positive direction of rotation)
A follows B (negative direction of rotation)
Number of pulses
Number of pulses
2.2.2
Isochronous mode
The technology module supports the system function "isochronous mode" in distributed mode on PROFINET.
In isochronous mode, the cycle of the user program, the transmission of the input and output data and the processing in the technology module are synchronized with each other.
Data processing
At time Ti the current position value is acquired and made available in the feedback interface for retrieval in the current bus cycle. At time To the pulse output is adjusted to the current speed setpoint.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
16
Manual, 12/2016, A5E38896703-AA
Connecting
3
3.1
Pin assignment
You connect the pulse output signals, digital input signals and digital output signals to the 40-pin front connector of the technology module. In addition, you connect the supply voltage for supplying the module and the digital outputs to the 4-pin infeed element.
For information on wiring the front connector, connecting the cable shield, etc., see System ManualS7-1500, ET 200MP Automation System (http://support.automation.siemens.com/WW/view/en/59191792), section Wiring.
Pin assignment for the front connector
The table below shows the pin assignment of the front connector for the respective signal interface.
Table 3- 1 Pin assignment of the front connector
View
Signal name
Channel 0
1 CH0.P/A
2 /CH0.P/A
3 CH0.D/B
4 /CH0.D/B
5 DQ0.0
6 DQ0.1
7 DI0.0
8 DI0.1
9 DIQ0.2
Channel 1
10 CH1.P/A
11 /CH1.P/A
12 CH1.D/B
13 /CH1.D/B
14 DQ1.0
15 DQ1.1
16 DI1.0
17 DI1.1
18 DIQ1.2
19
--
20
24 V, asymmetrical --
Pulse signal P/A Pulse signal D/B
--
Pulse signal P/A Pulse signal D/B
Designation RS422, symmetrical
TTL (5 V), asymmetrical
Pulse signal P/A Inverted pulse signal P/A
Pulse signal D/B Inverted pulse signal D/B
Digital output DQ0 --
Digital input DI0 Digital input DI1 Digital input/output DIQ2
Pulse signal P/A --
Pulse signal D/B --
Digital output DQ0 --
Pulse signal P/A Inverted pulse signal P/A
Pulse signal D/B Inverted pulse signal D/B
Digital output DQ0 --
Digital input DI0 Digital input DI1 Digital input/output DIQ2
--
Pulse signal P/A --
Pulse signal D/B --
Digital output DQ0 --
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
17
Connecting 3.1 Pin assignment
View
Signal name
Channel 2
21 CH2.P/A
22 /CH2.P/A
23 CH2.D/B
24 /CH2.D/B
25 DQ2.0
26 DQ2.1
27 DI2.0
28 DI2.1
29 DIQ2.2
Channel 3
30 CH3.P/A
31 /CH3.P/A
32 CH3.D/B
33 /CH3.D/B
34 DQ3.0
35 DQ3.1
36 DI3.0
37 DI3.1
38 DIQ3.2
39
M
40
M
24 V, asymmetrical
Designation RS422, symmetrical
TTL (5 V), asymmetrical
--
Pulse signal P/A Pulse signal D/B
Pulse signal P/A Inverted pulse signal P/A
Pulse signal D/B Inverted pulse signal D/B
Digital output DQ0 --
Digital input DI0 Digital input DI1 Digital input/output DIQ2
Pulse signal P/A --
Pulse signal D/B --
Digital output DQ0 --
--
Pulse signal P/A
Pulse signal P/A
Inverted pulse signal P/A
--
Pulse signal D/B
Pulse signal D/B
Inverted pulse signal D/B
--
Pulse signal P/A
Digital output DQ0
Digital output DQ0
Pulse signal D/B
--
--
Digital input DI0
Digital input DI1
Digital input/output DIQ2
Ground for digital outputs, digital inputs and pulse signals of the technology module
Note Use of jumper links in the front connector is not permitted.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
18
Manual, 12/2016, A5E38896703-AA
Connecting 3.1 Pin assignment
Pin assignment for the infeed element The infeed element is inserted into the front connector and serves to supply power to the technology module. You must connect the supply voltage to terminal 41 (L+) and terminal 44 (M) for this.
Figure 3-1 Infeed element wiring
L+
24 V DC supply voltage
M
Ground for supply voltage
Behavior of the digital outputs following a wire break at the ground connection of the outputs
Due to the characteristics of the output driver used in the module, a wire break causes approximately 10 mA supply current to drain from the digital outputs via a parasitic diode. This behavior may lead to a high signal state even at outputs that are not set. Depending on the nature of the load, 10 mA may be enough to activate a load with high signal state.
Duplicate wiring of ground
To prevent unintended switching of the outputs in the event of a ground connection wire break, follow these steps:
1. Route the first ground connection from terminal 44 to the ground connection of the central power supply of the system.
2. Route the second ground connection from terminal 43 to the ground connection of the central power supply of the system.
If one of the two ground connection cables is interrupted, the outputs are maintained at the required potential by the remaining ground connection.
WARNING
Wire break at ground connection Always connect two cables to the ground connection of the central power supply of the system.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
19
Connecting 3.1 Pin assignment
Circuit diagram The figure below shows an example circuit diagram of the technology module. In this example, four channels are used with the RS422, 5 V-TTL and 24 V signal interfaces:
,
Electrical isolation Technology and backplane bus interface Input filter for supply voltage Supply voltage via infeed element Duplicate wiring to the ground connection of the central power supply of the system Shield connection at the front connector Equipotential bonding LEDs per channel Twisted-pair cables Motor with drive stage at RS422 signal interface Motor with drive stage at 24 V signal interface Motor with drive stage at TTL signal interface
Figure 3-2 Circuit diagram when using RS422, 5 V-TTL and 24 V signal interfaces
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
20
Manual, 12/2016, A5E38896703-AA
Connecting 3.1 Pin assignment
Supply voltage L+/M
Connect the supply voltage (24 V DC) to the L+ and M connections. An internal protective circuit protects the technology module from polarity reversal of the supply voltage. The technology module monitors the connection of the supply voltage.
ThePWR LED (Page 44) at terminal 19 indicates the presence of supply voltage.
RS422/TTL and 24 V pulse output signals
The technology module can output pulse signals either via the RS422/TTL or 24 V signal interface for each channel. The pulse signals are designated with P/A and D/B.
A TTL pulse signal and a 24 V pulse signal use a single wire. An RS422 pulse signal uses a pair of wires and the pulse information is transmitted as differential voltage. This ensures interference-free transmission of RS422 encoder signals, even of higher-frequency signals over longer distances. The RS422 wire pairs must be twisted in the cable and terminated with a 100 resistance.
For an overview of the signal types you can output, see section Pulse Train Output (PTO) (Page 14).
When the RS422/TTL signal interface is used, you connect the P/A signal to the Chn.P/A connections and the D/B signal to the CHn.D/B connections. When the 24 V signal interface is used, you connect the P/A signal to digital output DQn.0 and the D/B signal to digital output DQn.1. When the 5 V TTL signal interface is used, you must provide a resistance of 220 to 1 k between connection CHn.P/A and ground M as well as between connection CHn.D/B and ground M.
The outputs of the channels are not electrically isolated from each other. The outputs are electrically isolated from the backplane bus.
Digital inputs DI0, DI1 and DIQ2
Up to three digital inputs are available per channel. The digital inputs are used for additional functions for the respective drive control:
Function Reference switch input
Measuring input
"Drive ready" input
Meaning
You can use a reference switch at digital input DIn.0 to synchronize the reference mark with the current position of the drive axis.
You can use a measuring input at digital input DIn.1 to save the current position of the drive axis.
You can use digital input DIn.0, DIn.1 or DIQn.2 as an input for the ready signal of the drive.
The digital inputs of the channels are not electrically isolated from each other. The digital inputs are electrically isolated from the backplane bus.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
21
Connecting 3.1 Pin assignment
Interpulse period following auto reverse You can configure the minimum amount of time the technology module must pause the pulse output following reversal of the direction of rotation. After the interpulse period elapses, the pulse output is resumed.
You can specify the following values for the interpulse period:
0 (default)
1 ms
4 ms
10 ms
Input delay
This parameter can be used to suppress signal noise at the digital inputs of a channel. Changes to the signal are only detected if they remain stable for longer than the configured input delay time. You can specify the following values for the input delay: None
(input delay of 4 s, minimum pulse width of 3 s) 0.05 ms 0.1 ms (default) 0.4 ms 0.8 ms 1.6 ms 3.2 ms 12.8 ms 20 ms
Note
If you select the "None" or "0.05 ms" option, you have to use shielded cables for connection of the digital inputs.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
22
Manual, 12/2016, A5E38896703-AA
Connecting 3.1 Pin assignment
Digital outputs DQ0, DQ1 and DIQ2 Up to three digital outputs are available per channel. When you use the "RS422, symmetrical / TTL (5 V), asymmetrical" signal interface, you can use digital output DQn.0 to enable the drive. When the "24 V, asymmetrical" signal interface is used, you connect the P/A signal to digital output DQn.0 and the D/B signal to digital output DQn.1. In this case, you can use digital output DIQn.2 to enable the drive. The digital outputs of the channels are not electrically isolated from each other. The digital outputs are electrically isolated from the backplane bus. The digital outputs are 24 V current-sourcing switches in relation to M. DQn.0 and DQn.1 can be loaded with 0.1 A rated load current and DQn.2 can be loaded with 0.5 A rated load current. The digital outputs are protected from overload and short-circuit.
Note Relays and contactors can be connected direct without external circuitry.
Possible combinations of the DI and DQ functions The possible combinations of additional DI and DQ functions are dependent on the signal interface: Reference switch input (RS, Reference Switch) Measuring input (MI, Measuring Input) "Drive ready" input (DR, Drive Ready) Drive enable output (ED, Enable Drive)
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
23
Connecting 3.1 Pin assignment
When you use the "RS422, symmetrical / TTL (5 V), asymmetrical" signal interface, you have the following possible combinations for the named functions:
Table 3- 2 Possible combinations for "RS422, symmetrical / TTL (5 V), asymmetrical" signal interface
DIn.0
-- RS RS RS RS RS RS RS RS -- -- -- -- DR DR DR DR DR DR -- -- -- RS RS RS
DIn.1
-- -- -- -- -- MI MI MI MI MI MI MI MI -- -- -- MI MI MI DR DR DR DR DR DR
Input -- -- DR DR -- -- DR DR -- -- DR DR -- -- -- -- -- -- -- -- -- -- -- -- --
DIQn.2 Output -- -- -- -- ED -- -- -- ED -- -- -- ED -- -- ED -- -- ED -- -- ED -- -- ED
DQn.0
-- -- -- ED -- -- -- ED -- -- -- ED -- -- ED -- -- ED -- -- ED -- -- ED --
DQn.1
Not supported
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
24
Manual, 12/2016, A5E38896703-AA
Connecting 3.1 Pin assignment
When you use the "24 V, asymmetrical" signal interface, you have the following possible combinations for the named functions:
Table 3- 3 Possible combinations for "24 V, asymmetrical" signal interface
DIn.0
-- RS -- RS -- RS RS RS RS -- -- -- DR DR DR DR -- -- RS RS
DIn.1
-- -- -- -- -- -- MI MI MI MI MI MI -- -- MI MI DR DR DR DR
Input -- -- DR DR -- -- -- DR -- -- DR -- -- -- -- -- -- -- -- --
DIQn.2 Output -- -- -- -- ED ED -- -- ED -- -- ED -- ED -- ED -- ED -- ED
DQn.0 P/A signal
DQn.1 D/B signal
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
25
Configuring/address space
4
4.1
Configuring
Introduction
The technology module is configured and assigned parameters with the configuration software.
The technology module functions are controlled and monitored by the user program.
System environment The technology module can be used in the following system environments:
Table 4- 1 Possible applications of the technology module
Possible applications
Central operation in an S7-1500 system
Components required
· S7-1500 automation system
· TM PTO 4
Distributed opera- · tion in an S7-1500 system ·
·
S7-1500 automation system
ET 200MP distributed I/O system
TM PTO 4
Distributed opera- · tion in an S7-1200 system ·
·
S7-1200 automation system
ET 200MP distributed I/O system
TM PTO 4
Distributed opera- ·
tion in an
S7-300/400 sys-
tem
·
·
S7-300/400 automation system
ET 200MP distributed I/O system
TM PTO 4
Configuration software
In the user program
STEP 7 (TIA Portal):
· Device configuration and parameter setting with hardware configuration
Motion Control instructions
· Parameter setting with axis technology object for Motion Control
STEP 7 (TIA Portal):
· Device configuration and parameter setting with hardware configuration
· Parameter setting with axis technology object for Motion Control
(PROFINET IO and PROFIBUS DP1)
STEP 7 (TIA Portal):
· Device configuration and parameter setting with hardware configuration
· Parameter setting with TO_PositioningAxis technology object
(PROFINET IO and PROFIBUS DP1)
STEP 7 (TIA Portal):
Device configuration and parameter setting with hardware configuration (PROFINET IO and PROFIBUS DP1)
STEP 7:
Device configuration and parameter setting of the module with GSD file (PROFINET IO)
Direct access to control and feedback interface (Page 34) of the technology module control in the IO data
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
26
Manual, 12/2016, A5E38896703-AA
Configuring/address space 4.1 Configuring
Possible applications
Components required
Distributed opera- · Third-party automation
tion in a third-
system
party system
· ET 200MP distributed I/O
system
· TM PTO 4
Configuration software
Third-party configuration software: Device configuration and parameter setting of the module with GSD file (PROFINET IO)
In the user program
1 When using the technology module on PROFIBUS DP, you can use a maximum of three channels.
Control using a technology object
For a detailed description of configuring the technology module with axis technology objects TO_SpeedAxis, TO_PositioningAxis and TO_SynchronousAxis, refer to the following:
Function Manual S7-1500T Motion Control, section "Configuring", which is available for download on theInternet (https://support.industry.siemens.com/cs/ww/en/view/109481326)
Information system of STEP 7 (TIA Portal), under "Using technology functions > Motion Control > Motion Control (S7-1200, S7-1500, S7-1500T) > Configuring (S7-1500, S7-1500T) > Configuring technology modules for Motion Control (S7-1500, S7-1500T)"
Hardware Support Package (HSP)
If the technology module is not yet integrated in your TIA Portal version, you can integrate it as of TIA Portal V14 with HSP0181.
The Hardware Support Packages (HSP) are available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/72341852).
Alternatively, they can be accessed for downloading via the menu bar of STEP 7 (TIA Portal): "Options > Support Packages > Download from the Internet".
GSD file for PROFINET IO
The GSD file for the ET 200MP distributed I/O system on PROFINET IO is available for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/68189683).
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
27
Configuring/address space 4.2 Reaction to CPU STOP
4.2
Reaction to CPU STOP
The following overview shows the reaction of the technology module to a transition of the CPU to STOP. The reaction is not configurable.
Table 4- 2 Reaction of technology module to CPU STOP
RUN-STOP transition STOP-RUN transition
Reaction of technology module
The technology module executes a Coast Stop (OFF2), which causes the pulse output to stop. If you are using a drive enable, the corresponding digital output is reset immediately.
The control interface is no longer evaluated. The feedback interface continues returning the last acquired values. The feedback interface continues signaling diagnostic information using the Fault_Present and Sensor_Error bits.
Active functions, such as for the reference switch, are aborted.
The configuration of the technology module is not reset. The feedback interface keeps the last acquired position value (G1_XIST1).
4.3
Address space
Address space of the technology module
Table 4- 3 Range of the input addresses and output addresses of the TM PTO 4
Channel configuration
1 channel 2 channels 3 channels 4 channels
Address space Inputs 18 bytes 36 bytes 54 bytes 72 bytes
Outputs 10 bytes 20 bytes 30 bytes 40 bytes
Additional information
For a description of the control and feedback interface of the technology module, see section Control and feedback interface (Page 34).
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
28
Manual, 12/2016, A5E38896703-AA
4.4
Configuring/address space 4.4 Parameters
Parameters
You can use various parameters to define the properties of the technology module. Depending on the settings, not all parameters are available. When parameters are assigned in the user program, the parameters are transferred to the module with the "WRREC" instruction and data record 128 (Page 56).
You have the following options for setting the module's parameters:
Parameter setting via ...
Hardware configuration in STEP 7 (TIA Portal) with HSP in the case of centralized operation in an S7-1500 system
Basic procedure
1. Install the appropriate HSP file. 2. Select an appropriate CPU under "Add new device > Control-
ler > SIMATIC S7-1500".
3. Select the module in the hardware catalog under "Technology modules".
4. Set the device configuration and the parameters of the module in the hardware configuration.
5. Set the parameters of the technology object. 6. Download the parameter assignment to the module.
Hardware configuration in STEP 7 (TIA Portal) with HSP in the case of distributed operation in an S7-1500 system
1. Install the appropriate HSP file.
2. Select an appropriate IM in the hardware catalog under "Distributed I/O > ET200MP".
3. Select the module in the hardware catalog under "Technology modules".
4. Set the device configuration and the parameters of the module in the hardware configuration.
5. Set the parameters of the technology object.
6. Download the parameter assignment to the module.
Hardware configuration using GSD file for distributed operation on the PROFINET IO
1. Install the current PROFINET GSD file.
2. Select an appropriate IM in the hardware catalog under "Other field devices > PROFINET IO > I/O".
3. Select the module in the hardware catalog under "Technology modules".
4. Set the parameters of the module in the hardware configuration.
5. Download the parameter assignment to the module.
You will find the parameters in the following table.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
29
Configuring/address space 4.4 Parameters
Parameters of the TM PTO 4 The following parameter settings are possible:
Table 4- 4 Configurable parameters and their defaults
Parameter
Value range
Default setting
Channel configuration
Signal type
Signal interface
Interpulse period following auto reverse Enable diagnostic interrupts Increments per revolution Reference speed Maximum speed
· 4 channels · 3 channels
4 channels
· 2 channels
· 1 channel
· Pulse (P) and direction (D)
Pulse (P) and direction (D)
· Count up (A), count down (B)
· Incremental encoder (A, B phaseshifted)
· Incremental encoder (A, B phaseshifted, quadruple)
· 24 V, asymmetrical
· RS422, symmetrical / TTL (5 V), asymmetrical
24 V, asymmetrical
· 0 ms
0 ms
· 1 ms · 4 ms
· 10 ms
· Disabled
Disabled
· Enabled
1...1000000
200
1,0...20000,0 U/min 3000,0
Dependent on signal 3000,0 interface, signal evaluation, increments per revolution and reference speed (see following table)
Re-configuration in RUN
No
Effective range with configuration software: HSP or GSD file for PROFINET IO
Module
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
30
Manual, 12/2016, A5E38896703-AA
Configuring/address space 4.4 Parameters
Parameter
Value range
Default setting
Quick stop time (OFF3) Ramp stop time (OFF1) Use drive enable Drive enable output Use DI0 as reference switch Reference switch edge selection Use DI1 as measuring input Use "Drive ready" "Drive ready" input
Input delay
Tolerated number of sign-of-life errors
1...65535 ms 1...65535 ms · Disabled · Enabled
· DQ0 · DIQ2
· Disabled · Enabled
· At positive edge · At negative edge
· Disabled · Enabled
· Disabled · Enabled
· DI0 · DI1 · DIQ2
· None · 0.05 ms · 0.1 ms · 0.4 ms · 0.8 ms · 1.6 ms · 3.2 ms · 12.8 ms · 20 ms 0...65535
1000 ms 5000 ms Disabled DQ0 Disabled At positive edge Disabled Disabled DI0 0.1 ms
1
Re-configuration in RUN
Yes Yes Yes
Effective range with configuration software: HSP or GSD file for PROFINET IO
Channel
Channel
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Yes
Channel
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
31
Configuring/address space 4.4 Parameters
The following table shows the calculation of the value range of the maximum speed:
Table 4- 5 Value range of the maximum speed
Signal interface
24 V, asymmetrical TTL (5 V), asymmetrical RS422, symmetrical
Value range of the maximum speed
Low limit
High limit (the smaller of the two values applies)
Signal evaluation "Single"
0.1 Hz * 60 / (increments per revolution)
Signal evaluation "Quadruple"
0.1 Hz * 60 *4 / (increments per revolution)
Signal evaluation "Single"
Signal evaluation "Quadruple"
· 2 * reference speed · 2 * reference speed
· 200000 Hz * 60 /
· 200000 Hz * 60 *4 /
(increments per revo-
(increments per revo-
lution)
lution)
· 2 * reference speed · 2 * reference speed
· 1000000 Hz * 60 / · 1000000 Hz * 60 *4 /
(increments per revo-
(increments per revo-
lution)
lution)
Description of parameters
Parameter Channel configuration
Signal type Signal interface
Description Selection of the number of channels used. The channels are assigned in ascending order.
Selection of the type of PTO pulse output (Page 14).
Selection of the interface used for the pulse output:
· 24 V, asymmetrical: The channel outputs 24 V signals at terminals DQm.0 and DQm.1.
· RS422, symmetrical / TTL (5 V), asymmetrical: The channel outputs either RS422 signals at terminals P/A and D/B and the respective inverted terminals or 5 V TTL signals at terminals P/A and D/B.
Interpulse period follow- Selection of the minimum time between a change in direction and the out-
ing
put of the first pulse in the new direction.
auto reverse
Enable diagnostic interrupts
Enables the following diagnostic interrupts (Page 47): · Supply voltage missing
Increments per revolution
· Error at digital outputs
The detected error is indicated for the respective channel with feedback bits (Page 38)Fault_Present and Sensor_Error.
Input of the number of steps (also micro steps) that correspond to one revolution of the drive.
This parameter must match the "Increments per revolution" parameter in the "Data exchange with encoder" tab of the axis technology object.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
32
Manual, 12/2016, A5E38896703-AA
Configuring/address space 4.4 Parameters
Parameter Reference speed
Maximum speed
Bits in incr. actual value (G1_XIST1)
Quick stop time (OFF3)
Ramp stop time (OFF1) Use drive enable Drive enable output Use DI0 as reference switch
Reference switch edge selection
Use DI1 as measuring input
Use "Drive ready" "Drive ready" input
Input delay
Tolerated number of sign-of-life errors
Description Input of the speed at which the drive rotates with a speed setpoint of 100%. The permitted value range for the speed setpoint is -200% ... +200%. This parameter must match the "Reference speed" parameter in the "Data exchange with drive" tab of the axis technology object.
Input of the maximum permitted speed for the application. The value must not exceed twice the reference speed. This parameter must match the "Maximum speed" parameter in the "Data exchange with drive" tab of the axis technology object.
Specifies the number of bits for the fine resolution coding in the incremental actual position value G1_XIST1. The value is always "0" for this module. This parameter must match the "Bits in incr. actual value (Gn_XIST1)" parameter in the "Data exchange with encoder" tab of the axis technology object.
Input of the time taken to execute a fast stop from maximum speed to standstill.
Input of the time taken to execute a stop from maximum speed to standstill.
Enables use of the drive enable signal at a hardware output (Page 17).
Selection of the hardware output (Page 17) that is used to enable the drive. Only available for selection and effective if "Use drive enable" is enabled.
Enables use of the reference switch signal at the hardware input DI0 (Page 17). You can synchronize the reference mark with the current position of the drive axis using the reference switch signal.
Selection of the edge at DI0 that triggers detection of the reference mark. Only available for selection and effective if "Use DI0 as reference switch" is enabled.
Enables use of the measuring input signal at hardware input DI1 (Page 17). You can save the current position of the drive axis using the measuring input signal.
Enables use of the ready signal of the drive at a hardware input (Page 17).
Selection of the hardware input (Page 17) to which the ready signal of the drive is connected and read in. Only available for selection and effective if "Use "Drive ready"" is enabled.
Selection of the input delay for the signal at the respective digital input for noise suppression. Changes to the signal are only detected if they remain stable for longer than the configured input delay time. The input delay applies to all the used hardware inputs of the channel.
Input of how many Master Sign-Of-Life errors are tolerated by the module. If the number is exceeded, this triggers an error message via return bit (Page 38) Sensor_Error. 65535 means: No monitoring for sign-of-life errors
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
33
Configuring/address space 4.5 Control and feedback interface
4.5
Control and feedback interface
Direct access to the control and feedback interface is not needed for use of the module in an S7-1500 or S7-1200 system. For this case an S7-1500 system has the TO_SpeedAxis, TO_PositioningAxis and TO_SynchronousAxis technology objects, and an S7-1200 system has the TO_PositioningAxis technology object. For a detailed description of configuring the technology module with the axis technology objects, see Function Manual S7-1500T Motion Control, section "Configuring", which is available for download on theInternet (https://support.industry.siemens.com/cs/ww/en/view/109481326).
The control and feedback interface of the channels is a partial implementation of the PROFIdrive interface "frame 3". Additional information on using the control and feedback interface is available in the section Configuring (Page 26).
4.5.1
Assignment of the control interface
The user program uses the control interface to influence the behavior of the technology module.
Control interface The following table shows control interface assignment:
Table 4- 6 Control interface of the technology module
Byte offset from start address
0...1
0
1
2...5
6...7
6 7
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
STW1: Control word 1
Reserved1
Control_ by_PLC
Fault_ Acknowledge
Enable_ Setpoint
Unfreeze_ Ramp_ Generator6
Enable_ Ramp_ Generator
Enable_ Operation
No_Quick_ Stop_OFF3
NSOLL_B: DINT: Normalized speed setpoint in N4 format
STW2: Control word 2
UINT: Master_Sign-Of-Life
Reserved1
Reserved1
Bit 1
Reserved1 No_Coast_ Stop_OFF2
Bit 0 On_OFF1
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
34
Manual, 12/2016, A5E38896703-AA
Configuring/address space 4.5 Control and feedback interface
Byte offset from start address
8...9
Bit 7
8
Acknowl-
edging_
Sensor_
Error
9
Mode
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
Activate_ Parking_ Sensor7
Command_ 2_Request
Request_ Absolute_ value_ Cyclically3
Command_ 1_Request
G1_STW: Encoder control word
Request_ Home_ Set_Home_ Position_ Position2 Mode2
Reserved1
Command_ Function_4_ Function_3_ Function_2_ Function_1_ 0_Request Request 4,5 Request 4,5 Request 5 Request
1 Must be set to 0. 2 This command is not supported by the module. If you set the bit, error code F01H is returned in G1_XIST2. 3 This command is not supported by the module. If you set the bit, error code 8H is returned in G1_XIST2. 4 This command is not supported for the "Acquire measuring input value" function. If you set the bit, error code 6H is
returned in G1_XIST2. 5 This command is not supported for the "Detect reference mark" function. If you set the bit, error code 4H is returned in
G1_XIST2. 6 This command is not supported by the module. The bit is not evaluated. 7 This command is not supported by the module. If you set the bit, error code 3H is returned in G1_XIST2.
Description of control bits
Control bit/value STW1 Control_by_PLC
On_OFF1 No_Coast_Stop_OFF2
No_Quick_Stop_OFF3
Enable_Operation
Description
0 means: Coast Stop (OFF2): Pulse output cannot be controlled by the user program on the CPU. 1 means: Valid values for control of the pulse output will be sent to the module from the user program on the CPU. 0 means: OFF1: The pulse output returns to state S2 (Page 42). If you are using a drive enable, the corresponding digital output is reset as soon as the drive comes to a standstill. 1 means: Pulse output is switched on. 0 means: Coast Stop (OFF2): The pulse output is stopped and returns to state S1 (Page 42). If you are using a drive enable, the corresponding digital output is reset immediately. 1 means: The "Coast Stop (OFF2)" command is withdrawn. 0 means: Quick stop (OFF3): The drive stops within the configured quick stop time. The pulse output is stopped and returns to state S1 (Page 42). If you are using a drive enable, the corresponding digital output is reset as soon as the drive comes to a standstill. 1 means: The "Quick stop (OFF3)" command is withdrawn. 0 means: The pulse output returns to state S3 (Page 42). 1 means: Pulse output is enabled. The drive accelerates to the speed setpoint.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
35
Configuring/address space 4.5 Control and feedback interface
Control bit/value
Description
Enable_Ramp_Generator
0 means: The pulse output is stopped but remains in state S4 (Page 42).
1 means: Each speed change is controlled along on a ramp by the ramp generator.
Enable_Setpoint
0 means: The ramp generator stops the drive within the configured ramp stop time. State S4 (Page 42) is retained. 1 means: The speed setpoint is specified in NSOLL_B for the ramp generator.
Fault_Acknowledge
You use this bit to acknowledge an error.
NSOLL_B
You use this value to specify the setpoint for the drive axis velocity as a percentage in N4 format.
The permitted value range for the speed setpoint is -200% ... +200%1 of the reference speed. The DINT value maps the value range linearly. This means 100% corresponds to the value 40000000H. The resolution is 9.3 * 10-8%.
STW2
Master_Sign-Of-Life
When you control the module in isochronous mode using technology objects, this value is used by the technology object as the Master sign-of-life.
When you control the module in non-isochronous mode without technology objects, you must set this value to 0. When you control the module in isochronous mode without a technology object, we recommend that you also set this value to 0.
G1_STW
Acknowledging_Sensor_Error You use this bit to acknowledge an error that occurred during feedback of the actual encoder value.
Function_1_Request
When you use the "Reference mark search" function, you use this bit to specify that the reference mark is to be detected using the configured edge (Page 56) of reference switch input DIn.0 and saved in G1_XIST2.
When you use the "Measurement on the fly" function, you use this bit to specify that a measuring input value is to be acquired using the positive edge of digital input DIn.1 and saved in G1_XIST2.
Function_2_Request
You use this bit to specify that a measuring input value is to be acquired using the negative edge of digital input DIn.1.
Command_0_Request, Command_1_Request, Command_2_Request
You use this value to specify how the function selected with the Mode bit will be used: 000 means: Do nothing 001 means: Enable function
010 means: Read out value in G1_XIST2
011 means: Disable function
100 to 111 means: Invalid
Mode
0 means: Reference mark search: Detect reference mark using the configured edge of reference switch input DIn.0
1 means: Measurement on the fly: Acquire measuring input value using measuring input DIn.1
1 The exact maximum speed setpoint is +(200 2-30)%
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
36
Manual, 12/2016, A5E38896703-AA
Configuring/address space 4.5 Control and feedback interface Reference mark search The following figure shows an example of the sequence of the detection and readout of the reference mark:
Figure 4-1 Detecting the reference mark
Measurement on the fly The following figure shows an example of the sequence of the acquisition and the readout of the measuring input value:
Figure 4-2 Acquiring the measuring input value
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
37
Configuring/address space 4.5 Control and feedback interface
4.5.2
Assignment of the feedback interface
The user program receives current values and status information from the technology module by means of the feedback interface.
Feedback interface The following table shows the assignment of the feedback interface:
Table 4- 7 Feedback interface of the technology module
Byte offset from start address
0...1
0
1
2...5 6...7
6 7 8...9 8
9 10...13 14...17
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
ZSW1: Status word 1
Reserved
f_or_n_ reached_ or_ exceeded
Control_
Reserved
Requested
Reserved
Switching_ On_ Inhibited
Quick_ Stop_Not_ Activated_ OFF3
Coast_ Stop_Not_ Activated_ OFF2
Fault_ Present
Operation_ Enabled
Ready_
Ready_
To_Operate To_Switch_
On
NIST_B: DINT: Current normalized actual speed value in N4 format
ZSW2: Status word 2
UINT: Slave_Sign-Of-Life
Reserved
Reserved
G1_ZSW: Encoder status word
Sensor_ Error
Parking_ Sensor_ Executed1
Transmit_ Absolute_ Value_ Cyclically1
Reserved
Requirement_of_ Acknowledgement_ Detected
Reserved
Probe_1_D eflected
Reserved
Value_2_ Active
Value_1_ Active
Reserved
Function_2_ Function_1_
Active
Active
G1_XIST1: DINT: Current actual encoder value
G1_XIST2: DINT: Error code or measuring input value or reference mark
1 Not supported by the module.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
38
Manual, 12/2016, A5E38896703-AA
Configuring/address space 4.5 Control and feedback interface
Description of feedback bits
Feedback bit/value ZSW1 Control_Requested
f_or_n_reached_or_ exceeded Ready_To_Switch_On Ready_To_Operate Operation_Enabled Fault_Present
Coast_Stop_Not_ Activated_OFF2 Quick_Stop_Not_ Activated_OFF3 Switching_On_Inhibited NIST_B
ZSW2 Slave_Sign-Of-Life
G1_ZSW Probe_1_Deflected
Requirement_of_ Acknowledgement_Detected Sensor_Error
Function_1_Active
Function_2_Active
Value_1_Active
Value_2_Active
Description
This bit indicates that the module is ready to receive values from the user program for controlling the pulse output. This bit indicates that the actual speed value has reached or exceeded the configured maximum speed. This bit indicates that the pulse output is ready to switch on. This bit indicates that the pulse output is ready to operate. This bit indicates that operation of the drive is enabled and the speed setpoint is being output. This bit indicates that a fault has occurred in the supply voltage or at a digital output. Error code 1H is returned. This bit indicates that the drive will not perform a Coast Stop (OFF2).
This bit indicates that the drive will not perform a Quick Stop (OFF3)
This bit indicates that the pulse output is not yet ready to switch on. This value indicates the actual value of the drive axis velocity as a percentage in N4 format relative to the reference speed.
When you control the module in isochronous mode using technology objects, this value is used by the technology object as the Slave sign-of-life. When you control the module without technology objects, this bit is set to 0.
When you use the "Measurement on the fly" function, this bit indicates the state of digital input DIn.1. This bit indicates that the acknowledgement of an error is being processed.
This bit indicates that an error has occurred during feedback of position value G1_XIST1. The meaning of the returned error codes can be found in the following table. If you use the "Reference mark search" function, this bit indicates that use of reference switch input DIn.0 is enabled. When you use the "Measurement on the fly" function, this bit indicates that use of the positive edge of measurement sensing input DIn.1 is enabled. This bit indicates that use of the negative edge of measurement sensing input DIn.1 is enabled. When you use the "Reference mark search" function, this bit indicates that the reference mark has been saved in G1_XIST2 using reference switch input DIn.0. When you use the "Measurement on the fly" function, this bit indicates that a measuring input value has been saved in G1_XIST2 using the positive edge of digital input DIn.1. This bit indicates that a measuring input value has been saved in G1_XIST2 using the negative edge of digital input DIn.1.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
39
Configuring/address space 4.5 Control and feedback interface
Feedback bit/value G1_XIST1
G1_XIST2
Description
This value is the incremental actual position value. G1_XIST1 corresponds to the number of output pulses, which control the speed of the drive.
If an error has occurred, G1_XIST2 indicates the associated error code. For the meaning of the error codes, see the table below.
When you use the "Reference mark search" function, this value returns the detected reference mark.
When you use the "Measurement on the fly" function, this value returns the acquired measuring input value.
Error codes
G1_XIST2 can contain the following error codes:
Error code 1H
3H 4H
5H
6H
Name
Meaning
Sensor group error
Sensor pause failed Reference mark detection aborted
Read reference mark aborted
Measuring input value acquisition aborted
G1_XIST1 is invalid. One of the following errors occurred during feedback of the actual position value.
· Missing supply voltage · Undervoltage · Short-circuit or overload at the digital output
A sensor pause (Sensor parking) is not supported.
· The Function_2_Request, Function_3_Request or Function_4_Request bit was set to 1 while the "Reference mark search" function was active.
· The Mode bit was set to 1 while the "Reference mark search" function was active.
· CPU STOP while the "Reference mark search" function was active.
· G1_XIST2 does not contain a valid value for the reference mark.
· The Mode bit was set to 1 while the reference mark was being read from G1_XIST2.
· CPU STOP while the reference mark was being read from G1_XIST2.
· The Function_3_Request or Function_4_Request bit was set to 1 while the "Measurement on the fly" function was active.
· The Mode bit was set to 0 while the "Measurement on the fly" function was active.
· CPU STOP while the "Measurement on the fly" function was active.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
40
Manual, 12/2016, A5E38896703-AA
Configuring/address space 4.5 Control and feedback interface
Error code 7H
8H F01H F02H
Name
Meaning
Read measuring input value aborted
Absolute value acquisition aborted Command not supported Sign-of-life error (Master Sign-Of-Life)
· G1_XIST2 does not contain a valid value of the measuring input.
· The Mode bit was set to 0 while the measuring input value was being read from G1_XIST2.
· CPU STOP while the measuring input value was being read from G1_XIST2.
The Request_Absolute_value_Cyclically bit is not supported by the module. The module returns only incremental encoder values. The command is not supported by the module.
The number of tolerated errors of the Master sign-of-life (control value Master_Sign-Of-Life) was exceeded.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
41
Configuring/address space 4.5 Control and feedback interface
4.5.3
Enabling the pulse output
State diagram
The following figure shows the state diagram for enabling the pulse output:
Figure 4-3 State diagram for the operation enable
42
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0) Manual, 12/2016, A5E38896703-AA
Procedure
Configuring/address space 4.5 Control and feedback interface
To enable the pulse output, follow these steps:
1. Set the Control_by_PLC, Enable_Setpoint and Enable_Ramp_Generator control bits to TRUE and the On_OFF1, No_Coast_Stop_OFF2, No_Quick_Stop_OFF3 and Enable_Operation bits to FALSE. State S1 is reached: Switching on of the pulse output is still inhibited. The feedback bit Switching_On_Inhibited is set to TRUE.
2. Set the On_OFF1 and No_Quick_Stop_OFF3 control bits to TRUE. State S2 is reached: The pulse output is ready to switch on. The feedback bit Ready_To_Switch_On is set to TRUE. The feedback bit Switching_On_Inhibited is set to FALSE.
3. Set the On_OFF1 control bit to TRUE. State S3 is reached: The pulse output is ready to switch on. The feedback bit Ready_To_Operate is set to TRUE.
4. Set the Enable_Operation control bit to TRUE.
5. If you have configured a drive enable output, set it to high level. The drive is enabled.
6. If you have configured a ready input, wait for the ready signal of the drive. As soon as the ready input is at high level, state S4 is reached: Operation is enabled. The pulse output starts. The feedback bit Operation_Enabled is set to TRUE.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
43
Interrupts/diagnostic alarms
5
5.1
LEDs
Status and error displays
The figure below shows the LED displays (status and error displays) of the TM PTO 4.
Figure 5-1 LED displays of the TM PTO 4
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
44
Manual, 12/2016, A5E38896703-AA
Interrupts/diagnostic alarms 5.1 Status and error displays
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in the section Diagnostic alarms (Page 47).
Table 5- 1 Status and error displays RUN/ERROR/MAINT
RUN Off
Flashes On On
Flashes
LEDs ERROR
Off
Off Off Flashes Flashes
MAINT Off
Off Off Off Flashes
Meaning
To correct or avoid errors
No voltage or too low voltage on back- · Switch on the CPU/IM and/or the
plane bus
system power supply modules.
· Check whether the voltage connectors are inserted.
· Check whether too many modules are inserted.
Technology module starts up and
--
flashes until completion of the valid
parameter assignment
The parameters of the technology module have been assigned.
Indicates module errors (an error is present on at least one channel)
Evaluate the diagnostic alarms and eliminate the error.
Hardware or firmware defective
Replace the technology module.
Table 5- 2 PWR/ERROR status displays
LEDs
PWR
ERROR
Off
Flashes
On
Off
On
Flashes
Meaning Supply voltage too low or missing
Supply voltage is present and OK Indicates module errors (an error is present on at least one channel)
To correct or avoid errors
· Check the supply voltage. · Make sure that the front connect-
or is correctly inserted. --
Evaluate the diagnostic alarms and eliminate the error.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
45
Interrupts/diagnostic alarms 5.1 Status and error displays
Channel LEDs
The CHn.P/A, CHn.D/B, and DIn.m LEDs and the LEDs of DIQn.2 used as digital inputs indicate the current level of the associated signals. The LEDs of digital outputs DQn.m and of DIQn.2 used as digital outputs indicate the desired state.
The flashing frequency of the channel LEDs is limited to approximately 24 Hz. If higher frequencies are present, the channel LEDs do not indicate the current status but instead flash at 24 Hz.
Table 5- 3 Status displays CHn.m/DIn.m/DQn.m/DIQn.2
LEDs CHn.m/DIn.m/ DQn.m/DIQn.2
Off
On
On (DQn.m/DIQn.2)
Meaning
Pulse output/digital input/digital output at 0 level Pulse output/digital input/digital output at 1 level Diagnostic alarm: e.g. "Error at digital outputs"
To correct or avoid errors
-- --
· Evaluate the diagnostic alarm. · Check the wiring or the connected
load.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
46
Manual, 12/2016, A5E38896703-AA
Interrupts/diagnostic alarms 5.2 Diagnostic alarms
5.2
Diagnostic alarms
Enabling the diagnostic interrupts You enable the diagnostic interrupts at the basic parameters. The technology module can trigger the following diagnostic interrupts:
Table 5- 4 Possible diagnostic interrupts
Diagnostic interrupt · Parameter assignment error · Internal error · Watchdog tripped. Module is defective.
· Supply voltage missing · Error at the digital outputs
Monitoring Monitoring is always active. A diagnostic interrupt is triggered each time an error is detected.
Monitoring is always active. A detected error only triggers a diagnostic interrupt if "Enable diagnostic interrupts" has been enabled during device configuration. The diagnostic interrupts are not enabled in the default setting.
Reactions to a diagnostic interrupt
The following happens when an event occurs that triggers a diagnostic interrupt:
The ERROR LED flashes.
Once you have remedied the error, the ERROR LED goes out.
The S7-1500 CPU interrupts processing of the user program. The diagnostic interrupt OB (e.g. OB 82) is called. The event that triggered the interrupt is entered in the start information of the diagnostic interrupt OB.
The S7-1500 CPU remains in RUN even if no diagnostic interrupt OB is present in the CPU. The technology module continues working unchanged if this is possible despite the error.
Detailed information on the error event is available with the instruction "RALRM" (read additional interrupt information).
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
47
Interrupts/diagnostic alarms 5.2 Diagnostic alarms
Diagnostic alarms
The diagnostics are displayed as plain text in STEP 7 (TIA Portal) in the online and diagnostics view. You can evaluate the error codes with the user program. The respective channel number is shown for each diagnostic information.
The following diagnostics can be signaled:
Table 5- 5 Diagnostic alarms, their meaning and remedies
Diagnostic alarm Error Meaning code
To correct or avoid errors
Parameter as-
10H
signment error
Supply voltage
11H
missing
Internal error
Watchdog tripped. Module is defective.
Error at the digital outputs1,2
100H 103H
10FH
Received parameter data record invalid
Undervoltage Wiring of supply voltage L+ faulty Supply voltage L+ of the technology module missing Front connector not inserted correctly Technology module defective Firmware error Technology module defective
· Error at the digital outputs (LED display DQn.m lights up red)
· Possible causes: Short-circuit Overload
Check parameter data record
Check supply voltage L+ Check wiring of supply voltage L+ Feed supply voltage L+ to the technology module via terminal 41 Insert front connector correctly Replace technology module Run firmware update Replace technology module
· Correct wiring at the digital outputs · Check consumers connected to the
digital outputs
1 Digital outputs DQ0.0, DQ0.1, DQ1.0 and DQ1.1 have shared diagnostics. Digital outputs DQ2.0, DQ2.1, DQ3.0 and DQ3.1 have shared diagnostics.
2 Diagnostics for short-circuit and overload are effective only for 24 V outputs and only up to an output frequency of approximately 100 Hz. The module is otherwise protected from irrevocable damage caused by short-circuit at the outputs, and the diagnostic alarm is not displayed.
CAUTION
Cross-channel diagnostics of the digital outputs
The digital outputs of channels 0 and 1 as well as channels 2 and 3 have shared diagnostics. As a result, when there is an error at one digital output, faults are automatically signaled for two channels and the pulse output of both channels is stopped.
Ensure that this fault scenario is taken into consideration when using multiple channels.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
48
Manual, 12/2016, A5E38896703-AA
Technical specifications
6
General information
6ES7553-1AA00-0AB0
Product type designation
TM PTO 4
Number of channels
4; axes
Product function
I&M data
Yes; I&M0 to I&M3
Isochronous mode
Yes
Engineering with
STEP 7 TIA Portal can be configured/integrated as of version
STEP 7 V14
STEP 7 can be configured/integrated as of version V5.5 SP3 with GSD file / -
PROFINET as of GSD version/GSD revision
GSDML V2.32
Installation type/mounting
Rail mounting possible
Yes; S7-1500 mounting rail
Supply voltage
Load voltage L+ Rated value (DC) Low limit of valid range (DC) High limit of valid range (DC) Reverse polarity protection
24 V 19.2 V 28.8 V Yes
Input current Current consumption, max. Power
70 mA; without load
Power from the backplane bus
1.3 W
Power loss
Power loss, typ.
4 W
Address area · Inputs
18 bytes; per channel
· Outputs
10 bytes; per channel
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
49
Technical specifications
Digital inputs Number of inputs Digital inputs configurable Input characteristics to IEC 61131, Type 3 Digital input functions, configurable Synchronization Measuring input Drive ready Input voltage Type of input voltage Nominal value (DC) For signal "0" For signal "1" Permitted voltage at input, min. Permitted voltage at input, max. Input current for signal "1", typ. Input delay (at rated value of input voltage) For standard inputs · Configurable
· at "0" to "1", min.
· at "1" to "0", min.
For technological functions · Configurable
Cable length Shielded, max. Unshielded, max. Digital outputs Number of outputs · In groups of
Current sinking Current sourcing Digital outputs configurable Short-circuit protection · Response threshold, typ.
Control of a digital input
6ES7553-1AA00-0AB0
12; 3 per channel, including 1 DIQ Yes Yes
Yes Yes Yes
DC 24 V -5 ... +5 V +11 ... +30 V -5 V 30 V
2.5 mA
Yes; none / 0.05 / 0.1 / 0.4 / 0.8 / 1.6 / 3.2 / 12.8 / 20 ms 4 µs; with parameter assignment "none" 4 µs; with parameter assignment "none"
Yes
1000 m 600 m
12; 3 per channel, including 1 DIQ
Yes; push-pull for DQn.0 und DQn.1 Yes Yes
0.2 A for DQn.0 and DQn.1, 0.9 A for DIQn.2 Yes
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
50
Manual, 12/2016, A5E38896703-AA
Technical specifications
Digital output functions, configurable PTO (Pulse Train Output) signal interface · 24 V asymmetrical
· RS 422 symmetrical
· TTL (5 V) asymmetrical PTO (Pulse Train Output) signal type · Pulse and direction
· Count up, count down
· Incremental encoder (A, B phase-shifted)
· Incremental encoder (A, B phase-shifted, quadruple)
Output switching capacity With resistive load, max. With lamp load, max. Load resistance range Low limit High limit Output voltage Type of output voltage for signal "1", min. Output current for signal "1" rated value for signal "1" permissible range, max. for signal "1" minimum load current for signal "0" residual current, max. Output delay with resistive load "0" to "1", typ. "1" to "0", typ. Switching frequency With resistive load, max. With inductive load, max.
With lamp load, max. With 24 V asymmetrical signal interface With RS 422 symmetrical signal interface With TTL (5 V) asymmetrical signal interface Cable length Shielded, max.
6ES7553-1AA00-0AB0
Yes Yes Yes; min. 2.4 V, min. 220 ohm
Yes Yes Yes Yes
0.1 A; 0.5 A for DIQn.2 1 W; 5 W for DIQn.2
240 ; 48 for DIQn.2 12 k
DC 23 V; L+ (-2.0 V)
0.1 A; 0.5 A for DIQn.2 0.12 A; 0.6 A for DIQn.2 2 mA 0.5 mA
1 µs; 28 µs for DIQn.2 1 µs; 25 µs for DIQn.2
1 kHz; for DIQn.2 0.5 Hz; according to IEC 60947-5-1, DC-13, for DIQn.2 10 Hz; for DIQn.2 200 kHz; for DQn.0 and DQn.1 1 MHz 200 kHz
320 m; RS422 / TTL Siemens Type 6FX2001-5: 125 kHz, 320 m; 250 kHz, 160 m; 500 kHz, 60 m; 1 MHz, 32 m; 24 V (DQn.m / DIQn.2): 10 kHz, 600 m; 200 kHz, 50 m
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
51
Technical specifications
Isochronous mode Isochronous mode (application synchronized until terminal) Bus cycle time (TDP), min. Jitter, max. Interrupts/diagnostics/status information Diagnostics function Interrupts Diagnostic interrupt Diagnostic alarms Monitoring of supply voltage Short-circuit Group error LED diagnostics display RUN LED ERROR LED MAINT LED Monitoring of supply voltage (PWR LED) Channel status display For channel diagnostics Electrical isolation Electrical isolation channels Between channels Between the channels and backplane bus Between the channels and load voltage L+ Isolation Isolation tested with Ambient conditions Ambient temperature in operation Horizontal installation, min. Horizontal installation, max. Vertical installation, min. Vertical installation, max. Distributed operation on SIMATIC S7-300 on SIMATIC S7-400 on SIMATIC S7-1200 on SIMATIC S7-1500 on Standard PROFINET Controller
6ES7553-1AA00-0AB0
Yes
250 µs; 375 µs, when all 4 channels are used 1 µs
Yes
Yes
Yes Yes; thermal overload protection Yes
Yes; green LED Yes; red LED Yes; yellow LED Yes; green LED Yes; green LED Yes; red LED
No Yes No
707 V DC (type test)
0 °C 60 °C; note derating 0 °C 40 °C; note derating
Yes; via control and feedback interface Yes; via control and feedback interface Yes Yes Yes; via control and feedback interface
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
52
Manual, 12/2016, A5E38896703-AA
Technical specifications
Dimensions Width Height Depth Weights Weight, approx.
6ES7553-1AA00-0AB0
35 mm 147 mm 129 mm
300 g
Note Derating information for output current
In the following cases, the maximum output current is reduced to 0.05 A for digital outputs DQn.m and 0.1 A for digital outputs DIQn.2: · When the system is mounted vertically, as of an ambient temperature of 30 °C.
In addition, you may only use channels 0 to 2 in this case. · When the system is mounted horizontally, as of an ambient temperature of 50 °C.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
53
Dimensional drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of technology module TM PTO 4
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
54
Manual, 12/2016, A5E38896703-AA
Dimensional drawing
Figure A-2 Dimensional drawing of the TM PTO 4 module, side view with open front panel
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
55
Parameter data record
B
B.1
Parameter assignment and structure of the parameter data record
You have the option to change the parameter assignment of the module with the user program while the CPU is in RUN. The parameters are transferred to the module using the using data record 128, for example with the instruction WRREC.
If errors occur during the transfer or validation of parameters with the WRREC instruction, the module continues operation with the previous parameter assignment. A corresponding error code is then written to the STATUS output parameter. If no errors occur, the STATUS output parameter contains the length of the actually transferred data.
The description of the WRREC instruction and the error codes is available in the section Parameter validation error (Page 61) or in the online help of STEP 7 (TIA Portal).
Structure of data record 128 The following tables show you the structure of data record 128 for TM PTO 4. The values in byte 0 to byte 3 are fixed and may not be changed. The channels are assigned in ascending order.
Note The impulse output will be stopped for transfer of data record 128. For this reason, only transfer the data record when the drive is at a standstill.
Note If you are using less than four channels, data record 128 is shortened accordingly. When using the technology module on PROFIBUS DP, you can use a maximum of three channels.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
56
Manual, 12/2016, A5E38896703-AA
Parameter data record B.1 Parameter assignment and structure of the parameter data record
Table B- 1 Parameter data record 128: Overall module
Bit Byte
0...3 0 1 2 3
4...31 32...59 60...87 88...115
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Header
Major Version = 0
Minor Version = 1
Length of parameter data per channel = 28
Reserved2
Reserved2
Channel 0
Channel 1 (if used)
Channel 2 (if used)
Channel 3 (if used)
2 Reserved bits must be set to 0.
Bit 0
Table B- 2 Parameter data record 128: Channel parameters
Bit Byte
4/32/ 60/88
5/33/ 61/89
Bit 7 Reserved2
Reserved2
Bit 6
Signal interface: 0B: 24 V, asymmetrical 1B: RS422, symmetrical / TTL (5 V), asymmetrical
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
Basic parameters
Enable diagnostic interrupts1
Reaction to CPU STOP: 000B: Coast Stop and reset drive enable 001 to 111B: Invalid
Operating mode
Signal evaluation3
Signal type:
00B: Single
0000B: Invalid
01B: Invalid
0001B: Pulse (P) and direction (D)
10B: Quadruple
0010B: Count up (A), count down (B)
11B: Invalid
0011B: Incremental encoder (A, B phase-shifted) 0100 to 1111B: Invalid
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
57
Parameter data record B.1 Parameter assignment and structure of the parameter data record
Bit
Byte
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
Digital inputs
6/34/ 62/90
Reference switch edge selection:
Input delay: 0000B: None 0001B: 0.05 ms
0B: At positive edge
0010B: 0.1 ms 0011B: 0.4 ms
1B: At negative edge
0100B: 0.8 ms 0101B: 1.6 ms
0110B: 3.2 ms
0111B: 12.8 ms
1000B: 20 ms
1001 to 1111B: Invalid
Values
7/35/ 63/91
Interpulse period at direction reversal: UINT: Value range in ms: 0 to 255D
8...11/ 36...39/ 64...67/ 92...95
Reference speed: REAL: Value range in rpm: 1.0 to 20000.0D:
12...15/ 40...43/ 68...71/ 96...99
Increments per revolution: DINT: Value range in rpm: 1 to 1000000D
16...19/ 44...47/ 72...75/ 100...103
Maximum speed: REAL: Value range is dependent on signal interface, signal evaluation, increments per revolution and reference
speed, see following table
20...21/ 48...49/ 76...77/ 104...105
Quick stop time (OFF3): UINT: Value range in ms: 1 to 65535D
22...23/ 50...51/ 78...79/ 106...107
Ramp stop time (OFF1): UINT: Value range in ms: 1 to 65535D
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
58
Manual, 12/2016, A5E38896703-AA
Parameter data record B.1 Parameter assignment and structure of the parameter data record
Bit Byte
Bit 7
24...25/ Reserved2 52...53/ 80...81/ 108...109
26/54/ Use drive 82/110 enable1
27/55/ 83/111
Use DI0 as reference switch1
28/56/ 84/112
Use DI1 as measuring input1
29/57/ Use "Drive 85/113 ready"1
30...31/ 58...59/ 86...87/ 114...115
Bit 6
Bit 5
Bit 4
Bit 3
Hardware inputs/outputs
Bit 2
Reserved2
Drive enable output:
00000B: DQn.04
00001B: Invalid
00010B: DIQn.2
00011 to 11111B: Invalid
Reserved2
Reference switch input:
00000B: DIn.0
00001 to 11111B: Invalid
Reserved2
Measuring input:
00000B: Invalid
00001B: DIn.1
00010 to 11111B: Invalid
Reserved2
"Drive ready" input:
00000B: DIn.0
00001B: DIn.1
00010B: DIQn.2
00011 to 11111B: Invalid
Tolerated number of sign-of-life errors: UINT: Value range: 0 to 65535D
65535D means: No monitoring for errors of Master sign-of-life
Bit 1
1 You enable the respective parameter by setting the corresponding bit to 1. 2 Reserved bits must be set to 0. 3 Only available for signal type "Incremental encoder (A, B phase-shifted)" 4 Only available for "RS422, symmetrical / TTL (5 V), asymmetrical"signal interface
Bit 0
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
59
Parameter data record B.1 Parameter assignment and structure of the parameter data record
Maximum speed The following table shows the calculation of the value range of the maximum speed:
Table B- 3 Value range of the maximum speed
Signal interface
24 V, asymmetrical TTL (5 V), asymmetrical RS422, symmetrical
Value range of the maximum speed
Low limit
High limit (the smaller of the two values applies)
Signal evaluation "Single"
0.1 Hz * 60 / (increments per revolution)
Signal evaluation "Quadruple"
0.1 Hz * 60 *4 / (increments per revolution)
Signal evaluation "Single"
Signal evaluation "Quadruple"
· 2 * reference speed · 2 * reference speed
· 200000 Hz * 60 /
· 200000 Hz * 60 *4 /
(increments per revo-
(increments per revo-
lution)
lution)
· 2 * reference speed · 2 * reference speed
· 1000000 Hz * 60 / · 1000000 Hz * 60 *4 /
(increments per revo-
(increments per revo-
lution)
lution)
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
60
Manual, 12/2016, A5E38896703-AA
Parameter data record B.2 Parameter validation error
B.2
WRREC
Parameter validation error
If you make the parameter setting in STEP 7 (TIA Portal) , the parameter values are checked before they are transferred to the technology module. This process prevents parameter errors.
In other use cases, the technology module checks the transferred parameter data record. If the technology module finds invalid or inconsistent parameter values, it outputs an error code (see below). The new parameter data record is rejected in this case, and work continues with the current parameter values until a valid parameter data record has been transferred.
When the CPU is in RUN, you can change the parameter data record with the instruction WRREC (Write Record). In case of errors, the WRREC instruction returns corresponding error codes in the STATUS parameter.
Example:
Let us assume that when WRREC is executed, an invalid value, for example 9, is written to the module for the signal type. As a consequence, the module rejects the entire parameter data record. You can recognize this by evaluating the STATUS output parameter of the WRREC instruction. The STATUS output parameter is output as an ARRAY[1..4] of BYTE data with the value 16#DF80E111:
Example of WRREC STATUS data DFH 80H
E1H 13H
Address
Meaning
STATUS[1] STATUS[2]
STATUS[3] STATUS[4]
Error when writing a data record via PROFINET IO (IEC 61158-6) Error when reading or writing a data record via PROFINET IO (IEC 61158-6) Module-specific error Error code from the table below: The "Signal type" parameter has an invalid value.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
Manual, 12/2016, A5E38896703-AA
61
Parameter data record B.2 Parameter validation error
Error codes
The following table shows the module-specific error codes and their meaning for parameter data record 128.
Table B- 4 Error codes for parameter validation
Error code in STATUS parame- Meaning ter (hexadecimal)
Byte 0 Byte 1 Byte 2 Byte 3
DF 80
B0
00
Data record number unknown
DF 80
B1
00
Length of data record incorrect
DF 80
B2
00
Slot invalid or not accessible
DF 80
E0
01
Wrong version
DF 80
E0
02
Error in the header information
DF 80
E1
00
Parameter invalid: No detailed information
available
DF 80
E1
12
"Reaction to CPU STOP" parameter invalid
DF 80
E1
13
"Signal type" parameter invalid
DF 80
E1
1A
"Input delay" parameter invalid
DF 80
E1
26
"Reference speed" parameter invalid
DF 80
E1
29
"Increments per revolution" parameter invalid
DF 80
E1
50
"Maximum speed" parameter invalid
DF 80
E1
51
"Quick stop time (OFF3)" parameter invalid
DF 80
E1
52
"Ramp stop time (OFF1)" parameter invalid
DF 80
E1
2C
"Signal evaluation" parameter invalid
DF 80
E1
40
"Reference switch input" parameter invalid
DF 80
E1
41
"Measuring input" parameter invalid
DF 80
E1
44
"Drive enable output" parameter invalid
DF 80
E1
45
""Drive ready" input" parameter invalid
DF 80
E1
46
DIQn.2 configured as ready input and drive
enable output
DF 80
E1
47
· DIn.0 configured as reference switch input
and ready input
· DIn.1 configured as measuring input and ready input
Remedy
Enter valid number for data record Enter valid value for data record length. · Check whether module is inserted or removed. · Check assigned values for parameters of the
WRREC instruction.
· Check byte 0. · Enter valid values.
· Check byte 1. · Correct length of parameter blocks. Check all parameter values.
Enter parameter value 000B. Enter valid parameter value. Enter valid parameter value. Enter parameter value from range 1.0 to 20000.0D taking into account the dependencies (Page 60). Enter parameter value from range 1 to 1000000D taking into account the dependencies (Page 60). Enter parameter value from the valid range (Page 60) in each case. Enter parameter value from range 1 to 65535D. Enter parameter value from range 1 to 65535D. Enter valid parameter value. Enter valid parameter value. Enter valid parameter value. Enter valid parameter value. Enter valid parameter value. Configure DIQn.2 either as ready input or as drive enable output. · Configure DIQn.0 either as reference switch input
or as ready input. · Configure DIQn.1 either as measuring input or as
ready input.
Technology Module TM PTO 4 (6ES7553-1AA00-0AB0)
62
Manual, 12/2016, A5E38896703-AA
SIMATIC
S7-1500/ET 200MP Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
_Pr_od_u_ct_o_ve_rv_ie_w_________2_
_W_iri_ng_______________3_
Configuration / address space
4
_Pr_og_ra_m_m_in_g___________5_ _Di_ag_n_os_tic_s____________6_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______7_ _Di_m_en_s_ion_d_ra_w_in_g ________A_
03/2019
A5E46384784-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E46384784-AA 03/2019 Subject to change
Copyright © Siemens AG 2019. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500, ET 200MP automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792). Functions that generally relate to the system are described in this manual.
The information provided in this manual and in the system/function manuals support you in commissioning the system.
Conventions
Please also observe notes marked as follows:
Note A note contains important information on the product, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that can be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
3
Preface
Open Source Software
Open-source software is used in the firmware of the module. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109765637).
Technology Module TM NPU (6ES7556-1AA00-0AB0)
4
Manual, 03/2019, A5E46384784-AA
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 10
2.1
Properties ................................................................................................................................ 10
2.2
Operator controls and display elements .................................................................................12
2.3
Functions ................................................................................................................................13
3 Wiring ................................................................................................................................................... 15
3.1
Terminal assignment...............................................................................................................15
3.2
Block diagram .........................................................................................................................18
4 Configuration / address space ............................................................................................................... 19
4.1
Configuration of the TM NPU..................................................................................................19
4.2
Address space and address assignment................................................................................20
5 Programming ........................................................................................................................................ 22
6 Diagnostics ........................................................................................................................................... 23
6.1
Status and error displays ........................................................................................................23
6.2
Diagnostics alarms..................................................................................................................26
7 Technical specifications ........................................................................................................................ 27
A Dimension drawing ............................................................................................................................... 30
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Technology Module TM NPU (6ES7556-1AA00-0AB0)
6
Manual, 03/2019, A5E46384784-AA
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (https://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (https://support.industry.siemens.com/my/ww/en/CAxOnline).
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
7
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (https://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Technology Module TM NPU (6ES7556-1AA00-0AB0)
8
Manual, 03/2019, A5E46384784-AA
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
9
Product overview
2.1
Properties
Article number
6ES7556-1AA00-0AB0
View of the module
2
Figure 2-1 View of the TM NPU technology module
Technology Module TM NPU (6ES7556-1AA00-0AB0)
10
Manual, 03/2019, A5E46384784-AA
Properties
Product overview 2.1 Properties
Technical properties Processing of neural networks Processing of data from connected sensors Processing of I/O data from the user program Data exchange between CPU and TM NPU via process image USB 3.1 port, type A
Table 2- 1 Version dependencies of the module functions
Function
Processing of neural networks Connection of sensors via USB interface Firmware update Identification data I&M0 to I&M3
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher V1.0.0 or higher
Configuration software STEP 7 (TIA Portal)
as of V15.1 and HSP 0279 as of V15.1 and HSP 0279
as of V15.1 and HSP 0279 as of V15.1 and HSP 0279
SIMATIC memory cards
You download the application-specific files with the help of a SIMATIC memory card to the TM NPU. The application-specific files include the files for the application and the neural networks.
You can use the following SIMATIC memory card:
Article number 6ES7954-8LPxx-0AA0
Capacity 2 GB
Applicable sensors
Sensors can be connected via the integrated USB interface of the TM NPU. For TM NPU with V1.0.0, the USB camera from Intel, type RealSense D435, has been approved.
Accessories
The following accessories are supplied with the module and can also be ordered separately as spare parts:
Supply voltage connection plug
U connector
Universal front door
You can find additional information on accessories and the article numbers in the system manual of the S7-1500, ET 200MP Automation System (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
11
Product overview 2.2 Operator controls and display elements
2.2
Operator controls and display elements
The following figure shows the operator control and display elements of the TM NPU technology module.
RUN, ERROR and MAINTENANCE LEDs Slot for the SIMATIC memory card LINK: LED display for the Ethernet interface port PWR: LED display for external 24 V DC supply voltage USB 3.1 interface Ethernet interface Connection for external 24 V DC supply voltage
Figure 2-2 Operator controls and display elements
Technology Module TM NPU (6ES7556-1AA00-0AB0)
12
Manual, 03/2019, A5E46384784-AA
Product overview 2.3 Functions
2.3
Functions
Ongoing automation requires more and more computing power and the use of technologies with artificial intelligence (AI). The TM NPU technology module comes equipped with a processor with AI capability; this processor enables fast and efficient processing of large amounts of data over neural networks. The AI processor is particularly well suited for image processing by means of so-called Convolutional Neural Networks (CNN).
Field of application
The TM NPU can be used in the S7-1500 automation system and in the ET 200MP distributed I/O system; it enables scalable solutions from the field level over the control and edge level all the way to the business management level and cloud.
Figure 2-3 Automation levels of the TM NPU
Principle of operation
The TM NPU enables the evaluation of input data, such as video and CPU data, through neural networks.
The data of connected sensors (e.g. cameras) as well as data from the CPU user program, is processed at high speed in the TM NPU over neural networks. The TM NPU transmits the processing result via the backplane bus to the CPU which then evaluates the data in the user program.
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
13
Product overview 2.3 Functions
Typical areas of application:
Visual quality check in production plants Pick-and-place applications Image-guided robotic systems
Advantages
Less programming and engineering work Design of flexible and precise production processes
Technology Module TM NPU (6ES7556-1AA00-0AB0)
14
Manual, 03/2019, A5E46384784-AA
Wiring
3.1
Terminal assignment
Introduction
The following plug connectors are located on the bottom of the TM NPU: Connector of external 24 V DC supply voltage (X80) Connector for USB 3.1 interface, type A (X60) Connector for Ethernet interface, RJ 45 (X1P1)
3
USB 3.1 interface Ethernet interface Connector for power supply
Figure 3-1 TM NPU interfaces - Bottom view
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
15
Wiring 3.1 Terminal assignment
24 V DC supply voltage
The following table shows the signal names and the descriptions of the terminal assignment for a 24 V DC supply voltage.
Table 3- 1 Terminal assignment 24 V DC supply voltage
View
Signal name1 1L+ 2L+ 1M 2M
Description 24 V DC 24 V DC (for looping through)2 Ground Ground (for looping through)2
1 1L+ and 2L+ as well as 1M and 2M are bridged internally. 2 Maximum 10 A permitted. The length of the connectable 24 V DC supply line is limited to max. 30 m for EMC reasons.
USB 3.1 interface
The USB 3.1 interface is designed with a type A connection socket. The plug connector does not have a strain relief. You should therefore use a cable tie for strain relief of the USB cable. Use a 2.5 mm wide cable tie for strain relief. The figure below shows the TM NPU with installed cable tie.
Figure 3-2 Strain relief for USB cable
Only connect sensors and cables to the USB interface in which the shield and ground signal are galvanically isolated.
For sensors and cables whose shield and ground (PIN 4) are connected to each other, an incorrect current flows over the cable shield in case the ground of the 24 V DC supply breaks down. The impermissible current flows over the shield spring of the module and the grounded mounting rail.
When you use components in which the shield and ground signal are already connected to each other, the power supply of the TM NPU should come from an electrically isolated 24 V DC supply. Do not connect the ground of this 24 V DC supply to the functional earthing (FE).
Note that the shield and the ground signal in the camera are connected to each other in the recommended USB camera RealSense D435.
Technology Module TM NPU (6ES7556-1AA00-0AB0)
16
Manual, 03/2019, A5E46384784-AA
Wiring 3.1 Terminal assignment
Ethernet interface
The Ethernet interface has been designed as an RJ 45 socket (X1 Port 1). In TM NPU modules with V1.0.0, the interface cannot be used yet.
Reference
You can find additional information on connecting the technology module in the system manual of the S7-1500, ET 200MP Automation System (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
17
Wiring 3.2 Block diagram
3.2
Block diagram
Block diagram
The following figure shows the block diagram of the TM NPU technology module.
X50
X80 24 VDC
IE X1 P1
USB 3.1 X60
Electronics Backplane bus interface Internal supply voltage Slot for memory card Supply voltage connection Ethernet interface USB interface
L+ M RN ER MT LINK PWR
Figure 3-3 Block diagram of the TM NPU technology module
24 VDC supply voltage Ground LED RUN (green) ERROR LED (red) MAINT LED (yellow) LINK LED (green) PWR LED (green)
Technology Module TM NPU (6ES7556-1AA00-0AB0)
18
Manual, 03/2019, A5E46384784-AA
Configuration / address space
4
4.1
Configuration of the TM NPU
Configuration of the TM NPU
The TM NPU can be configured with STEP 7 (TIA Portal) as of V15.1 with HSP 0279. You specify the properties of the module while configuring the module with STEP 7: Size of the address space used in the process image Start address of the inputs Start address of the outputs You can find a configuration example of the TM NPU in the description of the application example. You can obtain the application example from your SIEMENS representative.
Use with fail-safe modules
When you are using TM NPU technology modules as well as fail-safe modules, first insert all fail-safe modules followed by the TM NPU.
Rule: Fail-safe modules must always be inserted starting on the left.
It is important to observe the slot rule because otherwise the fail-safe modules do not receive a PROFIsafe address and do not start.
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
19
Configuration / address space 4.2 Address space and address assignment
4.2
Address space and address assignment
CPU and TM NPU exchange their data via the process image. You specify the size of the process image when configuring the TM NPU.
The TM NPU with V1.0.0 works with a process image of 256 bytes for inputs and 256 bytes for outputs.
Address space and address assignment
In the process image of the inputs and outputs, the first two bytes are always reserved for the control and status information. You can use all other addresses for communication and data transfer with the running application (app).
The figures below show the address space assignment for the configuration with 256 bytes for inputs and 256 bytes for outputs. You can freely assign the start addresses.
Figure 4-1 Address assignment in PII
Figure 4-2 Address assignment in PIQ
Technology Module TM NPU (6ES7556-1AA00-0AB0)
20
Manual, 03/2019, A5E46384784-AA
Configuration / address space 4.2 Address space and address assignment Control and status information The following two figures show the assignment and meaning of the status and control bytes. Status byte 0 provides information regarding the validity of the processed data. If the processed data is invalid, status byte 1 provides additional information on the cause.
Figure 4-3 Status bytes in the PII The control bytes 0 and 1 are reserved for a later version of the module.
Figure 4-4 Control bytes in the PIQ
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
21
Programming
5
The application-specific program for the TM NPU consists of multiple program parts that you download to the module memory from a SIMATIC memory card: Application program Neural network
Application program
The application program (app) takes over communication with the module firmware and reads the data from the connected sensors. The app also takes over the data exchange with the neural network.
Neural network
The neural network processes the read data based on a learned AI model and transfers the result to the application program.
Application example
The application example contains two files for two executable programs for object identification with application, neural networks and detailed description. The description supplements the TM NPU manual and covers the following topics: Configuring the TM NPU with STEP 7 (TIA Portal) Downloading the application and the neural networks to the TM NPU Displaying the results on the HMI device or in the watch table Use of function blocks for control of data exchange between CPU and TM NPU Procedure for changing and expanding the programs by customer-specific objects You can obtain the application example and the associated documentation from your SIEMENS representative.
Technology Module TM NPU (6ES7556-1AA00-0AB0)
22
Manual, 03/2019, A5E46384784-AA
Diagnostics
6
6.1
Status and error displays
Introduction
Diagnostics by means of LED display is an initial tool for error localization. To further limit the error, you usually evaluate the display of the CPU, the display of the module status in STEP 7 or the diagnostics buffer of the CPU. The buffer contains plain text information on the error that has occurred. For example, you will find the number of the appropriate error OB there.
LED display
The figure below shows the LED displays of the technology module TM NPU.
RUN (green) ERROR (red) MAINT (yellow) LINK (green) PWR (green)
Figure 6-1 LED display on the technology module
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
23
Diagnostics 6.1 Status and error displays
LED displays RUN/ERROR/MAINT
Table 6- 1 Meaning of the LEDs RUN / ERROR / MAINT
RUN Off
Flashes On On
Flashes
LEDs ERROR
Off
Off Off Flashes
Flashes
Meaning
Remedy
MAINT Off
No or too little supply voltage via backplane · bus.
·
Switch on the CPU or IM and/or the system power supply modules.
Check that the U connectors are inserted.
· Check whether too many modules are inserted.
The technology module starts and waits
---
Off until the valid parameter assignment is set.
Parameter assignment of the technology --Off module is valid.
Module error, e.g. no supply voltage
Check the supply voltage.
Off Firmware update running.
---
Communication between AI-capable processor and backplane bus is faulty.
· Switch the supply voltage off and on again.
· Switch off the supply voltage, download files for the application and neural network, switch on supply voltage again.
Hardware or firmware defective. Flashes
Replace the technology module.
PWR LED display
Table 6- 2 Meaning of the PWR LED display
LED PWR Off On
Meaning External supply voltage too low or missing.
External supply voltage is present and OK.
Remedy Check the external supply voltage.
---
Technology Module TM NPU (6ES7556-1AA00-0AB0)
24
Manual, 03/2019, A5E46384784-AA
Diagnostics 6.1 Status and error displays
LINK LED display
Table 6- 3 Meaning of the LINK LED display
LINK LED
Off
Flashes three times in the interval
Flashes four times in the interval
Flashes five times in the interval
Meaning No data exchange with the application.
Module downloads the file with the application.
Module is in data exchange mode.
Module downloads the file for the neural network.
Remedy Downloading the files for the application and neural network. ---
---
---
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
25
Diagnostics 6.2 Diagnostics alarms
6.2
Diagnostics alarms
Diagnostics alarms
A diagnostic interrupt is generated and the ERROR LED flashes on the module for each diagnostics event. You can read out the diagnostics alarms, for example, in the diagnostics buffer of the CPU. You can analyze the error code with the user program.
Table 6- 4 Diagnostics alarms, their meaning and corrective measures
Diagnostics alarm
Parameter assignment error
Error code 10H
No load voltage
11H
Communication error
13H
Channel/component tem- 1FH porarily not available
Meaning The module cannot evaluate parameters for the channel. Incorrect parameter assignment. External supply voltage of the module is missing. Firmware update running.
Communication error due to interrupted data connection between the AIcapable processor and the backplane bus.
Corrective measures Correct the parameter assignment.
Connect external supply voltage to module/channel. Wait for completion of the firmware update. · Download the data for the applica-
tion and neural networks. · Switch the external supply voltage
off and on again.
Diagnostic interrupt
For an incoming or outgoing event, the module triggers a diagnostics interrupt if this is configured accordingly in STEP 7 (TIA Portal). The CPU interrupts user program execution and executes the diagnostic interrupt OB. The event that triggered the interrupt is entered in the start information of the diagnostic interrupt OB.
The module generates a diagnostic interrupt at the following event:
Parameter assignment error
Missing supply voltage
You can find detailed information on the event in the organization block with the "RALRM" instruction (read additional interrupt info) and in the STEP 7 online help.
Technology Module TM NPU (6ES7556-1AA00-0AB0)
26
Manual, 03/2019, A5E46384784-AA
Technical specifications
7
Technical specifications TM NPU
The following table shows the technical specifications as of 03/2019. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/ww/en/pv/6ES7556-1AA00-0AB0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version · FW update possible
Product function · I&M data
· Artificial intelligence/processing of neural networks
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
Installation type/mounting Mounting position Rail mounting Control cabinet installation
Supply voltage Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection Short-circuit protection
Input current Current consumption (rated value) Current consumption, max.
6ES7556-1AA00-0AB0
TM NPU 01 V1.0 Yes
Yes Yes
STEP 7 V15.1 or higher
- / -
- / -
horizontal set up Yes Yes
24 V 19.2 V 28.8 V Yes Yes
0.35 A; 24 V input voltage, USB load of 800 mA 0.5 A
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
27
Technical specifications
Article number Power
Power available from the backplane bus Power consumption from the backplane bus (balanced) Power loss Power loss, typ. Processor Processor type Address area Address space per module · Inputs
· Outputs
Interfaces Number of Ethernet interfaces Number of USB interfaces Ethernet interface USB port SD card slot
1. Interface Interface types
· Number of ports
· integrated switch
· RJ 45 (Ethernet)
2. Interface Interface type Isolated
Interface types · Number of ports
· USB
· Output current of the interface, max. USB port
· USB specification
· Design of the USB ports Web server
· supported Interrupts/diagnostics/status information
Status indicator Alarms Diagnostics function
6ES7556-1AA00-0AB0
0.65 W 1.1 W
3.3 W
2x LEON processor with 700 MHz
254 byte; +2 bytes QI and application-specific status bytes 254 byte
1 1 Yes Yes Yes
1 No Yes
USB No
1 Yes 900 mA
USB 3.1 USB type A socket
No
Yes No Yes
Technology Module TM NPU (6ES7556-1AA00-0AB0)
28
Manual, 03/2019, A5E46384784-AA
Technical specifications
Article number Diagnostics indication LED
· RUN LED
· ERROR LED
· MAINT LED
· Monitoring of the supply voltage (PWRLED)
Permissible potential difference between different circuits
Isolation Isolation tested with
Ambient conditions Ambient temperature during operation
· horizontal installation, min.
· horizontal installation, max. Decentralized operation
to SIMATIC S7-300 to SIMATIC S7-1500 to standard PROFIBUS master to standard PROFINET controller Dimensions Width Height Depth Weights Weight, approx.
6ES7556-1AA00-0AB0
Yes Yes Yes Yes
Safety extra low voltage SELV
707 V DC between USB load voltage and backplane bus (type test); 1 500 V AC between Ethernet and functional ground (type test)
0 °C 40 °C
Yes Yes No Yes
35 mm 147 mm 129 mm
290 g
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
29
Dimension drawing
A
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Dimensional drawings of the TM NPU technology module
Figure A-1 Dimensional drawing of the TM NPU technology module, front and side views
Technology Module TM NPU (6ES7556-1AA00-0AB0)
30
Manual, 03/2019, A5E46384784-AA
Dimension drawing
Figure A-2 Dimensional drawing of the TM NPU technology module, side view with open front cover
Technology Module TM NPU (6ES7556-1AA00-0AB0)
Manual, 03/2019, A5E46384784-AA
31
SIWAREX WP521/WP522
Weighing systems Electronic Weighing System SIWAREX WP521/WP522
Manual
_Fo_re_w_or_d_____________1_ _Do_c_um_e_n_tat_io_n _gu_id_e_______2_ _Pr_od_u_ct_o_ve_rv_ie_w_________3_ _In_sta_ll_at_ion_a_n_d _co_nn_e_ct_io_n ____4_ _Co_m_m_is_si_on_in_g__________5_ _Sfuc_nac_lteio_pna_sra_m_e_te_rs_a_nd_______6_ _Al_ar_m_lo_gg_in_g___________7_ _Co_m_m_a_nd_s____________8_ _CSIo_Mm_AmT_uIC_ni_cSa7_t-io1_n5_0w0_ith________9_ _Co_m_m_u_ni_ca_tio_n_vi_a _M_od_b_us___1_0_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns_____1_1_ _Ac_c_es_so_ri_es___________1_2_ _Ap_p_en_d_ix_____________A_
04/2016
A5E36695225A
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Process Industries and Drives Postfach 48 48 90026 NÜRNBERG GERMANY
Document order number: A5E36695225A 04/2016 Subject to change
Copyright © Siemens AG 2016. All rights reserved
Table of contents
1 Foreword ................................................................................................................................................ 9
1.1
Purpose of the manual..............................................................................................................9
1.2
Conventions ..............................................................................................................................9
1.3
Security messages....................................................................................................................9
1.4
Industrial Security .....................................................................................................................9
2 Documentation guide ............................................................................................................................ 11
3 Product overview .................................................................................................................................. 13
3.1
Properties ................................................................................................................................ 13
3.2
Area of application ..................................................................................................................15
3.3
System integration in SIMATIC...............................................................................................16
3.4
Customer benefits...................................................................................................................16
3.5
Product package .....................................................................................................................17
3.6
Overview of the functions .......................................................................................................17
3.7 3.7.1 3.7.2
Overview of configuration options...........................................................................................18 Configuration with the PC .......................................................................................................18 Configuration via the Modbus interface ..................................................................................19
4 Installation and connection .................................................................................................................... 21
4.1
Installation guideline ...............................................................................................................21
4.2
Pin assignment .......................................................................................................................21
4.3
Connecting the load cells........................................................................................................24
4.4
Shield connection....................................................................................................................27
4.5
Supply voltage L+/M ...............................................................................................................28
4.6
Digital inputs DI0, DI1 and DI2 ...............................................................................................29
4.7
Digital outputs DQ0, DQ1, DQ2 and DQ3 ..............................................................................30
4.8
Connection of RS485 serial interface .....................................................................................30
4.9
Connection of Siebert display via RS485 ...............................................................................31
4.10
Connection of the Ethernet interface ......................................................................................31
5 Commissioning ..................................................................................................................................... 35
5.1
Basic tasks ..............................................................................................................................35
5.2
Ex-works settings of the operating switch ..............................................................................36
5.3
Factory-set parameters...........................................................................................................38
5.4
Commissioning tools...............................................................................................................38
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
3
Table of contents
5.5 5.5.1 5.5.2 5.5.3 5.5.4 5.5.5 5.5.6 5.5.7 5.5.8 5.5.9 5.5.10
Start-up with the operator panel and the Ready-for-use software ......................................... 38 Restriction of access .............................................................................................................. 38 Start........................................................................................................................................ 39 Specification of basic values 1............................................................................................... 40 Specification of basic values 2............................................................................................... 41 Selecting the calibration method............................................................................................ 41 Defining the calibration weights ............................................................................................. 42 Setting calibration points ........................................................................................................ 43 Calibrating the scale automatically ........................................................................................ 44 Performing the automatic calibration ..................................................................................... 45 Checking the scale following calibration ................................................................................ 45
5.6 5.6.1 5.6.2 5.6.3 5.6.4 5.6.5
Service with the SIWATOOL program ................................................................................... 46 General .................................................................................................................................. 46 Windows and functions of SIWATOOL .................................................................................. 47 Available help options ............................................................................................................ 49 Recording scale traces .......................................................................................................... 49 Offline parameter assignment ................................................................................................ 50
5.7 5.7.1 5.7.2 5.7.3 5.7.4 5.7.5 5.7.6 5.7.6.1 5.7.6.2 5.7.6.3 5.7.6.4 5.7.7 5.7.8
Commissioning with SIWATOOL ........................................................................................... 51 IP address for SIWAREX ....................................................................................................... 51 Entering a known SIWAREX IP address ............................................................................... 51 Determining an unknown IP address ..................................................................................... 52 Setting up a network .............................................................................................................. 52 Start........................................................................................................................................ 52 Calibration method ................................................................................................................. 53 Selecting the calibration method............................................................................................ 53 Calibration with calibration weight.......................................................................................... 54 Automatic calibration (= calibration without calibration weight) ............................................. 58 Receive all data...................................................................................................................... 63 Firmware update with SIWATOOL......................................................................................... 64 Firmware update with SIMATIC TIA Portal ............................................................................ 65
6 Scale parameters and functions ............................................................................................................ 67
6.1
Parameters and functions ...................................................................................................... 67
6.2
DR 2 command code ............................................................................................................. 67
6.3 6.3.1 6.3.2 6.3.3 6.3.4 6.3.5 6.3.6 6.3.7 6.3.8 6.3.9 6.3.10 6.3.11 6.3.12 6.3.13 6.3.14 6.3.15
DR 3 calibration parameters .................................................................................................. 67 Overview ................................................................................................................................ 67 Scale name ............................................................................................................................ 71 Unit of weight ......................................................................................................................... 71 Gross identifier ....................................................................................................................... 71 Minimum weighing range ....................................................................................................... 72 Maximum weighing range ...................................................................................................... 72 Calibration weights 0, 1, 2 and calibration digits 0, 1, 2 ........................................................ 72 Scale interval.......................................................................................................................... 72 Automatic zero adjustment .................................................................................................... 72 Filling/emptying mode ............................................................................................................ 72 Weight simulation................................................................................................................... 72 Filter sequence....................................................................................................................... 73 Maximum tare load ................................................................................................................ 73 Maximum negative zero setting limit (semi-automatically) .................................................... 73 Maximum positive zero setting limit (semi-automatically)...................................................... 73
SIWAREX WP521/WP522
4
Manual, 04/2016, A5E36695225A
Table of contents
6.3.16 6.3.17 6.3.18 6.3.19 6.3.20 6.3.21
6.4 6.4.1 6.4.2
6.5 6.5.1 6.5.2
6.6 6.6.1 6.6.2 6.6.3 6.6.4 6.6.5
6.7 6.7.1 6.7.2 6.7.3 6.7.4 6.7.5
6.8 6.8.1 6.8.2 6.8.3 6.8.4 6.8.5 6.8.6 6.8.7 6.8.8
6.9
6.10
6.11 6.11.1 6.11.2 6.11.3 6.11.4 6.11.5 6.11.6 6.11.7 6.11.8 6.11.9 6.11.10
6.12 6.12.1
Standstill range .......................................................................................................................74 Standstill time..........................................................................................................................74 Standstill waiting time .............................................................................................................74 Low-pass filter limit frequency ................................................................................................75 Low-pass filter number............................................................................................................75 Period the average value filter ................................................................................................76
Performing calibration .............................................................................................................76 Calibration with calibration weights.........................................................................................76 Automatic calibration...............................................................................................................79
DR 4 output the calculated adjustment digits .........................................................................79 Overview .................................................................................................................................79 Calibration digits 0, 1, 2 (calculated).......................................................................................80
DR 5 zeroing memory .............................................................................................................80 Overview .................................................................................................................................80 Effective tare weight - from specification ................................................................................81 Effective tare weight (semi-automatic)....................................................................................81 Current zero tracking weight...................................................................................................82 Dead load................................................................................................................................82
DR 6 limit settings ...................................................................................................................82 Overview .................................................................................................................................82 Basis of limits ..........................................................................................................................84 Limit value 1 ON, limit value 2 ON, limit value 1 OFF, limit value 2 OFF ...............................84 Limit "Empty" ON ....................................................................................................................85 Delay time for limits.................................................................................................................85
DR 7 interface parameters......................................................................................................86 Overview .................................................................................................................................86 Assignment for digital input 0, 1, 2..........................................................................................88 Input filtering (hardware setting) .............................................................................................88 Assignment for digital output 0, 1, 2, 3 ...................................................................................89 Reaction of the digital outputs to fault or CPU stop................................................................89 Replacement value for DQ 0, 1, 2, 3 ......................................................................................89 Trace recording cycle..............................................................................................................90 Trace storage method.............................................................................................................90
DR 8 date and time .................................................................................................................90
DR 9 module information ........................................................................................................91
DR 10 load cell parameters ....................................................................................................92 Overview .................................................................................................................................92 50/60 Hz toggling ....................................................................................................................94 Number of support points .......................................................................................................94 Load cell characteristic value..................................................................................................94 Rated load of a load cell .........................................................................................................94 Overload limit ..........................................................................................................................94 Impedance reference value ....................................................................................................95 Permissible impedance deviation ...........................................................................................95 Load cell manufacturer ...........................................................................................................95 Load cell order number ...........................................................................................................95
DR 11 channel status/channel activation................................................................................95 Overview .................................................................................................................................95
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
5
Table of contents
6.12.2
6.13 6.13.1 6.13.2 6.13.3 6.13.4 6.13.5 6.13.6 6.13.7 6.13.8 6.13.9
6.14 6.14.1 6.14.2 6.14.3 6.14.4 6.14.5 6.14.6 6.14.7 6.14.8 6.14.9
6.15 6.15.1 6.15.2
6.16 6.16.1 6.16.2
6.17 6.17.1 6.17.2
6.18 6.18.1 6.18.2
6.19 6.19.1 6.19.2 6.19.3 6.19.4 6.19.5 6.19.6 6.19.7 6.19.8
6.20 6.20.1 6.20.2 6.20.3 6.20.4 6.20.5
Channel status / channel activation ....................................................................................... 96
DR 12 Ethernet parameters ................................................................................................... 97 Overview ................................................................................................................................ 97 Device MAC address ............................................................................................................. 99 IP address .............................................................................................................................. 99 Subnet mask .......................................................................................................................... 99 Gateway ............................................................................................................................... 100 Device name ........................................................................................................................ 100 Unit identifier channel 1 or channel 2................................................................................... 100 Modbus TCP port number channel 1 or channel 2 .............................................................. 100 Byte swap............................................................................................................................. 100
DR 13 RS485 parameters.................................................................................................... 101 Overview .............................................................................................................................. 101 RS485 protocol .................................................................................................................... 102 RS485 baud rate .................................................................................................................. 103 RS485 character parity ........................................................................................................ 103 RS485 termination ............................................................................................................... 103 Byte swap............................................................................................................................. 103 RS485 Modbus address ...................................................................................................... 103 Decimal place for Siebert indicator ...................................................................................... 103 Modbus RTU message frame delay .................................................................................... 104
DR 14 SIMATIC interface parameters ................................................................................. 104 Overview .............................................................................................................................. 104 Selection of process value 1, 2 ............................................................................................ 105
DR 15 tare default values .................................................................................................... 106 Overview .............................................................................................................................. 106 Default tare weight ............................................................................................................... 106
DR 16 simulation value ........................................................................................................ 107 Overview .............................................................................................................................. 107 Weight simulation specification ............................................................................................ 107
DR 18 digital output control specifications ........................................................................... 108 Overview .............................................................................................................................. 108 Specification for digital output 0, 1, 2, 3 ............................................................................... 109
DR 30 current process values.............................................................................................. 109 Overview .............................................................................................................................. 109 Gross process weight .......................................................................................................... 112 Net process weight .............................................................................................................. 112 Tare process weight............................................................................................................. 113 Gross / net weight ................................................................................................................ 113 Gross / net weight with increased resolution (x 10) ............................................................. 113 Gross process weight 2 ....................................................................................................... 113 Refresh counter for process values ..................................................................................... 113
DR 31 advanced current process values ............................................................................. 113 Overview .............................................................................................................................. 113 Unfiltered digit value ............................................................................................................ 115 Filtered digit value after the first filter ................................................................................... 115 Digits filtered ........................................................................................................................ 115 Current status of input 0, 1, 2............................................................................................... 115
SIWAREX WP521/WP522
6
Manual, 04/2016, A5E36695225A
Table of contents
6.20.6 6.20.7 6.20.8 6.20.9
Current status of digital output 0, 1, 2, 3...............................................................................115 Current status of DIP switch .................................................................................................115 Refresh counter for process values ......................................................................................116 Current load cell signal in mV ...............................................................................................116
6.21
DR 32 alarm display..............................................................................................................116
6.22 6.22.1 6.22.2
DR 34 ASCII main display value...........................................................................................119 Overview ...............................................................................................................................119 Content of main display as ASCII string ...............................................................................120
6.23
DR 48 date and time 2 (for Modbus) ....................................................................................120
7 Alarm logging...................................................................................................................................... 123
7.1
Message types......................................................................................................................123
7.2
Message paths......................................................................................................................123
7.3
Evaluating messages with the help of SIWATOOL ..............................................................124
7.4
Detecting messages with the help of FB SIWA ....................................................................124
7.5 7.5.1 7.5.2 7.5.3 7.5.4 7.5.5
Message list ..........................................................................................................................124 Introduction ...........................................................................................................................124 System status message list ..................................................................................................124 Technology error message list..............................................................................................125 Message list data and operating errors with additional information .....................................125 Messages by LEDs on the module .......................................................................................130
8 Commands ......................................................................................................................................... 133
8.1
Overview ...............................................................................................................................133
8.2
Command lists ......................................................................................................................133
8.3
Command groups of SIWAREX WP521/WP522 ..................................................................135
9 Communication with SIMATIC S7-1500............................................................................................... 137
9.1
General information ..............................................................................................................137
9.2
System environment .............................................................................................................137
9.3
Memory requirements for SIWAREX communication...........................................................138
9.4
Creating the hardware configuration.....................................................................................138
9.5
Diagnostic messages............................................................................................................141
9.6
Triggering a hardware interrupt ............................................................................................142
9.7
Ethernet approvals................................................................................................................143
9.8
Calling of function block ........................................................................................................144
9.9
Working with the function block ............................................................................................147
9.10
I/O interface of function block ...............................................................................................149
9.11
Error codes of function block ................................................................................................149
10 Communication via Modbus ................................................................................................................ 151
10.1
General information ..............................................................................................................151
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
7
Table of contents
10.2
Special feature of Modbus TCP/IP connection to SIWAREX WP522 ................................. 151
10.3
Principle of data transmission .............................................................................................. 151
10.4
Data record concept............................................................................................................. 153
10.5
Command mailboxes ........................................................................................................... 153
10.6
Reading registers ................................................................................................................. 153
10.7
Writing registers ................................................................................................................... 154
11 Technical specifications .......................................................................................................................157
11.1
Technical specifications ....................................................................................................... 157
11.2
Electrical, EMC and climatic requirements .......................................................................... 161
11.3
Approvals ............................................................................................................................. 166
12 Accessories .........................................................................................................................................169
12.1
Configuration package ......................................................................................................... 169
A Appendix .............................................................................................................................................171
A.1
Technical support................................................................................................................. 171
A.2
ESD Guidelines.................................................................................................................... 172
A.3
List of abbreviations ............................................................................................................. 173
Index ...................................................................................................................................................175
SIWAREX WP521/WP522
8
Manual, 04/2016, A5E36695225A
Foreword
1
1.1
Purpose of the manual
This manual contains module-specific information about the wiring, diagnostic and technical specifications of the technology module.
Information about the design and commissioning of the S7-1500 or the ET 200MP in general can be found in the system manual for S7-1500 or ET 200MP.
1.2
Conventions
Observe the notes labeled as follows:
Note
A note contains important information about the product described in the documentation, about handling the product, or about a part of the documentation to which special attention should be given.
1.3
Security messages
Siemens provides automation and drive products with industrial security functions that support the secure operation of plants or machines. They are an important component in a holistic industrial security concept. With this in mind, our products undergo continuous development. We therefore recommend that you keep yourself informed with respect to our product updates. Detailed technical information can be found at: http://support.automation.siemens.com.
To ensure the secure operation of a plant or machine it is also necessary to take suitable preventive action (e.g. cell protection concept) and to integrate the automation and drive components into a state-of-the-art holistic industrial security concept for the entire plant or machine. Products used from other manufacturers should also be taken into account here. You will find further information under: http://www.siemens.com/industrialsecurity.
1.4
Industrial Security
SIWAREX WP521/WP522 is intended for use in secure networks (closed) and is not protected against unauthorized data traffic.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
9
Foreword 1.4 Industrial Security
Devices connected to a company network or to the Internet must be protected against unauthorized access, e.g. through application of firewalls and network segmenting. For more information about Industrial Security, visit (http://www.siemens.com/industrialsecurity)
SIWAREX WP521/WP522
10
Manual, 04/2016, A5E36695225A
Documentation guide
2
Introduction
The documentation for the SIMATIC and SIWAREX is modular and includes topics related to your automation system.
The complete documentation for the S7-1500 and ET 200MP systems consists of the respective system manuals, function manuals and device manuals.
You are also supported by the information system from STEP 7 (TIA Portal) during the configuration and programming of your automation system.
Overview of the documentation for the SIWAREX WP 521/WP522 technology module
The following table shows documents that you need to use the SIWAREX WP521/WP522 technology module.
Table 2- 1 Documentation for the SIWAREX WP521/WP522 technology module
Topic System description
Designing interference-free controllers
Weighing with SIWAREX WP521/WP522
Documentation
Most important contents
S7-1500 Automation System (https://support.industry.siemens.com/cs/docu ment/59191792) System Manual
· Application planning · Assembly · Connecting
System manual
· Commissioning
Distributed I/O System ET 200MP
(http://support.automation.siemens.com/WW/vi
ew/de/45604716)
· Basics
Designing interference-free controllers (https://support.industry.siemens.com/cs/docu ment/59193566/simatic-s7-1500-et-200mp-et-
· Electromagnetic compatibility
200sp-et-200al-designing-interference-free- · Lightning protection
controllers?dti=0&lc=en-WW) Function Manual
· Module design
SIWAREX WP521/WP522 Electronic Weighing System Device Manual
·
Assembly
· Connecting
· Weighing functions
· Communication
· Technical specifications
SIMATIC manuals
All current manuals for the SIMATIC products are available for download free of charge from the Internet (https://support.industry.siemens.com).
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
11
Documentation guide
SIWAREX WP521/WP522
12
Manual, 04/2016, A5E36695225A
Product overview
3.1
Properties
Article number
SIWAREX WP521 - 7MH4 980-1AA01 SIWAREX WP522 - 7MH4 980-2AA01
3
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
13
Product overview 3.1 Properties
View of the modules
Image 3-1 SIWAREX WP521/WP522 module 14
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Properties
Product overview 3.2 Area of application
The TM SIWAREX WP521/WP522 technology module has the following features: Technical properties Width: 35 mm WP521 one weighing channel, WP522 two weighing channels Interfaces:
Supply voltage L+ Load cell connection for strain gauge load cell in 6 or 4-wire system (per channel), 1 to
4 mV/V Digital input signals DI0, DI1 and DI2 (per channel) Digital output signals DQ0, DQ1, DQ2, DQ3 (per channel) RS485 with Modbus RTU or for connecting the remote display (per channel) Ethernet interface with SIWATOOL protocol and Modbus TCP/IP (once for each
channel) Channel-by-channel monitoring of load cells for wire breakage Hardware interrupts can be configured channel by channel Input filter for suppressing interference with programmable digital inputs Supported functions:
Scale calibration with weights or automatically Signal filtering with average value filter and low-pass filter 3 limits Tare Set to zero Trace (signal recording) Firmware update Identification data I&M Commissioning with SIWATOOL (service tool for PC)
3.2
Area of application
The electronic weighing system described here is the optimal solution everywhere signals from weighing or force sensors are to be acquired and processed. SIWAREX WP521/WP522 offers high accuracy as an electronic weighing system.
The applications for which the SIWAREX WP521/WP522 is equipped include the following:
Non-automatic weighing to OIML R76 (not legal-for-trade)
Level monitoring of silos and bunkers
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
15
Product overview 3.3 System integration in SIMATIC
Platform scale Scales in hazardous areas (with SIWAREX IS Ex interface)
3.3
System integration in SIMATIC
The electronic weighing system described here is a technology module for the SIMATIC S71500. It can be freely configured within the automation solution, including the weighing application. An optimal solutions can be found for a variety of systems with the right combination of SIMATIC modules. Fast customized and industry specific solutions can be developed using the configuration package and the "Ready for use" application for SIMATIC.
3.4
16
Image 3-2 Figure SIWAREX WP521/WP522 installed next to SIMATIC 1500-CPU
Customer benefits
The electronic weighing system described here features significant advantages: Uniform design technology and consistent communication in SIMATIC S7-1500 Configuration via an HMI panel or PC Standardized configuration option in the SIMATIC TIA Portal Weight measurement with a resolution of 4 million parts High accuracy 0.05 % High measuring rate of 100/120 Hz (effective interference suppression) Monitoring of limits
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Product overview 3.5 Product package
Flexible adaptation to different requirements Easy adjustment of the scales using the SIWATOOL program Automatic adjustment without calibration weights possible Replacement of module without renewed scale calibration Use in Ex Zone 2 / ATEX approval Intrinsically safe load cell for use in hazardous area Zone 1 (SIWAREX IS option) Diagnostic functions
3.5
Product package
The product package of the SIWAREX WP521/WP522 includes:
SIWAREX WP521/WP522 module
The following components are supplied with the technology module and can also be ordered separately as spare parts:
Shield bracket
Shield terminal
Power supply element
Labeling strip
U-connector
Other components The following components must be ordered separately: Front connectors, including potential jumpers and cable ties Front connector 35 mm with push-in system
Note
We recommend using the SIWAREX WP521/WP522 configuration package to configure the SIWAREX WP521/WP522 electronic weighing system. The configuration package is not included in the product package of the module: Accessories (Page 169).
3.6
Overview of the functions
The primary task of the electronic weighing system is measuring and recording the current weight value. The integration in SIMATIC provides the possibility to process the weight value directly in the PLC (Programmable Logic Controller).
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
17
Product overview 3.7 Overview of configuration options
The SIWAREX WP521 / WP522 is calibrated ex factory. This enables both automatic adjustment of the scale without calibration weights and modules to be exchanged without having to re-adjust the scale.
The Ethernet interface enables connection of a PC for configuring the electronic weighing system or the connection of automation systems of any kind (Modbus TCP / IP).
The SIWAREX WP521/WP522 electronic weighing system can also be used in hazardous areas (Zone 2). The load cell is powered intrinsically safe for Zone 1 applications via the optional Ex interface, SIWAREX IS.
The SIWAREX WP521/WP522 can also be used independent of the automation system in stand-alone mode. This scenarios provide numerous configuration options.
The user himself can determine the HMI device. However, the HMI device must support Modbus RTU or TCP/IP. A custom operating style can be implemented.
The SIWAREX WP521/WP522 can be controlled remotely without a separate, local HMI device. An HMI device can be used for multiple scales. The configuration possibilities are almost unlimited.
3.7
Overview of configuration options
3.7.1
Configuration with the PC
The scale parameters can be quickly adjusted using the "SIWATOOL" PC configuration software, which offers Windows convenience.
The program enables you to commission the scale without knowledge of automation technology. If service is required, the processes in the scale can be analyzed and tested independent of the automation system or operator panel using the PC. Reading the diagnostic buffer from the SIWAREX module is very helpful when analyzing events.
The following figure shows the layout of the individual program windows.
SIWAREX WP521/WP522
18
Manual, 04/2016, A5E36695225A
Product overview 3.7 Overview of configuration options
3.7.2
Image 3-3 Overview of the SIWATOOL WP522 program window
SIWATOOL not only provides support for adjusting the scale, but also in the analysis of the diagnostics buffer, which can be saved together with the parameters after reading the module. The display of the current scale state can be adjusted. The program can be switched between several languages.
Configuration via the Modbus interface
Alternatively, the configuration can also be performed on a SIMATIC panel, which is connected directly to the SIWAREX module. In this case, the SIWAREX module behaves as a Modbus slave. The configuration software project package includes loadable HMI software for a SIMATIC Panel TP700 Comfort. In general, all SIMATIC HMI Comfort Panels can be used for direct Modbus communication. The use of SIMATIC HMI Basic Panels is currently not possible. A direct connection between SIMATIC HMI Panels and SIWAREX WP521/WP522 via Modbus RTU is not approved. The parameters for the SIWAREX module can also be edited on an external system, a PC for example, and transferred to the electronic weighing system via Modbus RTU or TCP/IP. You can find a detailed description of the mapping of the holding register in section Scale parameters and functions. (Page 67)
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
19
Product overview 3.7 Overview of configuration options
SIWAREX WP521/WP522
20
Manual, 04/2016, A5E36695225A
Installation and connection
4
4.1
Installation guideline
When assembling the SIMATIC components with the electronic weighing system described herein, you must adhere to the guidelines for setup, assembly and wiring the SIMATIC S71500 (see documentation tree).
This manual also describes the specific aspects of assembly and wiring the electronic weighing system.
4.2
Pin assignment
Connect the load cells, the digital input and digital output signals to the 40-pin front connector of the technology module. In addition, connect the 4-pin feed element to the supply voltage to supply the module and digital outputs.
The next two sections detail the pin assignment for the front connector and the power supply element.
You can find information on wiring front connectors, creating a cable shield, etc. in the in section "Connecting" section of the Automation System S7-1500 (https://support.industry.siemens.com) system manual and Distributed I/O System ET 200MP (https://support.industry.siemens.com) system manual.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
21
Installation and connection 4.2 Pin assignment
Pin assignment for the front connector
The following tables show the pin assignment of the front connector.
Load cell EXC+
Load cell EXC-
Load cell SIG+
Load cell SIG-
Load cell SEN+
Load cell SEN-
RS485, D+
RS485, D-
DQ.L+ (24V DQ)
DQ.M (0V DQ)
DQ.0
DQ.1
DQ.2
DQ.3
DI.0
DI.1
DI.2
DI.M (0V DI)
L+ (if jumpered)
M (if jumpered)
WP521 ST
1
21
2
22
3
23
4
24
5
25
6
26
7
27
8
28
9
29
10 30
11 31 12 32 13 33 14 34 15 35 16 36 17 37 18 38
(Pins 21 ... 38 unusable)
19 39 L+ (of 41, 42)
20 40 M (of 43, 44)
44 1 2
L+
44 3 4
M
Pins 19 and 39 jumperable
Pins 20 and 40 jumperable
Pin assignment of WP521
SIWAREX WP521/WP522
22
Manual, 04/2016, A5E36695225A
Load cell EXC+
Load cell EXC-
Load cell SIG+
Load cell SIG-
Load cell SEN+
Load cell SEN-
RS485, D+
RS485, D-
DQ.L+ (24V DQ)
DQ.M (0V DQ)
DQ.0
DQ.1
DQ.2
DQ.3
DI.0
DI.1
DI.2
DI.M (0V DI)
L+ (if jumpered)
M (if jumpered)
WP522 ST
1
21
2
22
3
23
4
24
5
25
6
26
7
27
8
28
9
29
10
30
11
31
12
32
13
33
14
34
15 35
16
36
17
37
18
38
19
39 L+ (of 41, 42)
20
40 M (of 43, 44)
44 1 2
L+
44 3 4
M
Installation and connection 4.2 Pin assignment
Pins 9 and 29 jumperable Pins 10 and 30 jumperable
Pins 19 and 39 jumperable Pins 20 and 40 jumperable
Pin assignment of WP522
Pin assignment for the power supply element
The power supply element is plugged onto the front connector and serves to supply the technology module. For this purpose, you need to connect the supply voltage to terminal 41 (L+) and terminal 44 (M). Use terminal 42 (L+) and terminal 43 (M) to loop the supply voltage to the next module.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
23
Installation and connection 4.3 Connecting the load cells
Image 4-1 Power supply element
L+
DC 24V supply voltage
M
Ground for supply voltage
4.3
Connecting the load cells
Overview
Pickups equipped with strain gauges (EMS full bridge) can be connected to the electronic weighing system SIWAREX WP521/WP522 to meet the following requirements.
Identifier 1.... 4 mV/V
A supply voltage of 5 V is permitted
The power supply for the load cells is 4.85 V.
To test the maximum possible number of load cells that can be connected to a WP521/WP522, the following condition must be met:
Scale operation without Ex interface: (input resistance of load cell) / (number of load cells) > 40 Ohm
Weighing mode with EX interface: (input resistance of load cell) / (number of load cells) > 50 Ohm
SIWAREX WP521/WP522
24
Manual, 04/2016, A5E36695225A
Installation and connection 4.3 Connecting the load cells
Connection with 4-wire or 6-wire system
The connection options are shown in the following two figures.
Image 4-2 Connection of strain gauge load cell with 4-wire system
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
25
Installation and connection 4.3 Connecting the load cells
Image 4-3 Connection of load cell with 6-wire system
Rules
Observe the following rules when connecting analog (strain gauge) load cells:
1. The use of a junction box (SIWAREX JB junction box) is required when more than one load cell is connected (the load cells must be connected in parallel). If the distance of a load cell to the SIWAREX WP521/WP522 or terminal box is greater than the available length of the load cell cable, the SIWAREX EB extension box should be used.
2. The cable shield is always applied at the cable gland of the junction box (SIWAREX JB) or the extension box. If there is a risk of equipotential bonding through the cable shield, connect a equipotential equalization conductor parallel to the load cell cable.
SIWAREX WP521/WP522
26
Manual, 04/2016, A5E36695225A
Installation and connection 4.4 Shield connection
3. Twisted wire pairs that are also shielded are required for the specified cables: Sensor cable (+) and (-) Measuring voltage cable (+) and (-) Supply voltage cable (+) and (-)
Image 4-4 Shielding in the screw gland
We recommended that you use the cables listed in chapter Accessories (Page 169). 4. The shield must be connected to ground in the immediate vicinity of the SIWAREX
WP521/WP522. The maximum distance between the SIWAREX WP521/WP522 and the load cell is applicable when the recommended cables are used.
Table 4- 1
Labeling SigSig+ SenSen+ ExcExc+
Load cell connections on the module
Function Measurement cable load cell Measurement cable load cell Sensor cable load cell Sensor cable load cell + Supply load cell Supply load cell +
4.4
Shield connection
You need to ground the shields of the load cell cables via the shield on the front connector (shield bracket and terminal) ground.
Ensure that the shield support for the shielded cables are correctly assembled. This is the only way to ensure the immunity of the system.
A cable is shielded to attenuate the effects of magnetic, electrical and electromagnetic interference on the cable. Interference on the cable shielding is discharged to the ground through a conductive cable shield bus. To avoid this interference from becoming a source of interference itself, ensure the connection to ground has a low impedance .
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
27
Installation and connection 4.5 Supply voltage L+/M
Only use cables with a braided shield (see recommended cable in the section Accessories (Page 169)). The coverage of the shield should be at least 80%.
Image 4-5 Front connector with a shielded cable and 24V connection
4.5
Supply voltage L+/M
Connect the supply voltage (24 V DC) to terminals L+ and M. An internal protection circuit protects the technology module from reverse polarity of the supply voltage. The technology module monitors whether the supply voltage is connected.
SIWAREX WP521/WP522
28
Manual, 04/2016, A5E36695225A
Installation and connection 4.6 Digital inputs DI0, DI1 and DI2
4.6
Digital inputs DI0, DI1 and DI2
There are three digital inputs per weighing channel available. The digital inputs can be assigned to scale commands per configuration.
CAUTION Unknown assignment of digital inputs
If the assignment of the digital inputs is not known at the time of connection, This may damage parts of the system.
Do not create a connection with the digital inputs before you know the assignment.
The digital inputs are not permanently assigned to commands in the delivery state. The assignment of the digital inputs to commands is made during commissioning by setting parameters of the data record DR7. The digital inputs of the two SIWAREX WP522 scale channels are electrically isolated from each other. Input filter for digital inputs The following values can be specified for the input delay: None 5 ms 10 ms (preset) 15 ms 20 ms 25 ms 30 ms 35 ms 40 ms
Note If you select "No", you must use shielded cables to connect the digital inputs.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
29
Installation and connection 4.7 Digital outputs DQ0, DQ1, DQ2 and DQ3
4.7
Digital outputs DQ0, DQ1, DQ2 and DQ3
There are four digital outputs available per weighing channel. The digital outputs DQ0, DQ1, DQ2, DQ3 may be assigned to the status or messages by the specified parameters. They can also be controlled directly via a SIMATIC program or via DR18.
CAUTION
Unknown assignment of digital outputs
The assignment of the digital outputs is not known at the time of connection. Digital outputs can be active immediately after turning on the power supply. This may damage parts of the system.
Do not create a connection with the digital outputs before you know the assignment of the digital outputs.
The digital outputs have no fixed assignment to process data ex factory. The assignment of the digital inputs to function and the reaction to failure is made during commissioning by setting parameters of the data record DR7.
The digital outputs of the two SIWAREX WP522 scale channels are electrically isolated from each other.
The digital outputs are 24 V sourcing with respect to M and with a nominal load current of 0.5A. They are protected against overload and short-circuit.
Note
Direct connection of relays and contactors is not possible without external wiring. You can find information about the maximum possible operating frequencies and the inductance of the inductive load on the digital outputs in the section Technical specifications (Page 157).
4.8
30
Connection of RS485 serial interface
The following devices can be connected to the serial interface: Display from the Siebert company, type S102 Operator Panels or other HMI devices with RS485 and Modbus protocol RTU Communication partner with Modbus protocol RTU
Table 4- 2 Connection of RS485 serial interface
Labeling EIA-485 D+ EIA-485 D-
Function RS485 data line + for feeding in of bus signal RS485 data line - for feeding in of bus signal
When a SIWAREX WP521/WP522 module forms the end of an RS485 network, the termination of the bus network can be switched per configuration.
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Installation and connection 4.9 Connection of Siebert display via RS485
4.9
Connection of Siebert display via RS485
A Siebert display S102 with the order no. S102-W6/14/0R-000/0B-SM can be connected to the RS485 interface of the weighing module. Connect a 24 V DC supply to the Siebert display, and connect the latter to the RS485 interface of the weighing module as shown in the following diagram.
Image 4-6 Connection of Siebert display S102
The RS485 interface in DR13 is set as follows: RS-485 protocol: SIEBERT Display S102 Baud rate: 9 600 bit/s Character parity: Even The S102 is set as follows:
Table 4- 3 Settings of Siebert display S102
Menu item 1 Interface 9 Station address
t Timeout C F Segment test
Setting 485 01
2 0.0 ----* 8.8.8
Meaning
RS485 interface
Address meaning:
Address Weight value
01
Verifiable weight
02
Total
03
Net
04
Tare
e.g. timeout after 2 seconds
No decimal point
No segment test when switching on
Segment test when switching on
4.10
Connection of the Ethernet interface
An RJ45 connector is used for the connection.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
31
Installation and connection 4.10 Connection of the Ethernet interface
The following devices can be connected to the Ethernet interface: PC service and commissioning program SIWATOOL or Web browser Operator panels or other HMI devices with Ethernet and Modbus protocol TCP/IP Communication partner with Modbus protocol TCP/IP To remove the plug-in connector without a tool (screwdriver), you should ensured that the cable has a plug with sufficiently long release lever, see as an example in the figure below.
Image 4-7 Connection socket for an Ethernet cable
Image 4-8 Ethernet cable connected to module
SIWAREX WP521/WP522
32
Manual, 04/2016, A5E36695225A
Installation and connection 4.10 Connection of the Ethernet interface
Image 4-9 Press the Ethernet cable into the socket Ethernet socket on the bottom of the enclosure, plug with extended release lever
Image 4-10 Ethernet plug with release lever
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
33
Installation and connection 4.10 Connection of the Ethernet interface
SIWAREX WP521/WP522
34
Manual, 04/2016, A5E36695225A
Commissioning
5
5.1
Basic tasks
Commissioning consists mainly of checking the mechanical scale structure, setting parameters, calibration, and verification of the envisaged functionality.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
35
Commissioning 5.2 Ex-works settings of the operating switch
5.2
Ex-works settings of the operating switch
The module has two DIP switches located on the left in the upper part of the enclosure (accessible through the vent). Both switches are in the up position ex factory.
Image 5-1 Switch position in the enclosure
SIWAREX WP521/WP522
36
Manual, 04/2016, A5E36695225A
Commissioning 5.2 Ex-works settings of the operating switch
Switch
Switch
Specifies the operating environment Currently no function
Image 5-2 Switch functions
Switch
Switch position Up Down
Operating environment Integrated in SIMATIC mode Stand-alone mode (without SIMATIC controller)
"Integrated in SIMATIC mode" set.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
37
Commissioning 5.3 Factory-set parameters
Connected to an S7-1500 CPU, stand-alone mode (DIP 1 in lower position) can be useful, because SIWAREX WP521/WP522 then remains fully functional even in the case of a CPU stop and can be operated (e.g. through an HMI device directly connected via Modbus, through a coupled PC or through the digital inputs)
Note
If the switch is set to the lower position while the SIWAREX module is operating with
SIMATIC, the SIWAREX module does not perform a reset when there is a loss of power supply for the SIMATIC CPU.
5.3 5.4
5.5
5.5.1
Factory-set parameters
The electronic weighing system described here is provided with factory-set parameters. The parameters have been provided for a typical 100 kg scale based on three load cells. Parameters which can be entered in % or time are preset in such a way that they provide good results for most applications. A quick start can be carried out with these default parameters (see chapter Start-up with the operator panel and the Ready-for-use software (Page 38)).
Commissioning tools
The following options are available for commissioning the electronic weighing system: Operator Panel SIWATOOL The SIWATOOL program allows you to commission the scale without an Operator Panel and without an automation system. In the event of a fault, additional SIWATOOL diagnostics functions enable fast analysis of the cause.
Start-up with the operator panel and the Ready-for-use software
Restriction of access
Note The example project "Ready-for-use" does not restrict access. If operation of the scale/system is implemented based on this configuration example, restriction of access is recommended, e.g. by using passwords with the support of the engineering tools.
SIWAREX WP521/WP522
38
Manual, 04/2016, A5E36695225A
5.5.2
Commissioning 5.5 Start-up with the operator panel and the Ready-for-use software
Start
The quick start is performed in this example with a TP700 Comfort Panel connected directly to the WP521/WP522. The panel communicates directly via Modbus TCP/IP or via the SIMATIC S7-1500 CPU. To carry out the quick start, select the "1.0 Setup" function in the main menu and then "1.2 Quick Start". You will be guided through the individual tasks for setting the most important parameters. The remaining parameters are factory-set in such a way that they can be used in most cases without any changes. All parameter inputs must be saved by clicking on the diskette icon.
Image 5-3 Quick Start 1 of 6
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
39
Commissioning 5.5 Start-up with the operator panel and the Ready-for-use software
5.5.3
Specification of basic values 1
The basic parameters can be entered first, e.g. the scale name, unit of weight or gross weight ID.
Image 5-4 Quick Start 2
SIWAREX WP521/WP522
40
Manual, 04/2016, A5E36695225A
5.5.4
Commissioning 5.5 Start-up with the operator panel and the Ready-for-use software
Specification of basic values 2
The load cell parameters are entered in this step.
5.5.5
Image 5-5 Quick Start 3
Selecting the calibration method
Image 5-6 Quick Start 4
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
41
Commissioning 5.5 Start-up with the operator panel and the Ready-for-use software
The module can always be calibrated in two different ways: Using reference weights: in the case of a calibration with weights, mechanical influences
of the scale construction are also partially taken into account. Without weights, using the technical specifications of the connected load cell(s): in the
case of automatic calibration, the accuracy of the scale is influenced by the mechanical properties to a greater extent than with calibration using reference weights. With both methods, make sure that the mechanical properties of the scale are flawless prior to calibration.
5.5.6
Defining the calibration weights
Image 5-7 Quick Start 5
In step 5 you enter the calibration weights which are to be positioned on the scale during the calibration. If the scale is not empty and the current contents are known, you can define an "Calibration weight 0" with the current contents of the scale. With an empty scale, this parameter remains as 0 kg. "Calibration weight 1" usually defines the first reference point of the scale characteristic. A further reference point ("Calibration weight 2") can also be set in addition. This is optional, and may not be necessary depending on the mechanical properties of the scale.
Note that the interval between the calibration weights must be at least 2% of the nominal load of the scale. With a 1 000 kg scale, a calibration weight of at least 20 kg must therefore be used.
SIWAREX WP521/WP522
42
Manual, 04/2016, A5E36695225A
5.5.7
Commissioning 5.5 Start-up with the operator panel and the Ready-for-use software
Setting calibration points
Image 5-8 Quick Start 6
Carry out the calibration commands at the end of the quick start:
1. Carry out the "Set calibration weight 0" command. The "Calibration weight 0" defined in step 5 is now visible in the display.
2. Place the "Calibration weight 1" defined in step 5 on the scale construction, and execute the "Set calibration weight 1" command.
3. If an "Calibration weight 2" was selected: Place the "Calibration weight 2" defined in step 5 on the scale construction, and execute the "Set calibration weight 2" command.
4. Calibration of the scale is now complete. Return to the start screen by clicking on the house icon.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
43
Commissioning 5.5 Start-up with the operator panel and the Ready-for-use software
5.5.8
Calibrating the scale automatically
The scale can also be calibrated without weights. To do this, it is essential to enter data specific to the load cells, and the scale must be empty.
Image 5-9 Quick Start 5
The number of points of support corresponds with a silo, for example, to the number of clamps or feet of the silo. A quadratic platform scale with a load cell at each corner has 4 support points. The characteristic values of the individual load cells are required to calculate the average characteristic value of the cells.
The formula for the calculation is: (characteristic value cell 1 + characteristic value cell 2 + .... characteristic value cell n) / n
If the exact characteristic values are unknown, it is permissible to also use rounded-off numbers (e.g. 1.0 mV/V, 2.0 mV/V). The nominal load of one single load cell (not the nominal load of the complete scale!) must subsequently be defined.
SIWAREX WP521/WP522
44
Manual, 04/2016, A5E36695225A
5.5.9
Commissioning 5.5 Start-up with the operator panel and the Ready-for-use software
Performing the automatic calibration
Image 5-10 Quick Start 6
Subsequently enter the "Perform automatic calibration" command with the scale empty. The scale is calibrated directly, and clicking on the house icon returns you to the start screen.
5.5.10
Checking the scale following calibration
If the scale is only used for company-internal purposes, a simple check is sufficient.
Perform the following steps:
1. The scale is unloaded and shows "0 kg".
2. Place a known reference weight on the scale. Check the displayed value.
3. If a second known reference weight is available, place it on the scale in addition. Check whether the scale displays the sum of the reference weights.
4. Remove the reference weights from the scale. Check that the display is "0 kg" again.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
45
Commissioning 5.6 Service with the SIWATOOL program
5.6
Service with the SIWATOOL program
5.6.1
General
You can use the SIWATOOL program to commission the scale independently of the SIMATIC automation system. The program is included in the configuration package. Install the SIWATOOL program (SIWATOOL folder) on your PC for commissioning. You have 3 options when selecting the SIWAREX module: Selection SIWAREX WP521ST Selection SIWAREX WP522STA - for channel A Selection SIWAREX WP522STB - for channel B
SIWAREX WP521/WP522
46
Manual, 04/2016, A5E36695225A
5.6.2
Windows and functions of SIWATOOL
Commissioning 5.6 Service with the SIWATOOL program
Control elements for SIWATOOL and operation Offline values of the SIWAREX module
of the scale
Parameter list of the SIWATOOL module
Online values of the connected SIWAREX module
Image 5-11 Layout of the SIWATOOL user interface
The message window shows the current contents of the message buffer of the SIWAREX module. The most recent message is in the top line.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
47
Commissioning 5.6 Service with the SIWATOOL program
In order to archive data, all data can be exported from the SIWAREX module and saved as a file or printed.
Note You can edit all data in the SIWAREX module in online mode. The changes are not automatically imported to the corresponding scale data block in the SIMATIC CPU.
Select the appropriate data record in order to send or receive it (e.g.: "Calibration parameter (DR3)") and call the command list with a right mouse click.
The data record is sent from the PC to the SIWAREX WP521/WP522 using "Send data record". The data record is sent from the SIWAREX WP521/WP522 to the PC using "Receive data record". The complete data record (all parameters of the data record) is always transferred, not just individual parameters! For example, if data record 3 is to be sent, right-click on "Calibration Parameter (DR3)". The command list is then opened with the option for sending the respective data record to the weighing module or for reading it from the module. All data records can only be sent to or read from the SIWAREX as complete packets. It is not possible to read or write individual parameters within a data record. Different parameter-settings between PC and SIWAREX are marked in red in the SIWATOOL:
Therefore the complete data record must initially be received for every change to parameters within it.
SIWAREX WP521/WP522
48
Manual, 04/2016, A5E36695225A
Commissioning 5.6 Service with the SIWATOOL program
The desired parameter can then be edited, and the data record returned.
Note If the data record is not received, the danger exists that different PC parameters will be sent to the scale and overwrite previously active and intentionally defined parameters.
Online parameter trends can be recorded and played back using the recorder function located at the top right-hand edge of SIWATOOL. You can use the "Configure recorder" button to select the data records to be recorded and to set the save parameters. The playback speed can be set using a slider.
5.6.3 5.6.4
Available help options
SIWATOOL offers various help options for operation: Info card
You can select the "Info" item directly underneath the individual data records in the navigation tree. This info card explains how the data record influences the scale behavior. Tooltip If you move the mouse over a button or parameter, a corresponding help text is displayed. Help Click on the menu option "Help" to call up the SIWATOOL help. The Help can be opened separately.
Recording scale traces
Scale traces can be recorded and exported using SIWATOOL. The recording is started and stopped using commands, and recorded traces can also be deleted. The trace recording cycle is set in data record DR7. A dialog box appears with the "Export trace data" button. The trace is displayed in this window as a table or graphic, and the data can be exported to csv or Excel and then processed further. The commands for starting and stopping are present in the "Trace commands" group (yellow memory card icon) in SIWATOOL. All important measured values, messages and changes in status are recorded.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
49
Commissioning 5.6 Service with the SIWATOOL program
Image 5-12 Reading trace as a table
5.6.5
50
Image 5-13 Reading trace as a chart
Offline parameter assignment
All scale parameters can be edited and saved without an electronic weighing system. This reduces the setup time. You can thus prepare the parameters for several scales in your office, and subsequently transfer them to the electronic weighing system during setup. Data from one scale currently in operation can be exported and used to set up another scale.
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
5.7
5.7.1
5.7.2
Commissioning with SIWATOOL
Commissioning 5.7 Commissioning with SIWATOOL
IP address for SIWAREX
The factory-set IP address is 192.168.0.21. This address is also preset in SIWATOOL. The connection to a SIWAREX module can be established immediately. The network card used must be configured for this network. If the connection is to be established to a specific SIWAREX module, its IP address must be set in SIWATOOL. The setting is carried out with the menu item "Communication/Set Ethernet Configuration...". If the IP address of a SIWAREX module is unknown, it can be determined using the additional program "Primary Setup Tool". The program is included in the SIWAREX configuration package. During the setup, a new IP address can be assigned to the module using SIWATOOL.
Note Please also observe the Security information (Page 9).
The assignment of a new IP address to a SIWAREX module is necessary if several SIWAREX modules are present in one network. The following ports are used by SIWAREX: SIWATOOL for SIWAREX WP521 port: 23006 SIWATOOL for SIWAREX WP522 channel A: port 23006, channel B: port 23007 Modbus TCP/IP for SIWAREX WP521: Port: 502 Modbus TCP/IP for SIWAREX WP521/WP522: Port: 502
or Modbus TCP/IP for SIWAREX WP522 channel A: port configurable, channel B: port
configurable FTP for firmware download port: 69
Entering a known SIWAREX IP address
To establish a connection to a SIWAREX module, enter the IP address in SIWATOOL. Under the menu item "Communication", select "Set Ethernet Configuration...". Enter the IP address of the SIWAREX module in the following window. To activate the IP address and establish a connection to the SIWAREX module, subsequently click on "Online".
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
51
Commissioning 5.7 Commissioning with SIWATOOL
5.7.3
Determining an unknown IP address
If the IP address of a connected SIWAREX module is unknown, it can be determined using the program "Primary Setup Tool". The program is included in the configuration package (Page 169).
Install the program "Primary Setup Tool". When started, the program can determine the Siemens devices present in the network.
The MAC (Media Access Control) address can be read on the front of the SIWAREX module. Every device has an MAC address which is unique worldwide.
The IP address can be determined from the identified MAC address. The Primary Setup Tool also allows the IP address of a SIWAREX module to be set/changed.
Additional information on the Primary Setup Tool can be found in the associated manual.
5.7.4
Setting up a network
Several SIWAREX modules can be connected together in a network via a switch. Via the network, you can use SIWATOOL to assign parameters to and start the various modules or connect a common Operator Panel.
Note Please also observe the Security information (Page 9).
5.7.5
Start
When starting the SIWATOOL program, first select the SIWAREX WP521ST or SIWAREX WP522STA (channel A) or SIWAREX 522STB (channel B) using the "Device selection" window.
The IP address of the module can be selected in the "Communication" menu.
SIWAREX WP521/WP522
52
Manual, 04/2016, A5E36695225A
Commissioning 5.7 Commissioning with SIWATOOL
Click "Online" to establish communication to the SIWAREX.
See also
Service with the SIWATOOL program (Page 46)
5.7.6 5.7.6.1
Calibration method
Selecting the calibration method
The SIWAREX module can always be calibrated in two different ways: Using reference weights: in the case of a calibration with weights, mechanical influences
of the scale construction are also partially taken into account. Without weights, using the technical specifications of the connected load cell(s): in the
case of automatic calibration, the accuracy of the scale is influenced by the mechanical properties to a greater extent than with calibration using reference weights. With both methods, make sure that the mechanical properties of the scale are flawless prior to calibration.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
53
Commissioning 5.7 Commissioning with SIWATOOL
5.7.6.2
Calibration with calibration weight
When calibrating using a calibration weight, the identified parameters in DR3 / Basic parameters are checked or entered:
Unit of weight: The unit of weight can be selected from a list. Maximum weighing range: Exceeding the maximum weighing range (= the maximum material to be weighed) is indicated in DS30, status 1-2, at parameter "Max 9e". If the maximum weighing range is exceeded, this bit is set to TRUE. Resolution d: The resolution d can be defined in accordance with EN 45501 (0.0001 to 50). This parameter is used for the weight display in the SIWATOOL software. Calibration weight 1: The calibration weight 1 and its corresponding calibration digits define the characteristic curve of the scale. A minimum calibration weight must be used as calibration weight 1; with a load cell characteristic value of: 1 mV/V: 8% of the total rated load of all load cells 2 mV/V: 4% of the total rated load of all load cells 4 mV/V: 2% of the total rated load of all load cells
SIWAREX WP521/WP522
54
Manual, 04/2016, A5E36695225A
Example
Commissioning 5.7 Commissioning with SIWATOOL
Number of load cells: 3 units Nominal load of one single load cell: 100 kg Load cell characteristic value: 2 mV/V The minimum calibration weight which can be used for the calibration is: 4% x 3 x 100 kg = 12 kg Once the above-mentioned parameters have been set in the PC, they must be sent to the SIWAREX. Service mode must be switched on first. The DR3 can only be sent and the calibration commands executed with service mode switched on.
After switching on service mode, a red wrench icon is displayed in the SIWATOOL next to the weight value.
The DR3 is subsequently sent to the SIWAREX by a right-click on "Calibration parameters (DR3)" and execution of "Send data record".
All parameter settings in DR3 are now identical again between PC and SIWAREX, and all parameters of DR3 are displayed again in black. Following transmission of the parameters to the SIWAREX, and with a empty scale i.e. only the mechanical dead load (e.g. empty container) bears on the load cells the "Calibration point 0 valid" command is executed:
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
55
Commissioning 5.7 Commissioning with SIWATOOL
The calibration weight 1 defined in DR3 is subsequently applied to the scale.
SIWAREX WP521/WP522
56
Manual, 04/2016, A5E36695225A
Commissioning 5.7 Commissioning with SIWATOOL
The "Calibration point 1 valid" command is then executed:
Service mode is switched off again:
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
57
Commissioning 5.7 Commissioning with SIWATOOL
The calibration is then finished, and the correct weight value is now displayed in SIWATOOL. Read back DR3 During the calibration, the SIWAREX internally changes its calibration digits. This means that obsolete parameter values are now present in SIWATOOL. These are displayed in red, e.g.:
The DR3 must be read back in order to again achieve calibration digits in the SIWATOOL which are consistent with the SIWAREX:
5.7.6.3
58
Checking the scale following calibration If the scale is only used for company-internal purposes, a simple check is sufficient. Perform the following steps: 1. The scale is unloaded and shows "0 kg". 2. Place one or more known test weights on the scale (but not the calibration weight which
was used during the calibration, so as to check other weight points of the scale in addition to the calibration weight). Check the displayed weight value in the SIWATOOL. 3. Remove the test weights from the scale. Check that the display is "0 kg" again.
Automatic calibration (= calibration without calibration weight)
The scale can also be calibrated without a weight. To do this, the parameters identified in bold type in DR3 / Basic parameters are checked or entered, and the data specific to the load cells specified in DR10: In addition, it is essential that the scale is empty. Checking or entering the parameters identified in bold type in DR3 / Basic parameters:
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Commissioning 5.7 Commissioning with SIWATOOL
Unit of weight: The unit of weight can be selected from a list. Maximum weighing range: Exceeding the maximum weighing range (= the maximum material to be weighed) is indicated in DR30, status 1-2, at parameter "Max 9e". If the maximum weighing range is exceeded, this bit is set to TRUE. Resolution d: The resolution d can be defined in accordance with EN 45501 (0.0001 to 50). Once the above-mentioned parameters have been entered, the parameters modified in the PC must be sent to the SIWAREX. Service mode must be switched on first. The DR3 and DR10 can only be sent and the calibration commands executed with service mode switched on:
After switching on service mode, a red wrench icon is displayed in the SIWATOOL next to the weight value:
The DR3 is subsequently sent to the SIWAREX by a right-click on "Calibration parameters (DR3)" and execution of "Send data record":
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
59
Commissioning 5.7 Commissioning with SIWATOOL
All parameter settings in DR3 are now identical again between PC and SIWAREX, and all parameters of DR3 are displayed again in black. The data specific to the load cells is subsequently specified in DR10:
Number of support points:
The number of support points corresponds with a silo, for example, to the number of clamps or feet of the silo. A quadratic platform scale with a load cell at each corner has 4 support points.
Characteristic value (mV/V):
This parameter is the mean value of the characteristic values of all connected
load cells (e.g.: characteristic value = 2.018 mV/V). The exact characteristic value of a load cell can be obtained from its test report or directly read off it.
If the characteristic values of the individual load cells are unknown, the value "1.0" can be assumed for 1mV/V load cells, the value "2.0" for 2mV/V load cells etc.
Nominal load of one single load cell
Specifying the nominal load of one single load cell
The DR10 is subsequently sent to the SIWAREX by a right-click on "Load cell parameters (DR10)" and execution of "Send data record":
SIWAREX WP521/WP522
60
Manual, 04/2016, A5E36695225A
Commissioning 5.7 Commissioning with SIWATOOL
All parameter settings in DR10 are now identical again between PC and SIWAREX, and all parameters of DR10 are displayed again in black. Following transmission of the parameters to the SIWAREX, and with a empty scale i.e. only the mechanical dead load (e.g. empty container) bears on the load cells the "Automatic calibration" command is executed:
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
61
Commissioning 5.7 Commissioning with SIWATOOL
Service mode is switched off again:
The calibration is then finished, and the correct weight value is now displayed in SIWATOOL. Read back DR3 During the calibration, the SIWAREX internally changes its calibration digits and the calibration weight. This means that obsolete parameter values are now present in SIWATOOL. These are displayed in red, e.g.:
The DR3 must be read back in order to again achieve calibration digits and the calibration weight in the SIWATOOL which are consistent with the SIWAREX:
SIWAREX WP521/WP522
62
Manual, 04/2016, A5E36695225A
Commissioning 5.7 Commissioning with SIWATOOL
5.7.6.4
Image 5-14 Receive data record
Checking the scale following calibration If the scale is only used for company-internal purposes, a simple check is sufficient. Perform the following steps: 1. The scale is unloaded and shows "0 kg". 2. Place one or more known test weights on the scale. Check the displayed weight value in
the SIWATOOL. 3. Remove the test weights from the scale. Check that the display is "0 kg" again.
Receive all data
Activate the "Receive all data" function in the communication menu.
All parameters can now been saved as a backup file on the hard disk. If a module is replaced, the backup file can be downloaded to the new module within a few seconds. At the time of input of the backup file, the scale is directly in the calibrated state again without a new calibration.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
63
Commissioning 5.7 Commissioning with SIWATOOL
5.7.7
Firmware update with SIWATOOL
New firmware versions can be transferred to the SIWAREX module using SIWATOOL. In order to transfer the firmware, the Windows firewall must be configured in such a way that SIWATOOL is registered as an approved program. The FTP protocol is used for the transfer. Firewalls or other protection software can interfere or prevent the transmission of data via the FTP protocol. In such cases, the respective protective mechanism must be temporarily deactivated for the duration of the update, or an alternative PC used.
The latest firmware version can be found under Industry Online Support (http://support.automation.siemens.com/WW/view/de/10807015/133100).
Note
The SIWAREX module parameters are preassigned with default values after the transfer of the new firmware.
You should therefore export and save the original parameter values prior to the firmware update. Following the firmware update, the saved data can be converted by SIWATOOL to the new firmware version.
Saving existing parameters Export the current parameters
Select the "Receive all data records" function from the menu under "Communication". The current parameter set is then transferred to SIWATOOL. Save the current data record in a file.
Transferring the new firmware version to the SIWAREX module
Note During the firmware transfer, the SIWAREX module works restricted with the old firmware version and the new firmware is loaded in the background. For this reason, you must not switch off the module during the firmware transfer.
1. Set the SIMATIC CPU to "STOP". 2. Register with SIWATOOL on the SIWAREX module. 3. Use the function button to start the firmware download. 4. Select the current firmware file under "Firmware Download" 5. Click the "Start transfer" button. Following the transfer, the SIWAREX module must be switched off and then on again. This activates the new firmware.
SIWAREX WP521/WP522
64
Manual, 04/2016, A5E36695225A
Commissioning 5.7 Commissioning with SIWATOOL
5.7.8
Image 5-15 Downloading the firmware with SIWATOOL
Firmware update with SIMATIC TIA Portal
If necessary, the SIMATIC TIA Portal can be used to perform the firmware update of the SIWAREX WP521/WP522 module. You can update the firmware of a module using a firmware file. To update the firmware, proceed as follows: 1. Make sure the module is not in use. 2. Open the module in the online and diagnostics view. 3. Select the "Firmware Update" group in the "Functions" folder. 4. Click on the "Browse" button in the "Firmware Loader" area to select the path to the
firmware update files. 5. Select one of these files. The table then lists all modules for which an update is possible
with the selected firmware file. 6. Click "Start Upgrade". If the selected file can be interpreted by the module, it is loaded
into the module. 7. If the operating mode of the CPU needs to be changed, you are prompted via dialogs.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
65
Commissioning 5.7 Commissioning with SIWATOOL
WARNING Prohibited system states possible An S7-1500 CPU goes immediately to STOP mode when the firmware update begins, which may affect the operation of an online process or machine. Unexpected operation of a process or machine can lead to death or serious injury and/or property damage.
Note After performing a firmware update, you must replace the affected module by the same module with the current firmware version in the hardware configuration of your project. The configuration will then comply with the actual existing configuration again.
A station can restart after activating the firmware. This will result in the failure of all modules of the station. If the corresponding CPU is in RUN mode, activation of the firmware can cause access errors or other impairments of the user program even including sustained CPU STOP.
SIWAREX WP521/WP522
66
Manual, 04/2016, A5E36695225A
Scale parameters and functions
6
6.1
6.2 6.3
6.3.1
Parameters and functions
The electronic weighing system used here can be used for non-automatic weighing, for examples, as a platform scale or hopper scale. They are not legal-for-trade. All parameters are set to default values in the factory. You can restore the configuration to factory settings using the "Load factory settings" command. The default parameters are set such that the scale is immediately ready for operation. The weight value indicates changes in weight on the load cell, but only corresponds to the actual weight following a calibration. You do not need to re-enter all parameters. The advantage of this solution is that you can decide which default values are to be retained and which parameters need to be adapted for your application. All parameters are divided into data records (DR). The data records are organized in steps (tasks) to be implemented during commissioning or during the process. The scale functions governed by the parameters are also described in the parameter description below. First, the parameters of a given data record are displayed in a table. The detailed parameter description for the parameters of this data record then follows. When it receives new parameters, the SIWAREX module runs a validation check. In the event of a parameter assignment error, the data record is not applied (not saved) by the SIWAREX module and a data/operator error is reported.
DR 2 command code
DR 2 is a special data record used to transfer commands to the SIWAREX module by SIWATOOL.
DR 3 calibration parameters
Overview
The calibration parameters need to be checked and if necessary modified for all scales. The scale is basically defined by calibration parameters and calibration operation. Any changes in data record DR 3 require the service operation of the module to be activated. If service mode is not active, all parameter inputs are directly rejected with an error.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
67
Scale parameters and functions 6.3 DR 3 calibration parameters
Procedure Check all parameters and modify them as required Transfer the DR 3 data record from SIWATOOL to the scales Adjust the scales Transfer the DR 3 data record from the scales to SIWATOOL
Table 6- 1 Assignment of data record 3
Variable
Note
Data record number
Contains no. of data record
Length
Data record length information
Application
Information about which application the DR belongs to
Version ID
Information about the current data record version
Scale name header
Maximum length and actual length of string for scale name
Scale name (Page 71)
Scale name specified by user
Unit of weight Unit of weight (Page 71)
Gross identifier Abbreviation for
(Page 71)
brutto/gross
(B or G)
Reserve
Reserve
Reserve
Reserve
Minimum weighing range (Page 72)1)
Minimum number d
Maximum weighing range (Page 72) 1)
Maximum weight
Calibration weight 01) (usually the zero point)
Calibration weight 11)
Type
USHORT USHORT USHORT USHORT UBYTE[2]
CHAR[12] USHORT USHORT USHORT USHORT USHORT
FLOAT
FLOAT FLOAT
Length (bytes)
2 2 2 2 2
12 2 2 2 2 2
4
4 4
Read write Protection r r r
r
rw
rw rw rw
rw rw rw
rw
rw
rw
Write Default protection
-
3
-
116
-
141
-
1
r
12,12
r
" "
r
2
r
0
-
0
r
0
r
20
r
100
r
0
r
100
Min.
Max.
Modbus
registers
-
-
1000
-
-
1001
-
-
1002
1
65635
1003
-
-
1004
-
-
1005
0
6
1011
0
1
1012
-
-
1013
-
-
1014
0
65535
1015
> weigh- 9.999.999 1016 ing_range _min
1
9.999.999 1018
1
9.999.999 1020
SIWAREX WP521/WP522
68
Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.3 DR 3 calibration parameters
Variable
Note
Type
Scale interval (Page 72) 1)
Automatic zero adjustment (Page 72)
Currency
Weight simulation (Page 72)
Bit 5 Bit 6 Filter sequence
Bit 8 Bit 9 Bit 10 Bit 11 Bit 12
Calibration weight 2
Calibration digits 0 determined during calibration with calibration weight 0
Calibration digits 1 determined during calibration with calibration weight 1
Calibration digits 2 determined during calibration with calibration weight 2
Resolution weighing range 1 (1*10**k, 2*10**k, 5*10**k]; k: -3 ... 2)
0: auto. zero adjustment off 1: auto. zero adjustment on
Reserve
0: Filling 1: Emptying
Weight simulation
Bit 5: Reserve
Bit 6: Reserve
0: Low-pass filter before average value filter 1: Average value filter before lowpass filter
Bit 8: Reserve
Bit 9: Reserve
Bit 10: Reserve
Bit 11: Reserve
Bit 12: Reserve
FLOAT LONG
LONG
LONG
FLOAT
BIT
BIT BIT BIT BIT BIT BIT BIT
BIT BIT BIT BIT BIT
Length Read Write Default Min.
(bytes) write Pro-
protection
tection
4
rw
r
0
1
4
rw
r
0
0
4
rw
r
2000 0
4
rw
r
0
0
4
rw
r
0.1
0.0001
0
rw
r
0
0
0
rw
r
0
0
rw
r
0
0
0
rw
r
0
0
0
rw
r
0
0
0
rw
r
0
0
0
rw
r
0
0
0
rw
r
0
0
0
rw
r
0
0
0
rw
r
0
0
0
rw
r
0
0
0
rw
r
0
0
0
rw
r
0
0
Max.
Modbus registers
9.999.999 1022 3.999.999 1024
3.999.999 1026
3.999.999 1028
50
1030
1
1036.16
1
1036.15
1
1036.14
1
1036.13
1
1036.12
1
1036.11
1
1036.10
1
1036.9
1
1036.8
1
1036.7
1
1036.6
1
1036.5
1
1036.4
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
69
Scale parameters and functions 6.3 DR 3 calibration parameters
Variable
Note
Type
Length Read Write Default Min.
(bytes) write Pro-
protection
tection
Bit 13
Bit 13: Reserve BIT
0
rw
r
0
0
Bit 14
Bit 14: Reserve BIT
0
rw
r
0
0
Bit 15
Bit 15: Reserve BIT
2
rw
r
0
0
Reserve
USHORT 2
rw
r
0
0
Maximum tare Tare maximum FLOAT 4 load (Page 73) [in % of WRmax ]
rw
r
100
0
Reserve
FLOAT 4
rw
r
0
0
Reserve
FLOAT 4
rw
r
0
0
Maximum
Negative range of FLOAT 4
rw
r
1
0
negative zero the semi-
setting limit
automatic zeroing
(semi-
[in % of maximum
automatically) weighing range
(Page 73)
WRmax]
Maximum
Positive range of FLOAT 4
positive zero the semi-
setting limit
automatic zeroing
(semi-
[in % of maximum
automatically) weighing range
(Page 73)
WRmax]
rw
r
3.0
0
Standstill
Standstill range FLOAT 4
rw
r
1
0
range
(in d)
(Page 74)
Standstill time Standstill time 1 in TIME
4
rw
r
(Page 74)
ms
2000 10
Standstill wait- Waiting time until TIME
4
rw
-
0
0
ing time
standstill.
(Page 74)
0: standstill-
dependent scale
command, if there
is no standstill,
immediately re-
jected.
> 0: Maximum
waiting time until
command is exe-
cuted
Low-pass filter Low-pass filter 1 - FLOAT 4
rw
r
2
0
limit frequency cutoff frequency:
(Page 75)
0: Filter disabled
Low-pass filter Filter order
USHORT 2
rw
r
4
1
number (Page 75)
Low-pass filter 1
Reserve
Reserve
USHORT 2
rw
-
0
-
Max.
Modbus registers
1 1 1 6 250
100.0 100.0 100.0
1036.3 1036.2 1036.1 1033 1034
1036 1038 1040
100.0
1042
9.999.999 1044
10000 10000
1046 1048
50
1050
4
1052
-
1053
SIWAREX WP521/WP522
70
Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.3 DR 3 calibration parameters
Variable
Note
Type
Length Read Write Default Min.
(bytes) write Pro-
protection
tection
FLOAT 4
rw
-
0
Reserve
Period the
Averaging period USHORT 2
average value of the average
filter (Page 76) value filter in ms
rw
r
100
0
1) Parameter for calculation of calibration points with theoretical calibration
Max.
Modbus registers
10000
1054 1056
6.3.2
Scale name
You can select any name, but it may not exceed 12 characters. You can enter any designation.
6.3.3
Unit of weight
A number is specified as the weight unit. The defined unit of weight applies to all weight specifications. Entries are not be converted if the unit of weight has changed. Codes for weight unit: 0: "mg" 1: "g" 2: "kg" 3: "t" 4: "oz" (ounce) 5: "lb" (pound) 6: "T" (= short tons) 7: "TL" (= long tons)
6.3.4
Gross identifier
The gross identifier specifies the letter, B (for brutto) or G (for gross), to be used in the display for gross weights. The identifier is specified by a number. Codes for brutto/gross identifier: 0: "B" 1: "G"
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
71
Scale parameters and functions 6.3 DR 3 calibration parameters
6.3.5
Minimum weighing range
The minimum weighing range with the unit "d" (resolution) is set during the calibration.
The factory setting is 0 d. Falling below the minimum weighing range is displayed in the status of the scale.
6.3.6
Maximum weighing range
The maximum weight is defined during commissioning. The maximum weight depends on the number and type of load cells used.
6.3.7
Calibration weights 0, 1, 2 and calibration digits 0, 1, 2
The calibration weights and corresponding calibration digits define the characteristic curve of the scales. A detailed description can be found in section Performing calibration (Page 76).
6.3.8
Scale interval
The scale interval for the weighing range can be defined in accordance with EN 45501 (0.0001 to 50).
6.3.9
Automatic zero adjustment
If necessary, the scales can be set semi-automatically to zero by the user by means of the "Zeroing" command.
The automatic adjustment sets the scale to zero without a further command in the event of slow zero drifting. Slow drift is assumed if the OIML R76 criteria for this are met.
6.3.10
Filling/emptying mode
With filling, the net weight increases when the scale is loaded. At discharge weighing, the net weight increases when the scale is unloaded.
6.3.11
Weight simulation
For test purposes, weight simulation can be enabled instead of actual weighing. The simulated weight is specified using the DR 16 data record. Weight simulation can, in certain situations, facilitate scale testing and commissioning. The simulated weight is indicated on the main display with the word "TEST".
SIWAREX WP521/WP522
72
Manual, 04/2016, A5E36695225A
6.3.12
Scale parameters and functions 6.3 DR 3 calibration parameters
Filter sequence
The weighing signal can pass through the low-pass and average value filter. The parameter is used to determine which filter is first passed through.
6.3.13
Maximum tare load
The weighing module accepts any external tare specification which is less than the maximum tare load (percentage of maximum weighing range). Tare commands are also accepted provided that the current gross weight is less than the configured maximum tare load.
6.3.14
Maximum negative zero setting limit (semi-automatically)
Zeroing defines the current weight of the scales as zero.
You can restrict the effect of the zeroing function by defining limits. The limitation is based not on the current gross weight, but rather on the weight which the scales would display had there been no zeroing (time of scale calibration).
6.3.15
Maximum positive zero setting limit (semi-automatically)
You can restrict the effect of the zeroing function by defining limits. The limitation is based not on the current weight, but rather on the weight which the scales would display had there been no zeroing (time of scale calibration).
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
73
Scale parameters and functions 6.3 DR 3 calibration parameters
6.3.16
Standstill range
Standstill monitoring checks whether the scales are correctly balanced. Scale standstill is registered if the weight changes by less than a specified fluctuation in d (standstill value) over a specified time (standstill time). Standstill monitoring is used in static scale mode (commands: zeroing, taring). The diagram below illustrates how standstill monitoring works.
Image 6-1 Standstill monitoring
6.3.17
Standstill time
Standstill monitoring checks whether the scales are correctly balanced. Scale standstill is registered if the weight changes by less than a specified fluctuation in d (standstill value) over a specified time (standstill time). Standstill monitoring is used in static scale mode (with the following commands: zeroing, taring).
6.3.18
74
Standstill waiting time
Standstill waiting time is a maximum waiting time for standstill upon the execution of a command which depends on standstill (taring, zeroing, registering). A technology message is generated if the command cannot be executed during the standstill waiting time because there is no standstill.
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.3 DR 3 calibration parameters
If the standstill waiting time is equal to zero, a command requiring standstill is rejected immediately if there is no standstill.
6.3.19
Low-pass filter limit frequency
There is a critically damped low-pass filter for suppressing faults. The diagram below shows the step response of the filter (f = 2 Hz). The entry "0" means that the filter is switched off. A limit frequency of between 0.01 and 20.0 Hz can be specified.
Image 6-2 Step-forced response of the digital low-pass filter when f = 2 Hz
The definition of the limit frequency is extremely important for the suppression of faults. Defining the limit frequency defines the "speed" of the scales' response to changes in the measured value.
A value of 5 Hz, for example, results in a relatively rapid response to a change in weight; a value of 0.5 Hz makes the scales "slower".
6.3.20
Low-pass filter number
The number of the filter defines the effect of damping. Values 1...4 can be specified. The higher the selected filter number, the higher the effect.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
75
Scale parameters and functions 6.4 Performing calibration
6.3.21
Period the average value filter
The average value filter is used to steady the weight against random interference. The weight value is based on average values that are incurred in the specified period.
6.4
Performing calibration
6.4.1
76
Calibration with calibration weights
The incoming analog measured value from the load cells is converted into a digital value in an analog-to-digital converter. A weight is calculated using this digital value. This weight is then used by all weighing module functions for messages and for determining the status.
The characteristic curve of the measuring system must be defined before the weight can be calculated from the digital value. In the simplest case, the characteristic curve is defined with points 0 and 1. The first working point (point 0) is defined by the empty scale (no load) at their own weight. The load cells return a voltage measurement to the weighing module as a result of the weight of the scales themselves. Following analog-to-digital conversion of the measured voltage, the zero point is assigned to the digital value (calibration digits for the zero point).
If the scales are loaded with a defined standard weight (e.g. 50% of the measuring range), the new digital value returned by the analog-to-digital converter is assigned the standard weight.
The characteristic curve can also be determined with a third point, which must be higher than point 1.
Make sure that the difference between two calibration weights is at least 40 000 digits, as the calibration command may otherwise be rejected.
The calibration procedure involves the following steps:
Activation of service mode using the "Service mode on" command.
Define the calibration weight and other parameters of the DR 3 data record.
Transfer the DR 3 data record to the scales.
Trigger "Adjustment weight 0 valid" for empty scales.
Load the scale with the defined standard weight.
Trigger "Adjustment weight 1 valid".
Transfer data record DR 3 from the scale to SIWATOOL and save the data on a data medium.
You must follow the correct calibration sequence with increasing calibration weights.
Load cell characteristic value 1 mV/V 2 mV/V 4 mV/V
Calibration digit 1 (ca.) when rated load is 1 000 000 2 000 000 4 000 000
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.4 Performing calibration
This defines the characteristic curve and the scale can now calculate weights for the full measuring range. The diagram below illustrates the relationship between calibration digits and the calibration weight.
Image 6-3 Calibration digits and calibration weight
Load L=0 Lo
L1
Lmax Lmax +10 %
Comment Load cells empty Calibration weight 0 "Zero point"
Calibration weight 1
Load 0 kg e.g. 60 kg
Rated load of the load cell(s)
Rated weight + approximately 10%
e.g. 100 kg e.g. approx. 110 kg
Digits Approx. 0
e.g. B. 70 682 for calibration point 0
e.g. 308 452 for adjustment digits 1
1 000 000
1 090 000
You do not need to perform calibration if the calibration digits and the calibration weights are known to the weighing module described here. They are simply sent to SIWAREX by data record DR 3 and the scale is ready for use immediately.
The SIWATOOL program facilitates rapid calibration.
Following commissioning and calibration, all data records must be read from the weighing module and saved as a scale file.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
77
Scale parameters and functions 6.4 Performing calibration
Identical scales can be put into operation immediately. Connect the PC to the new scale and enable the "Send all data records" function in service mode. This transfers the parameters for calibration weights and calibration digits, and the characteristic curve is determined immediately. The same applies when you change a weighing module.
Note Two working points are usually sufficient for determining the scale's characteristic curve. An additional working point is only required for non-linear systems. Specification of negative calibration points is not possible. However, the characteristic can also be used in the negative range down to -2 000 000 digits. To achieve this, the characteristic curve generated in the positive range is extended into the negative range.
Image 6-4 Linearizing the scale's characteristic curve
Load L=0 Lo
L1
L2
Lmax Lmax +10 %
Comment Load cells empty
Calibration weight 0 "Zero point"
Calibration weight 1
Load 0 kg e.g. 60 kg
Calibration weight 2
e.g. 80 kg
Rated load of the load cell(s)
Rated weight + approximately 10%
e.g. 100 kg e.g. approx. 110 kg
Digits Approx. 0
e.g. B. 76 082 for calibration point 0
e.g. 386 452 for adjustment digits 1
e.g. 451 367 for adjustment digits 2
1 000 000
1 090 000
SIWAREX WP521/WP522
78
Manual, 04/2016, A5E36695225A
6.4.2
Scale parameters and functions 6.5 DR 4 output the calculated adjustment digits
Automatic calibration
Scales can be rapidly commissioned with automatic calibration. The accuracy of the scale greatly depends on the entered parameters and the mechanical properties of the scale. However, you achieve the best level of accuracy for the scales by using calibration weights. During initial commissioning with automatic calibration, you must reset the module using the "Load factory settings" command. Subsequently specify the load cell parameters in data record 10. Command 82 "Perform automatic calibration" then uses this data and the currently applied dead load to calculate the characteristic curve of the scale. The characteristic curve is active immediately.
Note The characteristic curve data in data record 3 active prior to execution of command 82 is directly overwritten.
Automatic calibration requires the following criteria: Correct mechanical installation of the scale Scale is empty (only mechanical installation (= dead load) present on the cells) Load cells are evenly loaded There are no shunt circuits
6.5
DR 4 output the calculated adjustment digits
6.5.1
Overview
Data record DR 4 outputs the digits calculated from the automatic scale calibration and the calibration check. This data record cannot be sent to the scales.
Table 6- 2 Assignment of data record 4
Variable
Data record number Length
Application
Note
Type
Length Read Default Min. (bytes) write
Contains no. of USHORT 2
r
4
-
data record
Data record length USHORT 2
r
28
-
information
Information about USHORT 2 which application the DR belongs to
r
141
-
Max. -
Modbus Register 1200
1201
1202
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
79
Scale parameters and functions 6.6 DR 5 zeroing memory
Variable Version ID Calibration digits 0, 1, 2 (calculated) (Page 80)
Reserve 1 Reserve 2 Reserve 3
Note
Type
Length Read Default Min. (bytes) write
Information about USHORT 2
r
1
1
the current data
record version
Calibration digits 0 LONG
4
r
0
0
(calculated):
calibration digits
calculated by
'automatic calibra-
tion'
Calibration digits 1 LONG
4
r
0
0
(calculated):
calibration digits
calculated by
'automatic calibra-
tion'
Calibration digits 2 LONG
4
r
0
0
(calculated):
calibration digits
calculated by
'automatic calibra-
tion'
Reserve
SHORT 2
r
0
-
Reserve
USHORT 2
r
0
-
Reserve
FLOAT 4
r
0
-
Max. 65635
Modbus Register 1203
1600000
1204
1600000
1206
1600000
1208
-
1210
-
1211
-
1212
6.5.2
Calibration digits 0, 1, 2 (calculated)
The calculation is based on the parameters from DR 10 and is executed using command no. 82 or 83.
6.6
DR 5 zeroing memory
6.6.1
Overview
Data record DR 5 displays the current values in the tare memory and the zeroing memory.
Procedure Check all parameters Transfer the data record to the scales
SIWAREX WP521/WP522
80
Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.6 DR 5 zeroing memory
Table 6- 3 Assignment of data record 5
Variable
Note
Type
Length Read Default Min. (bytes) write
Protection
Data record Contains no. of data USHORT 2
r
5
-
number
record
Length
Data record length
USHORT 2
r
40
-
information
Application
Information about
USHORT 2
which application the
DR belongs to
r
141
-
Version ID Information about the USHORT 2
r
1
1
current data record
version
Effective tare Current tare weight FLOAT
4
rw
0
0
weight - from (tare setting)
specification
(Page 81)
Effective tare Current tare weight FLOAT
4
rw
0
0
weight (semi- (semi-automatic)
automatic)
(Page 81)
Current zero Current zero weight FLOAT
4
rw
0
-
tracking
(zero adjustment)
weight
(Page 82)
Dead load Dead load calculated FLOAT
4
r
0
-
(Page 82)
during automatic
calibration
Reserve 1 Reserve
SHORT 2
rw
0
-
Reserve 2 Reserve
USHORT 2
rw
0
-
Reserve 3 Reserve
FLOAT
4
rw
0
-
Max.
Modbus Register
-
1214
-
1215
-
1216
65635
1217
-
1218
-
1220
-
1226
-
1228
-
1230
-
1231
-
1232
6.6.2
Effective tare weight - from specification
A tare weight can be specified in data record DR 15. You can activate a pre-defined tare weight with a 1013 command. From this point on, the activated tare weight is factored into the weight calculations. The "Delete tare" command deactivates the active tare weight. This does not delete the specification in data record DR 15.
6.6.3
Effective tare weight (semi-automatic)
The corresponding command (see command 1011) applies the current gross weight as the active tare weight. From this point on, the activated tare weight is factored into the weight calculations. The "Delete tare" command deactivates the active tare weight.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
81
Scale parameters and functions 6.7 DR 6 limit settings
6.6.4
Current zero tracking weight
The current zero tracking weight is recorded in this parameter if automatic zero tracking is activated.
6.6.5
Dead load
The characteristic curve of the scales is determined during calibration. When there is no load, the main display returns "0". The dead load is the weight of the empty scales, i.e. the weight of the scales themselves.
6.7
DR 6 limit settings
6.7.1
Overview
The switch-on and switch-off values for the limits are configured in data record DR 6.
Procedure Check all parameters and modify them as required Transfer the data record to the scales
Table 6- 4 Variable
Assignment of data record 6
Note
Type
Data record number Length
Application
Version ID
Contains no. of data record
Data record length information
Information about which application the DR belongs to
Information about the current data record version
USHORT USHORT USHORT
USHORT
Length RW (bytes)
2
r
2
r
2
r
2
r
Default 6
Min. Max.
-
-
Modbus Register 1234
60
-
-
1235
141
-
-
1236
1
1
65635 1237
SIWAREX WP521/WP522
82
Manual, 04/2016, A5E36695225A
Variable
Note
Type
Basis of limits
"Gross/Net - based on USHORT limit 1 and 2
0: GW 1 and GW 2 are based on gross (specified as percentage, min: -200, max: 200%)
1: GW 1 and GW 2 are based on net (specified as percentage, min: -200, max: 200%)
2: GW 1 and GW 2 are absolute values and based on gross
3: GW 1 and GW 2 are absolute values and based on net
Note: The blank value then functions either as a percentage or absolute value (weight), but is always based on gross."
Reserve
Reserve
USHORT
Limit 1 ON (Page 84)
Switch-on point for limit value 1 (% of measuring range)
FLOAT
Reserve
LONG
Limit 1 OFF Switch-off point for (Page 84) limit value 1 (% of
measuring range)
FLOAT
Reserve
LONG
Limit 2 ON (Page 84)
Switch-on point for limit value 2 (% of measuring range)
FLOAT
Reserve
Limit 2 OFF Switch-off point for (Page 84) limit value 2 (% of
measuring range)
FLOAT
Reserve
LONG
Limit "Empty" ON (Page 85)
Limit "Empty" ON (always based on gross) (% if measuring range)
FLOAT
Length RW (bytes)
2
rw
2
rw
4
rw
4
rw
4
rw
4
rw
4
rw
4
rw
4
rw
4
rw
Scale parameters and functions 6.7 DR 6 limit settings
Default 0
Min. Max.
0
3
Modbus Register 1238
0
0
-
1239
99
9.999. 9.999.9 1240
999 99
0
-
-
1242
98
-
-
1244
9.999. 9.999.9
999 99
0
-
-
1246
50
-
-
1248
9.999. 9.999.9
999 99
1250
49
-
-
1252
9.999. 9.999.9
999 99
0
0
-
1254
1
-
-
1256
9.999. 9.999.9
999 99
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
83
Scale parameters and functions 6.7 DR 6 limit settings
Variable
Note
Type
Delay time for limits (Page 85)
Reserve 2 Reserve 3 Reserve 4
Uniform delay time for: TIME
· Switch ON / OFF limit 1
· Switch ON / OFF limit 2
· Switch ON blank message
(OFF delay empty alarm = 0 fixed) in ms Reserve
Reserve
Reserve
USHORT USHORT FLOAT
Length RW (bytes)
4
rw
2
rw
2
rw
4
rw
Default 0
Min. Max. Modbus
Register
0
999999 1258
9
0
-
-
1260
0
-
-
1261
0
-
-
1262
6.7.2
Basis of limits
The limits can be interpreted differently, depending on the selected reference quantity. Gross/Net - based on limit (GW) 1 and 2:
Val Ref. ue 0 GW 1 and GW 2 are based on gross (specified as percentage, min: -200%, max: 200%) 1 GW 1 and GW 2 are based on net (specified as percentage, min: -200%, max: 200%) 2 GW 1 and GW 2 are absolute weight values and based on gross 3 GW 1 and GW 2 are absolute weight values and based on net
Note The blank value then functions either as a percentage or absolute weight value, but is always based on gross.
6.7.3
Limit value 1 ON, limit value 2 ON, limit value 1 OFF, limit value 2 OFF
The switch-on and switch-off points can be specified separately for each limit value as a percentage of the measuring range. This allows both minimum and maximum value violation monitoring with hysteresis. A delay time for switch-on and switch-off can also be specified. Either the current net weight or the current gross weight can be selected as the reference value for limits 1 and 2.
SIWAREX WP521/WP522
84
Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.7 DR 6 limit settings
Maximum value monitoring is implemented with the following specifications: Switch-on value > switch-off value Minimum value monitoring is implemented with the following specification: Switch-on value < switch-off value The diagram below illustrates the function of limit values 1 and 2.
6.7.4 6.7.5
Image 6-5 Limit value configuration
Limit "Empty" ON
The value for the empty range is a limit value below which the weighing module registers and returns the status "empty". The values are entered as a percentage of the measuring range. The "Empty" limit always refers to the current gross weight in the scale.
Delay time for limits
Uniform delay time for: Switch ON / OFF limit 1 Switch ON / OFF limit 2 Switch ON blank message
(OFF delay blank message =0 fixed) This is specified in ms.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
85
Scale parameters and functions 6.8 DR 7 interface parameters
6.8
DR 7 interface parameters
6.8.1
Overview
Data record DR 7 contains the parameters for defining the properties of the available I/O (digital inputs, digital outputs, serial interfaces). If a port is not used, the default values can be retained.
Procedure Change the parameters if necessary Transfer the data record to the scales
Table 6- 5 Assignment of data record 7
Variable
Note
Data record number
Contains no. of data record
Length
Data record length information
Application
Information about which application the DR belongs to
Version ID
Information about the current data record version
Assignment for Assignment for input 0: digital input 0, Code 0: No command assigned 1, 2 (Page 88) 1 ... 32767: Command triggered by
a rising edge (01 transition)
32769...65535 (command code + 32768): Command triggered by a falling edge (10 transition)
Assignment for input 1: Encoding like input 0
Assignment for input 2: Encoding like input 0
Reserve
Input filtering (hardware setting) (Page 88)
0: No filtering 1: 5 ms 2: 10 ms 3: 15 ms 4: 20 ms 5: 25 ms 6: 30 ms 7: 40 ms
Type USHORT USHORT USHORT USHORT USHORT
USHORT USHORT USHORT USHORT
Length (bytes) 2 2 2 2 2
2 2 2 2
Read Dewrite fault
r
7
r
48
r
141
r
1
rw
0
rw
0
rw
0
rw
0
rw
2
Min. Max. - -
Modbus Register 1300
- - -
1301 1302
1 65635 1303
0 0x7FFF 1304
0 0x7FFF 1305
0 0x7FFF 1306
0 1999 1307
0 8
1308
SIWAREX WP521/WP522
86
Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.8 DR 7 interface parameters
Variable
Note
Type
Assignment for Assignment for output 1:
digital output 0, 1, 2, 3 (Page 89)
0-31: Status info 33: Specified by S7 interface 34: Reserved special code for de-
faults
USHORT
100-131: Inverted status information
255: (Compatibility) output deactivated
1000-1015: Operating error
1100-1115: Inverted operating error
2000-2047: Technological error
2100-2147: Inverted technological error
3000-3047: Data or command error
3100-3147: Inverted data or command error
Assignment for output 1: (see Output 0)
USHORT
Assignment for output 2: (see Output 0)
USHORT
Assignment for output 3: (see Output 0)
USHORT
Monitoring of the digital outputs
Monitoring of the digital outputs and USHORT their supply voltage
0: Monitoring of outputs inactive
1: Monitoring of outputs active
Reaction of the digital outputs to fault or CPU stop (Page 89)
Reaction of the digital outputs to module fault or SIMATIC CPU stop:
0: All outputs are switched off
1: The corresponding predefined state value is applied
USHORT
2: Outputs are not switched off, work continues
3: All outputs are switched on
Reserve
Reserve
USHORT
Reserved
USHORT
Replacement value for DQ 0, 1, 2, 3 (Page 89)
Predefined state of digital output DQ BIT 1 on error or SIMATIC CPU Stop
Predefined state of digital output DQ BIT 2 on error or SIMATIC CPU Stop
Predefined state of digital output DQ BIT 3 on error or SIMATIC CPU Stop
Predefined state of digital output DQ BIT 4 on error or SIMATIC CPU Stop
Length (bytes) 2
2 2 2 2
2
2 2 0 0 0 0
Read Dewrite fault
rw
0
rw
0
rw
0
rw
0
rw
1
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
Min. Max. Modbus Register
0 0xFFFF 1309
0 0xFFFF 1310
0 0xFFFF 1311
0 0xFFFF 1312
0 1
1313
0 2
1314
0 1 0 1 0 1
0 1
0 1
0 1
1315 1316 1317.16
1317.15
1317.14
1317.13
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
87
Scale parameters and functions 6.8 DR 7 interface parameters
Variable
Note
Trace recording cycle (Page 90)
Trace recording cycle. Every nth measured value is recorded.
For example:
n=1: 10 ms n=10: 100 ms
Type USHORT
Length (bytes)
2
Read Dewrite fault
rw
1
Min. Max. 1 1000
1 000: 10 s
Trace storage 0: Trace recording runs as circular BIT
0
method
buffer
(Page 90)
1: Trace is stopped when trace
memory is full
Reserve 1
Reserve
LONG
4
Reserve 2
Reserve
FLOAT 4
rw
0
0 1
rw
0
rw
0
0
-
0
-
Modbus Register 1318
1319.16
1320 1322
6.8.2
Assignment for digital input 0, 1, 2
A command trigger can be assigned to a digital input. The assignment is made with the command number: Command lists (Page 133).
Assignment for input 0, 1, 2, 3:
Code 0 1...32767 32769...65535
Assignment Not assigned
Command triggered by a rising edge (01 transition) (Command code + 32768): Command triggered by a falling edge (10 transition)
6.8.3
Input filtering (hardware setting)
To ensure that the inputs do not respond too quickly to the signal change, a minimum signal pending time can be specified. The pending signal is not processed further until this time has elapsed.
The following values can be set:
Value 0 1 2 3 8
Duration of signal queuing No filtering 5 ms 10 ms 15 ms 40 ms
Value 4 5 6 7
Duration of signal queuing 20 ms 25 ms 30 ms 35 ms
SIWAREX WP521/WP522
88
Manual, 04/2016, A5E36695225A
6.8.4 6.8.5 6.8.6
Scale parameters and functions 6.8 DR 7 interface parameters
Assignment for digital output 0, 1, 2, 3
A status display can be assigned to a digital input. This is done on the basis of the bit number.
Assignment for output 0, 1, 2, 3:
Code Hex 0 ... 1F 21 22 Code FF
Status display Bit no. of the status flags from byte 0 .. 3 from data record 30 Control of output via data record 18 Control of output via SIMATIC S7 I/O Output always disabled
Reaction of the digital outputs to fault or CPU stop
This parameter can be used to determine the reaction of the digital outputs to a fault in the SIWAREX module.
Value 0 1 2 3
Response All outputs are switched off The corresponding predefined state value is applied Outputs are not switched off (continue) Switch on all outputs
Replacement value for DQ 0, 1, 2, 3
The outputs are usually reset following a module fault (operating error) or SIMATIC CPU STOP. This response is the default setting. If an output is to be set following a fault, this response is defined using this parameter. The "State of digital outputs on error or SIMATIC CPU Stop" parameter must also be set to "Replacement output upon operating error activated". The replacement value definition is then valid.
NOTICE Risk to the plant If an output is set following a fault (operating error), this can pose a risk for the plant. Ensure that the parameters are correctly set.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
89
Scale parameters and functions 6.9 DR 8 date and time
6.8.7
Trace recording cycle
The trace function is used for the continuous recording of measured values. The n parameter sets the recording rate.
Value n=1 n=10 n=100 N=1 000
Response Recording every 10 ms Recording every 100 ms Recording every second Recording every 10 s
6.8.8
Trace storage method
This parameter is used to specify the response of the trace memory.
Value 0 1
Response Trace recording runs as circulating memory Trace is stopped when the trace memory is full
6.9
DR 8 date and time
The current date and time is specified or read using data record DR 8. The clock is not buffered and can only continue to function without power for about 30 seconds. If you are using the Modbus protocol, data record DR 48 must be used for the date and time.
Procedure Set the date and time Transfer the data record to the scales
Table 6- 6 Assignment of data record 8
Variable
Note
Type
Length RW (bytes)
Data record Contains no. of data record
USHORT 2
r
number
Length
Data record length information USHORT 2
r
Application Information about which appli- USHORT 2
r
cation the DR belongs to
Default Min.
8
-
16
-
141
-
Max. -
Modbus registers
1330
-
1331
-
1332
SIWAREX WP521/WP522
90
Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.10 DR 9 module information
Variable
Note
Type
Length RW (bytes)
Version ID Information about the current USHORT 2
r
data record version
Date and time
SIMATIC DTL format
DTL
12
rw
Default Min.
1
1
DTL#197 0-01-0100:00:00. 0
Max. Modbus registers
65635 1333
-
1334
6.10
DR 9 module information
No entries can be made in data record DR 9. This data record provides information on the inner workings of the SIWAREX module. This information is used to identify the module at the manufacturer plant (e.g. in the event of repairs). The entries in the data record are of no importance to the user for operation.
Table 6- 7 Assignment of data record 9
Variable
Note
Type
Length RW (bytes)
Data record Contains no. of data record USHORT 2
r
number
Length
Data record length infor-
USHORT 2
r
mation
Application Information about which
USHORT 2
r
application the DR belongs
to
Version ID Information about the current USHORT 2
r
data record version
Order num- Maximum and actual string UBYTE[2] 2
r
ber - header length for the order number
Order num- Order number of the module CHAR[16] 16
r
ber
7MH ..
Serial num- String header ber - header
UBYTE[2] 2
r
Serial num- Serial number " XXX00001" CHAR[12] 12
r
ber
Firmware String header type - header
UBYTE[2] 2
r
Firmware Reference V - Release
CHAR[2] 2
r
type
B - Test
etc.
FW - Version Version 1. - 1st digit
USHORT 2
r
FW - Version Version 2. - 2nd digit
USHORT 2
r
Default
Min.
9
-
68
-
201
-
1
1
16,16
-
"7MH4980- *AA01"
12,12
-
" "
-
2.2
-
'V '
-
1
-
0
-
Max. -
65 635 -
-
-
Modus register 1340 1341 1342
1343 1344 1345 1353 1354 1360
1361
1362 1363
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
91
Scale parameters and functions 6.11 DR 10 load cell parameters
Variable
Note
Type
Length RW (bytes)
FW - Version Version 3. - 3rd digit
USHORT 2
r
Hardware ES hardware version number USHORT 2
r
version
(e.g. 03)
number
OS version String header header
UBYTE[2] 2
r
OS version Reference V - Release
CHAR[2] 2
r
(loader) -
B - Test
designation etc.
OS version (loader) designation
e.g. version n
USHORT 2
r
HW device Read from HW and entered USHORT 2
r
ID and HW here
revision ID Byte 0: HW device ID
Byte 1: HW revision ID
Reserve
Reserve
USHORT 4
r
Reserve
Reserve
USHORT 4
r
Reserve
0
FLOAT
4
r
Default 0 1
2.2 'V '
'V '
0
0 0 0
Min. Max.
-
-
-
-
Modus register 1364
1365
-
-
-
-
1366 1367
-
-
1368
-
-
1369
-
-
-
-
-
-
1370 1371 1372
6.11
DR 10 load cell parameters
6.11.1
Overview
The parameters of the analog load cells must be checked prior to the automatic calibration and modified if necessary. Only the parameters identified by bold font and asterisk (*) need be entered.
Procedure Check the parameters and modify them as required Transfer the data record to the scales Adjust the scales
SIWAREX WP521/WP522
92
Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.11 DR 10 load cell parameters
Table 6- 8 Assignment of data record 10
Variable
Note
Type
Length RW De-
(bytes)
fault
Data record number
Contains no. of data record USHORT 2
r
10
Length
Data record length information
USHORT 2
r
92
Application
Information about which application the DR belongs to
USHORT 2
r
141
Version ID
Information about the current USHORT 2 data record version
r
1
50/60 Hz tog- 50/60 Hz toggling gling (Page 94)
USHORT 2
rw 0
Number of support points (Page 94) 1)
Number of support points
USHORT 2
rw 0
Load cell char- Characteristic value of the FLOAT 4
acteristic value load cell (n) [mV/V], the
(Page 94) 1)
mean value is used if there is
more than one cell.
rw 2
Rated load of a Nominal load of one single FLOAT 4
load cell
load cell
(Page 94) 1)
rw 60
Overload limit Default in % based on con- FLOAT 2
(Page 94)
figured LC characteristic
value as of which overload is
reported.
rw 100
Setpoint range specification FLOAT 4
Impedance
(rated value) in ohms;
reference value 0 = No impedance check
(Page 95)
rw 0
Min. 1 0 0 >0.1
0
0
Max. 65635 1 8 10
1000
-10000
Modbus registers 1400 1401 1402
1403 1404 1405
1406
1408
1410
1412
Permissible
Default as percentage based FLOAT 4
rw 3
0
20
impedance
on impedance value (per-
deviation
missible range: impedance
(Page 95)
value ±x%)
Reserve
Reserve
SHORT 2
rw 0
Header LC manufacturer
Header for load cell manufacturer
UBYTE[2] 2
rw 24,24
Load cell manu- Manufacturer of load cells CHAR[24] 24
rw
facturer
used
(Page 95)
Reserve
Reserve
USHORT 2
rw 0
Header LC order Header for load cell order
number
number
UBYTE[2] 2
rw 24,24
1414
1416 1417 1418
1430 1431
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
93
Scale parameters and functions 6.11 DR 10 load cell parameters
Variable
Note
Load cell order number (Page 95)
Reserve
Order number of load cells used
Reserve
Type
Length RW De- Min.
(bytes)
fault
CHAR[24] 24
rw
FLOAT 4
rw 0
1) Parameter for calculation of calibration points with theoretical calibration
Max.
Modbus registers 1432
1444
6.11.2
50/60 Hz toggling
To improve the suppression of faults caused by the supply network, you can specify the network frequency for signal filtering. The measuring rate is 100 Hz for the 50 Hz setting, and 120 Hz for the 60 Hz setting.
6.11.3
Number of support points
If no anchor points are used, the number of support points is equal to the number of load cells.
If anchor points are used in addition to load cells, the number of support points is equal to the total number of load cells and fixed support points.
6.11.4
Load cell characteristic value
The load cell characteristic value is required to correctly interpret the output voltage from the load cell. This specification is also necessary for determining load cell overload. The exact value can be entered if the measurement log for the load cell is available. The mean value can be entered if there is more than one load cell.
Example
Characteristic value = 2.018 mV/V
6.11.5
Rated load of a load cell
The rated load of a load cell is required for checking the maximum weighing range of the scales. The rated load is entered in the specified units of weight.
6.11.6
94
Overload limit
The parameter causes the weight value to be checked for exceeding the overload. The default is specified as a % value and acts on the specified characteristic value of the load cell. An operating error is reported in case of overload.
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
6.11.7
Scale parameters and functions 6.12 DR 11 channel status/channel activation
Impedance reference value
This parameter is used to activate the total impedance of the connected load cells. The impedance of the load cells can be monitored together with the allowable impedance deviation. The current impedance can be entered or taken the current measurement (DR31) per command during commissioning. Parameter specified in ohms; 0 = No impedance check
6.11.8
Permissible impedance deviation
The permissible deviation is given in % of the impedance reference value. Exceeding the value is displayed in the status area of the scale.
6.11.9
Load cell manufacturer
The commissioning engineer can enter the manufacturer of the load cell here.
6.11.10
Load cell order number
The commissioning engineer can enter the order number of the load cell here.
6.12
DR 11 channel status/channel activation
6.12.1
Overview
Data record DR 11 is used to activate and deactivate the weighing channel. Procedure Enter the desired state for the weighing channel Transfer the data record to the scales
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
95
Scale parameters and functions 6.13 DR 12 Ethernet parameters
Table 6- 9 Allocation of data record 11
Variable
Note
Type
Length RW Default Min. (bytes)
Data record
Contains no. of data USHORT 2
r
11
-
number
record
Length
Data record length USHORT 2
r
12
-
information
Application
Information about
USHORT 2
r
141
-
which application the
DR belongs to
Version ID
Information about the USHORT 2
r
1
1
current data record
version
Channel activa- Channel activation: USHORT 2
rw 1
0
tion
0: Channel deactivat-
ed
1: Channel activated
Reserve R
Reserve
USHORT 2
rw 0
0
Max. Modbus registers
-
1460
-
1461
-
1462
65635 1463
1
1464
-
1465
6.12.2
Channel status / channel activation
The factory setting is "Weighing channel activated". The user has the option of deactivating the channel, for example, to prevent operating errors because the load cells are not yet connected for this channel or because the scale should go into operation at later time.
Deactivation suppresses diagnostic errors, process data is output with 0. The module can be pre-configured in this state.
SIWAREX WP521/WP522
96
Manual, 04/2016, A5E36695225A
6.13
DR 12 Ethernet parameters
Scale parameters and functions 6.13 DR 12 Ethernet parameters
6.13.1
Overview
Before the SIWAREX module can be integrated into an Ethernet network, the Ethernet parameters need to be configured.
Table 6- 10 Assignment of data record 12
Variable
Note
Type
Length RW (bytes)
Data record num- Contains no. of data
USHORT 2
r
ber
record
Length
Data record length infor- USHORT 2
r
mation
Application
Information about which USHORT 2
r
application the DR be-
longs to
Version ID
Information about the
USHORT 2
r
current data record ver-
sion
Device MAC ad- Device MAC address 1 USHORT 2
r
dress (Page 99) Device MAC address 2 USHORT 2
r
Device MAC address 3 USHORT 2
r
Device MAC address 4 USHORT 2
r
Device MAC address 5 USHORT 2
r
Device MAC address 6 USHORT 2
r
IP address (Page 99)
IP address x.n.n.n IP address n.x.n.n
USHORT 2
rw
USHORT 2
rw
IP address n.n.x.n
USHORT 2
rw
IP address n.n.n.x
USHORT 2
rw
Subnet mask
Subnet mask x.n.n.n
USHORT 2
rw
(Page 99)
Subnet mask n.x.n.n
USHORT 2
rw
Subnet mask n.n.x.n
USHORT 2
rw
Subnet mask n.n.n.x
USHORT 2
rw
Gateway (Page 100)
Gateway x.n.n.n Gateway n.x.n.n
USHORT 2
rw
USHORT 2
rw
Gateway n.n.x.n
USHORT 2
rw
Gateway n.n.n.x
USHORT 2
rw
Device name
Current device name
UBYTE[2] 2
rw
(Page 100)
header
Current device name
CHAR[32] 32
rw
Unit identifier channel 1
Reserve
SHORT 2
rw
Default Min. Max.
12
-
-
100
-
-
141
-
-
1
1
65635
0x0
0
255
0x30 0
255
0x05 0
255
0xD5 0
255
0xB0 0
255
0x16 0
255
192
0
255
168
0
255
0
0
255
21
0
255
255
0
255
255
0
255
255
0
255
0
0
255
192
0
255
168
0
255
0
0
255
21
0
255
-1
-1
255
Modbus registers 1500
1501
1502
1503
1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522
1523 1539
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
97
Scale parameters and functions 6.13 DR 12 Ethernet parameters
Variable
Note
Type
Length RW (bytes)
TCP port channel "Modbus TCP: TCP port, USHORT 4
rw
1
is addressed with chan-
nel 1 as the base chan-
nel.
TCP port channel "Modbus TCP: TCP port, USHORT 4
rw
1
is addressed with chan-
nel 1 as the base chan-
nel.
Reserve
RESERVE
BIT
rw
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Byte swap for text "0: Normal
rw
fields
1: The two characters in
a Modbus register are
transferred in the wrong
order"
Byte swap for 16- "0: big endian (MSB first) BIT
rw
bit values
1: little endian (LSB first)"
Byte swap for the "0: big endian (MSB first) BIT
rw
two halves of a 32-bit value
1: little endian (LSB first)"
(INT32/FLOAT)
Word swap for 32- "0: big endian (MSW first) BIT
rw
bit integers (inter- 1: little endian (LSW changing the two first)" Modbus registers)
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Unit identifier channel 2
Reserve
SHORT 2
rw
TCP port channel "Modbus TCP: TCP port, USHORT
rw
2
is addressed with chan-
nel 1 as the base chan-
nel.
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Reserve
Reserve
BIT
rw
Default Min. Max.
502
1
49151
502
1
49151
0
0
1
0
0
1
0
0
1
0
0
1
0
0
1
0
0
1
0
0
1
0
0
1
1
0
1
0
0
1
0
0
1
1
0
1
0
0
0
0
0
0
0
0
-1
-1
502
1 1 1 1 255
49151
1 1 1 1 1
Modbus registers 1540
1540
1541.16 1541.15 1541.14 1541.13 1541.12 1541.11 1541.10 1541.9 1541.8
1541.7
1541.6
1541.5
1541.4 1541.3 1541.2 1541.1 1542 1543
1544.16 1544.15 1544.14 1544.13 1544.12
SIWAREX WP521/WP522
98
Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.13 DR 12 Ethernet parameters
Variable
Note
Type
Reserve
Reserve
BIT
Reserve
Reserve
BIT
Reserve
Reserve
BIT
Byte swap for text "0: Normal
BIT
fields
1: The two characters in
a Modbus register are
transferred in the wrong
order"
Byte swap for 16- "0: Normal
BIT
bit values
1: The two characters in
a Modbus register are
transferred in the wrong
order"
Byte swap for the two halves of a 32-bit value (INT32/FLOAT)
"0: big endian (MSB first) BIT 1: little endian (LSB first)"
Word swap for 32- "0: big endian (MSW first) BIT bit integers (inter- 1: little endian (LSW changing the two first)" Modbus registers)
Reserve
Reserve
BIT
Reserve
Reserve
BIT
Reserve
Reserve
BIT
Reserve
Reserve
BIT
Reserve
Reserve
SHORT
Reserve
Reserve
FLOAT
Reserve
Reserve
FLOAT
Length RW (bytes)
rw rw rw rw
rw
rw
rw
rw rw rw rw rw rw rw
Default Min. Max.
0
0
1
0
0
1
0
0
1
1
0
1
0
0
1
0
0
1
1
0
1
0
0
1
0
0
1
0
0
1
0
0
1
0
0
0
Modbus registers 1544.11 1544.10 1544.9 1544.8
1544.7
1544.6
1544.5
1544.4 1544.3 1544.2 1544.1 1545 1546 1548
6.13.2
Device MAC address
Each SIWAREX module has a unique MAC address. This MAC address cannot be changed by the user.
6.13.3
IP address
Assign the IP address using the Primary Setup Tool, SIWATOOL, or via the SIMATIC (see chapter "Ethernet approvals (Page 143)").
6.13.4
Subnet mask
Assign the subnet mask of your network.
SIWAREX WP521/WP522
Manual, 04/2016, A5E36695225A
99
Scale parameters and functions 6.13 DR 12 Ethernet parameters
6.13.5
Gateway
If a gateway is used between the SIWAREX WP251/WP522 and the communication partner, you enter the address of the gateway here.
If a gateway is not present, enter the IP address of the SIWAREX module.
6.13.6
Device name
This parameter can be used to assign a name to the weighing module in the Ethernet network. The length of the name is limited to 32 characters. Empty spaces must be filled by "x".
6.13.7
Unit identifier channel 1 or channel 2
This parameter is used to create a logical connection via Modbus TCP/IP. The parameter pairs "Unit identifier" and "Port number" determines the logical connection of a channel with the Modbus master if a common IP address is used.
If there is only one IP address available for the module and the same port number is used (e.g. 502), the unit identifier must be different in order for each weighing channel to create a logically separate connection.
6.13.8
Modbus TCP port number channel 1 or channel 2
This parameter is used to create a logical connection via Modbus TCP/IP. The parameter pairs "Unit identifier" and "Port number" determines the logical connection of a channel with the Modbus master if a common IP address is used.
If there is only one IP address available for the module and the same unit identifier is used (e.g. 2), the port number must be different in order for each weighing channel to create a logically separate connection.
6.13.9
Byte swap
With these parameters, the byte order of variables in the communication via Modbus TCP/IP is determined.
100
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
6.14
DR 13 RS485 parameters
Scale parameters and functions 6.14 DR 13 RS485 parameters
6.14.1
Overview
The parameters which define the response of the RS485 interface are specified in data record DR 13. If the interface is not used, the default values can be retained.
Procedure Check the parameters and modify them as required Transfer the data record to the scales
Table 6- 11 Assignment of data record 13
Variable
Note
Data record number
Contains no. of data record
Length
Data record length information
Application
Information about which application the data record belongs to
Version ID
Information about the current data record version
RS485 protocol 0: No protocol
(Page 102)
1: MODBUS RTU
2: SIEBERT display
RS485 baud 0: 9 600 bps rate (Page 103) 1: 19 200 bits/s
2: 38 400 bits/s 3: 57 600 bits/s 4: 115 000 bps
RS485 charac- Character parity
ter parity
0: Even
(Page 103)
1: Odd
Bit 1
Reserve
Reserve
Bit 3
Reserve
Bit 4
Reserve
Bit 5
Reserve
Bit 6
Reserve
RS485 termi- Activation of the RS485
nation
termination
Type USHORT USHORT USHORT
USHORT
USHORT
USHORT
BIT
BIT BIT BIT BIT BIT BIT BIT
Length RW (bytes)
2
r
2
r
2
r
2
r
2
rw
2
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
Default Min.
13
-
24
-
141
-
1
1
1
0
3
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Max. -
Modbus registers 1558
1559
1560
65635
1561
2
1562
6
1563
1
1564.16
1
1564.15
1
1564.14
1
1564.13
1
1564.12
1
1564.11
1
1564.10
1
1564.9
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
101
Scale parameters and functions 6.14 DR 13 RS485 parameters
Variable
Note
Type
Byte swap for text fields
"0: Normal
BIT
1: The two characters in a Modbus register are transferred in the wrong order"
Byte swap for 16-bit values
"0: big endian (MSB first) BIT
1: little endian (LSB first)"
Byte swap for "0: big endian (MSB first) BIT
the two halves of a 32-bit value
1: little endian (LSB first)"
(INT32/FLOAT)
Word swap for "0: big endian (MSW
BIT
32-bit integers first)
(interchanging the two Modbus registers)
1: little endian (LSW first)"
Bit 12
Reserve
BIT
Bit 13
Reserve
BIT
Bit 14
Reserve
BIT
Bit 15
Reserve
BIT
RS485 Modbus MODBUS address for
address
Vito module
(Page 103)
USHORT
Decimal place for Siebert indicator (Page 103)
Decimal place for Siebert display
SHORT
MODBUS RTU Delay time for response
frame delay
with MODBUS RTU in
ms (RS485)
USHORT
Reserve 3
Reserve
FLOAT
Length RW (bytes)
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
2
rw
2
rw
2
rw
2
rw
4
rw
Default Min.
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
20
1
0
-
0
-
0
-
Max. 1
Modbus registers
1564.8
1
1564.7
1
1564.6
1
1564.5
1
1564.4
1
1564.3
1
1564.2
1
1564.1
255
1565
-
1566
-
1567
-
1568
6.14.2
RS485 protocol
This parameter defines the protocol for communication via the RS485 interface.
Value 0 1 2
Protocol No communication/protocol Modbus RTU SIEBERT display
102
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
6.14.3
Scale parameters and functions 6.14 DR 13 RS485 parameters
RS485 baud rate
This parameter defines the baud rate for the RS485 interface.
Value 0 1 2 3 4
Baud rate 9 600 bps 19 200 bps 38 400 bps 57 600 bps 115 000 bps
6.14.4
RS485 character parity
This parameter defines the character parity for the RS485 interface.
Value 0 1
Character parity Even Odd
6.14.5
RS485 termination
A termination resistor is switched internally with these parameters.
6.14.6
Byte swap
The byte order of variables in the communication via Modbus RTU is determined with these parameters.
6.14.7
RS485 Modbus address
This parameter defines the Modbus address (1 to 230) for communication via the RS485 interface with the Modbus protocol.
6.14.8
Decimal place for Siebert indicator
A fixed decimal place must be specified if a Siebert indicator is used. The following values are permitted: 0 ... 4
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
103
Scale parameters and functions 6.15 DR 14 SIMATIC interface parameters
6.14.9
Modbus RTU message frame delay
These parameters specify the delay time (in ms) expected by the module replying to a master request for data.
6.15
DR 14 SIMATIC interface parameters
6.15.1
Overview
The parameters which define the response of the SIMATIC interface are specified in data record DR 14. It is possible to define the process values to be output on the basis of the I/O area.
Procedure Check the parameters and modify them as required Transfer the data record to the scales
Table 6- 12 Assignment of data record 14
Variable
Note
Type
Length RW
Default
Min.
(bytes)
Data record Contains no. of USHORT 2
r
14
-
number
data record
Length
Data record
USHORT 2
r
16
-
length infor-
mation
Application
Information
USHORT 2
r
141
-
about which
application the
DR belongs to
Version ID
Information
USHORT 2
r
1
1
about the current
data record ver-
sion
Selection of Selection of
USHORT 2
rw
4
0
process value process value 1
1, 2
(S7 I/O inter-
(Page 105)
face): Code for
selection of pro-
cess variable to
be updated
Max. -
-
Modbus registers 1570
1571
1572
65635
1573
10
1574
104
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.15 DR 14 SIMATIC interface parameters
Variable
Note
Type
Length RW
Default
Min.
(bytes)
Selection of
USHORT 2
rw
10
0
process value 2
(S7 I/O inter-
face): Code for
selection of pro-
cess variable to
be updated
Possible Simatic SHORT 2
rw
1
1
mode
Reserve 2
Reserve
USHORT 2
rw
0
0
Max. 10
Modbus registers
1575
4
1576
-
1577
6.15.2
Selection of process value 1, 2
The weighing module can communicate with an S7-1500 CPU in two ways: Just via the I/O or by reading out complete data records. The I/O is faster and exhibits a higher performance. Two free-definable channels are available in the S7 I/O (process value 1 and process value 2). Users can decide which scale values (see table) are to be made available cyclically at these two parameters of the PLC.
Table 6- 13 Selection table for process value 1,2
Process value No process selected Gross process Net process Tare process Legal trade G/N weight G/N weight_x10 Gross-2-process-value Reserve Filtered digit intermediate value Unfiltered digit value Filtered digit value "Array: Status DI/DQs (PW[0.1]) Refresh counter (PW[2,3])", see Table 6-18 Assignment of data record 31 (Page 114) Reserve Reserve Reserve Async. error bits (32-bit): bits 0..15: Operating error BTF (word 0) bits 16..31: Technology error TNF (word 2), see Table 6-19 Assignment of data record 32 (Page 116)
Decimal code 0 1 2 3 4 5 6 7 8 9 10 11
12 13 14 15
From DR 30 30 30 30 30 30 30 31 31 31 31
32
Format FLOAT FLOAT FLOAT FLOAT FLOAT FLOAT FLOAT LONG LONG LONG USHORT USHORT
LONG
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
105
Scale parameters and functions 6.16 DR 15 tare default values
See also
Overview (Page 113) DR 32 alarm display (Page 116)
6.16
DR 15 tare default values
6.16.1
Overview
Data record DR 15 is used for external specification of the tare weight.
Procedure Enter the tare weight Transfer the data record to the scales Activate the tare weight with a command
Table 6- 14 Assignment of data record 15
Variable Note
Type
Length RW (bytes)
Data record Contains no. of USHOR 2
r
number
data record
T
Length
Data record
USHOR 2
r
length infor-
T
mation
Application Information about USHOR 2
r
which application T
the DR belongs
to
Version ID Information about USHOR 2
r
the current data T
record version
Default tare Tare manual
FLOAT 4
rw
weight
(Page 106)
Reserve R Reserve
SHORT 2
rw
Default
Min.
15
-
16
-
141
-
Max. -
-
Modbus registers 1578
1579
1580
1
1
65635
1581
0
0
Depends 1582
on specifi-
cation in
DR 3
0
0
-
1584
6.16.2
Default tare weight
If a tare weight is to be used, first it must be entered in DR15 and then activated with the command "Set Tare 1 (1013)" . The tare weight must not exceed the maximum values specified in data record DR 3.
106
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
6.17
DR 16 simulation value
Scale parameters and functions 6.17 DR 16 simulation value
6.17.1
Overview
Specifying a weight value using data record DR 16 disables the measuring input of the SIWAREX module and "simulates" a weight with the specified value. The SIWAREX module must first be released for simulation mode in DR 3 and then switched to simulation mode with command no. 3.
Procedure Release simulation mode in DR 3 Enter the weight to be simulated Transfer the data record to the SIWAREX module Start the simulation using command "Weight simulation on (3)" Stop the simulation using command "Weight simulation off (4)"
Table 6- 15 Assignment of data record 16
Variable
Note
Type
Data record Contains no. of data record number
Length
Data record length information
Application
Information about which application the data record belongs to
Version ID
Information about the current data record version
Weight simulation specification (Page 107)
Weight value specification (only relevant if simulation mode is enabled)
USHORT USHORT USHORT
USHORT FLOAT
Reserve
Reserve
FLOAT
Length RW (bytes)
2
r
2
r
2
r
2
r
4
rw
2
rw
Default Min.
16
-
Max. -
Modbus registers
1598
16
-
-
1599
141
-
-
1600
1
1
65635 1601
0
maxi- maxi- 1602
mum mum
weigh- weigh-
ing
ing
range range
0
0
-
1604
6.17.2
Weight simulation specification
Only use weight simulation values which are within the measuring range of the scales. The word "TEST" is displayed on the main display during simulation and a status bit is set. From the start of simulation onward, all parameterized limits, inputs and outputs etc. refer to the simulation weight.
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
107
Scale parameters and functions 6.18 DR 18 digital output control specifications
6.18
DR 18 digital output control specifications
6.18.1
Overview
If a digital output is defined in data record DR 7 for control with data record DR 18 (see Assignment for digital output 0, 1, 2, 3 (Page 89)), you can control this output with data record DR 18. Transfer is always for all four digital outputs. Only outputs which have been configured for control via DR 18 (see DR7 interface parameters (Page 86)) are activated or deactivated according to the content of data record DR 18.
Procedure
Check or adapt the desired parameter settings of the digital outputs in data record 7
Define the value for digital output 0, 1, 2, 3
Transfer the data record to the scales
Table 6- 16 Assignment of data record 18
Variable
Note
Type
Data record number Length
Application
Version ID
Specification for digital output 0, 1, 2, 3 (Page 109)
Contains no. of data record
Data record length information
Information about which application the DR belongs to
Information about the current data record version
Specification of digital output 0=1 -> DA0 output active (only if assignment Code 21 is assigned to the output, see DR 7)
Specification of digital output 1=1 -> DA1 output active (only if assignment Code 21 is assigned to the output, see DR 7)
Specification of digital output 2=1 -> DA2 output active (only if assignment Code 21 is assigned to the output, see DR 7)
USHORT USHORT USHORT USHORT BIT
BIT
BIT
Length RW (bytes)
2
r
2
r
2
r
2
r
0
rw
0
rw
0
rw
Default Min.
18
-
12
-
141
-
1
1
0
0
0
0
0
0
Max. -
Modbus registers
1606
-
1607
-
1608
65635 1609
1
1610.16
1
1610.15
1
1610.14
108
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.19 DR 30 current process values
Variable
Bit 4 Bit 5 Bit 6 Bit 7 Bit 8 Bit 9 Bit 10 Bit 11 Bit 12 Bit 13 Bit 14 Bit 15 Reserve 1
Note
Type
Specification of digital output 3=1 -> DA3 output active (only if assignment Code 21 is assigned to the output, see DR 7) Reserve Reserve Reserve Reserve Reserve Reserve Reserve Reserve Reserve Reserve Reserve Reserve Reserve
BIT
BIT BIT BIT BIT BIT BIT BIT BIT BIT BIT BIT BIT USHORT
Length RW (bytes)
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
0
rw
2
rw
2
rw
Default Min.
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
-
Max. 1
Modbus registers
1610.13
1
1610.12
1
1610.11
1
1610.10
1
1610.9
1
1610.8
1
1610.7
1
1610.6
1
1610.5
1
1610.4
1
1610.3
1
1610.2
1
1610.1
-
1611
6.18.2
Specification for digital output 0, 1, 2, 3
Digital outputs 0 to 3 can be controlled using data record 18 with this parameter. This function can be used for commissioning purposes, for example.
Note The reaction of the controlled outputs in the case of SIMATIC CPU stop, failure or module fault can be determined by the user in DR 7.
6.19
DR 30 current process values
6.19.1
Overview
Current states and process values in the scales can be monitored using process values and advanced process values from data record DR 31. Monitoring selected data during commissioning is extremely useful as it helps you to optimize parameters.
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
109
Scale parameters and functions 6.19 DR 30 current process values
Procedure
Read data record DR 30 via a time-controlled OB
Display/analyze the required tags
It is not always necessary to cyclically read data record DR 30. If corresponding process tags have already been selected in DR 14 (Page 104), they are sent to the scale data block over the I/O interface using the FB. In this case, you can use these tags and also all status bits without the data communication.
Table 6- 17 Assignment of data record 30
Variable
Note
Type
Data record number Length Application
Version ID
1/4d zero Max 9e/-20d
Tared Manual tare set (pT) Reserve Waiting for standstill
Contains no. of data record
USHORT
Data record length information
USHORT
Information about which USHORT application the data record belongs to
Information about the current data record version
USHORT
Set if gross less than ± BIT 0.25e
Set if the weight has BIT exceeded the gross weighing range by more than 9 display steps (d)
Set if tare memory is BIT not equal to zero
Set if the tare memory BIT is assigned an external specified value 1
BIT
Set if module is waiting BIT for standstill to execute command
Length RW (bytes)
2
r
2
r
2
r
2
r
2
r
0
r
0
r
0
r
0
r
0
r
Standstill Reserve Empty Limit value 1 Limit value 2 Min violated
Set if standstill condition BIT is met
BIT
Set if "Empty" condition BIT is met
Limit value 1 has re- BIT sponded
Limit value 2 has re- BIT sponded
Set if min. is violated BIT
0
r
0
r
0
r
0
r
0
r
0
r
Default Min. Max.
30
-
-
68
-
-
141
-
-
1
1
255
0
-
-
0
-
-
0
-
-
0
-
-
0
-
-
0
-
-
0
-
-
0
-
-
0
-
-
0
-
-
0
-
-
0
-
-
Modbus registers 3000 3001 3002
3003
3004.16 3004.15
3004.14 3004.13
3004.12 3004.11
3004.10 3004.9 3004.8 3004.7 3004.6 3004.5
110
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.19 DR 30 current process values
Variable
Note
Type
Reserve
BIT
Channel active Channel is set active BIT
Channel dis- 1= Status comes from BIT play channel B channel B
Channel dis- 1= Status comes from BIT play channel A channel A
Reserve
BIT
Reserve
BIT
Reserve
BIT
Reserve
BIT
Impedance error
Set when leaving the BIT setpoint range of impedance
Wrong time Wrong time due to
BIT
empty buffer. Reset
clock.
Trace active
Set when trace is run- BIT ning
Operator error Set with synchroniza- BIT by digital input tion error by command
to digital input
Calibration characteristic curve implausible
Points of calibration
BIT
characteristic curve are
not plausible or com-
plete
Service mode Service mode is active BIT
Simulation mode
Simulations mode is
BIT
active
Reserve
BIT
Reserve
BIT
CPU stop or CPU failure
Set when switch S1 is BIT OFF (operation with SIMATIC) and S7 CPU has failed or ODIS is active
Startup
Startup has taken
BIT
place, is deleted again
after 5 seconds
Status fault
Operating error pending BIT
Gross process Gross weight (process
weight
value)
(Page 112)
FLOAT
Net process weight (Page 112)
Net weight (process value)
FLOAT
Length RW (bytes)
Default Min. Max.
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
0
r
0
-
-
0
r
0
0
r
0
-
-
-
-
0
r
0
-
-
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
-
-
-
-
-
-
-
-
-
-
0
r
0
0
r
0
4
r
0
4
r
0
-
-
-
-
-
-
-
-
Modbus registers 3004.4 3004.3 3004.2 3004.1 3005.16 3005.15 3005.14 3005.13 3005.12
3005.11
3005.10 3005.9
3005.8
3005.7 3005.6 3005.5 3005.4 3005.3
3005.2
3005.1 3006
3008
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
111
Scale parameters and functions 6.19 DR 30 current process values
Variable
Note
Type
Tare process weight (Page 113)
Gross / net weight (Page 113)
Gross / net weight with increased resolution (x 10) (Page 113)
Gross process weight 2 (Page 113)
Percentage gross weight based on maximum capacity (DR3)
Refresh counter for process values (Page 113)
Date and time
Tare weight (process value)
Gross or net weight
Legal trade Gross/Net weight x10
Gross weight after first filter
Percentage gross weight based on maximum capacity (rounded to one decimal place)
Refresh counter incremented by 1 if weight values were changed
SIMATIC DTL format
FLOAT FLOAT FLOAT
FLOAT FLOAT
USHORT DTL
Length RW (bytes)
4
r
4
r
4
r
4
r
4
r
2
r
12
rw
Reserve Reserve Reserve
SHORT
2
r
FLOAT
4
r
FLOAT
4
r
Default Min. Max.
0
-
-
0
-
-
0
-
-
0
-
-
0
-
-
0
-
-
DTL#197 0-01-0100:00:00. 0
0
-
-
0
-
-
0
-
-
Modbus registers 3010 3012 3014
3016 3018
3020
3021
3029 3030 3032
6.19.2
Gross process weight
The current gross weight. The rounding is performed according to the specifications in data record DR 3 with the parameter "Automatic zero adjustment (Page 72)".
6.19.3
Net process weight
The current net weight. The rounding is performed according to the specifications in data record DR 3 with the parameter "Automatic zero adjustment (Page 72)".
112
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
6.19.4
Scale parameters and functions 6.20 DR 31 advanced current process values
Tare process weight
The current tare weight. The rounding is performed according to the specifications in data record DR 3 with the parameter "Automatic zero adjustment (Page 72)".
6.19.5
Gross / net weight
The current weight for the main display. Resolution corresponds setting in data record DR 3 Scale interval (Page 72).
6.19.6
Gross / net weight with increased resolution (x 10)
The current weight for the main display in higher resolution. Resolution corresponds setting in data record DR 3 Scale interval (Page 72) x 10.
6.19.7
Gross process weight 2
The current gross weight after the first filter. Since the value was not even filtered with filter 2, it is usually filtered weaker than the gross process value.
6.19.8
Refresh counter for process values
Measured values are calculated every 10 ms in the SIWAREX module. A counter is incremented by 1 each time. Once the counter reaches the value 65536, it starts again from zero. The counter can be used as a time stamp for data record DR 30.
6.20
DR 31 advanced current process values
6.20.1
Overview
Current states and process values in the scales can be monitored using advanced process values and process values (DR 30). This data is not required for standard operation of the scales.
Monitoring selected data during trial operation is extremely useful as it helps you to optimize parameters.
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
113
Scale parameters and functions 6.20 DR 31 advanced current process values
Procedure Read data record DR 31 Display/analyze the required tags
Table 6- 18 Assignment of data record 31
Variable Note
Type
Length RW (bytes)
Data record Contains no. of data record USHORT 2
r
number
Length
Data record length information USHORT 2
r
Application Information about which ap- USHORT 2
r
plication the data record be-
longs to
Version ID Information about the current USHORT 2
r
data record version
Unfiltered Unfiltered digital value from LONG
4
r
digit value the AD converter
(Page 115)
Filtered
Filtered digit intermediate
LONG
4
r
digit value value of the AD converter
after the after the first filter
first filter
(Page 115)
Digits fil- Filtered digit value from the LONG
4
r
tered
AD converter after the second
(Page 115) filter
Load cell Currently measured imped- FLOAT 4
r
impedance ance of the load cells in ohms
Current
Current status of input 0
BIT
0
r
status of
Current status of input 1
BIT
0
r
input 0, 1, 2
(Page 115) Current status of input 2
BIT
0
r
Current status of input 3
BIT
0
r
Bit 4
Reserve
BIT
0
r
Bit 5
Reserve
BIT
0
r
Bit 6
Position of DIP switch 1
BIT
0
r
Bit 7
Position of DIP switch 2
BIT
0
r
Current
Current status of output 0
BIT
0
r
status of
Current status of output 1
BIT
0
r
digital output 0, 1, 2,
Current status of output 2
BIT
0
r
3
Current status of output 3
BIT
0
r
(Page 115)
Reserve
BIT
0
r
Reserve
BIT
0
r
Reserve
BIT
0
r
Reserve
BIT
2
r
Default Min.
31
-
32
-
101
-
1
1
0
-
0
-
0
-
0
-
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Max.
-
-
65635
-
-
-
-
1 1 1 1 1 1 1 1 1 1 1 1
1 1 1 1
Modbus registers 3300
3301 3302
3303
3304
3306
3308
3310
3312.16 3312.15 3312.14 3312.13 3312.12 331211 3312.10 3312.9 3312.8 3312.7 3312.6 3312.5
3312.4 3312.3 3312.2 3312.1
114
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.20 DR 31 advanced current process values
Variable Note
Type
Length RW (bytes)
Refresh
Refresh counter incremented USHORT 2
r
counter for by 1 if weight values were
process
changed
values
(Page 116)
Current
Currently measured load cell FLOAT 4
r
load cell signal
signal in
mV
(Page 116)
Default Min.
0
-
0
-
Max. -
-
Modbus registers 3313
3314
6.20.2
Unfiltered digit value
The unfiltered digit value is the internal measured value immediately before filtering.
6.20.3
Filtered digit value after the first filter
Filtered digit value is the internal measured value immediately after the first filtering.
6.20.4
Digits filtered
Filtered digit value is the internal measured value after the filtering with the first and second filters.
6.20.5
Current status of input 0, 1, 2
This parameter allows you to check the current status of the digital inputs.
6.20.6
Current status of digital output 0, 1, 2, 3
This parameter allows you to check the current status of the digital outputs.
6.20.7
Current status of DIP switch
Switch 1: ON - Operation without SIMATIC (stand-alone mode) OFF - Operation in SIMATIC Switch 2:
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
115
Scale parameters and functions 6.21 DR 32 alarm display
No meaning
6.20.8
Refresh counter for process values
Measured values are calculated every 10 ms in the SIWAREX module. A counter is incremented by 1 each time. Once the counter reaches the value 65536, it starts again from zero. The counter can used like a time stamp for the data record DR 30/31.
6.20.9
Current load cell signal in mV
Display of currently measured signal voltage of the load cell(s) in mV.
6.21
DR 32 alarm display
Data record DR 32 is used in the Modbus communication with Modbus master.
Operating errors or technology errors are reported spontaneously and the bit display is extended approximately 3 seconds so that there is enough time to register the message. The operating errors are displayed as long as the error is pending.
Data and operating errors are treated as follows.
If a function which is used to write to the holding register is completed with an error, the data or operator error reported can be read from data record DR 32. The messages are displayed for 3 seconds and do not need to be acknowledged from the SIWAREX module.
The exact cause of a parameter or operating error can be determined through additional information. The additional information is provided in the message list (section Message list (Page 124)).
At successful completion of a function for writing to the SIWAREX register, data record DR 32 does not have to be polled.
Table 6- 19 Assignment of data record 32
Variable
Note
Type
Length RW Default Min Max Mod-
(bytes)
. .
bus
regis-
ters
Data record number
Contains no. of data record USHORT 2
r
32
- - 3500
Length
Data record length information USHORT 2
r
28
- - 3501
Application
Information about which appli- USHORT 2 cation the DR belongs to
r
141
- - 3502
Version ID
Information about the current USHORT 2 data record version
r
1
1 655 3503 35
1000 Operating error pend- At least one operating error Bit_0
0
ing
has occurred (= 1 as long as
an operating error is pending)
r
0
- - 3504
116
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.21 DR 32 alarm display
Variable
Note
Type
1108 Short-circuit
1104 Undervoltage 1109 Fault digital outputs
1105 Overload 1106 Underload 1102 ADU error 1003 Checksum error (parameter) 1004 Checksum error (program) 1001 Watchdog Unable to connect to SIMATIC 2000 Technological error detected 2001 Timeout tare or zero
2002 Trace overloaded
Cold restart
Download error
-
Short-circuit to power supply Bit_1 line to the load cell
Undervoltage at SENSE input Bit_2
Fault digital outputs (overtemperature, no ext. supply voltage)
Bit_3
Overload
Bit_4
Load low
Bit_5
Reserve
Bit_6
A/D converter error
Bit_7
Reserve
Bit_8
Checksum error with parame- Bit_9 ters
Reserve
Bit_10
Checksum error in program code
Bit_11
Reserve
Bit_12
Restart after fatal error
Bit_13
Reserve
Bit_14
The firmware must be updated Bit_15 using the new TIA Portal
At least one technology is a Bit_0 fault is pending (group error)
Taring or zeroing is not possible because no standstill occurred within the waiting period.
Bit_1
The configured cycle for the trace recording cannot be processed: Reading in progress or the buffer is full, data recording has stopped
Bit_2
Reserve
Bit_3
Reserve
Bit_4
Restart after power failure or Bit_5 firmware update
FW download aborted or rejected
Bit_6
Reserve
Bit_7
Reserve
Bit_8
Reserve
Bit_9
Reserve
Bit_10
Reserve
Bit_11
Length (bytes)
0
RW Default
r
0
Min Max Mod-
. .
bus
regis-
ters
- - 3504
0
r
0
0
r
0
- - 3504 - - 3504
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
0
r
0
1
r
0
0
r
0
0
r
0
- - 3504 - - 3504 - - 3504 - - 3504 - - 3504 - - 3504
- - 3504 - - 3504
- - 3504 - - 3504 - - 3504 - - 3504
- - 3505
- - 3505
0
r
0
- - 3505
0
r
0
0
r
0
0
r
0
- - 3505 - - 3505 - - 3505
0
r
0
- - 3505
1
r
0
- - 3505
0
r
0
- - 3505
0
r
0
- - 3505
0
r
0
- - 3505
0
r
0
- - 3505
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
117
Scale parameters and functions 6.21 DR 32 alarm display
Variable
Note
Type
Default parameters loaded
Factory settings restored
-
Reserve
Reserve
Note to users about the newly loaded parameters
Note to users about the newly loaded parameters
Reserve
5000 Data or command error
Group fault
6050 Command unknown Issued command code unknown.
6051 Command currently not possible
"Additional information" contains additional information
6052 Error service command
"Additional information" contains additional information
6053 Calibration command All commands for adjustment,
error
calibration
6054 Scale command error "Additional information" contains additional information
6055 Scale command error "Additional information" contains additional information
6056 Memory command error
"Additional information" contains additional information
7050 Unknown data record Requested DR unknown
7051 Parameter input cur- "Additional information" con-
rently not possible
tains additional information
7052 Parameter change not "Additional information" conpossible due to write pro- tains additional information tection
7053 Error in calibration parameter DR3
"Additional information" contains additional information
7054 Parameter error DR5 "Additional information" contains additional information
7055 Parameter error DR6 "Additional information" contains additional information
7056 Parameter error DR7 "Additional information" contains additional information
7057 Parameter error DR8/DR48
"Additional information" contains additional information
7058 Parameter error in DR10 or DR11
"Additional information" contains additional information
7059 Error in interface parameters DR12-DR14
"Additional information" contains additional information
Bit_12 Bit_13 Bit_14 Bit_15 Bit_0Bit_15 Bit_0 Bit_1 Bit_2 Bit_3 Bit_4 Bit_5 Bit_6 Bit_7 Bit_8 Bit_9 Bit_10
Bit_11 Bit_12 Bit_13 Bit_14 Bit_15 Bit_0 Bit_1
Length RW Default Min Max Mod-
(bytes)
. .
bus
regis-
ters
0
r
0
- - 3505
0
r
0
- - 3505
0
r
0
- - 3505
1
r
0
- - 3505
0
r
0
0
0
- - 35063507
- - 3508
0
0
- - 3508
0
r
0
- - 3508
0
r
0
- - 3508
0
r
0
- - 3508
0
r
0
- - 3508
0
r
0
- - 3508
1
r
0
- - 3508
0
r
0
0
r
0
- - 3508 - - 3508
0
r
0
- - 3508
0
r
0
0
r
0
0
r
0
0
r
0
1
r
0
0
r
0
0
r
0
- - 3508 - - 3508 - - 3508 - - 3508 - - 3508 - - 3509 - - 3509
118
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.22 DR 34 ASCII main display value
Variable
Note
Type
Length (bytes)
7060 Error in extended
"Additional information" con- Bit_2
0
parameters DR15 DR19 tains additional information
-
Reserve
Bit_3-
0
Bit_15
Additional information about Additional information about USHORT 1 data and operating errors data and operating errors (see
Additional Information list)
Data and operating error code
Error number (see error list) USHORT 2
Reserve
Reserve
USHORT 2
RW Default
r
0
r
0
r
0
r
0
r
0
Min Max Mod-
. .
bus
regis-
ters
- - 3509
- - 35093510
- - 3511
- - 3512 - - 3513
6.22
DR 34 ASCII main display value
6.22.1
Overview
The ASCII weight value corresponds to the value on the main display of the scale and can be used in addition to the main display for an auxiliary display / operating display.
Table 6- 20 Assignment of data record 34
Variable
Note
Type
Length RW (bytes)
Data record Contains no. of data record
USHORT 2
r
number
Length
Data record length information USHORT 2
r
Application Information about which appli- USHORT 2
r
cation the DR belongs to
Version ID Information about the current USHORT 2
r
data record version
ASCII dis- Maximum length and actual
UBYTE[2] 2
r
play string length of string
header
Content of For display of legal-for-trade CHAR[16] 16
r
main display weight value, legal-for-trade
as ASCII resolution, etc. (see below)
string
(Page 120)
Default Min.
34
-
26
-
101
-
1
1
16,2
-
" "
-
Max. -
Modbus registers
4000
-
4001
-
4002
65635 4003
-
4004
-
4005
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
119
Scale parameters and functions 6.23 DR 48 date and time 2 (for Modbus)
6.22.2
Content of main display as ASCII string
The following values can be displayed in non-automatic weighing instruments (NAWI) applications:
Display content Standard display Increased resolution (temporarily) Net process display Gross process display Tare display (temporary) same as during preset tare active Weight simulation active Display overflow Operator error
Activation per command 710 701 (only possible in "Standard display" mode) 714 715 705 705
3 -
Identifier B/G x
n
T p
B -
6.23
120
DR 48 date and time 2 (for Modbus)
The current date and time can be set or read via data record DR 48. The clock is not buffered and can only continue to function without power for about 30 seconds. Data record DR 8 is used for date and time when the Modbus protocol is not used.
Procedure
Set the date and time
Transfer the data record to the SIWAREX module
Table 6- 21 Table 8- 27 Assignment of data record 48
Variable
Data record number Length
Application
Version ID
Year Month Day
Note
Contains no. of data record
Type USHORT
Length RW (bytes)
2
r
Data record length USHORT 2
r
information
Information about
USHORT 2
r
which application the
data record belongs
to
Information about the USHORT 2
r
current data record
version
Year number
USHORT 2
rw
Month
USHORT 2
rw
Day in the month
USHORT 2
rw
Default Min.
48
-
24
-
141
-
1
1
2015 1 1
2012 1 1
Max. -
Modbus registers
4500
-
4501
-
4502
6563 4503 5
4504 12 4505 31 4506
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Scale parameters and functions 6.23 DR 48 date and time 2 (for Modbus)
Variable Note
Hour
Minute
Second
Millisecond
Day of the week
Hour Minute Second Millisecond
Day of the week
Type
USHORT USHORT USHORT USHORT
Length RW (bytes)
2
rw
2
rw
2
rw
2
rw
Default Min.
0
0
0
0
0
0
0
0
USHORT 2
rw 1
1
Max.
23 59 59 999
Modbus registers 4507 4508 4509 4510
7
4511
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
121
Alarm logging
7
7.1
Message types
The messages in the electronic weighing system described here are divided into three types.
Operating messages
System status messages can be generated spontaneously at any time by an unexpected event. They include internal and external hardware problems which can occur spontaneously during weighing.
Technological error
Technology errors occur spontaneously due to the weighing process.
The status bits are not messages in contrast. The status indicators describe the status of the scale in normal operation and can always be observed and evaluated.
Data and operating errors
The data and operating errors are always a response to a command due to a plausibility check.
These are data errors if a plausibility error has been detected in a data packet which was sent to the module and receipt of the packet has been rejected by the module.
These are operating errors if the module cannot execute the sent command in its current operating state.
7.2
Message paths
You can read out the messages using different paths. You define the path for forwarding and processing of messages during configuration.
The messages are processed for two basic purposes:
For display or recording on an operator panel for the operator
For linking in the control software to control specific reactions in the process.
The following message paths are possible:
Output of the message buffer to the SIWATOOL program (takes place automatically)
Output by means of function block as bit field in Scale data block
Certain operating errors can be transmitted as diagnostic interrupts to the SIMATIC CPU and evaluated by OB82
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
123
Alarm logging 7.3 Evaluating messages with the help of SIWATOOL
7.3
Evaluating messages with the help of SIWATOOL
The electronic weighing system has a message buffer for each weighing channel. The buffer can contain up to 60 entries. If the number of alarms in the alarm buffer exceeds 60, the oldest entry is overwritten. The message buffer can be read out at any time with the help of SIWATOOL (menu item "Read out all data records") and saved together with the scale parameters. This facilitates the detection, analysis and correction of errors in the system.
7.4
Detecting messages with the help of FB SIWA
All messages of the SIWAREX module can be fully detected and processed in the controller using the SIWAREX WP521/WP522 function block. The messages can be evaluated directly in a signaling system by means of a bit signaling area in the scale data block. The message texts are stored in the signaling system. The message text is output when a bit becomes "1".
7.5
Message list
7.5.1
Introduction
The message list is an overview of all messages that the SIWAREX module can generate. A message can be quickly identified by the message code (number).
7.5.2
System status message list
Operator error (code 1000 to 1999) 1000 Operating error pending 1001 Watchdog
1003 Checksum incorrect parameter 1004 Checksum incorrect program 1008 Firmware version not compatible 1102 ADU error
1104 Undervoltage
Error code 1000 1001
1003 1004 1008 1102
1104
Description and remedy
Group message, at least one operating error exists.
Watchdog, error is displayed for at least 10 seconds. A serious error has occurred in the function of SIWAREX, e.g. program error, severe electromagnetic influence on device, etc.
Contact the SIWAREX Support if the error occurs multiple times.
Checksum error at parameter. Critical error because the parameters are no longer safe.
Checksum error program code. Critical error because the program is no longer safe.
The firmware must be updated via the TIA Portal.
AD converter error when reading in the measured value. If the error occurs again, make sure that the EMC recommendations are observed (chapter Electrical, EMC and climatic requirements (Page 161)).
Undervoltage at sensor cables
124
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Operator error (code 1000 to 1999) 1105 Overload 1106 Underload 1108 Short-circuit 1109 Fault digital outputs
Alarm logging 7.5 Message list
Error code 1105 1106 1108 1109
Description and remedy Overload of scale (ca. 110%) Underload of scale (ca. -10%) Short-circuit to power supply line to the load cell Fault digital outputs (overtemperature, no ext. supply voltage)
7.5.3
Technology error message list
Technology error (code 2000 to 4999) 2000 Technological error detected 2001 Taring/zeroing timeout
Error code 2000 2001
2002 Trace overloaded
2002
2005 Restart after voltage dip 2006 Download error
2005 2006
Description and remedy
Group message, at least one technology error exists
Taring of scale or set to zero is not possible because a standstill was not reached during the standstill time. The command was discarded.
The configured recording rate for trace cannot be processed. Set a slower recording rate (section "Trace recording cycle (Page 90)")
Restart after power failure or firmware download.
A firmware download was canceled/rejected, e.g. because the transferred file is invalid.
7.5.4
Message list data and operating errors with additional information
Additional information is available for most data or command errors. The cause of the error is described in more detail using this information. If a data or command error bit is set, the additional information is filled accordingly at the same time. In this way, both the error bits as well as the additional information must be analyzed together in order to locate the cause of the error in the program.
Data and operating errors
5000 Data or command error 6050 Command unknown 6051 Command currently not possible
6052 Error service command
Error code 5000
Supplementary info
-
6050
-
6051
-
6052
4500 4501 4502
4510 4516
Description
Group error, at least one data or command error is pending
Given command code unknown. Check the command code. The desired command could not be executed because, for example, another process is running at this time. Additional information contains more detailed information. , because fault is pending , because there is no standstill , because already waiting for standstill Command from the group service commands could not be executed. Additional information contains more detailed information. , because no service mode active , because no service activated for other channel
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
125
Alarm logging 7.5 Message list
Data and operating errors Error code 6053 Calibration command 6053 error
6054 Scale command error 6054
Supplementary info
4510 4520 4521 4522 4523 4524
6056 Memory command error
6056
7050 Unknown data record
7051 Parameter input currently not possible
7050 7051
7053 Error in calibration parameter DR3
7053
4500 4501 4502 4530 4531
4500 4550 -
4510
3323 3199 3247 3247 3323 3199 3086 3087 3088 3081 3083 3085 3248 3288 3333 3335
Description
Command from the group adjustment commands failed. Additional information contains more detailed information. , because no service mode active , because distance of adjustment digits too low , because order of calibration points wrong , because calibration is not yet complete , because adjustment digits are out of range , because calibration weight 0 Command from the group weighing commands (zero, tare, etc.) could not be executed. Additional information contains more detailed information. , because fault is pending , because there is no standstill , because already waiting for standstill , because weight outside allowable tare range , because weight outside allowable zero range Trace command was rejected. Additional information contains more detailed information. , because fault is pending , because trace memory full Requested data record is unknown. Parameter input is currently not possible. Additional information contains more detailed information. , because no service mode active Additional Information refers to the non-plausible parameter in DR3 Unit of weight Gross identifier Reserve 1a Reserve 1b Unit of weight Gross identifier Calibration weight 0 Calibration weight 1 Calibration weight 2 Adjustment digits 0 (measured) Adjustment digits 1 (measured) Adjustment digits 2 (measured) Resolution Maximum tare load Negative zeroing value Positive zeroing value
126
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Alarm logging 7.5 Message list
Data and operating errors Error code 7054 Parameter error DR5 7054
Supplementary info 3274 3317 3316 3175 3236 3906 4510 4520 4521 4524 4610 4611 4612
7055 Parameter error DR6 7055
3105 3115 3116 3118 3124 4510 4530 4531
3433 3203 3202 3206 3205 3150 2451
7056 Parameter error DR7 7056
4640
3055 3056 3057
Description
Standstill value Standstill time Waiting period Cut-off frequency low-pass filter 1 Order no. low-pass filter 1 Period average value filter , because no service mode active , because distance of adjustment digits too low , because order of calibration points wrong , because calibration weight 0 , because of error in Max - Min weighing range , because resolution not allowed , because the cutoff frequency of the low-pass filter TP1 is too low Additional Information refers to the non-plausible parameter in DR5 Effective tare manual Effective tare - semiautomatic Zero value Current zero value auto. Dead load , because no service mode active , because weight outside allowable tare range , because weight outside allowable zero range Additional Information refers to the non-plausible parameter in DR6 Basis of limits Limit 1 on value Limit 1 off value Limit 2 on value Limit 2 off value Blank value Uniform delay time for - Switch ON / OFF limit 1 - Switch ON / OFF limit 2 - Switch ON blank message , because specification in percent outside the permissible range Additional Information refers to the non-plausible parameter in DR7 Assignment for digital input 0 Assignment for digital input 1 Assignment for digital input 2
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
127
Alarm logging 7.5 Message list
Data and operating errors
7057 Parameter error DR8/DR48 7058 Parameter error in DR10 and DR11
7059 Error in interface parameters DR12-DR14
Error code
7057 7058
7059
Supplementary info 3162 3059 3060 3061 3062 3884 3881 3882 3312 4650 4651 4652 4653
3121
3283 3227 3180 3228 3888 1107 3889 3324 3890 3891 4510 4660 1190
3138 3103 3102 4107 3892 4108 3893 3253
Description
Filter settings for the digital inputs Assignment for digital output 0 Assignment for digital output 1 Assignment for digital output 2 Assignment for digital output 3 Monitoring of the digital outputs and their supply voltage Reaction of digital outputs to errors (independent of switch) Reaction of digital outputs at CPU stop or failure Trace recording cycle , because DQ.0 assignment not possible , because DQ.1 assignment not possible , because DQ.2 assignment not possible , because DQ.3 assignment not possible Additional Information refers to the non-plausible parameter in DR8 / DR48 Date and time Additional Information refers to the non-plausible parameter in DR10 Switch 50/60Hz Number of support points LC parameter Rated load Overload limit Impedance reference value Permissible impedance deviation String header Load cell manufacturer Load cell order number , because no service mode active , because input range exceeded (parameter * overload limit) Channel status Additional Information refers to the non-plausible parameter in DR12 - DR14 Device MAC address 1 IP address x.n.n.n Gateway x.n.n.n Unit identifier channel 1 TCP port channel 1 Unit identifier channel 2 TCP port channel 2 RS485 protocol
128
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Alarm logging 7.5 Message list
Data and operating errors
7060 Error in extended parameters DR15 DR19
Error code 7060
Supplementary info 3250 3221 3126 3895 3264 3265 4510 4670 4671 4672 4673 4674
3897 4530
Description
RS485 baud rate Modbus address RTU (RS485) Decimal place remote display Modbus RTU message frame delay Selection process value 1 (S7 I/O interface) Selection process value 2 (S7 I/O interface) , because no service mode active , because selection code is not defined for process values 1 , because selection code is not defined for process values 2 , because MAC address is not identical , because IP address is invalid , because Modbus TCP port invalid Additional Information refers to the non-plausible parameter in DR15 - DR19 Tare default value , because weight outside allowable tare range
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
129
Alarm logging 7.5 Message list
7.5.5
LED name
Messages by LEDs on the module
The LEDs on the front of the SIWAREX module signal the following status and error messages.
Symbol
Sym- LED name bol
Status scale A (CH 0)
A
Service mode
Limit 1 triggered
Limit 2 triggered
Limit 3 triggered
Standstill
Maximum weight Status load cell Activate RS485 com.
Status digital outputs Dig. Output 0 active Dig. Output 1 active Dig. Output 2 active Dig. Output 3 active Dig. Input 0 active Dig. Input 1 active Dig. Input 2 active LAN Rx/Tx (channelspec.) LAN LINK, Rx/Tx (PHY)
Voltage channel A OK
Max LC COM R/T DQ P .0 .1 .2 .3 .0 .1 .2 LAN R/T LAN LK, R/T PWR
B Status scale B (CH 1) Service mode
Limit 1 triggered
Limit 2 triggered
Limit 3 triggered
Standstill
Max LC COM R/T DQ P .0 .1 .2 .3 .0 .1 .2 LAN R/T LAN LK, R/T PWR
Maximum weight Status load cell Activate RS485 com.
Status digital outputs Dig. Output 0 active Dig. Output 1 active Dig. Output 2 active Dig. Output 3 active Dig. Input 0 active Dig. Input 1 active Dig. Input 2 active LAN Rx/Tx (channel-spec.)
(free)
Voltage channel B OK
130
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Alarm logging 7.5 Message list
As with all S7-1500 technology and signal modules, there are 3 LEDs in the colors green, red and yellow located at the top of the area. The following table explains the dynamic meaning of the LEDs.
Table 7- 1 Dynamic meaning of the LEDs
LED
Status
Meaning
RUN LED Green
2Hz S7-end module startup
SF/ERROR Red LED
MAINT LED /
Ready for operation
2Hz System fault (module/channel diagnostics alarm pending, e.g. operating errors or firmware update) [red LED flashes for at least 3 seconds] Maintenance LED - without function for WP52x
2Hz
D (diagnos- Red tics)
Green
2Hz Operating error pending (e.g. also: Stand-alone configured, but S7 communication Stand-alone mode active (possible to continue work without operational S7 CPU) Ready
2Hz Service mode active
(off)
Normal operation
Limit 1 responded
Limit 2 responded
Limit 3 triggered
(off)
No standstill
Status standstill pending
Max
Red
2Hz Weighing range exceeded
LC
Red
2Hz Load cell error
COM R/T
Measured LC impedance outside the configured setpoint range
Load cell status OK
RS485 communication active (Receive/Transmit) Pulse 0.5s for transmitting/receiving a message frame; Modbus reception: Activation independent of slave address. Permanent with "Siebert" configuration, since transmitted regularly
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
131
Alarm logging 7.5 Message list
LED LAN R/T
DQ P
Status
Meaning
LAN communication to this channel active (only Siwatool/Modbus TCP not with FTP, for example)
Pulse 0.5s for transmitting/receiving a frame transforms into continuous light during active Siwatool/Modbus link.
WP522: This LED is channel-specific driven for communication via channel-specific TCP ports
(off)
There is no output voltage and none of the outputs is assigned a function
Red
2Hz No output voltage or is at least one of the outputs DQ.x has a fault (overload)
DQ.x DI.x LAN LK R/T
PWR
Digital outputs ready; trigger at Simatic failure or stop, output replacement values if required Digital outputs ready; no monitoring of SIMATIC function (stand-alone operation) Digital output x active (high level) Digital input x active (high level) (status is detected after filtering) Link: There is an Ethernet connection to a remote station Receive/Transmit: Pulse when an Ethernet frame is sent or received Status of local channel 24V supply available
xxx = LED ON = LED flashes
132
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Commands
8
8.1
Overview
The commands for the electronic weighing system described here can be transmitted by several interfaces: by the Operator Panel via the controller to the SIWAREX module by the Operator Panel directly to the SIWAREX module by SIWATOOL directly to the SIWAREX module by the digital inputs after corresponding assignment in data record DR 7 A data or command error is signaled if a command cannot be executed or if the sent data record is rejected. Detailed descriptions of the commands can be found in the following command lists: Table 8-1 Command 1 ... 99: Service commands (Page 133) Table 8-2 Commands 450 ... 499: Trace commands (Page 134) Table 8-3 Commands 700 to 899: HMI display switching (Page 134) Table 8-4 Commands 1000 ... : Basic functions for weighing commands (Page 135) Command groups of SIWAREX WP521/WP522 (Page 135)
8.2
Command lists
The commands for the electronic weighing system described here are summarized in the following list:
Table 8- 1 Command 1 ... 99: Service commands
Command code 1 2 3
Command Service mode On Service mode Off Test mode On (simulation)
4
Test mode Off (simulation)
11
Load factory setting
Description
Turn on service mode
Turn off service mode
Turn on test mode. The simulation value from data record 16 is used instead of the measured value for calculation of the process values.
Switch off test mode.
The command resets the SIWAREX to the "ex works" status. Then: - All parameters and stored data are loaded with the default values - All message buffers (diagnostic buffer, trace memory, etc.) are reset
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
133
Commands 8.2 Command lists
Command code Command
12
Load standard parameters
31
Reserve
51
Reserve
60
Calibration point 0 valid
61
Calibration point 1 valid
62
Calibration point 2 valid
81
Characteristic shift
82
Perform automatic calibration
83
Perform calibration check
907
Apply load cell impedance
Description Like "Load factory settings" (command code 11), but interface settings for Ethernet and Modbus RTU are not reset to the factory setting.
Calibration point 0 valid / save values for calibration point 0.
Calibration point 1 valid / save values for calibration point 1.
Calibration point 2 valid / save values for calibration point 2.
Move calibration characteristic. The command defines the current weight of the scale as the new zero point (0 kg) and shifts the complete characteristic without changing the gradient. The command can be used, for example, in order to compensate parts used for mounting calibration weights on the scale at the end of the calibration.
Calculating the scale characteristic curve with reference to the load cell from data record 10. The calculated characteristic curve is entered directly in data record 3 and 4, and thus activated immediately after executing the command. The scale must be empty when the command is executed.
The command calculates the theoretical digital values in·relation to the calibration weights using the load cell parameters from data record 10 and the adjustment weights 0, 1 and 2 from data record 3. The output of these theoretical digits is made in data record 4. The function can be used to check the plausibility of adjustment digits in data record 3, which have been determined in a legal-for-trade calibration.
The currently measured impedance value (DS31) is transferred to the DS 10.
Table 8- 2 Commands 450 ... 499: Trace commands
Command code Command
451
Trace RAM on
452
Trace RAM off
454
Delete trace RAM
Description Start permanent tracing Stop permanent tracing Delete tracing memory.
Table 8- 3 Commands 700 to 899: HMI display switching
Command code 701 705 710
714
Command
Increased resolution Display current tare weight Activate standard display
N Process value
Description
Increased resolution on the main display Current tare weight on the main display Activate standard display gross/net (main display) Show net process weight on the main display
134
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
8.3
Commands 8.3 Command groups of SIWAREX WP521/WP522
Command code 715
716
Command
B Process value B process value after first filter
Description
Show gross process weight on the main display Gross process weight after the first filter
Table 8- 4 Commands 1000 ... : Basic functions for weighing commands
Command code 1001 1011 1012 1013 1016
Command Set to zero Tare Delete tare Valid tare SIMATIC tare specification
Description Zeroing (semi-automatic) Taring (semi-automatic) Delete current tare weight Activate default tare Specified tare weight from SIMATIC I/O interface
Command groups of SIWAREX WP521/WP522
The following commands can be triggered in the scale data block DB_SCALE in the area CMD1 to CMD3:
Table 8- 5 Command groups of SIWAREX WP521/WP522
Command group 1 ... 999
2000 + X
4000 + X
7001 7002
Description
Commands are passed by the function module to the module via data record DR 2 (scale, weighing, display, trace commands). The meanings of the commands correspond to the command list (see Command lists (Page 133)).
Reading of a data record, X corresponds to the data record number.
Example: Data record 3 transmitted by SIWAREX module to SIMATIC CPU 2000 + 3 = command code 2003
Writing of a data record, X corresponds to the data record number.
Example: Data record 3 transmitted by SIMATIC CPU to the SIWAREX module 4000 + 3 = command code 4003
Read all data - Read all data from the SIWAREX to the CPU
Write all data - Write all data from the CPU to the SIWAREX (service mode has to be turned on)
Additional information on transmission of commands from the control program by means of the SIMATIC interface is available in chapter Communication with SIMATIC S7-1500 (Page 137).
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
135
Commands 8.3 Command groups of SIWAREX WP521/WP522
136
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Communication with SIMATIC S7-1500
9
9.1 9.2
General information
A SIWAREX WP521 occupies 32 bytes, a SIWAREX WP522 occupies 64 bytes in the I/O area of the CPU.
The effect of the mode switch setting (see section "Ex-works settings of the operating switch (Page 36)") on the reaction to CPU failure or stop must be taken into account. If the switch is set to SIMATIC operation ex factory, the user use the parameters in DR7 to determine how the module reacts to CPU failure or stop.
The function block can be used to read the current process values of the scale (weight, status). It is also possible to set the scale parameters and issue commands (taring, zeroing, etc.). A separate call of the FB is required for each weighing channel.
The function blocks described above including HMI configurations can be downloaded as a completed example project ("ready-for-use") at: Example project "ready-for-use" (https://support.industry.siemens.com/cs/document/94109373/tia-portal-project%E2%80%9Eready-for-use%E2%80%9C-for-siwarex-wp521/wp522?dti=0&lc=en-WW)
The latest firmware versions for the weighing modules can be downloaded at:Firmware (https://support.industry.siemens.com/cs/document/75231231/firmware-siwarexwp231?dti=0&lc=en-WW)
System environment
The technology module can be used in the following system environments:
Possible applications Central operating in an S7-1500 system
Distributed operation with S7-1500 and ET200MP
Required components S7-1500 automation system
Distributed I/O System ET 200MP
Configuration software
STEP 7 (TIA Portal):
Device configuration with the hardware configuration (HWCN)
In the user program
Control by a SIWAREX FB and instance DB
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
137
Communication with SIMATIC S7-1500 9.3 Memory requirements for SIWAREX communication
9.3
Memory requirements for SIWAREX communication
The memory requirement is summarized in the following table.
Table 9- 1 Properties of the function block
FB properties Read weight & status Drop commands Transfer parameters Work memory requirement in CPU Load memory requirements in CPU
n = number of weighing channels
FB call per weighing channel YES YES YES 15600 bytes + n x 2 650 bytes 232000 Byte + n x 62000 Byte
9.4
Creating the hardware configuration
As of TIA Portal V14, SIWAREX WP521/WP522 is integrated as standard in the hardware profile as an S7-1500 technology module.
An HSP is available for integration in TIA Portal V13 at:Hardware Support Package (https://support.industry.siemens.com/cs/document/73514020/hardware-support-package(hsp)-for-siwarex-wp231-in-tia-portal-v11-sp2-for-products%3A-7mh49602aa01?dti=0&lc=en-WW)
138
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Communication with SIMATIC S7-1500 9.4 Creating the hardware configuration
Image 9-1 Configuration in the TIA Portal
The SIWAREX WP521 or SIWAREX WP522 module can be placed directly next to the S71500 CPU via drag-and-drop.
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
139
Communication with SIMATIC S7-1500 9.4 Creating the hardware configuration
Image 9-2 Configuration with S7-1500 CPU
TIA Portal automatically assigns a separate I/O start address and a HW ID for every SIWAREX present in the project. These two parameters are relevant for calling the function block, and can be obtained from the properties of the respective module. The address range is always in the region of the I/O image of the automation system.
Image 9-3 Addressing of the SIWAREX WP522 module in TIA Portal
140
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Communication with SIMATIC S7-1500 9.5 Diagnostic messages
Image 9-4 HW ID of module in TIA Portal
9.5
Diagnostic messages
The DIAG LED flashes red if a diagnostic message is pending. Diagnostic results are displayed as plain text in STEP 7 (TIA Portal) via the online and diagnostics view. You can evaluate the error code via the OB82 user program.
The following diagnostic messages can be generated:
Table 9- 2 Diagnostic messages
Diagnostic message Short-circuit
Error code 01H
Under voltage
02H
Overload
07H
Load low
08H
Error
09H
ADC error
0BH
DQ error
0CH
Parameter checksum error 0DH
Checksum error program
0EH
No load voltage
11H
Meaning
Remedy
Short-circuit in the load cell Check line up to load cell supply
Under-voltage of sense lines Voltage drop to the load cell to high. Check cause.
High limit for sensor voltage Overload of the scale elimi-
exceeded
nated
Low limit for sensor voltage undershot
Check mechanics of the scale, check the wiring of the sensor.
Internal module error, fault Replace technology module
Signal conversion by ADC faulty
EMC faults may be responsible for this error
Fault in digital outputs
Check supply voltage for DQs, check for overload
The checksum for the pa- Load factory setting for parameter integrity is incorrect rameters.
The checksum for the pa- Reload firmware, replace rameter integrity is incorrect module
No L+ for technology module Check supply voltage on BaseUnit
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
141
Communication with SIMATIC S7-1500 9.6 Triggering a hardware interrupt
Diagnostic message Hardware interrupt lost
Error code 16H
Module temporarily unavail- 1FH able
Meaning
Technology module cannot generate an interrupt, because previous alarm has not yet been processed
Normal operation of the module is not possible, because a firmware update is being performed, for example.
Remedy Change interrupt processing in the CPU, re-configure technology module.
Wait until module goes into normal operation.
9.6
Triggering a hardware interrupt
You can configure which events are to trigger a hardware interrupt for the SIWAREX module.
Based on the configuration, the SIWAREX module triggers a hardware interrupt for specific events/limits. When a hardware interrupt occurs, the CPU interrupts execution of the user program and processes the associated hardware interrupt OB. The event that triggered the interrupt is entered by the CPU into the start information of the associated hardware interrupt OB.
Activation of the hardware interrupts
For the device configuration of the SIWAREX module, you can activate the hardware interrupts in the TIA Portal under "Basic parameters > Channel 0 or 1> Hardware interrupts".
Lost hardware interrupt
When an event that triggers a hardware interrupt occurs and a previous event of the same kind has not yet been processed, no further hardware interrupt is triggered. The hardware interrupt is lost. Depending on the configuration, this can result in a "Lost hardware interrupt lost" diagnostic alarm.
142
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Communication with SIMATIC S7-1500 9.7 Ethernet approvals
No hardware interrupts are activated by default. One result of triggering a hardware interrupt is that the following two variables are entered in the start information of the associated hardware interrupt OB: EventType: One byte with a set bit IChannel: Number of the channel that triggered the hardware interrupt
Table 9- 3 Table of event bits
Hardware interrupt Limit 1 OFF ON Limit 1 ON OFF Limit 2 OFF ON Limit 2 ON OFF Limit 3 OFF ON Limit 3 ON OFF
EventType bit 0 1 2 3 4 5
Image 9-5 Configuration of hardware interrupts
9.7
Ethernet approvals
It may be necessary to restrict the communication options via Ethernet for reasons of data security. It is recommendable to deactivate surplus interfaces.
Note Please also observe the Security information (Page 9).
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
143
Communication with SIMATIC S7-1500 9.8 Calling of function block
The settings in HW Config only take effect in "SIMATIC mode", see Ex-works settings of the operating switch (Page 36). The restriction of Ethernet Modbus communication can be performed per configuration of the ports in data record DR12 (port number = 0)
Image 9-6 Ethernet approvals
9.8
Calling of function block
This description is based on using the "SIWAREX_WP52X" block (FB1552) with data record communication and the following data:
Start address SIWAREX WP521/WP522: 68 (see
HW ID SIWAREX WP521/WP522: 257 (see Image 9-4 HW ID of module in TIA Portal (Page 141)
Instance data block number of the function block: DB521
The function block can be integrated at the desired position in the user program using drag and drop. Calling of the FB must be carried out cyclically in the control program.
FB "SIWAREX WP52X" is called once in OB1 for the SIWAREX WP521 module. For the SIWAREX WP522 module, FB "SIWAREX_52X" is called once for each channel.
144
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Communication with SIMATIC S7-1500 9.8 Calling of function block
Image 9-7 Call block for SIWAREX WP521
Image 9-8 Call block for SIWAREX WP522
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
145
Communication with SIMATIC S7-1500 9.8 Calling of function block
Image 9-9 Call the block for SIWAREX WP521/WP522 in the user program
Function block parameter ADDR
HW_ID
DB_NO LIFEBIT
Description
Start address WP521/WP522 (see Creating the hardware configuration (Page 138))
HW ID WP521/WP522 (see Creating the hardware configuration (Page 138))
Number of FB-internal instance DB
Optional status bit can be used to monitor communication
The generated instance DB (DB521 in this case) has multi-instance capability and includes all data records of the WP52X, as well as all the necessary parameters for data communication between the CPU and the weighing module.
A separate FB call must be made in the user program for each weighing module. In this manner, each scale receives its own instance DB (or a section of the multi-instance DB is
146
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Communication with SIMATIC S7-1500 9.9 Working with the function block
assigned to each scale) which provides the respective scale parameters. The input and output parameters of the FB must be adapted for each call.
9.9
Working with the function block
Data records in SIWAREX weighing modules
All parameters in SIWAREX weighing modules are structured in data records. These data records must be considered as connected packages and can only be respectively read into the CPU or written to the SIWAREX as complete packages. Reading or writing of a single parameter within a data record is not possible. You can find a description of all data records and their parameters in chapter Scale parameters and functions (Page 67).
Reading and writing of data records is carried out using special command codes which can be sent with three command mailboxes handled according to priority within the instance DB:
Image 9-10 CMD command mailboxes
As shown in the graphics, a command mailbox always consists of a command code (Int) and four bits (Bool). A command is set by entering the desired command code in the "i_CMD_CODE" parameter and setting the respective command trigger "bo_CMD_TRIGGER". The status bits "bo_CMD_InProgress" (command being processed), "bo_CMD_FinishedOk" (command finished without errors) and "bo_CMD_FinishedError" (command rejected or finished with error) can be evaluated in the user program.
In addition, the three command mailboxes are managed and processed according to priority. CMD1 has the highest priority, CMD3 has the lowest priority. If all three command mailboxes are triggered simultaneously by the user program, for example, the function block initially processes CMD1, then CMD2, and finally CMD3. Cyclic triggering of command mailbox 3 is
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
147
Communication with SIMATIC S7-1500 9.9 Working with the function block
also interrupted by intermediate sending of a command in mailbox 2 or 1 for processing of the respective command.
Note Cyclic triggering of the CMD1 command mailbox makes it impossible to send commands in mailbox 2 or 3.
A summary of all existing command codes can be found in chapter Command lists (Page 133).
The following equation for generation of a corresponding command code applies to the reading of data records from the SIWAREX to the data block:
Command code = 2000 + X
(X = desired data record number)
The following equation for generation of a corresponding command code applies to the writing of data records from the data block to the SIWAREX:
Command code = 4000 + X
(X = desired data record number)
Example
148
The following example clarifies the actions with command mailboxes and data records:
"Calibration weight 1" is to be set to a value of 12.5 by the CPU. Since "Calibration weight 1" is a parameter of data record 3 (see section Scale parameters and functions (Page 67)), service mode must be first activated. This can be done with command code "1" (see section Command lists (Page 133)).
The variable "i_CMD_CODE" must therefore be assigned the value "1" and the associated "bo_CMD_TRIGGER" set to TRUE. Subsequently, the module is directly in service mode (DIAG LED flashes green):
i_CMD_CODE = 1
bo_CMD_TRIGGER = TRUE
Since only complete data records can be read or written, it is recommendable to now read data record 3 into the CPU. This is carried out using command code 2003 (see chapter Command lists (Page 133)):
i_CMD_CODE = 2003
bo_CMD_TRIGGER = TRUE
All current data from data record 3 are now present in the data block. The calibration weight is then set as desired to a value of 12.5:
CALIB_WEIGHT_1 = 12.5
The modified data record 3 must now be written into the SIWAREX again. This is carried out using command code 4003 (see chapter Command lists (Page 133)):
i_CMD_CODE = 4003
bo_CMD_TRIGGER = TRUE
The new calibration weight is now present in the SIWAREX and can be used. Service mode for the module should subsequently be switched off again using command "2".
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Communication with SIMATIC S7-1500 9.10 I/O interface of function block
This procedure for reading and writing data records is identical for all data records.
9.10
I/O interface of function block
The following scale parameters are available cyclically in the data block in the controller without special reading of data records or can be sent to the scale without sending of data records:
Table 9- 4 I/O data of function block
Parameter (read) SCALE_STATUS_1 (UINT) SCALE_STATUS_2 (UINT) PROCESS_VAL_1 (REAL) PROCESS_VAL_2 (REAL) OPERATION_ERRORS TECHNOLOGICAL_ERRORS_1 TECHNOLOGICAL_ERRORS_2 TECHNOLOGICAL_ERRORS_3 DATA_CMD_ERROR_1 DATA_CMD_ERROR_2 DATA_CMD_ERROR_3 ADD_INFO Parameter (write) TARE_VALUE (REAL) DIGIT_OUTPUT (UINT)
Meaning Bytes 0 & 1 of the scale status (see data record 30) Bytes 2 & 3 of the scale status (see data record 30) Scale value in accordance with selection in data record 14 Scale value in accordance with selection in data record 14 Operating error according to Message list (Page 124) Technology messages according to Message list (Page 124) Technology messages according to Message list (Page 124) Technology messages according to Message list (Page 124) Data command error according to Message list (Page 124) Data command error according to Message list (Page 124) Data command error according to Message list (Page 124) Additional information data / operator errors
Tare default value of S7 I/Os (activate with command 1016) Default values for digital outputs, if they have assigned as an "S7 interface" function in data record 7.
9.11
Error codes of function block
States and errors of the FB.
Table 9- 5 Statuses/errors when working with the function block
Error bit bo_ApplIDError bo_ApplIDDRError bo_SFBError bo_RdPerError bo_LifeBitError bo_StartUpError bo_WrongFW bo_InvalidCMD
Error description Address module does not match the function block Data record does not match the inserted module Runtime error during transmission of data record Reading of I/O data failed SIWAREX no longer responds Command was sent although StartUp is still TRUE Data record version does not match the firmware An invalid command code was sent
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
149
Communication with SIMATIC S7-1500 9.11 Error codes of function block
Error bit bo_DataOperationError bo_StartUp
Error description Synchronous data operation error has occurred Startup synchronization of module running
Note
If execution of the function block is faulty, the variables shown do not correspond to the actual status in the module.
150
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Communication via Modbus
10
10.1 10.2 10.3
General information
The current process values and parameters can be exchanged via the RS485 interface with Modbus RTU or the Ethernet interface with Modbus TCP/IP. It is possible to use both interfaces for the communication.
Note Please also observe the Security information (Page 9).
The following chapters describe the specifications for handling communication. The following functions can be executed: Export parameters from the electronic weighing system Write parameters Export current process values Monitor messages
Special feature of Modbus TCP/IP connection to SIWAREX WP522
There are two ways to communicate with two scale channels via Modbus TCP/IP: Communication for both weighing channels vis port 502. The register numbers of the data
record tables for weighing channel B can be increased by the offset value 5000. Communication for both channels via freely configurable ports. The register numbers
indicated in the record tables apply to both weighing channels. The assignment of a new IP address to a SIWAREX module is necessary if several SIWAREX modules are present in one network. Modbus TCP/IP for SIWAREX WP521: Port: 502 Modbus TCP/IP for SIWAREX WP521/WP522: Port: 502 or Modbus TCP/IP for SIWAREX WP522 channel A: port configurable, channel B: port
configurable
Principle of data transmission
This description is valid for communication via Modbus RTU and Modbus TCP/IP.
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
151
Communication via Modbus 10.3 Principle of data transmission
The standardized MODBUS protocol is used for communication. The master function is always in the connected communication partner, while the SIWAREX module is always the slave.
Data transfer is bidirectional. The master function is always in the connected module which "controls" the communication with corresponding requests to the respective SIWAREX module address. The SIWAREX module is always the slave and responds to the requests of the master, provided that the address matches, with a response frame.
Each Modbus partner has its own address. The SIWAREX module has the default address 1. This address can be changed as a parameter (e.g. in SIWATOOL). This address is without significance if the Ethernet interface is used because the connection is based on the IP address.
If the RS485 interface is used, the following character frame is valid:
Start bit Number of data bits Parity Stop bit
1 8 Even 1
The following baud rates can be set:
9 600 bit/s
19 200 bit/s (default setting)
38 400 bit/s
57 600 bit/s
115 000 bit/s
Functions which can be used by the master are listed below. The structure and contents of the registers are shown in chapter "Scale parameters and functions (Page 67)".
Service Read Holding Registers Write Single Register Write Multiple Registers
Function code 03 06 16
Usage Read one or more 16-bit parameter registers Write a single parameter register Write multiple registers
If a request of the master is answered by the SIWAREX module (slave), the SIWAREX module sends a response frame with or without errors. In the case of a response without error message, the response frame contains the received function code; in the case of errors, the highest bit of the function code is set. This corresponds to the Modbus standard. Afterwards, the master requests the data record DR 32 to check which process-related data or operator errors exist.
152
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
10.4
Communication via Modbus 10.4 Data record concept
Data record concept
The register assignment is an image of the data records. The chapter Scale parameters and functions (Page 67) describes the data records, variables and functions, including the register addresses. The data records are always checked as complete data packets for plausibility. For this reason, you must follow a specific procedure to change individual parameters.
10.5
Command mailboxes
Corresponding command codes must be sent in order to execute commands and to read and write data records in the Modbus buffer memories. These are described in more detail in chapter Command lists (Page 133). The following tables list the Modbus registers used to process these commands:
Table 10- 1 Command mailbox 1: Highest priority
Variable CMD1_CODE CMD1_TRIGGER CMD1_STATUS CMD1_QUIT
Note Code of command to be executed Trigger for starting the command 0=job running; 1=job finished (1 cycle) 0=no error; <>0=error code
Type USHORT USHORT USHORT USHORT
Modbus registers 910 911 912 913
Table 10- 2 Command mailbox 2: Average priority
Variable CMD2_CODE CMD2_TRIGGER CMD2_STATUS CMD2_QUIT
Note Code of command to be executed Trigger for starting the command 0=job running; 1=job finished (1 cycle) 0=no error; <>0=error code
Type USHORT USHORT USHORT USHORT
Modbus registers 920 921 922 923
Table 10- 3 Command mailbox 3: Low priority
Variable CMD3_CODE CMD3_TRIGGER CMD3_STATUS CMD3_QUIT
Note Code of command to be executed Trigger for starting the command 0=job running; 1=job finished (1 cycle) 0=no error; <>0=error code
Type USHORT USHORT USHORT USHORT
Modbus registers 930 931 932 933
10.6
Reading registers
The method for reading registers depends on whether they belong to the writable data records (DR 3 to DR 29) or can only be read as current values (DR 30 to DR 34).
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
153
Communication via Modbus 10.7 Writing registers
If you wish to read the registers from the data records DR 3 to DR 29, you must first export these as a complete data record to the internal output buffer. All Modbus registers of the individual parameters can be found in chapter Scale parameters and functions (Page 67).
Example A parameter is to be read from data record 3 (DR 3). First, write register CMD3_CODE with 2003 (2000 plus the number of the data record =
read data record). Then write "1" for CMD3_TRIGGER. DR3 is now updated in the Modbus buffer. It is now possible to read one or more registers with the corresponding variable(s). The
data consistency of the registers read at this time is guaranteed. You can find all further command numbers in chapter Command lists (Page 133).
Example A current measured value is to be read out from DR 30. The register can be directly requested because its contents are automatically refreshed in the SIWAREX module at the specified measuring rate of 100 Hz and are always available up-to-date.
10.7
154
Writing registers
If you wish to write registers from the data records DR 3 to DR 29, you must first export the corresponding data record to the internal output buffer using an appropriate command. Individual registers can then be written. The complete data record must subsequently be written internally using an appropriate command. A plausibility check of the complete data record is carried out in the process.
Example A parameter from DR 3 is to be written. First, write register CMD3_CODE with 2003 (2000 plus the number of the data record). Then write "1" for CMD3_TRIGGER. DR 3 is now updated in the Modbus memory. Now you can write or make changes in one or more registers with the corresponding
variable. If you want to transfer the written/changed register to the scale, you need to write the entire data record: First, write register CMD3_CODE with 4003 (4000 plus the number of the data record = write data record). Then write "1" for CMD3_TRIGGER. The data record is then transferred to the process memory in the SIWAREX module. All registers of the data record are checked for plausibility in the process. If the plausibility check fails, the complete data record is not written and a message is output to the user (from the area of data/operator errors).
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Communication via Modbus 10.7 Writing registers
You can find all further command numbers in chapter Command lists (Page 133). A document for working with SIWAREX WP521/WP522 and Modbus is also available online Modbus communication of the WP521/WP522 (https://support.industry.siemens.com/cs/document/77913998/how-does-the-modbuscommunication-of-the-wp231-work?dti=0&lc=en-WW).
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
155
Communication via Modbus 10.7 Writing registers
156
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Technical specifications
11
11.1
Technical specifications
A scale can be connected to the SIWAREX WP521. Two separate scales can be connected to the SIWAREX WP522. The weighing functionality is available 2x.
24 V power supply
Note The 24 V DC nominal power supply, all interfaces and all I/O circuits must be powered from sources with safety extra-low voltage that fulfill the requirements SELV, PELV according to IEC 61140 or NEC Class 2 meet.
Table 11- 1 Technical specifications: Power supply 24 V DC
Rated voltage
Static low / high limits
Dynamic low / high limits Non-periodic overvoltages
Maximum current consumption (without digital inputs/outputs, see table)
Module power loss typical (without digital inputs/outputs, see table)
24 V DC 19.2 / 28.8 V DC 18.5 / 30.2 V DC 35 V DC for 500 ms with a recovery time of 50 s WP521: 120 mA, WP522: 200 mA @ 24 V DC
WP521: 2.4 W, WP522: 3.9 W
Power supply from SIMATIC S7 backplane bus
Table 11- 2 Technical specifications: Power supply backplane
Current consumption from SIMATIC S7-1500 backplane bus
Typical 35 mA @15 V
Load cell interface analog (with WP522 1x per weighing channel)
Table 11- 3 Technical specifications: Load cell interface
Error limit according to DIN1319-1 at 20 °C +10 K1)
Measuring accuracy
Class
to OIML R76-1:2006/EN45501:2015 Resolution
(not certified)
Error percentage pi
Step voltage
0.05 % v.E. III 3000d 0.4 0.5 µV/e
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
157
Technical specifications 11.1 Technical specifications
Accuracy delivery state2) Sampling rate Input signal resolution Measuring range Common mode voltage range strain gauge feed 3) Short-circuit and overload protection Connection Sensor voltage monitoring Min. DMS input resistance per channel
Max. DMS output resistance Temperature coefficient range Temperature coefficient zero point Linearity error Measured value filtering
without Ex-i interface SIWAREX IS
with Ex-i interface SIWAREX IS
Electrical isolation 50 Hz / 60 Hz noise suppression CMRR Input resistance
Cable length4)
Signal cable Sensor cable Special cable
typ. 0.1 % v.E. 100 Hz ± 4 000 000 ± 4 mV/V 0.25 V to +4.75 V 4.85 V DC ± 3 % Yes 6-wire 4.0 V 40
50 @ type 7MH4710-5BA 100 @ type 7MH4710-5CA 4 100 ± 5 ppm/K v. E. ± 0.015 V/K 0.005 % Low-pass and average value filter configurable (DR3) Typ. 500 V AC > 90 dB
typ. 20*106 typ. 100*106 max. 800 m
1) Relative accuracy! (Absolute accuracy can only be achieved with local calibration with calibration standards)
2) Accuracy for module exchange or theoretical calibration decisive 3) Value applies to the sensor; voltage drops on lines are compensated up to 5 volts 4) When using SIWAREX cable 7MH4702-8AG
Digital outputs DQ (for WP522 4x per weighing channel)
In case of fault or SIMATIC CPU stop, the configured value is always applied to the digital output.
A freewheeling diode is provided on the consumer for inductive loads at the digital output.
Table 11- 4 Technical specifications: Digital outputs
Number per weighing channel Supply voltage range Max. output current per output Max. total current for all outputs Update rate (FW)
4 (High Side Switch) 19.2 ... 28.8 V DC 0.5 A (ohmic load) 2.0 A 100
158
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Technical specifications 11.1 Technical specifications
Switching delay
RDSON Short-circuit proof Electrical isolation Cable length (meters)
typ. 65 µs Turn-On @IL = 500 mA typ. 110 µs Turn-Off @IL = 100 mA < 0.2 Yes 500 V AC Max. 500 m shielded, 150 m unshielded
Digital inputs DI (for WP522 3x per weighing channel)
Table 11- 5 Technical specifications: Digital inputs
Number of inputs Rated voltage Supply voltage range Current consumption @ 24 V DC Surge voltage Signal level logic 1 (max) Signal level logic 0 (max) Sampling rate (FW) Configurable filtering (DS 7) 1) Electrical isolation Type in accordance with EN 61131-2: 2007
3 24 V DC max. DC 30 V 4 mA 35 V DC for 0.5 s 15 V DC, input current typ. 3 mA @24 V DC 5 V DC, input current 2.0 mA 10 ms 0 to 40 ms in intervals of 5ms 500 V AC Type 1 to 3
1) Signal changes shorter than the programmed time are recorded)
RS485 interface (for WP522 1x per weighing channel)
Table 11- 6 Technical specifications: RS-485
Standard Baud rate Data bits Parity Stop bits Terminating resistors (can be activated) Electrical isolation Transfer protocol
Cable length
EIA-485 up to 115 Kbps* 7 or 8 even | odd | none 1 or 2 390 / 220 / 390 500 V AC ASCII for remote display, Siebert company and Modbus RTU 115 Kbps max. 1 000 m (Fieldbus 2-core, shielded, e.g. 6XV1830-0EH10)
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
159
Technical specifications 11.1 Technical specifications
Ethernet (available only 1x)
Table 11- 7 Technical specifications: Ethernet
Standard Transmission speed Electrical isolation Transfer protocol Autonegotiation Auto MDI-X Cable lengths
IEEE 802.3
10/100 Mbps (automatic detection)
1 500 V AC
TCP/IP, Modbus TCP
Yes
Yes
Cable Cat 5e UTP (unshielded)
max. 50 m
Cable Cat 5e SF/UTP max. 100 m (shielded)
Dimensions and weight
Table 11- 8 Technical specifications: Dimensions and weight
Dimensions W x H x D (packaged) Dimensions W x H x D (unpackaged) Weight (packaged)
41 x 191 x 164 mm 35 x 147 x 129 mm WP 521ST: 0.37kg WP 522ST: 0.42 kg
Mechanical requirements and data
Table 11- 9 Rated conditions in accordance with IEC 60721
Mode Storage/transport
IEC 60721-3-3 Class 3M3, stationary use, weather-proofed
IEC 60721-3-2 Class 2M2 without precipitation
Technical specifications: Mechanical requirements and data
Testing Vibrational load during operation
Shock load during operation
Vibration load during transport
Standards
Test values
IEC 61131-2:2007 5 ... 8.4 Hz: 3.5 mm deflection
IEC 60068-2-6:2007 8.4 ... 150 Hz: 9.8 m/s2 (=1G)
Test Fc
IEC 61131-2:2007 150 m/s2 (approx. 15 g), half-sine
IEC 60068-2-27:2008 Duration: 11 ms
Test Ea
IEC 60068-2-6:2007 5 ... 8.4 Hz: 3.5 mm deflection
Test Fc
8.4 ...500 Hz: 9.8 m/s2
160
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Technical specifications 11.2 Electrical, EMC and climatic requirements
Testing Shock load during transport
Free fall
Standards
Test values
IEC 60068-2-27:2008 250 m/s2 (25G), half sine
Test Ea
Duration: 6ms
IEC 61131-2:2007
In product packaging: 300 mm drop height
IEC 60068-2-31:2008 In shipping package: Test Ec, procedure 1 1.0 m drop height
11.2
Electrical, EMC and climatic requirements
Electrical protection and safety requirements
Fulfilled requirement Safety regulations Protection class
IP degree of protection
Air gaps and creepage distances
Standards IEC 61010-1:2010 +C1:2011 + C2:2013 IEC 61010-2-201:2014 IEC 61131-2:2007 UL 508:2003 CSA C22.2 No.142:1990 IEC 61140:2001 + A1:2004 IEC 61131-2:2007
IP 20 according to IEC 60529 1991 +A1:2000
IEC 60664:2007 IEC 61131-2:2007 IEC 61010-1:2010 UL 508:2003 CSA C22.2 No. 142:1990
Comments
To maintain the safety characteristics of extra-low voltage circuits, external connections to communications ports, analog circuits, as well as all 24 V DC nominal power supplies and all I/O circuits must be powered by approved sources that fulfill the requirements according to the various standards for SELV, PELV, NEC Class 2, voltage limited or power limited. The ground connection for the DIN rail serves as a functional ground for dissipating interference currents. IP20: · Protection against contact with
standard probe · Protection against solid bodies with
diameters in excess of 12.5mm · No special protection against water Overvoltage category II Pollution degree 2
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
161
Technical specifications 11.2 Electrical, EMC and climatic requirements
Fulfilled requirement Isolation stability
Use in hazardous areas
Electromagnetic compatibility
Standards IEC 61131-2:2007 CSA C22.2, No. 142:1990 UL508:2003
IEC 60079-0:2009 IEC 60079-15:2010
IEC 61000-6-2:2004 IEC 61000-6-4:2007+ A1:2011
Comments
Ethernet port:
1 500 V AC (shield and signals)
Other electrical circuits:
Test voltage: 500 V AC or 707 V DC
When installing the modules in hazardous areas, the special operating conditions must be taken into consideration in accordance with SIWAREX Product Information "Use of SIWAREX Modules in a Zone 2 Hazardous Area" A5E02192786A.
All shielded cables must be grounded at both ends to comply with the requirements for electromagnetic compatibility.
If the shielded cable is routed out of the hazardous area for explosion-proof equipment, both ends of the cable shield must be connected to the potential equalization.
To comply with the requirements for lightning strikes, additional measures are required (see footnotes Table 12-11) for installation in Zone A according to IEC 61131-2: 2007.
162
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Technical specifications 11.2 Electrical, EMC and climatic requirements
Electromagnetic compatibility
Table 11- 10 Requirements: Emitted interference in industrial environment according to EN 61000-6-4
Comments Emission of radio interferences (electromagnetic fields)
Emission on 24 V power supply lines
Emission on wired Ethernet
Standard Class A industrial environment: · IEC/CISPR 16-2-3: 2006 · EN55016-2-3:2006
Class A: Industrial environment: · IEC/CISPR 16-2-1: 2009 · EN 55016-2-1: 2004
EN 61000-6-4:2007+A1:2011 IEC/CISPR 22: 2008 EN55022: 2010
Limits
· 30 230MHz, 40dB(mV/m) Q
· 230 1000MHz, 47dB(mV/m) Q
· 1 GHz to 3 GHz / 76 dB(mV/m) peak, 56 dB(mV/m) average
· 3 GHz to 6 GHz / 80 dB(mV/m)
Class A: Industrial environment
· 0.15 ... 0.5 MHz, 79 dB (V) Q
· 0.15 ... 0.5 MHz, 66 dB (V) M
· 0.5 ... 30 MHz, 73 dB (V) Q · 0.5 ... 30 MHz, 60 dB (V) M
0.15 ... 0.5 MHz:
· 53 dB (A) ... 43 dB (A) Q · 40 dB (A) 30 dB (A) M 0.5 ... 30 MHz:
· 43 dB (A) Q / 30 dB (A) M
Table 11- 11 Requirements: Interference immunity in industrial environment according to EN 61000-6-2
Comments Burst pulses on power supply cables Burst pulses on data and signal cables
Electrostatic discharge (ESD)
Electrostatic air discharge (ESD)
Standard
EN 61000-4-4:2004 EN 45501:2015 OIML R 76:2006 NAMUR NE21:2011 EN 61326-1:2006 EN 61131-2:2007
EN 61000-4-2:2009 EN 45501:2015 OIML R 76:2006 NAMUR NE21:2011 EN 61326-1:2006 EN 61131-2:2007
Severity level ±2.4 kV 5/50ns/5kHz ±2.4 kV 5/50ns / 100kHz ±2.4 kV 5/50ns/5kHz ±2.4 kV 5/50ns / 100kHz
2, 4, 6 kV direct/indirect
2, 4, 6, 8 kV
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
163
Technical specifications 11.2 Electrical, EMC and climatic requirements
Comments Surge on power supply cables
Standard
IEC 61131-2 :2007 NAMUR NE21 :2011 EN 61326-1 :2006 OIML R76 -2:2006 EN 61000-4-5 :2006 EN 45501:2015
Severity level ZONE A acc. to IEC 61131-22): ±1.0 kV line to line ±2.0 kV line to earth
ZONE B to IEC 61131-2: ±0.5 kV line to line ±1.0 kV line to earth
Surge on data and signal cables
ZONE A acc. to IEC 61131-23): ±1.0 kV line to line
±2.0 kV line to earth
Electromagnetic RF fields Induced conducted interference
IEC 61131-2 :2007 NAMUR NE21 :2011 EN 61326-1 :2006 OIML R76-2 :2006 EN 61000-4-3:2006 +A1:2008+A2:2010 EN 45501:2015
IEC 61131-2 :2007 NAMUR NE21 :2011 EN 61326-1 :2006 OIML R76-2 :2006 EN 61000-4-6 :2009
ZONE B to IEC 61131-2: ±1.0 kV line to earth 80MHz 2.7 GHz: 20V/m
10 kHz 80MHz: 12Veff
1) Not applicable for shielded cables and symmetrical ports
2) An external fuse must be provided to comply with the requirement (e.g. Lightning conductor BVTAD24, Dehn & Söhne company)
3) An external fuse must be provided to comply with the requirement (e.g. Lightning conductor BSPM4BE24, Dehn & Söhne company)
NOTICE
Radio interference is possible
This is a device of class A. The device may cause radio interference in residential areas. Implement appropriate measures (e.g.: use in 8MC cabinets) to prevent radio interference.
164
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Technical specifications 11.2 Electrical, EMC and climatic requirements
Ambient conditions
The SIWAREX WP521/WP522 is designed for use under the following conditions in SIMATIC S7-1500. Also observe the operating conditions of the S7-1500 system.
Table 11- 12 Operating conditions to IEC 60721
Mode Storage/transport
IEC 60721-3-3 Class 3K3, stationary use, weather-proofed
IEC 60721-3-2 Class 2K4 without precipitation
Table 11- 13 Climatic requirements
Comments Operating temperature:
Storage and transport temperature Relative humidity
Ambient conditions Vertical installation in 0 to +40 °C S7-1500 Horizontal installation 0 to +60 °C in S7-1500
-40 to +70 °C
5 to 95 %
Pollutant concentration
Atmospheric pressure
Operation
SO2: < 0.5 ppm H2S: < 0.1 ppm; IEC 60068-2-13
For transport and storage
IEC 60068-2-13
Application areas
No condensation; corresponds to relative humidity (RH) stress level 2 to DIN IEC 61131-2 RH < 60 % no condensation 1080 to 795 hPa (operation) (-1 000 to + 2 000 m above sea level) 1 080 to 660 hPa (storage) (-1 000 to +3 500 m above sea level)
Reliability Mean Time Between Failure (MTBF) The MTBF calculation results in the following values for the modules:
Table 11- 14 MTBF
Electronic Weighing System SIWAREX WP521 SIWAREX WP522
MTBF in years 50 years @TA = 40°C 33 years @TA = 40°C
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
165
Technical specifications 11.3 Approvals
11.3
Approvals
NOTICE
Safety guidelines for applications in hazardous areas
For applications in hazardous areas, the safety instructions in the document "Product Information - Use of SIWAREX Modules in a Zone 2 Hazardous Area (https://support.industry.siemens.com/cs/?lc=en-DE)" are to be observed.
Note The latest valid approvals for SIWAREX WP521/WP522 can be found on the rating plate of the module.
CE mark (https://support.industry.siemens.com/cs/document/65692972/decl aration-of-conformity-ec-eu-declaration-of-conformitymanufacturer?dti=0&lc=en-WW) cULus approval (https://support.industry.siemens.com/cs/document/74442065/gen eral-product-approval-ul-ul?dti=0&lc=en-WW) - pending
FM approval for Zone 2 - pending
ATEX approval (https://support.industry.siemens.com/cs/document/81803667/foruse-in-hazardous-locations-manufacturer-declartionmanufacturer?dti=0&lc=en-WW) - pending For Category 3 Equipment according to EU Directive 2014/34/EU (ATEX) IECEx approval - pending For category 3 equipment
KC mark For use in S. Korea
166
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Technical specifications 11.3 Approvals
RCM mark For use in Australia and New Zealand
EAC mark pending For use in the Eurasian Customs Union The modules are RoHS-compliant according to EU Directive 2016/65/EU.
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
167
Accessories
12
12.1
Configuration package
Ordering data Description Configuration Package SIWAREX WP521/WP522 · SIWATOOL program for adjustment of scales during commissioning · Software "Ready for use"
This contains the SIMATIC S7 blocks for operation with SIMATIC S71500 and a project for SIMATIC Operator Panel KTP600 · Product manuals in several languages Product Manual SIWAREX WP521/WP522 in various languages
SIWAREX WP521/WP522 "Ready for Use"
Front connector 35 mm with screw-type system
Front connector 35 mm with push-in system
Ethernet patch cable CAT5 For connecting the SIWAREX with a PC (SIWATOOL), a SIMATIC CPU, a panel, etc. Digital remote display The digital remote displays can be connected directly to the SIWAREX WP521/WP522 via the RS485 interface. Suitable remote display: S102 Siebert Industrieelektronik GmbH Postfach 1180 D-66565 Eppelborn, Germany Tel.: 06806/980-0 Fax: 06806/980-999 Internet: www.siebert.de (www.siebert.de) Detailed information can be obtained from the manufacturer. SIWAREX JB junction box for parallel connection of load cells
Order number 7MH4980-1AK01
Free download from the Internet WP521/WP522 Manuals (https://support.indust ry.siemens.com) Free download from the Internet "Ready for Use" (https://support.indust ry.siemens.com) 6ES7592-1AM000XB0 6ES7592-1BM000XB0
7MH4 710-1BA
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
169
Accessories 12.1 Configuration package
Ordering data
Description SIWAREX EB extension box For extending load cell cables Ex interface, type SIWAREX IS With ATEX approval for intrinsically-safe connection of load cells, including manual, suitable for the load cell groups SIWAREX CS, U, M, FTA, and P
· With short-circuit current < 199 mA DC
Order number 7MH4 710-2AA
7MH4 710-5BA
· With short-circuit current < 137 mA DC
7MH4 710-5CA
Cable (optional) Cable Li2Y 1 x 2 x 0.75 ST + 2 x (2 x 0.34 ST) - CY
7MH4 702-8AG
· To connect SIWAREX CS, U, M, P, A, WP521/WP522 to the junction box (JB), extension box (EB) or Ex interface (Ex-I) or between two JBs, for fixed laying
· Occasional bending is possible · 10.8 mm outer diameter
· For ambient temperature -20 ... +70 °C
Cable Li2Y 1 x 2 x 0.75 ST + 2 x (2 x 0.34 ST) - CY, blue sheath
7MH4 702-8AF
· To connect junction box (JB) or extension box (EB) in hazardous area and Ex interface (Ex-I), for fixed laying
· Occasional bending is possible, blue PVC insulating sheath, approx. 10.8 mm outer diameter
· For ambient temperature -20 ... +70 °C
170
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Appendix
A
A.1
Technical support
Technical Support
You can contact Technical Support for weighing technology:
E-mail (mailto:support.automation@siemens.com)
Tel.: +49 (721) 595-2811
You can contact Technical Support for all IA and DT products:
Via the Internet with the Support Request: Documentation (https://support.industry.siemens.com/cs/products?dtp=Manual&pnid=17781&lc=en-WW)
Tel.: +49 (911) 895-7222
Fax: +49 (911) 895-7223
You can find additional information about our technical support on the Internet at Technical support (https://support.industry.siemens.com/cs/start?lc=en-WW)
Service & Support on the Internet
In addition to our documentation, we offer a comprehensive knowledge base online on the Internet at:
Support request (https://support.industry.siemens.com/My/ww/en/requests)
There you will find:
The latest product information, FAQs, downloads, tips and tricks.
Our newsletter, providing you with the latest information about your products.
A Knowledge Manager to find the right documents for you.
Our bulletin board, where users and specialists share their knowledge worldwide.
You can find your local contact partner for Industry Automation and Drives Technologies in our partner database.
Information about on-site service, repairs, spare parts and much more is available under "Services".
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
171
Appendix A.2 ESD Guidelines
Additional Support
Please contact your local Siemens representative and offices if you have any questions about the products described in this manual and do not find the right answers. Find your contact partner at: Partner (http://www.automation.siemens.com/aspa_app/?ci=yes&lang=en) A signpost to the documentation of the various products and systems is available at: Industry Online Support (https://support.industry.siemens.com/cs/?lc=en-DE)
A.2
ESD Guidelines
Definition of ESD
All electronic modules are equipped with large-scale integrated ICs or components. Due to their design, these electronic elements are highly sensitive to overvoltage, and thus to any electrostatic discharge.
The electrostatic sensitive components/modules are commonly referred to as ESD devices. This is also the international abbreviation for such devices.
ESD modules are identified by the following symbol:
NOTICE Overvoltage on modules ESD devices can be destroyed by voltages well below the threshold of human perception. These static voltages develop when you touch a component or electrical connection of a device without having drained the static charges present on your body. The electrostatic discharge current may lead to latent failure of a module, that is, this damage may not be significant immediately, but in operation may cause malfunction.
Electrostatic charging
Anyone who is not connected to the electrical potential of their surroundings can be electrostatically charged. The figure below shows the maximum electrostatic voltage which may build up on a person coming into contact with the materials indicated. These values correspond to IEC 801-2 specifications.
172
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Appendix A.3 List of abbreviations
Image A-1 Electrostatic voltages which an operator can be subjected to
Basic protective measures against electrostatic discharge:
Ensure good equipotential bonding: When handling electrostatic sensitive devices, ensure that your body, the workplace and packaging are grounded. This prevents electrostatic charge.
Avoid direct contact: As a general rule, only touch electrostatic sensitive devices when this is unavoidable (e.g. during maintenance work). Handle the modules without touching any chip pins or PCB traces. In this way, the discharged energy can not affect the sensitive devices.
Discharge your body before you start taking any measurements on a module. Do so by touching grounded metallic parts. Always use grounded measuring instruments.
A.3
List of abbreviations
ASCII B CPU DB FB HMI HSP HW
American Standard Code for Information Interchange Gross weight Central processor, in this case SIMATIC CPU Data block SIMATIC S7 function block Human machine interface (e.g. SIMATIC Operator Panel) Hardware Support Package Hardware
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
173
Appendix A.3 List of abbreviations
IM N NAWI NAW OIML OP PC pT RAM PLC STEP 7 T TM TP UDT WRP LC NR
Interface module Net weight Non-automatic weighing instrument Non-automatic scales Organisation Internationale de Metrologie Legale Operator Panel (SIMATIC) Personal computer Preset tare (predefined tare weight with manual taring) Random Access Memory (read/write memory) Programmable logic controller Programming device software for SIMATIC S7 Tare weight Technology module Touch Panel (SIMATIC) Universal Data Type (S7) Write protection Load cell(s) Numerical range
174
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
Index
A
Abbreviations, 173 Additional Support, 172 Alarm buffer, 123 Automatic calibration, 58 Average characteristic value, 44
B
Backup file, 63
C
Calibration methods, 53 Calibration with calibration weight, 54 Climatic requirements, 165 Command groups, 135 Communication with SIMATIC S7-1500, 137 Configuration package, 169 Connections, 18 Customer Support Hotline, 171
D
Data and operating messages, 125 Data records, 67 Data security, 143 Date, 90 Default values, 67 Delay time, 104 Diagnostic messages, 141 DIP switch, 36
E
Electromagnetic compatibility, 163 Error code, 125 Error messages, 130 ESD guidelines, 172
F
Filter sequence, 73
Firmware update, 64
G
Guidelines ESD guidelines, 172
H
Hardware interrupt, 142 Hotline, 171
I
Immunity, 163 Internet, 171
L
LEDs, 130 Limit base, 84
M
Messages, 123 Modbus, 151 Module replacement, 63 MTBF, 165
O
OB82, 123 Operating messages, 124 Overview of the functions, 17
R
Rated load, 44 Ready for Use, 169 Reliability, 165
S
S7-1500 CPU, 105
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
175
Index
Safety requirements, 161 Service, 171 SIWATOOL, 46, 52 Specification of basic values, 40 Status messages, 130 Support, 171
T
Technical specifications, 157 Technology messages, 125 Time, 90
W
Weight unit, 71
176
SIWAREX WP521/WP522 Manual, 04/2016, A5E36695225A
CM PtP RS422/485 BA communication _Pr_ef_ac_e_______________
module (6ES75401AB000AA0)
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
SIMATIC
S7-1500/ET 200MP CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual
_Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Co_n_ne_c_tin_g____________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _Pr_og_ra_m_m_in_g___________5_ _Er_ro_r a_n_d_sy_st_em__m_es_sa_g_es____6_
_Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______7_
_Di_m_en_s_ion_a_l d_ra_w_in_g _______A_
01/2013
A5E03777484-01
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03777484-01 12/2012 Technical data subject to change
Copyright © Siemens AG 2013. All rights reserved
Preface
Purpose of the documentation
This device manual complements the system manual S7 1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792). General functions of the S7-1500 are described in the S7-1500 Automation System System Manual.
Conventions
This documentation contains figures of the described device. The figures may differ slightly from the devices supplied. Please also observe notes marked as follows:
Note A note contain important information on the product described in the documentation, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Note on IT security
Siemens offers IT security mechanisms for its automation and drive product portfolio in order to support the safe operation of the plant/machine. We recommend that you inform yourself regularly on the IT security developments regarding your products. You can find information on this on the Internet (http://support.automation.siemens.com).
You can register for a product-specific newsletter here.
For the safe operation of a plant/machine, however, it is also necessary to integrate the automation components into an overall IT security concept for the entire plant/machine, which corresponds to the state-of-the-art IT technology. You can find information on this on the Internet (http://www.siemens.com/industrialsecurity).
Products used from other manufacturers should also be taken into account here.
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
3
Preface
Copyright notice for the open-source software used
Open-source software is used in the firmware of the product described. The open-source software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the following copyright notices.
© Copyright William E. Kempf 2001 Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. William E. Kempf makes no representations about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.
Copyright © 1994 Hewlett-Packard Company Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. Hewlett-Packard Company makes no representations about the suitability of this software for any purpose. It is provided ``as is'' without express or implied warranty.
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
4
Manual, 01/2013, A5E03777484-01
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide................................................................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
Properties.......................................................................................................................................9
2.2
Accessories..................................................................................................................................11
2.3
Functions......................................................................................................................................12
2.4
Properties of the RS422/485 interface.........................................................................................14
3 Connecting .............................................................................................................................................. 15
3.1
RS422/485 (X27) interface of the communication module ..........................................................15
3.2
Installation guidelines...................................................................................................................16
4 Parameters/address space ...................................................................................................................... 17
4.1
Parameter assignment.................................................................................................................17
4.2
Reaction to CPU STOP ...............................................................................................................17
4.3
Address space .............................................................................................................................18
5 Programming ........................................................................................................................................... 19
6 Error and system messages .................................................................................................................... 21
7 Technical specifications........................................................................................................................... 23
A Dimensional drawing ............................................................................................................................... 27
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
5
Table of contents
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
6
Manual, 01/2013, A5E03777484-01
Documentation guide
1
Introduction
This modular documentation of the SIMATIC products covers diverse topics concerning your automation system.
The complete documentation for the S7-1500 and ET 200MP automation systems consists of system manuals, function manuals and manuals.
The STEP 7 information system (Online Help) also helps you configure and program your automation system.
Overview of the documentation provided for the CM PtP RS422/485 BA communication module
The following table lists additional references that you will need when using the CM PtP RS422/485 BA communication module.
Table 1- 1 Documentation for the CM PtP RS422/485 BA communication module
Topic System description
Documentation
Key content
System manual S7 -1500 Automation System · Application planning
(http://support.automation.siemens.com/WW/vi ew/en/59191792)
·
Installation
System manual ET 200MP distributed I/O
· Connecting
system
· Addressing
(http://support.automation.siemens.com/WW/vi · Commissioning
ew/en/59193214)
System manual ET 200SP distributed I/O
· Maintenance
system
(http://support.automation.siemens.com/WW/vi
ew/en/58649293)
Power supply manuals
· Connecting
(http://support.automation.siemens.com/WW/vi ew/en/59173914)
·
Interrupt, error and
system messages
CPU manuals
(http://support.automation.siemens.com/WW/vi · Technical specifications
ew/en/56926947)
· Dimensional drawing
Function manual EMC/EMI compatible
· Basics
installation of control systems (http://support.automation.siemens.com/WW/vi
·
Electromagnetic
ew/en/59193566)
compatibility
· Lightning protection
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
7
Documentation guide
Topic
Point-to-point communication
Documentation
Function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/vi ew/en/59057093)
Key content
· Basic information · Data transmission
functions · Diagnostics functions
SIMATIC manuals
All current manuals for the SIMATIC products are available for download free of charge on the Internet (http://www.siemens.com/automation/service&support).
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
8
Manual, 01/2013, A5E03777484-01
Product overview
2.1
Properties
Order number 6ES7540-1AB00-0AA0
View of the module
2
Figure 2-1 CM PtP RS422/485 BA view
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
9
Product overview 2.1 Properties
Properties
The communication module has the following properties: Technical properties
RS422/485 interface short-circuit proof electrically disconnected Protocols: 3964(R), Freeport and USS with instructions Supported system functions Firmware update Identification data I&M0 Parameter re-assignment in CPU RUN mode (using instructions) Diagnostic interrupts
Additional information
Additional information on the properties of the CM PtP RS422/485 BA can be found in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
Additional information on the properties of the S7-1500 and associated modules can be found in the system manual S7 -1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
10
Manual, 01/2013, A5E03777484-01
Product overview 2.2 Accessories
2.2
Accessories
Scope of delivery
The scope of delivery of the communication module includes a U connector for connection to the backplane bus.
Connecting cables
Connecting cables are available in the standard lengths: 5 m, 10 m and 50 m (each with a 15-pin sub D connector).
Table 2- 1 Order numbers of connecting cables
Connecting cables for CM PtP RS422/485 BA CM PtP RS422/485 HF X27 interface (RS422/485)
Type
X27 (RS 422), 5 m X27 (RS 422), 10 m X27 (RS 422), 50 m
Order number
6ES79023AB000AA0 6ES79023AC000AA0 6ES79023AG000AA0
Online catalog
Additional order numbers for S7-1500 can be found on the Internet (http://www.siemens.com/industrymall) in the online catalog and online ordering system.
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
11
Product overview 2.3 Functions
2.3
Functions
Introduction
The communication module allows you to exchange data between your own and other programmable controllers or computers by means of a point-to-point connection, and to connect various devices from a variety of manufacturers.
Functionality of the CM PtP RS422/485 BA The CM PtP RS422/485 BA communication module offers the following functionality: RS422/485 interface Data transmission rate: 300 to 19200 bps Maximum frame length: 1 kbyte Transmission protocols: Freeport and 3964(R)
Note The USS protocol can be implemented with instructions included in STEP 7 (TIA Portal).
Hardware components of a point-to-point connection
You require certain hardware components for a point-to-point connection with the CM PtP RS422/485 BA.
Components Central processor unit (CPU) Accessories: Memory card CM PtP RS422/485 BA communication module
Connecting cable
Function ... executes the user program.
... communicates with a communication partner (point-to-point) by means of the interface. ... connects the CM PtP RS422/485 BA communication module with the communication partner.
U connector Optional: Power supply module (PS)
... provides the mechanical and electrical connection between the modules.
... converts the line voltage (120/230 VAC or 24 VDC) into the operating voltage of 15 VDC required for supply of the S7-1500.
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
12
Manual, 01/2013, A5E03777484-01
Product overview 2.3 Functions
System environment The communication module can be used in the following system environments:
Applications Central operation in an S7-1500 system
Distributed operation in an S7-1500 system
Distributed operation in an S7-300/400 system
Distributed operation in a third-party system
Components required · CPU 151x · CM PtP RS422/485 BA · Power supply (optional)
Configuration STEP 7 (TIA Portal)
· CPU 151x
STEP 7 (TIA Portal)
· IM 155-5 · CM PtP RS422/485 BA · Power supply (optional)
· CPU 31x / CPU 41x · IM 155-5 · CM PtP RS422/485 BA
STEP 7 (TIA Portal) STEP 7 with integration of a GSD file
· Third-party programmable controller GSD file imported to/installed in the
· IM 155-5
engineering system 1)
· CM PtP RS422/485 BA
1) Information on using the communication module in a third-party system is available in the programming and operating manual CM PtP operation with PROFINET controller (http://support.automation.siemens.com/WW/view/en/59062563).
Additional information
Information on configuring and programming the CM PtP RS422/485 BA communication module is available in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
13
Product overview 2.4 Properties of the RS422/485 interface
2.4
Properties of the RS422/485 interface
Definition Properties
The RS422/485 (X27) interface is a differential voltage interface for serial data transmission.
The RS422/485 (X27) interface has the following properties and meets the following requirements:
Type Front connector: RS422 signals: RS485 signals:
Max. data transmission rate: Max. cable length:
Standard:
Differential voltage interface 15-pin sub-D female connector, with screw lock T (A), R (A), T (B), R (B), GND; isolated R/T (A), R/T (B), GND; all signals isolated against backplane bus and load voltage 19.2 kbps
1200 m; cable type LIYCY 3 x 2 x 0.14. T(A)/T(B) and R(A)/R(B) twisted in pairs DIN 66259 Parts 1 and 3, EIA-RS422/485, CCITT V.11
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
14
Manual, 01/2013, A5E03777484-01
Connecting
3
3.1
RS422/485 (X27) interface of the communication module
Terminal assignment
The table below shows the terminal assignment for the 15-pin sub D female connector in the front panel of the communication module.
Table 3- 1 Terminal assignment for the 15-pin sub D female connector of the integrated interface of the communication module
RS422/485* female connector
Pin Designation
1 2 T (A) 3 4 R (A)/T (A) -
5 -
6
7 8 9 10
11
GND T (B) + R (B)/T (B) +
12 13 14 15 -
Input/output
Output Input Input/output Output Input Input/output -
Meaning
Send data (four-wire mode) Receive data (four-wire mode) Receive/send data (two-wire mode) Functional ground (isolated) Send data (four-wire mode) Receive data (four-wire mode) Receive/send data (two-wire mode) -
* View from the front
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
15
Connecting 3.2 Installation guidelines
Connecting cables Standard connecting cables of various lengths (see chapter Accessories (Page 11)) are available for connection with a communication partner which also has a 15-pin sub-D female connector. Please note that you must only use shielded connector casings and cables. A large surface area of the cable shield must be in contact with the connector casing on both sides.
CAUTION Cable shield - GND Never connect the cable shield to the GND, as this could destroy the modules. GND (pin 8) must always be connected on both sides, as this could otherwise also destroy the modules.
3.2
Installation guidelines
To take into consideration
The general installation guidelines must be taken into consideration (see function manual EMC/EMI compatible installation of control systems (http://support.automation.siemens.com/WW/view/en/59193566)).
The cable shield must be installed on a grounding rail to maintain the EMC values (electromagnetic compatibility).
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
16
Manual, 01/2013, A5E03777484-01
Parameters/address space
4
4.1
Parameter assignment
Introduction
You configure and assign the parameters of the communication module with STEP 7 (TIA Portal V12 or later) or with STEP 7 with integration of a GSD file.
Additional information The device manual of the communication module is supplemented by the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093) and the TIA Portal information system. There you will find information on the following topics: Operating modes Receive buffer Data flow control Transmission integrity Data transmission - protocol specific Programming/configuring in STEP 7 (TIA Portal) Module-specific instructions Diagnostics
4.2
Reaction to CPU STOP
Ongoing transmissions are aborted when the higher-level control (CPU) goes to STOP.
Frames in the receive buffer are retained. With a corresponding configuration in the properties dialog of the communication module, you can automatically clear the receive buffer on the communication module during CPU startup.
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
17
Parameters/address space 4.3 Address space
4.3
Address space
Address space of the communication module
The input addresses of the communications module total 8 bytes. The input addresses are automatically assigned for each communications module when you specify the device configuration in STEP 7 (TIA Portal). Output addresses are not required.
Hardware identification (not freely configurable)
The hardware identification (HW ID) is automatically assigned for each communications module when you specify the device configuration in STEP 7 (TIA Portal).
The hardware ID is issued along with the diagnostic messages to localize the module. In addition, the HW identification is required for S7-1500 at the communication instructions in order to identify the communication module. For S7-300/400, the communication module is identified by the start address of the input data.
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
18
Manual, 01/2013, A5E03777484-01
Programming
5
Overview of the instructions
Communication between the CPU, the communication module and a communication partner takes place by means of special instructions and protocols that support the corresponding communication modules. The instructions process the exchange of data between the CPU and the communication module. They must be called cyclically from the user program. Data transmission takes place asynchronously across several cycles.
The transmission protocols are implemented on the communication module. The protocol is used to adapt the interface of the communication module to the interface of the communication partner.
Instruction Port_Config
Send_Config
Receive_Config
P3964_Config
Send_P2P Receive_P2P
Receive_Reset
Get_Features
Set_Features
USS_Port_Scan USS_Drive_Control USS_Read_Param
USS_Write_Param
Meaning
You use the Port_Config instruction to dynamically assign basic interface parameters.
You use the Send_Config (send configuration) instruction to dynamically assign serial send parameters of a protocol.
You use the Receive_Config (receive configuration) instruction to dynamically assign serial receive parameters of a protocol.
You use the P3964_Config (protocol configuration) instruction to dynamically assign the parameters of the 3964(R) procedure.
You use the Send_P2P instruction to send data to a communication partner.
You use the Receive_P2P instruction to receive data from a communication partner.
You use the Receive_Reset instruction to delete the receive buffer of the communication module.
You use the Get_Features instruction to read expanded functions supported by the communication module.
You use the Set_Features instruction to set expanded functions supported by the communication module.
You use the USS_Port_Scan instruction to communicate using the USS.
You use the USS_Drive_Control instruction to exchange data with a drive.
You use the USS_Read_Param instruction to read parameters from the drive.
You use the USS_Write_Param instruction to change parameters in the drive.
The instructions are part of STEP 7 (TIA Portal). The instructions are available in the "Instructions" task card under Communication > Communication processor.
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
19
Programming
Additional information Additional information on programming the communication modules can be found in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
20
Manual, 01/2013, A5E03777484-01
Error and system messages
6
LED displays of the communication module
The figure below shows the LED displays of the CM PtP RS422/485 BA communication module with open front panel.
LED display RUN LED display ERROR LED display MAINT LED display TXD LED display RXD
Figure 6-1 CM PtP RS422/485 BA view
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
21
Error and system messages
Meaning of the LED displays for RUN/ERROR/(MAINT)
RUN Off Flashes On On
LED
Meaning
Solution
ERROR Off Off Off
Flashes
MAINT Off Off Off Off
Supply voltage not present or too low at Check the power supply of the station. communication module
CM in startup, parameters not assigned --yet
CM configured and ready for operation ---
Group error (at least one error pending) Evaluate the diagnostics data and eliminate the error. 1)
1) Information on startup and diagnostics of the communication module is available in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
Meaning of LED displays for TXD/RXD (under the front panel)
LED
TXD
RXD
Flashes
Off
Off
Flashes
Meaning Interface is transmitting Interface is receiving
Solution -----
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
22
Manual, 01/2013, A5E03777484-01
Technical specifications
7
Product type designation General information · I&M data Engineering with STEP 7 TIA Portal can be configured/integrated as of version STEP 7 can be configured/integrated as of version PROFIBUS as of GSD version/GSD revision PROFINET as of GSD version/GSD revision Installation type/mounting · Rail mounting possible
Supply voltage Voltage type of supply voltage Input current · Current consumption (rated value)
Power · Power from the backplane bus
Power loss · Power loss, typ.
Address area Occupied address area · Inputs
Interfaces 1. Interface Interface hardware · RS 422
· RS 485
6ES7540-1AB00-0AA0 CM PtP RS422/485 BA Yes; I&M 0 V12.0 / V12.0 V5.5 SP2 or higher with a GSD file - / V2.3 Yes; S7-1500 mounting rail System power supply 33 mA; from backplane bus 0.65 W 0.6 W
8 bytes
Yes Yes
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
23
Technical specifications
Interface hardware RS 485 · Transmission rate, max. · Max. cable length RS 422 · Transmission rate, max. · Max. cable length · 4-wire full duplex connection · 4-wire multipoint connection Protocols Integrated protocols Freeport · Frame length, max. · Bits per character · Number of stop bits · Parity 3964 (R) · Frame length, max. · Bits per character · Number of stop bits · Parity Frame buffer · Buffer memory for frames · Number of frames which can be buffered Interrupts/diagnostics/status information Interrupts · Diagnostic interrupt · Hardware interrupt Diagnostic messages Diagnostics · Wire break Diagnostics display LED · RUN LED · ERROR LED · Receive RxD · Send TxD
6ES7540-1AB00-0AA0
19.2 kbps 1200 m
19.2 kbps 1200 m Yes No
1 kbyte 7 or 8 1 or 2 bits None, even, odd, always 1, always 0, any
1 kbyte 7 or 8 1 or 2 bits None, even, odd, always 1, always 0, any
2 kbyte 255
Yes No
Yes Yes
Yes; green LED Yes; red LED Yes; yellow LED Yes; yellow LED
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
24
Manual, 01/2013, A5E03777484-01
Technical specifications
Electrical isolation · between backplane bus and interface Insulation Insulation tested with Ambient conditions Operating temperature · Horizontal installation, min. · Horizontal installation, max. · Vertical installation, min. · Vertical installation, max. Distributed operation · At SIMATIC S7-300 · At SIMATIC S7-400 · At SIMATIC S7-1500 · At Standard Profinet Controller · Supports Fast Startup Dimensions · Width · Height · Depth Weights · Weight, approx.
6ES7540-1AB00-0AA0 Yes
707 V DC
0 °C 60 °C 0 °C 40 °C
Yes Yes Yes Yes Yes
35 mm 147 mm 127 mm
0.22 kg
Additional general technical specifications for SIMATIC S7-1500 are available in the system manual S7 -1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
25
Technical specifications
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
26
Manual, 01/2013, A5E03777484-01
Dimensional drawing
A
This appendix contains the dimensional drawing of the communication module installed on a mounting rail and with a shield bracket. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the CM PtP RS422/485 BA communication module
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
Manual, 01/2013, A5E03777484-01
27
Dimensional drawing
Figure A-2
Dimensional drawing of the CM PtP RS422/485 BA communication module with open front panel
CM PtP RS422/485 BA communication module (6ES75401AB000AA0)
28
Manual, 01/2013, A5E03777484-01
CM PtP RS422/485 HF communication _Pr_ef_ac_e_______________
module (6ES75411AB000AB0)
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
SIMATIC
S7-1500/ET 200MP CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual
_Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Co_n_ne_c_tin_g____________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _Pr_og_ra_m_m_in_g___________5_ _Er_ro_r a_n_d_sy_st_em__m_es_sa_g_es____6_
_Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______7_
_Di_m_en_s_ion_a_l d_ra_w_in_g _______A_
01/2013
A5E03790709-01
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03790709-01 11/2012 Technical data subject to change
Copyright © Siemens AG 2013. All rights reserved
Preface
Purpose of the documentation
This device manual complements the system manual S7 1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792). General functions of the S7-1500 are described in the S7-1500 Automation System System Manual.
Conventions
This documentation contains figures of the described device. The figures may differ slightly from the devices supplied. Please also observe notes marked as follows:
Note A note contain important information on the product described in the documentation, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Note on IT security
Siemens offers IT security mechanisms for its automation and drive product portfolio in order to support the safe operation of the plant/machine. We recommend that you inform yourself regularly on the IT security developments regarding your products. You can find information on this on the Internet (http://support.automation.siemens.com).
You can register for a product-specific newsletter here.
For the safe operation of a plant/machine, however, it is also necessary to integrate the automation components into an overall IT security concept for the entire plant/machine, which corresponds to the state-of-the-art IT technology. You can find information on this on the Internet (http://www.siemens.com/industrialsecurity).
Products used from other manufacturers should also be taken into account here.
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
3
Preface
Copyright notice for the open-source software used
Open-source software is used in the firmware of the product described. The open-source software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the following copyright notices.
© Copyright William E. Kempf 2001 Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. William E. Kempf makes no representations about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.
Copyright © 1994 Hewlett-Packard Company Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. Hewlett-Packard Company makes no representations about the suitability of this software for any purpose. It is provided ``as is'' without express or implied warranty.
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
4
Manual, 01/2013, A5E03790709-01
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide................................................................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
Properties.......................................................................................................................................9
2.2
Accessories..................................................................................................................................11
2.3
Functions......................................................................................................................................12
2.4
Properties of the RS422/485 interface.........................................................................................14
3 Connecting .............................................................................................................................................. 15
3.1
RS422/485 (X27) interface of the communication module ..........................................................15
3.2
Installation guidelines...................................................................................................................16
4 Parameters/address space ...................................................................................................................... 17
4.1
Parameter assignment.................................................................................................................17
4.2
Reaction to CPU STOP ...............................................................................................................17
4.3
Address space .............................................................................................................................18
5 Programming ........................................................................................................................................... 19
6 Error and system messages .................................................................................................................... 21
7 Technical specifications........................................................................................................................... 23
7.1
Technical specifications ...............................................................................................................23
A Dimensional drawing ............................................................................................................................... 27
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
5
Table of contents
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
6
Manual, 01/2013, A5E03790709-01
Documentation guide
1
Introduction
This modular documentation of the SIMATIC products covers diverse topics concerning your automation system.
The complete documentation for the S7-1500 and ET 200MP automation systems consists of system manuals, function manuals and manuals.
The STEP 7 information system (Online Help) also helps you configure and program your automation system.
Overview of the documentation provided for the CM PtP RS422/485 HF communication module
The following table lists additional references that you will need when using the CM PtP RS422/485 HF communication module.
Table 1- 1 Documentation for the CM PtP RS422/485 HF communication module
Topic System description
Documentation
Key content
System manual S7 -1500 Automation System · Application planning
(http://support.automation.siemens.com/WW/vi ew/en/59191792)
·
Installation
System manual ET 200MP distributed I/O
· Connecting
system
· Addressing
(http://support.automation.siemens.com/WW/vi · Commissioning
ew/en/59193214)
System manual ET 200SP distributed I/O
· Maintenance
system
(http://support.automation.siemens.com/WW/vi
ew/en/58649293)
Power supply manuals
· Connecting
(http://support.automation.siemens.com/WW/vi ew/en/59173914)
·
Interrupt, error and
system messages
CPU manuals
(http://support.automation.siemens.com/WW/vi · Technical specifications
ew/en/56926947)
· Dimensional drawing
Function manual EMC/EMI compatible
· Basics
installation of control systems (http://support.automation.siemens.com/WW/vi
·
Electromagnetic
ew/en/59193566)
compatibility
· Lightning protection
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
7
Documentation guide
Topic
Point-to-point communication
Documentation
Function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/vi ew/en/59057093)
Key content
· Basic information · Data transmission
functions · Diagnostics functions
SIMATIC manuals
All current manuals for the SIMATIC products are available for download free of charge on the Internet (http://www.siemens.com/automation/service&support).
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
8
Manual, 01/2013, A5E03790709-01
Product overview
2.1
Properties
Order number 6ES7541-1AB00-0AB0
View of the module
2
Figure 2-1 CM PtP RS422/485 HF view
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
9
Product overview 2.1 Properties
Properties
The communication module has the following properties: Technical properties
RS422/485 interface short-circuit proof electrically disconnected Protocols: 3964(R), Modbus master (RTU), Modbus slave (RTU), Freeport and USS
with instructions Supported system functions
Firmware update Identification data I&M0 Diagnostic interrupts Parameter re-assignment in CPU RUN mode (using instructions)
Additional information
Additional information on the properties of the CM PtP RS422/485 HF can be found in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
You can find additional information on the design of the S7-1500 and the associated modules in the system manual S7 -1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
10
Manual, 01/2013, A5E03790709-01
Product overview 2.2 Accessories
2.2
Accessories
Scope of delivery
The scope of delivery of the communication module includes a U connector for connection to the backplane bus.
Connecting cables
Connecting cables are available in the standard lengths: 5 m, 10 m and 50 m (each with a 15-pin sub D connector).
Table 2- 1 Order numbers of connecting cables
Connecting cables for CM PtP RS422/485 BA CM PtP RS422/485 HF X27 interface (RS422/485)
Type
X27 (RS 422), 5 m X27 (RS 422), 10 m X27 (RS 422), 50 m
Order number
6ES79023AB000AA0 6ES79023AC000AA0 6ES79023AG000AA0
Online catalog
Additional order numbers for S7-1500 can be found on the Internet (http://www.siemens.com/industrymall) in the online catalog and online ordering system.
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
11
Product overview 2.3 Functions
2.3
Functions
Introduction
The communication module allows you to exchange data between your own and other programmable controllers or computers by means of a point-to-point connection, and to connect various devices from a variety of manufacturers.
Functionality of the CM PtP RS422/485 HF The CM PtP RS422/485 HF communication module offers the following functionality: RS422/485 interface Data transmission rate: 300 to 115.2 kbps Maximum frame length: 4 kbyte Transmission protocols: Freeport, 3964(R) and Modbus
Note The USS protocol can be implemented with instructions included in STEP 7 (TIA Portal).
Hardware components of a point-to-point connection
You require certain hardware components for a point-to-point connection with the CM PtP RS422/485 HF.
Components Central processor unit (CPU) Accessories: Memory card CM PtP RS422/485 HF communication module
Connecting cable
Function ... executes the user program.
... communicates with a communication partner (point-to-point) by means of the interface. ... connects the CM PtP RS422/485 HF communication module with the communication partner.
U connector Optional: Power supply module (PS)
... provides the mechanical and electrical connection between the modules.
... converts the line voltage (120/230 VAC or 24 VDC) into the operating voltage of 15 VDC required for supply of the S7-1500.
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
12
Manual, 01/2013, A5E03790709-01
Product overview 2.3 Functions
System environment The communication module can be used in the following system environments:
Applications Central operation in an S7-1500 system
Distributed operation in an S7-1500 system
Distributed operation in an S7-300/400 system
Distributed operation in a third-party system
Components required · CPU 151x · CM PtP RS422/485 HF · Power supply (optional)
Configuration STEP 7 (TIA Portal)
· CPU 151x
STEP 7 (TIA Portal)
· IM 155-5 · CM PtP RS422/485 HF · Power supply (optional)
· CPU 31x / CPU 41x · IM 155-5 · CM PtP RS422/485 HF
STEP 7 (TIA Portal) STEP 7 with integration of a GSD file
· Third-party programmable controller GSD file imported to/installed in the
· IM 155-5
engineering system 1)
· CM PtP RS422/485 HF
1) Information on using the communication module in a third-party system is available in the programming and operating manual CM PtP operation with PROFINET controller (http://support.automation.siemens.com/WW/view/en/59062563).
Additional information
Information on configuring and programming the CM PtP RS422/485 HF communication module is available in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
13
Product overview 2.4 Properties of the RS422/485 interface
2.4
Properties of the RS422/485 interface
Definition Properties
The RS422/485 (X27) interface is a differential voltage interface for serial data transmission.
The RS422/485 (X27) interface has the following properties and meets the following requirements:
Type Front connector: RS422 signals: RS485 signals:
Max. data transmission rate: Max. cable length:
Standard:
Differential voltage interface 15-pin sub-D female connector, with screw lock T (A), R (A), T (B), R (B), GND; isolated R/T (A), R/T (B), GND; all signals isolated against backplane bus and load voltage 115.2 kbps
· 250 m for 115.2 kbps · 500 m for 38.4 kbps · 1200 m for up to19.2 kbps Cable type LIYCY 3 x 2 x 0.14. T(A)/T(B) and R(A)/R(B) twisted in pairs DIN 66259 Parts 1 and 3, EIA-RS422/485, CCITT V.11
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
14
Manual, 01/2013, A5E03790709-01
Connecting
3
3.1
RS422/485 (X27) interface of the communication module
Terminal assignment
The table below shows the terminal assignment for the 15-pin sub D female connector in the front panel of the communication module.
Table 3- 1 Terminal assignment for the 15-pin sub D female connector of the integrated interface of the communication module
RS422/485* female connector
Pin Designation
1 2 T (A) 3 4 R (A)/T (A) -
5 -
6
7 8 9 10
11
GND T (B) + R (B)/T (B) +
12 13 14 15 -
Input/output
Output Input Input/output Output Input Input/output -
Meaning
Send data (four-wire mode) Receive data (four-wire mode) Receive/send data (two-wire mode) Functional ground (isolated) Send data (four-wire mode) Receive data (four-wire mode) Receive/send data (two-wire mode) -
* View from the front
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
15
Connecting 3.2 Installation guidelines
Connecting cables Standard connecting cables of various lengths (see chapter Accessories (Page 11)) are available for connection with a communication partner which also has a 15-pin sub-D female connector. Please note that you must only use shielded connector casings and cables. A large surface area of the cable shield must be in contact with the connector casing on both sides.
CAUTION Cable shield - GND Never connect the cable shield to the GND, as this could destroy the modules. GND (pin 8) must always be connected on both sides, as this could otherwise also destroy the modules.
3.2
Installation guidelines
To take into consideration
The general installation guidelines must be taken into consideration (see function manual EMC/EMI compatible installation of control systems (http://support.automation.siemens.com/WW/view/en/59193566)).
The cable shield must be installed on a grounding rail to maintain the EMC values (electromagnetic compatibility).
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
16
Manual, 01/2013, A5E03790709-01
Parameters/address space
4
4.1
Parameter assignment
Introduction
You configure and assign the parameters of the communication module with STEP 7 (TIA Portal V12 or later) or with STEP 7 with integration of a GSD file.
Additional information The device manual of the communication module is supplemented by the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093) and the TIA Portal information system. There you will find information on the following topics: Operating modes Receive buffer Data flow control Transmission integrity Data transmission - protocol specific Programming/configuring in STEP 7 (TIA Portal) Module-specific instructions Diagnostics
4.2
Reaction to CPU STOP
Ongoing transmissions are aborted when the higher-level control (CPU) goes to STOP.
Frames in the receive buffer are retained. With a corresponding configuration in the properties dialog of the communication module, you can automatically clear the receive buffer on the communication module during CPU startup.
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
17
Parameters/address space 4.3 Address space
4.3
Address space
Address space of the communication module
The input addresses of the communications module total 8 bytes. The input addresses are automatically assigned for each communications module when you specify the device configuration in STEP 7 (TIA Portal). Output addresses are not required.
Hardware identification (not freely configurable)
The hardware identification (HW ID) is automatically assigned for each communications module when you specify the device configuration in STEP 7 (TIA Portal).
The hardware ID is issued along with the diagnostic messages to localize the module. In addition, the HW identification is required for S7-1500 at the communication instructions in order to identify the communication module. For S7-300/400, the communication module is identified by the start address of the input data.
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
18
Manual, 01/2013, A5E03790709-01
Programming
5
Overview of the instructions
Communication between the CPU, the communication module and a communication partner takes place by means of special instructions and protocols that support the corresponding communication modules. The instructions process the exchange of data between the CPU and the communication module. They must be called cyclically from the user program. Data transmission takes place asynchronously across several cycles.
The transmission protocols are implemented on the communication module. The protocol is used to adapt the interface of the communication module to the interface of the communication partner.
Instruction Port_Config
Send_Config
Receive_Config
P3964_Config
Send_P2P Receive_P2P
Receive_Reset
Signal_Get
Signal_Set Get_Features
Set_Features
USS_Port_Scan USS_Drive_Control USS_Read_Param
USS_Write_Param
Modbus_Comm_Load
Meaning
You use the Port_Config instruction to dynamically assign basic interface parameters.
You use the Send_Config (send configuration) instruction to dynamically assign serial send parameters of a protocol.
You use the Receive_Config (receive configuration) instruction to dynamically assign serial receive parameters of a protocol.
You use the P3964_Config (protocol configuration) instruction to dynamically assign the parameters of the 3964(R) procedure.
You use the Send_P2P instruction to send data to a communication partner.
You use the Receive_P2P instruction to receive data from a communication partner.
You use the Receive_Reset instruction to delete the receive buffer of the communication module.
You use the Signal_Get instruction to read the RS232 accompanying signals.
You use the Signal_Set instruction to set the RS232 accompanying signals.
You use the Get_Features instruction to read expanded functions supported by the communication module.
You use the Set_Features instruction to set expanded functions supported by the communication module.
You use the USS_Port_Scan instruction to communicate using the USS.
You use the USS_Drive_Control instruction to exchange data with a drive.
You use the USS_Read_Param instruction to read parameters from the drive.
You use the USS_Write_Param instruction to change parameters in the drive.
The instruction Modbus_Comm_Load allows you to configure the port of the communication module for Modbus RTU.
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
19
Programming
Instruction Modbus_Master
Modbus_Slave
Meaning
The instruction Modbus_Master allows you to communicate as Modbus master by means of the PtP port.
The instruction Modbus_Slave allows you to communicate as Modbus slave by means of the PtP port.
The instructions are part of STEP 7 (TIA Portal). The instructions are available in the "Instructions" task card under Communication > Communication processor.
Additional information
Additional information on programming the communication modules can be found in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
20
Manual, 01/2013, A5E03790709-01
Error and system messages
6
LED displays of the communication module
The figure below shows the LED displays of the CM PtP RS422/485 HF communication module with open front panel.
LED display RUN LED display ERROR LED display MAINT LED display TXD LED display RXD
Figure 6-1 CM PtP RS422/485 HF view
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
21
Error and system messages
Meaning of the LED displays for RUN/ERROR/(MAINT)
RUN Off Flashes On On
LED
Meaning
Solution
ERROR Off Off Off
Flashes
MAINT Off Off Off Off
Supply voltage not present or too low at Check the power supply of the station. communication module
CM in startup, parameters not assigned --yet
CM configured and ready for operation ---
Group error (at least one error pending) Evaluate the diagnostics data and eliminate the error. 1)
1) Information on startup and diagnostics of the communication module is available in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
Meaning of LED displays for TXD/RXD (under the front panel)
LED
TXD
RXD
Flashes
Off
Off
Flashes
Meaning Interface is transmitting Interface is receiving
Solution -----
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
22
Manual, 01/2013, A5E03790709-01
Technical specifications
7
7.1
Technical specifications
Product type designation General information · I&M data Engineering with STEP 7 TIA Portal can be configured/integrated as of version STEP 7 can be configured/integrated as of version PROFIBUS as of GSD version/GSD revision PROFINET as of GSD version/GSD revision Installation type/mounting · Rail mounting possible
Supply voltage Voltage type of supply voltage Input current · Current consumption (rated value)
Power · Power from the backplane bus
Power loss · Power loss, typ.
Address area Occupied address area · Inputs
Interfaces 1. Interface Interface hardware · RS 422
· RS 485
6ES7541-1AB00-0AB0 CM PtP RS422/485 HF Yes; I&M 0 V12.0 / V12.0 V5.5 SP2 or higher with a GSD file - / V2.3 Yes; S7-1500 mounting rail System power supply 33 mA; from backplane bus 0.65 W 0.6 W
8 bytes
Yes Yes
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
23
Technical specifications 7.1 Technical specifications
Interface hardware RS 485 · Transmission rate, max. · Max. cable length RS 422 · Transmission rate, max. · Max. cable length · 4-wire full duplex connection · 4-wire multipoint connection Protocols Integrated protocols Freeport · Frame length, max. · Bits per character · Number of stop bits · Parity 3964 (R) · Frame length, max. · Bits per character · Number of stop bits · Parity Modbus RTU master Address area · Max. number of slaves Modbus RTU slave Address area Frame buffer · Buffer memory for frames · Number of frames which can be buffered
6ES7541-1AB00-0AB0
115.2 kbps 1200 m
115.2 kbps 1200 m Yes No
4 kbyte 7 or 8 1 or 2 bits None, even, odd, always 1, always 0, any
4 kbyte 7 or 8 1 or 2 bits None, even, odd, always 1, always 0, any
1 to 247, extended 1 to 65,535 32
1 to 247, extended 1 to 65,535 8 kbyte 255
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
24
Manual, 01/2013, A5E03790709-01
Technical specifications 7.1 Technical specifications
Interrupts/diagnostics/status information Interrupts · Diagnostic interrupt · Hardware interrupt Diagnostic messages Diagnostics · Wire break Diagnostics display LED · RUN LED · ERROR LED · Receive RxD · Send TxD Electrical isolation · between backplane bus and interface Insulation Insulation tested with Ambient conditions Operating temperature · Horizontal installation, min. · Horizontal installation, max. · Vertical installation, min. · Vertical installation, max. Distributed operation · At SIMATIC S7-300 · At SIMATIC S7-400 · At SIMATIC S7-1500 · At Standard Profinet Controller · Supports Fast Startup Dimensions · Width · Height · Depth Weights · Weight, approx.
6ES7541-1AB00-0AB0
Yes No
Yes Yes
Yes; green LED Yes; red LED Yes; yellow LED Yes; yellow LED
Yes
707 V DC (Type Test)
0 °C 60 °C 0 °C 40 °C
Yes Yes Yes Yes Yes
35 mm 147 mm 127 mm
0.22 kg
Additional general technical specifications for SIMATIC S7-1500 are available in the system manual (http://support.automation.siemens.com/WW/view/en/59191792).
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
25
Technical specifications 7.1 Technical specifications
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
26
Manual, 01/2013, A5E03790709-01
Dimensional drawing
A
This appendix contains the dimensional drawing of the communication module installed on a mounting rail and with a shield bracket. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the CM PtP RS422/485 HF communication module
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
Manual, 01/2013, A5E03790709-01
27
Dimensional drawing
Figure A-2
Dimensional drawing of the CM PtP RS422/485 HF communication module with open front panel
CM PtP RS422/485 HF communication module (6ES75411AB000AB0)
28
Manual, 01/2013, A5E03790709-01
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
SIMATIC
S7-1500 / ET 200MP CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Co_n_ne_c_tin_g____________3_ _Pa_ra_m_e_te_rs_/A_dd_re_ss_s_p_ac_e____4_ _Pr_og_ra_m_m_in_g___________5_ _Er_ro_r a_n_d_sy_st_em__m_es_sa_g_es____6_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______7_ _Di_m_en_s_ion_a_l d_ra_w_in_g _______A_
01/2013
A5E03777472-01
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03777472-01 11/2012 Technical data subject to change
Copyright © Siemens AG 2013. All rights reserved
Preface
Purpose of the documentation
This device manual complements the system manual S7 1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792). General functions of the S7-1500 are described in the S7-1500 Automation System System Manual.
Conventions
This documentation contains figures of the described device. The figures may differ slightly from the devices supplied. Please also observe notes marked as follows:
Note A note contain important information on the product described in the documentation, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Note on IT security
Siemens offers IT security mechanisms for its automation and drive product portfolio in order to support the safe operation of the plant/machine. We recommend that you inform yourself regularly on the IT security developments regarding your products. You can find information on this on the Internet (http://support.automation.siemens.com).
You can register for a product-specific newsletter here.
For the safe operation of a plant/machine, however, it is also necessary to integrate the automation components into an overall IT security concept for the entire plant/machine, which corresponds to the state-of-the-art IT technology. You can find information on this on the Internet (http://www.siemens.com/industrialsecurity).
Products used from other manufacturers should also be taken into account here.
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
3
Preface
Copyright notice for the open-source software used
Open-source software is used in the firmware of the product described. The open-source software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the following copyright notices.
© Copyright William E. Kempf 2001 Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. William E. Kempf makes no representations about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.
Copyright © 1994 Hewlett-Packard Company Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. Hewlett-Packard Company makes no representations about the suitability of this software for any purpose. It is provided ``as is'' without express or implied warranty.
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
4
Manual, 01/2013, A5E03777472-01
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide................................................................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
Properties.......................................................................................................................................9
2.2
Accessories..................................................................................................................................11
2.3
Functions......................................................................................................................................12
2.4
Properties of the RS232 interface................................................................................................14
3 Connecting .............................................................................................................................................. 15
3.1
RS232 interface of the communications module .........................................................................15
3.2
Installation guidelines...................................................................................................................16
4 Parameters/Address space...................................................................................................................... 17
4.1
Parameter assignment.................................................................................................................17
4.2
Reaction to CPU STOP ...............................................................................................................17
4.3
Address space .............................................................................................................................18
5 Programming ........................................................................................................................................... 19
6 Error and system messages .................................................................................................................... 21
7 Technical specifications........................................................................................................................... 23
A Dimensional drawing ............................................................................................................................... 27
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
5
Table of contents
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
6
Manual, 01/2013, A5E03777472-01
Documentation guide
1
Introduction
This modular documentation of the SIMATIC products covers diverse topics concerning your automation system.
The complete documentation for the S7-1500 and ET 200MP automation systems consists of system manuals, function manuals and manuals.
The STEP 7 information system (Online Help) also helps you configure and program your automation system.
Overview of the documentation provided for the CM PtP RS232 BA communications module
The following table lists further references that you will need when using the CM PtP RS232 BA communications module.
Table 1- 1 Documentation for the CM PtP RS232 BA communications module
Topic System description
Documentation
Key content
System manual S7 -1500 Automation System · Application planning
(http://support.automation.siemens.com/WW/vi ew/en/59191792)
·
Installation
System manual ET 200MP distributed I/O
· Connecting
system
· Addressing
(http://support.automation.siemens.com/WW/vi · Commissioning
ew/en/59193214)
System manual ET 200SP distributed I/O
· Maintenance
system
(http://support.automation.siemens.com/WW/vi
ew/en/58649293)
Power supply manuals
· Connecting
(http://support.automation.siemens.com/WW/vi ew/en/59173914)
·
Interrupt, error and
system messages
CPU manuals
(http://support.automation.siemens.com/WW/vi · Technical specifications
ew/en/56926947)
· Dimensional drawing
Function manual EMC/EMI compatible
· Basics
installation of control systems (http://support.automation.siemens.com/WW/vi
·
Electromagnetic
ew/en/59193566)
compatibility
· Lightning protection
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
7
Documentation guide
Topic
Point-to-point communication
Documentation
Function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/vi ew/en/59057093)
Key content
· Basic information · Data transmission
functions · Diagnostics functions
SIMATIC manuals
All current manuals for the SIMATIC products are available for download free of charge on the Internet (http://www.siemens.com/automation/service&support).
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
8
Manual, 01/2013, A5E03777472-01
Product overview
2.1
Properties
Order number 6ES7540-1AD00-0AA0
View of the module
2
Figure 2-1 CM PtP RS232 BA view
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
9
Product overview 2.1 Properties
Properties
The communication module has the following properties: Technical properties
RS232 interface short-circuit proof electrically disconnected Protocols: 3964(R), Freeport and USS with instructions Supported system functions Firmware update Identification data I&M0 Parameter re-assignment in CPU RUN mode (using instructions) Diagnostic interrupts
Additional information
Additional information on the properties of the CM PtP RS232 BA can be found in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
Information on the properties of the S7-1500 and associated modules can be found in the system manual S7 -1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
10
Manual, 01/2013, A5E03777472-01
Product overview 2.2 Accessories
2.2
Accessories
Scope of delivery
The scope of delivery of the communication module includes a U connector for connection to the backplane bus.
Connecting cables
The following connecting cables can be ordered separately in the standard lengths: 5 m, 10 m and 15 m (each with a 9-pin sub D female connector).
Table 2- 1 Order numbers of connecting cables
Connecting cables for CM PtP RS232 BA CM PtP RS232 HF RS232 interface
Type
RS232, 5 m RS232, 10 m RS232, 15 m
Order number
6ES79021AB000AA0 6ES79021AC000AA0 6ES79021AD000AA0
Online catalog
Additional order numbers for S7-1500 can be found on the Internet (http://www.siemens.com/industrymall) in the online catalog and online ordering system.
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
11
Product overview 2.3 Functions
2.3
Functions
Introduction
The communication module allows you to exchange data between your own and other programmable controllers or computers by means of a point-to-point connection, and to connect various devices from a variety of manufacturers.
Functionality of the CM PtP RS232 BA The CM PtP RS232 BA communications module offers the following functionality: RS232 interface Data transmission rate: 300 to 19200 bps Maximum frame length: 1 kbyte Transmission protocols: Freeport and 3964(R)
Note The USS protocol can be implemented with instructions included in STEP 7 (TIA Portal).
Hardware components of a point-to-point connection
You require certain hardware components for a point-to-point connection with the CM PtP RS232 BA.
Components CPU module Accessories: Memory card CM PtP RS232 BA communications module
Connecting cable
Function ... executes the user program.
... communicates with a communication partner (point-to-point) by means of the interface. ... connects the CM PtP RS232 BA communications module with the communication partner.
U connector Optional: Power supply module (PS)
... provides the mechanical and electrical connection between the modules.
... converts the line voltage (120/230V AC or 24V DC) into the operating voltage required to supply the S7-1500.
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
12
Manual, 01/2013, A5E03777472-01
Product overview 2.3 Functions
System environment The communication module can be used in the following system environments:
Applications Central operation in an S7-1500 system
Distributed operation in an S7-1500 system
Distributed operation in an S7-300/400 system
Distributed operation in a third-party system
Components required · CPU 151x · CM PtP RS232 BA · Power supply (optional)
Configuration STEP 7 (TIA Portal)
· CPU 151x
STEP 7 (TIA Portal)
· IM 155-5 · CM PtP RS232 BA · Power supply (optional)
· CPU 31x / CPU 41x · IM 155-5 · CM PtP RS232 BA
STEP 7 (TIA Portal) STEP 7 with integration of a GSD file
· Third-party programmable controller GSD file imported to/installed in the
· IM 155-5
engineering system 1)
· CM PtP RS232 BA
1) Information on using the communication module in a third-party system is available in the programming and operating manual CM PtP operation with PROFINET controller (http://support.automation.siemens.com/WW/view/en/59062563).
Additional information
Information on configuration and programming of the CM PtP RS232 BA communications module is available in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093) and in the information system of the TIA Portal.
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
13
Product overview 2.4 Properties of the RS232 interface
2.4
Properties of the RS232 interface
Definition Properties
The RS232 interface is a voltage interface used for serial data transmission.
Table 2- 2 The RS232 interface has the following properties and meets the following requirements:
Type Front connector RS232 signals
Max. data transmission rate max. cable length Standard
Voltage interface 9-pin sub-D male connector with screw lock TXD, RXD, RTS, CTS, DTR, DSR, RI, DCD, GND; all signals isolated against the backplane bus and load voltage 19.2 kbps
15 m, cable type LIYCY 9 x 0.14 DIN 66020, DIN 66259, EIA-RS 232C, CCITT V.24/V.28
RS232 signals
Table 2- 3 The table below shows the meaning of the individual RS232 accompanying signals.
Signal TXD RXD RTS
CTS
DTR DSR RI DCD
Designation Transmit Data Receive Data Request To Send
Clear To Send
Data Terminal Ready Data Set Ready Ring Indicator Data Carrier Detect
Meaning
Transmit data; transmit cable logically held to "1" by communication module in idle state. Receive data; receive cable logically held to "1" by communication partner in idle state. Request to send RTS set to "ON": Communication module ready to send; signals to the communication partner that there is data ready to send RTS set to "OFF": Communication module not ready to send Clear to send CTS set to "ON": Signals "clear to send" to the communication partner CTS set to "OFF": Signals "Not clear to send" to the communication partner DTR set to "ON": Communications module switched on, ready for operation DTR set to "OFF": Communications module not switched on, not ready for operation DSR set to "ON": Communication partner signals "ready for operation" DSR set to "OFF": Communication partner not switched on, not ready for operation Incoming call when connecting a modem Carrier signal when connecting a modem. The communication partner signals with a high level that it detects incoming data on the cable.
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
14
Manual, 01/2013, A5E03777472-01
Connecting
3
3.1
RS232 interface of the communications module
Terminal assignment
The table below shows the terminal assignment for the 9-pin sub D male connector in the front panel of the communications module.
Table 3- 1 Terminal assignment for the sub D male connector of the integrated interface of the communications module
Male connector of the
Pin
Designation
communications module
Input/output
1
DCD Data Carrier Detect
Input
2
RXD Receive Data
Input
3
TXD Transmit Data
Output
4
DTR Data Terminal Ready
Output
5
GND Ground
-
6
DSR Data Set Ready
Input
7
RTS Request To Send
Output
8
CTS Clear To Send
Input
9
RI Ring Indicator
Input
* View from the front
Meaning
Received signal level Receive data Transmit data Data terminal ready Functional ground (isolated) Data set ready Request to send Clear to send Incoming call
Connecting cables
Standard connecting cables of various lengths (see chapter Accessories (Page 11)) are available for connection with a communication partner which also has a 9-pin sub-D male connector.
Please note that you must only use shielded connector casings and cables. A large surface area of the cable shield must be in contact with the connector casing on both sides.
NOTICE
Never connect the cable shield with the GND, as this could destroy the interfaces. GND must always be connected on both sides (pin 5), otherwise the modules could be destroyed.
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
15
Connecting 3.2 Installation guidelines
3.2
Installation guidelines
To take into consideration
The general installation guidelines must be taken into consideration (see function manual EMC/EMI compatible installation of control systems (http://support.automation.siemens.com/WW/view/en/59193566)).
The cable shield must be installed on a grounding rail to maintain the EMC values (electromagnetic compatibility).
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
16
Manual, 01/2013, A5E03777472-01
Parameters/Address space
4
4.1
Parameter assignment
Introduction
You configure and assign the parameters of the communication module with STEP 7 (TIA Portal V12 or later) or with STEP 7 with integration of a GSD file.
Additional information The device manual of the communication module is supplemented by the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093) and the TIA Portal information system. There you will find information on the following topics: Operating modes Receive buffer Data flow control Transmission integrity Data transmission - protocol specific Programming/configuring in STEP 7 (TIA Portal) Module-specific instructions Diagnostics
4.2
Reaction to CPU STOP
Ongoing transmissions are aborted when the higher-level control (CPU) goes to STOP.
Frames in the receive buffer are retained. With a corresponding configuration in the properties dialog of the communication module, you can automatically clear the receive buffer on the communication module during CPU startup.
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
17
Parameters/Address space 4.3 Address space
4.3
Address space
Address space of the communication module
The input addresses of the communications module total 8 bytes. The input addresses are automatically assigned for each communications module when you specify the device configuration in STEP 7 (TIA Portal). Output addresses are not required.
Hardware identification (not freely configurable)
The hardware identification (HW ID) is automatically assigned for each communications module when you specify the device configuration in STEP 7 (TIA Portal).
The hardware ID is issued along with the diagnostic messages to localize the module. In addition, the HW identification is required for S7-1500 at the communication instructions in order to identify the communication module. For S7-300/400, the communication module is identified by the start address of the input data.
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
18
Manual, 01/2013, A5E03777472-01
Programming
5
Overview of the instructions
Communication between the CPU, the communication module and a communication partner takes place by means of special instructions and protocols that support the corresponding communication modules. The instructions process the exchange of data between the CPU and the communication module. They must be called cyclically from the user program. Data transmission takes place asynchronously across several cycles.
The transmission protocols are implemented on the communication module. The protocol is used to adapt the interface of the communication module to the interface of the communication partner.
Instruction Port_Config Send_Config Receive_Config P3964_Config Send_P2P Receive_P2P Receive_Reset Signal_Get Signal_Set Get_Features Set_Features USS_Port_Scan USS_Drive_Control USS_Read_Param USS_Write_Param
Meaning
You use the Port_Config instruction to dynamically assign basic interface parameters.
You use the Send_Config (send configuration) instruction to dynamically assign serial send parameters of a port.
You use the Receive_Config (receive configuration) instruction to dynamically assign serial receive parameters of a port.
You use the P3964_Config (protocol configuration) instruction to dynamically assign the parameters of the 3964(R) procedure.
You use the Send_P2P instruction to send data to a communication partner.
You use the Receive_P2P instruction to receive data from a communication partner.
You use the Receive_Reset instruction to delete the receive buffer of the communication module.
You use the Signal_Get instruction to read the RS232 accompanying signals.
You use the Signal_Set instruction to set the RS232 accompanying signals.
You use the Get_Features instruction to read expanded functions supported by the communication module.
You use the Set_Features instruction to set expanded functions supported by the communication module.
You use the USS_Port_Scan instruction to communicate via the USS network.
You use the USS_Drive_Control instruction to exchange data with a drive.
You use the USS_Read_Param instruction to read parameters from the drive.
You use the USS_Write_Param instruction to change parameters in the drive.
The instructions are part of STEP 7 (TIA Portal). The instructions are available in the "Instructions" task card under Communication > Communication processor.
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
19
Programming
Additional information Additional Information on programming the communication modules is available in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093) and in the TIA Portal information system.
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
20
Manual, 01/2013, A5E03777472-01
Error and system messages
6
LED displays of the communication module
The figure below shows the LED displays of the CM PtP RS232 BA communication module with open front panel.
LED display RUN LED display ERROR LED display MAINT LED display TXD LED display RXD
Figure 6-1 CM PtP RS232 BA view
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
21
Error and system messages
Meaning of the LED displays for RUN/ERROR/(MAINT)
RUN Off Flashes On Off
LED
Meaning
Solution
ERROR Off Off Off
Flashes
MAINT Off Off Off Off
Supply voltage not present or too low at Check the power supply of the station. communication module
CM in startup, parameters not assigned --yet
CM configured and ready for operation ---
Group error (at least one error pending) Evaluate the diagnostics data and eliminate the error. 1)
1) Information on startup and diagnostics of the communication module is available in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
Meaning of LED displays for TXD/RXD (under the front panel)
LED
TXD
RXD
Flashes
Off
Off
Flashes
Meaning Interface is transmitting Interface is receiving
Solution -----
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
22
Manual, 01/2013, A5E03777472-01
Technical specifications
7
Product type designation General information · I&M data Engineering with STEP 7 TIA Portal can be configured/integrated as of version STEP 7 can be configured/integrated as of version PROFIBUS as of GSD version/GSD revision PROFINET as of GSD version/GSD revision Installation type/mounting · Rail mounting possible
Supply voltage Voltage type of supply voltage Input current · Current consumption (rated value)
Power · Power from the backplane bus
Power loss · Power loss, typ.
Address area Occupied address area · Inputs
Interfaces 1. Interface Interface hardware · RS 232
Interface hardware RS 232 · Transmission rate, max.
· Max. cable length RS-232 accompanying signals
6ES7540-1AD00-0AA0 CM PtP RS232 BA Yes; I&M 0 V12.0 / V12.0 V5.5 SP2 or higher with a GSD file - / V2.3 Yes; S7-1500 mounting rail System power supply 35 mA; from backplane bus 0.65 W 0.6 W
8 bytes
Yes
19.2 kbps 15 m RTS, CTS, DTR, DSR, RI, DCD
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
23
Technical specifications
Protocols Integrated protocols Freeport · Frame length, max. · Bits per character · Number of stop bits · Parity 3964 (R) · Frame length, max. · Bits per character · Number of stop bits · Parity Frame buffer · Buffer memory for frames · Number of frames which can be buffered Interrupts/diagnostics/status information Interrupts · Diagnostic interrupt · Hardware interrupt Diagnostic messages Diagnostics · Wire break Diagnostics display LED · RUN LED · ERROR LED · Receive RxD · Send TxD Electrical isolation · between backplane bus and interface Insulation Insulation tested with Ambient conditions Operating temperature · Horizontal installation, min. · Horizontal installation, max. · Vertical installation, min. · Vertical installation, max.
6ES7540-1AD00-0AA0
1 kbyte 7 or 8 1 or 2 bits None, even, odd, always 1, always 0, any
1 kbyte 7 or 8 1 or 2 bits None, even, odd, always 1, always 0, any
2 kbyte 255
Yes No
Yes Yes
Yes; green LED Yes; red LED Yes; yellow LED Yes; yellow LED
Yes
707 V DC (Type Test)
0 °C 60 °C 0 °C 40 °C
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
24
Manual, 01/2013, A5E03777472-01
Technical specifications
Distributed operation · At SIMATIC S7-300 · At SIMATIC S7-400 · At SIMATIC S7-1500 · At Standard Profinet Controller · Supports Fast Startup Dimensions · Width · Height · Depth Weights · Weight, approx.
6ES7540-1AD00-0AA0
Yes Yes Yes Yes Yes
35 mm 147 mm 127 mm
0.22 kg
Additional general technical specifications for SIMATIC S7-1500 are available in the system manual S7 -1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
25
Technical specifications
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
26
Manual, 01/2013, A5E03777472-01
Dimensional drawing
A
The dimensional drawing of the communications module installed on a mounting rail and a dimensional drawing with open front panel are provided in the appendix. Always observe the specified dimensions for installations in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the CM PtP RS232 BA communications module
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
Manual, 01/2013, A5E03777472-01
27
Dimensional drawing
Figure A-2
Dimensional drawing of the CM PtP RS232 BA communications module with open front panel
CM PtP RS232 BA communication module (6ES7540-1AD00-0AA0)
28
Manual, 01/2013, A5E03777472-01
CM PtP RS232 HF
_Pr_ef_ac_e_______________
(6ES75411AD000AB0) communication
module
SIMATIC
S7-1500/ET 200MP CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Co_n_ne_c_tin_g____________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _Pr_og_ra_m_m_in_g___________5_ _Er_ro_r a_n_d_sy_st_em__m_es_sa_g_es____6_
_Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______7_
_Di_m_en_s_ion_a_l d_ra_w_in_g _______A_
01/2013
A5E03790665-01
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03790665-01 11/2012 Technical data subject to change
Copyright © Siemens AG 2013. All rights reserved
Preface
Purpose of the documentation
This device manual complements the system manual S7 1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792). General functions of the S7-1500 are described in the S7-1500 Automation System System Manual.
Conventions
This documentation contains figures of the described device. The figures may differ slightly from the devices supplied. Please also observe notes marked as follows:
Note A note contain important information on the product described in the documentation, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Note on IT security
Siemens offers IT security mechanisms for its automation and drive product portfolio in order to support the safe operation of the plant/machine. We recommend that you inform yourself regularly on the IT security developments regarding your products. You can find information on this on the Internet (http://support.automation.siemens.com).
You can register for a product-specific newsletter here.
For the safe operation of a plant/machine, however, it is also necessary to integrate the automation components into an overall IT security concept for the entire plant/machine, which corresponds to the state-of-the-art IT technology. You can find information on this on the Internet (http://www.siemens.com/industrialsecurity).
Products used from other manufacturers should also be taken into account here.
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
3
Preface
Copyright notice for the open-source software used
Open-source software is used in the firmware of the product described. The open-source software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the following copyright notices.
© Copyright William E. Kempf 2001 Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. William E. Kempf makes no representations about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.
Copyright © 1994 Hewlett-Packard Company Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. Hewlett-Packard Company makes no representations about the suitability of this software for any purpose. It is provided ``as is'' without express or implied warranty.
CM PtP RS232 HF (6ES75411AD000AB0) communication module
4
Manual, 01/2013, A5E03790665-01
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide................................................................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
Properties.......................................................................................................................................9
2.2
Accessories..................................................................................................................................11
2.3
Functions......................................................................................................................................12
2.4
Properties of the RS232 interface................................................................................................14
3 Connecting .............................................................................................................................................. 15
3.1
RS232 interface of the communications module .........................................................................15
3.2
Installation guidelines...................................................................................................................16
4 Parameters/address space ...................................................................................................................... 17
4.1
Parameter assignment.................................................................................................................17
4.2
Reaction to CPU STOP ...............................................................................................................17
4.3
Address space .............................................................................................................................18
5 Programming ........................................................................................................................................... 19
6 Error and system messages .................................................................................................................... 21
7 Technical specifications........................................................................................................................... 23
A Dimensional drawing ............................................................................................................................... 27
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
5
Table of contents
CM PtP RS232 HF (6ES75411AD000AB0) communication module
6
Manual, 01/2013, A5E03790665-01
Documentation guide
1
Introduction
This modular documentation of the SIMATIC products covers diverse topics concerning your automation system.
The complete documentation for the S7-1500 and ET 200MP automation systems consists of system manuals, function manuals and manuals.
The STEP 7 information system (Online Help) also helps you configure and program your automation system.
Overview of the documentation provided for the CM PtP RS232 HF communication module
The following table lists additional references that you will need when using the CM PtP RS232 HF communication module.
Table 1- 1 Documentation for the CM PtP RS232 HF communication module
Topic System description
Documentation
Key content
System manual S7 -1500 Automation System · Application planning
(http://support.automation.siemens.com/WW/vi ew/en/59191792)
·
Installation
System manual ET 200MP distributed I/O
· Connecting
system
· Addressing
(http://support.automation.siemens.com/WW/vi · Commissioning
ew/en/59193214)
System manual ET 200SP distributed I/O
· Maintenance
system
(http://support.automation.siemens.com/WW/vi
ew/en/58649293)
Power supply manuals
· Connecting
(http://support.automation.siemens.com/WW/vi ew/en/59173914)
·
Interrupt, error and
system messages
CPU manuals
(http://support.automation.siemens.com/WW/vi · Technical specifications
ew/en/56926947)
· Dimensional drawing
Function manual EMC/EMI compatible
· Basics
installation of control systems (http://support.automation.siemens.com/WW/vi
·
Electromagnetic
ew/en/59193566)
compatibility
· Lightning protection
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
7
Documentation guide
Topic
Point-to-point communication
Documentation
Function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/vi ew/en/59057093)
Key content
· Basic information · Data transmission
functions · Diagnostics functions
SIMATIC manuals
All current manuals for the SIMATIC products are available for download free of charge on the Internet (http://www.siemens.com/automation/service&support).
CM PtP RS232 HF (6ES75411AD000AB0) communication module
8
Manual, 01/2013, A5E03790665-01
Product overview
2.1
Properties
Order number 6ES7541-1AD00-0AB0
View of the module
2
Figure 2-1 CM PtP RS232 HF view
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
9
Product overview 2.1 Properties
Properties
The communication module has the following properties: Technical properties
RS232 interface short-circuit proof electrically disconnected Protocols: 3964(R), Modbus master (RTU), Modbus slave (RTU), Freeport and USS
with instructions Supported system functions
Firmware update Identification data I&M0 Parameter re-assignment in CPU RUN mode (using instructions) Diagnostic interrupts
Additional information
Additional information on the properties of the CM PtP RS232 HF can be found in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
Information on the properties of the S7-1500 and associated modules can be found in the system manual S7 -1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
CM PtP RS232 HF (6ES75411AD000AB0) communication module
10
Manual, 01/2013, A5E03790665-01
Product overview 2.2 Accessories
2.2
Accessories
Scope of delivery
The scope of delivery of the communication module includes a U connector for connection to the backplane bus.
Connecting cables
The following connecting cables can be ordered separately in the standard lengths: 5 m, 10 m and 15 m (each with a 9-pin sub D female connector).
Table 2- 1 Order numbers of connecting cables
Connecting cables for CM PtP RS232 BA CM PtP RS232 HF RS232 interface
Type
RS232, 5 m RS232, 10 m RS232, 15 m
Order number
6ES79021AB000AA0 6ES79021AC000AA0 6ES79021AD000AA0
Online catalog
Additional order numbers for S7-1500 can be found on the Internet (http://www.siemens.com/industrymall) in the online catalog and online ordering system.
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
11
Product overview 2.3 Functions
2.3
Functions
Introduction
The communication module allows you to exchange data between your own and other programmable controllers or computers by means of a point-to-point connection, and to connect various devices from a variety of manufacturers.
Functionality of the CM PtP RS232 HF The CM PtP RS232 HF communication module offers the following functionality: RS232 interface Data transmission rate: 300 to 115200 bps Maximum frame length: 4 kbyte Transmission protocols: Freeport, 3964(R) and Modbus
Note The USS protocol can be implemented with instructions included in STEP 7 (TIA Portal).
Hardware components of a point-to-point connection
You require certain hardware components for a point-to-point connection with the CM PtP RS232 HF.
Components CPU module Accessories: Memory card CM PtP RS232 HF communication module
Connecting cable
Function ... executes the user program.
... communicates with a communication partner (point-to-point) by means of the interface. ... connects the CM PtP RS232 HF communication module with the communication partner.
U connector Optional: Power supply module (PS)
... provides the mechanical and electrical connection between the modules.
... converts the line voltage (120/230V AC or 24V DC) into the operating voltage required to supply the S7-1500.
CM PtP RS232 HF (6ES75411AD000AB0) communication module
12
Manual, 01/2013, A5E03790665-01
Product overview 2.3 Functions
System environment The communication module can be used in the following system environments:
Applications Central operation in an S7-1500 system
Distributed operation in an S7-1500 system
Distributed operation in an S7-300/400 system
Distributed operation in a third-party system
Components required · CPU 151x · CM PtP RS232 HF · Power supply (optional)
Configuration STEP 7 (TIA Portal)
· CPU 151x
STEP 7 (TIA Portal)
· IM 155-5 · CM PtP RS232 HF · Power supply (optional)
· CPU 31x / CPU 41x · IM 155-5 · CM PtP RS232 HF
STEP 7 (TIA Portal) STEP 7 with integration of a GSD file
· Third-party programmable controller GSD file imported to/installed in the
· IM 155-5
engineering system 1)
· CM PtP RS232 HF
1) Information on using the communication module in a third-party system is available in the programming and operating manual CM PtP operation with PROFINET controller (http://support.automation.siemens.com/WW/view/en/59062563).
Additional information
Information on configuring and programming the CM PtP RS232 HF communication module is available in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
13
Product overview 2.4 Properties of the RS232 interface
2.4
Properties of the RS232 interface
Definition Properties
The RS232 interface is a voltage interface used for serial data transmission.
The RS232 interface has the following properties and meets the following requirements:
Type Front connector RS232 signals
Max. data transmission rate max. cable length Standard
Voltage interface 9-pin sub-D male connector with screw lock TXD, RXD, RTS, CTS, DTR, DSR, RI, DCD, GND; all signals isolated against the backplane bus and load voltage 115.2 kbps
15 m, cable type LIYCY 9 x 0.14 DIN 66020, DIN 66259, EIA-RS 232C, CCITT V.24/V.28
RS232 signals The table below shows the meaning of the individual RS232 accompanying signals.
Table 2- 2 Signals of the RS232 interface
Signal TXD RXD RTS
CTS
DTR DSR RI DCD
Designation Transmit Data Receive Data Request To Send
Clear To Send
Data Terminal Ready Data Set Ready Ring Indicator Data Carrier Detect
Meaning
Transmit data; transmit cable logically held to "1" by communication module in idle state. Receive data; receive cable logically held to "1" by communication partner in idle state. Request to send RTS set to "ON": Communication module ready to send; signals to the communication partner that there is data ready to send RTS set to "OFF": Communication module not ready to send Clear to send CTS set to "ON": Signals "clear to send" to the communication partner CTS set to "OFF": Signals "Not clear to send" to the communication partner DTR set to "ON": Communications module switched on, ready for operation DTR set to "OFF": Communications module not switched on, not ready for operation DSR set to "ON": Communication partner signals "ready for operation" DSR set to "OFF": Communication partner not switched on, not ready for operation Incoming call when connecting a modem Carrier signal when connecting a modem. The communication partner signals with a high level that it detects incoming data on the cable.
CM PtP RS232 HF (6ES75411AD000AB0) communication module
14
Manual, 01/2013, A5E03790665-01
Connecting
3
3.1
RS232 interface of the communications module
Terminal assignment
The table below shows the terminal assignment for the 9-pin sub D male connector in the front panel of the communications module.
Table 3- 1 Terminal assignment for the sub D male connector of the integrated interface of the communications module
Male connector of the
Pin
Designation
communications module
Input/output
1
DCD Data Carrier Detect
Input
2
RXD Receive Data
Input
3
TXD Transmit Data
Output
4
DTR Data Terminal Ready
Output
5
GND Ground
-
6
DSR Data Set Ready
Input
7
RTS Request To Send
Output
8
CTS Clear To Send
Input
9
RI Ring Indicator
Input
* View from the front
Meaning
Received signal level Receive data Transmit data Data terminal ready Functional ground (isolated) Data set ready Request to send Clear to send Incoming call
Connecting cables
Standard connecting cables of various lengths (see chapter Accessories (Page 11)) are available for connection with a communication partner which also has a 9-pin sub-D male connector.
Please note that you must only use shielded connector casings and cables. A large surface area of the cable shield must be in contact with the connector casing on both sides.
NOTICE
Never connect the cable shield with the GND, as this could destroy the interfaces. GND must always be connected on both sides (pin 5), otherwise the modules could be destroyed.
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
15
Connecting 3.2 Installation guidelines
3.2
Installation guidelines
To take into consideration
The general installation guidelines must be taken into consideration (see function manual EMC/EMI compatible installation of control systems (http://support.automation.siemens.com/WW/view/en/59193566)).
The cable shield must be installed on a grounding rail to maintain the EMC values (electromagnetic compatibility).
CM PtP RS232 HF (6ES75411AD000AB0) communication module
16
Manual, 01/2013, A5E03790665-01
Parameters/address space
4
4.1
Parameter assignment
Introduction
You configure and assign the parameters of the communication module with STEP 7 (TIA Portal V12 or later) or with STEP 7 with integration of a GSD file.
Additional information The device manual of the communication module is supplemented by the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093) and the TIA Portal information system. There you will find information on the following topics: Operating modes Receive buffer Data flow control Transmission integrity Data transmission - protocol specific Programming/configuring in STEP 7 (TIA Portal) Module-specific instructions Diagnostics
4.2
Reaction to CPU STOP
Ongoing transmissions are aborted when the higher-level control (CPU) goes to STOP.
Frames in the receive buffer are retained. With a corresponding configuration in the properties dialog of the communication module, you can automatically clear the receive buffer on the communication module during CPU startup.
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
17
Parameters/address space 4.3 Address space
4.3
Address space
Address space of the communication module
The input addresses of the communications module total 8 bytes. The input addresses are automatically assigned for each communications module when you specify the device configuration in STEP 7 (TIA Portal). Output addresses are not required.
Hardware identification (not freely configurable)
The hardware identification (HW ID) is automatically assigned for each communications module when you specify the device configuration in STEP 7 (TIA Portal).
The hardware ID is issued along with the diagnostic messages to localize the module. In addition, the HW identification is required for S7-1500 at the communication instructions in order to identify the communication module. For S7-300/400, the communication module is identified by the start address of the input data.
CM PtP RS232 HF (6ES75411AD000AB0) communication module
18
Manual, 01/2013, A5E03790665-01
Programming
5
Overview of the instructions
Communication between the CPU, the communication module and a communication partner takes place by means of special instructions and protocols that support the corresponding communication modules. The instructions process the exchange of data between the CPU and the communication module. They must be called cyclically from the user program. Data transmission takes place asynchronously across several cycles.
The transmission protocols are implemented on the communication module. The protocol is used to adapt the interface of the communication module to the interface of the communication partner.
Instruction Port_Config Send_Config Receive_Config P3964_Config Send_P2P Receive_P2P Receive_Reset Signal_Get Signal_Set Get_Features Set_Features USS_Port_Scan USS_Drive_Control USS_Read_Param USS_Write_Param Modbus_Comm_Load
Meaning
You use the Port_Config instruction to dynamically assign basic interface parameters.
You use the Send_Config (send configuration) instruction to dynamically assign serial send parameters of a port.
You use the Receive_Config (receive configuration) instruction to dynamically assign serial receive parameters of a port.
You use the P3964_Config (protocol configuration) instruction to dynamically assign the parameters of the 3964(R) procedure.
You use the Send_P2P instruction to send data to a communication partner.
You use the Receive_P2P instruction to receive data from a communication partner.
You use the Receive_Reset instruction to delete the receive buffer of the communication module.
You use the Signal_Get instruction to read the RS232 accompanying signals.
You use the Signal_Set instruction to set the RS232 accompanying signals.
You use the Get_Features instruction to read expanded functions supported by the communication module.
You use the Set_Features instruction to set expanded functions supported by the communication module.
You use the USS_Port_Scan instruction to communicate via the USS network.
You use the USS_Drive_Control instruction to exchange data with a drive.
You use the USS_Read_Param instruction to read parameters from the drive.
You use the USS_Write_Param instruction to change parameters in the drive.
The instruction Modbus_Comm_Load allows you to configure the port of the communication module for Modbus RTU.
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
19
Programming
Instruction Modbus_Master
Modbus_Slave
Meaning
The instruction Modbus_Master allows you to communicate as Modbus master by means of the PtP port.
The instruction Modbus_Slave allows you to communicate as Modbus slave by means of the PtP port.
The instructions are part of STEP 7 (TIA Portal). The instructions are available in the "Instructions" task card under Communication > Communication processor.
Additional information
Additional information on programming the communication modules is available in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093) and in the TIA Portal information system.
CM PtP RS232 HF (6ES75411AD000AB0) communication module
20
Manual, 01/2013, A5E03790665-01
Error and system messages
6
LED displays of the communication module
The figure below shows the LED displays of the CM PtP RS232 HF communication module with open front panel.
LED display RUN LED display ERROR LED display MAINT LED display TXD LED display RXD
Figure 6-1 CM PtP RS232 HF view
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
21
Error and system messages
Meaning of the LED displays for RUN/ERROR/(MAINT)
RUN Off Flashes On Off
LED
Meaning
Solution
ERROR Off Off Off
Flashes
MAINT Off Off Off Off
Supply voltage not present or too low at Check the power supply of the station. communication module
CM in startup, parameters not assigned --yet
CM configured and ready for operation ---
Group error (at least one error pending) Evaluate the diagnostics data and eliminate the error. 1)
1) Information on startup and diagnostics of the communication module is available in the function manual CM PtP - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093).
Meaning of LED displays for TXD/RXD (under the front panel)
LED
TXD
RXD
Flashes
Off
Off
Flashes
Meaning Interface is transmitting Interface is receiving
Solution -----
CM PtP RS232 HF (6ES75411AD000AB0) communication module
22
Manual, 01/2013, A5E03790665-01
Technical specifications
7
Product type designation General information · I&M data Engineering with STEP 7 TIA Portal can be configured/integrated as of version STEP 7 can be configured/integrated as of version PROFIBUS as of GSD version/GSD revision PROFINET as of GSD version/GSD revision Installation type/mounting · Rail mounting possible
Supply voltage Voltage type of supply voltage Input current · Current consumption (rated value)
Power · Power from the backplane bus
Power loss · Power loss, typ.
Address area Occupied address area · Inputs
Interfaces 1. Interface Interface hardware · RS 232
Interface hardware RS 232 · Transmission rate, max.
· Max. cable length RS-232 accompanying signals Protocols Integrated protocols Freeport
6ES7541-1AD00-0AB0 CM PtP RS232 HF Yes; I&M 0 V12.0 / V12.0 V5.5 SP2 or higher with a GSD file - / V2.3 Yes; S7-1500 mounting rail System power supply 35 mA; from backplane bus 0.65 W 0.6 W
8 bytes
Yes
115.2 kbps 15 m RTS, CTS, DTR, DSR, RI, DCD
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
23
Technical specifications
· Frame length, max. · Bits per character · Number of stop bits · Parity 3964 (R) · Frame length, max. · Bits per character · Number of stop bits · Parity Modbus RTU master Address area · Max. number of slaves Modbus RTU slave Address area Frame buffer · Buffer memory for frames · Number of frames which can be buffered Interrupts/diagnostics/status information Interrupts · Diagnostic interrupt · Hardware interrupt Diagnostic messages Diagnostics · Wire break Diagnostics display LED · RUN LED · ERROR LED · Receive RxD · Send TxD Electrical isolation · between backplane bus and interface Insulation Insulation tested with Ambient conditions Operating temperature · Horizontal installation, min. · Horizontal installation, max.
4 kbyte
6ES7541-1AD00-0AB0
7 or 8
1 or 2 bits
None, even, odd, always 1, always 0, any
4 kbyte 7 or 8 1 or 2 bits None, even, odd, always 1, always 0, any
1 to 247, extended 1 to 65,535 1
1 to 247, extended 1 to 65,535
8 kbyte 255
Yes No
Yes Yes
Yes; green LED Yes; red LED Yes; yellow LED Yes; yellow LED
Yes
707 V DC (Type Test)
0 °C 60 °C
CM PtP RS232 HF (6ES75411AD000AB0) communication module
24
Manual, 01/2013, A5E03790665-01
Technical specifications
· Vertical installation, min. · Vertical installation, max. Distributed operation · At SIMATIC S7-300 · At SIMATIC S7-400 · At SIMATIC S7-1500 · At Standard Profinet Controller · Supports Fast Startup Dimensions · Width · Height · Depth Weights · Weight, approx.
0 °C 40 °C
6ES7541-1AD00-0AB0
Yes Yes Yes Yes Yes
35 mm 147 mm 127 mm
0.22 kg
Additional general technical specifications for SIMATIC S7-1500 are available in the system manual S7 -1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
25
Technical specifications
CM PtP RS232 HF (6ES75411AD000AB0) communication module
26
Manual, 01/2013, A5E03790665-01
Dimensional drawing
A
This appendix contains the dimensional drawing of the communication module installed on a mounting rail and with a shield bracket. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the CM PtP RS232 HF communication module
CM PtP RS232 HF (6ES75411AD000AB0) communication module
Manual, 01/2013, A5E03790665-01
27
Dimensional drawing
Figure A-2
Dimensional drawing of the CM PtP RS232 HF communication module with open front panel
CM PtP RS232 HF (6ES75411AD000AB0) communication module
28
Manual, 01/2013, A5E03790665-01
SIMATIC
S7-1500/ET 200MP Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Co_n_ne_c_tin_g____________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _Di_ag_n_os_tic_a_la_rm_s_________5_ _Te_c_hn_ic_al_sp_e_cif_ic_at_ion_s______6_ _Di_m_en_si_on_a_l d_ra_w_in_g _______7_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd______A__
03/2019
A5E45488510-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E45488510-AA 02/2019 Subject to change
Copyright © Siemens AG 2019. All rights reserved
Preface
Purpose of the documentation
This manual supplements the ET 200MP Distributed I/O System (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual. It describes functions that generally affect the ET 200MP distributed I/O system.
The information provided in the present manual, the system manual and the function manuals enables you to commission the ET 200MP distributed I/O system.
Conventions
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that can be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the product described. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this in the appendix.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
4
Manual, 03/2019, A5E45488510-AA
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 10
2.1
Properties ................................................................................................................................ 10
2.2
Functions ................................................................................................................................12
2.3
Replacing the IO-Link Master CM 8xIO-Link communication module....................................12
2.4
Reset communication module to factory settings ...................................................................13
3 Connecting ........................................................................................................................................... 14
3.1
Wiring and block diagram .......................................................................................................14
4 Parameters/address space ................................................................................................................... 17
4.1
Parameters .............................................................................................................................17
4.2
Declaration of parameters ......................................................................................................19
4.3
Address space ........................................................................................................................21
5 Diagnostic alarms ................................................................................................................................. 26
5.1
Status and error displays ........................................................................................................26
5.2
Diagnostic alarms ...................................................................................................................29
6 Technical specifications ........................................................................................................................ 31
7 Dimensional drawing............................................................................................................................. 34
7.1
Dimensional drawing...............................................................................................................34
A Parameter data record .......................................................................................................................... 36
A.1
Parameter assignment and structure of parameter data set ..................................................36
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
6
Manual, 03/2019, A5E45488510-AA
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (https://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (https://support.industry.siemens.com/my/ww/en/CAxOnline).
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
7
Documentation guide
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (https://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
8
Manual, 03/2019, A5E45488510-AA
Documentation guide
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
9
Product overview
2.1
Properties
Article number
6ES7547-1JF00-0AB0
View of the module
2
Properties
Figure 2-1 View of the IO-Link Master CM 8xIO-Link communication module
The module has the following technical properties: IO-Link master according to IO-Link specification V1.1 Communication module with 8 ports (channels) Data transmission rate COM1 (4.8 kbaud), COM2 (38.4 kbaud), COM3 (230.4 kbaud) Standard DI mode Suitable for connecting up to eight IO-Link devices (3-wire connection) or eight standard
encoders.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
10
Manual, 03/2019, A5E45488510-AA
Product overview 2.1 Properties
Configurable diagnostics can be set for each channel Automatic backup of the device parameters during replacement of the IO-Link device
(only for V1.1 devices) Configuration limits:
Max. 32 bytes input and output data per port Max. 240 bytes input and output data per module The module supports the following functions: Firmware update Identification and maintenance data (I&M) IO-Link port configuration with S7-PCT IO-Link port configuration with STEP7 or GSD (without S7-PCT) Variable address range of I/O data with up to 240 byte inputs and 240 byte outputs Master Backup with function block IO_LINK_MASTER Port Qualifier Information (PQI) I&M 0 to 3 The module can be used with the following engineering tools:
Table 2- 1 Engineering tools
Firmware version of the module
V1.0 (in CPU/PROFINET/PROFIBU S station)
S7-PCT As of V3.5 SP1
STEP 7 (TIA Portal) As of V15.1
GSD file X
Accessories/spare parts
The following accessories/spare parts are available for the module and can also be ordered separately: Labeling strips U connector Universal front cover
Additional information
You can find more information on accessories in the ET 200MP Distributed I/O System (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual in the Accessories/Spare parts section.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
11
Product overview 2.2 Functions
2.2
Functions
IO-Link is a point-to-point connection between a master and a device. Both conventional and intelligent sensors/actuators can be used as devices at the IO-Link via unshielded standard cables using proven 3-wire technology. IO-Link is backward compatible to conventional sensors. The switching state and data channels are designed with trusted 24 V DC technology.
Reference
Additional information can be found in the IO-Link System (https://support.automation.siemens.com/WW/view/en/65949252) function manual.
2.3
Replacing the IO-Link Master CM 8xIO-Link communication module
Master Backup
You can back up the parameters of your module with the function block "IO_LINK_MASTER_8".
The "IO_LINK_MASTER_8" function block is used to read all relevant IO-Link device and IO-Link Master parameters. The parameters can be stored retentively at a central location, such as in a data block in the IO controller.
The status of the IO-Link devices or IO-Link ports stored in the IO-Link Master can be restored with the "IO_LINK_MASTER_8" function block. As a result, the IO-Link ports and the IO-Link Master are configured with the values stored in the master backup.
A typical application is the restoration of parameters after replacement of the IO-Link Master.
Module as of V 1.0
Firmware version Function block IO_LINK_MASTER_8 as of V 1.0.0
Compatibility table of the firmware versions
Note Availability Note that the Master Backup function is available only for IO-Link devices that are specified for the IO-Link Standard as of V1.1.
You can find additional information on the master backup functions in the section 'Integration into the automation system' in the IO-Link System (https://support.industry.siemens.com/cs/ww/en/view/65949252) function manual.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
12
Manual, 03/2019, A5E45488510-AA
Product overview 2.4 Reset communication module to factory settings
2.4
Reset communication module to factory settings
Effects of resetting to the factory settings
Use the "Reset to factory settings" function to restore the parameter assignments of your IO-Link Master CM 8xIO-Link communication module made with S7-PCT to the factory state. After a "Reset to factory settings", the parameters of the IO-Link Master CM 8xIO-Link communication module are assigned as follows: The ports are in DI mode The ports are mapped to the relative addresses 0.0 ... 0.7 The PortQualifier is disabled I&M data 1 to 3 is deleted
Note The master backup of the IO-Link Master is deleted and the delivery condition is restored. You should reset a removed IO-Link Master CM 8xIO-Link communication module to the factory settings before you place it in storage.
Procedure
To perform a "Reset to factory settings", proceed as described in the S7-PCT online help.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
13
Connecting
3
3.1
Wiring and block diagram
This section includes the block diagram of the communication module IO-Link Master CM 8xIO-Link with the terminal assignments for 3-wire and 5-wire connection of IO-Link devices or 2-wire and 3-wire connection in DI operating mode.
You can use and combine the different wiring options for all channels.
Ensure that all devices are connected to the SELV/PELV power supply (or equivalent).
NOTICE
Internal transducer supply
Use only the supply voltage (USn/M) made available by the IO-Link Master CM 8xIO-Link communication module to supply the IO-Link device (L+/L-).
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
14
Manual, 03/2019, A5E45488510-AA
Connecting 3.1 Wiring and block diagram
Wiring: 3-wire and 5-wire connection of IO-Link devices
The example in the following figure shows the terminal assignment of the communication module IO-Link Master CM 8xIO-Link (3- and 5-conductor connection of IO-Link devices).
Reverse polarity protection
Backplane bus interface
IO-Link circuitry
Device, 3-wire connection
Device, 5-wire connection
M
Ground
L+
Supply voltage 24 V DC
USn RUN ERROR PWR C/Qn Cn
Qn
Supply voltage (positive) Status display LED (green) Error display LED (red) Power LED (green) Port n Port status/channel error LED (green/red) LED channel status in standard DI mode (green)
Figure 3-1 Block diagram and terminal assignment for 3-wire and 5-wire connection of IO-Link devices
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
15
Connecting 3.1 Wiring and block diagram
Wiring: 2-wire and 3-wire connection in DI operating mode
The example in the following figure shows the terminal assignment of the IO-Link Master CM 8xIO-Link communication module in DI operating mode.
Reverse polarity protection Backplane bus interface IO-Link circuitry Sensor, 3-wire connection Sensor, 2-wire connection
M Ground
L+ Supply voltage 24 V DC
USn RUN ERROR PWR C/Qn Cn Qn
Supply voltage (positive) Status display LED (green) Error display LED (red) Power LED (green) Port n Port status/channel error LED (green/red) LED channel status in standard DI mode (green)
Figure 3-2 Terminal assignment for 2-wire and 3-wire connection in DI operating mode
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
16
Manual, 03/2019, A5E45488510-AA
Parameters/address space
4
4.1
Parameters
Parameters (GSD file)
The following table shows the general parameters for the IO-Link Master CM 8xIO-Link communication module.
The default settings of the parameters are marked in bold in the "Value ranges" column.
Table 4- 1 General parameters (GSD file)
Parameters Diagnostics Diagnostics: No supply voltage L+
Value range · Disable
· Enable
Diagnostics: Port
· Disable
· Enable
Master parameter Port Qualifier Information (PQI)
· Disable
· Enable
Port configuration without S7-PCT · Disable
· Enable
Effective range Module Port (channel)
Module Module
The following table shows the port parameters for the IO-Link Master CM 8xIO-Link communication module.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
17
Manual, 03/2019, A5E45488510-AA
Parameters/address space 4.1 Parameters
Table 4- 2 Port parameter (GSD file)
Parameters Port configuration Operating mode
Length of the input data* Length of output data Vendor ID*** Device ID*** Inspection Level/Data Storage***
Value range
Default
· IO-Link Autostart
IO-Link Autostart
· IO-Link Manual · DI
· Deactivated
depending on the selected input/output type**
depending on the selected input/output type**
Manufacturer ID of the connected IO-Link device
Device ID of the connected IOLink device
· Identical type (V1.0) without Backup&Restore
depending on the selected input/output type** depending on the selected input/output type** 0
0
Type-compatible (V1.1) with Backup&Restore
· Type-compatible (V1.1) without Backup&Restore
· Type-compatible (V1.1) with Backup&Restore
· Type-compatible (V1.1) with Restore
* If PQI is activated, 1 byte less space remains for input data of the device. For example: GSD setting 16 bytes = 15 bytes + PQI
** Make sure not to exceed the maximum possible length of the input or output data for all ports. *** Only effective if you use the "IO-Link Manual" port mode.
Maximum possible length of the input or output data
Example: You have selected the configuration 64I/64Q. You have assigned 4 bytes of input data to the first port. For the remaining ports, you can assign a total of 60 bytes of input data.
Reference
You can find additional information on the Vendor ID and Device ID on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109748852).
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
18
Manual, 03/2019, A5E45488510-AA
Parameters/address space 4.2 Declaration of parameters
4.2
Declaration of parameters
Diagnostics: No supply voltage L+
Enabling the diagnostic alarm for missing or insufficient supply voltage L+.
Diagnostics: Port
This parameter allows the enabling of the diagnostics for the selected port. The possible diagnostics are dependent on the IO-Link device used. Additional information about the diagnostic interrupts can be found in the description of the utilized IO-Link device.
Port Qualifier Information
This parameter releases the Port Qualifier Information (PQI). The PQI provides information on the port status and the IO-Link device status.
Port configuration without S7-PCT
This parameter enables the port configuration without S7-PCT for the module.
Operating mode
This parameter determines the mode in which you operate the selected port. You can select from the following options: IO-Link Autostart IO-Link Manual DI Deactivated The setting of the port is granular and you can combine the operating modes as you like.
IO-Link Autostart The connected IO-Link device starts automatically (Plug&Play functionality). The IO-Link device is immediately ready for operation.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
19
Parameters/address space 4.2 Declaration of parameters
IO-Link Manual If the Vendor ID and Device ID match the connected device, the connected IO-Link device is automatically started. In other words, in contrast to "IO-Link Autostart", the system checks here whether the correct device is connected. You need to configure the Device ID / Vendor ID to enable this. You need to store the Vendor ID and Device ID of the connected IO-Link device in STEP 7. In addition, you can select the inspection level for data storage: Identical type (V1.0) without Backup&Restore Type-compatible (V1.1) without Backup&Restore Type-compatible (V1.1) with Backup&Restore Type-compatible (V1.1) with Restore You can find instructions for determining the Vendor ID and Device ID on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109748852).
DI The port operates as standard digital input.
Deactivated The port is deactivated.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
20
Manual, 03/2019, A5E45488510-AA
Parameters/address space 4.3 Address space
4.3
Address space
Configuration options of the communication module IO-Link Master CM 8xIO-Link
The size of the input and output addresses of the IO-Link Master CM 8xIO-Link communication module with firmware version V1.0 are 32 bytes per port in each case.
The following table provides an overview of the configuration options of the supported address areas for I/O data:
Module configuration
8 byte inputs 8 byte outputs 16 byte inputs 0 byte outputs 16 byte inputs 16 byte outputs 24 byte inputs 16 byte outputs 32 byte inputs 32 byte outputs 40 byte inputs 32 byte outputs 64 byte inputs 64 byte outputs 72 byte inputs 64 byte outputs 128 byte inputs 128 byte outputs 136 byte inputs 128 byte outputs 240 byte inputs 240 byte outputs
IM 155-5 PN BA
X
IM 155-5 PN ST
X
IM 155-5 PN HF
X
IM 155-5 DP ST
X
S7-1500 CPU
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
-
X
X
X
X
-
X
-
X
X
-
X
-
X
X
-
X
-
X
X
-
X
-
X
X
-
X
The IO area defined for an ET 200MP limits the number of IO modules per station. The interface module supports a maximum of 512 bytes for input and output data for all I/O modules in the station. Exceptions are 2 interface modules: IM 155-5 PN BA, which only supports 64 bytes, and IM 155-5 DP ST with a limit of 244 bytes per station.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
21
Parameters/address space 4.3 Address space
The following table provides an overview of the maximum address spaces for the respective interface modules.
IM
IM 155-5 PN BA IM 155-5 PN ST IM 155-5 PN HF IM 155-5 DP ST
Firmware version
V4.0.2 V4.1.0 V3.0.1 V3.0.0
Max. address space per station 64 bytes 512 bytes 512 bytes 244 bytes
Max. address space per module 64 bytes 256 bytes 256 bytes 32 bytes
Note IO-Link Master behind an IM 155-5 DP ST
In connection with an IM 155-5 DP ST, you configure the IO-Link master exclusively using a GSD file. Install the corresponding GSD file. You can find this for download on the Internet (https://support.industry.siemens.com/cs/ww/en/view/80206700).
Port configuration CPU
With an IO-Link Master CM 8xIO-Link, you can commission the IO-Link ports of the IO-Link Master or the connected IO-Link devices in two different ways: Port configuration with STEP7 or GSD (without S7-PCT) Port configuration with S7-PCT
Port configuration with STEP7 or GSD (without S7-PCT)
Requirements You have selected the "Port configuration without S7-PCT" check box in the configuration of the IO-Link master in STEP 7. Procedure You configure the IO-Link master directly in STEP 7: Activate the diagnostics Configuration of the I/O data lengths for each port Activating the Port Qualifier Information (PQI) Port mode:
Operation in "IO-Link Autostart" mode (default) Operation in "IO-Link Manual" mode Operated as DI Deactivated
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
22
Manual, 03/2019, A5E45488510-AA
Parameters/address space 4.3 Address space
Port configuration with S7-PCT
Requirements You have cleared the "Port configuration without S7-PCT" check box in the configuration of the IO-Link master in STEP 7. Procedure You configure the IO-Link Master ports with the Port Configuration Tool S7-PCT, V3.5 SP1 or higher. In doing so, select the IO-Link device from the device catalog of S7-PCT and assign the device to an IO-Link port.
Port Qualifier Information (PQI)
You can activate the Port Qualifier Information (PQI) for your IO-Link Master.
Note Port Qualifier Information (PQI) If you have activated the Port Qualifier Information (PQI), it is always transferred with the size 1 byte together with the input data of the IO-Link device. PQI is not available for 8 bytes input / 8 bytes output.
The figure below shows the structure of the PQI byte.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
23
Parameters/address space 4.3 Address space
Figure 4-1 Structure of the PQI byte Description of the PQI byte:
Name Device availability
Device error
Port Qualifier
Value 0 1 0 1 0 1
Meaning IO-Link device is not available IO-Link device is in the "Preoperate" or "Operate" state No error An error or warning has occurred. IO data is not valid IO data is valid
Position of the PQI byte in the process image (example):
Figure 4-2 Address space IO-Link Master
In the example above, 16 bytes are set for port 1, the IO-Link device transfers the data in bytes 0 to 7 and the PQI byte is set to byte 15.
Note Restriction The graphic only applies to the input range.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
24
Manual, 03/2019, A5E45488510-AA
Parameters/address space 4.3 Address space
Standard DI mode
The following figure shows the assignment of the address space of a port for the IO-Link Master CM 8xIO-Link, if you have configured the port as a digital input.
Reference
Figure 4-3 Address space of the inputs of the IO-Link Master CM 8xIO-Link in standard DI mode
You can find additional information in the IO-Link System (https://support.automation.siemens.com/WW/view/en/65949252) function manual.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
25
Diagnostic alarms
5
5.1
Status and error displays
LED display
Cn Qn PWR n
Figure 5-1
Port status/channel error Channel status in standard DI mode Supply voltage L+ Channel number
LED display
Meaning of the LED displays
The following tables show the meaning of the status and error displays. Remedial measures for diagnostic alarms can be found in the Diagnostic alarms (Page 29) chapter.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
26
Manual, 03/2019, A5E45488510-AA
Diagnostic alarms 5.1 Status and error displays
RUN and ERROR LED
Table 5- 1 Status and error displays RUN and ERROR
LED
Meaning
RUN ERROR
Voltage missing or too low at back-
Off
Off plane bus.
Flashes On On
Flashes
The module starts up and flashes until Off the valid parameter assignment is set.
Module parameters are assigned. Off
Indicates module errors (at least one Flashes error is present on one channel, e.g.
wire break).
The hardware is defective. Flashes
Solution
· Switch on the CPU and/or the system power supply modules.
· Verify that the U connectors are inserted.
· Check whether too many modules are inserted.
-
Evaluate the diagnostics and eliminate the error (e.g. wire break).
Replace the module.
LED PWR
Table 5- 2 POWER status display
LED P Off
On (green)
Meaning
Solution
Supply voltage L+ too low or missing. Check the supply voltage L+.
Supply voltage L+ is present and OK. -
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
27
Diagnostic alarms 5.1 Status and error displays
Cn LEDs
Valid for IO-Link port in port status.
Table 5- 3 Status displays of LEDs C1 to C8
C1 to C8 Off
Flashes (green) On (green)
On (red)
Meaning The port is disabled or in standard DI mode.
The port is in IO-Link mode, the device is not connected or the port is not connected with the configured device. Port in IO-Link mode, device not connected
· Wire break or short-circuit to ground · Supply voltage L+ missing or too low · IO-Link device error
Qn LEDs
Valid for the IO-Link port that is in standard DI mode.
Table 5- 4 Status displays of LEDs Q1 to Q8
Q1 to Q8 Off
On (green)
Meaning Process signal = 0 in standard DI mode, deactivated or in IO-Link mode
Process signal = 1 in standard DI mode
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
28
Manual, 03/2019, A5E45488510-AA
Diagnostic alarms 5.2 Diagnostic alarms
5.2
Diagnostic alarms
For each diagnostics event, a diagnostic alarm is issued and the ERROR LED flashes red on the communication module. You can read out the diagnostics alarms, for example, in the diagnostics buffer of the CPU. You can evaluate the error codes with the user program.
Table 5- 5 Error types
Diagnostic alarm Short-circuit
Error code
1H
Undervoltage
2H
Overvoltage
3H
Overheating
5H
Wire break
6H
Overflow
7H
Underflow
8H
Error
9H
Configuration
10H
error
Meaning (IO-Link error code)
· Short-circuit in the process cables on the IO-Link device (1804H) · Short-circuit on IO device (7710H) · Supply voltage too low (5111H, 5112H) · Supply voltage too high (5110H) · Temperature exceeded on master (1805H) · Temperature exceeded on device (4000H, 4210H) · No IO-Link device connected · There is a break in the signal line to the IO-Link device · IO-Link device cannot communicate due to another error (1800H) · Process tag range exceeded (8C10H) · Measuring range exceeded (8C20H) · Process tag range too low (8C30H) · All IO-Link error codes which are not listed here are mapped to
this error · Incorrect device (1802H) · Vendor ID and Device ID not defined (1817H) · Process data length of the IO-Link device exceeded (1818H) · No cycle time configured (1819H) · Could not configure IO-Link Master (1882H, 1883H) · Storage error (1886H) · Process data length exceeded (1887H) · PQI not supported (1889H) · Device was not configured correctly (6320H, 6321H, 6350H)
IO-Link Master
X
X X
IO-Link device
X X X
X
X
X X X
X
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
29
Diagnostic alarms 5.2 Diagnostic alarms
Diagnostic alarm
Supply voltage missing
Error code
11H
Defective fuse 12H
Safety shutdown 19H
External fault
1 AH
Meaning (IO-Link error code)
· L+ supply voltage too low (<20 V) (1890H) · L+ supply voltage for device missing (1806H) · L+ supply voltage for device too low (<20 V) (1807H) · Fuse on device is defective (5101H) · Serious error (master has to be replaced) (1880H) · Error in data storage (1809H, 180AH, 180BH, 180CH, 180DH) · More than 6 errors are pending simultaneously on the IO-Link
device (1808H) · Consistency error in electronic coding element (1885H) · Process data length exceeded (1887H)
IO-Link Master
X
IO-Link device
X X X
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
30
Manual, 03/2019, A5E45488510-AA
Technical specifications
6
Technical specifications of the IO-Link Master CM 8xIO-Link communication module
Article number General information
Product type designation HW functional status Firmware version · FW update possible
Product function · I&M data
Engineering with · STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFIBUS as of GSD version/GSD revision
· PROFINET as of GSD version/GSD revision
Supply voltage Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection
Input current Current consumption, max.
Encoder supply Number of outputs
Output current · Rated value
24 V encoder supply · Short-circuit protection
IO-Link Number of ports · of which simultaneously controllable IO-Link protocol 1.0
6ES7547-1JF00-0AB0 CM 8xIO-Link FS01 V1.0.0 Yes
Yes; I&M0 to I&M3
V15.1 with HSP 274
Configurable via GSD file
GSD as of Revision 5
GSDML V2.34
24 V 20.4 V 28.8 V Yes 50 mA; without load 8 1 A; 4 A total current per module
Yes; per channel, electronic
8 8 Yes
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
31
Manual, 03/2019, A5E45488510-AA
Technical specifications
Article number IO-Link protocol 1.1 Cycle time, min. Size of process data, input per port Size of process data, input per module Size of process data, output per port Size of process data, output per module Memory size for device parameter Master backup Configuration without S7-PCT Cable length unshielded, max.
Operating modes · IO-Link
· DI
· DQ Time Based IO
TIO IO-Link IN TIO IO-Link OUT TIO IO-Link IN/OUT Connection of IO-Link devices · Port type A
· Port type B Interrupts/diagnostics/status information Alarms
· Diagnostic alarm
Diagnostic messages · Monitoring the supply voltage
· Wire-break
· Short-circuit
· Group error Diagnostics indication LED
· Monitoring of the supply voltage (PWRLED)
· Channel status display
· for channel diagnostics
· for module diagnostics Potential separation Potential separation channels
· between the channels
6ES7547-1JF00-0AB0 Yes 2 ms 33 byte; max. 240 byte; max. 32 byte; max. 240 byte; max. 2 kbyte; for each port Yes Yes 20 m
Yes Yes No
No No No
Yes Yes; 24 V DC via external terminal
Yes; The port diagnosis is available in the IO-Link mode only.
Yes Yes Yes Yes
Yes; Green LED
Yes; Green LED Yes; Red LED Yes; Red LED
No
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
32
Manual, 03/2019, A5E45488510-AA
Technical specifications
Article number · between the channels and backplane bus
Isolation Isolation tested with
Ambient conditions Ambient temperature during operation
· horizontal installation, min.
· horizontal installation, max.
· vertical installation, min.
· vertical installation, max. Dimensions
Width Height Depth
6ES7547-1JF00-0AB0 Yes
707 V DC (type test)
0 °C 60 °C; Observe derating 0 °C 40 °C; Observe derating
35 mm 147 mm 129 mm
Power reduction (derating) to total current of outputs, per module,
The following derating curves show the load capacity of the transducer supply outputs in relation to the mounting position and the ambient temperature.
Horizontal mounting of the system Vertical mounting of the system
Figure 6-1 Derating curve, IO-Link master
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
33
Dimensional drawing
7
7.1
Dimensional drawing
The dimensional drawing of the module on the mounting rail, as well as a dimensional drawing with open front panel, are provided in the appendix. Always observe the specified dimensions for installation in cabinets, control rooms, etc.
Figure 7-1 Dimensional drawing of the IO-Link Master CM 8xIO-Link module
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
34
Manual, 03/2019, A5E45488510-AA
Dimensional drawing 7.1 Dimensional drawing
Figure 7-2 Dimensional drawing of the IO-Link Master CM 8xIO-Link module, side view with open front cover
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
35
Parameter data record
A
A.1
Parameter assignment and structure of parameter data set
The data record of the module has an identical structure, regardless of whether you configure the module with PROFIBUS DP or PROFINET IO. With data record 128, you can reconfigure the module in your user program regardless of your programming.
The following figures describe the structure of data record 128 as of firmware version V1.0.
Configuration in the user program
You can configure the modules in runtime.
Changing parameters in RUN
The "WRREC" instruction is used to transfer the parameters to the module using data record 128. The parameters set with STEP 7 are not changed in the CPU by this action. This means the parameters set in STEP 7 are still valid after a restart.
Output parameter STATUS
If errors occur when transmitting parameters with the "WRREC" instruction, the module continues operation with the previous parameter assignment. The STATUS output parameter contains a corresponding error code.
You will find a description of the "WRREC" instruction and the error codes in the STEP 7 online help.
Error message
The module always checks all the values of the transferred data record. Only if all the values were transferred without errors does the module apply the values from the data record.
The instruction WRREC for writing data records returns corresponding error codes when errors occur in the parameter STATUS.
The following table shows the module-specific error codes and their meaning for the parameter data record 128:
Table A- 1 Error message
Error code 80B1H 80E0H 80E1H
Meaning Error in data length Error in header information Parameter error
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
36
Manual, 03/2019, A5E45488510-AA
Structure of data record 128
Parameter data record A.1 Parameter assignment and structure of parameter data set
Figure A-1 Structure of data record 128
Header information
The figure below shows the structure of the header information.
Figure A-2 Header information
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
37
Parameter data record A.1 Parameter assignment and structure of parameter data set IO-Link start parameters
The following figure shows the structure of the IO-Link start parameter. Activate a parameter by setting the corresponding bit to "1".
Figure A-3 IO-Link start parameters
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
38
Manual, 03/2019, A5E45488510-AA
Parameter data record A.1 Parameter assignment and structure of parameter data set
Port parameter
The following figure shows an extract from the structure of the port parameter. Activate a parameter by setting the corresponding bit to "1". If you have selected IO-Link Manual operating mode, you must enter the Vendor ID (byte x+5 and x+6) and Device ID (byte x+7 to x+10) yourself. You can find the Vendor ID and Device ID in the IODD of the IO-Link device being used.
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
Manual, 03/2019, A5E45488510-AA
39
Parameter data record A.1 Parameter assignment and structure of parameter data set
Figure A-4 Port parameter
Communication module IO-Link Master CM 8xIO-Link (6ES7547-1JF00-0AB0)
40
Manual, 03/2019, A5E45488510-AA
SIMATIC NET S7-1500 - PROFINET CM 1542-1
Operating Instructions
_Pr_ef_ac_e_______________ _Pr_op_e_rti_es_a_nd_f_un_c_tio_ns______1_ _LE_D_s_______________2_ _Icno_smta_mll_aist_sioion_n,_icno_gn,_noep_cet_rina_gtio_unp_, ____3_ _Co_n_fig_u_ra_tio_n,_p_ro_gr_am_m_i_ng____4_ _Di_ag_n_os_tic_s_an_d_u_pk_e_ep______5_ _Te_c_hn_ic_al_sp_e_cif_ic_at_ion_s______6_ _Ap_p_ro_va_ls_____________7_ _Do_c_um_e_n_tat_io_n _re_fe_re_nc_es____A__
01/2017
C79000-G8976-C355-03
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Process Industries and Drives Postfach 48 48 90026 NÜRNBERG GERMANY
C79000-G8976-C355-03 01/2017 Subject to change
Copyright © Siemens AG 2014 - 2016. All rights reserved
Preface
Validity of this manual
This document contains information on the following product: Communications module CM 1542-1 Article number 6GK7 542-1AX00-0XE0 Hardware product version 1 Firmware version V2.0 Communications module for SIMATIC S7-1500
View of the CM
LEDs for status and error displays LED display of the Ethernet ports X1 P1 and X1 P2 Type plate PROFINET interface: 2 x 8-pin RJ-45 jack Label with MAC address
Figure 1
View of the CM 1542-1 with closed (left) and open (right) front cover
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
3
Preface
Address label: Unique MAC address preset for the CM
When supplied, the CM has a total of 3 default MAC addresses with the following assignment: PROFINET interface
The MAC address of the PROFINET interface is printed on the housing. (visible in STEP 7 if nodes are reachable) One MAC address for each of the 2 Ethernet ports of the PROFINET interface The MAC addresses of the Ethernet ports are required only for detection and evaluation of neighborhood and topology relations (LLDP).
Abbreviations and names
CP In this document, the term "CP" is also used instead of the full product name.
STEP 7 The name STEP 7 is used to mean the STEP 7 Professional configuration tool.
Purpose of the manual
These Operating Instructions supplement the S7-1500 system manual. With the information in this manual and the system manual, you will be able to commission the CM.
New in this release
Firmware version V2.0 with the following new functions: PROFINET IO device, with the following functions among others: iDevice and prioritized startup, see section Communication services (Page 11). Can be used as PROFINET IO controller in standard machines See section CM in multiple use IO systems (standard machines) (Page 32). IP routing via the backplane bus See section IP routing (Page 31). The new functions can be configured with the STEP 7 version specified in the section Project engineering (Page 17).
Editorial revision
Replaced edition
Release 07/2014
CM 1542-1
4
Operating Instructions, 01/2017, C79000-G8976-C355-03
Preface
Current manual release on the Internet
You will also find the current version of these operating instructions on the Internet pages of Siemens Automation Customer Support Link: (https://support.industry.siemens.com/cs/ww/en/ps/15341/man):
Structure of the documentation
The following documents supplement these operating instructions for the CM 1542-1. You will find links to the documents on the Internet in the appendix Documentation references (Page 49).
Table 1
Documentation for the CM 1542-1
Topic
System description
Documentation System manual: S7-1500 Automation System
Most important contents · Application planning · Installation
· Connecting up
· Commissioning
Module properties Power supplies manual Signal modules manual
· Connecting up
· Parameter assignment/addressing
· Interrupts, error messages, diagnostics and system alarms
· Technical specifications
· Dimension drawing
System diagnos- System diagnostics function manual tics
· Overview
· Diagnostics evaluation for hardware/software
Communication Communication function manual
· Overview
Function manual PROFINET with STEP 7 Professional
· PROFINET basics · PROFINET functions
· PROFINET diagnostics
Web Server function manual
· Function
· Operation
Interference-free installation of control systems
Interference-free installation of control systems · Basics
function manual
· Electromagnetic compatibil-
ity
· Lightning protection
· Housing selection
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
5
Preface
Topic Memory concept
Cycle and response times
Documentation
Most important contents
Structure and Use of the CPU Memory function · Structure
manual
· How it works
· Use
Cycle and response times
· Basics
· Calculations
CM documentation in the SIMATIC NET Manual Collection (article number A5E00069051)
The "SIMATIC NET Manual Collection" DVD contains the device manuals and descriptions of all SIMATIC NET products current at the time it was created. It is updated at regular intervals.
Version History / Current Downloads for the SIMATIC NET S7 CPs
The "Version History/Current Downloads for SIMATIC NET S7 CPs" provides information on all CPs available up to now for SIMATIC S7 (Industrial Ethernet, PROFIBUS) and IE/PB Link.
The current version of these documents can be found on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/view/109474421)
License conditions
Note Open source software The product contains open source software. Read the license conditions for open source software carefully before using the product.
You will find license conditions in the following document on the supplied data medium: OSS_CM15421_86.pdf
Firmware
The firmware is signed and encrypted. This ensures that only firmware created by Siemens can be downloaded to the device.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
CM 1542-1
6
Operating Instructions, 01/2017, C79000-G8976-C355-03
Preface
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place. Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit Link: (http://www.siemens.com/industrialsecurity) Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats. To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under Link: (http://www.siemens.com/industrialsecurity).
FAQs on the Internet
You will find detailed information (FAQs) on using the CM described here on the Internet at the following address (entry type "FAQ"): Link: (https://support.industry.siemens.com/cs/ww/en/ps/15341/faq)
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the SIMATIC NET glossary. You will find the SIMATIC NET glossary on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Recycling and disposal
The product is low in pollutants, can be recycled and meets the requirements of the WEEE directive 2012/19/EU "Waste Electrical and Electronic Equipment". Do not dispose of the product at public disposal sites. For environmentally friendly recycling and the disposal of your old device contact a certified disposal company for electronic scrap or your Siemens contact. Keep to the local regulations. You will find information on returning the product on the Internet pages of Siemens Industry Online Support: Link: (https://support.industry.siemens.com/cs/ww/en/view/109479891)
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
7
Preface
CM 1542-1
8
Operating Instructions, 01/2017, C79000-G8976-C355-03
Table of contents
Preface ................................................................................................................................................... 3
1 Properties and functions........................................................................................................................ 11
1.1
Communication services.........................................................................................................11
1.2
Further functions .....................................................................................................................12
1.3 1.3.1 1.3.2 1.3.3 1.3.4 1.3.5 1.3.6
Configuration limits and performance data .............................................................................13 Transmission and reaction times ............................................................................................13 Connection resources .............................................................................................................13 Characteristic data Open User Communication incl. e-mail ...................................................14 Characteristics of S7 communication .....................................................................................15 PROFINET IO characteristic data...........................................................................................16 Rack components ...................................................................................................................16
1.4 1.4.1 1.4.2
Requirements for use..............................................................................................................17 Project engineering .................................................................................................................17 Programming ..........................................................................................................................17
2 LEDs..................................................................................................................................................... 19
3 Installation, connecting up, commissioning, operation ........................................................................... 21
3.1 3.1.1 3.1.2 3.1.3 3.1.4
Important notes on using the device.......................................................................................21 Notices on use in hazardous areas ........................................................................................21 Notices on use in hazardous areas according to ATEX / IECEx ............................................22 Notices regarding use in hazardous areas according to UL HazLoc .....................................23 Notices on use in hazardous areas according to FM .............................................................23
3.2
Installing and commissioning the CM 1542-1 .........................................................................24
3.3
Terminal assignment...............................................................................................................25
3.4
Mode of the CPU - effect on the CM.......................................................................................25
4 Configuration, programming .................................................................................................................. 27
4.1
Security recommendations .....................................................................................................27
4.2 4.2.1
Network settings .....................................................................................................................30 Fast Ethernet ..........................................................................................................................30
4.3 4.3.1 4.3.2 4.3.3 4.3.4 4.3.5
IP configuration .......................................................................................................................30 Points to note about IP configuration......................................................................................30 Restart after detection of a duplicate IP address in the network ............................................31 Remove retentive storage of the IP address if there are duplicate addresses.......................31 IP routing.................................................................................................................................31 CM in multiple use IO systems (standard machines) .............................................................32
4.4
Media redundancy ..................................................................................................................33
4.5
Time-of-day synchronization...................................................................................................33
4.6
Program blocks for OUC.........................................................................................................34
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
9
Table of contents
5 Diagnostics and upkeep ........................................................................................................................ 37
5.1
Diagnostics options ................................................................................................................ 37
5.2
SNMP ..................................................................................................................................... 37
5.3
Replacing a module without a programming device .............................................................. 39
6 Technical specifications ........................................................................................................................ 41
7 Approvals ............................................................................................................................................. 43
A Documentation references .................................................................................................................... 49
A.1
Introduction to the documentation.......................................................................................... 49
A.2
System manual S7-1500........................................................................................................ 49
A.3
Diagnostics............................................................................................................................. 50
A.4
Communication ...................................................................................................................... 50
A.5
Interference-free installation of control systems .................................................................... 51
A.6
Memory concept..................................................................................................................... 51
A.7
Cycle and response times...................................................................................................... 51
Index .................................................................................................................................................... 53
CM 1542-1
10
Operating Instructions, 01/2017, C79000-G8976-C355-03
Properties and functions
1
1.1
Communication services
The CM supports the following communications services:
PROFINET IO PROFINET IO allows direct access to IO devices over Industrial Ethernet. Real-Time communication (RT) Isochronous Real-Time communication (IRT) Media redundancy MRP Device replacement without exchangeable storage medium IO controller IO device (iDevice, Shared Device, Prioritized startup) Isochronous real time
Open User Communication Open User Communication supports the following communications services via the CM using programmed or configured communications connections: TCP (complying with RFC 793), ISO-on-TCP (complying with RFC 1006) and UDP (complying with RFC 768) With the interface via TCP connections, the CM supports the socket interface to TCP/IP available on practically every end system. Multicast with UDP The multicast mode is made possible by selecting a suitable IP address when configuring connections. A maximum of six multicast groups are supported via UDP.
S7 communication PG communication Operator control and monitoring functions (HMI communication) Data exchange over S7 connections
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
11
Properties and functions 1.2 Further functions
1.2
Further functions
Timeofday synchronization over Industrial Ethernet using the NTP mode (NTP: Network Time Protocol)
The CM sends timeofday queries at regular intervals to an NTP server and synchronizes its local time of day.
The time is also be forwarded automatically to the CPU modules in the S7 station allowing the time to be synchronized in the entire S7 station.
Media redundancy (MRP)
Within an Ethernet network with a ring topology, the CM supports the media redundancy protocol MRP. You can assign the role of "Client" or "Manager (Auto)" to the CM.
Addressable with the factoryset MAC address
To assign the IP address to a new CM (direct from the factory), it can be accessed using the preset MAC address on the interface being used. Online address assignment is made in STEP 7.
SNMP agent
The CM supports data queries using SNMP in version V1 (Simple Network Management Protocol).
For details, see section SNMP (Page 37).
IP configuration - IPv4
The essential features of IP configuration for the CM:
The CM supports the use of IP addresses according to IPv4.
You can configure how and with which method the CM is assigned the IP address, the subnet mask and the address of a gateway.
The IP configuration and the connection configuration (IPv4) can also be assigned to the CM by the user program (for program blocks refer to the section Programming (Page 17)).
Note: Does not apply to S7 connections.
IP routing
The CM supports static IP routing (IPv4) to other CM 1542-1 V2.0 / CP 1543-1 V2.0 in an S7-1500 system.
For details, see section IP routing (Page 31).
CM 1542-1
12
Operating Instructions, 01/2017, C79000-G8976-C355-03
Properties and functions 1.3 Configuration limits and performance data
Access to the Web server of the CPU
Via the LAN interface of the CM, you have access to the Web server of the CPU. With the aid of the Web server of the CPU, you can read out module data from a station. Note the special description of the Web server; refer to the section Documentation references (Page 49)
Note Web server access using the HTTPS protocol The Web server of a SIMATIC S7-1500 station is located in the CPU. For this reason, when there is secure access (HTTPS) to the Web server of the station using the IP address of the CM 1542-1, the SSL certificate of the CPU is displayed.
1.3
Configuration limits and performance data
1.3.1
Transmission and reaction times
Measured values on the Internet
Note Measured values of transmission and reaction times in PROFINET networks for a series of configurations can be found on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/view/25209605)
1.3.2
Connection resources
Characteristic
Total number of freely usable connections on Industrial Ethernet
Explanation / values 64 configurable connections, 1 PG connection The value applies to the total number of connections of the following types:
· Connections for open communications services
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
13
Properties and functions 1.3 Configuration limits and performance data
Note Connection resources CPU dependent Depending on the CPU type, different numbers of connection resources are available. The number of connection resources is the decisive factor for the number of configurable connections. This means that the values that can actually be achieved may be lower than specified in this section "Properties and functions" describing the CM.
1.3.3
Characteristic data Open User Communication incl. e-mail
Open User Communication (OUC) provides access to communication over TCP, ISO-onTCP and UDP connections.
Characteristic Number of connections
Maximum data length for program blocks LAN interface max. data field length generated by the CM per protocol data unit(TPDU = transport protocol data unit)
Explanation / values
· Max. number of connections in total (configured and programmed:
(ISO-on-TCP + TCP + UDP + e-Mail) 64
of which: TCP connections: 0 ... 64 1) ISO-on-TCP connections: 0 ... 64 Total number of UDP connections (specified and free) that can be
configured: 0 ... 64 Connection for e.mail: 0 ... 64;
only one e-mail can be processed at any one time Notes: · 1) Avoid overload at receiving end
The flow control on TCP connections cannot control permanent overload of the recipient. You should therefore make sure that the processing capabilities of a receiving CM are not permanently exceeded by the sender (approximately 150 200 messages per second). Program blocks allow the transfer of user data in the following lengths: 1. ISO-on-TCP, TCP: 1 - 64 kbytes 2. UDP: 1 - 1452 bytes 3. E-mail (job header + user data): 1 - 256 bytes e-mail attachment: 64 kbytes
· For sending ISO-on-TCP, TCP: 1452 bytes / TPDU
· For receiving ISO-on-TCP: 512 bytes / TPDU TCP: 1452 bytes / TPDU
CM 1542-1
14
Operating Instructions, 01/2017, C79000-G8976-C355-03
Properties and functions 1.3 Configuration limits and performance data
Note Connection resources of the CPU
Depending on the CPU type, different numbers of connection resources are available. The number of connection resources is the decisive factor for the number of configurable connections. This means that the values that can actually be achieved may be lower than specified in this section describing the CM.
You will find detailed information on the topic of connection resources in the function manual /4/ (Page 50).
Restrictions for UDP
Restrictions UDP broadcast / multicast
To avoid overloading the CP due to high broadcast / multicast frame traffic, the receipt of UDP broadcast / multicast on the CP is limited
UDP frame buffering
Length of the frame buffer: At least 7360 bytes
Following a buffer overflow, newly arriving frames that are not fetched by the user program are discarded.
1.3.4
Characteristics of S7 communication
S7 communication provides data transfer via the ISO-on-TCP protocol.
Characteristic
Total number of freely usable S7 connections on Industrial Ethernet
LAN interface - data field length generated by CM per protocol data unit (PDU = protocol data unit)
Explanation / values Max. 64
· for sending: 480 bytes / PDU · for receiving: 480 bytes / PDU
Note Maximum values for an S7-1500 station
Depending on the CPU you are using, there are limit values for the S7-1500 station. Note the information in the relevant documentation.
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
15
Properties and functions 1.3 Configuration limits and performance data
1.3.5
PROFINET IO characteristic data
Configuration limits of the CM as an IO controller
The CM supports the following maximum configuration as a PROFINET IO controller:
Characteristic Number of operable PROFINET IO devices
Explanation / values 128, of which: · Max. 64 IRT devices
Size of the input area over all PROFINET IO devices *)
Max. 8192 bytes
Size of the output area over all PROFINET IO devices
Max. 8192 bytes
Size of the IO data area per submodule of a module in an IO · Inputs: 256 bytes
device
· Outputs: 256 bytes
Size of the consistency area for a submodule
256 bytes
*) The diagnostics addresses of the PROFINET IO devices cannot be used as an input on the IO controller. The data area of the inputs is reduced by the diagnostics addresses used.
1.3.6
Rack components
When using the CM type described here, the following limits apply: The number of CMs that can be operated in a rack depends on the CPU type being used.
By operating several CMs, you can increase the configuration limits listed in the section Properties and functions (Page 11) for the station as the whole. The CPU does, however, have set limits for the entire configuration. Note the information in the documentation of the CPU, refer to the section Documentation references (Page 49)
Note Power supply via the CPU adequate or additional power supply modules required You can operate a certain number of modules in the S7-1500 station without an additional power supply. Make sure that you keep to the specified power feed to the backplane bus for the particular CPU type. Depending on the configuration of the S71500 station you may need to provide additional power supply modules.
CM 1542-1
16
Operating Instructions, 01/2017, C79000-G8976-C355-03
1.4
Requirements for use
Properties and functions 1.4 Requirements for use
1.4.1
Project engineering
Software for configuration and online functions
To configure the CP, the following configuration tool is required:
STEP 7 version STEP 7 Professional V13 STEP 7 Professional V14
Functions of the CM
Most functions of the CM can be configured.
The full functionality of the CM can be configured with the new functions of the firmware version according to Preface (Page 3).
Downloading the configuration data
When there is a download to the CPU, the CM is supplied with the relevant configuration data. The configuration data can be downloaded to the CPU via a memory card or any Ethernet/PROFINET interface of the S7-1500 station.
1.4.2
Programming
Program blocks
For communications services, there are preprogrammed program blocks (instructions) available as the interface in your STEP 7 user program.
Table 1- 1 Instructions for communications services
Protocol TCP ISO-on-TCP
UDP
E-mail
Program block (instruction) Establish connection and send/receive data via:
· TSEND_C / TRCV_C or
· TCON, TSEND / TRCV (Termination of the connection possible using TDISCON)
System data type · TCON_IP_v4 · TCON_Configured · TCON_QDN
· TCON_IP_RFC
· TCON, TUSEND/TURCV (Termination of the connection possible using TDISCON)
· TCON_IP_v4 · TCON_QDN
· TMAIL_C
· TMail_V4 · TMAIL_FQDN
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
17
Properties and functions 1.4 Requirements for use
Table 1- 2 Instructions for configuration tasks
Function
Configuration of the Ethernet interface
Program block (instruction) · T_CONFIG
System data type · CONF_DATA
For more detailed information, refer to section Auto-Hotspot.
Refer to the documentation of the program blocks in the online help of STEP 7.
See also
Program blocks for OUC (Page 34)
CM 1542-1
18
Operating Instructions, 01/2017, C79000-G8976-C355-03
LEDs
2
RUN/STOP ERROR MAINT X1 P1 LINK/ACT X1 P2 LINK/ACT
Figure 2-1 LED display of the CM 1542-1 (without front cover)
Meaning of the LED displays
The CM 1542-1 has 3 LEDs to display the current operating status and the diagnostics status and these have the following meanings: RUN/STOP (single color green) ERROR (single color red) MAINT (single color yellow) The following table shows the meaning of the various combinations of colors of the RUN, ERROR and MAINT LEDs.
Table 2- 1 Meaning of the LEDs
RUN/STOP LED off
LED lit green
ERROR LED off LED lit red
MAINT LED off LED lit yellow
Meaning No supply voltage on the CM or supply voltage too low
LED test during startup
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
19
LEDs
RUN/STOP LED lit green LED lit green LED lit green LED lit green LED lit green LED lit green LED flashing green LED flashing green
ERROR LED lit red
LED off LED flashing red
LED off LED off
LED flashing red LED off
LED flashing red
MAINT LED off LED off LED off
Meaning CM startup
CM is in RUN mode. No disruptions. A diagnostics event has occurred.
LED lit yellow
Maintenance is demanded.
· Maintenance is required LED flashing yellow · Downloading the user program
-
Duplicate IP address detected.
Ethernet interface unreachable.
LED off
· No CM configuration exists · Loading firmware
Module fault LED flashing yellow (LEDs flashing synchronized)
Meaning of the LED displays of the PROFINET ports: X1 P1 / X1 P2
To signal whether a connection exists and data is being transferred each port has a twocolor LED (green/yellow):
X1 P1 LINK/ACT
X1 P2 LINK/ACT
The following table shows the meaning of the various color combinations of the LEDs X1 P1 and X1 P2.
Table 2- 2 Meaning of the LEDs
X1 P1 LINK/ACT / X1 P2 LINK/ACT
green off
yellow off
flashing green green on
yellow off yellow off
green on
yellow flickers
Meaning
No connection to PROFINET There is no Ethernet connection between the Ethernet interface of the CM and the communications partner. At the current time, there is no data being received/sent via the Ethernet interface. The "node flash test" is being performed.
Connection to PROFINET exists There is an Ethernet connection between the Ethernet interface of the CM and a communications partner. At the current time, data is being received/sent via the Ethernet interface of the Ethernet device of a communications partner on Ethernet.
CM 1542-1
20
Operating Instructions, 01/2017, C79000-G8976-C355-03
Installation, connecting up, commissioning, operation
3
3.1
Important notes on using the device
Safety notices on the use of the device
Note the following safety notices when setting up and operating the device and during all associated work such as installation, connecting up or replacing the device.
WARNING
LAN attachment
A LAN or LAN segment with the attachments belonging to it should be within a single lowvoltage supply system and within a single building. Make sure that the LAN is in an of type A environment according to IEEE 802.3 or in a type 0 environment according to IEC TR 62101.
Never establish a direct electrical connection to TNV networks (telephone network) or WANs (Wide Area Network).
3.1.1
Notices on use in hazardous areas
WARNING EXPLOSION HAZARD DO NOT OPEN WHEN ENERGIZED.
WARNING The equipment is designed for operation with Safety Extra-Low Voltage (SELV) by a Limited Power Source (LPS). This means that only SELV / LPS complying with IEC 60950-1 / EN 60950-1 / VDE 0805-1 must be connected to the power supply terminals. The power supply unit for the equipment power supply must comply with NEC Class 2, as described by the National Electrical Code (r) (ANSI / NFPA 70). If the equipment is connected to a redundant power supply (two separate power supplies), both must meet these requirements.
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
21
Installation, connecting up, commissioning, operation 3.1 Important notes on using the device
WARNING EXPLOSION HAZARD Do not connect or disconnect cables to or from the device when a flammable or combustible atmosphere is present.
WARNING EXPLOSION HAZARD Replacing components may impair suitability for Class 1, Division 2 or Zone 2.
WARNING When used in hazardous environments corresponding to Class I, Division 2 or Class I, Zone 2, the device must be installed in a cabinet or a suitable enclosure.
3.1.2
Notices on use in hazardous areas according to ATEX / IECEx
WARNING Requirements for the cabinet/enclosure To comply with EU Directive 94/9 (ATEX95), the enclosure or cabinet must meet the requirements of at least IP54 in compliance with EN 60529.
WARNING Cable If the cable or conduit entry point exceeds 70 °C or the branching point of conductors exceeds 80 °C, special precautions must be taken. If the equipment is operated in an air ambient in excess of 50 °C, only use cables with admitted maximum operating temperature of at least 80 °C.
WARNING Take measures to prevent transient voltage surges of more than 40% of the rated voltage. This is the case if you only operate devices with SELV (safety extra-low voltage).
CM 1542-1
22
Operating Instructions, 01/2017, C79000-G8976-C355-03
3.1.3
Installation, connecting up, commissioning, operation 3.1 Important notes on using the device
Notices regarding use in hazardous areas according to UL HazLoc
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or nonhazardous locations only. This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.
WARNING EXPLOSION HAZARD You may only connect or disconnect cables carrying electricity when the power supply is switched off or when the device is in an area without inflammable gas concentrations.
3.1.4
Notices on use in hazardous areas according to FM
WARNING EXPLOSION HAZARD You may only connect or disconnect cables carrying electricity when the power supply is switched off or when the device is in an area without inflammable gas concentrations.
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or nonhazardous locations only. This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.
WARNING EXPLOSION HAZARD The equipment is intended to be installed within an ultimate enclosure. The inner service temperature of the enclosure corresponds to the ambient temperature of the module. Use installation wiring connections with admitted maximum operating temperature of at least 30 ºC higher than maximum ambient temperature.
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
23
Installation, connecting up, commissioning, operation 3.2 Installing and commissioning the CM 1542-1
3.2
Installing and commissioning the CM 1542-1
Installation and commissioning
WARNING Read the system manual "S7-1500 Automation System" Prior to installation, connecting up and commissioning, read the relevant sections in the system manual "S7-1500 Automation System" (see section Documentation references (Page 49)). Make sure that the power supply is turned off when installing/uninstalling the devices.
NOTICE No plugging and pulling during operation The CM must not be pulled or plugged during operation.
Configuration
One requirement for the commissioning of the CM is the completeness of the STEP 7 project data.
Procedure for installation and commissioning
Step 1
2
3 4 5
Execution
When installing and connecting up, keep to the procedures described for installing I/O modules in the system manual "S7-1500 Automation System".
Notes and explanations
Connect the CM to Industrial Ethernet via the RJ45 jack.
Where necessary, connect another component to the remaining free RJ45 jack.
Underside of the CM
Turn on the power supply.
Close the front covers of the module and keep them closed during operation.
The remaining steps in commissioning involve downloading the STEP 7 project data.
The STEP 7 project data of the CM is transferred when you download to the station. To load the station, connect the engineering station on which the project data is located to the Ethernet interface of the CPU.
You will find more detailed information on loading in the following sections of the STEP 7 online help:
· "Compiling and loading project data"
· "Using online and diagnostics functions"
CM 1542-1
24
Operating Instructions, 01/2017, C79000-G8976-C355-03
Installation, connecting up, commissioning, operation 3.3 Terminal assignment
3.3
Terminal assignment
PROFINET interface X1 with 2-port switch
The table below shows the pin assignment of the ports of the PROFINET interface (RJ-45 jack). The assignment corresponds to the Ethernet standard IEEE 802.3.
Table 3- 1
Pin assignment of the PROFINET interface with 2-port switch
View
No. Terminal
Designation
1
TD
Transmit Data +
2
TD_N Transmit Data -
3
RD
Receive Data +
4
GND
Ground
5
GND
Ground
6
RD_N Receive Data -
7
GND
Ground
8
GND
Ground
3.4
Mode of the CPU - effect on the CM
You can change the mode of the CPU between RUN and STOP using the STEP 7 configuration software. Depending on the operating status of the CPU, the CM behaves as described below.
Changing the CPU from RUN to STOP
When the CPU is in STOP mode, the CM remains in RUN mode.
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
25
Installation, connecting up, commissioning, operation 3.4 Mode of the CPU - effect on the CM
CM 1542-1
26
Operating Instructions, 01/2017, C79000-G8976-C355-03
Configuration, programming
4
4.1
Security recommendations
Keep to the following security recommendations to prevent unauthorized access to the system.
General
You should make regular checks to make sure that the device meets these recommendations and other internal security guidelines if applicable.
Evaluate your plant as a whole in terms of security. Use a cell protection concept with suitable products.
Do not connect the device directly to the Internet. Operate the device within a protected network area.
Keep the firmware up to date. Check regularly for security updates of the firmware and use them.
Check regularly for new features on the Siemens Internet pages.
Here you will find information on network security:
Link: (http://www.siemens.com/industrialsecurity)
Here you will find information on Industrial Ethernet security:
Link: (http://w3.siemens.com/mcms/industrial-communication/en/ie/industrial-ethernetsecurity/Seiten/industrial-security.aspx)
You will find an introduction to the topic of industrial security in the following publication:
Link: (http://w3app.siemens.com/mcms/infocenter/dokumentencenter/sc/ic/InfocenterLangu agePacks/Netzwerksicherheit/6ZB5530-1AP010BA4_BR_Netzwerksicherheit_en_112015.pdf)
Physical access
Restrict physical access to the device to qualified personnel.
Network attachment
Do not connect the CM directly to the Internet. If a connection from the CM to the Internet is required, arrange for suitable protection before the CM, for example a SCALANCE S with firewall.
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
27
Configuration, programming 4.1 Security recommendations
Security functions of the product
Use the options for security settings in the configuration of the station. These includes among others:
Protection levels
Configure access to the CPU under "Protection and Security".
Security function of the communication
Use the secure protocol variant HTTPS when accessing the Web server of the CPU
If you doe not require access to the Web server, leave access to the Web server of the CPU (CPU configuration) and to the Web server of the CP disabled.
Protection of the passwords for access to program blocks
Protect the passwords stored in data blocks for the program blocks from being viewed. You will find information on the procedure in the STEP 7 information system under the keyword "Know-how protection".
Passwords
Define rules for the use of devices and assignment of passwords. Regularly update the passwords to increase security. Only use passwords with a high password strength. Avoid weak passwords for example
"password1", "123456789" or similar. Make sure that all passwords are protected and inaccessible to unauthorized personnel.
See also the preceding section for information on this. Do not use one password for different users and systems.
Protocols
Secure and non-secure protocols Only activate protocols that you require to use the system. Use secure protocols when access to the device is not prevented by physical protection
measures.
Table: Meaning of the column titles and entries The following table provides you with an overview of the open ports on this device. Protocol / function
Protocols that the device supports. Port number (protocol)
Port number assigned to the protocol.
CM 1542-1
28
Operating Instructions, 01/2017, C79000-G8976-C355-03
Configuration, programming 4.1 Security recommendations
Default of the port Open The port is open at the start of the configuration. Closed The port is closed at the start of the configuration.
Port status Open The port is always open and cannot be closed. Open after configuration The port is open if it has been configured. Open (login, when configured) As default the port is open. After configuring the port, the communications partner needs to log in. Open with block call The port is only opened when a suitable program block is called.
Authentication Specifies whether or not the protocol authenticates the communications partner during access.
Protocol / function DHCP
DCP DCE S7 communication NTP
HTTP SNMP PROFINET SMTP
Port number (protocol) 68 (UDP)
93 (UDP) 135 (TCP) 102 (TCP)
Default of the port
Open
Open Open Open
Port status
Open after configuration (only outgoing) Open Open Open
123 (UDP)
80 (TCP) 161 (UDP) 34964 (UDP) 25 (TCP)
Closed
Closed Open Open Closed
Open after configuration (only outgoing)
Open after configuration
Open
Open
Open with block call (only outgoing)
Authentication
No
No No No
No
No No No No
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
29
Configuration, programming 4.2 Network settings
4.2
Network settings
4.2.1
Fast Ethernet
Automatic setting
Only "Automatic" for automatic detection and "TP 100 Mbps full duplex" can be set for the transmission rate of the connection. The Ethernet interface of the CM is set to autosensing as default.
Note In normal situations, the basic setting ensures troublefree communication.
Autocrossing mechanism
With the integrated autocrossing mechanism, it is possible to use a standard cable to connect the PC/PG. A crossover cable is not necessary.
Note Connecting a switch To connect a switch, that does not support the autocrossing mechanism, use a crossover cable.
4.3
IP configuration
4.3.1
Points to note about IP configuration
Configured S7 and OUC connections cannot be operated if the IP address is assigned using DHCP
Note If you obtain the IP address using DHCP, any S7 and OUC connections you may have configured will not work. Reason: The configured IP address is replaced by the address obtained via DHCP during operation.
CM 1542-1
30
Operating Instructions, 01/2017, C79000-G8976-C355-03
Configuration, programming 4.3 IP configuration
4.3.2
Restart after detection of a duplicate IP address in the network
To save you timeconsuming troubleshooting in the network, during startup the CM detects double addressing in the network.
Behavior when the CM starts up
If double addressing is detected when the CM starts up, the CM changes to RUN and cannot be reached via the Ethernet interface. The ERROR LED flashes.
4.3.3
Remove retentive storage of the IP address if there are duplicate addresses
The IP address and the device name of the CM 1542-1 remain installed retentively:
If, for example during startup, the CM detects a duplicate address in another network, the CM is not connected to the network. The CM changes to RUN and cannot be reached via the Ethernet interface.
To be able to connect the CM to the network, you can remove the retentively stored IP address as follows:
1. Remove the memory card of the CPU.
2. Using DCP with the Primary Setup Tool (PST) and with the CPU in STOP, set the IP address of the CM to 0.0.0.0 without configuration.
You have removed the retentively stored IP address of the CM. The CM can be connected into the network.
3. Insert the memory card in the CPU again.
4.3.4
IP routing
IP routing via the backplane bus
The CM supports static IP routing (IPv4) to other CM 1542-1 / CP 1543-1 as of firmware version V2.0.
You can use IP routing, for example, for Web server access by lower-level modules.
With IP routing, he data throughput is limited to 1Mbps. Remember this in terms of the number of modules involved and the expected data traffic via the backplane bus.
Configuration
IP routing must be activated in at least 2 modules of a station.
IP routing runs via the configured default router. If you use several CMs/CPs in a station, of the modules in the station only one may be configured as a router.
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
31
Configuration, programming 4.3 IP configuration
4.3.5
CM in multiple use IO systems (standard machines)
Multiple use IO system in standard machines
In PROFINET IO controller mode, the CM can be used in standard machines of the same type.
After configuration, the address parameters of the CM are adapted to the required settings. With suitable configuration of the CM, the lower-level IO devices adopt the address parameters from the CM.
Requirements in the configuration
In terms of configuration it is assumed that the standard machine is delivered with a configured PROFINET IO system and the CM is the IO controller to which several IO devices are assigned in the PROFINET IO system.
The following requirements must be met in the configuration:
PROFINET IO system
In the configuration of the PROFINET IO system, the option "Multiple use IO system" was activated in the "General" tab. This makes the IO system a standard machine project in the STEP 7 project.
IO controller (CM) > PROFINET interface
In the Ethernet addresses of the CM, the following option is activated under "PROFINET": "PROFINET device name is set directly at the device"
In the advanced options the following option is activated in the interface options: "Permit overwriting of device names of all assigned IO devices"
IO devices > PROFINET interface
With the lower-level IO devices there are also some settings to be made that are described in the STEP 7 information system.
Help in the STEP 7 information system
You will find the required information in the STEP 7 information system with the following search term:
Creating a standard machine project
Changing address parameters at runtime
After the standard machine has started up, you can adapt the preset address parameters using the following methods: Using the following STEP 7 commissioning tools:
Primary Setup Tool (PST) PRONETA
CM 1542-1
32
Operating Instructions, 01/2017, C79000-G8976-C355-03
Configuration, programming 4.4 Media redundancy
From the user program using the program block "IP_CONFIG" Using the program block "T_CONFIG"
4.4
Media redundancy
You can use the CM in a ring topology with media redundancy.
For more detailed information on configuration, refer to the STEP 7 online help of the "Media redundancy" parameter group.
4.5
Time-of-day synchronization
Note Recommendation for setting the time
Synchronization with a external clock at intervals of approximately 10 seconds is recommended. This achieves as small a deviation as possible between the internal time and the absolute time.
Procedure
The CM supports the following mode for time-of-day synchronization: NTP (NTP: Network Time Protocol)
Configuration
For information on configuration, refer to the STEP 7 online help of the "Time-of-day synchronization" parameter group.
Accept time of day from non-synchronized NTP servers
The paramter has the following effect:
If the option is enabled, the CP also accepts the time-of-day from non-synchronized NTP servers with stratum 16.
If the option is disabled, the response is as follows: If the CP receives a time of day frame from an unsynchronized NTP server with stratum 16, the time of day is not set according to the frame. In this case, none of the NTP servers is displayed as "NTP master" in the diagnostics; but rather only as being "reachable".
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
33
Configuration, programming 4.6 Program blocks for OUC
4.6
Program blocks for OUC
Programming Open User Communication (OUC)
The instructions (program blocks) listed below are required for the following communication services via Ethernet: TCP ISO-on-TCP UDP (Multicast) E-mail For this, create suitable program blocks. The program block can be found in STEP 7 in the "Instructions > Communication > Open user communication" window. You will find details on the program blocks in the information system of STEP 7.
Note Different program block versions Note that in STEP 7 you cannot use different versions of a program block in a station.
Supported program blocks for OUC
The following instructions in the specified minimum version are available for programming Open User Communication: TSEND_C V3.1 / TRCV_C V3.1
Compact blocks for connection establishment/termination and for sending and receiving data or TCON V4.0 / TDISCON V2.1 Connection establishment / connection termination TUSEND V4.0 / TURCV V4.0 Sending and receiving data via UDP TSEND V4.0 / TRCV V4.0 Sending and receiving data via TCP or ISOonTCP TMAIL_C V4.0 Sending e-mails Note the description of TMAIL_C as of version V4.0 in the STEP 7 information system.
CM 1542-1
34
Operating Instructions, 01/2017, C79000-G8976-C355-03
Configuration, programming 4.6 Program blocks for OUC
Connection establishment and termination
Connections are established using the program block TCON. Note that a separate program block TCON must be called for each connection. A separate connection must be established for each communications partner even if identical blocks of data are being sent. After a successful transfer of the data, a connection can be terminated. A connection is also terminated by calling "TDISCON".
Note Connection abort If an existing connection is aborted by the communications partner or due to disturbances on the network, the connection must also be terminated by calling TDISCON. Make sure that you take this into account in your programming.
Connection descriptions in system data types (SDTs)
For the connection description, the blocks listed above use the parameter CONNECT (or MAIL_ADDR_PARAM with TMAIL_C). The connection description is stored in a data block whose structure is specified by the system data type (SDT).
Creating an SDT for the data blocks You create the SDT required for every connection description as a data block. You generate the SDT type in STEP 7 by entering the name (e.g. "TCON_IP_V4") in the "Data type" box manually in the declaration table of block instead of selecting an entry from the "Data type" drop-down list. The corresponding SDT is then created with its parameters. The following SDTs can be used. Configured connections:
TCON_Configured For transferring frames via TCP
Programmed connections: TCON_IP_V4 For transferring frames via TCP or UDP TCON_QDN For transferring frames via TCP or UDP TCON_IP_RFC For transferring frames via ISO-on-TCP TMail_V4 For transferring e-mails addressing the e-mail server using an IPv4 address TMail_FQDN For transferring e-mails addressing the e-mail server using the host name
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
35
Configuration, programming 4.6 Program blocks for OUC
You will find the description of the SDTs with their parameters in the STEP 7 information system under the relevant name of the SDT.
CM 1542-1
36
Operating Instructions, 01/2017, C79000-G8976-C355-03
Diagnostics and upkeep
5
5.1
Diagnostics options
Diagnostics options
You have the following diagnostics options available for the module: The LEDs of the module
For information on the LED displays, refer to the section LEDs (Page 19). STEP 7: The "Diagnostics" tab in the Inspector window
Here, you can obtain the following information on the selected module: Information on the online status of the module STEP 7: Diagnostics functions in the "Online > Online and diagnostics" menu Here, you can obtain static information on the selected module: General information on the module Diagnostics status Information on the PROFINET interface You will find further information on the diagnostics functions of STEP 7 in the STEP 7 online help. Web diagnostics With the aid of Web diagnostics of the CPU, you read the diagnostics data from an S7 station via the Web browser on the PG/PC. Display of the CPU Using the CPU display, read out diagnostics data from an S7 station on the PG/PC. You can only use diagnostics via the CPU display if the S7 station is suitably configured.
5.2
SNMP
SNMP (Simple Network Management Protocol)
SNMP is a protocol for diagnostics and managing networks and nodes in the network. To transmit data, SNMP uses the connectionless UDP protocol.
The information on the properties of SNMP-compliant devices is entered in MIB files (MIB = Management Information Base).
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
37
Diagnostics and upkeep 5.2 SNMP
You will find detailed information on SNMP and the Siemens Automation MIB in the manual "Diagnostics and Configuration with SNMP" that you will find on the Internet: /3/ (Page 50)
Range of performance of the CM
The CM supports the following SNMP versions: SNMPv1 Traps are not supported by the CP. The CM supports the following MIBs: MIB II (acc. to RFC1213)
The CM supports the following groups of MIB objects: System Interfaces IP ICMP TCP UDP SNMP LLDP MIB MRP Monitoring Siemens Automation MIB
Write permissions
Write access is permitted only for the following MIBs and MIB objects: Siemens Automation MIB, group "System"
The group returns status information about the CM interfaces. Write access is permitted only for the following MIB objects: sysContact sysLocation sysName
A set sysName is sent as the host name using DHCP option 12 to the DHCP server to register with a DNS server. MRP Monitoring, object "mrpDomainResetRoundTripDelays" A write command "resetDelays(1)" to the object sets the values of "mrpDomainRoundTripDelayMax" and "mrpDomainRoundTripDelayMin" to zero. For all other MIB groups and objects, only read access is possible for security reasons.
CM 1542-1
38
Operating Instructions, 01/2017, C79000-G8976-C355-03
Diagnostics and upkeep 5.3 Replacing a module without a programming device
Access permissions using community names
The CM uses the following community strings to control the rights for authentication of the access to its SNMP agent via SNMPv1:
Table 5- 1 Access rights and authentication in the SNMP agent
Type of access Read access Read and write access
*) Note the use of lowercase letters!
Community string for authentication *) public private
5.3
Replacing a module without a programming device
General procedure
The configuration data of the CM is stored on the CPU. This makes it possible to replace this module with a module of the same type (identical article number) without a PG.
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
39
Diagnostics and upkeep 5.3 Replacing a module without a programming device
CM 1542-1
40
Operating Instructions, 01/2017, C79000-G8976-C355-03
Technical specifications
6
Note the information in the System description of SIMATIC S7-1500 (Page 49).
In addition to the information in the system description, the following technical specifications apply to the module.
Table 6- 1 Technical specifications of the CM 1542-1
Technical specifications Article number Attachment to Industrial Ethernet Number
6GK7 542-1AX00-0XE0 1
Design
PROFINET interface with 2port switch, 2 x RJ-45 jack
Properties
100BASE-TX, IEEE 802.3-2005, half duplex/full duplex, autocrossover, autonegotiation, galvanically isolated
Transmission speed
10 / 100 Mbps
Aging time
5 minutes
Special features of the ports X1 P1 Integration in ring topology / MRP possible and X1 P2
Electrical data Power supply via S7-1500 backplane bus
15 V
Current consumption From backplane bus
220 mA maximum
Effective power loss
3.3 W
Insulation tested with
707 VDC (type test)
Permitted ambient conditions
Ambient temperature
· During operation with the rack · 0 to +60 installed horizontally
· During operation with the rack · 0 to +40 installed vertically
· During storage
· -40 to +70
· During transportation Relative humidity · During operation
· -40 to +70 · 95% at 25 °C, no condensation
Contaminant concentration
Acc. to ISA-S71.04 severity level G1, G2, G3
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
41
Technical specifications
Technical specifications Design, dimensions and weight Module format Degree of protection Weight Dimensions (W x H x D) Installation options Permitted cable lengths 0 ... 55 m
0 ... 85 m
Compact module S7-1500, single width IP20 400 g 35 x 142 x 129 mm Mounting in an S7-1500 rack (Alternative combinations per length range) *
· Max. 55 m IE TP Torsion Cable with IE FC RJ45 Plug 180 · Max. 45 m IE TP Torsion Cable with IE FC RJ45 + 10 m
TP Cord via IE FC RJ45 Outlet
· Max. 85 m IE FC TP Marine/Trailing/Flexible/FRNC/Festoon/Food Cable with IE FC RJ45 Plug 180
· Max. 75 m IE FC TP Marine/Trailing/Flexible/FRNC/Festoon/Food Cable + 10 m TP Cord via IE FC RJ45 Outlet
0 ... 100 m
· Max. 100 m IE FC TP Standard Cable with IE FC RJ45 Plug 180
· Max. 90 m IE FC TP Standard Cable + 10 m TP Cord via IE FC RJ45 Outlet
Product functions **
* For details, refer to the IK PI catalog, cabling technology
** You will find the product functions in the section Properties and functions (Page 11).
CM 1542-1
42
Operating Instructions, 01/2017, C79000-G8976-C355-03
Approvals
7
Approvals issued
Note Issued approvals on the type plate of the device
The specified approvals - with the exception of the certificates for shipbuilding - have only been obtained when there is a corresponding mark on the product. You can check which of the following approvals have been granted for your product by the markings on the type plate. The approvals for shipbuilding are an exception to this.
Certificates for shipbuilding and national approvals
The device certificates for shipbuilding and special national approvals can be found in Siemens Industry Online Support on the Internet: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15341/cert)
EC declaration of conformity
The product meets the requirements and safety objectives of the following EC directives and it complies with the harmonized European standards (EN) for programmable logic controllers which are published in the official documentation of the European Union.
2014/34/EU (ATEX explosion protection directive)
Directive of the European Parliament and the Council of 26 February 2014 on the approximation of the laws of the member states concerning equipment and protective systems intended for use in potentially explosive atmospheres, official journal of the EU L96, 29/03/2014, pages. 309-356
2014/30/EU (EMC)
EMC directive of the European Parliament and of the Council of February 26, 2014 on the approximation of the laws of the member states relating to electromagnetic compatibility; official journal of the EU L96, 29/03/2014, pages. 79-106
2011/65/EU (RoHS)
Directive of the European Parliament and of the Council of 8 June 2011 on the restriction of the use of certain hazardous substances in electrical and electronic equipment
The EC Declaration of Conformity is available for all responsible authorities at:
Siemens Aktiengesellschaft Division Process Industries and Drives Process Automation DE-76181 Karlsruhe Germany
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
43
Approvals
IECEx ATEX
You will find the EC Declaration of Conformity on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15341/cert) The current versions of the standards can be seen in the EC Declaration of Conformity and in the certificates.
The product meet the requirements of explosion protection according to IECEx. IECEx classification: Ex nA IIC T4 Gc The product meets the requirements of the following standards: EN 60079-0
Hazardous areas - Part 0: Equipment - General requirements EN 60079-15
Explosive atmospheres - Part 15: Equipment protection by type of protection 'n' You can see the current versions of the standards in the IECEx certificate that you will find on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15341/cert) The conditions must be met for the safe deployment of the product according to the section Notices on use in hazardous areas according to ATEX / IECEx (Page 22). You should also note the information in the document "Use of subassemblies/modules in a Zone 2 Hazardous Area" that you will find on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/view/78381013)
The product meets the requirements of the EC directive:2014/34/EC "Equipment and Protective Devices for Use in Potentially Explosive Atmospheres". Applied standards: EN 60079-0
Hazardous areas - Part 0: Equipment - General requirements EN 60079-15
Explosive atmospheres - Part 15: Equipment protection by type of protection 'n' The current versions of the standards can be seen in the EC Declaration of Conformity, see above. ATEX approval: II 3 G Ex nA IIC T4 Gc Test number: DEKRA 12 ATEX 0240X The conditions must be met for the safe deployment of the product according to the section Notices on use in hazardous areas according to ATEX / IECEx (Page 22).
CM 1542-1
44
Operating Instructions, 01/2017, C79000-G8976-C355-03
EMC
RoHS c(UL)us
Approvals
You should also note the information in the document "Use of subassemblies/modules in a Zone 2 Hazardous Area" that you will find here: In the SIMATIC NET Manual Collection in
"All documents" > "Use of subassemblies/modules in a Zone 2 Hazardous Area" On the Internet at the following address:
Link: (https://support.industry.siemens.com/cs/ww/en/view/78381013)
Until 19.04.2016 the product meets the requirements of the EC Directive 2014/30/EU "Electromagnetic Compatibility" (EMC directive). Applied standards: EN 61000-6-4
Electromagnetic compatibility (EMC) - Part 6-4: Generic standards - Emission standard for industrial environments EN 61000-6-2 Electromagnetic compatibility (EMC) - Part 6-2: Generic standards - Immunity for industrial environments
The product meets the requirements of the EC directive 2011/65/EU on the restriction of the use of certain hazardous substances in electrical and electronic equipment. Applied standard: EN 50581:2012
Applied standards: Underwriters Laboratories, Inc.: UL 61010-1 (Safety Requirements for Electrical
Equipment for Measurement, Control, and Laboratory Use - Part 1: General Requirements) IEC/UL 61010-2-201 (Safety requirements for electrical equipment for measurement, control and laboratory use. Particular requirements for control equipment) Canadian Standards Association: CSA C22.2 No. 142 (Process Control Equipment) Report / UL file: E 85972 (NRAG, NRAG7)
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
45
Approvals
cULus Hazardous (Classified) Locations
Underwriters Laboratories, Inc.: cULus IND. CONT. EQ. FOR HAZ. LOC. Applied standards: ANSI ISA 12.12.01 CSA C22.2 No. 213-M1987 APPROVED for Use in: Cl. 1, Div. 2, GP. A, B, C, D T3...T6 Cl. 1, Zone 2, GP. IIC T3...T6 Ta: Refer to the temperature class on the type plate of the CP Report / UL file: E223122 (NRAG, NRAG7) Note the conditions for the safe deployment of the product according to the section Notices regarding use in hazardous areas according to UL HazLoc (Page 23).
Note For devices with C-PLUG memory: The C-PLUG memory module may only be inserted or removed when the power is off.
CSA FM
CSA Certification Mark Canadian Standard Association (CSA) nach Standard C 22.2 No. 142: Certification Record 063533C-000
Factory Mutual Approval Standards: Class 3600 Class 3611 Class 3810 ANSI/ISA 61010-1 Report Number 3049847 Class I, Division 2, Group A, B, C, D, T4 Class I, Zone 2, Group IIC, T4 You will find the temperature class on the type plate on the module.
CM 1542-1
46
Operating Instructions, 01/2017, C79000-G8976-C355-03
Approvals
Australia - RCM
The product meets the requirements of the AS/NZS 2064 standards (Class A).
Canada
This class A digital device meets the requirements of the Canadian standard ICES-003.
AVIS CANADIEN Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.
MSIP - For Korea only
A ( )
(A) , .
Note that in terms of the emission of interference, this device corresponds to limit class A. This device can be used in all areas except for residential environments.
Current approvals
SIMATIC NET products are regularly submitted to the relevant authorities and approval centers for approvals relating to specific markets and applications.
If you require a list of the current approvals for individual devices, consult your Siemens contact or check the Internet pages of Siemens Industry Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/15341/cert)
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
47
Approvals
CM 1542-1
48
Operating Instructions, 01/2017, C79000-G8976-C355-03
Documentation references
A
A.1
Introduction to the documentation
Where to find Siemens documentation
Article numbers
You will find the article numbers for the Siemens products of relevance here in the following catalogs:
SIMATIC NET - Industrial Communication / Industrial Identification, catalog IK PI
SIMATIC - Products for Totally Integrated Automation and Micro Automation, catalog ST 70
You can request the catalogs and additional information from your Siemens representative. You will also find the product information in the Siemens Industry Mall at the following address:
Link: (https://mall.industry.siemens.com)
Manuals on the Internet
You will find SIMATIC NET manuals on the Internet pages of Siemens Industry Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/15247/man)
Go to the required product in the product tree and make the following settings:
Entry type "Manuals"
Manuals on the data medium
You will find manuals of SIMATIC NET products on the data medium that ships with many of the SIMATIC NET products.
A.2
/1/
System manual S7-1500
SIMATIC S7-1500 Automation System System Manual Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/view/59191792)
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
49
Documentation references A.3 Diagnostics
A.3
/2/
/3/
Diagnostics
SIMATIC SIMATIC S7-1500, ET 200MP, ET 200SP, ET 200AL, ET 200pro Diagnostics Function Manual Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/view/59192926)
SIMATIC NET Diagnostics and configuration with SNMP Diagnostics manual Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/ps/15392/man)
A.4
/4/
/5/
/6/
Communication
SIMATIC SIMATIC S7-1500, ET 200MP, ET 200SP, ET 200AL, ET 200pro Communication Function Manual Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/view/59192925)
SIMATIC SIMATIC PROFINET with STEP 7 V14 Function Manual Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/view/49948856)
SIMATIC SIMATIC S7-1500, ET 200SP, ET 200pro Web Server Function Manual Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/view/59193560)
CM 1542-1
50
Operating Instructions, 01/2017, C79000-G8976-C355-03
A.5
/7/
A.6
/8/
A.7
/9/
Documentation references A.5 Interference-free installation of control systems
Interference-free installation of control systems
SIMATIC SIMATIC S7-1500, ET 200MP, ET 200SP, ET 200AL Interference-free Installation of Control Systems Function Manual Siemens AG Interference-free installation of control systems (https://support.industry.siemens.com/cs/ww/en/view/59193566)
Memory concept
SIMATIC S7-1500, ET 200SP, ET 200pro Structure and Use of the CPU Memory Function Manual Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/view/59193101)
Cycle and response times
SIMATIC SIMATIC S7-1500, ET 200SP, ET 200pro Cycle and Response Times Function Manual Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/view/59193558)
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
51
Documentation references A.7 Cycle and response times
CM 1542-1
52
Operating Instructions, 01/2017, C79000-G8976-C355-03
Index
A
Autocrossing mechanism, 30 Autosensing, 30
C
Changing mode (RUN / STOP), 25 CONF_DATA, 18 Configuration of the Ethernet interface, 18 Connecting a switch, 30 Connection resources, 14 Crossover cable, 30
Installation and commissioning, 24 Procedure, 24
Instructions, 17 IP address
Via DHCP, 30 IP configuration IPv4, 12 IP routing, 31 IRT, 11 ISO-on-TCP (RFC 1006), 11 ISO-on-TCP connections, 14, 17
L
LEDs, 19
D
Data storage of the configuration data of the CM, 39 Diagnostics options, 37 Disposal, 7 Documentation for CM 1542-1, 5 Double addressing in the network, 31 Downloading project data, 24 Downloads, 6
M
MAC address, 12 MAC Address, 3 Manual Collection, 6 Maximum data length for program blocks, 14 Media redundancy, 11, 12 MIB, 37 Multicast
via UDP, 11
E
E-mail, 14 E-mail connections, 17 EMC - electromagnetic compatibility, 43 Ethernet interface
Configuration, 18 Ethernet port, 3
N
NTP, 33 NTP mode, 12 Number
of operable CMs, 16 Number of connections, 14
G
Glossary, 7
H
HMI communication, 11
I
iDevice, 11
O
Open User Communication, 11 OUC (Open User Communication), 34 Overall configuration limits, 16
P
PG communication, 11 Plugging in, 24 Power supply modules
Additional, 16
CM 1542-1
Operating Instructions, 01/2017, C79000-G8976-C355-03
53
Index
PROFINET interface, 3 Program blocks, 17 Pulling, 24
R
Recycling, 7
S
S7 communication, 11 S7 connections
Number of freely usable, 15 Safety notices, 21 Shared Device, 11 SIMATIC NET glossary, 7 SIMATIC NET Manual Collection, 6 SNMP, 37 SNMP agent, 12 Special notes
Connecting a switch, 30 STEP 7, 4 STEP 7 (version), 17 System data types, 17 System data types (SDTs), 35
T
T_CONFIG, 18 TCON, 17 TCON_..., 17 TCP (RFC 793), 11 TCP connections, 14, 17 Time synchronization, 12 Time-of-day synchronization, 33 TMail_..., 17 TMAIL_C, 17 TSEND/TRCV, 17
U
UDP Restrictions, 15
UDP (RFC 768), 11 UDP connections, 14 UDP frame buffering, 15
V
Version history, 6
54
W
Web server, 13
CM 1542-1 Operating Instructions, 01/2017, C79000-G8976-C355-03
SIMATIC NET S7-1500 - PROFIBUS CM 1542-5
Operating Instructions
_Pr_ef_ac_e_______________ _G_uid_e_to_t_he_d_oc_u_m_en_ta_tio_n____1_ _Pr_od_u_ct_o_ve_rv_ie_w,_fu_n_ct_ion_s____2_ _Icno_smta_mll_aist_sioion_n,_icno_gn,_noep_cet_rina_gtio_unp_, ____3_ _Co_n_fig_u_ra_tio_n,_p_ro_gr_am_m_i_ng____4_ _Di_ag_n_os_tic_s_an_d_u_pk_e_ep______5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______6_ _Ap_p_ro_va_ls_____________7_
10/2016
C79000-G8976-C290-03
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Process Industries and Drives Postfach 48 48 90026 NÜRNBERG GERMANY
C79000-G8976-C290-03 10/2016 Subject to change
Copyright © Siemens AG 2013 - 2016. All rights reserved
Preface
Purpose of the documentation
This device manual supplements the system manual of the automation system S7-1500 and the function manuals. All functions that go beyond the system are described in the system manual. With the information in this manual and the system manual, you will be able to commission the CM 1542-5 communications module.
Abbreviations and names
CM In this document, the term "CM" (communications module) is used instead of the full product name "CM 1542-5".
STEP 7 The name STEP 7 is used to mean the STEP 7 Professional configuration tool.
New in this release
New firmware version V2.0 Support of FDL Editorial revision
Replaced edition
Release 11/2014
Current manual release on the Internet
You will also find the current version of this manual on the Internet pages of Siemens Industry Online Support: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15671/man)
Sources of information and other documentation
See section Guide to the documentation (Page 7).
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
3
Preface
License conditions
Note Open source software The product contains open source software. Read the license conditions for open source software carefully before using the product.
You will find license conditions in the following document on the supplied data medium: OSS_CM15425_86.pdf
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks. In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept. Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place. Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit Link: (http://www.siemens.com/industrialsecurity) Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats. To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under Link: (http://www.siemens.com/industrialsecurity).
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the SIMATIC NET glossary. You will find the SIMATIC NET glossary on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/view/50305045)
CM 1542-5
4
Operating Instructions, 10/2016, C79000-G8976-C290-03
Table of contents
Preface ................................................................................................................................................... 3
1 Guide to the documentation .................................................................................................................... 7
2 Product overview, functions..................................................................................................................... 9
2.1
Product data..............................................................................................................................9
2.2
Application ..............................................................................................................................10
2.3
Further functions .....................................................................................................................11
2.4 2.4.1 2.4.2 2.4.3 2.4.4 2.4.5 2.4.6
Configuration limits and performance data .............................................................................12 Configuration limits - number of CMs .....................................................................................12 Transmission speeds supported.............................................................................................12 Characteristic data of the DP interface ...................................................................................13 Characteristic data of FDL communication.............................................................................14 Characteristics of S7 communication .....................................................................................14 Performance data / operation .................................................................................................15
2.5 2.5.1 2.5.2
Requirements for use..............................................................................................................15 Project engineering .................................................................................................................15 Programming ..........................................................................................................................15
2.6
LEDs .......................................................................................................................................16
2.7
PROFIBUS interface...............................................................................................................18
3 Installation, connecting up, commissioning, operation ........................................................................... 19
3.1 3.1.1 3.1.2 3.1.3
Important notes on using the device.......................................................................................19 Notes on use in hazardous areas ...........................................................................................19 Notes on use in hazardous areas according to ATEX / IECEx ..............................................20 Notes on use in hazardous areas according to UL HazLoc ...................................................20
3.2
Installing and commissioning the CM 1542-5 .........................................................................21
3.3
Pin assignment PROFIBUS ....................................................................................................22
3.4
Mode of the CPU - effect on the CM.......................................................................................22
4 Configuration, programming .................................................................................................................. 25
4.1
Configuration in STEP 7 .........................................................................................................25
4.2
Program blocks for communication and distributed I/O..........................................................25
4.3
Program blocks for FDL ..........................................................................................................26
5 Diagnostics and upkeep ........................................................................................................................ 33
5.1
Diagnostics options.................................................................................................................33
5.2
DP slave diagnostics...............................................................................................................34
5.3
Standard diagnostics ..............................................................................................................35
5.4
Device-specific diagnostics in DP-V1 .....................................................................................37
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
5
Table of contents
5.5
DP diagnostics frames when the CPU is in STOP ................................................................ 39
5.6
Replacing a module without a programming device .............................................................. 39
6 Technical specifications ........................................................................................................................ 41
7 Approvals ............................................................................................................................................. 43
Index .................................................................................................................................................... 49
CM 1542-5
6
Operating Instructions, 10/2016, C79000-G8976-C290-03
Guide to the documentation
1
Introduction
The documentation of the SIMATIC products has a modular structure and covers topics relating to your automation system.
The complete documentation for the S7-1500 system consists of a system manual, function manuals and device manuals.
The STEP 7 information system (online help) also supports you in configuring and programming your automation system.
Overview of the documentation on communication with S7-1500
The following table lists additional documents, which supplement this description of CM 1542-5 and are available in the Internet.
Table 1- 1 Documentation for the CM 1542-5
Topic
System description
Documentation
System manual: S7-1500 Automation System (https://support.industry.siemens.com/cs/ww/e n/view/59191792)
Module properties
Device manual: Power supplies (https://support.industry.siemens.com/cs/ww/e n/ps/13721/man)
Device manual: Signal modules (https://support.industry.siemens.com/cs/ww/e n/ps/13743/man)
System diagnostics
Function manual: System diagnostics (https://support.industry.siemens.com/cs/ww/e n/view/59192926)
Communication
Function manual: Communication (https://support.industry.siemens.com/cs/ww/e n/view/59192925)
Function manual PROFINET with STEP 7 (https://support.industry.siemens.com/cs/ww/e n/view/49948856)
Most important contents · Application planning · Installation · Connecting · Commissioning
· Connecting · Parameter assignment/
addressing · Interrupts, error messages,
diagnostics and system alarms · Technical specifications · Dimensional drawing
· Overview · Diagnostics evaluation for
hardware/software
· Overview
· PROFINET basics · PROFINET functions · PROFINET diagnostics
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
7
Guide to the documentation
Topic
Interference-free installation of control systems
Memory concept
Cycle and response times Analog value processing
Documentation Function manual PROFIBUS with STEP 7 (https://support.industry.siemens.com/cs/ww/e n/view/59193579)
Function manual: Web Server (https://support.industry.siemens.com/cs/ww/e n/view/59193560) Function Manual: Interference-free installation of control systems (https://support.industry.siemens.com/cs/ww/e n/view/59193566)
Function manual: Structure and Use of the CPU Memory (https://support.industry.siemens.com/cs/ww/e n/view/59193101)
Function manual: Cycle and Response Times (https://support.industry.siemens.com/cs/ww/e n/view/59193566) Function manual: Analog value processing (https://support.industry.siemens.com/cs/ww/e n/view/67989094)
Most important contents · PROFIBUS basics · PROFIBUS functions · PROFIBUS diagnostics
· Function · Operation
· Basics · Electromagnetic compatibil-
ity · Lightning protection · Housing selection
· Design · Principle of operation · Use
· Basics · Calculations
· Wiring options · Tables of measured values
SIMATIC manuals
All current manuals for SIMATIC products are available for download free of charge from the Internet: Link: (http://www.siemens.com/automation/service&support)
CP/CM documentation in the SIMATIC NET Manual Collection (article number A5E00069051)
The "SIMATIC NET Manual Collection" DVD contains the device manuals and descriptions of all SIMATIC NET products current at the time it was created. It is updated at regular intervals.
Version History / current downloads for the SIMATIC NET S7-CPs/CMs
The "Version History/Current Downloads for SIMATIC NET S7 CPs (PROFIBUS)" provides information on all CPs available up to now for SIMATIC S7 (PROFIBUS). You will find the document on the Internet: Link: (https://support.industry.siemens.com/cs/ww/en/view/67225941)
CM 1542-5
8
Operating Instructions, 10/2016, C79000-G8976-C290-03
Product overview, functions
2
2.1
Product data
Article number, validity and product names
This description contains information on the following product:
CM 1542-5 article number 6GK7 542-5DX00-0XE0 hardware product version 1 firmware version V2.0 communications module CM 1542-5 for connection of S7-1500 to PROFIBUS DP.
View of the module
LEDs Type plate PROFIBUS interface: 1 x 9-pin D-sub female connector (RS-485)
Figure 2-1 CM 1542-5 with closed (left) and open (right) front cover
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
9
Product overview, functions 2.2 Application
2.2
Application
Application
The communications module CM 1542-5 is intended for operation in an S7-1500 automation system. The CM 1542-5 allows the connection of an S7-1500 station to a PROFIBUS fieldbus system.
As an alternative, the CM can be operated in the following modes:
Class 1 DP master
DP slave
Supported communications services
In its current configuration, the CM 1542-5 communications module supports the following communications services: PROFIBUS DP master (class 1)
PROFIBUS DP according to EN 50170 DPV1, DP master DP master mode for DP slaves complying with the PROFIBUS DPV0 and DPV1
standard DP master mode for Siemens DP slaves Direct data exchange (DP slave to DP slave)
As a DP master, the CM 1542-5 is capable of enabling direct data exchange for "its" DP slaves. SYNC / FREEZE The outputs or inputs can be synchronized by the user program using system function DPSYNC_FR. PROFIBUS DP slave PROFIBUS DP according to EN 50170 DPV1, DP slave
Note DP master or DP slave Note that the CM 1542-5 supports operation either as DP master or DP slave.
FDL The CM handles the FDL communication using program blocks of Open User Communication (OUC) see section Configuration, programming (Page 25).
S7 communication PG communication for uploading / downloading of S7 configuration, diagnostics and routing Operator control and monitoring functions (HMI communication) Data exchange over S7 connections
CM 1542-5
10
Operating Instructions, 10/2016, C79000-G8976-C290-03
Product overview, functions 2.3 Further functions
Data record routing / field device parameter assignment You can use the CM as a router for data records intended for field devices (DP slaves). Data records from devices that are not connected directly to PROFIBUS and therefore have no direct access to the DP slaves are forwarded to the DP slaves by the CM.
The services of the CM 1542-5 listed above can be used independently at the same time.
Note Requirement for FDL, data record routing, loading of configuration/diagnostics data For the functions FDL, data record routing and loading configuration and diagnostics data the CM must either be operated in the mode DP master mode or as a DP slave with the option "Test, Commissioning and Routing" enabled.
2.3
Further functions
Enabling /disabling DP slave - in the standard system
DP slaves can be activated and deactivated by the user program using system function D_ACT_DP.
Diagnostics requests
As a DP master (class 1), the CM 1542-5 supports diagnostics requests of a DP master (class 2).
Getting the bus topology in a DP master system
The CM 1542-5 operating as DP master supports the measurement of the PROFIBUS bus topology in a DP master system using a diagnostics repeater (DP slave).
System function DP_TOPOL in the user program can instruct diagnostics repeaters to measure the PROFIBUS BUS topology in a DP master system.
Time-of-day synchronization - time master or time slave
The CM 1542-5 can be enabled for time-of-day synchronization. As an alternative, the CM can be configured as time master or time slave on PROFIBUS.
Time master: The CM is synchronized using the time of day in the S7-1500 station and outputs the time of day on PROFIBUS. The output interval can be set.
Time slave: The CM receives time-of-day frames on PROFIBUS and outputs the time within the S7-1500 station. The output interval within the S7-1500 station is set permanently to 10 seconds.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
11
Product overview, functions 2.4 Configuration limits and performance data
Note Recommendation for setting the time It is advisable to set the time-of-day master so that time-of-day frames are sent at intervals of approximately 10 seconds. This achieves as small a deviation as possible between the internal time and the absolute time.
Web diagnostics
With the aid of Web diagnostics of the CPU, you read the diagnostics data from an S7 station via the Web browser on the PG/PC. In terms of the CM, the Web pages provide the following information: Module and status information Special information on the DP master system (status of the DP slaves)
2.4
Configuration limits and performance data
2.4.1 2.4.2
Configuration limits - number of CMs
When using the CM type described here, the following limits apply: The number of CMs that can be operated in a rack depends on the CPU type being used.
Refer to the information in the system manual (hardware configuration), see Guide to the documentation (Page 7).
Transmission speeds supported
The transmission speed is set in STEP 7.
Note Remember the cable length For the selected transmission speed, the permitted cable length must be kept to.
For this refer to the information in the PROFIBUS function manual: Link: (https://support.industry.siemens.com/cs/ww/en/view/59193579)
CM 1542-5
12
Operating Instructions, 10/2016, C79000-G8976-C290-03
Product overview, functions 2.4 Configuration limits and performance data
2.4.3
Characteristic data of the DP interface
Characteristic data of DP mode
No special program blocks are required for DP mode. The interfacing to the distributed I/O is by direct I/O access or using program blocks (SFCs/SFBs) of the CPU.
Table 2- 1 Characteristic data of DP mode
Characteristic Max. number of operable DP slaves Max. size of the input area of all DP slaves Max. size of the output area of all DP slaves Maximum number of inputs per DP slave Maximum number of outputs per DP slave Max. size of the consistent area for a module
Explanation / values 125 * 8 KByte 8 KByte 244 Byte 244 Byte 128 Byte
* When using DP slaves with extensive configuration data e.g. SINAMICS devices, the number of DP slaves that can be operated on the CM sinks.
Diagnostics requests
As a DP master (class 1), the CM 1542-5 supports diagnostics requests of a DP master (class 2).
DP startup behavior
Note Increasing the default value for startup parameters - configuration of the CPU
In some situations, it is necessary to increase the default value for the startup parameter "Parameter assignment time for the distributed I/O" in the configuration of the CPU: · A large number of modules (DP slaves) is configured. · When a high value is configured for the constant bus cycle time in the network properties
of the PROFIBUS DP line.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
13
Product overview, functions 2.4 Configuration limits and performance data
2.4.4
Characteristic data of FDL communication
Characteristic data FDL
The characteristic data is important when operating FDL connections (specified, free layer 2 (SDA and SDN), broadcast, multicast):
Table 2- 2 Characteristic data FDL
Characteristic Total number of FDL connections that can be operated Size of the transferable data area for FDL connections
Explanation / values 30 max.
· 1...240 bytes max. per specified FDL connection (for sending and receiving):
· Free layer 2 broadcast and multicast: Up to 236 bytes of user data can be transferred per job. The job header occupies an additional 4 bytes.
Note Connection resources of the CPU
Depending on the CPU type, different numbers of connection resources are available. The number of connection resources is the decisive factor for the number of configurable connections. For this reason, lower values than specified here can result.
You will find detailed information on the topic of connection resources in the "Communication" function manual, see Communication (http://support.automation.siemens.com/WW/view/en/59192925).
2.4.5
Characteristics of S7 communication
Characteristics of S7 communication
The following information is important when operating S7 connections:
Table 2- 3 Characteristics of S7 connections
Characteristic
Number of S7 connections via PROFIBUS
Explanation / values Operable in total: Max. 48 The value depends on the S7-1500 CPU being used.
Note PG or HMI functions or data record routing
If PG or HMI functions or data record routing are used, a suitable number of S7 connections must be reserved during configuration!
CM 1542-5
14
Operating Instructions, 10/2016, C79000-G8976-C290-03
Product overview, functions 2.5 Requirements for use
Help provided by STEP 7
The number of connections on PROFIBUS shown in the table above can vary due to other influencing factors. The STEP 7 configuration tool displays warnings and help messages as soon as limit values are exceeded.
2.4.6
Performance data / operation
Measured values of transfer or reaction times
Measured values of transfer and reaction times in Ethernet, PROFIBUS and PROFINET networks for a series of configurations can be found on the Internet: Link: (https://support.industry.siemens.com/cs/ww/en/view/25209605)
2.5
Requirements for use
2.5.1
Project engineering
Configuration
For configuring the CM the following version of STEP 7 is required:
STEP 7 version STEP 7 Professional V14
Functions of the CM
The full functionality of the CP 1542-5 (6GK7 542-5DX00-0XE0) can be configured.
Downloading configuration data
When the configuration data is loaded on the CPU, the CM is supplied with the relevant configuration data. The configuration data can be downloaded to the CPU via PROFIBUS or any PROFINET interface of the S7-1500 station.
2.5.2
Programming
Programming
For programming the CM the following version of STEP 7 is required:
STEP 7 version STEP 7 Professional V14
Functions of the CM
The full functionality of the CP 1542-5 (6GK7 542-5DX00-0XE0) can be programmed.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
15
Product overview, functions 2.6 LEDs
Use of FDL
For programming and using FDL, the following minimum firmware versions are required. CM: V2.0 CPU: V2.0
2.6
LEDs
The status and error displays of the CM 1542-5 are described below.
You can find additional information on "Interrupts" in the STEP 7 online help.
You can find additional information on "Diagnostics" and "System alarms" in the function manual on the Internet: Link: (https://support.industry.siemens.com/cs/ww/en/view/59192926)
LED display
The following figure shows the LEDs of the CM 1542-5.
RUN/STOP LED ERROR LED MAINT LED
Figure 2-2 LED display of the CM 1542-5 (without front cover)
CM 1542-5
16
Operating Instructions, 10/2016, C79000-G8976-C290-03
Product overview, functions 2.7 PROFIBUS interface
Meaning of the LED displays
The CM 1542-5 has 3 LEDs to display the current operating status and the diagnostics status and these have the following meanings:
· RUN/STOP LED · ERROR LED · MAINT LED
(one-color LED: green) (one-color LED: red) (one-color LED: yellow)
The following table shows the meaning of the various combinations of colors of the RUN/STOP, ERROR and MAINT LEDs.
Table 2- 4 Meaning of the LEDs RUN/STOP LED ERROR LED
LED off
LED off
LED lit green
LED lit red
LED lit green
LED lit red
LED lit green
LED off
LED flashing green
LED off
LED lit green LED flashing red
LED lit green
LED off
LED lit green
LED off
LED flashing green
LED flashing red
MAINT LED LED off
LED lit yellow LED off LED off LED off
Meaning No supply voltage on the CM or supply voltage too low. LED test during startup
Startup (booting the CM)
CM is in RUN mode. No disruptions No CM configuration exists Loading firmware
LED off
LED lit yellow
LED flashing yellow
LED flashing yellow
A diagnostics event has occurred. Maintenance is demanded. Maintenance is required.
Module fault
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
17
Product overview, functions 2.7 PROFIBUS interface
2.7
PROFIBUS interface
9-pin D-sub female connector (PROFIBUS)
The PROFIBUS connector is located behind the cover of the housing. The interface is a 9pin D-sub female connector operating according to the RS-485 standard.
You also have the option of connecting to optical PROFIBUS networks via an Optical Bus Terminal OBT or an Optical Link Module OLM.
You will find the pin assignment of the D-sub socket in section Pin assignment PROFIBUS (Page 22).
CM 1542-5
18
Operating Instructions, 10/2016, C79000-G8976-C290-03
Installation, connecting up, commissioning, operation
3
3.1
Important notes on using the device
Safety notices on the use of the device
Note the following safety notices when setting up and operating the device and during all associated work such as installation, connecting up or replacing the device.
3.1.1
Notes on use in hazardous areas
WARNING The device may only be operated in an environment with pollution degree 1 or 2 (see IEC 60664-1).
WARNING EXPLOSION HAZARD Do not connect or disconnect cables to or from the device when a flammable or combustible atmosphere is present.
WARNING EXPLOSION HAZARD Replacing components may impair suitability for Class 1, Division 2 or Zone 2.
WARNING When used in hazardous environments corresponding to Class I, Division 2 or Class I, Zone 2, the device must be installed in a cabinet or a suitable enclosure.
WARNING DIN rail In the ATEX and IECEx area of application only the Siemens DIN rail 6ES5 710-8MA11 may be used to mount the modules.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
19
Installation, connecting up, commissioning, operation 3.1 Important notes on using the device
3.1.2
Notes on use in hazardous areas according to ATEX / IECEx
WARNING
Requirements for the cabinet/enclosure
To comply with EU Directive 94/9 (ATEX95), the enclosure or cabinet must meet the requirements of at least IP54 in compliance with EN 60529.
WARNING
If the cable or conduit entry point exceeds 70 °C or the branching point of conductors exceeds 80 °C, special precautions must be taken. If the equipment is operated in an air ambient in excess of 50 °C, only use cables with admitted maximum operating temperature of at least 80 °C.
WARNING
Take measures to prevent transient voltage surges of more than 40% of the rated voltage. This is the case if you only operate devices with SELV (safety extra-low voltage).
3.1.3
Notes on use in hazardous areas according to UL HazLoc
WARNING EXPLOSION HAZARD You may only connect or disconnect cables carrying electricity when the power supply is switched off or when the device is in an area without inflammable gas concentrations.
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or nonhazardous locations only. This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.
CM 1542-5
20
Operating Instructions, 10/2016, C79000-G8976-C290-03
Installation, connecting up, commissioning, operation 3.2 Installing and commissioning the CM 1542-5
3.2
Installing and commissioning the CM 1542-5
WARNING
Read the system manual "S7-1500 Automation System"
Prior to installation, connecting up and commissioning, read the relevant sections in the system manual "S7-1500 Automation System" (references to documentation, refer to the section Guide to the documentation (Page 7)).
Make sure that the power supply is turned off when installing/uninstalling the devices.
Configuration
One requirement for the commissioning of the CP is the completeness of the STEP 7 project data.
Procedure for installation and commissioning
Step 1
3 4 5
6
Execution
When installing and connecting up, keep to the procedures described for installing I/O modules in the system manual "S7-1500 Automation System".
Notes and explanations
Connect the CM to PROFIBUS via the Lower surface of the CM RS-485 socket.
Turn on the power supply.
Close the front covers of the module and keep them closed during operation.
The remaining steps in commissioning involve downloading the STEP 7 project data.
The STEP 7 project data of the CM is transferred when you download to the station. To load the station, connect the engineering station on which the project data is located to the Ethernet/MPI interface of the CPU.
You will find more detailed information on loading in the following sections of the STEP 7 online help:
· Downloading project data
· Using online and diagnostics functions
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
21
Installation, connecting up, commissioning, operation 3.3 Pin assignment PROFIBUS
3.3
Pin assignment PROFIBUS
PROFIBUS interface
The table below shows the terminal assignment of the PROFIBUS interface. The assignment corresponds to the standard assignment of RS485 interface.
Table 3- 1
Terminal assignment PROFIBUS interface
View
Signal name
1
-
2
-
3 RxD/TxD-P
4
RTS
5
M5V2
6
P5V2
7
-
8 RxD/TxD-N
9
-
Designation Data line A Request To Send Data reference potential (from station) Supply plus (from station) Data line B -
Note PROFIBUS interface
The CM provides no 24 VDC power supply on the PROFIBUS interface. I/O devices (for example, PC adapter 6ES7972-0CB20-0XA0) are therefore not operational on the interface).
3.4
Mode of the CPU - effect on the CM
You can change the mode of the CPU between RUN and STOP using STEP 7 or the switch.
Depending on the operating status of the CPU, the CM behaves as described below.
Changing the CPU from STOP to RUN
Programmed connections are established. In DP master mode:
Change from CLEAR to the OPERATE mode In DP slave mode:
Going diagnostics interrupt to the master Current input data is transferred.
CM 1542-5
22
Operating Instructions, 10/2016, C79000-G8976-C290-03
Installation, connecting up, commissioning, operation 3.4 Mode of the CPU - effect on the CM
Changing the CPU from RUN to STOP
The reaction is as follows in STOP: Programmed connections are terminated. In DP master mode:
Change to the CLEAR mode In DP slave mode:
Input data is sent to the DP master with the value "0" and a DP diagnostics alarm is sent.
Regardless of the mode, the following functions remain enabled: The configuration and diagnostics of the CM Relevant system connections for configuration, diagnostics and PG channel routing still exist. Data record routing S7 routing function Time-of-day synchronization Configured connections remain established.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
23
Installation, connecting up, commissioning, operation 3.4 Mode of the CPU - effect on the CM
CM 1542-5
24
Operating Instructions, 10/2016, C79000-G8976-C290-03
Configuration, programming
4
4.1
Configuration in STEP 7
Configuration in STEP 7
You configure the CM in SIMATIC STEP 7. You will find the required version in the section Project engineering (Page 15).
You will find complete information on configuration in the STEP 7 information system.
Loading and saving the configuration data
When you load the station, the project data of the station including the configuration data of the CP is stored on the CPU. You will find information on loading the station in the STEP 7 information system.
4.2
Program blocks for communication and distributed I/O
Program blocks (instructions) for communications services
For communications services, there are preprogrammed program blocks (instructions) available as the interface in your STEP 7 user program.
Table 4- 1 Instructions for PROFIBUS DP
System blocks and system functions DPSYC_FR DPNRM_DG DP_TOPOL WRREC RDREC GETIO SETIO GETIO_PART SETIO_PART D_ACT_DP DPRD_DAT DPWR_DAT RALRM
Meaning when used with CM
DP slaves synchronize / freeze inputs (SYNC/FREEZE instruction) Reading the diagnostics data of a DP slave Detecting the topology for the DP master system Writing the data record of a DP slave Reading the data record of a DP slave Reading the process image of a DP standard slave Transferring the process image of a DP standard slave Reading the process image partition of a DP standard slave Transferring the process image partition of a DP standard slave Disable / enable DP slaves Reading consistent data of a DP standard slave (user data) Writing consistent data of a DP standard slave Event-driven reading of interrupt information (diagnostics, pull/plug, hardware interrupt) and DPV1-specific interrupts (update, status, vendorspecific interrupt)
Refer to the documentation of the program blocks in the information system of STEP 7.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
25
Configuration, programming 4.3 Program blocks for FDL
Calling program blocks (instructions) for distributed I/O
Several calls are necessary for the instructions of the distributed I/O. The time required to process the job depends on load, round-trip time and transmission speed. If these instructions are called in a loop within one cycle, the cycle time could be exceeded. Exception: Only one call is required for RALRM "receive alarm". Program blocks for DPV1 according to the PNO standard (PROFIBUS user organization): RDREC
"Read data record from a DP slave" corresponds to SFC59 in terms of function WRREC
"Write data record to a DP slave" corresponds to SFC58 in terms of function RALRM
"Read interrupt information from a DP slave" - call in an interrupt OB
4.3
Program blocks for FDL
Program blocks of Open User Communication (OUC) for FDL
To use the bus access protocol FDL (Fieldbus Data Link) use the program blocks of Open User Communication (OUC). For this, create a suitable program blocks. You will find details on the program blocks in the information system of STEP 7.
The end point of an FDL connection is an S7-1500 CPU with communications module CM 1542-5. For the required firmware versions of the modules, see section Programming (Page 15).
Supported program blocks for OUC
The following instructions in the specified minimum version are available for programming Open User Communication to use FDL:
TSEND_C V3.1 / TRCV_C V3.1
Compact blocks for connection establishment and for sending and receiving data via a configured or programmed connection
or
TCON V4.0 / TDISCON V2.1
Connection establishment / connection termination
CM 1542-5
26
Operating Instructions, 10/2016, C79000-G8976-C290-03
Configuration, programming 4.3 Program blocks for FDL
TSEND V4.0 / TRCV V4.0 Sending or receiving data over a configured connection
TUSEND V4.0 / TURCV V4.0 Sending or receiving data over a configured connection With these blocks the connection parameters can be changed at runtime.
The program block can be found in STEP 7 in the "Instructions > Communication > Open User Communication" window.
Connection description of the type "TCON_FDL"
To reference the connection description, the blocks "TCON" and "TSEND_C / TRCV_C" use the CONNECT patrameter. The connection description is stored in a data block whose structure is specified by the system data type (SDT) "TCON_FDL".
Creating an SDT for the data block You create the SDT required for every connection description as a data block. You generate the SDT type in STEP 7 by entering the name ("TCON_FDL") in the "Data type" box manually in the declaration table of block instead of selecting an entry from the "Data type" drop-down list. The SDT is then created with its preset parameters. For FDL the following SDTs are used: TCON_FDL
For transferring data via FDL You will find the description of TCON_FDL in the STEP 7 information system (keyword "TCON_FDL").
Programmed connection establishment or termination with TCON / TDISCON
Connections are established using the program block TCON. Note that a separate program block TCON must be called for each connection. A separate connection must be established for each communications partner even if identical blocks of data are being sent. After a successful transfer of the data, a connection can be terminated. A connection is also terminated by calling "TDISCON".
Note Connection abort If an existing connection is aborted by the communications partner or due to disturbances on the network, the connection must also be terminated by calling TDISCON. Make sure that you take this into account in your programming.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
27
Configuration, programming 4.3 Program blocks for FDL
Configured and programmed FDL connections
The following types of FDL connections can be established: Configured FDL connections
These connection types are configured in the STEP 7 program editor, see below. TSEND / TRCV or TUSEND / TURCV are used as the blocks. Specified connection
Fully configured connection between two partners Unspecified connection
Configured connection with an unspecified partner Broadcast connection
Connection with all connected partners Multicast connection
Connection with several defined partners Programmed FDL connections
These connection types cannot be configured in the STEP 7 program editor. Instead for these connection types either calling TCON along with TSEND/TRCV or TUSEND/TURCV is required or TSEND_C / TRCV_C. Specified connection
Fully configured connection between two partners Unspecified connection
Configured connection with an unspecified partner Unspecified Layer 2 connection
Programmed FDL-Verbindung with an unspecified partner with free layer 2 access Broadcast connection
Connection to all connected partners Multicast connection
Connection to several defined partners The specific settings for the individual connection types are explained in the STEP 7 information system in TCON_FDL.
Setting up a configured FDL connection using TSEND_C
Proceed as follows to set up a configured FDL connection in STEP 7: 1. Create a TSEND_C instruction in the program editor.
You will be prompted to create the relevant data block. 2. Select the TSEND_C instruction and navigate in the Inspector window to "Properties" >
"Configuration" > parameter group "Connection parameters". 3. In type of configuration, select "Use configured connection"
CM 1542-5
28
Operating Instructions, 10/2016, C79000-G8976-C290-03
Configuration, programming 4.3 Program blocks for FDL
4. In connection type, select "FDL". 5. Under End point, select the partner end point. Use one of the two following partner end
points. CPU S7-1500 with CM 1542-5 Unspecified 6. Select the following interfaces under Interfaces: Local: PROFIBUS interface of CM 1542-5 Specified partner: PROFIBUS interface of CM 1542-5 7. Select the setting <new> under Connection data. This creates a new connection between the two partners. The figure below shows a fully configured FDL connection in STEP 7.
Figure 4-1 Configuring the FDL connection
8. Configure the further block parameters.
Setting up a programmed FDL connection using TSEND_C
To set up a programmed FDL connection in STEP 7, follow the steps below: 1. Create a TSEND_C instruction in the program editor.
You will be prompted to create the relevant data block. 2. Program the block parameters.
Interconnect the CONNECT parameter of the TCON instruction with the previously created variable "FDL_Connection" of the data type TCON_FDL. The FDL connection is established and used for sending and receiving data.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
29
Configuration, programming 4.3 Program blocks for FDL
Setting up an FDL connection in the user program
For programmed communication via FDL, you need to create and program the data block of the system data type TCON_FDL yourself and call it directly at the instruction. Follow these steps: 1. Create a global data block in the project tree. 2. In the global data block create a variable of the data type TCON_FDL.
The following example shows the global data block "FDL_connection" with the variable "FDL_connection" of the data type TCON_FDL.
Figure 4-2 Programming an FDL connection
3. In the data block program the parameters of the FDL cconnection, e.g. the PROFIBUS addresses.
The type of connection is specified with the "ServiceId" parameter. You will find details in the STEP 7 information system.
4. Create a TCON instruction in the program editor.
5. Interconnect the CONNECT parameter of the TCON instruction with the previously created variable "FDL_Connection" of the data type TCON_FDL.
In the example below, the CONNECT parameter of the TCON instruction is interconnected with the tag "FDL_Connection" (data type TCON_FDL).
Figure 4-3 Example: TCON instruction for FDL connection
CM 1542-5
30
Operating Instructions, 10/2016, C79000-G8976-C290-03
Configuration, programming 4.3 Program blocks for FDL
The parameters of TCON_FDL You will find information on the parameters of TCON_FDL in the STEP 7 information system. Note the special features of the parameters "RemoteSAP" and "RemotePBAddress": RemoteSAP = 255, RemotePBAddress = 255
If you program the value 255 both for RemoteSAP and RemotePBAddress, data transfer from every partner will be accepted regardless of its SAP. RemoteSAP = 255, RemotePBAddress = specified If you program the value 255 for RemoteSAP and assign a specified value for RemotePBAddress, data transfer from the specified partner via each of its programmed SAPs will be accepted via this connection. RemoteSAP = specified, RemotePBAddress = 255 If you program a specific value for RemoteSAP and assign the value 255 for RemotePBAddress, data transfer from every partner with the specified address will be accepted via this connection.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
31
Configuration, programming 4.3 Program blocks for FDL
CM 1542-5
32
Operating Instructions, 10/2016, C79000-G8976-C290-03
Diagnostics and upkeep
5
5.1
Diagnostics options
Diagnostics options
You have the following diagnostics options available for the module:
The LEDs of the module
Diagnostics using the LEDs is the first means of narrowing down errors/faults. To narrow the error/fault down even further, evaluate the message on the display of the S7-1500 CPU. If errors/faults occur, you can also identify them using the Web server or by evaluating the diagnostics buffer of the CPU. The diagnostics buffer of the CPU contains plain language information about the error/fault that has occurred. The diagnostics buffer is accessible via STEP 7, the display and the Web server.
For information on the LED displays, refer to the section LEDs (Page 16).
STEP 7: The "Diagnostics" tab in the Inspector window
Here, you can obtain the following information on the selected module:
Entries in the diagnostics buffer of the CPU
Information on the online status of the module
STEP 7: Diagnostics functions in the "Online > Online and diagnostics" menu
Here, you can obtain static information on the selected module:
General information on the module
Diagnostics status
Information on the PROFIBUS interface
You can obtain further information on the diagnostics functions of STEP 7 in the STEP 7 online help.
DP diagnostics
The DP diagnostics of the CM is described below.
The evaluation of diagnostics data records requested by the DP master and the diagnostics interrupts or diagnostics alarms of the DP slaves is handled in the user program of the DP master station.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
33
Diagnostics and upkeep 5.2 DP slave diagnostics
5.2
DP slave diagnostics
DP-V1 slave: Diagnostics interrupt
The diagnostics data is transferred as a diagnostics interrupt. Diagnostics interrupts must be acknowledged by the DP master.
Supported diagnostics functions
The CM 1542-5 supports the following blocks of DP diagnostics: Standard diagnostics (6 bytes) Identifier-related diagnostics (2 to 17 bytes), depending on the number of configured
transfer areas Module status (5 to 35 bytes), depending on the number of configured transfer areas If it exists: Diagnostics interrupt (8 bytes)
User program (DP master)
To read out the diagnostics data of the DP slave (DP single diagnostics), use the "DPNRM_DG" instruction on the DP master.
Diagnostics interrupts of DP-V1 slaves are evaluated in the user program of the master using the "RALRM" instruction.
You will find the required parameter assignment for the instructions in the STEP 7 online help.
Below, there is an overview of the structure of the diagnostics data.
Overview of standard diagnostics
Byte 0 1 2 3
4...5
Standard diagnostics Meaning
Station status 1 Station status 2 Station status 3 Master address Vendor ID of the slave
Overview of device-specific diagnostics
The device-specific diagnostics data depends on the protocol variant operating on the DP slave:
DP-V1 slave
CM 1542-5
34
Operating Instructions, 10/2016, C79000-G8976-C290-03
Diagnostics and upkeep 5.3 Standard diagnostics
Table 5- 1
Byte 0 1
2 3
4...62
Overview of device-specific diagnostics of the CM with DP-V1 slaves
Device-specific diagnostics
Meaning
Header
Variant Interrupt type
Variant Status type
Slot number
Variant Interrupt specifier
Variant Status specifier
Module-specific diagnostics data
5.3
Standard diagnostics
The coding of the standard diagnostics bytes is explained below.
Byte 0: Station status 1
Table 5- 2 Structure of station status byte 1
Bit no. 7
6 5 4 3
2 1 0
Name Master_Lock
Parameter_Fault Invalid_Slave_Response Service_Not_Supported Ext_Diag
Slave_Config_Check_Fault Station_Not_Ready Station_Non_Existent
Explanation The DP slave was assigned parameters by a different DP master. The DP slave can only be read by the configured productive DP master. This bit is set by the DP master when its bus address differs from the configured address.
The last received parameter assignment frame was bad or not permitted. The DP slave sets this bit. Solution: Check the parameter settings for illegal parameters.
This bit is set by the DP master when no plausible response has been received from the DP slave.
This bit is set by the DP master when the master has requested a function that is not supported by the DP slave. Solution: Change the parameter setting to disable the function on the master.
This bit is set by the slave.
· Bit =1: There is diagnostics data in the slave-specific diagnostics area. The diagnostics data can be evaluated in the user program of the master.
· Bit =0: There may be status information in the slave-specific diagnostics area. The status information can be evaluated in the user program of the master.
The configuration data sent by the DP master is rejected by the DP slave. Cause: Configuration error. Solution: Change configuration.
The DP slave is not ready for productive data exchange. This is a temporary status that cannot be influenced by the DP master.
The DP slave is not reacting on the bus. This bit is set by the DP master 1 (the slave sets this bit permanently to 0). If the bit is set, the diagnostic bits have the state of the last diagnostics alarm or the initial value.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
35
Diagnostics and upkeep 5.3 Standard diagnostics
Byte 1: Station status 2
Table 5- 3 Structure of station status byte 2
Bit no. 7
6 5 4 3 2
1
Name Deactivated
Reserved Sync_Mode Freeze_Mode Watchdog_On Status_From_Slave
Static_Diag
0
Parameter_Request
Explanation The DP slave was identified as being not active in the local parameter record and it is not polled cyclically.
- reserved -
The DP slave is in SYNC mode. The bit is set by the slave.
The DP slave is in FREEZE mode. The bit is set by the slave.
Watchdog monitoring is active on the DP slave. The bit is set by the slave.
Bit =1: The diagnostics information comes from the DP slave. The bit is set permanently to 1 by the slave.
Static diagnostics If the DP slave sets this bit, the DP master must fetch diagnostics data from the DP slave until the DP slave resets the bit. The DP slave sets this bit, for example when it is not capable of data transfer.
The DP slave sets this bit when it needs to have new parameters assigned and be reconfigured. If bit 0 and bit 1 are both set, bit 0 has the higher priority.
Byte 2: Station status 3
Table 5- 4 Structure of station status byte 3
Bit no. 7
6...0
Name Ext_Data_Overflow
Reserved
Explanation If this bit is set, there is more diagnostics information available than indicated in the diagnostics data. This data cannot be displayed.
- reserved -
Byte 3: Master address
The address of the DP master that assigned parameters to this DP slave is entered in the "Master_Add" byte.
If the DP slave did not have parameters assigned to it by any DP master, the DP slave sets the address 255 in this byte.
Bytes 4 and 5: Vendor ID of the slave ("Ident_Number")
The vendor ID ("Ident_Number") for the DP slave type is entered in bytes 4 and 5. This identifier can be used to identify the slave.
The more significant part of the value is in byte 5.
CM 1542-5
36
Operating Instructions, 10/2016, C79000-G8976-C290-03
Diagnostics and upkeep 5.4 Device-specific diagnostics in DP-V1
5.4
Device-specific diagnostics in DP-V1
There are two variants of device-specific diagnostics with DP-V1 slaves:
Interrupt type
Status type
The two variants differ from each other in the coding of byte 1, bit 7 of the device-specific diagnostics data. The difference is component-specific.
Byte 0: Header
The two most significant bits have the value 00. This identifies the "module-specific diagnostics data" field (see bytes 4... 62) as a whole.
The remaining six bits indicate the length of the data field including byte 0.
Byte 1: Variant "Interrupt type"
Table 5- 5 Structure of byte 1 of the device-specific diagnostics (variant "interrupt type")
Bit no. 7
6...0
Value 0 Alarm_Type 0 1 2 3 4 5 6 7...31 32...126 127
Meaning Interrupt
Meaning
- reserved Diagnostics interrupt Hardware interrupt Pull interrupt Plug interrupt Status interrupt Update interrupt - reserved Vendor-specific - reserved -
If status interrupts are received in quick succession, older status interrupts may be overwritten by newer interrupts.
Byte 1: Variant "Status type"
Table 5- 6 Structure of byte 1 of the device-specific diagnostics (variant "status type")
Bit no. 7
Value 1
Meaning Meaning Status information
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
37
Diagnostics and upkeep 5.4 Device-specific diagnostics in DP-V1
Bit no. 6...0
Status_Type 0 1 2 3...31 32...126 127
Meaning
- reserved Status information Modul_Status (see also bytes 4...62) - reserved Vendor-specific - reserved -
Byte 2: Slot number
Slot number (1...n) of the slave module 0 is the placeholder for the entire device.
Byte 3: Variant "Interrupt specifier"
Table 5- 7 Structure of byte 3 of the device-specific diagnostics (variant "interrupt specifier")
Bit no. 7...3 2
Seq_No Add_Ack
1...0 Alarm_Specifier 0 1
2
3
Meaning Unique identifier of an interrupt alarm If this bit is set, the DP-V1 master is indicating that this interrupt expects an acknowledgement in the form of a WRITE job.
No further distinction Interrupt appears, slot disrupted The slot generates an interrupt due to an error. Interrupt disappears, slot OK The slot generates the interrupt and indicates that it has no further errors. Interrupt disappears, slot still disrupted The slot generates an interrupt and indicates that it has further errors.
Byte 3: Variant "Status specifier"
Table 5- 8 Structure of byte 3 of the device-specific diagnostics (variant "status specifier")
Bit no. 7...2 1...0
- reserved Status_Specifier 0 1 2 3
Meaning
No further distinction Status appears Status disappears - reserved -
CM 1542-5
38
Operating Instructions, 10/2016, C79000-G8976-C290-03
Diagnostics and upkeep 5.5 DP diagnostics frames when the CPU is in STOP
Bytes 4...62: Module-specific diagnostics: General coding
This byte contains data with module-specific information that is described in the relevant module documentation. The relevant module is identified by the slot (byte 2).
Bytes 4...62: Module-specific diagnostics with "status type" and "module status"
With the variant "status type" of the device-specific diagnostics of DP-V1 slaves (see byte 1, bit 7) and the setting "Modul_Status" (see byte 1, bits 0...6), there are two status bits here for each slot (= module). Bits not required are set to 0.
Table 5- 9 Structure of the bytes for module-specific diagnostics data
Byte Bit
4 5 ... 62
7
6
Module status 4
Module status 8
...
Module status 236
Bit assignment
5
4
3
2
Module status 3
Module status 2
Module status 7
Module status 6
...
...
Module status 235 Module status 234
The status bits are coded as follows:
1
0
Module status 1
Module status 5
...
Module status 233
Table 5- 10 Meaning of the values of the status bits
Value 00 01 10 11
Meaning Data valid Data invalid - error (for example short-circuit) Data invalid - wrong module Data invalid - no module plugged in
5.5
DP diagnostics frames when the CPU is in STOP
DP diagnostics frames when the CPU is in STOP
All diagnostics frames from DPV0 standard slaves and all DP interrupt frames from DPS7/DPV1 standard slaves arriving when the CPU is in STOP are forwarded to the CPU. During module startup, the diagnostics frames must then be evaluated by a suitable user program.
5.6
Replacing a module without a programming device
General procedure
The configuration data of the CM is stored on the CPU. This means that this module can be replaced by a module of the same type (identical article number) without using a PG.
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
39
Diagnostics and upkeep 5.6 Replacing a module without a programming device
CM 1542-5
40
Operating Instructions, 10/2016, C79000-G8976-C290-03
Technical specifications
6
Note the information in the System description of SIMATIC S7-1500 (Page 7).
In addition to the information in the system description, the following technical specifications apply to the module.
Technical specifications - CM 1542-5 Product name Article number Connection to PROFIBUS · Number
· Design
CM 1542-5 6GK7 542-5DX00-0XE0
1 x PROFIBUS interface D-sub socket (RS-485)
· Transmission speed
Electrical data Power supply · Via S7-1500 backplane bus
9.6 kbps, 19.2 kbps, 45.45 kbps, 93.75 kbps, 187.5 kbps, 500 kbps, 1.5 Mbps, 3 Mbps, 6 Mbps, 12 Mbps
15 V
Current consumption · From backplane bus
200 mA
Power dissipation Insulation Insulation tested with Design, dimensions and weight Module format Degree of protection Weight Dimensions (W x H x D) Installation options Product functions *
3 W
707 VDC (type test)
Compact module S7-1500, single width IP20 Approx. 400 g 35 x 142 x 129 mm Mounting in an S7-1500 rack
* You will find the product functions in the section Configuration limits and performance data (Page 12).
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
41
Technical specifications
CM 1542-5
42
Operating Instructions, 10/2016, C79000-G8976-C290-03
Approvals
7
Approvals issued
Note Issued approvals on the type plate of the device
The specified approvals - with the exception of the certificates for shipbuilding - have only been obtained when there is a corresponding mark on the product. You can check which of the following approvals have been granted for your product by the markings on the type plate. The approvals for shipbuilding are an exception to this.
Certificates for shipbuilding and national approvals
The device certificates for shipbuilding and special national approvals can be found in Siemens Industry Online Support on the Internet: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15671/cert)
EC declaration of conformity
The product meets the requirements and safety objectives of the following EC directives and it complies with the harmonized European standards (EN) for programmable logic controllers which are published in the official documentation of the European Union.
2014/34/EU (ATEX explosion protection directive)
Directive of the European Parliament and the Council of 26 February 2014 on the approximation of the laws of the member states concerning equipment and protective systems intended for use in potentially explosive atmospheres, official journal of the EU L96, 29/03/2014, pages. 309-356
2014/30/EU (EMC)
EMC directive of the European Parliament and of the Council of February 26, 2014 on the approximation of the laws of the member states relating to electromagnetic compatibility; official journal of the EU L96, 29/03/2014, pages. 79-106
2011/65/EU (RoHS)
Directive of the European Parliament and of the Council of 8 June 2011 on the restriction of the use of certain hazardous substances in electrical and electronic equipment
The EC Declaration of Conformity is available for all responsible authorities at:
Siemens Aktiengesellschaft Division Process Industries and Drives Process Automation DE-76181 Karlsruhe Germany
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
43
Approvals
IECEx
You will find the EC Declaration of Conformity on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15671/cert)
The product meet the requirements of explosion protection according to IECEx. IECEx classification: Ex nA IIC T4 Gc The product meets the requirements of the following standards: EN 60079-0
Hazardous areas - Part 0: Equipment - General requirements EN 60079-15
Explosive atmospheres - Part 15: Equipment protection by type of protection 'n' You can see the current versions of the standards in the IECEx certificate that you will find on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15671/cert) The conditions must be met for the safe deployment of the CP according to the section Notes on use in hazardous areas according to ATEX / IECEx (Page 20). You should also note the information in the document "Use of subassemblies/modules in a Zone 2 Hazardous Area" that you will find on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/view/78381013)
ATEX
The product meets the requirements of the EC directive:2014/34/EC "Equipment and Protective Devices for Use in Potentially Explosive Atmospheres". Applied standards: EN 60079-0
Hazardous areas - Part 0: Equipment - General requirements EN 60079-15
Explosive atmospheres - Part 15: Equipment protection by type of protection 'n' The current versions of the standards can be seen in the EC Declaration of Conformity, see above. ATEX approval: II 3 G Ex nA IIC T4 Gc Test number: DEKRA 12 ATEX 0240X The conditions must be met for the safe deployment of the CP according to the section Notes on use in hazardous areas according to ATEX / IECEx (Page 20).
CM 1542-5
44
Operating Instructions, 10/2016, C79000-G8976-C290-03
EMC
RoHS c(UL)us
Approvals
You should also note the information in the document "Use of subassemblies/modules in a Zone 2 Hazardous Area" that you will find here: In the SIMATIC NET Manual Collection in
"All documents" > "Use of subassemblies/modules in a Zone 2 Hazardous Area" On the Internet at the following address:
Link: (https://support.industry.siemens.com/cs/ww/en/view/78381013)
Until 19.04.2016 the CP meets the requirements of the EC Directive 2014/30/EU "Electromagnetic Compatibility" (EMC directive). Applied standards: EN 61000-6-4
Electromagnetic compatibility (EMC) - Part 6-4: Generic standards - Emission standard for industrial environments EN 61000-6-2 Electromagnetic compatibility (EMC) - Part 6-2: Generic standards - Immunity for industrial environments
The CP meets the requirements of the EC directive 2011/65/EU on the restriction of the use of certain hazardous substances in electrical and electronic equipment. Applied standard: EN 50581:2012
Applied standards: Underwriters Laboratories, Inc.: UL 61010-1 (Safety Requirements for Electrical
Equipment for Measurement, Control, and Laboratory Use - Part 1: General Requirements) IEC/UL 61010-2-201 (Safety requirements for electrical equipment for measurement, control and laboratory use. Particular requirements for control equipment) Canadian Standards Association: CSA C22.2 No. 142 (Process Control Equipment) Report / UL file: E 85972 (NRAG, NRAG7)
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
45
Approvals
cULus Hazardous (Classified) Locations
Underwriters Laboratories, Inc.: cULus IND. CONT. EQ. FOR HAZ. LOC. Applied standards: ANSI ISA 12.12.01 CSA C22.2 No. 213-M1987 APPROVED for Use in: Cl. 1, Div. 2, GP. A, B, C, D T3...T6 Cl. 1, Zone 2, GP. IIC T3...T6 Ta: Refer to the temperature class on the type plate of the CP Report / UL file: E223122 (NRAG, NRAG7) CULUS Listed 7RA9 IND. CONT. EQ. FOR HAZ. LOC. Note the conditions for the safe deployment of the product according to the section Notes on use in hazardous areas according to UL HazLoc (Page 20).
Note For devices with C-PLUG memory: The C-PLUG memory module may only be inserted or removed when the power is off.
CSA FM
CSA Certification Mark Canadian Standard Association (CSA) nach Standard C 22.2 No. 142: Certification Record 063533C-000
Factory Mutual Approval Standards: Class 3600 Class 3611 Class 3810 ANSI/ISA 61010-1 Report Number 3049847 Class I, Division 2, Group A, B, C, D, T4 Class I, Zone 2, Group IIC, T4 You will find the temperature class on the type plate on the module.
CM 1542-5
46
Operating Instructions, 10/2016, C79000-G8976-C290-03
Approvals
Australia - RCM
The product meets the requirements of the AS/NZS 2064 standards (Class A).
AVIS CANADIEN
Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada. This class A digital device meets the requirements of the Canadian standard ICES-003.
Current approvals
SIMATIC NET products are regularly submitted to the relevant authorities and approval centers for approvals relating to specific markets and applications. If you require a list of the current approvals for individual devices, consult your Siemens contact or check the Internet pages of Siemens Industry Online Support: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15671/cert)
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
47
Approvals
CM 1542-5
48
Operating Instructions, 10/2016, C79000-G8976-C290-03
Index
B
Bus topology, 11
C
Cable length, 12 Characteristic data (DP), 13 Characteristic data (FDL), 14 Characteristics (S7 communication), 14 CM, 3 Configuration, 15 Configuration data
Downloading, 15 Connection resources of the CPU, 14
F
FDL connections, 10 Field device parameter assignment, 10 Firmware
CM, 16 CPU, 16
G
Glossary, 4
H
HMI functions, 14
D
Data record routing, 10, 14 Diagnostics options, 33 Diagnostics repeater (DP slave), 11 Diagnostics requests, 11 Diagnostics requirements, 13 Direct data exchange, 10 Downloading project data, 21 Downloads, 8 DP diagnostics, 33 DP diagnostics frames when the CPU is in STOP, 39 DP master
Master mode, 23 DP master (class 1), 10, 11 DP masters (class 2), 11 DP mode
General characteristic data, 13 DP slave, 10, 11
Slave mode, 23 DP slaves
Quantity, 13
I
Installation and commissioning, 21 Instruction
DE_ACT, 11
M
Measured values Transfer/reaction times, 15
Module replacement, 39
N
Number of operable CMs, 12
O
Operating mode of the CPU, 22 OUC (Open User Communication), 26
E
EMC - electromagnetic compatibility, 43
P
PG functions, 14 PG/OP communication, 10 PROFIBUS
DP-V0 and DPV1 standard, 10
CM 1542-5
Operating Instructions, 10/2016, C79000-G8976-C290-03
49
Index
PROFIBUS DP EN 50170 DPV1, 10
PROFIBUS interface, 22
R
RS-485 interface, 22 RS-485 socket, 21
S
S7 communication, 10 S7 connections, 10, 14 S7 routing function, 23 Safety notices, 19 Siemens DP slave, 10 SIMATIC NET glossary, 4 SIMATIC NET Manual Collection, 8 Startup parameters DP, 13 STEP 7, 3 SYNC/FREEZE, 10
T
TCON_FDL, 26, 30 Time master, 11 Time slave, 11 Time synchronization, 23 Time-of-day synchronization, 11 Transmission speed, 12
V
Version history, 8
W
Web diagnostics, 12 S7 connections, 12
CM 1542-5
50
Operating Instructions, 10/2016, C79000-G8976-C290-03
CP 1542-5
SIMATIC NET S7-1500 - PROFIBUS CP 1542-5
Manual
_Pr_ef_ac_e_______________
_Gu_id_e_to_t_he_d_oc_u_m_en_ta_tio_n____1_
_Pr_od_u_ct_o_ve_rv_ie_w _________2_
_Fu_n_cti_on_a_l c_ha_ra_c_te_ris_tic_s_____3_
_Re_q_ui_re_m_en_ts_fo_r _us_e_______4_
_Ccoo_mn_nme_isc_stiino_gn_iunp_g /__________5_
Interrupts, diagnostics
messages, error and
6
system alarms
_Te_ch_n_ic_al_sp_e_cif_ic_at_ion_s______7_
_Ap_p_ro_va_ls_____________8_
11/2014
C79000-G8976-C326-03
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Process Industries and Drives Postfach 48 48 90026 NÜRNBERG GERMANY
C79000-G8976-C326-03 11/2014 Subject to change
Copyright © Siemens AG 2013 - 2014. All rights reserved
Preface
Purpose of the documentation
This device manual supplements the system manual of the S7-1500 automation system and the function manuals. All functions that go beyond the system are described in the system manual.
With the information in this manual and the system manual, you will be able to commission the CP 1542-5.
See also Guide to the documentation (Page 7)
Conventions
Make sure you read the special notices below:
Note A notice contains important information on the product described in the documentation, handling the product or about parts of the documentation you should pay particular attention to.
Names
In this document, the term "CP" is also used instead of the full product name. The name STEP 7 is used to mean the STEP 7 Professional configuration tool.
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the SIMATIC NET glossary. You will find the SIMATIC NET glossary here: SIMATIC NET Manual Collection or product DVD
The DVD ships with certain SIMATIC NET products. On the Internet under the following entry ID:
50305045 (http://support.automation.siemens.com/WW/view/en/50305045)
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
3
Preface
License conditions
Note Open source software Read the license conditions for open source software carefully before using the product.
You will find license conditions in the following documents on the supplied data medium: DOC_OSS-S7CMCP_74.pdf DOC_OSS-CP1542-5_76.pdf
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, solutions, machines, equipment and/or networks. They are important components in a holistic industrial security concept. With this in mind, Siemens' products and solutions undergo continuous development. Siemens recommends strongly that you regularly check for product updates.
For the secure operation of Siemens products and solutions, it is necessary to take suitable preventive action (e.g. cell protection concept) and integrate each component into a holistic, state-of-the-art industrial security concept. Third-party products that may be in use should also be considered. For more information about industrial security, visit http://www.siemens.com/industrialsecurity.
To stay informed about product updates as they occur, sign up for a product-specific newsletter. For more information, visit http://support.automation.siemens.com.
Trademarks
The following and possibly other names not identified by the registered trademark sign ® are registered trademarks of Siemens AG:
SIMATIC NET, CP 1542-5
CP 1542-5
4
Manual, 11/2014, C79000-G8976-C326-03
Table of contents
Preface ................................................................................................................................................... 3
1 Guide to the documentation .................................................................................................................... 7
2 Product overview .................................................................................................................................... 9
2.1
Properties .................................................................................................................................. 9
2.2
Further functions .....................................................................................................................11
3 Functional characteristics...................................................................................................................... 13
3.1
Transmission speeds supported.............................................................................................13
3.2
Characteristic data of the DP interface ...................................................................................13
3.3
Characteristics of S7 communication .....................................................................................14
4 Requirements for use............................................................................................................................ 15
4.1
Configuration limits .................................................................................................................15
4.2
Project engineering .................................................................................................................15
4.3
Programming ..........................................................................................................................15
5 Connecting up / commissioning............................................................................................................. 17
5.1
Important notes on using the device.......................................................................................17
5.2
Installing and commissioning the CP 1542-5 .........................................................................19
5.3
Replacing a module without a programming device...............................................................21
5.4
Mode of the CPU - effect on the CP .......................................................................................22
6 Interrupts, diagnostics messages, error and system alarms................................................................... 23
6.1
Status and error display of the CP..........................................................................................23
6.2
Diagnostics options.................................................................................................................25
6.3
DP slave diagnostics...............................................................................................................25
6.4
Standard diagnostics ..............................................................................................................27
6.5
Device-specific diagnostics in DP-V1 .....................................................................................29
6.6
DP diagnostics frames when the CPU is in STOP .................................................................32
7 Technical specifications ........................................................................................................................ 33
8 Approvals.............................................................................................................................................. 35
Index..................................................................................................................................................... 39
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
5
Table of contents
CP 1542-5
6
Manual, 11/2014, C79000-G8976-C326-03
Guide to the documentation
1
Introduction
The documentation of the SIMATIC products has a modular structure and covers topics relating to your automation system.
The complete documentation for the S7-1500 system consists of a system manual, function manuals and device manuals.
The STEP 7 information system (online help) also supports you when configuring and programming your automation system.
Overview of the documentation on communication with S7-1500
The following table lists additional documents that supplement this description of the CP 1542-5 and are available in the Internet.
Table 1- 1 Documentation for the CP 1542-5
Topic
System description
Documentation
System manual: S7-1500 Automation System (http://support.automation.siemens.com/WW/vi ew/en/59191792)
Most important contents · Application planning · Installation · Connecting
· Commissioning
Module properties Device manual: Power supplies
· Connecting
(http://support.automation.siemens.com/WW/vi ew/en/57251228)
·
Parameter assignment/ addressing
Device manual: Signal modules (http://support.automation.siemens.com/WW/vi · Interrupts, error messages,
ew/en/59174020)
diagnostics and system
alarms
· Technical specifications
· Dimensional drawing
System diagnostics
Function manual: System diagnostics
· Overview
(http://support.automation.siemens.com/WW/vi ew/en/59192926)
·
Diagnostics evaluation for hardware/software
Communication
Function manual: Communication
· Overview
(http://support.automation.siemens.com/WW/vi
ew/en/59192925)
Function manual: PROFINET with STEP 7 V12 · PROFINET basics
(http://support.automation.siemens.com/WW/vi ew/en/49948856)
·
PROFINET functions
· PROFINET diagnostics
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
7
Guide to the documentation
Topic
Interference-free installation of control systems
Memory concept
Cycle and response times Analog value processing
Documentation
Most important contents
Function manual: PROFIBUS with STEP 7 V12 ·
(http://support.automation.siemens.com/WW/vi ew/en/59193579)
·
·
PROFIBUS basics PROFIBUS functions PROFIBUS diagnostics
Function manual: Web Server
· Function
(http://support.automation.siemens.com/WW/vi ew/en/59193560)
·
Operation
Function Manual: Interference-free installation · Basics
of control systems (http://support.automation.siemens.com/WW/vi
·
Electromagnetic compatibil-
ew/en/59193566)
ity
· Lightning protection
· Housing selection
Function manual: Structure and Use of the
· Design
CPU Memory (http://support.automation.siemens.com/WW/vi
·
Principle of operation
ew/en/59193101)
· Use
Function manual: Cycle and Response Times · Basics
(http://support.automation.siemens.com/WW/vi ew/en/59193566)
·
Calculations
Function manual: Analog value processing
· Wiring options
(http://support.automation.siemens.com/WW/vi ew/en/59193559)
·
Tables of measured values
SIMATIC manuals
All current manuals for SIMATIC products are available for download free of charge from the Internet (http://www.siemens.com/automation/service&support).
CP/CM documentation in the Manual Collection (article number A5E00069051)
The "SIMATIC NET Manual Collection" DVD contains the device manuals and descriptions of all SIMATIC NET products current at the time it was created. It is updated at regular intervals.
Version History / Current Downloads for the SIMATIC NET S7 CPs/CMs
The "Version History/Current Downloads for SIMATIC NET S7 CPs (PROFIBUS)" provides information on all CPs available up to now for SIMATIC S7 (PROFIBUS). An up-to-date version of this document can be found on the Internet (http://support.automation.siemens.com/WW/view/en/9836605)
CP 1542-5
8
Manual, 11/2014, C79000-G8976-C326-03
Product overview
2
2.1
Properties
Article number, validity and product names
This description contains information on the following product:
CP 1542-5 Article number6GK7 542-5FX00-0XE0 Hardware product version 1 Firmware version V1.0
Communications processor for connecting SIMATIC S7-1500 to PROFIBUS DP.
View of the CP
LEDs Type plate PROFIBUS interface: 1 x 9-pin D-sub female connector (RS-485)
Figure 2-1 View of the CP 1542-5 with closed (left) and open (right) front cover
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
9
Product overview 2.1 Properties
Application
The communications processor CP 1542-5 is intended for operation in an S7-1500 automation system. The CP 1542-5 allows the connection of an S7-1500 station to a PROFIBUS fieldbus system.
Supported communications services
In its current configuration, the CP 1542-5 supports the following communications services: PROFIBUS DP master (class 1)
PROFIBUS DP according to EN 50170 DPV1, DP master DP master mode for DP slaves complying with the PROFIBUS DPV0 and DPV1
standard DP master mode for Siemens DP slaves Direct data exchange (DP slave to DP slave)
As a DP master, the CP 1542-5 is capable of enabling direct data exchange for "its" DP slaves. SYNC / FREEZE The outputs or inputs can be synchronized by the user program using system function DPSYNC_FR. PROFIBUS DP slave PROFIBUS DP according to EN 50170 DPV1, DP slave
Note DP master or DP slave Please note, however: The CP 1542-5 only supports operation either as DP master or DP slave.
S7 communication PG communication for uploading / downloading of S7 configuration, diagnostics and routing Operator control and monitoring functions (HMI communication) Data exchange via S7 connections
The services of the CP 1542-5 listed above can be used independently at the same time.
CP 1542-5
10
Manual, 11/2014, C79000-G8976-C326-03
Product overview 2.2 Further functions
2.2
Further functions
Enabling /disabling DP slave - in the standard system
DP slaves can be activated and deactivated by the user program using system function D_ACT_DP.
Diagnostics requests
As a DP master (class 1), the CP 1542-5 supports diagnostics requests of a DP master (class 2).
Getting the bus topology in a DP master system
The CP 1542-5 operating as DP master supports the measurement of the PROFIBUS bus topology in a DP master system using a diagnostics repeater (DP slave). System function DP_TOPOL in the user program can instruct diagnostics repeaters to measure the PROFIBUS BUS topology in a DP master system.
Time-of-day synchronization - time master or time slave
The CP 1542-5 can be enabled for time-of-day synchronization. As an alternative, the CP can be configured as time master or time slave on PROFIBUS. Time master: The CP is synchronized using the time of day in the S7-1500 station and
outputs the time of day on PROFIBUS. The output interval can be set. Time slave: The CP receives time-of-day frames on PROFIBUS and outputs the time
within the S7-1500 station. The output interval within the S7-1500 station is set permanently to 10 seconds.
Note Recommendation for setting the time It is advisable to set the time-of-day master so that time-of-day frames are sent at intervals of approximately 10 seconds. This achieves as small a deviation as possible between the internal time and the absolute time.
Web diagnostics
With the aid of Web diagnostics of the CPU, you read the diagnostics data from an S7 station via the Web browser on the PG/PC. In terms of the CP, the Web pages provide the following information: Module and status information Special information on the DP master system (status of the DP slaves)
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
11
Product overview 2.2 Further functions
CP 1542-5
12
Manual, 11/2014, C79000-G8976-C326-03
Functional characteristics
3
Note Measured values of transfer or reaction times
Measurements of transfer and reaction times in Ethernet, PROFIBUS and PROFINET networks for a series of configurations can be found on the Internet (http://support.automation.siemens.com/WW/view/en/25209605)
3.1
Transmission speeds supported
The transmission speed is set with the SIMATIC STEP 7 configuration software.
Note Remember the cable length The permitted cable length must be kept to depending on the transmission speed.
Refer to the information in the section Technical specifications (Page 33)
3.2
Characteristic data of the DP interface
General characteristic data
No special program blocks are required for DP mode. The interfacing to the distributed I/O is by direct I/O access or using program blocks (SFCs/SFBs) of the CPU.
Table 3- 1 General characteristic data of DP mode
Characteristic Number of operable DP slaves Max. size of the input area of all DP slaves Max. size of the output area of all DP slaves Maximum size of the input area per DP slave Maximum size of the output area per DP slave Max. size of the consistent area for a module
Explanation / values 32 2 Kbytes 2 Kbytes 244 bytes 244 bytes 128 bytes
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
13
Functional characteristics 3.3 Characteristics of S7 communication
Diagnostics requests
As a DP master (class 1), the CP 1542-5 supports diagnostics requests of a DP master (class 2).
DP startup behavior
Note Increasing the default value for startup parameters - configuration of the CPU In some situations, it is necessary to increase the default value for the startup parameter "Parameter assignment time for the distributed I/O" in the configuration of the CPU: · When there is a large number of modules (DP slaves) configured that can be assigned
parameters. · When a high value is configured for the constant bus cycle time in the network properties
of the PROFIBUS DP line.
3.3
Characteristics of S7 communication
General characteristic data
The following information is important when operating S7 connections:
Table 3- 2 General characteristics of S7 connections
Characteristic
Number of S7 connections that can be operated via PROFIBUS
Explanation / values Operable in total: Max. 16 The value depends on the S71500 CPU being used.
CP 1542-5
14
Manual, 11/2014, C79000-G8976-C326-03
Requirements for use
4
4.1
Configuration limits
When using the CP type described here, the following limits apply:
The number of CPs that can be operated in a rack depends on the CPU type being used.
Note the information in the documentation of the CPU, see Guide to the documentation (Page 7)
4.2
Project engineering
Configuration and downloading the configuration data
When the configuration data is downloaded to the CPU, the CP 1542-5 is supplied with the configuration information. The configuration data can be downloaded to the CPU via PROFIBUS or any PROFINET interface of the S7-1500 station.
The following version of STEP 7 is required:
STEP 7 version and additional modules STEP 7 Professional V12 SP1
Functions of the CP
The full functionality of the CP 1542-5 (6GK7 542 5FX00 0XE0) can be configured
4.3
Programming
Program blocks
For communications services, there are preprogrammed program blocks (instructions) available as the interface in your STEP 7 user program.
Table 4- 1 Instructions for PROFIBUS DP
System blocks and system functions DPSYC_FR DPNRM_DG DP_TOPOL WRREC
Meaning when used with CP
DP slaves synchronize / freeze inputs (SYNC/FREEZE instruction) Reading the diagnostics data of a DP slave Detecting the topology for the DP master system Writing the data record of a DP slave
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
15
Requirements for use 4.3 Programming
System blocks and system functions RDREC GETIO SETIO GETIO_PART SETIO_PART D_ACT_DP DPRD_DAT DPWR_DAT RALRM
Meaning when used with CP
Reading the data record of a DP slave Reading the process image of a DP standard slave Transferring the process image of a DP standard slave Reading the process image partition of a DP standard slave Transferring the process image partition of a standard DP slave Disable / enable DP slaves Reading consistent data of a DP standard slave Writing consistent data of a DP standard slave Event-driven reading of interrupt information (diagnostics, pull/plug, hardware interrupt) and DPV1-specific interrupts (update, status, vendorspecific interrupt)
Refer to the documentation of the program blocks in the online help of STEP 7
Calling program blocks (instructions) for distributed I/O
Several calls are necessary for the instructions of the distributed I/O.
The time required to process the job depends on load, round-trip time and transmission speed. If these instructions are called in a loop within one cycle, the cycle time could be exceeded.
Exceptions:
Only one call is required for the RALRM instruction "receive alarm".
Program blocks for DPV1 (according to the PNO standard) 1):
Instruction RDREC "Read data record from a DP slave" corresponds to SFC59 in terms of function
Instruction WRREC "Write data record to a DP slave" corresponds to SFC58 in terms of function
Instruction RALRM "Read interrupt information from a DP slave" - call in an interrupt OB
1) PNO: PROFIBUS Users Organization
See also
8797900 (http://support.automation.siemens.com/WW/view/en/8797900)
CP 1542-5
16
Manual, 11/2014, C79000-G8976-C326-03
Connecting up / commissioning
5
5.1
Important notes on using the device
Safety notices on the use of the device
The following safety notices must be adhered to when setting up and operating the device and during all associated work such as installation, connecting up, replacing devices or opening the device.
General notices
WARNING
Safety extra low voltage
The equipment is designed for operation with Safety Extra-Low Voltage (SELV) by a Limited Power Source (LPS). (This does not apply to 100 V...240 V devices.)
This means that only SELV / LPS complying with IEC 60950-1 / EN 60950-1 / VDE 0805-1 must be connected to the power supply terminals. The power supply unit for the equipment power supply must comply with NEC Class 2, as described by the National Electrical Code (r) (ANSI / NFPA 70). There is an additional requirement if devices are operated with a redundant power supply:
If the equipment is connected to a redundant power supply (two separate power supplies), both must meet these requirements.
General notices on use in hazardous areas
WARNING Risk of explosion when connecting or disconnecting the device EXPLOSION HAZARD DO NOT CONNECT OR DISCONNECT EQUIPMENT WHEN A FLAMMABLE OR COMBUSTIBLE ATMOSPHERE IS PRESENT.
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
17
Connecting up / commissioning 5.1 Important notes on using the device
WARNING Replacing components EXPLOSION HAZARD SUBSTITUTION OF COMPONENTS MAY IMPAIR SUITABILITY FOR CLASS I, DIVISION 2 OR ZONE 2.
WARNING Requirements for the cabinet/enclosure When used in hazardous environments corresponding to Class I, Division 2 or Class I, Zone 2, the device must be installed in a cabinet or a suitable enclosure.
WARNING Restricted area of application This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or nonhazardous locations only.
WARNING Restricted area of application This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.
WARNING LAN attachment A LAN or LAN segment with the attachments belonging to it should be within a single lowvoltage supply system and within a single building. Make sure that the LAN is in an of type A environment according to IEEE 802.3 or in a type 0 environment according to IEC TR 62101. Never establish a direct electrical connection to TNV networks (telephone network) or WANs (Wide Area Network).
General notices on use in hazardous areas according to ATEX
WARNING Requirements for the cabinet/enclosure To comply with EU Directive 94/9 (ATEX95), this enclosure must meet the requirements of at least IP54 in compliance with EN 60529.
CP 1542-5
18
Manual, 11/2014, C79000-G8976-C326-03
Connecting up / commissioning 5.2 Installing and commissioning the CP 1542-5
WARNING Suitable cables for temperatures in excess of 70 °C If the cable or conduit entry point exceeds 70°C or the branching point of conductors exceeds 80°C, special precautions must be taken. If the device is operated at ambient temperatures above 50°C, the permitted temperature range of the selected cable must be suitable for the temperatures actually measured.
WARNING Protection against transient voltage surges Provisions shall be made to prevent the rated voltage from being exceeded by transient voltage surges of more than 40%. This criterion is fulfilled, if supplies are derived from SELV (Safety Extra-Low Voltage) only.
5.2
Installing and commissioning the CP 1542-5
WARNING
Read the system manual "S7-1500 Automation System"
Prior to installation, connecting up and commissioning, read the relevant sections in the system manual "S7-1500 Automation System" (references to documentation, refer to the section Guide to the documentation (Page 7)).
Make sure that the power supply is turned off when installing/uninstalling the devices.
Configuration
Commissioning the CP fully is only possible if the STEP 7 project data is complete.
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
19
Connecting up / commissioning 5.2 Installing and commissioning the CP 1542-5
Procedure for installation and commissioning
Step 1
3 4 5
6
Execution
Notes and explanations
When installing and connecting up, keep to the procedures described for installing I/O modules in the system manual "S7-1500 Automation System".
Connect the CP to PROFIBUS via the Underside of the CP RS-485 socket.
Turn on the power supply.
Close the front covers of the module and keep them closed during operation.
The remaining steps in commissioning involve downloading the STEP 7 project data.
The STEP 7 project data of the CP is transferred when you download to the station. To load the station, connect the engineering station on which the project data is located to the Ethernet/MPI interface of the CPU.
You will find more detailed information on loading in the following sections of the STEP 7 online help:
· Downloading project data
· Using online and diagnostics functions
CP 1542-5
20
Manual, 11/2014, C79000-G8976-C326-03
Connecting up / commissioning 5.3 Replacing a module without a programming device
PROFIBUS interface
The table below shows the terminal assignment of the PROFIBUS interface. The assignment corresponds to the standard assignment of RS485 interface.
Table 5- 1
Terminal assignment PROFIBUS interface
View
Signal name
1
-
2
-
3 RxD/TxD-P
4
RTS
5
M5V2
6
P5V2
7
-
8 RxD/TxD-N
9
-
Designation Data line B Request To Send Data reference potential (from station) Supply plus (from station) Data line A -
Note PROFIBUS interface
The CP provides no 24 VDC power supply on the PROFIBUS interface. I/O devices (for example, PC adapter 6ES7972-0CB20-0XA0) are therefore not operational on the interface).
5.3
Replacing a module without a programming device
General procedure
The configuration data of the CP is stored on the CPU. This means that this module can be replaced by a module of the same type (identical article number) without using a PG.
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
21
Connecting up / commissioning 5.4 Mode of the CPU - effect on the CP
5.4
Mode of the CPU - effect on the CP
You can change the mode of the CPU between RUN and STOP using the STEP 7 configuration software.
Depending on the operating status of the CPU, the CP behaves as described below.
Changing the CPU from STOP to RUN:
The CP loads configured and/or downloaded data into the work memory and then changes to RUN mode.
Changing the CPU from RUN to STOP:
The reaction is as follows in STOP: DP master mode: Change to the CLEAR mode. DP slave mode: Input data is sent to the DP master with the value "0" and a DP
diagnostics alarm is sent. The following functions remain enabled:
The configuration and diagnostics of the CP (system connections for configuration, diagnostics, and PG channel routing are retained);
S7 routing function Time-of-day synchronization
CP 1542-5
22
Manual, 11/2014, C79000-G8976-C326-03
Interrupts, diagnostics messages, error and system alarms
6
The status and error displays of the CP 1542-5 are described below.
You can find additional information on "Interrupts" in the STEP 7 online help.
You can find additional information on "Diagnostics" and "System alarms" in the System diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
6.1
Status and error display of the CP
LED display
The following figure shows the LEDs of the CP 1542-5 .
RUN/STOP LED ERROR LED MAINT LED
Figure 6-1 LED display of the CP 1542-5 (without front cover)
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
23
Interrupts, diagnostics messages, error and system alarms 6.1 Status and error display of the CP
Meaning of the LED displays
The CP 1542-5 has 3 LEDs to display the current operating status and the diagnostics status and these have the following meanings:
· RUN/STOP LED · ERROR LED · MAINT LED
(one-color LED: green) (one-color LED: red) (one-color LED: yellow)
The following table shows the meaning of the various combinations of colors of the RUN/STOP, ERROR and MAINT LEDs.
Table 6- 1 Meaning of the LEDs RUN/STOP LED ERROR LED
LED off
LED off
LED lit green
LED lit red
LED lit green
LED lit red
LED lit green
LED off
LED flashing green
LED off
LED lit green LED flashing red
LED lit green
LED off
LED lit green
LED off
LED flashing green
LED flashing red
MAINT LED LED off
LED lit yellow LED off LED off LED off
Meaning No supply voltage on the CP or supply voltage too low. LED test during startup
Startup (booting the CP)
CP is in RUN mode. No disruptions No CP configuration exists Loading firmware
LED off
LED lit yellow
LED flashing yellow
LED flashing yellow
A diagnostics event has occurred.
Maintenance, maintenance is demanded. Maintenance is required. Downloading the user program
Module fault
Diagnostics with LEDs
Diagnostics using the LEDs is the first means of narrowing down errors/faults. To narrow the error/fault down even further, evaluate the message on the display of the S7-1500 CPU. If errors/faults occur, you can also identify them using the Web server or by evaluating the diagnostics buffer of the CPU. The diagnostics buffer of the CPU contains plain language information about the error/fault that has occurred. The diagnostics buffer is accessible via STEP 7, the display and the Web server.
CP 1542-5
24
Manual, 11/2014, C79000-G8976-C326-03
Interrupts, diagnostics messages, error and system alarms 6.2 Diagnostics options
6.2
Diagnostics options
Diagnostics options
You have the following diagnostics options available for the module: The LEDs of the module
For information on the LED displays, refer to the section Status and error display of the CP (Page 23). STEP 7: The "Diagnostics" tab in the Inspector window Here, you can obtain the following information on the selected module: Entries in the diagnostics buffer of the CPU Information on the online status of the module STEP 7: Diagnostics functions in the "Online > Online and diagnostics" menu Here, you can obtain static information on the selected module: General information on the module Diagnostics status Information on the PROFIBUS interface You can obtain further information on the diagnostics functions of STEP 7 in the STEP 7 online help. DP diagnostics The DP diagnostics of the CP is described below. The evaluation of diagnostics data records requested by the DP master and the diagnostics interrupts or diagnostics alarms of the DP slaves is handled in the user program of the DP master station.
6.3
DP slave diagnostics
DP-V1 slave: Diagnostics interrupt
The diagnostics data is transferred as a diagnostics interrupt. Diagnostics interrupts must be acknowledged by the DP master.
Supported diagnostics functions
The CP 1542-5 supports the following blocks of DP diagnostics: Standard diagnostics (6 bytes) Identifier-related diagnostics (2 to 17 bytes), depending on the number of configured
transfer areas Module status (5 to 35 bytes), depending on the number of configured transfer areas If it exists: Diagnostics interrupt (8 bytes)
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
25
Interrupts, diagnostics messages, error and system alarms 6.3 DP slave diagnostics
User program (DP master)
To read out the diagnostics data of the DP slave (DP single diagnostics), use the "DPNRM_DG" instruction on the DP master.
Diagnostics interrupts of DP-V1 slaves are evaluated in the user program of the master using the "RALRM" instruction.
You will find the required parameter assignment for the instructions in the STEP 7 online help.
Below, there is an overview of the structure of the diagnostics data.
Overview of standard diagnostics
Byte 0 1 2 3
4...5
Standard diagnostics Meaning
Station status 1 Station status 2 Station status 3 Master address Vendor ID of the slave
Overview of device-specific diagnostics
The device-specific diagnostics data depends on the protocol variant operating on the DP slave:
DP-V1 slave
Table 6- 2
Byte 0 1
2 3
4...62
Overview of device-specific diagnostics of the CP with DP-V1 slaves
Device-specific diagnostics
Meaning
Header
Variant Interrupt type
Variant Status type
Slot number
Variant Interrupt specifier
Variant Status specifier
Module-specific diagnostics data
CP 1542-5
26
Manual, 11/2014, C79000-G8976-C326-03
Interrupts, diagnostics messages, error and system alarms 6.4 Standard diagnostics
6.4
Standard diagnostics
The coding of the standard diagnostics bytes is explained below.
Byte 0: Station status 1
Table 6- 3 Structure of station status byte 1
Bit no. 7
6 5 4 3
2 1 0
Name Master_Lock
Parameter_Fault Invalid_Slave_Response Service_Not_Supported Ext_Diag
Slave_Config_Check_Fault Station_Not_Ready Station_Non_Existent
Explanation
The DP slave was assigned parameters by a different DP master. The DP slave can only be read by the configured productive DP master. This bit is set by the DP master when its bus address differs from the configured address.
The last received parameter assignment frame was bad or not permitted. The DP slave sets this bit. Solution: Check the parameter settings for illegal parameters.
This bit is set by the DP master when no plausible response has been received from the DP slave.
This bit is set by the DP master when the master has requested a function that is not supported by the DP slave. Solution: Change the parameter setting to disable the function on the master.
This bit is set by the slave.
· Bit =1: There is diagnostics data in the slave-specific diagnostics area. The diagnostics data can be evaluated in the user program of the master.
· Bit =0: There may be status information in the slave-specific diagnostics area. The status information can be evaluated in the user program of the master.
The configuration data sent by the DP master is rejected by the DP slave. Cause: Configuration error. Solution: Change configuration.
The DP slave is not ready for productive data exchange. This is a temporary status that cannot be influenced by the DP master.
The DP slave is not reacting on the bus. This bit is set by the DP master 1 (the slave sets this bit permanently to 0). If the bit is set, the diagnostic bits have the state of the last diagnostics alarm or the initial value.
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
27
Interrupts, diagnostics messages, error and system alarms 6.4 Standard diagnostics
Byte 1: Station status 2
Table 6- 4 Structure of station status byte 2
Bit no. 7
6 5 4 3 2
1
Name Deactivated
Reserved Sync_Mode Freeze_Mode Watchdog_On Status_From_Slave
Static_Diag
0
Parameter_Request
Explanation
The DP slave was identified as being not active in the local parameter record and it is not polled cyclically. - reserved -
The DP slave is in SYNC mode. The bit is set by the slave.
The DP slave is in FREEZE mode. The bit is set by the slave. Watchdog monitoring is active on the DP slave. The bit is set by the slave.
Bit =1: The diagnostics information comes from the DP slave. The bit is set permanently to 1 by the slave.
Static diagnostics If the DP slave sets this bit, the DP master must fetch diagnostics data from the DP slave until the DP slave resets the bit. The DP slave sets this bit, for example when it is not capable of data transfer.
The DP slave sets this bit when it needs to have new parameters assigned and be reconfigured. If bit 0 and bit 1 are both set, bit 0 has the higher priority.
Byte 2: Station status 3
Table 6- 5 Structure of station status byte 3
Bit no. 7
6...0
Name Ext_Data_Overflow
Reserved
Explanation
If this bit is set, there is more diagnostics information available than indicated in the diagnostics data. This data cannot be displayed.
- reserved -
Byte 3: Master address
The address of the DP master that assigned parameters to this DP slave is entered in the "Master_Add" byte.
If the DP slave did not have parameters assigned to it by any DP master, the DP slave sets the address 255 in this byte.
Bytes 4 and 5: Vendor ID of the slave ("Ident_Number")
The vendor ID ("Ident_Number") for the DP slave type is entered in bytes 4 and 5. This identifier can be used to identify the slave.
The more significant part of the value is in byte 5.
CP 1542-5
28
Manual, 11/2014, C79000-G8976-C326-03
Interrupts, diagnostics messages, error and system alarms 6.5 Device-specific diagnostics in DP-V1
6.5
Device-specific diagnostics in DP-V1
There are two variants of device-specific diagnostics with DP-V1 slaves:
Interrupt type
Status type
The two variants differ from each other in the coding of byte 1, bit 7 of the device-specific diagnostics data. The difference is component-specific.
Byte 0: Header
The two most significant bits have the value 00. This identifies the "module-specific diagnostics data" field (see bytes 4... 62) as a whole.
The remaining six bits indicate the length of the data field including byte 0.
Byte 1: Variant "Interrupt type"
Table 6- 6 Structure of byte 1 of the device-specific diagnostics (variant "interrupt type")
Bit no. 7
6...0
Value 0 Alarm_Type 0 1 2 3 4 5 6 7...31 32...126 127
Meaning Interrupt
Meaning
- reserved Diagnostics interrupt Hardware interrupt Pull interrupt Plug interrupt Status interrupt Update interrupt - reserved Vendor-specific - reserved -
If status interrupts are received in quick succession, older status interrupts may be overwritten by newer interrupts.
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
29
Interrupts, diagnostics messages, error and system alarms 6.5 Device-specific diagnostics in DP-V1
Byte 1: Variant "Status type"
Table 6- 7 Structure of byte 1 of the device-specific diagnostics (variant "status type")
Bit no. 7
6...0
Value 1 Status_Type 0 1 2 3...31 32...126 127
Meaning Meaning Status information
- reserved Status information Modul_Status (see also bytes 4...62) - reserved Vendor-specific - reserved -
Byte 2: Slot number
Slot number (1...n) of the slave module 0 is the placeholder for the entire device.
Byte 3: Variant "Interrupt specifier"
Table 6- 8 Structure of byte 3 of the device-specific diagnostics (variant "interrupt specifier")
Bit no. 7...3 2
Seq_No Add_Ack
1...0 Alarm_Specifier 0 1
2
3
Meaning Unique identifier of an interrupt alarm If this bit is set, the DP-V1 master is indicating that this interrupt expects an acknowledgement in the form of a WRITE job.
No further distinction Interrupt appears, slot disrupted The slot generates an interrupt due to an error. Interrupt disappears, slot OK The slot generates the interrupt and indicates that it has no further errors. Interrupt disappears, slot still disrupted The slot generates an interrupt and indicates that it has further errors.
CP 1542-5
30
Manual, 11/2014, C79000-G8976-C326-03
Interrupts, diagnostics messages, error and system alarms 6.5 Device-specific diagnostics in DP-V1
Byte 3: Variant "Status specifier"
Table 6- 9 Structure of byte 3 of the device-specific diagnostics (variant "status specifier")
Bit no. 7...2 1...0
- reserved Status_Specifier 0 1 2 3
Meaning
No further distinction Status appears Status disappears - reserved -
Bytes 4...62: Module-specific diagnostics: General coding
This byte contains data with module-specific information that is described in the relevant module documentation. The relevant module is identified by the slot (byte 2).
Bytes 4...62: Module-specific diagnostics with "status type" and "module status"
With the variant "status type" of the device-specific diagnostics of DP-V1 slaves (see byte 1, bit 7) and the setting "Modul_Status" (see byte 1, bits 0...6), there are two status bits here for each slot (= module). Bits not required are set to 0.
Table 6- 10 Structure of the bytes for module-specific diagnostics data
Byte Bit
4 5 ... 62
7
6
Module status 4
Module status 8
...
Module status 236
Bit assignment
5
4
3
2
Module status 3
Module status 2
Module status 7
Module status 6
...
...
Module status 235 Module status 234
The status bits are coded as follows:
1
0
Module status 1
Module status 5
...
Module status 233
Table 6- 11 Meaning of the values of the status bits
Value 00 01 10 11
Meaning Data valid Data invalid - error (for example short-circuit) Data invalid - wrong module Data invalid - no module plugged in
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
31
Interrupts, diagnostics messages, error and system alarms 6.6 DP diagnostics frames when the CPU is in STOP
6.6
DP diagnostics frames when the CPU is in STOP
DP diagnostics frames when the CPU is in STOP
All diagnostics frames from DPV0 standard slaves and all DP interrupt frames from DPS7/DPV1 standard slaves arriving when the CPU is in STOP are forwarded to the CPU. During module startup, the diagnostics frames must then be evaluated by a suitable user program.
CP 1542-5
32
Manual, 11/2014, C79000-G8976-C326-03
Technical specifications
7
Note the information in the System description of SIMATIC S7-1500 (Page 7).
In addition to the information in the system description, the following technical specifications apply to the module.
Product type name
Connection to PROFIBUS · Number Design of the PROFIBUS interface · Connector · Transmission speed
Electrical data Power supply · via S7-1500 backplane bus Current consumption · From backplane bus · Power dissipation
6GK7 542-5FX00-0XE0 CP 1542-5
1 x PROFIBUS interface
1 x D-sub female connector (RS-485) 9.6 Kbps, 19.2 Kbps, 45.45 Kbps 93.75 Kbps, 187.5 Kbps, 500 Kbps 1.5 Mbps, 3 Mbps, 6 Mbps, 12 Mbps
15 V
100 mA 1.5 W
Insulation Insulation tested with
707 VDC (type test)
Design, dimensions and weight Module format Degree of protection Weight Dimensions (W x H x D) Installation options
Compact module S7-1500, single width IP20 Approx. 270 g 35 x 142 x 129 mm Mounting in an S7-1500 rack
Product functions * * You will find the product functions in the section Functional characteristics (Page 13).
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
33
Technical specifications
CP 1542-5
34
Manual, 11/2014, C79000-G8976-C326-03
Approvals
8
Approvals issued
Note Issued approvals on the type plate of the device
The specified approvals - with the exception of the certificates for shipbuilding - have only been obtained when there is a corresponding mark on the product. You can check which of the following approvals have been granted for your product by the markings on the type plate. The approvals for shipbuilding are an exception to this.
Certificates for shipbuilding and national approvals
The device certificates for shipbuilding and special national approvals can be found on the pages of Siemens Automation Customer Support on the Internet (http://support.automation.siemens.com/WW/news/en/10805878)
Under this entry, go to the required product and select the following settings: "Entry list" tab > entry type "Certificates".
Standards and test specifications
The device meets the following standards and test specifications. The test criteria for the module are based on these standards and test specifications.
IEC 611312
The SIMATIC NET S7 CPs described in this manual fulfill the requirements and criteria of the IEC 61131-2 standard (Programmable Logic Controllers, Part 2: equipment requirements and verifications).
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
35
Approvals
CE mark
The SIMATIC NET S7-CPs described in this manual fulfill the requirements and protection goals of the following EC directives and meet the harmonized European standards (EN) that have been published for the programmable logic controllers in the official journals of the European communities:
2004/108/EEC "Electromagnetic Compatibility" (EMC Directive)
94/9/EC "Equipment and protective systems intended for use in potentially explosive atmospheres" (Explosion Protection Directive)
The EC Declarations of Conformity are available for the responsible authorities according to the above-mentioned EC Directive at the following address:
Siemens Aktiengesellschaft Industry Automation Industrielle Kommunikation SIMATIC NET Postfach 4848 D-90327 Nürnberg
You will find the EC Declaration of Conformity at the following address / under the following entry ID on the Internet (http://support.automation.siemens.com/WW/view/en/16689636)
EMC directive
The SIMATIC NET S7 CPs listed above are designed for use in an industrial environment.
Field of application Industry
Requirements Emission
EN 6100064
Immunity to interference EN 6100062
Explosion Protection Directives
Complying with EN 60079 (electrical apparatus for potentially explosive atmospheres; Type of protection "n") EN 60079-15, EN 60079-0 II 3 G Ex nA IIC T4 Gc DEKRA 12 ATEX 0240X
Note When using (installing) SIMATIC NET products in hazardous area zone 2, make absolutely sure that the associated conditions are adhered to! You will find these conditions here: · In the SIMATIC NET Manual Collection under
"All Documents" > "Use of subassemblies/modules in a Zone 2 Hazardous Area"
CP 1542-5
36
Manual, 11/2014, C79000-G8976-C326-03
Approvals
Notice for Australia - C-TICK
The above listed SIMATIC NET S7 CPs meet the requirements of the standard AS/NZS 2064 (Class A).
Notices for Canada
This class A digital device meets the requirements of the Canadian standard ICES-003.
AVIS CANADIEN
Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.
UL and CSA approval
Note You will recognize the approval, UL/CSA or cULus, assigned to your product from the mark on the rating plate.
UL approval
UL Recognition Mark Underwriters Laboratories (UL) nach Standard UL 508: Report E 85972
CSA approval
CSA Certification Mark Canadian Standard Association (CSA) nach Standard C 22.2 No. 142:
Certification Record 063533C-000
cULus Approval, Hazardous Location
CULUS Listed 7RA9 IND. CONT. EQ. FOR HAZ. LOC. Underwriters Laboratories Inc. complying with UL 508 (Industrial Control Equipment) CSA C22.2 No. 142 (Process Control Equipment) ANSI ISA 12.12.01, CSA C22.2 No. 213-M1987 (Hazardous Location) CSA213 (Hazardous Location) APPROVED for Use in Cl. 1, Div. 2, GP. A, B, C, D T3...T6 Cl. 1, Zone 2, GP. IIC T3...T6
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
37
Approvals
You will find the temperature class on the type plate on the module.
WARNING Explosion Hazard Do not disconnect while circuit is live unless area is known to be non hazardous. Explosion Hazard Substitution of components may impair suitability for Class I, Division 2.
Note This equipment is suitable for use in Class I, Division 2, Group A, B, C, D or non-hazardous locations only.
Note For devices with C-PLUG memory: The C-PLUG memory module may only be inserted or removed when the power is off.
Note This plant has to be mounted according to the NEC (National Electrical Code) stipulations. When used in environments according to class I, division 2 (see above) , the SIMATIC NET S7 CPs must be mounted in an enclosure.
FM approval
Factory Mutual Approval Standard Class Number 3611, Class I, Division 2, Group A, B, C, D, T3...T6 or Class I, Zone 2, Group IIC, T3...T6. You will find the temperature class on the type plate on the module.
WARNING
Personal injury and damage to property may occur.
In hazardous areas, personal injury or property damage can result if you create or break an electrical circuit during operation of a SIMATIC NET S7 CP (for example, by means of plugin connections, fuses, switches).
WARNING - EXPLOSION HAZARD: DO NOT DISCONNECT EQUIPMENT WHEN A FLAMMABLE OR COMBUSTIBLE ATMOSPHERE IS PRESENT.
When used in hazardous locations (division 2 or zone 2), the device must be installed in an enclosure.
CP 1542-5
38
Manual, 11/2014, C79000-G8976-C326-03
Index
A
ATEX, 18
DP slave, 10, 11 Operation as, 10
DP slave mode, 22 DP slaves
General characteristic data, 13
B
Bus topology, 11
C
Cabinet, 18 Cable length, 13 Cables for temperatures in excess of 70 °C, 19 Calling program blocks (instructions) for distributed I/O, 16 CE mark, 36 Changeover
CPU from RUN to STOP, 22 CPU from STOP to RUN, 22 Characteristic data, 13, 14 Configuration data Configuration and downloading, 15 CSA Approval, 37 C-Tick Approval, 37
D
Diagnostics, 23 Diagnostics options, 25 Diagnostics repeater (DP slave), 11 Diagnostics requests, 11, 14, 14 Direct data exchange, 10 Downloading project data, 20 Downloads, 8 DP diagnostics, 25 DP diagnostics frames when the CPU is in STOP, 32 DP master
Operation as, 10 DP master (class 1), 10, 11 DP master mode, 22 DP masters (class 2), 11 DP mode
General characteristic data, 13
E
EMC - electromagnetic compatibility, 36 Error status codes, 23
F
FM Approval, 38
G
Glossary, 3
H
Hazardous area, 17 Hazardous areas according to ATEX, 18
I
IEC 61131-2, 35 Installation and commissioning, 20 Instruction
ALARM, 16 D_ACT_DP, 16 DE_ACT, 11 DP_TOPOL, 15 DPNRM_DG, 15 DPRD_DAT, 16 DPSYC_FR, 15 DPWR_DAT, 16 GETIO, 16 GETIO_PART, 16, 16 RALARM, 16 RALRM, 16 RDREC, 16, 16 SETIO, 16 WRREC, 15, 16 Interrupts, 23
CP 1542-5
Manual, 11/2014, C79000-G8976-C326-03
39
Index
L
Limitations Number of operable CPs, 15
M
Manual Collection, 8 Measured values
of values of transfer or reaction times, 13 Module replacement, 21
N
Number of operable CPs, 15
O
Operating mode of the CPU, 22
P
PG/OP communication, 10 PROFIBUS
DP-V0 and DPV1 standard, 10 PROFIBUS DP
EN 50170 DPV1, 10 PROFIBUS interface, 21 Program blocks, 16 Protection against transient voltage surges, 19
R
Replacing components, 18 RS-485 interface, 21 RS-485 socket, 20
S
S7 communication, 10 S7 connections, 14
General characteristic data, 14 S7 routing function, 22 Safety extra low voltage, 17 Safety notices, 17 Siemens DP slave, 10 SIMATIC NET glossary, 3 SIMATIC NET Manual Collection, 8 Startup parameters, 14 Status and error displays, 23
40
STEP 7, 3, 15 SYNC / FREEZE, 10 System alarms, 23
T
Time master, 11 Time slave, 11 Time-of-day synchronization, 11, 22 Transmission speed, 13
U
UL Approval, 37
V
Version history, 8
W
Web diagnostics, 11 S7 connections, 11
CP 1542-5 Manual, 11/2014, C79000-G8976-C326-03
SIMATIC NET S7-1500 - Industrial Ethernet CP 1543-1
Operating Instructions
_Pr_ef_ac_e_______________ _G_uid_e_to_t_he_d_oc_u_m_en_ta_tio_n____1_ _Pr_od_u_ct_o_ve_rv_ie_w,_fu_n_ct_ion_s____2_ _Icno_smta_mll_aist_isoion_n,_icno_gn,_noep_cet_irna_gtio_unp_, ____3_ _Co_n_fig_u_ra_tio_n,_p_ro_gr_am_m_i_ng____4_ _Di_ag_n_os_tic_s_a_nd_u_pk_e_ep______5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_ _Ap_p_ro_va_ls_____________7_
05/2017
C79000-G8976-C289-07
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Process Industries and Drives Postfach 48 48 90026 NÜRNBERG GERMANY
C79000-G8976-C289-07 05/2017 Subject to change
Copyright © Siemens AG 2013 - 2017. All rights reserved
Preface
Purpose of the documentation
This manual supplements the S7-1500 system manual.
With the information in this manual and the system manual, you will be able to commission the communications processor.
New in this issue
Firmware version V2.1 with the following new functions: Extended security settings using IP routing via the backplane bus See section IP routing (Page 35).
Version history
Firmware version V2.0 with the following new functions: Secure OUC (Open User Communication) via TCP/IP Secure Mail: New system data types (SDTs) for transferring e-mails
Alternative: Non secure transfer via port 25 or secure transfer via port 587 Operation as FTP server: Access to the SIMATIC memory card of the CPU IP routing via the backplane bus
Replaced edition
Edition 10/2016
Current manual release on the Internet
You will find the current version of this manual on the Internet pages of Siemens Industry Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/15340/man)
Sources of information and other documentation
See section Guide to the documentation (Page 9).
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
3
Preface
Abbreviations and names
CP In this document, the term "CP" is also used instead of the full product name.
STEP 7 The name STEP 7 is used to mean the STEP 7 Professional configuration tool.
Conventions
Make sure you read the special notices below:
Note A notice contains important information on the product described in the documentation, handling the product or about parts of the documentation you should pay particular attention to.
See also
Program blocks for OUC (Page 44) Configuring the FTP server function (Page 49)
License conditions
Note Open source software The product contains open source software. Read the license conditions for open source software carefully before using the product.
You will find license conditions in the following document on the supplied data medium: OSS_CP15431_86.pdf
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
CP 1543-1
4
Operating Instructions, 05/2017, C79000-G8976-C289-07
Preface
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit Link: (http://www.siemens.com/industrialsecurity)
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under Link: (http://www.siemens.com/industrialsecurity).
Firmware
Firmware
The firmware is signed and encrypted. This ensures that only firmware created by Siemens can be downloaded to the device.
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the SIMATIC NET glossary.
You will find the SIMATIC NET glossary on the Internet at the following address:
Link: (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Recycling and disposal
The product is low in pollutants, can be recycled and meets the requirements of the WEEE directive 2012/19/EU "Waste Electrical and Electronic Equipment".
Do not dispose of the product at public disposal sites. For environmentally friendly recycling and the disposal of your old device contact a certified disposal company for electronic scrap or your Siemens contact.
Keep to the local regulations.
You will find information on returning the product on the Internet pages of Siemens Industry Online Support: Link: (https://support.industry.siemens.com/cs/ww/en/view/109479891)
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
5
Preface
CP 1543-1
6
Operating Instructions, 05/2017, C79000-G8976-C289-07
Table of contents
Preface................................................................................................................................... 3
1 Guide to the documentation ....................................................................................................... 9
2 Product overview, functions.......................................................................................................11
2.1
Product data...................................................................................................................... 11
2.2
Communication services.................................................................................................... 12
2.3
Further functions ............................................................................................................... 13
2.4
Industrial Ethernet Security................................................................................................ 15
2.5 2.5.1 2.5.2 2.5.3 2.5.4 2.5.5
Configuration limits and performance data ......................................................................... 16 General characteristic data ................................................................................................ 16 Characteristics for Open User Communication (OUC) and FETCH/WRITE ........................ 16 Characteristics of S7 communication ................................................................................. 18 Characteristic data for FTP / FTPS mode........................................................................... 19 Characteristics security...................................................................................................... 19
2.6 2.6.1 2.6.2 2.6.3
Requirements for use ........................................................................................................ 20 Configuration limits............................................................................................................ 20 Project engineering............................................................................................................ 20 Programming..................................................................................................................... 21
2.7
LEDs................................................................................................................................. 22
2.8
Gigabit interface ................................................................................................................ 24
3 Installation, connecting up, commissioning, operation....................................................................25
3.1 3.1.1 3.1.2 3.1.3 3.1.4
Important notes on using the device .................................................................................. 25 Notes on use in hazardous areas ...................................................................................... 25 Notes on use in hazardous areas according to ATEX / IECEx............................................ 26 Notes on use in hazardous areas according to UL HazLoc ................................................ 27 General notices on use in hazardous areas according to FM ............................................. 27
3.2
Installing and commissioning the CP 1543-1...................................................................... 28
3.3
Mode of the CPU - effect on the CP................................................................................... 29
4 Configuration, programming ......................................................................................................31
4.1
Security recommendations ................................................................................................ 31
4.2
Network settings................................................................................................................ 34
4.3 4.3.1 4.3.2 4.3.3
IP configuration ................................................................................................................. 35 Points to note about IP configuration ................................................................................. 35 Restart after detection of a duplicate IP address in the network.......................................... 35 IP routing........................................................................................................................... 35
4.4 4.4.1 4.4.1.1
Security............................................................................................................................. 36 VPN .................................................................................................................................. 36 Creating VPN tunnel communication between S7-1500 stations ........................................ 37
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
7
Table of contents
4.4.1.2
4.4.1.3 4.4.1.4 4.4.2 4.4.2.1 4.4.2.2 4.4.2.3 4.4.2.4 4.4.3 4.4.3.1 4.4.3.2 4.4.4
Successfully establishing VPN tunnel communication between the CP 1543-1 and SCALANCE M....................................................................................................................39 VPN tunnel communication with SOFTNET Security Client.................................................39 CP as passive subscriber of VPN connections....................................................................40 Firewall ..............................................................................................................................41 Firewall sequence when checking incoming and outgoing frames.......................................41 Notation for the source IP address (advanced firewall mode)..............................................41 HTTP and HTTPS not possible with IPv6............................................................................41 Firewall settings for connections via a VPN tunnel ..............................................................41 Online functions .................................................................................................................42 Online diagnostics via port 8448 .........................................................................................42 Online diagnostics and downloading to station with the firewall activated ............................42 Filtering of the system events .............................................................................................43
4.5
Time-of-day synchronization...............................................................................................43
4.6
Program blocks for OUC.....................................................................................................44
4.7 4.7.1 4.7.2
Setting up FTP communication...........................................................................................47 The program block FTP_CMD (FTP client function) ............................................................47 Configuring the FTP server function....................................................................................49
4.8
IP access protection with programmed communications connections..................................52
5 Diagnostics and upkeep........................................................................................................... 53
5.1
Diagnostics options ............................................................................................................53
5.2
Diagnostics with SNMP ......................................................................................................53
5.3
Replacing a module without a programming device ............................................................56
6 Technical specifications ........................................................................................................... 57
7 Approvals.............................................................................................................................. 59
Index .................................................................................................................................... 65
CP 1543-1
8
Operating Instructions, 05/2017, C79000-G8976-C289-07
Guide to the documentation
1
Introduction
The documentation of the SIMATIC products has a modular structure and covers topics relating to your automation system.
The complete documentation for the S7-1500 system consists of a system manual, function manuals and device manuals.
The STEP 7 information system (online help) also supports you in configuring and programming your automation system.
Overview of the documentation on communication with S7-1500
The following table lists additional documents, which supplement this description of CP 1543-1 and are available in the Internet.
Table 1- 1 Configuration tools for the CP 1543-1
Topic System description
System diagnostics
Communication
Documentation System manual: S7-1500 Automation System (https://support.industry.siemens.com/cs/ww/e n/view/59191792)
Function manual: System diagnostics (https://support.industry.siemens.com/cs/ww/e n/view/59192926)
Function manual: Communication (https://support.industry.siemens.com/cs/ww/e n/view/59192925) Function manual: Web Server (https://support.industry.siemens.com/cs/ww/e n/view/59193560) Manual Industrial Ethernet Security (https://support.industry.siemens.com/cs/ww/e n/ps/15326/man)
Most important contents · Application planning · Installation · Connecting · Commissioning
· Overview · Diagnostics evaluation for
hardware/software · Overview
· Function · Operation
· Overview and description of the security functions in Industrial Ethernet
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
9
Guide to the documentation
Topic
Interference-free installation of control systems Cycle and response times
Documentation SIMATIC NET - Industrial Ethernet / PROFINET - system manual
· Industrial Ethernet Link: (https://support.industry.siemens.com/cs/w w/de/view/27069465)
· Passive network components Link: (https://support.industry.siemens.com/cs/w w/en/view/84922825)
Function Manual: Interference-free installation of control systems (https://support.industry.siemens.com/cs/ww/e n/view/59193566)
Function manual: Cycle and Response Times (https://support.industry.siemens.com/cs/ww/e n/view/59193558)
Most important contents · Ethernet networks · Network configuration · Network components
· Basics · Electromagnetic compatibil-
ity · Lightning protection · Housing selection · Basics · Calculations
SIMATIC manuals
All current manuals for SIMATIC products are available for download free of charge from the Internet: Link: (http://www.siemens.com/automation/service&support)
CP documentation in the Manual Collection (article number A5E00069051)
The "SIMATIC NET Manual Collection" DVD contains the device manuals and descriptions of all SIMATIC NET products current at the time it was created. It is updated at regular intervals.
Version History / Current Downloads for the SIMATIC NET S7 CPs
The "Version History/Current Downloads for SIMATIC NET S7 CPs (Industrial Ethernet)" document provides information on all CPs available up to now for SIMATIC S7 (Industrial Ethernet).
The current versions of the document can be found on the Internet: Link: (https://support.industry.siemens.com/cs/ww/en/view/109474421)
CP 1543-1
10
Operating Instructions, 05/2017, C79000-G8976-C289-07
Product overview, functions
2.1
Product data
Article number, validity and product names
This description contains information on the following product
CP 1543-1 article number 6GK7 543-1AX00-0XE0 hardware product version 2 firmware version V2.1 communications processor for SIMATIC S7-1500
View of the CP 1543-1
2
LEDs for status and error displays LED displays of the Ethernet interface for connection status and activity Type plate Ethernet port: 1 x 8-pin RJ-45 jack
The padlock icon symbolizes the interface to the external, non-secure subnet.
Label with MAC address
Figure 2-1 View of the CP 1543-1 with closed (left) and open (right) front cover
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
11
Product overview, functions 2.2 Communication services
Address label: Unique MAC address preset for the CP
The CP ships with a default MAC address:
The MAC address is printed on the housing.
If you configure a MAC address (ISO transport connections), we recommend that you use the MAC address printed on the module for module configuration! This ensures that you assign a unique MAC address in the subnet!
Application
The CP is intended for operation in an S7-1500 automation system. It allows the S7-1500 to be connected to Industrial Ethernet.
With a combination of different security measures such as firewall and protocols for data encryption, the CP protects the S7-1500 or even entire automation cells from unauthorized access. It also protects the communication between the S7 station and communications partners from spying and manipulation.
2.2
Communication services
The CP supports the following communication services:
Open User Communication (OUC)
Open User Communication supports the following communications services via the CP using programmed or configured communications connections:
ISO transport (complying with ISO/IEC 8073)
TCP (complying with RFC 793), ISO-on-TCP (complying with RFC 1006) and UDP (complying with RFC 768)
With the interface via TCP connections, the CP supports the socket interface to TCP/IP available on practically every end system.
Multicast over UDP connection
The multicast mode is made possible by selecting a suitable IP address when configuring connections.
Sending e-mail via SMTP (port 25) or SMTPS (port 587) with "SMTP-Auth" for authentication on an e-mail server.
S7 communication
PG communication
Operator control and monitoring functions (HMI communication)
Data exchange over S7 connections
CP 1543-1
12
Operating Instructions, 05/2017, C79000-G8976-C289-07
Product overview, functions 2.3 Further functions
IT functions FTP functions (File Transfer Protocol FTP/FTPS) for file management and access to data blocks on the CPU (client and server functions). For e-mail see above (OUC)
FETCH/WRITE FETCH/WRITE services as server (corresponding to S5 protocol) via ISO transport, ISO-on-TCP and TCP connections The S7-1500 with the CP is always the server (passive connection establishment). The fetch or write access (client function with active connection establishment ) is performed by a SIMATIC S5 or a third-party device / PC.
2.3
Further functions
Timeofday synchronization over Industrial Ethernet using the NTP mode (NTP: Network Time Protocol)
The CP sends timeofday queries at regular intervals to an NTP server and synchronizes its local time of day.
The time is also be forwarded automatically to the CPU modules in the S7 station allowing the time to be synchronized in the entire S7 station.
Security function: The CP supports the NTP (secure) protocol for secure time-of-day synchronization and transfer of the time of day.
Addressable with the factoryset MAC address
To assign the IP address to a new CP (direct from the factory), it can be accessed using the preset MAC address on the interface being used. Online address assignment is made in STEP 7.
SNMP agent
The CP supports data queries over SNMP in version V1 (Simple Network Management Protocol). It delivers the content of certain MIB objects according to the MIB II standard and Automation System MIB.
If security is enabled, the CP supports SNMPv3 for transfer of network analytical information protected from eavesdropping.
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
13
Product overview, functions 2.3 Further functions
IP configuration - IPv4 and IPv6
The essential features of IP configuration for the CP:
The CP supports the use of IP addresses according to IPv4 and IPv6.
You can configure how and with which method the CP is assigned the IP address, the subnet mask and the address of a gateway.
The IP configuration and the connection configuration (IPv4) can also be assigned to the CP by the user program (for program blocks refer to the section Programming (Page 21)).
Note: Does not apply to S7 connections.
IP routing
The CP supports static IP routing (IPv4) to other CM 1542-1 V2.0 / CP 1543-1 V2.0. For details, see section IP routing (Page 35).
IPv6 addresses - area of use on the CP
An IP address according to IPv6 can be used for the following communications services: FTP server mode FETCH/WRITE access (CP is server) FTP client mode with addressing via a program block E-mail transfer with addressing via a program block
Access to the Web server of the CPU
Via the LAN interface of the CP, you have access to the Web server of the CPU. With the aid of the Web server of the CPU, you can read out module data from a station.
Note the special description of the Web server; refer to the section Guide to the documentation (Page 9)
Note Web server access using the HTTPS protocol
The Web server of a SIMATIC S7-1500 station is located in the CPU. For this reason, when there is secure access (HTTPS) to the Web server of the station using the IP address of the CP 1543-1, the SSL certificate of the CPU is displayed.
S5/S7 addressing mode for FETCH/WRITE
The addressing mode can be configured for FETCH/WRITE access as S7 or S5 addressing mode. The addressing mode specifies how the position of the start address is identified during data access (S7 addressing mode applies only to data blocks / DBs).
Read the additional information in the online help of STEP 7.
CP 1543-1
14
Operating Instructions, 05/2017, C79000-G8976-C289-07
Product overview, functions 2.4 Industrial Ethernet Security
2.4
Industrial Ethernet Security
All-round protection - the task of Industrial Ethernet Security
With Industrial Ethernet Security, individual devices, automation cells or network segments of an Ethernet network can be protected. The data transfer from the external network connected to the CP 1543-1 can be protected by a combination of different security measures: Data espionage (FTPS, HTTPS) Data manipulation Unauthorized access Secure underlying networks can be operated via additional Ethernet/PROFINET interfaces implemented by the CPU or additional CPs.
Security functions of the CP for the S7-1500 station
As result of using the CP, the following security functions are accessible to the S7-1500 station on the interface to the external network: Firewall
IP firewall with stateful packet inspection (layer 3 and 4) Firewall also for Ethernet "non-IP" frames according to IEEE 802.3 (layer 2) Bandwidth limitation Global firewall rules The firewall protective function can be applied to the operation of single devices, several devices, or entire network segments. Logging To allow monitoring, events can be stored in log files that can be read out using the configuration tool or can be sent automatically to a syslog server. FTPS (explicit mode) For encrypted transfer of files. NTP (secure) For secure time-of-day synchronization and transmission SMTPS Foe secure transfer of e-mails via port 587 SNMPv3 For secure transmission of network analysis information safe from eavesdropping Observe the information in section Security recommendations (Page 31).
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
15
Product overview, functions 2.5 Configuration limits and performance data
2.5
Configuration limits and performance data
2.5.1
General characteristic data
Characteristic
Total number of freely usable connections on Industrial Ethernet
Explanation / values 118 The value applies to the total number of connections of the following types:
· S7 connections · Connections for open communications services · FTP (FTP client)
Note
Connection resources of the CPU
Depending on the CPU type, different numbers of connection resources are available. The number of connection resources is the decisive factor for the number of configurable connections. This means that the values that can actually be achieved may be lower than specified in this section describing the CP.
2.5.2
Characteristics for Open User Communication (OUC) and FETCH/WRITE
Open User Communication (OUC) provides access to communication over TCP, ISO-onTCP, ISO transport and UDP connections.
CP 1543-1
16
Operating Instructions, 05/2017, C79000-G8976-C289-07
Product overview, functions 2.5 Configuration limits and performance data
The following characteristics are important (OUC + FETCH/WRITE):
Characteristic Number of connections
Maximum data length for program blocks
LAN interface max. data field length generated by CP per protocol data unit(TPDU = transport protocol data unit)
Explanation / values
· Number of configured and programmed +connections in total (ISO transport + ISO-on-TCP + TCP + UDP + FETCH/WRITE + e-mail): Max. 118
Of which maximum: TCP connections: 1...118 1) ISO-on-TCP connections: 1...118 ISO transport connections: 1...118 Total number of UDP connections (specified and free) that can be
configured: 1...118 Connection for e-mail: 1 Connections for FETCH/WRITE: 1...16 Notes: 1)Avoid receive overload The flow control on TCP connections cannot control permanent overload of the recipient. You should therefore make sure that the processing capabilities of a receiving CP are not permanently exceeded by the sender (approximately 150200 messages per second). Program blocks allow the transfer of user data in the following lengths:
· ISO-on-TCP, TCP, ISO transport: 1 to 64 kB · UDP: 1 to 1452 bytes
· E-mail Job header + user data: 1 to 256 bytes E-mail attachment: up to 64 kbytes
· sending
ISO transport, ISOonTCP, TCP: 1452 bytes / TPDU
· receiving ISO transport: 512 bytes / TPDU ISO-on-TCP: 1452 bytes / TPDU TCP: 1452 bytes / TPDU
Note
Connection resources of the CPU
Depending on the CPU type, different numbers of connection resources are available. The number of connection resources is the decisive factor for the number of configurable connections. This means that the values that can actually be achieved may be lower than specified in this section describing the CP.
You will find detailed information on the topic of connection resources in the "Communication" function manual, refer to the section Guide to the documentation (Page 9).
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
17
Product overview, functions 2.5 Configuration limits and performance data
Restrictions for UDP
Restrictions UDP broadcast / multicast) To avoid overloading the CP due to high broadcast / multicast frame traffic, the receipt of UDP broadcast / multicast on the CP is limited
UDP frame buffering Length of the frame buffer: At least 7360 bytes Following a buffer overflow, newly arriving frames that are not fetched by the user program are discarded.
2.5.3
Characteristics of S7 communication
S7 communication provides data transfer via the ISO Transport or ISO-on-TCP protocols.
Feature Total number of freely usable S7 connections on Industrial Ethernet LAN interface - data field length generated by CP per protocol data unit (PDU = protocol data unit)
Number of reserved OP connections Number of reserved PG connections Number of reserved connections for Web
Explanation / values Max. 118
· for sending: 480 bytes / PDU · for receiving: 480 bytes / PDU
4 4 2
Note Maximum values for an S7-1500 station
Depending on the CPU you are using, there are limit values for the S7-1500 station. Note the information in the relevant documentation.
CP 1543-1
18
Operating Instructions, 05/2017, C79000-G8976-C289-07
Product overview, functions 2.5 Configuration limits and performance data
2.5.4
Characteristic data for FTP / FTPS mode
TCP connections for FTP
FTP actions are transferred from the CP over TCP connections. Depending on the mode, the following characteristic data applies:
FTP in client mode:
You can use a maximum of 32 FTP sessions. Up to 2 TCP connections are occupied per activated FTP session (1 control connection and 1 data connection).
FTP in server mode:
You can operate a maximum of 16 FTP sessions at the same time. Up to 2 TCP connections are occupied per activated FTP session (1 control connection and 1 data connection).
Program block FTP_CMD (FB40) for FTP client mode
For communication, use the FTP program block FTP_CMD.
The block execution time in FTP depends on the reaction times of the partner and the length of the user data. A generally valid statement is therefore not possible.
2.5.5
Characteristics security
IPsec tunnel (VPN)
VPN tunnel communication allows the establishment of secure IPsec tunnel communication with one or more security modules.
Configuration limits Number of IPsec tunnels
Value 16 maximum
Firewall rules (advanced firewall mode)
The maximum number of firewall rules in advanced firewall mode is limited to 256. The firewall rules are divided up as follows: Maximum 226 rules with individual addresses Maximum 30 rules with address ranges or network addresses
(e.g. 140.90.120.1 - 140.90.120.20 or 140.90.120.0/16) Maximum 128 rules with limitation of the transmission speed ("bandwidth limitation")
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
19
Product overview, functions 2.6 Requirements for use
2.6
Requirements for use
2.6.1
Configuration limits
When using the CP type described here, the following limits apply:
The number of CPs that can be operated in a rack depends on the CPU type being used.
By operating several CPs, you can increase the configuration limits listed below for the station as the whole. The CPU does, however, have set limits for the entire configuration. The size of the configuration made available by a CP can be increased by using more than one CP within the framework of the system limits.
Observe the information in the documentation on the CPU; see section Guide to the documentation (Page 9)
Note Power supply via the CPU adequate or additional power supply modules required
You can operate a certain number of modules in the S7-1500 station without an additional power supply. Make sure that you keep to the specified power feed to the backplane bus for the particular CPU type. Depending on the configuration of the S71500 station you may need to provide additional power supply modules.
2.6.2
Project engineering
Configuration and downloading the configuration data
When the configuration data is downloaded to the CPU, the CP is supplied with the relevant configuration. The configuration data can be downloaded to the CPU via a memory card or any Ethernet/PROFINET interface of the S7-1500 station.
The following version of STEP 7 is required:
STEP 7 version STEP 7 Professional V12 SP1 or higher
Functions of the CP
The full functionality of the CP 1543-1 (6GK7 543-1AX00-0XE0) can be configured.
CP 1543-1
20
Operating Instructions, 05/2017, C79000-G8976-C289-07
Product overview, functions 2.6 Requirements for use
2.6.3
Programming
Program blocks
For communications services, there are preprogrammed program blocks (instructions) available as the interface in your STEP 7 user program.
Table 2- 1 Instructions for communications services
Protocol TCP ISO-on-TCP ISO
UDP
E-mail
FTP
Program block (instruction) Establish connection and send/receive data via: · TSEND_C/TRCV_C or · TCON, TSEND/TRCV
(termination of the connection using TDISCON possible)
· TCON, TUSEND/TURCV (termination of the connection using TDISCON possible)
· TMAIL_C
· FTP_CMD
System data type · TCON_IP_v4 · TCON_Configured · TCON_IP_RFC · TCON_ISOnative
· TCON_IP_v4
· TMail_v4* · TMail_v6* · TMAIL_FQDN* · FTP_CONNECT_IPV4* · FTP_CONNECT_IPV6* · FTP_CONNECT_NAME* · FTP_FILENAME* · FTP_FILENAME_PART*
*User-defined data type
Table 2- 2 Instructions for configuration tasks
Function
Configuration of the Ethernet interface
Program block (instruction) · T_CONFIG
System data type · CONF_DATA
Refer to the documentation of the program blocks in the online help of STEP 7.
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
21
Product overview, functions 2.7 LEDs
2.7
LEDs
LEDs
RUN LED ERROR LED MAINT LED LINK/ACT LED Reserve LED
Figure 2-2 LED display of the CP 1543-1 (without front cover)
Meaning of the LED displays of the CP
The CP has the following 3 LEDs to display the current operating status and the diagnostics status:
· RUN · ERROR · MAINT
(one-color LED: green) (one-color LED: red) (one-color LED: yellow)
CP 1543-1
22
Operating Instructions, 05/2017, C79000-G8976-C289-07
Product overview, functions 2.7 LEDs
The following table shows the meaning of the various combinations of colors of the RUN, ERROR and MAINT LEDs.
Table 2- 3 Meaning of the LEDs "RUN", "ERROR", "MAINT"
RUN LED off LED lit green LED lit green LED lit green LED lit green LED lit green LED lit green
LED flashing green
LED flashing green
ERROR LED off LED lit red LED lit red LED off LED flashing red LED off LED off
LED off
LED flashing red
MAINT LED off LED lit yellow LED off LED off LED off LED lit yellow LED flashing yellow LED off
Meaning No supply voltage on the CP or supply voltage too low. LED test during startup
Startup (booting the CP)
CP is in RUN mode. No disruptions A diagnostics event has occurred.
Maintenance, maintenance is demanded. Maintenance is required. Downloading the user program
No CP configuration exists Loading firmware
LED flashing yellow
Module fault (LEDs flashing synchronized)
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
23
Product overview, functions 2.8 Gigabit interface
Meaning of the LED displays of the Ethernet interface: X1 P1
The LED LINK/ACT (two color green/yellow) is assigned to the port of the Ethernet interface. The table below shows the LED patterns.
Table 2- 4 Meaning of the "LINK/ACT" LED
LINK/ACT
green off
yellow off
flashing green green on
yellow off yellow off
green on
yellow flickers
Meaning No connection to Ethernet There is no Ethernet connection between the Ethernet interface of the CP and the communications partner. At the current time, there is no data being received/sent via the Ethernet interface. The "node flash test" is being performed.
Connection to Ethernet exists. There is an Ethernet connection between the Ethernet interface of your CP and a communications partner. At the current time, data is being received/sent via the Ethernet interface of the Ethernet device of a communications partner on Ethernet.
2.8
Gigabit interface
Ethernet interface with gigabit specification and security access
The CP has an Ethernet interface according to the gigabit standards IEEE 802.3. The Ethernet interface supports autocrossing, autonegotiation and autosensing.
The Ethernet interface allows a secure connection to external networks via a firewall. The CP provides the following protective function:
Protection of the S7-1500 station in which the CP is operated;
Protection of the underlying company networks connected to the other interfaces of the S7-1500 station.
You will find the pin assignment of the sub RJ-45 jack in section Installing and commissioning the CP 1543-1 (Page 28).
CP 1543-1
24
Operating Instructions, 05/2017, C79000-G8976-C289-07
Installation, connecting up, commissioning, operation
3
3.1
Important notes on using the device
Safety notices on the use of the device
Note the following safety notices when setting up and operating the device and during all associated work such as installation, connecting up or replacing the device.
WARNING
LAN attachment
A LAN or LAN segment with the attachments belonging to it should be within a single lowvoltage supply system and within a single building. Make sure that the LAN is in an of type A environment according to IEEE 802.3 or in a type 0 environment according to IEC TR 62101.
Never establish a direct electrical connection to TNV networks (telephone network) or WANs (Wide Area Network).
3.1.1
Notes on use in hazardous areas
WARNING The device may only be operated in an environment with pollution degree 1 or 2 (see IEC 60664-1).
WARNING EXPLOSION HAZARD Do not connect or disconnect cables to or from the device when a flammable or combustible atmosphere is present.
WARNING EXPLOSION HAZARD Replacing components may impair suitability for Class 1, Division 2 or Zone 2.
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
25
Installation, connecting up, commissioning, operation 3.1 Important notes on using the device
WARNING When used in hazardous environments corresponding to Class I, Division 2 or Class I, Zone 2, the device must be installed in a cabinet or a suitable enclosure.
WARNING DIN rail In the ATEX and IECEx area of application only the Siemens DIN rail 6ES5 710-8MA11 may be used to mount the modules.
3.1.2
Notes on use in hazardous areas according to ATEX / IECEx
WARNING Requirements for the cabinet/enclosure To comply with EU Directive 94/9 (ATEX95), the enclosure or cabinet must meet the requirements of at least IP54 in compliance with EN 60529.
WARNING If the cable or conduit entry point exceeds 70 °C or the branching point of conductors exceeds 80 °C, special precautions must be taken. If the equipment is operated in an air ambient in excess of 50 °C, only use cables with admitted maximum operating temperature of at least 80 °C.
WARNING
Take measures to prevent transient voltage surges of more than 40% of the rated voltage. This is the case if you only operate devices with SELV (safety extra-low voltage).
CP 1543-1
26
Operating Instructions, 05/2017, C79000-G8976-C289-07
3.1.3 3.1.4
Installation, connecting up, commissioning, operation 3.1 Important notes on using the device
Notes on use in hazardous areas according to UL HazLoc
WARNING EXPLOSION HAZARD You may only connect or disconnect cables carrying electricity when the power supply is switched off or when the device is in an area without inflammable gas concentrations.
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or nonhazardous locations only. This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.
General notices on use in hazardous areas according to FM
WARNING EXPLOSION HAZARD You may only connect or disconnect cables carrying electricity when the power supply is switched off or when the device is in an area without inflammable gas concentrations.
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or nonhazardous locations only. This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.
WARNING EXPLOSION HAZARD The equipment is intended to be installed within an ultimate enclosure. The inner service temperature of the enclosure corresponds to the ambient temperature of the module. Use installation wiring connections with admitted maximum operating temperature of at least 30 ºC higher than maximum ambient temperature.
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
27
Installation, connecting up, commissioning, operation 3.2 Installing and commissioning the CP 1543-1
3.2
Installing and commissioning the CP 1543-1
Installation and commissioning
WARNING Read the system manual "S7-1500 Automation System" Prior to installation, connecting up and commissioning, read the relevant sections in the system manual "S7-1500 Automation System" (references to documentation, refer to the section Guide to the documentation (Page 9)). Make sure that the power supply is turned off when installing/uninstalling the devices.
Configuration
Commissioning the CP fully is only possible if the STEP 7 project data is complete.
Procedure for installation and commissioning
Step 1
2 3 4 5
Execution
When installing and connecting up, keep to the procedures described for installing I/O modules in the system manual "S7-1500 Automation System".
Connect the CP to Industrial Ethernet via the RJ45 jack.
Notes and explanations Underside of the CP
Turn on the power supply.
Close the front covers of the module and keep them closed during operation.
The remaining steps in commissioning involve downloading the STEP 7 project data.
The STEP 7 project data of the CP is transferred when you download to the station. To load the station, connect the engineering station on which the project data is located to the Ethernet interface of the CPU.
You will find more detailed information on loading in the following sections of the STEP 7 online help:
· "Compiling and loading project data"
· "Using online and diagnostics functions"
CP 1543-1
28
Operating Instructions, 05/2017, C79000-G8976-C289-07
Installation, connecting up, commissioning, operation 3.3 Mode of the CPU - effect on the CP
Ethernet interface
The table below shows the pin assignment of the Ethernet interface (RJ-45 jack). The assignment corresponds to the Ethernet standard IEEE 802.3.
Table 3- 1 Pin assignment of the Ethernet interface
View
Pin 10/100 Mbps operation
10/100 Mbps or gigabit operation
Signal name Pin assignment Signal name Pin assignment
1
TD
Transmit Data + D1+
D1 bidirectional +
2
TD_N Transmit Data - D1-
D1 bidirectional -
3
RD
Receive Data + D2+
D2 bidirectional +
4
GND
Ground
D3+
D3 bidirectional +
5
GND
Ground
D3-
D3 bidirectional -
6
RD_N Receive Data - D2-
D2 bidirectional -
7
GND
Ground
D4+
D4 bidirectional +
8
GND
Ground
D4-
D4 bidirectional -
You will find additional information on the topics of "Connecting up" and "Accessories (RJ-45 plug)" in the system manual: Link: (https://support.industry.siemens.com/cs/ww/en/view/59191792)
3.3
Mode of the CPU - effect on the CP
You can change the mode of the CPU between RUN and STOP using the STEP 7 configuration software.
Depending on the operating status of the CPU, the CP behaves as described below.
Changing the CPU from RUN to STOP:
When the CPU is in STOP mode, the CP remains in RUN and behaves as follows: For established connections (ISO transport, ISOonTCP, TCP, UDP connections), the
following applies depending on the configuration: Programmed connections are retained. Configured connections are terminated. The following functions remain enabled: The configuration and diagnostics of the CP (system connections for configuration,
diagnostics, and PG channel routing are retained); Web diagnostics S7 routing function Time-of-day synchronization
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
29
Installation, connecting up, commissioning, operation 3.3 Mode of the CPU - effect on the CP
Note RUN/STOP LED of the CP The green RUN/STOP LED of the CP continues to be lit green regardless of the STOP mode of the CPU.
CP 1543-1
30
Operating Instructions, 05/2017, C79000-G8976-C289-07
Configuration, programming
4
4.1
Security recommendations
Keep to the following security recommendations to prevent unauthorized access to the system.
General
You should make regular checks to make sure that the device meets these recommendations and other internal security guidelines if applicable.
Evaluate your plant as a whole in terms of security. Use a cell protection concept with suitable products.
Do not connect the device directly to the Internet. Operate the device within a protected network area.
Keep the firmware up to date. Check regularly for security updates of the firmware and use them.
Check regularly for new features on the Siemens Internet pages.
Here you will find information on network security:
Link: (http://www.siemens.com/industrialsecurity)
Here you will find information on Industrial Ethernet security:
Link: (http://w3.siemens.com/mcms/industrial-communication/en/ie/industrial-ethernetsecurity/Seiten/industrial-security.aspx)
You will find an introduction to the topic of industrial security in the following publication:
Link: (http://w3app.siemens.com/mcms/infocenter/dokumentencenter/sc/ic/InfocenterLangu agePacks/Netzwerksicherheit/6ZB5530-1AP010BA4_BR_Netzwerksicherheit_en_112015.pdf)
Physical access
Restrict physical access to the device to qualified personnel.
Network attachment
Do not connect the PC directly to the Internet. If a connection from the CP to the Internet is required, arrange for suitable protection before the CP, for example a SCALANCE S with firewall.
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
31
Configuration, programming 4.1 Security recommendations
Security functions of the product
Use the options for security settings in the configuration of the product. These includes among others:
Protection levels
Configure access to the CPU under "Protection and Security".
Security function of the communication
Enable the security functions of the CP and set up the firewall.
If you connect to public networks, you should use the firewall. Think about the services you want to allow access to the station via public networks. By using the "bandwidth restriction" of the firewall, you can restrict the possibility of flooding and DoS attacks.
The FETCH/WRITE functionality allows you to access any data of your PLC. The FETCH/WRITE functionality should not be used in conjunction with public networks.
Use the secure protocol variants HTTPS, FTPS, NTP (secure) and SNMPv3.
Use the program blocks for secure OUC communication (Secure OUC).
Leave access to the Web server of the CPU (CPU configuration) and to the Web server of the CP disabled.
Protection of the passwords for access to program blocks
Protect the passwords stored in data blocks for the program blocks from being viewed. You will find information on the procedure in the STEP 7 information system under the keyword "Know-how protection".
Logging function
Enable the function in the security configuration and check the logged events regularly for unauthorized access.
Passwords
Define rules for the use of devices and assignment of passwords. Regularly update the passwords to increase security. Only use passwords with a high password strength. Avoid weak passwords for example
"password1", "123456789" or similar. Make sure that all passwords are protected and inaccessible to unauthorized personnel.
See also the preceding section for information on this. Do not use one password for different users and systems.
Protocols
Secure and non-secure protocols
Only activate protocols that you require to use the system.
Use secure protocols when access to the device is not prevented by physical protection measures.
CP 1543-1
32
Operating Instructions, 05/2017, C79000-G8976-C289-07
Configuration, programming 4.1 Security recommendations
Table: Meaning of the column titles and entries The following table provides you with an overview of the open ports on this device. Protocol / function
Protocols that the device supports. Port number (protocol)
Port number assigned to the protocol. Default of the port
Open The port is open at the start of the configuration.
Closed The port is closed at the start of the configuration.
Port status Open The port is always open and cannot be closed. Open after configuration The port is open if it has been configured. Open (login, when configured) As default the port is open. After configuring the port, the communications partner needs to log in. Open with block call The port is only opened when a suitable program block is called.
Authentication Specifies whether or not the protocol authenticates the communications partner during access.
Protocol / function DHCP
DCP DCE
Port number (protocol) 68 (UDP)
93 (UDP) 135 (TCP)
Default of the port
Open
Open Open
Port status
Open after configuration (only outgoing) Open Open
S7 communication
Online security diagnostics
NTP
102 (TCP) 8448 (TCP) 123 (UDP)
HTTP HTTPS
80 (TCP) 443 (TCP)
Open Closed Closed Closed Closed
Open
Open after configuration
Open after configuration (only outgoing) Open after configuration Open after configuration
Authentication No No Yes, when security is enabled. No
No No Yes
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
33
Configuration, programming 4.2 Network settings
Protocol / function FTP
FTPS
SNMP SMTP
SMTPS
Port number (protocol) 20 (TCP) 21 (TCP) 989 (TCP) 990 (TCP) 161 (UDP) 25 (TCP)
587 (TCP)
Default of the port Closed Closed Open Closed Closed
Port status
Open after configuration
Open after configuration
Open after configuration Open with block call (only outgoing) Open with block call (only outgoing)
Authentication No Yes Yes (with SNMPv3) No No
4.2
Network settings
Automatic setting
The Ethernet interface of the CPU is set permanently to autosensing.
Note In normal situations, the basic setting ensures troublefree communication.
Autocrossing mechanism
With the integrated autocrossing mechanism, it is possible to use a standard cable to connect the PC/PG. A crossover cable is not necessary.
Note Connecting a switch To connect a switch, that does not support the autocrossing mechanism, use a crossover cable.
CP 1543-1
34
Operating Instructions, 05/2017, C79000-G8976-C289-07
4.3
IP configuration
Configuration, programming 4.3 IP configuration
4.3.1
Points to note about IP configuration
Configured S7 and OUC connections cannot be operated if the IP address is assigned using DHCP
Note If you obtain the IP address using DHCP, any S7 and OUC connections you may have configured will not work. Reason: The configured IP address is replaced by the address obtained via DHCP during operation.
4.3.2
Restart after detection of a duplicate IP address in the network
To save you timeconsuming troubleshooting in the network, during startup the CP detects double addressing in the network.
Behavior when the CP starts up
If double addressing is detected when the CP starts up, the CP changes to RUN and cannot be reached via the Ethernet interface. The ERROR LED flashes.
4.3.3
IP routing
IP routing via the backplane bus
The CP supports static IP routing (IPv4) to other CM 1542-1 / CP 1543-1. You can use IP routing, for example, for Web server access by lower-level modules.
With IP routing, the data throughput is limited to 1Mbps. Remember this in terms of the number of modules involved and the expected data traffic via the backplane bus.
Configuration
You can activate the IP routing in STEP 7 via the function "IP routing between communication modules". In the security settings, the corresponding function is called "IP routing via the backplane bus". When you activate the function, additional IP firewall rules are created which you can modify in the advanced firewall mode of the security settings.
IP routing runs via the configured default router. If you use several CPs in a station, of the modules in the station only one may be configured as a router.
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
35
Configuration, programming 4.4 Security
4.4
Security
Note the range and application of the security functions of the CP in the section Industrial Ethernet Security (Page 15).
For the configuration limits, see section Characteristics security (Page 19).
The security functions are configured in STEP 7.
4.4.1
VPN
What is VPN?
Virtual Private Network (VPN) is a technology for secure transportation of confidential data in public IP networks, for example the Internet. With VPN, a secure connection (= tunnel) is set up and operated between two secure IT systems or networks via a non-secure network.
One of the main characteristics of the VPN tunnel is that it forwards all network packets regardless of higher protocols (HTTP, FTP).
The data traffic between two network components is transported practically unrestricted through another network. This allows entire networks to be connected together via a neighboring network.
Properties
VPN forms a logical subnet that is embedded in a neighboring (assigned) network. VPN uses the usual addressing mechanisms of the assigned network, however in terms of the data, it transports its own network packets and therefore operates independent of the rest of this network.
VPN allows communication of the VPN partners with the assigned network.
VPN is based on tunnel technology, can be individually configured, is customer-specific and is self-contained.
Communication between the VPN partners is protected from eavesdropping or manipulation by using passwords, public keys or a digital certificate (= authentication).
Areas of application
Local area networks can be connected together securely via the Internet ("site-to-site" connection).
Secure access to a company network ("end-to-site" connection).
Secure access to a server ("end-to-end" connection).
Communication between two servers is possible without being accessible to third parties ("end-to-end" or "host-to-host" connection).
Ensuring information security in networked automation systems.
CP 1543-1
36
Operating Instructions, 05/2017, C79000-G8976-C289-07
Configuration, programming 4.4 Security
Securing the computer systems including the associated data communication within an automation network or secure remote access via the Internet.
Secure remote access from a PC/programming device to automation devices or networks protected by security modules is possible via public networks.
Cell protection concept
With Industrial Ethernet Security, individual devices, automation cells or network segments of an Ethernet network can be protected:
The access to individual devices or even to entire automation cells protected by security modules is allowed.
Secure connections via non-secure network structures becomes possible.
Due to the combination of different security measures such as firewall, NAT/NAPT routers and VPN via IPsec tunnels, security modules protect against the following:
Data espionage
Data manipulation
Unwanted access
4.4.1.1
Creating VPN tunnel communication between S7-1500 stations
Requirements
To create a VPN tunnel between two S7-1500 stations, the following requirements must be met:
Two S7-1500 stations have been configured.
Both CPs are configured with a firmware version V1.1.
The Ethernet interfaces of the two stations are located in the same subnet.
Note Communication also possible via an IP router
Communication between the two S7-1500 stations is also possible via an IP router. To use this communications path, however, you need to make further settings.
Procedure
To create a VPN tunnel, you need to work through the following steps: 1. Create a security user.
If the security user has already been created: Log on as a user. 2. Select the "Activate security features" check box.
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
37
Configuration, programming 4.4 Security
3. Create the VPN group and assign security modules. 4. Configure properties of the VPN group.
Configure local VPN properties of the two CPs. You will find a detailed description of the individual steps in the following paragraphs of this section.
Creating a security user
To create a VPN tunnel, you require appropriate configuration rights. To activate the security functions, you need to create at least one security user. 1. In the local security settings of the CP, click the "User logon" button.
Result: A new window opens. 2. Enter the user name, password and confirmation of the password. 3. Click the "User login" button.
You have created a new security user. The security functions are now available to you. With all further logons, log on as user.
Selecting the "Activate security features" check box
After logging on, select the "Activate security features" check box for both CPs. You now have the security functions available for both CPs.
Creating the VPN group and assigning security modules
Note Current date and current time of day on the security modules When using secure communication (for example HTTPS, VPN...), make sure that the security modules involved have the current time of day and the current date. Otherwise the certificates used will not be evaluated as valid and the secure communication will not work.
1. In the global security settings, select the entry "Firewall" > "VPN groups" > "Add new VPN group".
2. Double-click on the entry "Add new VPN group", to create a VPN group. Result: A new VPN group is displayed below the selected entry.
3. In the global security settings, double-click on the entry "VPN groups" > "Assign module to a VPN group".
4. Assign the security modules between which VPN tunnels will be established to the VPN group.
CP 1543-1
38
Operating Instructions, 05/2017, C79000-G8976-C289-07
Configuration, programming 4.4 Security
Configuring properties of the VPN group
1. Double-click on the newly created VPN group. Result: The properties of the VPN group are displayed under "Authentication".
2. Enter a name for the VPN group. Configure the settings of the VPN group in the properties. These properties define the default settings of the VPN group that you can change at any time.
Note Specifying the VPN properties of the CP You specify the VPN properties of the required CP in the local properties of the module ("Security" > "Firewall" > "VPN")
Result
You have created a VPN tunnel. The firewalls of the CPs are activated automatically: The "Activate firewall" check box is selected as default when you create a VPN group. You cannot deselect the check box.
Download the configuration to all modules that belong to the VPN group.
4.4.1.2
Successfully establishing VPN tunnel communication between the CP 1543-1 and SCALANCE M
Creating VPN tunnel communication between the CP 1543-1 and SCALANCE M is the same as described in Procedure for S7-1500 stations (Page 37).
VPN tunnel communication will only be established if you have selected the check box "Perfect Forward Secrecy" in the global security settings of the created VPN group ("VPN groups > Authentication").
If the check box is not selected, the CP 1543-1 rejects establishment of the tunnel.
4.4.1.3
VPN tunnel communication with SOFTNET Security Client
Creating VPN tunnel communication between the CP SOFTNET Security Client and CP 1543-1 is the same as described in Procedure for S7-1500 stations (Page 37).
VPN tunnel communication works only if the internal node is disabled
Under certain circumstances the establishment of VPN tunnel communication between SOFTNET Security Client and the CP 1543-1 fails.
SOFTNET Security Client also attempts to establish VPN tunnel communication to a lowerlevel internal node. This communication establishment to a non-existing node prevents the required communication establishment to the CP 1543-1.
To establish successful VPN tunnel communication to the CP 1543-1, you need to disable the internal node.
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
39
Configuration, programming 4.4 Security
Use the procedure for disabling the node as explained below only if the described problem occurs. Disable the node in the SOFTNET Security Client tunnel overview: 1. Remove the checkmark in the "Enable active learning" check box.
The lower-level node initially disappears from the tunnel list. 2. In the tunnel list, select the required connection to the CP 1543-1. 3. With the right mouse button, select "Enable all members" in the shortcut menu.
The lower-level node appears again temporarily in the tunnel list. 4. Select the lower-level node in the tunnel list. 5. With the right mouse button, select "Delete entry" in the shortcut menu. Result: The lower-level node is now fully disabled. VPN tunnel communication to the CP 1543-1 can be established.
4.4.1.4
CP as passive subscriber of VPN connections
Setting permission for VPN connection establishment with passive subscribers
If the CP is connected to another VPN subscriber via a gateway, you need to set the permission for VPN connection establishment to "Responder".
This is the case in the following typical configuration:
VPN subscriber (active) gateway (dyn. IP address) Internet gateway (fixed IP address) CP (passive)
Configure the permission for VPN connection establishment for the CP as a passive subscriber as follows:
1. In STEP 7, go to the devices and network view.
2. Select the CP.
3. Open the parameter group "VPN" in the local security settings.
4. For each VPN connection with the CP as a passive VPN subscriber, change the default setting "Initiator/Responder" to the setting "Responder".
CP 1543-1
40
Operating Instructions, 05/2017, C79000-G8976-C289-07
Configuration, programming 4.4 Security
4.4.2
Firewall
4.4.2.1
Firewall sequence when checking incoming and outgoing frames
Each incoming or outgoing frame initially runs through the MAC firewall (layer 2). If the frame is discarded at this level, it is not checked by the IP firewall (layer 3). This means that with suitable MAC firewall rules, IP communication can be restricted or blocked.
4.4.2.2
Notation for the source IP address (advanced firewall mode)
If you specify an address range for the source IP address in the advanced firewall settings of the CP 1543-1, make sure that the notation is correct: Separate the two IP addresses only using a hyphen.
Correct: 192.168.10.0-192.168.10.255 Do not enter any other characters between the two IP addresses.
Incorrect: 192.168.10.0 - 192.168.10.255 If you enter the range incorrectly, the firewall rule will not be used.
4.4.2.3
HTTP and HTTPS not possible with IPv6
It is not possible to use HTTP and HTTPS communication on the Web server of the station using the IPv6 protocol.
If the firewall is enabled in the local security settings in the entry "Firewall > Predefined IPv6 rules": The selected check boxes "Allow HTTP" and "Allow HTTPS" have no function.
4.4.2.4
Firewall settings for connections via a VPN tunnel
IP rules in advanced firewall mode
If you have configured connections between CPs, note the following setting if you operate the CPs in advanced firewall mode.
In the parameter group "Security > Firewall > IP rules" select the setting "Allow" for tunnel connections.
If you do not enable the option, the VPN connection is terminated and re-established.
This applies to connections between a CP 1543-1 and for example a CP 343-1 Advanced, CP 443-1 Advanced, CP 1628 or CP 1243-1.
See also
Online diagnostics and downloading to station with the firewall activated (Page 42)
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
41
Configuration, programming 4.4 Security
4.4.3
Online functions
4.4.3.1
Online diagnostics via port 8448
Security diagnostics without opening port 102
If you want to perform security diagnostics without opening port 102, follow the steps below: 1. Select the CP in STEP 7. 2. Open the "Online & diagnostics" shortcut menu (right mouse button). 3. In the parameter group "Security > Status" click the "Connect online" button. In this way you perform the security diagnostics via port 8448.
4.4.3.2
Online diagnostics and downloading to station with the firewall activated
Setting the firewall for online functions
With the security functions enabled, follow the steps outlined below:
1. In the global security settings (see project tree), select the entry "Firewall > Services > Define services for IP rules".
2. Select the "ICMP" tab.
3. Insert a new entry of the type "Echo Reply" and another of the type "Echo Request".
4. Now select the CP in the S7 station.
5. Enable the advanced firewall mode in the local security settings of the CP in the "Security > Firewall" parameter group.
6. Open the "IP rules" parameter group.
7. In the table, insert a new IP rule for the previously created global services as follows:
Action: Allow; "From external -> To station " with the globally created "Echo request" service
Action: Allow; "From station -> to external" with the globally created "Echo reply" service
8. For the IP rule for the Echo Request, enter the IP address of the engineering station in "Source IP address". This ensures that only ICMP frames (ping) from your engineering station can pass through the firewall.
CP 1543-1
42
Operating Instructions, 05/2017, C79000-G8976-C289-07
Configuration, programming 4.5 Time-of-day synchronization
4.4.4
Filtering of the system events
Communications problems if the value for system events is set too high
If the value for filtering the system events is set too high, you may not be able to achieve the maximum performance for the communication. The high number of output error messages can delay or prevent the processing of the communications connections.
In "Security > Log settings > Configure system events", set the "Level:" parameter to the value "3 (Error)" to ensure the reliable establishment of the communications connections.
4.5
Time-of-day synchronization
General rules
The CP supports the following mode for timeofday synchronization: NTP mode (NTP: Network Time Protocol)
Note Recommendation for setting the time
Synchronization with a external clock at intervals of approximately 10 seconds is recommended. This achieves as small a deviation as possible between the internal time and the absolute time.
Note Special feature of time-of-day synchronization using NTP
If the option "Accept time from non-synchronized NTP servers" is not selected, the response is as follows:
If the CP receives a time of day frame from an unsynchronized NTP server with stratum 16, the time of day is not set according to the frame. In this case, none of the NTP servers is displayed as "NTP master" in the diagnostics; but rather only as being "reachable".
Security
In the extended NTP configuration, you can create and manage additional NTP servers.
Note Ensuring a valid time of day
If you use security functions, a valid time of day is extremely important. If you do not obtain the time-of-day from the station (CPU), we therefore recommend that you use the NTP (secure) method.
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
43
Configuration, programming 4.6 Program blocks for OUC
Configuration
For more detailed information on configuration, refer to the STEP 7 online help of the "Timeof-day synchronization" parameter group.
4.6
Program blocks for OUC
Programming Open User Communication (OUC)
The instructions (program blocks) listed below are required for the following communication services via Ethernet: ISO transport TCP ISO-on-TCP UDP (Multicast) E-mail For this, create suitable program blocks. The program block can be found in STEP 7 in the "Instructions > Communication > Open user communication" window. You will find details on the program blocks in the information system of STEP 7.
Note Different program block versions Note that in STEP 7 you cannot use different versions of a program block in a station.
Supported program blocks for OUC
The following instructions in the specified minimum version are available for programming Open User Communication: TSEND_C V3.1 / TRCV_C V3.1
Compact blocks for connection establishment/termination and for sending and receiving data or TCON V4.0 / TDISCON V2.1
Connection establishment / connection termination TUSEND V4.0 / TURCV V4.0
Sending and receiving data via UDP
CP 1543-1
44
Operating Instructions, 05/2017, C79000-G8976-C289-07
Configuration, programming 4.6 Program blocks for OUC
TSEND V4.0 / TRCV V4.0 Sending and receiving data via TCP or ISOonTCP
TMAIL_C V4.0 Sending e-mails Note the description of TMAIL_C as of version V4.0 in the STEP 7 information system.
Connection establishment and termination
Connections are established using the program block TCON. Note that a separate program block TCON must be called for each connection. A separate connection must be established for each communications partner even if identical blocks of data are being sent. After a successful transfer of the data, a connection can be terminated. A connection is also terminated by calling "TDISCON".
Note Connection abort If an existing connection is aborted by the communications partner or due to disturbances on the network, the connection must also be terminated by calling TDISCON. Make sure that you take this into account in your programming.
Connection descriptions in system data types (SDTs)
For the connection description, the blocks listed above use the parameter CONNECT (or MAIL_ADDR_PARAM with TMAIL_C). The connection description is stored in a data block whose structure is specified by the system data type (SDT).
Creating an SDT for the data blocks You create the SDT required for every connection description as a data block. You generate the SDT type in STEP 7 by entering the name (e.g. "TCON_IP_V4") in the "Data type" box manually in the declaration table of block instead of selecting an entry from the "Data type" drop-down list. The corresponding SDT is then created with its parameters.
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
45
Configuration, programming 4.6 Program blocks for OUC
The following SDTs can be used. Configured connections:
TCON_Configured For transferring frames via TCP
Programmed connections: TCON_IP_V4 For transferring frames via TCP or UDP TCON_IP_V4_SEC For the secure transfer of frames via TCP TCON_QDN For transferring frames via TCP or UDP TCON_QDN_SEC For the secure transfer of frames via TCP TCON_IP_RFC For transferring frames via ISO-on-TCP TCON_ISOnative For transferring frames via ISO transport TMail_V4 For transferring e-mails addressing the e-mail server using an IPv4 address TMail_V6 For transferring e-mails addressing the e-mail server using an IPv6 address TMail_FQDN For transferring e-mails addressing the e-mail server using the host name TMail_V4_SEC For secure transfer of e-mails addressing the e-mail server using an IPv4 address TMail_V6_SEC For secure transfer of e-mails addressing the e-mail server using an IPv6 address TMail_QDN_SEC For secure transfer of e-mails addressing the e-mail server using the host name
You will find the description of the SDTs with their parameters in the STEP 7 information system under the relevant name of the SDT. You can find a description of the parameters of SDTs TMail_V4_SEC, TMail_V6_SEC and TMail_QDN_SEC in the online help section on TCON_IP_V4_SEC.
CP 1543-1
46
Operating Instructions, 05/2017, C79000-G8976-C289-07
4.7
Setting up FTP communication
Configuration, programming 4.7 Setting up FTP communication
4.7.1
The program block FTP_CMD (FTP client function)
Meaning
Using the FTP_CMD instruction, you can establish FTP connections and transfer files from and to an FTP server.
Note Block versions
You can use the version V2.x of FTP_CMD in a station only in conjunction with a CPU and a CP V2.x V2.x.
As soon as the station obtains a CPU V1.x or CP V1.x, you must use FTP_CMD in the older version V1.x (e.g. V1.4). To do this, change the version of the "SIMATIC NET CP" library to V3.4. You can then select an older version of the block.
The table below shows the compatibility.
Table 4- 1 Compatibility of the block FTP_CMD with versions of the CPU and CP
FTP_CMD V1.5 V1.5 V2.0
CPU V1.x Any V2.x
CP 1543-1 Any V1.x V2.x
Data transfer is possible using FTP or FTPS (secure SSL connections).
Note
FTPS: Comparing certificates
FTPS requires a comparison of the certificates between FTP server and FTP client. If the FTP server is configured outside the STEP 7 project of the FTP client, the certificate needs to be imported from the FTP server. Import the certificate of the FTP server as a trusted certificate in the certificate manager.
How it works
The FTP_CMD instruction references a job block (ARG) in which the FTP command is specified. Depending on the type of FTP command (CMD), this job block uses different data structures for parameter assignment. Suitable data types (UDTs) are available for these various structures.
The following diagram shows the call structure:
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
47
Configuration, programming 4.7 Setting up FTP communication
Job blocks
The following data structures are used for the job blocks: Connection establishment
Various data structures are available for the connection establishment using the following types of access: FTP_CONNECT_IPV4: Connection establishment with IP addresses according to IPv4 FTP_CONNECT_IPV6: Connection establishment with IP addresses according to IPv6 FTP_CONNECT_NAME: Connection establishment with server name (DNS) Data transfer For the data transfer, two different data structures are available: FTP_FILENAME: Data structure for access to a complete file FTP_FILENAME_PART: Data structure for read access to a data area
Data transfer in the File_DB
The data transfer is achieved using data blocks containing a header for job data and the area for the user data. The data block is specified in the job buffer.
Requirements in the CPU configuration
Use the following settings to allow FTP access:
For all data blocks being used as file DBs, disable the "Optimized block access" attribute.
Only when using a CPU V1.x and a CP V1.1.x: Enable the "Access via PUT/GET communication" option in the configuration data of the CPU under "Protection & Security" (PUT/GET must be released).
FTP access using the FTP_CMD instruction - parameters for command types NOOP and QUIT
Supply the FTP_CMD with a reference to a job block with the following command types as well:
CP 1543-1
48
Operating Instructions, 05/2017, C79000-G8976-C289-07
Configuration, programming 4.7 Setting up FTP communication
CMD = 0 (NOOP) CMD = 5 (QUIT) The content of the job block is not evaluated when these command types execute, the type (UDT) of the specified job block is therefore unimportant.
Note Response if the reference to the FTP job block is missing If this reference is not supplied, the command is not executed. The instruction remains blocked in an apparent execution status without any feedback to the user program on the interface.
Evaluating the "LOCKED" and "NEW" status bits from the FTP_CMD program block
In version 1.2 of the "FTP_CMD" program block, the status bits "LOCKED" and "NEW" of the FILE_DB_HEADER are not evaluated. With the functions of the FTP server or when using the same file DB, the possibility of multiple simultaneous access to the same data area cannot be excluded. This can lead to data inconsistency.
As of version 1.5 of the "FTP_CMD" program block, the status bits "LOCKED" and "NEW" of the FILE_DB_HEADER are set correctly. The two status bits are evaluated. Version 1.5 is available as of STEP 7 Professional V12 SP1.
Note Avoiding data inconsistency Make sure that you do not access the same file DB more than once at the same time.
4.7.2
Configuring the FTP server function
CP configuration
Configure the FTP server function of the CP in the following parameter group. With security functions disabled: "FTP server configuration" With security functions enabled: "Security > FTP server configuration"
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
49
Configuration, programming 4.7 Setting up FTP communication
Requirements in the CPU configuration and programming
Use the following settings to allow FTP access: In the CPU configuration in "Protection & Security > Connection mechanisms":
Disable the option "Access via PUT/GET communication...". As file DBs create data blocks of the type "Array of byte". For all data blocks being used as file DBs, disable the "Optimized block access" attribute.
S7-1500 CP as FTP server
The functionality described here allows you to transfer data in the form of files to or from an S7-1500 station using FTP commands. At the same time, the conventional FTP commands for reading, writing and managing files can also be used. Access to the following data of the S7-1500 is possible: RAM of the CP
Name of the directory: /ram Data blocks of the CPU Name of the directory: /cpu1 / DBx "DBx" is the name of the relevant data block e.g. DB10. SIMATIC memory card of the CPU The function is supported as of CP firmware V2.0 and CPU firmware V2.0. Name of the directory: /mmc_cpu1 Access to the following folders of the SIMATIC memory card is possible: /DATALOGS
Directory for log files /RECIPES
Directory for recipe files
Note FTP access to the SIMATIC memory card of the CPU: CPU STOP possible Note that the cards have a limited capacity If the memory space of the SIMATIC memory card is completely occupied due to storage of large amounts of data, the CPU changes to STOP. · Use a card with adequate storage capacity. · Avoid writing large amounts of data often to the SIMATIC memory card using FTP.
CP 1543-1
50
Operating Instructions, 05/2017, C79000-G8976-C289-07
Configuration, programming 4.7 Setting up FTP communication
Reading/writing via DBs of the CPU
To transfer data with FTP via data blocks, create the required DBs in the CPU. Due to their special structure, these are known as file DBs. When it receives an FTP command, the CP acting as FTP server queries its assignment table to find out how the data blocks used for file transfer in the CPU will be mapped to files. You make the data block assignment in the STEP 7 configuration of the CP (FTP configuration).
Figure 4-1 S7 CPU with CP 1543-1 as FTP server for the S7 CPU data
DB assignment in STEP 7
The fields of the table in the data block assignment in STEP 7 have the following meaning and syntax:
Column title Meaning
Example
CPU Assignment of the CPU
Selectable from dropdown list
DB
No. of the data block (file DB)
Selectable from dropdown list
cpu1 [PLC_1]
20
File name
The file name assigned to the file DB
Automatic name proposal; entry can editable.
cpu1_db20.dat
Comment Informal comment
Measured values plant 1
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
51
Configuration, programming 4.8 IP access protection with programmed communications connections
Notes on the syntax The following applies to the file name of a file DB: The file name begins with "cpuX" (where X=1 for S7-1500).
Note Keep to the notation (lower case for "cpu" and no leading spaces at the start of the row). Otherwise, the files will not be recognized.
Length: maximum 64 characters (including "cpuX")
FTPS access only with security functions enabled
FTPS access to the S7-1500 station as an FTP server is only possible if a user with suitable rights has been created in the STEP 7 project. This means that the security functions must be enabled on the CP. For this, security settings are available in the global user administration.
4.8
IP access protection with programmed communications connections
Restrictions with programmed connections and configured security functions
In principle, it is possible to set up communications connections program-controlled using the program block TCON and at the same time by configuring the firewall.
When configuring specified connections (active endpoints) in STEP 7, the IP addresses of the partners are not entered automatically in the firewall configuration.
The configuration of IP access protection and the aspects of activated security are described in the online help of STEP 7.
CP 1543-1
52
Operating Instructions, 05/2017, C79000-G8976-C289-07
Diagnostics and upkeep
5
5.1
Diagnostics options
Diagnostics options
You have the following diagnostics options available for the module: The LEDs of the module
For information on the LED displays, refer to the section LEDs (Page 22). STEP 7: The "Diagnostics" tab in the Inspector window
Here, you can obtain the following information on the selected module: Information on the online status of the module STEP 7: Diagnostics functions in the "Online > Online and diagnostics" menu Here, you can obtain static information on the selected module: General information on the module Diagnostics status Information on the Ethernet interface Security (with security enabled) You can obtain further information on the diagnostics functions of STEP 7 in the STEP 7 online help. SNMP You will find detailed information about the supported functions in the section Diagnostics with SNMP (Page 53).
5.2
Diagnostics with SNMP
Requirement
The requirement for using SNMP is the enabling of the function in the configuration.
SNMP (Simple Network Management Protocol)
SNMP is a protocol for diagnostics and managing networks and nodes in the network. To transmit data, SNMP uses the connectionless UDP protocol.
The information on the properties of SNMP-compliant devices is entered in MIB files (MIB = Management Information Base).
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
53
Diagnostics and upkeep 5.2 Diagnostics with SNMP
You will find detailed information on SNMP and the Siemens Automation MIB in the manual "Diagnostics and Configuration with SNMP" that you will find on the Internet: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15392/man)
Performance range of the CP
The CP supports the following SNMP versions: SNMPv1 SNMPv3 (with activated Security functions) Traps are not supported by the CP.
Supported MIBs in SNMPv1
The CP supports the following MIBs: MIB II (acc. to RFC1213)
The CP supports the following groups of MIB objects: System Interfaces IP ICMP TCP UDP SNMP LLDP MIB Siemens Automation MIB Note the rights for writing to the MIB objects, see the next section (SNMPv3).
CP 1543-1
54
Operating Instructions, 05/2017, C79000-G8976-C289-07
Diagnostics and upkeep 5.2 Diagnostics with SNMP
Supported MIB objects in SNMPv3
If SNMPv3 is enabled, the CP returns the contents of the following MIB objects: MIB II (acc. to RFC1213)
The CP supports the following groups of MIB objects: System Interfaces
The "Interfaces" MIB object provides status information about the CP interfaces. IP (IPv4/IPv6) ICMP TCP UDP SNMP The following groups of the standard MIB II are not supported: Adress Translation (AT) EGP Transmission LLDP MIB Siemens Automation MIB Note that write access is permitted only for the following MIB objects of the "System" group: sysContact sysLocation sysName
A set sysName is sent as the host name using DHCP option 12 to the DHCP server to register with a DNS server. For all other MIB objects and groups, only read access is possible for security reasons.
Access rights using community names (SNMPv1)
TCP uses the following community strings to control the permissions for access to the SNMP agent:
Table 5- 1 Access rights in the SNMP agent
Type of access Read access Read and write access
*) Note the use of lowercase letters!
Community string *) public private
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
55
Diagnostics and upkeep 5.3 Replacing a module without a programming device
5.3
Replacing a module without a programming device
General procedure
The configuration data of the CP is stored on the CPU. This makes it possible to replace this module with a module of the same type (identical article number) without a PG.
Note Configured MAC address is adopted When setting the ISO protocol, remember that MAC address set previously during configuration is transferred by the CPU to the new CP module.
Module replacement: Special feature of IP address assignment from a DHCP server (IPv4)
During configuration of the CP you can specify the IP configuration in the properties dialog; one option is to obtain the IP address from a DHCP server.
Note Recommendation: Configuring a client ID
When replacing modules, remember that the factoryset MAC address of the new module is different from the previous module. When the factoryset MAC address of the new module is sent to the DHCP server, this will return either a different or no IP address.
Ideally, you should therefore configure IP as follows: · Always configure a client ID and configure your DHCP server accordingly. This makes
sure that after replacing the module, you always obtain the same IP address from the DHCP server.
If, in exceptional situations, you have configured a new MAC address instead of the MAC address set in the factory, the configured MAC address will always be transferred to the DHCP server. In this case, the new CP also has the same IP address as the previous module.
CP 1543-1
56
Operating Instructions, 05/2017, C79000-G8976-C289-07
Technical specifications
6
Note the information in the System description of SIMATIC S7-1500 (Page 9).
In addition to the information in the system description, the following technical specifications apply to the module.
Technical specifications - CP 1543-1
Product name
CP 1543-1
Article number
6GK7 543-1AX00-0XE0
Attachment to Industrial Ethernet
· Number
1 x Ethernet (gigabit) interface
· Design
RJ-45 jack
· Transmission speed
10 / 100/ 1000 Mbps
Electrical data Power supply · via S7-1500 backplane bus 15 V
Current consumption · From backplane bus
350 mA
· Power dissipation
5.3 W
Insulation
Insulation tested with
707 VDC (type test)
Design, dimensions and weight
Module format
Compact module S7-1500, single width
Degree of protection
IP20
Weight
Approx. 350 g
Dimensions (W x H x D)
35 x 142 x 129 mm
Installation options
Mounting in an S7-1500 rack
Permitted cable lengths
(Alternative combinations per length range) *
0 ... 55 m
· Max. 55 m IE TP Torsion Cable with IE FC RJ45 Plug 180
· Max. 45 m IE TP Torsion Cable with IE FC RJ45 + 10 m TP Cord via IE FC RJ45 Outlet
0 ... 85 m
· Max. 85 m IE FC TP Marine/Trailing/Flexible/FRNC/Festoon/Food Cable with IE FC RJ45 Plug 180
· Max. 75 m IE FC TP Marine/Trailing/Flexible/FRNC/Festoon/Food Cable + 10 m TP Cord via IE FC RJ45 Outlet
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
57
Technical specifications
Technical specifications - CP 1543-1
0 ... 100 m
· Max. 100 m IE FC TP Standard Cable with IE FC RJ45 Plug 180
· Max. 90 m IE FC TP Standard Cable + 10 m TP Cord via IE FC RJ45 Outlet
Product functions **
* For details, refer to the IK PI catalog, cabling technology
** You will find the product functions in the section Product overview, functions (Page 11).
CP 1543-1
58
Operating Instructions, 05/2017, C79000-G8976-C289-07
Approvals
7
Approvals issued
Note Issued approvals on the type plate of the device
The specified approvals - with the exception of the certificates for shipbuilding - have only been obtained when there is a corresponding mark on the product. You can check which of the following approvals have been granted for your product by the markings on the type plate. The approvals for shipbuilding are an exception to this.
Certificates for shipbuilding and national approvals
The device certificates for shipbuilding and special national approvals can be found in Siemens Industry Online Support on the Internet: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15340/cert)
EC declaration of conformity
The product meets the requirements and safety objectives of the following EC directives and it complies with the harmonized European standards (EN) for programmable logic controllers which are published in the official documentation of the European Union. 2014/34/EU (ATEX explosion protection directive)
Directive of the European Parliament and the Council of 26 February 2014 on the approximation of the laws of the member states concerning equipment and protective systems intended for use in potentially explosive atmospheres, official journal of the EU L96, 29/03/2014, pages. 309-356 2014/30/EU (EMC)
EMC directive of the European Parliament and of the Council of February 26, 2014 on the approximation of the laws of the member states relating to electromagnetic compatibility; official journal of the EU L96, 29/03/2014, pages. 79-106 2011/65/EU (RoHS) Directive of the European Parliament and of the Council of 8 June 2011 on the restriction of the use of certain hazardous substances in electrical and electronic equipment The EC Declaration of Conformity is available for all responsible authorities at: Siemens Aktiengesellschaft Division Process Industries and Drives Process Automation
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
59
Approvals
IECEx ATEX
DE-76181 Karlsruhe Germany You will find the EC Declaration of Conformity on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15340/cert) The current versions of the standards can be seen in the EC Declaration of Conformity and in the certificates.
The product meet the requirements of explosion protection according to IECEx. IECEx classification: Ex nA IIC T4 Gc The product meets the requirements of the following standards: EN 60079-0
Hazardous areas - Part 0: Equipment - General requirements EN 60079-15
Explosive atmospheres - Part 15: Equipment protection by type of protection 'n' You can see the current versions of the standards in the IECEx certificate that you will find on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15340/cert) The conditions must be met for the safe deployment of the product according to the section Notes on use in hazardous areas according to ATEX / IECEx (Page 26). You should also note the information in the document "Use of subassemblies/modules in a Zone 2 Hazardous Area" that you will find on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/view/78381013)
The product meets the requirements of the EC directive:2014/34/EC "Equipment and Protective Devices for Use in Potentially Explosive Atmospheres". Applied standards: EN 60079-0
Hazardous areas - Part 0: Equipment - General requirements EN 60079-15
Explosive atmospheres - Part 15: Equipment protection by type of protection 'n' The current versions of the standards can be seen in the EC Declaration of Conformity, see above. ATEX approval: II 3 G Ex nA IIC T4 Gc Test number: DEKRA 12 ATEX 0240X The conditions must be met for the safe deployment of the product according to the section Notes on use in hazardous areas according to ATEX / IECEx (Page 26).
CP 1543-1
60
Operating Instructions, 05/2017, C79000-G8976-C289-07
Approvals
You should also note the information in the document "Use of subassemblies/modules in a Zone 2 Hazardous Area" that you will find here:
In the SIMATIC NET Manual Collection in "All documents" > "Use of subassemblies/modules in a Zone 2 Hazardous Area"
On the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/view/78381013)
EMC
Until 19.04.2016 the product meets the requirements of the EC Directive 2014/30/EU "Electromagnetic Compatibility" (EMC directive).
Applied standards:
EN 61000-6-4
Electromagnetic compatibility (EMC) - Part 6-4: Generic standards - Emission standard for industrial environments
EN 61000-6-2
Electromagnetic compatibility (EMC) - Part 6-2: Generic standards - Immunity for industrial environments
RoHS
The product meets the requirements of the EC directive 2011/65/EU on the restriction of the use of certain hazardous substances in electrical and electronic equipment.
Applied standard:
EN 50581:2012
c(UL)us
Applied standards:
Underwriters Laboratories, Inc.: UL 61010-1 (Safety Requirements for Electrical Equipment for Measurement, Control, and Laboratory Use - Part 1: General Requirements)
IEC/UL 61010-2-201 (Safety requirements for electrical equipment for measurement, control and laboratory use. Particular requirements for control equipment)
Canadian Standards Association: CSA C22.2 No. 142 (Process Control Equipment)
Report / UL file: E 85972 (NRAG, NRAG7)
cULus Hazardous (Classified) Locations
Underwriters Laboratories, Inc.: cULus IND. CONT. EQ. FOR HAZ. LOC.
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
61
Approvals
Applied standards: ANSI ISA 12.12.01 CSA C22.2 No. 213-M1987 APPROVED for Use in: Cl. 1, Div. 2, GP. A, B, C, D T3...T6 Cl. 1, Zone 2, GP. IIC T3...T6 Ta: Refer to the temperature class on the type plate of the CP Report / UL file: E223122 (NRAG, NRAG7) Note the conditions for the safe deployment of the product according to the section Notes on use in hazardous areas according to UL HazLoc (Page 27).
Note For devices with C-PLUG memory: The C-PLUG memory module may only be inserted or removed when the power is off.
CSA
CSA Certification Mark Canadian Standard Association (CSA) nach Standard C 22.2 No. 142:
Certification Record 063533C-000
FM
Factory Mutual Approval Standards: Class 3600 Class 3611 Class 3810 ANSI/ISA 61010-1 Report Number 3049847 Class I, Division 2, Group A, B, C, D, T4 Class I, Zone 2, Group IIC, T4 You will find the temperature class on the type plate on the module.
Australia - RCM
The product meets the requirements of the AS/NZS 2064 standards (Class A).
CP 1543-1
62
Operating Instructions, 05/2017, C79000-G8976-C289-07
Approvals
Canada
This class A digital device meets the requirements of the Canadian standard ICES-003.
AVIS CANADIEN Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.
MSIP - For Korea only
A ( )
(A) , .
Note that in terms of the emission of interference, this device corresponds to limit class A. This device can be used in all areas except for residential environments.
Current approvals
SIMATIC NET products are regularly submitted to the relevant authorities and approval centers for approvals relating to specific markets and applications.
If you require a list of the current approvals for individual devices, consult your Siemens contact or check the Internet pages of Siemens Industry Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/15340/cert)
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
63
Approvals
CP 1543-1
64
Operating Instructions, 05/2017, C79000-G8976-C289-07
Index
A
Autocrossing mechanism, 34 Autosensing, 34
B
Bandwidth limitation, 15 Block execution time, 19
C
Cell protection concept VPN, 37
Changing CPU mode From RUN to STOP, 29
Commissioning Completeness of the STEP 7 project data, 28
Configuration, 28 Configuration and downloading the configuration data, 20 Configuration of the Ethernet interface, 21
Instruction, 21 Connecting a switch, 34 Connection resources of the CPU, 16 Connections for Web
Number, 18 Crossover cable, 34
D
Data storage of the configuration data of the CP, 56 DHCP server, 56 Diagnostics options, 53 Disposal, 5 Double addressing in the network, 35 Downloading project data, 28 Downloads, 10
E
E-mail, 12, 17, 21 EMC - electromagnetic compatibility, 59 Ethernet interface, 11, 24
Pin assignment, 29
F
FETCH/WRITE, 13, 17 S5/S7 addressing mode, 14
Firewall, 15 Firewall configuration, 52 Firmware version, 11 FTP, 21, 47 FTP (FTP client), 16 FTP in client mode
Configuration limits, 19 FTP in server mode
Configuration limits, 19 FTP_CMD, 47 FTPS, 47 FTPS - Security, 52 FTPS (explicit mode), 15
G
Gateway, 40 Gigabit specification, 24 Global firewall rules, 15 Glossary, 5
H
Hardware product version, 11 HMI communication, 12
I
Installation and commissioning, 28 Procedure, 28
Instruction FTP_CMD, 19, 21 T_CONFIG, 21 TCON, TSEND/TRCV, 21 TDISCON, 21 TMAIL_C, 21 TSEND_C/TRCV_C, 21 TUSEND/TURCV, 21
IP access protection, 52
CP 1543-1
Operating Instructions, 05/2017, C79000-G8976-C289-07
65
Index
IP address IPv6, 14 Via DHCP, 35
IP configuration IPv4 / IPv6, 14
IP routing, 35 IPsec tunnel
Number, 19 ISO, 21 ISO transport (complying with RFC 8073), 12 ISO transport connections, 17 ISO-on-TCP, 21 ISO-on-TCP (acc. to RFC 1006), 12 ISO-on-TCP connections, 17 IT functions, 13
L
LED display, 22 Logging, 15
M
MAC address, 11, 13, 56 Manual Collection, 10 Maximum data length for program blocks, 17 MIB, 53 Module replacement
Special feature of IP address assignment from a DHCP server (IPv4), 56 Multicast via UDP, 12
N
NTP (secure), 15, 43 NTP mode, 13 NTP server, 43 Number
Operable CPs, 20 Number of connections, 17
O
Online help of STEP 7, 28 OP connections
Number, 18 Open User Communication (OUC), 12 OUC (Open User Communication), 44 Overall configuration limits, 20
P
Passive VPN connection establishment, 40 PG communication, 12 PG connections
Number, 18 Port 8448, 42 Power supply modules
Additional, 20 PROFINET interface
LEDs, 24 Program block, (Instruction) Programmed communications connections, 52
R
Recycling, 5
S
S5/S7 addressing mode, 14 S7 communication, 12 S7 connections, 12, 16
Number of freely usable, 18 S7 routing function, 29 Safety notices, 25 Security diagnostics without port 102, 42 Security SDTs, 45 SIMATIC NET, 10 SIMATIC NET glossary, 5 SMTPS, 15 SNMP, 53 SNMP agent, 13 SNMPv3, 15 Special notes
Connecting a switch, 34 Ensuring a valid time of day, 43 Recommendation for setting the time, 43 Response if the reference to the FTP job block is missing, 49 Stateful packet inspection (layer 3 and 4), 15 STEP 7, 4, 20 System data type CONF_DATA, 21 FTP_CONNECT_IPV4, 21 FTP_CONNECT_IPV6, 21 FTP_CONNECT_NAME, 21 FTP_FILENAME, 21 FTP_FILENAME_PART, 21 TCON_Configured, 21 TCON_IP_v4, 21, 21 TCON_ISOnative, 21, 21
CP 1543-1
66
Operating Instructions, 05/2017, C79000-G8976-C289-07
TMAIL_FQDN, 21 TMail_v4, 21 TMail_v6, 21 System data types (SDTs), 45
T
TCON, 52 TCP, 21 TCP (acc. to RFC 793), 12 TCP connections, 17 TCP connections for FTP, 19 Time synchronization, 13 Time-of-day synchronization, 29
U
UDP Restrictions, 18
UDP (acc. to RFC 768), 12 UDP connections, 17 UDP frame buffering, 18
V
Version history, 10 Virtual Private Network
Definition, 36 VPN, (Virtual Private Network)
Areas of application, 36 Cell protection concept, 37
W
Web diagnostics, 29 Web server, 14
CP 1543-1 Operating Instructions, 05/2017, C79000-G8976-C289-07
Index 67
Index
CP 1543-1
68
Operating Instructions, 05/2017, C79000-G8976-C289-07
Power supply module PS 25W 24VDC _Pr_ef_ac_e_______________
(6ES7505-0KA00-0AB0)
_Do_c_um_e_n_tat_io_n _gu_id_e_______1_
SIMATIC
S7-1500/ET 200MP Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual
_Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs____________4_ _Ienr_treo_rrrua_pn_tds,_sdta_iatu_gsn_om_seti_scs_aalga_erm_s s_, ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_
_Di_m_en_s_ion_a_l d_ra_w_in_g _______A_
_Pa_ra_m_e_te_r d_a_ta_re_co_rd_______B_
01/2013
A5E31825931-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E31825931-AA 01/2013 Technical data subject to change
Copyright © Siemens AG 2013. All rights reserved
Preface
Preface
Purpose of this documentation
This manual supplements the system manuals:
S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792)
ET 200MP distributed I/O system (http://support.automation.siemens.com/WW/view/en/59193214)
Functions that concern the systems in general are described in these manuals.
The information in this manual along with the system manuals/function manuals will enable you to commission the systems.
Conventions
The term "CPU" as used in this manual refers to both the central modules of the S7-1500 automation system and to the interface modules of the ET 200MP distributed I/O system. Please observe notes labeled as follows:
Note A note contains important information about the product described in the documentation and its use, or about a specific section of the documentation to which you should pay particular attention.
Note on IT security
Siemens offers IT security mechanisms for its automation and drive product portfolio in order to support the safe operation of the plant/machine. We recommend that you inform yourself regularly on the IT security developments regarding your products. You can find information on this on the Internet (http://support.automation.siemens.com).
You can register for a product-specific newsletter here.
For the safe operation of a plant/machine, however, it is also necessary to integrate the automation components into an overall IT security concept for the entire plant/machine, which corresponds to the state-of-the-art IT technology. You can find information on this on the Internet (http://www.siemens.com/industrialsecurity).
Products used from other manufacturers should also be taken into account here.
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
3
Preface
Copyright notice for the open-source software used
Open-source software is used in the firmware of the product described. The open-source software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the following copyright notices.
© Copyright William E. Kempf 2001 Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. William E. Kempf makes no representations about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.
Copyright © 1994 Hewlett-Packard Company Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. Hewlett-Packard Company makes no representations about the suitability of this software for any purpose. It is provided ``as is'' without express or implied warranty.
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
4
Manual, 01/2013, A5E31825931-AA
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide................................................................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
Properties.......................................................................................................................................9
2.2
Control and display elements.......................................................................................................11
3 Wiring ...................................................................................................................................................... 13
3.1
Wiring the power supply module..................................................................................................13
4 Parameters .............................................................................................................................................. 15
4.1
Parameters...................................................................................................................................15
5 Interrupts, diagnostic alarms, error and status messages........................................................................ 17
5.1
Status and error displays .............................................................................................................17
5.2
Diagnostic alarms ........................................................................................................................19
5.3
Interrupts ......................................................................................................................................21
6 Technical specifications........................................................................................................................... 23
A Dimensional drawing ............................................................................................................................... 25
A.1
Dimensional drawing....................................................................................................................25
B Parameter data record............................................................................................................................. 27
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
5
Table of contents
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
6
Manual, 01/2013, A5E31825931-AA
Documentation guide
1
Introduction
The modular documentation of the S7-1500 and ET 200MP system families covers all aspects of your automation system.
The documentation consists of different modules that are divided into system manuals, function manuals and manuals.
The following table provides an overview of the documents that complement this manual. Information in the manual overrides specifications in the system manual.
Overview of the documentation for the power supply module PS 25W 24VDC
The table below lists additional documentation for using the PS 25W 24VDC benötigen. power supply module.
Table 1- 1 Documentation for the power supply module PS 25W 24VDC
Topic
Documentation
Most important contents
System description
System manual
·
S7-1500 automation system (http://support.automation.siemens.com/WW/vie
·
w/en/59191792)
·
System manual
·
ET 200MP distributed I/O system
·
(http://support.automation.siemens.com/WW/vie
w/en/59193214)
·
Application planning Installation Wiring Commissioning Standards and approvals Electromagnetic compatibility
· Mechanical and climatic ambient conditions
Designing interference-free controllers
Function manual
·
Designing interference-free controllers (http://support.automation.siemens.com/WW/vie
·
w/en/59193566)
·
Basics Electromagnetic compatibility Lightning protection
System diagnostics
Function manual
·
System diagnostics
·
(http://support.automation.siemens.com/WW/vie
w/en/59192926)
Overview
Hardware/software diagnostics evaluation
SIMATIC manuals
All current manuals for SIMATIC products are available for download free of charge from the Internet (http://www.siemens.com/automation/service&support).
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
7
Documentation guide
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
8
Manual, 01/2013, A5E31825931-AA
Product overview
2.1
Properties
Order number 6ES7505-5KA00-0AB0
View of the module
2
Figure 2-1 View of the PS 25W 24VDC module
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
9
Product overview 2.1 Properties
Properties
The PS 25W 24VDC power supply module permits the use of additional modules. The power supply module has the following properties: Technical properties
Rated input voltage 24 V DC (SELV) Output power 25 W Mains buffering Functional electrical isolation from the bus Supported functions Firmware update Identification data I&M0 to I&M4 Configuring in RUN Diagnostic alarms Diagnostic interrupts
Accessories
The following components are supplied with the power supply module: Power connector U connector These components are also available as spare parts.
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
10
Manual, 01/2013, A5E31825931-AA
Product overview 2.2 Control and display elements
2.2
Control and display elements
The following figure shows the control and connection elements of the PS 25W 24VDC behind the front cover as well as the power connector.
LED displays indicating the current operating state and diagnostic status of the PS On/off switch Connection for the power supply by means of the power connector Power connector, inserted in delivery state
Figure 2-2 View of the PS 25W 24VDC (without front cover) and of the power connector
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
11
Product overview 2.2 Control and display elements
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
12
Manual, 01/2013, A5E31825931-AA
Wiring
3
3.1
Wiring the power supply module
Mains connection
WARNING Installation instructions Risk of death or serious injury. Observe the general installation instructions applicable in your country when wiring the power supply module. Fuse the power cables according to their conductor cross-section.
The following applies to mains connection of the power supply module using the power connector: The power connector provides connection of the input voltage to the power supply
module with touch protection. The power connector provides permanent wiring. The power connector features an internal strain relief. The power connector ensures reverse polarity protection. A coding element is used on the power connector to assign it to a specific type of power
supply module. A connector coded for 230V AC cannot be inserted into a 24 V DC power supply module.
DANGER Do not manipulate or omit the coding element Changes to the coding element can result in dangerous states in your plant and/or damage to the outputs of the I/O modules. In order to avoid damage, do not manipulate the coding. The coding element may not be omitted.
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
13
Wiring 3.1 Wiring the power supply module
Cables
You need flexible cables to wire power to the power supply module. The conductor crosssection must be 1.5 mm2 (AWG: 16). The diameter of a 3 x 1.5 mm2 sheathed cable can be no more than 8.5 mm. The ground conductor of flexible cables must be longer than the two other conductors. The fusing must meet the requirements of the corresponding control cabinet.
DANGER
Input voltage
Risk of death or serious injury.
The input voltage of the PS 25W 24VDC must be supplied as safety extra low voltage (SELV).
Reference
Information on installation of the power supply module and wiring of the power connector is available in the system manual S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792).
Siemens recommends the use of devices from the SITOP family of products for applications with load power supplies. Wiring information is available in the documentation for the load power supply.
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
14
Manual, 01/2013, A5E31825931-AA
Parameters
4
4.1
Parameters
Parameters of the PS 25W 24VDC
For parameter assignment of the module with STEP 7, you specify the properties of the module using various parameters. The table below shows the configurable parameters.
When the parameters are assigned in the user program, they are transferred to the module with the WRREC instruction (configuring in RUN), see section Parameter data record (Page 27).
Table 4- 1 Configurable parameters and their defaults
Parameters Diagnostic/maintenance · Supply voltage missing
· Switch position Off
Value range
Yes/No Yes/No
Default
No No
Configuring in RUN
Yes Yes
Note Diagnostic alarms without supply voltage
Even when there is no supply voltage or when the On/Off switch is set to "Off", the power supply module of the CPU or the IM is supplied with enough voltage by the backplane bus that it can generate a diagnostic alarm. The entire diagnostic functionality is still available.
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
15
Parameters 4.1 Parameters
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
16
Manual, 01/2013, A5E31825931-AA
Interrupts, diagnostic alarms, error and status messages
5
5.1
Status and error displays
Introduction
Diagnostics by means of LEDs is a basic tool for troubleshooting. Usually, you can pinpoint the source of error more precisely by analyzing the module status information in STEP 7, or in the diagnostic buffer of the CPU. These locations contain the corresponding error information in plain text.
LED displays
The following figure shows the LED displays (status and error displays) of the PS 25W 24VDC.
RUN-LED ERROR-LED MAINT-LED
Figure 5-1 LED displays of the PS 25W 24VDC
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
17
Interrupts, diagnostic alarms, error and status messages 5.1 Status and error displays
Meaning of the LED displays
The following table explains the meaning of the status and error displays. You can find remedial measures for diagnostic alarms in the section Diagnostic alarms (Page 19).
Table 5- 1 Status and error displays RUN/ERROR/MAINT
RUN
LED ERROR
Off
Off
On
On
Not Flashing relevant
Off
Flashing
Not
Off
relevant
Flashing Flashing
MAINT Off
On Not relevant Not relevant
On
Flashing
Meaning
OFF, PS supplies no bus voltage · External error and diagnostics is not enabled · PS not supplied in the system, no supply voltage
connected to the PS and no supply voltage connected to CPU/IM.
Startup, all LED displays illuminate briefly after system startup or module startup after firmware update. Startup, PS supplies bus voltage, PS waiting for parameter assignment
Error, PS supplies no bus voltage · No supply voltage and diagnostics not enabled · Internal error
Maintenance demanded, PS supplies no bus voltage · Switch is off; supply is present and diagnostics is
enabled
Malfunction LED displays flash permanently
Remedy
Supply PS with voltage Check supply voltage Switch on PS
-
-
Evaluate diagnostic alarms and carry out appropriate remedial measures, see section Diagnostic alarms (Page 19) Switch on PS
Replace PS
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
18
Manual, 01/2013, A5E31825931-AA
Interrupts, diagnostic alarms, error and status messages 5.2 Diagnostic alarms
5.2
Diagnostic alarms
Diagnostic alarms
The following table shows the meaning of the diagnostic alarms and possible remedial measures for the respective cause.
One of the following "LED images" indicates directly on the PS that a diagnostic alarm was triggered.
The red ERROR-LED is flashing.
Indicates external or internal errors.
The yellow MAINT-LED is lit.
Maintenance; a maintenance request is active.
All three LEDs are flashing permanently
The PS is in "Defective" state.
In STEP 7, the diagnostic results are displayed in plain text by means of the online and diagnostic view. You can read the diagnostic data records by means of the "RDREC" instruction.
Table 5- 2 Diagnostic alarms, their meaning and remedies
Diagnostic alarm
External error Supply voltage missing
Error code Dec.
266D
Internal error Overtemperature 5D
Overvoltage backplane bus
267D
Low
281D
voltage/overload in
the power segment
Error in the power 282D segment
Meaning Hex.
Reacti Remedial measures on
010AH No supply voltage, or incorrect
1
insertion of the power connector
into the PS.
Check the supply voltage.
0005H Overtemperature on the printed 3 circuit board.
010BH High EMC interference or a
3
defective PS, CPU or IM inserted.
0119H A voltage dip below the valid limit 2 has been detected in the power segment to the right of the PS.
011AH PS or module to the right of the 2 PS is defective.
Check PS load. Isolate PS from mains. Wait one minute before you power on the PS again.
Eliminate electromagnetic interference. Check inserted modules and bus connectors. Isolate PS from mains. Wait one minute before you power on the PS again.
Check the modules in the affected segment; replace if necessary. Switch off the PS at the switch, then switch on again.
Replace the defective module. Switch off the PS at the switch, then switch on again.
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
19
Interrupts, diagnostic alarms, error and status messages 5.2 Diagnostic alarms
Diagnostic alarm
Safety shutdown
Maintenance Switch turned off Malfunction Module failure
Error code Dec. 285D
268D
256D
Meaning
Hex. 011DH
Reliable operation of the module is no longer guaranteed.
Reacti Remedial measures on
3
Check ambient conditions. Isolate PS
from mains. Wait one minute before
you power on the PS again.
010CH The PS is switched off.
1
Switch on PS.
0100H PS failure.
3
Replace PS.
External errors, internal errors and malfunctions
External errors occur outside the PS. In the parameterization, specify whether or not an external error can trigger a diagnostic alarm. By default, external errors do not trigger diagnostic alarms.
Internal errors occur inside the PS. If still possible, an internal error always triggers a diagnostic alarm.
A malfunction is a static state; the PS must be sent in for repair. If still possible, a defect always triggers a diagnostic alarm.
Explanation of the reactions
1. No power at the power segment to the right of the PS. Alarm is only generated if the PS is still powered by the CPU or IM via the backplane bus.
2. The modules to the right of the PS are switched off.
3. The PS is switched off retentively. Alarm is only generated if the PS is still powered by the CPU or IM via the backplane bus. You cannot switch on the module unless you have eliminated the error and disconnected power to the PS for approximately one minute.
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
20
Manual, 01/2013, A5E31825931-AA
Interrupts, diagnostic alarms, error and status messages 5.3 Interrupts
5.3
Interrupts
What is a diagnostic interrupt? You can determine reactions to internal or external errors in the user program, by programming a diagnostic interrupt which interrupts cyclic program execution on the CPU and triggers the diagnostic interrupt OB (OB82). The event which led to the interrupt is entered in the start information of the OB82.
Trigger of a diagnostic interrupt Events that can trigger a diagnostic alarm can also trigger a diagnostic interrupt: Supply voltage missing Overtemperature Overvoltage on the backplane bus Low voltage/overload in the power segment Error in the power segment Safety shutdown Switch position Off Malfunction
Reactions to a diagnostic interrupt You can find the CPU reaction to a diagnostic interrupt in the function manual System diagnostics (http://support.automation.siemens.com/WW/view/en/59192926). Detailed information on the error event is available in the diagnostic interrupt OB by executing the "RALRM" instruction (read additional interrupt information) and in the STEP 7 Online Help.
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
21
Interrupts, diagnostic alarms, error and status messages 5.3 Interrupts
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
22
Manual, 01/2013, A5E31825931-AA
Technical specifications
6
Technical specifications of the PS 25W 24VDC
Product type designation General information Hardware version Firmware version Engineering with STEP 7 TIA Portal can be configured/integrated as of version STEP 7 can be configured/integrated as of version FH technology Redundancy · Capable of redundancy
· For increasing performance Supply voltage · Rated value (DC)
· Valid range low limit (DC)
· Valid range high limit (DC)
· Reverse polarity protection
· Short-circuit protection Power failure backup · Power failure backup time Input current · Rated value at 24 V DC Output current · Short-circuit protection Power · Power feed to the backplane bus Power loss · Power loss at rated conditions Interrupts/diagnostics/status information · Status display
6ES7505-0KA00-0AB0 PS 25W 24VDC E01 V1.0.0 V12.0 / V12.0 V5.5 SP3 or higher
Yes Yes
24 V; SELV static 19.2 V, dynamic 18.5 V static 28.8 V, dynamic 30.2 V Yes Yes
20 ms
1.3 A
Yes
25 W
6.2 W
Yes
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
23
Technical specifications
Electrical isolation · Primary/secondary
Insulation Insulation tested with EMC Immunity to surge voltages · on the supply lines in accordance with IEC
61000-4-5
Degree of protection and protection class Degree of protection to EN 60529 · Protection class Dimensions · Width · Height · Depth Weights · Weight, approx.
6ES7505-0KA00-0AB0
Yes; electrical isolation for max. 60 V AC/75 V DC (basic insulation)
707 V DC (type test)
Yes; +/- 1 kV (according to IEC 61000-4-5; 1995; symm. surge), +/- 2 kV (according to IEC 610004-5; 1995; unsymm. surge), no external protective circuit required
IP20 3; with ground conductor
35 mm 147 mm 129 mm
350 g
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
24
Manual, 01/2013, A5E31825931-AA
Dimensional drawing
A
A.1
Dimensional drawing
Dimensional drawing of the PS 25W 24VDC This appendix includes the dimensional drawing of the power supply module mounted on a mounting rail and with shielding clamp. You must take into consideration the dimensions when mounting in cabinets, in switch rooms, etc.
Figure A-1 Dimensional drawing of the PS 25W 24VDC module
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
25
Dimensional drawing A.1 Dimensional drawing
This drawing shows the dimensions of the module with open front cover.
Figure A-2 Dimensional drawing of the PS 25W 24VDC module from side with open front cover
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
26
Manual, 01/2013, A5E31825931-AA
Parameter data record
B
Parameter assignment in the user program You have the option to re-parameterize the power supply module in RUN mode of CPU.
Changing parameters in RUN mode The parameters for the power supply module are contained in data record 0. You can use the WRREC instruction to transfer the configurable parameters to the power supply module. The parameters assigned in STEP 7 are not changed permanently in the CPU, which means the parameters assigned in STEP 7 are valid again after a restart.
Output parameter RET_VAL The power supply module ignores errors that occur during transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the RET_VAL output parameter. If no error occurs, the length of the data actually transferred is entered in RET_VAL. RET_VAL is 4 bytes long and structured as follows: Byte1: Function_Num, general error code Byte2: Error_Decode, location of the error detection Byte3: Error_Code_1, error detection Byte4: Error_Code_2, manufacturer-specific expansion of the error detection
The description of the WRREC instruction and the general error codes are available in the STEP 7 online help.
Module-specific errors are displayed by means of Error_Code_1 = 224D or Error_Code_1 = 225D.
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
Manual, 01/2013, A5E31825931-AA
27
Parameter data record
Manufacturer-specific expansions of the error detection of the WRREC instruction have the following meaning:
Table B- 1 Manufacturer-specific expansions of the error detection of the WRREC instruction
Error_Code 1
224D Error in the data record header
Error_Code 2 1 D
2 D
225 D
1 D
Error in the net data
16 D
(parameters) entered in the
data record
Meaning
The version entered in the data record header is not supported by the module or reserved bits of the version are set.
The net length entered in the data record header is incorrect.
Diagnostic interrupt enable is incorrect
Reserved parameters are not 0
Data record structure
The following figure shows the structure of the data record 0.
A fixed bit pattern is entered in byte 0. It indicates the version of the data record structure. Each time a data record is written, the module checks the written data and accepts only data records with major version 1.
Byte 1 specifies the maximum data length that can be used for parameter data.
Byte 2 contains the parameter data.
Bytes 3 to 11 are reserved.
To enable a parameter in byte 2, set the corresponding bit to "1". The corresponding diagnostics is then activated, for example, for supply voltage monitoring. If you set the corresponding bit to "0", the diagnostics is deactivated.
You are not permitted to change byte 0, byte 1 or bytes 3 to 11.
%\WH %\WH %\WH
0LQRUYHUVLRQ 0DMRUYHUVLRQ
/HQJWKRIWKHSDUDPHWHUGDWD 'DWDOHQJWKE\WHV
(QDEOHGLDJQRVWLFV 'LDJQRVWLFVIRUVXSSO\YROWDJHPRQLWRULQJ 'LDJQRVWLFVIRUVZLWFKSRVLWLRQ
%\WHVWR
Figure B-1 Structure of data record 0
Power supply module PS 25W 24VDC (6ES7505-0KA00-0AB0)
28
Manual, 01/2013, A5E31825931-AA
Power supply module PS 60W
_Pr_ef_ac_e_______________
24/48/60VDC (6ES7505-0RA00-0AB0) _Do_c_um_e_n_tat_io_n _gu_id_e_______1_
SIMATIC
S7-1500/ET 200MP Power supply module PS 60W 24/48/60VDC (6ES7505-0RA000AB0)
Manual
_Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs____________4_ _Ienr_treo_rrrua_pn_tds,_sdta_iatu_gsn_oa_slatir_cm_asla_rm_s_, ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_
_Di_m_en_s_ion_a_l d_ra_w_in_g _______A_
_Pa_ra_m_e_te_r d_a_ta_re_co_rd_______B_
01/2013
A5E31826009-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E31826009-AA 01/2013 Technical data subject to change
Copyright © Siemens AG 2013. All rights reserved
Preface
Preface
Purpose of the documentation
This manual complements the system manuals:
S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792)
ET 200MP distributed I/O system (http://support.automation.siemens.com/WW/view/en/59193214)
Functions that generally concern the systems are described in these manuals.
The information provided in this manual and in the system/function manuals support you in commissioning the systems.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product, or on the section of the documentation to which particular attention should be paid.
Note on IT security
Siemens offers IT security mechanisms for its automation and drive product portfolio in order to support the safe operation of the plant/machine. We recommend that you inform yourself regularly on the IT security developments regarding your products. You can find information on this on the Internet (http://support.automation.siemens.com).
You can register for a product-specific newsletter here.
For the safe operation of a plant/machine, however, it is also necessary to integrate the automation components into an overall IT security concept for the entire plant/machine, which corresponds to the state-of-the-art IT technology. You can find information on this on the Internet (http://www.siemens.com/industrialsecurity).
Products used from other manufacturers should also be taken into account here.
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
3
Preface
Copyright notice for the open-source software used
Open-source software is used in the firmware of the product described. The open-source software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the following copyright notices.
© Copyright William E. Kempf 2001 Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. William E. Kempf makes no representations about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.
Copyright © 1994 Hewlett-Packard Company Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. Hewlett-Packard Company makes no representations about the suitability of this software for any purpose. It is provided ``as is'' without express or implied warranty.
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
4
Manual, 01/2013, A5E31826009-AA
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide................................................................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
Properties.......................................................................................................................................9
2.2
Operating and display elements ..................................................................................................11
3 Wiring ...................................................................................................................................................... 13
3.1
Wiring the power supply module..................................................................................................13
4 Parameters .............................................................................................................................................. 15
4.1
Parameters...................................................................................................................................15
5 Interrupts, diagnostic alarms, error and status alarms ............................................................................. 17
5.1
Status and error displays .............................................................................................................17
5.2
Diagnostic alarms ........................................................................................................................19
5.3
Interrupts ......................................................................................................................................21
6 Technical specifications........................................................................................................................... 23
A Dimensional drawing ............................................................................................................................... 25
A.1
Dimensional drawing....................................................................................................................25
B Parameter data record............................................................................................................................. 27
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
5
Table of contents
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
6
Manual, 01/2013, A5E31826009-AA
Documentation guide
1
Introduction
The modular documentation of the S7-1500 and ET 200MP system families covers all aspects of your automation system.
The documentation consists of different modules that are divided into system manuals, function manuals and manuals.
The following table provides an overview of the documents that complement this manual. Information in the manual overrides specifications in the system manual.
Overview of the documentation for the power supply module PS 60W 24/48/60VDC
The table below lists additional documentation for using the PS 60W 24/48/60VDC benötigen. power supply module.
Table 1- 1 Documentation for the power supply module PS 60W 24/48/60VDC
Topic
Documentation
Most important contents
System description
System manual
· Application planning
S7-1500 automation system (http://support.automation.siemens.com/WW/vie
·
Installation
w/en/59191792)
· Wiring
System manual
· Commissioning
ET 200MP distributed I/O system
· Standards and approvals
(http://support.automation.siemens.com/WW/vie
w/en/59193214)
· Electromagnetic
compatibility
· Mechanical and climatic ambient conditions
Designing
Function manual
· Basics
interference-free controllers
Designing interference-free controllers (http://support.automation.siemens.com/WW/vie
·
Electromagnetic
w/en/59193566)
compatibility
· Lightning protection
System diagnostics
Function manual
· Overview
System diagnostics
· Hardware/software
(http://support.automation.siemens.com/WW/vie
diagnostics evaluation
w/en/59192926)
SIMATIC manuals
All current manuals for SIMATIC products are available for download free of charge from the Internet (http://www.siemens.com/automation/service&support).
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
7
Documentation guide
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
8
Manual, 01/2013, A5E31826009-AA
Product overview
2.1
Properties
Order number 6ES7505-0RA00-0AB0
View of the module
2
Figure 2-1 View of the PS 60W 24/48/60VDC module
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
9
Product overview 2.1 Properties
Properties
The PS 60W 24/48/60VDC power supply module supports the use of additional modules. The power supply module has the following properties: Technical properties
Rated input voltages 24/48/60 VDC Output power 60 W Power failure backup Electrical isolation to the bus, safe electrical separation to EN 61131-2 Supported functions Firmware update Identification data I&M0 to I&M4 Configuration in RUN Diagnostic alarms Diagnostic interrupts
Accessories
The following components are supplied with the power supply module: Power connector U connector These components are also available as spare parts.
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
10
Manual, 01/2013, A5E31826009-AA
Product overview 2.2 Operating and display elements
2.2
Operating and display elements
The following figure shows the control and connection elements of the PS 60W 24/48/60VDC behind the front panel as well as the power connector.
LED displays indicating the current operating state and diagnostic status of the PS On/off switch Power inlet for the power connector Power connector; inserted in delivery state
Figure 2-2 View of the PS 60W 24/48/60VDC (without front panel) and of the power connector
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
11
Product overview 2.2 Operating and display elements
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
12
Manual, 01/2013, A5E31826009-AA
Wiring
3
3.1
Wiring the power supply module
Mains connection
WARNING Installation instructions Risk of death or serious injury. Observe the general installation instructions applicable in your country when wiring the power supply module. Fuse the power cables according to their conductor cross-section.
The following applies to mains connection of the power supply module using the power connector: The power connector provides connection of the input voltage to the power supply
module with touch protection. The power connector provides permanent wiring. The power connector features an internal strain relief. The power connector ensures reverse polarity protection. A coding element is used on the power connector to assign it to a specific type of power
supply module. A connector coded for 230V AC cannot be inserted into a 24 V DC power supply module.
DANGER Do not manipulate or omit the coding element Changes to the coding element can result in dangerous states in your plant and/or damage to the outputs of the I/O modules. In order to avoid damage, do not manipulate the coding. The coding element may not be omitted.
Cables
You need flexible cables to wire power to the power supply module. The conductor crosssection must be 1.5 mm2 (AWG: 16). The diameter of a 3 x 1.5 mm2 sheathed cable can be no more than 8.5 mm. The ground conductor of flexible cables must be longer than the two other conductors. The fusing must meet the requirements of the corresponding control cabinet.
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
13
Wiring 3.1 Wiring the power supply module
Reference
Information on installation of the power supply module and wiring of the power connector is available in the system manual S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792).
Siemens recommends the use of devices from the SITOP family of products for applications with load power supplies. Wiring information is available in the documentation for the load power supply.
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
14
Manual, 01/2013, A5E31826009-AA
Parameters
4
4.1
Parameters
Parameters of the PS 60W 24/48/60VDC
Specify the module properties at the various parameters in the course of your STEP 7 parameterization. The following table lists the configurable parameters.
The parameters you define in the user program are transferred to the module by means of WRREC instruction (Configuration in RUN); see chapter Parameter data record (Page 27).
Table 4- 1 Configurable parameters and their defaults
Parameters Diagnostic/maintenance · Supply voltage missing
· Switch position Off
Range of values
Yes/No Yes/No
Defaults
No No
Configuration in RUN
Yes Yes
Note
Diagnostic alarms without supply voltage
Regardless of whether the supply voltage is missing or the On/Off switch is set to "Off", the power supply module of the CPU or the IM is still capable of generating diagnostic alarms because it is provided sufficient power from the backplane bus. The entire diagnostic functionality is still available.
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
15
Parameters 4.1 Parameters
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
16
Manual, 01/2013, A5E31826009-AA
Interrupts, diagnostic alarms, error and status alarms
5
5.1
Status and error displays
Introduction
Diagnostics by means of LEDs is a basic tool for troubleshooting. Usually, you can pinpoint the source of error more precisely by analyzing the module status information in STEP 7, or in the diagnostic buffer of the CPU. These locations contain the corresponding error information in plain text.
LED displays
The following figure shows the LED displays (status and error displays) of PS 60W 24/48/60VDC.
RUN LED ERROR LED MAINT LED
Figure 5-1 LED displays of PS 60W 24/48/60VDC
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
17
Interrupts, diagnostic alarms, error and status alarms 5.1 Status and error displays
Meaning of the LED displays
The following table explains the meaning of the status and error displays. You can find remedial measures for diagnostic alarms in chapter Diagnostic alarms (Page 19).
Table 5- 1 Status and error displays RUN/ERROR/MAINT
LED
Meaning
RUN
ERROR MAINT
OFF; PS returns no bus voltage
Off
Off
Off · External error; diagnostics is disabled
· PS not powered in the system, no supply voltage at the PS and CPU/IM.
On
On
Not Flashing relevant
Off
Flashing
On
Not relevant
Startup; all LED displays are lit briefly after system startup, or during module restart after firmware update.
Startup, PS returns bus voltage, PS waiting for parameterization
Not relevant
Error, PS supplies no bus voltage
· Supply voltage missing and diagnostics is enabled
· Internal error
Not
Maintenance request, PS returns no bus voltage
Off
relevant
On · Switch is off; power is present and diagnostics is
enabled
Malfunction Flashing Flashing Flashing LEDs flash persistently
Remedy
Switch on power to the PS Check the supply voltage Switch on PS
-
-
Evaluate diagnostic alarms and take appropriate remedial measures; see chapter Diagnostic alarms (Page 19) Switch on PS
Replace PS
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
18
Manual, 01/2013, A5E31826009-AA
Interrupts, diagnostic alarms, error and status alarms 5.2 Diagnostic alarms
5.2
Diagnostic alarms
Diagnostic alarms
The following table shows the meaning of the diagnostic alarms and possible remedial measures for the respective cause.
One of the following "LED images" indicates directly on the PS that a diagnostic alarm was triggered.
The red ERROR-LED is flashing.
Indicates external or internal errors.
The yellow MAINT-LED is lit.
Maintenance; a maintenance request is active.
All three LEDs are flashing permanently
The PS is in "Defective" state.
In STEP 7, the diagnostic results are displayed in plain text by means of the online and diagnostic view. You can read the diagnostic data records by means of the "RDREC" instruction.
Table 5- 2 Diagnostic alarms, their meaning and remedies
Diagnostic alarm
External error Supply voltage missing
Error code Dec.
266D
Internal error Overtemperature 5D
Overvoltage backplane bus
267D
Low
281D
voltage/overload in
the power segment
Error in the power 282D segment
Meaning Hex.
Reacti Remedial measures on
010AH No supply voltage, or incorrect
1
insertion of the power connector
into the PS.
Check the supply voltage.
0005H Overtemperature on the printed 3 circuit board.
010BH High EMC interference or a
3
defective PS, CPU or IM inserted.
0119H A voltage dip below the valid limit 2 has been detected in the power segment to the right of the PS.
011AH PS or module to the right of the 2 PS is defective.
Check PS load. Isolate PS from mains. Wait one minute before you power on the PS again.
Eliminate electromagnetic interference. Check inserted modules and bus connectors. Isolate PS from mains. Wait one minute before you power on the PS again.
Check the modules in the affected segment; replace if necessary. Switch off the PS at the switch, then switch on again.
Replace the defective module. Switch off the PS at the switch, then switch on again.
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
19
Interrupts, diagnostic alarms, error and status alarms 5.2 Diagnostic alarms
Diagnostic alarm
Safety shutdown
Maintenance Switch turned off Malfunction Module failure
Error code Dec. 285D
268D
256D
Meaning
Hex. 011DH
Reliable operation of the module is no longer guaranteed.
Reacti Remedial measures on
3
Check ambient conditions. Isolate PS
from mains. Wait one minute before
you power on the PS again.
010CH The PS is switched off.
1
Switch on PS.
0100H PS failure.
3
Replace PS.
External errors, internal errors and malfunctions
External errors occur outside the PS. In the parameterization, specify whether or not an external error can trigger a diagnostic alarm. By default, external errors do not trigger diagnostic alarms.
Internal errors occur inside the PS. If still possible, an internal error always triggers a diagnostic alarm.
A malfunction is a static state; the PS must be sent in for repair. If still possible, a defect always triggers a diagnostic alarm.
Explanation of the reactions
1. No power at the power segment to the right of the PS. Alarm is only generated if the PS is still powered by the CPU or IM via the backplane bus.
2. The modules to the right of the PS are switched off.
3. The PS is switched off retentively. Alarm is only generated if the PS is still powered by the CPU or IM via the backplane bus. You cannot switch on the module unless you have eliminated the error and disconnected power to the PS for approximately one minute.
See also
S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792)
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
20
Manual, 01/2013, A5E31826009-AA
Interrupts, diagnostic alarms, error and status alarms 5.3 Interrupts
5.3
Interrupts
What is a diagnostic interrupt? You can determine reactions to internal or external errors in the user program, by programming a diagnostic interrupt which interrupts cyclic program execution on the CPU and triggers the diagnostic interrupt OB (OB82). The event which led to the interrupt is entered in the start information of the OB82.
Trigger of a diagnostic interrupt Events that can trigger a diagnostic alarm can also trigger a diagnostic interrupt: Supply voltage missing Overtemperature Overvoltage on the backplane bus Low voltage/overload in the power segment Error in the power segment Safety shutdown Switch position Off Malfunction
Reactions to a diagnostic interrupt You can find the CPU reaction to a diagnostic interrupt in the function manual System diagnostics (http://support.automation.siemens.com/WW/view/en/59192926). Detailed information on the error event is available in the diagnostic interrupt OB by executing the "RALRM" instruction (read additional interrupt information) and in the STEP 7 Online Help.
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
21
Interrupts, diagnostic alarms, error and status alarms 5.3 Interrupts
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
22
Manual, 01/2013, A5E31826009-AA
Technical specifications
6
Technical specifications of the PS 60W 24/48/60VDC
Product type designation General information Hardware version Firmware version Engineering with STEP 7 TIA Portal can be configured/integrated as of version STEP 7 can be configured/integrated as of version FH technology Redundancy · Capable of redundancy
· For increasing performance Supply voltage · Rated value (DC)
· Valid range low limit (DC)
· Valid range high limit (DC)
· Reverse polarity protection
· Short-circuit protection Power failure backup · Power failure backup time Input current · Rated value at 24 V DC
· Rated value at 48 V DC
· Rated value at 60 V DC Output current · Short-circuit protection Power · Power feed to the backplane bus Power loss · Power loss at rated conditions
6ES7505-0RA00-0AB0 PS 60W 24/48/60V DC E01 V1.0.0 V12.0 / V12.0 V5.5 SP3 or higher
Yes Yes
24 V / 48 V / 60 V static 19.2 V, dynamic 18.5 V static 72 V, dynamic 75.5 V Yes Yes
20 ms
3 A 1.5 A 1.2 A
Yes
60 W
12 W
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
23
Technical specifications
Interrupts/diagnostics/status information · Status display Electrical isolation · Primary/secondary
Insulation Insulation tested with EMC Immunity to surge voltages · on the supply lines in accordance with IEC
61000-4-5
Degree of protection and protection class Degree of protection to EN 60529 · Protection class Dimensions · Width · Height · Depth Weights · Weight, approx.
6ES7505-0RA00-0AB0
Yes
Yes; electrical isolation for 230 V AC (reinforced insulation)
2500 V DC 2s (routine test)
Yes; +/- 1 kV (according to IEC 61000-4-5; 1995; symm. surge), +/- 2 kV (according to IEC 610004-5; 1995; unsymm. surge), no external protective circuit required
IP20 1; with ground conductor
70 mm 147 mm 129 mm
600 g
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
24
Manual, 01/2013, A5E31826009-AA
Dimensional drawing
A
A.1
Dimensional drawing
Dimensional drawing of PS 60W 24/48/60VDC This appendix includes the dimensional drawing of the power supply module that is installed on a mounting rail with shielding bracket. Take the dimensions into account for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of PS 60W 24/48/60VDC module
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
25
Dimensional drawing A.1 Dimensional drawing
This figure shows the dimensions of the module with open front panel.
Figure A-2 Dimensional drawing of PS 60W 24/48/60VDC module, side view with open front panel
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
26
Manual, 01/2013, A5E31826009-AA
Parameter data record
B
Parameter assignment in the user program You have the option to re-parameterize the power supply module in RUN mode of CPU.
Changing parameters in RUN mode The parameters for the power supply module are contained in data record 0. You can use the WRREC instruction to transfer the configurable parameters to the power supply module. The parameters assigned in STEP 7 are not changed permanently in the CPU, which means the parameters assigned in STEP 7 are valid again after a restart.
Output parameter RET_VAL The power supply module ignores errors that occur during transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the RET_VAL output parameter. If no error occurs, the length of the data actually transferred is entered in RET_VAL. RET_VAL is 4 bytes long and structured as follows: Byte1: Function_Num, general error code Byte2: Error_Decode, location of the error detection Byte3: Error_Code_1, error detection Byte4: Error_Code_2, manufacturer-specific expansion of the error detection
The description of the WRREC instruction and the general error codes are available in the STEP 7 online help.
Module-specific errors are displayed by means of Error_Code_1 = 224D or Error_Code_1 = 225D.
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
Manual, 01/2013, A5E31826009-AA
27
Index
Manufacturer-specific expansions of the error detection of the WRREC instruction have the following meaning:
Table B- 1 Manufacturer-specific expansions of the error detection of the WRREC instruction
Error_Code 1
224D Error in the data record header
Error_Code 2 1 D
2 D
225 D
1 D
Error in the net data
16 D
(parameters) entered in the
data record
Meaning
The version entered in the data record header is not supported by the module or reserved bits of the version are set.
The net length entered in the data record header is incorrect.
Diagnostic interrupt enable is incorrect
Reserved parameters are not 0
Data record structure
The following figure shows the structure of the data record 0.
A fixed bit pattern is entered in byte 0. It indicates the version of the data record structure. Each time a data record is written, the module checks the written data and accepts only data records with major version 1.
Byte 1 specifies the maximum data length that can be used for parameter data.
Byte 2 contains the parameter data.
Bytes 3 to 11 are reserved.
To enable a parameter in byte 2, set the corresponding bit to "1". The corresponding diagnostics is then activated, for example, for supply voltage monitoring. If you set the corresponding bit to "0", the diagnostics is deactivated.
You are not permitted to change byte 0, byte 1 or bytes 3 to 11.
%\WH %\WH %\WH
0LQRUYHUVLRQ 0DMRUYHUVLRQ
/HQJWKRIWKHSDUDPHWHUGDWD 'DWDOHQJWKE\WHV
(QDEOHGLDJQRVWLFV 'LDJQRVWLFVIRUVXSSO\YROWDJHPRQLWRULQJ 'LDJQRVWLFVIRUVZLWFKSRVLWLRQ
%\WHVWR
Figure B-1 Structure of data record 0
Power supply module PS 60W 24/48/60VDC (6ES7505-0RA00-0AB0)
28
Manual, 01/2013, A5E31826009-AA
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RPBre0fa0ce-0AB0)
Documentation guide
1
SIMATIC
S7-1500/ET 200MP Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Product overview
2
Wiring
3
Parameters
4
Interrupts, diagnostic alarms, error and status alarms
5
Manual
Technical specifications
6
Dimensional drawing
A
Parameter data record
B
01/2019
A5E39450002-AB
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E39450002-AB 06/2019 Subject to change
Copyright © Siemens AG 2017 - 2019. All rights reserved
Preface
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500/ET 200MP Automation System (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Functions that generally relate to the system are described in this manual.
The information provided in this manual and in the system/function manuals support you in commissioning the systems.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Also observe notes marked as follows:
Note
A note contains important information on the product described in the documentation, on the handling of the product, or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines and networks. Systems, machines and components should only be connected to the enterprise network or the internet if and to the extent necessary and with appropriate security measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens' guidance on appropriate security measures should be taken into account. For more information about industrial security, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends to apply product updates as soon as available and to always use the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer's exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (http://www.siemens.com/industrialsecurity).
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
3
Preface
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109741045).
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
4
Manual, 01/2019, A5E39450002-AB
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 6
2 Product overview .................................................................................................................................. 10
2.1
Properties ................................................................................................................................ 10
2.2
Operating and display elements .............................................................................................12
3 Wiring ................................................................................................................................................... 13
3.1
Wiring the power supply module.............................................................................................13
4 Parameters ........................................................................................................................................... 15
4.1
Parameters .............................................................................................................................15
5 Interrupts, diagnostic alarms, error and status alarms............................................................................ 16
5.1
Status and error displays ........................................................................................................16
5.2
Diagnostic alarms ...................................................................................................................18
5.3
Interrupts .................................................................................................................................19
6 Technical specifications ........................................................................................................................ 20
A Dimensional drawing............................................................................................................................. 22
B Parameter data record .......................................................................................................................... 24
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system, the CPU 1516pro-2 PN based on SIMATIC S7-1500 and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. For CPU 1516pro-2 PN you use the corresponding operating instructions. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
6
Manual, 01/2019, A5E39450002-AB
Documentation guide
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
7
Documentation guide
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system. You configure your own download package with a few clicks. In doing so you can select: Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN
macro files Manuals, characteristics, operating manuals, certificates Product master data You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
8
Manual, 01/2019, A5E39450002-AB
Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to run commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independently of the TIA Portal.
The SIMATIC Automation Tool provides a multitude of functions:
Scanning of a PROFINET/Ethernet network and identification of all connected CPUs
Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a CPU
Transfer of the date and the programming device/PC time converted to UTC time to the module
Program download to CPU
Operating mode switchover RUN/STOP
Localization of the CPU by means of LED flashing
Reading out CPU error information
Reading the CPU diagnostic buffer
Reset to factory settings
Updating the firmware of the CPU and connected modules
You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
9
Product overview
2.1
Properties
Order number
6ES7505-0RB00-0AB0
View of the module
2
Figure 2-1 View of the PS 60W 24/48/60VDC HF module
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
10
Manual, 01/2019, A5E39450002-AB
Product overview 2.1 Properties
Properties
The PS 60W 24/48/60VDC HF power supply module supports the use of additional modules. Advantage over the "standard" power supply module: To save a higher volume of data retentively in case of power failure, the PS 60W 24/48/60VDC HF supplies power to the CPU. The PS 60W 24/48/60VDC HF has the following properties: Technical properties
Rated input voltages 24/48/60 VDC Output power 60 W Power failure backup Electrical isolation to the bus, safe electrical separation according to EN 61131-2 The module supports the following functions:
Table 2- 1 Version dependencies of the module functions
Function
Firmware update Identification data I&M0 to I&M4 Configuration in RUN Diagnostic alarms Diagnostic interrupts Only configurable on LH side next to interface module / CPU Extended retentivity of the CPU data area in the event of a power failure
Firmware version of the module
V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher V1.0.0 or higher
V1.0.0 or higher
Configuration software
STEP 7 (TIA Portal) as of
V14 SP1
X
GSD file in STEP 7 (TIA Portal) V12 or higher,
or STEP 7 V5.5 SP3 or higher
X
X
X
X
X
X
(PROFINET IO only)
X
---
(only with CPU S7-1500 firmware version V2.1 or
higher)
Accessories
The following components are supplied with the power supply module: Power connector U connector These components are also available as spare parts.
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
11
Product overview 2.2 Operating and display elements
2.2
Operating and display elements
The following figure shows the control and connection elements of the PS 60W 24/48/60VDC HF behind the front panel as well as the power connector.
LED displays indicating the current operating state and diagnostic status of the PS On/off switch Power inlet for the power connector Power connector; inserted in delivery state
Figure 2-2 View of the PS 60W 24/48/60VDC HF (without front panel) and of the power connector
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
12
Manual, 01/2019, A5E39450002-AB
Wiring
3
3.1
Wiring the power supply module
Mains connection
WARNING Installation instructions Risk of death or serious injury. Observe the general installation instructions applicable in your country when wiring the power supply module. Fuse the power cables according to their conductor cross-section.
The following applies to mains connection of the power supply module using the power connector: The power connector provides connection of the input voltage to the power supply
module with touch protection. The power connector provides permanent wiring. The power connector features an internal strain relief. The power connector ensures reverse polarity protection. A coding element is used on the power connector to assign it to a specific type of power
supply module. A connector coded for 230V AC cannot be inserted into a 24 V DC power supply module.
DANGER Do not manipulate or omit the coding element Changes to the coding element can result in dangerous states in your plant and/or damage to the outputs of the I/O modules. In order to avoid damage, do not manipulate the coding. The coding element may not be omitted.
Cables
You need flexible cables to wire power to the power supply module. The conductor crosssection must be 1.5 mm2 (AWG: 16). The diameter of a 3 x 1.5 mm2 sheathed cable can be no more than 8.5 mm. The ground conductor of flexible cables must be longer than the two other conductors. The fusing must meet the requirements of the corresponding control cabinet.
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
13
Wiring 3.1 Wiring the power supply module
Reference
For information on installation of the power supply module and wiring of the power connector, refer to the system manual S7-1500/ET 200MP Automation System (https://support.industry.siemens.com/cs/ww/en/view/59191792).
Siemens recommends the use of devices from the SITOP family of products for applications with load power supplies. Wiring information is available in the documentation for the load power supply.
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
14
Manual, 01/2019, A5E39450002-AB
Parameters
4
4.1
Parameters
Parameters of the PS 60W 24/48/60VDC HF
The PS 60W 24/48/60VDC HF is usually already integrated in the hardware catalog of STEP 7 (TIA Portal). In this case, STEP 7 (TIA Portal) checks the configured properties for plausibility during configuration.
However, you can also assign parameters to the module by means of a GSD file and the configuration software of any provider. The module does not check the validity of the configured properties until after the configuration has been loaded.
When you assign the module parameters in STEP 7, you use various parameters to specify the module properties. The following table lists the configurable parameters. The effective range of the parameters that can be set depends on the type of configuration. The following configurations are possible:
Central operation with an S7-1500 CPU (with STEP 7 TIA Portal V14 SP1 or higher)
Distributed operation on PROFINET IO in an ET 200MP system (with GSD file PROFINET IO in STEP 7 (TIA Portal) V12 or higher or STEP 7 V5.5 SP3 or higher
For parameter assignment in the user program, the parameters are transferred to the module using the WRREC instruction (reparameterization in RUN) and data records; see section Parameter data record (Page 24).
Table 4- 1 Configurable parameters and their defaults
Parameters
Range of values Default setting
Diagnostics / maintenance
· Supply voltage moni- Yes/No
No
toring *
· Switch position Off * Yes/No
No
Parameter assignment in RUN
Yes Yes
Scope with configuration software, e.g., STEP 7 (TIA Portal)
Integrated in the hardware cata-
log STEP 7 (TIA Portal) V14 SP1 or higher or
GSD file PROFINET IO
GSD file PROFIBUS DP
Module
---
Module
---
* In case of central operation of a S7-1500 CPU with firmware V2.1.0 or higher the diagnostics are not displayed in the diagnostics buffer to ensure reliable backup of the extended retentive data.
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
15
Interrupts, diagnostic alarms, error and status alarms
5
5.1
Status and error displays
Introduction
Diagnostics by means of LEDs is a basic tool for troubleshooting. Usually, you can pinpoint the source of error more precisely by analyzing the module status information in STEP 7, or in the diagnostic buffer of the CPU. These locations contain the corresponding error information in plain text.
LED displays
The following figure shows the LED displays (status and error displays) of the PS 60W 24/48/60VDC HF.
RUN LED ERROR LED MAINT LED
Figure 5-1 LED displays of PS 60W 24/48/60VDC HF
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
16
Manual, 01/2019, A5E39450002-AB
Interrupts, diagnostic alarms, error and status alarms 5.1 Status and error displays
Meaning of the LED displays
The following table explains the meaning of the status and error displays. You can find remedial measures for diagnostic alarms in chapter Diagnostic alarms (Page 18).
Table 5- 1 Status and error displays RUN/ERROR/MAINT
LED
Meaning
RUN Off
ERROR MAINT
Off
Off
OFF; PS returns no bus voltage · External error; diagnostics is disabled
· PS not powered in the system, no supply voltage at the PS and CPU/IM.
On Flashing
Off
On Not rele-
vant
Flashing
On
Not relevant
Startup; all LED displays are lit briefly after system startup, or during module restart after firmware update.
Startup, PS returns bus voltage, PS waiting for parameterization
Not relevant
Error, PS supplies no bus voltage
· Supply voltage missing and diagnostics is enabled
· Internal error
Not rele-
Maintenance request, PS returns no bus voltage
Off
vant
On · Switch is off; power is present and diagnostics is
enabled
Malfunction Flashing Flashing Flashing LEDs flash persistently
Remedy
Switch on power to the PS Check the supply voltage Switch on PS
-
-
Evaluate diagnostic alarms and take appropriate remedial measures; see chapter Diagnostic alarms (Page 18) Switch on PS
Replace PS
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
17
Interrupts, diagnostic alarms, error and status alarms 5.2 Diagnostic alarms
5.2
Diagnostic alarms
Diagnostic alarms
The following table shows the meaning of the diagnostic alarms and possible remedial measures for the respective cause.
One of the following "LED images" indicates directly on the PS that a diagnostic alarm was triggered.
The red ERROR-LED is flashing.
Indicates external or internal errors.
The yellow MAINT-LED is lit.
Maintenance; a maintenance request is active.
All three LEDs are flashing permanently
The PS is in "Defective" state.
In STEP 7, the diagnostic results are displayed in plain text by means of the online and diagnostic view. You can read the diagnostic data records by means of the "RDREC" instruction.
Table 5- 2 Diagnostic alarms, their meaning and remedies
Diagnostic alarm
External error Supply voltage missing
Error code Dec.
266D
Internal error Overtemperature 5D
Overvoltage back- 267D plane bus
Safety shutdown 285D
Maintenance Switch turned off Malfunction Module failure
268D 256D
Meaning Hex.
Reac- Remedial measures tion
010AH No supply voltage, or incorrect
1
insertion of the power connector
into the PS.
Check the supply voltage.
0005H Overtemperature on the printed 2 circuit board.
010BH High EMC interference or a defec- 2 tive PS, CPU or IM inserted.
011DH Reliable operation of the module 2 is no longer guaranteed.
Check PS load. Isolate PS from mains. Wait one minute before you power on the PS again.
Eliminate electromagnetic interference. Check inserted modules and bus connectors. Isolate PS from mains. Wait one minute before you power on the PS again.
Check ambient conditions. Isolate PS from mains. Wait one minute before you power on the PS again.
010CH The PS is switched off.
1
Switch on PS.
0100H PS failure.
3
Replace PS.
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
18
Manual, 01/2019, A5E39450002-AB
Interrupts, diagnostic alarms, error and status alarms 5.3 Interrupts
External errors, internal errors and malfunctions
External errors occur outside the PS. In the parameterization, specify whether or not an external error can trigger a diagnostic alarm. By default, external errors do not trigger diagnostic alarms.
Internal errors occur inside the PS. If still possible, an internal error always triggers a diagnostic alarm.
A malfunction is a static state; the PS must be sent in for repair. If still possible, a defect always triggers a diagnostic alarm.
Explanation of the reactions
The PS is switched off retentively. Alarm is only generated if the PS is still powered by the CPU or IM via the backplane bus. You cannot switch on the module unless you have eliminated the error and disconnected power to the PS for approximately one minute.
5.3
Interrupts
What is a diagnostic interrupt?
You can determine reactions to internal or external errors in the user program, by programming a diagnostic interrupt which interrupts cyclic program execution on the CPU and triggers the diagnostic interrupt OB (OB82). The event which led to the interrupt is entered in the start information of the OB82.
Trigger of a diagnostic interrupt
Events that can trigger a diagnostic alarm can also trigger a diagnostic interrupt: Supply voltage missing Overtemperature Overvoltage on the backplane bus Safety shutdown Switch position Off Malfunction
Reactions to a diagnostic interrupt
You can find the CPU reaction to a diagnostic interrupt in the function manual System diagnostics (http://support.automation.siemens.com/WW/view/en/59192926).
Detailed information on the error event is available in the diagnostic interrupt OB by executing the "RALRM" instruction (read additional interrupt information) and in the STEP 7 Online Help.
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
19
Technical specifications
6
Technical specifications of the PS 60W 24/48/60VDC HF
Article number General information
Product type designation HW functional status Firmware version Engineering with · STEP 7 TIA Portal configurable/integrated as of version
Supply voltage Rated value (DC) permissible range, lower limit (DC) permissible range, upper limit (DC) Reverse polarity protection Short-circuit protection
Mains buffering · Mains/voltage failure stored energy time
Input current Rated value at 24 V DC Rated value at 48 V DC Rated value at 60 V DC Inrush current, max.
Output current Short-circuit protection
Power Infeed power to the backplane bus
Power loss Power loss at nominal rating conditions
Interrupts/diagnostics/status information Status indicator
Isolation Isolation tested with
EMC Interference immunity against voltage surge
· on the supply lines acc. to IEC 61000-4-5
6ES7505-0RB00-0AB0
PS 60 W 24/48/60 V DC HF E01 V1.0.0
V14 SP1
24 V / 48 V / 60 V Static 19.2 V, dynamic 18.5 V Static 72 V, dynamic 75.5 V Yes Yes
20 ms
3 A 1.5 A 1.2 A 8 A for t 1 s
Yes
60 W
12 W
Yes
2 500 V DC (type test)
Yes; ±1 kV (acc. to IEC 61000-4-5; 1995; surge symm.), ±2 kV (acc. to IEC 61000-4-5; 1995; surge asymm.), no external protective circuit required
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
20
Manual, 01/2019, A5E39450002-AB
Article number Degree and class of protection
Degree of protection acc. to EN 60529 Equipment protection class Dimensions Width Height Depth Weights Weight, approx.
Technical specifications
6ES7505-0RB00-0AB0 IP20 I, with protective conductor 105 mm 147 mm 129 mm 865 g
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
21
Dimensional drawing
A
Dimensional drawing of PS 60W 24/48/60VDC HF
This appendix includes the dimensional drawing of the power supply module that is installed on a mounting rail with shielding bracket. Take the dimensions into account for installation in cabinets, control rooms, etc.
The following figure shows the front view and the side view of the module
Figure A-1 Dimensional drawing of the PS 60W 24/48/60VDC HF module
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
22
Manual, 01/2019, A5E39450002-AB
Dimensional drawing The following figure shows the side view of the module with open front panel.
Figure A-2 Dimensional drawing of the PS 60W 24/48/60VDC HF module
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
23
Parameter data record
B
Parameter assignment in the user program
You have the option to re-parameterize the power supply module in RUN mode of CPU.
Changing parameters in RUN mode
The parameters of the power supply module are in data record 0. Using the instruction WRREC the adjustable parameters can be transferred to the power supply module. The parameters assigned in STEP 7 are not changed permanently in the CPU, which means the parameters assigned in STEP 7 are valid again after a restart.
Output parameter RET_VAL
The power supply module ignores errors that occur during transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the RET_VAL output parameter. If no error occurs, the length of the data actually transferred is entered in RET_VAL. RET_VAL is 4 bytes long and structured as follows: Byte1: Function_Num, general error code
Byte2: Error_Decode, location of the error detection
Byte3: Error_Code_1, error detection
Byte4: Error_Code_2, manufacturer-specific expansion of the error detection
The description of the WRREC instruction and the general error codes are available in the STEP 7 online help. Module-specific errors are displayed by means of Error_Code_1 = 224D or Error_Code_1 = 225D. Manufacturer-specific expansions of the error detection of the WRREC instruction have the following meaning:
Table B- 1 Manufacturer-specific expansions of the error detection of the WRREC instruction
Error_Code 1 224D Error in the data record header
225 D Errors in the net data entered in the data record (parameter)
Error_Code 2 1 D
2 D 1 D 16 D
Meaning
The version entered in the data record header is not supported by the module or reserved bits of the version are set.
The net length entered in the data record header is incorrect.
Diagnostic interrupt enable is incorrect
Reserved parameters are not 0
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
24
Manual, 01/2019, A5E39450002-AB
Parameter data record
Data record structure
The following figure shows the structure of the data record 0. A fixed bit pattern is entered in byte 0. It indicates the version of the data record structure.
Each time a data record is written, the module checks the written data and accepts only data records with major version 1. Byte 1 specifies the maximum data length that can be used for parameter data. Byte 2 contains the parameter data. Bytes 3 to 11 are reserved. To enable a parameter in byte 2, set the corresponding bit to "1". The corresponding diagnostics is then activated, for example, for supply voltage monitoring. If you set the corresponding bit to "0", the diagnostics is deactivated. You are not permitted to change byte 0, byte 1 or bytes 3 to 11.
Figure B-1 Structure of data record 0
Power supply module PS 60W 24/48/60VDC HF (6ES7505-0RB00-0AB0)
Manual, 01/2019, A5E39450002-AB
25
Power supply module PS 60W
120/230V AC/DC (6ES7507-0RA00-
0AB0)
SIMATIC
S7-1500/ET 200MP Power supply module PS 60W 120/230V AC/DC (6ES75070RA00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _W_iri_ng_______________3_ _Pa_ra_m_e_te_rs____________4_ _Ienr_treo_rrrua_pn_tds,_sdta_iatu_gsn_oa_slatir_cm_asla_rm_s_, ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_ _Di_m_en_s_ion_a_l d_ra_w_in_g _______A_ _Pa_ra_m_e_te_r d_a_ta_re_co_rd_______B_
01/2013
A5E31826073-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E31826073-AA 01/2013 Technical data subject to change
Copyright © Siemens AG 2013. All rights reserved
Preface
Preface
Purpose of the documentation
This manual complements the system manuals:
S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792)
ET 200MP distributed I/O system (http://support.automation.siemens.com/WW/view/en/59193214)
Functions that generally concern the systems are described in these manuals.
The information provided in this manual and in the system/function manuals support you in commissioning the systems.
Conventions
The term "CPU" is used in this manual both for the CPUs of the S7-1500 automation system and for interface modules of the ET 200MP distributed I/O system. Also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product, or on the section of the documentation to which particular attention should be paid.
Note on IT security
Siemens offers IT security mechanisms for its automation and drive product portfolio in order to support the safe operation of the plant/machine. We recommend that you inform yourself regularly on the IT security developments regarding your products. You can find information on this on the Internet (http://support.automation.siemens.com).
You can register for a product-specific newsletter here.
For the safe operation of a plant/machine, however, it is also necessary to integrate the automation components into an overall IT security concept for the entire plant/machine, which corresponds to the state-of-the-art IT technology. You can find information on this on the Internet (http://www.siemens.com/industrialsecurity).
Products used from other manufacturers should also be taken into account here.
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
3
Preface
Copyright notice for the open-source software used
Open-source software is used in the firmware of the product described. The open-source software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the following copyright notices.
© Copyright William E. Kempf 2001 Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. William E. Kempf makes no representations about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.
Copyright © 1994 Hewlett-Packard Company Permission to use, copy, modify, distribute and sell this software and its documentation for any purpose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation. Hewlett-Packard Company makes no representations about the suitability of this software for any purpose. It is provided ``as is'' without express or implied warranty.
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
4
Manual, 01/2013, A5E31826073-AA
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide................................................................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
Properties.......................................................................................................................................9
2.2
Operating and display elements ..................................................................................................11
3 Wiring ...................................................................................................................................................... 13
3.1
Wiring the power supply module..................................................................................................13
4 Parameters .............................................................................................................................................. 17
4.1
Parameters...................................................................................................................................17
5 Interrupts, diagnostic alarms, error and status alarms ............................................................................. 19
5.1
Status and error displays .............................................................................................................19
5.2
Diagnostic alarms ........................................................................................................................21
5.3
Interrupts ......................................................................................................................................23
6 Technical specifications........................................................................................................................... 25
A Dimensional drawing ............................................................................................................................... 27
A.1
Dimensional drawing....................................................................................................................27
B Parameter data record............................................................................................................................. 29
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
5
Table of contents
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
6
Manual, 01/2013, A5E31826073-AA
Documentation guide
1
Introduction
The modular documentation of the S7-1500 and ET 200MP system families covers all aspects of your automation system.
The documentation consists of different modules that are divided into system manuals, function manuals and manuals.
The following table provides an overview of the documents that complement this manual. Information in the manual overrides specifications in the system manual.
Overview of the documentation for the power supply module PS 60W 120/230VAC
The table below lists additional documentation for using the PS 60W 120/230VAC benötigen. power supply module.
Table 1- 1 Documentation for the power supply module PS 60W 120/230VAC
Topic System description
Designing interference-free controllers System diagnostics
Documentation System manual S7-1500 automation system (http://support.automation.siemens.com/ WW/view/en/59191792) System manual ET 200MP distributed I/O system (http://support.automation.siemens.com/ WW/view/en/59193214)
Function manual Designing interference-free controllers (http://support.automation.siemens.com/ WW/view/en/59193566)
Function manual System diagnostics (http://support.automation.siemens.com/ WW/view/en/59192926)
Most important contents · Application planning · Installation · Wiring · Commissioning · Standards and approvals · Electromagnetic compatibility · Mechanical and climatic ambient
conditions
· Basics · Electromagnetic compatibility · Lightning protection
· Overview · Hardware/software diagnostics
evaluation
SIMATIC manuals
All current manuals for SIMATIC products are available for download free of charge from the Internet (http://www.siemens.com/automation/service&support).
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
7
Documentation guide
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
8
Manual, 01/2013, A5E31826073-AA
Product overview
2.1
Properties
Order number 6ES7507-0RA00-0AB0
View of the module
2
Figure 2-1 View of the PS 60W 120/230V AC/DC module
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
9
Product overview 2.1 Properties
Properties
The PS 60W 120/230V AC/DC power supply module supports the use of additional modules. The power supply module has the following properties: Technical properties
Rated input voltages 120 V AC/DC and 230 V AC/DC Output power 60 W Power failure backup Electrical isolation to the bus, safe electrical separation to EN 61131-2 Supported functions Firmware update Identification data I&M0 to I&M4 Configuration in RUN Diagnostic alarms Diagnostic interrupts
Accessories
The following components are supplied with the power supply module: Power connector U connector These components are also available as spare parts.
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
10
Manual, 01/2013, A5E31826073-AA
Product overview 2.2 Operating and display elements
2.2
Operating and display elements
The following figure shows the control and connection elements of the PS 60W 120/230 V UC behind the front panel as well as the power connector.
LED displays indicating the current operating state and diagnostic status of the PS On/off switch Power inlet for the power connector Power connector; inserted in delivery state
Figure 2-2 View of the PS 60W 120/230V AC/DC (without front panel) and of the power connector
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
11
Product overview 2.2 Operating and display elements
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
12
Manual, 01/2013, A5E31826073-AA
Wiring
3
3.1
Wiring the power supply module
Mains connection
WARNING Installation instructions Risk of death or serious injury. Observe the general installation instructions applicable in your country when wiring the power supply module. Fuse the power cables according to their conductor cross-section.
The following applies to mains connection of the power supply module using the power connector: The power connector provides connection of the input voltage to the power supply
module with touch protection. The power connector provides permanent wiring. The power connector features an internal strain relief. A coding element is used on the power connector to assign it to a specific type of power
supply module. A connector coded for 230V AC cannot be inserted into a 24 V DC power supply module.
DANGER Do not manipulate or omit the coding element Changes to the coding element can result in dangerous states in your plant and/or damage to the outputs of the I/O modules. In order to avoid damage, do not manipulate the coding. The coding element may not be omitted.
Cables
You need flexible cables to wire power to the power supply module. The conductor crosssection must be 1.5 mm2 (AWG: 16). You must fuse conductors with a cross-section of 1.5 mm2 externally with a 16 A circuit breaker (B or C characteristic). The diameter of a 3 x 1.5 mm2 sheathed cable can be no more than 8.5 mm. The ground conductor of flexible cables must be longer than the two other conductors. The fusing must meet the requirements of the corresponding control cabinet.
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
13
Wiring 3.1 Wiring the power supply module
Note You can operate the PS 60W AC in vertical mode at 120V AC/DC in the first segment only. The clearance next to the PS should be at least 70 mm; see the figure below.
0RGXOH 0RGXOH 0RGXOH 0RGXOH 0RGXOH
36 &38,0 0RGXOH 0RGXOH 0RGXOH
:$&
2XWSXW'&9 ,QSXW9$&'&
! PP
2SWLRQDO30
,QSXW$&
Figure 3-1 Vertical mode
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
14
Manual, 01/2013, A5E31826073-AA
Reference
Wiring 3.1 Wiring the power supply module
For information on installation of the power supply module and wiring of the power connector, refer to the system manual S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792). Siemens recommends the use of devices from the SITOP family of products for applications with load power supplies. Wiring information is available in the documentation for the load power supply.
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
15
Wiring 3.1 Wiring the power supply module
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
16
Manual, 01/2013, A5E31826073-AA
Parameters
4
4.1
Parameters
Parameters of the PS 60W 120/230V AC/DC
Specify the module properties at the various parameters in the course of your STEP 7 parameterization. The following table lists the configurable parameters.
The parameters you define in the user program are transferred to the module by means of WRREC instruction (Configuration in RUN); see chapter Parameter data record (Page 29).
Table 4- 1 Configurable parameters and their defaults
Parameters Diagnostic/maintenance · Supply voltage missing
· Switch position Off
Range of values
Yes/No Yes/No
Defaults
No No
Configuration in RUN
Yes Yes
Note
Diagnostic alarms without supply voltage
Regardless of whether the supply voltage is missing or the On/Off switch is set to "Off", the power supply module of the CPU or the IM is still capable of generating diagnostic alarms because it is provided sufficient power from the backplane bus. The entire diagnostic functionality is still available.
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
17
Parameters 4.1 Parameters
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
18
Manual, 01/2013, A5E31826073-AA
Interrupts, diagnostic alarms, error and status alarms
5
5.1
Status and error displays
Introduction
Diagnostics by means of LEDs is a basic tool for troubleshooting. Usually, you can pinpoint the source of error more precisely by analyzing the module status information in STEP 7, or in the diagnostic buffer of the CPU. These locations contain the corresponding error information in plain text.
LED displays
The following figure shows the LED displays (status and error displays) of the PS 60W 120/230V AC/DC.
RUN LED ERROR LED MAINT LED
Figure 5-1 LED displays of the PS 60W 120/230V AC/DC
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
19
Interrupts, diagnostic alarms, error and status alarms 5.1 Status and error displays
Meaning of the LED displays
The following table explains the meaning of the status and error displays. You can find remedial measures for diagnostic alarms in chapter Diagnostic alarms (Page 21).
Table 5- 1 Status and error displays RUN/ERROR/MAINT
LED
Meaning
RUN
ERROR MAINT
OFF; PS returns no bus voltage
Off
Off
Off · External error; diagnostics is disabled
· PS not powered in the system, no supply voltage at the PS and CPU/IM.
On
On
Not Flashing relevant
Off
Flashing
On
Not relevant
Startup; all LED displays are lit briefly after system startup, or during module restart after firmware update.
Startup, PS returns bus voltage, PS waiting for parameterization
Not relevant
Error, PS supplies no bus voltage
· Supply voltage missing and diagnostics is enabled
· Internal error
Not
Maintenance request, PS returns no bus voltage
Off
relevant
On · Switch is off; power is present and diagnostics is
enabled
Malfunction Flashing Flashing Flashing LEDs flash persistently
Remedy
Switch on power to the PS Check the supply voltage Switch on PS
-
-
Evaluate diagnostic alarms and take appropriate remedial measures; see chapter Diagnostic alarms (Page 21) Switch on PS
Replace PS
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
20
Manual, 01/2013, A5E31826073-AA
Interrupts, diagnostic alarms, error and status alarms 5.2 Diagnostic alarms
5.2
Diagnostic alarms
Diagnostic alarms
The following table shows the meaning of the diagnostic alarms and possible remedial measures for the respective cause.
One of the following "LED images" indicates directly on the PS that a diagnostic alarm was triggered.
The red ERROR-LED is flashing.
Indicates external or internal errors.
The yellow MAINT-LED is lit.
Maintenance; a maintenance request is active.
All three LEDs are flashing permanently
The PS is in "Defective" state.
In STEP 7, the diagnostic results are displayed in plain text by means of the online and diagnostic view. You can read the diagnostic data records by means of the "RDREC" instruction.
Table 5- 2 Diagnostic alarms, their meaning and remedies
Diagnostic alarm
External error Supply voltage missing
Error code Dec.
266D
Internal error Overtemperature 5D
Overvoltage backplane bus
267D
Low
281D
voltage/overload in
the power segment
Error in the power 282D segment
Safety shutdown 285D
Meaning Hex.
Reacti Remedial measures on
010AH No supply voltage, or incorrect
1
insertion of the power connector
into the PS.
Check the supply voltage.
0005H Overtemperature on the printed 3 circuit board.
010BH High EMC interference or a
3
defective PS, CPU or IM inserted.
0119H A voltage dip below the valid limit 2 has been detected in the power segment to the right of the PS.
011AH PS or module to the right of the 2 PS is defective.
011DH Reliable operation of the module 3 is no longer guaranteed.
Check PS load. Isolate PS from mains. Wait one minute before you power on the PS again.
Eliminate electromagnetic interference. Check inserted modules and bus connectors. Isolate PS from mains. Wait one minute before you power on the PS again.
Check the modules in the affected segment; replace if necessary. Switch off the PS at the switch, then switch on again.
Replace the defective module. Switch off the PS at the switch, then switch on again.
Check ambient conditions. Isolate PS from mains. Wait one minute before you power on the PS again.
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
21
Interrupts, diagnostic alarms, error and status alarms 5.2 Diagnostic alarms
Diagnostic alarm
Maintenance Switch turned off Malfunction Module failure
Error code Dec.
268D
256D
Meaning Hex. 010CH The PS is switched off. 0100H PS failure.
Reacti Remedial measures on
1
Switch on PS.
3
Replace PS.
External errors, internal errors and malfunctions
External errors occur outside the PS. In the parameterization, specify whether or not an external error can trigger a diagnostic alarm. By default, external errors do not trigger diagnostic alarms.
Internal errors occur inside the PS. If still possible, an internal error always triggers a diagnostic alarm.
A malfunction is a static state; the PS must be sent in for repair. If still possible, a defect always triggers a diagnostic alarm.
Explanation of the reactions
1. No power at the power segment to the right of the PS. Alarm is only generated if the PS is still powered by the CPU or IM via the backplane bus.
2. The modules to the right of the PS are switched off.
3. The PS is switched off retentively. Alarm is only generated if the PS is still powered by the CPU or IM via the backplane bus. You cannot switch on the module unless you have eliminated the error and disconnected power to the PS for approximately one minute.
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
22
Manual, 01/2013, A5E31826073-AA
Interrupts, diagnostic alarms, error and status alarms 5.3 Interrupts
5.3
Interrupts
What is a diagnostic interrupt? You can determine reactions to internal or external errors in the user program, by programming a diagnostic interrupt which interrupts cyclic program execution on the CPU and triggers the diagnostic interrupt OB (OB82). The event which led to the interrupt is entered in the start information of the OB82.
Trigger of a diagnostic interrupt Events that can trigger a diagnostic alarm can also trigger a diagnostic interrupt: Supply voltage missing Overtemperature Overvoltage on the backplane bus Low voltage/overload in the power segment Error in the power segment Safety shutdown Switch position Off Malfunction
Reactions to a diagnostic interrupt You can find the CPU reaction to a diagnostic interrupt in the function manual System diagnostics (http://support.automation.siemens.com/WW/view/en/59192926). Detailed information on the error event is available in the diagnostic interrupt OB by executing the "RALRM" instruction (read additional interrupt information) and in the STEP 7 Online Help.
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
23
Interrupts, diagnostic alarms, error and status alarms 5.3 Interrupts
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
24
Manual, 01/2013, A5E31826073-AA
Technical specifications
6
Technical specifications of the PS 60W 120/230V AC/DC
Product type designation General information Hardware version Firmware version Engineering with STEP 7 TIA Portal can be configured/integrated as of version STEP 7 can be configured/integrated as of version FH technology Redundancy · Capable of redundancy
· For increasing performance Supply voltage Type of supply voltage · Rated value (DC)
· Valid range low limit (DC)
· Valid range high limit (DC)
· Rated value (AC)
· Valid range low limit (AC)
· Valid range high limit (AC)
· Short-circuit protection Mains frequency · Rated value 50 Hz
· Valid range, low limit
· Valid range, high limit Power failure backup · Power failure backup time
6ES7507-0RA00-0AB0 PS 60W 120/230V AC/DC
E01 V1.0.0
V12.0 / V12.0 V5.5 SP3 or higher
Yes Yes
AC/DC 120 V / 230 V 88 V 300 V 120 V / 230 V 85 V 264 V Yes
Yes 47 Hz 63 Hz
20 ms
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
25
Technical specifications
Input current · Rated value at 120 V DC · Rated value at 230 V DC · Rated value at 120 V AC · Rated value at 230 V AC Output current · Short-circuit protection Power · Power feed to the backplane bus Power loss · Power loss at rated conditions Interrupts/diagnostics/status information · Status display Electrical isolation · Primary/secondary Insulation Insulation tested with EMC Immunity to surge voltages · on the supply lines in accordance with IEC
61000-4-5
Degree of protection and protection class Degree of protection to EN 60529 · Protection class Dimensions · Width · Height · Depth Weights · Weight, approx.
0.6 A 0.3 A 0.6 A 0.34 A
6ES7507-0RA00-0AB0
Yes
60 W
12 W
Yes
Yes
2500 V DC 2s (routine test)
Yes; +/- 1 kV (according to IEC 61000-4-5; 1995; symm. surge), +/- 2 kV (according to IEC 610004-5; 1995; unsymm. surge), no external protective circuit required
IP20 1; with ground conductor
70 mm 147 mm 129 mm
600 g
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
26
Manual, 01/2013, A5E31826073-AA
Dimensional drawing
A
A.1
Dimensional drawing
Dimensional drawing of the PS 60W 120/230V AC/DC This appendix includes the dimensional drawing of the power supply module that is installed on a mounting rail with shielding bracket. Take the dimensions into account for installation in cabinets, control rooms, etc.
Figure A-1 Dimensional drawing of the PS 60W 120/230V AC/DC module
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
27
Dimensional drawing A.1 Dimensional drawing
This figure shows the dimensions of the module with open front panel.
Figure A-2 Dimensional drawing of the PS 60W 120/230V AC/DC module, side view with open front panel
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
28
Manual, 01/2013, A5E31826073-AA
Parameter data record
B
Parameter assignment in the user program You have the option to re-parameterize the power supply module in RUN mode of CPU.
Changing parameters in RUN mode The parameters for the power supply module are contained in data record 0. You can use the WRREC instruction to transfer the configurable parameters to the power supply module. The parameters assigned in STEP 7 are not changed permanently in the CPU, which means the parameters assigned in STEP 7 are valid again after a restart.
Output parameter RET_VAL The power supply module ignores errors that occur during transfer of parameters with the WRREC instruction and continues operation with the previous parameter assignment. However, a corresponding error code is written to the RET_VAL output parameter. If no error occurs, the length of the data actually transferred is entered in RET_VAL. RET_VAL is 4 bytes long and structured as follows: Byte1: Function_Num, general error code Byte2: Error_Decode, location of the error detection Byte3: Error_Code_1, error detection Byte4: Error_Code_2, manufacturer-specific expansion of the error detection
The description of the WRREC instruction and the general error codes are available in the STEP 7 online help.
Module-specific errors are displayed by means of Error_Code_1 = 224D or Error_Code_1 = 225D.
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
Manual, 01/2013, A5E31826073-AA
29
Parameter data record
Manufacturer-specific expansions of the error detection of the WRREC instruction have the following meaning:
Table B- 1 Manufacturer-specific expansions of the error detection of the WRREC instruction
Error_Code 1
224D Error in the data record header
Error_Code 2 1 D
2 D
225 D
1 D
Error in the net data
16 D
(parameters) entered in the
data record
Meaning
The version entered in the data record header is not supported by the module or reserved bits of the version are set.
The net length entered in the data record header is incorrect.
Diagnostic interrupt enable is incorrect
Reserved parameters are not 0
Data record structure
The following figure shows the structure of the data record 0.
A fixed bit pattern is entered in byte 0. It indicates the version of the data record structure. Each time a data record is written, the module checks the written data and accepts only data records with major version 1.
Byte 1 specifies the maximum data length that can be used for parameter data.
Byte 2 contains the parameter data.
Bytes 3 to 11 are reserved.
To enable a parameter in byte 2, set the corresponding bit to "1". The corresponding diagnostics is then activated, for example, for supply voltage monitoring. If you set the corresponding bit to "0", the diagnostics is deactivated.
You are not permitted to change byte 0, byte 1 or bytes 3 to 11.
%\WH %\WH %\WH
0LQRUYHUVLRQ 0DMRUYHUVLRQ
/HQJWKRIWKHSDUDPHWHUGDWD 'DWDOHQJWKE\WHV
(QDEOHGLDJQRVWLFV 'LDJQRVWLFVIRUVXSSO\YROWDJHPRQLWRULQJ 'LDJQRVWLFVIRUVZLWFKSRVLWLRQ
%\WHVWR
Figure B-1 Structure of data record 0
Power supply module PS 60W 120/230V AC/DC (6ES7507-0RA00-0AB0)
30
Manual, 01/2013, A5E31826073-AA
Load power supply module
PM 70 W 120/230VAC
(6EP1332-4BA00)
SIMATIC
S7-1500/ET 200MP Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Co_n_ne_c_tio_n____________3_ _Pa_ra_m_e_te_r ____________4_ _Astl_aatru_ms_sm,_dei_sasg_ang_oes_stic_, _er_ro_r a_n_d ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_ _Di_m_en_s_ion_d_ra_w_in_g ________A_ _Pa_ra_m_e_te_r d_a_ta_se_t________B_
01/2013
A5E31691456-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E31691456-AA 02/2013 Technical data subject to change
Copyright © Siemens AG 2013. All rights reserved
Preface
Purpose of this documentation
This manual supplements the system manuals:
S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792)
ET 200MP distributed I/O system (http://support.automation.siemens.com/WW/view/en/59193214)
General system functions are described there.
The information in this manual along with the System/Function manuals enables you to commission the systems.
Conventions
In the following, if "CPU" is mentioned, then this refers to the central modules of the S7-1500 automation system, as well as the interface modules of the ET 200MP distributed I/O. Also observe the notes marked as follows:
Note A note refers to important information about the product described in the documentation, for handling the product or to the part of the documentation to which special attention should be given.
Note on IT security
Siemens offers IT security mechanisms for its automation and drive product portfolio in order to support the safe operation of the plant/machine. We recommend that you inform yourself regularly on the IT security developments regarding your products. You can find information on this on the Internet (http://support.automation.siemens.com).
You can register for a product-specific newsletter here.
For the safe operation of a plant/machine, however, it is also necessary to integrate the automation components into an overall IT security concept for the entire plant/machine, which corresponds to the state-of-the-art IT technology. You can find information on this on the Internet (http://www.siemens.com/industrialsecurity).
Products used from other manufacturers should also be taken into account here.
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
3
Preface
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
4
Manual, 01/2013, A5E31691456-AA
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide................................................................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
Properties.......................................................................................................................................9
2.2
Operator controls and display elements ......................................................................................11
3 Connection .............................................................................................................................................. 13
3.1
Connecting up the power supply module.....................................................................................13
4 Parameter................................................................................................................................................ 15
5 Alarms, diagnostic, error and status messages ....................................................................................... 17
5.1
Status and error displays .............................................................................................................17
5.2
Diagnostic messages...................................................................................................................19
5.3
Alarms ..........................................................................................................................................19
6 Technical specifications........................................................................................................................... 21
A Dimension drawing .................................................................................................................................. 23
B Parameter data set .................................................................................................................................. 25
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
5
Table of contents
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
6
Manual, 01/2013, A5E31691456-AA
Documentation guide
1
Introduction
The documentation of the S7-1500 and ET 200MP system families has a modular structure, and includes topics associated with your automation system.
The complete documentation comprises various modules, which are subdivided into System Manuals, Function Manuals and Equipment Manuals.
An overview of the documents, which supplement this Manual, is provided in the following table.
Overview of the documentation for the power supply module PM 70 W 120/230 VAC
The following table lists additional documentation, which you require when using the load power supply module PM 70 W 120/230 VAC .
Table 1- 1 Documentation for the PM 70 W 120/230 VAC load power supply module
Subject Description of the system
Configuring control systems so that they are interferenceproof System diagnostics
Documentation
Most important content
System Manual
Planning its use
S7-1500 automation system (http://support.automation.siemens.com/WW/vie
Installation
w/en/59191792)
Connection
System Manual
Commissioning
ET 200MP distributed I/O system
Standards and approvals
(http://support.automation.siemens.com/WW/vie
w/en/59193214)
Electromagnetic
compatibility
Mechanical and climatic environmental conditions
Function Manual
Basic principles
Configuring control systems so that they are interference-proof
Electromagnetic
(http://support.automation.siemens.com/WW/vie
compatibility
w/en/59193566)
Lightning protection
Function Manual
Overview
System diagnostics
Diagnostics evaluation,
(http://support.automation.siemens.com/WW/vie
hardware/software
w/en/59192926)
SIMATIC Manuals
In the Internet (http://www.siemens.com/automation/service&support) you will find all of the current manuals for SIMATIC products, that you can download at no charge.
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
7
Documentation guide
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
8
Manual, 01/2013, A5E31691456-AA
Product overview
2.1
Properties
Order number 6EP1332-4BA00
View of the module
2
Figure 2-1 View of the PM 70 W 120/230 VAC load power supply module
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
9
Product overview 2.1 Properties
Properties
The load power supply module PM 70 W 120/230 VAC feeds input and output circuits (load circuits) as well as sensors and actuators The load power supply module has the following properties: Technical properties
Rated input voltage 120/230 V AC, 50/60 Hz Automatic voltage range switchover 24 V DC rated output voltage 3 A rated output current 70 W output power Power failure buffering
Accessories
The following components can be supplied with the power module: Line connector Pluggable 24 V DC output terminal
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
10
Manual, 01/2013, A5E31691456-AA
Product overview 2.2 Operator controls and display elements
2.2
Operator controls and display elements
The following diagram shows the operating and connection elements of the PM 70 W 120/230 VAC load power supply module behind the front cover, the line connector and the pluggable 24 V DC output terminal
LED displays showing the actual operating state and diagnostics state of the PM On / off switch Power supply connection via the line connector Line connector, inserted when delivered Pluggable 24 V DC output terminal, inserted when delivered
Figure 2-2 View of the PM 70 W 120/230 VAC power supply module (without front cover), the line connector and the pluggable 24 V DC output terminal
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
11
Product overview 2.2 Operator controls and display elements
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
12
Manual, 01/2013, A5E31691456-AA
Connection
3
3.1
Connecting up the power supply module
Line connection
WARNING Installation instructions Death or severe injury can occur. When connecting up the power supply module, carefully observe the general installation instructions that are valid in your particular country. Protect the line connection cables corresponding to the cable cross-section.
The following applies to the line connection of the load power supply module with the line connector: The line connector allows the supply voltage to be connected to the load power supply
with touch protection. The line connector facilitates permanent wiring to be established. The line connector has a strain relief mechanism. When supplied, every line connector is assigned to a power supply module type using a
coding element. A connector, coded for 230 V AC, cannot be inserted in a 24 V DC power supply module.
24 V DC output The following applies to the 24 V DC output of the load power supply module with pluggable 24 V DC output terminal: The 24 V DC output terminal allows loads to be connected with a 24 V DC input. The 24 V DC output terminal facilitates permanent wiring to be established. The 24 V DC output terminal guarantees protection against reverse polarity.
Cables
You must use flexible cables to connect the load power supply module. The wire crosssection can be 0.5 mm² up to 2.5 mm2 (AWG: 24 to 12). A miniature circuit breaker or motor circuit breaker must be provided at the input side.
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
13
Connection 3.1 Connecting up the power supply module
Clearance to adjacent modules
For a horizontal system configuration (cable outlet towards the bottom), no installation clearances are required to the right-hand adjacent module; on the other hand, if there is a module to the left, then a minimum clearance of 10 mm must be provided.
For vertical system configurations (cable outlet to the right), a minimum clearance of 25 mm must be maintained to the upper adjacent module. If there is a lower adjacent module, then a minimum clearance of 20 mm must be maintained
Reference
Information on installing the load power supply module and wiring the line connector and the pluggable 24 V DC output terminal is provided in the System Manual S7-1500 automation system (http://support.automation.siemens.com/WW/view/de/59191792) and in the operating instructions for the load power supply module.
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
14
Manual, 01/2013, A5E31691456-AA
Parameter
4
PM 70 W 120/230 VAC parameters The PM 70 W 120/230 VAC power supply module cannot be parameterized via STEP 7.
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
15
Parameter
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
16
Manual, 01/2013, A5E31691456-AA
Alarms, diagnostic, error and status messages
5
5.1
Status and error displays
Introduction
The diagnostics provided by the LEDs provides the first resource to locate faults.
LED displays
The LED displays (status and error displays) of the PM 70 W 120/230 VAC load power supply module can be seen in the following diagram.
RUN LED ERROR LED MAINT LED
Figure 5-1 LED displays of the PM 70 W 120/230 VAC load power supply module
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
17
Alarms, diagnostic, error and status messages 5.1 Status and error displays
Meaning of the LED displays
The significance of the status and error displays of the PM 70 W 120/230 VAC power supply module are explained in the following table.
Table 5- 1 RUN/ERROR/MAINT status and error displays
RUN off on off
off
LED ERROR
MAINT
off
off
off
off
on
off
off
on
Meaning
Remedy
POWER OFF PM deactivated No power at the PM Standby switch in the "lower" position Device inactive No 24 V DC output voltage
POWER ON The PM supplies a 24 V DC output voltage Line supply voltage is available at the PM Standby switch in the "upper" position Device active and in the regular operating mode 24 V DC output voltage is available
ERROR PM is operating in the overload mode Line supply voltage is available at the PM Standby switch in the "upper" position Device is active, however, in the "Overload"
operating mode The connected load draws more current than the
PM can supply 24 V DC output voltage drops
MAINTENANCE PM is in the standby mode Line supply voltage is available at the PM Standby switch in the "lower" position Device is active, however, in the standby mode No 24 V DC output voltage
Check the line supply Supply the PM with power Switch on the PM
-
Reduce the load current drawn by the connected load Install a load power supply with a higher rating
Switch on the PM by bringing the standby switch into the "upper" position
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
18
Manual, 01/2013, A5E31691456-AA
Alarms, diagnostic, error and status messages 5.2 Diagnostic messages
5.2
Diagnostic messages
The PM 70 W 120/230 VAC load power supply module does not initiate diagnostic messages in the CPU or STEP 7. You can identify the device status directly at the PM based on the "LED statuses", as explained in Chapter Status and error displays (Page 17).
5.3
Alarms
The PM 70 W 120/230 VAC load power supply module does not initiate any alarms in the CPU or STEP 7. You can identify the device status directly at the PM based on the "LED statuses", as explained in Chapter Status and error displays (Page 17).
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
19
Alarms, diagnostic, error and status messages 5.3 Alarms
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
20
Manual, 01/2013, A5E31691456-AA
Technical specifications
6
Technical data of the PM 70 W 120/230 VAC load power supply module
Product type designation General Information Hardware product version Firmware version Engineering mit can be configured in the STEP 7 TIA-Portal / integrated from version can be configured in STEP 7 / integrated from version PROFIBUS from GSD version / GSD revision Power supply Rated value (AC)
Permissible range, lower limit (AC)
Permissible range, upper limit (AC) Input current Rated value at 120 VAC
Rated value at 230 VAC Mains frequency Rated value 50 Hz
Rated value 60 Hz
Permissible range, lower limit
Permissible range, upper limit e Line and power failure bypass Line/power failure bypass time Output current Rated value
Short-circuit protection Power 24 V DC output power
6EP1332-4BA00 PM 70 W 120/230 VAC
1 Not applicable
Not applicable Not applicable Not applicable
120 V or 230 V (automatic switchover) 85 V or 170 V 132 V or 264 V
1.40 A 0.80 A
Yes Yes 45 Hz 65 Hz
20 ms
3 A Yes
194 W
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
21
Technical specifications
Power loss Power loss, typical. Alarms / diagnostics / status information Status display Electrical isolation Primary/secondary Degree of protection and protection class Degree of protection to EN 60529 Protection class Dimensions Width Height Depth Weights Weight, approx.
10.6 W
6EP1332-4BA00
Yes (using the device LEDs)
Yes
IP20 I with protective conductor
50 mm 147 mm 129 mm
452 g
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
22
Manual, 01/2013, A5E31691456-AA
Dimension drawing
A
Dimension drawing of the PM 70 W 120/230 VAC load power supply module
The dimension drawing of the load power supply module, mounted on a rail with shield bar, is provided in this attachment. These dimensions must be taken into account when mounting in cabinets, switchgear rooms etc.
Figure A-1 Dimension drawing of the PM 70 W 120/230 VAC load power supply module
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
23
Dimension drawing This drawing shows the module dimensions with the front cover open.
Figure A-2 Dimension drawing of the PM 70 W 120/230VAC load power supply module, side view with the front cover open
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
24
Manual, 01/2013, A5E31691456-AA
Parameter data set
B
The PM 70 W 120/230 VAC load power supply module does not provide any way of assigning parameters.
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
Manual, 01/2013, A5E31691456-AA
25
Parameter data set
Load power supply module PM 70 W 120/230VAC (6EP1332-4BA00)
26
Manual, 01/2013, A5E31691456-AA
Load power supply module
PM 190 W 120/230 VAC
(6EP1333-4BA00)
SIMATIC
S7-1500/ET 200MP Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Co_n_ne_c_tio_n____________3_ _Pa_ra_m_e_te_r ____________4_ _Astl_aatru_ms_sm,_dei_sasg_ang_oes_stic_, _er_ro_r a_n_d ___5_ _Te_c_hn_ic_al_sp_e_ci_fic_at_io_ns______6_ _Di_m_en_s_ion_d_ra_w_in_g ________A_ _Pa_ra_m_e_te_r d_a_ta_se_t________B_
01/2013
A5E31691095-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
A5E31691095-AA 01/2013 Technical data subject to change
Copyright © Siemens AG 2013. All rights reserved
Preface
Purpose of this documentation
This manual supplements the system manuals:
S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792)
ET 200MP distributed I/O system (http://support.automation.siemens.com/WW/view/en/59193214)
General system functions are described there.
The information in this manual along with the System/Function manuals enables you to commission the systems.
Conventions
In the following, if "CPU" is mentioned, then this refers to the central modules of the S7-1500 automation system, as well as the interface modules of the ET 200MP distributed I/O. Also observe the notes marked as follows:
Note A note refers to important information about the product described in the documentation, for handling the product or to the part of the documentation to which special attention should be given.
Note on IT security
Siemens offers IT security mechanisms for its automation and drive product portfolio in order to support the safe operation of the plant/machine. We recommend that you inform yourself regularly on the IT security developments regarding your products. You can find information on this on the Internet (http://support.automation.siemens.com).
You can register for a product-specific newsletter here.
For the safe operation of a plant/machine, however, it is also necessary to integrate the automation components into an overall IT security concept for the entire plant/machine, which corresponds to the state-of-the-art IT technology. You can find information on this on the Internet (http://www.siemens.com/industrialsecurity).
Products used from other manufacturers should also be taken into account here.
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
3
Preface
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
4
Manual, 01/2013, A5E31691095-AA
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide................................................................................................................................. 7
2 Product overview ....................................................................................................................................... 9
2.1
Properties.......................................................................................................................................9
2.2
Operating and display elements ..................................................................................................11
3 Connection .............................................................................................................................................. 13
3.1
Connecting up the power supply module.....................................................................................13
4 Parameter................................................................................................................................................ 15
5 Alarms, diagnostic, error and status messages ....................................................................................... 17
5.1
Status and error displays .............................................................................................................17
5.2
Diagnostic messages...................................................................................................................19
5.3
Alarms ..........................................................................................................................................19
6 Technical specifications........................................................................................................................... 21
A Dimension drawing .................................................................................................................................. 23
B Parameter data set .................................................................................................................................. 25
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
5
Table of contents
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
6
Manual, 01/2013, A5E31691095-AA
Documentation guide
1
Introduction
The documentation of the S7-1500 and ET 200MP system families has a modular structure, and includes topics associated with your automation system.
The complete documentation comprises various modules, which are subdivided into System Manuals, Function Manuals and Equipment Manuals.
An overview of the documents, which supplement this Manual, is provided in the following table.
Overview of the documentation for the power supply module PM 190 W 120/230 VAC
The following table lists additional documentation that you require when using the load power supply module PM 190 W 120/230 VAC .
Table 1- 1 Documentation for the PM 190 W 120/230 VAC load power supply module
Subject Description of the system
Configuring control systems so that they are interferenceproof System diagnostics
Documentation
Most important content
System Manual
Planning its use
S7-1500 automation system (http://support.automation.siemens.com/WW/vie
Installation
w/en/59191792)
Connection
System Manual
Commissioning
ET 200MP distributed I/O system
Standards and approvals
(http://support.automation.siemens.com/WW/vie
w/en/59193214)
Electromagnetic
compatibility
Mechanical and climatic environmental conditions
Function Manual
Basic principles
Configuring control systems so that they are interference-proof
Electromagnetic
(http://support.automation.siemens.com/WW/vie
compatibility
w/en/59193566)
Lightning protection
Function Manual
Overview
System diagnostics
Diagnostics evaluation,
(http://support.automation.siemens.com/WW/vie
hardware/software
w/en/59192926)
SIMATIC Manuals
In the Internet (http://www.siemens.com/automation/service&support) you will find all of the current manuals for SIMATIC products, which you can download at no charge.
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
7
Documentation guide
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
8
Manual, 01/2013, A5E31691095-AA
Product overview
2.1
Properties
Order number 6EP1333-4BA00
View of the module
2
Figure 2-1 View of the PM 190 W 120/230 VAC load power supply module
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
9
Product overview 2.1 Properties
Properties
The load power supply module PM 190 W 120/230 VAC feeds input and output circuits (load circuits) as well as sensors and actuators The load power supply module has the following properties: Technical properties
Rated input voltage 120/230 V AC, 50/60 Hz Automatic voltage range switchover 24 V DC rated output voltage 8 A rated output current 190 W output power Power failure buffering
Accessories
The following components can be supplied with the power module: Line connector Pluggable 24 V DC output terminal
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
10
Manual, 01/2013, A5E31691095-AA
Product overview 2.2 Operating and display elements
2.2
Operating and display elements
The following diagram shows the operating and connection elements of the PM 190 W 120/230 VAC load power supply module behind the front cover, the line connector and the pluggable 24 V DC output terminal
LED displays showing the actual operating state and diagnostics state of the PM On / off switch Power supply connection via the line connector Line connector, inserted when delivered Pluggable 24 V DC output terminal, inserted when delivered
Figure 2-2 View of the PM 190 W 120/230 VAC power supply module (without front cover), the line connector and the pluggable 24 V DC output terminal
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
11
Product overview 2.2 Operating and display elements
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
12
Manual, 01/2013, A5E31691095-AA
Connection
3
3.1
Connecting up the power supply module
Line connection
WARNING Installation instructions Death or severe injury can occur. When connecting up the power supply module, carefully observe the general installation instructions that are valid in your particular country. Protect the line connection cables corresponding to the cable cross-section.
The following applies to the line connection of the load power supply module with the line connector: The line connector allows the supply voltage to be connected to the load power supply
with touch protection. The line connector facilitates permanent wiring to be established. The line connector has a strain relief mechanism. When supplied, every line connector is assigned to a power supply module type using a
coding element. A connector, coded for 230 V AC, cannot be inserted in a 24 V DC power supply module.
24 V DC output The following applies to the 24 V DC output of the load power supply module with pluggable 24 V DC output terminal: The 24 V DC output terminal allows loads to be connected with a 24 V DC input. The 24 V DC output terminal facilitates permanent wiring to be established. The 24 V DC output terminal guarantees protection against reverse polarity.
Cables
You must use flexible cables to connect the load power supply module. The wire crosssection can be 0.5 mm² up to 2.5 mm2 (AWG: 24 to 12). A miniature circuit breaker or motor circuit breaker must be provided at the input side.
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
13
Connection 3.1 Connecting up the power supply module
Clearance to adjacent modules
For a horizontal system configuration (cable outlet towards the bottom), no installation clearances are required to the right-hand adjacent module; on the other hand, if there is a module to the left, then a minimum clearance of 10 mm must be provided.
For vertical system configurations (cable outlet to the right), a minimum clearance of 25 mm must be maintained to the upper adjacent module. If there is a lower adjacent module, then a minimum clearance of 20 mm must be maintained
Reference
Information on installing the load power supply module and wiring the line connector and the pluggable 24 V DC output terminal is provided in the System Manual S7-1500 automation system (http://support.automation.siemens.com/WW/view/de/59191792) and in the operating instructions for the load power supply module.
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
14
Manual, 01/2013, A5E31691095-AA
Parameter
4
PM 190 W 120/230 VAC parameters The PM 190 W 120/230 VAC power supply module cannot be parameterized via STEP 7.
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
15
Parameter
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
16
Manual, 01/2013, A5E31691095-AA
Alarms, diagnostic, error and status messages
5
5.1
Status and error displays
Introduction
The diagnostics provided by the LEDs provides the first resource to locate faults.
LED displays
The LED displays (status and error displays) of the PM 190 W 120/230 VAC load power supply module can be seen in the following diagram.
RUN LED ERROR LED MAINT LED
Figure 5-1 LED displays of the PM 190 W 120/230 VAC load power supply module
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
17
Alarms, diagnostic, error and status messages 5.1 Status and error displays
Meaning of the LED displays
The significance of the status and error displays of the PM 190 W 120/230 VAC power supply module are explained in the following table.
Table 5- 1 RUN/ERROR/MAINT status and error displays
RUN off on off
off
LED ERROR
MAINT
off
off
off
off
on
off
off
on
Meaning
Remedy
POWER OFF PM deactivated No power at the PM Standby switch in the "lower" position Device inactive No 24 V DC output voltage
POWER ON The PM supplies a 24 V DC output voltage Line supply voltage is available at the PM Standby switch in the "upper" position Device active and in the regular operating mode 24 V DC output voltage is available
ERROR PM is operating in the overload mode Line supply voltage is available at the PM Standby switch in the "upper" position Device is active, however, in the "Overload"
operating mode The connected load draws more current than the
PM can supply 24 V DC output voltage drops
MAINTENANCE PM is in the standby mode Line supply voltage is available at the PM Standby switch in the "lower" position Device is active, however, in the standby mode No 24 V DC output voltage
Check the line supply Supply the PM with power Switch on the PM
-
Reduce the load current drawn by the connected load Install a load power supply with a higher rating
Switch on the PM by bringing the standby switch into the "upper" position
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
18
Manual, 01/2013, A5E31691095-AA
Alarms, diagnostic, error and status messages 5.2 Diagnostic messages
5.2
Diagnostic messages
The PM 190 W 120/230 VAC load power supply module does not initiate diagnostic messages in the CPU or STEP 7. You can identify the device status directly at the PM based on the "LED statuses", as explained in Chapter Status and error displays (Page 17).
5.3
Alarms
The PM 190 W 120/230 VAC load power supply module does not initiate any alarms in the CPU or STEP 7. You can identify the device status directly at the PM based on the "LED statuses", as explained in Chapter Status and error displays (Page 17).
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
19
Alarms, diagnostic, error and status messages 5.3 Alarms
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
20
Manual, 01/2013, A5E31691095-AA
Technical specifications
6
Technical data of the PM 190 W 120/230 VAC load power supply module
Product type designation General Information Hardware product version Firmware version Engineering mit can be configured in the STEP 7 TIA-Portal / integrated from version can be configured in STEP 7 / integrated from version PROFIBUS from GSD version / GSD revision Power supply Rated value (AC)
Permissible range, lower limit (AC)
Permissible range, upper limit (AC) Input current Rated value at 120 VAC
Rated value at 230 VAC Mains frequency Rated value 50 Hz
Rated value 60 Hz
Permissible range, lower limit
Permissible range, upper limit e Line and power failure bypass Line/power failure bypass time Output current Rated value
Short-circuit protection Power 24 V DC output power
6EP1333-4BA00 PM 190 W 120/230 VAC
1 Not applicable
Not applicable Not applicable Not applicable
120 V or 230 V (automatic switchover) 85 V or 170 V 132 V or 264 V
3.70 A 1.70 A
Yes Yes 45 Hz 65 Hz
20 ms
8 A Yes
194 W
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
21
Technical specifications
Power loss Power loss, typical. Alarms / diagnostics / status information Status display Electrical isolation Primary/secondary Degree of protection and protection class Degree of protection to EN 60529 Protection class Dimensions Width Height Depth Weights Weight, approx.
19.6 W
6EP1333-4BA00
Yes (using the device LEDs)
Yes
IP20 I with protective conductor
75 mm 147 mm 129 mm
736 g
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
22
Manual, 01/2013, A5E31691095-AA
Dimension drawing
A
Dimension drawing of the PM 190 W 120/230 VAC load power supply module
The dimension drawing of the load power supply module, mounted on a rail with shield bar, is provided in this attachment. These dimensions must be taken into account when mounting in cabinets, switchgear rooms etc.
Figure A-1 Dimension drawing of the PM 190 W 120/230 VAC load power supply module
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
23
Dimension drawing This drawing shows the module dimensions with the front cover open.
Figure A-2 Dimension drawing of the PM 190 W 120/230VAC load power supply module, side view with the front cover open
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
24
Manual, 01/2013, A5E31691095-AA
Parameter data set
B
The PM 190 W 120/230 VAC load power supply module does not provide any way of assigning parameters.
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
Manual, 01/2013, A5E31691095-AA
25
Parameter data set
Load power supply module PM 190 W 120/230 VAC (6EP1333-4BA00)
26
Manual, 01/2013, A5E31691095-AA
SIMATIC TOP connect for S7-1500 and _Pr_ef_ac_e_______________
ET200MP
_Sa_fe_ty_n_ot_es____________1_
_Do_c_um_e_n_tat_io_n _gu_id_e_______2_
_Pr_od_u_ct_o_ve_rv_ie_w_________3_
SIMATIC TOP connect for S7-1500 and ET200MP
Manual
_Co_n_ne_c_tin_g____________4_ _Wco_inrin_neg_cSt_ItMo_At_hTe_ICI/_OT_Om_Po_du_le_s ____5_ _Te_c_hn_ic_al_sp_e_cif_ic_at_ion_s______6_
_En_v_iro_nm_e_n_t ___________7_
_Di_m_en_si_on_d_ra_w_in_gs_______A__
_Ci_rc_ui_t d_ia_gr_am_s_________B__
_Sp_a_re_p_ar_ts_/ A_c_ce_s_so_rie_s____C__
_Se_rv_ic_e_an_d_S_up_p_or_t ______D__
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Industry Sector Postfach 48 48 90026 NÜRNBERG GERMANY
04/2014 Subject to change
Copyright © Siemens AG . All rights reserved
Preface
Purpose of this documentation
This documentation provides important information on wiring the I/O modules (input and output modules) of the S7-1500 SIMATIC controller and the ET 200MP modular I/O system with SIMATIC TOP connect system cabling.
Basic knowledge required General knowledge about automation is needed to understand this documentation.
Scope of this documentation
This documentation applies to all SIMATIC products in the S7-1500 product family with ET 200MP.
Conventions
Please also observe the notes marked as follows:
Note A note contains important information about the product described, about handling the product or about a specific section of the documentation that requires particular attention.
Recycling and disposal The products can be recycled as their components are low in pollutants. For the environmentally friendly recycling and disposal of your old device, please contact a certificated disposal service for electronic scrap.
Additional support You will find information on the technical support service in the appendix to this documentation. The technical documentation for the various SIMATIC products and systems is available on the Internet (http://www.siemens.com/simatic-tech-doku-portal). You will find the online catalog and online ordering system on the Internet (http://mall.automation.siemens.com).
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
3
Table of contents
Preface ........................................................................................................................................ 3
1 Safety notes ................................................................................................................................. 7
2 Documentation guide ..................................................................................................................... 9
3 Product overview......................................................................................................................... 11
3.1
What is SIMATIC TOP connect system cabling?..................................................................... 11
3.2
Components........................................................................................................................... 14
3.3
Connectable I/O modules ....................................................................................................... 17
4 Connecting ................................................................................................................................. 19
4.1
Safety regulations................................................................................................................... 19
4.2
Wiring rules ............................................................................................................................ 21
4.3 4.3.1 4.3.2 4.3.3 4.3.4 4.3.5
Connecting components ......................................................................................................... 22 Assembling the round-sheath ribbon cable ............................................................................. 24 Wiring the front connector module .......................................................................................... 26 Connecting the connecting cable and supply voltage to the front connector module................ 27 Connecting the connecting cable to the terminal module......................................................... 31 Connecting the actuators/sensors to the terminal module ....................................................... 32
4.4
Labeling terminal modules...................................................................................................... 32
5 Wiring SIMATIC TOP connect to the I/O modules............................................................................ 33
5.1
SIMATIC TOP connect components and selection guide ........................................................ 33
5.2
Note on connecting digital I/O modules................................................................................... 39
5.3
Note on connecting the 2 A output module ............................................................................. 41
5.4
Note on connecting analog I/O modules ................................................................................. 43
5.5
Shield connection of the signal cables .................................................................................... 45
6 Technical specifications ............................................................................................................... 49
6.1
Standards and approvals........................................................................................................ 49
6.2
Electromagnetic compatibility ................................................................................................. 51
6.3
Shipping and storage conditions ............................................................................................. 52
6.4
Mechanical and climatic ambient conditions............................................................................ 52
6.5
Technical specifications for front connector modules .............................................................. 54
6.6
Technical specifications for connecting cables........................................................................ 56
6.7
Technical specifications for terminal modules ......................................................................... 57
7 Environment ............................................................................................................................... 69
A Dimension drawings .................................................................................................................... 71
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
5
Table of contents
A.1
Front connector modules.........................................................................................................71
A.2
Terminal modules for 16-pin connecting cable .........................................................................80
A.3
Terminal modules for 50-pin connecting cable .........................................................................86
B Circuit diagrams.......................................................................................................................... 89
B.1
Circuit diagrams for front connector modules ...........................................................................89
B.2
Circuit diagrams, terminal modules for 16-pin connecting cable ...............................................94
B.3
Circuit diagrams, terminal modules for 50-pin connecting cable .............................................105
C Spare parts / Accessories ...........................................................................................................111
C.1
Accessories ..........................................................................................................................111
D Service and Support...................................................................................................................113
Index ........................................................................................................................................115
SIMATIC TOP connect for S7-1500 and ET200MP
6
Manual,
Safety notes
1
Warning
When electrical devices are operated, parts of these devices will necessarily carry dangerous voltages.
If these devices are not correctly handled/operated, this can result in death or severe injury as well as significant material damage.
Only appropriately qualified personnel may work on or in the vicinity of this device.
This device can only function correctly and safely if it is transported, stored, set up and installed correctly.
Before installation or maintenance work can begin, the system's main switch must be switched off and measures taken to prevent it being switched on again.
If this instruction is not followed, touching live parts can result in death or serious injury.
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
7
Documentation guide
2
Introduction
The documentation for the SIMATIC products is modular in structure and covers a wide range of subjects relating to your automation system.
The complete documentation for SIMATIC products in the S7-1500 product family with ET 200MP comprises the system manual, the function manuals and the product manuals.
The TIA Selection Tool will also help you to select and order the right system cabling for your SIMATIC S7-1500.
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
9
Documentation guide
Overview of documentation for SIMATIC S71500 / ET200MP
The tables below set out the documentation for SIMATIC S7-1500 / ET 200MP with the relevant content for system cabling.
Table 2- 1 Documentation for SIMATIC S7-1500 / ET 200MP system cabling
Subject
Documentation
System description S7-1500 Automation System system manual (http://support.automation.siemens.com/WW/view/en/59191792)
ET 200MP distributed I/O device system manual (http://support.automation.siemens.com/WW/view/en/59193214)
Digital modules
DQ 16 x 24 V DC/0.5A ST digital output module (http://support.automation.siemens.com/WW/view/en/59193401)
DQ 32 x 24 V DC/0.5A ST digital output module (http://support.automation.siemens.com/WW/view/en/59193400)
DQ 8 x 24 V DC/2A HF digital output module (http://support.automation.siemens.com/WW/view/en/59193089)
DI 16 x 24 V DC HF digital input module (http://support.automation.siemens.com/WW/view/en/59193001)
DI 16 x 24 V DC SRC BA digital input module (http://support.automation.siemens.com/WW/view/en/59191844)
DI 32 x 24 V DC HF digital input module (http://support.automation.siemens.com/WW/view/en/59192896)
Analog modules
AQ 4 x U/I ST analog output module (http://support.automation.siemens.com/WW/view/en/59191850)
AQ 8 x U/I HS analog output module (http://support.automation.siemens.com/WW/view/en/59193551)
AI 8 x U/I/RTD/TC ST analog input module (http://support.automation.siemens.com/WW/view/en/59193205)
AI 8 x U/I HS analog input module (http://support.automation.siemens.com/WW/view/en/59193206)
Key content · Connecting
· Block diagram · Connecting · Technical specifications · Dimension drawings
· Block diagram · Connecting · Technical specifications · Dimension drawings
SIMATIC manuals
The latest versions of all SIMATIC manuals are available on the Internet (http://www.siemens.com/automation/service&support) for download.
SIMATIC TOP connect for S7-1500 and ET200MP
10
Manual,
Product overview
3
3.1
What is SIMATIC TOP connect system cabling?
Introduction
SIMATIC TOP connect system cabling is an efficient way to connect the I/O modules (input and output modules) of the SIMATIC controller S7-1500 I/O and ET 200MP. SIMATIC TOP connect uses standardized connectors and reduces the wiring work required.
There are two types of connection:
Fully modular connection: for connecting sensors and actuators in the field.
Flexible connection: for simple wiring inside the control cabinet.
Area of application
SIMATIC TOP connect allows you to wire actuators and sensors "locally" to one or more terminal modules. Connection to the I/O modules takes place via connecting cable.
Figure 3-1 SIMATIC TOP connect with an S7-1500
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
11
Product overview 3.1 What is SIMATIC TOP connect system cabling?
Installation
System cabling with SIMATIC TOP connect always consists of the following components: The front connector module with either
One or more 16-pin male connectors for connecting the connecting cables or One 50-pin male connector for connecting the connecting cable One or more terminal modules One or more connecting cables with plug connectors at the ends
Fully modular connection
The fully modular connection for the system cabling comprises the following components:
A front connector module for connection to the SIMATIC S7-1500 or
ET200MP I/O modules
Connecting cables , pre-assembled or by the meter Terminal modules , for connection to sensors and actuators in the field
Figure 3-2 Fully modular connection
The components can be combined to suit the application and connected with simple plug-in connections. The terminal modules are used instead of conventional terminal blocks and act as the interface to the sensors and actuators.
In addition to the terminal module versions with screw-type terminals or push-in systems, there are also versions with LED signaling and signal conditioning, for example, from 230 V AC to 24 V DC.
SIMATIC TOP connect for S7-1500 and ET200MP
12
Manual,
Product overview 3.1 What is SIMATIC TOP connect system cabling?
Flexible connection The flexible connection for the system cabling comprises a front connector module for connection to the SIMATIC S7-1500 or ET200MP digital I/O modules. The front connector is already wired with 20 or 40 single wires which connect the SIMATIC S7-1500 or ET200MP digital I/O modules directly to the sensors and actuators in the control cabinet.
Figure 3-3 Flexible connection The single wires (cross-section: 0.5 mm²) are available in different lengths and in the following designs: H05V-K cable (PVC insulation) H05Z-K (halogen-free insulation) UL/CSA approval
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
13
Product overview 3.2 Components
3.2
Components
This section gives you an overview of the components of the SIMATIC TOP connect system cabling.
Components for fully modular connection
The table below lists the components for fully modular connection of the SIMATIC TOP connect system cabling.
Table 3- 1 Components for fully modular connection of SIMATIC TOP connect
Component Front connector module
Function
Figure
Front connector modules are modified front connectors and are plugged into the I/O module to be wired. The front connector module has IDC female connectors for connecting the connecting cables. Front connector modules are available in the following designs:
· For DI/DO digital modules (power supply with push-in or screw-type terminals)
· For 2A digital output 1 x 8 DO (power supply with push-in or screwtype terminals)
· For analog modules
SIMATIC TOP connect for S7-1500 and ET200MP
14
Manual,
Component Connecting cable
Terminal module
Product overview 3.2 Components
Function
Connecting cables connect the front connector module with the terminal modules. Connecting cables are available in the following versions:
· 16-pin and 50-pin round cable (shielded or unshielded), preassembled¹ Max. length 10 m
· 16-pin round-sheath ribbon cable (shielded or unshielded), for assembly by the user² Max. length 30 m
· 2 x 16-pin round-sheath ribbon cable (unshielded), for assembly by the user² Max. length 30 m
¹Pre-assembled: One IDC connector (insulation
displacement connector) (flat socket) at each end.
²For assembly by the user. See "Assembling round-sheath
ribbon cables".
Digital and analog terminal modules in S7-1500 design are available for connecting the I/O signals. These are attached to the standard mounting rail.
The terminal modules are available in the following connecting systems:
· Push-in system
· Screw-type terminals All digital terminal modules also have LED for channel display.
Figure
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
15
Product overview 3.2 Components
Accessories for fully modular connection The following components can be ordered separately or as spare part:
Table 3- 2 Accessories for fully modular connection of SIMATIC TOP connect
Accessories Labels
Shield plate
Shield connection clamps for the shield plate IDC connector (insulation displacement connector), 16-pin
Crimping pliers for IDC connectors (insulation displacement connectors)
Function
Labels (20 x 7 mm, pale turquoise) in the S7-1500 design are available for labeling the terminal modules.
The shield plate can be fitted onto the terminal module for analog signals. The terminal module with the fitted shield plate is fastened to the standard mounting rail.
The shield connection clamps provide contact plating for cable shields on the shield plate.
Round-sheath ribbon cables only:
The IDC connector (insulation displacement connector) is crimped onto the pre-assembled round-sheath ribbon cable.
The IDC connectors (insulation displacement connectors) are crimped onto the pre-assembled round-sheath ribbon cable using the crimping pliers.
Components for flexible connection
The table below lists the components for flexible connection of the SIMATIC TOP connect system cabling.
Table 3- 3 Components for flexible connection of SIMATIC TOP connect
Component
Front connector with single wires
Function
Up to 16 or 32 digital input and output channels can be connected directly to the I/O with a front connector with single wires. The single wires are fitted with screw-type contacts in the front connector and are cut off straight at the other end.
The wires can be easily identified as they are marked at regular intervals in accordance with the pin designations on the front connector. The front connectors are available in the following designs:
· For 16 DI/DO modules
· For 32 DI/DO modules
Figure
SIMATIC TOP connect for S7-1500 and ET200MP
16
Manual,
Product overview 3.3 Connectable I/O modules
3.3
Connectable I/O modules
The tables below list all input and output modules of the SIMATIC controller S7-1500 and ET 200MP that can be connected with the SIMATIC TOP connect fully modular connection.
Table 3- 4 Connectable I/O modules, for terminal modules with 16-pin connecting cables
I/O module (digital, analog) DI 16x24 VDC, 0.05 ms ... 20 ms, type 3 DI 16x24 VDC, 3 ms type 1; sourcing DI 32x24 VDC, 0.05 ms ... 20 ms, type 3 DO 16x24 VDC, 0.5 A, substitute values DQ 8x24 VDC, 2 amperes DO 32x24 VDC, 0.5 A, substitute values AO 4xU, I, 16-bit, 0.3 % AQ 8xU, I, HS correct AI 8xU, I, 14-bit, 0.3 % AI 8xU, I, R, RTD, TC, 16-bit, 0.3 %
Article number 6ES7 521-1BH00-0AB0 6ES7 521-1BH50-0AB0 6ES7 521-1BL00-0AB0 6ES7 522-1BH00-0AB0 6ES7 522-1BF00-0AB0 6ES7 522-1BL00-0AB0 6ES7 532-5HD00-0AB0 6ES7 532-5HF00-0AB0 6ES7 531-7NF10-0AB0 6ES7 531-7KF00-0AB0
Table 3- 5 Connectable I/O modules, for terminal modules with 50-pin connecting cables
I/O module (digital, analog) DI 16x24 VDC, 0.05 ms ... 20 ms, type 3 DI 16x24 VDC, 3 ms type 1; sourcing DI 32x24 VDC, 0.05 ms ... 20 ms, type 3 DO 16x24 VDC, 0.5 A, substitute values DO 32x24 VDC, 0.5 A, substitute values AO 4xU, I, 16-bit, 0.3 % AQ 8xU, I, HS correct AI 8xU, I, 14-bit, 0.3 % AI 8xU, I, R, RTD, TC, 16-bit, 0.3 %
Article number 6ES7 521-1BH00-0AB0 6ES7 521-1BH50-0AB0 6ES7 521-1BL00-0AB0 6ES7 522-1BH00-0AB0 6ES7 522-1BL00-0AB0 6ES7 532-5HD00-0AB0 6ES7 532-5HF00-0AB0 6ES7 531-7NF10-0AB0 6ES7 531-7KF00-0AB0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
17
Connecting
4
4.1
Safety regulations
Introduction
When used in plants or systems, SIMATIC TOP connect system cabling is subject to special rules and regulations in line with the area of application.
This section provides an overview of the most important rules for connecting SIMATIC TOP connect.
Rules and regulations governing the integration of the S7-1500 into a plant or system can also be found under "Rules and regulations" in the S7-1500 system manual (http://support.automation.siemens.com/WW/view/en/59191792).
Specific application
Please observe the safety and accident prevention regulations that apply to specific applications, for example, the machinery directives.
Supply voltage
Please note the following points about line voltage:
For stationary plants and systems without an all-pole line disconnector, there must be a disconnector unit (all-pole) fitted in the building installation.
Any fluctuation/deviation in the line voltage from the rated value must be within the permitted tolerance for all S7-1500 electric circuits.
24 V DC supply
Please note the following points for 24 V DC supply:
Power supplies for 24 V DC must have secure electrical isolation in accordance with IEC 60364-4-41.
Surge arrestors must be fitted to protect against lighting and overvoltage.
You will find components for lightning and overvoltage protection in the "Designing interference-free controllers" function manual (http://support.automation.siemens.com/WW/view/en/59193566).
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
19
Connecting 4.1 Safety regulations
Protection from electric shock
The S7-1500 automation system mounting rail must be connected (conductive connection) to the protective conductor to prevent electric shock.
Protection from external electrical interference
The following section details the points to note to prevent electrical interference and faults:
You must make sure that each plant or system fitted with an S7-1500 is connected to a protective conductor with a sufficient cross-section to deal with electromagnetic interference.
For supply, signal and bus cables, you must make sure that the cables are correctly routed and installed.
For signal and bus cables, you must make sure that an open circuit or crossover will not result in undefined plant or system states.
Reference
Further information is available in the "Designing interference-free controllers" function manual.
SIMATIC TOP connect for S7-1500 and ET200MP
20
Manual,
Connecting 4.2 Wiring rules
4.2
Wiring rules
The table below sets out the wiring rules for connecting the I/O module supply voltage to the terminal module or front connector module.
For information on push-in connections, please see Connecting the connecting cable and supply voltage to the front connector module (Page 27).
Table 4- 1 Wiring rules
Wiring rules for ...
Connectable cable cross-sections
Solid cables Flexible cables ... Without end sleeve
... With end sleeve In accordance with DIN 46228/1
... With end sleeve In accordance with DIN 46228/4 with plastic collar
Number of cables per connection
Max. diameter of insulation
Stripped length of the cables
... Without insulating collar
... With insulating collar
Blade of the screwdriver
Tightening torque for connecting the cables
Terminal module Push-in system
Screw-type terminal
Front connector module
Push-in system
Screw-type terminal
No 0.2 to 2.5 mm² 0.2 to 2.5 mm²
0.2 to 2.5 mm²
0.5 to 2.5 mm²
(2.5 mm² with crimp in accordance with EN 60947-1)
0.5 to 1.5 mm² 0.25 to 1.5 mm²
0.25 to 0.75 mm²
0.5 to 2.5 mm² 0.25 to 1.5 mm²
0.25 to 1.5 mm²
Combination of 1 or 2 conductors to make up the cross-sections specified above (in total) in one end sleeve.
3.1 mm
3.1 mm
0.6 x 3.5
0.6 x 3.5 0.4 Nm
8 + 1 mm
10 mm
8 + 1 mm
10 mm
SD 0.6 x 3.5 DIN 5264 SD 0.6 x 3.5 DIN 5264
0.4 Nm
See also
Connecting the connecting cable and supply voltage to the front connector module (Page 27)
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
21
Connecting 4.3 Connecting components
4.3
Connecting components
Introduction
WARNING Risk of electrocution Touching live parts can result in death or serious injury. Before you connect a module, make sure that it is disconnected from the power supply.
The procedure for connecting the front connector modules is basically the same as for the standard front connectors. The connection of standard front connectors is described in detail in the S7-1500 system manual under "Connecting" (http://support.automation.siemens.com/WW/view/en/59191792). Before connecting the front connector modules, read the following sections of the S7-1500 system manual: Wiring front connectors for I/O modules without shield connection element Preparing and wiring front connectors for I/O modules without shield connection element Wiring front connectors for I/O modules with shield connection element Preparing front connectors for I/O modules with shield connection element Bringing the front connector into final position
SIMATIC TOP connect for S7-1500 and ET200MP
22
Manual,
Connecting 4.3 Connecting components
Abbreviations used The meanings of the abbreviations in the figures below are as follows:
AI BR M L+ Mn ICn+/ICnUn+/UnIn+/InCOMP+/COMPIComp+/ICompUV UCM UISO MANA
Analog input module Potential bridges Connection for ground Connection for supply voltage Measuring input, channel n Current output power supply, thermal resistance (RTD), channel n Voltage input, channel n Current input, channel n Compensation input Current output power supply, compensation Feed voltage at channel for 2-wire transducer Potential difference between reference points of the measuring inputs / the analog ground MANA Potential difference between reference points of the measuring inputs and the central grounding point Reference point of the analog ground
Wiring sequence
Step 1
2 3 4
Action Prepare the connecting cable
Assembling the round-sheath ribbon cable
Wiring the front connector module
Round-sheath ribbon cable already assembled
Connecting the connecting cable to the terminal module
Wire the terminal module inputs and outputs
See section Assembling the round-sheath ribbon cable (Page 24)
Wiring the front connector module (Page 26) Connecting the connecting cable and supply voltage to the front connector module (Page 27) Connecting the connecting cable to the terminal module (Page 31)
See also
Assembling the round-sheath ribbon cable (Page 24) Wiring the front connector module (Page 26) Connecting the connecting cable and supply voltage to the front connector module (Page 27) Connecting the connecting cable to the terminal module (Page 31)
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
23
Connecting 4.3 Connecting components
4.3.1
Assembling the round-sheath ribbon cable
Note Connecting cable assembly is only required for round-sheath ribbon cables (16-pin and 2 x 16-pin). Round cables are already assembled.
Maximum cable length
The length of the connecting cable (round-sheath ribbon cable) between the SIMATIC controller and the terminal modules must not exceed 30 m.
Connecting the round-sheath ribbon cable to connectors
Note Each connecting end of the round-sheath ribbon cable needs to be fitted with connectors for connecting to the front connector module and the terminal module. Follow the steps below for each of the ends.
1. Cut the round-sheath ribbon cable to the required length. The maximum length is 30 m.
2. Remove part of the cable sheath at each end of the round-sheath ribbon cable. The table below sets out the length of sheathing to be removed.
Connection end
1 x 16 wires shielded/unshielded
Top connector, front connector module
Approx. 130 mm
Bottom connector,
Approx. 80 mm
front connector module
Terminal module connector
Approx. 40 mm
2 x 16 wires, unshielded Outer flat ribbon cable Inner flat ribbon cable Approx. 130 mm
Approx. 80 mm
100 mm
100 mm
SIMATIC TOP connect for S7-1500 and ET200MP
24
Manual,
Connecting 4.3 Connecting components
3. Thread the round-sheath ribbon cable into the 16-pin connector at the "terminal module connector" connection side.
NOTICE Incorrectly connecting the round-sheath ribbon cable will cause malfunctions. There is a mark on the connector to prevent incorrect connection.
When you insert the cable, make sure that the triangular mark is pointing to the wire marked , as shown in the figure below.
Figure 4-1 Wire marked to prevent incorrect connection 4. Use the crimping pliers to crimp the end of the cable into the connector. 5. Run the round-sheath ribbon cable back over the top of the connector.
Figure 4-2 Running round-sheath ribbon cable back over top of connector 6. Lay the round-sheath ribbon cable up against the connector.
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
25
Connecting 4.3 Connecting components
7. Latch the cable grip on the connector into place.
Figure 4-3 Fitting the strain relief
8. Repeat steps 3 5 to connect the round-sheath cable connector to the "lower connector, front connector module" and the "upper connector, front connector module" connection ends.
4.3.2
Wiring the front connector module
Introduction
This section explains how to wire the front connector modules.
Note Please also read Wiring SIMATIC TOP connect to the I/O modules (Page 33) for special connection examples and the criteria for selecting front connector modules.
Functions of the front connector module
The front connector module is used to connect the connecting cable to the I/O module. The supply voltage cables for the modules can also be connected to the front connector module.
See also
Wiring SIMATIC TOP connect to the I/O modules (Page 33)
SIMATIC TOP connect for S7-1500 and ET200MP
26
Manual,
Connecting 4.3 Connecting components
4.3.3
Connecting the connecting cable and supply voltage to the front connector module
Requirements
Supply voltages are switched off
Cables have been prepared in line with the terminal system used; see the wiring rules under Wiring rules (Page 21).
Connecting the connecting cable to the front connector module
WARNING Risk of electrocution Touching live parts can result in death or serious injury. Before you connect a module, make sure that it is disconnected from the power supply.
Note The example here shows the connection of a 16-pin connecting cable to the front connector module. Follow the same procedure as applicable for 50-pin connecting cables.
1. Switch off the load current supply. 2. Lift up the front flap of the I/O module until it snaps into place.
Figure 4-4 Front flap of the I/O module open (example)
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
27
Connecting 4.3 Connecting components
3. Place the front connector in the pre-wiring position. This is done by fitting the bottom of the front connector into the I/O module and swiveling up the front connector until it latches into place.
Figure 4-5 Front connector module in the pre-wiring position (example)
Note In this position, the front connector module is still protruding from the I/O module (see figure above). The front connector module and I/O module are not yet electrically connected. The pre-wiring position makes it easy to wire the front connector module. 4. If required, connect the cables for the I/O module supply voltage to the front connector module. 5. Connect the connecting cables to the front connector module.
Figure 4-6 Connecting the supply voltage cables and connecting cables to the front connector module (example)
SIMATIC TOP connect for S7-1500 and ET200MP
28
Manual,
Connecting 4.3 Connecting components
Note Make sure that you follow the correct assignment when connecting the supply voltage cables for the I/O module and connecting cables to the front connector module: -The assignment of supply voltage cables to connecting cable connections -The assignment of connecting cable connections to the address bytes of the module The correct assignment is set out in the diagram and key below.
Number
Connection to Supply voltage + Supply voltage + Supply voltage Supply voltage Supply voltage + Supply voltage + Supply voltage Supply voltage -
Assigned byte a c a c b d b d
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
29
Connecting 4.3 Connecting components
6. With push-in terminal: Insert the wire fitted with end sleeve into the duct. 7. When using a round-sheath ribbon cable:
Twist down each connecting cable by 90° and give it one turn. 8. Insert the strain relief (cable tie) provided for the cabling into the front connector module.
The strain relief holds the cabling (supply voltage cables and connecting cables) in the cable storage space of the I/O module.
See also
Figure 4-7 Fitted strain relief (example) 9. Run the connecting cables and the cables for the I/O module supply voltage down and
out of the I/O module.
Wiring rules (Page 21)
SIMATIC TOP connect for S7-1500 and ET200MP
30
Manual,
Connecting 4.3 Connecting components
4.3.4
Connecting the connecting cable to the terminal module
Introduction
This section details how to wire the terminal modules.
Note Please also follow the instructions in the section Wiring SIMATIC TOP connect to the I/O modules (Page 33). These include the selection criteria for the terminal modules and information on wiring.
Terminal module function The terminal module is the interface between the connection cables from the field and the SIMATIC S7-1500 or ET200MP. The supply voltage cables for the I/O modules can also be connected to the terminal module.
Fitting the terminal module and connecting cable 1. Fasten the terminal module to a 35 mm standard mounting rail (DIN EN 60715). 2. Connect the connecting cable to the terminal module as shown in the figure below.
See also
Figure 4-8 Connecting the connecting cable to the terminal module Wiring SIMATIC TOP connect to the I/O modules (Page 33)
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
31
Connecting 4.4 Labeling terminal modules
4.3.5
Connecting the actuators/sensors to the terminal module
The connecting cables of the actuators/sensors are connected to the terminals of the terminal module. Terminal modules are available with the following types of terminal: Screw-type terminal Push-in system
4.4
Labeling terminal modules
Introduction
The terminal modules are identified using labels. The labels are perforated and are attached to the front flap of the terminal module.
The following types of labels are available:
For terminal modules in S7-1500 design
Preparing and attaching labels 1. Tear out the completed label. 2. Insert the label into the holder on the outside of the front flap.
Figure 4-9 Label holder with labels (example)
SIMATIC TOP connect for S7-1500 and ET200MP
32
Manual,
Wiring SIMATIC TOP connect to the I/O modules
5
Introduction
You can use SIMATIC TOP connect system cabling to wire I/O modules with actuators/sensors. The SIMATIC TOP connect components used depend on the following factors:
The I/O module to be wired and
The connection system (screw-type terminal / push-in system, 1-wire, 3-wire, 2 A connection, relay or optocoupler).
5.1
SIMATIC TOP connect components and selection guide
Components for 16-pin connecting cable
The table below lists the SIMATIC TOP connect system cabling components for a 16-pin connecting cable.
Components of SIMATIC TOP connect system cabling
Front connector modules
...for digital I/O modules
...for 2 A output module
...for analog modules
Voltage supply with - Screw-type terminals - Push-in system
Voltage supply with - Screw-type terminals - Push-in system
6ES7921-5AB20-0AA0 6ES7921-5AH20-0AA0
6ES7921-5AD00-0AA0 6ES7921-5AJ00-0AA0 6ES7921-5AK20-0AA0
Terminal modules TP1
TP2 TP3
TPF
...digital, for 1-wire connection, without LED ...digital, for 1-wire connection, with LED
...digital, for 2-ampere modules, without LED, digital ...digital, for 3-wire connection, without LED ...digital, for 3-wire connection, with LED
...for 3-wire connection, with LED, digital and fuse in the signal path
- Screw-type terminals - Push-in system
- Screw-type terminals - Push-in system
- Screw-type terminals - Push-in system
- Screw-type terminals - Push-in system
- Screw-type terminals - Push-in system
- Screw-type terminals - Push-in terminals
6ES7924-0AA20-0AA0 6ES7924-0AA20-0AC0
6ES7924-0AA20-0BA0 6ES7924-0AA20-0BC0
6ES7924-0BB20-0AA0 6ES7924-0BB20-0AC0
6ES7924-0CA20-0AA0 6ES7924-0CA20-0AC0
6ES7924-0CA20-0BA0 6ES7924-0CA20-0BC0
6ES7924-0CL20-0BA0 6ES7924-0CL20-0BC0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
33
Wiring SIMATIC TOP connect to the I/O modules 5.1 SIMATIC TOP connect components and selection guide
Components of SIMATIC TOP connect system cabling
TPS ...for 3-wire connection with LED, digital and switch in the signal path
TPA ...for analog modules, without LED
TPRi 230 V
TPRi 110 V
TPRo
Digital, with LED Digital, without LED Digital, with LED
TPOo Digital, with LED
- Screw-type terminal - Push-in system
- Screw-type terminals - Push-in system
- Screw-type terminals - Push-in system
- Screw-type terminals - Push-in system
- Screw-type terminals - Push-in system
- Screw-type terminals - Push-in system
6ES7924-0CH20-0BA0 6ES7924-0CH20-0BC0
6ES7924-0CC20-0AA0 6ES7924-0CC20-0AC0
6ES7924-0BE20-0BA0 6ES7924-0BE20-0BC0
6ES7924-0BG20-0BA0 6ES7924-0BG20-0BC0
6ES7924-0BD20-0BA0 6ES7924-0BD20-0BC0
6ES7924-0BF20-0BA0 6ES7924-0BF20-0BC0
Pre-assembled round cable
Round-sheath ribbon cable 1 x 16-pin, 0.14 mm² Round-sheath ribbon cable 2 x 16-pin, 0.14 mm²
Length 0.5 m 1.0 m 1.5 m 2.0 m 2.5 m 3.0 m 4.0 m 5.0 m 6.5 m 8.0 m 10.0 m Length 30 m 60 m 30 m 60 m
Unshielded 6ES7923-0BA50-0CB0 6ES7923-0BB00-0CB0 6ES7923-0BB50-0CB0 6ES7923-0BC00-0CB0 6ES7923-0BC50-0CB0 6ES7923-0BD00-0CB0 6ES7923-0BE00-0CB0 6ES7923-0BF00-0CB0 6ES7923-0BG50-0CB0 6ES7923-0BJ00-0CB0 6ES7923-0CB00-0CB0 Unshielded 6ES7923-0CD00-0AA0 6ES7923-0CG00-0AA0 6ES7923-2CD00-0AA0 6ES7923-2CG00-0AA0
Shielded ...not available 6ES7923-0BB00-0DB0 ...not available 6ES7923-0BC00-0DB0 6ES7923-0BC50-0DB0 6ES7923-0BD00-0DB0 6ES7923-0BE00-0DB0 6ES7923-0BF00-0DB0 6ES7923-0BG50-0DB0 6ES7923-0BJ00-0DB0 6ES7923-0CB00-0DB0 Shielded 6ES7923-0CD00-0BA0 6ES7923-0CG00-0BA0 ...not available ...not available
Accessories
16-pin IDC connectors for the round-sheath ribbon cable (x 8)
Crimping pliers for fitting the 16-pin IDC connectors
20 x 7 mm label, pale turquoise, for fitting to terminal modules (x 340)
6ES7921-3BE10-0AA0 6ES7928-0AA00-0AA0 3RT1900-1SB20
SIMATIC TOP connect for S7-1500 and ET200MP
34
Manual,
Wiring SIMATIC TOP connect to the I/O modules 5.1 SIMATIC TOP connect components and selection guide
Selection guide for 16-pin connecting cable
The tables below list the SIMATIC TOP connect system cabling components which you can use to wire the I/O modules of the automation system.
TP1
TP2 TP3
With With Withou With With
out LED t LED out LED
LED
LED
TPF TPS TPA TPRi 230 V
LED LED With With fuse switch out LED
LED
TPRi 110 V
With LED
TPRo TPOo
With With LED LED
...I/O modules, connectable with...
Front connector module for ...
X X
X
X
X
X
X
X
DI 16 x 24 VDC HF 6ES7521-1BH000AB0
X X
DI 16 x 24 VDC SRC BA 6ES7521-1BH500AB0
X X
X
X
X
X
X
X
DI 32 x 24 VDC HF 6ES7521-1BL000AB0
X X
X
X
X
X
X
X
DQ 16 x 24 VDC/0.5A ST 6ES7522-1BH000AB0
X X
X
X
X
X
X
X
DQ 32 x 24 VDC/0.5A ST 6ES7522-1BL000AB0
Front connector module 6ES7921-5AB20-0AA0 6ES7921-5AH20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
35
Manual,
36
SIMATIC TOP connect for S7-1500 and ET200MP
X
X
X X
Front connector module 6ES7921-5AK20-0AA0
Front connector module 6ES7921-5AD00-0AA0 6ES7921-5AJ00-0AA0
AQ 8 x U/I ST
AQ 4 x U/I ST
AI 8 x U/I HS
AI 8 x U/I/RTD/TC ST DQ 8 x 24 VDC/2A HF
6ES7532-5HF00-0AB0 6ES7532-5HD00-0AB0 6ES7531-7NF10-0AB0 6ES7531-7KF00-0AB0 6ES7522-1BF00-0AB0
X
TPRo TPOo
With With LED LED
TPRi 110 V
With LED
TPF TPS TPA TPRi 230 V
LED LED With With fuse switch out LED
LED
LED
LED
out LED t LED out LED
Front connector module for ...
...I/O modules, connectable with...
With With Withou With With
TP2 TP3
TP1
Wiring SIMATIC TOP connect to the I/O modules 5.1 SIMATIC TOP connect components and selection guide
Wiring SIMATIC TOP connect to the I/O modules 5.1 SIMATIC TOP connect components and selection guide
Components for 50-pin connecting cable
The table below lists the SIMATIC TOP connect system cabling components for a 50-pin connecting cable.
Components of SIMATIC TOP connect system cabling
Front connector modules
...for digital I/O modules
...for analog modules
Voltage supply with - Screw-type terminals - Push-in system
6ES7921-5CB20-0AA0 6ES7921-5CH20-0AA0
6ES7921-5CK20-0AA0
Terminal modules TP1 TP3 TPA
...digital, for 1-wire connection, without - Screw-type terminals
LED
- Push-in system
...digital, for 1-wire connection, with LED
- Screw-type terminals - Push-in system
...digital, for 3-wire connection, without - Screw-type terminals
LED
- Push-in system
...digital, for 3-wire connection, with LED
- Screw-type terminals - Push-in system
...for analog modules, without LED
- Screw-type terminals - Push-in system
6ES7924-2AA20-0AA0 6ES7924-2AA20-0AC0
6ES7924-2AA20-0BA0 6ES7924-2AA20-0BC0
6ES7924-2CA20-0AA0 6ES7924-2CA20-0AC0
6ES7924-2CA20-0BA0 6ES7924-2CA20-0BC0
6ES7924-2CC20-0AA0 6ES7924-2CC20-0AC0
Pre-assembled round cable with IDC connectors
Length 0.5 m 1.0 m 1.5 m 2.0 m 2.5 m 3.0 m 4.0 m 5.0 m 6.5 m 8.0 m 10.0 m
Unshielded 6ES7923-5BA50-0CB0 6ES7923-5BB00-0CB0 6ES7923-5BB50-0CB0 6ES7923-5BC00-0CB0 6ES7923-5BC50-0CB0 6ES7923-5BD00-0CB0 6ES7923-5BE00-0CB0 6ES7923-5BF00-0CB0 6ES7923-5BG50-0CB0 6ES7923-5BJ00-0CB0 6ES7923-5CB00-0CB0
Shielded ...not available 6ES7923-5BB00-0DB0 ...not available 6ES7923-5BC00-0DB0 6ES7923-5BC50-0DB0 6ES7923-5BD00-0DB0 6ES7923-5BE00-0DB0 6ES7923-5BF00-0DB0 6ES7923-5BG50-0DB0 6ES7923-5BJ00-0DB0 6ES7923-5CB00-0DB0
Accessories
20 x 7 mm label, pale turquoise, for fitting to terminal modules (x 340)
3RT1900-1SB20
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
37
Wiring SIMATIC TOP connect to the I/O modules 5.1 SIMATIC TOP connect components and selection guide
Selection guide for 50-pin connecting cable
The tables below list the SIMATIC TOP connect system cabling components which you can use to wire the I/O modules of the automation system.
Front connector module for ... Front connector module 6ES7921-5CB20-0AA0 6ES7921-5CH20-0AA0
Front connector module 6ES7921-5CK20-0AA0
...I/O modules, connectable with...
DI 16 x 24 VDC HF 6ES7521-1BH00-0AB0 DI 16 x 24 VDC SRC BA 6ES7521-1BH50-0AB0
DI 32 x 24 VDC HF 6ES7521-1BL00-0AB0 DQ 16 x 24 VDC/0.5A ST 6ES7522-1BH00-0AB0 DQ 32 x 24 VDC/0.5A ST 6ES7522-1BL00-0AB0 AI 8 x U/I/RTD/TC ST 6ES7531-7KF00-0AB0
AI 8 x U/I HS 6ES7531-7NF10-0AB0
AQ 4 x U/I ST 6ES7532-5HD00-0AB0
AQ 8 x U/I ST 6ES7532-5HF00-0AB0
TP1
Without LED
With LED
X
X
X
X
X
X
X
X
X
TP3
Without LED
With LED
X
X
X
X
X
X
X
X
X
TPA Without LED
X X X X
1-wire or 3-wire connection
With a 1-wire or 3-wire connection, you can connect the supply voltage for the I/O modules either at the front connector module or at the terminal module.
SIMATIC TOP connect for S7-1500 and ET200MP
38
Manual,
Wiring SIMATIC TOP connect to the I/O modules 5.2 Note on connecting digital I/O modules
5.2
Note on connecting digital I/O modules
Introduction
This section contains information on connecting digital I/O modules with SIMATIC TOP connect.
Note The information provided here does not apply to the 2 A output module. For connecting the 2 A output module, please see Note on connecting the 2 A output module (Page 41).
Using potential bridges If you want to supply load groups with the same potential (non-isolated), use the potential bridges provided with the front connector module. This saves you having to wire a terminal point with two wires.
The detailed application can be found in the manual for the I/O module to be wired, described for the front connector. You can find an overview of this documentation under "Documentation guide (Page 9)". The procedure described in the front connector documentation can also be followed for the front connector modules.
The potential bridges can be wired either to the front connector module or to the terminal module.
NOTICE High continuous current damages components.
The current must not exceed the maximum current carrying capacity of 8 A per potential bridge.
Make sure when you wire the potential bridges that no continuous current of over 8 A per potential bridge can occur.
Note
The potential bridges are usually inserted in the front connector module.
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
39
Wiring SIMATIC TOP connect to the I/O modules 5.2 Note on connecting digital I/O modules
Terminal module assignment for 1-wire connection
Front view of terminal module, 1-wire connection
Terminal assignment
Top row, terminals for:
· 2 x M for ground potential · Bit 0; 2; 4; 6
Bottom row, terminals for:
· 2 x L+ for positive potential · Bit 1; 3; 5; 7
Terminal module assignment for 3-wire connection
Front view of terminal module, 3-wire connection
Terminal assignment
Top row, terminals for:
· Bits 0 to 7
Middle row, terminals for:
· M potential (all bridged internally)
Bottom row, terminals for:
· L+ potential (all bridged internally)
See also
Note on connecting the 2 A output module (Page 41) Documentation guide (Page 9)
SIMATIC TOP connect for S7-1500 and ET200MP
40
Manual,
Wiring SIMATIC TOP connect to the I/O modules 5.3 Note on connecting the 2 A output module
5.3
Note on connecting the 2 A output module
Introduction
This section contains information on connecting the 2 A output module (2 amperes) with SIMATIC TOP connect.
Connecting the supply voltage
Note Before starting work, make sure you have read the wiring rules in Wiring rules (Page 21).
The potential supply must be at the front connector module, and a supplementary ground connection to the terminal module is required for this purpose. To create this ground connection, follow these steps. 1. Connect the supply voltage to each of the two potential clamps on the front connector
module using separate cables. 2. In addition to the connecting cable, connect one cable for M1 or M2 to each terminal
module. 3. Connect M1 / M2 with a separate cable to the front connector module and terminal
module. The potential of M1 and M2 can be bridged.
2-ampere front connector module Standard connecting cable between front connector module and terminal module Additional connecting cable for M1 and M2 2 A output module
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
41
Wiring SIMATIC TOP connect to the I/O modules 5.3 Note on connecting the 2 A output module
Terminal module assignment for 2 A connection
Front view of 2 A terminal module
Terminal assignment, left Top row
Terminals 0 to 3 : CH0 to CH3
Terminal assignment, right Top row
Terminals 0 to 3 : CH4 to CH7
Middle row
M1 potential (all "M1" terminal
points bridged internally)
Middle row
M2 potential (all "M2" terminal
points bridged internally)
Bottom row
M1 potential (all "M1" terminal
points bridged internally)
Bottom row
M2 potential (all "M2" terminal
points bridged internally)
See also
Wiring rules (Page 21)
SIMATIC TOP connect for S7-1500 and ET200MP
42
Manual,
Wiring SIMATIC TOP connect to the I/O modules 5.4 Note on connecting analog I/O modules
5.4
Note on connecting analog I/O modules
Up to four analog terminal modules can be connected to the 40 clamping points of an analog I/O module. Two terminal modules can be connected to each side of the I/O module.
The alphabetically labeled clamping points of the analog terminal module are connected to the numbered clamping points of the I/O module as shown in the table below.
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
43
Wiring SIMATIC TOP connect to the I/O modules 5.4 Note on connecting analog I/O modules
Terminal module
A B C D E F G H
Terminal module
A B C D E F G H
Clamping points I/O module, left I/O module, right
1
21
2
22
3
23
4
24
5
25
6
26
7
27
8
28
9
29
10
30
11
31
12
32
13
33
14
34
15
35
16
36
17
37
18
38
19
39
20
40
Terminal module
A B C D E F G H
Terminal module
A B C D E F G H
Notes
Clamping points 17 to 20 and 37 to 40 of the I/O module are also labeled 17 to 20 and 37 to 40 on the analog terminal module.
Clamping points L+; M; +; -; of the analog terminal module are auxiliary terminals and are not connected to the I/O module.
There is an electrical connection between all clamping points with the same designation (labeling) on the analog terminal module (multiplication terminal).
SIMATIC TOP connect for S7-1500 and ET200MP
44
Manual,
Wiring SIMATIC TOP connect to the I/O modules 5.5 Shield connection of the signal cables
5.5
Shield connection of the signal cables
Shield connection options There are two options for grounding the signal cable shield: At the I/O module with the shield connection element of the front connector/front connector module; see S7-1500 function manual, Connections, Front connectors (http://support.automation.siemens.com/WW/view/en/59191792) for the I/O modules. At the terminal module directly with a shield plate; see the description below.
Attaching the shield plate to the terminal module The shield plate is used to connect the shield. 1. Position the shield plate on the back of the terminal module with the gaps in the shield plate fitted over the corresponding parts on the terminal module.
Figure 5-1 Fit the shield plate over the back of the terminal module (example)
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
45
Wiring SIMATIC TOP connect to the I/O modules 5.5 Shield connection of the signal cables
2. Push the shield plate up against the terminal module and up.
Figure 5-2 Position shield plate and push up
3. Check that the latch has fully engaged.
The latch holds the shield plate in the correct position.
Figure 5-3 Shield plate with latch engaged
4. Mount the terminal module with attached shield plate on the standard mounting rail. The shield plate connects the terminal module to the grounded mounting rail.
5. Position the shield of the signal cables with the shield connection terminals on the shield plate.
SIMATIC TOP connect for S7-1500 and ET200MP
46
Manual,
Wiring SIMATIC TOP connect to the I/O modules 5.5 Shield connection of the signal cables
Connecting the connecting cable to the shield at the front connector module The connecting cables have two pre-prepared points for shield connection. These points are protected by a protective sheath (shrink-on sheath) on delivery, which will need to be removed at the required place.
Which shield connection point you need depends on the location of the connection in the front connector module. For connection in the upper position, use the shield connection point
shown in . For connection in the upper position, use the shield connection point shown in .
Figure 5-4 Shield connection in different connection positions
Procedure 1. Uncover the cable sheath by removing the protective sheath (shrink-on sheath) at the
required place. 2. Push the shield clamp over the connecting cable shield. 3. Connect the connecting cable to the front connector module. 4. Push the shield clamp up over the shield clip to connect the cable shield
.
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
47
Technical specifications
6
Introduction
The technical specifications contain:
The standards and test values satisfied by the terminal modules of the SIMATIC TOP connect system cabling.
The technical specifications for the components of the SIMATIC TOP connect system cabling.
Technical specifications of the I/O modules
The technical specifications of the I/O modules are also available in the product manuals for the relevant modules. Please see the overview of documentation on SIMATIC TOP connect system cabling under Documentation guide (Page 9).
If the information in this document differs from that in the product manuals, the product manuals take priority.
See also
Documentation guide (Page 9)
6.1
Standards and approvals
Introduction
This section sets out the standards and test values satisfied by the terminal modules of the SIMATIC TOP connect system cabling.
Note Components of the SIMATIC TOP connect system cabling The valid marks and approvals are printed on the components of the SIMATIC TOP connect system cabling.
Reference
The corresponding certificates for the marks and approvals can be found on the Internet under Service & Support (http://www.siemens.com/automation/service&support).
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
49
Technical specifications 6.1 Standards and approvals
CE marking
The SIMATIC TOP connect cabling system satisfies the requirements and objectives of the following EC directives and satisfies the Harmonized European Standards (EN) for Programmable Logic Controllers which were published in the official journals of the European Community:
2006/95/EC "Electrical Equipment Designed for Use within Certain Voltage Limits" (LowVoltage Directive)
2004/108/EC "Electromagnetic Compatibility" (EMC Directive)
The EC declarations of conformity are held for the competent authorities by: Siemens Aktiengesellschaft Industry Sector I IA AS FA WF AMB Postfach 1963 D-92209 Amberg
These files are also available for download from the Customer Support pages, under "Declaration of Conformity".
cULus approval Underwriters Laboratories Inc., to UL 508 (Industrial Control Equipment) C22.2 No. 142 (Process Control Equipment)
IEC 61131
The SIMATIC TOP connect system cabling meets the requirements and criteria of the IEC 61131-2 standard (Programmable Logic Controllers, Part 2: Equipment Requirements and Tests).
Industrial applications SIMATIC products are designed for industrial applications.
Field of application Industry
Noise emission requirements EN 61000-6-4: 2007
Noise immunity requirements EN 61000-6-2: 2005
SIMATIC TOP connect for S7-1500 and ET200MP
50
Manual,
Technical specifications 6.2 Electromagnetic compatibility
Use in residential areas
Note SIMATIC TOP connect system cabling and the S7-1500 automation system are designed for use in industrial areas; their use in residential areas could interfere with radio and TV reception.
To operate SIMATIC TOP connect system cabling and S7-1500 automation systems in a residential area, the RF emission must comply with Limit Value Class B to EN 55011. Suitable measures for achieving RF interference Limit Class B include, for example: Fitting the cabling system and automation system in grounded control cabinets/control
boxes Use of noise filters in the supply lines
6.2
Electromagnetic compatibility
Definition
Electromagnetic compatibility (EMC) is the capacity of an electrical installation to function satisfactorily in its electromagnetic environment without affecting that environment. SIMATIC TOP connect system cabling also satisfies, among others, the requirements of EMC legislation for the European internal market. A prerequisite is S7-1500 system compliance with specifications and directives for electrical design.
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
51
Technical specifications 6.3 Shipping and storage conditions
6.3
Shipping and storage conditions
Introduction
SIMATIC TOP connect system cabling meets IEC 61131-2 requirements for shipping and storage conditions. The specifications below apply to modules that are shipped or stored in their original packaging.
Shipping and storage conditions for modules
Type of condition Drop test (in transport package) Temperature Air pressure
Relative humidity Sinusoidal vibrations in accordance with IEC 60068-2-6 Shock conforming to IEC 60068-2-27
Permissible range 1 m From -40 °C to +70 °C From 1080 to 660 hPa (corresponds to an altitude of -1000 to 3500 m) 5% to 95%, without condensation 5 to 9 Hz: 3.5 mm 9 to 500 Hz: 9.8 m/s² 250 m/s², 6 ms, 1000 shocks
6.4
Mechanical and climatic ambient conditions
Operating conditions SIMATIC TOP connect system cabling is designed for stationary use in weather-proof locations. The conditions of use meet the requirements of DIN IEC 60721-3-3:
Class 3M3 (mechanical requirements)
Class 3K3 (climatic requirements)
SIMATIC TOP connect for S7-1500 and ET200MP
52
Manual,
Technical specifications 6.4 Mechanical and climatic ambient conditions
Testing mechanical ambient conditions
Testing for... Vibration
Shock Continuous shock
Test standard Vibration test complying with IEC 60068-2-6 (sine)
Shock, tested to IEC 60068-2-27
Shock, tested to IEC 60068-2-27
Remarks
Vibration type: Frequency cycles with a rate of change of 1 octave/minute. 5 Hz f 8.4 Hz, constant amplitude 7 mm
8.4 Hz f 150 Hz, constant acceleration 2 g
Vibration duration: 10 frequency cycles per axis in each of the 3 axes which are perpendicular to each other
Type of shock: Half-sine
Shock intensity: 15 g peak value, 11 ms duration
Direction of shock: 3 shocks each in +/ direction in each of the three perpendicular axes
Type of shock: Half-sine shock intensity: 250 m/s2 peak value, 6 ms duration
Direction of shock: 1000 shocks each in +/ direction in each of the three perpendicular axes
Reduction of vibrations
If your SIMATIC TOP connect system cabling is exposed to severe shocks or vibration, take appropriate measures to reduce the acceleration or amplitude. We recommend fitting the SIMATIC TOP connect cabling system to shock-absorbent material (for example, metal shock absorbers).
Ambient climatic conditions
SIMATIC TOP connect system cabling components may only be used in the ambient climatic conditions specified in the technical specifications.
Please see the following sections.
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
53
Technical specifications 6.5 Technical specifications for front connector modules
6.5
Technical specifications for front connector modules
Table 6- 1 Technical specifications front connector module for digital input and output modules
For digital input and output modules, for 16-pin connecting cable: 6ES7921-5AB20-0AA0 and 6ES7921-5AH20-0AA0
Type of supply voltage
DC
Rated value
24 V
Lower limit of admissible range (DC)
20.4 V
Upper limit of admissible range (DC)
28.8 V
Max. permissible continuous current
Per connector pin
1 A
Max. permissible total current per group
At 40 °C (mounted horizontally)
3 A
At 60 °C (mounted horizontally)
2 A
At 40 °C (mounted vertically)
2 A
Permissible ambient temperature
0 to 60 °C
Table 6- 2 Technical specifications front connector module for digital output modules (2-ampere)
For digital output modules, for 16-pin connecting cable: 6ES7921-5AD00-0AA0 and 6ES7921-5AJ000AA0
Type of supply voltage
DC
Rated value
24 V
Lower limit of admissible range (DC)
20.4 V
Upper limit of admissible range (DC)
28.8 V
Max. permissible continuous current
Per connector pin
1 A
Max. permissible total current per group
At 40 °C (mounted horizontally)
6 A
At 60 °C (mounted horizontally)
3 A
At 25 °C (mounted vertically)
6 A
At 40 °C (mounted vertically)
2.5 A
Permissible ambient temperature
0 to 60 °C
SIMATIC TOP connect for S7-1500 and ET200MP
54
Manual,
Technical specifications 6.5 Technical specifications for front connector modules
Table 6- 3 Technical specifications front connector module for analog input and output modules
For analog input and output modules, for 16-pin connecting cable: 6ES7921-5AK20-0AA0
Type of supply voltage
DC
Rated value
24 V
Lower limit of admissible range (DC)
20.4 V
Upper limit of admissible range (DC)
28.8 V
Max. permissible continuous current
Per connector pin
0.5 A
Permissible ambient temperature
0 to 60 °C
Table 6- 4 Technical specifications front connector module for digital input and output modules
For digital input and output modules, for 50-pin connecting cable: 6ES7921-5CB20-0AA0 and 6ES7921-5CH20-0AA0
Type of supply voltage
DC
Rated value
24 V
Lower limit of admissible range (DC)
20.4 V
Upper limit of admissible range (DC)
28.8 V
Max. permissible continuous current
Per connector pin
1 A
Max. permissible total current per group
At 40 °C (mounted horizontally)
2 A
At 60 °C (mounted horizontally)
2 A
At 40 °C (mounted vertically)
2 A
Permissible ambient temperature
0 to 60 °C
Table 6- 5 Technical specifications front connector module for analog input and output modules
For analog input and output modules, for 50-pin connecting cable: 6ES7921-5CK20-0AA0
Type of supply voltage
DC
Rated value
24 V
Lower limit of admissible range (DC)
20.4 V
Upper limit of admissible range (DC)
28.8 V
Max. permissible continuous current
Per connector pin
0.5 A
Permissible ambient temperature
0 to 60 °C
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
55
Technical specifications 6.6 Technical specifications for connecting cables
6.6
Technical specifications for connecting cables
Table 6- 6 Connecting cables
For 6ES7923 - * connecting cables
Type of supply voltage
DC
Operating voltage
max. 60 V
Max. permissible continuous current
Per signal line
1 A
Permissible total current per group
16-pin
4 A / byte
50-pin
2 A / byte
External diameter of pre-fabricated round cable
Unshielded
16-pin: Approx. 6.5 mm
50-pin: Approx. 10.5 mm
Shielded
16-pin: Approx. 7 mm
50-pin: Approx. 11 mm
External diameter of round-sheath ribbon cable to be assembled
1 x 16-pin, unshielded
Approx. 9.5 mm
1 x 16-pin, shielded
Approx. 10.5 mm
2 x 16-pin, unshielded
Approx. 11.5 mm
Permissible ambient temperature
0 to 60 °C
SIMATIC TOP connect for S7-1500 and ET200MP
56
Manual,
Technical specifications 6.7 Technical specifications for terminal modules
6.7
Technical specifications for terminal modules
Note
The "x" in the article numbers is a placeholder for the terminal module version with push-in or screw-type terminals.
In place of the "x", there is either an "A" for the version with screw-type terminals or a "C" for the version with a push-in system.
Terminal modules for 16-pin connecting cable
Table 6- 7 Technical specifications for terminal modules TP1 and TP3 without LED
Terminal modules TP1 and TP3, 16-pin
1-wire connection without LED 6ES7924-0AA20-0Ax0
3-wire initiators without LED 6ES7924-0CA20-0Ax0
Type of supply voltage
DC
Operating voltage
max. 50 V
Max. permissible continuous current per signal 1 A
Max. permissible total current (power supply)
4 A / byte
Connection to SIMATIC fitted for
16-pin IDC connector with fitted strain relief
Operating temperature
0 to + 60° C
Mounting position
Any
Clearances and creepage distances
IEC 60664-1, IEC61131-2,
CSA C22.2 No 142 UL 508, VDE 0160,
Overvoltage category II, pollution degree 2
Dimensions (W x H x D) in mm
1-wire connection
Approx. 40 x 58 x 50
6ES7924-0AA20-0Ax0
For 3-wire initiators
Approx. 57 x 76 x 60
6ES7924-0CA20-0Ax0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
57
Technical specifications 6.7 Technical specifications for terminal modules
Table 6- 8 Technical specifications for terminal modules TP1 and TP3 with LED
Terminal modules TP1 and TP3, 16-pin
1-wire connection with LED 6ES7924-0AA20-0Bx0
3-wire initiators with LED 6ES7924-0CA20-0Bx0
Type of supply voltage
DC
Operating voltage
max. 24 V
Max. permissible continuous current per signal 1 A
Max. permissible total current (power supply)
4 A / byte
Connection to SIMATIC fitted for
16-pin IDC connector with fitted strain relief
Operating temperature
0 to + 60° C
Mounting position
Any
Clearances and creepage distances
IEC 60664-1, IEC61131-2, CSA C22.2 No 142 UL 508, VDE 0160, overvoltage category II, pollution degree 2
Dimensions (W x H x D) in mm
1-wire connection 6ES7924-0AA20-0Bx0
Approx. 40 x 58 x 50
For 3-wire initiators 6ES7924-0CA20-0Bx0
Approx. 57 x 76 x 60
Table 6- 9 Technical specifications for terminal module TPA
Terminal modules TPA, 16-pin, for analog modules in S7-1500 or ET200MP 6ES7924-0CC20-0Ax0 series
Type of supply voltage
DC
Operating voltage
max. 50 V
Max. permissible continuous current per signal 1 A line
Connection to SIMATIC fitted for
16-pin IDC connector with fitted strain relief
Operating temperature
0 to + 60° C
Mounting position
Any
Clearances and creepage distances
IEC 60664-1, IEC61131-2, CSA C22.2 No 142 UL 508, VDE 0160, overvoltage category II, pollution degree 2
Dimensions (W x H x D) in mm
6ES7924-0CC20-0Ax0
Approx. 57 x 76 x 60
SIMATIC TOP connect for S7-1500 and ET200MP
58
Manual,
Technical specifications 6.7 Technical specifications for terminal modules
Table 6- 10 Technical specifications for terminal module TPF with LED
Terminal modules TPF (use), 3-wire initiators with LED, incl. fuse in the signal path 6ES7924-0CL20-0Bx0
Type of supply voltage
DC
Operating voltage
max. 24 V
Max. permissible continuous current per signal 1 A (limited with 0.6 A microfuse)
Max. permissible total current (power supply)
4 A / byte
Fuse
Factory fittings
5 mm x 20 mm microfuse
0.6 A / 250 V quick-response
General data
Connection to SIMATIC fitted for
16-pin IDC connector with fitted strain relief
Operating temperature
0 to + 60° C
Mounting position
Any
Clearances and creepage distances
IEC 60664-1, IEC61131-2, CSA C22.2 No 142 UL 508, VDE 0160,0 overvoltage category II, pollution degree 2
Dimensions (W x H x D) in mm
For 3-wire initiators with fuse 6ES7924-0CL200Bx0
Approx. 57 x 76 x 60
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
59
Technical specifications 6.7 Technical specifications for terminal modules
Table 6- 11 Technical specifications for terminal module TPS with LED
Terminal modules TPS (witch), 3-wire initiators with LED, incl. switch in the signal path 6ES7924-0CH20-0Bx0
Type of supply voltage
DC
Operating voltage
max. 24 V
Max. permissible continuous current per signal 1 A
Max. permissible total current (power supply)
4 A / byte
Switch
Type
DIP slide switch
Activation during operation
Activation during operation permitted,
Max. switching capacity 10VA,
ON = "top" position, set to "ON"
General data
Connection to SIMATIC fitted for
16-pin IDC connector with fitted strain relief
Operating temperature
0 to + 60° C
Mounting position
Any
Clearances and creepage distances
IEC 60664-1, IEC61131-2,
CSA C22.2 No 142 UL 508, VDE 0160,
Overvoltage category II, pollution degree 2
Dimensions (W x H x D) in mm
For 3-wire initiators with disconnector 6ES7924- Approx. 57 x 76 x 60 0CH20-0Bx0
Table 6- 12 Technical specifications for terminal module TP2 without LED
Terminal modules TP2, 2 A modules without LED 6ES7924-0BB20-0Ax0
Type of supply voltage
DC
Operating voltage
max. 50 V
Max. permissible continuous current per signal 2 A
Connection to SIMATIC fitted for
16-pin IDC connector with fitted strain relief
Operating temperature
0 to + 60° C
Mounting position
Any
Clearances and creepage distances
IEC 60664-1, IEC61131-2,
CSA C22.2 No 142 UL 508, VDE 0160,
Overvoltage category II, pollution degree 2
Dimensions (W x H x D) in mm
For 2 A modules 6ES7924-0BB20-0Ax0
Approx. 57 x 76 x 60
SIMATIC TOP connect for S7-1500 and ET200MP
60
Manual,
Technical specifications 6.7 Technical specifications for terminal modules
Table 6- 13 Technical specifications for terminal module TPRi 230 V
Terminal module TPRi 230 V with relay for inputs 6ES7924-0BE20-0Bx0 Energizing side Operating voltage for coil Input circuit Contact side Number of relay outputs Contact design Switching capacity (resistive load)
Switching frequency Service life Mechanical Electrical
Connection to SIMATIC fitted for Operating temperature Mounting position Clearances and creepage distances
Dimensions (W x H x D) in mm 6ES7924-0BE20-0Bx0
230 V AC / from 207 264 V AC Suppressor diode
8 NO contacts Single contact, 1 NO contact max. 50 mA / 24 V DC max. 50 mA / 48 V DC max. 50 mA / 60 V DC Recommended minimum load 5mA 500 cycles/minute
10 x 106 switching cycles 3 x 106 switching cycles at 230 V AC/50 mA/ cos =1 16-pin IDC connector with fitted strain relief 0 ... +60° C Any IEC 60664-1, IEC61131-2, CSA C22.2 No 142 UL 508, VDE 0160, overvoltage category II, pollution degree 2
Approx. 130 x 76 x 60
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
61
Technical specifications 6.7 Technical specifications for terminal modules
Table 6- 14 Technical specifications for terminal module TPRi 110 V
Terminal module TPRi 110 V with relay for inputs 6ES7924-0BG20-0Bx0 Energizing side Operating voltage for coil Input circuit Contact side Number of relay outputs Contact design Switching capacity (resistive load)
Switching frequency Service life Mechanical Electrical
Connection to SIMATIC fitted for Operating temperate Mounting position Clearances and creepage distances
Dimensions (W x H x D) in mm 6ES7924-0BG20-0Bx0
115 V AC / from 103 132 V AC Suppressor diode
8 NO contacts Single contact, 1 NO contact max. 50 mA / 24 V DC max. 50 mA / 48 V DC max. 50 mA / 60 V DC Recommended minimum load 5mA 500 cycles/minute
10 x 106 switching cycles 3 x 106 switching cycles at 230 V AC/50 mA/ cos =1 16-pin IDC connector with fitted strain relief 0 ... +60° C Any IEC 60664-1, IEC61131-2, CSA C22.2 No 142 UL 508, VDE 0160, overvoltage category II, pollution degree 2
Approx. 130 x 76 x 60
SIMATIC TOP connect for S7-1500 and ET200MP
62
Manual,
Technical specifications 6.7 Technical specifications for terminal modules
Table 6- 15 Technical specifications for terminal module TPRo
Terminal module TPRo with relays for outputs 6ES7924-0BD20-0Bx0 Energizing side Operating voltage for coil Input circuit
Contact side Number of relay outputs Contact design Switching capacity (resistive load)
Switching frequency Service life Mechanical Electrical
Inductive loads
Connection to SIMATIC fitted for Operating temperate Mounting position Clearances and creepage distances
Dimensions (W x H x D) in mm 6ES7924-0BG20-0Bx0
24 V DC 19 - 28.8 V Reverse polarity protection and freewheeling diodes
8 NO contacts Single contact, 1 NO contact max. 4 A / 250 V AC max. 3 A / 30 V DC max. 0.6 A / 48 V DC max. 0.4 A / 60 V DC Recommended minimum load 1 mA 6 cycles/minute
3 x 106 switching cycles 5 x 104 switching cycles at 230 V AC/4 A/ cos = 1, 6 x per minute To protect the relay contacts, inductive loads must be dampened externally with an effective protective circuit. No measures are provided for this in the TPR. 16-pin IDC connector with fitted strain relief 0 ... +60° C Any IEC 60664-1, IEC61131-2, CSA C22.2 No 142 UL 508, VDE 0160, overvoltage category II, pollution degree 2
Approx. 100 x 76 x 60
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
63
Technical specifications 6.7 Technical specifications for terminal modules
Table 6- 16 Technical specifications for terminal module TPOo
Terminal module TPOo optocoupler for outputs 6ES7924-0BF20-0Bx0 Input data for supply voltage Potential connection (L1/M1) Status display "L1" Input data for switching inputs Number of switching inputs
Input voltage "off" Input voltage "on" Input current Status display "on" Output data for supply voltage Operating voltage Vop (L2/M2, L3/M3) Vop with conditional reverse polarity protection
Current consumption Total current Switching outputs Number Short-circuit protection
Output voltage Output current Lamp load Short-circuit response On/Off-delay Switching frequency
"Overload" fault display
Wire break display active Recommended conductor cross-section for cable Group fault messages SF1, SF2 Monitored channels
24 V DC (20.4 ... 28.8 V DC) Green LED
8 channels (channel 0 ... 7) With reverse polarity protection 0 V DC (0 ... 5 V DC) 24 V DC (15 ... 28.8 V DC) min. 5 mA with 20 V DC, per channel Green LED per channel
24 V DC (20 ... 30 V DC), one per group of 4 Up to 30 V DC (Protected against reverse polarity if the ground potential of the output load is directly connected to the 0 V supply of the power supply unit.) Approx. 10 mA at 24 V DC + output currents max. 16 A per group of 4
8 channels (channel 0 ... 7) When Vop < 24 V DC or 20 ... 30 V DC/max. 20 A No continuous short-circuit protection, max. duration approx. 60 min. Typ. Vop 0.5 V (for input "on") Max. 4 A per channel max. 40 W at 24 V per channel Clocked output signal (approx. 2 ... 20 ms) Typ. 100 s / 250 s with resistive load max. 500 Hz with 4 A resistive load (square wave voltage, pulse/pause 1:1) Red LED per channel, in the event of wire break or short-circuit When output "off" and Rload > 2 MOhm 1.5 mm 2
SF1: Channels 0 ... 3, SF2: Channels 4 ... 7
SIMATIC TOP connect for S7-1500 and ET200MP
64
Manual,
Technical specifications 6.7 Technical specifications for terminal modules
Terminal module TPOo optocoupler for outputs 6ES7924-0BF20-0Bx0 Voltage VSF1, VSF2 No error at the switching output Wire break at the switching output Short-circuit at the switching output Current ISF1, ISF2 General data Connection to SIMATIC fitted for Degree of protection Operating temperature Mounting position Connecting terminals Stripped length Conductor cross-section Finely stranded without end sleeve With end sleeve for screw-type terminals With end sleeve, push-in system Screwdriver Tightening torque of screw-type terminals Weight Screw model Push-in model Clearances and creepage distances
Dimensions (W x H x D) in mm 6ES7924-0BF20-0Bx0
Typ. Vop 2 V Approx. 0 V 0 V to Vop, clocked min. 4 mA/max. 200 mA
16-pin IDC connector with fitted strain relief IP20 0 ... 60 °C Any, except overhead Screw-type terminal or push-in system 9 mm
0.5 ... 2.5 mm2 0.5 ... 2.5 mm2 in accordance with DIN 46222-1 0.2 ... 2.5 mm2 According to DIN 5264 B 0.6 x 3.5 mm 0.4 ... 0.7 Nm
0.29 kg 0.25 kg IEC 60664-1, IEC61131-2, CSA C22.2 No 142 UL 508, VDE 0160, overvoltage category II, pollution degree 2
Approx. 130 x 76 x 60
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
65
Technical specifications 6.7 Technical specifications for terminal modules
Terminal modules for 50-pin connecting cable
Table 6- 17 Technical specifications for terminal modules TP1 and TP3 without LED
Terminal modules TP1 and TP3, 50-pin
1-wire connection without LED 6ES7924-2AA20-0Ax0
3-wire initiators without LED 6ES7924-2CA20-0Ax0
Type of supply voltage
DC
Operating voltage
max. 50 V
Max. permissible continuous current per signal 1 A
Max. permissible total current (power supply)
2 A / byte
Connection to SIMATIC fitted for
50-pin IDC connector with fitted strain relief
Operating temperature
0 to + 60° C
Mounting position
Any
Clearances and creepage distances
IEC 60664-1, IEC61131-2,
CSA C22.2 No 142 UL 508, VDE 0160,
Overvoltage category II, pollution degree 2
Dimensions (W x H x D) in mm
1-wire connection 6ES7924-2AA20-0Ax0
Approx. 100 x 76 x 60
For 3-wire initiators 6ES7924-2CA20-0Ax0
Approx. 175 x 76 x 60
Table 6- 18 Technical specifications for terminal modules TP1 and TP3 with LED
Terminal modules TP1 and TP3, 50-pin
1-wire connection with LED 6ES7924-2AA20-0Bx0
3-wire initiators with LED 6ES7924-2CA20-0Bx0
Type of supply voltage
DC
Operating voltage
max. 24 V
Max. permissible continuous current per signal 1 A
Max. permissible total current (power supply)
2 A / byte
Connection to SIMATIC fitted for
50-pin IDC connector with fitted strain relief
Operating temperature
0 to + 60° C
Mounting position
Any
Clearances and creepage distances
IEC 60664-1, IEC61131-2, CSA C22.2 No 142 UL 508, VDE 0160, overvoltage category II, pollution degree 2
Dimensions (W x H x D) in mm
1-wire connection 6ES7924-2AA20-0Bx0
Approx. 100 x 76 x 60
For 3-wire initiators 6ES7924-2CA20-0Bx0
Approx. 175 x 76 x 60
SIMATIC TOP connect for S7-1500 and ET200MP
66
Manual,
Technical specifications 6.7 Technical specifications for terminal modules
Table 6- 19 Technical specifications for terminal module TPA
Terminal modules TPA, 50-pin, for analog modules in S7-1500 or ET200MP 6ES7924-2CC20-0Ax0 series
Type of supply voltage
DC
Operating voltage
max. 50 V
Max. permissible continuous current per signal 1 A line
Connection to SIMATIC fitted for
50-pin IDC connector with fitted strain relief
Operating temperature
0 to + 60° C
Mounting position
Any
Clearances and creepage distances
IEC 60664-1, IEC61131-2, CSA C22.2 No 142 UL 508, VDE 0160, overvoltage category II, pollution degree 2
Dimensions (W x H x D) in mm
For analog modules 6ES7924-2CC20-0Ax0
Approx. 130 x 76 x 60
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
67
Environment
7
The device conforms to the RoHS Directive. No materials used release silicone.
Disposal provisions
The packaging and packing products are recyclable and should be recycled. The product itself must not be disposed of in the household waste.
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
69
Dimension drawings
A.1
Views
Front connector modules
All views in the dimension drawings below are numbered. The following applies:
Number
View Front view View from left
Note All dimensions in millimeters (mm).
A
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
71
Dimension drawings A.1 Front connector modules Front connector module 6ES7921-5AB20-0AA0
8-bit, for digital modules
Figure A-1 6ES79215AB20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
72
Manual,
Front connector module 6ES7921-5AH20-0AA0 8-bit, for digital modules
Dimension drawings A.1 Front connector modules
Figure A-2 6ES7921-5AH20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
73
Dimension drawings A.1 Front connector modules Front connector module 6ES7921-5AK20-0AA0
8-bit, for analog modules
Figure A-3 6ES7921-5AK20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
74
Manual,
Front connector module 6ES7921-5AD00-0AA0 8-bit, for 2 A modules
Dimension drawings A.1 Front connector modules
Figure A-4 6ES7921-5AD00-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
75
Dimension drawings A.1 Front connector modules Front connector module 6ES7921-5AJ00-0AA0
8-bit, for 2 A modules
Figure A-5 6ES7921-5AJ00-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
76
Manual,
Front connector module 6ES7921-5CB20-0AA0 32-bit, for digital modules
Dimension drawings A.1 Front connector modules
Figure A-6 6ES7921-5CB20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
77
Dimension drawings A.1 Front connector modules Front connector module 6ES7921-5CH20-0AA0
32-bit, for digital modules
Figure A-7 6ES7921-5CH20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
78
Manual,
Front connector module 6ES7921-5CK20-0AA0 32-bit, for analog modules
Dimension drawings A.1 Front connector modules
Figure A-8 6ES7921-5CK20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
79
Dimension drawings A.2 Terminal modules for 16-pin connecting cable
A.2
Terminal modules for 16-pin connecting cable
Views
All views in the dimension drawings below are numbered. The following applies:
Number
View Front view Front view with front flap closed Left view with front flap closed
Note All dimensions in millimeters (mm).
Note
The dimensions for terminal modules with screw-type terminals are the same as for those with the push-in system.
SIMATIC TOP connect for S7-1500 and ET200MP
80
Manual,
Terminal module 6ES7924-0AA20-0AA0 TP1 without LED
Dimension drawings A.2 Terminal modules for 16-pin connecting cable
Figure A-9 6ES7924-0AA20-0AA0
Terminal module 6ES7924-0AA20-0BA0 TP1 with LED
Figure A-10 6ES7924-0AA20-0BA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
81
Dimension drawings A.2 Terminal modules for 16-pin connecting cable
Terminal module 6ES7924-0BB20-0AA0 TP2 without LED
Figure A-11 6ES7924-0BB20-0AA0
Terminal module 6ES7924-0CA20-0AA0 TP3 without LED
Figure A-12 6ES7924-0CA20-0AA0 82
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
Terminal module 6ES7924-0CA20-0BA0 TP3 with LED
Dimension drawings A.2 Terminal modules for 16-pin connecting cable
Figure A-13 6ES7924-0CA20-0BA0
Terminal module 6ES7924-0CC20-0AA0 TPA without LED
Figure A-14 6ES7924-0CC20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
83
Dimension drawings A.2 Terminal modules for 16-pin connecting cable Terminal module 6ES7924-0BE20-0BA0
TPRi 230 V with LED
Figure A-15 6ES7924-0BE20-0BA0
Terminal module 6ES7924-0BG20-0BA0 TPRi 110 V with LED
Figure A-16 6ES7924-0BG20-0BA0
SIMATIC TOP connect for S7-1500 and ET200MP
84
Manual,
Terminal module 6ES7924-0BD20-0BA0 TPRo with LED
Dimension drawings A.2 Terminal modules for 16-pin connecting cable
Figure A-17 6ES7924-0BD20-0BA0
Terminal module 6ES7924-0BF20-0BA0 TPOo with LED
Figure A-18 6ES7924-0BF20-0BA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
85
Dimension drawings A.3 Terminal modules for 50-pin connecting cable
A.3
Terminal modules for 50-pin connecting cable
All views in the dimension drawings below are numbered. The following applies:
Number
View Front view Front view with front flap closed Left view with front flap closed
Note All dimensions in millimeters (mm).
Note
The dimensions for terminal modules with screw-type terminals are the same as for those with the push-in system.
Terminal module 6ES7924-2AA20-0AA0 TP1 without LED
Figure A-19 6ES7924-2AA20-0AA0 86
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
Terminal module 6ES7924-2AA20-0BA0 TP1 with LED
Dimension drawings A.3 Terminal modules for 50-pin connecting cable
Figure A-20 6ES7924-2AA20-0BA0
Terminal module 6ES7924-2CA20-0AA0 TP3 without LED
Figure A-21 6ES7924-2CA20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
87
Dimension drawings A.3 Terminal modules for 50-pin connecting cable
Terminal module 6ES7924-2CA20-0BA0 TP3 with LED
Figure A-22 6ES7924-2CA20-0BA0
Terminal module 6ES7924-2CC20-0AA0 TPA without LED
Figure A-23 6ES7924-2CC20-0AA0 88
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
Circuit diagrams
B.1
Circuit diagrams for front connector modules
Front connector modules 6ES7921-5AB20-0AA0 and 6ES7921-5AH20-0AA0 For digital I/O modules Front connector module with potential supply
Connecting terminals in Screw-type system: 6ES7921-5AB20-0AA0 Push-in system: 6ES7921-5AH20-0AA0
B
Figure B-1 6ES7921-5AB20-0AA0 and 6ES7921-5AH20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
89
Circuit diagrams B.1 Circuit diagrams for front connector modules Front connector module 6ES7921-5AD00-0AA0 and 6ES7921-5AJ00-0AA0
For 2-ampere digital output modules Front connector module with potential supply Connecting terminals in Screw-type system: 6ES7921-5AD00-0AA0 Push-in system: 6ES7921-5AJ00-0AA0
Figure B-2 6ES7921-5AD00-0AA0 and 6ES7921-5AJ00-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
90
Manual,
Circuit diagrams B.1 Circuit diagrams for front connector modules Front connector module 6ES7921-5AK20-0AA0 For analog I/O modules Front connector module for connecting 4 x 16-pin connecting cables Article number 6ES7921-5AK20-0AA0
Figure B-3 6ES7921-5AK20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
91
Circuit diagrams B.1 Circuit diagrams for front connector modules Front connector modules 6ES7921-5CB20-0AA0 and 6ES7921-5CH20-0AA0
For digital I/O modules Front connector module with potential supply Connecting terminals in Screw-type system: 6ES7921-5CB20-0AA0 Push-in system: 6ES7921-5CH20-0AA0
Figure B-4 6ES7921-5CB20-0AA0 and 6ES7921-5CH20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
92
Manual,
Circuit diagrams B.1 Circuit diagrams for front connector modules Front connector module 6ES7921-5CK20-0AA0 For analog I/O modules Front connector module for connecting 50-pin connecting cable Article number 6ES7921-5CK20-0AA0
Figure B-5 6ES7921-5CK20-0AA0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
93
Circuit diagrams B.2 Circuit diagrams, terminal modules for 16-pin connecting cable
B.2
Circuit diagrams, terminal modules for 16-pin connecting cable
Terminal module 6ES7924-0AA20-0Ax0 Terminal module TP1 For S7-300 / ET200M / S7-1500 / ET200MP, for 8 I/O (16-pin connecting cables)
Connecting terminals in Screw-type system: 6ES7924-0AA20-0AA0 Push-in system: 6ES7924-0AA20-0AC0
Figure B-6 6ES7924-0AA20-0Ax0
SIMATIC TOP connect for S7-1500 and ET200MP
94
Manual,
Circuit diagrams B.2 Circuit diagrams, terminal modules for 16-pin connecting cable
Terminal module 6ES7924-0AA20-0Bx0 Terminal module Tp1 with LED For S7-300 / ET200M / S7-1500 / ET200MP, for 8 I/O (16-pin connecting cables)
Connecting terminals in Screw-type system: 6ES7924-0AA20-0BA0 Push-in system: 6ES7924-0AA20-0BC0
Figure B-7 6ES7924-0AA20-0Bx0
Terminal module 6ES7924-0BB20-0Ax0 Terminal module TP2 For S7-300 / ET200M / S7-1500 / ET200MP, for 8-ampere output module Connecting terminals in Screw-type system 6ES7924-0BB20-0AA0 Push-in system 6ES7924-0BB20-0AC0
Figure B-8 6ES7924-0BB20-0Ax0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
95
Circuit diagrams B.2 Circuit diagrams, terminal modules for 16-pin connecting cable Terminal module 6ES7924-0BD20-0Ax0
Terminal module TPRo For S7-300 / ET200M / S7-1500 / ET200MP Connecting terminals in Screw-type system: 6ES7924-0BD20-0AA0 Push-in system: 6ES7924-0BD20-0AC0
Figure B-9 6ES7924-0BD20-0Ax0
SIMATIC TOP connect for S7-1500 and ET200MP
96
Manual,
Circuit diagrams B.2 Circuit diagrams, terminal modules for 16-pin connecting cable Terminal module 6ES7924-0BE20-0Ax0 Terminal module TPRi 230 V For S7-300 / ET200M / S7-1500 / ET200MP Connecting terminals in Screw-type system: 6ES7924-0BE20-0AA0 Push-in system: 6ES7924-0BE20-0AC0
Figure B-10 6ES7924-0BE20-0Ax0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
97
Circuit diagrams B.2 Circuit diagrams, terminal modules for 16-pin connecting cable
Terminal module 6ES7924-0BF20-0Ax0 Terminal module TPOo For S7-300 / ET200M / S7-1500 / ET200MP
Connecting terminals in Screw-type system: 6ES7924-0BF20-0AA0 Push-in system: 6ES7924-0BF20-0AC0
Figure B-11 6ES7924-0BF20-0Ax0
SIMATIC TOP connect for S7-1500 and ET200MP
98
Manual,
Circuit diagrams B.2 Circuit diagrams, terminal modules for 16-pin connecting cable Terminal module 6ES7924-0BG20-0Ax0 Terminal module TPRi 110 V For S7-300 / ET200M / S7-1500 / ET200MP Connecting terminals in Screw-type system: 6ES7924-0BG20-0AA0 Push-in system:6ES7924-0BG20-0AC0
Figure B-12 6ES7924-0BG20-0Ax0
SIMATIC TOP connect for S7-1500 and ET200MP
Manual,
99
Circuit diagrams B.2 Circuit diagrams, terminal modules for 16-pin connecting cable Terminal module 6ES7924-0CA20-0Ax0
Terminal module TP3 without LED For S7-300 / ET200M / S7-1500 / ET200MP, for 8 I/O (16-pin connecting cables) Connecting terminals in Screw-type system: 6ES7924-0CA20-0AA0 Push-in system: 6ES7924-0CA20-0AC0
Figure B-13 6ES7924-0CA20-0Ax0
100
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
Circuit diagrams B.2 Circuit diagrams, terminal modules for 16-pin connecting cable Terminal module 6ES7924-0CA20-0Bx0 Terminal module TP3 with LED For S7-300 / ET200M / S7-1500 / ET200MP, for 8 I/O (16-pin connecting cables) Connecting terminals in Screw-type system:6ES7924-0CA20-0BA0 Push-in system: 6ES7924-0CA20-0BC0
Figure B-14 6ES7924-0CA20-0Bx0
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
101
Circuit diagrams B.2 Circuit diagrams, terminal modules for 16-pin connecting cable Terminal module 6ES7924-0CC20-0Ax0
Terminal module TPA (S7-1500) For S7-1500 / ET200MP Connecting terminals in Screw-type system: 6ES7924-0CC20-0AA0 Push-in system: 6ES7924-0CC20-0AC0
Figure B-15 6ES7924-0CC20-0Ax0
102
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
Circuit diagrams B.2 Circuit diagrams, terminal modules for 16-pin connecting cable Terminal module 6ES7924-0CH20-0Bx0 Terminal module TPS, with LED switch For S7-300 / ET200M / S7-1500 / ET200MP, for 8 I/O (16-pin connecting cables) Connecting terminals in Screw-type system: 6ES7924-0CH20-0BA0 Push-in system: 6ES7924-0CH20-0BC0
Figure B-16 6ES7924-0CH20-0Bx0
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
103
Circuit diagrams B.2 Circuit diagrams, terminal modules for 16-pin connecting cable Terminal module 6ES7924-0CL20-0Bx0
Terminal module TPF with LED fuse For S7-300 / ET200M / S7-1500 / ET200MP, for 8 I/O (16-pin connecting cables) Connecting terminals in Screw-type system: 6ES7924-0CL20-0BA0 Push-in system: 6ES7924-0CL20-0BC0
Figure B-17 6ES7924-0CL20-0Bx0
104
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
Circuit diagrams B.3 Circuit diagrams, terminal modules for 50-pin connecting cable
B.3
Circuit diagrams, terminal modules for 50-pin connecting cable
Note
All terminal modules for 50-pin connecting cables are for use with S7-1500 and ET200MP only.
Terminal module 6ES7924-2AA20-0Ax0 Terminal module TP1 without LED For S7-1500 / ET200MP 32 I/O (50-pin connecting cables)
Connecting terminals in Screw-type system: 6ES7924-2AA20-0AA0 Push-in system: 6ES7924-2AA20-0AC0
Figure B-18 6ES7924-2AA20-0Ax0
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
105
Circuit diagrams B.3 Circuit diagrams, terminal modules for 50-pin connecting cable
Terminal module 6ES7924-2AA20-0Bx0 Terminal module TP1 with LED For S7-1500 / ET200MP 32 I/O (50-pin connecting cables)
Connecting terminals in Screw-type system: 6ES7924-2AA20-0BA0 Push-in system: 6ES7924-2AA20-0BC0
Figure B-19 6ES7924-2AA20-0Bx0
106
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
Circuit diagrams B.3 Circuit diagrams, terminal modules for 50-pin connecting cable
Terminal module 6ES7924-2CA20-0Ax0 Terminal module TP3 For S7-1500 / ET200MP 32 I/O (50-pin connecting cables)
Connecting terminals in Screw-type system: 6ES7924-2CA20-0AA0 Push-in system: 6ES7924-2CA20-0AC0
Figure B-20 6ES7924-2CA20-0Ax0
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
107
Circuit diagrams B.3 Circuit diagrams, terminal modules for 50-pin connecting cable
Terminal module 6ES7924-2CA20-0Bx0 Terminal module TP3 with LED For S7-1500 / ET200MP 32 I/O (50-pin connecting cables)
Connecting terminals in Screw-type system: 6ES7924-2CA20-0BA0 Push-in system: 6ES7924-2CA20-0BC0
Figure B-21 6ES7924-2CA20-0Bx0
108
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
Circuit diagrams B.3 Circuit diagrams, terminal modules for 50-pin connecting cable Terminal module 6ES7924-2CC20-0Ax0 Terminal module TPA for S7-1500 / ET200MP analog modules Connecting terminals in Screw-type system: 6ES7924-2CC20-0AA0 Push-in system: 6ES7924-2CC20-0AC0
Figure B-22 6ES7924-2CC20-0Ax0
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
109
Spare parts / Accessories
C
C.1
Accessories
Accessories for SIMATIC TOP connect system cabling
Designation Labels for fitting to terminal modules in the S7-1500 design, pack of 340, plug-in IDC connector (insulation displacement connector), set of 8 with 8 strain reliefs Pliers for IDC connectors (insulation displacement connectors) for assembling the round-sheath ribbon cable Shield plate TPA for 8 bits, set of 4 Shield plate TPA for 32 bits, set of 4 Shield connection clamps for shield plate SIMATIC end, set of 10 Shield connection clamps for shield plate field end 2x 2...6 mm, set of 2 Shield connection clamps for shield plate field end 3...8 mm, set of 2 Shield connection clamps for shield plate field end 4...13 mm, set of 2 Relay for TPRo 24 V DC, set of 4 Relay for TPRi 230 V AC, set of 4 Relay for TPRo 230 V AC, set of 4 Relay for TPRo 60 V DC, set of 4 Relay for TPRi 110 V AC, set of 4 0.6 A fuses, set of 10 Enclosure cover for terminal module TP1 8-bit, set of 4 Enclosure cover for terminal module TP2 / TP3 / TPA 8-bit, set of 4 Enclosure cover for terminal module TP3 32-bit, set of 4 Enclosure cover for terminal module TPS / TPRo 8-bit and TP1 32-bit, set of 4 Enclosure cover for terminal module TPF / TPRi / TPOo 8-bit and TPA 32-bit, set of 4 Round-sheath ribbon cable with 16 wires, 30 m long, unshielded Round-sheath ribbon cable with 16 wires, 30 m long, shielded Round-sheath ribbon cable with 16 wires, 60 m long, unshielded Round-sheath ribbon cable with 16 wires, 60 m long, shielded Round-sheath ribbon cable with 2 x 16 wires, 30 m long, unshielded Round-sheath ribbon cable with 2 x 16 wires, 60 m long, unshielded
Order number 3RT1900-1SB20 6ES7921-3BE10-0AA0 6ES7928-0AA00-0AA0
6ES7928-1AA20-4AA0 6ES7928-1BA20-4AA0 6ES7590-5BA00-0AA0 6ES7390-5AB00-0AA0 6ES7390-5BA00-0AA0 6ES7390-5CA00-0AA0 6ES7928-3AA20-4AA0 6ES7928-3BA20-4AA0 6ES7928-3CA20-4AA0 6ES7928-3DA20-4AA0 6ES7928-3EA20-4AA0 6ES7928-6AA20-0AA0 6ES7928-5AA20-4AA0 6ES7928-5BA20-4AA0 6ES7928-5CA20-4AA0 6ES7928-5DA20-4AA0 6ES7928-5EA20-4AA0 6ES7923-0CD00-0AA0 6ES7923-0CD00-0BA0 6ES7923-0CG00-0AA0 6ES7923-0CG00-0BA0 6ES7923-2CD00-0AA0 6ES7923-2CG00-0AA0
Online catalog and ordering system
The online catalog and the online ordering system can be found on the Industry Mall homepage:
Industry Mall (http://www.siemens.com/industrymall).
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
111
Service and Support
D
Online support
The comprehensive online information platform on all aspects of our Service & Support is available at any time and from any location in the world.
You will find the online support on the Internet at:
Service & Support (http://www.siemens.com/automation/service&support).
Technical support You can access technical support for all IA/DT products as follows: Phone: + 49 (0) 911 895 7222 E-mail (mailto:support.automation@siemens.com) Internet: Web form for support request (http://www.siemens.com/automation/supportrequest)
Technical documentation on the Internet
The technical documentation for the various SIMATIC products and systems is available on the Internet (http://www.siemens.com/simatic-tech-doku-portal).
Homepage
You can find news about the SIMATIC TOP connect on the Internet (http://www.automation.siemens.com/mcms/automation/de/automatisierungssysteme/system verkabelung/simatic-top-connect).
Contacts
At your service locally, around the globe: for consulting, sales, training, service, support, spare parts ... for every product supplied by Industry Automation and Drive Technologies.
To find your contact person, please go to our Contacts Database on the Internet (http://www.siemens.com/automation/partner).
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
113
Index
A
Accessories for fully modular connection, 16 Area of application, 11 Attaching the shield plate to the terminal module, 45
I
IDC connector, 16 Crimping pliers for IDC connectors, 16
IEC 61131, 50 Industrial applications, 50
C
Components
L
Connecting cable, 15
Labeling
Flexible connection, 16
Terminal modules, 32
For 16-pin connecting cable, 33
Labeling terminal modules, 32
For 50-pin connecting cable, 37
Labels, 32
Front connector module, 14
Low-Voltage Directive, 50
Terminal module, 15
Components for 16-pin connecting cable
Selection guide for 16-pin connecting cable, 33
M
Components for 50-pin connecting cable Selection guide for 50-pin connecting cable, 37
Marks and approvals, 49
Components for flexible connection, 16
Components for fully modular connection, 14 Connectable I/O modules
O
16-pin connecting cable, 17
Overview of documentation, 10
50-pin connecting cable, 17
Connecting digital I/O modules, 39
Connecting terminal modules, 32
P
Connecting the 2 A output module., 41 Connecting the connecting cable to the front connector module, 27 Crimping pliers for IDC connectors, 16
Pre-wiring position, 28 Protection from electric shock, 20 Protection from external electrical interference, 20
cULus approval, 50
S
E
EC directives, 50 Electromagnetic compatibility, 50 Electromagnetic compatibility, 50 EMC Directive, 50
F
Selection guide 16-pin connecting cable, 35 50-pin connecting cable, 38
Shield connection, 45 Front connector module, 47 Shield plate, 45
Shield plate, 45 Standards, 49
Flexible connection, 13 Fully modular connection, 12 Functions of the front connector module, 26
T
Terminal module function, 31 Test values, 49
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
115
Index
U
Use in residential areas, 51
W
Wiring rules Front connector modules, 21 Terminal modules, 21
Wiring sequence, 23
116
SIMATIC TOP connect for S7-1500 and ET200MP Manual,
Active backplane bus
SIMATIC S7-1500, ET 200MP Active backplane bus
Equipment Manual
Preface
Documentation guide
1
Description
2
Mounting
3
Operation
4
Configure
5
Maintenance and service
6
7 Alarm and system messages
Technical specifications
8
Dimension drawings
9
Spare parts/accessories
10
List of I/O modules
A
03/2020
A5E46240468-AA
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E46240468-AA 02/2020 Subject to change
Copyright © Siemens AG 2020. All rights reserved
Preface
Purpose of the documentation
This documentation provides important information on the active backplane bus for the ET 200MP distributed I/O system.
Basic knowledge required A basic knowledge of automation engineering is required to understand the documentation.
Scope of the documentation This documentation applies to all products from the SIMATIC ET 200MP product family.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7" (TIA Portal).
Recycling and disposal
The products are low in pollutants and can be recycled. For ecologically compatible recycling and disposal of your old device, contact a certificated waste disposal service for electronic scrap.
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
3
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Open Source Software
Open-source software is used in the firmware of the I/O modules. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software.
For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109739516).
Active backplane bus
4
Equipment Manual, 03/2020, A5E46240468-AA
Table of contents
Preface ...................................................................................................................................................... 3
1 Documentation guide ................................................................................................................................. 6
2 Description................................................................................................................................................. 8
2.1
Application area and function ...................................................................................................8
2.2
Properties ................................................................................................................................ 10
3 Mounting.................................................................................................................................................. 12
4 Operation................................................................................................................................................. 16
5 Configure ................................................................................................................................................. 18
5.1
Configure ................................................................................................................................18
5.2
Configuration of the active backplane bus in the TIA Portal...................................................19
6 Maintenance and service ......................................................................................................................... 21
7 Alarm and system messages................................................................................................................... 22
8 Technical specifications ........................................................................................................................... 23
9 Dimension drawings ................................................................................................................................ 25
10 Spare parts/accessories .......................................................................................................................... 26
A List of I/O modules................................................................................................................................... 27
Index........................................................................................................................................................ 29
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
5
Documentation guide
1
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Active backplane bus
6
Equipment Manual, 03/2020, A5E46240468-AA
Documentation guide
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
7
Description
2
2.1
Benefits
Application area and function
The benefits of the active backplane bus are: Reaction-free replacement of a defective module:
Without the CPU reporting a station failure Without disturbing modules in the station Startup with one or more module gaps. You have the option of plugging in additional modules later. Startup with configuration control is possible. You have the possibility to re-configure your plant.
Active backplane bus
8
Equipment Manual, 03/2020, A5E46240468-AA
Application
Description 2.1 Application area and function
The area of application is everywhere where plant downtimes are not desired. The availability of the plant has the highest priority. The areas of application are, for example: Logistics
High-bay storage facilities Baggage conveyors at airports Letter and paper sorting systems in postal logistics Infrastructure Water/waste water Tunnels Continuous processes that must not be interrupted due to the technical process management Semiconductor industry Chemical Pharmaceutical Battery manufacturing Applications in which plant operation must be maintained as long as possible because, for example, a service technician is not immediately available. Offshore installations (oil platforms) Compressors along gas pipelines that maintain the working pressure Other applications Signal boxes in railway engineering Shipbuilding
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
9
Description 2.2 Properties
2.2
Properties
Article number 6ES7590-0BL00-0AA0
View of the active backplane bus
Figure 2-1 Active backplane bus
The active backplane bus is placed in an S7-1500 mounting rail. The mounting rail must be longer than the active backplane bus. There must be enough space for the fixing screws of the mounting rail.
Properties
The active backplane bus can be used with:
Designation
IM 155-5 PN HF Digital input modules DI and F-DI Digital output modules DQ and F-DQ Analog input modules AI Analog output modules AQ System power supply Technology modules Communications modules
Article number
As of hardware functional status
6ES7155-5AA00-0AC0 FS01
See List of I/O modules (Page 27)
as of firmware version V4.4
The active backplane bus supports:
Identification data I&M 0 to 3
Firmware update
Prioritized startup
Active backplane bus
10
Equipment Manual, 03/2020, A5E46240468-AA
Description 2.2 Properties
The following restriction applies for operating with an active backplane bus
Pulling and plugging during operation (hotswap) cannot be performed in isochronous mode.
If any I/O module is plugged or unplugged in a station configured for isochronous mode, the connection to the controller is re-established and the I/O modules are temporarily inaccessible.
Maximum configuration
The active backplane bus can be equipped with a maximum of 12 modules in addition to the interface module.
Accessories
You order the following accessories separately: Slot protection Mounting rail See also Spare parts/accessories (Page 26)
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
11
Mounting
3
Mounting the mounting rail
Note No screws behind the active backplane bus Note that behind the active backplane bus, no screws are available for mounting the mounting rail. Otherwise, the active backplane bus cannot be mounted.
System power supply With active backplane bus, a system power supply supplies power to the entire station. Which means also to the I/O modules plugged in to the left of the bus. You can plug the system power supply into any slot to the right of the IM.
Note System power supply You must not plug any system power supply to the left of the interface module.
Active backplane bus
12
Equipment Manual, 03/2020, A5E46240468-AA
Mounting
Place the active backplane bus in the mounting rail and mount the modules Below we will show you how to mount the active backplane bus. 1. Tilt the active backplane bus forward and insert it diagonally into the mounting rail. 2. Push the active backplane bus backwards.
Figure 3-1 Insert the active backplane bus into the mounting rail
3. Hook the interface module on the rail. You may only plug in one interface module. The interface module must be plugged into the first slot.
4. Swivel the interface module downwards so that the contacts are connected to the active backplane bus.
5. Align the active backplane bus with the interface module. 6. Tighten the screws for the interface module (tightening torque 1.5 Nm).
Figure 3-2 Mounting the interface module on the active backplane bus
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
13
Mounting
7. Install the I/O module on the mounting rail. Align a 25 mm or 35 mm wide I/O module with the arrows. A 70 mm wide I/O module covers 2 slots.
8. Swing the I/O module downwards so that the contacts are connected to the active backplane bus.
9. Tighten the screw for the I/O module (tightening torque 1.5 Nm). 10.Repeat the process for all I/O modules that you want to mount.
Figure 3-3 Mounting the I/O module on the active backplane bus
11.If you have empty slots on the active backplane bus, then you must provide these slots with a slot protection (see Operation (Page 16)).
12.A "BACKPLANE" sticker is enclosed for the active backplane bus. Use this sticker to identify the interface module. So you can see even with a fully equipped active backplane bus that the I/O modules can be pulled without any reaction.
Active backplane bus
14
Equipment Manual, 03/2020, A5E46240468-AA
Mounting
Slots of I/O modules Note Slots The empty slots need to be provided with a slot protection. The slot protection is used to secure mechanically and to protect the contacts.
Slot protection
Figure 3-4 Active backplane bus equipped with modules and slot protection
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
15
Operation
4
With the active backplane bus, you can remove and insert Plugging and unplugging I/O modules without reaction on the station or the CPU goes
into STOP, Plugging I/O modules into slots previously left free without the CPU going into STOP.
Pulling and plugging interface modules The interface module cannot be pulled and plugged reaction-free. The interface module must not be pulled or plugged under load.
Removing and inserting I/O modules I/O modules can be pulled and inserted reaction-free. 1. The front connector of the I/O modules may only be disconnected and plugged when deenergized. 2. For the I/O modules, pull the front connector out of the I/O module using the unlocking strap. Swivel the front connector downward and remove it from the groves. 3. Then you may pull the I/O module. 4. When plugging in, proceed in reverse order (see also S7-1500 Automation System system manual (https://support.industry.siemens.com/cs/ww/en/view/59191792)).
Pulling and plugging power supply module A power supply module cannot be pulled and plugged without reaction. A power supply module can only be pulled and plugged when de-energized.
Use in explosive area Zone 2
WARNING Pulling or plugging a module is prohibited in a potentially explosive atmosphere. If you pull or plug a module or connector during operation, there is a risk of sparking. Sparks can cause an explosion in the hazardous area. Death or serious bodily injury as well as damage to property can be the result. Do not pull or plug the module or the connectors until one of the following two conditions is met: The area is no longer hazardous or the device and its plug connectors are deenergized.
See product information Deployment of the modules in zone 2 hazardous atmospheres (https://support.industry.siemens.com/cs/ww/de/view/19692172).
Active backplane bus
16
Equipment Manual, 03/2020, A5E46240468-AA
Slots of I/O modules They have an installation with empty slots. You can plug in additional I/O modules during operation.
Operation
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
17
Configure
5
5.1
Configure
Configure
You configure the IM 155-5 PN HF with STEP 7 or the configuration software of another manufacturer.
Configuration software STEP 7 (TIA Portal) TIA Portal V16 with HSP0318 "Insert" the IM on slot 1. Insert the I/O modules on slots 2 to 13.
GSD file GSDML V2.34 "Insert" the active backplane bus on slot 0.
Note GSD file
When configuring using the GSD file, more than 12 I/O modules can theoretically be configured. However physically a maximum of 12 I/O modules are pluggable. If you nevertheless configure more than 12 I/O modules, the IM 155-5 PN HF reports the message "Module cannot be reached".
Note GSD file and 70 mm wide system power supply
If you are plugging a 70 mm wide system power supply, note that this system power supply physically occupies 2 slots. When configuring using the GSD file, you must then leave an empty slot after the system power supply in the configuration. Otherwise, the IM 155-5 PN HF reports the setpoint/actual difference as a "Configuration error".
Active backplane bus
18
Equipment Manual, 03/2020, A5E46240468-AA
Configure 5.2 Configuration of the active backplane bus in the TIA Portal
5.2
Configuration of the active backplane bus in the TIA Portal
The representation of a station in the graphics area of the device view consists of 2 main areas:
Rack area Module area (slots)
Replacing a rack To replace the U-connector rack for an active backplane bus, you can use the "Change device" function. Switch to the device view. Then there are 2 options for starting the "Change device" function: Via the shortcut menu Right-click in the rack area (1) or on the name of the rack (in the figure above e.g. "Rail_0"). Select "Change device" from the shortcut menu. A dialog window opens. Select another rack and click "OK". The replacement of the rack starts.
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
19
Configure 5.2 Configuration of the active backplane bus in the TIA Portal
Via drag-and-drop The hardware catalog is open. Select the "Rack" folder and navigate through the subfolders to the desired rack. Select the desired rack. Drag the rack into the rack area (1) and place it there.
Rack area
Module area (slots)
Note
Contrary to plugging modules, the replacement of a rack cannot be started by doubleclicking on the catalog entry. The reason for this is that a double-click only works if there is slot free and permitted available. However, only one permissible area is available for a rack, which is always automatically occupied by the standard rack type when a device is plugged in the network view.
With ET 200MP, a representative module is automatically created in slot 0 when replacing into the active backplane rack. This module reflects the diagnostics and parameters of the active backplane bus according to the characteristics of the selected rack.
Additional information You can find more information in the STEP 7.
Active backplane bus
20
Equipment Manual, 03/2020, A5E46240468-AA
Maintenance and service
6
Cycle for pulling and plugging
The active backplane bus serves to increase the system availability. It is designed for occasional pulling and plugging of I/O modules for expansion or in case of faults.
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
21
Alarm and system messages
7
Pull/plug interrupt Each pulling and plugging action of a configured module results in a pull/plug interrupt. OB 83 is started when a configured module is pulled in RUN mode. If OB 83 is not programmed, the CPU switches to STOP. When plugging a module into a configured slot in the RUN state, OB 83 is started and the parameter assignment is made if the module matches. You can find additional information in the STEP 7 online help.
Firmware update The firmware update is possible: Firmware update of the IM 155-5 PN HF or the active backplane bus leads to a restart of the station. Pull/plug interrupts of the plugged modules can be reported during a firmware update of the active backplane bus. Firmware update of a I/O module leads to a restart of this I/O module only. Other I/O modules are not affected. Firmware update of a I/O module in isochronous mode results in a restart of the station.
Active backplane bus
22
Equipment Manual, 03/2020, A5E46240468-AA
Technical specifications
8
Technical specifications of the active backplane bus
The following table shows the technical specifications as of 03/2020. You can find a data sheet including daily updated technical specifications on the Internet (https://support.industry.siemens.com/cs/de/en/pv/6ES7590-0BL00-0AA0/td?dl=en).
Article number General information
Product type designation HW functional status Firmware version · FW update possible Product function · I&M data
· Isochronous mode
· Prioritized startup Engineering with
· STEP 7 TIA Portal configurable/integrated as of version
· STEP 7 configurable/integrated as of version
· PROFINET as of GSD version/GSD revision
Power Power available from the backplane bus
Power loss Power loss, typ.
Hardware configuration Slots
· Grid size
· Number of slots of which for CPU, max. of which for IM, max. of which for PS, max. of which for IO/CM/CP/TM, max. of which for F-IO, max.
· Number of single-width slots, max.
6ES7590-0BL00-0AA0
Active backplane ST 1+12 slot FS01 V1.0.0 Yes
Yes; I&M0 to I&M3 Yes Yes
V16
V5.6 and higher
V2.34 / -
2 W
2 W
35 mm; Utilization of 25 mm-wide modules possible 13 0 1 12; Max. 2 PS per station 12 12 12
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
23
Technical specifications
Article number Isochronous mode
Isochronous operation (application synchronized up to terminal) Standards, approvals, certificates CE mark UL approval FM approval RCM (formerly C-TICK) KC approval EAC (formerly Gost-R) Ambient conditions Ambient temperature during operation · horizontal installation, min.
· horizontal installation, max.
· vertical installation, min.
· vertical installation, max.
Ambient temperature during storage/transportation
· min.
· max.
Altitude during operation relating to sea level · Installation altitude above sea level, max.
Dimensions Width Height Depth
Weights Weight, approx.
6ES7590-0BL00-0AA0
Yes
Yes Yes Yes Yes Yes Yes
-30 °C 60 °C -30 °C 40 °C
-40 °C 70 °C
5 000 m; Restrictions for installation altitudes > 2 000 m, see manual
434 mm 99 mm 14 mm
352 g
Use up to 5000 m
When using the active backplane bus up to 5000 m, see S7-1500/ET 200MP Automation System system manual (https://support.industry.siemens.com/cs/ww/en/view/59191792).
A current list of S7-1500 I/O modules that can be operated at elevations above 2,000 m can be found in the product information SIMATIC S7-1500/ET200 MP product information "Using the S7-1500 automation system / ET 200MP distributed I/O system over 2000 m above sea level" (https://support.industry.siemens.com/cs/ww/en/view/109763260).
Active backplane bus
24
Equipment Manual, 03/2020, A5E46240468-AA
Dimension drawings
9
Dimension drawing of the active backplane bus
This section contains a dimension drawing of the active backplane bus mounted on a mounting rail.
Figure 9-1 Dimension drawing of active backplane bus front and side view
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
25
Spare parts/accessories
10
Accessories for the active backplane bus
Table 10- 1 Accessories
Designation Slot protection, 5 units Mounting rail · Mounting rail, 482 mm (with drill holes)
· Mounting rail, 530 mm (with drill holes)
· Mounting rail, 830 mm (with drill holes)
· Mounting rail, 2000 mm (without drill holes) for cutting to length
Article number 6ES7590-0CA00-0AA0
6ES7590-1AE80-0AA0 6ES7590-1AF30-0AA0 6ES7590-1AJ30-0AA0 6ES7590-1BC00-0AA0
The active backplane bus is placed in an S7-1500 mounting rail. The mounting rail must be longer than the active backplane bus to provide enough space for the IM 155-5 PN HF and the fixing screws.
Active backplane bus
26
Equipment Manual, 03/2020, A5E46240468-AA
List of I/O modules
A
List of interface modules
The following table contains the IM 155-5 PN and the HW and FW versions starting at which it can be used.
Designation IM 155-5 PN HF
Article number 6ES7155-5AA00-0AC0
as of hardware functional status
FS01
as of firmware version V4.4
List of the modules
The following table contains the modules of the S7-1500 for the active backplane bus and as of which HW and FW version they can be used.
The I/O modules as of delivery date 03/2020 can be used without restrictions.
Designation
Article number
DI 16x24VDC HF DI 16x24VDC BA DI 32x24VDC HF DI 32x24VDC BA DI 16x24...125VUC HF DI 16x24VDC SRC BA DI 16x230VAC BA DQ 16x24VDC/0.5A ST DQ 16x24VDC/0.5A HF DQ 16x24VDC/0.5A BA DQ 32x24VDC/0.5A ST DQ 32x24VDC/0.5A HF DQ 32x24VDC/0.5A BA DQ 8x24VDC/2A HF DQ 16x24...48VUC/125VDV/0.5A ST DQ 8x230V/5A ST Relay DQ 8x230VAC/2A ST Triac DQ 16x230VAC/2A ST relay DQ 16Vx230VAC/1A ST Triac DI 16x24VDC/ DQ 16xDC24VDC/0.5A BA
6ES7521-1BH00-0AB0 6ES7521-1BH10-0AA0 6ES7521-1BL00-0AB0 6ES7521-1BL10-0AA0 6ES7521-7EH00-0AB0 6ES7521-1BH50-0AA0 6ES7521-1FH00-0AA0 6ES7522-1BH00-0AB0 6ES7522-1BH01-0AB0 6ES7522-1BH10-0AA0 6ES7522-1BL00-0AB0 6ES7522-1BL01-0AB0 6ES7522-1BL10-0AA0 6ES7522-1BF00-0AB0 6ES7522-5EH00-0AB0
6ES7522-5HF00-0AB0 6ES7522-5FF00-0AB0 6ES7522-5HH00-0AB0 6ES7522-5FH00-0AB0 6ES7523-1BL00-0AA0
as of hardware functional status FS02 FS01 FS02 FS01 FS01 FS02 FS02 FS02 FS01 FS01 FS02 FS01 FS01 FS02 FS01
as of firmware version
V2.0.1 V1.0.0 V2.0.1 V1.0.0 V1.0.0 V2.0.0 V2.0.0 V2.0.2 V1.0.0 V1.0.0 V2.0.2 V1.0.0 V1.0.0 V2.0.0 V1.0.0
FS02 FS02 FS01 FS01 FS01
V2.0.0 V2.0.0 V1.0.0 V1.0.0 V1.0.0
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
27
List of I/O modules
Designation
F-DI 16x24VDC F-DQ 8x24VDC/2A PPM AI 8xU/I/RTD/TC ST AI 8xU/I/R/RTD BA AI 8xU/I/R/RTD/TC HF AI 4xU/I/RTD/TC ST AI 8xU/I HS AI 8xU/I HF AQ 2xU/I ST AQ 4xU/I ST AQ 4xU/I HF AQ 8xU/I HS AI 4xU/I/RTD/TC/AQ 2xU/I ST PS 25W 24VDC PS 60W 24/48/60VDC PS 60 W 120/230V AC/DC TM Count 2x24V TM PosInput 2 TM Timer DIDQ 16x24V TM PTO 4 TM SIWAREX WP521 ST TM SIWAREX WP522 ST TM NPU CM PtP RS232 BA CM PtP RS232 HF CM PtP RS422/485 BA CM PtP RS422/485 HF CM 8xIO-Link
Article number
6ES7526-1BH00-0AB0 6ES7526-2BF00-0AB0 6ES7531-7KF00-0AB0 6ES7531-7QF00-0AB0 6ES7531-7PF00-0AB0 6ES7531-7QD00-0AB0 6ES7531-7NF10-0AB0 6ES7531-7NF00-0AB0 6ES7532-5NB00-0AB0 6ES7532-5HD00-0AB0 6ES7532-5ND00-0AB0 6ES7532-5HF00-0AB0 6ES7534-7QE00-0AB0 6ES7505-0KA00-0AB0 6ES7505-0RA00-0AB0 6ES7507-0RA00-0AB0 6ES7550-1AA00-0AB0 6ES7551-1AB00-0AB0 6ES7552-1AA00-0AB0 6ES7553-1AA00-0AB0 7MH4980-1AA01 7MH4980-2AA01 6ES7556-1AA00-0AB0 6ES7540-1AD00-0AA0 6ES7541-1AD00-0AB0 6ES7540-1AB00-0AA0 6ES7541-1AB00-0AB0 6ES7547-1JF00-0AB0
as of hardware functional status FS01 FS03 FS02 FS01 FS01 FS01 FS01 FS01 FS01 FS02 FS01 FS01 FS01 FS02 FS03 FS03 FS01 FS01 FS01 FS01 FS01 FS01 FS01 FS01 FS01 FS01 FS01 FS01
as of firmware version
V1.0.2 V1.0.2 V2.0.1 V1.0.0 V1.0.0 V1.0.0 V1.0.1 V1.0.0 V1.0.0 V2.0.0 V1.0.0 V1.0.0 V1.0.0 V1.0.1 V1.0.1 V1.0.1 V1.0.0 V1.0.0 V1.0.0 V1.0.0 V1.1.0 V1.1.0 V1.0.0 V1.0.3 V1.0.3 V1.0.3 V1.0.3 V1.0.0
Active backplane bus
28
Equipment Manual, 03/2020, A5E46240468-AA
Index
A
Accessories, 11, 26 Active backplane bus
Installing, 13 Application, 9 Article number, 10
Pulling and plugging I/O modules, 16 Interface module, 16 Power supply module, 16
R
Replacing racks, 19
B
Benefits, 8
C
Configure, 18 Cycle for pulling and plugging, 21
S
Slot protection, 13, 17, 26 Slots, 13, 17
T
Technical specifications, 23
D
Dimensional drawing, 25
V
View, 10
F
Firmware update, 22
I
Installation, 13
M
Maximum configuration, 11 Modules for the active backplane bus, 27 Mounting rail, 26
O
OB 83, 22
P
Properties, 10 Pull/plug interrupt, 22
Active backplane bus
Equipment Manual, 03/2020, A5E46240468-AA
29
Digital input module
F-DI 16x24VDC (6ES7526-1BH00-0AB0) SIMATIC
ET 200MP Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Co_n_ne_c_tin_g____________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _AF-p_I/pO_lic_mato_iod_nusl_eo_f t_he_________5_ _Imn_etes_rsrua_pg_tess/_di_ag_n_os_tic________6_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______7_ _Re_s_po_n_se_ti_m_es__________A_ _O_pe_n_So_u_rc_e_So_ft_w_ar_e ______B_
01/2016
A5E03858068-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03858068-AA 01/2016 Subject to change
Copyright © Siemens AG 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500 Automation System. You can find information on the functions that apply generally to the S7-1500 automation system and the ET 200MP distributed I/O system in the system manual S7-1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
The information provided in this manual and the system manual enables you to commission the S7-1500 automation system and ET 200MP distributed I/O system.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)". Please also observe the notes identified as follows:
Note A note includes important information on the product described in the documentation, on handling the product or on the part of the documentation to which particular attention should be paid.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
4
Manual, 01/2016, A5E03858068-AA
Preface
Important note for maintaining the operational safety of your system
Note
The operators of systems with safety-related characteristics must adhere to specific operational safety requirements. The supplier is also obliged to comply with special product monitoring measures. Siemens informs system operators by means of personal notifications about product developments and properties which may be or become important issues in terms of operational safety.
You should subscribe to the corresponding notifications in order to obtain the latest information and to allow you to make any necessary modifications to your system.
Log in to Industry Online Support. Follow the links below and click on "Email on update" on the right-hand side in each case: · SIMATIC S7-300/S7-300F
(https://support.industry.siemens.com/cs/products?pnid=13751&lc=en-WW) · SIMATIC S7-400/S7-400H/S7-400F/FH
(https://support.industry.siemens.com/cs/products?pnid=13828&lc=en-WW) · SIMATIC S7-1500/SIMATIC S7-1500F
(https://support.industry.siemens.com/cs/products?pnid=13716&lc=en-WW) · SIMATIC S7-1200/SIMATIC S7-1200F
(https://support.industry.siemens.com/cs/products?pnid=13683&lc=en-WW) · Distributed I/O (https://support.industry.siemens.com/cs/products?pnid=14029&lc=en-
WW) · STEP 7 (TIA Portal)
(https://support.industry.siemens.com/cs/products?pnid=14340&lc=en-WW)
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, solutions, machines, equipment and/or networks. They are important components in a holistic industrial security concept. With this in mind, Siemens' products and solutions undergo continuous development. Siemens recommends strongly that you regularly check for product updates.
For the secure operation of Siemens products and solutions, it is necessary to take suitable preventive action (e.g. cell protection concept) and integrate each component into a holistic, state-of-the-art industrial security concept. Third-party products that may be in use should also be considered. You can find more information about industrial security on the Internet (http://www.siemens.com/industrialsecurity).
To stay informed about product updates as they occur, sign up for a product-specific newsletter. You can find more information on the Internet (http://support.automation.siemens.com).
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
5
Preface
Open Source Software
Open-source software is used in the firmware of the product described. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this in the appendix.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
6
Manual, 01/2016, A5E03858068-AA
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 9
1.1
Guide to documentation S7-1500 / ET 200MP .........................................................................9
2 Product overview .................................................................................................................................. 12
2.1
Properties ................................................................................................................................ 12
3 Connecting ........................................................................................................................................... 15
3.1
Block diagram .........................................................................................................................15
4 Parameters/address space ................................................................................................................... 17
4.1
Parameters .............................................................................................................................17
4.2 4.2.1 4.2.1.1 4.2.1.2 4.2.2 4.2.2.1 4.2.2.2 4.2.2.3 4.2.2.4 4.2.3 4.2.3.1 4.2.3.2 4.2.3.3 4.2.3.4 4.2.4 4.2.4.1 4.2.4.2 4.2.4.3 4.2.4.4 4.2.4.5 4.2.4.6 4.2.4.7
Explanation of parameters ......................................................................................................20 F-parameters ..........................................................................................................................20 Behavior after channel fault ....................................................................................................20 Reintegration after channel fault.............................................................................................20 Parameters of the sensor supply ............................................................................................21 Supplied channels...................................................................................................................21 Short-circuit test activated ......................................................................................................21 Time for short-circuit test ........................................................................................................22 Startup time of sensors after short-circuit test ........................................................................23 Parameters of the channel pairs.............................................................................................23 Sensor evaluation ...................................................................................................................23 Discrepancy behavior .............................................................................................................24 Discrepancy time ....................................................................................................................25 Reintegration after discrepancy error .....................................................................................26 Parameters of the channels ....................................................................................................26 Channel activated ...................................................................................................................26 Input delay ..............................................................................................................................27 Channel failure acknowledge..................................................................................................28 Pulse extension.......................................................................................................................28 Chatter monitoring ..................................................................................................................28 Number of signal changes ......................................................................................................29 Monitoring window ..................................................................................................................29
4.3
Address space ........................................................................................................................30
5 Applications of the F-I/O module ........................................................................................................... 32
5.1
Applications of the F-DI 16x24VDC ........................................................................................32
5.2
Application 1: Safety mode SIL3/Cat.3/PLd ...........................................................................34
5.3
Application 2: Safety mode SIL3/Cat.3/PLe ...........................................................................37
5.4 5.4.1 5.4.2
Application 3: Safety mode SIL3/Cat.4/PLe ...........................................................................41 Application 3.1 (SIL3/Cat.4/PLe) ............................................................................................42 Use case 3.2 (SIL3/Cat.4/PLe) ...............................................................................................44
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
7
Table of contents
6 Interrupts/diagnostic messages ............................................................................................................. 47
6.1
Status and error displays ....................................................................................................... 47
6.2
Interrupts ................................................................................................................................ 50
6.3
Diagnostic alarms................................................................................................................... 51
7 Technical specifications ........................................................................................................................ 57
A Response times .................................................................................................................................... 60
B Open Source Software.......................................................................................................................... 62
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
8
Manual, 01/2016, A5E03858068-AA
Documentation guide
1
1.1
Guide to documentation S7-1500 / ET 200MP
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, Motion Control, Web server. You can download the documentation free of charge from the Internet (http://www.automation.siemens.com/mcms/industrial-automation-systemssimatic/en/manual-overview/tech-doc-controllers/Pages/Default.aspx). Changes and supplements to the manuals are documented in a Product Information. You can download the product information free of charge from the Internet.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
9
Documentation guide 1.1 Guide to documentation S7-1500 / ET 200MP
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (http://support.automation.siemens.com/WW/view/en/86140384).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet.
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
10
Manual, 01/2016, A5E03858068-AA
Documentation guide 1.1 Guide to documentation S7-1500 / ET 200MP
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration.
You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
11
Product overview
2.1
Properties
Order number
6ES7526-1BH00-0AB0
View of the module
2
Image 2-1 View of the F-DI 16x24VDC module
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
12
Manual, 01/2016, A5E03858068-AA
Properties
Product overview 2.1 Properties
Technical properties Fail-safe digital module for use in the S7-1500 automation system and in the ET 200MP distributed I/O system. PROFIsafe PROFIsafe address type 2 Supports the RIOforFA-Safety profile (on S7-1500 F-CPUs) 16 inputs (SIL3/Category 3/PLd) or 8 inputs (SIL3/Category 4/PLe) 4 outputs for sensor supply Use of various interconnection types are possible (1oo1 & 1oo2) Supply voltage L+ Sink input (P-reading) Suitable for connection of 3/4-wire sensors according to IEC 61131:2007, type 1 Channel-specific assignable input delay 0.4 ms to 20 ms Internal short-circuit-proof sensor supplies for each channel group External sensor supply possible Status display RUN (green LED) Status display module diagnostics (red LED) Status display channel status/channel diagnostics per input (green/red LED) Status display supply voltage (green LED) Diagnostics, e.g., short-circuit, channel-specific Diagnostics, e.g., load voltage missing, module-specific Channel-specific or module-wide passivation
Supported functions Firmware update I&M identification data
WARNING The fail-safe performance characteristics in the technical specifications apply for a mission time of 20 years and a repair time of 100 hours. If a repair within 100 hours is not possible, switch off the supply voltage of the affected module before 100 hours expires. Follow the repair procedure described in section Diagnostic alarms (Page 51).
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
13
Product overview 2.1 Properties
Accessories
The following accessories are supplied with the module and can also be ordered as spare part: Labeling strips U-connector Universal front cover Electronic coding element
Additional components
The following component is to be ordered separately:
Front connector incl. potential bridges and cable ties
You can find additional information on accessories in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
14
Manual, 01/2016, A5E03858068-AA
Connecting
3
3.1
Block diagram
This section includes the block diagram with the general pin assignment of the F-module.
For information on parameter assignment of the F-module, refer to "Parameters/address space (Page 17)".
Information on different connection options is available in the section Applications of the F-I/O module (Page 32).
You can find information on wiring the front connectors and creating the cable shielding, etc., in the Wiring section of the system manual Automation System S7-1500 (http://support.automation.siemens.com/WW/view/en/59191792).
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
15
Connecting 3.1 Block diagram
Block diagram
The following figure shows the assignment of channels to addresses (input byte a and input byte b).
Backplane bus interface Microcontroller 1 Microcontroller 2
Reverse polarity protection
USn Internal sensor supply n DIn Input bit n
Image 3-1 Block diagram of the F-DI 16x24VDC
L+ M CH
PWR RUN ERROR
Supply voltage 24 V DC Chassis ground Channel or LED channel status, channel diagnostics (green, red) LED supply voltage (green) RUN LED (green) LED module diagnostics (red)
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
16
Manual, 01/2016, A5E03858068-AA
Parameters/address space
4
4.1
Parameters
Parameters
WARNING
Diagnostic functions must be activated or deactivated in accordance with the application, see section Applications of the F-I/O module (Page 32).
Table 4- 1 Parameters for F-DI 16x24VDC
Parameter
F-parameters: Manual assignment of F-monitoring time
F-monitoring time F-source address F-destination address F-parameter signature (without address) Behavior after channel fault
Reintegration after channel fault
F-I/O DB manual number assignment
F-I/O DB-number F-I/O DB name DI parameters: Sensor supply
Value range
Parameter reassignment in RUN
· Disable
No
· Enable
1 to 65535 ms
No
1 to 65534
No
1 to 65534
No
0 to 65535
No
· Passivate channel
No
· Passivate the entire module
· Adjustable
No
· All channels automatically · All channels manually
· Disable
No
· Enable
--
No
--
No
Scope
Module
Module Module Module Module Module
Module
Module
Module Module
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
17
Parameters/address space 4.1 Parameters
Parameter Supplied channels
Short-circuit test activated Time for short-circuit test Startup time of sensors after short-circuit test Channel parameters Channel n, n+8 Sensor evaluation
Discrepancy behavior Discrepancy time Reintegration after discrepancy error Channel n Channel activated
Value range
Sensor supply 0: · No channels · Channels [0..3] · Channels [0..7] · Channels [0..15] Sensor supply 1: · No channels · Channels [4..7] Sensor supply 2: · No channels · Channels [8..11] · Channels [8..15] Sensor supply 3: · No channels · Channels [12..15]
· Disable · Enable 0.9 ms to 2 s 0.9 ms to 2 s
Parameter reassignment in RUN
No
Scope Channel group
No
Channel
No
Channel
No
Channel
· 1oo1 evaluation
No
· 1oo2 evaluation, equivalent
· 1oo2 evaluation, nonequivalent
· Supply value 0
No
· Supply last valid value
5 ms to 30 s
No
· Test 0-signal not necessary No
· Test 0-signal necessary
· Enable
No
· Disable
Channel pair
Channel pair Channel pair Channel pair
Channel
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
18
Manual, 01/2016, A5E03858068-AA
Input delay
Parameter
Channel failure acknowledge
Pulse extension
Chatter monitoring Number of signal changes Monitoring window
Parameters/address space 4.2 Explanation of parameters
Value range · 0.4 ms
Parameter reassignment in RUN
No
· 0.8 ms
· 1.6 ms · 3.2 ms
· 6.4 ms
· 10.0 ms · 12.8 ms
· 20.0 ms
The provided value range depends on the parameter assignment of the employed sensor supply.
· Manual
No
· Automatic
The value range offered depends on the F-CPU in use and on the configuration of the Fparameter "Reintegration after channel fault".
· --
No
· 0.5 s · 1s
· 2s
· Disable
No
· Enable
2 to 31
No
0 to 100 s
No
(If 0 s is configured, the monitor-
ing window is 0.5 s long.)
Scope Channel
Channel
Channel Channel Channel Channel
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
19
Parameters/address space 4.2 Explanation of parameters
4.2
Explanation of parameters
4.2.1 4.2.1.1 4.2.1.2
20
F-parameters
You must assign the PROFIsafe address (F-destination address together with F-source address) to the F-module before you put it into operation. You define the F-source address using the "Basis for PROFIsafe addresses" parameter
in the F-CPU. An F-destination address unique throughout the CPU is automatically assigned for each
F-module. You can manually change the F-destination addresses set in the hardware configuration. You can find information on F-parameters for the F-monitoring time, the PROFIsafe address assignment (F-source address, F-destination address) and the F I/O DB in the manual SIMATIC Safety - Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126).
Behavior after channel fault
This parameter is used to specify whether the entire F-module is passivated or just the faulty channel(s) in the event of channel faults: "Passivate the entire module" "Passivate channel"
Reintegration after channel fault
Use this parameter to select how the channels of the fail-safe module are reintegrated after a fault.
Use in S7-300/400 F-CPUs This parameter is always set to "Adjustable" when you use the fail-safe module in S7-300/400 F-CPUs. You make the required setting in the F-I/O DB of the fail-safe module.
Use in S7-1500 F-CPUs When using the fail-safe module in S7-1500 F-CPUs, you set this parameter in the STEP 7 dialog of the fail-safe module: "Adjustable" "All channels automatically" "All channels manually" If you have set the "Behavior after channel fault" parameter to "Passivate channel", you enable individual setting of the reintegration type per channel with the parameter assignment "Adjustable". The reintegration type of the respective channel is specified with the "Channel failure acknowledge" channel parameter. If you have set the "Behavior after channel fault" parameter to "Passivate the entire module", you can only select the same reintegration type for all channels.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0) Manual, 01/2016, A5E03858068-AA
Parameters/address space 4.2 Explanation of parameters
4.2.2
Parameters of the sensor supply
4.2.2.1
Supplied channels
With this parameter, you specify whether and which internal sensor supply supplies which channel groups. The choice taken applies to the entire channel group (CH0-3, 4-7, 8-11, 12-15).
The following options are available, for example:
Parameter assignment:
Left-hand module side
Sensor supply 0 supplies channels ...
0 to 3
Sensor supply 1 supplies channels ...
4 to 7
0 to 7
-
0 to 3
4 to 7
0 to 7
-
0 to 15
-
Meaning
Each channel group is supplied by its own internal sensor supply. The channel groups of the left-hand module side are supplied by the internal sensor supply VS0. The channel groups of the right-hand module side are supplied by the internal sensor supply VS2. The channel groups of the left-hand module side are supplied by the internal sensor supply VS0; the channel groups of the right-hand module side are supplied by the internal sensor supply VS2. All the channels of the module are supplied by the internal sensor supply VS0.
Parameter assignment:
Right-hand module side
Sensor supply 2 supplies channels ...
8 to 11
Sensor supply 3 supplies channels ...
12 to 15
8 to 11
12 to 15
8 to 15
-
8 to 15
-
-
-
You can also supply the sensors by means of an external sensor supply (parameter "None").
The selection of an internal sensor supply is required for using the short-circuit test.
See also
Short-circuit test activated (Page 21) Connecting (Page 15)
4.2.2.2
Short-circuit test activated
Here you enable the short-circuit detection for the channels of the F-module for which one of the internal sensor supplies is set ("Supplied channels").
The short-circuit test is always possible when you are using simple switches that do not have their own power supply. For switches with their own power supply, for example, 3/4-wire proximity switches or optical sensors with OSSD (Output Signal Switching Device) outputs, you must adapt the "Startup time of sensors after short-circuit test" parameter to match the sensor in use.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
21
Parameters/address space 4.2 Explanation of parameters
The short-circuit detection switches off the internal sensor supply briefly. The length of the deactivation period is equivalent to the configured "Time for sensor test". If a short-circuit is detected, the F-module triggers a diagnostic interrupt and the input is passivated. The following short-circuits are detected: Short-circuit of input to L+ Short-circuit of the input of another channel when it has a 1 signal Short-circuit between the input and sensor supply of another channel Short-circuit between the sensor supply and the sensor supply of another channel If the short-circuit test is disabled, you must make your wiring short-circuit and cross-circuit proof or select a connection type (discrepancy, non-equivalent) which also detect the crosscircuits using discrepancy.
Note During the execution time of the short-circuit test (Time for short-circuit test + Startup time of sensors after short-circuit test), the last valid value of the input before the start of the shortcircuit test is passed to the F-CPU. The activation of the short-circuit test thus affects the response time of the respective channel or channel pair.
4.2.2.3
Time for short-circuit test
Function
When the short-circuit test is enabled, the corresponding internal sensor supply is switched off for the configured time. If the module does not detect a "0" signal at the input within the configured time, a diagnostics alarm is generated.
Note the following during parameter assignment:
If the channel is passivated, this may be due to excessively high capacitance between sensor supply and input. This consists of the capacitance per unit length of the cable and the capacitance of the employed sensor. If the connected capacitance is not discharged within the configured time, you need to adjust the "Time for short-circuit test" parameter.
Note
During the execution time of the short-circuit test (Time for short-circuit test + Startup time of sensors after short-circuit test), the last valid value of the input before the start of the short-circuit test is passed to the F-CPU. The activation of the short-circuit test thus affects the response time of the respective channel or channel pair.
The "Time for short-circuit test" has to be 0.5 ms greater than the set input delay.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
22
Manual, 01/2016, A5E03858068-AA
Parameters/address space 4.2 Explanation of parameters
4.2.2.4
Startup time of sensors after short-circuit test
Function
In addition to the switch-off time ("Time for short-circuit test"), a startup time must be specified for performing the short-circuit test. You use this parameter to notify the module how long the utilized sensor needs to start up after turning on the internal sensor supply. This prevents an undefined input state due to transient reactions in the sensor.
Note the following during parameter assignment:
This parameter must be greater than the transient recovery time of the employed sensor.
Because the assigned time affects the response time of the module, we recommend that you set the time as short as possible but long enough so that your sensor can settle safely.
The "Startup time of sensors after short-circuit test" must
be set to a value greater than the set input delay
be at least 1% of the "time for short-circuit test"
be 0.5 ms greater than the set input delay.
Requirement
The short-circuit test is enabled.
4.2.3
Parameters of the channel pairs
4.2.3.1
Sensor evaluation
Overview
Select the type of sensor evaluation with the "Evaluation of the sensors" parameter: 1oo1 evaluation 1oo2 evaluation, equivalent 1oo2 evaluation, non-equivalent
1oo1 evaluation
With a 1oo1 evaluation, the sensor occupies only one input channel.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
23
Parameters/address space 4.2 Explanation of parameters
1oo2 evaluation, equivalent/non-equivalent
With a 1oo2 evaluation equivalent/non-equivalent, two input channels are occupied by:
a two-channel equivalent/non-equivalent sensor
Two single-channel sensors
The input signals are compared internally for equivalence or non equivalence.
Note that in 1oo2 evaluation, two channels are combined into a channel pair. The number of available process signals of the F-module is reduced accordingly. The evaluation result is provided in the bit of the lower-order channel of the channel pair (channel n).
Discrepancy analysis
When using a two-channel sensor or two single-channel sensors which measure the same process variable, the sensors interact with a slight time delay due to the limited precision of their arrangement.
Discrepancy analysis for equivalence or non-equivalence is used for fail-safe inputs to detect errors caused by the time characteristic of two signals with the same functionality. The discrepancy analysis is initiated when different levels are detected in two associated input signals (when testing for non-equivalence: the same level). A check is made to determine whether the difference in levels (when testing for non equivalence: the same level) has disappeared after an assignable time period, the so-called discrepancy time. If not, there is a discrepancy error.
4.2.3.2
Discrepancy behavior
Function
For the "Discrepancy behavior", you assign the value that is supplied to the safety program in the F-CPU during a discrepancy between two relevant input channels, which means while discrepancy time is running. You assign the discrepancy behavior as follows:
Supply last valid value"
"Supply value 0"
Requirements
You have assigned the following: "Sensor evaluation": "1oo2 evaluation, equivalent" or "1oo2 evaluation, non-equivalent"
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
24
Manual, 01/2016, A5E03858068-AA
Parameters/address space 4.2 Explanation of parameters
Supply last valid value"
The most recent valid value (old value) before the discrepancy occurred is made available to the safety program in the F-CPU as soon as a discrepancy is detected between the signals of the two affected input channels. This value is supplied until the discrepancy disappears or the discrepancy time expires and a discrepancy error is detected. The sensor-actuator response time is correspondingly increased by this time.
This means the discrepancy time of connected sensors with 1oo2 evaluation must be adjusted to fast response times. It makes no sense, for example, if connected sensors with a discrepancy time of 500 ms trigger a time-critical shutdown. In the worst-case scenario, the sensor-actuator response time is extended by an amount approximately equal to the discrepancy time:
For this reason, position the sensors in the process in such a way as to minimize discrepancy.
Then select the shortest possible discrepancy time which is also sufficient to compensate for faulty triggering of discrepancy errors.
"Supply value 0"
As soon as a discrepancy between the signals of the two relevant input channels is detected, the value "0" is made available to the safety program in the F-CPU.
If you have set "Supply value 0", the sensor-actuator response time is not affected by the discrepancy time.
4.2.3.3
Discrepancy time
Function
You can set the discrepancy time for each channel pair.
Requirements
You have assigned the following:
"Sensor evaluation": "1oo2 evaluation, equivalent" or "1oo2 evaluation, non-equivalent"
In most cases, a discrepancy time is started, but does not fully expire because the signal differences are cleared within a short time.
Set the discrepancy time high enough that in the error-free case the difference between the two signals (when testing for non equivalence: the same levels) has always disappeared before the discrepancy time has expired.
Behavior while discrepancy time is running
While the programmed discrepancy time is running internally on the module, either the last valid value or "0" is returned to the safety program on the F-CPU by the input channels involved, depending on the parameter settings for the behavior at discrepancy.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
25
Parameters/address space 4.2 Explanation of parameters
Behavior after expiration of the discrepancy time
If no agreement (when checking for non equivalence: inequality) of the input signals exists once the assigned discrepancy time expires, for example, due to a break in a sensor wire, a discrepancy error is detected and the "Discrepancy error" diagnostic message containing information on which channels are faulty is generated.
4.2.3.4
Reintegration after discrepancy error
Function
This parameter specifies the criteria for when a discrepancy error is regarded as corrected, thus enabling reintegration of the relevant input channels. The following parameter assignment options are available:
"Test 0-Signal necessary"
"Test 0-Signal not necessary"
Requirements
You have assigned the following: "Sensor evaluation": "1oo2 evaluation, equivalent" or "1oo2 evaluation, non-equivalent"
"Test 0-Signal necessary"
If you have assigned "Test 0-signal necessary", a discrepancy error is not regarded as corrected until a 0-signal is present at both of the relevant input channels.
If you are using non equivalent sensors, which means you have set "Sensor evaluation" to "1oo2 evaluation, non-equivalent", the result of the channel pair must provide a 0-Signal again.
"Test 0-Signal not necessary"
If you have assigned "Test 0-Signal not necessary", a discrepancy error is regarded as corrected when a discrepancy no longer exists at both of the relevant input channels.
4.2.4 4.2.4.1
Parameters of the channels
Channel activated
You hereby enable the corresponding channel for signal processing in the safety program.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
26
Manual, 01/2016, A5E03858068-AA
Parameters/address space 4.2 Explanation of parameters
4.2.4.2
Input delay
Function
To suppress injected interference, you can set an input delay for a channel or a channel pair.
Interference pulses whose pulse time is less than the set input delay (in ms) are suppressed. Suppressed interference pulses are not visible in the process image input (PII).
A high input delay suppresses longer interference pulses, but results in a longer response time.
The set value for the input delay has to be smaller than the configured "Startup time of sensors after short-circuit test" and smaller than the configured "Time for short-circuit test".
With 1oo2 evaluation, the input delay of the lower-order channel (channel n) automatically applies to the higher-order channel (channel n+8).
Note
If there is an input delay < 3.2 ms, you have to use shielded cables.
Note
Due to the physical properties, there is a possibility of crosstalk between signals in the case of long, unshielded signal lines (see section "Electromagnetic compatibility" in the system manual S7-1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792)).
If the interference pulses occur with a short-circuit test, the fail-safe digital inputs are passivated. Increase the input delay or use shielded signal lines in order to prevent possible passivation of the fail-safe digital inputs and switch-off of the internal sensor supply.
See also
Technical specifications (Page 57) Response times (Page 60)
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
27
Parameters/address space 4.2 Explanation of parameters
4.2.4.3
Channel failure acknowledge
Use in S7-1500 F-CPUs This parameter is only relevant if the fail-safe module is operated on an S7-1500 F-CPU, and can only be set if the F-parameter "Behavior after channel fault" is set to "Passivate channel" and the F-parameter "Reintegration after channel fault" is set to "Adjustable". The value of this parameter specifies how the channel should react to a channel fault: Manual: A channel failure is reintegrated after manual acknowledgment. Automatically: The channel is reintegrated automatically after a channel fault. Manual
acknowledgment is not necessary.
Use in S7-300/400 F-CPUs The value of this parameter is not relevant in the case of operation on S7-300/400 F-CPUs. There you set the corresponding property at the F-I/O DB by means of the ACK_NEC tag. For detailed information about the F-I/O DB, refer to the SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126) manual.
4.2.4.4
Pulse extension
Function
Pulse extension is a function to extend a digital input signal. A pulse on a digital input is extended to at least the assigned length. If the input pulse is already longer than the assigned length, the pulse is not changed.
The fail-safe electronic module only lengthens pulses with the value "0" because the basis of the safety concept is that there is a safe state for all process variables. For digital F-I/O, this is the value "0", which applies to sensors as well as to actuators.
The pulse extension can only be configured with 1oo1 evaluation.
4.2.4.5
Chatter monitoring
Function
Chatter monitoring is a process control function for digital input signals. It detects and reports unusual signal sequences in the process with 1oo1 evaluation, for example, an input signal fluctuating between "0" and "1" too frequently. The occurrence of such signal characteristics is an indication of faulty sensors or process control instability.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
28
Manual, 01/2016, A5E03858068-AA
Parameters/address space 4.2 Explanation of parameters
Recognizing unusual signal patterns
An assigned monitoring window is available for each input channel. The monitoring window starts with the first signal change of the input signal. If the input signal changes within the monitoring window at least as often as the assigned "Number of signal changes", a chatter error is detected. If no chatter error is detected within the monitoring window, the next signal change restarts the monitoring window.
If a chatter error is detected, a diagnostic is signaled. If the chatter error does not occur for the monitoring window for three times the configured period, the diagnostic is reset.
Principle
The figure below shows the principle of chatter monitoring as a graphic.
4.2.4.6 4.2.4.7
Image 4-1 Figure chatter monitoring
Number of signal changes
Sets the number of signal changes after which a chatter error should be reported (value range: 2 to 31).
Monitoring window
Sets the time for the monitoring window of flutter monitoring. You can set times of 1 s to 100 s in whole seconds for the monitoring window. Enter 0 to configure a monitoring window of 0.5 s.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
29
Parameters/address space 4.3 Address space
4.3
Address space
Address assignment of the digital input module F-DI 16x24VDC
The digital input module F-DI 16x24VDC occupies the following address areas in the F-CPU:
Table 4- 2 Address assignment in the F-CPU
F-CPU S7-300/400 F-CPUs S7-1500 F-CPUs
x = Module start address
Occupied bytes in the F-CPU: In input range IB x + 0 to x + 7 IB x + 0 to x + 8
In output range QB x + 0 to x + 3 QB x + 0 to x + 4
Address assignment of the user data and the value status of digital input module F-DI 16x24VDC
The user data occupies the following addresses in the F-CPU out of all the assigned addresses of the digital input module F-DI 16x24VDC:
Table 4- 3 Address assignment through user data
Byte in the F-CPU
IB x + 0 Channel group a
IB x + 1 Channel group b
IB x + 2 Channel group a
IB x + 3 Channel group b
7 DI7 (CH7)
DI7 (CH15)
Value status for DI7
(CH7) Value status for DI7
(CH15)
x = Module start address
6 DI6 (CH6)
DI6 (CH14)
Value status for DI6
(CH6) Value status for DI6
(CH14)
Assigned bits in F-CPU per F-module:
5
4
3
2
DI5 (CH5)
DI4 (CH4)
DI3 (CH3)
DI2 (CH2)
DI5 (CH13)
DI4 (CH12)
DI3 (CH11)
DI2 (CH10)
Value status for DI5
(CH5)
Value status for DI5
(CH13)
Value status for DI4
(CH4)
Value status for DI4
(CH12)
Value status for DI3
(CH3)
Value status for DI3
(CH11)
Value status for DI2
(CH2)
Value status for DI2
(CH10)
1 DI1 (CH1)
DI1 (CH9)
Value status for DI1
(CH1) Value status for DI1
(CH9)
0 DI0 (CH0)
DI0 (CH8)
Value status for DI0
(CH0) Value status for DI0
(CH8)
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
30
Manual, 01/2016, A5E03858068-AA
Parameters/address space 4.3 Address space
Note You may only access the addresses occupied by user data and value status. The other address areas occupied by the F-modules are assigned for functions including safety-related communication between the F-modules and F-CPU in accordance with PROFIsafe. 1oo2 evaluation of the sensors combines the two channels, e.g. CH0 (input bit DI0 in channel group a) with CH8 (input bit DI0 in channel group b). With 1oo2 evaluation of the sensors, you may only access the input bit from channel group a in the safety program, in this example CH0.
Additional information
For detailed information about F-I/O access and for evaluation and processing of the value status, refer to the SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126) manual.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
31
Applications of the F-I/O module
5
5.1
Applications of the F-DI 16x24VDC
Selecting the application
The diagram below supports you in selecting the application that suits your fail-safe requirements. In the following sections, you will learn how to wire the F-module, the specific parameters you must assign in STEP 7 Safety and the errors that are detected.
Image 5-1 Selecting the application digital input module F-DI 16x24VDC
WARNING The achievable safety class depends on the quality of the sensor and the duration of the mission time in accordance with IEC 61508:2010. If the quality of the sensor is lower than the quality required by the safety class, redundant sensors connected via two channels must be used and evaluated.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
32
Manual, 01/2016, A5E03858068-AA
Applications of the F-I/O module 5.2 Application 1: Safety mode SIL3/Cat.3/PLd
Conditions for achieving SIL/Cat./PL
The table below lists the conditions which have to be met for achieving at least the corresponding safety requirements.
Table 5- 1 Conditions for achieving SIL/Cat./PL
Application
Sensor evaluation
Sensor supply
1
1oo1
Any
2
1oo2
Internal, without short-circuit test
equivalent
External
3.1
1oo2
Internal, with short-circuit test
equivalent
3.2
1oo2
External or internal, with short-
non-equivalent
circuit test
Achievable SIL/Cat./PL
3 / 3 / d 3 / 3 / e
3 / 4 / e
Note
You can operate the various inputs of an F-DI module simultaneously in SIL3/Cat.3/PLd and in SIL3/Cat.3 or Cat.4/PLe. You only have to interconnect the inputs and assign parameters as described in the following sections.
Sensor requirements
Information on the safety-related use of sensors is available in the section Requirements for sensors and actuators for fail-safe modules of the system manual S7-1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
33
Applications of the F-I/O module 5.2 Application 1: Safety mode SIL3/Cat.3/PLd
5.2
Application 1: Safety mode SIL3/Cat.3/PLd
Wiring
The wiring is carried out on the front connector of the module. Refer to the "Wiring" section in the S7-1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Sensor supply
The sensor supply can be powered internally or externally.
Wiring diagram connecting one sensor via one channel
One sensor is connected via one channel (1oo1 evaluation) for each process signal.
The assignment of the input to an internal sensor supply of the module must take place according to the parameter assignment "Supplied channels" (see section Supplied channels (Page 21)).
You can also supply the sensor by means of an external sensor supply.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
34
Manual, 01/2016, A5E03858068-AA
Applications of the F-I/O module 5.2 Application 1: Safety mode SIL3/Cat.3/PLd
The figure below shows an example of the pin assignment of the fail-safe digital input module F-DI 16x24VDC with one-channel connection of a sensor.
Backplane bus interface Microcontroller 1
Microcontroller 2 Reverse polarity protection
Image 5-2 One sensor connected via one channel, internal sensor supply (left) or external sensor supply (right)
WARNING To achieve SIL3/Cat.3/PLd using this wiring, you must use a qualified sensor.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
35
Applications of the F-I/O module 5.2 Application 1: Safety mode SIL3/Cat.3/PLd
Parameter assignment
Assign the following parameters for the corresponding channel:
Table 5- 2 Parameter assignment
Parameter
Sensor evaluation Supplied channels Short-circuit test activated
Channel with internal sensor supply 1oo1 evaluation Channels [x...y]
· Disable
· Enable*
Channel with external sensor supply
None Disable
*) optional. The selection of an internal sensor supply, however, is required for using the short-circuit test.
Fault detection
The following table presents fault detection according to the sensor supply and the parameter assignment for the short-circuit test:
Table 5- 3 Fault detection
Fault
Short-circuit of the input with other channels or other sensor supplies (short-circuit with other channels is detected only if they use a different sensor supply) Short-circuit between the input and associated sensor supply Short-circuit with L+ to DIn Short-circuit with M to DIn Discrepancy error Short-circuit with L+ to USn Short-circuit with M to USn or defective
Fault detection
Internal sensor supply and short-circuit test
activated Yes*
Internal sensor supply and short-circuit
test deactivated No
No
No
Yes
No
No
No
--
--
Yes
No
Yes
Yes
External sensor supply No
No No No -- -- --
*) Fault detection only if signals are corrupted. That is, the read signal differs from the sensor signal. If there is no signal corruption with respect to the sensor signal, fault detection is not possible and is not required from a safety standpoint.
See also
36
WARNING
If the short-circuit test is not activated or the sensor supply to digital inputs is set to "External sensor supply", the cable must be routed short-circuit proof.
Connecting (Page 15)
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0) Manual, 01/2016, A5E03858068-AA
Applications of the F-I/O module 5.3 Application 2: Safety mode SIL3/Cat.3/PLe
5.3
Application 2: Safety mode SIL3/Cat.3/PLe
Assigning inputs to each other
The digital input module F-DI 16x24VDC has 16 fail-safe inputs, DI0 to DI15 (SIL3). You can combine two of these inputs each to one input. You can combine the following inputs: DI0 and DI8 DI1 and DI9 DI2 and DI10 DI3 and DI11 DI4 and DI12 DI5 and DI13 DI6 and DI14 DI7 and DI15 The process signals are provided by channels DI0, DI1, DI2, DI3, DI4, DI5, DI6 and DI7.
Note You can mix 1oo1 evaluation and 1oo2 evaluation in an F-DI module. You must interconnect and parameterize the inputs according to the fail-safe requirements (SIL3/Cat.3/PLd and SIL3/Cat.3 or Cat.4/PLe).
Wiring
The wiring is carried out on the front connector of the module. Refer to the "Wiring" section in the S7-1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Sensor supply
The sensor supply can be powered internally or externally.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
37
Applications of the F-I/O module 5.3 Application 2: Safety mode SIL3/Cat.3/PLe
Wiring diagram connecting a two-channel sensor equivalent
A two-channel sensor is connected equivalent to two inputs of the F-module for each process signal (1oo2 evaluation). You can also supply one or both sensor switches by means of an external sensor supply. The figure below shows an example of the pin assignment of the fail-safe digital input module F-DI 16x24VDC with equivalent connection of a two-channel sensor.
Backplane bus interface Microcontroller 1
Microcontroller 2 Reverse polarity protection
Image 5-3 One two-channel sensor connected equivalently, internal sensor supply (top) or external sensor supply (bottom)
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
38
Manual, 01/2016, A5E03858068-AA
Applications of the F-I/O module 5.3 Application 2: Safety mode SIL3/Cat.3/PLe
Wiring diagram connecting two single-channel sensors via two channels
Two single-channel sensors that capture the same process value are connected to two inputs of the F-module for each process signal (1oo2 evaluation). You can also supply the sensors by means of an external sensor supply. The figure below shows an example of the pin assignment of the fail-safe digital input module F-DI 16x24VDC with two-channel connection of two single-channel sensors.
Backplane bus interface Microcontroller 1
Microcontroller 2 Reverse polarity protection
Image 5-4 Two single-channel sensors connected via two channels, internal sensor supply (top) or external sensor supply (bottom)
WARNING To achieve SIL3/Cat.3/PLe using this wiring, you must use a qualified sensor.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
39
Applications of the F-I/O module 5.4 Application 3: Safety mode SIL3/Cat.4/PLe
Parameter assignment
Assign the following parameters for the corresponding channel:
Table 5- 4 Parameter assignment
Parameter
Sensor evaluation Supplied channels Short-circuit test activated
Channel with internal sensor supply
1oo2 evaluation, equivalent Channels [x...y] Disable
Channel with external sensor supply
None
Fault detection
The following table presents fault detection according to the sensor supply and the parameter assignment for the short-circuit test:
Table 5- 5 Fault detection
Fault
Short-circuit within the channel pair Short-circuit with other channels or other sensor supplies Short-circuit with L+ to DIn Short-circuit with M to DIn Discrepancy error Short-circuit with L+ to USn Short-circuit with M to USn or defective
Fault detection
Internal sensor supply and short-circuit test deactivated
No
External sensor supply No
Yes*
Yes
Yes* Yes* Yes No Yes
Yes* Yes* Yes No
--
*) Fault detection only if signals are corrupted. That is, the read signal differs from the sensor signal (discrepancy error). If there is no signal corruption with respect to the sensor signal, fault detection is not possible and is not required from a safety standpoint.
See also
Connecting (Page 15)
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
40
Manual, 01/2016, A5E03858068-AA
Applications of the F-I/O module 5.4 Application 3: Safety mode SIL3/Cat.4/PLe
5.4
Application 3: Safety mode SIL3/Cat.4/PLe
Assigning inputs to each other
The digital input module F-DI 16x24VDC has 16 fail-safe inputs, DI0 to DI15 (SIL3). You can combine two of these inputs each to one input.
You can combine the following inputs: DI0 and DI8 DI1 and DI9 DI2 and DI10 DI3 and DI11 DI4 and DI12 DI5 and DI13 DI6 and DI14 DI7 and DI15
The process signals are provided by channels DI0, DI1, DI2, DI3, DI4, DI5, DI6 and DI7.
Wiring
The wiring is carried out on the front connector of the module. Refer to the "Wiring" section in the S7-1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Sensor supply
The sensor must be supplied internally by at least one channel group for application 3.1. The sensor can be supplied internally or externally for application 3.2.
Requirements for applications in machine protection with Cat.4
Both conditions must be met for applications in machine protection with Cat.4: The wiring between sensors and automation system and between automation system and
actuators must be designed with state-of-the-art engineering and standards to prevent short-circuits.
The sensors must be wired as shown in sections Application 3.1 (SIL3/Cat.4/PLe) (Page 42) or Use case 3.2 (SIL3/Cat.4/PLe) (Page 44). You only need to detect one short-circuit because 2 faults are required to generate it. This means both signal cables in short-circuit have an isolation fault. A multiple short-circuit analysis is not required.
Procedures for locating all short-circuits are also permitted if single short-circuits are not located. One of the two conditions must be met for this purpose: Short-circuits may not corrupt the read signals compared to the sensor signals.
Short-circuits cause a corruption of the read signals compared to sensor signals in the direction that ensures safety.
See also
Connecting (Page 15)
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
41
Applications of the F-I/O module 5.4 Application 3: Safety mode SIL3/Cat.4/PLe
5.4.1
Application 3.1 (SIL3/Cat.4/PLe)
Wiring diagram connecting a two-channel sensor via two channels
A two-channel sensor is connected to two inputs of the F-module for each process signal (1oo2 evaluation).
Supply the sensors from two different internal sensor supplies.
Alternatively, two single-channel sensors can be connected via two channels. In this case, the same process variable is acquired with two mechanically separate sensors.
The figure below shows an example of the pin assignment of the fail-safe digital input module F-DI 16x24VDC with two-channel connection of one two-channel sensor or two single-channel sensors.
Backplane bus interface Microcontroller 1
Microcontroller 2 Reverse polarity protection
Image 5-5 One two-channel sensor connected via two channels (top) or two single-channel sensors connected via two channels (bottom); internal sensor supply
WARNING To achieve SIL3/Cat.4/PLe using this wiring, you must use a suitably qualified sensor.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
42
Manual, 01/2016, A5E03858068-AA
Applications of the F-I/O module 5.4 Application 3: Safety mode SIL3/Cat.4/PLe
Parameter assignment
Assign the following parameters for the corresponding channel:
Table 5- 6 Parameter assignment
Parameter Sensor evaluation Supplied channels Short-circuit test activated
Channel with internal sensor supply 1oo2 evaluation, equivalent Channels [x...y] Enable
Fault detection
The following table presents fault detection according to the sensor supply and the parameter assignment for the short-circuit test:
Table 5- 7 Fault detection
Fault
Short-circuit within the channel pair Short-circuit with other channels or other sensor supplies Short-circuit with L+ to DIn
Short-circuit with M to DIn Discrepancy error Short-circuit with L+ to USn Short-circuit with M to USn or defective
Fault detection Internal sensor supply and short-circuit test activated
No Yes*
Yes* / Yes (for channel whose short-circuit test is activated) Yes* Yes Yes Yes
*) Fault detection only if signals are corrupted. That is, the read signal differs from the sensor signal (discrepancy error). If there is no signal corruption with respect to the sensor signal, fault detection is not possible and is not required from a safety standpoint.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
43
Applications of the F-I/O module 5.4 Application 3: Safety mode SIL3/Cat.4/PLe
5.4.2
Use case 3.2 (SIL3/Cat.4/PLe)
Wiring diagram connecting a non-equivalent sensor
A non-equivalent sensor is connected to two inputs of the F-module for each process signal (1oo2 evaluation, non-equivalent).
You can also supply the sensor by means of an external sensor supply.
The figure below shows an example of the pin assignment of the fail-safe digital input module F-DI 16x24VDC with connection of a non-equivalent sensor.
Backplane bus interface Microcontroller 1
Microcontroller 2 Reverse polarity protection
Image 5-6 One non-equivalent sensor connected, internal sensor supply (top) or external sensor supply (bottom)
WARNING To achieve SIL3/Cat.4/PLe using this wiring, you must use a suitably qualified sensor.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
44
Manual, 01/2016, A5E03858068-AA
Applications of the F-I/O module 5.4 Application 3: Safety mode SIL3/Cat.4/PLe
Wiring diagram connecting two single-channel sensors non-equivalent
Two single-channel sensors are connected non-equivalent to two inputs of the F-module for each process signal (1oo2 evaluation). You can also supply one or both sensors by means of an external sensor supply. The figure below shows an example of the pin assignment of the fail-safe digital input module F-DI 16x24VDC with non-equivalent connection of two single-channel sensors.
Backplane bus interface Microcontroller 1
Microcontroller 2 Reverse polarity protection
Image 5-7 Two single-channel sensors connected non-equivalently, internal sensor supply (top) or external sensor supply (bottom)
WARNING To achieve SIL3/Cat.4/PLe using this wiring, you must use a suitably qualified sensor.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
45
Applications of the F-I/O module 5.4 Application 3: Safety mode SIL3/Cat.4/PLe
Parameter assignment
Assign the following parameters for the corresponding channel:
Table 5- 8 Parameter assignment
Parameter Sensor evaluation Supplied channels
Short-circuit test activated
Channel with internal sensor supply 1oo2 evaluation, non-equivalent Channels [x...y] · Disable · Enable*
Channel with external sensor supply
None Disable
*) optional. The selection of an internal sensor supply, however, is required for using the short-circuit test.
Fault detection
The following table presents fault detection according to the sensor supply and the parameter assignment for the short-circuit test:
Table 5- 9 Fault detection
Fault Short-circuit within the channel pair, with other channels or other sensor supplies Short-circuit with L+ to DIn Short-circuit with M to DIn Discrepancy error Short-circuit with L+ to USn
Short-circuit with M to USn or defective
Fault detection Yes
yes* / yes (for channel whose short-circuit test is activated) Yes* Yes
Yes, if internal sensor supply is used and short-circuit test activated
Yes, if internal sensor supply is activated
*) Fault detection only if signals are corrupted. That is, the read signal differs from the sensor signal (discrepancy error). If there is no signal corruption with respect to the sensor signal, fault detection is not possible and is not required from a safety standpoint.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
46
Manual, 01/2016, A5E03858068-AA
Interrupts/diagnostic messages
6
6.1
Status and error displays
LED displays
Image 6-1 LED displays of the F-DI 16x24VDC module
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedies for diagnostic alarms can be found in section Diagnostic alarms (Page 51).
WARNING The RUN, ERROR LEDs and channel status/channel diagnostics LEDs of the inputs are not designed as safety-related LEDs and therefore may not be evaluated for safety-related activities.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
47
Interrupts/diagnostic messages 6.1 Status and error displays
RUN and ERROR LEDs
Table 6- 1 RUN and ERROR status and error displays
LED
RUN
ERROR
Off
Off
Flashing
Off
On
Off
Off
Flashing
On
Flashing
Flashing Flashing /
Alternately flashing
Meaning
Remedy
Missing or insufficient voltage on the backplane · Switch on the CPU and/or the system pow-
bus
er supply modules.
· Check whether the module is correctly plugged into the U-connector.
· Check whether too many modules are plugged in.
Module starts up and flashes up to the valid
---
parameter assignment.
Module parameters are assigned and module addressed.
Firmware is being updated.
Indicates diagnostic interrupts:
· Module fault (for example, supply voltage too high)
· Channel fault (for example, frequency too high).
· PROFIsafe communication error Operation in S7-1500 F-CPUs: At least one channel is waiting for user acknowledgment. Hardware defective.
Evaluate the diagnostics and eliminate or acknowledge the error. It may be necessary to remove and re-insert the module.
Replace the module.
· Operation in S7-1500 F-CPUs: The F-
Acknowledge the error (see manual SIMATIC
module expects user acknowledgment after Safety - Configuring and Programming
a module error. · Operation in S7-300/400 F-CPUs: At least
(http://support.automation.siemens.com/WW/vi ew/en/54110126)).
one channel is waiting for user acknowl-
edgment.
PWR LED
Table 6- 2 PWR status display
PWR LED Off On
Meaning Supply voltage L+ missing
Supply voltage L+ available
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
48
Manual, 01/2016, A5E03858068-AA
Interrupts/diagnostic messages 6.1 Status and error displays
CHx LED
Table 6- 3 Display channel status/channel diagnostics
Status CHx
Diagnostics CHx
Off
Off
On
Off
Off
On
/
Alternately flashing
Meaning Process signal = 0 and no channel diagnostics* Process signal = 1 and no channel diagnostics Process signal = 0 and channel diagnostics Channel waiting for user acknowledgment
* Operation in S7-300/400 F-CPUs only: If necessary, wait for user acknowledgment, if an additional channel is also waiting for user acknowledgment due to an error that occurred later.
CHx/Error LED with PROFIsafe address assignment
Table 6- 4 Channel status/channel diagnostics/Error display with PROFIsafe address assignment
Status CHx
Off
All are flashing
Diagnostics CHx
All on
Off
ERROR Meaning
Flashing Flashing
The PROFIsafe address does not match the configured PROFIsafe address
Identification of the F-module when assigning the PROFIsafe address
CHx/RUN/ERROR LED if supply voltage error occurs
Table 6- 5 Channel status/channel diagnostics/RUN/ERROR display if supply voltage error occurs
CHx status
Diagnostics CHx
Off
On
RUN On
ERROR Meaning
Flashing
Supply voltage too high or too low.
· Operation in S7-1500 F-CPUs: Module is waiting for user acknowledgment.
· Operation in S7-300/400 F-CPUs: Module is automatically reintegrated after the correction of the error.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
49
Interrupts/diagnostic messages 6.2 Interrupts
6.2
Interrupts
Introduction
The F-DI 16x24VDC fail-safe digital input module supports diagnostic interrupts.
Diagnostic interrupt
The F-module generates a diagnostic interrupt for each diagnostic alarm described in section Diagnostic alarms (Page 51).
The table below provides an overview of the diagnostic interrupts of the F-module . The diagnostic interrupts are assigned either to one channel or the entire F-module.
Table 6- 6 Diagnostic interrupts of the F-DI 16x24VDC
Diagnostic interrupt
Overtemperature Parameter error Supply voltage missing Mismatch of safety destination address (F_Dest_Add) Safety destination address not valid (F_Dest_Add) Safety source address not valid (F_Source_Add) Safety watchdog time value is 0 ms (F_WD_Time) Parameter F_SIL exceeds SIL from specific device application Parameter F_CRC_Length does not match the generated values Version of F-parameter set incorrectly CRC1 fault Save iParameter watchdog time exceeded Restore iParameter watchdog time exceeded Inconsistent iParameters (iParCRC error) F_Block_ID not supported Transmission error: Inconsistent data (CRC error) Transmission error: Timeout (watchdog time 1 or 2 expired) Module is defective Watchdog tripped Invalid/inconsistent firmware present Discrepancy failure, channel state 0/0 Discrepancy failure, channel state 0/1 Discrepancy failure, channel state 1/0 Discrepancy failure, channel state 1/1 Input signal not recorded unique
Fault code
5D 16D 17D 64D 65D 66D 67D 68D 69D 70D 71D 73D 74D 75D 76D 77D 78D 256D 259D 283D 768D 769D 770D 771D 773D
Signaled in application
1, 2, 3
Scope of diagnostic interrupt
F-module
Configurable No
2, 3
Channel
1, 2, 3
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
50
Manual, 01/2016, A5E03858068-AA
Diagnostic interrupt
Internal sensor supply short-circuit to P Overload or internal sensor supply short-circuit to ground Channel failure acknowledgment F-address memory not accessible Sensor signal flutters Frequency too high Undertemperature Input shorted to P Supply voltage too high Supply voltage too low
6.3
Diagnostic alarms
Interrupts/diagnostic messages 6.3 Diagnostic alarms
Fault code
774D 775D 779D 781D 784D 785D 786D 796D 801D 802D
Signaled in application
Scope of diagnostic interrupt
Configurable Yes
F-module No
1
Channel
Yes
No
F-module
Channel
Yes
F-module No
Diagnostic alarms
Module faults are indicated as diagnostics (module status).
Once the fault is eliminated, the F-module must be reintegrated in the safety program. For additional information on passivation and reintegration of F-I/O, refer to the SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126) manual.
Table 6- 7 Diagnostic alarms of the F-DI 16x24VDC
Diagnostic alarm Overtemperature
Parameter error
Fault code 5D
16D
Meaning An excessively high temperature was measured in the F-module.
Parameter errors include: · The F-module cannot use the parame-
ters (unknown, invalid combination, etc.). · The F-module parameters have not been configured.
Remedy
Operate the F-module within the specified temperature range (see Technical specifications (Page 57)) Once the temperature has been reduced and returns to the specified range, the F-module must be removed and inserted or the power switched OFF and ON.
Correct the parameter assignment.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
51
Interrupts/diagnostic messages 6.3 Diagnostic alarms
Diagnostic alarm Supply voltage missing
Fault code
17D
Mismatch of safety destina- 64D tion address (F_Dest_Add)
Safety destination address 65D not valid (F_Dest_Add)
Safety source address not 66D valid (F_Source_Add)
Safety watchdog time value is 67D 0 ms (F_WD_Time)
Parameter F_SIL exceeds 68D SIL from specific device application
Parameter F_CRC_Length 69D does not match the generated values
Version of F-parameter set 70D incorrectly
CRC1 fault
71D
Save iParameter watchdog 73D time exceeded
Restore iParameter watchdog 74D time exceeded
Inconsistent iParameters
75D
(iParCRC error)
F_Block_ID not supported
76D
Transmission error: Incon- 77D sistent data (CRC error)
Transmission error: Timeout 78D (watchdog time 1 or 2 expired)
Meaning
Remedy
Missing or insufficient supply voltage L+
· Check supply voltage L+ at the front connector
· Check the front connector
The firmware of the F-module has detected · Check the parameter assignment
a different F-destination address.
of the PROFIsafe driver and the
The firmware of the F-module has detected
PROFIsafe address assigned to
an illegal different F-destination address.
the F-module.
The firmware of the F-module has detected · Assign the PROFIsafe address to
a different F-source address.
the F-module (again).
The firmware of the F-module has detected
an invalid watchdog time.
The firmware of the F-module has detected a discrepancy between the SIL setting of the communication and the application.
The firmware of the F-module has detected a discrepancy in the CRC length.
The firmware of the F-module has detected an incorrect F_Par_Version or an invalid F_Block_ID.
The firmware of the F-module has detected inconsistent F-parameters.
iPar server does not respond to "save IPar" within 4.4 minutes.
iPar server does not respond to "restore IPar" within 4.4 minutes.
The firmware of the F-module has detected inconsistent iParameters.
The firmware of the F-module has detected an incorrect F_block_ID.
The firmware of the F-module has detected a CRC error.
Possible causes:
Check the parameter assignment of the iPar server. Check the parameter assignment of the iPar server. Check the parameter assignment.
Check the parameter assignment of the PROFIsafe driver.
· Check the communication connection between the F-module and F-CPU.
· The communication between the F-CPU · Eliminate the electromagnetic
and F-module is disturbed.
interference.
· Impermissibly high electromagnetic interference is present.
· An error occurred in the sign-of-life monitoring.
The firmware of the F-module has detected · Check the parameter assign-
a timeout.
ment.
Possible causes:
· Ensure that communication is
· The F-monitoring time is set incorrectly.
functioning correctly.
· A bus fault is present.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
52
Manual, 01/2016, A5E03858068-AA
Interrupts/diagnostic messages 6.3 Diagnostic alarms
Diagnostic alarm Module is defective
Watchdog tripped
Invalid/inconsistent firmware present
Discrepancy failure, channel state 0/0 Discrepancy failure, channel state 0/1 Discrepancy failure, channel state 1/0 Discrepancy failure, channel state 1/1
Fault code 256D
259D
283D
768D 769D 770D 771D
Meaning
Remedy
Possible causes:
· Impermissibly high electromagnetic interference is present.
· Eliminate the interference. The module must then be pulled and plugged, or the power switched OFF and ON.
· The F-module has detected an internal · If the F-module cannot be put
error and has reacted in a safety-related back into operation, consider re-
manner.
placing it.
Possible causes:
· Impermissibly high electromagnetic interference is present.
· Eliminate the interference. The module must then be pulled and plugged, or the power switched OFF and ON.
· The F-module has detected an internal · If the F-module cannot be put
error and has reacted in a safety-related back into operation, consider re-
manner.
placing it.
The firmware is incomplete and/or firmware · Perform a firmware update for all
added to the F-module is incompatible.
parts of the F-module and note
This leads to errors or functional limitations when operating the F-module.
any error messages.
· Use only firmware versions re-
leased for this F-module.
Possible causes:
· The process signal is faulty.
· Check the process signal.
· The sensor is defective.
· Replace the sensor.
· The configured discrepancy time is too · Check the parameter assignment
low.
of the discrepancy time.
· There is a short-circuit between an
· Check the process wiring.
unconnected sensor cable and the sen-
sor supply cable.
· Wire break in connected sensor cable or the sensor supply cable
· An error occurred during the discrepancy check.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
53
Interrupts/diagnostic messages 6.3 Diagnostic alarms
Diagnostic alarm
Input signal not recorded unique
Fault code
773D
Internal sensor supply short- 774D circuit to P
Overload or internal sensor 775D supply short-circuit to ground
Meaning
Remedy
An error occurred during the plausibility check of the input signal between the processors.
Possible causes:
· The input signal is faulty, e.g., as a result of impermissibly high electromagnetic interference.
· Use shielded cables to reduce the EMC effects.
· Reduce the input frequency. · Check the wiring of the sensor.
· A high-frequency input signal is present, e.g., due to mutual interference of sensors or the signal being above the sampling frequency of the input signal.
· A momentary interruption/short-circuit of the sensor cable (loose contact) is present.
· The sensor/switch is bouncing.
Possible causes:
· There is a short-circuit of the internal sensor supply with L+.
· There is a short-circuit of two sensor supplies.
· The capacitance of the connected sensor for the configured test time is too high.
· Eliminate the short-circuit in the process wiring.
· Check the configured test time and the process wiring.
· Replace the sensor.
· The sensor is defective.
Possible causes:
· The internal sensor supply is shortcircuited to ground.
· Impermissibly high electromagnetic interference is present.
· Eliminate the overload.
· Eliminate the short-circuit in the process wiring.
· Check the "Sensor supply" parameter.
· Eliminate/reduce the electromagnetic interference.
Channel failure acknowledgment
F-address memory not accessible
779D 781D
A channel fault was detected. Confirmation is required to enable the channel.
The F-source address and F-destination address stored in the coding element cannot be accessed.
Confirm the channel fault.
Verify that the coding element is present or replace the coding element.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
54
Manual, 01/2016, A5E03858068-AA
Interrupts/diagnostic messages 6.3 Diagnostic alarms
Diagnostic alarm Sensor signal flutters
Frequency too high Undertemperature Input shorted to P Supply voltage too high Supply voltage too low
Fault code 784D
785D 786D 796D 801D 802D
Meaning
Remedy
Too many signal changes have occurred · within the time configured with the "Monitor-
ing window" parameter. ·
· The "Monitoring window" parameter
setting is too high.
·
· The "Number of signal changes" parameter setting is too low.
·
·
A momentary interruption/short-circuit of the sensor cable (loose contact) is pre-
·
sent.
Check the "Monitoring window" parameter.
Check the "Number of signal changes" parameter.
Check the process wiring.
Eliminate/reduce the electromagnetic interference.
Replace the sensor.
· Impermissibly high electromagnetic interference is present.
· The sensor/switch is bouncing.
· The sensor is defective.
The switching frequency of the encoder is too high. The minimum permissible temperature limit has been violated.
The input signal is short-circuited to L+. The supply voltage is too high. The supply voltage is too low.
Reduce the switching frequency of the sensor.
Operate the F-module within the specified temperature range (see Technical specifications (Page 57))
Eliminate the short-circuit.
Check the supply voltage.
Check the supply voltage.
Supply voltage outside the nominal range
If the supply voltage L+ is outside the specified value range, the ERROR LED flashes and the module is passivated.
When the voltage is then recovered (level must remain within the specified value for at least 1 minute, see Technical specifications (Page 57)), the ERROR LED stops flashing. The module remains passivated and waits for user acknowledgment.
Behavior in case of cross circuit/short-circuit to the sensor supply
When internal sensor supply is configured and short-circuit test is deactivated, short-circuits to ground at the sensor supplies are detected. Channels for which the relevant sensor supply is configured will be passivated.
When internal sensor supply is configured and short-circuit test is enabled, short-circuits to ground and potential at the sensor supply are detected. Channels for which the relevant sensor supply is configured will be passivated.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
55
Interrupts/diagnostic messages 6.3 Diagnostic alarms
Special features for fault detection
The detection of certain faults (short-circuits or discrepancy errors, for example) depends on the application, the wiring, and the parameter assignment of the short-circuit test and the sensor power supply. For this reason, tables on fault detection for the applications are presented under Applications of the F-I/O module (Page 32).
Generally applicable information on diagnostics
Information on diagnostics that pertains to all F-modules (for example, readout of diagnostics functions or passivation of channels) is available in the SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126) manual.
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
56
Manual, 01/2016, A5E03858068-AA
Technical specifications
7
Technical specifications of F-DI 16x24VDC
General information Product type designation Firmware version · FW update possible
Product function I&M data Engineering with STEP 7 TIA Portal can be configured/integrated as of version Operating mode DI Supply voltage Rated value (DC) Low limit of permitted range (DC) High limit of permitted range (DC) Reverse polarity protection Input current Current consumption (rated value) Sensor supply Number of outputs Short-circuit protection
24 V sensor supply 24 V Short-circuit protection Output current, max.
Power Power consumption from the backplane bus Power loss Power loss, typ. Address range Address space per module Address space per module, max.
6ES7526-1BH00-0AB0
F-DI 16x24VDC
Yes
Yes; I&M0 to I&M3
V13 SP1 with HSP0086
Yes
24 V 19.2 V 28.8 V Yes
50 mA
4 Yes; electronic (response threshold 0.7 A to 1.8 A)
Yes; min. L+ (-1.5 V) Yes 300 mA; max. 100 mA with vertical mounting position
0.9 W
4.6 W
9 bytes
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
57
Technical specifications
Digital inputs Number of inputs m/p-reading Input characteristic curve according to IEC 61131, Type 1 Input voltage Rated value (DC) For "0" signal For "1" signal Input current For "1" signal, typ. Input delay (for rated value of input voltage) For standard inputs
· Configurable
6ES7526-1BH00-0AB0
16 Yes; p-reading Yes
24 V -30 ... +5 V +15 ... +30 V
3.7 mA
Yes
· For "0" to "1", min.
0.4 ms
· For "0" to "1", max.
20 ms
· For "1" to "0", min.
0.4 ms
· For "1" to "0", max.
20 ms
Cable length shielded, max. unshielded, max.
1000 m 500 m
Interrupts/diagnostics/status information
Interrupts Diagnostic interrupt Hardware interrupt Diagnostic alarms Diagnostics Monitoring of supply voltage Wire break Short-circuit Group error Diagnostics display LED RUN LED ERROR LED Channel status display For channel diagnostics For module diagnostics
Yes No
Yes Yes No Yes Yes
Yes; green LED Yes; red LED Yes; green LED Yes; red LED Yes; red LED
Electrical isolation
Electrical isolation, channels Between channels and backplane bus Permitted potential difference Between different circuits
Yes 75 V DC/60 V AC (basic insulation)
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
58
Manual, 01/2016, A5E03858068-AA
Technical specifications
Insulation Insulation test voltage Standards, approvals, certificates Maximum achievable safety class in safety mode Performance level according to EN ISO 138491:2008 SIL according to IEC 61508 Low demand mode: PFDavg according to SIL3 High demand/continuous mode: PFH according to SIL3 Environmental conditions Ambient temperature in operation Horizontal installation, min. Horizontal installation, max. Vertical installation, min. Vertical installation, max. Dimensions Width Height Depth Weights Weight, approx.
6ES7526-1BH00-0AB0
707 VDC (type test)
PLe SIL 3 < 5.00E-05 < 1.00E-09 1/h
0 °C 60 °C 0 °C 40 °C
35 mm 147 mm 129 mm
280 g
Dimension drawing
See system manual S7-1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
59
Response times
A
Introduction
The next section shows the response times of the digital input module F-DI 16x24VDC. The response times of the digital input module F-DI 16x24VDC are included in the calculation of the F-system response time.
Definition of cycle time for fail-safe digital inputs
The cycle time indicates the time between the occurrence of an event and the transfer to the backplane bus.
Times required for the calculation
Max. cycle time: Tcycle = 5 ms Max. acknowledgment time (Device Acknowledgment Time): TDAT = 10 ms
The maximum response time in the case of fault (One Fault Delay Time, OFDT) is equivalent to the maximum response time with no faults (Worst Case Delay Time, WCDT).
Maximum response time with no faults (Worst Case Delay Time, WCDT) during 1oo1 evaluation
The following formula applies to a sensor supply without short-circuit test: t <= 2 * cycle time + input delay The following formula applies to a sensor supply with short-circuit test: t <= 2 * cycle time + input delay + T1 + T2
T1 Time for short-circuit test T2 Startup time of sensors after the short-circuit test
Maximum response time with no faults (Worst Case Delay Time, WCDT) during 1oo2 evaluation
The following formula applies to a sensor supply without short-circuit test: t <= 2 * cycle time + input delay+ discrepancy time* * Obsolete with discrepancy behavior "Supply value 0" The following formula applies to a sensor supply with short-circuit test: t <= 2 * cycle time + input delay+ max (T1p + T2p, T1s + T2s) + discrepancy time* * Obsolete with discrepancy behavior "Supply value 0"
T1p Test time for the sensor supply of sensor 1 T2p Startup time of sensor after the short-circuit test (sensor 1) T1s Test time for the sensor supply of sensor 2 T2s Startup time of sensor after the short-circuit test (sensor 2)
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
60
Manual, 01/2016, A5E03858068-AA
Response times
Maximum response time to external short-circuits
t <= max (120 ms, 2 * (n × cycle time) + sum [x=0...3](T1x + T2x)) + cycle time
T1x Time for the sensor test
T2x Startup time of sensors after the short-circuit test
n
Number of sensor supplies with activated short-circuit test
x
Sensor supply
Maximum response time to discrepancy errors during 1oo2 evaluation
t <= 2 * cycle time + input delay + discrepancy time + 2 * max (T1p + T2p, T1s + T2s)
n
Number of sensor supplies with activated short-circuit test
T1x Time for the sensor test
T2x Startup time of sensors after the short-circuit test
T1p Test time for the sensor supply of sensor 1
T2p Startup time of sensor after the short-circuit test (sensor 1)
T1s Test time for the sensor supply of sensor 2
T2s Startup time of sensor after the short-circuit test (sensor 2)
x
Sensor supply
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
61
Open Source Software
B
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
62
Manual, 01/2016, A5E03858068-AA
Open Source Software
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
63
Open Source Software
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
64
Manual, 01/2016, A5E03858068-AA
Open Source Software
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
65
Open Source Software
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
66
Manual, 01/2016, A5E03858068-AA
Open Source Software
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
67
Open Source Software
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
68
Manual, 01/2016, A5E03858068-AA
Open Source Software
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
69
Open Source Software
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
70
Manual, 01/2016, A5E03858068-AA
Open Source Software
Digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Manual, 01/2016, A5E03858068-AA
71
SIMATIC S7-1500/ET 200MP Produktinformation zur Dokumentation des Digitaleingabemoduls F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Produktinformation
Security-Hinweise
Siemens bietet Produkte und Lösungen mit Industrial Security-Funktionen an, die den sicheren Betrieb von Anlagen, Systemen, Maschinen und Netzwerken unterstützen. Um Anlagen, Systeme, Maschinen und Netzwerke gegen Cyber-Bedrohungen zu sichern, ist es erforderlich, ein ganzheitliches Industrial Security-Konzept zu implementieren (und kontinuierlich aufrechtzuerhalten), das dem aktuellen Stand der Technik entspricht. Die Produkte und Lösungen von Siemens formen einen Bestandteil eines solchen Konzepts. Die Kunden sind dafür verantwortlich, unbefugten Zugriff auf ihre Anlagen, Systeme, Maschinen und Netzwerke zu verhindern. Diese Systeme, Maschinen und Komponenten sollten nur mit dem Unternehmensnetzwerk oder dem Internet verbunden werden, wenn und soweit dies notwendig ist und nur wenn entsprechende Schutzmaßnahmen (z. B. Firewalls und/oder Netzwerksegmentierung) ergriffen wurden. Weiterführende Informationen zu möglichen Schutzmaßnahmen im Bereich Industrial Security finden Sie unter (https://www.siemens.com/industrialsecurity). Die Produkte und Lösungen von Siemens werden ständig weiterentwickelt, um sie noch sicherer zu machen. Siemens empfiehlt ausdrücklich, Produkt-Updates anzuwenden, sobald sie zur Verfügung stehen und immer nur die aktuellen Produktversionen zu verwenden. Die Verwendung veralteter oder nicht mehr unterstützter Versionen kann das Risiko von Cyber-Bedrohungen erhöhen. Um stets über Produkt-Updates informiert zu sein, abonnieren Sie den Siemens Industrial Security RSS Feed unter (https://www.siemens.com/industrialsecurity).
Inhalt Diese Produktinformation enthält Ergänzungen und Korrekturen zur Dokumentation des Digitaleingabemoduls F-DI 16x24VDC (6ES7526-1BH00-0AB0). Die Produktinformation ist Bestandteil des gelieferten Produkts. Die darin enthaltenen Aussagen sind in Zweifelsfällen als aktueller anzusehen.
Unrestricted © Siemens AG 2020. Alle Rechte vorbehalten
A5E48022181-AA, 06/2020
1
Reaktionszeiten
Definition Reaktionszeit für fehlersichere Digitaleingänge Die Reaktionszeit gibt die Zeit des betrachteten Kanals zwischen einem Signalwechsel am Digitaleingang bis zum sicheren Bereitstellen des Sicherheitstelegramms am Rückwandbus an.
Maximale Reaktionszeit bei externen Kurzschlüssen max. Reaktionszeit = Eingangsverzögerung + T1 + 158 ms + 2 * Summe[x=0..3](T1x + T2x * korr)
T1 = Zeit für den Kurzschlusstest für den betrachteten Kanal x = aktivierte Geberversorgung T1x = Zeit für den Kurzschlusstest T2x = Hochlaufzeit des Gebers nach dem Kurzschlusstest korr = Korrekturfaktor = 1,03 Summenterm = Summe [x=0..3](T1x + T2x * korr): Summe aller Kurzschlusstest- und Hochlaufzeiten der aktivierten Geberversorgungen
Beispiele
Nachfolgend finden Sie ein Beispiel für die Berechnung der max. Reaktionszeit der F-DI 16x24VDC mit voreingestellter Parametrierung.
Kanal
0 - 3 4 - 7 8 - 11 12 15
Eingangsverzöger ung [ms] 3,2 3,2 3,2 3,2
Kurzschlusstest freigegeben freigegeben freigegeben freigegeben
T1 [ms] 4,2 4,2 4,2 4,2
T2 [ms] 4,2 4,2 4,2 4,2
Geberversorgun g 0 1 2 3
Summenterm [ms] 34,1
max. Reaktionszeit [ms] 233,6 233,6 233,6 233,6
Beispielrechnung: Summenterm = (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) = 34,1 ms
Nachfolgend finden Sie Beispiele für die Berechnung der max. Reaktionszeit der F-DI 16x24VDC in Abhängigkeit von der Parametrierung.
Kanal
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
Eingangsverzöger ung [ms] 0,4 0,4 3,2 3,2 6,4 10 12,8 12,8 20 20 20 20 0,4 1,6 10 20
Kurzschluss- T1 T2 Geberversorgun
test
[ms] [ms] g
freigeben
3,7 3,7 0
freigeben
100 20 1
freigeben
2000 2000 2
sperren
-
-
3
Summenterm [ms] 4188,1
max. Reaktionszeit [ms] 8538,3 8538,3 8541,1 8541,1 8640,6 8644,2 8647,0 8647,0 10554,2 10554,2 10554,2 10554,2 - *) - *) - *) - *)
*) Bei deaktiviertem Kurzschlusstest werden externe Kurzschlüsse nicht erkannt.
Unrestricted
2
Produktinformation zur Dokumentation des Digitaleingabemoduls F-DI 16x24VDC (6ES7526-1BH00-0AB0) A5E48022181-AA, 06/2020
Beispielrechnung: Summenterm = (3,7 ms + 3,7 ms * 1,03) + (100 ms + 20 ms * 1,03) + (2000 ms + 2000 ms * 1,03) = 4188,1 ms
Kanal
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
Eingangsverzögerung [ms] 0,4 0,4 3,2 3,2 6,4 10 12,8 12,8 20 20 20 20 0,4 1,6 10 20
Kurzschlusstest freigeben
freigeben
T1 [ms] 20
500
T2 [ms] 20
500
Geberversorgun g 0
2
Summenterm [ms] 1055,6
max. Reaktionszeit [ms] 2289,6 2289,6 2292,4 2292,4 2295,6 2299,2 2302,0 2302,0 2789,2 2789,2 2789,2 2789,2 2769,6 2770,8 2779,2 2789,2
Beispielrechnung: Summenterm = (20 ms + 20 ms * 1,03) + (500 ms + 500 ms * 1,03) = 1055,6 ms
Siemens AG Large Drives Applications Vogelweiherstr. 1-15 90441 NÜRNBERG DEUTSCHLAND
UPrnordeustkrtiicntfeodrmPraotdiounktzinufroDromkautmioennztuartiDonokduems eDnigtaittaiolenindgeasbDeimgiotadluelisngF-aDbIe1m6oxd2u4lVsDFC-D(I61E6Sx72542V6D-1CB(H60E0S-705A2B60-)1BH00-0AB0)
AA55EE4488002222118811--AAAA,, 0066//22002200
3
SIMATIC S7-1500/ET 200MP Product information for documentation of the digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Product Information
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks. In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept. Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place. For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity). Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats. To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Content This Product Information contains additional information and corrections relating to the documentation on the digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0). The Product Information is part of the product supplied. The statements provided in it should be considered more up-to-date than other documentation if uncertainties arise.
Unrestricted
4
© Siemens AG 2020. All rights reserved A5E48022181-AA, 06/2020
Response times
Definition of response time for fail-safe digital inputs The response time of the considered channel represents the interval between a signal change at the digital input and reliable availability of the safety frame on the backplane bus.
Maximum response time with external short-circuits Max. response time = Input delay + T1 + 158 ms + 2 * Sum[x=0..3](T1x + T2x * corr)
T1 = Short-circuit test time for the considered channel x = activated sensor supply T1x = Time for the short-circuit test T2x = Startup time of the sensor after the short-circuit test corr = correction factor = 1.03 Sum term = sum [x=0..3](T1x + T2x * corr): Sum of all short-circuit tests and startup times of the active sensor supplies
Examples
Below you will find an example for the calculation of the maximum response time of the F-DI 16x24VDC with default parameter assignment.
Chann Input delay [ms] el 0 to 3 3.2 4 to 7 3.2 8 to 3.2 11 12 to 3.2 15
Short-circuit test enabled enabled enabled
T1 [ms] 4.2 4.2 4.2
T2 [ms] 4.2 4.2 4.2
Sensor supply
0 1 2
enabled
4.2 4.2 3
Sum term [ms] 34.1
max. response time [ms] 233.6 233.6 233.6
233.6
Sample calculation: Sum term = (4.2 ms + 4.2 ms * 1.03) + (4.2 ms + 4.2 ms * 1.03) + (4.2 ms + 4.2 ms * 1.03) + (4.2 ms + 4.2 ms * 1.03) = 34.1 ms
Below you will find an example for the calculation of the maximum response time of the F-DI 16x24VDC depending on the parameter assignment.
Chann Input delay [ms] el
0
0.4
1
0.4
2
3.2
3
3.2
4
6.4
5
10
6
12.8
7
12.8
8
20
9
20
10
20
11
20
12
0.4
13
1.6
14
10
15
20
Short-circuit T1 T2 Sensor supply
test
[ms] [ms]
enable
3.7 3.7 0
enable
100 20 1
enable
2000 2000 2
disable
-
-
3
Sum term [ms] 4188.1
max. response time [ms] 8538.3 8538.3 8541.1 8541.1 8640.6 8644.2 8647.0 8647.0 10554.2 10554.2 10554.2 10554.2 - *) - *) - *) - *)
*) With short-circuit test deactivated, external short-circuits are not detected.
Unrestricted Product information for documentation of the digital input module F-DI 16x24VDC (6ES7526-1BH00-0AB0)
A5E48022181-AA, 06/2020
5
Sample calculation: Sum term = (3.7 ms + 3.7 ms * 1.03) + (100 ms + 20 ms * 1.03) + (2000 ms + 2000 ms * 1.03) = 4188.1 ms
Chann Input delay [ms] el
0
0.4
1
0.4
2
3.2
3
3.2
4
6.4
5
10
6
12.8
7
12.8
8
20
9
20
10
20
11
20
12
0.4
13
1.6
14
10
15
20
Short-circuit T1 T2 Sensor supply
test
[ms] [ms]
enable
20 20 0
enable
500 500 2
Sum term [ms] 1055.6
Sample calculation: Sum term = (20 ms + 20 ms * 1.03) + (500 ms + 500 ms * 1.03) = 1055.6 ms
max. response time [ms] 2289.6 2289.6 2292.4 2292.4 2295.6 2299.2 2302.0 2302.0 2789.2 2789.2 2789.2 2789.2 2769.6 2770.8 2779.2 2789.2
Siemens AG Large Drives Applications Vogelweiherstr. 1-15 90441 NÜRNBERG GERMANY
U6PAr5noErde4us8tc0rti2cint2ef1od8rm1-aAtAio,n06fo/2r 0d2o0cumentPartioodnuoctf
itnhfeordmigaittaiol ninfpourtdmocoudmuleenFt-aDtiIo1n6oxf24thVeDdCig(6itEaSl 7in5p2u6t-1mBoHd0u0le-0FA-DB0I 1) 6x24VDC (6ES7526-1BH00-0AB0) A5E48022181-AA, 06/2020
SIMATIC S7-1500/ET 200MP Information produit pour la documentation du module d'entrées TOR F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Information produit
Note relative à la sécurité
Siemens commercialise des produits et solutions comprenant des fonctions de sécurité industrielle qui contribuent à une exploitation sûre des installations, systèmes, machines et réseaux. Pour garantir la sécurité des installations, systèmes, machines et réseaux contre les cybermenaces, il est nécessaire de mettre en oeuvre - et de maintenir en permanence - un concept de sécurité industrielle global et de pointe. Les produits et solutions de Siemens constituent une partie de ce concept. Il incombe aux clients d'empêcher tout accès non autorisé à ses installations, systèmes, machines et réseaux. Ces systèmes, machines et composants doivent uniquement être connectés au réseau d'entreprise ou à Internet si et dans la mesure où cela est nécessaire et seulement si des mesures de protection adéquates (ex : pare-feu et/ou segmentation du réseau) ont été prises. Pour plus d'informations sur les mesures de protection pouvant être mises en oeuvre dans le domaine de la sécurité industrielle, rendez-vous sur (https://www.siemens.com/industrialsecurity). Les produits et solutions Siemens font l'objet de développements continus pour être encore plus sûrs. Siemens recommande vivement d'effectuer des mises à jour dès que celles-ci sont disponibles et d'utiliser la dernière version des produits. L'utilisation de versions qui ne sont plus prises en charge et la non-application des dernières mises à jour peut augmenter le risque de cybermenaces pour nos clients. Pour être informé des mises à jour produit, abonnez-vous au flux RSS Siemens Industrial Security à l'adresse suivante (https://www.siemens.com/industrialsecurity) :
Contenu Cette information produit comprend des compléments et des corrections pour la documentation du module d'entrées TOR FDI 16x24VDC (6ES7526-1BH00-0AB0). L'information produit fait partie de la livraison du produit. Les informations qui y sont contenues sont à considérer comme actuelles en cas de doute.
Unrestricted © Siemens AG 2020. Tous droits réservés
A5E48022181-AA, 06/2020
7
Temps de réaction
Définition du temps de réaction pour les entrées TOR de sécurité Le temps de réaction correspond au temps qui s'écoule entre un changement de signal sur l'entrée TOR et la mise à disposition du télégramme de sécurité sur le bus interne.
Temps de réaction maximal en cas de court-circuit externe Temps de réaction max. = retard d'entrée + T1 + 158 ms + 2 * somme[x=0..3](T1x + T2x * corr)
T1 = temps de test de court-circuit pour la voie correspondante x = alimentation de capteur activée T1x = temps de test de court-circuit T2x = temps de démarrage du capteur après le test de court-circuit corr = facteur de correction = 1,03 Terme de somme = somme [x=0..3](T1x + T2x * corr) : Somme de tous les temps de test de court-circuit et de démarrage des alimentations capteur activées
Exemples
Vous trouvez ci-après un exemple de calcul du temps de réaction max. du module F-DI 16x24VDC avec un paramétrage par défaut.
Voie
0 - 3 4 - 7 8 - 11 12 15
Retard à l'entrée [ms] 3,2 3,2 3,2 3,2
Test de court-circuit Validée Validée Validée Validée
T1 [ms] 4,2 4,2 4,2 4,2
T2 [ms] 4,2 4,2 4,2 4,2
Alimentation du capteur 0 1 2 3
Terme de somme [ms] 34,1
Temps de réaction max. [ms] 233,6 233,6 233,6 233,6
Exemple de calcul : Terme de somme = (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) = 34,1 ms
Vous trouvez ci-après des exemples de calcul du temps de réaction max. du module F-DI 16x24VDC en fonction du paramétrage.
Voie
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
Retard à l'entrée [ms] 0,4 0,4 3,2 3,2 6,4 10 12,8 12,8 20 20 20 20 0,4 1,6 10 20
Test de court-circuit valider
valider
valider
Inhiber
T1 T2 Alimentation du [ms] [ms] capteur 3,7 3,7 0
100 20 1
2000 2000 2
-
-
3
Terme de somme [ms] 4188,1
Temps de réaction max. [ms] 8538,3 8538,3 8541,1 8541,1 8640,6 8644,2 8647,0 8647,0 10554,2 10554,2 10554,2 10554,2 - *) - *) - *) - *)
*) Les courts-circuits externes ne sont pas détectés si le test de court-circuit est désactivé.
Unrestricted
8
Information produit pour la documentation du module d'entrées TOR F-DI 16x24VDC (6ES7526-1BH00-0AB0) A5E48022181-AA, 06/2020
Exemple de calcul : Terme de somme = (3,7 ms + 3,7 ms * 1,03) + (100 ms + 20 ms * 1,03) + (2000 ms + 2000 ms * 1,03) = 4188,1 ms
Voie
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
Retard à l'entrée [ms] 0,4 0,4 3,2 3,2 6,4 10 12,8 12,8 20 20 20 20 0,4 1,6 10 20
Test de court-circuit valider
valider
T1 [ms] 20
500
T2 [ms] 20
500
Alimentation du capteur 0
2
Terme de somme [ms] 1055,6
Temps de réaction max. [ms] 2289,6 2289,6 2292,4 2292,4 2295,6 2299,2 2302,0 2302,0 2789,2 2789,2 2789,2 2789,2 2769,6 2770,8 2779,2 2789,2
Exemple de calcul : Terme de somme = (20 ms + 20 ms * 1,03) + (500 ms + 500 ms * 1,03) = 1055,6 ms
Siemens AG Large Drives Applications Vogelweiherstr. 1-15 90441 NÜRNBERG ALLEMAGNE
UInnforermstraitcitoendpInrofodrumitaptioounr plaroddouciutmpoeunrtalatiodnocduummenotdautlieond'deuntmréoedsuTlOeRd'Fe-nDtIré1e6sxT2O4VRDFC-D(I61E6Sx72542V6D-1CB(H60E0S-705A2B60-)1BH00-0AB0)
AA55EE4488002222118811--AAAA,, 0066//22002200
9
SIMATIC S7-1500/ET 200MP Información del producto sobre la documentación del módulo de entradas digitales F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Información del producto
Información de seguridad
Siemens ofrece productos y soluciones con funciones de seguridad industrial con el objetivo de hacer más seguro el funcionamiento de instalaciones, sistemas, máquinas y redes. Para proteger las instalaciones, los sistemas, las máquinas y las redes de amenazas cibernéticas, es necesario implementar (y mantener continuamente) un concepto de seguridad industrial integral conforme al estado del arte. Los productos y las soluciones de Siemens constituyen una parte de este concepto. Los clientes son responsables de impedir el acceso no autorizado a sus instalaciones, sistemas, máquinas y redes. Dichos sistemas, máquinas y componentes solo deben estar conectados a la red corporativa o a Internet cuando y en la medida que sea necesario y siempre que se hayan tomado las medidas de protección adecuadas (p. ej. cortafuegos y segmentación de la red). Para obtener información adicional sobre las medidas de seguridad industrial que podrían ser implementadas, por favor visite (https://www.siemens.com/industrialsecurity). Los productos y las soluciones de Siemens están sometidos a un desarrollo constante con el fin de hacerlos más seguros. Siemens recomienda expresamente realizar actualizaciones en cuanto estén disponibles y utilizar únicamente las últimas versiones de los productos. El uso de versiones de los productos anteriores o que ya no sean soportadas y la falta de aplicación de las nuevas actualizaciones, puede aumentar el riesgo de amenazas cibernéticas. Para mantenerse informado de las actualizaciones de productos, recomendamos que se suscriba al Siemens Industrial Security RSS Feed en (https://www.siemens.com/industrialsecurity).
Contenido Esta información del producto contiene correcciones e información complementaria a la documentación del módulo de entradas digitales F-DI 16x24VDC (6ES7526-1BH00-0AB0). La información del producto forma parte del producto suministrado. En caso de duda, la información de producto prevalece sobre lo indicado en otras fuentes.
Unrestricted
10
© Siemens AG 2020. Reservados todos los derechos A5E48022181-AA, 06/2020
Tiempos de respuesta
Definición del tiempo de reacción para entradas digitales de seguridad El tiempo de reacción es el tiempo que transcurre desde un cambio de señal en la entrada digital hasta la entrega segura del telegrama de seguridad en el bus de fondo.
Tiempo de reacción máximo en cortocircuitos externos Tiempo de reacción máximo: retardo a la entrada + T1 + 158 ms + 2 * suma[x-0..3](T1x + T2x * corr)
T1 = tiempo de la prueba de cortocircuito del canal observado x = alimentación de sensor activada T1x = tiempo de la prueba de cortocircuito T2x = tiempo de arranque del sensor tras la prueba de cortocircuito corr = factor de corrección = 1,03 Expresión de suma: suma [x-0..3](T1x + T2x * corr): suma de todos los tiempos de prueba y arranque de las alimentaciones de sensores
Ejemplos
A continuación se muestran algunos ejemplos para calcular el tiempo de reacción máximo del F-DI 16x24VDC con la parametrización predeterminada.
Canal
0 - 3 4 - 7 8 - 11 12 15
Retardo a la entrada [ms] 3,2 3,2 3,2 3,2
Prueba de T1 cortocircuito [ms] habilitada 4,2 habilitada 4,2 habilitada 4,2 habilitada 4,2
T2 [ms] 4,2 4,2 4,2 4,2
Alimentación de sensor 0 1 2 3
Expresión de suma [ms] 34,1
Tiempo de reacción máx. [ms] 233,6 233,6 233,6 233,6
Ejemplo de cálculo: expresión de suma = (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) = 34,1 ms
A continuación se muestran algunos ejemplos para calcular el tiempo de reacción máximo del F-DI 16x24VDC HF en función de la parametrización.
Canal
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
Retardo a la entrada [ms] 0,4 0,4 3,2 3,2 6,4 10 12,8 12,8 20 20 20 20 0,4 1,6 10 20
Prueba de T1 T2 Alimentación de Expresión de
cortocircuito [ms] [ms] sensor
suma [ms]
habilitar
3,7 3,7 0
4188,1
habilitar
100 20 1
habilitar
2000 2000 2
bloquear
-
-
3
Tiempo de reacción máx. [ms] 8538,3 8538,3 8541,1 8541,1 8640,6 8644,2 8647,0 8647,0 10554,2 10554,2 10554,2 10554,2 - *) - *) - *) - *)
*) Cuando se desactiva la prueba de cortocircuito, no se detectan cortocircuitos externos.
Unrestricted Información del producto sobre la documentación del módulo de entradas digitales F-DI 16x24VDC (6ES7526-1BH00-0AB0)
A5E48022181-AA, 06/2020
11
Ejemplo de cálculo: expresión de suma = (3,7 ms + 3,7 ms * 1,03) + (100 ms + 20 ms * 1,03) + (2000 ms + 2000 ms * 1,03) = 4188,1 ms
Canal
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
Retardo a la entrada [ms] 0,4 0,4 3,2 3,2 6,4 10 12,8 12,8 20 20 20 20 0,4 1,6 10 20
Prueba de T1 T2 Alimentación de Expresión de
cortocircuito [ms] [ms] sensor
suma [ms]
habilitar
20 20 0
1055,6
habilitar
500 500 2
Tiempo de reacción máx. [ms] 2289,6 2289,6 2292,4 2292,4 2295,6 2299,2 2302,0 2302,0 2789,2 2789,2 2789,2 2789,2 2769,6 2770,8 2779,2 2789,2
Ejemplo de cálculo: expresión de suma = (20 ms + 20 ms * 1,03) + (500 ms + 500 ms * 1,03) = 1055,6 ms
Siemens AG Large Drives Applications Vogelweiherstr. 1-15 90441 NÜRNBERG ALEMANIA
U1IAn5n2foEre4rms8t0rai2ccit2óe1nd8d1e-Al pArI,no0df6ou/rc2mt0oa2cs0ioóbnredelal
pdroocduumcteontsaocbiróenladedlomcuómduelnotdaceióenntdraedl masóddiugliotadlees
eFn-DtrIa1d6axs2d4igViDtaCle(s6EFS-D7I51266x-12B4HVD00C-(06AEBS07)526-1BH00-0AB0) A5E48022181-AA, 06/2020
SIMATIC S7-1500/ET 200MP Informazioni sul prodotto relativa alla documentazione dell'unità di ingressi digitali F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Informazioni sul prodotto
Avvertenze di sicurezza
Siemens commercializza prodotti e soluzioni dotati di funzioni Industrial Security che contribuiscono al funzionamento sicuro di impianti, soluzioni, macchine e reti. Al fine di proteggere impianti, sistemi, macchine e reti da minacce cibernetiche, è necessario implementare - e mantenere continuamente - un concetto di Industrial Security globale ed all'avanguardia. I prodotti e le soluzioni Siemens costituiscono soltanto una componente imprescindibile di questo concetto. È responsabilità dei clienti prevenire accessi non autorizzati ai propri impianti, sistemi, macchine e reti. Tali sistemi, macchine e componenti dovrebbero essere connessi unicamente a una rete aziendale o a internet se e nella misura in cui detta connessione sia necessaria e solo quando siano attive appropriate misure di sicurezza (ad es. impiego di firewall e segmentazione della rete). Per ulteriori informazioni relative a misure di Industrial Security implementabili potete visitare il sito (https://www.siemens.com/industrialsecurity). I prodotti e le soluzioni Siemens vengono costantemente perfezionate per incrementarne la sicurezza. Siemens raccomanda espressamente che gli aggiornamenti dei prodotti siano effettuati non appena disponibili e che siano utilizzate le versioni più aggiornate. L'utilizzo di versioni di prodotti non più supportate ed il mancato aggiornamento degli stessi incrementa il rischio di attacchi cibernetici. Per essere informati sugli update dei prodotti, potete iscrivervi a Siemens Industrial Security RSS Feed al sito (https://www.siemens.com/industrialsecurity).
Contenuto Le presenti informazioni sul prodotto contengono integrazioni e correzioni relativa alla documentazione dell'unità di ingressi digitali F-DI 16x24VDC (6ES7526-1BH00-0AB0). Le informazioni sul prodotto sono parte integrante del prodotto fornito. e, in caso di dubbio, hanno la priorità su qualsiasi altra affermazione.
Unrestricted © Siemens AG 2020. Tutti i diritti riservati
A5E48022181-AA, 06/2020
13
Tempi di reazione
Definizione del tempo di reazione per ingressi digitali fail-safe Il tempo di reazione indica il tempo, riferito al canale interessato, che intercorre tra una transizione di segnale sull'ingresso digitale e il caricamento sicuro del telegramma di sicurezza nel bus backplane.
Tempo di reazione max. ai cortocircuiti esterni Tempo di reazione max = ritardo di ingresso + T1 + 158 ms + 2 * somma[x=0..3](T1x + T2x * corr)
T1 = tempo per la prova di cortocircuito del canale interessato x = alimentazione encoder attivata T1x = tempo per la prova di cortocircuito T2x = tempo di avvio dell'encoder dopo la prova di cortocircuito corr. = fattore di correzione = 1,03 Termine addizione = somma [x=0..3](T1x + T2x * corr): Somma dei tempi complessivi di avvio e di prova cortocircuito degli alimentatori encoder attivi
Esempi
Nel seguito si riporta un esempio di calcolo del tempo di reazione max. di F-DI 16x24VDC con parametrizzazione preimpostata.
Canal e 0 - 3 4 - 7 8 - 11 12 15
Ritardo di ingresso [ms] 3,2 3,2 3,2 3,2
Short-circuit test attivato attivato attivato attivato
T1 [ms] 4,2 4,2 4,2 4,2
T2 [ms] 4,2 4,2 4,2 4,2
Sensor supply
0 1 2 3
Termine addizione [ms] 34,1
Tempo di reazione max. [ms] 233,6 233,6 233,6 233,6
Calcoli di esempio: Termine addizione = (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) + (4,2 ms + 4,2 ms * 1,03) = 34,1 ms
Nel seguito si riportano esempi di calcolo del tempo di reazione max. di F-DI 16x24VDC in funzione della parametrizzazione.
Canal e 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
Ritardo di ingresso [ms] 0,4 0,4 3,2 3,2 6,4 10 12,8 12,8 20 20 20 20 0,4 1,6 10 20
Short-circuit T1 T2 Sensor supply
test
[ms] [ms]
enable
3,7 3,7 0
enable
100 20 1
enable
2000 2000 2
disable
-
-
3
Termine addizione [ms] 4188,1
Tempo di reazione max. [ms] 8538,3 8538,3 8541,1 8541,1 8640,6 8644,2 8647,0 8647,0 10554,2 10554,2 10554,2 10554,2 - *) - *) - *) - *)
*) Con la prova di cortocircuito disattivata, i cortocircuiti esterni non vengono rilevati.
Unrestricted
14
Informazioni sul prodotto relativa alla documentazione dell'unità di ingressi digitali F-DI 16x24VDC (6ES7526-1BH00-0AB0) A5E48022181-AA, 06/2020
Calcoli di esempio: Termine addizione = (3,7 ms + 3,7 ms * 1,03) + (100 ms + 20 ms * 1,03) + (2000 ms + 2000 ms * 1,03) = 4188,1 ms
Canal e 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
Ritardo di ingresso Short-circuit
[ms]
test
0,4
enable
0,4
3,2
3,2
6,4
10
12,8
12,8
20
enable
20
20
20
0,4
1,6
10
20
T1 [ms] 20
500
T2 [ms] 20
500
Sensor supply 0
2
Termine addizione [ms] 1055,6
Tempo di reazione max. [ms] 2289,6 2289,6 2292,4 2292,4 2295,6 2299,2 2302,0 2302,0 2789,2 2789,2 2789,2 2789,2 2769,6 2770,8 2779,2 2789,2
Calcoli di esempio: Termine addizione = (20 ms + 20 ms * 1,03) + (500 ms + 500 ms * 1,03) = 1055,6 ms
Siemens AG Large Drives Applications Vogelweiherstr. 1-15 90441 NÜRNBERG GERMANIA
UInnforermstraizcitoendiIsnufol prmroadzoiottnoi rseullaptirvoadaoltltaodroeclautmiveanatlalazidoonceudmeelln'utnaiztiàondieindgelrle'usnsitdàigdiitainligFr-eDssI i1d6ixg2it4aVliDFC-D(I61E6Sx72542V6D-1CB(H60E0S-705A2B60-)1BH00-0AB0)
AA55EE4488002222118811--AAAA,, 0066//22002200
15
SIMATIC S7-1500/ET 200MP F-DI 16x24VDC (6ES7526-1BH00-0AB0)
Siemens Siemens / Internet (https://www.siemens.com/industrialsecurity) Siemens Siemens Siemens RSS (https://www.siemens.com/industrialsecurity)
F-DI 16x24VDC (6ES7526-1BH00-0AB0) .
Unrestricted
16
© Siemens AG 2020. A5E48022181-AA, 06/2020
= + T1 + 158 ms + 2 * Sum[x=0..3](T1x + T2x * corr)
T1 = x = T1x = T2x = corr = = 1.03 = sum [x=0..3](T1x + T2x * corr)
F-DI 16x24VDC
[ms]
0 3 3.2 4 7 3.2 8 3.2 11 12 3.2 15
T1 [ms] 4.2 4.2 4.2
T2 [ms] 4.2 4.2 4.2
0 1 2
4.2 4.2 3
[ms] 34.1
[ms]
233.6 233.6 233.6
233.6
= (4.2 ms + 4.2 ms * 1.03) + (4.2 ms + 4.2 ms * 1.03) + (4.2 ms + 4.2 ms * 1.03) + (4.2 ms + 4.2 ms * 1.03) = 34.1 ms
F-DI 16x24VDC
[ms]
0
0.4
1
0.4
2
3.2
3
3.2
4
6.4
5
10
6
12.8
7
12.8
8
20
9
20
10
20
11
20
12
0.4
13
1.6
14
10
15
20
T1 T2 [ms] [ms] 3.7 3.7 0
100 20 1
2000 2000 2
-
-
3
*)
[ms] 4188.1
[ms]
8538.3 8538.3 8541.1 8541.1 8640.6 8644.2 8647.0 8647.0 10554.2 10554.2 10554.2 10554.2 - *) - *) - *) - *)
Unrestricted F-DI 16x24VDC (6ES7526-1BH00-0AB0)
A5E48022181-AA, 06/2020
17
= (3.7 ms + 3.7 ms * 1.03) + (100 ms + 20 ms * 1.03) + (2000 ms + 2000 ms * 1.03) = 4188.1 ms
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
[ms]
0.4 0.4 3.2 3.2 6.4 10 12.8 12.8 20 20 20 20 0.4 1.6 10 20
T1 T2 [ms] [ms] 20 20 0
500 500 2
[ms] 1055.6
= (20 ms + 20 ms * 1.03) + (500 ms + 500 ms * 1.03) = 1055.6 ms
[ms]
2289.6 2289.6 2292.4 2292.4 2295.6 2299.2 2302.0 2302.0 2789.2 2789.2 2789.2 2789.2 2769.6 2770.8 2779.2 2789.2
Siemens AG Large Drives Applications Vogelweiherstr. 1-15 90441 NÜRNBERG
U1A5n8Ere4s8t0ri2ct2e1d81-AFA-,D0I61/62x02240VDC
(6ES7526-1BH00-0AB0)
F-DI
16x24VDC
(6ES7526-1BH00-0AB0) A5E48022181-AA, 06/2020
Digital output module
F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0) SIMATIC
ET 200MP Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual
_Pr_ef_ac_e_______________ _Do_c_um_e_n_tat_io_n _gu_id_e_______1_ _Pr_od_u_ct_o_ve_rv_ie_w_________2_ _Co_n_ne_c_tin_g____________3_ _Pa_ra_m_e_te_rs_/ad_d_re_ss_s_pa_c_e ____4_ _AF-p_I/pO_lic_mato_iod_nusl_eo_f t_he_________5_ _Imn_etes_rsrua_pg_tess/_di_ag_n_os_tic________6_ _Te_c_hn_ic_al_sp_e_ci_fic_at_ion_s______7_ _Re_s_po_n_se_ti_m_es__________A_ _Sw_it_ch_in_g_of_lo_a_ds_________B_ _O_pe_n_So_u_rc_e_So_ft_w_ar_e _____C__
01/2016
A5E03858037-AA
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03858037-AA 01/2016 Subject to change
Copyright © Siemens AG 2016. All rights reserved
Preface
Purpose of the documentation
This manual supplements the system manual S7-1500 Automation System. You can find information on the functions that apply generally to the S7-1500 automation system and the ET 200MP distributed I/O system in the system manual S7-1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
The information provided in this manual and the system manual enables you to commission the S7-1500 automation system and ET 200MP distributed I/O system.
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)". Please also observe the notes identified as follows:
Note A note includes important information on the product described in the documentation, on handling the product or on the part of the documentation to which particular attention should be paid.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
4
Manual, 01/2016, A5E03858037-AA
Preface
Important note for maintaining the operational safety of your system
Note
The operators of systems with safety-related characteristics must adhere to specific operational safety requirements. The supplier is also obliged to comply with special product monitoring measures. Siemens informs system operators by means of personal notifications about product developments and properties which may be or become important issues in terms of operational safety.
You should subscribe to the corresponding notifications in order to obtain the latest information and to allow you to make any necessary modifications to your system.
Log in to Industry Online Support. Follow the links below and click on "Email on update" on the right-hand side in each case: · SIMATIC S7-300/S7-300F
(https://support.industry.siemens.com/cs/products?pnid=13751&lc=en-WW) · SIMATIC S7-400/S7-400H/S7-400F/FH
(https://support.industry.siemens.com/cs/products?pnid=13828&lc=en-WW) · SIMATIC S7-1500/SIMATIC S7-1500F
(https://support.industry.siemens.com/cs/products?pnid=13716&lc=en-WW) · SIMATIC S7-1200/SIMATIC S7-1200F
(https://support.industry.siemens.com/cs/products?pnid=13683&lc=en-WW) · Distributed I/O (https://support.industry.siemens.com/cs/products?pnid=14029&lc=en-
WW) · STEP 7 (TIA Portal)
(https://support.industry.siemens.com/cs/products?pnid=14340&lc=en-WW)
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, solutions, machines, equipment and/or networks. They are important components in a holistic industrial security concept. With this in mind, Siemens' products and solutions undergo continuous development. Siemens recommends strongly that you regularly check for product updates.
For the secure operation of Siemens products and solutions, it is necessary to take suitable preventive action (e.g. cell protection concept) and integrate each component into a holistic, state-of-the-art industrial security concept. Third-party products that may be in use should also be considered. You can find more information about industrial security on the Internet (http://www.siemens.com/industrialsecurity).
To stay informed about product updates as they occur, sign up for a product-specific newsletter. You can find more information on the Internet (http://support.automation.siemens.com).
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
5
Preface
Open Source Software
Open-source software is used in the firmware of the product described. Open Source Software is provided free of charge. We are liable for the product described, including the open-source software contained in it, pursuant to the conditions applicable to the product. Siemens accepts no liability for the use of the open source software over and above the intended program sequence, or for any faults caused by modifications to the software. For legal reasons, we are obliged to publish the original text of the license conditions and copyright notices. Please read the information relating to this in the appendix.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
6
Manual, 01/2016, A5E03858037-AA
Table of contents
Preface ................................................................................................................................................... 4
1 Documentation guide .............................................................................................................................. 9
1.1
Guide to documentation S7-1500 / ET 200MP .........................................................................9
2 Product overview .................................................................................................................................. 12
2.1
Properties ................................................................................................................................ 12
3 Connecting ........................................................................................................................................... 15
3.1
Block diagram .........................................................................................................................15
4 Parameters/address space ................................................................................................................... 18
4.1
Parameters .............................................................................................................................18
4.2 4.2.1 4.2.1.1 4.2.1.2 4.2.2 4.2.2.1 4.2.2.2 4.2.3 4.2.3.1 4.2.3.2 4.2.3.3 4.2.3.4 4.2.3.5 4.2.3.6 4.2.3.7
Explanation of parameters ......................................................................................................20 F-parameters ..........................................................................................................................20 Behavior after channel fault ....................................................................................................20 Reintegration after channel fault.............................................................................................20 DQ parameters .......................................................................................................................21 Maximum test period...............................................................................................................21 Operating mode of the output .................................................................................................21 Parameters of the channels ....................................................................................................21 Diagnostics: Wire break ..........................................................................................................21 Channel activated ...................................................................................................................21 Channel failure acknowledge..................................................................................................22 Max. readback time dark test..................................................................................................22 Disable dark test for 48 hours.................................................................................................25 Max. readback time switch-on test .........................................................................................26 Activated light test...................................................................................................................28
4.3
Address space ........................................................................................................................30
5 Applications of the F-I/O module ........................................................................................................... 32
5.1
Applications for the F-DQ 8x24VDC/2A PPM.........................................................................32
5.2
Application: Connecting a load per digital output, PM switching ............................................33
5.3
Application: Connection of loads per digital output to L+ and M, PM-switching mode...........34
5.4
Application: Connecting 2 loads in parallel per digital output, PM-switching mode ...............37
5.5
Application: Connecting a load per digital output, PP switching.............................................39
6 Interrupts/diagnostic messages ............................................................................................................. 41
6.1
Status and error displays ........................................................................................................41
6.2
Interrupts .................................................................................................................................44
6.3
Diagnostic alarms ...................................................................................................................46
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
7
Table of contents
7 Technical specifications ........................................................................................................................ 51
A Response times .................................................................................................................................... 54
B Switching of loads ................................................................................................................................. 55
B.1
Connecting capacitive loads .................................................................................................. 55
B.2
Switching of inductive loads................................................................................................... 57
C Open Source Software.......................................................................................................................... 58
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
8
Manual, 01/2016, A5E03858037-AA
Documentation guide
1
1.1
Guide to documentation S7-1500 / ET 200MP
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, Motion Control, Web server. You can download the documentation free of charge from the Internet (http://www.automation.siemens.com/mcms/industrial-automation-systemssimatic/en/manual-overview/tech-doc-controllers/Pages/Default.aspx). Changes and supplements to the manuals are documented in a Product Information. You can download the product information free of charge from the Internet.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
9
Documentation guide 1.1 Guide to documentation S7-1500 / ET 200MP
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (http://support.automation.siemens.com/WW/view/en/86140384).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet.
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
10
Manual, 01/2016, A5E03858037-AA
Documentation guide 1.1 Guide to documentation S7-1500 / ET 200MP
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration.
You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
11
Product overview
2.1
Properties
Order number
6ES7526-2BF00-0AB0
View of the module
2
Image 2-1 View of the F-DQ 8x24VDC/2A PPM module
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
12
Manual, 01/2016, A5E03858037-AA
Properties
Product overview 2.1 Properties
Technical properties Fail-safe digital module for use in the S7-1500 automation system and in the ET 200MP distributed I/O system. PROFIsafe PROFIsafe address type 2 Supports the RIOforFA-Safety profile (on S7-1500 F-CPUs) 8 output PM-switching or PP-switching in 2 channel groups (SIL3/Cat.4/PLe) Supply voltage L+ Output current per output 2 A Source output (PM/PP-switching) Suitable for solenoid valves, DC contactors and signal lamps Status display RUN (green LED) Status display module diagnostics (red LED) Status display channel status/channel diagnostics per output (green/red LED) Status display supply voltage (green LED) Diagnostics, e.g., short-circuit/wire break/load voltage missing, channel-specific Channel-specific or module-wide passivation
Supported functions Firmware update I&M identification data
WARNING The fail-safe performance characteristics in the technical specifications apply for a mission time of 20 years and a repair time of 100 hours. If a repair within 100 hours is not possible, switch off the supply voltage of the affected module before 100 hours expires. The module switches off independently after the 100 hours have expired. Follow the repair procedure described in section Diagnostic alarms (Page 46).
Accessories
The following accessories are supplied with the module and can also be ordered as spare part: Labeling strips U-connector Universal front cover Electronic coding element
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
13
Product overview 2.1 Properties
Additional components
The following component is to be ordered separately: Front connector incl. potential bridges and cable ties You can find additional information on accessories in the S7-1500/ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
Passivation of fail-safe outputs over a long period of time
WARNING Unintentional activation of F-I/O with fail-safe outputs If an F-I/O with fail-safe outputs is passivated for a period longer than that specified in the safety parameters (> 100 hours) and the fault remains uncorrected, you need to exclude the possibility that the F-I/O can be activated unintentionally by a second fault, and thus place the F-system in a dangerous state. Even though it is highly unlikely that such hardware faults occur, you must prevent the unintentional activation of F-I/O with fail-safe outputs by using circuit measures or organizational measures. One possibility is the shutdown of the power supply of the passivated F-I/O within a time period of 100 hours, for example. The required measures are standardized for plants with product standards. For all other plants, the plant operator must create a concept for the required measures and have it approved by the inspector.
Property of the individual shutdown of F-modules with fail-safe outputs: A channel-specific shutdown occurs when a fault is detected. It is also possible to react to critical process states staggered over time or to perform safety-related shutdown of individual outputs.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
14
Manual, 01/2016, A5E03858037-AA
Connecting
3
3.1
Block diagram
This section includes:
The block diagram with the general pin assignment of the F-module.
An example for switching of loads with ground.
For information on parameter assignment of the F-module, refer to "Parameters/address space (Page 18)".
Information on different connection options is available in the section Applications of the F-I/O module (Page 32).
You can find information on wiring the front connectors and creating the cable shielding, etc., in the Wiring section of the system manual Automation System S7-1500 (http://support.automation.siemens.com/WW/view/en/59191792).
WARNING
To protect the F-module, always install an external fuse with the following properties for the load circuit: Circuit-breaker 24 V DC/16 A, tripping characteristic type B.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
15
Connecting 3.1 Block diagram
Block diagram
The following figure shows the assignment of channels to addresses.
Backplane bus interface
Microcontroller 1
P1 switch for channel groups 0 to 3
Microcontroller 2
P1 switch for channel groups 4 to 7
Reverse polarity protection
DQ-Pn Output bit n, channel n, P-switching
Note:
· In PP operation, the DQ M channels are not used.
· Terminal 19 and 39 (L+) bridged internally
· Terminal 20 and 40 (M) bridged internally
DQ-Mn L+ M CH
PWR RUN ERROR
Ground for output bit n, channel n, M-switching Supply voltage 24 V DC Chassis ground Channel or LED channel status, channel diagnostics (green, red) LED supply voltage (green) RUN LED (green) LED module diagnostics (red)
Note the maximum permissible cable cross-sections and use both terminals, if necessary.
Image 3-1 Block diagram of the F-DQ 8x24VDC/2A PPM
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
16
Manual, 01/2016, A5E03858037-AA
Connecting 3.1 Block diagram
Switching of loads with ground if the F-module is configured PM-switching
If the following two conditions are met, F-DQ 8x24VDC/2A PPM detects a short-circuit: If loads that have a connection between chassis and ground are switched by the
F-DQ 8x24VDC/2A PPM (for example, to improve the EMC properties). If chassis and ground are connected at the power supply unit. From the perspective of the F-module, the M-switch is bridged by the chassis-ground connection (refer to the diagram below for an example).
Image 3-2 Switching of grounded loads (resistance between chassis and ground)
Remedy: Increase the parameters "Max. readback time dark test" and "Max. readback time switch-
on test". Increase the value of the resistance between chassis and ground at the load end to more
than 100 k. Or: Use the F-DQ 8x24VDC/2A PPM configured as a PP-switching module.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
17
Parameters/address space
4
4.1
Parameters
Parameters
WARNING
Diagnostic functions must be activated or deactivated in accordance with the application, see section Applications of the F-I/O module (Page 32).
Table 4- 1 Parameters for F-DQ 8x24VDC/2A PPM
Parameter
Value range
F-parameters: Manual assignment of F-monitoring time
F-monitoring time F-source address F-destination address F-parameter signature (without address) Behavior after channel fault
Reintegration after channel fault
F-I/O DB manual number assignment
F-I/O DB-number F-I/O DB name DQ parameters: Maximum test period
Operating mode of the output
· Disable · Enable 1 to 65535 ms 1 to 65534 1 to 65534 0 to 65535
· Passivate channel · Passivate the entire module · Adjustable · All channels automatically · All channels manually · Disable · Enable -- --
· 100 s · 1000 s · PM-switching mode · PP switching
Parameter reassignment in RUN
Scope
No
Module
No
Module
No
Module
No
Module
No
Module
No
Module
No
Module
No
Module
No
Module
No
Module
No
Module
No
Module
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
18
Manual, 01/2016, A5E03858037-AA
Parameters/address space 4.1 Parameters
Parameter
Value range
Channel parameters in operating mode PM-switching:
Channel n
Diagnostics: Wire break
· Disable
Parameter reassignment in RUN
No
· Enable
Channel activated
· Disable
No
· Enable
Channel failure acknowledge
· Manual
No
Max. readback time dark test Disable dark test for 48 hours
· Automatic
The value range offered depends on the F-CPU in use and on the configuration of the F-parameter "Reintegration after channel fault".
0.8 to 400.0 ms
No
· Disable
No
· Enable
Max. readback time switch on 0.8 to 5.0 ms
No
test
Activated light test
· Disable
No
· Enable
Channel parameters in operating mode PP-switching:
Channel n
Diagnostics: Wire break
· Disable
No
· Enable
Channel activated
· Disable
No
· Enable
Channel failure acknowledge Max. readback time dark test
· Manual
No
· Automatic
The value range offered depends on the FCPU in use and on the configuration of the Fparameter "Reintegration after channel fault".
0.8 to 400.0 ms
No
Disable dark test for 48 hours Disable
No
Max. readback time switch on 0.8 to 5.0 ms
No
test
Activated light test
Enable
No
Scope
Channel Channel Channel
Channel Channel Channel Channel
Channel Channel 1...7 (Channel 0 always enabled) Channel
Module (Channel 0) Module Module (Channel 0) Module
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
19
Parameters/address space 4.2 Explanation of parameters
4.2
Explanation of parameters
4.2.1 4.2.1.1 4.2.1.2
20
F-parameters
You must assign the PROFIsafe address (F-destination address together with F-source address) to the F-module before you put it into operation. You define the F-source address using the "Basis for PROFIsafe addresses" parameter
in the F-CPU. An F-destination address unique throughout the CPU is automatically assigned for each
F-module. You can manually change the F-destination addresses set in the hardware configuration. You can find information on F-parameters for the F-monitoring time, the PROFIsafe address assignment (F-source address, F-destination address) and the F I/O DB in the manual SIMATIC Safety - Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126).
Behavior after channel fault
This parameter is used to specify whether the entire F-module is passivated or just the faulty channel(s) in the event of channel faults: "Passivate the entire module" "Passivate channel"
Reintegration after channel fault
Use this parameter to select how the channels of the fail-safe module are reintegrated after a fault.
Use in S7-300/400 F-CPUs This parameter is always set to "Adjustable" when you use the fail-safe module in S7-300/400 F-CPUs. You make the required setting in the F-I/O DB of the fail-safe module.
Use in S7-1500 F-CPUs When using the fail-safe module in S7-1500 F-CPUs, you set this parameter in the STEP 7 dialog of the fail-safe module: "Adjustable" "All channels automatically" "All channels manually" If you have set the "Behavior after channel fault" parameter to "Passivate channel", you enable individual setting of the reintegration type per channel with the parameter assignment "Adjustable". The reintegration type of the respective channel is specified with the "Channel failure acknowledge" channel parameter. If you have set the "Behavior after channel fault" parameter to "Passivate the entire module", you can only select the same reintegration type for all channels.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0) Manual, 01/2016, A5E03858037-AA
4.2.2 4.2.2.1
4.2.2.2
Parameters/address space 4.2 Explanation of parameters
DQ parameters
Maximum test period
With this parameter, you specify the time within which the light, dark and switch on tests should be performed throughout the module. When this time expires, the tests are repeated. In case of a fault, the test time is reduced to 60 seconds. Use "1000 s", for example, to conserve your actuators. Use "100 s" to detect faults more quickly. The "Maximum test period" parameter is a module parameter, which means the test cycle for the entire fail-safe output module is performed within the configured maximum test time. If the bit pattern test is not performed within the configured time (or the shortened test time of 60 seconds in case of an error), the module goes into the error state.
Operating mode of the output
Chooses between PM and PP switching mode for the outputs. After re-parameterization of the operating mode, the power supply of the F-module must be switched OFF and ON.
4.2.3 4.2.3.1
Parameters of the channels
Diagnostics: Wire break
You can use a wire break test to monitor the connection from the output channel to the actuator. Selecting this check box enables the wire break monitoring for the relevant channel. You also have to activate the light test to detect a wire break with an output signal "0".
WARNING The diagnostics for wire break of the outputs is not designed for safety-related functions and can therefore not be evaluated for safety-related activities.
4.2.3.2
Channel activated
If you select this check box, the corresponding channel is enabled for signal processing in the safety program.
You can deactivate an unused channel with this parameter.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
21
Parameters/address space 4.2 Explanation of parameters
4.2.3.3
Channel failure acknowledge
Use in S7-1500 F-CPUs This parameter is only relevant if the fail-safe module is operated on an S7-1500 F-CPU, and can only be set if the F-parameter "Behavior after channel fault" is set to "Passivate channel" and the F-parameter "Reintegration after channel fault" is set to "Adjustable". The value of this parameter specifies how the channel should react to a channel fault: Manual: A channel is not reintegrated until after manual acknowledgment. Automatically: The channel is reintegrated automatically after a channel fault. Manual
acknowledgment is not necessary.
Use in S7-300/400 F-CPUs The value of this parameter is not relevant in the case of operation on S7-300/400 F-CPUs. There you set the corresponding property at the F-I/O DB by means of the ACK_NEC tag. For detailed information about the F-I/O DB, refer to the SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126) manual.
4.2.3.4
Max. readback time dark test
Function
Dark tests are shutdown tests with bit pattern test.
For a dark test, a test signal is switched to the output channel while the output channel is active (output signal "1"). The output channel is then switched off briefly (= "dark period") and read back (for PM operation, P- and M-readback, for PP operation only PP-readback). A sufficiently slow actuator does not respond to this and remains switched on.
Readback (P-switch and M-switch do not switch simultaneously.)
Image 4-1 Functional principle of the dark test (PM switching)
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
22
Manual, 01/2016, A5E03858037-AA
Parameters/address space 4.2 Explanation of parameters
Readback (The two P-switches do not switch simultaneously.)
Image 4-2 Functional principle of the dark test (PP switching)
This parameter allows you to set the time for the readback. If the expected signals could not be read back correctly after expiration of the readback time, the output channel is passivated. No new process values are switched to the output channels while a bit pattern is still active (switch test is carried out). This means that a higher maximum readback time for the dark test increases the response time of the F-module.
WARNING
Through the configured readback time dark test, short-circuits (cross-circuits) to a signal with a frequency greater than 1/(2 x configured readback time dark test) Hz cannot be recognized (50:50 sampling ratio). Short-circuits (cross-circuits) to an output of the same module are recognized.
The parameter also has an effect on the short-circuit detection (cross-circuit) with "1" signal when the output signal is changed from "1" to "0" with the safety program.
Setting readback time dark test
Because the fault reaction time is extended by the length of the readback time dark test, we recommend that you set the readback time dark test as low as possible, but high enough that the output channel is not passivated. In case of the "Connecting a load per digital output, PP switching" (Page 39) application, see the warnings and notes in the section describing the application. To determine the readback time required for your actuator, refer to the diagram in the section Switching capacitive loads (Page 55).
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
23
Parameters/address space 4.2 Explanation of parameters
Setting readback time dark test with unknown actuator capacity
If the capacity of the actuator is not known, it may be necessary for you to determine the value for the readback time dark test by trial and error. This may also be necessary due to the part variances in the actuator or external influences. Proceed as follows: Set the readback time dark test so that the output channel can be read back correctly but
your actuator does not respond yet. For verification use the process value "1" with a minimum duration that corresponds to
the "maximum test time" parameter. If the output channel is passivated sporadically, set a higher value for the maximum
readback time dark test. If the output channel is passivated, the readback time dark test is too small for a
connected capacitive load. The discharge cannot take place during the configured readback time dark test. Increase the readback time dark test. If you have set the readback time dark test to the maximum value of 400 ms and there is still a passivation of the output channel, there is either an external fault or the connected capacity is outside the permitted range. To increase availability, we recommend that you maintain an interval to the determined limit for the times.
Test pulses of the dark test
* Output of test pulses only during test cycle. Image 4-3 Test pulses of the dark test The interval between two test pulses is 500 ms.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
24
Manual, 01/2016, A5E03858037-AA
4.2.3.5
Parameters/address space 4.2 Explanation of parameters
Disable dark test for 48 hours
Note Can only be configured for PM operation.
This option allows you to suppress the dark test. If the channel is permanently active (1) for 48 hours, one dark test pulse is applied at the channel once this time has expired. You must ensure the signal change from 1 to 0 at the channel yourself within 48 hours to prevent the dark test pulse. This also applies to the operating time if the operating time is < 48 hours. The dark test is suspended for another 48 hours after the signal change from 0 to 1. The dark test is permanently suppressed if the following condition is met: A signal change from 1 to 0 takes place before the 48 hours have expired.
WARNING When you use the function "Disable dark test for 48 hours", cross-circuits and other errors are not detected. Also take into consideration the respective requirements of your product standards regarding error detection time.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
25
Parameters/address space 4.2 Explanation of parameters
4.2.3.6
Max. readback time switch-on test
Function
The switch on test is part of the bit pattern test.
PM operation
During the switch-on test in PM operation, the P-switch and M-switch of the output channel are alternately closed and read back when the output channel is inactive (output signal "0"). Contrary to the light test, no power flows through the connected load during the switch on test.
Readback
Image 4-4 Functional principle of the switch on test (PM switching)
WARNING In case of an error, the bit pattern test can apply voltage to the load up to a duration that was configured with the "Maximum readback time switch on test" parameter. For capacitive loads, it can happen that these are not actively discharged in the event of an error. Therefore, always configure a maximum readback time that cannot activate the load under any circumstances.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
26
Manual, 01/2016, A5E03858037-AA
Parameters/address space 4.2 Explanation of parameters
PP operation The M-switch is meaningless during the switch-on test in PP operation. The switch-on test corresponds to the light test and current flows through the load. The light test is always activated in PP operation.
Readback
Image 4-5 Functional principle of the switch on test (PP switching) This parameter allows you to set the time for the readback. If the signal was not read back correctly once the time has expired, the output channel is passivated. The switch on test detects the following faults: Short-circuit to L+ with output signal "0" Short-circuit to ground with output signal "0"
WARNING Through the configured readback time, short-circuits (cross-circuits) to an interfering signal with a frequency > 1 / (2 x configured readback time) Hz can be suppressed (50:50 sampling ratio). Short-circuits (cross-circuits) to an output of the same module are recognized.
Setting readback time switch on test
Because the fault reaction time is extended by the length of the set readback time, we recommend that you set the readback time as low as possible, but high enough that the output channel is not passivated. To determine the readback time required for your actuator, refer to the diagram in the section Switching capacitive loads (Page 55).
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
27
Parameters/address space 4.2 Explanation of parameters
Setting readback time switch on test with unknown actuator capacity
If the capacitance of the actuator is not known, you may have to determine the required value for the readback time switch-on test by trial and error. This may also be necessary due to the part variances in the actuator or external influences.
Proceed as follows:
Set the readback time switch on test in such a way that the output channel can be read back correctly but your actuator does not respond yet.
For verification use the process value "0" with a minimum duration that corresponds to the "maximum test time" parameter. If you have not configured a light test, continue by changing the process value to "1" after the verification.
If the output channel is passivated sporadically, set a higher value for the maximum readback time switch on test.
If the output channel is passivated, the readback time is too small for a connected capacitive load. The charge of the capacitive load cannot take place during the configured readback time. Increase the readback time.
If you have set the readback time to the maximum value of 5 ms and there is still a passivation of the output channel, there is either an external fault or the connected capacity is outside the permitted range.
To increase availability, we recommend that you maintain an interval to the determined limit for the times.
4.2.3.7
Activated light test
Function
Overload and wire break are detected with a 0 signal at the output.
For a light test, a test signal is switched to the output channel while the output channel is inactive (output signal "0"). The output channel is switched on briefly during the light test (= "light period") and read back. A sufficiently slow actuator does not respond to this and remains switched off.
PM operation
In contrast to the switch on test, the P-switch and the M-switch switch at the same time during the light test and power flows through the connected load.
Readback
Image 4-6 Functional principle of the light test (PM switching)
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
28
Manual, 01/2016, A5E03858037-AA
Parameters/address space 4.2 Explanation of parameters
PP operation The M-switch is meaningless during the light test in PP operation. The light test corresponds to the switch-on test and current flows through the load. The light test is always activated in PP operation.
Readback
Image 4-7 Functional principle of the light test (PP switching) If the readback signals are incorrect, the signal is present for the configured readback time at the output channel before the fault causes passivation of the output channel. If the signal was not read back correctly once the maximum readback time switch on test has expired, the output channel is passivated. No new process values are switched to the output channels while a bit pattern is still active (switch test is carried out). This means that a higher maximum readback time switch on test for the light test increases the response time of the F-module.
Test pulses of the light test
* Output of test pulses only during test cycle. The module cycle is 5 ms. Image 4-8 Test pulses of the light test
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
29
Parameters/address space 4.3 Address space
A light pulse with the configured duration takes place within the configured maximum test time per output channel.
If a light pulse returns a fault, the same light pulse (which means the same bit pattern) is repeated once after 500 ms. If the fault is still present, the maximum test time is automatically reduced to 60 seconds and a diagnostic message is generated. If the fault is no longer present, the output channel is reintegrated after the next fault-free test cycle.
4.3
Address space
Address assignment of the digital output module F-DQ 8x24VDC/2A PPM
The digital output module F-DQ 8x24VDC/2A PPM occupies the following address areas in the F-CPU:
Table 4- 2 Address assignment in the F-CPU
F-CPU S7-300/400 F-CPUs S7-1500 F-CPUs
x = Module start address
Occupied bytes in the F-CPU: In input range x + 0 to x + 4 x + 0 to x + 5
In output range x + 0 to x + 4 x + 0 to x + 5
Address assignment of the user data and the value status of digital output module F-DQ 8x24VDC/2A PPM
The user data occupy the following addresses in the F-CPU out of all the assigned addresses of the digital output module F-DQ 8x24VDC/2A PPM:
Table 4- 3 Address assignment of user data in the input range
Byte in the F-CPU
IB x + 0
7
Value status DQ7
(CH7)
x = Module start address
6
Value status DQ6
(CH6)
Assigned bits in F-CPU per F-module:
5
4
3
2
Value status DQ5
(CH5)
Value status DQ4
(CH4)
Value status DQ3
(CH3)
Value status DQ2
(CH2)
1
Value status DQ1
(CH1)
0
Value status DQ0
(CH0)
Table 4- 4 Address assignment of user data in the output range
Byte in the F-CPU
QB x + 0
7 DQ7 (CH7)
x = Module start address
6 DQ6 (CH6)
Assigned bits in F-CPU per F-module:
5
4
3
2
DQ5 (CH5)
DQ4 (CH4)
DQ3 (CH3)
DQ2 (CH2)
1 DQ1 (CH1)
0 DQ0 (CH0)
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
30
Manual, 01/2016, A5E03858037-AA
Parameters/address space 4.3 Address space
Note You may only access the addresses occupied by user data and value status. The other address areas occupied by the F-modules are assigned for functions including safety-related communication between the F-modules and F-CPU in accordance with PROFIsafe.
Additional information
For detailed information about F-I/O access and for evaluation and processing of the value status, refer to the SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126) manual.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
31
Applications of the F-I/O module
5
5.1
Applications for the F-DQ 8x24VDC/2A PPM
You achieve SIL3/Cat.4/PLe with the following applications.
The wiring is carried out on the front connector of the module. Refer to the "Wiring" section in the S7-1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792) system manual.
See also
Connecting (Page 15)
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
32
Manual, 01/2016, A5E03858037-AA
Applications of the F-I/O module 5.2 Application: Connecting a load per digital output, PM switching
5.2
Application: Connecting a load per digital output, PM switching
Each of the 8 fail-safe digital outputs consists of a P-switch DQ-Pn and an M-switch DQ-Mn. You connect the load between the P-switch and the M-switch. The two switches are always activated so that voltage is applied to the load. This circuit achieves SIL3/Cat.4/PLe.
The figure below shows an example of the pin assignment of the fail-safe digital output module F-DQ 8x24VDC/2A PPM with connection of one load per digital output, PM switching.
WARNING
To protect the F-module, always install an external fuse with the following properties for the load circuit: Circuit-breaker 24 V DC/16 A, tripping characteristic type B.
Backplane bus interface Microcontroller 1 P1 switch for channel groups 0 to 3
Microcontroller 2 P1 switch for channel groups 4 to 7 Reverse polarity protection
Image 5-1 Wiring diagram for 1 relay to 1 F-DQ of the digital output module F-DQ 8x24VDC/2A PPM, PM-switching mode
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
33
Applications of the F-I/O module 5.3 Application: Connection of loads per digital output to L+ and M, PM-switching mode
WARNING
In order to achieve SIL3/Cat.4/PLe with this wiring, you must install a qualified actuator, for example, in accordance with IEC 60947.
Parameter assignment
Assign the following parameter for the corresponding channel group:
Table 5- 1 Parameter
Parameter Operating mode of the output
PM-switching mode
5.3
Application: Connection of loads per digital output to L+ and M, PM-
switching mode
You can connect two relays using one fail-safe digital output. The following conditions should be kept in mind:
Same reference potential
The normally open contacts of the two relays must be connected in series.
This configuration achieves SIL3/Cat.4/PLe (process status readback required).
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
34
Manual, 01/2016, A5E03858037-AA
Applications of the F-I/O module 5.3 Application: Connection of loads per digital output to L+ and M, PM-switching mode
The figure below shows an example of the pin assignment of the fail-safe digital output module F-DQ 8x24VDC/2A PPM with connection of loads per digital output to L+ and M, PM-switching mode.
WARNING To protect the F-module, always install an external fuse with the following properties for the load circuit: Circuit-breaker 24 V DC/16 A, tripping characteristic type B.
Backplane bus interface Microcontroller 1 P1 switch for channel groups 0 to 3
Microcontroller 2 P1 switch for channel groups 4 to 7 Reverse polarity protection
Image 5-2 Wiring diagram for 2 relay to 1 F-DQ of the digital output module F-DQ 8x24VDC/2A PPM, PM-switching mode
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
35
Applications of the F-I/O module 5.3 Application: Connection of loads per digital output to L+ and M, PM-switching mode
WARNING
When two relays are connected to one digital output, as shown in the figure above, the "wire break" and "overload" faults are detected only at the P-switch of the output (not at the M-switch).
WARNING
With a cross circuit between P-switch and M-switch of the output, the module detects the fault and switches off the output. But the actuator is still supplied with power due to the external fault.
To avoid cross circuits between the P and M-switches of a fail-safe digital output, you should always wire the relay connection to the P and M-switches separately, in order to prevent any cross circuits. For example, as separately sheathed cables or in separate cable ducts.
Note
The digital output module F-DQ 8x24VDC/2A PPM performs a bit pattern test depending on the parameter assignment. For this, the module outputs up to 5 ms pulses depending on the parameter assignment. This test (switch-on test) is run with a time offset between the Pswitch and M-switch to prevent the actuator from being activated. This pulse may cause the corresponding relay to operated, which may reduce its mission time.
We therefore recommend adhering to the wiring scheme described below. See section Application: Connecting 2 loads in parallel per digital output, PM-switching mode (Page 37).
Parameter assignment
Assign the following parameter for the corresponding channel group:
Table 5- 2 Parameter
Parameter Operating mode of the output
PM-switching mode
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
36
Manual, 01/2016, A5E03858037-AA
Applications of the F-I/O module 5.4 Application: Connecting 2 loads in parallel per digital output, PM-switching mode
5.4
Application: Connecting 2 loads in parallel per digital output,
PM-switching mode
To protect against cross-circuits between P-switch and M-switch in fail-safe digital outputs, we recommend the following wiring scheme. This circuit achieves SIL3/Cat.4/PLe.
The figure below shows an example of the pin assignment of the fail-safe digital output module F-DQ 8x24VDC/2A PPM with connection of two parallel loads per digital output, PM-switching mode.
WARNING
To protect the F-module, always install an external fuse with the following properties for the load circuit: Circuit-breaker 24 V DC/16 A, tripping characteristic type B.
Backplane bus interface Microcontroller 1 P1 switch for channel groups 0 to 3
Microcontroller 2 P1 switch for channel groups 4 to 7 Reverse polarity protection
Image 5-3 Wiring diagram for 2 relays in parallel to 1 F-DQ of the digital output module F-DQ 8x24VDC/2A PPM, PM-switching mode
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
37
Applications of the F-I/O module 5.4 Application: Connecting 2 loads in parallel per digital output, PM-switching mode
Note
With a parallel connection of two relays on one digital output (as shown above) the "wire break" fault is only detected if the wire break disconnects both relays from P or M. This diagnostics is not safety-related.
Note You can connect several actuators per output.
If several actuators are connected to an output, the diagnostics of each actuator affects the other ones.
This means: · A wire break is only signaled when several actuators are affected. · A single short-circuit affects multiple actuators.
Parameter assignment
Assign the following parameter for the corresponding channel group:
Table 5- 3 Parameter
Parameter Operating mode of the output
PM-switching mode
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
38
Manual, 01/2016, A5E03858037-AA
Applications of the F-I/O module 5.5 Application: Connecting a load per digital output, PP switching
5.5
Application: Connecting a load per digital output, PP switching
You connect the load between the P-switch DQ-Pn and chassis ground in this application. This circuit achieves SIL3/Cat.4/PLe.
The figure below shows an example of the pin assignment of the fail-safe digital output module F-DQ 8x24VDC/2A PPM with connection of one load per digital output, PP switching.
WARNING
To protect the F-module, always install an external fuse with the following properties for the load circuit: Circuit-breaker 24 V DC/16 A, tripping characteristic type B.
Backplane bus interface Microcontroller 1 P1 switch for channel groups 0 to 3
Microcontroller 2 P1 switch for channel groups 4 to 7 Reverse polarity protection
Image 5-4 Wiring diagram for 1 relay to 1 F-DQ of the digital output module F-DQ 8x24VDC/2A PPM, PP switching
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
39
Applications of the F-I/O module 5.5 Application: Connecting a load per digital output, PP switching
WARNING
In order to achieve SIL3/Cat.4/PLe with this wiring, you must install a qualified actuator, for example, in accordance with IEC 60947.
WARNING
In PP operation, the actuator can no longer be shut down if a cross circuit has developed between a positive potential (e.g. L+) and DQ. To prevent cross circuits between a positive potential (e.g. L+) and DQ, you must route the cables used to connect the actuators in a cross-circuit-proof manner (for example, as separate, sheathed cables or in separate cable ducts).
WARNING
In this application, you have to connect two ground terminals for safety reasons. Otherwise, the maximum residual current at signal "0" (specified in the technical specifications) cannot be maintained if a single ground line is interrupted.
WARNING PP operation In the event of an error at a non-passivated, non-activated output, a brief 1-signal can occur with a duration of 2x max. cycle time (Tcycle) + max. readback time dark test (Trb).
Parameter assignment
Assign the following parameter for the corresponding channel group:
Table 5- 4 Parameter
Parameter Operating mode of the output
PP switching
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
40
Manual, 01/2016, A5E03858037-AA
Interrupts/diagnostic messages
6
6.1
Status and error displays
LED displays
Image 6-1 LED displays of the F-DQ 8x24VDC/2A PPM
Meaning of the LED displays
The following tables explain the meaning of the status and error displays. Remedies for diagnostic alarms can be found in section Diagnostic alarms (Page 46).
WARNING The RUN, ERROR LEDs and channel status/channel diagnostics LEDs of the outputs are not designed as safety-related LEDs and therefore may not be evaluated for safety-related activities.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
41
Interrupts/diagnostic messages 6.1 Status and error displays
RUN and ERROR LEDs
Table 6- 1 RUN/ERROR status and error displays
LED
RUN
ERROR
Off
Off
Flashing
Off
On
Off
Off
Flashing
On
Flashing
Flashing Flashing /
Alternately flashing
Meaning
Remedy
Missing or insufficient voltage on the backplane · Switch on the CPU and/or the system pow-
bus
er supply modules.
· Check whether the module is correctly plugged into the U-connector.
· Check whether too many modules are plugged in.
Module starts up and flashes up to the valid
---
parameter assignment.
Module parameters are assigned and module addressed.
Firmware is being updated.
Indicates diagnostic interrupts:
· Module fault (for example, supply voltage too high)
· Channel fault (for example, frequency too high).
· PROFIsafe communication error Operation in S7-1500 F-CPUs: At least one channel is waiting for user acknowledgment. Hardware defective.
Evaluate the diagnostics and eliminate or acknowledge the error. It may be necessary to remove and re-insert the module.
Replace the module.
· Operation in S7-1500 F-CPUs: The F-
Acknowledge the error (see manual SIMATIC
module expects user acknowledgment after Safety - Configuring and Programming
a module error. · Operation in S7-300/400 F-CPUs: At least
(http://support.automation.siemens.com/WW/vi ew/en/54110126)).
one channel is waiting for user acknowl-
edgment.
PWR LED
Table 6- 2 PWR status display
PWR Off On
Meaning Supply voltage L+ missing
Supply voltage L+ available
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
42
Manual, 01/2016, A5E03858037-AA
Interrupts/diagnostic messages 6.1 Status and error displays
CHx LED
Table 6- 3 Display channel status/channel diagnostics
Status CHx
Diagnostics CHx
Off
Off
On
Off
Off
On
/
Alternately flashing
Meaning Process signal = 0 and no channel diagnostics* Process signal = 1 and no channel diagnostics Process signal = 0 and channel diagnostics Channel waiting for user acknowledgment
* Operation in S7-300/400 F-CPUs only: If necessary, wait for user acknowledgment, if an additional channel is also waiting for user acknowledgment due to an error that occurred later.
CHx/ERROR LED with PROFIsafe address assignment
Table 6- 4 Channel status/channel diagnostics/ERROR display with PROFIsafe address assignment
Status CHx
Off
All are flashing
Diagnostics CHx
All on
Off
ERROR Meaning
Flashing Flashing
The PROFIsafe address does not match the configured PROFIsafe address
Identification of the F-module when assigning the PROFIsafe address
LED CHx/RUN/ERROR if supply voltage error occurs
Table 6- 5 Channel status/channel diagnostics/RUN/ERROR display if supply voltage error occurs
CHx sta- Diagnos-
tus
tics CHx
Off
On
RUN On
ERROR Meaning
Flashing
Supply voltage too high or too low.
· Operation in S7-1500 F-CPUs: Module is waiting for user acknowledgment.
· Operation in S7-300/400 F-CPUs: Module is automatically reintegrated after the correction of the error.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
43
Interrupts/diagnostic messages 6.2 Interrupts
6.2
Interrupts
Introduction
The F-DQ 8x24VDC/2A PPM fail-safe digital output module supports diagnostic interrupts.
Diagnostic interrupt
The F-module generates a diagnostic interrupt for each diagnostic alarm described in section Diagnostic alarms (Page 46). The table below provides an overview of the diagnostic interrupts of the F-module . The diagnostic interrupts are assigned either to one channel or the entire F-module.
WARNING
Before acknowledging the short-circuit diagnostic alarm, remedy the respective fault and validate your safety function. Follow the fault remedying procedure described in section Diagnostic alarms (Page 46).
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
44
Manual, 01/2016, A5E03858037-AA
Table 6- 6 Diagnostic interrupts of the F-DQ 8x24VDC/2A PPM
Diagnostic interrupt
Overtemperature Wire break Parameter error Supply voltage missing Safety event Mismatch of safety destination address (F_Dest_Add) Safety destination address not valid (F_Dest_Add) Safety source address not valid (F_Source_Add) Safety watchdog time value is 0 ms (F_WD_Time) Parameter F_SIL exceeds SIL from specific device application Parameter F_CRC_Length does not match the generated values Version of F-parameter set incorrectly CRC1 fault Save iParameter watchdog time exceeded Restore iParameter watchdog time exceeded Inconsistent iParameters (iParCRC error) F_Block_ID not supported Transmission error: Inconsistent data (CRC error) Transmission error: Timeout (watchdog time 1 or 2 expired) Module is defective Watchdog tripped Short-circuit to L+ Short-circuit to ground Invalid/inconsistent firmware present Channel failure acknowledgment F-address memory not accessible Frequency too high Undertemperature Output defective Read back failure Overload Supply voltage too high Supply voltage too low
Interrupts/diagnostic messages 6.3 Diagnostic alarms
Fault code 5D 6D 16D 17D 25D 64D 65D 66D 67D 68D 69D 70D 71D 73D 74D 75D 76D 77D 78D 256D 259D 261D 262D 283D 779D 781D 785D 786D 797D 798D 800D 801D 802D
Scope of diag- Configurable nostic interrupt
F-module
No
Channel
Yes
F-module
No
Channel
F-module
Channel
F-module
Channel
No
Channel
Channel
F-module
F-module
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
45
Interrupts/diagnostic messages 6.3 Diagnostic alarms
6.3
Diagnostic alarms
Diagnostic alarms
Module faults are indicated as diagnostics (module status).
Note You can connect several actuators per output. If several actuators are connected to an output, the diagnostics of each actuator affects the other ones. This means: · A wire break is only signaled when several actuators are affected. · A single short-circuit affects multiple actuators.
Once the fault is eliminated, the F-module must be reintegrated in the safety program. For additional information on passivation and reintegration of F-I/O, refer to the SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126) manual.
Table 6- 7 Diagnostic alarms of the F-DQ 8x24VDC/2A PPM
Diagnostic alarm Overtemperature
Wire break
Fault code 5D
6D
Meaning
Remedy
An excessively high temperature was measured in the F-module.
Operate the F-module within the specified temperature range (see Technical specifications (Page 51))
Once the temperature has been reduced and returns to the specified range, the F-module must be removed and inserted or the power switched OFF and ON.
Possible causes:
· There is an interrupted cable between · Establish a cable connection.
the module and actuator.
· Disable the wire break detection for
· The channel is not connected (open).
the channel in the parameter as-
· A short-circuit exists.
signment.
· Eliminate the short-circuit.
Parameter error
16D Parameter errors include:
Correct the parameter assignment.
· The F-module cannot use the parameters (unknown, invalid combination, etc.).
· The F-module parameters have not been configured.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
46
Manual, 01/2016, A5E03858037-AA
Interrupts/diagnostic messages 6.3 Diagnostic alarms
Diagnostic alarm Supply voltage missing
Fault code
17D
Safety event
25D
Mismatch of safety destina- 64D tion address (F_Dest_Add)
Safety destination address 65D not valid (F_Dest_Add)
Safety source address not 66D valid (F_Source_Add)
Safety watchdog time value 67D is 0 ms (F_WD_Time)
Parameter F_SIL exceeds 68D SIL from specific device application
Parameter F_CRC_Length 69D does not match the generated values
Version of F-parameter set 70D incorrectly
CRC1 fault
71D
Save iParameter watchdog 73D time exceeded
Restore iParameter watch- 74D dog time exceeded
Inconsistent iParameters
75D
(iParCRC error)
F_Block_ID not supported 76D
Meaning
Missing or insufficient supply voltage L+
For safety purposes, channel was switched off due to an error on another channel. Possible causes:
· A short-circuit exists. · The capacitive load is too high (PP-
switching operation).
The firmware of the F-module has detected a different F-destination address. The firmware of the F-module has detected an illegal different F-destination address. The firmware of the F-module has detected a different F-source address. The firmware of the F-module has detected an invalid watchdog time. The firmware of the F-module has detected a discrepancy between the SIL setting of the communication and the application. The firmware of the F-module has detected a discrepancy in the CRC length.
The firmware of the F-module has detected an incorrect F_Par_Version or an invalid F_Block_ID. The firmware of the F-module has detected inconsistent F-parameters. iPar server does not respond to "save IPar" within 4.4 minutes. iPar server does not respond to "restore IPar" within 4.4 minutes. The firmware of the F-module has detected inconsistent iParameters. The firmware of the F-module has detected an incorrect block ID.
Remedy · Check supply voltage L+ at the
front connector · Check the front connector
· Correct the process wiring. · Increase the test times (dark, light,
switch-on tests). · Check the parameter assignment
of the PROFIsafe driver and the PROFIsafe address assigned to the F-module. · Assign the PROFIsafe address to the F-module (again).
Check the configuration/parameter assignment of the iPar server. Check the configuration/parameter assignment of the iPar server. Check the parameter assignment. Check the parameter assignment of the PROFIsafe driver.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
47
Interrupts/diagnostic messages 6.3 Diagnostic alarms
Diagnostic alarm
Transmission error: Inconsistent data (CRC error)
Fault code
77D
Transmission error: Timeout 78D (watchdog time 1 or 2 expired)
Module is defective
256D
Watchdog tripped
259D
Short-circuit to L+
261D
Meaning
Remedy
The firmware of the F-module has detected a CRC error. Possible causes:
· The communication between the FCPU and F-module is disturbed.
· Impermissibly high electromagnetic interference is present.
· An error occurred in the sign-of-life monitoring.
· Check the communication connection between the F-module and F-CPU.
· Eliminate the electromagnetic interference.
The firmware of the F-module has de-
·
tected a timeout.
·
Possible causes:
· The F-monitoring time is set incorrectly.
· A bus fault is present.
Check the parameter assignment.
Ensure that communication is functioning correctly.
Possible causes: · Impermissibly high electromagnetic
interference is present.
· The F-module has detected an internal error and has reacted in a safetyrelated manner.
· Eliminate the interference. The module must then be pulled and plugged, or the power switched OFF and ON.
· If the F-module cannot be put back into operation, consider replacing it.
Possible causes: · Impermissibly high electromagnetic
interference is present.
· The F-module has detected an internal error and has reacted in a safetyrelated manner.
· Eliminate the interference. The module must then be pulled and plugged, or the power switched OFF and ON.
· If the F-module cannot be put back into operation, consider replacing it.
Short-circuit to L+ can mean:
· The output cable is short-circuited to ·
L+.
·
· The capacitive load between the
channels is too high (for example, due
to cable length)
You must eliminate the error within 100 hours; otherwise, the F-module is permanently passivated and an acknowledgment is no longer possible.
Correct the process wiring.
Increase the test times (dark, light, switch-on tests).
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
48
Manual, 01/2016, A5E03858037-AA
Interrupts/diagnostic messages 6.3 Diagnostic alarms
Diagnostic alarm Short-circuit to ground
Fault code
262D
Invalid/inconsistent firmware 283D present
Channel failure acknowledgment
F-address memory not accessible
779D 781D
Frequency too high
785D
Undertemperature
786D
Output defective
797D
Meaning
Remedy
Short-circuit to ground can mean:
· Correct the process wiring.
· The output cable is short-circuited to · Increase the test times (dark, light,
ground.
switch-on tests).
· The output signal is short-circuited to ground.
· There is a short-circuit between two output channels.
· The capacitive load is too high.
You must eliminate the error within 100 hours; otherwise, the F-module is permanently passivated and an acknowledgment is no longer possible.
The firmware is incomplete and/or firm- · Perform a firmware update for all
ware added to the F-module is incompat-
parts of the F-module and note any
ible. This leads to errors or functional limitations when operating the F-module.
error messages.
· Use only firmware versions re-
leased for this F-module.
A channel fault was detected. Confirmation is required to enable the channel.
The F-source address and F-destination address stored in the coding element cannot be accessed.
The maximum switching frequency of the F-module has been exceeded.
The minimum permissible temperature limit has been violated.
The F-module has detected an internal error.
You must eliminate the error within 100 hours; otherwise, the F-module is permanently passivated and an acknowledgment is no longer possible.
Possible causes:
Confirm the channel fault.
Verify that the coding element is present or replace the coding element.
Reduce the switching frequency (see Technical specifications (Page 51)) Operate the F-module within the specified temperature range (see Technical specifications (Page 51)) · Increase the test times (dark, light,
switch-on tests). · Check the wiring. · Consider replacing the F-module.
· The capacitive load is too high.
· Short-circuit to L+ or M
· The F-module has detected an internal error and has reacted in a safetyrelated manner.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
49
Interrupts/diagnostic messages 6.3 Diagnostic alarms
Diagnostic alarm Read back failure
Overload
Supply voltage too high Supply voltage too low
Fault code 798D
800D
801D 802D
Meaning
Remedy
The F-module has detected an internal error.
· Increase the test times (dark, light, switch-on tests).
You must eliminate the error within 100 · If the error continues, consider
hours; otherwise, the F-module is permanently passivated and an acknowledg-
replacing the F-module.
ment is no longer possible.
Possible causes:
· Impermissibly high electromagnetic interference is present.
· The capacitive load is too high.
· The F-module has detected an internal error and has reacted in a safetyrelated manner.
The maximum permissible output current · Check the process wiring.
has been exceeded. The output stage has been switched off.
You must eliminate the error within 100
· Reduce the load or the load current.
hours; otherwise, the F-module is perma-
nently passivated and an acknowledg-
ment is no longer possible.
Possible causes:
· A short-circuit exists. · The connected load is too high.
The supply voltage is too high. The supply voltage is too low.
Check the supply voltage. Check the supply voltage.
Supply voltage outside the nominal range
If the supply voltage L+ is outside the specified value range, the ERROR LED flashes and the module is passivated.
When the voltage is then recovered (level must remain within the specified value for at least 1 minute, see Technical specifications (Page 51)), the ERROR LED stops flashing. The module remains passivated and waits for user acknowledgment.
Generally applicable information on diagnostics
Information on diagnostics that pertains to all fail-safe modules (for example, readout of diagnostics functions or passivation of channels) is available in the SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126) manual.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
50
Manual, 01/2016, A5E03858037-AA
Technical specifications
7
Technical specifications of F-DQ 8x24VDC/2A PPM
General information Product type designation Firmware version
· FW update possible
Product function I&M data Engineering with STEP 7 TIA Portal can be configured/integrated as of version Operating mode DQ Supply voltage Rated value (DC) Low limit of permitted range (DC) High limit of permitted range (DC) Reverse polarity protection Input current Current consumption (rated value) Output voltage Rated value (DC) Power Power consumption from the backplane bus Power loss Power loss, typ. Address range Address space per module Address space per module, max. Digital outputs Number of outputs M switching P switching Short-circuit protection Wire break detection
· Response threshold, typ.
Overload protection
· Response threshold, typ.
Voltage induced on current interruption limited to
6ES7526-2BF00-0AB0
F-DQ 8x24VDC/2A PPM
Yes
Yes; I&M0 to I&M3
V13 SP1 with HSP0086
Yes
24 V 19.2 V 28.8 V Yes
110 mA; without load
24 V
0.8 W
11 W
6 byte
8 Yes Yes Yes Yes 8 mA Yes 2.9 A PM switching: -24 V + (-47 V), PP switching: -24 V
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
51
Technical specifications
Switching capacity of outputs With resistive load, max. With lamp load, max. Load resistance range Low limit High limit Output voltage For "1" signal, min. Output current For "1" signal, rated value For "0" signal, residual current, max.
Switching frequency With resistive load, max. With inductive load, max. With lamp load, max. Total current of outputs Max. current per channel Total current of the outputs (per module) Horizontal mounting position
· Up to 40 , max.
· Up to 60 , max.
Vertical mounting position
· Up to 40 , max.
Cable length shielded, max. unshielded, max. Interrupts/diagnostics/status information Fail-safe values can be switched to Interrupts Diagnostic interrupt Diagnostic alarms Diagnostics Monitoring of supply voltage Wire break Short-circuit Group error Diagnostics display LED RUN LED ERROR LED Monitoring of the supply voltage (PWR-LED) Channel status display For channel diagnostics For module diagnostics
6ES7526-2BF00-0AB0
2 A 10 W
12 2000
24 V; L+ (-0.5 V)
2 A 0.5 mA; PP switching or separate P and M-switch, PM-switching: max. 1 mA
30 Hz 0.1 Hz 10 Hz
2 A
16 A 8 A
8 A
1000 m 500 m
No
Yes
Yes Yes Yes Yes Yes
Yes; green LED Yes; red LED Yes Yes; green LED Yes; red LED Yes; red LED
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
52
Manual, 01/2016, A5E03858037-AA
Technical specifications
Electrical isolation Electrical isolation, channels Between channels Between channels and backplane bus Insulation Insulation test voltage Standards, approvals, certificates Maximum achievable safety class in safety mode Performance level according to EN ISO 138491:2008 SIL according to IEC 61508 Low demand mode: PFDavg according to SIL3 High demand/continuous mode: PFH according to SIL3 Environmental conditions Ambient temperature in operation Horizontal installation, min. Horizontal installation, max. Vertical installation, min. Vertical installation, max. Dimensions Width Height Depth Weights Weight, approx.
6ES7526-2BF00-0AB0
No Yes
707 VDC (type test)
PLe SIL 3 < 6.00E-05 < 2.00E-09 1/h
0 °C 60 °C 0 °C 40 °C
35 mm 147 mm 129 mm
300 g
Note
To reach the maximum cable length, it may be necessary to increase the settings for maximum readback time switch on test or maximum read-back time dark test.
We also recommend a more detailed consideration of the boundary conditions, such as EMC, cables used, cable guide, etc.
Dimension drawing
See system manual S7-1500 Automation System (http://support.automation.siemens.com/WW/view/en/59191792).
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
53
Response times
A
Introduction
The next section shows the response times of the digital output module F-DQ 8×24VDC/2A PPM. The response times of digital output module F-DQ 8×24VDC/2A PPM are included in the calculation of the F-system response time.
Definition of response time for fail-safe digital outputs
The response time represents the interval between an incoming safety message frame from the backplane bus and the signal change at the digital output.
Times required for the calculation
Max. cycle time: Tcycle = 5 ms
Max. acknowledgment time (Device Acknowledgment Time): TDAT = 10 ms
The maximum response time in the case of fault (One Fault Delay Time, OFDT) is equivalent to the maximum response time with no faults (Worst Case Delay Time, WCDT).
Assign the parameters for maximum readback time dark test (Maximum Readback Time, Trb) and a maximum readback time switch-on test (Maximum Readback Time Switch-On Test, Trb_swon) in STEP 7.
Maximum response time with no faults (Worst Case Delay Time, WCDT)
t <= 3 * cycle time + max (Trb, Trb_swon)
Maximum response time with detection of a channel fault by readback
t <= 4 * cycle time + 2 * max (Trb, Trb_swon)
Maximum response time with detection of a channel fault by bit pattern test
t <= 2 * cycle time + maximum test time
Maximum response time with detection of a wire break at "1" signal
t <= 3 * cycle time + 1000 ms (wire break detection) + max (Trb, Trb_swon)
Maximum response time with detection of an overload at "1" signal
t <= 4 * cycle time + max (Trb, Trb_swon)
Maximum response time with detection of an overload or wire break at "0" signal and light test activated.
t <= 2 * cycle time + maximum test time
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
54
Manual, 01/2016, A5E03858037-AA
Switching of loads
B
B.1
Connecting capacitive loads
If an F-DQ 8x24VDC/2A PPM digital output module is interconnected with loads that require little current and have capacitance, this can lead to detection of a short-circuit or overload. Reason: The capacitance cannot be sufficiently discharged or charged during the configured readback time of the bit pattern test.
The typical trends shown in the two figures below represent the correlation between load impedance and maximum switched load capacitance at a supply voltage of 24 V DC.
Image B-1 Switching of capacitive loads for the F-DQ 8x24VDC/2A PPM digital output module in PM-switching mode depending on the configured dark and light test times
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
55
Switching of loads B.1 Connecting capacitive loads
Image B-2 Switching of capacitive loads for the F-DQ 8x24VDC/2A PPM digital output module in PP-switching mode depending on the configured dark and light test times
The trends shown were plotted using a SIMATIC PS 307 10A power supply unit with a cable length of 25 m (cable cross-section of 1.5 mm2) between the output of the F-DQ 8x24VDC/2A PPM output module and the load.
Note The maximum readback time switch on test is only relevant if the light test is activated.
Remedy for detecting a short-circuit
1. Determine the load current and capacitance of the load. 2. Locate the operating point in the diagram above. 3. If the operating point is above the trend, select an actuator with higher current
consumption so that the new operating point is below the curve.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
56
Manual, 01/2016, A5E03858037-AA
Example
Switching of loads B.2 Switching of inductive loads
You have set a dark test time of 100 ms, a light test time of 2 ms and the PM-switching mode. You have set the load current to 20 mA and the capacity to 100 µF. The operating point is thus outside the range defined by the two trends (gray background). Solution: Select an actuator with higher current consumption. In this example, 40 mA. Alternatively, you can configure the parameter "Max. readback time dark test" with 200 ms.
B.2
Switching of inductive loads
Switching of inductive loads
Use the switchgear for control and auxiliary circuits according to the utilization category DC-13 in accordance with IEC 60947-5-1:2014.
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
57
Open Source Software
C
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
58
Manual, 01/2016, A5E03858037-AA
Open Source Software
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
59
Open Source Software
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
60
Manual, 01/2016, A5E03858037-AA
Open Source Software
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
61
Open Source Software
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
62
Manual, 01/2016, A5E03858037-AA
Open Source Software
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
63
Open Source Software
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
64
Manual, 01/2016, A5E03858037-AA
Open Source Software
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
65
Open Source Software
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
66
Manual, 01/2016, A5E03858037-AA
Open Source Software
Digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Manual, 01/2016, A5E03858037-AA
67
SIMATIC ET 200MP Product information for the digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
Product Information
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, solutions, machines, equipment and/or networks. They are important components in a holistic industrial security concept. With this in mind, Siemens' products and solutions undergo continuous development. Siemens recommends strongly that you regularly check for product updates. For the secure operation of Siemens products and solutions, it is necessary to take suitable preventive action (e.g. cell protection concept) and integrate each component into a holistic, state-of-the-art industrial security concept. Third-party products that may be in use should also be considered. You can find more information about industrial security on the Internet (http://www.siemens.com/industrialsecurity). To stay informed about product updates as they occur, sign up for a product-specific newsletter. You can find more information on the Internet (http://support.automation.siemens.com).
Content
This product information contains important information on the digital output module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0). The product information is part of the product supplied. The statements provided in it should be considered more up-to-date than other documentation if uncertainties arise.
Addition to the section "Max. readback time dark test"
WARNING You can configure the parameter "Max. readback time dark test" with a maximum of 100 ms for F-modules with firmware version 1.0.0.
Addition to the section "Operating mode of the output"
WARNING If the F-module with firmware version 1.0.0 has been configured with PP-switching mode, you need to change the "Behavior after channel fault" parameter from "Passivate channel" to "Passivate the entire module".
Correction in the section "Application: Connection of one load per digital output, PP-switching"
WARNING In PP operation, a cross-circuit between a positive potential (e.g. L+ or other signal lines) and DQ is detected by the module and it switches the output off. However, the connected actuator is still supplied with power due to the external fault. To prevent cross-circuits between a positive potential (e.g. L+ or other signal lines) and DQ, you must route the lines used to connect the actuators in a cross-circuit-proof manner (for example, as separate, sheathed cables or in separate cable ducts).
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
©ProSdieumcteinsfoArmGa2ti0o1n6f.oAr ltlhreigdhitgsitraelsoeurtvpeudt module F-DQ 8x24VDC/2A PPM (6ES7526-2BF00-0AB0)
AA55EE3377442288339911--AABB,, 0022//22001166
3
Cycle and response times
SIMATIC
S7-1500, S7-1500R/H, ET 200SP, ET 200pro Cycle and response times
Function Manual
Preface
Function manuals Documentation Guide
1
Program execution
2
Cyclic program execution
3
Event-driven program execution
4
Cycle and response times of
the S7-1500R/H redundant
5
system
11/2019
A5E03461504-AE
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03461504-AE 10/2019 Subject to change
Copyright © Siemens AG 2013 - 2019. All rights reserved
Preface
Purpose of the documentation
The controller offers various options for program execution with different run priorities. Cyclic-driven and time-driven program execution have the largest share. The response times of a controller are therefore significantly determined by the processing cycles.
There is also the possibility of event-driven program execution. The event-driven program execution is normally limited to a few selected events.
This manual provides information on the following topics:
Types of program execution
Run priorities
Cycle and response times, and the influences to which they are subject
Configuration options for the optimization of your user program
Basic knowledge required The following knowledge is required in order to understand the documentation: General knowledge of automation technology Knowledge of the SIMATIC industrial automation system Knowledge of the use of Windows-based computers Knowledge of working with STEP 7
Conventions
STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)".
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
3
Preface
Scope of the documentation This documentation mainly covers the description of the CPU components of the cycle and response times of the following systems:
SIMATIC S7-1500 automation system
SIMATIC S7-1500R/H redundant system
The CPUs of the ET 200SP distributed I/O system
The CPUs of the ET 200pro distributed I/O system based on SIMATIC S7-1500
You can find links to more information on the ET 200MP, ET 200SP and ET 200pro distributed I/O systems at the corresponding points in this manual.
What's new in edition 11/2019 as compared to edition 10/2018?
What's new?
Changed contents
What are the customer benefits?
Where can I find information?
Improved visualization of the The visualization of the current communi- ·
communication load in the cation load and its effects on the cycle
web server
time helps you to find suitable values for
the parameterization of the communication
load.
·
In section Extension of cycle time due to communication load (Page 30)
In the Web Server (https://support.industry.sie mens.com/cs/ww/en/view/5 9193560) function manual
What's new in edition 10/2018 as compared to edition 09/2016?
What's new?
Changed contents
Scope of the function manual expanded to include CPUs of the S7-1500R/H redundant system
What are the customer benefits?
The determination of the cycle and response times of the S7-1500R/H redundant system follows the same principle as for the CPUs of the S7-1500 automation system.
Where can I find information?
Section Cycle and response times of the S7-1500R/H redundant system (Page 56)
What's new in the 09/2016 edition compared to the 02/2014 edition?
What's new?
Changed contents
Scope of the function manual expanded to include the CPUs of the ET 200SP distributed I/O system and CPU 1516pro-2 PN of the ET 200pro distributed I/O system
What are the customer benefits?
Where can I find information?
Functions that you will be familiar with from the SIMATIC S7-1500 CPUs are implemented in CPUs in other designs (ET 200SP) and in the CPU 1516pro-2 PN (degree of protection IP 65, IP 66 and IP 67).
Starting from section Program execution (Page 10)
Cycle and response times
4
Function Manual, 11/2019, A5E03461504-AE
Preface
Recycling and disposal For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
Security information Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
5
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com).
Cycle and response times
6
Function Manual, 11/2019, A5E03461504-AE
Table of contents
Preface ...................................................................................................................................................... 3
1 Function manuals Documentation Guide ................................................................................................... 8
2 Program execution................................................................................................................................... 10
2.1
Principle of operation ..............................................................................................................10
2.2
Overload behavior...................................................................................................................12
3 Cyclic program execution ........................................................................................................................ 17
3.1
Cycle .......................................................................................................................................18
3.2 3.2.1 3.2.2 3.2.2.1 3.2.2.2 3.2.2.3 3.2.2.4
Cycle time ...............................................................................................................................20 Different cycle times................................................................................................................20 Influences on the cycle time ...................................................................................................24 Update time for process image partitions ...............................................................................24 User program execution time..................................................................................................26 Extension of cycle time due to communication load...............................................................30 Special consideration when PROFINET IO communication is configured on the 2nd PROFINET interface (X2) .......................................................................................................42
3.3
Time-driven program execution in cyclic interrupts ................................................................44
3.4
Response time for cyclic and time-driven program execution................................................46
3.5
Summary of response time with cyclic and time-controlled program execution.....................51
4 Event-driven program execution .............................................................................................................. 52
4.1
Response time of the CPUs when program execution is event-controlled ............................52
4.2
Process response time when program execution is event-driven ..........................................54
5 Cycle and response times of the S7-1500R/H redundant system ............................................................ 56
5.1
Introduction .............................................................................................................................56
5.2
Maximum cycle time and time errors ......................................................................................57
5.3 5.3.1 5.3.2 5.3.3 5.3.4
Influences on the cycle time of the S7-1500R/H redundant system.......................................59 Influences on the cycle time in RUN-Solo system state .........................................................59 Influences on the cycle time in SYNCUP system state ..........................................................59 Influences on the cycle time in RUN-Redundant system state ..............................................63 Influences on the cycle time when a CPU fails.......................................................................66
5.4
Response time of R/H CPUs ..................................................................................................69
5.5
Timetables for the RUN-Redundant system state ..................................................................72
Glossary .................................................................................................................................................. 75
Index........................................................................................................................................................ 81
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
7
Function manuals Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system, for CPU 1516pro-2 PN based on SIMATIC S7-1500, and for the distributed I/O systems SIMATIC ET 200MP, ET 200SP and ET 200AL is divided into three areas. This division allows you easier access to the specific information you require.
Basic information
System manuals and Getting Started manuals describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500, ET 200MP, ET 200SP and ET 200AL systems; use the corresponding operating instructions for CPU 1516pro-2 PN. The STEP 7 online help supports you in configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, terminal diagrams, characteristics and technical specifications.
Cycle and response times
8
Function Manual, 11/2019, A5E03461504-AE
Function manuals Documentation Guide
General information The function manuals contain detailed descriptions on general topics such as diagnostics, communication, Motion Control, Web server, OPC UA. You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742705). Changes and additions to the manuals are documented in product information sheets. You will find the product information on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/us/en/view/68052815) ET 200SP (https://support.industry.siemens.com/cs/us/en/view/73021864) ET 200AL (https://support.industry.siemens.com/cs/us/en/view/99494757)
Manual Collections The Manual Collections contain the complete documentation of the systems put together in one file. You will find the Manual Collections on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/86140384) ET 200SP (https://support.industry.siemens.com/cs/ww/en/view/84133942) ET 200AL (https://support.industry.siemens.com/cs/ww/en/view/95242965)
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
9
Program execution
2
2.1
Principle of operation
Introduction
You often program your user program with a program cycle OB, usually in OB 1. With complex applications, it is often necessary to comply with short response times required by the application. You can often meet the response time requirements by splitting the user program up into several parts with different response time requirements. The CPU offers a number of different OB types for this purpose, the properties (priority, frequency, etc.) of which can be adapted to meet your requirements.
Program organization
You can choose from the following types of program execution for running your user program:
Program execution in the cyclic program of the CPU:
The CPU executes the user program cyclically. When the execution has reached the end of a cycle, the program execution starts again in the next cycle. In the simplest case, you execute the entire user program in the cyclic program of the CPU. All tasks in the user program are then processed with equal rank. This also results in the same response times for all tasks.
In addition to program execution in the cyclic program, there is time-driven and event-driven program execution.
Time-driven execution:
In a complex user program, there are frequently portions with different response time requirements. You can optimize the response times by taking advantage of these differences in the requirements. To do so, you can break down the program parts with higher response time requirements into higher-priority OBs with shorter cycles, for example cyclic interrupt OBs.
The execution of these parts can thus occur at different frequencies and with different priorities.
Event-driven execution:
Depending on the I/O modules used, you can configure hardware interrupts for specific process events (such as an edge change of a digital input) that result in the call of the assigned hardware interrupt OB. The hardware interrupts have a higher priority and interrupt the cyclic program of the CPU. You can achieve very short response times in the CPU with hardware interrupts by directly triggering program execution.
Keep in mind that the time characteristics of your application becomes less predictable with intense use of hardware interrupts. The reason for this is that the time at which the triggering events occur can result in drastically different response times.
Tip: Use hardware interrupts only for a few selected events.
Special consideration for hardware interrupts: If you have assigned an OB to an event (hardware interrupt), the OB then has the priority of the event.
Cycle and response times
10
Function Manual, 11/2019, A5E03461504-AE
Program execution 2.1 Principle of operation
Using process image partitions
If you have distributed a program over various OBs, for example, due to different response time requirements, it is advisable and often necessary to assign the update of the used I/O data directly to these OBs. You can use process image partitions for this purpose.
You group the input and output data in a process image partition according to their use in the program and assign the data to the OB.
A process image partition of the inputs (PIPI) permits the associated input data for an OB program to be updated immediately before the OB program starts.
A process image partition of the outputs (PIPQ) permits the output data associated with an OB program to become effective on the outputs immediately after the OB program runs.
You have 32 (0 ... 31) process image partitions at your disposal. The I/O is assigned to the process image partition 0 by default (setting: "Automatic update"). Process image partition 0 is permanently assigned to cyclic execution.
You have to configure the "system-side update of process image partitions". You can find additional information on configuration of process image partitions in the online help for STEP 7 under the keyword "Assign process image/process image partition".
Interruptibility of program execution
Each organization block is processed according to the priority it has been assigned. You can adapt the priority according to the response time requirements for most organization blocks.
All program cycle OBs always have the lowest priority of 1. The highest priority is 26.
Communication tasks always have priority 15. If necessary, you can change the priority of your blocks and select a higher priority than the communication.
Organization blocks or system activities with higher priority interrupt organization blocks or system activities with lower priority. Organization blocks or system activities with higher priority interrupt thus extend the runtime of the interrupted organization blocks or system activities. If two pending tasks have the same priority, these tasks are processed in the order in which the relevant start events occurred.
Note Higher priority OBs
Communication functionality is strongly influenced by too many and/or runtime-intensive OBs with a priority > 15.
When using OBs with a priority 15, you should therefore consider the runtime load that they cause.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
11
Program execution 2.2 Overload behavior
Reference
You can find additional information on the subject of "priorities" in the "Events and OBs" section of the following manuals:
S7-1500 automation system (https://support.industry.siemens.com/cs/ww/en/view/59191792) system manual
S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833) system manual
ET 200SP distributed I/O system (https://support.industry.siemens.com/cs/ww/en/view/58649293) system manual
Operating instructions CPU 1513pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109769507) and CPU 1516pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109482416)
You can find additional information on organization blocks and their priorities for Motion Control on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109751049).
2.2
Overload behavior
CPU overload behavior
An occurring event triggers the execution of the associated OB. Depending on the OB priority and the current processor load, a time delay may occur before the OB is executed when there is an overload. The same event can therefore occur once or several times before the user program processes the OB belonging to the preceding event. The CPU handles such a situation as follows: The operating system queues the events in the queue associated with their priority in the order of their occurrence. The CPU then takes the oldest event for the highest priority and processes the associated OB. After the OB has been processed, the CPU processes the OB for the next event.
To control temporary overload situations, you can limit the number of queued events that originate from the same source. The next event is discarded as soon as the maximum number of pending triggers of a specific cyclic interrupt OB, for example, is reached.
Overload occurs when similar events occur faster than the CPU can process these events. Similar events are events from a single source, such as start events for a specific cyclic interrupt OB.
Cycle and response times
12
Function Manual, 11/2019, A5E03461504-AE
Program execution 2.2 Overload behavior
Configuration of the overload response In the properties of an organization block in which an overload can occur, you can select the response to overload under "Attributes" and "Event queuing".
Figure 2-1 Configuration of the overload response in the block properties
Events to be queued
The OB parameter "Events to be queued" is used to specify how many similar events the operating system places in the associated queue and therefore post-processes. If this parameter has the value 1, for example, exactly one event is stored temporarily.
If the maximum number of similar start events is reached in the queue, each additional start event is only counted and subsequently discarded. During the next scheduled processing of the event, the CPU provides the number of discarded start events in the "Event_Count" input parameter (in the start information). You can then react appropriately to the overload situation. The CPU then resets the counter for lost events to zero.
Note
Post-processing of cyclic events is often not desirable, as this can lead to an overload with OBs of the same or lower priority. Therefore, it is generally advantageous to discard similar events and to react to the overload situation during the next scheduled OB processing. A low value of the "Events to be queued" parameter mitigates an overload situation.
To ensure that the CPU processes the OB of at least one queued event, the minimum number of events to be queued is "1". The maximum number of events that can be queued is "12".
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
13
Program execution 2.2 Overload behavior
Report event overflow into diagnostic buffer
If the CPU first discards a start event of a cyclic interrupt OB, for example, its further behavior depends on the OB parameter "Report event overflow into diagnostic buffer". If you have selected the check box, the CPU enters the event in the diagnostic buffer for the overload situation at this event source. If an overload situation occurs again (overflow counter changes from 0 to 1), another diagnostic buffer entry is made at the next OB end.
Enable time error
The cyclic interrupt OB parameter "Enable time error" is used to specify whether the CPU is to call a time error OB when a specific overload level is reached for similar events. You use the OB parameter "Enable time error" to program a reaction to an overload before the limit for similar events is reached. The reaction occurs before the CPU discards similar events.
By default, the "Enable time error" parameter is not set.
Event threshold for time error
Select the "Enable time error" check box to enable the "Event threshold for time error" OB parameter. You use the "Event threshold for time error" OB parameter to specify how many similar events in the queue are permitted before the CPU calls a time error OB.
The following value range applies to the "Event threshold for time error" parameter:
1 "Event threshold for time error" "Events to be queued".
Example 1
The following example shows the response of the CPU when multiple similar events occur faster than the CPU can process the associated OBs. In example 1, the user selected the following parameter assignment:
Figure 2-2 Example of parameter assignment for the overload behavior
Cycle and response times
14
Function Manual, 11/2019, A5E03461504-AE
Program execution 2.2 Overload behavior
The figure below shows the processing sequence as soon as an event calls an associated OB.
Example 2
Figure 2-3 Example 1
As soon as an occurring event calls an OB, the event occupies a slot of the OB. The occupied slot is free again as soon as the CPU has processed the event. If the CPU has not completed processing the OB of an occurring event, additional occurring events each occupy an additional slot of the OB during this time. As soon as this number exceeds the configured number of events to be queued, these events are discarded and counted by the overflow counter. When an OB which takes a long time to run is completed, the CPU creates an entry
in the diagnostic buffer and sets the overflow counter to zero (). After the CPU has
processed this long-running OP, the CPU then processes the OBs of the events that are queued one after the other. At the next new occurring event, the CPU writes the previous value of the reset overflow counter to the start information of the OB. The CPU then
processes the OB ().
In example 2, the user has selected the following parameter assignment:
Figure 2-4 Example of parameter assignment for the overload behavior
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
15
Program execution 2.2 Overload behavior
Contrary to example 1, the CPU in example 2 requests a time error as soon as the configured event threshold has been exceeded. An additional time error can then only occur if all slots of the OB have been free once in the meantime.
Figure 2-5 Example 2
Cycle and response times
16
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution
3
Validity
The statements of the section "Cyclic program execution" apply to the CPU components of the following systems:
S7-1500 automation system
ET 200MP and ET 200SP distributed I/O systems
The CPUs of the ET 200pro distributed I/O system based on SIMATIC S7-1500
S7-1500R/H redundant system (in RUN-Solo system state) In RUN-Redundant system state, the statements of section "Cycle and response times of the S7-1500R/H redundant system (Page 56)" apply.
Restrictions
With the S7-1500R/H redundant system, there are restrictions compared to the S7-1500 automation system. The S7-1500R/H redundant system does not support all hardware properties and firmware functions of the S7-1500 automation system (for example, it does not support PROFIBUS DP, central I/O, web server, etc.).
The restrictions are described in the S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833) system manual.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
17
Cyclic program execution 3.1 Cycle
3.1
Cycle
Definition of cycle
A cycle includes the following sections:
Automatic update of process image partition 0 of the outputs (PIPQ 0)
Automatic update of process image partition 0 of the inputs (PIPI 0)
Execution of the cyclic program
The process image partition 0 is automatically updated in the cycle. You assign the I/O addresses to these process image partitions (PIPI 0/PIPQ 0) when you configure the I/O modules via the "Automatic update" setting (default).
Figure 3-1 Assigning I/O addresses to process image partitions
Cycle and response times
18
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.1 Cycle
The figure below illustrates the phases that are passed through during a cycle. In the example below the user has configured a minimum cycle time. Updating of the process image partitions and processing of the cyclic program is completed before the end of the configured minimum cycle time. Therefore, the CPU waits until the configured minimum cycle time has expired before the next program cycle starts.
Cycle control point at which the operating system starts measurement of the cycle time. The CPU writes the states from the process image output to the output modules. The CPU reads the status of the inputs at the input modules and writes the input data to the
process image input.
The CPU processes the user program and executes the instructions specified in the program. Wait phase until end of configured minimum cycle time
Figure 3-2 Cycle
Cycle control point When the cycle control point is reached, the CPU has completed the cycle program and is no longer executing OBs. All user data are consistent at this time. The requirement is that no communication that modifies user data (such as HMI communication or PUT/GET communication) is active.
The cycle control point marks:
The end of a cycle and its cycle time statistics
The start of the next cycle and its cycle time statistics
The restart of the monitoring of the configured maximum cycle time (time-out counter is reset)
The cycle control point is reached depending on which of the following events occurred last:
End of the last program cycle OB
Expiry of the minimum cycle time (if configured)
After the cycle control point has been reached, the CPU executes the following steps:
1. Writes the process image outputs to the output modules
2. Reads in the status of the inputs from the input modules into the process image input
3. Executes the first program cycle OB
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
19
Cyclic program execution 3.2 Cycle time
3.2
Cycle time
Definition of cycle time The cycle time is the time the CPU needs for: Updating the process image inputs/outputs Executing the cyclic program All program parts and system activities interrupting this cycle Waiting for the minimum cycle time (if it is parameterized and is longer than the program execution time)
3.2.1
Different cycle times
Introduction
The cycle time (Tcyc) is not the same in each cycle because the processing times may vary. Causes of this include: For example, different program runtimes:
Program loops Conditional commands Conditional block calls Different program paths Lengthening due to interruptions, for example: Time-driven interrupt processing Event-driven interrupt processing Communication
Cycle and response times
20
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
Causes of different cycle times The figure below shows the different cycle times Tcyc1 and Tcyc2 using an example. Because the cyclic program is interrupted by a cyclic interrupt OB in this example (for example: OB 30), the cycle time Tcyc2 is greater than Tcyc1. The cyclic interrupt OB in turn is interrupted by Motion Control functions and communication.
Figure 3-3 Possible causes of differing cycle times
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
21
Cyclic program execution 3.2 Cycle time
Minimum cycle time
In STEP 7, you can set a minimum cycle time for a CPU. The default setting for the minimum cycle time of the non-redundant CPUs is one millisecond. It is advisable to increase this setting in the following cases:
To reduce the cycle time's fluctuation range.
To make remaining computing time available for communication tasks. The CPU then processes these communication tasks until the minimum cycle time has expired. Making the remaining computing time available to communication tasks offers the following advantages:
Longer minimum cycle times prevent that process images are updated unnecessarily often and thus lead to less load on the backplane bus.
Longer minimum cycle times result in an increase in communication performance.
Maximum cycle time
The maximum cycle time is a configurable high limit of the cyclic program runtime. The task of the maximum cycle time is to monitor the response time required for the respective process.
The maximum cycle time of non-redundant CPUs is set to 150 ms by default. You can set this value from 1 ms to 6000 ms when assigning parameters to the CPU. When the time of the cycle currently being processed is longer than the maximum cycle time, the time error OB (OB 80) is called. You specify how the CPU responds to the time error with the user program in OB 80.
The following table shows the response of the CPU to the cycle time being exceeded with and without a configured OB 80:
Table 3- 1 Response of the CPU to cycle time being exceeded
Number of times cycle time is exceeded First time cycle time is exceeded without OB 80 First time cycle time is exceeded with OB 80 Second time cycle time is exceeded with OB 80
Operating mode STOP RUN STOP
Cycle and response times
22
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
Cycle time statistics You can read the cycle time statistics either directly from STEP 7 ("Online tools" task card) or with the "RT_INFO" instruction. You can use the "RT_INFO" instruction to generate statistics in STEP 7 on the runtime of specific organization blocks for communication or for the user program. For example, this includes The shortest and longest cycle time The portions of runtime used for communication and the user program
Note Showing the cycle time statistics on the display and Web server With the S7-1500 CPUs, you also have the option of calling the cycle time statistics via the display of the CPU. As of firmware version 2.0 of the CPUs, the cycle time statistics are also displayed in the Web server.
To view the cycle time statistics directly in STEP 7, follow these steps: 1. Establish an online connection to the CPU with STEP 7. 2. Select the "Online tools" task card. Result: The diagram of the cycle time statistics is displayed in the cycle time section. The following figure shows an extract from STEP 7 with the cycle time statistics. In this example, the cycle time fluctuates between 7 ms and 12 ms. The current cycle time is 10 ms. The maximum cycle time that can be set in this example is 40 ms.
Reference
Figure 3-4 Cycle time statistics
You can find additional information on the runtime characteristics of the CPU with the "RT_INFO" instruction in the user program. The instruction includes information about: The utilization of the CPU by the user program and communication in percentage The runtimes of the individual OBs
Additional information on the "RT_INFO" instruction is available in the STEP 7 online help.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
23
Cyclic program execution 3.2 Cycle time
3.2.2
Influences on the cycle time
3.2.2.1
Update time for process image partitions
Estimating update time for process image partitions The update time of the process image partitions depends on the volume of assigned central and distributed I/O module data. You can estimate the update time using the following formula:
Base load for process image update + Number of words in the process image x copy time for central I/O + Number of words in the process image via DP x copy time for PROFIBUS I/O + Number of words in the process image via PROFINET x copy time for PROFINET I/O _______________________________________________________________________ = Update time of the process image partition
Update times of the process image partitions
The following table contains the times for estimating the typical update times of the process image partitions.
Table 3- 2 Data for estimating the typical update time of the process image partitions
Components
Basic load for updating process image partitions
Copy time for central I/O
Copy time for distributed I/O via PROFIBUS
Copy time for distributed I/O via PROFINET
1511(F)-1 PN 1511T(F)-1 PN 1511C-1 PN 1512C-1 PN 1513(F)-1 PN 35 s
9 s/word 0.5 s/word
0.5 s/word
Update times of the CPUs
S7-1500
1515(F)-2 PN
1517(F)-3 PN/DP 1518(F)-4 PN/DP
1515T(F)-2 PN 1516(F)-3 PN/DP
1517T(F)-3 PN/DP
1518(F)-4 PN/DP MFP
1516T(F)-3 PN/DP
30 s
8 s/word 0.5 s/word
0.5 s/word
7 s
5 s/word 0.4 s/word
0.4 s/word
5 s
4 s/word 0.3 s/word
0.3 s/word
Cycle and response times
24
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
Components
Basic load for updating process image partitions Copy time for distributed I/O via PROFINET
Update time of the CPU in RUN-Solo system state
S7-1500R/H*
1513R-1 PN 35 s 0.5 s/word
1515R-2 PN 30 s 0.5 s/word
1517H-3 PN 7 s 0.4 s/word
* Additional information about cycle and response times of R/H CPUs is available in the section "Cycle and response times of the S7-1500R/H redundant system"
Components
Basic load for updating process image partitions Copy time for central I/O Copy time for distributed I/O via PROFIBUS Copy time for distributed I/O via PROFINET
1510SP(F)-1 PN 60 s 0.5 s/word 0.5 s/word 0.5 s/word
Update time of the CPU
ET 200SP
1512SP(F)-1 PN
1515SP(F)-PC
60 s 0.5 s/word 0.5 s/word 0.5 s/word
30 s 0.5 s/word 0.5 s/word 0.5 s/word
Note Update time of the backplane bus for ET 200SP CPUs
For the update time of the ET 200SP CPUs, observe also the information in table "Update time of the ET 200SP CPUs" of the section Response time for cyclic and time-driven program execution (Page 46).
Components
Basic load for updating process image partitions Copy time for central I/O Copy time for distributed I/O via PROFIBUS Copy time for distributed I/O via PROFINET
Update time of the CPU
ET 200pro
1513pro(F)-2 PN
1516pro(F)-2 PN
35 s 140 s/word 0.5 s/word 0.5 s/word
30 s 120 s/word 0.5 s/word 0.5 s/word
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
25
Cyclic program execution 3.2 Cycle time
3.2.2.2
User program execution time
Introduction
Organization blocks or system activities with higher priority interrupt organization blocks or system activities with lower priority, and thus extend their runtime.
Program execution time without interruptions
The user program has a certain runtime without interruptions. The runtime depends on the number of operations that are executed in the user program.
The following table contains the typical durations of operations.
Table 3- 3 Duration of an operation
Bit operations, typ.
Word operations, typ.
Fixed-point arithmetic, typ.
Floating-point arithmetic, typ.
1511(F)1 PN 1511T(F)1 PN 1511C-1 PN 60 ns
72 ns
96 ns
384 ns
1512C1 PN
48 ns 58 ns 77 ns 307 ns
1513(F)1 PN
40 ns 48 ns 64 ns 256 ns
S7-1500
1515(F)2 PN
1515T(F)2 PN
1516(F)3 PN/DP
1516T(F)3 PN/DP
30 ns 36 ns 48 ns 192 ns
10 ns 12 ns 16 ns 64 ns
1517(F)3 PN/DP 1517T(F)3 PN/DP
2 ns
3 ns
3 ns
12 ns
1518(F)4 PN/DP 1518(F)4 PN/DP MFP 1 ns
2 ns
2 ns
6 ns
Bit operations, typ.
Word operations, typ.
Fixed-point arithmetic, typ.
Floating-point arithmetic, typ.
1513R-1 PN 40 ns 48 ns 64 ns 256 ns
S7-1500R/H* in RUN-Solo system state
1515R-2 PN 30 ns
1517H-3 PN 2 ns
36 ns
3 ns
48 ns
3 ns
192 ns
12 ns
* Additional information about cycle and response times of R/H CPUs is available in the section "Cycle and response times of the S7-1500R/H redundant system"
Cycle and response times
26
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
Bit operations, typ.
Word operations, typ.
Fixed-point arithmetic, typ.
Floating-point arithmetic, typ.
1510SP(F)-1 PN 72 ns 86 ns 115 ns 461 ns
ET 200SP 1512SP(F)-1 PN 48 ns
58 ns
77 ns
307 ns
1515SP(F)-PC 30 ns 36 ns 48 ns 192 ns
Bit operations, typ. Word operations, typ. Fixed-point arithmetic, typ. Floating-point arithmetic, typ.
1513pro(F)-2 PN 40 ns 48 ns 64 ns 256 ns
ET 200pro
1516pro(F)-2 PN 10 ns 12 ns 16 ns 64 ns
Note Instruction "RUNTIME"
Please note that the times specified in the tables are typical values. There can therefore be user programs that deviate from the specified typical values.
Make sure to check the runtime of critical program sequences beforehand with the "RUNTIME" instruction.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
27
Cyclic program execution 3.2 Cycle time
Extension due to nesting of higher-priority OBs and/or interrupts
The interruption of a user program by a higher-priority OB causes a certain basic time expenditure. Take account of this basic time expenditure in addition to the update time of the assigned process image partitions and the execution time of the contained user program. The following tables contain the typical times for the various interrupts and error events.
Table 3- 4 Basic time expenditure for an interrupt
Hardware interrupt Time-of-day interrupt Time-delay interrupt Cyclic interrupt
1511(F)-1 PN 1511T(F)-1 PN 1511C-1 PN 1512C-1 PN 1513(F)-1 PN 90 s 90 s 90 s 90 s
S7-1500
1515(F)-2 PN
1517(F)-3 PN/DP
1515T(F)-2 PN 1516(F)-3 PN/DP
1517T(F)-3 PN/DP
1516T(F)-3 PN/DP
80 s 80 s 80 s 80 s
20 s 20 s 20 s 20 s
1518(F)-4 PN/DP 1518(F)-4 PN/DP MFP
12 s 12 s 12 s 12 s
Hardware interrupt Time-of-day interrupt Time-delay interrupt Cyclic interrupt
1513R-1 PN 170 s 170 s 170 s 170 s
S7-1500R/H* in RUN-Solo system state
1515R-2 PN
1517H-3 PN
140 s 140 s 140 s 140 s
20 s 20 s 20 s 20 s
* Additional information about cycle and response times of R/H CPUs is available in the section "Cycle and response times of the S7-1500R/H redundant system"
Hardware interrupt Time-of-day interrupt Time-delay interrupt Cyclic interrupt
1510SP(F)-1 PN 90 s 90 s 90 s 90 s
ET 200SP
1512SP(F)-1 PN 90 s 90 s 90 s 90 s
1515SP(F)-PC 80 s 80 s 80 s 80 s
Hardware interrupt Time-of-day interrupt Time-delay interrupt Cyclic interrupt
28
1513pro(F)-2 PN 90 s 90 s 90 s 90 s
ET 200pro 1516pro(F)-2 PN 80 s 80 s 80 s 80 s
Cycle and response times Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
Table 3- 5 Basic time expenditure for an error OB
Programming error
I/O access error Time error Diagnostic interrupt Module failure/recovery
Station failure/recovery
1511(F)-1 PN 1511T(F)-1 PN 1511C-1 PN 1512C-1 PN 1513(F)-1 PN 90 s 90 s 90 s 90 s 90 s
90 s
S7-1500
1515(F)-2 PN 1515T(F)-2 PN
1517(F)-3 PN/DP 1517T(F)-3 PN/DP
1516(F)-3 PN/DP
1516T(F)-3 PN/DP
80 s 80 s 80 s 80 s 80 s
80 s
20 s 20 s 20 s 20 s 20 s
20 s
1518(F)-4 PN/DP 1518(F)-4 PN/DP MFP
12 s 12 s 12 s 12 s 12 s 12 s
Programming error I/O access error
Time error Diagnostic interrupt Module failure/recovery Station failure/recovery
1513R-1 PN 170 s 170 s 170 s 170 s 170 s
170 s
S7-1500R/H* in RUN-Solo system state
1515R-2 PN
1517H-3 PN
140 s 140 s 140 s 140 s 140 s
20 s 20 s 20 s 20 s 20 s
140 s
20 s
* Additional information about cycle and response times of R/H CPUs is available in the section "Cycle and response times of the S7-1500R/H redundant system"
Programming error I/O access error Time error Diagnostic interrupt
Module failure/recovery Station failure/recovery
1510SP(F)-1 PN 90 s 90 s 90 s 90 s 90 s
90 s
ET 200SP 1512SP(F)-1 PN 90 s 90 s 90 s 90 s 90 s
90 s
1515SP(F)-PC 80 s 80 s 80 s 80 s 80 s
80 s
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
29
Cyclic program execution 3.2 Cycle time
CPU
Programming error I/O access error Time error Diagnostic interrupt Module failure/recovery Station failure/recovery
1513pro(F)-2 PN 90 s 90 s 90 s 90 s 90 s 90 s
ET 200pro
1516pro(F)-2 PN 80 s 80 s 80 s 80 s 80 s 80 s
Reference
You can find additional information on the topic of error handling in the Events and OBs section of the
S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792) system manual
S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833) system manual
ET 200SP distributed I/O system (http://support.automation.siemens.com/WW/view/en/58649293) system manual
In the CPU 1513pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109769507) and CPU 1516pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109482416) operating instructions, each in the Events and OBs chapter
You can find additional information on the topic of the complete cycle time of a program in an FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/87668055).
3.2.2.3
Extension of cycle time due to communication load
Impact of communication on the cycle time
In the sequence model of the CPU, communication tasks are processed with priority 15. All program parts with priority > 15 (e.g. for Motion Control functions) are unaffected by communication.
Configured communication load
The CPU operating system provides the maximum specified percentage of total CPU processing power for communication tasks. The communication load can be set in STEP 7 for the CPUs of the S7 series. The default value when creating a CPU depends on the type and version of CPU used. If the processing power is not needed for communication, then the processing power is available to the operating system and the user program.
Communication is allocated the requisite computing time in 1 ms increments, with priority 15. At 50% communication load, 500 s of each 1 millisecond are used for communication.
Cycle and response times
30
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
The following formula may be used to estimate the extension of the cycle time by communication.
Figure 3-5 Formula: Impact of communication load
With a complete use of the communication load of 50% (default), the following value results:
Figure 3-6 Extension of cycle time due to communication load
The actual cycle time is up to twice as long as the cycle time without communication when you use the default communication load.
Dependency of maximum cycle time on the configured communication load The chart shows the nonlinear relationship between maximum cycle time and configured communication load with a cycle time without communication of 10 ms. In the example, there are no OBs with a priority > 1.
CPUs 1516T(F)-3 PN/DP, 1517(F)-3 PN/DP, CPU 1517T(F)-3 PN/DP, CPU 1518(F)-4 PN/DP,
1518(F)-4 PN/DP MFP: The (minimum) communication load that can be set is 5%.
Figure 3-7 Maximum cycle time depending on the configured communication load
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
31
Cyclic program execution 3.2 Cycle time
Reducing the cycle time with a lower communication load You can reduce the setting for the communication load in the hardware configuration. If you set a communication load of 20% instead of 50%, for example, the cycle time extension due to the communication is reduced from a factor of 2 to 1.25.
Effect on the actual cycle time Communication is only one cause of extension of the cycle time. All configured events that extend the cycle time (e.g. hardware interrupts) mean that more asynchronous events can occur within a cycle. These asynchronous events further extend the cyclic program. The extension depends on the number of events that occur and are processed in the cycle.
Note Checking parameter changes · Check the effects of a value change on the "Cycle load due to communication" parameter
during system operation. You can use the "RT_INFO" instruction to determine which portions of runtime are used for communication and the user program. · Take the communication load into consideration when setting the maximum cycle time to prevent time errors (for example, exceeding the cycle time within a cycle) from occurring.
Effect of load on the actual cycle time The following examples show how the cycle time increases depending on the load. Example 1 Example 1 shows an OB 1 with a runtime of 100 ms. The runtime of OB 1 is neither interrupted by communication load nor by higher-priority OBs.
Figure 3-8 Cycle time without interruptions
Cycle and response times
32
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
Example 2 Example 2 shows that the runtime of OB 1 increases by a factor of 2 to 200 ms with a communication load of 50%.
Figure 3-9 Cycle time with communication
Example 3 In example 3, OB 1 is interrupted every 20 ms by a cyclic higher-priority OB 30 (orange) with a runtime of 5 ms. The cycle time is extended to 135 ms by the higher-priority OB.
Figure 3-10 Cycle time with higher-priority OB
Example 4 In example 4, OB 1 is also interrupted by an OB 30 with priority 13. In addition, OB 1 and OB 30 are interrupted by communication tasks (priority 15). The cycle time increases to 400 ms.
Figure 3-11 Cycle time with higher-priority OB and communication load
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
33
Cyclic program execution 3.2 Cycle time
Example 5 In example 5, OB 1 is also interrupted by an OB 30 with priority 17. In addition, OB 1 is interrupted by communication tasks. Because the priority of OB 30 (priority 17) is higher than the priority of the communication tasks (priority 15), the interrupt points differ from example 4. The communication tasks suppressed by OB 30 are made up for within specific limits. Communication therefore completely suppresses the cyclic program within this time, 5 ms in the example. The cycle time increases to 400 ms, just like in example 4.
Figure 3-12 Cycle time with higher-priority OB and communication load
Cycle time curve for low and high loads The y-axis of the following diagram indicates the cycle time in %. The value 100% stands for a cycle time of the CPU without higher-priority OBs and without communication. The x-axis indicates the load in % which is caused by higher priority OBs.
The blue curve of the diagram shows the course of the cycle time without communication load. The red curve shows the course of the cycle time with maximum communication
and a parameterized communication load of 50%.
Cycle time without communication load Cycle time with maximum communication
Figure 3-13 Cycle time for low and high loads
Cycle and response times
34
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
The course of the two curves shows the extent to which the communication load and the load from the higher-priority OBs influence the cycle time. The longer the cycle time, the more the interruptions of OB 1 caused by higher-priority OBs and communication increase. If both the base load and the communication load are at 50%, no computing capacity remains for the cyclic program and a time error occurs.
Note Parameter assignment of the communication load When the load in higher-priority OBs is high, reduce the configurable communication load.
Note Parameter assignment of the communication load for the S7-1500R/H redundant system Due to the synchronization of data between primary CPU and backup CPU, the S7-1500R/H redundant system is subject to an additional synchronization load. Therefore, choose a lower value for the communication load than for a non-redundant system. Additional information on the particular features of the CPUs of the S7-1500R/H redundant system is available in the section Cycle and response times of the S7-1500R/H redundant system (Page 56).
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
35
Cyclic program execution 3.2 Cycle time
Display of program and communication load In the web server, you can find information on the current program/communication load and cycle time of your user program on the "Diagnostics > Runtime Information" web page.
Figure 3-14 Graphical display of program and communication load
Cycle and response times
36
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
Program/communication load With the "Value refresh" function, you update the data displayed in the bar charts: At intervals of 1 second Automatic (as configured in STEP 7) With the "Measurement" function, you can decide which measurement the bar charts display. You can choose between: The current measurement The measurement of the longest cycle time
Figure 3-15 Program/communication load
The legend of the program/communication load shows information on the following values, highlighted in color: "Program load cyclic program OBs"
Required calculation time in percent within a cycle for program cycle OBs "Program load high-priority OBs"
Required calculation time in percent within a cycle for higher-priority OBs "Current communication load"
Required calculation time in percent for current communication tasks within a cycle "Maximum permissible communication load"
The configured maximum communication load as a percentage "No-load operation"
There is no program/communication load Note If you have configured a minimum cycle time, it can occur that no-load operation shows a high percent value even though the value of the cycle time is also high. The reason for this is that the loads are recorded as mathematical average of the last second, but the cycle time relates to the last cycle.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
37
Cyclic program execution 3.2 Cycle time
Figure 3-16 Color legend
If you click on a specific color, the selected color is highlighted in the chart. If you click on a highlighted color, you remove the highlighting. Measurement of load distribution and cycle time The "Measurement of load distribution and cycle time" bar chart shows the percentage of the calculation time within a cycle for the following values: "Program load cyclic program OBs" "Program load high-priority OBs" "Current communication load" "No-load operation" Prognosis of load distribution and cycle time The "Prognosis of load distribution and cycle time" bar chart predicts whether the CPU can process the user program with maximum communication load within the maximum cycle time.
Example 1:
Figure 3-17 Cycle time < 70% of the maximum cycle time
Cycle and response times
38
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
Example 1 shows that the CPU can process the user program within the maximum cycle time of 150 ms when the maximum communication load of 38% is reached. The predicted cycle time is < 70% of the configured maximum cycle time. Example 2:
Figure 3-18 Cycle time 70% of the maximum cycle time
In example 2, the CPU can also process the user program with maximum communication load within the maximum cycle time. However, the predicted cycle time is already at 129 ms. If the predicted cycle time is 70% of the maximum cycle time, the chart outputs a warning.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
39
Cyclic program execution 3.2 Cycle time
Example 3:
Figure 3-19 Cycle time longer than maximum cycle time
Example 3 shows that the CPU can no longer process the user program within the maximum cycle time when the maximum communication load is reached. If the predicted cycle time is longer than the maximum cycle time, the chart outputs an error message.
If it is predicted that the maximum cycle time will be exceeded, use the following controller in order to reduce the maximum communication load.
Figure 3-20 Controller for setting the maximum communication load
Cycle and response times
40
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
Note Setting the communication load The controller predicts the effects of the changed communication load on the cycle time. You configure the maximum communication load in STEP 7.
Note For non-measurable fluctuations in the user program, e.g. for future changes in the user program, plan a sufficiently low value for the maximum communication load.
Note Due to the different calculation basis of cycle time and load, a steady state of the system is the prerequisite for displaying reliable measured values.
Progression of program/communication load If your browser supports the display of SVG (Scalable Vector Graphics), the display in the "Runtime information" tab is expanded to show the progression of the program/communication load. With the line charts in the "Trend for program/communication load" area, you can track the progression of the following values: "Program load cyclic program OBs" "Program load high-priority OBs" "Current communication load" With the "Number of recorded measuring points" option, you can choose between the last 20 to 1 000 measured values for the display of the measured values. For the trend on the x-axis, you can choose between "Time" (CPU time) and "Measuring points" by clicking on the desired unit.
Note If you have selected the "Time" unit on the x-axis, all measured values that are more than 24 hours old are deleted automatically.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
41
Cyclic program execution 3.2 Cycle time
3.2.2.4
Figure 3-21 Line chart
Special consideration when PROFINET IO communication is configured on the 2nd PROFINET interface (X2)
If you configure the PROFINET IO communication at the 2nd PROFINET interface (X2) on the following CPUs as of firmware version 2.0, an additional system load occurs:
CPU 1515(F)-2 PN
CPU 1515T(F)-2 PN
CPU 1516(F)-3 PN/DP
CPU 1516T(F)-3 PN/DP
CPU 1513(F)pro-2 PN
CPU 1516(F)pro-2 PN
This additional system load has priority 26 and extends the runtime of the program. The execution of synchronous cycle interrupts or hardware interrupts, for example, can be delayed as a result.
The additional system load depends on:
Communication traffic at the 2nd PROFINET interface (X2) The communication traffic at the interface in frames per second causes communication load as well as system load. You cannot limit the communication traffic using the "Communication load" parameter.
Number of IO devices which the CPU at the 2nd PROFINET interface (X2) updates within a millisecond
You determine the additional system load with the "RT_INFO" (read RUNTIME statistics) instruction at the Mode parameter with mode 10 or mode 20.
Cycle and response times
42
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.2 Cycle time
Reducing additional system load You reduce the communication load at the 2nd PROFINET interface, e.g. with: Fewer connected HMI devices or slower update cycles on the HMI devices Less or slower communication with other CPUs Increase the update times in STEP 7 for all IO devices that are assigned to the 2nd PROFINET interface (X2): 1. Select the "IO Communication" in the "Network view" of STEP 7. 2. Set the "Update mode" parameter to "Adjustable". 3. Select a higher value for the "Update time [ms]" parameter in the drop-down list. 4. Repeat this setting for the other IO devices.
Figure 3-22 Increasing update times
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
43
Cyclic program execution 3.3 Time-driven program execution in cyclic interrupts
3.3
Time-driven program execution in cyclic interrupts
With a cyclic interrupt you have the option of having a specific OB processed in a time interval. The time interval is independent of the execution time of the cyclic program. A priority from 2 to 24 can be selected for the cyclic interrupt. This makes the priority of cyclic interrupts higher than the priority of the cyclic program. A cyclic interrupt increases the execution time of the cyclic program.
In STEP 7 the organization blocks OB 30 to OB 38 are intended for processing cyclic interrupts. You can create additional cyclic interrupts starting with organization block OB 123. The number of available organization blocks depends on the CPU used.
Cyclic interrupt
A cyclic interrupt is an interrupt initiated according to a defined cycle that causes a cyclic interrupt OB to be processed. A cyclic interrupt OB is assigned to the "Cyclic interrupt" event class.
Cycle of a cyclic interrupt
The cycle of a cyclic interrupt is defined as the time from the call of a cyclic interrupt OB to the next call of a cyclic interrupt OB.
The following figure shows an example of the cycle of a cyclic interrupt.
Figure 3-23 Call interval of a cyclic interrupt
Cycle and response times
44
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.3 Time-driven program execution in cyclic interrupts
Accuracy of a cyclic interrupt
Even if a cyclic interrupt is not delayed by a higher-priority OB or communication activities, the accuracy with which it is started is nevertheless subject to system-dependent fluctuations.
The following table shows the accuracy with which a cyclic interrupt is triggered:
Table 3- 6 Accuracy of cyclic interrupts
Cyclic interrupt
1511(F)-1 PN 1511T(F)-1 PN 1511C-1 PN 1512C-1 PN 1513(F)-1 PN ±90 s
S7-1500
1515(F)-2 PN 1515T(F)-2 PN
1517(F)-3 PN/DP 1517T(F)-3 PN/DP
1516(F)-3 PN/DP
1516T(F)-3 PN/DP
±80 s
±30 s
1518(F)-4 PN/DP 1518(F)-4 PN/DP MFP
±25 s
Cyclic interrupt
1513R-1 PN ±390 s
S7-1500R/H* in RUN-Solo system state
1515R-2 PN ±300 s
1517H-3 PN ±90 s
* Additional information about cycle and response times of R/H CPUs is available in the section "Cycle and response times of the S7-1500R/H redundant system"
Cyclic interrupt
1510SP(F)-1 PN ±90 s
ET 200SP 1512SP(F)-1 PN ±90 s
1515SP(F)-PC ±80 s
Cyclic interrupt
1513pro(F)-2 PN ±90 s
ET 200pro 1516pro(F)-2 PN ±80 s
Note Scope of validity
Please note that the accuracy data for the cyclic interrupt also applies to all other higherpriority execution levels/OBs.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
45
Cyclic program execution 3.4 Response time for cyclic and time-driven program execution
Processing sequence of cyclic interrupts
Note With several cyclic interrupt OBs with identical parameterization, the processing sequence of the cyclic interrupt OBs cannot be predicted. If you want to ensure a defined execution sequence of cyclic interrupt OBs with the same cycle time, configure a different phase offset in each case.
For information on how to assign parameters for cyclic interrupt OBs, refer to the STEP 7 online help.
3.4
Response time for cyclic and time-driven program execution
Introduction
In this section you learn: How the response time is composed How to calculate the response time
Definition
The response time in the case of cyclic or time-controlled program execution is the time between the detection of an input signal and the change of a connected output signal.
Cycle and response times
46
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.4 Response time for cyclic and time-driven program execution
Fluctuation in the response time of the CPU The actual response time of the CPU fluctuates between one and two cycles for cyclic program execution and between one and two cyclic interrupt cycles for time-controlled program execution. You should always assume the longest response time when configuring your system. The following figure shows the shortest and longest response times of the CPU to an event.
Factors
Figure 3-24 Shortest and longest response times of the CPU
To determine the process response time, you must take account of the following factors in addition to the CPU response time described above: Delay of the inputs and outputs at the I/O module Switching times of the sensors and actuators used Update times for PROFINET IO or DP cycle times on PROFIBUS DP; update time of the
backplane bus for ET 200SP CPUs
Note Backplane bus of the S7-1500 CPUs The update time of the backplane bus of the S7-1500 CPUs can be ignored here.
Delay at the inputs and outputs of the modules The delay and cycle times can be found in the technical specifications of the I/O modules.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
47
Cyclic program execution 3.4 Response time for cyclic and time-driven program execution
Update times for PROFINET IO and DP cycle times on PROFIBUS DP When distributed I/O is used, the maximum response time is additionally extended by the bus transmission times of PROFIBUS or PROFINET. These bus transmission times occur during both the reading and output of the process image partitions. The bus transmission times correspond to the bus update cycle of the distributed device. PROFINET IO If you use STEP 7 to configure your PROFINET IO system, STEP 7 calculates the update time. To display the update time, follow these steps: Select the PROFINET interface of the I/O module. In the General tab, select "Advanced options > Real time settings > IO cycle". The update time is displayed in the "Update time" field and can be set for each IO device. PROFIBUS DP If you use STEP 7 to configure your PROFIBUS DP master system, STEP 7 calculates the DP cycle time. To display the DP cycle time, follow these steps: Select the PROFIBUS subnet in the network view. In the General tab of the Inspector window, navigate to the Bus parameters. The DP cycle time is displayed in the "Parameters" field at "Typical Ttr". The following figure illustrates the additional bus runtimes using distributed I/O.
Figure 3-25 Additional bus runtimes with distributed I/O
A further optimization of the response times is achieved by using isochronous mode.
Cycle and response times
48
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.4 Response time for cyclic and time-driven program execution
Update time of the backplane bus for ET 200SP CPUs
The following table shows the central (typical) update times of the backplane bus for the ET 200SP CPUs.
Table 3- 7 Update time of the ET 200SP CPUs
Update time of the CPU
ET 200SP
Update time for central I/O
1510SP(F)-1 PN
1512SP(F)-1 PN
1515SP(F)-PC
250 s to 1 ms, depending on number and type of central I/O modules1
1 The duration of the update time depends on the number of the I/O modules and their type (ST, HF, HS). The update time is set at 1 ms for a max. central I/O configuration with standard I/O modules. You can reduce the update time down to 250 s, for example, by using HF I/O modules and by reducing the number of modules.
The table below is an orientation guide. It shows the approximate relationship between the number of ET 200SP I/O modules and the bus cycle that is used. As an example, 8 bytes of I/O data per I/O module are assumed in the table.
Number of ET 200SP I/O modules 8 16 24 32 40 48 56 64
Input data (bytes) 64 128 192 256 320 384 448 512
Output data (bytes) 64 128 192 256 320 384 448 512
Used bus cycle (s) 250 250
281.25 312.5 343.75 375 406.25 437.5
For I/O modules with more than 32 bytes of I/O data, the bus cycle is calculated with an I/O module of 32 bytes. In this case the I/O module requires multiple bus cycles to update its I/O data.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
49
Cyclic program execution 3.4 Response time for cyclic and time-driven program execution
Reference
The following links provide additional information:
Application example for determining the response time for PROFINET (http://support.automation.siemens.com/WW/view/en/21869080)
Transmission times and isochronous mode in function manual PROFINET with STEP 7 V15 (http://support.automation.siemens.com/WW/view/en/49948856); see also the section "Tips on assembly"
Transmission times and isochronous mode in function manual PROFIBUS with STEP 7 V15 (http://support.automation.siemens.com/WW/view/en/59193579); see also the section "Network settings"
Delays at the input or output of the modules can be found in the manual for the respective device.
Information on device-internal delays can be found in the manuals for the ET 200MP and ET 200SP distributed I/O systems.
Cycle and response times
50
Function Manual, 11/2019, A5E03461504-AE
Cyclic program execution 3.5 Summary of response time with cyclic and time-controlled program execution
3.5
Summary of response time with cyclic and time-controlled program
execution
Estimation of the shortest and longest response time The following formulas may be used to estimate the shortest and longest response time:
Estimation of the shortest response time The shortest response time is the sum of:
1 x delay of the input/output module for inputs + 1 x (update PROFINET IO or PROFIBUS DP)*; (update time of the backplane bus for the
ET 200SP CPUs) + 1 x transfer time of the process image input + 1 x execution of the user program + 1 x transfer time of the process image output + 1 x (update PROFINET IO or PROFIBUS DP)*; (update time of the backplane bus for the
ET 200SP CPUs) + 1 x delay of the input/output module for outputs _________________________________________________________________________________ = Shortest response time
* Time is dependent on the configuration and the extent of the network.
The shortest response time is equivalent to the sum of the cycle time plus the input and output delay times.
Estimation of the longest response time
The longest response time is the sum of:
1 x delay of the input/output module for inputs + 2 x (update PROFINET IO or PROFIBUS DP)*; (update time of the backplane bus for the
ET 200SP CPUs) + 2 x transfer time of the process image input + 2 x execution of the user program + 2 x transfer time of the process image output + 2 x (update PROFINET IO or PROFIBUS DP)*; (update time of the backplane bus for the
ET 200SP CPUs) + 1 x delay of the input/output module for outputs _________________________________________________________________________________ = Longest response time
* Time is dependent on the configuration and the extent of the network.
The longest response time is equivalent to the sum of twice the cycle time plus the delay times of the inputs and outputs. Twice the update time for PROFINET IO or twice the DP cycle time on PROFIBUS DP is added to the longest response time.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
51
Event-driven program execution
4
4.1
Response time of the CPUs when program execution is
event-controlled
Introduction
Hardware interrupts are used to detect events in the process in the user program and to react to them with an appropriate program. In STEP 7, the organization blocks OB 40 to OB 47 are intended for processing hardware alarms. You can create additional hardware interrupts starting with organization block OB 123. The number of available organization blocks depends on the CPU used.
Hardware interrupt
A hardware interrupt is an interrupt that occurs during the running program execution, due to an interrupt-triggering process event. The operating system calls the assigned interrupt OB; as a result, the execution of the program cycle or of lower priority program parts is interrupted. A hardware interrupt OB is assigned to the "Hardware interrupt" event class.
Interrupt response times of the CPUs for hardware interrupts
The interrupt response time starts with the occurrence of a hardware interrupt event in the CPU. The interrupt response time ends with the start of processing of the assigned hardware interrupt OB.
This time is subject to system-inherent fluctuations, and this is expressed using a minimum and maximum interrupt response time.
Cycle and response times
52
Function Manual, 11/2019, A5E03461504-AE
Event-driven program execution 4.1 Response time of the CPUs when program execution is event-controlled
The following table contains the length of the typical response times of the CPUs for hardware interrupts.
Table 4- 1 Response times of the CPUs for hardware interrupts
Interrupt re- Min. sponse times Max.
1511(F)-1 PN 1511T(F)-1 PN 1511C-1 PN 1512C-1 PN 1513(F)-1 PN 100 s 400 s
S7-1500
1515(F)-2 PN
1517(F)-3 PN/DP
1515T(F)-2 PN
1517T(F)-3 PN/DP
1516(F)-3 PN/DP 1516T(F)-3 PN/DP
90 s 360 s
30 s 120 s
1518(F)-4 PN/DP 1518(F)-4 PN/DP MFP
20 s 90 s
Interrupt re- Min. sponse times Max.
1513R-1 PN 100 s 400 s
S7-1500R/H* in RUN-Solo system state
1515R-2 PN
CPU 1517H-3 PN
90 s 360 s
30 s 120 s
* Additional information about cycle and response times of R/H CPUs is available in the section "Cycle and response times of the S7-1500R/H redundant system"
Interrupt re- Min. sponse times Max.
1510SP(F)-1 PN 100 s 400 s
ET 200SP 1512SP(F)-1 PN 100 s 400 s
1515SP(F)-PC 90 s 360 s
Interrupt response times
ET 200pro
Min. Max.
1513pro(F)-2 PN 100 s 400 s
1516pro(F)-2 PN
90 s 360 s
The specified times are extended:
If higher-priority interrupts are queued for execution
If the hardware interrupt OB is assigned to a process image partition
You can find these times in the tables in the section "Extension due to nesting of higherpriority OBs and/or interrupts" in the chapter User program execution time (Page 26).
If you need fast interrupt response times, do not assign a process image partition to the hardware interrupt OB and use direct access in the hardware interrupt OB instead.
You can find additional information on determining response times for PROFINET in the application example with the entry ID 21869080 on the Service&Support (http://support.automation.siemens.com/WW/view/en/21869080) Internet page.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
53
Event-driven program execution 4.2 Process response time when program execution is event-driven
Influence of input modules on the interrupt response times of hardware interrupts Digital input modules: Interrupt response time of hardware interrupts = internal interrupt processing time + input delay (see section Technical specifications in the relevant manual) Analog input modules: Interrupt response time of hardware interrupts = internal interrupt processing time + conversion time (see section Technical specifications in the relevant manual)
Impact of communication on interrupts Communication tasks are always processed by the CPU with priority 15. If you do not want the interrupt execution to be delayed or interrupted by communication, configure the interrupt execution with priority > 15. The default setting for interrupt execution is priority 16.
Special consideration when PROFINET IO communication is configured on the 2nd PROFINET interface (X2)
Additional information on this is available in section Special consideration when PROFINET IO communication is configured on the 2nd PROFINET interface (X2) (Page 42).
4.2
Process response time when program execution is event-driven
When program execution is event-driven, the process response time is determined by the following:
Delay times of the input and output modules used
Update times for PROFIBUS/PROFINET for distributed modules; update time of the backplane bus for ET 200SP CPUs
Interrupt response time of CPU
Runtimes of the interrupt OB including update of the process image partition
Cycle and response times
54
Function Manual, 11/2019, A5E03461504-AE
Event-driven program execution 4.2 Process response time when program execution is event-driven
The following figure shows the individual execution steps for event-driven program execution.
Figure 4-1 Schematic representation of event-driven program execution
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
55
Cycle and response times of the S7-1500R/H redundant system
5
5.1
Introduction
CPUs of the S7-1500R/H redundant system are designed as being redundant. The goal of the redundant configuration is to avoid production downtimes. When a CPU fails, the other CPU maintains control over the process.
Compared to non-redundant CPUs, the CPUs of the S7-1500R/H redundant system have the following special features:
Longer cycle and response times
Specific operating and system states
Additional load and delays through synchronization
Contents of this section
This section describes the effects of the mode of operation of the S7-1500R/H redundant system on the cycle and response times.
It also describes how to estimate and control the cycle response times of the CPUs. This prevents excessive cycle times.
Note Classification of this chapter
The statements in the previous chapters describe the response of an individual CPU.
The section "Cycle and response times of the S7-1500R/H redundant system" supplements the information of the previous sections with information on the S7-1500R/H redundant system.
Cycle and response times
56
Function Manual, 11/2019, A5E03461504-AE
Cycle and response times of the S7-1500R/H redundant system 5.2 Maximum cycle time and time errors
5.2
Maximum cycle time and time errors
Maximum cycle time
As with non-redundant CPUs, you can parameterize a high limit of the cyclic program by setting the maximum cycle time.
The cycle time of redundant CPUs is usually longer as compared to non-redundant CPUs.
The factor by which the cycle time for redundant CPUs is higher than that for non-redundant CPUs depends very strongly on your specific automation task.
Note Maximum cycle time in SYNCUP system state
The length of the parameterized maximum cycle time also affects the SYNCUP system state.
If the following condition is fulfilled during the SYNCUP, the system initiates a transition to RUN-Redundant: The actual cycle time is 80% of the maximum cycle time over several cycles.
More information on this is available in section Influences on the cycle time in SYNCUP system state (Page 59). Maximum cycle time in RUN-Redundant system state
On the failure of one of the two CPUs, the cycle time also contains a dead time of up to 300 ms for R-CPUs and up to 50 ms for the H-CPU. You must schedule this time as cycle time reserve in case of failure of one of the two CPUs. Therefore, ensure that the longest cycle time plus this dead time is < 60% of the configured maximum cycle time in RUNRedundant system state. By doing so, you prevent the parameterized maximum cycle time from being exceeded in case of load fluctuations and delays due to synchronization.
Time error
As with non-redundant CPUs, you can specify the response to a time error for the CPUs of the S7-1500R/H redundant system. In RUN-Solo system state, the redundant CPUs behave like non-redundant CPUs when the maximum cycle time is exceeded (see section Cycle time (Page 20)).
In the SYNCUP and RUN-Redundant system states the redundant CPUs behave as follows:
Table 5- 1 Response of the S7-1500R/H redundant system when cycle time is exceeded, without OB 80
System state
SYNCUP RUN-Redundant
1st time cycle time is exceeded
Primary CPU RUN 1) RUN
Backup CPU STOP 1) STOP
2nd time cycle time is exceeded
Primary CPU
Backup CPU
STOP STOP
STOP STOP
1) If the time error occurs before the time of creation of the snapshot of the work memory contents, for example during the restart of the backup CPU, the primary CPU also goes into STOP mode and any running SYNCUP is aborted.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
57
Cycle and response times of the S7-1500R/H redundant system 5.2 Maximum cycle time and time errors
Table 5- 2 Response of S7-1500R/H redundant system when cycle time is exceeded with OB 80
System state
SYNCUP RUN-
Redundant
1st time cycle time is exceeded
Primary CPU
RUN-Syncup 1)
RUNRedundant
Backup CPU
SYNCUP 1)
RUNRedundant
2nd time cycle time is exceeded
Primary CPU RUN RUN
Backup CPU STOP STOP
3rd time cycle time is exceeded
Primary CPU STOP STOP
Backup CPU STOP STOP
1) If the time error occurs before the time of creation of the snapshot of the work memory contents, for example during the restart of the backup CPU, the primary CPU also goes into STOP mode and any running SYNCUP is aborted.
Note System state change after STOP with OB 80
The primary CPU also switches to STOP after the maximum cycle time has been exceeded three times in the same cycle.
Ensure that the actual maximum cycle time is < 60% of the parameterized maximum cycle time.
Switchover of the backup CPU to STOP operating state when the maximum cycle time is exceeded
A switchover of the backup CPU to STOP operating state reduces the synchronization load and relieves the load on the primary CPU.
Cycle and response times
58
Function Manual, 11/2019, A5E03461504-AE
Cycle and response times of the S7-1500R/H redundant system 5.3 Influences on the cycle time of the S7-1500R/H redundant system
5.3
Influences on the cycle time of the S7-1500R/H redundant system
5.3.1
Influences on the cycle time in RUN-Solo system state
RUN-Solo system state
In RUN-Solo system state, the primary CPU is in RUN operating state. The primary CPU executes the cyclic, time- and interrupt-controlled program execution on its own. The backup CPU is in STOP operating state, is switched off or defective.
Influence on the cycle time
In RUN-Solo system state, the primary CPU behaves exactly the same as a standard CPU (non-redundant CPU) with regard to cycle time monitoring. Additional information on this is available in section "Cycle time (Page 20)".
5.3.2
Influences on the cycle time in SYNCUP system state
SYNCUP system state
In SYNCUP system state, the primary CPU is in RUN-Syncup operating state. The backup CPU is in SYNCUP operating state. The task of the SYNCUP system state is to synchronize the data of both CPUs so that the CPUs can subsequently work redundantly.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
59
Cycle and response times of the S7-1500R/H redundant system 5.3 Influences on the cycle time of the S7-1500R/H redundant system
Influence on the cycle time The figure below shows the chronological behavior of primary CPU and backup CPU during the SYNCUP system state.
Synchronization of data from the primary CPU to the backup CPU Copying the load memory and terminating the asynchronous instructions Snapshot of the work memory contents Transfer of the work memory contents to the backup CPU Backup CPU makes up the time lag to the primary CPU caused by the synchronization of data
Figure 5-1 Effects of the SYNCUP on the cycle times of the CPUs
In SYNCUP system state, all relevant data is synchronized from the primary CPU to the backup CPU. At the end of SYNCUP, the backup CPU makes up the time lag to the primary CPU caused by the synchronization.
CAUTION
SYNCUP system state · The synchronization of data, in particular the snapshot of the work memory contents,
extends the cycle time. In addition, most test and commissioning functions cannot be executed during SYNCUP. · During SYNCUP, hardware interrupts and diagnostic interrupts are processed with a very significant delay. · The cycle time increases greatly during the transition from SYNCUP system state to RUN-Redundant.
Therefore, only execute the SYNCUP during uncritical process states.
Synchronization of data from the primary CPU to the backup CPU
During this phase all relevant contents of the load memory, work memory, and system memory of the primary CPU are synchronized to the backup CPU.
Cycle and response times
60
Function Manual, 11/2019, A5E03461504-AE
Cycle and response times of the S7-1500R/H redundant system 5.3 Influences on the cycle time of the S7-1500R/H redundant system
Copying the load memory and terminating the asynchronous instructions
The primary CPU copies parts of its load memory from its SIMATIC memory card to the SIMATIC memory card of the backup CPU. The backup CPU restarts and automatically switches to SYNCUP operating state. The backup CPU copies the transferred load memory contents to its work memory. Data blocks, process image, etc. are immediately overwritten with current data from the primary CPU.
Snapshot of the work memory contents
The primary CPU saves a consistent snapshot of its work memory contents at the next cycle control point.
Transfer of work memory contents to the backup CPU
During this phase the consistent snapshot is transferred from the primary CPU to the backup CPU. The transfer of the work memory contents extends the cycle time. The time required for the transfer of the work memory contents depends on the performance capability of the CPU and the amount of work memory data.
Backup CPU makes up the time lag to the primary CPU
During this phase the backup CPU makes up the time lag in program execution to the primary CPU. As in redundant mode, events are already synchronized during this phase as needed.
Note No switchover possible during SYNCUP If a fault occurs in the primary CPU during SYNCUP, no switchover to the backup CPU is possible. The SYNCUP is canceled and the backup CPU returns to STOP operating state.
Switchover from SYNCUP to RUN-Redundant The system checks continuously which cycle time would result from a change to the RUNRedundant system state. If this cycle time would be 80% of the maximum cycle time over multiple cycles, the transition is initiated.
Note Determination of the cycle time during the SYNCUP You can track the progress of the SYNCUP on the display of the primary CPU and backup CPU. At each cycle control point the backup CPU sends a status message on its program progress to the primary CPU. The display of the primary CPU indicates the duration of the time lag of the backup CPU. In addition to viewing the progress in the displays, the progress of the SYNCUP can also be read out using the "RT_INFO" instruction.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
61
Cycle and response times of the S7-1500R/H redundant system 5.3 Influences on the cycle time of the S7-1500R/H redundant system
Reasons for cancellation of the SYNCUP Possible causes for the cancellation of the SYNCUP are: The load of the user program or the load on the redundancy connections between primary and backup CPU is too high The maximum cycle time of the primary CPU was exceeded An overview of all reasons for the cancellation of the SYNCUP and remedial measures is available in the system manual S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833).
Disable SYNCUP To avoid the described effects of the SYNCUP on the cycle times during critical process states, use the instruction "RH_CTRL". The "RH_CTRL" instruction can be used to disable the SYNCUP system state for the S7-1500R/H redundant system. If the disable is no longer required, the "RH_CTRL" instruction can be used to enable the SYNCUP system state once again. More information on the "RH_CTRL" instruction is available in the system manual S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833).
Minimum cycle time It is often necessary to set a longer minimum cycle time for the CPUs of the S7-1500R/H redundant system than for those of the non-redundant CPUs. Recommendation: Select the minimum cycle time so that the cyclic program does not have to be executed more frequently than your process requires. A longer minimum cycle time that has been adapted to your process optimizes the entire system. The computing power that is available per cycle by extending the minimum cycle time is then available for system tasks such as communication.
Note Too low cycle times Cycle times that are too low can result in an excessive synchronization load and thus terminate the SYNCUP.
Parameter assignment of the communication load
Note An increased synchronization load occurs in the SYNCUP system state. Because this synchronization load places a load on the cycle in addition to the communication, it is recommended to reduce the communication load to 30%.
Cycle and response times
62
Function Manual, 11/2019, A5E03461504-AE
Cycle and response times of the S7-1500R/H redundant system 5.3 Influences on the cycle time of the S7-1500R/H redundant system
5.3.3
Influences on the cycle time in RUN-Redundant system state
RUN-Redundant system state
In RUN-Redundant system state, the primary CPU guides the process. The primary CPU continuously synchronizes itself with the backup CPU. In the event of a failure of the primary CPU, the backup CPU adopts its role and thus control over the process.
Cycle time without interruption of the cyclic program
In RUN-Redundant system state, the backup CPU has a time lag compared to the primary CPU. This time lag results from the time required for event-controlled synchronization of data from the primary CPU to the backup CPU.
The following figure shows the phases which the CPUs run through without an interruption of the cyclic program.
Cycle time Cycle of the backup CPU Time lag Cycle end and start of the next cycle (cycle control point)
Figure 5-2 Cycle time without interruption of the cyclic program
The cycle time includes the cycle of the backup CPU and the time lag of the
backup CPU compared to the primary CPU. The time lag results from the time required for the synchronization of the data between primary CPU and backup CPU. The synchronization between primary CPU and backup CPU occurs automatically if required. The more data has to be synchronized between the CPUs during a cycle, the greater the time lag. The program cycle ends as soon as the backup CPU has reached the end of its cyclic program. The primary CPU starts the next cycle as soon as the backup CPU reports the cycle end to the
primary CPU .
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
63
Cycle and response times of the S7-1500R/H redundant system 5.3 Influences on the cycle time of the S7-1500R/H redundant system
Extension of the cycle As with non-redundant CPUs, an occurring event and the associated OB can extend the cycle. Events can occur both during the execution of the cyclic program and during the time lag. In the following example the CPU must process a higher-priority OB (OB 30 with priority 7), while the primary CPU waits for the end of the cycle of the backup CPU. The figure below shows the phases which the CPUs run through in such a case.
Cycle time Cycle of the backup CPU Time lag Cycle end and start of the next cycle (cycle control point)
Figure 5-3 Processing of a higher-priority OB
64
Cycle and response times Function Manual, 11/2019, A5E03461504-AE
Cycle and response times of the S7-1500R/H redundant system 5.3 Influences on the cycle time of the S7-1500R/H redundant system
Execution of the cyclic program (CP with priority 1) is complete. While the primary CPU waits for the end of the cycle of the backup CPU, a higher priority OB (OB 30 with priority 7) starts. The primary CPU starts the next cycle as soon as the following conditions have been fulfilled: The primary CPU has received the message from the backup CPU that the backup CPU
has finished processing the cyclic program. The primary CPU has processed OB 30 and updated PIPQ1.
Note Due to the change of the run level and the synchronization, interruptions of the program cycle by higher-priority OBs result in a higher load. Interruptions of the program cycle extend the cycle time.
Differences between the synchronization times
The available bandwidth has a significant impact on the synchronization time.
With the R-CPUs both the synchronization of data and the synchronization of communication tasks operate over the PROFINET ring. 25% of the bandwidth is reserved for the synchronization.
With the H-CPU, synchronization works independently of the PROFINET ring over fiber optic cables. The full bandwidth on the PROFINET cable is available for PROFINET IO communication.
The table below provides an overview of performance features of R-CPUs and H-CPU.
Table 5- 3
Performance features of S7-1500R and S7-1500H
S7-1500R
CPU 1513R-1 PN
CPU 1515R-2 PN
S7-1500H CPU 1517H-3 PN
Performance
· Data transfer rate of 100 Mbps (for synchronization and communication)
· Data work memory: max. · Data work memory:
1.5 MB
max. 3 MB
· Code work memory: max. 300 KB
· Code work memory: max. 500 KB
· Significantly greater performance than S7-1500R due to Separate redundancy connections over fiber-optic cables Greater computing power
· Transmission rate of 1 Gbps (for the synchronization)
· Data work memory: max. 8 MB
· Code work memory: max. 2 MB
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
65
Cycle and response times of the S7-1500R/H redundant system 5.3 Influences on the cycle time of the S7-1500R/H redundant system
Hardware
S7-1500R
CPU 1513R-1 PN
CPU 1515R-2 PN
S7-1500H CPU 1517H-3 PN
· The CPUs are identical in design with the respective · The CPUs each have two optical inter-
S7-1500 standard versions.
faces.
· The synchronization of the CPUs takes place over the · The synchronization of the CPUs
PROFINET ring.
operates independently of the
· The H-Sync-Forwarding function is recommended for all devices in the PROFINET ring.
PROFINET ring over fiber-optic cables.
· Part of the bandwidth on the PROFINET cable is
· The full bandwidth on the PROFINET
used to synchronize the CPUs. Less bandwidth is
cable is available for PROFINET IO
therefore available for PROFINET IO communication.
communication.
Technical specifications
More information about the technical specifications is available in the manuals of the specific CPUs.
5.3.4
Influences on the cycle time when a CPU fails
If one of the two CPUs fails during redundant operation, the other CPU controls the process alone. The system state then changes from RUN-Redundant to RUN-Solo. The CPU continues executing the user program in RUN operating state.
Note Dead time in case of a CPU failure On the failure of a CPU, the cycle time also contains a dead time of up to 300 ms for R-CPUs and up to 50 ms for the H-CPU. You must schedule this time as cycle time reserve for a CPU failure. To avoid excessive cycle times after a CPU failure, further increase the maximum cycle time by this value.
Note Change of the system state from RUN-Redundant to Run-Solo by the user If you deliberately trigger a change of the system state, e.g. by switching the backup CPU to STOP via the display, this will also extend the cycle time. However, the cycle time will not increase to the same extent as with switchover of the CPUs in the event of an error (failure of one of the CPUs).
Information on the causes for the failure of a CPU is available in the S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833) system manual.
Cycle and response times
66
Function Manual, 11/2019, A5E03461504-AE
Cycle and response times of the S7-1500R/H redundant system 5.3 Influences on the cycle time of the S7-1500R/H redundant system
Failure of the primary CPU The figure below shows the impact of the failure of the primary CPU on the cycle time.
Cycle time Failure of the primary CPU Backup CPU continues processing the program Backup CPU no longer receives synchronization telegrams Backup CPU waits for the monitoring time to expire End of the monitoring time, switchover time and system state transition Cycle time of the new primary CPU in RUN operating state
Figure 5-4 Impact of the failure of the primary CPU on the cycle time
The example shows the failure of the primary CPU while it is processing the cyclic
program. The primary CPU no longer sends any synchronization telegrams to the backup
CPU. During the period , the backup CPU continues operating only on the basis of the synchronization data transferred before the failure of the primary CPU. At , the backup
CPU has reached the point in the program where the primary CPU stopped sending
synchronization telegrams. During the phase , the backup CPU waits to see whether data
will again be sent from the primary CPU after all. Because no synchronization data is transferred until the monitoring time has expired, the backup CPU becomes the new primary
CPU at point . The redundant system switches from RUN-Redundant system state to
RUN-Solo system state.
The cycle time extends from the time processing of the cyclic program is started in RUN-
Redundant to the time when processing of the cyclic program ends in RUN-Solo.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
67
Cycle and response times of the S7-1500R/H redundant system 5.3 Influences on the cycle time of the S7-1500R/H redundant system
Because data can no longer be synchronized in the RUN-Solo system state, the cycle
time is shorter than the cycle time .
Note Monitoring time The monitoring time is an internal time with fixed duration. You cannot assign parameters for the internal time. The monitoring time starts as soon as the synchronization data arrives at the backup CPU. If no synchronization data is received from the primary CPU, the system automatically performs a system state change after the monitoring time has expired.
Failure of the backup CPU The figure below shows the impact of the failure of the backup CPU on the cycle time.
Cycle time Failure of the backup CPU Expiration of the monitoring time System status transition Cycle time of the primary CPU in RUN-Solo operating state
Figure 5-5 Impact of the failure of the backup CPU on the cycle time
The backup CPU fails before processing of the cyclic program has ended . The primary
CPU detects the failure of the backup CPU because no synchronization data has been
received until the monitoring time has expired. The primary CPU terminates the
synchronization with the backup CPU. The redundant system switches from RUN-
Redundant system state to RUN-Solo system state .
Because no more data can be synchronized in RUN operating state, the cycle time is shorter than the cycle time .
Cycle and response times
68
Function Manual, 11/2019, A5E03461504-AE
Cycle and response times of the S7-1500R/H redundant system 5.4 Response time of R/H CPUs
5.4
Response time of R/H CPUs
Relationship between the cycle time and response time The cycle time of the system also forms the basis for its response time. The response time depends, among other things, on the cycle time of the individual program cycles.
Fluctuation of the response time The actual response time fluctuates between one and two cycles during cyclic program execution. The actual response time fluctuates between one and two cyclic interrupt cycles for time-controlled program execution. You should always assume the longest response time when configuring your system. In the figure below the process image is updated immediately after the change of the encoder signal. The output can therefore respond to the signal change after a cycle has ended.
Synchronization of the encoder signal change in the backup CPU Time lag of the backup CPU to the primary CPU Synchronization of the output signal change in the backup CPU Time lag of the backup CPU to the primary CPU until actual output of the signal change to the IO devices in the
PROFINET ring
Figure 5-6 Shortest response time
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
69
Cycle and response times of the S7-1500R/H redundant system 5.4 Response time of R/H CPUs
In the figure below, the process image has already been updated by the time of the signal change. It therefore takes one cycle until the system detects the change and sets the input in the process image. The output signal is changed after an additional cycle.
Synchronization of the encoder signal change in the backup CPU Time lag of the backup CPU to the primary CPU Synchronization of the output signal change in the backup CPU Time lag of the backup CPU to the primary CPU until actual output of the signal change to the IO devices in the
PROFINET ring Figure 5-7 Longest response time
The cycle times include the time lag. The time lag of the backup CPU to the primary CPU depends on the synchronization load. The synchronization load results from the data to be synchronized in the user program and in the communication.
Note Effect of the time lag The synchronization and transfer of the changes requires computing time. The time lag therefore affects both CPUs (from the primary CPU to the backup CPU and from the backup CPU to the primary CPU). The slower the CPU and the slower and longer the synchronization connection, the greater the time lag.
Note Response time when downloading a modified user program into the R/H CPUs in the RUN-Redundant system state During the download process in the RUN-Redundant system state, the response time of the system is restricted compared with the normal redundant mode. The more changes the user program contains, the higher the impact on the response time.
Cycle and response times
70
Function Manual, 11/2019, A5E03461504-AE
Cycle and response times of the S7-1500R/H redundant system 5.4 Response time of R/H CPUs
Determination of cycle and response times
At the end of the cyclic program, the primary CPU waits until the backup CPU too has acknowledged the end of the cyclic program. The cycle time of the primary CPU therefore also includes the time lag of the backup CPU. The cycle is extended by the time lag.
Advantages
The fact that the cycle time includes the time lag of the backup CPU to the primary CPU offers the following advantages:
By monitoring the cycle time in STEP 7, in the HMI or in the user program after SYNCUP, it is possible to determine the cycle time in the event of a failure of the primary CPU.
During commissioning it is not necessary to perform complicated tests to determine whether the required response time can still be complied with if a CPU fails.
During commissioning and ongoing operation you can estimate whether your automation task can meet the response times required for the process.
The same functions as those for the non-redundant CPUs are available for determining the cycle and response times:
Table 5- 4 Functions for determining the cycle and response times
Function
Defining the minimum cycle time and the maximum cycle time in STEP 7
Defining the desired response of the user program if the maximum cycle time has been exceeded
Reading out the cycle time statistics via STEP 7 and the display of the CPU
Reading out the cycle time and reading out the progress in the SYNCUP system state with the instruction "RT_INFO"
Additional information Section Cycle time (Page 20)
· Section Different cycle times (Page 20) · STEP 7 online help
Display of measurements (traces) which record special Function manual Using the trace and logic analyzer functions
time-critical signal characteristics
(http://support.automation.siemens.com/WW/view/en/64897128)
Reading out the progress of the SYNCUP system state S7-1500R/H redundant system
using the display of the CPU
(https://support.industry.siemens.com/cs/ww/en/view/109754833)
system manual
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
71
Cycle and response times of the S7-1500R/H redundant system 5.5 Timetables for the RUN-Redundant system state
5.5
Timetables for the RUN-Redundant system state
The following section describes the typical times of the CPUs of the S7-1500R/H redundant system in the RUN-Redundant system state.
Update times of the process image partitions
The following table contains the times for estimating the typical update times of the process image partitions.
Table 5- 5 Data for estimating the typical update time of the process image partitions
Update times of the CPUs in the RUN-Redundant system state
Basic load for updating process image partitions
Copy time for distributed I/O via PROFINET
CPU 1513R-1 PN 63 s
6.5 s/word
CPU 1515R-2 PN 57 s
6.5 s/word
CPU 1517H-3 PN 13 s
2.6 s/word
A table of the update times of the CPUs in the RUN-Solo system state is available in section Update time for process image partitions (Page 24).
Program execution time without interruptions
The user program has a certain runtime without interruptions. The runtime depends on the number of operations that are executed in the user program.
The following table contains the typical durations of operations.
Table 5- 6 Duration of an operation
Bit operations, typ. Word operations, typ. Fixed-point arithmetic, typ. Floating-point arithmetic, typ.
Program execution times of the CPUs in RUN-Redundant system state
CPU 1513R-1 PN 80 ns 96 ns 128 ns 512 ns
CPU 1515R-2 PN 60 ns 72 ns 96 ns 384 ns
CPU 1517H-3 PN 4 ns 6 ns 6 ns 24 ns
A table of the program execution times of the CPUs in the RUN-Solo system state is available in section User program execution time (Page 26).
Cycle and response times
72
Function Manual, 11/2019, A5E03461504-AE
Cycle and response times of the S7-1500R/H redundant system 5.5 Timetables for the RUN-Redundant system state
Extension due to nesting of higher-priority OBs and/or interrupts
The interruption of a user program at the end of an instruction by a higher-priority OB causes a certain basic time expenditure. Take account of this basic time expenditure in addition to the update time of the assigned process image partitions and the execution time of the contained user program. The following tables contain the typical times for the various interrupts and error events.
Table 5- 7 Basic time expenditure for an interrupt
Hardware interrupt Time-of-day interrupt Time-delay interrupt Cyclic interrupt
Basic time expenditure of the CPUs for an interrupt in the RUN-Redundant system state
CPU 1513R-1 PN 560 s 560 s 560 s 560 s
CPU 1515R-2 PN 430 s 430 s 430 s 430 s
CPU 1517H-3 PN 70 s 70 s 70 s 70 s
A table of the time expenditure of the CPUs for an interrupt in the RUN-Solo system state is available in section User program execution time (Page 26).
Table 5- 8 Basic time expenditure for an error OB
Programming error I/O access error Time error Diagnostic interrupt
Module failure/recovery Station failure/recovery
Basic time expenditure of the CPUs for an error OB in the RUN-Redundant system state
CPU 1513R-1 PN 560 s 560 s 560 s 560 s 560 s
CPU 1515R-2 PN 430 s 430 s 430 s 430 s 430 s
CPU 1517H-3 PN 70 s 70 s 70 s 70 s 70 s
560 s
430 s
70 s
A table with the basic time expenditure of the CPUs for an error OB in the RUN-Solo system state is available in section User program execution time (Page 26).
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
73
Cycle and response times of the S7-1500R/H redundant system 5.5 Timetables for the RUN-Redundant system state
Accuracy of a cyclic interrupt
Even if a cyclic interrupt is not delayed by a higher-priority OB or communication activities, the accuracy with which it is started is nevertheless subject to system-dependent fluctuations.
The following table shows the accuracy with which a cyclic interrupt is triggered:
Table 5- 9 Accuracy of cyclic interrupts
Cyclic interrupt
Accuracy of cyclic interrupts of the CPUs in the RUN-Redundant system state
CPU 1513R-1 PN ±5.8 ms
CPU 1515R-2 PN ±3.2 ms
CPU 1517H-3 PN ±1.6 ms
A table with the accuracy of cyclic interrupts of the CPUs in the RUN-Solo system state is available in section Time-driven program execution in cyclic interrupts (Page 44).
Note Scope of validity
Please note that the accuracy data for the cyclic interrupt also applies to all other higherpriority execution levels/OBs.
Interrupt response times for hardware interrupts
The interrupt response times of the CPUs start with the occurrence of a hardware interrupt event in the CPU and end with the start of the assigned hardware interrupt OB.
This time is subject to system-inherent fluctuations, and this is expressed using a minimum and maximum interrupt response time.
The following table contains the length of the typical response times of the CPUs for hardware interrupts.
Table 5- 10 Interrupt response times for hardware interrupts
Interrupt re- Min. sponse times Max.
Interrupt response times of the CPUs for hardware interrupts in the RUN-Redundant system state
CPU 1513R-1 PN
CPU 1515R-2 PN
CPU 1517H-3 PN
180 s 1420 s
150 s 1360 s
40 s 470 s
A table of the interrupt response times of the CPUs in the RUN-Solo system state is available in section Response time of the CPUs when program execution is event-controlled (Page 52).
Cycle and response times
74
Function Manual, 11/2019, A5E03461504-AE
Glossary
Backup CPU
Role of a CPU in the S7-1500R/H redundant system. If the R/H system is in RUN-Redundant system state, the primary CPU guides the process. The backup CPU processes the user program synchronously and can take over the process management if the primary CPU fails.
Cycle time
The cycle time represents the time a CPU requires to process the user program once.
Data block
Data blocks (DBs) are data areas in the user program that contain user data. The following data blocks exist:
Global data blocks which you can access from all code blocks.
Instance data blocks that are assigned to a specific FB call.
Diagnostic interrupt See "Interrupt, diagnostic"
Diagnostics
Monitoring functions include: The detection, localization and classification of errors, faults and alarms. Displaying and further evaluation of errors, faults and alarms. They run automatically during plant operation. This increases the availability of systems by reducing commissioning times and downtimes.
Diagnostics buffer
The diagnostics buffer represents a backup memory in the CPU, used to store diagnostics events in their order of occurrence.
Distributed I/O system
System with I/O modules that are configured on a distributed basis, at a large distance from the CPU controlling them.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
75
Glossary
Firmware of the CPU
In SIMATIC, a distinction is made between the firmware of the CPU and user programs.
The firmware is a software embedded in electronic devices, which means it is permanently connected with the hardware functionally. It is usually saved in a flash memory, such as EPROM, EEPROM or ROM, and cannot be replaced by the user or only with special means or functions.
User program: see glossary entry "User program"
H-Sync Forwarding
H-Sync forwarding enables a PROFINET device with MRP to forward synchronization data (synchronization frames) only within the PROFINET ring.
In addition, H-Sync forwarding forwards the synchronization data even during reconfiguration of the PROFINET ring. H-Sync forwarding avoids a cycle time increase if the PROFINET ring is interrupted.
S7-1500R: H-Sync forwarding is recommended for all PROFINET devices with only 2 ports in the PROFINET ring. All PROFINET devices with more than 2 ports (e.g. switch) in the PROFINET ring must support H-Sync forwarding.
S7-1500H: H-Sync Forwarding is not relevant for redundant S7-1500H systems.
I/O module
Device of the distributed I/O that is used as interface between the controller and the process.
Interrupt
The CPU's operating system distinguishes between various priority classes that control the execution of the user program. These priority classes include interrupts, such as hardware interrupts. When an interrupt occurs, the operating system automatically calls an assigned organization block. The required response is programmed in the organization block (for example, in an FB).
Interrupt, cyclic
The CPU generates a cyclic interrupt periodically within a parameterizable time grid and then processes the corresponding organization block.
Interrupt, diagnostics
Diagnostics-capable modules signal detected system errors to the CPU using diagnostic interrupts.
Cycle and response times
76
Function Manual, 11/2019, A5E03461504-AE
Glossary
Interrupt, hardware
A hardware interrupt is triggered by interrupt-triggering modules due to a certain event in the process. The hardware interrupt is reported to the CPU. The CPU then processes the assigned organization block according to the priority of this interrupt.
Interrupt, time-delay
The time-delay interrupt is one of the program execution priority classes of SIMATIC S7. The time-delay interrupt is generated after the expiration of a timer started in the user program. The CPU then processes the corresponding organization block.
Interrupt, time-of-day
The time-of-day interrupt is one of the program execution priority classes of SIMATIC S7. The time-of-day interrupt is generated depending on a specific date and time. The CPU then processes the corresponding organization block.
IO controller
See "PROFINET IO controller"
IO device
See "PROFINET IO device"
Operating states
Operating states describe the behavior of a single CPU at a specific time.
The CPUs of the SIMATIC standard systems have the STOP, STARTUP and RUN operating states.
The primary CPU of the redundant system S7-1500R/H has the operating states STOP, STARTUP, RUN, RUN-Syncup and RUN-Redundant. The backup CPU has the operating states STOP, SYNCUP and RUN-Redundant.
Organization block
Organization blocks (OBs) form the interface between the CPU operating system and the user program. The organization blocks determine the order in which the user program is executed.
Parameter
Tag of a STEP 7 code block:
Tag for setting the behavior of a module (one or more per module). In as-delivered state, every module has an appropriate basic setting, which you can change by configuring in STEP 7. There are static and dynamic parameters.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
77
Glossary
Parameters, dynamic
Dynamic parameters of modules can be changed during operation by calling an SFC in the user program, for example, limit values of an analog input module.
Parameters, static
Static parameters of modules cannot be changed by the user program but only by the configuration in STEP 7, e.g. input delay of a digital input module.
Primary CPU
If the R/H system is in RUN-Redundant system state, the primary CPU guides the process. The backup CPU processes the user program synchronously and can take over the process management if the primary CPU fails.
Process image (I/O)
The CPU transfers the values from the input and output modules to this memory area. At the start of the cyclic program, the CPU transfers the process image output as a signal state to the output modules. The CPU then transfers the signal states of the input modules into the process image input. The CPU then executes the user program.
PROFINET
PROcess FIeld NETwork, open Industrial Ethernet standard which further develops PROFIBUS and Industrial Ethernet. A cross-manufacturer communication, automation, and engineering model defined by PROFIBUS International e.V. as an automation standard.
PROFINET IO
Communication concept for the realization of modular, distributed applications within the scope of PROFINET.
PROFINET IO controller
Device used to address connected I/O devices (e.g. distributed I/O systems). The IO controller exchanges input and output signals with assigned I/O devices. The IO controller often corresponds to the CPU in which the automation program is running.
PROFINET IO device
Distributed field device that can be assigned to one or more IO controllers (e.g. distributed I/O system, valve terminals, frequency converters, switches).
Cycle and response times
78
Function Manual, 11/2019, A5E03461504-AE
Glossary
Redundancy connection
The redundancy connection in an S7-1500R system is the PROFINET ring with MRP. The redundancy connection uses part of the bandwidth on the PROFINET cable to synchronize the CPUs, which means the bandwidth is not available for PROFINET IO communication.
Contrary to S7-1500R, PROFINET ring and redundancy connection are separate in an S7-1500H. The two redundancy connections are fiber-optic cables which directly connect the CPUs to each other via synchronization modules. The bandwidth on the PROFINET cable is available for PROFINET IO communication.
Redundant systems
Redundant systems are identified by the fact that important automation components are available in multiple units (redundant). Process control is maintained if a redundant component fails.
Retentivity
A memory area whose content is retained even after a power failure and after a transition from STOP to RUN is retentive. The non-retentive bit memory area, timers and counters are reset after a power failure and after a STOP-RUN transition.
System states
The system states of the S7-1500R/H redundant system result from the operating states of the primary and backup CPU. The term system state is used as a simplified expression that identifies the operating states of the two CPUs that occur at the same time. The S7-1500R/H redundant system features the STOP, STARTUP, RUN-Solo, SYNCUP and RUNRedundant system states.
TIA Portal
Totally Integrated Automation Portal
The TIA Portal is the key to the full performance capability of Totally Integrated Automation. The software optimizes all operating, machine and process sequences.
Timers
Timers are components of the CPU system memory. The operating system automatically updates the content of the "timer cells" asynchronously to the user program. STEP 7 instructions define the precise function of the timer cell (e.g. on-delay) and trigger its execution.
User program
In SIMATIC, a distinction is made between user programs and the firmware of the CPU.
Cycle and response times
Function Manual, 11/2019, A5E03461504-AE
79
Glossary
The user program contains all instructions, declarations and data by which a system or process can be controlled. The user program is assigned to a programmable module (for example, CPU, FM) and can be structured in smaller units.
Firmware: see glossary entry "Firmware of the CPU"
Cycle and response times
80
Function Manual, 11/2019, A5E03461504-AE
Index
C
Cycle Definition, 18
Cycle control point, 19 Cycle time
Definition, 20 Different, 21 Process image partition, 24 Update, 24 Cycle time statistics, 23
D
Dead time, 57, 66
E
Execution Event-driven, 10 Time-driven, 10
F
FAQ Total cycle time of a program, 30
H
Hardware interrupts, 10, 52
I
Instruction RE_TRIGR, 22 RT_Info, 23, 32, 42, 61, 71 RUNTIME, 27
Interrupt response times CPU, 52 R/H CPUs, 74
Interruptibility, 11
Cycle and response times Function Manual, 11/2019, A5E03461504-AE
M
Maximum cycle time, 22, 31, 57 Minimum cycle time, 19, 22, 62
O
OB 80 Time error OB, 22
P
Parameter Enable time error, 14 Event threshold for time error, 14 Events to be queued, 13 Report event overflow into diagnostic buffer, 14
Process image partitions, 11 Program execution, 10 Program execution in the cyclic program, 10 Program execution times
Without interruption, 26 Program execution times of R/H CPUs
Without interruption, 72 Program organization, 10
R
R/H CPUs Interrupt response times, 74
Response time Definition, 46
Response time of CPU, 47 Fluctuation, 47
Response time of R/H CPUs Fluctuation, 69
S
Synchronization in RUN-Redundant system state, 63 in SYNCUP system state, 59
81
Index
T
Time error OB OB 80, 22, 57
Times Basic expenditure for error OB, 29, 73 Basic expenditure for interrupts, 28, 73 Cyclic interrupts for S7-1500 CPUs, 45 Cyclic interrupts for S7-1500R/H-CPUs, 74 For one operation, 26, 29, 29, 29, 30, 73
U
Update times Backplane bus ET 200SP CPUs, 49 PROFIBUS DP, 48 PROFINET IO, 48 S7-1500 CPUs, 24 S7-1500R/H-CPUs, 72
Cycle and response times
82
Function Manual, 11/2019, A5E03461504-AE
Structure and Use of the CPU Memory
SIMATIC
S7-1500, S7-1500R/H, SIMATIC Drive Controller, ET 200SP, ET 200pro Structure and Use of the CPU Memory
Function Manual
Preface
Function manuals Documentation Guide
1
Memory areas and retentive memory
2
Memory usage and application examples
3
SIMATIC memory card
4
11/2019
A5E03461664-AD
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03461664-AD 10/2019 Subject to change
Copyright © Siemens AG 2013 - 2019. All rights reserved
Preface
Purpose of the documentation
This documentation describes the various memory areas of the following systems: SIMATIC S7-1500 automation system SIMATIC S7-1500R/H redundant system SIMATIC Drive Controller The CPUs of the ET 200SP distributed I/O system The CPUs of the ET 200pro distributed I/O system based on SIMATIC S7-1500 The book also shows: How to make the best use of the memory areas How to reduce work memory utilization by:
Using recipes and data logs Saving data blocks on the SIMATIC memory card
Basic knowledge required
The following knowledge is required in order to understand the documentation: General knowledge of automation technology Knowledge of the SIMATIC industrial automation system Knowledge about the use of computers Proficiency with STEP 7
Conventions
STEP 7: in this documentation, "STEP 7" is used as a synonym for all versions of the "STEP 7 (TIA Portal)" configuring and programming software.
Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
3
Preface
Scope of the documentation
This documentation is valid for the central modules of the SIMATIC S7-1500, SIMATIC Drive Controller and ET 200SP systems and for ET 200pro.
The CPUs of the redundant system S7-1500R/H do not support all the memory objects described in this function manual. The limitations of the redundant S7-1500R/H system are pointed out where appropriate in the manual. You can find a list of the unsupported functions in the Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833) system manual.
What's new in edition 11/2019 as compared to edition 10/2018?
What's new?
Changed contents
Scope of the function manual expanded to include the CPUs of the SIMATIC Drive Controller
What are the customer benefits?
SIMATIC Drive Controller and SINAMICS Integrated support the memory structure familiar from the S7-1500 automation system.
Information on the special features of the SIMATIC Drive Controller is explained at the relevant points in the manual.
Where can I find information?
· In the corresponding sections of the manual
· SIMATIC Drive Controller (https://support.industry.sie mens.com/cs/ww/en/view/1 09766665) system manual
What's new in Edition 10/2018 compared to Edition 09/2016
What's new?
Changed contents
Scope of the function manual expanded to include the CPUs of the redundant system S7-1500R/H.
What are the customer benefits?
Where can I find information?
The CPUs of the redundant system S7- ·
1500R/H support the memory structure
familiar from the S7-1500 automation
system.
·
Information on the particularities of the redundant S7-1500R/H system is provided where appropriate in the manual.
In the corresponding sections of the manual
System manual Redundant System S7-1500R/H (https://support.industry.sie mens.com/cs/ww/en/view/1 09754833)
Structure and Use of the CPU Memory
4
Function Manual, 11/2019, A5E03461664-AD
Preface
What's new in Edition 09/2016 compared to Edition 01/2013
What's new? New contents
Changed contents
Analyzing memory requirements and memory usage
Memory requirements in load memory for downloading software changes
Service life of SIMATIC memory cards
Scope of the function manual expanded to include the CPUs of the ET 200SP distributed I/O system and the CPU 1516pro-2 PN
What are the customer benefits?
Where can I find information?
You have various options for analyzing the Section Memory requirements memory requirements and the memory and memory usage (Page 15) usage of the CPU:
· With STEP 7
· With the display of the CPU
· With the web server of the CPU
When loading software changes to the SIMATIC memory card, the files in question are only deleted after creation of the new files. For this reason, the CPU requires adequate free memory space on the SIMATIC memory card.
Section Memory requirements for downloading software changes (Page 28)
You have various options for creating memory space; these will be explained.
Using calculation examples of the service life of a SIMATIC memory card, you can estimate which SIMATIC memory card is required for your automation task.
Section Service life of the SIMATIC memory card (Page 63)
Functions that you will be familiar with
·
from the SIMATIC S7-1500 CPUs are
implemented in CPUs in other designs
(ET 200SP) and in the CPU 1516pro-2 PN
(degree of protection IP65, IP66 and
IP67).
·
Manual CPU 1510SP-1 PN (https://support.industry.sie mens.com/cs/ww/en/view/9 0157130)
Manual CPU 1512SP-1 PN (https://support.industry.sie mens.com/cs/ww/en/view/9 0157013)
· Operating instructions CPU 1516pro-2 PN (https://support.industry.sie mens.com/cs/ww/en/view/1 09482416)
Recycling and disposal
For environmentally friendly recycling and disposal of your old equipment, contact a certified electronic waste disposal company and dispose of the equipment according to the applicable regulations in your country.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
5
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
Structure and Use of the CPU Memory
6
Function Manual, 11/2019, A5E03461664-AD
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com).
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
7
Table of contents
Preface ................................................................................................................................................... 3
1 Function manuals Documentation Guide ................................................................................................. 9
2 Memory areas and retentive memory .................................................................................................... 11
2.1 2.1.1
Memory areas ........................................................................................................................ 11 Specifics of the CPUs of the redundant system S7-1500R/H ............................................... 14
2.2
Memory requirements and memory usage ............................................................................ 15
2.3
Retentive memory areas ........................................................................................................ 21
2.4 2.4.1
Summary of retentive behavior .............................................................................................. 25 Retentive behavior of the memory objects ............................................................................ 25
2.5
Memory behavior when loading software changes................................................................ 26
2.6
Memory requirements for downloading software changes .................................................... 28
3 Memory usage and application examples.............................................................................................. 33
3.1
Memory usage for data blocks............................................................................................... 33
3.2
Memory usage for recipes ..................................................................................................... 35
3.3 3.3.1 3.3.2 3.3.3 3.3.4 3.3.5
Memory usage for data logging ............................................................................................. 37 Overview of data logging ....................................................................................................... 37 Data structure of the data logs............................................................................................... 39 Instructions for data logging ................................................................................................... 40 Example program for data logging......................................................................................... 41 Calculation of the data log size .............................................................................................. 47
4 SIMATIC memory card.......................................................................................................................... 51
4.1
SIMATIC memory card - Overview ........................................................................................ 51
4.2
Setting the card type .............................................................................................................. 58
4.3
Data transfer with SIMATIC memory cards ........................................................................... 60
4.4
Service life of the SIMATIC memory card.............................................................................. 63
4.5
Expanding the load memory of the CPUs of the redundant system S7-1500R/H ................. 68
Glossary ............................................................................................................................................... 69
Index .................................................................................................................................................... 75
Structure and Use of the CPU Memory
8
Function Manual, 11/2019, A5E03461664-AD
Function manuals Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system, for CPU 1516pro-2 PN based on SIMATIC S7-1500, and for the distributed I/O systems SIMATIC ET 200MP, ET 200SP and ET 200AL is divided into three areas. This division allows you easier access to the specific information you require.
Basic information
System manuals and Getting Started manuals describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500, ET 200MP, ET 200SP and ET 200AL systems; use the corresponding operating instructions for CPU 1516pro-2 PN. The STEP 7 online help supports you in configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, terminal diagrams, characteristics and technical specifications.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
9
Function manuals Documentation Guide
General information The function manuals contain detailed descriptions on general topics such as diagnostics, communication, Motion Control, Web server, OPC UA. You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742705). Changes and additions to the manuals are documented in product information sheets. You will find the product information on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/us/en/view/68052815) ET 200SP (https://support.industry.siemens.com/cs/us/en/view/73021864) ET 200AL (https://support.industry.siemens.com/cs/us/en/view/99494757)
Manual Collections
The Manual Collections contain the complete documentation of the systems put together in one file. You will find the Manual Collections on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/86140384) ET 200SP (https://support.industry.siemens.com/cs/ww/en/view/84133942) ET 200AL (https://support.industry.siemens.com/cs/ww/en/view/95242965)
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Structure and Use of the CPU Memory
10
Function Manual, 11/2019, A5E03461664-AD
Memory areas and retentive memory
2
2.1
Memory areas
The automation data is located in the automation system in different memory areas.
The offline data of the project created in STEP 7 is located on the hard disk of the programming device. The online data of the project is located in the load memory on the SIMATIC memory card. In addition, the work memory, retentive memory and other memory areas are located on the CPU.
The following figure shows an overview of the memory areas of the CPUs:
Figure 2-1 Memory areas
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
11
Memory areas and retentive memory 2.1 Memory areas
Load memory
Load memory is non-volatile memory for code blocks, data blocks, technology objects and the hardware configuration. This load memory is located on the SIMATIC memory card. STEP 7 transfers the project data from the programming device to the load memory.
You can copy additional data (for example HMI backups and other files) to the SIMATIC memory card using the web server or Explorer. This data can then be found in the load memory on the SIMATIC memory card.
Note An inserted SIMATIC memory card is required to operate the CPU.
Load memory: CPU 1518-4 PN/DP MFP and CPU 1518F-4 PN/DP MFP
On these CPUs additional memory space is used in the load memory by:
Linux runtime, which runs in parallel with the CPU runtime
C/C++ runtime applications
Files that are needed for C/C++ runtime applications
CPU function libraries
Note CPU runtime
In the context of the CPU 1518-4 PN/DP MFP and the CPU 1518F-4 PN/DP MFP as well as the Open Development Kit (ODK), the term "CPU runtime" has the following meaning:
The CPU runtime is the runtime environment in which a CPU runtime application can be executed. CPU 1518-4 PN/DP MFP and CPU 1518F-4 PN/DP MFP run a Linux runtime in parallel with the CPU runtime. The Linux runtime is the runtime environment for applications that are executable in Linux, e.g. C/C++ runtime applications.
For additional information on the CPUs, refer to the CPU 1518-4 PN/DP MFP (https://support.industry.siemens.com/cs/ww/en/view/109749061) manual and the CPU 1518(F)-4 PN/DP MFP (https://support.industry.siemens.com/cs/ww/en/view/109756478) product information. You can find information on creating C/C++ runtime applications in the SIMATIC S7-1500 ODK 1500S (https://support.industry.siemens.com/cs/ww/en/view/109752683) manual.
Structure and Use of the CPU Memory
12
Function Manual, 11/2019, A5E03461664-AD
Memory areas and retentive memory 2.1 Memory areas
Work memory
The work memory is volatile memory that contains the code and data blocks. The work memory is integrated into the CPU and cannot be extended. The work memory is only used in operation of the CPU.
In the CPUs, the work memory is divided into two areas:
Code work memory: The code work memory contains runtime-relevant parts of the program code.
Data work memory: The data work memory contains the runtime-relevant parts of the data blocks and technology objects. Tags of global data blocks, instance data blocks and technology objects are initialized with their start values at the operating states changes below. Retentive tags receive their actual values saved in the retentive memory.
STOP STARTUP
POWER ON STARTUP
POWER ON STOP
Work memory of CPU 1518-4 PN/DP MFP and CPU 1518F-4 PN/DP MFP
Additional work memory is needed for use of the CPU function libraries and C/C++ runtime applications.
Retentive memory
The retentive memory is non-volatile memory for saving a limited amount of data in the event of power failure.
The following actions delete certain memory objects of the retentive memory:
Memory reset
Reset to factory settings
You can find an overview of the retentive behavior of the individual memory objects in section Retentive behavior of the memory objects (Page 25).
You can find additional information on the memory reset and reset to factory settings functions in the following manuals:
System manual S7-1500, ET 200MP Automation System (http://support.automation.siemens.com/WW/view/en/59191792)
SIMATIC Drive Controller (https://support.industry.siemens.com/cs/ww/en/view/109766665) system manual
System manual ET 200SP Distributed I/O System (http://support.automation.siemens.com/WW/view/en/58649293)
Operating instructions ET 200pro CPU 1513pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109769507) and ET 200pro CPU 1516pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109482416)
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
13
Memory areas and retentive memory 2.1 Memory areas
Additional memory areas
Besides the memory areas that have been described for the user program and data, the CPU has additional memory areas available. The additional memory areas include the following: Process images Temporary local data The CPU-specific sizes can be found in the technical specifications for the respective CPU.
2.1.1
Specifics of the CPUs of the redundant system S7-1500R/H
The redundant system S7-1500R/H consists of two CPUs. There must be a SIMATIC memory card in each of the CPUs. We recommend the same memory size for each SIMATIC memory card. During redundant operation, both CPUs execute the user program in parallel. In so doing, one CPU takes the role of the leading CPU (Primary CPU) and one CPU takes the role of the following CPU (Backup CPU). If one CPU fails, the second CPU maintains control over the process.
Memory areas
The two CPUs of the redundant system S7-1500R/H have the same memory areas as the CPUs of non-redundant systems.
You create the hardware configuration of the offline project data only once in STEP 7 STEP 7 loads the offline project data into the current primary CPU. The system synchronizes all data required for redundant operation from the primary CPU to the backup CPU.
Both CPUs receive identical online project data. The online project data contains the hardware configuration of the H-system.
Structure and Use of the CPU Memory
14
Function Manual, 11/2019, A5E03461664-AD
Memory areas and retentive memory 2.2 Memory requirements and memory usage
Particularities of the retentive memory
Like for non-redundant CPUs, the retentive memory is a non-volatile memory. The retentive memory saves a limited amount of data in the event of power failure.
Each of the CPUs of the redundant system S7-1500R/H has its own retentive memory. If one of the CPUs changes to POWER OFF and the second CPU is still in RUN, the retentive data of the CPU in RUN continues to be updated. If the remaining CPU also goes from RUN to POWER OFF, the retentive memory of this CPU contains the more up-to-date retentive data. Note the following for when you switch the CPUs back to RUN afterwards.
Note Characteristics of retentive data after a STOP or POWER OFF of both CPUs
After a STOP or POWER OFF of both CPUs, switch the CPU with the more up-to-date data to RUN first. The more up-to-date data is located in the CPU that controlled the process before STOP or POWER OFF. This procedure gives you certainty that you are using the more up-to-date retentive data. The precondition for this is that you did not change any data using STEP 7 or the HMI while the CPUs were in STOP.
Redundancy ID
Unlike in a non-redundant CPU, an additional memory object is contained in the retentive memory of the respective redundant CPU. Each CPU saves its respective redundancy ID in this memory object. The redundancy IDs can assume the values 1 and 2. Different redundancy IDs are required for redundant operation in order to clearly identify the CPUs and assign the project data to the respective CPUs. For additional information on redundancy IDs of the CPUs, refer to the Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833) system manual.
You can find an overview of the retentive behavior of the individual memory objects in section Retentive behavior of the memory objects (Page 25).
2.2
Memory requirements and memory usage
You can access information regarding the memory areas of the CPUs in the following ways depending on product family used:
Product family
S7-1500 S7-1500R/H SIMATIC Drive Controller ET 200SP ET 200pro CPU 151xpro-2 PN
Information regarding the memory areas of the CPU is accessible via:
STEP 7
Web server -
Display ----
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
15
Memory areas and retentive memory 2.2 Memory requirements and memory usage
Memory requirements of the program in the offline project
During creation or modification of a project, the display of memory utilization in STEP 7 shows you the size of the project in the following memories: Load memory Work memory Retentive memory You can find this information for the CPU under "Program info" in the project tree, "Resources" tab. Total size of the memory areas of the respective CPU project (in the figure below line
"Total:") Memory requirements of the program elements (blocks, data types, objects for motion
technology and PLC tags) Memory amounts in the respective memory area of the offline project (in figure below, line
"Used:") Used inputs and outputs The following figure shows an overview of the utilization of the various memory areas of the "Resources" tab:
Figure 2-2 Display of the utilization of the various memory areas
Structure and Use of the CPU Memory
16
Function Manual, 11/2019, A5E03461664-AD
Memory areas and retentive memory 2.2 Memory requirements and memory usage
For a CPU, you can select the total size of the load memory in a drop-down list. Select the size of the load memory in accordance with the size of the SIMATIC memory card you are using. The percentage shown in the Load memory column depends on the selected size of the load memory. As soon as the memory size exceeds the size of the load memory of the memory card you are using, the sizes indicated turn red.
Note Determination of the memory utilization Note that the SIMATIC memory card also contains data other than the user program that you cannot determine using "Resources". This data includes: · Hardware configuration · Recipes, data logs and HMI backups (not supported for S7-1500R/H) · Non-SIMATIC files, such as PDF, etc. Therefore, the drop-down list with the size of your SIMATIC memory card only serves as a visual orientation aid.
Also refer to the FAQ "How do you estimate the memory requirements of your project in the load memory of a SIMATIC S7-1500" on the Internet (https://support.industry.siemens.com/cs/ww/en/view/97553417).
Note Display of the memory utilization under "Program info" The display of the memory utilization in the program information is an offline display in STEP 7 and only shows the memory requirements of the program in the project. The program on the memory card of the CPU may differ, however, for example if the program: · is more up to date · contains blocks generated by other projects · contains blocks generated on the CPU
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
17
Memory areas and retentive memory 2.2 Memory requirements and memory usage
Data on the SIMATIC memory card
In addition to the program and the associated program elements (blocks, data types, objects for motion technology and PLC tags), the following data is also stored on the memory card: Hardware configuration Project information Force jobs Trace recordings (not supported for S7-1500R/H) Symbols and comments The following further data may also be found on the memory card: Recipes, data logs and HMI backups (not supported for S7-1500R/H) Non-SIMATIC files that were copied to the memory card via the web server of the CPU or
offline in Windows Explorer (for example PDF files, etc.)
Display of the memory utilization in STEP 7
In online mode, the online function "Memory" provides you with the following up-to-date memory information: Size of the total free and already allocated load memory on the SIMATIC memory card. Size of the total free and already allocated work memory, separated by code and data. Size of the total free and already allocated retain memory. The online function "Memory" can be found in Online & Diagnostics under "Diagnostics > Memory". You can access the functions under Online & Diagnostics in various ways: In the project tree under each configured CPU. In the project tree under Online access > Accessible devices, in order to display the
memory utilization of CPUs that were not configured in the project. In all views of the device configuration (topology view, network view, device view) by
selecting a CPU with the right mouse button.
Figure 2-3 "Memory" online function
Note Fill levels of the CPUs of the redundant system S7-1500R/H The CPUs of the redundant system S7-1500R/H can have CPU-specific fill levels in nonredundant operation. The fill levels of the load memory of the CPUs can differ in redundant operation and nonredundant operation (e.g. due to stored PDF files or SIMATIC memory cards of different sizes). You can have the memory utilization of both CPU 1 and CPU 2 displayed in STEP 7.
Alternatively to the "Memory" online function, you will also find a display of the current memory functions on the "Online tools" task card in the "Memory" section.
Structure and Use of the CPU Memory
18
Function Manual, 11/2019, A5E03461664-AD
Memory areas and retentive memory 2.2 Memory requirements and memory usage
Display of the memory utilization on the display of the CPU
To obtain information about the available memory via the display, proceed as follows: Select the "Diagnostics" menu on the display with the help of the arrow keys. Select the "Used memory" command from the "Diagnostics" menu. Under the "Used memory" menu item, you can find information about the utilization of the various memory areas (see following figure). Note that the memory usage is a snapshot of the memory used at the time of the request and is not continuously updated.
To find out details about the respective memory areas (e.g. code work memory), select the required memory area with the help of the arrow keys (see following figure).
In the detail view, e.g. of the code work memory, the display provides you with the following information: Memory space which is still available in the code work memory. Memory space which is already allocated in the code work memory. Total available memory space in the code work memory.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
19
Memory areas and retentive memory 2.2 Memory requirements and memory usage Display of the memory usage in the Web server
On the Web server, you can find information about the current usage of the individual memory areas on the Web page "Diagnostics" in the "Memory" tab. Detailed information about the use of the Web server can be found in the S7-1500 Web server (https://support.industry.siemens.com/cs/ww/en/view/59193560) function manual.
Figure 2-4 Display of the memory usage in the Web server Note Redundant system S7-1500R/H The web server is not supported by the CPUs of the redundant system S7-1500R/H.
Structure and Use of the CPU Memory
20
Function Manual, 11/2019, A5E03461664-AD
Memory areas and retentive memory 2.3 Retentive memory areas
2.3
Retentive memory areas
Introduction
The CPUs have a memory for storing retentive data at POWER OFF. You can find the size of the retentive memory in the technical specifications of the respective CPU.
You can find the utilization of the retentive memory of the configured CPU in STEP 7 offline under "Program info > Resources" or online under Online & diagnostics with "Diagnostics > Memory".
If you define data as retentive, its content is retained for the startup of a program after STOP or a power failure.
You can define the following data and objects as retentive:
Tags of global data blocks
Tags of instance data blocks of a function block
Bit memories, timers and counters
Tags of technology objects are retentive, e.g. calibration values of absolute encoders. STEP 7 manages the retentivity of the technology object tags automatically. Hence, you do not have to configure retentivity.
The retentive tags of technology objects are unaffected by a memory reset. You can only delete these retentive tags with a reset to factory settings.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
21
Memory areas and retentive memory 2.3 Retentive memory areas
Tags of a global data block
In a global data block, you can define either individual tags from a block or all of its tags collectively as retentive, depending on the setting for the "Optimized block access" attribute: "Optimized block access" activated: In the declaration table of the data block, you can
define individual tags as retentive.
Figure 2-5 Retentivity setting "Optimized block access" activated "Optimized block access" not activated: In the declaration table of the data block, you can
only define the retentivity of all tags collectively.
Figure 2-6 Retentivity setting "Optimized block access" not activated You can find additional information on optimized and non-optimized data blocks in the Programming guideline for S7-1200/S7-1500 (https://support.industry.siemens.com/cs/de/de/view/90885040/en).
Tags of an instance data block of a function block
You can define the tags of the instance data block of a function block as retentive in STEP 7. Depending on the setting for the "Optimized block access" attribute, you can define retentivity either for individual tags from a block or for all of its tags collectively: "Optimized block access" activated: In the interface of the function block, you can define
individual tags as retentive. "Optimized block access" not activated: In the instance data block, you can only define
the retentivity of all tags collectively.
Structure and Use of the CPU Memory
22
Function Manual, 11/2019, A5E03461664-AD
Memory areas and retentive memory 2.3 Retentive memory areas
Creation of a data block in the user program
The instruction "CREATE_DB" is used to create a new data block in the load and/or work memory. For data blocks which you create in the load memory, depending on the selection for the ATTRIB parameter, the generated data block either has the property "retentive" or the property "non-retentive". Setting the retentivity for individual tags is not possible here. The "Optimized block access" attribute is disabled. You can find additional information on the "CREATE_DB" instruction in the STEP 7 online help under "Programming a PLC > Instructions > Extended instructions > Data block control > CREATE_DB: Create data block".
Note Redundant S7-1500R/H system The "CREATE_DB" instruction is not supported by the CPUs of the redundant system S71500R/H.
Tags of technology objects
Tags of technology objects are retentive, e.g. calibration values of absolute encoders. STEP 7 manages the retentivity of the technology object tags automatically. Hence, you do not have to configure retentivity. The retentive tags of technology objects are unaffected by a memory reset. They can be deleted only by a reset to factory settings.
Note Redundant S7-1500R/H system Technology objects are not supported by the CPUs of the redundant system S7-1500R/H.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
23
Memory areas and retentive memory 2.3 Retentive memory areas
Bit memories, timers and counters
You can define the number of retentive bit memories, timers and counters in STEP 7 in the PLC tag table using the "Retain" button.
Reference
Figure 2-7 Definition of the number of retentive bit memories, timers and counters (beginning at 0, continuing without gaps) using the "Retain" button
You can find additional information on setting the retentivity in the STEP 7 online help.
Structure and Use of the CPU Memory
24
Function Manual, 11/2019, A5E03461664-AD
2.4
Summary of retentive behavior
Memory areas and retentive memory 2.4 Summary of retentive behavior
2.4.1
Retentive behavior of the memory objects
This section gives an overview of the retentive behavior of the memory objects of the CPUs.
In addition to the retentive memory areas described, there are other objects with retentive characteristics, for example, the diagnostics buffer. These objects do not occupy any storage space in the retentive memory.
The following table shows the retentive behavior of the memory objects in the case of the following:
STOP STARTUP
POWER ON STARTUP
POWER ON STOP
"Memory reset"
"Reset to factory settings"
Table 2- 1 Retentive behavior of the memory objects
Memory object
Actual values of the data blocks, instance data blocks Bit memories, timers and counters - configured as retentive Bit memories, timers and counters - configured as non-retentive Retentive tags of technology objects (e.g. calibration values of absolute encoders) 2) Diagnostics buffer entries Operating hours counter Clock time Redundancy ID 3) x = content is retained = object is initialized
STOP STARTUP POWER ON STARTUP POWER ON STOP Can be set in the properties of
the DB in STEP 7 1) x
-
x
x x x x
Memory reset
-
-
-
x
x x x x
1) For DBs with optimized access the retentive behavior is configurable for specific tags. 2) Not for the CPUs of the redundant system S7-1500R/H 3) Only for the CPUs of the redundant system S7-1500R/H
Reset to factory settings
-
-
-
-
-
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
25
Memory areas and retentive memory 2.5 Memory behavior when loading software changes
Diagnostics buffer
The 500 most recent entries in the diagnostics buffer are retained after power failure and are not affected by a memory reset. The diagnostics buffer can be cleared only by a reset to factory settings. The entries in the diagnostics buffer do not occupy any memory space in the retentive memory.
Operating hours counter
The operating hours counters of the CPUs are retentive and are not affected by a memory reset. By resetting to factory settings, the operating hours counters are set to zero.
Clock time
The clock time of the CPUs is retentive and is not affected by a memory reset. A reset to factory settings resets the system time to 01.01.2012 00:00:00.
2.5
Memory behavior when loading software changes
Introduction
You can download software changes in STOP and RUN without affecting the actual values of previously loaded tags.
You load changes to the software in STEP 7 (in the project tree and with selected PLC station) under "Download to device > Software (only changes)".
Impact of software changes on PLC tags
You can load the following software changes without affecting the actual values of PLC tags that have already been loaded: Name change Comment change Addition of new tags Deletion of tags Change of retentivity settings for Retentive memory areas (Page 21) The actual values are affected by loading the following software changes: Data type change Change to addresses
Structure and Use of the CPU Memory
26
Function Manual, 11/2019, A5E03461664-AD
Memory areas and retentive memory 2.5 Memory behavior when loading software changes
Memory reserve of global DBs and instance DBs
Each function block or data block with the "Optimized block access" attribute activated contains, by default, a memory reserve which you can use for subsequent interface changes. The memory reserve is initially not used. When you have compiled and loaded the block, and then observe that you want to reload interface changes, activate the memory reserve. All tags that you subsequently declare will be placed in the memory reserve. During the next load, the new tags are then initialized to their start values. Tags which have already been loaded are not reinitialized.
The setting of the memory reserve can be found in STEP 7 under the data block properties in the "Download without reinitialization" category.
Impacts of software changes on data blocks without memory reserve
If you are not using memory reserve, you can load the following software changes without this reinitializing the actual values of DB tags that have already been loaded:
Start value change
Comment change
Impacts of software changes on data blocks with memory reserve
If you are using the memory reserve for data blocks ("Optimized block access" attribute and "Enable download without reinitialization for retentive tags" button selected), you can load the following software changes. The actual values of previously downloaded DB tags are not reinitialized by this.
Start value change
Comment change
Addition of new tags
If the button "Enable download without reinitialization for retentive tags" is deactivated, then all actual values of the data block are reinitialized on the next loading of the following software changes:
Name change
Data type change
Retentivity change
Deletion of tags
Changes to the memory reserve settings
Addition of new tags
Reference
You can find additional information on setting and activating the memory reserve and on downloading block changes in the STEP 7 online help under "Programming a PLC > Compiling and downloading PLC programs > Downloading blocks for S7-1200/1500 > Loading block extensions without reinitialization".
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
27
Memory areas and retentive memory 2.6 Memory requirements for downloading software changes
2.6
Memory requirements for downloading software changes
Memory requirements in RUN state
For the consistent and atomic execution of the complete download operation, the CPU requires adequate free memory space in the work memory and on the SIMATIC memory card. The files affected by loading the software changes to the CPU are only deleted after the new files have been created. This SIMATIC memory card therefore requires free memory space corresponding approximately to the space required for all program objects to be loaded on the memory card.
If this amount of memory is not available on your SIMATIC memory card, the following message is displayed in STEP 7 during the download operation to the CPU: "There is insufficient memory on the memory card for this amount of data."
In order to still enable the loading of changes to the CPU in such a case, we recommend one or more of the following options:
Download in RUN state
Delete any files no longer required (e.g. CSV files, panel backups, etc.) on the memory card using the Web server.
Preferably, you should download extensive changes in RUN state in multiple steps or perform the download after each change step.
Note
RUN-Redundant Loading to the CPUs of the S7-1500R/H redundant system in the RUN-Redundant system state
Before a write function is performed, the system does not check whether there is enough free space on the SIMATIC memory cards of the CPUs for the function. Writing functions are online functions with the PG/PC, for example loading/deleting a block, test functions, loading a modified user program in the RUN-Redundant system state.
If insufficient memory is available on the SIMATIC memory card of a CPU:
· The CPU affected switches to STOP mode. If insufficient memory is available on the SIMATIC memory card of the selected CPU (to which you wish to load), that CPU switches to STOP mode. The other CPU switches to RUN with the previous user program (redundant system RUN-Solo system state). If insufficient memory is available on the other CPU, that CPU switches to STOP mode. The selected CPU (to which you have loaded) switches to RUN with the modified user program (redundant system RUN-Solo system state).
· The ERROR LED flashes red (temporary error)
· A corresponding error message is entered in the diagnostics buffer
If after that there is not enough free memory on the SIMATIC memory card of the other CPU either, this CPU remains in RUN. The CPU then responds like a standard CPU.
Structure and Use of the CPU Memory
28
Function Manual, 11/2019, A5E03461664-AD
Memory areas and retentive memory 2.6 Memory requirements for downloading software changes
Download in STOP state If downloading in several steps is not possible, load extensive changes in STOP state.
Use a larger memory card In order to perform extensive downloads in RUN state of the CPU in the future, use a larger memory card. A description of how to change the memory card can be found in the section "Changing the memory card without loss of retentive data".
Impact of minor program changes on the load procedure Under the objects of a program, there are dependencies, e.g. Of code blocks to called code blocks Of code blocks to data blocks Of data blocks to data types (PLC data types, FB types) This means that the load procedure for a minor change may be very time-consuming if the change affects a large number of dependent objects.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
29
Memory areas and retentive memory 2.6 Memory requirements for downloading software changes
Example: A STEP 7 program contains an organization block (OB), 20 functions (FC) and a data block (DB). The OB calls the 20 FCs. All the FCs access the DB. If you change the program code in one of the FCs, the following load procedure only contains the changed FC. If you change the data type of a tag in the DB, however, the following load procedure then contains all the FCs and the DB. The following figure shows the objects in the load procedure in a preview.
Figure 2-8 Preview for loading 30
Structure and Use of the CPU Memory Function Manual, 11/2019, A5E03461664-AD
Memory areas and retentive memory 2.6 Memory requirements for downloading software changes
To find the interdependencies of the individual objects, double-click "Program info" in the project tree. Change to the "Dependency structure" tab in the "Program info" dialog.
Figure 2-9 Dependency structure
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
31
Memory areas and retentive memory 2.6 Memory requirements for downloading software changes
Memory requirements in STOP state
Even when downloading in STOP state, a certain amount of reserve memory is required, because your CPU needs sufficient free memory on the memory card for consistent downloading of individual data blocks. The files affected by loading the data blocks are only deleted after the new files have been created. Therefore, for the modifications you must have available at least the memory requirement of the largest data block.
If insufficient reserve memory is available on your SIMATIC memory card when loading in STOP state, the following message is displayed in STEP 7 during the download to the CPU: "There is insufficient memory on the memory card for this amount of data."
In order to still enable the loading of changes to the CPU in such a case, we recommend one or more of the following options:
Delete any files no longer required (e.g. CSV files, panel backups, etc.) from the memory card using the Web server.
Use a larger memory card. A description of how to change the memory card can be found in the section "Changing the memory card without loss of retentive data".
Note
Please note that retentive data and possibly also project data is lost with the following three options. Therefore only use the following options described if the two options described previously did not lead to the desired result.
In STEP 7, download your program to the CPU with menu command "Online > Download and reset PLC program".
Remove the memory card from the slot of the CPU. Delete the content that is longer needed from the memory card with your programming device.
Delete the entire contents, e.g. by formatting the memory card. A description of how to format the memory card can be found in the section "Formatting a SIMATIC memory card".
Note also the following FAQs:
"When downloading to the S7-1500 CPU, why is the message "There is insufficient memory on the memory card for this amount of data" displayed although there is still enough memory available?" on the Internet (https://support.industry.siemens.com/cs/ww/en/view/107108015).
"Why can you not load the project data into the load memory of the S7-1500 CPU when the number of alarms and messages is too large?" on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109751485).
Structure and Use of the CPU Memory
32
Function Manual, 11/2019, A5E03461664-AD
Memory usage and application examples
3
3.1
Memory usage for data blocks
Processing sequence
Storing data records in the load memory
STEP 7 stores individual data records in a non-runtime-relevant DB and downloads the DB to the CPU. In order to configure a non-runtime-relevant DB, you must enable the "Only store in load memory" block attribute. The data records then only use memory space in the load memory and not in the work memory.
Working with data record data in the user program
You use the "READ_DBL" instruction to copy a data record from the DB in the load memory to a runtime-relevant DB in the work memory. As a result, the work memory only has to accommodate the data for the data record currently required. The user program can now access the data of the current data record.
Saving back changed recipe data records
The "WRIT_DBL" instruction writes new or changed data records from the user program back to the load memory. The data written to the load memory is portable and not affected by a memory reset. To back up changed data records, you need to upload the data blocks and back them up on the PG/PC. You can find information on uploading data blocks in the STEP 7 online help under "Programming a PLC>Compiling and downloading blocks>Downloading blocks for S7-1200/1500>Uploading blocks from a memory card".
Figure 3-1 Processing sequence with "READ_DBL" and "WRIT_DBL"
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
33
Memory usage and application examples 3.1 Memory usage for data blocks
Note Redundant system S7-1500R/H The data block functions are not supported by the CPUs of the S7-1500R/H redundant system. You therefore cannot use non-runtime-relevant DBs.
Please also note the FAQ "How do you configure data blocks with the "Only store in load memory" attribute for the S7-1200/S7-1500?" on the Internet (https://support.industry.siemens.com/cs/ww/en/view/53034113).
Note Instructions that access the SIMATIC memory card have a lower performance than instructions that access the work memory. The associated blocks (e.g. READ_DBL and WRIT_DBL) are therefore asynchronous. Their execution extends if necessary over several cycles.
NOTICE Service life of the SIMATIC memory card Only a limited number of delete and write operations are possible on the SIMATIC memory card. After expiration of the service life, there is a risk that the card can no longer be used. You can find additional information on the service life of the SIMATIC memory card in Service life of the SIMATIC memory card (Page 63).
Note Memory size of the SIMATIC memory card Use a SIMATIC memory card with sufficient memory for your particular purposes.
Structure and Use of the CPU Memory
34
Function Manual, 11/2019, A5E03461664-AD
Memory usage and application examples 3.2 Memory usage for recipes
3.2
Memory usage for recipes
Introduction
A recipe is a collection of parameter sets with the same structure. These recipe data records are located in a data block in the load memory, and do not occupy any storage space in the work memory. You have the option of reading individual recipe data records to a data block in the work memory and accessing the data in the user program. You can write a recipe data record that has been changed in the user program back to the recipe data block.
Recipes contain, for example, the related data of a particular batch in production. You can export recipe data records of a recipe DB as a csv file. A web browser can read data via the web server of the CPU, even when the CPU is in STOP state. You can also directly access the data of the SIMATIC memory card using a card reader on the programming device.
Note Redundant system S7-1500R/H
Recipes are not supported by the CPUs of the S7-1500R/H redundant system.
Import and export of recipe data
You have the option of exporting recipe data records of a recipe DB as a CSV file, and importing them from a CSV file into a DB. The CSV file is located in the "\recipes" directory on the SIMATIC memory card. You can open and process this file further with a spreadsheet program such as Microsoft Excel.
You can easily work with CSV files on the SIMATIC memory card via the web server of the CPU (e.g. rename, save to hard disk, delete, etc.). To avoid undesired manipulation, set access rights for the web server in STEP 7. You can find additional information on the Web server in the Web Server (http://support.automation.siemens.com/WW/view/en/59193560) function manual.
Export of recipe data
The "RecipeExport" instruction exports all the recipe data records of a recipe DB from the load memory to a CSV file on the SIMATIC memory card. The CSV file has the same name as the recipe of the DB. The CSV file is stored in the "\recipes" directory on the SIMATIC memory card.
The "RecipeExport" instruction only exports valid and unencrypted recipe data records.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
35
Memory usage and application examples 3.2 Memory usage for recipes
Import of recipe data The "RecipeImport" instruction imports all recipe data records from the CSV file into the recipe DB in the load memory. The name of the CSV file must match the name of the recipe DB.
Figure 3-2 Import and export of recipe data
Note
Asynchronous instructions Please note that the "RecipeExport" and "RecipeImport" instructions are asynchronous instructions. In contrast to synchronous instructions, this means the execution of an asynchronous instruction can extend over multiple calls before execution is completed. The CPU processes asynchronous instructions in parallel with the cyclic user program. A CPU can process several asynchronous instruction jobs in parallel. The CPU can process a maximum of 10 jobs of the instructions listed in parallel. You can find additional information about asynchronous instructions in the following manuals: · System manual S7-1500, ET 200MP
(http://support.automation.siemens.com/WW/view/en/59191792)
· System manual Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833)
· SIMATIC Drive Controller (https://support.industry.siemens.com/cs/ww/en/view/109766665) system manual
· System manual ET 200SP Distributed I/O System (http://support.automation.siemens.com/WW/view/en/58649293)
· Operating instructions ET 200pro CPU 1513pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109769507) and ET 200pro CPU 1516pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109482416)
Structure and Use of the CPU Memory
36
Function Manual, 11/2019, A5E03461664-AD
Memory usage and application examples 3.3 Memory usage for data logging
Additional information
You can find additional information on the instructions for recipes in the STEP 7 online help under "Programming a PLC > Instructions > Instructions (S7-1200, S7-1500) > Extended instructions > Recipes and data logging > Recipe functions". Note also the application example "Using recipe functions for persistent data with SIMATIC S7-1200 and S7 1500" on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109479727).
3.3
Memory usage for data logging
3.3.1
Overview of data logging
With data logging, you save selected process values from the user program in a file, the data log. The data logs are saved on the SIMATIC memory card in csv format and stored in the "\datalogs" directory. A web browser can read data via the web server of the CPU, even when the CPU is in STOP state. You can also directly access the data of the SIMATIC memory card using a card reader on the programming device.
NOTICE
Service life of the SIMATIC memory card
Only a limited number of delete and write operations are possible on the SIMATIC memory card. Cyclic write operations to the SIMATIC memory card by the user program reduce the service life of the SIMATIC memory card. After expiration of the service life, there is a risk that the card can no longer be used. Therefore, use a SIMATIC memory card with sufficient memory for your particular purposes.
Information on the service life of the SIMATIC memory card can be found in the section Service life of the SIMATIC memory card (Page 63).
Note Memory size of the SIMATIC memory card
Use a SIMATIC memory card with sufficient memory for your particular purposes.
The "data logging" instructions can be used in your program to create, open, write, close or delete data logs. You decide which tags are logged by creating a data block that defines a single data log data record. Your data block is used as temporary storage for a new data log data record. New current values for the tags must be transferred into the data block during runtime by means of user program instructions. If all tag values have been updated, you can execute the "DataLogWrite" instruction, in order to transfer data from the data block into the data log.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
37
Memory usage and application examples 3.3 Memory usage for data logging
You manage your data logs with the integrated web server. You can download data logs from the standard "File Browser" website. After you have transferred a data log to your PC, you can analyze the data using popular spreadsheet programs, e.g. Microsoft Excel.
Note Redundant system S7-1500R/H Data logging is not supported by the CPUs of the redundant system S7-1500R/H.
The following figure shows the basic sequence for creating a data log:
Figure 3-3 Basic sequence during the creation of a data log
Structure and Use of the CPU Memory
38
Function Manual, 11/2019, A5E03461664-AD
Memory usage and application examples 3.3 Memory usage for data logging
3.3.2
Data structure of the data logs
Introduction
You use the "DataLogCreate" instruction to create a data log in STEP 7. The NAME parameter assigns the data log a name. The DATA and HEADER parameters specify the data type of all data elements in a data log data record, and the header line of the data log. The RECORDS parameter indicates the maximum number of records in the data log.
NAME parameter for the "DataLogCreate" instruction
You use the NAME parameter to assign a name for the data log. This is the name under which the data log is saved in the "\datalogs" directory of the SIMATIC memory card.
DATA parameter for the "DataLogCreate" instruction
The DATA block parameter specifies the structure of the data log's records. The columns and data types of a data record in the data log are determined by the elements of the structure declaration or array declaration of this data buffer. Each element of a structure or array corresponds to a column in a row in the data log.
HEADER parameter for the "DataLogCreate" instruction
Using the HEADER block parameter, you can assign a heading in the header row to each column in the data log.
RECORDS parameter for the "DataLogCreate" instruction
The RECORDS parameter specifies the maximum number of records that can be stored in a data log. When the specified maximum number of data records in a data log is reached, the next write operation overwrites the oldest data record.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
39
Memory usage and application examples 3.3 Memory usage for data logging
3.3.3
Instructions for data logging
Overview
The following table gives an overview of the instructions for data logging. You will find the data logging instructions in "STEP 7" in the "Instructions" task card, under "Extended instructions > Recipe and data logging > Data Logging".
Table 3- 1 Overview of the data logging instructions
Name of the instruction "DataLogCreate": Create data log
"DataLogOpen": Open data log
"DataLogWrite": Write data log "DataLogClose": Close data log "DataLogNewFile": Data log in new file
"DataLogClear": Empty data log "DataLogDelete": Delete data log
Description
With the "DataLogCreate" instruction you create a data log. The data log is saved on the SIMATIC memory card in the "\datalogs" directory. You can use the data logging instructions to save process data. The amount of data in a data log depends on the available memory space on the SIMATIC memory card.
With the "DataLogOpen" instruction, you open an existing data log on the SIMATIC memory card. A data log must be open before you can write new data records to it.
The data log opens automatically when the "DataLogCreate" and "DataLogNewFile" instructions are executed.
A maximum of 10 data logs can be open at any one time. The data log to be opened can be selected using the ID or name of the data log.
The maximum file size of data logs is 2 GB.
A maximum number of 1000 data log files is possible with firmware version V2.0.
With the "DataLogWrite" instruction you write a data record into an existing data log. Use the ID parameter to select the data log to which the data record is to be written. To write a new data record, the data log must be open.
With the "DataLogClose" instruction, you close an open data log. You select the data log using the ID parameter.
When the CPU changes to STOP state, all open data logs are closed.
With the "DataLogNewFile" instruction you create a new data log. The new data log has the same properties as an already existing data log. By creating a new data log, you prevent cyclic overwriting of existing data records.
When the instruction is called it creates a new data log on the SIMATIC memory card using the name defined in the NAME parameter. You use the ID parameter to specify the ID of the old data log whose properties you want to apply to the new data log. The ID parameter then outputs the ID of the new data log.
The "DataLogClear" instruction deletes all data records in an existing data log. The header of the data log is not deleted (see description of parameter Data structure of the data logs (Page 39)).
The "DataLogDelete" instruction is used to delete a data log from the SIMATIC memory card.
Select the data log to be deleted using the NAME and ID parameters.
Structure and Use of the CPU Memory
40
Function Manual, 11/2019, A5E03461664-AD
Memory usage and application examples 3.3 Memory usage for data logging
Note Asynchronous instructions
Note that the instructions in the table are asynchronous instructions.
In contrast to synchronous instructions, this means the execution of an asynchronous instruction can extend over multiple calls before execution is completed. The CPU processes asynchronous instructions in parallel with the cyclic user program.
A CPU can process several asynchronous instruction jobs in parallel. The CPU can process a maximum of 10 jobs of the instructions listed in the table in parallel.
You can find additional information about asynchronous instructions in the following manuals: · System manual S7-1500, ET 200MP
(http://support.automation.siemens.com/WW/view/en/59191792) · System manual ET 200SP Distributed I/O System
(https://support.industry.siemens.com/cs/ww/en/view/58649293) · SIMATIC Drive Controller
(https://support.industry.siemens.com/cs/ww/en/view/109766665) system manual · Operating instructions ET 200pro CPU 1513pro-2 PN
(https://support.industry.siemens.com/cs/ww/en/view/109769507) and ET 200pro CPU 1516pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109482416)
3.3.4
Example program for data logging
This example program shows the storing of process values for counter content, temperature, and pressure in a data log.
The example shows the basic functioning of the instructions for data logs. The complete program logic is not shown.
Note General use of data logs · Data logs are automatically opened after execution of the "DataLogCreate" and
"DataLogNewFile" instructions. · Data logs are automatically closed at a change of the CPU from RUN to STOP or a
restart of the CPU. · A data log must be open so that data can be written to the data log with the
"DataLogWrite" instruction. · A maximum of 10 data logs can be open at any one time, even when more than 10 data
logs exist.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
41
Memory usage and application examples 3.3 Memory usage for data logging
Tags of the data block
The following figure shows the tags of the "My_Datalog_Vars" data block. These tags are used by the "Data logging" instructions "DataLogCreate" and "DataLogNewFile". The "MyDataLogName" and "MyNEWDataLogName" tags are called in the NAME block parameter, and give the data logs a name. The "MyData" structure is called in the DATA block parameter and specifies the structure of the csv file. The three MyData tags temporarily store new values. The tag values at these DB addresses are transferred to a data log using the "DataLogWrite" instruction. The "MyDataLogHeaders" tag is called in the HEADER block parameter and specifies a header for the data log.
Figure 3-4 Declaration table with the data block's tags Network 1 A rising edge at REQ starts the creation of the data log.
Figure 3-5 Network 1 42
Structure and Use of the CPU Memory Function Manual, 11/2019, A5E03461664-AD
Memory usage and application examples 3.3 Memory usage for data logging
Network 2 Detect the output DONE of "DataLogCreate", because after the execution of "DataLogCreate" it is only set to 1 for one cycle.
Figure 3-6 Network 2 Network 3 A rising edge triggers the point in time at which new process values are stored in the MyData structure.
Figure 3-7 Network 3 Network 4 The state of the input EN is based on the point in time at which the execution of "DataLogCreate" was completed. One execution of "DataLogCreate" extends over multiple cycles, and must be completed before a write operation is executed. The rising edge at input REQ is the event that triggers an activated write operation.
Figure 3-8 Network 4
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
43
Memory usage and application examples 3.3 Memory usage for data logging
Network 5 Close the data log after the last data record has been written. After execution of the "DataLogWrite" instruction, which writes the last data record, the STATUS output is set to "1".
Figure 3-9 Network 5 Network 6 A rising edge at the input REQ of the instruction "DataLogOpen" simulates that the user presses a button on an HMI device, which opens a data log. If you open a data log in which all records are occupied by process data, then the next execution of the "DataLogWrite" instruction overwrites the oldest data record. You can however also preserve the old data log, and create a new data log instead. This is shown in network 7.
Figure 3-10 Network 6 44
Structure and Use of the CPU Memory Function Manual, 11/2019, A5E03461664-AD
Memory usage and application examples 3.3 Memory usage for data logging
Network 7 The ID parameter is an IN/OUT type. First you indicate the ID value of the existing data log whose structure you want to copy. After the "DataLogNewFile" instruction has been executed, a new and unique ID value for the new data log is written back into the address of the ID reference. The required detection DONE bit = TRUE is not shown. An example for the logic of the DONE bit can be found in networks 1, 2 and 4.
Figure 3-11 Network 7
The data logs created in the example program can be found on the CPU Web server's standard "File browser" Web page in the "\datalogs" folder. The following figure shows the standard Web page of the Web server using the example of the CPU 1516-3 PN/DP.
Figure 3-12 Standard "File browser" web page of the Web server
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
45
Memory usage and application examples 3.3 Memory usage for data logging
In the file browser, you can download the data logs created in the example program. It is not possible to delete or rename the data logs in the Web server. To delete a data log you either use the "DataLogDelete" instruction or you format the SIMATIC memory card. On the DataLogs web page, you can have all the data logs that you created displayed. You can call and empty the relevant data log file by clicking the icon .
Note Manipulation of the data logs using a card reader Do not delete or change the data logs using a card reader on the PG/PC. You can copy the data logs on the SIMATIC memory card, however, using a card reader on the PG/PC. The recommended medium for viewing, downloading (copying) and deleting data logs is the file browser of the web server, however. Direct file access via Windows Explorer brings with it the risk of inadvertent deletion of modification of data logs or system files. This can cause the files to be damaged or the SIMATIC memory card to become unusable.
Figure 3-13 Example - Data logs in the folder "\datalogs" of the file browser
Structure and Use of the CPU Memory
46
Function Manual, 11/2019, A5E03461664-AD
Memory usage and application examples 3.3 Memory usage for data logging
Table 3- 2 Downloaded examples of data logs displayed in Microsoft Excel Two data records written in a data log which contains a maximum of five data records.
Five data records written in a data log which contains a maximum of five data records.
After another data record has been written, the 6th write operation overwrites the oldest data record (record 1) with data record 6. Another write operation overwrites data record 2 with data record 7, etc.
3.3.5
Calculation of the data log size
The maximum memory size is allocated when you create the data log. Besides ensuring enough memory space for all the data records, you must take into account the memory space of the following elements for the memory allocation:
Data log header (if used)
Time stamp header (if used)
Data record index header
Minimum block size
The formula below represents a method to help you determine the estimated size of your data log. Make sure that you observe the rule for the maximum size.
Data bytes of the data log = ((data bytes in a data record + time stamp bytes + 12 bytes) * number of data records)
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
47
Memory usage and application examples 3.3 Memory usage for data logging
Header
Header bytes of the data log = header character bytes + 2 bytes
Header character bytes No data header and no time stamp = 7 bytes No data header and time stamp (with time stamp header) = 21 bytes Data header and no time stamp = Number of character bytes in all column headers
including separating commas Data header and time stamp (with time stamp header) = Number of character bytes in all
column headers including separating commas + 21 bytes
Data
Data type Any Bool Byte Char Date DInt DTL DWORD Int LDT LReal Real Sint
Data bytes of the data log = ((data bytes in a data record + time stamp bytes + 12 bytes) * number of data records)
Data bytes in a data record
The DATA parameter of the "DataLogCreate" instruction points to a structure. The structure assigns the number of data fields and the data type of each data field for a data log data record.
Multiply the number of the respective data type with the number of bytes required for this data type. Repeat this step for each data type in a data record. Add all the data bytes to obtain the sum of all the data elements in a data record.
Size of the individual data types
The data in data logs is saved as character bytes in csv format (comma separated values). The table below shows the number of bytes that are required to save each data type.
Bytes 10 1 4 1 10 12 31 11 7 31 25 16 5
Structure and Use of the CPU Memory
48
Function Manual, 11/2019, A5E03461664-AD
Memory usage and application examples 3.3 Memory usage for data logging
Data type String
Time Tod UDInt UInt USInt WChar Word
Bytes Example 1: MyString String[10] The maximum character string size is specified with 10 characters. · Text character + automatic filling with spaces = 10 bytes · Quotation marks at the start and end + comma character = 3 bytes 10 + 3 = 13 bytes total Example 2: Mystring2 String If no size is specified in square brackets, 254 bytes are assigned by default. · Text character + automatic filling with spaces = 254 bytes · Quotation marks at the start and end + comma character = 3 bytes 254 + 3 = 257 bytes total 14 12 12 7 5 1 6
Number of data records in a data log
The RECORDS parameter of the "DataLogCreate" instruction specifies the maximum number of data records that can be stored in a data log.
Time stamp bytes in a data record
No time stamp = 0 bytes Time stamp = 22 bytes
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
49
Memory usage and application examples 3.3 Memory usage for data logging
Example for size of a CSV file
The figure "Open CSV file" shows a CSV file opened in a spreadsheet program with five written data records in one data log.
The figure "Size of the header and the data records" shows the size of the header used in the CSV file and the size of the individual data records on the SIMATIC memory card.
The figure "Column size" shows the size of the respective columns depending on the data type used.
Open CSV file
Size of the header and the data records
Column size
Each data record also has a separator comma. Therefore, the calculation of the total size per column also includes 1 byte for each separator comma. Note that the calculation of the size of the header, the data records and the columns is not an integral component of the open CSV file. The size information was added manually to illustrate the elements that make up the size of a data log. You can have the total size of a data log you have created as CSV file displayed in the web server on the "DataLogs" page.
Structure and Use of the CPU Memory
50
Function Manual, 11/2019, A5E03461664-AD
SIMATIC memory card
4
4.1
SIMATIC memory card - Overview
Introduction
The automation system uses a SIMATIC memory card as the program memory. The SIMATIC memory card is a preformatted memory card compatible with the Windows file system. The memory card is available in different memory sizes and can be used for the following purposes: Transportable data carrier Program card Firmware update card Service data card When you transfer the user program to the CPU via an online connection, it is written to the SIMATIC memory card. The SIMATIC memory card must be in the card slot of the CPU for this. You can also write the SIMATIC memory card in the programming device or PC. A commercially available SD card reader is needed to read or write the SIMATIC memory card with the programming device or PC. You use this, for example, to copy files directly to the SIMATIC memory card with Windows Explorer.
Note The SIMATIC memory card is mandatory for operation of the CPU.
Note
SIMATIC memory cards of the redundant system S7-1500R/H
For the redundant system S7-1500R/H you need a SIMATIC memory card for each of the two CPUs. During redundant operation, both CPUs access the memory cards.
There must be a SIMATIC memory card in each of the CPUs. We recommend the same memory size for each SIMATIC memory card. Both memory cards must have enough memory reserve.
Note
SIMATIC memory card of the SIMATIC Drive Controller
In addition to the CPU data of the SIMATIC Drive Controller, you also store the configuration of the SINAMICS Integrated on the SIMATIC memory card.
A description of how to store the online and offline data can be found in the SIMATIC memory card section of the SIMATIC Drive Controller (https://support.industry.siemens.com/cs/ww/en/view/109766665) system manual.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
51
SIMATIC memory card 4.1 SIMATIC memory card - Overview Labeling of the SIMATIC memory card
Article number Serial number Production version Memory size Slider for setting the write protection:
· Slider up: not write-protected · Slider down: write-protected Figure 4-1 Labeling of the SIMATIC memory card
Structure and Use of the CPU Memory
52
Function Manual, 11/2019, A5E03461664-AD
SIMATIC memory card 4.1 SIMATIC memory card - Overview
Folders and files on the SIMATIC memory card
The following folders and files can be found on the SIMATIC memory card:
Table 4- 1 Folder structure
Folder FWUPDATE.S7S SIMATIC.S7S
SINAMICS.S7S**
SIMATIC.HMI DataLogs* Recipes* UserFiles*
Backups DUMP.S7S
Description
Firmware update files for CPU, I/O modules or SINAMICS Integrated** User program, i.e. all blocks (OBs, FCs, FBs, DBs) and system blocks, project data of the CPU SINAMICS Integrated project data The folder structure below the SINAMICS.S7S folder is based on the structure of a SINAMICS S120 memory card. HMI-relevant data DataLog files Recipe files You have to manually create the folder named "UserFiles" on the memory card for your user data. Only files in this folder (*.pdf, *.txt, *.csv, etc) are also loaded into the STEP 7 project with the "Upload device as new station" function. Files for backing up and restoring via the display Service data files
* The content of these folders is also loaded into the STEP 7 project with the "Upload device as new station" function. ** Only with SIMATIC Drive Controllers
Table 4- 2 File structure
File type S7_JOB.S7S SIMATIC.HMI\Backup\*.psb SIMATICHMI_Backups_DMS.bin __LOG__ crdinfo.bin *.pdf, *.txt, *.csv, etc.
Description
Job file Panel backup files Protected file (necessary for use of panel backup files in STEP 7) Protected system file (necessary for use of card) Protected system file (necessary for use of card) Additional file with different formats that you can also store in folders of the SIMATIC memory card If you store the files in the "UserFiles" folder, the files are stored in the STEP 7 project with "Upload device as new station" and can be used, for example, for restoring files in the event of a defective SIMATIC memory card.
Note
Supported file/directory names and hierarchy levels on the SIMATIC memory card
The following rules apply to file names, directory names and hierarchy levels on the SIMATIC memory card:
· Do not use any umlauts (ö, ä, ü, Ö, Ä, Ü) in file and/or directory names.
· Use a maximum of 60 characters for file and/or directory names.
· Use a maximum of 6 hierarchy levels for the directory structure of the SIMATIC memory card (for example: /mountpoint/1/2/3/4/5/6/file.txt). The operating system of the CPU supports directories of no more than 8 levels, where one level is reserved for the mount point and one for the actual file.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
53
SIMATIC memory card 4.1 SIMATIC memory card - Overview
Additional folders and files: CPU 1518-4 PN/DP MFP and CPU 1518F-4 PN/DP MFP The SIMATIC memory card of the CPU 1518-4 PN/DP MFP and CPU 1518F-4 PN/DP MFP also contain the following folders and files: The following C/C++ runtime containers are located in the "/CppEnv1.MFP" directory on
the SIMATIC memory card and are mounted in the file system in Linux: System.img Mount point: "/etc/mfp" (system files) User.img Mount point: "/home" (home directories of users, for
C/C++ runtime application, for example) Data.img Mount point: "/var/userdata" (e.g. log data) RAM-Disk Mount point: "/var/volatile"
Note First-time startup of CPU 1518-4 PN/DP MFP and CPU 1518F-4 PN/DP MFP with empty SIMATIC memory card When the CPU starts up for the first time with an empty SIMATIC memory card, the card is prepared for use with C/C++ runtime. This process takes up to three minutes. Do not turn off the CPU during this phase; the STOP LED flashes.
Note Impact on performance of the CPU 1518-4 PN/DP MFP and CPU 1518F-4 PN/DP MFP Depending on the type of programming, C/C++ runtime applications, such as mass storage accesses to the SIMATIC memory card, can affect the performance of the CPU.
You can find additional information on these CPUs in the CPU 1518-4 PN/DP MFP (https://support.industry.siemens.com/cs/ww/en/view/109749061) manual and the CPU 1518(F)-4 PN/DP MFP (https://support.industry.siemens.com/cs/ww/en/view/109756478) product information. You can find information on creating C/C++ runtime applications in the SIMATIC S7-1500 ODK 1500S (https://support.industry.siemens.com/cs/ww/en/view/109752683) manual.
Structure and Use of the CPU Memory
54
Function Manual, 11/2019, A5E03461664-AD
SIMATIC memory card 4.1 SIMATIC memory card - Overview
Using the serial number for copy protection
You can set up copy protection for CPUs that binds execution of the block to a specific SIMATIC memory card. You can then only execute the block if it is on the SIMATIC memory card with the specified serial number. You can find additional information about copy protection in the following manuals: System manual S7-1500, ET 200MP Automation System
(http://support.automation.siemens.com/WW/view/en/59191792) SIMATIC Drive Controller
(https://support.industry.siemens.com/cs/ww/en/view/109766665) system manual and SINAMICS S120 Drive Functions (https://support.industry.siemens.com/cs/ww/en/view/109763287) function manual System manual ET 200SP Distributed I/O System (http://support.automation.siemens.com/WW/view/en/58649293) Operating instructions ET 200pro CPU 1513pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109769507) and ET 200pro CPU 1516pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109482416)
Note Redundant system S7-1500R/H The CPUs of the S7-1500R/H redundant system do not support the copy protection function.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
55
SIMATIC memory card 4.1 SIMATIC memory card - Overview
Removing a SIMATIC memory card from the CPU
Note Do not remove the SIMATIC memory card while a write operation is in progress. If you remove the memory card from the CPU during a write operation, the contents of the memory card may become invalid. The retentivity of the memory areas can then be lost. It may be necessary to delete the memory card from the PG and reload the program.
To remove the memory card, follow these steps: Turn off the line voltage.
Note If there are no write accesses via the PG, you can even remove the memory card when the power is on and the operating state is STOP. In this case, first disconnect all communication connections as a precaution.
Inserting the SIMATIC memory card in the CPU in STOP state triggers a re-evaluation of the SIMATIC memory card. The CPU compares the content of the configuration on the SIMATIC memory card with the backed-up retentive data. If the backed-up retentive data matches the data of the configuration on the SIMATIC memory card, the retentive data is retained. If the data differs, the CPU automatically performs a memory reset. A memory reset deletes the retentive data on the CPU. After the memory reset, the CPU goes to STOP. With regard to removal of the SIMATIC memory card, note also the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/59457183).
Note Using the SIMATIC memory card as a firmware update card If you use the SIMATIC memory card as a firmware update card, removing and inserting the card will not result in the loss of retentive data.
Removing a SIMATIC memory card from Windows computers
If you are using the card in a commercially available card reader under Windows, use the "Eject" function before you remove the card from the card reader. If you remove the card without using the "Eject" function, you may lose data.
Structure and Use of the CPU Memory
56
Function Manual, 11/2019, A5E03461664-AD
SIMATIC memory card 4.1 SIMATIC memory card - Overview
Deleting contents of the SIMATIC memory card
You have the following options for deleting the content of the SIMATIC memory card: Delete files with Windows Explorer Format with STEP 7
Note Deletion of files and folders is permitted, with the exception of the "__LOG__" and "crdinfo.bin" system files. The CPU needs these system files. When you delete the files, you will no longer be able to use the SIMATIC memory card with the CPU. If you have deleted the "__LOG__" and "crdinfo.bin" system files, format the SIMATIC memory card as described in the following section.
Formatting a SIMATIC memory card
NOTICE Formatting the SIMATIC memory card Do not format the memory card with Windows tools. Formatting with Windows renders the memory card unusable by a CPU initially. You can find information on how to repair an inconsistent or incorrectly formatted card in the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/69063974).
To free up memory space on your SIMATIC memory card, you have the option of formatting the SIMATIC memory card. During formatting, the entire content of the memory card is deleted. The SIMATIC memory card may only be formatted in the CPU. With a SIMATIC memory card inserted, follow these steps:
Formatting with STEP 7: Establish an online connection. Open the online and diagnostics view of the CPU (either from the project context or via
"Accessible devices"). In the dialog window select "Functions > Format memory card" and then select the
"Format" button. Formatting via the display of the CPU In the display of the CPU, select the menu "Settings" > "Card functions" > "Format card"
and confirm with OK.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
57
SIMATIC memory card 4.2 Setting the card type
Changing the memory card without loss of retentive data
You can change the memory card or use a larger SIMATIC memory card without losing the retentive data. When you switch off the CPU, the retentive data is backed up in the retentive memory of the CPU. While the CPU is switched off, you can remove the memory card and copy its content to a larger memory card. After switching on the CPU, the data backed up in the CPU when the CPU was switched off is restored.
4.2
Setting the card type
Introduction
You can use the SIMATIC memory card as a program card or as a firmware update card.
Procedure using STEP 7
1. To set the card type, insert the SIMATIC memory card into the card reader of the programming device.
2. Select the "SIMATIC Card Reader" folder in the project tree.
3. In the properties of the selected SIMATIC memory card, specify the card type:
Program card
You use a program card as an external load memory for the CPU. It contains the complete user program for the CPU. The CPU transfers the user program from the load memory to the work memory. The user program runs in the work memory.
The following folders are created on the SIMATIC memory card:
SIMATIC.S7
SINAMICS.S7S (only with SIMATIC Drive Controller)
Firmware update card
You can save firmware for a CPU and for I/O modules on a SIMATIC memory card. This enables you to perform a firmware update with the help of a specially prepared SIMATIC memory card.
The following folder is created on the SIMATIC memory card: FWUPDATE.S7S
Reference
You can find additional information in the STEP 7 online help.
Structure and Use of the CPU Memory
58
Function Manual, 11/2019, A5E03461664-AD
SIMATIC memory card 4.2 Setting the card type
Procedure using the job file
You can also set whether the SIMATIC memory card works as a program card or a firmware update card via the job file S7_JOB.S7S on the SIMATIC memory card. Entry in the job file: PROGRAM: The SIMATIC memory card is used as a program card FWUPDATE: The SIMATIC memory card is used as a firmware update card Proceed as follows: 1. Open the job file S7_JOB.S7S with an editor. 2. Overwrite the PROGRAM entry with FWUPDATE using the editor (or vice versa).
Do not use spaces, line breaks, or quotation marks. 3. Save the file under the existing file name.
Program card incl. firmware update files
If, for example, you want to deliver your project with a firmware that you have validated, you can store program data and firmware update files together on the memory card. Your customers then have the opportunity to upgrade the CPU to exactly this firmware version.
Note Note that depending on the tool used (e.g. STEP 7, Display, Web server), the firmware update files are also deleted when the "Program card" is reset.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
59
SIMATIC memory card 4.3 Data transfer with SIMATIC memory cards
4.3
Data transfer with SIMATIC memory cards
Saving objects from the project to the SIMATIC memory card
When the SIMATIC memory card is inserted in the programming device or in the external card reader, you can save the following objects from the project tree (STEP 7) to the SIMATIC memory card:
Individual blocks (multiple selection possible) In this case, the transfer is consistent, i.e. the function takes dependencies between blocks due to block calls into account.
CPU folder In this case, all the runtime-relevant objects, such as blocks and the hardware configuration, are saved to the SIMATIC memory card, just as with downloading.
Service data In this case, the service data saved beforehand is saved to the SIMATIC memory card. You will find additional information on the service data in the following manuals:
System manual S7-1500, ET 200MP Automation System (http://support.automation.siemens.com/WW/view/en/59191792)
System manual Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833)
SIMATIC Drive Controller (https://support.industry.siemens.com/cs/ww/en/view/109766665) system manual
System manual ET 200SP Distributed I/O System (http://support.automation.siemens.com/WW/view/en/58649293)
Operating instructions ET 200pro CPU 1513pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109769507) and ET 200pro CPU 1516pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109482416).
You have the following options for performing the save operation:
Save the objects using drag-and-drop.
Use the "Card Reader/USB memory > Write to memory card" command in the "Project" menu.
Structure and Use of the CPU Memory
60
Function Manual, 11/2019, A5E03461664-AD
SIMATIC memory card 4.3 Data transfer with SIMATIC memory cards
Saving trace recordings to the SIMATIC memory card
The "Save measurements on device (memory card)" function allows you to save trace recordings on your SIMATIC memory card. Note Redundant system S7-1500R/H The CPUs of the redundant system S7-1500R/H do not support the saving of measurements on the SIMATIC memory card.
To access the corresponding dialog, proceed as follows: 1. In the project tree, select the "Traces" > "Trace". 2. In the work area, select "Configuration" > "Recording conditions" > "Measurements in the
device (memory card)" Response when number reached "Deactivate recording" repeats the measurements until the configured "Number of measurements" is reached. "Overwrite oldest recording" replaces the oldest measurement with the latest measurement when the configured "Number of measurements" is reached. Note, however, that continuously writing data to the SIMATIC memory card shortens its service life.
Figure 4-2 Dialog of settings for saving measurements on the memory card in STEP 7
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
61
SIMATIC memory card 4.3 Data transfer with SIMATIC memory cards
Number of measurements
The CPU supports a maximum of 999 measurements. The CPU writes the trace recordings to the load memory of the memory card. Meanwhile, the CPU pauses the checking of trigger conditions for the trace job. Once the CPU finishes saving the trace recordings, the CPU continues checking the trigger conditions.
NOTICE
Memory required on the SIMATIC memory card
When the trace function "Measurements on device (memory card)" requires more memory than is available on the SIMATIC memory card, undesired effects may result. Ensure there is always sufficient free memory space to use the "Measurements on device (memory card)" function.
In addition to the "Measurements on device (memory card)" trace function, other functions such as storing data logs use memory space on the SIMATIC memory card. Ensure there is always sufficient memory space available for all functions that use memory.
You can find additional information about trace measurements and trace recordings in the following:
Function manual Using the Trace and Logic Analyzer Function (http://support.automation.siemens.com/WW/view/en/64897128)
Function manual Web Server (http://support.automation.siemens.com/WW/view/en/59193560)
STEP 7 online help
Firmware update using SIMATIC memory card
You can find information on how to perform a firmware update in the following:
System manual S7-1500, ET 200MP Automation System (http://support.automation.siemens.com/WW/view/en/59191792)
System manual Redundant System S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833)
In the SIMATIC Drive Controller (https://support.industry.siemens.com/cs/ww/en/view/109766665) system manual
System manual ET 200SP Distributed I/O System (http://support.automation.siemens.com/WW/view/en/58649293)
Operating instructions ET 200pro CPU 1513pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109769507) and ET 200pro CPU 1516pro-2 PN (https://support.industry.siemens.com/cs/ww/en/view/109482416)
Reference
You can find additional information about the SIMATIC memory card in the STEP 7 online help.
Structure and Use of the CPU Memory
62
Function Manual, 11/2019, A5E03461664-AD
SIMATIC memory card 4.4 Service life of the SIMATIC memory card
4.4
Service life of the SIMATIC memory card
Calculation of the theoretical service life of a SIMATIC memory card serves as a decisionmaking aid for selecting which card you need for your automation task. The following examples only return a guide value, however. A precise calculation of the service life is not possible due to the fact that the description cannot cover all the theoretically possible scenarios.
Influences on the service life
You can influence the service life of SIMATIC memory cards by the following factors: Card size and number of guaranteed write operations Number of actual write operations
The number of physical write operations to the memory blocks of the card results from the number of write operations from the application.
Structure of a SIMATIC memory card
The internal flash memory of the SIMATIC memory card is organized in memory blocks. A memory block is a memory area of a fixed size. A write operation always addresses entire memory blocks on the SIMATIC memory card. When a memory block has been written once it must be deleted before it can be written again. The number of delete/write operations per memory block is limited. The service life of the SIMATIC memory card is measured by the maximum number of supported delete or write operations per memory block.
In contrast to delete or write operations, read operations have a negligible impact on the service life. Therefore, the impact of the read operations on the service life is not included in this calculation. A very high number of read operations can, however, influence the service life to a small extent.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
63
SIMATIC memory card 4.4 Service life of the SIMATIC memory card
Maximum number of write/delete operations
The internal controller of the memory card ensures that the available memory blocks are evenly used. In this way, a maximum number of write operations is possible on the SIMATIC memory card. Internal algorithms distribute the write accesses to the same logical memory area over changing physical memory areas in order to use the memory blocks evenly.
The following table shows the maximum possible number of write/delete operations as a function of the SIMATIC memory card used. The number of maximum write/delete operations of the respective SIMATIC memory card is also available online in the technical specifications of the respective SIMATIC memory card.
Memory size of the SIMATIC memory card * 4 MB 12 MB 24 MB 256 MB 2 GB 2 GB 32 GB
Article number
6ES7954-8LCxx-0AA0 6ES7954-8LExx-0AA0 6ES7954-8LFxx-0AA0 6ES7954-8LL03-0AA0 6ES7954-8LP01-0AA0 6ES7954-8LP02-0AA0 6ES7954-8LT03-0AA0
Max. number of write/delete operations per memory block 500 000 500 000 500 000 200 000 100 000 60 000 100 000
* The memory size figures named in the table are theoretical values. The actual existing memory size in practice is below the theoretical value. The reason for this is that the internal controller of the card and the file system reserve part of the existing memory for internal memory management.
Note Write or delete operations Write or delete operations, particularly repeated (cyclic) write/delete operations by the user program on the SIMATIC memory card reduces its service life. Cyclic execution of the following instructions reduces the service life of the memory card depending on the number of write operations and data: · "CREATE_DB" (with ATTRIB "Create DB in load memory") · "DataLogWrite" · "RecipeExport" · "RecipeImport" (if target DB in load memory) · "WRIT_DBL" · "SET_TIMEZONE"
Note also that, in addition to the cyclic write/delete operations, the writing or deleting of very large amounts of data also adversely affects the service life of the SIMATIC memory card.
Note Redundant system S7-1500R/H The CPUs of the S7-1500R/H redundant system do not support the instructions specified in the "Write or delete operations" note.
Structure and Use of the CPU Memory
64
Function Manual, 11/2019, A5E03461664-AD
SIMATIC memory card 4.4 Service life of the SIMATIC memory card
Guaranteed data retention time
If you do not use your SIMATIC memory card for an extended period of time, there is the risk that data contained on the memory card may no longer be readable after a certain amount of time. The guaranteed data retention time of a SIMATIC memory card is 10 years on delivery and with proper storage. With a number of 10% of the maximum write/delete operations, the data stored on the card has a retention time of 10 years. Please note that increasing numbers of write/delete operations to the card reduces its data retention time. If 90% of the maximum write/delete operations is reached, the guaranteed data retention time is reduced to 1 year. If 100% of the maximum write/delete operations is reached, the retention time of the saved data can no longer be guaranteed.
Determining the current usage level of a SIMATIC memory card in STEP 7
When you activate the "Aging of the SIMATIC memory card" option, you enter a threshold value as a percentage in the text box below. As soon as the service life of the SIMATIC memory card has reached the specified threshold value (e.g.: 80 %), the CPU outputs a diagnostics alarm and the MAINT LED lights up in yellow.
Figure 4-3 Enabled option "Aging of the SIMATIC memory card"
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
65
SIMATIC memory card 4.4 Service life of the SIMATIC memory card
Calculation of the theoretical service life of a SIMATIC memory card
We will use the following example as a basis for calculation: The user is using a new 256 MB memory card. In accordance with the table, this memory card type supports 200 000 write operations. After parameter changes, the user would like to write 200 DBs of 5 KB each to the SIMATIC memory card at a frequency of 50 times per day with the "RecipeExport" instruction. Step 1: Calculating the write operations First use the following formula to calculate the service life of the SIMATIC memory card:
We first use the sizes from the example in the formula "Write operations" as a basis for calculating the service life: Size of the memory card: 256 MB = 268 435 456 bytes Maximum number of write operations: 200 000 Number of written bytes: 1024 000 bytes (200 x 5 KB) If we use the sizes from the example in the formula, we obtain the following result:
Step 2: Calculating the service life Use the following formula to calculate the service life in years:
Note Net-gross factor Internal data (metadata) are also written to the SIMATIC memory card with each write operation. Due to this additional data, include the net-gross factor 100 when calculating the service life.
If we use the sizes from the example in the formula, we obtain the following result:
Structure and Use of the CPU Memory
66
Function Manual, 11/2019, A5E03461664-AD
SIMATIC memory card 4.4 Service life of the SIMATIC memory card
Calculation with more frequent write accesses and a higher number of bytes written
If the frequency of write accesses and the number of bytes written per day increases, the service life of the SIMATIC memory card is reduced.
The following table shows, based on empirical values, how the service life of a SIMATIC memory card with a size of 256 MB is reduced
Write accesses per day
50 100 400 400 400
Number of bytes written per instruction
1 024 000 1 024 000 1 024 000 2 048 000 4 096 000
Service life of the SIMATIC memory card in years 28.7 14.3 3.6 1.8 0.9
The following table shows how the same values impact the service life of a SIMATIC memory card with a size of 2 GB (6ES7954-8LP01-0AA0).
Write accesses per day
50 100 400 400 400
Number of bytes written per instruction
1 024 000 1 024 000 1 024 000 2 048 000 4 096 000
Service life of the SIMATIC memory card in years 114.9 57.5 14.4 7.2 3.6
The result shows that a high number of write accesses together with a high number of written bytes significantly shortens the service life of the SIMATIC memory card.
Reference
You can find an alternative method for calculating the service life of a SIMATIC memory card in an FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109482591).
GetSMCinfo instruction
When the SIMATIC memory card inserted, you can read out the following information in STEP 7 (TIA Portal) using the GetSMCinfo instruction:
Memory size in (1 KB = 1 024 bytes)
Memory space occupied in (1 KB = 1 024 bytes)
Maintenance information: Previously used up portion of the service life in %
Configured percentage of service life after which the CPU creates a diagnostics buffer entry.
You can find additional information on the GetSMCinfo instruction in the STEP 7 online help.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
67
SIMATIC memory card 4.5 Expanding the load memory of the CPUs of the redundant system S7-1500R/H
4.5
Expanding the load memory of the CPUs of the redundant system
S7-1500R/H
Memory requirements
If the memory space on one of the two SIMATIC memory cards is not sufficient, you can replace this card during operation of the redundant system S7-1500R/H.
Note To avoid errors on the SIMATIC memory card due to insufficient memory, use memory cards with enough memory space.
Expanding the load memory during operation
To expand the load memory of the CPUs of the redundant system S7-1500R/H during operation, follow these steps:
Action 1. Switch the first CPU to STOP while in redundant operation.
2. Remove the existing SIMATIC memory card from the CPU that is in STOP. Insert a larger SIMATIC memory card.
3. After the memory reset switch the CPU back to RUN. 4. Wait until the SYNCUP of the CPU is complete and then switch the
second CPU to STOP. 5. Remove the existing SIMATIC memory card from the CPU that is in
STOP. Insert a larger SIMATIC memory card. 6. After the memory reset, switch the CPU back to RUN. 7. Wait until the SyncUp of the CPU is complete.
System response The system changes to system state RUNSolo. The CPU performs a memory reset.
The CPU performs a SYNCUP. The system changes to system state RUNSolo again. The CPU performs a memory reset.
The CPU performs a SYNCUP. The CPUs now have a larger load memory and are in system state RUN-Redundant again.
Structure and Use of the CPU Memory
68
Function Manual, 11/2019, A5E03461664-AD
Glossary
Backup CPU
When the R/H system is in RUN-Redundant system state, the Primary CPU controls the process. The Backup CPU synchronously executes the user program and can take over the process control at a failure of the Primary CPU.
Bit memory
Bit memory is a component of the system memory of the CPU for saving intermediate results. You access the bit memory from the user program in bit, byte, word or double-word mode.
Code block
In SIMATIC S7, a code block contains a portion of the STEP 7 user program.
Consistent data
Consistent data is data whose content belongs together. Consistent data is read and written contiguously.
Counter
Counters are components of the system memory of the CPU. You can modify the content of the "counter cells" using STEP 7 instructions. Example: Count up or down.
Data block
Data blocks (DBs) are data areas in the user program that contain user data. The following data blocks are available:
Global data blocks that you access from all code blocks.
Instance data blocks that are assigned to a particular FB call.
Data log
Data logs are CSV files for the saving of tag values. The data logs are stored on the SIMATIC memory card in the "\datalogs" directory. Instructions in the user program write data records of tag values to a data log.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
69
Glossary
Diagnostics
Monitoring functions include: Detection, localization, classification of errors, faults and alarms. Display and further evaluation of errors, faults and alarms. The monitoring functions run automatically during system operation. This increases the availability of systems because commissioning times and downtimes are reduced.
Diagnostics buffer
The diagnostics buffer is a buffered memory area in the CPU in which diagnostics events are stored in their order of occurrence.
Firmware of the CPU
In SIMATIC, a distinction is made between the firmware of the CPU and user programs.
Firmware is software that is embedded in electronic devices, i.e. functionally connected permanently to the hardware. It is usually saved in a flash memory, EPROM, EEPROM or ROM and cannot be replaced by the user or can only be replaced with special tools or functions.
User program: see glossary entry "User program"
Firmware update
You use a firmware update to update the firmware of modules. A firmware update is performed, e.g. for functional extensions of a CPU or interface module.
Function block
A function block (FB) is a code block with static data. An FB allows you to pass parameters in the user program. Function blocks are thus suited for programming frequently recurring complex functions, such as closed-loop controls or operating states selection.
Global data block (DB)
Every function block, every function, and every organization block can read the data from a global data block, or write its own data to a global data block. This data is retained in the data block, even when the data block is exited.
I/O module
Device of the distributed I/O that is used as an interface between the controller and the process.
Structure and Use of the CPU Memory
70
Function Manual, 11/2019, A5E03461664-AD
Glossary
Instance data block (DB)
Each call of a function block in the STEP 7 user program is assigned a data block that is automatically generated. Values of the input, output and in/out parameters, as well as local block data, are stored in the instance data block.
IP address
The IP address is made up of four decimal numbers, each with a value range of 0 to 255. The decimal numbers are separated by a dot (e.g. 192.162.0.0). The IP address consists of the following: Address of the network Device address (PROFINET interface of the IO controller/IO devices)
Local data
This memory area accepts the temporary local data of a block for the duration of processing.
Memory reset
Procedure for setting the memories of the CPU to a defined initial state.
Operating states
Operating states describe the behavior of an individual CPU at any given point in time.
The CPUs of the SIMATIC standard systems feature the STOP, STARTUP and RUN operating states.
The primary CPU of the redundant system S7-1500R/H has the operating states STOP, STARTUP, RUN, RUN-Syncup and RUN-Redundant. The backup CPU has the operating states STOP, SYNCUP and RUN-Redundant.
Optimized block access
Data blocks with optimized access have no fixed structure. In the declaration, the data elements only receive a symbolic name, and no fixed address within the block. The elements are automatically arranged in the block's available memory area in such a way that its capacity is optimally exploited.
In these data blocks, you can only address tags symbolically. For example, you would access the "FillState" tag in the "Data" DB as follows:
"Data".FillState
Optimized access offers the following advantages:
The data is structured and saved in a manner that is optimal for the CPU used. This allows you to increase CPU performance.
Access errors, e.g. from the HMI, are not possible.
You can selectively define individual tags as retentive.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
71
Glossary
Organization block
Organization blocks (OBs) form the interface between the operating system of the CPU and the user program. The organization blocks determine the order in which the user program is executed.
Parameter
Variable of a STEP 7 code block
Variable for setting the behavior of a module (one or more per module). In delivery state, each module has an appropriate basic setting that can be changed by configuring in STEP 7. There are static and dynamic parameters.
Parameters, dynamic
In contrast to static parameters, you can change dynamic parameters of modules during operation by calling an SFC in the user program, e.g. limit values of an analog input module.
Parameters, static
In contrast to dynamic parameters, you cannot change static parameters of modules with the user program but only by configuring in STEP 7, e.g. input delay of a digital input module.
Primary CPU
When the R/H system is in RUN-Redundant system state, the Primary CPU controls the process. The Backup CPU synchronously executes the user program and can take over the process control at a failure of the Primary CPU.
Process image (I/O)
The CPU transfers the values from the input and output modules to this memory area. At the start of the cyclic program, the CPU transfers the process image output as a signal state to the output modules. The CPU then reads the signal states of the input modules to the process image of the inputs. Then the CPU executes the user program.
Redundant systems
Redundant systems are characterized in that important automation components are present multiple times (redundantly). Process control is maintained if a redundant component fails.
Reset to factory settings
Resetting to factory settings restores the CPU settings to the delivery state.
Structure and Use of the CPU Memory
72
Function Manual, 11/2019, A5E03461664-AD
Glossary
Restart
A restart (warm restart) deletes all non-retentive bit memory and resets non-retentive DB contents to the start values from the load memory. Retentive bit memory and retentive DB contents are retained. Program execution begins at the call of the first startup OB.
Retentivity
A memory area whose content is retained after power failure and after a transition from STOP to RUN is retentive. The non-retentive bit memory area, timers and counters are reset after power failure and after a STOP to RUN transition.
SIMATIC memory card
Memory for the user program for programmable modules and communications processors. You can also use the SIMATIC memory card for exchange of user software and user data.
Standard access
Data blocks with standard access have a fixed structure. In the declaration, the data elements contain both a symbolic name and a fixed address within the block. The address is displayed in the "Offset" column.
In these data blocks, you can address tags both symbolically and absolutely:
"Data".FillState
DB1.DBW2
System states
The redundant S7-1500R/H system has various system states. The system states result from the operating states of the Primary and Backup CPUs. The concept of the system state is used to obtain a simplified expression that characterizes the simultaneously occurring operating states of the two CPUs. The following system states are available for the redundant system S7-1500R/H: STOP, STARTUP, RUN-Solo, SYNCUP and RUNRedundant.
Timer
Timers are components of the system memory of the CPU. The operating system automatically updates the content of the "timer cells" asynchronously to the user program. STEP 7 instructions specify the precise function of the timer cell (e.g. on delay) and trigger its execution.
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
73
Glossary
User program
In SIMATIC, a distinction is made between user programs and the firmware of the CPU.
The user program contains all instructions, declarations and data that enable a plant or process to be controlled. The user program is assigned to a programmable module (e.g. CPU, FM) and can be structured in smaller units.
Firmware: see glossary entry "Firmware of the CPU"
Structure and Use of the CPU Memory
74
Function Manual, 11/2019, A5E03461664-AD
Index
B
Bit memory, 24
C
C/C++, 12, 54 Counter, 24
D
Data block, 22, 27 Data logging
Data structure, 39 DataLogCreate, 39 Example program, 42 Overview of data logging, 37 Data retention time, 65 Diagnostics buffer, 26 Display, 19, 53, 57 Disposal, 5
F
FAQ Calculate service life SMC, 67 Configure data blocks, 34 Estimating memory requirements, 17 Formatting a SIMATIC memory card, 57 Insufficient load memory, 32 Load project data in load memory, 32 Removing a SIMATIC memory card, 56 Repairing the SIMATIC memory card, 57 Using recipe phases, 37
Function block, 22
I
Instructions Asynchronous, 36, 41 CREATE_DB, 23 DataLogClear, 40 DataLogClose, 40 DataLogCreate, 39, 40, 48 DataLogDelete, 40
DataLogNewFile, 40 DataLogOpen, 40 DataLogWrite, 40 GetSMCinfo, 67 READ_DBL, 33 RecipeExport, 35 RecipeImport, 36 WRIT_DBL, 33
L
Linux, 12, 54 Load memory, 12 Load memory S7-1500/H-CPUs, 68
M
Memory reserve, 27
O
Offline project, 14, 16 Offline project data, 11 Online project data, 11 Operating hours counter, 26
P
PLC tags, 26
R
Redundancy ID, 15 Redundant S7-1500R/H system, 68 Retentive data, 15, 56, 58 Retentive memory, 11, 13, 21
S7-1500R/H-CPUs, 15 Runtime, 12, 54
S
Scope, 4 SIMATIC memory card, 51, 58, 60
Basics, 51 Firmware card, 58
Structure and Use of the CPU Memory
Function Manual, 11/2019, A5E03461664-AD
75
Index
Possible applications, 60 Program card, 58 Repairing, 57 Updating firmware, 62 Software change, 26
T
Technology objects, 23 Timer, 24 Trace recordings, 61
W
Web server, 12, 20, 45, 62 Work memory, 11, 13
Structure and Use of the CPU Memory
76
Function Manual, 11/2019, A5E03461664-AD
Web server
Preface
Function manuals Documentation Guide
1
SIMATIC
General information
2
S7-1500, SIMATIC Drive Controller, Web pages
3
ET 200SP, ET 200pro
Web server
Function Manual
11/2019
A5E03484625-AG
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03484625-AG 10/2019 Subject to change
Copyright © Siemens AG 2012 - 2019. All rights reserved
Preface
Purpose of the documentation
This documentation supports you in the operation of the Web server. The Web server offers, among other things, web page access to diagnostic data and to process data of the CPU.
Basic knowledge required
The following knowledge is required in order to understand the documentation: General knowledge in the field of automation technology Knowledge of the SIMATIC industrial automation system Experience of working with Windows-based computers Knowledge about how to use STEP 7 (TIA Portal)
Scope of the documentation
This documentation is valid for CPUs as of firmware version V2.5 and contains illustrations of the Web server user interface. The illustrations used can be transferred to the following CPUs: The CPUs of the SIMATIC S7-1500 automation system The CPUs of the SIMATIC Drive controller The CPUs of the ET 200SP Distributed I/O System The CPUs 1516pro-2 PN and 1513pro-2 PN of the ET 200pro distributed I/O system The displayed illustrations can differ from the interface of the Web server in some details, e.g. depending on the browser used.
Web server
Function Manual, 11/2019, A5E03484625-AG
3
Preface
What's new in the Web Server function manual, Version 11/2019 compared to Version 12/2017
What's new? New contents
The CPU has an API (Application Programming Interface) as an interface for:
· Reading and writing CPU data
· Executing functions (e.g. backing up and restoring the CPU configuration, changing the operating state)
The Web API supports all common browsers and command line programs, such as cURL and Wget.
What are the customer benefits?
· Established standard mechanisms for creating Web pages:
Automation Web Programming commands (AWP commands) are no longer required for output of CPU data
· No dependency between custom Web pages and CPU program:
No synchronization between user program and Web server required by the SFC 99 instruction
· Lower communication load:
A smaller data packet is transferred between server and client (JSON instead of HTML of the custom Web page generated by the CPU). This improves the communication performance. The CPU needs less runtime to generate the information and make it available.
· Secure data traffic:
Where can I find information?
Section API (Application Programming Interface) (Page 158)
the Web API only supports the transmission protocol "HTTPS"
Changed contents
Scope of the function manual expanded to include the CPUs of the SIMATIC Drive Controller
Webserver functions which you are familiar with from the CPUs of the SIMATIC S7-1500 can now also be used on the CPUs of the SIMATIC Drive Controller.
· System Manual SIMATIC Drive Controller (https://support.industry.sie mens.com/cs/ww/en/view/1 09766665)
· Manual SIMATIC Drive Controller (https://support.industry.sie mens.com/cs/ww/en/view/1 09766666)
Web server
4
Function Manual, 11/2019, A5E03484625-AG
Preface
What's new in the Web Server function manual, Version 12/2017 compared to Version 09/2016
What's new? New contents
Changed contents
What are the customer benefits?
Where can I find the information?
New web page "User files"
You can download ASCII files (files in binary format) from the SIMATIC Memory Card, directory UserFiles\ to the web page and delete them.
Section User files (Page 115)
Time display as Coordinated The display of the UTC allows you to use
Universal Time (UTC) or as a uniform time for the web pages.
PLC local time
You can set the format of the time display
to Coordinated Universal Time (UTC) or
PLC local time (default setting).
Section Start page with general CPU information (Page 33)
Automated downloading, reading out and archiving of DataLogs
You can, for example, read out and archive DataLogs daily from one or more CPUs at a specific time via the Web server.
Section Automated reading out of data logs (Page 113)
Automatic downloading of DataLogs is realized either by the execution of scripts in, for example, Bash or via JavaScript on your HTML user page.
The "Permit access only with HTTPS" check box is activated in the default setting of a configured CPU.
The web pages are transmitted by default Section Configuring the Web via a secure connection and are protected server (Page 19) from attacks by third parties.
Web page "Module information": New column Device number
You can read the assignment of the device number to the device name.
Section Module information (Page 57)
Web page "Topology": Selection of the available PROFINET interfaces, for example X1, X2, CM 1542-1
You can select the topology display for the PROFINET interfaces X1, X2 and for connected PROFINET communication modules.
Section Topology (Page 72)
Web page "DataLogs": New You can delete DataLog files via the Web column for deleting DataLog server. files
Section DataLogs (Page 112)
Web page "Record": Changes in the display of Trace recordings
You can evaluate the Trace recordings in more detail through the extension of the display.
Section Record (Page 92)
Web page "Record": New arithmetic functions
In the case of completed measurements you can combine the measured signals mathematically with each other and this generate signals that were not recorded.
You can, for example, form the difference of two signals in order to better display the deviation of the current pressure of a boiler from the set setpoint value.
Web server
Function Manual, 11/2019, A5E03484625-AG
5
Preface
What's new in the Web Server function manual, Version 09/2016 compared to Version 12/2014
What's new? New contents
Handling of certificate modified
Four additional languages for the Web server interface
What are the customer benefits?
Where can I find the information?
You protect the web server connection against tapping or distortion of the communication through access via the secure transmission protocol "HTTPS" including a special web server certificate.
Section Configuring the Web server (Page 19)
You can set the Web server interface to the following languages:
Section Start page with general CPU information (Page 33)
· Korean
· Russian
· Turkish · Portuguese (Brazil)
Assignment of different project languages extended
"Start page" web page extended
"Diagnostics" web page extended by one tab: · "Program protection" · "Runtime information" · "Fail-safe" (with an F-
CPU)
You can assign up to three different project languages for comments, alarm texts and diagnostic information to the user interface languages of the Web server.
The display of the TIA project name immediately indicates whether the desired project is selected.
Here you can find information about:
· Know-how protection or copy protection of the PLC program
· Program/communication load and cycle time
· F-collective signatures, cycle times and runtimes of the F-runtime group(s)
Section Language settings (Page 29)
Section Start page with general CPU information (Page 33)
Section Diagnostics (Page 38)
"Alarms" web page extended
"Tag status" and "Watch tables" web pages extended
You can acknowledge alarms of the CPU via the Web server.
You can change the value of tags and write them to the CPU, also using the absolute address.
Section Alarms (Page 65)
· Section Tag status (Page 82)
· Section Watch tables (Page 85)
New web page "Online backup"
New "Motion Control diagnostics" web page
New "Record" web page
You can back up and restore the CPU configuration to/from the SIMATIC memory card via the Web server.
Section Online backup (Page 87)
You can monitor statuses, errors, technology alarms and the current values of configured technology objects (TOs) with the Web server without STEP 7.
Section Motion Control diagnostics (Page 49)
You can read, view and save trace recordings via the Web server and thus obtain plant and project information for diagnostics and maintenance without STEP 7.
Section Record (Page 92)
Web server
6
Function Manual, 11/2019, A5E03484625-AG
Preface
What's new?
Changed contents
What are the customer benefits?
Where can I find the information?
Extension of the validity
Functions that you will be familiar with
·
range of the function manual from the SIMATIC S7-1500 CPUs are
to the CPUs of the ET
implemented in CPUs in other designs
200SP distributed I/O sys- (ET 200SP) and in the CPU 1516pro-2 PN
tem and the CPU 1516pro-2 (degree of protection IP65, IP66 and
PN
IP67).
·
Manual CPU 1510SP-1 PN (https://support.industry.sie mens.com/cs/ww/en/view/9 0157130)
Manual CPU 1512SP-1 PN (https://support.industry.sie mens.com/cs/ww/en/view/9 0157013)
· Operating instructions CPU 1516pro-2 PN (https://support.industry.sie mens.com/cs/ww/en/view/1 09482416)
Web page "Watch tables": Note added on the maximum configuration limits.
Web page "User pages": Note added on the maximum size of the HTML pages.
Section Watch tables (Page 85)
Section User pages (Page 120)
Conventions
In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)". Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Web server
Function Manual, 11/2019, A5E03484625-AG
7
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (http://www.siemens.com/automation/service&support).
Web server
8
Function Manual, 11/2019, A5E03484625-AG
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
Web server
Function Manual, 11/2019, A5E03484625-AG
9
Table of contents
Preface ................................................................................................................................................... 3
1 Function manuals Documentation Guide ............................................................................................... 12
2 General information .............................................................................................................................. 14
2.1
Properties of the Web server ................................................................................................. 14
2.2
Configuring the Web server ................................................................................................... 19
2.3
Language settings.................................................................................................................. 29
2.4
Updating and saving information ........................................................................................... 32
3 Web pages ........................................................................................................................................... 33
3.1
Start page with general CPU information .............................................................................. 33
3.2
Diagnostics............................................................................................................................. 38
3.3
Diagnostics buffer .................................................................................................................. 48
3.4
Motion Control diagnostics..................................................................................................... 49
3.5
Module information ................................................................................................................ 57
3.6
Firmware update .................................................................................................................... 62
3.7
Alarms .................................................................................................................................... 65
3.8
Communication ...................................................................................................................... 67
3.9 3.9.1 3.9.2 3.9.3 3.9.4 3.9.5
Topology ................................................................................................................................ 72 Introduction ............................................................................................................................ 72 Graphical view........................................................................................................................ 73 Tabular view ........................................................................................................................... 76 Status overview...................................................................................................................... 78 Examples for graphical topology views.................................................................................. 79
3.10
Tag status .............................................................................................................................. 82
3.11
Watch tables .......................................................................................................................... 85
3.12
Online backup ........................................................................................................................ 87
3.13
Record.................................................................................................................................... 92
3.14 3.14.1
DataLogs .............................................................................................................................. 112 Automated reading out of DataLogs .................................................................................... 113
3.15 3.15.1
User files .............................................................................................................................. 115 Automatically read or upload user files ................................................................................ 117
Web server
10
Function Manual, 11/2019, A5E03484625-AG
Table of contents
3.16 3.16.1 3.16.1.1 3.16.1.2 3.16.1.3 3.16.1.4 3.16.1.5 3.16.1.6 3.16.2 3.16.3 3.16.4 3.16.5 3.16.5.1 3.16.5.2 3.16.5.3 3.16.5.4 3.16.5.5 3.16.5.6
User pages............................................................................................................................120 AWP commands ...................................................................................................................124 PLC tags ...............................................................................................................................125 Special tags ..........................................................................................................................129 Enum types ...........................................................................................................................131 Fragments .............................................................................................................................133 Arrays .................................................................................................................................... 135 Structures .............................................................................................................................. 136 Configuring user pages.........................................................................................................138 Programming the WWW instruction......................................................................................139 Defining the user page as start page....................................................................................141 Example of a user page ........................................................................................................143 Website for monitoring and controlling a wind turbine..........................................................143 Reading and displaying data from the CPU..........................................................................145 Using enum types .................................................................................................................147 Writing user inputs into the controller ...................................................................................148 Writing special tags...............................................................................................................149 HTML code of the user page "Remote Wind Turbine Monitor" ............................................150
3.17
Filebrowser ...........................................................................................................................154
3.18
Reading out service data ......................................................................................................155
3.19
Basic websites ......................................................................................................................156
3.20 3.20.1 3.20.2 3.20.2.1 3.20.2.2 3.20.2.3 3.20.2.4 3.20.2.5 3.20.2.6 3.20.2.7 3.20.3 3.20.4 3.20.5 3.20.5.1 3.20.5.2 3.20.5.3 3.20.5.4 3.20.5.5 3.20.6
API (Application Programming Interface) .............................................................................158 Web API ................................................................................................................................158 The available Web API methods ..........................................................................................161 Api.Login ...............................................................................................................................162 Api.GetPermissions ..............................................................................................................163 Api.Browse ............................................................................................................................164 Api.Version ............................................................................................................................ 165 Api.Ping ................................................................................................................................. 165 Api.GetCertificateUrl .............................................................................................................166 Api.Logout .............................................................................................................................166 Web API integration ..............................................................................................................166 Web API sessions.................................................................................................................169 Read and write process data ................................................................................................170 Supported data types............................................................................................................170 Parameter assignment of the block properties .....................................................................175 PlcProgram.Read .................................................................................................................. 176 PlcProgram.Write ..................................................................................................................177 PlcProgram.Browse ..............................................................................................................179 Website for monitoring and controlling a wind turbine..........................................................183
Glossary ............................................................................................................................................. 196
Index................................................................................................................................................... 200
Web server
Function Manual, 11/2019, A5E03484625-AG
11
Function manuals Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system, for CPU 1516pro-2 PN based on SIMATIC S7-1500, and for the distributed I/O systems SIMATIC ET 200MP, ET 200SP and ET 200AL is divided into three areas. This division allows you easier access to the specific information you require.
Basic information
System manuals and Getting Started manuals describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500, ET 200MP, ET 200SP and ET 200AL systems; use the corresponding operating instructions for CPU 1516pro-2 PN. The STEP 7 online help supports you in configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, terminal diagrams, characteristics and technical specifications.
Web server
12
Function Manual, 11/2019, A5E03484625-AG
Function manuals Documentation Guide
General information The function manuals contain detailed descriptions on general topics such as diagnostics, communication, Motion Control, Web server, OPC UA. You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742705). Changes and additions to the manuals are documented in product information sheets. You will find the product information on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/us/en/view/68052815) ET 200SP (https://support.industry.siemens.com/cs/us/en/view/73021864) ET 200AL (https://support.industry.siemens.com/cs/us/en/view/99494757)
Manual Collections
The Manual Collections contain the complete documentation of the systems put together in one file. You will find the Manual Collections on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/86140384) ET 200SP (https://support.industry.siemens.com/cs/ww/en/view/84133942) ET 200AL (https://support.industry.siemens.com/cs/ww/en/view/95242965)
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Web server
Function Manual, 11/2019, A5E03484625-AG
13
General information
2
2.1
Properties of the Web server
Benefits of the Web server
The Web server enables monitoring and administering of the CPU by authorized users over a network. Evaluations, diagnostics, and modifications are thus possible over long distances. Monitoring and evaluation is possible without STEP 7, only a web browser is required. Note that you must take appropriate measures to protect the CPU from compromise (such as restricting network access, using firewalls).
Activating the Web server
The web server is deactivated in the delivery state of the CPU. This means that you must load a project in which the Web server is activated to enable access using the Web browser.
Security functions
The Web server provides the following security functions: Access via the secure transmission protocol "HTTPS" using the CA-signed web server
certificate User authorizations you can configure by means of user list Activation for specific interfaces
Web server
14
Function Manual, 11/2019, A5E03484625-AG
General information 2.1 Properties of the Web server
Web browser
You need a web browser to access the HTML pages of the CPU.
The web browsers listed below have been tested for communication with the CPU. Other web browsers may also work, especially newer versions. However, if problems occur with web browsers not mentioned here that cannot be rectified, use one of the following tested web browsers:
Microsoft Internet Explorer (Version 11.x)
Microsoft Edge (Version 44.x)
Google Chrome (Version 75.x)
Mozilla Firefox (Version 64.x)
Opera (Version 58.x)
Mobile Safari and Chrome for iOS (iOS 12)
Android browser (Android 7.x)
Chrome for Android (Android 7.x to 8 (certificates work only to limited extent in Android 8))
Note If you are using Internet Explorer, disable "Compatibility view" in the settings ("Options" menu).
Note For access to display devices with low screen resolution, we recommend the use of basic websites, see section Basic websites (Page 156).
Note Older versions of the web browsers named above, which previously supported access to the HTML pages of the CPU, continue to allow this. However, these older versions do not support the new functions and HTML pages described in this edition.
Note Two reserved communication connections are available to the Web server for communication with the CPU. Depending on the web browser used, different numbers of connections to the CPU are established. If more connections are available, more communication connections will be established. If no more connections are available, display or functional problems may occur, because the Web server will reject all other communication connections apart from the two that are reserved. For this reason, the web pages may not load fully.
Web server
Function Manual, 11/2019, A5E03484625-AG
15
General information 2.1 Properties of the Web server
Note If you access the web server of the CPU using a communications processor (CP), ensure that the cache (temporary Internet files) is enabled in your browser. Choose the "Automatically" option in the cache settings of your browser. If the cache is disabled or if a setting other than "Automatically" is made in the cache settings of your browser, this may result in slow access times and incomplete display.
Note After a firmware update of the CPU, incorrect display of Web pages can occur in various Web browsers. This is caused by problems of the new CPU firmware with the cache of the Web browser. Solution: Press F5 or clear the Web browser cache.
Web server
16
Function Manual, 11/2019, A5E03484625-AG
General information 2.1 Properties of the Web server
Reading out data
With the Web server, you can read out the following data from the CPU and, in some cases, modify and write back the data to the CPU. Start page with general CPU information (Page 33) Information on Diagnostics (Page 38)
Identification Program protection Memory Runtime information Fail-safe (with an F CPU) Contents of the diagnostics buffer (Page 48) Module information (Page 57) Firmware update (Page 62) Alarms (Page 65) Information on Communication (Page 67) Important interface parameters Port statistics Display of the communication resources Display of the communication connections PROFINET-Topology (Page 72) Graphical view (set and actual topology) Table view (actual topology) Status overview Tag status (Page 82) Watch tables (Page 85) User pages (Page 120) Filebrowser (Page 154) DataLogs (Page 112) User files (Page 115) Online backup and restoration of the configuration (Page 87) Diagnostic information for technology objects (Page 49) Evaluation of trace recordings (Page 92) Reading out service data (Page 155) Basic websites (Page 156)
The HTML pages are described in more detail on the following pages.
Note Max. characters at data type WSTRING
Note that the data type WSTRING is limited to 254 characters for the display in the Web server. If the 254 characters are exceeded, the Web server does not display the superfluous characters.
Web server
Function Manual, 11/2019, A5E03484625-AG
17
General information 2.1 Properties of the Web server
Web access to the CPU via PG/PC, HMI devices and mobile terminal devices
Proceed as follows to access the Web server:
1. Use STEP 7 to download a project in which the web server is enabled to the CPU.
2. Connect the display device (PG/PC, HMI, mobile terminal device) with the CPU or a communication module using a PROFINET interface. If you are working with WLAN, activate the WLAN on the display device and establish a connection to the access point (e.g. SCALANCE W788-1RR or SCALANCE W784-1), which is in turn connected to the CPU.
3. Open the web browser on the display device.
4. Enter the IP address of the interface of the CPU which is connected to the client in the "Address" field of the web browser in the following format: http://a.b.c.d or https://a.b.c.d (example of input: http://192.168.3.141). The intro page of the CPU opens. From the intro page you can navigate to additional information.
Additional information on access using the secure transmission protocol "HTTPS" is available in the section Configuring the Web server (Page 19).
Additional information
Using a smartphone, you can access the Web server of the CPU either via WLAN or access to the CPU via the SIMATIC S7 app (using Web server functionality). You can find additional information in the FAQ entry ID 103473392 on the Service&Support (https://support.industry.siemens.com/cs/ww/en/view/103473392) Internet page.
Note: The Web server must also be activated for access to the CPU via the SIMATIC S7 app.
The SIMATIC S7 app offers you additional functions. You can find a detailed application example with further documentation and example projects on the Service&Support (https://support.industry.siemens.com/cs/ww/en/view/84133612) Internet page.
Web server
18
Function Manual, 11/2019, A5E03484625-AG
General information 2.2 Configuring the Web server
2.2
Configuring the Web server
To use the full functionality of the web server, the following settings in STEP 7 are necessary.
Procedure
You have opened the properties dialog of the CPU in STEP 7 in the project view.
Figure 2-1 Web server settings in STEP 7
Web server
Function Manual, 11/2019, A5E03484625-AG
19
General information 2.2 Configuring the Web server
Activate web server on this module
The web server is disabled in the default setting of a configured CPU. Proceed as follows to enable the Web server: 1. Open the "Devices & Networks" view by double-clicking in the project tree in STEP 7. 2. Select the desired CPU in the device, network or topology view. 3. Navigate to the "Web server" area in the Inspector window properties, "General" tab. 4. Select the "Activate web server on this module" check box.
The following note is output:
Figure 2-2 Security note upon activation of the Web server in STEP 7
Note When projects from deliveries are applied in which the Web server was already activated and configured on the module, this security note is not shown.
Web server
20
Function Manual, 11/2019, A5E03484625-AG
General information 2.2 Configuring the Web server
Creating and assigning a Web server certificate
The activation of the web server using the secure transmission protocol "HTTPS" requires a valid web server certificate. For SIMATIC S7-1500 CPUs with firmware V2.0 or higher, you must create the certificate for the web server of the CPU yourself with STEP 7 and assign it to the web server in the properties of the CPU. This certificate is also downloaded to the CPU automatically when the hardware configuration is downloaded. STEP 7 itself has a Certification Authority (CA) certificate, with which the device certificate (end-entity certificate) of the web server is signed.
Note When you update the firmware of a SIMATIC S7-1500 CPU or ET 200SP with firmware version < V2.0 to a firmware version V2.0, a valid server certificate is automatically generated and used. The same applies to the replacement parts scenario in which a newer CPU replaces a CPU with firmware version < V2.0.
You can create different Web server certificates: If you use the certificate manager in the global security settings, the certificate authority of
the project (CA certificate) signs the device certificate of the Web server. During loading, the CA certificate of the project is automatically loaded as well. If you do not use the certificate manager in the global security settings, STEP 7 generates the device certificate as a self-signed certificate.
NOTICE Utilizing the full functionality of the Web server A valid CA-signed Web server certificate in the CPU is a requirement for: · User management with password-protected users · Saving and downloading diagnostic information in csv files · Using the following safety-related functions:
Backing up and restoring the CPU configuration To use the full functionality of the Web server, we therefore recommend that you use the Certificate Manager to create a CA-signed server certificate in the global security settings and assign it to the CPU.
Web server
Function Manual, 11/2019, A5E03484625-AG
21
General information 2.2 Configuring the Web server
Creating a self-signed server certificate
To create a self-signed Web server certificate, follow these steps:
1. in the Inspector window Properties of the CPU, "General" tab, navigate to the "Web server > Security" area.
2. Click the "Add" button in the drop-down list to select a certificate. The "Create a new certificate" dialog opens.
3. Select the "Self-signed" check box in the follow-up dialog.
4. Enter the parameters for the new certificate or confirm the default settings.
Select "Web server" in the "Usage" box.
Enter the IP address(es) of the interface(s) or the domain name of the configured CPU in the "Subject Alternative Name" field.
5. Click "OK" to confirm.
6. Compile and load the configuration into the CPU. The device certificate of the Web server is a component of the configuration.
Creating and assigning a CA-signed Web server certificate
To create a CA-signed Web server certificate, follow these steps:
1. In the Inspector window Properties of the CPU, "General" tab, navigate to the "Protection & Security > Certificate Manager" area and select the "Use global security settings for certificate manager" option. The "Global security settings" appear in the project tree.
Note
To edit the Certificate Manager in the global security settings, you require the "Configure security" configuration permission.
2. Log on as a user in the project tree in the "Global security settings > User logon" area. The "Administrator" role is the default for the first logon for a new project.
3. in the Inspector window Properties of the CPU, "General" tab, navigate to the "Web server > Security" area.
4. Click the "Add" button in the drop-down list to select a certificate. The "Create a new certificate" dialog opens.
5. In the follow-up dialog, select the "Signed by certificate authority" check box and select the certificate authority from the drop-down list.
6. Enter the parameters for the new certificate or confirm the default settings.
Select "Web server" in the "Usage" box.
Enter the IP address(es) of the interface(s) or the domain name of the configured CPU in the "Subject Alternative Name" field.
7. Click "OK" to confirm.
8. Compile and load the configuration in the CPU. The device certificate of the Web server and the CA certificate are components of the configuration.
Web server
22
Function Manual, 11/2019, A5E03484625-AG
General information 2.2 Configuring the Web server
NOTICE Addressing the Web server of the CPU via domain names If you enter the IP address(es) of the interface(s) of the configured CPU in the "Subject Alternative Name" field, the generated certificate may not be accepted by all Internet browsers. In addition, you must generate and load a new server certificate (end entity certificate) with each change of the IP address of an Ethernet interface of the CPU, since the identity of the CPU changes with the IP address. You can avoid this problem by addressing the Web server of the CPU using domain names instead of IP address(es), e.g. "myconveyer-cpu.room13.myfactory.com". For this purpose, you have to manage the domain names of your CPU via a DNS server.
Additional information For detailed information on local self-signed and global CA-signed certificates, on the "Public Key Infrastructure" (PKI) and on certificate management, refer to the Communications function manual (https://support.industry.siemens.com/cs/ww/en/view/59192925) and to the STEP 7 online help, keyword "Secure Communication".
Web server
Function Manual, 11/2019, A5E03484625-AG
23
General information 2.2 Configuring the Web server
Permit access only with HTTPS
Note: The activation of the web server using the secure transmission protocol "HTTPS" requires a valid web server certificate in the CPU. See "Creating and assigning a Web server certificate" in the section above. To ensure secure access to the Web server the "Permit access only with HTTPS" check box is activated in the basic setting of a configured CPU. The web pages are transmitted by default via a secure connection and are protected from attacks by third parties. Note that in this case the URL of the CPU starts with "https://". The requirements for error-free HTTPS access to the CPU are as follows: The current date/time must be set in the CPU.
Note
When using secure communication (e.g. HTTPS), make sure that the corresponding modules have the current time of day and the current date. Otherwise, the modules evaluate the used certificates as invalid and the secure connection will not be established.
The IP address of the CPU must be assigned. A valid server certificate offered by the CPU is installed in the Web browser.
NOTICE
Safety-related functions only possible with CA-signed Web server certificate
The safety-relevant functions, backup and restore the configuration of the CPU, see section Online backup (Page 87), are only possible with a CA-signed web server certificate.
A valid CA-signed web server certificate in the CPU is also required: · User management with password-protected users · Saving and downloading diagnostic information in csv files
To use the full functionality of the Web server, we therefore recommend that you use the Certificate Manager to create a CA-signed server certificate in the global security settings and assign it to the CPU.
If no CA-signed Web server certificate is installed, a warning is output recommending that you do not use the page. To view the page, you may need to "Add an exception", depending on the Web browser used. A valid CA certificate is available for download from the "Intro" web page under "Download certificate". You can find instructions for installing the certificate in the help system of your Web browser and in the FAQ with the entry ID 103528224 at the Service&Support (https://support.industry.siemens.com/cs/ww/en/view/103528224) website.
Note
To protect against manipulation from the outside, download the certificate only in an environment that is guaranteed not to be compromised. Installation of the CA certificate has to be carried out once for each display device you wish to use.
Web server
24
Function Manual, 11/2019, A5E03484625-AG
General information 2.2 Configuring the Web server
Access protection
The certificate establishes an encrypted connection that prevents tapping or distortion of the communication but does not provide access protection. This means you have to protect your CPU from unauthorized access with the corresponding configuration in the user management. You can find additional information on the access protection in the online help for STEP 7, keyword: "Protection".
Enable automatic update
Automatic updating is activated in the default setting of a configured CPU. The following web pages are updated automatically: Start page Diagnostics (memory, runtime information, fail-safe) Diagnostics buffer Motion Control diagnostics Module information Alarms Communication Topology Tag status Watch tables Record DataLogs User files User-defined pages Filebrowser
Note The default activation interval is 10 seconds. Larger data volumes or multiple HTTP/HTTPS-connections increase the update time.
Web server
Function Manual, 11/2019, A5E03484625-AG
25
General information 2.2 Configuring the Web server Setting the language for the Web
In total, you can assign up to three different project languages to the user interface languages of the Web server. In STEP 7, activate the project languages that you want to use and then assign one of the activated project languages to each of the web server interface languages. You can find additional information about the language settings and a description of how to assign a project language to the interface languages in the section Language settings (Page 29).
Amending user management
Note: A valid CA-signed Web server certificate in the CPU along with a secure HTTPS connection are required for user administration with password-protected users. See "Creating and assigning a Web server certificate" and "Permit access only with HTTPS" in this section.
Figure 2-3 User administration in STEP 7
Web server
26
Function Manual, 11/2019, A5E03484625-AG
General information 2.2 Configuring the Web server
In STEP 7, you can manage the user list in the "Web server > User administration" area. The user list provides the following options: Create users Specify access permissions Assign passwords Users only have access to the options that are permanently linked to the access rights. You can assign different user rights depending on the CPU and firmware used. The available user rights can be selected in STEP 7 as follows:
Figure 2-4 Assignment of user rights in STEP 7
If you are not logged in, you automatically access the Web server as the user "Everybody". It does not matter in this case whether you have configured additional users.
Web server
Function Manual, 11/2019, A5E03484625-AG
27
General information 2.2 Configuring the Web server
User "Everybody" A user with the name "Everybody" is preset in the user list; this user has minimum access rights. These are read-only access to the intro page and start page. The user "Everybody" is defined without assigning a password, but you can assign all access authorizations available in STEP 7 to it. You can create a maximum of 20 users and a user "Everybody". Since the user "Everybody" is defined in STEP 7 without assigning a password, pay attention to which access authorizations you assign to this user. Individual authorizations, such as the ability to change the operating state, can represent a security risk. When assigning security-relevant authorizations, we recommend that you create a user with password protection in STEP 7.
WARNING
For an F-CPU, do not assign the user "Everybody" the access authorization "Perform changes as F-Admin". Make sure that you observe the warnings relating to this in the section "Restoring a backup of the safety program to an S7-300/1500 F-CPU" in the manual SIMATIC Safety Configuring and Programming (http://support.automation.siemens.com/WW/view/en/54110126).
Passwords should always be more than 8 characters in length and contain uppercase and lowercase characters as well as special characters and numbers (?!+%$1234...). Computer keyboard character strings and words from the dictionary are unsuitable. Change the password regularly.
Note When assigning rights, note that read and write access to the watch tables and the tag status is retained, even if you have deactivated the attribute "Accessible from HMI/OPC UA" in the PLC tag table when configuring the data block in STEP 7.
User-defined pages
In the "User-defined pages" area you can download your own web pages to the CPU and make your own web applications available via the web browser. You can find additional information in section User pages (Page 120).
Web server
28
Function Manual, 11/2019, A5E03484625-AG
General information 2.3 Language settings
Activation of the Web server for specific interfaces
In the area "Overview of interfaces", you have the option to enable access to the Web server.
Figure 2-5 Activation of access to the Web server via the interfaces
2.3
Language settings
Introduction
The Web server provides the user interface in the following languages: German (Germany) English (U.S.) French (France) Italian (Italy) Spanish (traditional sort) Japanese Chinese (Simplified) Korean Russian Turkish Portuguese (Brazil)
Web server
Function Manual, 11/2019, A5E03484625-AG
29
General information 2.3 Language settings
Requirements for the availability of the East Asian languages
The following requirements must be met for the East Asian languages: The appropriate package for the support of East Asian languages is installed on the
display device (such as PC). For additional information on installing files for East Asian languages, refer to your Windows documentation. STEP 7 for East Asian languages is installed on the programming device for the configuration of the CPU.
Note SIMATIC HMI devices with Windows CE operating system do not support East Asian languages.
Requirements for multilingual output of text
In order for the web server to correctly display messages, comments and diagnostic information in the different project languages, you must assign one project language to each of the desired web server interface languages in STEP 7.
Note The project languages of the STEP 7 project that you want to assign must be activated and the corresponding texts (translations) must be available in the project. The project languages selection is available in the project tree under "Languages & Resources".
Web server
30
Function Manual, 11/2019, A5E03484625-AG
General information 2.3 Language settings
Setting the language for the Web
Once you have activated the Web server on your module, assign a project language of the STEP 7 project from the drop-down list to each interface language. 1. Navigate to the "Multilingual support" area in the Inspector window Properties of the CPU,
"General" tab. 2. Assign a project language from the drop-down list to each interface language of the Web
server.
Figure 2-6 Language settings for the web server in STEP 7
You can also assign interface languages the same project language, for example:
Project language German for user interface language German, English (US) for
English, French for French.
Project language English (US) for all other available interface languages of the Web
server.
In total, you can assign up to three different project languages of the STEP 7 project to the user interface languages of the web server.
Reference
You can find additional information on how to set the project language in STEP 7 in the online help for STEP 7, keyword: "Selecting project languages".
Web server
Function Manual, 11/2019, A5E03484625-AG
31
General information 2.4 Updating and saving information
2.4
Updating and saving information
Updating the screen content
Automatic updating is activated in the default setting. The preset update time is 10 s. You update the web pages manually via the function key <F5>.
Disabling automatic updating for an individual web page
Click
to temporarily deactivate automatic updating for a web page.
Note that the deactivation affects only the currently visited web page. Automatic updating is
activated again when you change to a different web page.
You reactivate automatic updating by clicking
.
Note
If the load on the CPU is very high during operation, for example, due to a large number of PROFINET interrupts or extensive communication jobs, the updating of web pages may be significantly delayed for the duration of this high CPU load.
Printing web pages
The Web server offers you a print preview on most web pages. Click the symbol to open it.
Created printouts always contain the current information in the CPU. This means that it is possible that the information in the print preview is more up-to-date than the information in the standard view.
Web server
32
Function Manual, 11/2019, A5E03484625-AG
Web pages
3
3.1
Start page with general CPU information
Connecting to the Web server
Establish a connection to the Web server by entering the IP address of the interface of the configured CPU which is connected to the client in the address bar of the web browser, for example, http://192.168.3.141 or https://192.168.3.141. The connection is set up and the "Intro" page opens.
The examples in the next section provide information about the different web pages.
Intro
The figure below shows the first page (Intro) called by the Web server.
Figure 3-1 Intro page of the web server of the CPU 1516-3 PN/DP
Click the NEXT link to go to the Web server pages.
Note Select the "Skip Intro" check box in order to skip the intro. The Web server will then take you directly to its start page in future. This setting is saved in the user profile of the current PC user. You can undo the setting "Skip Intro" by clicking the "Intro" link in the left-hand navigation bar of a web page.
Web server
Function Manual, 11/2019, A5E03484625-AG
33
Web pages 3.1 Start page with general CPU information
Setting the user interface language
You can change the language for the Web server interface, e.g., from English to German, in the upper right corner. This option is available to you on all web pages of the Web server.
Switching the time display
You can set the format of the time display to Coordinated Universal Time (UTC) or PLC local time (default setting) on the left next to the language setting.
Figure 3-2 Switching the time display You can switch the time display on all the Web pages that provide this drop-down list. The displayed PLC local time result from the time zone and Daylight Savings Time / Standard Time setting that are set in the CPU properties.
Figure 3-3 Setting the time in the CPU properties 34
Web server Function Manual, 11/2019, A5E03484625-AG
Start page
Web pages 3.1 Start page with general CPU information
The switchover has an effect on the following Web pages:
Table 3- 1 Switching the time display: Display on Web pages
Web pages
Start page Diagnostics buffer Alarms Online backup DataLogs File browser User files Save service data
Display as Coordinated Universal Time (UTC) or as PLC local time Last F-change Date and time of the diagnostic buffer entry Date and time of the alarms Backup file with date and time of the backup Date of change and time of change Date of change and time of change Date of change and time of change File with time stamp of the storage
The start page before login offers information as shown in the figure below. The image of the CPU with LEDs shows its current status at the time of the data request.
Figure 3-4 Start page before login
Web server
Function Manual, 11/2019, A5E03484625-AG
35
Web pages 3.1 Start page with general CPU information
Log in
To use the full functionality of the web pages, you must be logged in. Log in with a user name and password specified in the Web configuration in STEP 7. You now have corresponding permissions to access the web pages released for this user. If you have not configured a user, read-only access is granted to intro and start pages by default.
Note After carrying out your required actions, log out explicitly from the Web server by clicking "Logout" in order to minimize the risk of unauthorized external access.
Note Session timeout The timeout for each started session is 30 minutes. After each update/automatic update, the session is automatically extended by another 30 minutes.
Figure 3-5 Start page after login 36
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.1 Start page with general CPU information
"General"
"General" contains information about the CPU whose web server you are currently connected to as well as the project name and the version of the TIA Portal with which the CPU was configured. The displayed TIA Portal version is at least required to load or edit the entire project.
"Status"
"Status" contains information about the CPU status at the time of the query.
"CPU operator panel"
In the area "CPU operator panel" you have the possibility to change the operating mode of the CPU ("RUN"/"STOP" buttons ) or to have the LEDs blink ("LED blink" button) with corresponding access rights.
Additional information for F-CPUs
Figure 3-6 Start page after login to an F-CPU
Web server
Function Manual, 11/2019, A5E03484625-AG
37
Web pages 3.2 Diagnostics
"Fail-safe"
"Fail-safe" contains additional information on the F-CPU. Further information about the specification is available in the Programming and Operating Manual SIMATIC Safety Configuring and Programming (https://support.industry.siemens.com/cs/de/de/view/54110126/en?dl=en).
Reference
You can find additional information in the section Configuring the Web server (Page 19).
3.2
Diagnostics
Overview
The "Diagnostics" web page provides more information about the tabs: Identification Program protection Memory Runtime information Fail-safe (with an F CPU)
"Identification" tab
The CPU characteristics are available in the "Identification" tab.
Figure 3-7 "Identification" tab 38
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.2 Diagnostics
"Identification"
The "Identification" info box contains the plant and location designation and the serial number. Plant and location identifiers can be configured in STEP 7 in the properties dialog of the CPU in the "General" tab.
"Order number"
The "Order number" info box contains the order number for the hardware.
"Version"
You can find the hardware, firmware and bootloader versions in the "Version" info box.
"Program protection" tab
The "Program protection" tab provides information on whether the PLC program contains know-how protection or copy protection.
Figure 3-8 "Program protection" tab
"Know-how protection"
Information on whether the PLC program contains at least one block with know-how protection or not can be found in the info field "Know-how protection".
Web server
Function Manual, 11/2019, A5E03484625-AG
39
Web pages 3.2 Diagnostics
"Binding"
In the info field "Binding" you can find information on whether copy protection has been activated by binding at least one program block of the PLC program to the serial number of the CPU or memory card.
"Binding"
"No binding"
"Binding mismatch": At least one block is bound to a different serial number (load process is rejected)
"Memory" tab
The "Memory" tab contains current values on the memory currently in use.
Figure 3-9 "Memory" tab
Web server
40
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.2 Diagnostics
"Runtime information" tab
Current information on program/communication load and cycle time can be found in the "Runtime information" tab. This enables you to see whether there may be runtime problems during execution of your user program.
Figure 3-10 "Runtime information" tab
Web server
Function Manual, 11/2019, A5E03484625-AG
41
Web pages 3.2 Diagnostics
Program-/Communication load With the "Value refresh" function, you update the data displayed in the bar charts: At intervals of 1 second Automatic (as configured in STEP 7) With the "Measurement" function, you can decide which measurement the bar charts display. You can choose between: The current measurement The measurement of the longest cycle time
Figure 3-11 Program-/Communication load
The legend of the program-/communication load shows information on the following values, highlighted in color: "Program load cyclic program OBs"
required computing time in percent within a cycle for cyclic program OBs "Program load high-priority OBs"
Required calculation time in percent within a cycle for higher-priority OBs "Current communications load"
Required calculation time in percent for current communications tasks within a cycle "Maximum permissible communication load"
The configured maximum communication load as a percentage "No-load operation"
There is no program-/communication load Note When you have configured a minimum cycle time, it can happen that no-load operation displays a high percentage value, although the value of the cycle time is also high. The reason for this is that the loads are recorded as mathematical average of the last second, but the cycle time relates to the last cycle.
Web server
42
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.2 Diagnostics
Figure 3-12 Color legend If you click on a specific color, the selected color is highlighted in the chart. If you click on a highlighted color, you remove the highlighting. Measurement of load distribution and cycle time The "Measurement of load distribution and cycle time" bar chart shows the percentage of the calculation time within a cycle for the following values: "Program load cyclic program OBs" "Program load high-priority OBs" "Current communications load" "No-load operation" Prognosis of load distribution and cycle time The "Prognosis of load distribution and cycle time" bar chart predicts whether the CPU can process the user program with maximum communication load within the maximum cycle time.
Web server
Function Manual, 11/2019, A5E03484625-AG
43
Web pages 3.2 Diagnostics
Example 1:
Figure 3-13 Cycle time < 70% of the maximum cycle time
Example 1 shows that the CPU can process the user program within the maximum cycle time of 150 ms when the maximum communication load of 38% is reached. The predicted cycle time is < 70% of the configured maximum cycle time. Example 2:
Figure 3-14 Cycle time 70% of the maximum cycle time
In example 2, the CPU can also process the user program with maximum communication load within the maximum cycle time. However, the predicted cycle time is already at 129 ms. As soon as the predicted cycle time is 70% of the maximum cycle time, the chart outputs a warning.
Web server
44
Function Manual, 11/2019, A5E03484625-AG
Example 3:
Web pages 3.2 Diagnostics
Figure 3-15 Cycle time longer than maximum cycle time
Example 3 shows that the CPU can no longer process the user program within the maximum cycle time when the maximum communication load is reached. If the predicted cycle time is longer than the maximum cycle time, the chart outputs an error message.
If it is predicted that the maximum cycle time will be exceeded, use the following controller in order to reduce the maximum communication load.
Figure 3-16 Controller for setting the maximum communication load
Web server
Function Manual, 11/2019, A5E03484625-AG
45
Web pages 3.2 Diagnostics
Note Setting the communication load The controller predicts the effects of the changed communication load on the cycle time. You configure the maximum communication load in STEP 7.
Note For non-measurable fluctuations in the user program, e.g. for future changes in the user program, plan a sufficiently low value for the maximum communication load.
Note Due to the different acquisition bases of cycle time and load, a settled system state is required to display reliable measured values.
You can find additional information about the influence of the communication on the cycle time in the Cycle and Response Times (https://support.industry.siemens.com/cs/us/en/view/59193558) function manual.
Trend for program/communication load If your browser supports the display of SVG (Scalable Vector Graphics), the display in the "Runtime information" tab is expanded to show the trend for program/communication load. With the line charts in the "Trend for program/communication load" area, you can track the progression of the following values: "Program load of the cyclic program OBs" "Program load high-priority OBs" "Current communications load" With the "Number of recorded measuring points" option, you can choose between the last 20 to 1 000 measured values for the display of the measured values.
Web server
46
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.2 Diagnostics
For the trend on the x-axis, you can choose between "Time" (CPU time) and "Samples" by clicking on the desired unit.
Note If you have selected the "Time" unit on the x-axis, all measured values that are more than 24 hours old are deleted automatically.
Figure 3-17 Line chart
"Fail-safe" tab (with an F-CPU)
The safety program of an F-CPU consists of one or two F-runtime groups. You can find their F-runtime group signature, cycle times (F-monitoring time) and runtimes in the "Fail-safe" tab.
Figure 3-18 "Fail-safe" tab
Web server
Function Manual, 11/2019, A5E03484625-AG
47
Web pages 3.3 Diagnostics buffer
3.3
Diagnostics buffer
Requirements
The web server is activated, languages are set, the text libraries are loaded and the project has been compiled and downloaded with STEP 7.
Diagnostics buffer
The content of the diagnostic buffer is displayed by the browser on the web page "Diagnostics buffer".
Figure 3-19 Diagnostics buffer
"Diagnostics buffer entries 1-50"
The diagnostics buffer can accommodate different numbers of alarms depending on the CPU used. For information on the maximum number of diagnostics buffer entries, refer to the technical specifications of the CPU used. Select an interval for the entries from the drop-down list. Each interval comprises 50 entries.
Web server
48
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.4 Motion Control diagnostics
"Event"
The "Event" info box contains the diagnostics interrupts with date and time.
Note that the diagnostic events are displayed in the project language of the STEP 7 project that is assigned to the current web server interface language. You can find out how to assign project languages to interface languages in section Language settings (Page 29).
"Details"
This field outputs detailed information about a selected event. Select the corresponding
event from the "Event" info field.
Saving diagnostics buffer entries
You can save diagnostics buffer entries to a csv file for further processing in a spreadsheet program or database program. Save the data by clicking the icon.
A dialog opens in which you can specify the file name and target directory.
3.4
Motion Control diagnostics
Overview
The Web server displays statuses, errors, technology alarms and the current values of the configured technology objects (TOs): Speed-controlled axis (TO_SpeedAxis) Positioning axis (TO_PositioningAxis) Synchronous axis (TO_SynchronousAxis) External encoder (TO_ExternalEncoder) Measuring input (TO_MeasuringInput) Output cam (TO_OutputCam) Cam track (TO_CamTrack) The "Motion Control Diagnostics" web page provides detailed information on the configured technology objects in the following views: Diagnostics Service overview
Web server
Function Manual, 11/2019, A5E03484625-AG
49
Web pages 3.4 Motion Control diagnostics
Diagnostics
The "Diagnostics" view offers you:
An overview list of the configured technology objects The status and error messages of a selected technology object Values and limits of the status of a selected axis/cam
"Diagnostics" view
In the "Diagnostics" tab you will find an overview list of the configured technology objects with designation and type, which indicates whether the respective technology object is "released" and "referenced".
The technology object is enabled: The axis can be moved with motion jobs.
The technology object is homed: The relationship between the position in the technology object and the mechanical position was successfully created. The actual position value on the technology object is assigned to a reference mark.
Figure 3-20 Motion Control diagnostics: Status and error bits
Web server
50
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.4 Motion Control diagnostics
Meaning of the symbols in the "Status" column
Table 3- 2 Meaning of symbols
Symbol
Symbol color Green
Yellow
Red
Meaning
Component is OK Warning pending Error - component faulty or not available
Select the required technology object. The related diagnostics information is shown in the bottom tabs.
"Status and error bits" tab
You use the "Status and error bits" tab to monitor the status and error messages for the technology object as in STEP 7.
Web server
Function Manual, 11/2019, A5E03484625-AG
51
Web pages 3.4 Motion Control diagnostics
"Motion status"/"Cam track status" tab
You use the "Motion status" tab to monitor the motion status of the axis as in STEP 7.
Figure 3-21 Motion Control diagnostics: Motion status
Web server
52
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.4 Motion Control diagnostics
You use the "Cam track status" tab to monitor the cam track status as in STEP 7.
Figure 3-22 Motion Control diagnostics: Cam track status
Service overview
The "Service overview" view offers you:
The status and diagnostic information for several technology objects A filter option for selecting the displayed technology objects
Web server
Function Manual, 11/2019, A5E03484625-AG
53
Web pages 3.4 Motion Control diagnostics
"Service overview" view
The "Service overview" shows the diagnostics information for several technology objects in table form.
Figure 3-23 Motion Control diagnostics, service overview: Status and error information
Web server
54
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.4 Motion Control diagnostics To select the information to be displayed, click the list symbol in the first column of the table. Make your selection in the next window. Click the list symbol again to leave the selection window.
Figure 3-24 Motion Control diagnostics, service overview: Configuring the status and error information
Web server
Function Manual, 11/2019, A5E03484625-AG
55
Web pages 3.4 Motion Control diagnostics
Selection "Select technology objects"
You can make a selection of the displayed technology objects with the selection "Select technology objects".
Figure 3-25 Motion Control diagnostics, service overview: Status and error information - Select technology objects
Additional information
You can find additional information in the S7-1500(T) Motion Control function manuals on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109751049). You can find explanations of the diagnostics functions "Status and error bits" and "Motion status"/Cam track status" of the individual technology objects in the online help for STEP 7.
Web server
56
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.5 Module information
3.5
Module information
Module information
The status of a device is indicated by means of symbols and comments on the "Module information" web page.
Figure 3-26 Module information
Meaning of the symbols in the "Status" column
Table 3- 3 Meaning of symbols
Symbol
Symbol color Green Gray Gray
Red Black Green
Meaning
Component is OK
Deactivated PROFIBUS slaves or PROFINET devices.
State cannot be determined · "State cannot be determined" is displayed during system diagnostics for all
configured I/O modules and I/O systems after restart of the CPU. · However, this state can also be displayed temporarily during operation if a
diagnostics interrupt burst occurs for all modules. · It is not possible to determine the status of modules on a subsystem that is
connected to a CP. Component "not reachable" "Not reachable" is displayed when a module has been removed or a module has been configured but does not exist. No input or output data available. Input or output channels of the (sub)module are disabled. Maintenance required (Maintenance Required)
Yellow Red Red
Maintenance demanded (Maintenance Demanded) Error - component faulty or not available due to an incorrect type A module in a lower module level does not have the status "Component OK"
Web server
Function Manual, 11/2019, A5E03484625-AG
57
Web pages 3.5 Module information
Navigation to further module levels
The status of individual components/modules/submodules is displayed when you navigate to the further module levels: To the next higher module level using the links in the display of the module levels To the next lower module level using the links in the "Name" column
Figure 3-27 Navigation to further module levels
"Module information"
Depending on the selected level, the table contains information on the rack, the DP master system, the PROFINET IO master system, the stations, the individual modules or the modules or submodules of the station.
"Display of the module levels"
The links are used to access the "Module information" of the higher module levels.
"Topology"
The two web pages, "Topology" and "Module information", are linked. A click on "Topology" of the selected module automatically takes you to this module in the graphic view of the set topology on the "Topology" web page. The module is displayed in the visible area of the "Topology" web page. The device header of the selected module flashes for a few seconds.
Web server
58
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.5 Module information
"IP address"
If a link is available, you can use it to access the Web server of the configured device you selected.
"Details"
Additional information about the selected module is provided in the "Status" and "Identification" tabs via the "Details" link.
"Status" tab
The tab contains information about the status of the selected module when a fault or alarm exists.
"Identification" tab
The tab contains data on the identification of the selected module.
Note This tab displays only the data configured offline of the module.
Web server
Function Manual, 11/2019, A5E03484625-AG
59
Web pages 3.5 Module information
"Statistics" tab
The tab is only displayed for PROFINET IO devices and contains the following information on the communication statistics of the selected IO device: "Total statistics - Sent data packages"
You can assess the data transmission on the transmit line based on the key data in this info box. "Total statistics - Received data packages" You can assess the data transmission on the receive line based on the key data in this info box. "Statistics port x - Sent data packages" You can assess the data transmission on the transmit line for each port based on the key data in this info box. "Statistics port x - Received data packages" You can assess the data transmission on the receive line for each port based on the key data in this info box.
Reference
Figure 3-28 "Statistics" tab
You can find additional information in the "Statistics" tab in the section Communication (Page 67).
Web server
60
Function Manual, 11/2019, A5E03484625-AG
Example: Module information - module
Web pages 3.5 Module information
Figure 3-29 Example: Module information - module
Note If you are using the function Configuration control (option handling) in the central configuration of your plant, the information text in the headings area of the web page informs you that the status of the I/O modules may be displayed inconsistently. No corresponding text is displayed for the distributed I/O.
Example: Module information - submodule
Reference
Figure 3-30 Example: Module information - submodule
You can find additional information on the "Module information" in the online help for STEP 7, keyword: "Module information".
Web server
Function Manual, 11/2019, A5E03484625-AG
61
Web pages 3.6 Firmware update
3.6
Firmware update
Introduction
You update the firmware as a user with the corresponding access rights on the "Module information" web page at the module level. You will find information on user management in section Configuring the Web server (Page 19) under "Amending user management". You use an update file to update the firmware of the CPU, the display of the CPU, or the individual central or distributed modules. Note that all modules you want to update must be compatible with the TIA Portal as of V12.0.
Note
A firmware update is not possible if access is via a mobile terminal device with the "iOS" operating system.
Web server
62
Function Manual, 11/2019, A5E03484625-AG
Procedure
Web pages 3.6 Firmware update
The following steps are required to perform a firmware update: Click on "Browse" in the Firmware Loader area. Select the file you would like to use for the firmware update. You can find the available
firmware updates on the Service&Support page on the Internet (http://support.automation.siemens.com).
Status of the selected firmware file Button to execute the update
Figure 3-31 Module information, "Firmware" tab, "Ready for update" status
If the status is "Ready for update", click "Run update". If the CPU is in RUN mode during the update, the following alarm is output:
Figure 3-32 Alarm after clicking "Run update"
Acknowledge the alarm output by clicking "OK". The CPU is set to STOP mode and the firmware update is executed.
Web server
Function Manual, 11/2019, A5E03484625-AG
63
Web pages 3.6 Firmware update
If you click "Cancel", the CPU remains in the current mode and the firmware update is canceled.
A alarm informs you about the order number and version ID of the updated firmware once the update is complete. The CPU is automatically placed in RUN mode when the mode selector of the CPU is in RUN and when you acknowledge the alarm with "OK". This may take a few minutes; there is no progress indicator. If you click "Cancel", the CPU remains in STOP mode and you can run additional updates.
Reference
Figure 3-33 Alarm: Firmware successfully transferred
For additional information on the topic of firmware update, refer to the STEP 7 online help and the following FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67190848).
Web server
64
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.7 Alarms
3.7
Alarms
Requirements
The alarm texts were configured in the user-specific languages. For information about configuring alarm texts, refer to STEP 7 and to the Service&Support pages (http://www.siemens.com/automation/service&support).
Alarms
To receive compact information on fault analysis, we recommend that you always first read out the content of the alarm buffer. This is the most effective method to get an overview of the pending faults.
The browser displays the content of the alarm buffer on the "Alarms" web page.
Figure 3-34 Alarms
Web server
Function Manual, 11/2019, A5E03484625-AG
65
Web pages 3.7 Alarms
"Alarms"
Alarms of the CPU are displayed in descending chronological order with date and time in info
box .
The alarm text parameter is an entry which contains the alarm texts configured for the corresponding fault definitions.
Note that the message texts are displayed in the project language of the STEP 7 project that is assigned to the current web server interface language. You can find out how to assign project languages to interface languages in section Language settings (Page 29).
Sorting
You also have the option to display the individual parameters of the currently displayed web page (max. 50 entries) sorted in ascending or descending order. For this purpose, click on one of the parameters in the column header:
Alarm number
Date
Time (of the CPU)
Alarm text
Status
Acknowledgment
The alarms are returned in chronological order when you click the "Date" entry. Incoming and outgoing events are output at the Status parameter.
If you have the appropriate user rights (see section Configuring the Web server (Page 19)), for alarms which can be acknowledged, a button is available to you in the "Acknowledgment" column with which you can acknowledge the alarm.
"Details on alarm number"
You can view detailed alarm information in this info box. Select the corresponding alarm from
the info field .
Saving alarms
You can save alarms to a csv file for further processing in a spreadsheet program or database program. Save the data by clicking the icon.
A dialog opens in which you can specify the file name and target directory.
Web server
66
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.8 Communication
3.8
Communication
Overview
The "Communication" web page provides detailed information about the following tabs: Parameters Statistics Resources Connections
"Parameter" tab
A summary of the information on the PROFINET and Ethernet interfaces of the selected CPU is available in the "Parameter" tab.
Figure 3-35 Parameters of the integrated PROFINET and Ethernet interfaces
"Network connection"
The item "Network connection" includes information for identification of the integrated PROFINET and Ethernet interfaces of the corresponding CPU. The MAC address is located on the CPU above the respective PROFINET or Ethernet interface.
"IP parameter"
This parameter includes information on the configured IP address and number of the subnet in which the corresponding CPU is located.
Web server
Function Manual, 11/2019, A5E03484625-AG
67
Web pages 3.8 Communication
"Physical properties"
The following information on the interface hardware is available in the "Physical properties" field: Port number Link status Settings Mode Connection medium
Web server
68
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.8 Communication
"Statistics" tab
Information on the data transmission can be found on the "Statistics" tab.
Figure 3-36 "Statistics" tab with key data on data transmission
"Total statistics - Sent data packages"
You can assess the data transmission on the transmit line based on the key data in this info box.
Web server
Function Manual, 11/2019, A5E03484625-AG
69
Web pages 3.8 Communication
"Total statistics - Received data packages"
You can assess the data transmission on the receive line based on the key data in this info box.
"Statistics Port x - Sent data packages"
You can assess the data transmission on the transmit line for each port based on the key data in this info box.
"Statistics port x - Received data packages"
You can assess the data transmission on the receive line for each port based on the key data in this info box.
The "Resources" tab
For information about the resource consumption of the connections, refer to the "Resources" tab.
Figure 3-37 "Resources" tab
Number of connections
Under "Number of connections", you will find information on the maximum number of connections and the number of connections not assigned.
Connections
The item "Connections" provides information on the number of connections reserved or used for ES, HMI, S7, OpenUser, web communication and other communication functions.
Web server
70
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.8 Communication
"Connections" tab
The "Connections" tab contains information on the status of the communication connections.
Status
Details Reference
Figure 3-38 "Connections" tab
Under "Status", you will find an overview of the communication connections being established and the already established communication connections. For each connection, the table contains the following information: status of the connection, local ID, slot of gateway, remote address (IP address), the corresponding remote address type, method of connection, and type of connection.
Under "Details", you will find detailed information about the selected connection.
For an explanation of the error message displayed when a connection is interrupted or an attempt to establish a connection fails, refer to the STEP 7 online help.
Web server
Function Manual, 11/2019, A5E03484625-AG
71
Web pages 3.9 Topology
3.9
Topology
3.9.1
Introduction
Topology of the PROFINET devices
The "Topology" web page provides information on the topological configuration and status of the PROFINET devices on your PROFINET IO system.
There are three tabs for the following views:
Graphical view (set and actual topology)
Table view (actual topology only)
Status overview (excluding topological correlations)
You can print the table view and status overview. Before printing, use the print preview of your browser and, if necessary, correct the format.
Set topology
The set topology is displayed if you have topologically interconnected the connections in the configuration with STEP 7.
This view identifies the topological assignment of PROFINET devices that have failed, the differences between the set and actual topology, and interchanged ports.
Note
The configured set topology is always displayed by default in the following scenarios: · When the "Topology" web page is called via the navigation bar · When you change from the overview of PROFINET IO devices on the "Module
information" web page to the "Topology" web page by means of the "Topology" link.
If a setpoint topology was not configured, the actual topology is displayed.
Actual topology
Displays the current topological structure of the "configured" PROFINET devices of a PROFINET IO system and the directly adjacent, non-configured PROFINET devices (display of the neighbor relationships, provided these can be determined; but the status of these adjacent PROFINET devices is not displayed).
Web server
72
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.9 Topology
3.9.2
Graphical view
Requirements
For error-free operation of the topology, the following conditions must be met:
You have made the Language settings (Page 29).
In the Topology Editor of STEP 7, you configured the topological interconnection of ports (requirement for display of the set topology and the corresponding topological target connections).
The project has been compiled in STEP 7.
The project is completely loaded.
Set and actual topology - graphical view
You can select the interface with the topology you want to display (X1, X2, X3 or PROFINET communication modules such as CM 1542-1) at the top left of the "Topology" Web page.
Figure 3-39 Graphical view - Set and actual topology
Web server
Function Manual, 11/2019, A5E03484625-AG
73
Web pages 3.9 Topology
Meaning of the colored connections in the set/actual topology:
Table 3- 4 Meaning of the colored connections in the set/actual topology
Connection Green Red Yellow
Meaning
Set topology
Actual topology
The current actual connection matches the configured target Connections detected connection.
Mismatch between the current actual connection and the configured target connection (e.g., port interchanged).
Connection diagnostics not possible. Causes:
-
· Malfunction of communication with a device (e.g., cable was removed)
· Connection to a passive component (e.g., switches or cables)
· Connection to devices/PROFINET devices on a different IO controller or IO subsystem.
Configured and accessible PROFINET devices
Configured and accessible PROFINET devices are displayed in dark gray. Connections indicate the ports used to connect the PROFINET devices of a station.
Configured but inaccessible PROFINET devices
Configured but inaccessible PROFINET devices are indicated in pink with red frame (e.g., device failure, cable disconnected).
Deactivated devices
All deactivated, configured PROFINET devices are displayed in light gray.
Interchanged ports
Interchanged ports are highlighted in red in the set topology view. The actual topology view indicates the actually connected ports, while the set topology view displays the configured target connections.
Web server
74
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.9 Topology
PROFINET devices of a different PROFINET IO subsystem
In the set topology: A PROFINET device of a different PROFINET IO subsystem is indicated by means of a green link (or red link for interchanged ports) if it is available on the bus and directly
adjacent to an accessible configured PROFINET device . If the PROFINET device of a
different PROFINET IO subsystem is inaccessible, it is identified by means of a yellow connecting line. The connection between two PROFINET devices which both belong to a different PROFINET IO subsystem cannot be identified and is always indicated in yellow color. In the actual topology: The PROFINET device of a different PROFINET IO subsystem is not displayed unless it is directly adjacent to a configured PROFINET device. The PROFINET device is shown in light gray with a dashed line around the device header. The status of PROFINET devices of a different PROFINET IO subsystem is not displayed in the device header.
Displaying faulty neighbor relationships
Devices from which the relation data could not be read completely or with error are highlighted in light gray with a red frame.
Note Displaying faulty neighbor relationships If a device does not have the matching firmware, the relationships cannot be displayed correctly. This means a firmware update of the respective device is required in case a faulty neighbor relationship is displayed.
Views after changes to the configuration
If a device fails, it remains at the same position in the "Set topology" view. This error state is indicated with a red border around the device header and the icon .
If a device fails, it is displayed in the "Actual topology" view. This error state is indicated separately in the bottom area with a red border around the device header and the icon .
Link between the "Topology" and "Module information" web pages
The two web pages, "Topology" and "Module information", are linked. A click on the header of a selected module in the topology view automatically takes you to this module on the "Module information" web page. You can find additional information on this in the section Module information (Page 57).
Web server
Function Manual, 11/2019, A5E03484625-AG
75
Web pages 3.9 Topology
Reference
Additional examples for graphical topology view are available in the section Examples for graphical topology views (Page 79).
3.9.3
Tabular view
Topology - tabular view
The "Tabular view" always shows the "Actual topology".
Figure 3-40 Topology - tabular view
Meaning of the symbols relating to the status of the PROFINET devices
Table 3- 5 Meaning of the symbols relating to the status of the PROFINET devices Symbol Meaning
Configured and accessible PROFINET devices
Unconfigured and accessible PROFINET devices
Configured but inaccessible PROFINET devices
Devices for which neighbor relations cannot be determined, or for which the neighbor relationship could not be read out completely, or only with errors
Web server
76
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.9 Topology
Meaning of the symbols relating to the module status of the PROFINET devices
Table 3- 6 Meaning of the symbols relating to the module status of the PROFINET devices
Symbol Color green
Meaning Component is OK.
gray
Deactivated PROFIBUS slaves or PROFINET devices
black
red green
State cannot be determined
· For example, "Status cannot be determined" is always displayed while the CPU is in STOP mode, or during startup evaluation of "Report system error" for all configured I/O modules and I/O systems after a CPU restart.
· However, this status can also be displayed temporarily during operation if a diagnostics interrupt burst occurs at all modules.
· It is not possible to determine the status of modules on a subsystem that is connected to a CP.
Component failed or is not reachable
· "Not reachable" is displayed for e.g. a module that has been removed or a module that has been configured but does not exist.
Maintenance required (Maintenance Required)
yellow Maintenance demanded (Maintenance Demanded)
red
Error - component faulty or not available due to an incorrect type.
-
A module in a lower module level does not have the status "Component OK".
Reference
For additional information on the "Report System Error" function, refer to the STEP 7 online help, keyword: "System diagnostics".
Web server
Function Manual, 11/2019, A5E03484625-AG
77
Web pages 3.9 Topology
3.9.4
Status overview
Topology - status overview
The "Status overview" provides a clear presentation of all PROFINET IO devices/PROFINET devices (without connection relations) on one page. A quick error diagnostics is possible based on the symbols that show the module statuses.
The overview also provides a link of the modules to the Web page Module information (Page 57).
Figure 3-41 Topology - status overview
Web server
78
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.9 Topology
3.9.5
Examples for graphical topology views
The following section shows, as an example, some displays of the different topology views for a simple project.
"Set topology" is OK
Here you see the connections as they are configured in the topology editor by STEP 7. The configuration and wiring match.
Figure 3-42 "Set topology" is OK
"Actual topology" is OK
Shows the actual layout of all configured devices that can be reached topologically.
Figure 3-43 "Actual topology" is OK
Web server
Function Manual, 11/2019, A5E03484625-AG
79
Web pages 3.9 Topology "Set topology" with failed device
If a device has failed in the meantime, this device remains in the same place in the "Set topology" view. The failed device is displayed with a red border around the device header and the icon.
Figure 3-44 "Set topology" with failed device
"Actual topology" with failed device
In the "Actual topology" view, the device that has failed in the meantime is displayed separately in the bottom area of the view. The failed device is displayed with a red border around the device header and the icon.
Figure 3-45 "Actual topology" with failed device
Web server
80
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.9 Topology "Set topology" with interchanged ports If a port was interchanged for a configured, directly adjacent PROFINET device, this device remains in the same place in the "Set topology" view. The interchanged connection is indicated by a red line.
Figure 3-46 "Set topology" with interchanged ports
Web server
Function Manual, 11/2019, A5E03484625-AG
81
Web pages 3.10 Tag status
3.10
Tag status
Tag status
The browser outputs the tag status on the web page of the same name.
Note Saving the tag status as a bookmark
When the page is exited, the entries made on it are not saved. If you want to monitor the same entered tags again later on, then create a bookmark in your Web browser for the "Tag status" page. Otherwise, you will have to enter the tags again when the page is reopened. If you have defined your user page as start page of the Web server, you cannot access the tag status via the saved bookmarks. You can find additional information in section Defining the user page as start page (Page 141).
Note Selected tag addresses are copied to the URL
The maximum number of characters for the URL of the tag status page is 2083. You can see the URL which corresponds to your current tag status page in the address bar of your Web browser. To monitor several tags, we recommend the use of the watch tables (Page 85).
Figure 3-47 Tag status
Web server
82
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.10 Tag status
"Name"
In the "Name" text box, enter the address of the tag whose behavior you want to monitor. This may be a symbolic or absolute address.
PLC tags (inputs and outputs, bit memories, times and counters) and DB tags in blocks with standard access have an absolute and a symbolic address.
DB tags in blocks with optimized access have a symbolic address and no absolute address.
Example for access to the absolute address of a data block with standard access: The absolute address consists of the preceding address ID %, the number of the data block and the absolute address of the tags in the data block, separated by a period: %DB1.DBX1.0 = absolute addressing of the tags "DBX1.0" in the global data block "DB1".
Invalid entries are displayed in red font.
"Display format"
Using the drop-down list box, select the desired display format of the respective variable. If the tag cannot be displayed in the desired format, it will be displayed in hexadecimal format.
"Value"
Under "Value", the value of the corresponding operand is displayed in the selected format.
"Modify value"
You can change the value of tags and write them to the CPU in this column. To transfer several changed values in one operation, click the "Apply" button below the table. To be able to read values and write values to the CPU, you need to have configured a user with the appropriate access rights in STEP 7. If the value you entered is not valid (e.g. binary value in a BOOL field), the entry is not applied and the corresponding input field remains empty. A specific message relating to this is not output. You can change the values of the following data types: Bool, Byte DWord, LWord, Word Int, DInt, LInt, SInt, UDInt, UInt, ULInt, USInt Real, LReal LDT Counter, Date Time, LTime, Time_Of_Day, LTime_Of_Day, Timer S5Time Char, WChar, String
Note
The following generally applies: To be able to write data, the "Referrer" transfer must be activated in your Web browser (this is the default in all common browsers).
Web server
Function Manual, 11/2019, A5E03484625-AG
83
Web pages 3.10 Tag status
Special considerations when changing languages
You can change the language, e.g., from German to English, in the upper right corner. Note that the German mnemonics differ from those of the other languages.
For monitoring available data types
Basically, you can monitor all data types of PLC tags via the web server, which you can also monitor in STEP 7.
Note that structured data types such as ARRAY, STRUCT and DTL are not available as data types for PLC tags due to their data volume.
Reference
You can find additional information on the available data types in the STEP 7 online help, keyword: "Overview of the valid data types".
Web server
84
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.11 Watch tables
3.11
Watch tables
Watch tables
The browser displays the content of the configured, web-enabled watch tables on the web page of the same name.
Note
Please note that you can observe a maximum of 50 of the watch tables configured in STEP 7 in the Web server.
Each of these tables is displayed in the Web server with a maximum of 200 entries.
If you are monitoring many large watch tables in the Web server, the update time may increase due to the large data volumes.
The number of watch tables that you can monitor download into the CPU also depends on the size of the SIMATIC memory card used.
Figure 3-48 Watch tables
Selection
Select one of the configured watch tables from the drop-down list.
"Name"
The symbolic name of the tag is shown in this info box.
Web server
Function Manual, 11/2019, A5E03484625-AG
85
Web pages 3.11 Watch tables
"Address"
The absolute address of the tags is displayed within this info field (if present, e.g. for inputs or outputs; DB tags in blocks with optimized access have no absolute address).
"Format"
Select the display format of the respective tag from the drop-down list.
"Value"
This column shows the values in the corresponding display format.
"Modify value"
You can change the value of tags and write them to the CPU in this column. To be able to read values and write values to the CPU, you need to have configured a user with the appropriate access rights in STEP 7. If the value you entered is not valid (e.g. binary value in a BOOL field), the entry is not applied and the corresponding input field remains empty. A specific message relating to this is not output.
Note The following generally applies: To be able to write data, the "Referrer" transfer must be activated in your Web browser (this is the default in all common browsers).
Note that the comments are displayed in the project language of the STEP 7 project that is assigned to the current user interface language of the Web server. You can find out how to assign project languages to interface languages in section Language settings (Page 29).
Reference
You can find additional information on the available data types in the STEP 7 online help, keyword: "Overview of the valid data types".
Web server
86
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.12 Online backup
3.12
Online backup
Backing up and restoring the CPU configuration
You can back up a CPU configuration using the Web server with the corresponding access rights. If necessary, you can also restore this configuration at a later time using the Web server.
You can create as many backups as you want and store a variety of configurations for a CPU.
NOTICE
Prior to every restoration of the CPU configuration, always first perform an online backup of the current CPU configuration and save this backup file to a local directory of your PC.
This ensures that you can undo a restoration which failed (e.g. due to a damaged backup file) or which does not show the desired result.
Note
You can also perform online backup and restoration of the CPU configuration in STEP 7 (see STEP 7 online help, keyword: "Creating a backup of an S7 CPU").
When backing up using STEP 7, the backup file is saved within the STEP 7 project. With a backup using the Web server, the backup file is saved to a local directory of your PG/PC (e.g. "Downloads" directory). Web server backup files cannot be restored via STEP 7, nor can STEP 7 backup files be restored directly using the web server.
To restore a STEP 7 backup file using the web server, first save the STEP 7 backup file to a local directory of your programming device/PC (e.g. "Downloads" directory). From there, you can restore the backup with the Web server.
Note
The "Online backup" function is not available if you access the web server via: · a virtual IP address · a communication module (CM) · a communication processor (CP)
Requirements
You access the CPU via the secure transmission protocol "HTTPS".
A valid CA-signed certificate is installed in the Web browser; see section Configuring the Web server (Page 19).
Web server
Function Manual, 11/2019, A5E03484625-AG
87
Web pages 3.12 Online backup Online backup
Figure 3-49 Online backup
Web server
88
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.12 Online backup
Perform online backup of the configuration
To perform an online backup of the CPU configuration, proceed as follows: 1. Click the "Create online backup" button in the "PLC backup" area. 2. If the CPU is in RUN mode, the following alarm is output:
"Creation of an online backup requires PLC STOP. Do you want to set the PLC to STOP mode?" Acknowledge the alarm output by clicking "OK". The CPU is set to STOP mode and online backup is performed. (If you click "Cancel", the CPU remains in the current mode and the online backup is canceled.) 3. Save the backup file to a local directory of your PC. 4. Set the CPU back to RUN mode ("RUN" button in the "CPU operator panel" area of the start page).
Note During the execution of the online backup, some data is not available in the web page view of the web server.
Scope of the backup The backup includes all data needed to restore a particular state of a CPU, i.e. the specific combination of the configuration of the CPU with the current values of the user-related retentive data. The following data of the configuration of the CPU is backed up: The contents of the SIMATIC memory card, e.g. configuration, program code, recipes and
archives, DataLogs The following user-relevant retentive data is backed up: Retentive memory areas of data blocks, bit memories, counters and timers Front-panel settings, dynamic IP configuration data, operating hours counters, retentive
Motion Control sensor data Note: Entries in the diagnostic buffer are not included in the backup. With a SIMATIC S7-1500 CPU, the current time is not saved. The complete content of the SIMATIC memory card is saved, i.e. also any data stored on
the card (e.g. PDF files, GSD files). The backup file is assigned the name of the CPU and the project with the time and date
of the backup, e.g. "2015-09-10_11-01_03_online backup_PLC69_machineControl.s7pbkp". The backup file of an F-CPU also contains the collective signature of the safety program in the file name. Check whether it is the expected F-collective signature. You can rename the backup, but you cannot make any changes to the contents of the backup.
Web server
Function Manual, 11/2019, A5E03484625-AG
89
Web pages 3.12 Online backup
Restoring the configuration
To restore the CPU configuration, follow these steps:
1. Enter the password of the currently logged-in user in the "Restore PLC" area.
2. Click the "Select file" button and select the backup file of the configuration that you want to restore.
3. Click "Restore selected online backup".
4. If the CPU is in RUN mode, the following alarm is output: "Download online backup to device. The CPU is set to STOP and the contents of the CPU will be overwritten. Do you want to continue?"
If the CPU is already in STOP mode, the following alarm is output: "Download online backup to device. The contents of the CPU will be overwritten. Do you want to continue?"
Acknowledge the alarm output by clicking "OK". The CPU is set to "STOP" mode if required, and the online backup is downloaded. (If you click "Cancel", the CPU remains in the current mode and downloading is canceled.)
5. An alarm informs you that you must not leave the web page during the "restore procedure". Acknowledge the alarm output by clicking "OK".
The restoration of the CPU configuration starts and you will be continuously informed of the current status:
"Download of online backup has been started."
"Checking backup file."
"Formatting memory card and resetting CPU."
6. If you have started the restoration procedure with a user name and password defined in the Web server configuration, you will be asked to enter these again after restoration of the CPU. Enter the required information and click "Login".
If you have started the restoration procedure as the user "Everybody" without a password (but with appropriate access rights), this prompt is not displayed.
Note
To restore the configuration of an F-CPU whose security program and/or password has been changed for the F-CPU in the meantime, you also need the access authorization "Perform changes as F-Admin"; see "Amending user management" in the section Configuring the Web server (Page 19).
WARNING
The authorization "Perform changes as F-Admin" on the web server without password protection (user "Everyone") is only for test purposes, commissioning, etc. i.e. only when the system is in productive operation. In this case, you have to ensure the security of the plant through other organizational measures, e.g. through spatial protection.
Before the transition to productive operation, you must remove the right "Perform changes as F-Admin" from the user "Everybody".
The password of the user of the web server with the right "Perform changes as FAdmin" must only be accessible to authorized persons.
Web server
90
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.12 Online backup
The restoration of the CPU configuration starts and you will be continuously informed of the current status: "Loading configuration." "Resetting CPU." This may take a few minutes. 7. When the procedure is complete, you will be logged out and the "Reload page..." button will be displayed. If you did not receive an error message during the restoration procedure, the restoration of the CPU configuration was successfully completed and you will receive a corresponding message. Click the "Reload page..." button and log on to the newly downloaded CPU configuration with your user name and password.
You will receive the following error message if: the newly downloaded CPU configuration does not contain the same IP address as
the former one the Web server is deactivated in the newly downloaded CPU configuration the browser does not receive a response from the CPU after 3 minutes Error message: "The CPU is not reachable anymore. Please check the IP address and the Web server configuration. The result of the restore can be checked in the ASLog."
Web server
Function Manual, 11/2019, A5E03484625-AG
91
Web pages 3.13 Record
3.13
Record
Trace and logic analyzer function
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU.
The recordings are saved on the device and can be read out by users with appropriate access rights via the Web server and saved. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes in the Web server.
Requirements
A trace configuration has been created, i.e. you have defined the recording and trigger conditions and selected the signals to be recorded.
Note: You can only display measurements stored on the SIMATIC memory card on the "Record" web page.
In order for the CPU to save the measurements on the SIMATIC memory card, you must make the following settings in the trace configuration in STEP 7:
1. Set the "Trigger mode" to "Trigger on tag".
2. Select the "Save measurements on device (memory card)" check box.
You have transferred the trace configuration to the device and activated it there.
You have been assigned the access right "The user is authorized to..." > "...query diagnostics" in the user administration of the Web server; see section Configuring the Web server (Page 19).
Web server
92
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.13 Record
Space requirements for storing trace recordings
The "Save measurements on device (memory card)" function in STEP 7 saves Trace recordings on your SIMATIC memory card.
Response when number reached The "Deactivate recording" parameter repeats the measurements until the configured "Number of measurements" is reached. The "Overwrite oldest recording" parameter replaces the oldest measurement with the latest measurement when the configured "Number of measurements" is reached. Please note, however, that continuously writing data to the SIMATIC memory card shortens its service life.
Figure 3-50 Dialog of the settings for saving measurements to the memory card in STEP 7
Number of measurements The CPU supports a maximum of 999 measurements. While the CPU writes the trace recordings to the load memory of the memory card, it pauses monitoring of the trigger conditions for the trace job. After the CPU has terminated the storing of Trace recordings, the CPU continues checking of the trigger conditions.
NOTICE Memory required on the SIMATIC memory card When the trace function "Measurements on device (memory card)" requires more memory than is available on the SIMATIC memory card, undesired effects may result. Ensure there is always sufficient free storage space to use the "Measurements on device (memory card)" function. In addition to the "Measurements on device (memory card)" Trace function, other functions, such as storing data logs, use memory space on the SIMATIC memory card. Make sure that enough memory space is available for all functions that occupy memory.
You can view the current values on the currently used space in the load memory in the "Memory" tab on the "Diagnostics" web page.
Web server
Function Manual, 11/2019, A5E03484625-AG
93
Web pages 3.13 Record
Additional information
The user interface of the "Trace" website is largely the same as that of the trace function in STEP 7. See the Using the trace and logic analyzer function manual (https://support.industry.siemens.com/cs/ww/en/view/64897128) and the online help for STEP 7 for more on this.
Displaying the trace recordings
The web page of the trace and logic analyzer function consists of several areas. The example in the figure below shows how the Web server user interface is divided when the "Trace" web page is first called.
Trace recordings
Toolbar of the trend diagram
Trend diagram and bit track
Signal tables
Figure 3-51 Trace start page without measurement
Web server
94
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.13 Record
Opening measurements
To open a measurement, right-click on a measurement to select it from the "Trace recordings" area. Then select the command "Show in chart" in the shortcut menu. The measurement is displayed in the "Curve diagram and bit track" area.
Figure 3-52 Displaying an individual measurement
To display multiple measurement at once, right-click on a measurement to select it from the "Trace recordings" area. Then select the command "Add to table" in the shortcut menu. The measurements are displayed in the "Curve diagram and bit track" area.
Figure 3-53 Displaying several measurements
Web server
Function Manual, 11/2019, A5E03484625-AG
95
Web pages 3.13 Record
Trace recordings
The "Trace recordings" area shows a list of all existing measurements, sorted by date and time of the trace recordings. A measurement always consists of a trace configuration with an associated recording.
The following table shows the special Web server shortcut menu commands in the Trace recordings area:
Table 3- 7 Web server shortcut menu commands in the trace recordings area
Shortcut menu command "Delete"
"Save as" "Show in chart" "Add in table"
Description Deletes the selected measurement on the memory card of the CPU. A confirmation dialog opens. After deletion, the display in the trend diagram is not automatically overwritten. Saves the selected measurement. Loads the selected measurement to the display area of the Web server. Inserts the selected measurement into the table in the "Measurements" tab.
Some data types offer the display of individual bit tracks. Enable the individual bit tracks of the signal opened in the signal table using the icon.
You can adjust the display of the signals in the signal table and with the toolbar of the curve diagram.
Figure 3-54 Trace measurement - All areas visible
Web server
96
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.13 Record
Toolbar of the trend diagram
As in STEP 7, the buttons on the function bar of the trend diagram provide you with tools for adjusting the display.
The following table shows the Web server buttons in the trend diagram toolbar:
Table 3- 8 Symbol
Buttons of the trend diagram toolbar
Function Open / add measurement
Save as
Undo move / zoom
Repeat move / zoom Snapshot Move view Zoom selection Vertical zoom selection Horizontal zoom selection Zoom in
Zoom out
Scaling Restore standard view
Display all Scale X automatically Scale Y automatically
Description
Opens measurements or adds measurement to an existing measurement.
Saves measurement(s) as a file with the extension .csv, .wtrc (SIMOTION format for saving Trace data) or .ttrecx (TIA Portal format for saving Trace data).
In addition to the measured data the command also saves the diagram, snapshots, marking and calculated signals.
Undoes the move / zoom function executed last. If you have carried out several move / zoom functions, you can undo these stepby-step.
Redoes the last undone move / zoom function. If you have undone several move / zoom functions, you can redo these step-by-step.
Saves the current view as a snapshot (see the section "Settings and displays of the Snapshot symbol").
Moves the display with a pressed mouse button - corresponds to the button in STEP 7.
Selection of an arbitrary range with the mouse button pressed. The button scales the display to the range selection.
Selection of a vertical range with the mouse button pressed. The button scales the display to the range selection.
Selection of a horizontal range with the mouse button pressed. The button scales the display to the range selection.
Enlargement of the display. The ranges of the X axis and Y axis are reduced every time the button is clicked. The curves are displayed larger.
Reduction of the display. The ranges of the X axis and Y axis are reduced every time the button is clicked. The curves are displayed smaller.
Scales all the signals or also only signal / signal group vertically and horizontally.
The button undoes scaling and move commands. The view is reset to the status at the time of loading of the measurement. Hidden signals are also reset but remain disabled.
The button moves all the signals completely into the display area without changing the relative positions of the signals to each other.
Automatic scaling of all visible signals on the horizontal X area.
Automatic scaling of all visible signals on the vertical Y area.
Web server
Function Manual, 11/2019, A5E03484625-AG
97
Web pages 3.13 Record
Symbol / /
Function Arrange in tracks
Unit switching of the time axis
Description Activate or deactivate the trace arrangement. When the trace arrangement is activated the signals are arranged among themselves with the relevant value axes. Signal groups are displayed in the same trace. This setting does not affect the display for the bit tracks. Switching the unit of the time axis You can enter the following information:
· Measuring points · Time (relative time related to the trigger time)
· Trigger stamp of the measurement points
Display measurement points
The button displays the measurement point as small circles on the curves.
Interpolation on/off
The buttons activate / deactivate the interpolation of the data of the trend diagram.
Grid
The button activates / deactivates the grid of the trend diagram
and regulates its brightness in the Levels 1 to 9.
Vertical measurement cursor
Display of vertical measurement cursor.
The vertical position of the two measurement cursors can be moved with the mouse.
The values of the signals and the difference between two measuring points are displayed in the signal table for all displayed signals and also in the trend diagram for the selected signal.
The measuring point or the relative/absolute time to the measurement cursors is displayed depending on the set unit of the time axis (X axis) in the movable pop-up window "Measuring points/Time values".
Horizontal measurement cursor
Display of the horizontal measurement cursors.
The horizontal position of the two measurement cursors can be moved with the mouse.
The Y values of the measurement cursor for the selected signal are displayed in the movable pop-up window "Y values".
Difference of the measurement cursor Display of the difference of the horizontal and vertical measurement cursors and the Y values at the intersections with the vertical measurement cursors.
Show legend
Showing or hiding of the legend in the curve diagram and the bit track labels.
Align the chart legend to the left
Display of the legend and the bit track labels on the left side of the curve diagram.
Align the chart legend to the right
Display of the legend and the bit track labels on the right side of the curve diagram.
Change background color
Changeover between various background colors.
Identification
The following table provides an overview of marked signal areas.
Note that selections are possible only for analog and real signals (no calculated signals).
All icons in the toolbar are equipped with tooltips.
Web server
98
Function Manual, 11/2019, A5E03484625-AG
Web pages 3.13 Record
Trend diagram
The trend diagram displays the selected signals of a recording. Bits are shown in the lower diagram as a bit track.
Trace recordings (minimized)
Toolbar of the trend diagram
Trend diagram and bit track
Signal table (minimized)
Figure 3-55 Trace measurement - only trend diagram visible
The following table shows the special Web server shortcut menu commands of a selected signal in the trend diagram:
Table 3- 9 Web server shortcut menu commands in the trend diagram area
Shortcut menu command "Scale Y automatically" "Hide signal"
Description Automatic scaling of the selected signal in Y direction. Hides the selected signal in the trend diagram.
Web server
Function Manual, 11/2019, A5E03484625-AG
99
Web pages 3.13 Record
Use of the trend diagram You can zoom the display area as you like. Measurement cursors (see " Toolbar of the
trend diagram") can be used to select individual values for display in the signal table. The following image shows how you can change the display area of the trend diagram as required with rulers and scroll bars.
Vertical ruler
Vertical scroll bar
Horizontal ruler
Horizontal scroll bar
Figure 3-56 Trace measurement - rulers and scroll bars
Using the vertical ruler
If you click the vertical ruler at the top or the bottom, you increase the size of the display at the top or bottom.
If you click the vertical ruler at the top or the bottom while keeping the shift key pressed, you scale both ends.
If you click the vertical ruler at the top or the bottom while keeping the Ctrl key pressed, you move the display up or down.
Using the horizontal ruler
If you click the horizontal ruler on the left or the right, you increase the size of the display on the left or right.
If you click the horizontal ruler on the left or right while keeping the shift key pressed, you scale both ends.
If you click the horizontal ruler on the left or the right while keeping the Ctrl key pressed, you move the display to the left or right.
100
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.13 Record
Using the mouse wheel
If you activate the mouse wheel in the display, you move the display up or down.
If you activate the mouse wheel in the display while keeping the shift key pressed, you move the display to the left or right.
If you activate the mouse wheel in the display while keeping the Ctrl key pressed, you increase/reduce the size of the display at the position of the mouse pointer.
Signal tables
The signal tables list the signals of the selected measurement and provides setting options for some properties. The area of the signal tables is divided into the tabs "Measurements", "Signals" and "Calculated signal".
Settings and displays in the "Signals" tab
The following figure shows the signal table of the "Signals" tab.
Figure 3-57 Display in the "Signals" tab
The following table shows the settings and displays of the recorded signals of the "Signals" tab:
Column
Signal or error symbol
Description Signal symbol
Symbol for calculated signals (formulas)
Signal number Name
Selection for the display in the trend diagram
The point indicates that at least one bit has been selected for display as bit track for the signal in the bit selection. Automatically generated number of the signal The signal can be accessed via the signal number in the formulas. Display of the signal name A click on the name of a displayed signal updates the scale in the trend diagram.
Web server Function Manual, 11/2019, A5E03484625-AG
101
Web pages 3.13 Record
Column
Description Open bit selection Individual bits can also be selected for the following data types for display as a bit track in the lower curve diagram:
· Byte, Word, DWord, LWord · SInt, USInt, Int, UInt, DInt, UDInt, LInt, ULInt Example of an opened bit selection for the DWORD data type:
Data type Address
Color Signal group
Gray field for the chain icon of the signal group
Input field of the signal group Min. Y-scale Max. Y-scale Comment Y(t1) Y(t2) Y
Select or deselect the relevant bit for display by clicking the icon. Display of the data type Display of the address of the signal The field remains empty with optimized / type correct tags. Display and setting option for the color of the signal Display or input of the signal group name for one signal group The Y-scales are scaled identically for all signals of one signal group. Enter an identical signal group name for those signals that you want to scale identically. To remove signals from a signal group:
· Delete the signal group name. · Click the empty entry in the shortcut menu of the signal group Note that you cannot group binary signals. To add or delete the signal from a signal group, move the mouse pointer over the grey field or the chain icon ( or ), Clicking the chain icon adds the signal to a signal group or creates a new signal group. Clicking the chain icon removes the signal from the signal group. For a selected signal with signal group, the chain icon displays all signals of the same signal group. The input field displays the signal group name. As an alternative to the chain icon, you can assign or delete a group name via text input in this field. Display or input of the minimum value for the scaling of the signal Display or input of the maximum value for the scaling of the signal Display and input option for a comment about the signal Display of the value at the position of the first measuring cursor Display of the value at the position of the second measuring cursor Display of the value difference between the first and the second measuring cursor
102
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.13 Record
The following table shows the possible Web server shortcut menu commands of the "Signals" tab:
Table 3- 10 Web server shortcut menu commands of the "Signals" tab
Shortcut menu command "Scale Y automatically" "Show signal" "Hide signal" "Show all bits" "Hide all bits" "Use for determined signal" "Process calculated signal" "Delete calculated signal"
Description Automatic scaling of the selected signal in Y direction. Shows the signal in the trend diagram Hides the signal in the trend diagram Shows all the bits of a signal Hides all the bits of a signal Calculates a new signal based on the selected real signal Switches the selected calculated signal to the editing mode. Deletes the selected calculated signal
Settings and displays in the "Measurements" tab
The following figure shows the display of the "Measurements" tab and the shortcut menu of the "Alignment" column of a selected measurement.
Figure 3-58 Tab "Measurements" with shortcut menu
Web server Function Manual, 11/2019, A5E03484625-AG
103
Web pages 3.13 Record
The following table shows the settings and displays for the measurements:
Column
Description
Alignment of the measurements
Trigger/Sample
Alignment of the measurements in accordance with the trigger or measurement point.
The individual zero point for the measurement is predefined in the table under the "Alignment" column.
Time stamp (absolute time) Alignment of the measurements in accordance with their time stamp.
The signals are aligned in accordance with the time from the absolute time stamp.
Table columns
Static display of the measurement icon
Name Alignment
Offset
Time stamp Comment Shortcut menu commands "Save as WTRC" "Save as CSV" "Edit name" "Edit offset" "Edit comment" "Delete measurement"
Display and change options for the name Note that the name must be unique. Alignment of the measurement (only adjustable with the "Trigger/Sample" check box selected). Determines the individual zero point for a measurement. All signals for the measurement are displayed in relation to this zero point. The following settings are possible:
· Trigger · First sample after the trigger event · First sample · Last sampling
Offset related to the time axis Moves the measurement left or right by the offset stated on the time axis. If you enter solely a numerical value without a unit of measurement, the system automatically assigns the unit "ms" (for example 0=0ms, 100=100ms, 1000=1s, -1001=-1s 1ms , LT#2000ms=2s, LT#-3605000ms=-1h 5s , LT#-1h5s=-1h 5s ) Display of the trigger time Display and input option for a comment about the signal
Saves the measurement(s) as a file with the extension .csv, .wtrc (SIMOTION format for saving Trace data) or .ttrecx (TIA Portal format for saving Trace data). Exports a measurement as a file with the file extension .´csv. Note that the command only saves the measured data. The command does not save the diagram, snapshots, markings and calculated signals. Switches the name in editing mode Switches the offset in editing mode Switches the comment in editing mode Deletes the measurement
104
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.13 Record
Settings and displays in the "Calculated signal" tab
You can use this function to calculate new signals based on real signals. The system calculates the Y-values of the signal points in the process. To parameterize the signals to be calculated, open the "Calculated signal" tab. In the "General" section specify the name, the data type and color of a signal to be calculated. Note that the name of the signal to be calculated must differ from the name of a real signal.
Figure 3-59 "General" section of the "Calculated signal" tab Add the basic signals in the "Basic signals" section. The basic signals form the basis for calculating the new signal. You can change the default name of the variable in the "Name" column. You select real signals for the specification of the number of signal points to be calculated in the "Signal" column.
Figure 3-60 "Basic signals" section of the "Calculated signal" tab
Enter the code for the calculation of the Y values of the signal points in the "Calculated signal value" section. The section is divided into: Basic mode (expression) Advanced mode (JavaScript) Use the JavaScript syntax to enter the code for both modes. Take into account, however, that not the full JavaScript functionality is supported.
Web server Function Manual, 11/2019, A5E03484625-AG
105
Web pages 3.13 Record
Basic mode (expression) In this mode you use the following to create your code: Standardized JavaScript expressions and operators (for example +, -, /, *, %, ~, &, |, ?, !) Standardized math libraries The tag names specified under "Basic signals"
(the system writes the Y-value directly to the tag name)
Figure 3-61 Basic mode (expression)
106
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.13 Record
Advanced mode (JavaScript) This mode offers you an advanced functional scope for the calculation of the Y value by means of a complex JavaScript code. You can, for example, specify own static tags for the iteration of code sections:
Figure 3-62 Advanced mode (JavaScript) The following table shows all the elements that you can use for your code:
if encodeURI
Infinity Object return switch
% !== ^ & &=
( ,
/*
var in decodeURI continue Number default
+ === ~ ?
) :
*/
Reserved words (case-sensitive)
Math
Array
catch
for
else
break
do
Date
case
parseFloat
new
case
parseInt
try
null
undefined
Operators
*=
!=
<=
--
/
>
++
-=
/=
+=
*
!
Delimiters
{
}
[
;
Comments
typeof escape
false true isNaN
|= = >= <
]
unescape delete String while throw
&& || == |
.
Web server Function Manual, 11/2019, A5E03484625-AG
107
Web pages 3.13 Record
Every signal point consists of the following attributes: 1. x (measuring point) 2. t (relative ^time in milliseconds) 3. y (Y value) 4. points (number of signal points that are available for the calculation of a new signal) In "Advanced Mode (JavaScript)" you can access all four attributes (e.g. "$1.y", "$1.t", "$1.x", $1.points[i].y, ...). The following function tables support you in writing expressions or complex code in JavaScript. The function table contains the functions used most often:
Figure 3-63 "Calculated signal" tab with function table
108
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.13 Record You also have the possibility to generate the JavaScript code of a real signal from the "Signals" tab. Alternatively you can also select one of predefined templates of the function table, change the code and generate a calculated signal.
Figure 3-64 Real signals of the "Signals" tab The following templates are available in the function table: Numerical differentiation Numerical integration Arithmetic mean
Figure 3-65 Templates
To check the syntax, click the symbol "Check syntax" or generate the signal by clicking the icon in the toolbar. If the code has any errors, these are displayed to the right of the
"Check syntax" icon in red lettering. If the code does not have any errors, the "Syntax check successful" message is displayed.
Web server Function Manual, 11/2019, A5E03484625-AG
109
Web pages 3.13 Record
How does the system calculate a new signal? The system checks: Whether you have selected a basic signal for the calculation of a new signal The name of the signal to be calculated The syntax of your JavaScript code Subsequently the system defines the counting of the measuring points and executes the code for each measuring point to be calculated. In each iteration the system stores the measuring points of the new signal on the basis of the following four attributes: Measuring point Relative time Calculated Y value Signal point with x-, t, y-values The course is displayed after calculation has been completed.
Example for calculating on the basis of a basic signal You use a single basic signal to calculate the new signal. The basic signal consists of 1000 measuring points. In this case the system carries out your written code a thousand times. The calculated signal then consists of 1000 calculated signal points with the same x- and t-values, but with own yvalues.
Import/export settings You can import/export certain parameters (formulas, calculation method, signal type and signal name. To import parameters, click the icon in the toolbar of the "Calculated signal" tab. To export parameters, click the icon in the toolbar of the "Calculated signal" tab.
110
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.13 Record
Settings and displays of the Snapshot icon
With the "Snapshot" icon in the toolbar of the trend diagram you save the current signal course in the form of a snapshot.
To create a snapshot of the signal course click the
icon. To manage the created
snapshots, click the arrow on the left next to the "Snapshot" icon and select the entry
"Manage snapshots".
Figure 3-66 Managing snapshots The following table shows the settings and displays of the "Managing snapshots" window.
Column
Name Time stamp Comment
Description Static display of the snapshot icon
Display and change options for the name Display of the creation time of the snapshot Display and input option for a comment The following table shows the possible shortcut menu commands:
Shortcut menu command "Restore snapshot" "Remove snapshot" "Edit name" "Edit comment"
Description Shows the measurement with the saved view in the "Diagram" tab. Deletes the snapshot. Switches the name in editing mode Switches the comment in editing mode
Note Delete measurement
If you delete a measurement of a calculated signal, all the associated snapshots are also deleted.
Web server Function Manual, 11/2019, A5E03484625-AG
111
Web pages 3.14 DataLogs
3.14
DataLogs
DataLogs
On the DataLogs web page, you can view all the DataLogs that you have created.
You can sort the DataLogs according to individual parameters in ascending or descending order. For this purpose, click on one of the parameters in the column header:
Name
Size
Changed
You can download the relevant DataLog file by clicking the file name.
The "Active" column shows whether the respective DataLog file is used (is active) or not.
When the DataLog file is active, you can call (download) and empty the relevant DataLog file by clicking the icon . The file must be closed. The empty DataLog file is still maintained in the list of DataLogs.
You delete the DataLog file by clicking the icon in the "Delete" column. The file must be closed.
You close an opened DataLog file in STEP 7 by using the "DataLogClose" instruction.
Figure 3-67 DataLogs
112
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.14 DataLogs
3.14.1
Automated reading out of DataLogs
In addition to the downloading of individual DataLogs via the user interface of the Web server, you can download, read out and archive DataLogs. Automatic downloading of DataLogs is realized either by the execution of scripts in, for example, Bash or on your HTML user page via JavaScript.
A typical application for this functionality is the daily reading out and archiving of DataLogs from one or more CPUs at a specific time.
Calling up of the DataLogs from the SIMATIC memory card
The CPU makes a URL in the following format available so that you can download DataLogs automatically from the SIMATIC memory card of your CPU: http[s]://[ip]/DataLogs?Action=List
Enter the correct IP address of the interface of your CPU at this URL and use the appropriate transfer protocol (HTTP or HTTPS), for example https://192.168.2.132/DataLogs?Action=LIST. Subsequently call up the URL in your browser or command line interpreter.
The URL returns a list of the DataLogs on the SIMATIC memory card. Each entry returns the URL by which you download the corresponding DataLog.
For simple syntax analysis of the list by command line interpreters (such as Bash) or webbased programming languages (such as JavaScript) the individual URLs are separated by a line break <CR><LF>. The following example shows the syntax of two URLs that access the DataLog files Test.txt and Test2.txt:
/DataLogs?Path=/DataLogs/Test.txt&Action=DOWNLOAD&E=1<CR><LF>
/DataLogs?Path=/DataLogs/Test2.txt&Action=DOWNLOAD&E=1<CR><LF>
<CR><LF>
When the URLs are called successfully, the CPU returns the status code 200 OK. The CPU also returns this status code if no DataLogs exist on the SIMATIC memory card.
Note Access authorization to the CPU for the reading out of data
In order to download DataLogs from the CPU, the user has to dispose of reading rights on the CPU. If the user does not have the required rights, the CPU returns the status code 403 FORBIDDEN in the HTTP Response.
Downloading of the DataLogs via Bash scripts
The following example shows how you can download DataLogs automatically from the CPU by using a Bash script. Replace the URL of the example by the correct IP address of the interface of your CPU at this URL and use the appropriate transfer protocol (HTTP or HTTPS). wget --content-disposition -i "http://192.168.2.132/DataLogs?Action=LIST"
Web server Function Manual, 11/2019, A5E03484625-AG
113
Web pages 3.14 DataLogs
Downloading of the DataLogs via JavaScript
The following example shows how you can download DataLogs automatically by using JavaScript. Replace the URL of the example by the correct IP address of the interface of your CPU at this URL and use the appropriate transfer protocol (HTTP or HTTPS). <html>
<head> <title>DataLog JavaScript Test</title> <script type="text/javascript" src="jquery-
1.12.4.min.js"></script> </head> <body> <h1>DataLog JavaScript Test</h1> <div><button id="load">Load DataLogs</button></div> <div><ul id="list"></ul></div> <script type="text/javascript"> $('#load').click(function(){ $.get('http://192.168.2.132/DataLogs', {'Action': 'LIST'}, function(data){ $('#list').empty(); $.each(data.split(/\r\n/), function(){ if (this.length == 0) continue; $('#list').append('<li><a href="http://192.168.2.132' + this + '">' + this + '</a></li>'); }); }); }); </script> </body>
</html>
114
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.15 User files
3.15
User files
Introduction
You read and write with the instructions "FileReadC" (Compact Read Data of a File) or "FileWriteC" (Compact Write Data to a File) in STEP 7 ASCII files (files in binary format).
Requirements
You need to save the UserFiles in the "UserFiles" directory on the SIMATIC memory card. You specify the storage location in the path of the "FileReadC" or "FileWriteC" instruction. Path and file name for UserFiles have to fulfill the following rules: The file name must not be longer than 55 characters. The following characters are permitted for the directory and file name: 0 to 9, a to z in
upper- and lower-case, "-" and "_" The path name must not start with "/", "\" or "." The path name must not contain ".." Examples: UserFiles\Lift16_DataBase.txt UserFiles\2017-04-13_ErrorLog.bin
Web server Function Manual, 11/2019, A5E03484625-AG
115
Web pages 3.15 User files
"User files" Web page
The browser displays the content of the SIMATIC memory card, directory UserFiles\ on the "User files" Web page. You can sort the UserFiles according to the individual parameters in ascending or descending order. To do this, click on one of the parameters in the column header: Name Size Changed You can download, delete, and upload files. You download the UserFile by clicking the file name. By clicking on the icon, you can delete the UserFile. The file must be closed.
Figure 3-68 User files view
NOTICE Size UserFiles When you open a large UserFile through this Web page, the processing times of the instructions that process this file can increase notably.
116
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.15 User files
3.15.1
Automatically read or upload user files
In addition to the Web server's user interface, you can automatically list, delete, download and upload UserFiles. Use JavaScript or Bash for this, for example.
Opening UserFiles from the SIMATIC memory card
The CPU makes a URL in the following format available so that you can list UserFiles automatically from the SIMATIC memory card of your CPU: http[s]://[ip]/UserFiles?Action=List
Enter the correct IP address of the interface of your CPU at this URL and use the appropriate transfer protocol (HTTP or HTTPS), e.g. https://192.168.2.132/UserFiles?Action=LIST. Subsequently call up the URL in your browser or command line interpreter.
The URL returns a list of the UserFiles on the SIMATIC memory card. Each entry returns the URL by which you download or delete the corresponding UserFile from the CPU. The actions to be performed are separated by a vertical line "|".
For simple syntax analysis of the list by web-based programming languages (such as JavaScript), the individual URLs are separated by a line break <CR><LF>. The following example shows the syntax of two URLs that access the UserFiles File1.csv and File2.csv:
File1.csv|/UserFiles?Name=File1.csv&Action=DOWNLOAD&E=1|/UserFiles?Name=File1.csv&Acti
on=DELETE&E=1<CR><LF>
File2.csv|/UserFiles?Name=File2.csv&Action=DOWNLOAD&E=1|/UserFiles?Name=File2.csv&Acti
on=DELETE&E=1<CR><LF>
<CR><LF>
When the URLs are called successfully, the CPU returns the status code 200 OK. The CPU also returns this status code if there are no UserFiles on the SIMATIC memory card.
Note Access authorization to the CPU for the reading out of data
In order to download UserFiles from the CPU, the user must have reading rights for the CPU. If the user does not have the required rights, the CPU returns the status code 403 FORBIDDEN in the HTTP Response.
Web server Function Manual, 11/2019, A5E03484625-AG
117
Web pages 3.15 User files
Uploading UserFiles to the SIMATIC memory card
The CPU makes a URL in the following format available so that you can upload UserFiles automatically to the SIMATIC memory card of your CPU: http[s]://[ip]/UserFiles?Action=UPLOAD
The following example shows how you can upload a UserFile to your HTML user page automatically using JavaScript.
Replace the URL of the example by the correct IP address of the interface of your CPU at this URL and use the appropriate transfer protocol (HTTP or HTTPS). <html>
<head> <title>UserFiles Upload</title>
</head> <body>
<form method="POST" action="https://192.168.2.132/UserFiles?Action=UPLOAD&E=1" enctype="multipart/form-data">
<input type="file" name="File" /> <input type="submit" /> </form> </body> </html>
When the upload of the UserFile is successful, the CPU returns the status code 201 CREATED. If the UserFile already exists on the SIMATIC memory card, the CPU returns the status code 409 CONFLICT.
Note Access authorization to the CPU for uploading data
In order to download UserFiles to the CPU, the user must have write rights for the CPU. If the user does not have the required rights, the CPU returns the status code 403 FORBIDDEN in the HTTP Response.
Downloading UserFiles via Bash scripts
The following example shows how you can download UserFiles automatically from the CPU using a Bash script. Replace the URL of the example by the correct IP address of the interface of your CPU at this URL and use the appropriate transfer protocol (HTTP or HTTPS). wget --content-disposition -i "http://192.168.2.132/UserFiles?Action=LIST"
118
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.15 User files
Downloading UserFiles via JavaScript
The following example shows how you can download UserFiles automatically using JavaScript. Replace the URL of the example by the correct IP address of the interface of your CPU at this URL and use the appropriate transfer protocol (HTTP or HTTPS). <html>
<head> <title>UserFiles JavaScript Test</title> <script type="text/javascript" src="jquery-
1.11.2.min.js"></script> </head> <body> <h1>UserFiles JavaScript Test</h1> <div><button id="load">Load UserFiles</button></div> <table
border="1"><thead><th>Name</th><th>Operation</th></thead><tbody id="list"></tbody></div>
<div><form method="POST" action="http://192.168.2.132/UserFiles?Action=UPLOAD&E=1" enctype="multipart/form-data"><input type="file" name="File" /><input type="submit" /></form></div><br>
<script type="text/javascript"> function Delete(url) { $.post('http://192.168.2.132/UserFiles' + url, {}, function(){ $('#load').click(); }); } $('#load').click(function(){ $('#list').empty(); $.get('http://192.168.2.132/UserFiles', {'Action': 'LIST'},
function(data){ $.each(data.split(/\r\n/), function(){ var data = this.split("|"); if (data.length == 3)
$('#list').append('<tr><td>'+decodeURIComponent(data[0])+'</td><td>< a href="http://192.168.2.132'+data[1]+'">Download</a><br><button type="button" onclick="Delete(\''+data[2]+'\')">Delete</button></td></tr>');
}); }); }); </script> </body> </html>
Web server Function Manual, 11/2019, A5E03484625-AG
119
Web pages 3.16 User pages
3.16
User pages
User pages
In the "User pages" area of the Web server you can upload HTML pages you have created yourself for reading out data of the target system.
Figure 3-69 User pages
You create the pages with an HTML editor of your choice from which you generate data blocks (Web control DB and Fragment DBs) in STEP 7 and download them to the CPU. The "WWW" instruction synchronizes the user program with the Web server on the CPU and initializes the Web server. With the first call of the "WWW" instruction, the link to the user page is displayed on the web page of the CPU. A click on the link opens the user page in a new window.
Note
Write access to user pages allows the process parameters and, thus, the operation of the CPU to be influenced. To prevent external manipulation, always assign a password for users with write access to user pages in the user management. You will find information on user management in section Configuring the Web server (Page 19) under "Amending user management".
120
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
Requirements
You have assigned symbolic names to the tags you want to use on your web page in STEP 7 .
In the Inspector window under "Properties > General > Web server", you have at least:
Activated the Web server
Assigned read-only or read and write permissions to the users for user pages (see section Configuring the Web server (Page 19))
You have completed all necessary communication settings (IP address parameter, subnet mask, etc.).
You have downloaded the configuration.
You have created your user page in an HTML editor of your choice:
Automatic HTML pages, if you want to disable control of the page layout by means of the user program (requires at least one call of SFC 99). Changes in mode from RUN to STOP do not affect the call of the user pages.
Manual HTML pages, if you want to enable control of the page layout by means of the user program (cyclic call of SFC 99 required).
Web server Function Manual, 11/2019, A5E03484625-AG
121
Web pages 3.16 User pages
Creating user pages
You can use any HTML editor to create your own user page(s). Make sure that your HTML code complies with the standards of the W3C (World Wide Web Consortium), because STEP 7 does not check the HTML syntax in any way. In addition to the simple HTML code, you can also use JavaScript commands in your user pages.
Proceed as follows:
1. Create the HTML file for your user page with an HTML editor. To allow data from the CPU to be output on your web page, integrate the AWP commands as HTML comments (see section AWP commands (Page 124)).
2. Store the HTML file and all associated source files (e.g., *.gif, *.jpg, *.js, etc.) in a directory on your PG/PC and note the storage path.
3. Call the "WWW" instruction in STEP 7 and program it (see section Programming the WWW instruction (Page 139)).
4. Configure the user page in STEP 7 (see section Configuring user pages (Page 138)). In this way, you compile the contents of your HTML files, among other things, into data blocks.
5. Download the configuration and the user program to the CPU.
6. Open your user page with your display device by means of a web browser in the Web server of the CPU.
Note
Extensive HTML pages, especially those with a lot of images, take up a lot of space in the load memory. Make sure you select a SIMATIC memory card with enough memory to provide sufficient load memory.
If the sum of the HTML pages > 1 MB, performance losses may occur as only 1 MB data is saved in the cache.
We recommend that you create each individual file of an HTML page with a size not exceeding 512 KB; otherwise, problems can occur when sending the file from the Web server to the browser. You can view the size of the respective file in the file explorer of the directory.
122
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
Updating user pages
User pages are not updated automatically in the browser. You can program the HTML code so that the pages are updated automatically. Pages which read out data from the controller are always up-to-date due to regular updates.
Note If the HTML page contains form fields for data input, automatic update can impair the correct data input by the user.
To update the entire page automatically, you can add the following instruction to the <head> area of your HTML page, whereby the number "10" stands for the update interval in seconds: <meta http-equiv="refresh" content="10">
References
The description of a user page is available in the section Example of a user page (Page 143).
Additional help for visualization with user pages is available in the application examples on the Internet:
Creating and using your own Web pages for S7-1200 (http://support.automation.siemens.com/WW/view/en/58862931)
Creating and using your own Web pages for S7-1200 / S7-1500 (https://support.industry.siemens.com/cs/de/en/view/68011496)
Visualizing with user-defined Web pages on SIMATIC CPUs with PROFINET interface (http://support.automation.siemens.com/WW/view/en/44212999)
How do you integrate the string contents in your user-defined Web page of the S7-1500 CPU as of Firmware V1.6? (https://support.industry.siemens.com/cs/ww/en/view/98754370)
You will find more information on JavaScript commands in the ECMAScript specification on the Internet (http://www.ecma-international.org/ecma-262/5.1/).
For more information about how to automatically update web pages and how to incorporate user pages with relative path names, refer to the FAQ with entry ID 62543256 on the Service&Support (https://support.industry.siemens.com/cs/ww/en/view/62543256) Internet page.
Web server Function Manual, 11/2019, A5E03484625-AG
123
Web pages 3.16 User pages
3.16.1
AWP commands
Overview
Automation Web Programming (AWP) commands are a special command syntax for exchanging data between the CPU and the user page (HTML file). AWP commands are entered as HTML comments and offer you the following options for your user-defined pages: Reading PLC tags Writing PLC tags Reading special tags Writing special tags Defining enum types Assigning enum types to tags Defining data block fragments Importing data block fragments Accessing the values of an array Accessing the values of a PLC tag of the data type STRUCT
General syntax
All AWP commands, except for the command for reading a PLC tag, have this structure: <!-- AWP_< command name and parameter> -->
Files including AWP commands: must be UTF-8 encoded.
To define UTF-8 as the character set of the page, include the following line in your HTML code:
<meta http-equiv="content-type" content="text/html; charset utf-8">
Note Saving the HTML page Make sure that you save the file in the editor in UTF 8 character encoding as well.
may not include the following sequence: ]]> may not include the following sequence outside "read tag areas" (:="<Varname>":): depending on the use, must identify special characters in tag names or data block names
with character escape sequences or quotation marks are case-sensitive should be additionally enclosed by JavaScript comments ("/*...*/") in JavaScript files
124
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
Overview of AWP commands
Table 3- 11 AWP commands
Function Reading PLC tags Writing PLC tags Reading special tags Writing special tags Defining enum types
Assigning enum types to tags
Defining data block fragments
Importing data block fragments Accessing the values of an array
Accessing the values of a PLC tag of the data type STRUCT
Representation :=<Varname>:
<!-- AWP_In_Variable Name='<Varname1>' -->
<!-- AWP_Out_Variable Name='<Typ>:<Name>' -->
<!-- AWP_In_Variable Name='<Typ>:<Name>' -->
<!-- AWP_Enum_Def Name='<Name Enum-Typ>' Values='0: "<Text_1>",1:"<Text_2>",...,x:"<Text_y>"' --> <!-- AWP_Enum_Ref Name='<Varname>' Enum='<Name Enum-Typ>' --> <!-- AWP_Start_Fragment Name='<Name>'[Type=<Typ>] [ID=<Id>] --> <!-- AWP_Import_Fragment Name='<Name>' -->
<!-- AWP_Start_Array Name='"<DB name>".<array name>' --> ... <!-- AWP_End_Array --> <!-- AWP_Start_Struct Name='"<DB name>".<struct name>' -> ... <!-- AWP_End_Struct -->
3.16.1.1
PLC tags
Introduction to PLC tags
User pages can read PLC tags from the CPU and write data to the CPU.
To do so, PLC tags must:
be enclosed by double quotation marks ("...").
also be enclosed by single quotation marks ('" ... "') or with quotation marks masked with a backslash ("\" ... "\").
be specified by a PLC tag name.
if the PLC tag name includes the characters \ (backslash) or ', identify these characters with the escape sequence \\ or \' as normal characters of the PLC tag name.
be enclosed with single quotation marks ('...'), if an absolute address (input, output, bit memory) is used in the AWP command.
Web server Function Manual, 11/2019, A5E03484625-AG
125
Web pages 3.16 User pages
Reading PLC tags
These out-tags (output direction as seen from the controller) are inserted at any place in the HTML text with the syntax described below.
Syntax :=<Varname>:
<Varname> corresponds to the tag to be read from your STEP 7 project and can be a simple shared tag or a complete tag path to a structural element. Make sure that you use the name of the data block and not its number when you use data blocks.
Examples
:="Conveying speed": :="My_datablock".bitmemory1: :=%MW100:
Reading tags of the String and Character type
Below, these types of quotation marks are used in the explanation: single quotation marks ('), double quotation marks (").
As of firmware V1.6, with the "Read PLC tags" function, the CPU outputs tags of the String or Character type enclosed in single quotation marks to the browser. For example:
"Varname".MyString = ABC string tag
You read the tag in HTML using the function :="Varname".MyString:
The Web server outputs the character string 'ABC' to the browser
126
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
Using String or Character tags in expressions
On your HTML page, you use an expression in which the character string for reading a tag is enclosed in quotation marks, for example in forms. Possible HTML code used: <input type="text" name="appfield" value="myvalue"> If you read the displayed value for the "value" attribute from a PLC tag in this expression, the HTML code appears as follows: <input type="text" name="appfield" value=":="Varname".MyString:"> By reading the PLC tag, the Web server outputs the value 'ABC'. In HTML, the code is then represented as follows: <input type="text" name="appfield" value=" 'ABC' "> If you have used single quotes instead of double quotes in your HTML code to enclose the attributes, the web server passes on the content of the tag enclosed in two single quotes to the browser. As a result of this, the browser does not output the content of the String or Character tag, since two consecutive single quotation marks each form a closed sequence. The values to be read are located between these sequences and are not output by the browser. In this context, note in particular that the character string with double quotation marks is not identical to two single quotation marks even if they appear to be identical.
Note The code is not adapted automatically during an update to firmware as of V1.6. Adapt your HTML code if you have used single quotation marks to enclose attributes for the "Read PLC tags" function.
Figure 3-70 Example of HTML code with attribute in single quotation marks
Web server Function Manual, 11/2019, A5E03484625-AG
127
Web pages 3.16 User pages
Writing PLC tags
These in-tags (input direction as seen from the controller) are set on the browser page. This can take place in a form on your HTML page, for example, with text input or list selection boxes that correspond to the tags that can be written. The tags are either set in the HTTP header (by cookie or POST method) or in the URL (GET method) by the browser in the HTTP request and are then written by the web server into the respective PLC tag.
Note Write access during operation In order for data to be written to the CPU from a user page, a user with corresponding write rights must be set up and the user must be logged in as this user. This applies to all write accesses of web pages to the CPU.
Syntax <!-- AWP_In_Variable Name='"<Varname1>"' Name='"<Varname2>"' Name='"<Varname3>"' -->
If the name of the tag that you are using for the web application is not identical with the name of the PLC tag, you can assign it to a PLC tag with the "Use" parameter. <!-- AWP_In_Variable Name='<Varname_Webapp>' Use='<PLC_Varname>' -->
Examples with HTML input fields
<!-- AWP_In_Variable Name='"Target_Level"' --> <form method="post"> <p>Input Target Level: <input name='"Target_Level"' type="text"><input type="submit" value="Write to PLC"> </p> </form>
<!-- AWP_In_Variable Name='"Data_block_1".Braking' --> <form method="post"> <p>Braking: <input name='"Data_block_1".Braking' type="text"> <input type="submit" value="Write to PLC"></p> </form>
Example with HTML selection list
<!-- AWP_In_Variable Name='"Data_block_1".ManualOverrideEnable' --> <form method="post"> <select name='"Data_block_1".ManualOverrideEnable'> <option value=1>Yes</option> <option value=0>No</option> </select><input type="submit" value="submit setting"> </form>
128
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
3.16.1.2
Special tags
Special tags
The special tags are mainly the so-called HTTP tags that are defined in the definitions of the World Wide Web Consortium (W3C). Special tags are also used for cookies and server tags.
Reading special tags
The web server can read PLC tags and pass them to special tags in the HTTP response header. You can, for example, read out a path name from a PLC tag to redirect the URL to another storage location with the special tag "HEADER:Storage location".
Syntax <!-- AWP_Out_Varible Name='<Type>:<Name>' Use='<Varname>' -->
<Type> corresponds to the type of the special tag. Options are: HEADER COOKIE_VALUE COOKIE_EXPIRES <Name> corresponds to the name of the HEADER tag or the cookie: HEADER tags:
Status: HTTP status code (if no other value is set, status code 302 is returned). Location: Path for redirection to another page. Status code 302 must be set. Retry-After: Time for which the service is most likely not available. Status code 503
must be set. COOKIE_VALUE:name: Value of the named cookies. COOKIE_EXPIRES:name: Delay time of the named cookie in seconds.
Examples
The HTTP HEADER tag is written to the PLC tag of the same name: <!-- AWP_Out_Variable Name='"HEADER:Status"' -->
If the name of the special tag is not identical with the name of the PLC tag, you can assign it to a PLC tag with the "Use" parameter: <!-- AWP_Out_Variable Name='"HEADER:Status"' Use='"Status"' -->
Web server Function Manual, 11/2019, A5E03484625-AG
129
Web pages 3.16 User pages
Writing special tags
The web server allows you to write values of special tags written in the HTTP header to the CPU. In STEP 7, for example, you can store information on the cookie of a user page or on the user who accesses a page.
Syntax <!-- AWP_In_Variable Name='<Type>:<Name>' Use='Varname' -->
<Type> corresponds to the type of the special tag. Options are: HEADER SERVER COOKIE_VALUE <Name> corresponds to the name of the HEADER tag or the cookie: HEADER tags:
Accept-Language: Accepted or preferred language User-Agent: Browser information Authorization: Credentials for a requested resource SERVER tags: current_user_id: Indicates whether a user is logged in:
current_user_id=0: No user is logged on / user "Everybody" has access. current_user_id=1: At least one user is logged on. current_user_name: User name of the logged-on user COOKIE_VALUE:name: Value of the named cookies.
Examples
The HTTP SERVER tag is written to the PLC tag of the same name: <!-- AWP_In_Variable Name='"SERVER:current_user_id"' -->
The HTTP SERVER tag is written to the PLC tag "My_User ID": <!-- AWP_In_Variable Name='"SERVER:current_user_id"' Use='"My_UserID"' -->
130
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
3.16.1.3
Enum types
Enumeration types (enum types)
Enum types convert numerical values from the PLC program into texts or vice versa. The numerical values may also be assigned for use with several languages.
Define enum types
You can define enum types in your user pages and assign the values in an AWP command.
Syntax <!-- AWP_Enum_Def Name='<Name Enum-Typ>' Values='0:"<Text_1>", 1:"<Text_2>",...,x:"<Text_y>"' -->
Examples
To store German values as HTML file in the "de" folder of the HTML directory: <!-- AWP_Enum_Def Name="Enum1" Values='0:"an", 1:"aus", 2:"Störung"' -->
To store English values as HTML file in the "en" folder of the HTML directory: <!-- AWP_Enum_Def Name="Enum1" Values='0:"on", 1:"off", 2:"error"' ->
Assigning enum types to tags
The assignment of tags from the user program to the individual enum types takes place by means of a separate AWP command. The used tag can be used at a different location of the user pages in a read operation or in a write operation.
During a read operation, the web server replaces the value read from the CPU with the correspondingly defined enum text value. During a write operation, the web server replaces the defined enum text value with the corresponding integer value of the enumeration before the value is written to the CPU.
Syntax <!-- AWP_Enum_Ref Name='<Varname>' Enum="<Enum-Type>" -->
<Varname> is the symbolic tag name from the user program, <Enum-Type> of the previously defined name of the enum type.
Example for a declaration
<!-- AWP_Enum_Ref Name='"Alarm"' Enum="AlarmEnum" -->
Web server Function Manual, 11/2019, A5E03484625-AG
131
Web pages 3.16 User pages
Example of how to use when reading a tag
<!-- AWP_Enum_Def Name='AlarmEnum' Values='0:"No Alarm", 1:"Vessel is full", 2:"Vessel is empty"' --> <!-- AWP_Enum_Ref Name='"Alarm"' Enum="AlarmEnum" --> ... <p> The current value of "Alarm" is :="Alarm": </p>
If the value of "Alarm" in the CPU is 2, the HTML page shows 'The current value of "Alarm" is container is empty' because the definition of the enum type assigns the numerical value 2 to the character sequence "Container is empty".
Example of how to use when writing a tag
<!-- AWP_Enum_Def Name='AlarmEnum' Values='0:"No Alarm", 1:"Vessel is full", 2:"Vessel is empty"' --> <!-- AWP_In_Variable Name='"Alarm"' --> <!-- AWP_Enum_Ref Name='"Alarm"' Enum="AlarmEnum" --> ... <form method="post"> <p><input type="hidden" name ='"Alarm"' value='Vessel is full' /></p> <p><input type="submit" value='Set vessel is full' /></p> </form>
The value 1 is written to the PLC tag "Alarm" because the definition of the enum type assigns the numerical value 1 the text "Container is full".
Note that the name specified in "AWP_In_Variable" must be exactly the same as the name specified in "AWP_Enum_Ref".
132
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
3.16.1.4
Fragments
Fragments
Fragments are "logical sections" of a web page to be processed by the CPU individually.
Fragments are usually entire pages, but they can be individual elements, such as files (e.g. images) or documents.
Note
In each fragment in which enum texts are referenced by a PLC tag, this PLC tag must be assigned to the enum type name with the appropriate AWP command.
Defining fragments
A fragment extends to the beginning of the next fragment or to the end of the file.
Syntax <!-- AWP_Start_Fragment Name='<Name>' [Type="<Typ>"] [ID="<Id>"] -->
This command specifies the start of a fragment. <Name> Specifies the name of the fragment. The name must start with a letter [a-zA-Z]
or an underscore ( _ ). This first character can be followed by letters, underscores or numbers [0-9]. <Type> Specifies the type of the fragment. "manual": The application program is notified of the request for a fragment and can
react accordingly. The functionality of the fragment must be controlled with STEP 7 and the tags of the control DB. "automatic": The page is edited automatically (default) <Id> You can specify a numerical ID for the fragment. If no ID is assigned, the fragment is automatically assigned an ID. For manual pages (<Type>=manual), the fragment can be addressed with this ID in the user program of the CPU.
Note ID assignment Set the ID as low as possible because the highest ID influences the size of the Web control DB.
<Modus> "visible": The contents of the fragment are displayed on the user page (default). "hidden": The contents of the fragment are not displayed on the user page.
Web server Function Manual, 11/2019, A5E03484625-AG
133
Web pages 3.16 User pages
Importing fragments
You can specify a fragment in an HTML page and import this fragment into other websites.
Note Ensure that no AWP command for importing fragments is positioned between an enum assignment and enum usage, because this import can result in the enum assignment being located in a different fragment than the enum usage.
Example Example
A company logo is to be displayed on all websites of a web application. The HTML code for the fragment that displays the company logo exists only once. You can import the fragment as many times and into as many HTML files as required.
Syntax <!-- AWP_Import_Fragment Name='<Name>' --> <Name> corresponds to the name of the fragment to be imported.
HTML code within a web page that creates a fragment for displaying an image: <!-- AWP_Start_Fragment Name='Mein_Firmenlogo' --> <p><img src="CompanyLogo.jpg"></p> HTML code that imports the created fragment into another web page: <!-- AWP_Import_Fragment Name='My_Company_Logo' -->
134
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
3.16.1.5
Arrays
Arrays
The Web server provides the user program commands AWP_Start_Array and AWP_End_Array for accessing all values of an array.
Only one-dimensional arrays are supported.
Multidimensional arrays of the form array[x][y] are not supported.
Syntax
<!-- AWP_Start_Array Name='"<DB name>".<array name>' --> ... Content of the array, utilized keywords: ArrayIndex and value.. <!-- AWP_End_Array -->
Parameter
<Name> defines the name of the array with the elements you want to access. You require the DB name and the name of the array corresponding to the data block structure defined in STEP 7. The name must be within single or double quotation marks. The DB name is within double quotation marks.
<ArrayIndex> Index of an array element <value> Value of an array element
Example
The example reads all elements of the "MyArray" structure in the "DB_Name" data block of the CPU and displays the index and the values of the tags on the user-defined web page.
<!-- AWP_Start_Array Name='"DB_Name".MyArray' --> Index: :=ArrayIndex: Value: :=value: <!-- AWP_End_Array -->
The code indicated above generates the following display: Index: 1 Value: 42 Index: 2 Value: 43 Index: 3 Value: 44
Web server Function Manual, 11/2019, A5E03484625-AG
135
Web pages 3.16 User pages
Representation of arrays of the BOOL data type
The output of arrays of the BOOL type is always filled to the next full 8 bits. This particular feature only occurs with BOOL arrays. Example: "DB_1".bitArray is a BOOL array with 5 elements. <!-- AWP_Start_Array Name='"DB_1".bitArray' --> :=ArrayIndex: -> :=value: <!-- AWP_End_Array -->
Edition: 0 -> Value from "DB_1".bitArray[0] 1 -> Value from "DB_1".bitArray[1] 2 -> Value from "DB_1".bitArray[2] 3 -> Value from "DB_1".bitArray[3] 4 -> Value from "DB_1".bitArray[4] 5 -> 0 6 -> 0 7 -> 0
3.16.1.6
Structures
Structures
The web server provides AWP commands for accessing structures in order to access the values of a PLC tag of the data type STRUCT.
Syntax
<!-- AWP_Start_Struct Name='"<DB name>".<struct name>' --> ... Content of structure ... <!-- AWP_End_Struct -->
Parameter
<Name> defines the name of the structure with the elements you want to access. You require the DB name and the name of the structure corresponding to the data block structure defined in STEP 7. The name must be within single or double quotation marks. The DB name is within double quotation marks.
136
Web server Function Manual, 11/2019, A5E03484625-AG
Example
Web pages 3.16 User pages
The example reads elements of the "MyStruct" structure in the "DB_Name" data blocks of the CPU and displays the value of the tag on the user-defined web page.
<!-- AWP_Start_Struct Name='"DB_Name".MyStruct' --> :=A: :=B: :=C: <!-- AWP_End_Struct -->
The code indicated above corresponds to the following commands: :="DB_Name".MyStruct.A: :="DB_Name".MyStruct.B: :="DB_Name".MyStruct.C:
Web server Function Manual, 11/2019, A5E03484625-AG
137
Web pages 3.16 User pages
3.16.2
Configuring user pages
Configuring user pages
Figure 3-71 Configure user-defined pages in STEP 7
To configure the user-defined pages in STEP 7, proceed as follows:
1. Select the CPU in the device configuration.
2. Open the settings in the Inspector window of the CPU under "Properties > General > Web server".
3. Select the folder on your display device in which you have saved your HTML page in the
"User-defined pages" area under "HTML directory". 4. Enter the name of the HTML page under "Default HTML page" that is to open when
you start the application.
5. You can also specify a name for your application under "Application name". This
name is used to further divide or group the webpages. If an application name already exists, the URL is displayed in the following format: http://a.b.c.d/awp/<Application name>/<Page name>.html
6. In the "Extended" area, enter the file extensions that have to be checked for AWP
commands in input box "Files with dynamic contents". By default, STEP 7 analyses
files with the extensions "htm" and "html". Here you can enter other file extensions that you have used when creating your user page.
7. You can accept the number for the Web DB and the fragment DB start number or
you can assign a new number of your choice that is not assigned.
138
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
8. Click the button "Create blocks" to create data blocks from the source files. The
generated data blocks are stored in the STEP 7 project tree in the folder "System blocks > Web server". These data blocks consist of a control data block (Web control DB) that controls the display of the webpages and one or several data block fragments (fragment DBs) with the compiled webpages. 9. In the network view, select the CPU to be loaded and then select the "Download to device" command in the "Online" menu to download the blocks. The compilation of the blocks is implicitly triggered before the download. If errors are signaled during this process, they must be remedied before you can download the configuration.
Deleting data blocks Click the "Delete block" button to delete previously generated data blocks. STEP 7
deletes the Web Control DB and all fragment DBs from the project in which your userdefined pages are located.
3.16.3
Programming the WWW instruction
The WWW instruction
The instruction WWW initializes the Web server of the CPU or synchronizes the user-defined pages with the user program in the CPU. The Web Control DB is the input parameter for the WWW instruction and specifies the content of the pages as they are displayed in the fragment DBs, as well as the status and control information. STEP 7 creates the WebControl DB when you click on the "Generate blocks" button.
Note DB number of the web control DB.
If you change the DB number of the DB 333, the user pages in the Web server can no longer be reached at renewed downloading into the CPU. Error code W#16#007F is output at the parameter RET_VAL. Therefore observe the default setting DB 333 for the Web Control DB.
If you want to change the DB number nevertheless, you have to switch the CPU POWEROFF POWER ON, so that the user pages in the Web server can be reached.
Web server Function Manual, 11/2019, A5E03484625-AG
139
Web pages 3.16 User pages
Programming the WWW instruction
The user program must execute the WWW instruction in order that the user-defined pages can be called in the Web server.
Table 3- 12 WWW instruction
LAD/FBD
SCL
Description
ret_val
Access to user pages by means
:=WWW(ctrl_db:=uint_in_) of the Web server
;
Parameters
The following table shows the parameters of the WWW instruction.
Table 3- 13 Parameters
Parameters CTRL_DB
Declaration Input
RET_VAL
Output
Data type DB_WWW
INT
Description
Data block that describes the user pages (Web control DB)
Error information
RET_VAL parameter
Table 3- 14 RET_VAL Error code (W#16#...) 0000 00xy
803A 8081 80C1
Explanation
No error has occurred. There are no pending website requests that must be released by the user program.
x: Indicates whether an error occurred during initialization of the Web Control DB (CTRL_DB): x=0: No errors occurred. x=1: Error(s) occurred. The error is encoded in the byte "CTRL_DB.last_error" of the Web Control DB. y: Number of the pending request. Several requests are possible (e.g., request "0" and "1" are pending: y="3"). y="1": Request "0" y="2": Request "1" y="4": Request "2" y="8": Request "3"
The specified Web Control DB does not exist on the CPU.
Incorrect version or incorrect format of the Web Control DB.
There are no resources available to initialize the Web application.
140
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
3.16.4
Defining the user page as start page
Defining the user page as start page
In addition to the default intro page, you can also define the start page of your user pages as the start page of the Web server.
Figure 3-72 Example of user page as start page of the Web server
Requirements
The following requirements must be met before the user page is displayed as the start page of the Web server:
You have configured the user page as the start page.
You have configured a user in STEP 7 whom you have assigned at least the authorization "... open user-defined web pages".
The CPU is in RUN mode.
Web server Function Manual, 11/2019, A5E03484625-AG
141
Web pages 3.16 User pages
Procedure
To define the user-defined pages in STEP 7 as the start page of the web server, proceed as follows:
1. Select the CPU in the device configuration.
2. Open the settings in the Inspector window of the CPU under "Properties > General > Web server".
3. Select the entry "AWP1" in the area "Entry page" under "Select entry page".
Figure 3-73 Set user page as start page in STEP 7
4. Download the configuration to the CPU.
If you now enter the IP address of the CPU in the browser, a connection is automatically established to your user pages.
If you want to access the web pages of the CPU again, then link the web pages from your user-defined pages e.g. via the URL "http://a.b.c.d./Portal/Portal.mwsl?PriNav=Start" or "https://a.b.c.d/Portal/Portal.mwsl?PriNav=Start". The specification "a.b.c.d" is an example of the IP address of the configured CPU.
Example of link in HTML: <a href="/Portal/Portal.mwsl?PriNav=Start">SIMATIC web pages</a>
Note
If you define your user page as start page of the Web server, all direct access to the web pages of the CPU is disabled. This applies also to the bookmarks you saved for the web pages of the CPU as well as the page for reading out the service data.
Reading out service data
If you define your user page as start page of the Web server, all direct access to the web pages for reading out the service data is also disabled. If you want to continue to read out service data via the Web server when servicing is required, here is how you can link the service data page directly to your user page. Just as for the web pages of the CPU, link the service data page e.g. via the URL "http://a.b.c.d/save_service_data" or "https://a.b.c.d/save_service_data", the "a.b.c.d" here is an example of the IP address of the configured CPU.
Example of link in HTML: <a href="/save_service_data">Service data</a>
142
Web server Function Manual, 11/2019, A5E03484625-AG
Reference
Web pages 3.16 User pages
You can find additional information on the topic of user page as start page in the FAQ with entry ID 67184104 on the Service&Support (https://support.industry.siemens.com/cs/ww/en/view/67184104) Internet page.
3.16.5
Example of a user page
3.16.5.1
Website for monitoring and controlling a wind turbine
Example of a user page
Here you see a user page for monitoring and controlling a wind turbine:
Figure 3-74 Overview of user page wind turbine
The user page was created in English in this example, but you can select any language you wish when you create your own user page.
In this application, each wind turbine of the wind farm in STEP 7 has a data block with specific data for the respective location and respective turbine.
The user page gives you the option to access the turbine remotely with a display device. Users can call the standard web pages of a CPU of a specific wind turbine and switch to the user page "Remote Wind Turbine Monitor", where they can view the turbine data. A user with the corresponding access permissions can also set the turbine into the manually controlled mode and thus control the tags for speed, orientation and angle of attack of the turbine by means of the website. The user can also specify a brake value regardless of manual or automatic control of the turbine.
STEP 7 checks the Boolean values for override of the automatic control and, if set, uses the values for speed, orientation and angle of attack of the turbine as defined by the user.
Web server Function Manual, 11/2019, A5E03484625-AG
143
Web pages 3.16 User pages
Files used
Three files are used in the application example:
Wind_turbine.html: The user page in the figure shown above. The control data is accessed by AWP commands.
Wind_turbine.css: The Cascading Style Sheet which includes the formatting specifications of the user page. The use is optional but can simplify the design of the user page.
Wind_turbine.jpg: The background image displayed on the user page. The use of images is optional, user pages with lots of images require a lot more memory in the load memory.
These files are not part of your installation but they are described as an example below.
144
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
Implementation
The user page uses AWP commands to read out values from the CPU as well as writing values to it. The user page also uses AWP commands for the definition of enum types, such as the assignment of tags to enum types for handling the ON/OFF settings. The user page is structured as follows:
Header of the website with number and location of the wind turbine. Atmospheric conditions at the turbine, wind speed, wind direction and current temperature are
displayed.
Read-out power output. Manual override: Activates manual override of the turbine. To make manual settings for speed,
orientation and angle of attack, the STEP 7 user program requires that manual override has been activated.
Override of the orientation: Activates manual override of the turbine orientation. Override of the angle of attack: Activates manual override of the angle of attack of the rotor
blades.
By clicking this button, you transfer the override settings to the CPU. Manual setting of a percentage value for braking. The setting "Manual override" is not required
to enter a brake value.
Figure 3-75 Overview of user page wind turbine
In addition, the user page uses an AWP command that writes the special tag to the tag table. The tag table contains the ID of the user who is currently accessing the page.
3.16.5.2
Reading and displaying data from the CPU
Example of HTML code for reading and displaying data from the CPU
This part of the HTML code is used to display the power output on the user page.
Web server Function Manual, 11/2019, A5E03484625-AG
145
Web pages 3.16 User pages
On the left-hand side the "Power Output": text is displayed, on the right-hand side, the value of the tags for the power output including the unit ("KW").
The AWP command :="Data_block_1".PowerOutput executes the read operation. The data block is referenced here by its symbolic name and not by its number ("Data_block_1" instead of "DB1").
The code used in the example is: <tr style="height:2%;"> <td> <p>Power output:</p> </td> <td> <p style="margin-bottom:5px;"> :="Data_block_1".PowerOutput: KW</p> </td> </tr>
146
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
3.16.5.3
Using enum types
Definition of enum types
The described user page uses enum types in three locations. "On" or "Off" is displayed for a Boolean value at these locations.
The enum type for "On" results in a value of 1, the enum type for "Off" results in a value of 0. The following statements from the HTML code of the user page show the declaration of an enum type with the name "OverrideStatus" and the values "0" and "1" for "Off" or "On" as well as the definition of an enum type reference from "OverrideStatus" to the tag "ManualOverrideEnable" in the data block "Data_block_1".
Note Assignment of enum types
If the user page writes into a tag by using an enum type, there has to be a declaration "AWP_In_Variable" for each "AWP_Enum_Ref" declaration.
The code used in the example is: <!-- AWP_In_Variable Name='"Data_block_1".ManualOverrideEnable' --> <!-- AWP_Enum_Def Name="OverrideStatus" Values='0:"Off",1:"On"' --> <!-- AWP_Enum_Ref Name='"Data_block_1".ManualOverrideEnable' Enum="OverrideStatus" -->
The following code describes a display box for displaying the current status of "ManualOverrideEnable". A normal read command for tags is used but because of the declared and referenced enum type, the website displays the values "On" and "Off" instead of "1" and "0". <td style="width:24%; border-top-style: Solid; border-top-width: 2px; border-top-color: #ffffff;"> <p>Manual override: :="Data_block_1".ManualOverrideEnable:</p> </td>
The following code describes a drop-down list for changing "ManualOverrideEnable" by the user. The drop-down list consists of the "Yes" and "No" options that are assigned to the "On" or "Off" values by means of the enum type reference. If you make no selection, the status remains the same. <select name='"Data_block_1".ManualOverrideEnable'> <option value=':"Data_block_1".ManualOverrideEnable:'> </option> <option value="On">Yes</option> <option selected value="Off">No</option> </select>
The drop-down list is included in the form on the website. The form is uploaded, when the user clicks on the "Submit override settings and values" button. If the user has selected "Yes", the value "1" is written in the tag "ManualOverrideEnable" in the "Data_block_1" data block; if the user has selected "No", the value "0" is written.
Web server Function Manual, 11/2019, A5E03484625-AG
147
Web pages 3.16 User pages
3.16.5.4
Writing user inputs into the controller
Setting options
The user page "Remote Wind Turbine Monitor" includes different AWP commands for writing data into the controller. A user with the corresponding access permissions can control the wind turbine manually, activate the override for the turbine speed and the turbine orientation as well as the angle of attack of the rotor blades with the declaration of different "AWP_In_Variable" write commands. The user can also specify floating-point numbers for turbine speed, orientation angle of attack and percentage of braking. The user page uses an HTTP command in the format "POST" to write the tags into the controller.
The code used in the example for setting the brake value is: <!-- AWP_In_Variable Name='"Data_block_1"' --> ... <tr sytle="vertical-align: top; height: 2%;"> <td style="width: 22%;"><p>Braking:</p></td> <td> <form method="POST"> <p><input name='"Data_block_1".Braking' size="10" type ="text"> %</p> </form> </td> </tr>
This excerpt from the HTML code first defines a "AWP_In_Variable" for the "Data_block_1" data block which enables the user page to write any number of tags into the data block. The text "Braking:" is displayed on the left-hand side; on the right-hand side is a box in which the user can make entries for the "Braking" tag in the data block.
The user page reads out the actual braking value from the controller and displays it in the text box. A user with the corresponding access permissions can then write a brake value that controls the braking process into the data block of the CPU.
Note
Declaration of data blocks
If you declare an entire data block by means of a "AWP_In_Variable", each tag in the data block can be written by means of the user page. If only certain tags in the data block are to be writable, you declare this specifically using <!-- AWP_In_Variable Name='"Data_block_1".Braking' -->, for example.
148
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
3.16.5.5
Writing special tags
Using special tags
The user page "Remote Wind Turbine Monitor" writes the special tag "Server:current_user_id" into a tag of the CPU. The tag value contains the value "1" if a user is logged on and "0" if a user is not logged on. In this example, a user is logged on, so the tag value is set to "1". The special tag is written into the CPU by the user page and does not need a user interface.
The code used in the example is: <!-- AWP_in_variable Name="SERVER:current_user_id" Use="User_ID" -->
Web server Function Manual, 11/2019, A5E03484625-AG
149
Web pages 3.16 User pages
3.16.5.6
HTML code of the user page "Remote Wind Turbine Monitor"
The complete HTML code of the example user page "Remote Wind Turbine Monitor" as well as the used Cascading Style Sheet (CSS) is listed below.
Wind_turbine.html
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><!-This test program simulates a website for monitoring and operating a wind turbine. Required PLC tags and data block tags in STEP 7: PLC tag: User_ID: Int Data blocks: Data_block_1 Tags in Data_Block_1: TurbineNumber: Int WindSpeed: Real WindDirection: Real Temperature: Real PowerOutput: Real ManualOverrideEnable: Bool TurbineSpeed: Real YawOverride: Bool Yaw: Real PitchOverride: Bool Pitch: Real Braking: Real The user-defined website shows the current values for the PLC data and offers a drop-down list to specify the three Boolean values with the assigned enumeration type. The selected Boolean values as well as the data text boxes for speed, orientation and angle of attack of the turbine are uploaded with the "Send" button. The brake value can be specified without the "Send" button.
No actual STEP 7 program is required for using this page. The STEP 7 program would theoretically only respond to the values for speed, orientation and angle of attack of the turbine, if the assigned Boolean values were specified. The only requirement for STEP 7 is that the WWW instruction is called with the DB number of the generated data blocks for this page. --> --> <!-- AWP_In_Variable Name='"Data_block_1"' --> <!-- AWP_In_Variable Name='"Data_block_1".ManualOverrideEnable' Enum="OverrideStatus" --> <!-- AWP_In_Variable Name='"Data_block_1".PitchOverride' Enum="OverrideStatus" --> <!-- AWP_In_Variable Name='"Data_block_1".YawOverride' Enum="OverrideStatus" --> <!-- AWP_In_Variable Name="SERVER:current_user_id" Use="User_ID"--> <!-- AWP_Enum_Def Name="OverrideStatus" Values='0:"Off",1:"On"' -->
150
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
<html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"><link rel="stylesheet" href="Wind_turbine.css"> <title>Remote monitoring of wind turbines
</title> <body> <table cellpadding="0" cellspacing="2"> <tr style="height: 2%;"> <td colspan="2"> <h2>Remote Wind Turbine Monitor: Turbine #:="Data_block_1".TurbineNumber:</h2> </td> <tr style="height: 2%;"><td style="width: 25%;"><p>Wind speed:</p></ td> <td><p> :="Data_block_1".WindSpeed: km/h</p></td> </tr> <tr style="height: 2%;"> <td style="width: 25%;"><p>Wind direction:</p></td> <td><p> :="Data_block_1".WindDirection: deg.</p></td> </tr> <tr style="height: 2%;"><td style="width: 25%;"><p>Temperature:</p></ td> <td><p> :="Data_block_1".Temperature: deg. C</p></td> </tr> <tr style="height: 2%;"> <td style="width: 25%;"><p>Power output:</p></td> <td><p style="margin-bottom:5px;"> :="Data_block_1".PowerOutput: kW</p> </td> </tr> <form method="POST" action=""> <tr style="height: 2%;" > <td style="width=25%; border-top-style: Solid; border-top-width: 2px; border-top-color: #ffffff;"> <p>Manual override: :="Data_block_1".ManualOverrideEnable:</p> </td> <td class="Text">Set: <select name='"Data_block_1".ManualOverrideEnable'> <option value=':="Data_block_1".ManualOverrideEnable:'> </option> <option value="On">Yes</option> <option value="Off">No</option> </select> </td> </tr> <tr style="vertical-align: top; height: 2%;"><td style="width: 25%;"><p>Turbine speed:</p></td> <td> <p style="margin-bottom:5px;"><input name='"Data_block_1".TurbineSpeed' size="10" value=':="Data_block_1".TurbineSpeed:' type="text"> RPM</p> </td> </tr>
Web server Function Manual, 11/2019, A5E03484625-AG
151
Web pages 3.16 User pages
<tr style="vertical-align: top; height: 2%;"> <td style="width: 25%;"> <p>Yaw override: :="Data_block_1".YawOverride: </p> </td> <td class="Text">Set: <select name='"Data_block_1".YawOverride'> <option value=':="Data_block_1".YawOverride:'> </option> <option value="On">Yes</option> <option value="Off">No</option> </select> </td> </tr> <tr style="vertical-align: top; height: 2%;"> <td style="width: 25%;"> <p>Turbine yaw:</p> </td> <td> <p style="margin-bottom:5px;"><input name='"Data_block_1".Yaw' size="10" value=':="Data_block_1".Yaw:' type="text"> deg.</p> </td> </tr> <tr style="vertical-align: top; height: 2%;"> <td style="width: 25%;"> <p>Pitch override: :="Data_block_1".PitchOverride: </p> </td> <td class="Text">Set: <select name='"Data_block_1".PitchOverride'> <option value=':="Data_block_1".PitchOverride:'> </option> <option value="On">Yes</option> <option value="Off">No</option> </select> </td> </tr> <tr style="vertical-align: top; height: 2%;"> <td style="width=25%; border-bottom-style: Solid; borderbottomwidth: 2px; border-bottom-color: #ffffff;"> <p>Blade pitch:</p> </td> <td> <p style="margin-bottom:5px;"><input name='"Data_block_1".Pitch' size="10" value=':="Data_block_1".Pitch:' type="text"> deg.</p> </td> </tr> <tr style="height: 2%;"> <td colspan="2"> <input type="submit" value="Submit override settings and values"> </td> </tr> </form> <tr style="vertical-align: top; height: 2%;"> <td style="width: 25%;"><p>Braking:</p></td> <td> <form method="POST" action="">
152
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.16 User pages
<p> <input name='"Data_block_1".Braking' size="10" value=':="Data_block_1".Braking:' type="text"> %</p> </form> </td> </tr> </table> </body> </html>
Wind_turbine.css
BODY { background-image: url('./Wind_turbine.jpg') background-position: 0% 0%; background-repeat: no-repeat; background-size: cover;
H2 { font-family: Arial; font-weight: bold; font-size: 14.0pt; color: #FFFFFF; margin-top:0px; margin-bottom:10px;
} P {
font-family: Arial; font-weight: bold; color: #FFFFFF; font-size: 12.0pt; margin-top:0px; margin-bottom:0px; } TD.Text { font-family: Arial; font-weight: bold; color: #FFFFFF; font-size: 12.0pt; margin-top:0px; margin-bottom:0px; }
Web server Function Manual, 11/2019, A5E03484625-AG
153
Web pages 3.17 Filebrowser
3.17
Filebrowser
Requirements
Access rights must be assigned for the user in the user management.
Filebrowser
The contents of the SIMATIC memory card are displayed by the browser on the "Filebrowser" web page. This means, for example, that you can read and edit the log files generated by the CPU without having to use STEP 7.
Figure 3-76 Filebrowser view
The file browser lists all existing files and directories located on the SIMATIC memory card. You can download, delete, rename and upload the files. You can create, delete and rename the directories.
Note The Filebrowser only grants you read access to the "DataLogs", "Backups" and "UserFiles" directories.
Exception system files
The system files include the job file and all special directories including their contents to which the job file refers. System files are not displayed, and cannot be changed or deleted.
154
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.18 Reading out service data
3.18
Reading out service data
The Web server gives you the option to save service data. In addition to the content of the diagnostic buffer, they include additional information on the internal status of the CPU. If you should encounter a problem with the CPU that cannot be resolved otherwise, you therefore have the option to submit the service data to the Service&Support team.
Procedure
1. Enter the following address in the address bar of your web browser: "http://<CPU IP address>/save_service_data", e g. "http://192.168.3.141/save_service_data"
2. Your screen displays the service data page with a button for saving the service data.
Result
3. Save the service data locally on your display device by clicking on "Save ServiceData".
The data is stored in a .dmp file with the following naming convention: "<MLFB><Serial number><Time stamp>.dmp." The user can change the file name at a later time. Note If you have defined your user page as the start page, observe the note on reading out service data in section Defining the user page as start page (Page 141).
Web server Function Manual, 11/2019, A5E03484625-AG
155
Web pages 3.19 Basic websites
3.19
Basic websites
Web pages with reduced contents
Basic websites are offered for display devices with smaller screens, for example HMI, on the Web server. Basic websites are web pages with reduced content that are adapted to the requirements of small screens with low resolution. These sites do not support JavaScript for the sake of fast access. This means that not all standard websites are available as basic websites. The basic website can also have fewer functions than the standard website.
The switch to basic websites takes place automatically for HMI devices. You access basic websites from other end devices by entering the IP address of the configured and the extension "/basic" in the address bar of the Web browser, for example, http://192.168.3.141/basic or https://192.168.3.141/basic.
The following standard websites are also available as basic websites:
Start page (in Basic: "Status")
Diagnostics (without the "Program protection", "Runtime information" and "Fail-safe" tabs)
Diagnostics buffer
Memory usage
Module information
Alarms (without acknowledgment option)
Communication
Tag status
Watch tables
User pages
Filebrowser (read access only)
DataLogs
Intro
156
Web server Function Manual, 11/2019, A5E03484625-AG
The basic websites are displayed as follows:
Web pages 3.19 Basic websites
Figure 3-77 Example basic websites, "Status" web page
Web server Function Manual, 11/2019, A5E03484625-AG
157
Web pages 3.20 API (Application Programming Interface)
3.20
API (Application Programming Interface)
3.20.1
Web API
The CPU offers you a Web-based API (Web API) as an interface for reading and writing CPU data.
Connection established between CPU, Web API and terminal device.
The following graphic shows an example of the Web API between CPU and terminal device.
CPU Terminal devices
Figure 3-78 Web API
Communication between the CPU and the terminal device takes place via PROFINET or WLAN integration.
Note Security information Please note that the following graphic only shows the role of the Web API between CPU and terminal device. For the correct setup of a secure WLAN connection, observe the Security information in the preface of this manual.
158
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
Availability
The Web API is only available for CPUs as of firmware version from V2.8 for the following systems: the CPUs of the S7-1500 automation system
(the CPUs of the S7-1500R/H redundant system are not supported) the CPUs 1504D TF and 1507D TF of the SIMATIC Drive Controller the CPUs 1513pro(F)-2 PN and 1516pro(F)-2 PN of the ET 200pro distributed I/O system the CPUs 1510SP(F)-1 PN and 1512SP(F)-1 PN of the ET 200SP distributed I/O system The following requirements must be met before you can use the Web API. You have assigned the correct firmware version ( V2.8) in the Hardware catalog of
STEP 7 You have created and configured a project and downloaded to the CPU. You have selected the following checkbox in STEP 7
Activate web server on this module
API endpoint
As an RPC protocol, JSON-RPC V2.0 is based on HTTP. The Web API can be reached via POST Requests to the following URL:
https://[ip_address]/api/jsonrpc
An example of the required structure of an HTTP Request and HTTP Response for successfully making a Web API request can be found in the chapter Web API integration (Page 166).
Web server Function Manual, 11/2019, A5E03484625-AG
159
Web pages 3.20 API (Application Programming Interface)
Supported clients
The products and versions listed in the following table were tested for the Web API. The "Version" column lists the most recently tested version at the time of going to press. In addition, other Versions may also work, especially newer versions. However, if problems occur with versions not mentioned here that cannot be rectified, use one of the following tested versions:
Product * Chrome-based Desktop Web browser (e.g. Google Chrome) (https://chromium.woolyss.com/) Mozilla Firefox (https://www.mozilla.org/enUS/firefox/) Microsoft Internet Explorer
Microsoft Edge
Apple Safari
Opera SIMATIC HMI Panels Microsoft C# (https://docs.microsoft.com/enus/dotnet/api/system.net.webrequest?view=netfr amework-4.7.2) with WebRequest class and Json.Net library (https://www.newtonsoft.com/json) GNU Wget (https://www.gnu.org/software/wget/)
cURL (https://curl.haxx.se/)
Microsoft PowerShell
Version 75.x (Windows and Android)
64.x (long-term support)
11.x (Windows 7, Windows 10) 44.x Windows 10 12.x iOS 58.x 2 .Net Framework 4.7
1.20 Windows 7.63.x Windows 5.0
* Not included in the scope of delivery of the product described here
Supported functions Web API access with JavaScript for asynchronous requests
Web API access for pure HTTP requests and Json.Net for generating and parsing content
Web API access for pure HTTP requests, e.g. for automatic archiving of DataLogs
Web API access for pure HTTP Requests with Invoke WebRequest and ConvertTo-Json/ConvertFrom-Json for generating and parsing content
160
Web server Function Manual, 11/2019, A5E03484625-AG
3.20.2
Web pages 3.20 API (Application Programming Interface)
The available Web API methods
The following section gives an overview of all available Web API methods with extracts from the corresponding HTML code.
Note Files which contain Web API methods must be encoded and stored in the UTF-8 character encoding.
For detailed examples of an integration of the Web API into your web application, refer to the section Web API integration (Page 166).
Web server Function Manual, 11/2019, A5E03484625-AG
161
Web pages 3.20 API (Application Programming Interface)
3.20.2.1
Api.Login
The Api.Login method checks the login data of the user and on successful verification opens a new Web API session. The method requests the name and the password of the user in plain text as proof of authorization. The user name and the password are encrypted before they are transferred to the server.
Example
The following example shows the parameters required to call the Api.Login method.
{ "user": "User1", "password": "SecurePassword"
}
After successful authentication the user receives a token. The token shows the user as an authenticated user against the API.
{ "token": "eG9mcHdhaGR0dWVsdm5teGFxcGw=" }
Token
The token comprises a 28-byte string. The token is transferred in encrypted form.
For every additional request which requires authentication, you have to specify the assigned token. If further communication no longer takes place in the meantime, the token becomes invalid after maximum 2.5 minutes. Each new request within a session extends the validity of the token by another 2 to 2.5 minutes (calculated from the completion of the request processing by the server).
The token is not required for methods that do not require authentication. However, you can still enter the token.
When you call the Api.Ping method without a token, for example, the session is not extended because the CPU cannot assign a token to the user.
The following methods work with and without tokens:
Api.Browse
Api.Ping
Api.GetPermissions
User "Everybody"
The "Everybody" user is defined without assignment of a password.
If you want to authenticate yourself as the user "Everybody", send "Everybody" as user and an empty password ("").
You can find a detailed description of the "Everybody" user in section Configuring the Web server (Page 19).
162
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
Possible error messages
The following table shows the possible error messages of the Api.Login method.
Error code Error message
100
Login failed
101
Already authenticated
4
No resources
Meaning
The user name and/or password are not valid. Assign a reliable user name and password.
The current X-Auth token is already authenticated. Use Api.Logout before you authenticate yourself again.
The system does not have the required resources to carry out this request. Carry out the request again as soon as sufficient resources are available again.
3.20.2.2
Api.GetPermissions
After the successful login, the Api.GetPermissions returns a list of actions for whose execution the user is authorized.
Example
The following example shows the actions for which the user is authorized.
[ { "name": "read_value" }, { "name": "change_operating_mode" }
]
Checkable authorizations
You can use the Web API to check the authorizations for the following actions.
Action read_diagnostics read_value write_value acknowledge_alarms firmware_update open_user_pages read_file write_file change_operating_mode flash_leds backup_plc restore_plc failsafe_admin
User authorization Querying diagnostic data from the CPU without being permitted to change data Read process data from the CPU Write process data to the CPU Acknowledge alarms Install firmware updates on the CPU, central and distributed I/O modules Call user-defined pages on the CPU Reading the contents of files on the CPU Changing the contents of files and folders on the CPU Changing the operating state Request identification of the device Backing up the CPU configuration Restore configuration of the CPU Make fail-safe changes on the CPU
The Web API checks the authorization on the basis of the rights and passwords assigned in STEP 7 in the area "Web server > User administration".
A description of the user management can be found in section "Configuring the Web server (Page 19)".
Web server Function Manual, 11/2019, A5E03484625-AG
163
Web pages 3.20 API (Application Programming Interface)
3.20.2.3
Api.Browse
The Api.Browse method gives you a list of all methods that you can call via the Web API. This provides you with an overview of all the methods supported by the CPU.
No authorizations are needed for calling the Api.Browse method.
Example
The following example shows the HTTP request and a possible result of the request for the Api.Browse method.
POST /api/jsonrpc HTTP/1.1 Host: 192.168.3.14 Content type: application/json Content length: 48
[{"jsonrpc":"2.0","method":"Api.Browse","id":1}]
Response of the server:
[ { "name": "Api.Browse" }, { "name": "Api.GetCertificateUrl" }, { "name": "Api.GetPermissions" }, { "name": "Api.Login" }, { "name": "Api.Logout" }, { "name": "Api.Ping" }, { "name": "Api.Version" }, { "name": "PlcProgram.Browse" }, { "name": "PlcProgram.Read" }, { "name": "PlcProgram.Write" },
]
Note Checking authorizations
The Api.Browse methods does not filter the list of the available methods by the individual authorizations of users.
The list of available methods may therefore contain methods which the user may not execute without authorization.
Possible error messages
The following table shows the possible error messages of the Api.Browse method.
Error code Error message
4
No resources
Meaning The system does not have the necessary resources to execute the Web API request. Carry out the request again as soon as sufficient resources are available again.
164
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
3.20.2.4
Api.Version
Use the Api.Version method to request the current version number of the Web API. You can draw conclusions from the version number:
The functions supported by the respective version
the hardware release number of the CPU
This information allows you to implement applications that correspond to the functionality of the contacted CPU.
No authorizations are needed for calling the Api.Version method.
Example
The following example shows a possible result of calling the Api.Version method. 1.28
The version number is displayed as a floating -point number and is incremented with every release and every change in the Web API implementation.
3.20.2.5
Api.Ping
The Api.Ping method outputs a unique ID for the CPU used. You can use it to determine whether the CPU can be reached. The CPU ID comprises a 28-byte string. The system assigns a new, unique CPU ID after each restart (POWER ON - POWER OFF) or warm start of the CPU. By comparing this with previously output IDs, you can also determine whether the CPU was restarted in the meantime.
No authorizations are needed for calling the Api.Ping method.
Example
The following example shows the output of a CPU ID: "ZWlmbnJwZmplb3Nwd2l1Y3N3dWE="
Web server Function Manual, 11/2019, A5E03484625-AG
165
Web pages 3.20 API (Application Programming Interface)
3.20.2.6
Api.GetCertificateUrl
The Api.GetCertificateUrl method returns a relative URL (https://<IP> with which you can retrieve the SSL certificate of the web server.
Example
The following example shows the result of the Api.GetCertificateUrl method call.
"/MiniWebCA_Cer.crt" The method outputs a string with a relative URL to the CPU. If no certificate is available, the method outputs an empty string.
3.20.2.7
Api.Logout
The Api.Logout method removes the token from the list of active Web API sessions and ends the session.
3.20.3
Web API integration
In the following section you will find examples of how to integrate the Web-API into your application.
Structure of an HTTP Request and HTTP Response
The following section shows the example of the required structure of an HTTP Request and HTTP Response for successfully making a Web API request.
POST /api/jsonrpc HTTP/1.1 Host: 192.168.3.14 Content type: application/json Content length: 92
[{"jsonrpc":"2.0","method":"Api.Login","params":{"user":"User1","pas sword":"SecurePassword"},"id":999}]
HTTP/1.1 200 OK Content type: application/json Cache-Control: no-cache Pragma: no-cache Expires: 0 Access-Control-Allow Origin: * Access-Control-Allow Headers: Content-Type,X-Auth Token Access-Control-Allow Methods: POST,OPTIONS transfer-encoding: chunked date: Tue, 23 Apr 2019 17:50:31 GMT
[{"jsonrpc":"2.0","id":999,"result":{"token":"Sy8pe3VNv86rTMldzFBsYz mw12Lg"}}]
166
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
Web API examples
The following section contains related examples of how you can use the described methods in the Web API. The examples use HTML, JSON and JQuery library for asynchronous requests.
Note Information used in the examples Note that the names of the methods, parameters and the JavaScript code are specified without liability and can deviate from the current specification.
Example 1
Example 1 shows a client that wants to maintain a session with JavaScript. For this purpose, it sends a single heartbeat request using the Api.Ping method. If the intervals at which the heartbeat request is sent are less than 2 minutes, the user remains permanently logged in.
A permanent login is recommended for operating and monitoring tasks.
$.post({ url:"https://192.168.2.132/api/jsonrpc", headers:{
'X-Auth-Token':"Sy8pe3VNv86rTMldzFBsYzmw12Lg" }, data:JSON.stringify({jsonrpc:"2.0", method:"Api.Ping", id:1}), success:function(data){ console.log(data); } dataType:"text", contentType:"application/json" });
Note X-Auth-Token
To extend the session, you must send the token (X-Auth token) as an HTTP header to the CPU.
When you call the Api.Ping method without a token, the session is not extended because the CPU cannot assign a token to the user.
Example 3 shows an example of a token in the HTTP request.
In the example, the selected user has the necessary authorizations. The methods after the login request were successfully carried out, as the following result shows.
{jsonrpc:"2.0",id:1,result:"ZWlmbnJwZmplb3Nwd2l1Y3N3dWE="}
Web server Function Manual, 11/2019, A5E03484625-AG
167
Web pages 3.20 API (Application Programming Interface)
Example 2
Example 2 shows a client that wants to log on to the CPU with JavaScript and calls several methods using a bulk request.
$.post({ url:"https://192.168.2.132/api/jsonrpc", data:JSON.stringify([ {jsonrpc:"2.0", id:1, method:"Api.Login", params:{user:"Admin",password:"12345"} }, {jsonrpc:"2.0", id:2, method:"Api.GetPermissions" }, {jsonrpc:"2.0", id:3, method:"Api.GetMethods" }]), success: function(data){ console.log(data); }, dataType: "text", contentType: "application/json"});
The following section shows an example of a bulk request response. The selected user has the necessary authorizations. The methods after the login request were successfully carried out with the authorizations of the authenticated user.
[ {jsonrpc:"2.0",id:1, result:{ token:"d29kamV3cGxtdm5keHNhcXd1aXJ0empkZXN3cQ=="}}, {jsonrpc:"2.0",id:2,result:[ "read_value", "write_value", "diagnostics"]}, {jsonrpc:"2.0",id:3,result:[ "Api.Login", "Api.GetPermissions", "Api.GetMethods", "PlcProgram.Read", "PlcProgram.Write", "PlcProgram.Browse", "Api.Logout", "Api.Ping"]},
]
168
Web server Function Manual, 11/2019, A5E03484625-AG
Example 3
Web pages 3.20 API (Application Programming Interface)
Example 3 shows a bulk request for read and write access to a stack of tags in a single HTTP request. This procedure is recommended for bulk requests, as it is more efficient than a series of single accesses and therefore places less load on the CPU.
$.post({ url:"https://192.168.2.132/api/jsonrpc", data:JSON.stringify([ {jsonrpc:"2.0", id:1, method:"PlcProgram.Read", {jsonrpc:"2.0", id:2, method:"PlcProgram.Read", params:{var:"\"MyDB\".InvalidField"}, {jsonrpc:"2.0", id:3, method:"PlcProgram.Read", params:{tag:"MyDB.MyDate"} }, {jsonrpc:"2.0", id:4, method:"PlcProgram.Write", params:{tag:"\"BoilerControl\".TempSetPoint", value:9001} }]), success: function(data){ console.log(data); }, dataType: "text", contentType: "application/json", headers: { "X-Auth-Token":"d29kamV3cGxtdm5keHNhcXd1aXJ0empkZXN3cQ=="}});
The bulk request contains an invalid tag with an error message providing information about this. All other methods were successfully carried out, as the following result shows.
[ {jsonrpc:"2.0",id:1,result:{"value":42}}, {jsonrpc:"2.0",id:2,error:{code:-1,message:"Invalid tag name"}}, {jsonrpc:"2.0",id:3,result:{"value":"1990-01-01"}}, {jsonrpc:"2.0",id:4,result:true}, ]
3.20.4
Web API sessions
Timeout for Web API sessions
Note
If a Web API call is not made within a session before 120 seconds have elapsed, the CPU ends the session with a logout event. A timeout reset is initiated by every successful action of the user in which a toke is supplied.
Call the Api.GetPermission or Api.Ping method cyclically within the timeout grid to ensure that: · Your session remains active · Your authorizations for the call of other methods remain active
Web server Function Manual, 11/2019, A5E03484625-AG
169
Web pages 3.20 API (Application Programming Interface)
Limitations for Web API sessions
The CPU limits the number of active sessions. The following table shows the limitations based on the memory platform used.
CPUs S7-1510 to S7-1513 S7-1515 and S7-1516 S7-1517 and S7-1518
Limitation 50 100 200
Limitation of the active Web API sessions
If you request another authentication token and none are available, then the request is rejected.
Changes to CPU user administration
If the configuration of CPU user management changes (by downloading the HW configuration in the TIA Portal), e.g. password changed or user removed, the CPU ends all sessions with a logout event.
Security events
The CPU generates a security event for successful and failed logins. The CPU enters this security event in the diagnostics buffer.
3.20.5
Read and write process data
3.20.5.1
Supported data types
Binary representation
The Web API presents the values of primitive data types as pure binary data ("raw"). The binary data is formatted as a JSON array. Each element within an array is a numeric value between 0 and 255 and represents a single data byte.
Simple display ("simple")
The Web API formats primitive data types into a readable form while preserving the ability to process the data using a program. The following section describes how primitive data types are represented as JSON data type.
170
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
Supported data types
The following table shows: The data types supported by the Web API for reading and writing process values the representation in the Web API The respective match of the data type in the TIA Portal
Name of the data type Name of the data type Representation in the Web API
in the TIA Portal
in Web API
Bool
bool
Boolean JSON value. true oder false
Byte
Byte
JSON unsigned integer in a range from 0 to 255
USInt
usint
Word
word
JSON unsigned integer in a range from 0 to 65 535
UInt
uint
HW_ANY
hw_any
HW_IOSYSTEM
hw_iosystem
HW_DPMASTER
hw_dpmaster
HW_DEVICE
hw_device
HW_DPSLAVE
hw_dpslave
HW_IO
hw_io
HW_MODULE
hw_module
HW_SUBMODULE hw_submodule
HW_HSC
hw_hsc
HW_PWM
hw_pwm
HW_PTO
hw_pto
HW_INTERFACE
hw_interface
HW_IEPORT
hw_ieport
CONN_ANY
conn_any
CONN_PRG
conn_prg
CONN_OUC
conn_ouc
PORT
port
RTM
rtm_id
PIP
pip
DB_ANY
db_any
DB_WWW
db_www
DB_DYN
db_dyn
DWord
dword
JSON unsigned integer in a range from 0 to 4 294 967 295
UDInt
udint
AOM_IDENT
aom_ident
EVENT_ANY
event_any
EVENT_ATT
event_att
EVENT_HWINT
event_hwint
CONN_R_ID
conn_r_id
Web server Function Manual, 11/2019, A5E03484625-AG
171
Web pages 3.20 API (Application Programming Interface)
Name of the data type in the TIA Portal LWord ULInt SInt Int OB_ANY OB_DELAY OB_TOD OB_CYCLIC OB_ATT OB_PCYCLE OB_HWINT OB_DIAG OB_TIMEERROR OB_STARTUP DInt LInt
Real LReal
Character
WChar
String
WString
Date
Time_Of_Day
LTime_Of_Day
Name of the data type in Web API lword ulint sint int ob_any ob_delay ob_tod ob_cyclic ob_att ob_pcycle ob_hwint ob_diag ob_timeerror ob_startup dint lint
real lreal char
wchar
string
wstring
date
time_of_day
ltime_of_day
Representation in the Web API
JSON string with a numerical representation of an unsigned integer based on the number 10 in a range from 0 to 18 446 744 073 709 551 615 JSON signed integer in a range from -128 to 127 JSON signed integer in a range from -32 768 to 32 767
JSON signed integer in a range from -2 147 483 648 to 2 147 483 647. JSON string with a numerical representation of an unsigned integer based on the number 10 in a range from -9 223 372 036 854 775, 808 to 9 223 372 036 854 775 807 JSON floating-point number If the floating-point number is infinite or NaN (not-a-number), the Web API returns the value null when reading a tag of this type. JSON string with a single ASCII character in a valid range from 0 to 127 If a tag of this type is read with a value outside the valid range, the Web API outputs the value null. JSON string with a UTF-8 string that represents a single UCS-2 character in a valid range from 0 to 55 295. If a tag of this type is read with a value outside the valid range, the Web API returns the value null. JSON string with a UTF-8 string If a tag of this type is read with a value outside the valid UTF-8 string (max. length 254 characters), the Web API returns the value null. JSON string with a UTF-8 string that represents a USC-2 string in a valid range from 0 to 55 295. If a tag of this type is read with a value outside the valid range (max. length 254 characters), the Web API outputs the value null. JSON unsigned integer in a range from 0 to 65 535 This value represents the number of days since 01.01.1990. JSON unsigned integer in a range from 0 to 4 294 967 295 This value represents the number of milliseconds since the beginning of the day. JSON string with a numerical representation of an unsigned integer based on the number 10 in a range from 0 to 18 446 744 073 709 551 615 This value represents the number of nanoseconds since the beginning of the day.
172
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
Name of the data type Name of the data type Representation in the Web API
in the TIA Portal
in Web API
Time
time
JSON signed integer in a range from -2 147 483 648 to 2 147 483 647)
This value represents the number of milliseconds since a user-defined point in time.
LTime
ltime
JSON string with a numerical representation of an unsigned integer based on the number 10 in a range from -9 223 372 036 854 775 808 to 9 223 372 036 854 775 807
This value represents the number of nanoseconds since a user-defined point in time.
S5Time
s5time
JSON object with the keys basic and value:
· The basic value is a JSON unsigned integer with a value of either 10, 100, 1000 or 10 000. The basic value represents the millisecond multiplier of the value value.
· The value value is a JSON unsigned integer in the range from 0 to 999. The basic value multiplied by the value value gives the timer interval in milliseconds.
Date_And_Time
date_and_time
JSON object with the keys year, month, date, hour, minute, second and day_of_week:
· year is a JSON unsigned integer with a value in the range from 1990 to 2089
· month is a JSON unsigned integer with a value in the range 1 to 12
· day is a JSON unsigned integer with a value in the range from 1 to 31
· hour is a JSON unsigned integer with a value in the range from 0 to 23
· minute is a JSON unsigned integer with a value in the range from 0 to 59
· second is a JSON floating point number with a value in the range 0 to 60
· day_of_week is a JSON string with a value of either sun, mon, tue, wed, thu, fri or sat
Web server Function Manual, 11/2019, A5E03484625-AG
173
Web pages 3.20 API (Application Programming Interface)
Name of the data type in the TIA Portal LDT
Struct IEC_COUNTER IEC_TIMER DTL IEC_LTIMER IEC_SCOUNTER IEC_DCOUNTER IEC_LCOUNTER IEC_UCOUNTER IEC_USCOUNTER IEC_UDCOUNTER IEC_ULCOUNTER ERROR_STRUCT NREF CREF
Name of the data type in Web API ldt
struct iec_counter iec_timer dtl iec_ltimer iec_scounter iec_dcounter iec_lcounter iec_ucounter iec_uscounter iec_udcounter iec_ulcounter error_struct nref cref
Representation in the Web API
JSON string with a numerical representation of an unsigned integer based on the number 10 in a range from 0 to 18 446 744 073 709 551 615 This value represents the number of nanoseconds since 01.01.1970 midnight (12:00:00.0 am). Structured data type whose data structure can be determined using the PlcProgram.Browse method.
Arrays
Arrays are displayed as JSON objects. The key is a string with a numeric representation of the index.
The following example shows the representation in the TIA Portal:
Figure 3-79 Representation in the TIA Portal
Addressing the user data
The Web API supports the following addressing formats: Symbolic addressing of a tag in the tag, e.g. Tag_1 Symbolic addressing of a tag in a data block, e. g. "MyDB".Static_1
174
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
3.20.5.2
Parameter assignment of the block properties
Configuring access to the Web API in the TIA Portal
To restrict the read and write access to data blocks of your project, you can define the desired parameters in the attributes of the respective block.
To allow the Web API to access the data block, select the check box "DB accessible from Webserver".
Note F-blocks
Note that fail-safe blocks allow read access only. It is not possible to write tags into fail-safe blocks.
Parameter assignment for access to the Web API in tag tables
For read and write access of Web API to tags, the options "Accessible from HMI/OPC UA/Web API" and "Writable from HMI/OPC UA/Web API" must be enabled:
Figure 3-80 Tag table in the TIA Portal
Web server Function Manual, 11/2019, A5E03484625-AG
175
Web pages 3.20 API (Application Programming Interface)
3.20.5.3
PlcProgram.Read
The PlcProgram.Read method is used to read process data from the CPU. To call the PlcProgram.Read method, you need the "read_value" authorization.
Structure of the request
The following table informs you about the properties of the tag to be read.
Name "var" "mode"
Required
Yes optional, default is "simple"
Data type String String
Description
Name of the tag to be read
Enumeration that determines the response format for this method:
· "simple": returns tag values according to the "simple" representation in section "Supported data types (Page 170)"
· "raw": returns tag values according to the "raw" representation in section "Supported data types".
Examples
In the following example, the user requests a global tag in the "simple" representation.
{ "var": "\"MotorSpeed\""
}
In the following example, the user requests a global tag in the "raw" representation.
{ "var": "\"MyDB\".MyVariable", "mode": "raw"
}
Response structure
If the request to the server was successful, the server returns JSON data values. Examples The following example shows the result of reading a tag of type "int" in the "simple display".
-42 The following example shows the result of reading a tag of type "dword" in the "raw" display.
[ 1, 47, 233, 0 ]
176
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
Possible error messages
The following table shows the possible error messages of the PlcProgram.Read method.
Error code 1 2
4
200
201 203
204
Error message
Meaning
Internal error
An internal error occurred while trying to perform the requested operation.
Permission denied The current authentication token is not authorized to call this method.
Log on with a user account that has sufficient privileges to call this method.
No resources
The system does not have the necessary resources to read the requested address.
Carry out the request again as soon as sufficient resources are available again.
Address does not The requested address does not exist or the web server cannot access the requested
exist
address.
Invalid address The structure of the name of the symbolic address is not correct.
Invalid array index The dimensions and limits of the array indexes do not correspond to the type information of the CPU.
Unsupported address
The data type of the address cannot be read.
3.20.5.4
PlcProgram.Write
The PlcProgram.Write method is used to write process data to the CPU. To call the PlcProgram.Write method, you need the "write_value" authorization.
Structure of the request
The following table informs you about the properties of the tag to be written.
Name "var" "value"
"mode"
Required Yes Yes
Data type String Variant
optional, default is Bool "simple"
Description
Name of the tag to be written
The value to be written; the value depends on the operating mode
Enumeration that specifies the format of "value":
· "simple": The user must specify the values according to the "simple" representation (see section "Supported data types").
· "raw": The user must specify the values according to the "raw" representation (see section "Supported data types").
Web server Function Manual, 11/2019, A5E03484625-AG
177
Web pages 3.20 API (Application Programming Interface)
Examples
In the following example, the user writes a global tag in the "simple" display. {
"var": "\"MotorSpeed\"", "value": 9001 }
In the following example, the user writes a tag to a data block in the "raw" representation. {
"var": "\"MyDB\".MyVariable", "value": [ 255, 77, 1, 99 ], "mode": "raw" }
In the following example, the user writes a string tag consisting of 10 characters to the "simple" representation: {
"var": "\"MyDB\".MyString", "value": "Short Str", "mode": "simple" }
In the following example, the user writes a string tag consisting of 10 characters with the text "Short Str" in the "raw" representation: {
"var": "\"MyDB\".MyString", "value": [ 10, 9, 83, 104, 111, 114, 116, 32, 83, 116, 114, 0 ], "mode": "raw" }
In the following example, the user writes a Wstring tag consisting of 6 characters in the "simple" representation: {
"var": "\"MyDB\".MyWString", "value": "Hello", "mode": "simple" }
In the following example, the user writes a string tag consisting of 6 characters with the text "Hello" in the display "raw": {
"var": "\"MyDB\".MyWString", "value": [ 0, 6, 0, 5, 0, 72, 0, 101, 0, 108, 0, 108, 0, 111, 0, 0 ], "mode": "raw" }
178
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
Response structure
If the write operation was successful, the server returns the Boolean value "true".
Possible error messages
The following table shows the possible error messages of the PlcProgram.Read method.
Error code 1 2
4
200
201 203
204
Error message
Meaning
Internal error
An internal error occurred while trying to perform the requested operation.
Permission denied The current authentication token is not authorized to call this method.
Log on with a user account that has sufficient privileges to call this method.
No resources
The system does not have the necessary resources to read the requested address.
Carry out the request again as soon as sufficient resources are available again.
Address does not The requested address does not exist or the web server cannot access the requested
exist
address.
Invalid address The structure of the name of the symbolic address is not correct.
Invalid array index The dimensions and limits of the array indexes do not correspond to the type information of the CPU.
Unsupported address
The data type of the address cannot be written.
3.20.5.5
PlcProgram.Browse
The PlcProgram.Browse method allows you to search tags and the corresponding metadata according to your individual requirements.
To call the PlcProgram.Browse method, you need the "read_value" authorization.
Structure of the request
The following table informs you about the properties of the tag to be searched.
Name "var"
"mode"
Required
See "Description" column
Data type String
Yes
String
Description Name of the tag to be searched
· If "mode" = "var", this attribute is required. The Browse method searches for the tag to find the metadata of the tag.
· If "mode" = "children", this attribute is optional. The Browse method searches for the tag and returns a list of child tags and metadata.
Enumeration that determines the behavior of this method:
· "var": Displays information about the specified tag. · "children": Displays information about the direct children of the spe-
cified tag
Web server Function Manual, 11/2019, A5E03484625-AG
179
Web pages 3.20 API (Application Programming Interface)
Example 1
In the following example the user searches the root node of the CPU.
{ "mode": "children"
}
The following example shows a possible response from the server.
[ { "name": "TestDB", "has_children": true, "db_number": 2, "datatype": "datablock" }, { "name": "GenUsrMsg_Ret", "address": "%MW43", "area": "M", "datatype": "int" }
]
Example 2
In the following example, the user searches the descendants (children) of a data block.
{ "var": "\"MyDB\"", "mode": "children"
}
The following example shows a possible response from the server.
[ { "name": "Static_1", "db_number": 1, "datatype": "int" }, { "name": "Static_2", "db_number": 1, "datatype": "int" }
]
180
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
Example 3
In the following example, the user requests information about a specific tag.
{ "var": "\"MyDB\".MyStruct.MyField", "mode": "var"
}
The following example shows a possible response from the server.
[ { "name": "MyDateTimeValue", "db_number": 2, "datatype": "date_and_time", "array_dimensions": [ { "start_index": 0, "count": 3 } ] }
]
Response structure
The following tables show the structure of server responses to successful requests.
PlcProgram_Browse_Response (Objekt-Array)
Name
Required
Data type
Name
Yes
string
address
No
string
read_only
No
has_children
No
db_number
No
bool bool integer
Description
Tag name; can be used as a string identifier for the field.
Address of the tag in STEP 7; only applicable for the tags in the ranges M, I, Q, timer and counter and tags in non-optimized data blocks. The representation corresponds to the addresses in the watch tables in the TIA Portal.
Query whether the tag is a read-only tag The only valid value is "true". If the tag is to be written, this attribute does not appear.
Query whether the tag is a structured tag with child tags The only valid value is "true". If the tag is an unstructured data type, this attribute is not displayed.
Numerical data block identifier; appears at "datatype" = "datablock" and for each child element of a data block (with corresponding data block number)
Web server Function Manual, 11/2019, A5E03484625-AG
181
Web pages 3.20 API (Application Programming Interface)
PlcProgram_Browse_Response (Objekt-Array)
Name
Required
Data type
area
No
string
datatype
Yes
string
max_length
No
ar-
No
ray_dimensions
integer
PlcProgram_Browse_ Response_ArrayData
Description
Letter which defines the range (M/I/Q/timer/counter) of the tag. If the tag is not in one of these ranges, the attribute does not appear.
Data type of the tag For data blocks this is the data type "datablock"; for tags, see table in section "Supported data types". If the data type is not supported, the data type is "unsupported".
If the data type is a "string" or "wstring", this value is the maximum number of characters allowed in the tag.
Object arrays arranged from the most significant to the least significant array dimension. The attribute is only displayed if the tag is an array.
PlcProgram_Browse_Response_ArrayData (Objekt-Array)
Name
Required
Data type
start_index
Yes
integer
count
Yes
integer
Description
Start index for this array dimension, as specified in the TIA Portal project.
Number of elements in this array dimension
Possible error messages
The following table shows possible error messages of the PlcProgram.Browse method.
Error code 2 3
4 200 201 202 203
Error message
Meaning
Permission denied The current authentication token is not authorized to call this method.
Log on with a user account that has sufficient privileges to call this method.
System is busy
The desired operation cannot be performed because the system is currently performing a different request.
Restart the query as soon as the current operation is complete.
No resources
The system does not have the necessary resources to retrieve the type information.
Carry out the request again as soon as sufficient resources are available again.
Address does not The requested address does not exist or the web server cannot access the requested
exist
address.
Invalid address The structure of the name of the symbolic address is not correct.
Variable is not a structure
It is not possible to search the specific address because the tag is not a structured data type.
Invalid array index The dimensions and limits of the array indexes do not correspond to the type information of the CPU.
182
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
3.20.6
Website for monitoring and controlling a wind turbine
Example of a user page
Here you see a user page for monitoring and controlling a wind turbine:
Figure 3-81 Overview of user page wind turbine
Web server Function Manual, 11/2019, A5E03484625-AG
183
Web pages 3.20 API (Application Programming Interface)
The user page was created in English in this example, but you can select any language you wish when you create your own user page. If you have the corresponding rights, you have read and write access to the turbine parameters via the Web API.
Figure 3-82 Overview user page wind turbine after login
Files used
The following files were used in this example:
api.css: The Cascading Style Sheet which includes the formatting specifications of the user page. The use is optional but can simplify the design of the user page.
index.html: The user page in the figure shown above.
api.js: Example of using the Web API in JavaScript
Wind_turbine.jpg: The background image displayed on the user page. The use of images is optional. User-defined pages with many images require a lot of space in the load memory.
In the following paragraphs you will find the respective code examples in the mentioned files, which are necessary for the implementation of the user page.
184
Web server Function Manual, 11/2019, A5E03484625-AG
api.css
Web pages 3.20 API (Application Programming Interface)
.modal { display: block; position: absolute; background-color: #f1f1f1; min-width: 160px; max-height: 600px; border-radius: 0.8rem; overflow-y: auto; padding: 20px; box-shadow: 0px 8px 16px 0px rgba(0, 0, 0, 0.2); top: 30%; left: 50%; z-index: 10; transform: translate(-50%, -50%);
}
.login { display: flex; flex-direction: column;
}
body { background-image: url("S_Kent_0005.jpeg"); background-position: 0% 0%; background-repeat: no-repeat; background-size: cover;
}
#browserarea { resize: none;
}
.tag-table { border-style: dashed; border-radius: 15px;
background:rgba(255, 255, 255, 0.7); padding: 10px; width: 80vw; }
body { font-family: 'Courier New', Courier, monospace /* text-shadow: -1px 0 white, 0 1px white, 1px 0 white, 0 -1px
white; */ }
Web server Function Manual, 11/2019, A5E03484625-AG
185
Web pages 3.20 API (Application Programming Interface)
index.html
<html> <head> <meta charset="UTF-8"> <title>[example] Turbine controls</title> <link rel="stylesheet" href="example_api.css" /> <script src="api.js"></script> </head> <body>
<span id="notice" style="display: inline-block">Please log in first</span><br>
<button id="btn-login" onclick="openModal()"> Login </button> <button id="btn-logout" onclick="apiLogout()" hidden> Log out </button>
<h1> Example controls for the turbine <span id="turbinenumber">#</span> </h1>
Turbine speed: <input id="turb-speed" readonly > <button onclick="updateTurbineSpeed()">Get current value</button><br>
Turbine speed (SP): <input id="turb-speed-sp" value="Not set" onchange="turbSpeed(this)" autocomplete="off"><br>
Turbine manual control: <select onchange="turbineSpeedOverride(this)" autocomplete="off">
<option value=""></option> <option value="false">NO</option> <option value="true">YES</option> </select> <br>
<h2>Read/Write multiple values</h2> <table id="tag-table-read" class="tag-table">
<tr> <th align="left">Turbine safe operating values</th> <th align="left">Safe Values</th> <th align="left">Update with values</th>
</tr> <tr>
<td>Turbine speed</td> <td id="turb-speed-val"></td> <td><input id="turb-speed-max-sp"></td> </tr> <tr> <td>Turbine acceleration</td> <td id="turb-accel-val"></td> <td ><input id="turb-accel-max-sp"></td> </tr> <tr> <td>Turbine jerk</td> <td id="turb-jerk-val"></td> <td><input id="turb-jerk-max-sp"></td> </tr>
186
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
</table><br> <button onclick="bulkReadValues()">Get current values</button> <button onclick="bulkWriteValues()">Update with desired values</button> <br>
You are using Api version: <span id="version-label"></span>
<div id="example-modal" class="modal"> <div class="login"> <h2>Login</h2> <p> You have to login as user to interact with the API</p> Username: <input id="username" type="text"></input> Password: <input id="userpassword" type="password"></input> <button onClick="apiLogin()">Submit</button> <button type="cancel" onClick='closeModal()'>Cancel</button> The IP address of the PLC: <input id="target-ip" value="https://<ip-address>"
type="text" autocomplete=off onchange="changeIp(this)"></input> </div>
</div> </body> </html>
Web server Function Manual, 11/2019, A5E03484625-AG
187
Web pages 3.20 API (Application Programming Interface)
api.js
"use-strict"
let messageId = 1
let TARGET_IP = "https://192.168.2.132/api/jsonrpc"
let AUTH_TOKEN = null
function ping() { if (AUTH_TOKEN !== null) { fetch(TARGET_IP, { method: "POST", headers: { "Content-type": "application/json", "X-Auth-Token": AUTH_TOKEN }, body: JSON.stringify({ "id": messageId++, "jsonrpc": "2.0", "method": "Api.Ping" }) }) }
}
setInterval(ping, 50000)
function updateTurbineSpeed() { if (AUTH_TOKEN !== null) { fetch(TARGET_IP, { method: "POST", headers: { "Content-type": "application/json", "X-Auth-Token": AUTH_TOKEN }, body: JSON.stringify({ "id": messageId++, "jsonrpc": "2.0", "method": "PlcProgram.Read", "params": { "var": "\"turbine_speed\"" } }) }) .then(response => response.json()) .then((data) => { let turbNum = document.getElementById("turb-speed") turbNum.value = data.result }) .catch(e => console.error(e)) }
}
188
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
function turbSpeed() { if (AUTH_TOKEN !== null) { let turbSp = document.getElementById("turb-speed-sp") fetch(TARGET_IP, { method: "POST", headers: { "Content-type": "application/json", "X-Auth-Token": AUTH_TOKEN }, body: JSON.stringify({ "id": messageId++, "jsonrpc": "2.0", "method": "PlcProgram.Write", "params": { "var": "\"turbine_speed_sp\"", "value": parseFloat(turbSp.value) } }) }) .then(response => response.json()) .then((data) => { if (data.result) { console.log("Api responds with " + data.result) } else {throw "Something happened while writing value" } }) .catch(e => console.error(e)) }
}
function getTurbineNumber() { let label = document.getElementById("turbine-number") fetch(TARGET_IP, { method: "POST", headers: { "Content-type": "application/json", "X-Auth-Token": AUTH_TOKEN }, body: JSON.stringify({ "id": messageId++, "jsonrpc": "2.0", "method": "PlcProgram.Read", "params": { "var": "\"turbineNumber\"" } }) }) .then(response => response.json()) .then((data) => { label.innerHTML = data.result }) .catch(e => console.error(e))
}
Web server Function Manual, 11/2019, A5E03484625-AG
189
Web pages 3.20 API (Application Programming Interface)
function turbineSpeedOverride(element) { if (AUTH_TOKEN !== null) { fetch(TARGET_IP, { method: "POST", headers: { "Content-type": "application/json", "X-Auth-Token": AUTH_TOKEN }, body: JSON.stringify({ "id": messageId++, // id can be omitted, in that case it is
a notification request "jsonrpc": "2.0", "method": "PlcProgram.Write", "params": { "var": "\"turbine_speed_override\"", "value": (element.value === "true") }
}) })
.then(response => response.json()) .then((data) => {
if (data.result) { console.log("Api responds with " + data.result)
} else {
throw "Something happened while writing value" } }) .catch(e => console.error(e)) } } function apiLogin() {
let input_user = document.getElementById("username").value let input_password = document.getElementById("userpassword").value
fetch(TARGET_IP, { method: "POST", headers: { "Content-type": "application/json", }, body: JSON.stringify({ "id": messageId++, "jsonrpc": "2.0", "method": "Api.Login", "params": { user: input_user, password: input_password } })
})
190
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
.then(response => response.json()) .then((data) => {
AUTH_TOKEN = data.result.token document.getElementById("notice").innerHTML = "You are logged in"
getApiVersion() getTurbineNumber() bulkReadValues()
showBtn("btn-logout") hideBtn("btn-login") closeModal() }) .catch(e => console.error(e)) }
function bulkReadValues() {
if (AUTH_TOKEN !== null) { let turbSpeedMax = document.getElementById("turb-speed-val") let turbAccelMax = document.getElementById("turb-accel-val") let turbJerkMax = document.getElementById("turb-jerk-val") fetch(TARGET_IP, { method: "POST", headers: { "Content-type": "application/json", "X-Auth-Token": AUTH_TOKEN }, body: JSON.stringify([ { "id": messageId++, "jsonrpc": "2.0", "method": "PlcProgram.Read", "params": { "var": "\"turbine_max_speed\"" } }, { "id": messageId++, "jsonrpc": "2.0", "method": "PlcProgram.Read", "params": { "var": "\"turbine_max_acceleration\"" } }, { "id": messageId++, "jsonrpc": "2.0", "method": "PlcProgram.Read", "params": { "var": "\"turbine_max_jerk\"" } }]) })
Web server Function Manual, 11/2019, A5E03484625-AG
191
Web pages 3.20 API (Application Programming Interface)
.then(response => response.json()) .then((data) => {
turbSpeedMax.innerHTML = data[0].result turbAccelMax.innerHTML = data[1].result turbJerkMax.innerHTML = data[2].result }) } }
function bulkWriteValues() {
if (AUTH_TOKEN !== null) { let turbSpeedMaxSp = document.getElementById("turb-speed-max-
sp") let turbAccelMaxSp = document.getElementById("turb-accel-max-
sp") let turbJerkMaxSp = document.getElementById("turb-jerk-max-sp")
fetch(TARGET_IP, { method: "POST", headers: { "Content-type": "application/json", "X-Auth-Token": AUTH_TOKEN }, body: JSON.stringify([ { "id": messageId++, "jsonrpc": "2.0", "method": "PlcProgram.Write", "params": { "var": "\"turbine_max_speed\"", "value": parseFloat(turbSpeedMaxSp.value) } }, { "id": messageId++, "jsonrpc": "2.0", "method": "PlcProgram.Write", "params": { "var": "\"turbine_max_acceleration\"", "value": parseFloat(turbAccelMaxSp.value) } }, { "id": messageId++, "jsonrpc": "2.0", "method": "PlcProgram.Write", "params": { "var": "\"turbine_max_jerk\"", "value": parseFloat(turbJerkMaxSp.value) } }])
})
192
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
.then(response => response.json()) .then((data) => {
bulkReadValues() }) } }
function getApiVersion() { let label = document.getElementById("version-label")
fetch(TARGET_IP, { method: "POST", headers: { "Content-type": "application/json", "X-Auth-Token": AUTH_TOKEN }, body: JSON.stringify({ "id": messageId++, "jsonrpc": "2.0", "method": "Api.Version"
}) })
.then(response => response.json()) .then((data) => {
label.innerHTML = data.result }) .catch(e => console.error(e)) }
function browseRoot() { let textarea = document.getElementById("browserarea")
fetch(TARGET_IP, { method: "POST", headers: { "Content-type": "application/json", "X-Auth-Token": AUTH_TOKEN }, body: JSON.stringify({ "id": messageId++, "jsonrpc": "2.0", "method": "PlcProgram.Browse", "params": { "mode": "children" } })
}) .then(response => response.json()) .then((data) => { textarea.value = JSON.stringify(data.result, null, 4) }) .catch(e => console.error(e))
}
function apiLogout() {
Web server Function Manual, 11/2019, A5E03484625-AG
193
Web pages 3.20 API (Application Programming Interface)
fetch(TARGET_IP, { method: "POST", headers: { "Content-type": "application/json", "X-Auth-Token": AUTH_TOKEN }, body: JSON.stringify({ "id": messageId++, "jsonrpc": "2.0", "method": "Api.Logout", })
}) .then(response => response.json()) .then((data) => { AUTH_TOKEN = null openModal() hideBtn("btn-logout") showBtn("btn-login") document.getElementById("notice").innerHTML = "Please log in
first" }) .catch(e => console.error(e))
}
function changeIp(element) { TARGET_IP = `${element.value}/api/jsonrpc .replace("//api", "/api")
}
function closeModal() { let modal = document.getElementById("example-modal") modal.style.display = "none"
}
function openModal() { let modal = document.getElementById("example-modal") modal.style.display = "block"
} function closeModal() {
let modal = document.getElementById("example-modal") modal.style.display = "none" }
function hideBtn(btnId) { let btn = document.getElementById(btnId) btn.style.display = "none"
}
function showBtn(btnId) { let btn = document.getElementById(btnId) btn.style.display = "block"
}
194
Web server Function Manual, 11/2019, A5E03484625-AG
Web pages 3.20 API (Application Programming Interface)
function openModal() { if (AUTH_TOKEN !== null) { alert("Already logged in.") } else { let modal = document.getElementById("example-modal") modal.style.display = "block" }
}
Web server Function Manual, 11/2019, A5E03484625-AG
195
Glossary
Automation system
An automation system is a programmable logic controller that consists of at least one CPU, various input and output modules, as well as operating and monitoring devices.
AWP
Automation Web Programming
AWP commands
Special command syntax for data exchange between CPU and HTML file.
Configuration
Systematic arrangement of individual modules (design).
CSS
A CSS (Cascading Style Sheet) specifies how an area or content marked up in HTML is displayed.
Device
Device that can send, receive or amplify data via the bus, e.g., IO controller.
Diagnostics
The detection, localization, classification, visualization and further evaluation of errors, malfunction and alarms.
Diagnostics provides monitoring functions that run automatically during plant operation. This increases the availability of plants by reducing commissioning times and downtimes.
Firewall
A firewall is used to restrict the network access based on sender or target address of the used services. The firewall decides based on specified rules which of the network packets it handles are forwarded and which are not. This way the firewall tries to prevent unauthorized network access.
It is not the function of a firewall to detect attacks. It only implements rules for network communication.
196
Web server Function Manual, 11/2019, A5E03484625-AG
Glossary
HTTP
Hypertext Transfer Protocol (HTTP). Protocol for data transmission across a network.
HTTPS
Hypertext Transfer Protocol Secure (HTTPS). Protocol for tap-proof transmission of sensitive data across a network.
Identification data
Identification data is stored on a module, and contains information which supports the user in Checking the system configuration Locating hardware changes in a system Correcting errors in a system Modules can be clearly identified online using the identification data.
Master
The master in possession of the token is an active device. This master has the option to receive data from other devices and to send data to other devices.
PROFIBUS
PROcess FIeld BUS, process and field bus standard specified in standard IEC 61784-1:2002 Ed1 CP 3/1. It specifies functional, electrical, and mechanical properties for a bit-serial field bus system.
PROFIBUS is available with the protocols DP (= Distributed I/O), FMS (= Fieldbus Message Specification), PA (= Process Automation), or TF (= Technological Functions).
PROFINET
Within the framework of Totally Integrated Automation (TIA), PROFINET represents the consistent continuation of:
PROFIBUS DP, the established field bus
Industrial Ethernet, the communications bus for the cell level
Experience gained from both systems was and is being integrated into PROFINET.
PROFINET as an Ethernet-based automation standard from PROFIBUS International (previously PROFIBUS User Organization) defines a vendor-independent communication, automation, and engineering model.
Web server Function Manual, 11/2019, A5E03484625-AG
197
Glossary
PROFINET component
A PROFINET component includes the entire data of the hardware configuration, the parameters of the modules, and the corresponding user program. The PROFINET component is made up as follows:
Technological Function
The (optional) technological (software) function includes the interface to other PROFINET components in the form of interconnectable inputs and outputs.
Device
The device is the representation of the physical programmable controller or field device including the I/O, sensors and actuators, mechanical parts, and the device firmware.
PROFINET IO
As part of PROFINET, PROFINET IO is a communication concept that is used to implement modular, distributed applications.
PROFINET IO allows you to create automation solutions which are familiar to you from PROFIBUS.
PROFINET IO is implemented by the PROFINET standard for automation devices on the one hand, and on the other hand by the engineering tool STEP 7.
That is, you have the same application view in STEP 7, regardless of whether you configure PROFINET or PROFIBUS devices. Programming your user program is essentially the same for PROFINET IO and PROFIBUS DP if you use the extended blocks and system status lists for PROFINET IO.
PROFINET IO controller
Device used to address connected I/O devices. This means that the IO controller exchanges input and output signals with assigned field devices. The IO controller is often the controller on which the automation program runs.
PROFINET IO device
A distributed field device that is assigned to one of the IO controllers (e.g., remote IO, valve terminals, frequency converters, switches).
URL
Uniform Resource Locator (URL). Identifies and localizes a source, such as a web page, uniquely via the method of access used and the location of the source in computer networks.
198
Web server Function Manual, 11/2019, A5E03484625-AG
Glossary
UTF-8
Abbreviation for 8-bit UCS (Universal Character Set) transformation format. Most popular coding of Unicode characters.
Each Unicode character is assigned a specially coded byte string of variable length in this format. UTF-8 supports up to four bytes on which all Unicode characters can be mapped.
Web browser
Web browsers are visualization programs for web pages and can communicate with Web servers. Typical web browsers are, for example: Microsoft Internet Explorer Mozilla Firefox
Web server Function Manual, 11/2019, A5E03484625-AG
199
Index
A
Access restriction, 29 Activating the Web server, 20 Alarms, 65 Automatic updating, 25 AWP commands, 124
Arrays, 135 Enumeration types, 131 Fragments, 133 PLC tags, 125, 128 Special tags, 129 Structures, 136
B
Backup of configuration, 89 Binding, 40
C
CA certificate, 21 Certificate
Web server certificate, 21 Certificate manager
Global CA-signed certificate, 22 Global security settings, 22 Local CPU-specific certificate, 22 Communication, 67 Connections, 71 Parameters, 67 Resources, 70 Statistics, 69
200
Configuring Backup, 87 Restoring, 87
Copy protection, 40 CPU-specific certificate, 21
D
Diagnostics (Motion Control), 49 Diagnostics buffer, 48 Display of texts in different languages, 30
E
East Asian languages, 30
F
Fail-safe, 47 FAQs
Automatically updating web pages, 123 Download certificate, 24 Incorporating web pages with relative path names, 123 User page as start page, 143 Web server access via smartphone, 18 Filebrowser, 154 System files, 154 Firmware update, 62 F-runtime groups, 47
G
Global security settings, 22
Web server Function Manual, 11/2019, A5E03484625-AG
H
HTTPS, 24
I
Identification, 38 Diagnostics, 38 Module information, 59
K
Know-how protection, 39
L
Language settings, 29
M
Measurements (trace), 96 Memory, 40 Motion Control
Diagnostics, 49 Service overview, 49 Motion status, 52
P
Program protection, 39
R
Reading out service data, 155 Reading PLC tags
Overview, 126 String or character tags in expressions, 127 Tags of the String and Character type, 126 Restoring the configuration, 90 Runtime information, 41
S
Security functions, 14 Select technology objects, 56 Self-signed certificates, 21 Service overview, 54 Signal table (Trace), 101, 101 Start page, 33
Intro, 33 Log in, 36 Logout, 36 Statistics Communication, 69 Module information, 60 Status and error bits, 51
T
Tags writing, 83, 86
Technology objects Status, errors, technology alarms, 49
Topology, 72 Actual topology, 72 Examples, 79 Graphical view, 73 Set topology, 72 Status overview, 78 Tabular view, 76
Trace recordings, 94 Trend diagram (Trace), 97
U
Updating and saving, 32 Deactivating automatic updating, 32 Printing web pages, 32
Index
Web server Function Manual, 11/2019, A5E03484625-AG
201
Index
Saving alarms, 66 Saving diagnostics buffer entries, 49 Updating user pages, 123 User interface language assign to project language, 31 Setting, 34 User management, 26 User pages, 120 Configuring user pages, 138 Example user page, 143 User page as start page, 141 WWW instruction, 139 User-defined pages, 28
W
Web access Via HMI devices and mobile terminal devices, 18 Via PG/PC, 18
Web browser, 15 Web server
Certificate, 21 Properties, 14 Web server - web pages Tag status, 82 Watch table, 85 Web server certificate creating and assigning, 21 Web server language, 26
202
Web server Function Manual, 11/2019, A5E03484625-AG
SIMATIC STEP 7 (TIA Portal) options Target 1500STM for Simulink® V2.0
Programming Manual
_In_tro_d_uc_tio_n____________1_ _Se_c_ur_ity_in_fo_rm_a_tio_n________2_ _SSiu_epm_peo_nrts_I_nd_u_st_ry_O_nl_ine______3_ _In_du_st_ry_M_a_ll ___________4_ _Pr_od_u_ct_o_ve_rv_ie_w_________5_ _In_sta_ll_ing______________6_ _Ex_a_m_ple_o_f_a _wo_rk_fl_ow_______7_ _Us_in_g_an_e_x_am_p_le_p_ro_je_ct_____8_ _Fi_les_g_e_ne_ra_te_d_by_c_o_de_rs_____A_ _Re_fe_re_n_ce_d_m_od_e_ls________B_ _Ex_te_rn_a_l m_o_de__________C__ _PSaT_rEa_Pm_7e_te_r a_cc_e_ss_fr_om______D__ _Ac_c_es_s _to_in_te_rn_al_s_ign_a_ls_____E_ _Us_in_g_bu_s_o_bj_ec_ts_in_S_T_EP_7____F_ _Al_ar_m_s _____________G__
01/2018
A5E38915112-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E38915112-AC 01/2018 Subject to change
Copyright © Siemens AG 2016 - 2018. All rights reserved
Table of contents
1 Introduction ............................................................................................................................................. 5
1.1
Guide for this manual................................................................................................................5
1.2
Guide to documentation S7-1500 / ET 200MP .........................................................................7
2 Security information .............................................................................................................................. 11
3 Siemens Industry Online Support .......................................................................................................... 12
4 Industry Mall ......................................................................................................................................... 13
5 Product overview .................................................................................................................................. 14
5.1
Overview of functions..............................................................................................................14
5.2
Basic procedure ......................................................................................................................15
6 Installing ............................................................................................................................................... 16
6.1
System requirements ..............................................................................................................16
6.2
Installing Target 1500S ...........................................................................................................17
6.3
Licensing Target 1500S ..........................................................................................................19
6.4
Uninstalling Target 1500S ......................................................................................................21
6.5
Repairing Target 1500S..........................................................................................................22
7 Example of a workflow .......................................................................................................................... 23
7.1
Creating a Simulink model ......................................................................................................23
7.2
Description of Simulink parameters ........................................................................................24
7.3
Description of the Target 1500S options ................................................................................27
7.4
Description of the Target 1500S Openness options...............................................................29
7.5
Description of the Target 1500S Advanced options ...............................................................31
7.6
Importing SCL file automatically into STEP 7 after Simulink build .........................................34
7.7
Running Simulink build ...........................................................................................................35
7.8
The Diagnostic Viewer ............................................................................................................36
7.9
Loading and running the ODK application ..............................................................................37
8 Using an example project...................................................................................................................... 39
A Files generated by coders ..................................................................................................................... 40
B Referenced models ............................................................................................................................... 41
C External mode....................................................................................................................................... 43
C.1
The external mode ..................................................................................................................43
C.2
Setting communication parameters for external mode ...........................................................44
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
3
Table of contents
C.3
The function block CallExtMode ............................................................................................ 46
C.4
Establishing an external mode connection ............................................................................ 49
D Parameter access from STEP 7 ............................................................................................................ 50
D.1
Introduction ............................................................................................................................ 50
D.2
Enabling parameter access ................................................................................................... 50
D.3
The ReadWriteParameters function block ............................................................................. 51
D.4
Establishing parameter access .............................................................................................. 52
E Access to internal signals...................................................................................................................... 53
F Using bus objects in STEP 7 ................................................................................................................. 55
F.1
Bus objects............................................................................................................................. 55
G Alarms .................................................................................................................................................. 56
G.1
Alarms during the build process............................................................................................. 56
G.2
Information messages............................................................................................................ 56
G.3
Warnings ................................................................................................................................ 58
G.4
Error messages...................................................................................................................... 60
Index .................................................................................................................................................... 63
Target 1500STM for Simulink® V2.0
4
Programming Manual, 01/2018, A5E38915112-AC
Introduction
1
1.1
Guide for this manual
Purpose of the documentation
This documentation provides important information about installing and setting up SIMATIC Target 1500S for Simulink and generating an ODK object.
Basic knowledge required
The following knowledge is required in order to understand the documentation: General knowledge of automation technology Knowledge of the SIMATIC industrial automation system Knowledge of working with STEP 7 Use of Microsoft Windows operating systems Proficiency with Mathworks MATLAB and Simulink
Validity of the documentation
This documentation is valid for the product SIMATIC Target 1500S for Simulink.
Notes
Please also observe notes labeled as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the part of the documentation to which particular attention should be paid.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
5
Introduction 1.1 Guide for this manual
Definitions and naming conventions
The following terms are used in this documentation: Target 1500S: This term refers to the product SIMATIC Target 1500S for Simulink. ODK: This term refers to the product Open Development Kit 1500S in the compatible
version. SO: Shared Object. Output object after an ODK build. SCL: Structure Control Language. Programming language in STEP7. STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the
configuration and programming software "STEP 7 (TIA Portal V15 or higher)". Matlab: Mathworks MATLAB
MATLAB and Simulink are registered trademarks of The MathWorks, Inc. TIA Portal Openness: Automation interface of TIA Portal V15. Used by Target 1500S to
import from external sources.
Target 1500STM for Simulink® V2.0
6
Programming Manual, 01/2018, A5E38915112-AC
Introduction 1.2 Guide to documentation S7-1500 / ET 200MP
1.2
Guide to documentation S7-1500 / ET 200MP
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200MP distributed I/O system is arranged into three areas. This arrangement enables you to access the specific content you require.
Basic information
The System Manual and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200MP systems. The STEP 7 online help supports you in the configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, wiring diagrams, characteristics and technical specifications.
General information
The function manuals contain detailed descriptions on general topics regarding the SIMATIC S7-1500 and ET 200MP systems, e.g. diagnostics, communication, motion control, Web server, OPC UA.
You can download the documentation free of charge from the Internet (http://w3.siemens.com/mcms/industrial-automation-systems-simatic/en/manualoverview/Pages/Default.aspx).
Changes and supplements to the manuals are documented in a Product Information.
You can download the product information free of charge from the Internet (https://support.industry.siemens.com/cs/us/en/view/68052815).
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
7
Introduction 1.2 Guide to documentation S7-1500 / ET 200MP
Manual Collection S7-1500/ET 200MP
The Manual Collection contains the complete documentation on the SIMATIC S7-1500 automation system and the ET 200MP distributed I/O system gathered together in one file.
You can find the Manual Collection on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86140384).
SIMATIC S7-1500 comparison list for programming languages
The comparison list contains an overview of which instructions and functions you can use for which controller families.
You can find the comparison list on the Internet (https://support.industry.siemens.com/cs/ww/en/view/86630375).
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - CAx data
In the CAx data area in "mySupport", you can access the current product data for your CAx or CAe system.
You configure your own download package with a few clicks.
In doing so you can select:
Product images, 2D dimension drawings, 3D models, internal circuit diagrams, EPLAN macro files
Manuals, characteristics, operating manuals, certificates
Product master data
You can find "mySupport" - CAx data on the Internet (http://support.industry.siemens.com/my/ww/en/CAxOnline).
Target 1500STM for Simulink® V2.0
8
Programming Manual, 01/2018, A5E38915112-AC
Introduction 1.2 Guide to documentation S7-1500 / ET 200MP
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products. You will find the application examples on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109482830).
TIA Selection Tool
With the TIA Selection Tool, you can select, configure and order devices for Totally Integrated Automation (TIA). This tool is the successor of the SIMATIC Selection Tool and combines the known configurators for automation technology into one tool. With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration. You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on various SIMATIC S7 stations as a bulk operation independent of the TIA Portal. General function overview: Network browsing and creation of a table showing the accessible devices in the network. Flashing of device LEDs or HMI display to locate a device Downloading of addresses (IP, subnet, gateway) to a device Downloading the PROFINET name (station name) to a device Placing a CPU in RUN or STOP mode Setting the time in a CPU to the current time of your PG/PC Downloading a new program to a CPU or an HMI device Downloading from CPU, downloading to CPU or deleting recipe data from a CPU Downloading from CPU or deleting data log data from a CPU Backup/restore of data from/to a backup file for CPUs and HMI devices Downloading service data from a CPU Reading the diagnostics buffer of a CPU Performing a CPU memory reset Resetting devices to factory settings Downloading a firmware update to a device You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
9
Introduction 1.2 Guide to documentation S7-1500 / ET 200MP
PRONETA
With SIEMENS PRONETA (PROFINET network analysis), you analyze the PROFINET network during commissioning. PRONETA features two core functions:
The topology overview independently scans PROFINET network and all connected components.
The IO check is a fast test of the wiring and the module configuration of a system.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and optimal exploitation of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
The Manual Collection includes the complete documentation for distributed I/O system SIMATIC ET 200SP assembled in a single file.
You can find the Manual Collection on the Internet (http://support.automation.siemens.com/WW/view/en/84133942).
Target 1500STM for Simulink® V2.0
10
Programming Manual, 01/2018, A5E38915112-AC
Security information
2
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (https://www.siemens.com/industrialsecurity).
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
11
Siemens Industry Online Support
3
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (http://www.siemens.com/automation/service&support).
Target 1500STM for Simulink® V2.0
12
Programming Manual, 01/2018, A5E38915112-AC
Industry Mall
4
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com).
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
13
Product overview
5
5.1
Overview of functions
Basics
Mathworks Matlab is software for the primary solution of mathematical problems and their visualization.
Simulink is an add-on for Matlab for graphical modeling of systems and their simulation.
Target 1500S
Target 1500S is an add-on for Simulink, which generates an executable object for an ODKenabled controller from a Simulink model. It enables you to run a Simulink model on a controller.
Target 1500S automatically generates all the necessary blocks and files for this. An SCL and SO file is created from the generated C/C++ code.
The SCL file is imported as external source to STEP 7 and contains the generated function blocks.
The SO file contains the C/C++ implementation and is available to the CPU after transfer to the web server.
Target 1500STM for Simulink® V2.0
14
Programming Manual, 01/2018, A5E38915112-AC
Product overview 5.2 Basic procedure
5.2
Basic procedure
Overview of the individual steps
To run a Simulink model on a controller, follow these steps: 1. Create a model in Simulink. 2. Configure the properties of the model in Simulink. 3. Under "Code Generation", select Target 1500S as System Target File . 4. Adapt the parameters for Simulink and Target 1500S . 5. Start the build in Simulink.
The SO and SCL file is generated and stored in the output directory "outputs". 6. Transfer the SO file into the ODK 1500S folder in the Web server of the controller. 7. To import the SCL files after the build automatically to the STEP 7 project, enable the
"Import the generated SCL file to CPU(s)" option in the Target 1500S Openness options (Page 29). Steps 8 and 9 are automatically executed as a result. 8. Add the SCL file as an external source in STEP 7. 9. Generate blocks from the external source in STEP 7. 10.Call the required blocks in your S7 program. 11.Load the program onto the ODK-enabled controller. You can find more information on the ODK-relevant steps in the ODK manual (https://support.industry.siemens.com/cs/ww/en/ps/13914/man) of the corresponding version.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
15
Installing
6
6.1
System requirements
Requirements
Your PC must meet the following system requirements in order to use the Target 1500S:
Category Operating system Processor and memory
Operator interface SIMATIC Software
Additional software
Requirement · Microsoft Windows 7 SP1, 64-bit · Microsoft Windows 8.1, 64-bit · Microsoft Windows 10, 64-bit
PC system: · 100 MB of free space on the hard disk C:\ · At least systems with Intel Core i5 processor · 1.2 GHz or higher · At least 4 GB RAM
Monitor, keyboard and mouse. · SIMATIC ODK 1500S V2.0 or V2.5 · Optional: SIMATIC STEP 7 Professional (TIA Portal) V15 or higher with TIA Portal
Openness V15 · Optional: SIMATIC CPU 15xx, which supports ODK V2.0 or V2.5
· Matlab 2017b (64-bit) in the following configuration: Matlab 9.3 Matlab Coder 3.4 Simulink 9.0 Simulink Coder 8.13
· Java Runtime Environment (32-bit)
Target 1500STM for Simulink® V2.0
16
Programming Manual, 01/2018, A5E38915112-AC
Installing 6.2 Installing Target 1500S
6.2
Installing Target 1500S
To install Target 1500S, select the installation folder. Follow the instructions of the setup program.
If the setup program does not start automatically, manually start the "Start.exe" file by double clicking it.
Note
Use of antivirus software
To avoid problems during the installation, disable the antivirus software for the period of the installation or exclude the directory "C:\Program Files\Common Files\Siemens\Automation\Siemens Installer Assistant" and the directory in which Start.exe is located, for the antivirus software.
Note Order of the installed Target 1500S versions
When you install multiple versions, make sure that the older version is installed before the newer one. If problems occur, uninstall all versions and install these again in this order.
Requirements
You have installed a compatible ODK 1500S version and a 32-bit Java Runtime Environment .
You need administrator rights for this action. Matlab and Simulink are installed in the required configuration. Close all Matlab instances.
Procedure
1. Launch the "Start.exe" file manually with a double-click. 2. Select the language for performing the installation. 3. Confirm with "Next".
The "Configuration" view opens. 4. Click "Next" to confirm the list of components that are to be installed.
The check mark for Automation License Manager (ALM) cannot be removed.
Note Target 1500S is already installed If Target 1500S is already installed, you can select between "Repair (Page 22)" and "Uninstall (Page 21)" here.
5. Confirm with "Next".
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
17
Installing 6.2 Installing Target 1500S
6. Agree to the license conditions and safety information. 7. Confirm with "Next".
The "Overview" with the installation settings opens. 8. Start the installation with "Install"
The following directory is created: ProgramFiles(x86)%\Siemens\Automation\Target1500S\<current version> 9. Choose whether you want to carry out the licensing (Page 19) during the installation or at a later time.
Result
The installation is complete. All product languages were installed by default during the installation process. During the installation, Target 1500S was integrated in Simulink and the product help was created in the Windows Start menu.
Note
You can install ODK after Target. Close Matlab and other applications and then restart it after the installation.
Target 1500STM for Simulink® V2.0
18
Programming Manual, 01/2018, A5E38915112-AC
Installing 6.3 Licensing Target 1500S
6.3
Licensing Target 1500S
The software requires a product-specific license key that you install with the Automation License Manager. Each SIMATIC software product for automation that is subject to license (e.g., STEP 7) has its own license key. You must install the license key for each product.
Working with the Automation License Manager
The Automation License Manager is a product of Siemens AG and is used for managing license keys. The Automation License Manager is supplied on the installation data medium of this product by default and is transferred automatically during the installation process.
Software products that require license keys for operation register the requirement for license keys automatically in the Automation License Manager. If the Automation License Manager finds a valid license key for this software, the software can be used according to the conditions of use associated with this license key.
Certificate of license
A Certificate of License is included in the scope of delivery. It contains your unique license number. The license certificate serves as proof that you have a valid license key. Store this certificate in a safe place.
Note Obtaining a replacement license key You must have a valid certificate of license to get a replacement license key.
Recovering the license key in case of defective mass storage
If an error has occurred on the mass storage or USB flash drive containing your license key file, you can restore the license using the license certificate. You can find additional information in a FAQ (https://support.industry.siemens.com/cs/ww/en/view/772175).
License key
The download of Target 1500S allows you to access ordered license keys.
For access, you need:
A personalized login that you can use to call all license keys assigned to you.
An anonymous login that you can use to fetch an individual license key, and the corresponding license certificate. This document contains all data required for the anonymous download.
Additional information on the license key and the download is available in the Automation License Manager manual (https://support.industry.siemens.com/cs/ww/en/view/102770153).
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
19
Installing 6.3 Licensing Target 1500S
Transferring the license key
The license key can be transferred during the installation or afterwards. If the USB flash drive with the relevant license key is inserted in the USB port of the PC at the start of installation, the license key will be transferred automatically during the installation. If the USB flash drive is not inserted at the start of installation, you have three options for installing the license key subsequently: To transfer the license key manually from a network computer or other storage medium,
select the "Manual license transfer" button. Insert the USB flash drive with license key, and select the "Retry license transfer" button.
The Automation License Manager opens in order to transfer the license key. If you do not want to install a license key, select the "Skip license transfer" button.
Working without valid license key
For legal reasons, a valid license key is required for this product. If no valid license key is present on your PC, you cannot generate any projects and the system indicates the non-licensed mode with a message. You have the one-time option of activating a trial license. However, this license is valid for a limited period only and expires after 21 days. When the trial license has expired, an error message appears during the build process.
Manually transferring the license key subsequently
A message is displayed if you start the Target 1500S without transferred license key. If the Automation License Manager is not yet installed on your computer, you must install it beforehand. To manually transfer the license key for Target 1500S subsequently, follow these steps: 1. Start the installation of Target 1500S with administrator rights. 2. In the "License Transfer" section, select the "Manual license transfer" button.
A dialog box for synchronization of the license opens. 3. Select the destination and the source of the license key. 4. To transfer the license key, click the "Synchronize" button.
The license key is transferred.
Target 1500STM for Simulink® V2.0
20
Programming Manual, 01/2018, A5E38915112-AC
Installing 6.4 Uninstalling Target 1500S
6.4
Uninstalling Target 1500S
Requirement
You need administrator rights for this action. You have already installed Target 1500S .
Procedure
1. Launch the "Start.exe" file manually with a double-click. 2. Select the language for performing the installation. 3. Confirm with "Next".
The "Configuration" view opens. 4. Select the "Uninstall" option. 5. Confirm with "Next".
Result
Target 1500S is removed from the Matlab environment. The entry in the Start menu is deleted. Target-specific folders are deleted.
Previously generated output of Target 1500S is not deleted.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
21
Installing 6.5 Repairing Target 1500S
6.5
Repairing Target 1500S
Requirement
You require administrator rights for this procedure. You have already installed Target 1500S .
Procedure
1. Launch the "Start.exe" file manually with a double-click. 2. Select the language for performing the installation. 3. Confirm with "Next".
The "Configuration" view opens. 4. Select the "Repair" option. 5. Confirm with "Next".
Result
Target 1500S is re-installed.
Target 1500STM for Simulink® V2.0
22
Programming Manual, 01/2018, A5E38915112-AC
Example of a workflow
7
7.1
Creating a Simulink model
Procedure
1. In Matlab, select the storage path for the model under "Current Folder". Alternatively, you can also set the storage path in the Simulink preferences under "File generation control".
2. Create the model in Simulink. You can also use a model provided by Simulink, for example Bouncing Ball .
3. Save the model.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
23
Example of a workflow 7.2 Description of Simulink parameters
7.2
Description of Simulink parameters
Some configuration parameters are preset when you select Target 1500S as the System Target File . To do so, select the system target file for Target_1500S (*.tlc) of the required version in the "Configuration Parameters".
Note Change/migrate the System Target File
If you change parameters in the "Configuration Parameters" and then want to change the System Target File, you need to first confirm the changes with the "Apply" button.
If you migrate an older version of the System Target File after a newer version, the parameters the applied. Parameters that are not present in the older version are set to the default value by the system.
Figure 7-1 Configuration parameters using the System Target File for Target 1500S V2.0 as an example
The default parameters are listed below. To successfully create an ODK object, you are not allowed to change some parameters. These parameters are marked in this product help with "(fixed)". Use the default values whenever possible. You can also set special Target 1500S options here.
Note Default parameters The system assigns default parameters, and these may overwrite existing entries.
Target 1500STM for Simulink® V2.0
24
Programming Manual, 01/2018, A5E38915112-AC
Example of a workflow 7.2 Description of Simulink parameters
Requirement
You have selected Target 1500S as the System Target File .
Relevant parameters
Solver A dynamic system is modeled as a mathematical calculation in Simulink. This calculation is performed at certain time intervals to simulate the execution of the system. The size of this time interval is referred to as the "Step-Size". The method for calculating the states of a model is referred to here as solving the model. Solver options
Determine the solver selection Type (fixed): Fixed Step Solver: auto (Automatic solver selection) Tasking and sample time options Periodic sample time constraint: Unconstrained Tasking mode for periodic sample times: Treat each discrete rate as a separate task
(disabled)
Optimization Code generation
You can select between "Tunable" and "Inlined" under "Default parameter behavior". Select "Tunable" if you want to allow parameter access from STEP 7. You can also change the parameter values during runtime. Select "Inlined" so that the values of the parameters are fixed and cannot be changed during runtime. The execution of the code is then faster.
Data Import/Export The "Save to workspace" area refers to the Matlab workspace. Time States Output Final States Format Limit data points to last Decimation
Hardware Implementation Device vendor: Intel Device type: x86-32 (Windows32)
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
25
Example of a workflow 7.2 Description of Simulink parameters
Code Generation General Language (fixed): C++ Makefile configuration (fixed): "Generate makefile" option disabled Generate code only (fixed): "Generate code only" option enabled
Code Generation > Symbols Maximum identifier length
The default value is 256. You can enter a higher value, but be aware of the ODK limits.
Code Generation > Debug Verbose Build
This option is disabled by default. Only relevant information is displayed in the Diagnostic Viewer during the build process. Enable this option to get more detailed information during the build process.
Code Generation > Interface Code interface packaging (fixed): Nonreusable function Classic call interface (fixed): "Classic call interface" option disabled Single output/update function (fixed): "Single output/update function" option enabled MAT-file logging (fixed): "MAT-file logging" option disabled Interface
Select "External mode (Page 43)" to use this. The settings are thereby made automatically. You can find the description of the individual parameters under "Setting communication parameters for external mode (Page 44)".
Code Generation > Target 1500S options The options are described in more detail under "Description of the Target 1500S options (Page 27)", "Description of the Target 1500S Openness options (Page 29)" and "Description of the Target 1500S Advanced options (Page 31)".
Target 1500STM for Simulink® V2.0
26
Programming Manual, 01/2018, A5E38915112-AC
Example of a workflow 7.3 Description of the Target 1500S options
7.3
Description of the Target 1500S options
Some configuration parameters are preset when you select Target 1500S as the System Target File . The default parameters are listed below.
Requirement
You have selected Target 1500S as the System Target File .
Adjustable parameters
ODK 1500S version
Choose an installed ODK version from this list. All versions that are compatible with the installed Target version are shown. Restarting Matlab updates the list, if you have subsequently installed ODK.
Copy all referenced files (MATLAB or C files) to ODK project
Select this option to copy all Matlab source files into the ODK project. The ODK project can then still be compiled on a PC without a Matlab installation.
The referenced files are copied to the folder "<Model-Name>_Target_1500S_<current version>_grt_Output" under "references".
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
27
Example of a workflow 7.3 Description of the Target 1500S options
Parameter access with STEP 7 Select this option to generate special code for accessing model parameters from the S7 program.
Note Enable / disable Parameter access with STEP 7. If you enable the Parameter access with STEP 7 under "Optimization" in the "Code generation" area, select the setting "Tunable" from the "Default parameter behavior" selection. If you disable the Parameter access with STEP 7 under "Optimization" in the "Code generation" area, select the setting "Inlined" from the "Default parameter behavior" selection.
Enable STEP 7 access to internal model signals To obtain defined measurement points (internal signals) as output(s) of the FB "OneStep", enable this option. You can find additional information in the section "Access to internal signals (Page 53)".
Internal signal selection From this list, select the type of internal signals for the access from STEP 7. All measurement points including test points
All measurement points are used as internal signals. All measurement points excluding test points
All measurement points, excluding test points, are used as internal signals. Only test points
Only measurement points defined as test point are used as internal signals.
Help To open the online help for Target 1500S , click on this button.
Online Support To open the Support website, click this button.
Target 1500STM for Simulink® V2.0
28
Programming Manual, 01/2018, A5E38915112-AC
Example of a workflow 7.4 Description of the Target 1500S Openness options
7.4
Description of the Target 1500S Openness options
The generated SCL source file is automatically imported into a preset STEP 7 project via the automation interface of STEP 7 "TIA Portal Openness".
Some configuration parameters are preset when you select Target 1500S as the System Target File . The default parameters are listed below.
Additional information and application examples on "TIA Portal Openness" can be found on the Internet (https://support.industry.siemens.com/cs/products?search=Tia%20Portal%20Openness&mfn =ps&o=DefaultRankingDesc&lc=en-WW).
Requirements
You have installed a compatible version of STEP 7 TIA Portal. You have installed a compatible version of STEP 7 TIA Portal Openness. You have selected Target 1500S as the System Target File . You are included in the Computer Management in the user group "Siemens TIA
Openness" with your registered user and have restarted the operating system.
Parameters that can be set
Import the generated SCL file to CPU(s)
To automatically import the generated SCL files into the STEP 7 project after the build, enable this option for one or more CPUs.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
29
Example of a workflow 7.4 Description of the Target 1500S Openness options
TIA Portal project path Specify the path to the STEP 7 project into which the generated SCL file will be imported. For example: D:\tiaprojects\project\project.ap15
CPU name(s) Specify the name of the CPU in the STEP 7 project, into which the generated SCL file will be imported. Separate multiple CPUs with a comma. For example: cpu1, cpu2
Compile the CPU(s) after import To automatically compile the CPU after the import of the SCL file, enable this option.
Compile the TIA Portal project after import To automatically compile the STEP 7 project after the import of the SCL file, enable this option.
Note To ensure the consistency of the STEP 7 project, all CPUs in the project are compiled when the option "Compile the TIA Portal project after import" is selected. Including the CPUs that are not named under "CPU name(s)".
Target 1500STM for Simulink® V2.0
30
Programming Manual, 01/2018, A5E38915112-AC
Example of a workflow 7.5 Description of the Target 1500S Advanced options
7.5
Description of the Target 1500S Advanced options
Some configuration parameters are preset when you select Target 1500S as the System Target File . The default parameters are listed below.
Requirement
You have selected Target 1500S as the System Target File .
Parameters that can be set
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
31
Example of a workflow 7.5 Description of the Target 1500S Advanced options
Hardware Interface ID (HW-Identifier) Enter the numerical value of the hardware identifier for the corresponding communications interface. The value must correspond to the value assigned under "Hardware identifier" for a communications interface in the TIA Portal. If the values do not match, the connection between Simulink and the controller cannot be established via External Mode.
Figure 7-2 Example for setting the hardware identifier
Target 1500STM for Simulink® V2.0
32
Programming Manual, 01/2018, A5E38915112-AC
Example of a workflow 7.5 Description of the Target 1500S Advanced options
Connection ID Enter a value between 1 and 4095 for the Open User Communication in STEP 7 for the communication of the External Mode. The value must be unique for the STEP 7 user program.
Figure 7-3 Example of the setting of the connection ID in STEP 7
Allow OneStep and CallExtMode FBs to be called in different OBs To call the FB "CallExtMode" in a different block, such as "OneStep", enable this option.
Note This means that the possible memory for executing the ODK application will be reduced.
Heap size for dynamic memory allocation in kByte (HeapSize) Specify the memory for dynamic memory allocation in the ODK object numerically. You need a higher memory allocation when you attach more source files to create an ODK project. You can find additional information in the ODK documentation (https://support.industry.siemens.com/cs/ww/en/ps/13914/man).
Max block size for dynamic memory allocation in Byte (HeapMaxBlockSize) Specify the memory for dynamic memory allocation in the ODK object numerically. You need a higher memory allocation when you attach more source files to create an ODK project. You can find additional information in the ODK documentation (https://support.industry.siemens.com/cs/ww/en/ps/13914/man).
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
33
Example of a workflow 7.6 Importing SCL file automatically into STEP 7 after Simulink build
Size of thread stack for a single ODK call in kByte (SyncCallStackSize) Numerically specify the memory for the thread stack of a call in the ODK application. The value must be between 1 and 1024. You can find additional information in the ODK documentation (https://support.industry.siemens.com/cs/ww/en/ps/13914/man).
7.6
Importing SCL file automatically into STEP 7 after Simulink build
You can automatically import the generated SCL file into a CPU in the STEP 7 project after the Simulink build. To do so, you can use the Simulink parameters "Code Generation > Target 1500S Openness Options".
Requirements
You have installed a compatible version of STEP 7. You have installed a compatible version of STEP 7 Openness. You have selected Target 1500S as System Target File. You are included in the Computer Management in the user group "Siemens TIA
Openness" with your registered user and have restarted the operating system.
Procedure
1. Enable the "Import the generated SCL file to CPU(s)" option in the Target 1500S Openness options (Page 29).
2. Enter the path of an existing STEP 7 project with file extension in the entry field "TIA Portal project path".
3. In the entry field "CPU name(s)", enter the name of the ODK capable CPU(s) into which the SCL file is to be imported.
If you want to enter multiple CPUs, separate them using commas.
4. Run the Simulink build.
Note First execution of the import The "Openness access" dialog appears the run the import the first time. To grant on-time access, select "Yes". To grant permanent access, select "Yes to all".
Target 1500STM for Simulink® V2.0
34
Programming Manual, 01/2018, A5E38915112-AC
Example of a workflow 7.7 Running Simulink build
7.7
Running Simulink build
Procedure
1. Start the build process in Simulink via the menu "Code > C/C++ Code > Build Model". The system creates a new ODK Eclipse project in the following folder: C:\ProgramData\Siemens\Automation\ODK1500S\<ODK version>\workspace
2. If the ODK workspace is already being used by another Eclipse application, the dialog "ODK 1500S default workspace is locked" opens. Close the Eclipse application and confirm the dialog with "OK".
3. If there is already an ODK project of the same name in the ODK workspace, the dialog "Existing ODK Projekt" opens. Click "Yes" to replace the existing project in the ODK workspace. Click "No" to cancel the build process.
Note Regenerate model with other Target version If you re-generate a model with the same ODK version but a different version of the System Target Files , the existing ODK project will be overwritten.
Results
The Diagnostic Viewer (Page 36) displays information about the build process. A folder containing all generated files was created. The folder name is: <Model
name>_Target1500S_V<Current version>. The relevant files are stored in the "outputs" subfolder. You can find more information on the generated files in the appendix (Page 40).
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
35
Example of a workflow 7.8 The Diagnostic Viewer
7.8
Layout
The Diagnostic Viewer
The Diagnostic Viewer displays information about the build process.
Symbol
Designation Information
Meaning This alarm provides information about the progress of the build process.
Warning Error
This alarm does not abort the build process. You are made aware of special considerations and possible problems.
This alarm indicates an error that results in termination of the build process.
You can find the possible information, warning and error messages under Alarms (Page 56).
Target 1500STM for Simulink® V2.0
36
Programming Manual, 01/2018, A5E38915112-AC
Example of a workflow 7.9 Loading and running the ODK application
7.9
Loading and running the ODK application
The procedure for loading and executing an ODK application is described in the next steps. More information about the individual steps is provided in the manual of the Open Development Kit 1500S (https://support.industry.siemens.com/cs/ww/en/ps/13914/man).
Procedure
1. Open the Web server of the ODK-enabled S7-1500 CPU. 2. Upload the SO file to the ODK 1500S folder via "Filebrowser".
The SO file is transferred to the load memory. 3. Insert the SCL file in the project tree in STEP 7 as an external source. 4. Generate the program blocks from the external source in STEP 7 by right-clicking on the
SCL file > "Generate blocks from source". Depending on the parameters set, the following function blocks are created: <Simulink model>_ Load <Simulink model>_ Unload <Simulink model>CallExtMode <Simulink model>OneStep <Simulink model>ReadWriteParameters 5. Load the application from the load memory to the work memory of the CPU with the instruction "<Simulink model>_ Load". 6. Run the application with the instruction "<Simulink model>OneStep".
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
37
Example of a workflow 7.9 Loading and running the ODK application
Note Run a modified SO file A modified SO file is only executed if the old SO file is unloaded using the function <Simulink-Model>_ Unload and the new SO file was loaded to work memory using the function <Simulink-Model>_ Load. If old SO files were not unloaded, these remain in the work memory and reduce the work memory. This can mean that no additional SO files can be loaded, as the work memory is too small. To empty the work memory, shut down your system and restart it. Make sure that the "old" SO files are unloaded before you load the new modified SO files.
Target 1500STM for Simulink® V2.0
38
Programming Manual, 01/2018, A5E38915112-AC
Using an example project
8
An example project is ready for you on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109482830) to help getting started with the Target 1500S.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
39
Files generated by coders
A
To create ODK-enabled data, the Target 1500S TLC is used in addition to the Simulink Coder . The generated files and their main functions are explained below.
Files created by Simulink Coder <Simulink model>.cpp
This file has three main functions: void <Simulink model>_step(void)
This function is called by the OneStep FB and runs the Simulink model. void <Simulink model>_initialize(void)
This function is called by the <Simulink model>_Load FB. void <Simulink model>_terminate(void)
This function is called by the <Simulink model>_UnLoad FB. <Simulink model>.h
Files created by the Target 1500S TLC <Simulink model>_ODK.odk
This file is used as input for the ODK code generator. <Simulink model>_ODK.cpp
This file contains the execution of OnLoad-, OnUnload- and OneStep functions. <Simulink model>_ODK.scl.additional
This file is only generated when external mode (Page 43) is activated. Target 1500S TLC generated a comment with the following information in the files: Name and version of the Simulink model. Name and date of creation of file. Target 1500S version and the System Target File used. ODK 1500S version Versions of the Matlab configuration
Target 1500STM for Simulink® V2.0
40
Programming Manual, 01/2018, A5E38915112-AC
Referenced models
B
Since Version V1.0 Update 1, Target 1500S has been supporting the code generation of referenced models for controllers with ODK capability. With referenced modules, a parent model contains one or more referenced child models. A referenced child model can itself reference child models.
Special considerations for code generation with referenced models
Target 1500S detects referenced models and processes the models from the child models to the parent models during the build. The system creates an ODK Eclipse project at the end of the build.
You can configure the parameters for the parent model and the referenced child models differently under "Configuration Parameters (Page 24)". In the following table, you can see the response to the respective parameters.
Parameter
Response to homing
ODK 1500S version
Only the settings of the parent model area taken into consideration.
The settings are individually evaluated
Copy all referenced files to ODK project
Parameter Access with STEP 7
Enable STEP 7 access to internal model signals
Import the generated SCL file to CPU(s)
Hardware Interface ID
Connection ID
Allow OneStep and CallExtMode FBs to be called in different OBs
Heap size for dynamic memory allocation
Max block size for dynamic memory allocation
Size of thread stack for a single ODK call
External mode
If the external mode (Page 43) is enabled in the parent model, it can also be used for the referenced child models contained therein.
For code generation, the "Interface" settings of the referenced child models are ignored and the settings of the parent model are used.
If you select a setting other than "External mode" or "None" for the child model under "Interface", an error message appears during the compiling.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
41
Referenced models
Independent build of child models
You can also run the build of child models independently of the referenced model. Data independent of the referenced model are created.
Target 1500STM for Simulink® V2.0
42
Programming Manual, 01/2018, A5E38915112-AC
External mode
C
C.1
The external mode
The external mode of Simulink enables you to monitor the model during runtime and change the parameters of the model online. For Simulink to be able to communicate with the model on the controller via external mode, external mode must be activated before starting the build process. In this case, the code is supplemented by communication code for the data exchange between Simulink and the controller. The communication is realized on the basis of TCP/IP.
DANGER Changes to the model only in the test environment Use the external mode for test purposes only. Changing the tag values while the plant is operating may result in severe damage to property and personal injury in the event of malfunctions or program errors. Make sure that dangerous states cannot occur before you use the "Modify" function. When using the external mode, note that no CPU password is required to control tags.
Activating external mode
Select the value "External mode" under "Code Generation > Interface > Data exchange > Interface" for the Simulink parameters (Page 24) to activate external mode.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
43
External mode C.2 Setting communication parameters for external mode
C.2
Setting communication parameters for external mode
Transport layer (fixed) tcpip
MEX-file arguments IP address: IP address of the ODK-enabled controller which is to run the application. Default: '192.168.0.1' Verbosity level (optional): Set the value "1" in order to obtain detailed information about the external mode in the "Diagnostic Viewer (Page 36)". Port number (optional): The port number of the server for the TCP/IP connection (ODK-enabled controller). Default: 17725 WaitForStart (optional): The simulation starts automatically as soon as the "OneStep" function is executed.
If you set the value to "1", the execution of the Simulink model does not start automatically. In this case, you need to restart the simulation in the Simulink window after the connection is made using the " " button.
Standard format: `<IPAddress>' By default, only the IP address of the target device is specified for the object file in the MEX-file arguments . All other communication parameters obtain the default value described. Example: '192.168.0.1' Extended format: `<IPAddress>' <VerbosityLevel> <PortNumber> <WaitForStart> Using a space for separation, you can set the value of the verbosity level, the port number and the flag for "WaitForStart". Example: '192.168.0.1' 0 17725 1
Note Pay attention to the apostrophes when entering the IP address.
When <PortNumber> is changed, you can either run a Simulink build, and transfer and load the new ODK application or adapt the port number at the "CallExtMode" block (see "The function block CallExtMode (Page 46)"). Adhere to the structure If you do not comply with the format specified in the examples, it is not possible to establish a connection.
Target 1500STM for Simulink® V2.0
44
Programming Manual, 01/2018, A5E38915112-AC
External mode C.2 Setting communication parameters for external mode
Static memory buffer size This memory is required for communication of the external mode. Increasing "Static memory buffer size", however, simultaneously reduces the available memory for loading the ODK object. Adhere to the ODK limits. If necessary, you can enter a higher value or change your model.
Note Change the parameters of the external mode If you change the parameters of the external mode, you need to re-generate the Simulink model. Then update the STEP 7 user program and the SO file on the CPU (see "Loading and running the ODK application (Page 37)").
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
45
External mode C.3 The function block CallExtMode
C.3
The function block CallExtMode
Structure of the function block (FB)
The "<Simulink model>CallExtMode" FB has the following input parameters: EnableExtMode (Bool)
To establish an external mode connection, set this parameter to "true" using a tag. HW-Identifier (UInt)
Set the value of the hardware identifier for the communication interface in the Target 1500S options. The default value is "64". LocalPort (UInt) Set the value of the port number in the interface options under "MEX-file arguments". Change the value to establish the external mode connection using a different CPU port. OUC-Identifier Set the value for the OUC-Identifier in the Target 1500S options. The OUC-Identifier is the Connection ID for the Open User Communication. The value must be unique for the STEP 7 user program.
Target 1500STM for Simulink® V2.0
46
Programming Manual, 01/2018, A5E38915112-AC
External mode C.3 The function block CallExtMode
The "<Simulink model>CallExtMode" FB has the following output parameters: STATUS
The status parameter has the type <Simulink model>ExtModeStatus_UDT (User Definied Datatype) and contains the following parameters: Status_TCON (Word) Status_TDISCON (Word) Status_TRCV (Word) Status_TSEND (Word) Status_ODK (Int) Status_ExtMode (Word) You can find the status descriptions for "TCON", "TDISCON", "TRCV", "TSEND" in the STEP 7 help. You can find the status descriptions for ODK in the manual (https://support.industry.siemens.com/cs/ww/en/ps/13914/man).
Note Special features of the option "Allow OneStep and CallExtMode FBs to be called in different OBs" If the option is disabled, call the "CallExtMode" FB in the same block (OB, FB) as "OneStep". Otherwise, the model calculation is not performed synchronously with the data connection. If the option is enabled, you can call the FB "CallExtMode" in a different block, such as "OneStep". Note the following when option is enabled: · The block which contains the FB "OneStep" must have a higher priority than the block
with the FB "CallExtMode". · The possible available memory for running ODK applications is reduced. · Call the FB "CallExtMode" in a cyclic OB. · If the cyclic interruption time is less than 100 s, interruptions in the graphs (scope) may
occur during the simulation of the module in Simulink.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
47
External mode C.3 The function block CallExtMode
Functionality of the block
The FB has the following tasks: Communication between PC and controller. Data transfer between Simulink and controller.
Return value for Status_ExtMode 0x0000 0x0001
Description
Return value after successful execution or initial state.
Not enough memory for the external mode.
The allocated memory may be too small for a complex Simulink model.
Increase the value in the interface options under "Static memory buffer size". To apply the value, generate the ODK object again.
"Static memory Buffer size", however, reduces the space available for the application at the same time.
Target 1500STM for Simulink® V2.0
48
Programming Manual, 01/2018, A5E38915112-AC
External mode C.4 Establishing an external mode connection
C.4
Establishing an external mode connection
Procedure
1. Call the FB "<Simulink model>CallExtMode" in the same cyclic organization block (OB) as the FB "<Simulink model> OneStep" and enable the access (EnableExtMode).
Note Run the OneStep FB before the external mode connection is made. Once the OneStep FB is called in the cyclic OB, simulation steps are performed. If the external mode connection is not yet established, these steps are lost. To prevent this, set the flag for "Wait For Start" to "1" in the interface options under "MEXfile arguments".
2. Select "External" as the simulation mode.
Result
3. As the simulation stop time, select the value "inf" for endless simulation or an appropriate value for your model.
Note Checking the solver settings Check whether the setting "fixed-step-size (fundamental sample time)" under "Solver > Additional options" is set appropriately for your model. You can find more information on the parameters in the Matlab / Simulink documentation.
4. To establish the external mode connection, click on the " " icon.
You can monitor the model during runtime of the controller and change parameters of the model online.
Note When the simulation is completed or canceled, the CPU must be switched from "STOP" to "RUN" in order to start a new connection with subsequent simulation. Data from the previous simulation is overwritten.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
49
Parameter access from STEP 7
D
D.1
Introduction
Certain parameters can be read and changed during runtime after activation of the parameter access in STEP 7. These parameters can be defined by you or provided directly by Simulink.
It is possible to read and change the model at the same time using external mode in order to test and adapt your model during runtime.
D.2
Enabling parameter access
Procedure
1. Enable the "Parameter access with STEP 7" in the Target 1500S options (Page 27).
2. In order to generate the UDT "<Simulink model>Params" and FB "<Simulink model>ReadWriteParameters" in the SCL file, select "Tunable" under "Default parameter behavior" in the Optimization options.
Note
You can also configure other tags as tunable. You can add the tags defined in Matlab workspace in the "Model Parameter configuration" area. To do this, suspend one of the following memory classes: · SimulinkGlobal · ExportedGlobal · ImportedExtern
The memory class "ImportedExternPointer" is not supported.
3. Compile the model and transfer the corresponding files to STEP 7 or the web server as before.
Target 1500STM for Simulink® V2.0
50
Programming Manual, 01/2018, A5E38915112-AC
Parameter access from STEP 7 D.3 The ReadWriteParameters function block
D.3
The ReadWriteParameters function block
In order to read and change parameters, you need the UDT "<Simulink model>Params" and the FB "<Simulink model>ReadWriteParameters".
Structure of the function block (FB)
The "<Simulink model>ReadWriteParameters" FB has the following input parameters:
write (Bool)
To write the parameters from the S7 program to the Simulink model, set this value to "true". The values passed with the "inOutParams" parameter are processed by the Simulink model.
To read the parameters from the Simulink model, set this value to "false". The current values of the Simulink model parameters are written to a tag interconnected to "inOutParams".
The "<Simulink model>ReadWriteParameters" FB has the following parameters:
inOutParams
The inOutParams has the type <Simulink model>Params UDT and is used for reading or writing parameters in the Simulink model.
The "<Simulink model>ReadWriteParameters" FB has the following output parameters:
STATUS
This return value is automatically generated by ODK.
The return value is "0" when the execution is successful.
You can find information on the other error codes in the ODK manual (https://support.industry.siemens.com/cs/ww/en/ps/13914/man)
The values of the FB are initialized with "0" by default. The values are updated when read access takes place for the first time.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
51
Parameter access from STEP 7 D.4 Establishing parameter access
D.4
Establishing parameter access
Procedure
1. Generate blocks from the SCL file in STEP 7. 2. Use the blocks generated in STEP 7.
To set the values in the same cycle, call the "ReadWriteParameters" FB before "OneStep".
To set the values in the following cycle, call the "ReadWriteParameters" FB after "OneStep".
Note
Call the FB "<Simulink model>ReadWriteParameters" in the same cyclic OB as the FB "<Simulink model>OneStep".
The values of the FB are initialized with "0" by default. The values are updated when read access takes place for the first time.
Note
Changed model parameters in the S7 program are kept in the work memory. If the associated ODK object is re-initialized, the parameters are reset to the values set in Simulink.
Target 1500STM for Simulink® V2.0
52
Programming Manual, 01/2018, A5E38915112-AC
Access to internal signals
E
You can create measurement points in the Simulink model by giving a name to the model blocks.
Figure E-1 Example model with integrated signals
If you enable the option "Enable STEP 7 access to internal model signals" in the Target 1500S options (Page 27), these internal signals are generated as output in the FB "OneStep" during the generation of the code.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
53
Access to internal signals
Special features for the FB "OneStep"
Target 1500S defines the internal signals during the generation of the code in an ODK_STRUCT with the name "InternalModelSignals". The FB "OneStep" needs a new output parameter "OUT" with the name "internalSignals" for this purpose.
Properties of the signal
Figure E-2 Dialog box Signal Properties
1. Under "Signal name:", enter the name of the signal. 2. In the "Code Generation" tab, select a supported memory class under "Storage class:".
The following memory classes are supported:
Memory class Auto SimulinkGlobal ExportedGlobal ImportedExtern ImportedExternPointer Custom storage class
Support Yes, if it leads to "SimulinkGlobal". Yes Yes Yes No No
Target 1500STM for Simulink® V2.0
54
Programming Manual, 01/2018, A5E38915112-AC
Using bus objects in STEP 7
F
F.1
Bus objects
You can define bus objects in the Simulink model. These objects may include simple data types or additional bus objects.
Converting bus objects
Bus objects are compiled with the Simulink build in PLC data types for the S7 program.
The following figure shows bus objects in Simulink on the right and the generated PLC data types in STEP 7 on the left.
Reference
The bus object can be used as input/output parameter for the Simulink model. You can find more information about using PLC data types in the STEP 7 help system.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
55
Alarms
G
G.1
Alarms during the build process
Meaning of the alarms
Information messages (Page 56) This alarm provides information about the progress of the build process.
Warnings (Page 58) This alarm does not abort the build process. You are made aware of special considerations and possible problems.
Error messages (Page 60) This alarm indicates an error that results in termination of the build process.
G.2
Information messages
Info no. 1 2
3 4 5 6
7
Alarm "Build of <SimulinkModel> with Target 1500S <Version> is started" "Generating Target 1500S specific files: <Filename> is generated <Filename> is generated ..." "Generating Simulink Model sources" "Creating ODK 1500S project <SimulinkModel>_ODK under <OutputPath>" "ODK 1500S Project <SimulinkModel>_ODK is created successfully" "Building ODK 1500S project <SimulinkModel>_ODK"
"<SimulinkModel>_ODK project build is finished successfully"
Meaning The build process starts
Files created by Target 1500S.
The Simulink Coder generates source files. ODK creates an ODK project.
The ODK project has been successfully created.
An ODK project is generated. If you have selected the "Verbose" option in the Options menu of the code generator, the Diagnostic Viewer displays each output. The ODK project creation was completed successfully.
Target 1500STM for Simulink® V2.0
56
Programming Manual, 01/2018, A5E38915112-AC
Alarms G.2 Information messages
Info no. 8
9 10 101 102 103 104 105 106 107 108 109
Alarm
Meaning
"<SimulinkModel> build is finished successfully.
The Simulink build was completed successfully.
<SimulinkModel>_ODK.scl and <SimulinkModel>_ODK.so files are available in folder "outputs".
The files "<Simulink model>_ODK.scl" and "<Simulink model>_ODK.so" are available in the "outputs" folder.
Web server (CPU):
Web server of the controller:
1. <SimulinkModel>_ODK.so file has to be uploaded 1. Load the file "<Simulink model>_ODK.so" into the
using the web server into ODK1500S folder.
ODK 1500S folder via the web server.
If the option "Import the SCL file generated by the build to a CPU" is deactivated or is activated but the operation is not successful, sources can be updated manually on TIA Portal:
If you have disabled the option "Import the SCL file generated by the build to a CPU" or if the execution was unsuccessful, you can update the sources manually via the TIA Portal. Proceed as follows for this:
1. Navigate to the CPU / 'External Source' area and 1. Navigate to the CPU in the area "External source"
import the <SimulinkModel>_ODK.scl file.
and import the file "<Simulink model>_ODK.scl".
2. Select the imported file and generate blocks out of 2. Select the imported files and right-click to generate
this source (right-click or Tool menu)
blocks from the source.
3. Integrate the blocks into your CPU program in order to load and execute it.
3. Integrate the blocks into your program to load and execute them.
You can find details about deploying an ODK 1500S You can find additional information in the ODK manual
Object to CPU in ODK 1500S documentation
(https://support.industry.siemens.com/cs/ww/en/view/1
(https://support.industry.siemens.com/cs/ww/en/view/ 09752683).
109752683)."
"Removing <SimulinkModel>_ODK from ODK 1500S You have confirmed the "Existing ODK Projekt" dialog
default workspace"
with "Yes".
The existing project is overwritten.
"<SimulinkModel>_ODK is removed from ODK 1500S default workspace"
You have confirmed the "Existing ODK Projekt" dialog with "Yes".
The existing project was overwritten.
"Openness workflow started"
The openness process starts.
"Checking for compatible TIA Portal and Openness The compatibility of STEP 7 and Openness plugin is
installations"
tested.
"Opening / attaching to the TIA Portal project <TiaPortalProjectName>"
The STEP 7 instance used is attached to the STEP 7 project.
"CPU <CpuName>: Searching for it in the TIA Portal Search for CPU(s) in the STEP 7 project. project"
"CPU <CpuName>: <SimulinkModel>_ODK.scl is being imported"
The SCL file is imported.
"CPU <CpuName>: Blocks are being generated out Blocks are generated from the SCL file. of the imported SCL source"
"CPU <CpuName>: CPU is being compiled"
You have selected the option "Compile the CPU(s) after import".
The CPU is being compiled.
"The TIA Portal project <TiaPortalProjectName> is being compiled"
You have selected the option "Compile the CPU(s) after import".
All CPUs within the STEP 7 project are compiled.
"Openness workflow finished successfully"
The Openness process was completed successfully.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
57
Alarms G.3 Warnings
G.3
Warnings
Warning no. 1 2 3
4 5
701 702
Alarm
Meaning
"Using `External Mode' can cause serious damage to property or injury to persons if there are functional disturbances or program errors.
If "External Mode" is enabled in the settings under "Code Generation", this alarm appears at the end of the build process.
Make sure that no dangerous situations can arise before you conduct a test with the `External Mode' function."
"'Default parameter behavior' shall be set to `Tunable' when `Parameter access with STEP 7' is checked.
Otherwise no parameter access is possible."
You have activated the "Parameter access with STEP 7" option and selected "Inlined" under "Default parameter behavior".
Set the selection to "Tunable".
"The syntax of the current MEX-file arguments is not correct. It might happen, that the External Mode cannot be established. The correct syntax:
'<IPAddress>' <VerbosityLevel> <PortNumber> <WaitForStart>
· IPAdress and PortNumber is related with your PLC.
· Set VerbosityLevel to 1 for getting detailed in diagnostic viewer.
· If WaitForStart is set to 1, the application will wait for the Simulink start command
Please check the SIMATIC Target 1500S documentation for further information."
The structure of the "MEX-file arguments" is incorrect. External mode may not run properly. The correct structure is: '<IPAddress>' <VerbosityLevel> <PortNumber> <WaitForStart>
· The IP address and port number depends on your controller.
· Set the VerbosityLevel to 1 in order to obtain detailed information in the Diagnostic Viewer.
· If WaitforStart is set to 1, the application waits for the start command from Simulink.
Establishing external mode communication will not be possible since `UpdateModelReferenceTargets' is set to `Always' for the model <SimulinkModel>. Please change it to another option in order to be able to use external mode.
Communication for the external mode cannot be set up because the "UpdateModelReferenceTargets" setting for the <SimulinkModel> is set to "Always". Change this to another setting to use external mode.
Since multiple number of instances of <ChildModel> is allowed to be referenced, STEP 7 access to some internal signals of this model may not be possible because 'SimulinkGlobal' or 'Auto' storage class definition has been detected.
Since multiple instances of the child model may be referenced, access from STEP 7 to some internal signals of this model may not be possible because the memory class "SimulinkGlobal" or "Auto" was selected.
For <ChildModel>, set 'Total number of instances allowed per top model' to 'One' or set storage class for internal signals to 'ExportedGlobal' or 'ImportedExtern' in order to access all internal signals.
To access all internal signals, set "Total number of instances allowed per top model" to "One" for the child module or set the memory class for internal signals to "ExportedGlobal" or "ImportedExtern".
"OpennessHandler.dll does not exist in the bin folder. The "OpennessHandler.dll" file does not exist in the Please repair or uninstall/install Target 1500S setup." "<TARGET_ROOT_DIR>\bin\" directory.
Repair or uninstall/install the Target 1500S.
"No compatible TIA Portal installed. Please install a compatible TIA Portal version in order to use this feature. A list of compatible TIA Portal versions can be found in the Target 1500S documentation."
You have installed no compatible STEP 7.
You can find the compatible STEP 7 versions at "Importing SCL file automatically into STEP 7 after Simulink build (Page 34)".
Target 1500STM for Simulink® V2.0
58
Programming Manual, 01/2018, A5E38915112-AC
Alarms G.3 Warnings
Warning no. 703
704 710 711 712
713
720
721 730 731 732 733 734 735 736 737 799 1000
Alarm
Meaning
"No compatible TIA Portal Openness installation found. Please install a compatible TIA Portal Openness in order to use this feature. A list of compatible TIA Portal Openness versions can be found in the Target 1500S documentation."
You have installed no compatible Openness plugin.
You can find the compatible Openness plugin at "Importing SCL file automatically into STEP 7 after Simulink build (Page 34)".
"Error while loading the Openness library"
An error has occurred while loading the Openness.dll.
"TIA Portal project path is empty. Please provide path The input box "TIA Portal project path" is empty. to an existing TIA Portal project with file extension." Specify the path with file extension.
"CPU name is empty. Please provide the name of the The input box "CPU name(s)" is empty.
CPU(s) within the TIA Portal project."
Specify the names of the CPU(s) in the project.
"CPU names are not in correct format. Please sepa- The CPU names entered in the entry field "CPU
rate multiple CPU names with comma."
name(s)" are not correct.
Separate multiple CPU names using commas.
"Provided path to TIA Portal project does not exist or is an invalid project path. Please provide path to a valid TIA Portal project with file extension."
The path entered in the entry field "TIA Portal project path" does not exist or is incorrect.
Specify the path with file extension.
"No CPU could be found in the TIA Portal project with The CPU name entered in the entry field "CPU
the provided CPU name. Please provide the name of name(s)" cannot be found.
the CPU within the TIA Portal project. If multiple CPUs Specify the names of the CPU(s) in the project.
shall be used, separate them with comma."
Separate multiple CPU names using commas.
"Generated SCL file does not exist in the ODK project The generated SCL file does not exist.
output directory. Please rebuild."
Restart the build process.
"Error while attaching to the TIA Portal instance"
An error occurred while attaching to the STEP 7 instance.
"Error while initiating the TIA Portal instance"
An error occurred while starting a new STEP 7 instance.
"Error while opening the TIA Portal project"
An error occurred while opening the STEP 7 project.
"Previously existing SCL source could not be deleted" An already existing SCL file with the same name cannot be deleted.
"The SCL file could not be imported as an external source"
The SCL file cannot be imported.
"Error while generating blocks from the imported SCL An error occurred while generating the blocks from
source"
the SCL file.
"Error while compiling the CPU"
An error occurred while compiling the CPU.
"Error while compiling the project"
An error occurred while compiling the project.
"Unknown error"
An error has occurred.
Building model with Target 1500S trial mode: <RemainingDaysInTrialPeriod> day(s) left
The model was created with the Target 1500S test version.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
59
Alarms G.4 Error messages
G.4
Error messages
Error no. 1 2 4 5
7
8 10 11
12
Alarm
Meaning
Depending on the error, the corresponding error mes- Appears in case of Target 1500S and Simulink Coder
sage is displayed.
error.
"Eclipse workspace is locked.
Please close any Eclipse instance(s) that might have locked ODK 1500S default workspace."
Close all affected Eclipse instances with a standard ODK Workspace, which is also used by Target 1500S.
Depending on the error, the corresponding error mes- Appears when an error occurs during the creation of
sage is displayed.
the ODK project.
"ODK 1500S Code Generator gives the following error If the code generator of ODK detects an error during
for <SimulinkModel>_ODK project:
the build process, this alarm appears.
<Fehlertext des ODK Code Generators>
Please refer to ODK 1500S documentation (https://support.industry.siemens.com/cs/ww/en/view/ 109752683) or contact customer support!"
You can find additional information in the ODK manual (https://support.industry.siemens.com/cs/ww/en/view/ 109752683) or by contacting Customer Support.
For Matlab versions older than R2016b:
"Only `SingleTasking' is allowed as tasking mode for Target 1500S <Version>. Please choose `SingleTasking' in the solver options menu in order to proceed with build."
Disable the option "Treat each discrete rate as a separate task" in the properties of the code generator under "Solver".
For Matlab version R2016b or higher:
"Only `SingleTasking' is allowed as tasking mode for Target 1500S <Version>. Please uncheck the option 'Treat each discrete rate as a separate task' under the solver options in order to proceed with build."
"'ImportedExternPointer' is not allowed as Storage Class for tunable parameters for Target 1500S <Version>. Please change Storage Class of <ParameterName> to other than `ImportedExternPointer' in order to proceed with build."
Select a different memory class than "ImportedExternPointer".
"No compatible ODK 1500S version is installed.
No compatible ODK version available.
Please first install a compatible version and restart MATLAB in order to proceed with build.
Install a compatible ODK 1500S version (Page 16) and restart Matlab.
A list of compatible ODK 1500S versions can be found in the Target 1500S documentation."
"The selected ODK 1500S version doesn't work
The selected ODK version is not working properly.
properly. The reason could be installation of the se- The reason can be the installation of the selected
lected ODK 1500S version failed due to some reason. ODK version failed.
ODK 1500S <OdkVersion> documentation describes, how to check the functionality of the ODK 1500S installation."
You can find information on checking the functionality in the ODK manual (https://support.industry.siemens.com/cs/ww/en/view/ 109752683).
"Size of input and output parameters of <SimulinkModel> reaches to the limits of ODK 1500S.
Please reconsider your model and try to reduce the size of your parameters in order to proceed with build."
The maximum ODK data volume is exceeded. Check the model and reduce the parameter size.
Target 1500STM for Simulink® V2.0
60
Programming Manual, 01/2018, A5E38915112-AC
Alarms G.4 Error messages
Error no. 13 15
16
17
18 20 21
Alarm
Meaning
"A parameter which exceeds limits of ODK 1500S maximum array size is defined in <SimulinkModel>.
Please reconsider your model and try to reduce the size of array which exceeds ODK 1500S limits in order to proceed with build."
The maximum array size is exceeded. Check the model and reduce the array size.
"<SimulinkModel> causes to exceed limits of ODK 1500S naming rules for generated functions or structs.
Please perform one of the following actions in order to proceed with build:
Prefix and function name are too long.
Reduce the value of "maximum identifier length" in the properties of the code generator under "Symbols" or shorten the name of the Simulink model.
1- Set `Maximum identifier length' in symbols options to a smaller value.
2- Set <SimulinkModel> to a shorter name."
"<Variable> name exceeds the limits of ODK 1500S maximum variable name size.
Please perform one of the following actions in order to proceed with build:
The tag name is too long.
Decrease the value of "maximum identifier length" in the properties of the code generator under "Symbols" or shorten the name of the tag.
1- Set `Maximum identifier length' in symbols option to a smaller value.
2- Set <Variable> to a shorter name."
"Because of the length of <SimulinkModel> name and path of your model, some generated files reach to the path limits of Windows.
Please perform one of the following actions in order to proceed with build:
The maximum Windows path length has been exceeded.
Shorten the name of the Simulink model or move your Simulink model to a shorter path.
1- Set your <SimulinkModel> name to a shorter string.
2- Move your <SimulinkModel> to a shorter path."
"An ODK 1500S project with same name as <SimulinkModel>_ODK exists in ODK 1500S default workspace. In order to proceed either change name of your <SimulinkModel> or remove/rename the project from workspace manually"
The ODK workspace already contains an ODK project with the same name.
Change the name of the Simulink model or delete/rename the existing project manually.
"An error occurred during removing <SimulinkModel>_ODK project from default workspace of ODK 1500S.
Please either change name of your <SimulinkModel> or remove/rename the project from workspace manually"
Removal of the ODK project from the workspace was unsuccessful.
Change the name of the Simulink model or delete/rename the project manually from the workspace.
"Build of <SimulinkModel>_ODK is failed due to the following error(s):
Generation of the ODK project was unsuccessful due to a compiler error.
<Error text coming from gcc compiler with the complete line and multiple errors>
Please enable `Verbose' mode in Code Generation Options to see the stack trace and contact customer support!"
Enable "Verbose" mode in the properties of the code generator to see the stack trace and contact Customer Support.
Target 1500STM for Simulink® V2.0
Programming Manual, 01/2018, A5E38915112-AC
61
Alarms G.4 Error messages
Error no. 22
23 24
1000 1001
Alarm
"'Device vendor' can be only selected as `Intel' and `Device type' can be only selected as `x86-32 (Windows32)' in hardware implementation options.
Please select the proper values in order to proceed with build."
"The maximum data size for external mode is 64k. The current used data (<sizeOfData>) exceeds this limit. Please reconsider your model and try to reduce the size of the parameters."
"An incompatible version of Java Runtime Environment (JRE) could be installed. Please prove, if the installed Java Runtime Environment (JRE) and its architecture (x86, x64) is compatible with the selected ODK 1500S Version.
ODK 1500S <ODK Version> documentation describes, how to check the functionality of the ODK 1500S installation."
License key missing
Retrieving license key not possible
Meaning Select "x86-32 (Windows32)" in the properties under "Device type".
The maximum data size for external mode is 64k. The data currently used exceeds this limit. Revise your model and reduce the size of the parameters.
No compatible JRE is installed on the PC. You can find information on checking the functionality in the ODK manual (https://support.industry.siemens.com/cs/ww/en/view/ 109752683).
The Target 1500S license was not transferred and the test version has expired. The ALM is not installed.
Target 1500STM for Simulink® V2.0
62
Programming Manual, 01/2018, A5E38915112-AC
Index
A
Access to internal signals, 54 Alarms, 56
Error messages, 60 Information messages, 56 Warnings, 58
B
Bus objects, 55
C
Certificate of license, 19
D
Diagnostic Viewer, 36
E
External mode, 43 CallExtMode function block, 46 Establish connection, 49 External mode parameters, 44
I
Importing an SCL file, 34 Installation
Installation procedure, 17 Licensing, 19 Repairing, 22 System requirements, 16 Uninstallation procedure, 21 Internal signals, 54
L
License key, 19
Target 1500STM for Simulink® V2.0 Programming Manual, 01/2018, A5E38915112-AC
O
ODK application Loading and running an ODK application, 37
P
Parameter Target 1500S Advanced options, 31 Target 1500S openness options, 29
Parameter access, 50 Enable parameter access, 50, 52 ReadWriteParameters function block, 51
Parameters External mode parameters, 44 Simulink parameters, 25 Target 1500S options, 27
R
Referenced models, 41
S
Simulink build, 35
63
SIMATIC STEP 7 (TIA Portal) Options Open Development Kit 1500S V2.5
Programming and Operating Manual
_Pr_ef_ac_e_______________
_Do_c_um_e_nt_at_io_n _gu_id_e_______1_
_Pr_od_u_ct_ov_e_rv_ie_w _________2_
_In_sta_ll_at_ion_____________3_
_ _ _ _ _ _ _ _ _ _ _ Developing a CPU function
library for the Windows
4
environment
_ _ _ _ _ _ _ _ _ _ _ Developing a CPU function
library for the realtime
5
environment
_Drue_nvt_iemlo_ep_amp_epn_litc_oaft_ioa_nC_/C_++______6_
_Us_in_g_ex_a_m_pl_e p_ro_je_c_ts______7_
_Ge_n_er_al_c_on_di_tio_n_s _______A__
_ _ _ _ _ _ _ _ _ _ _ Syntax Interface file
<project>.odk for CPU
B
function libraries
_Cfoo_r dC_eP_gUe_nfu_enr_catti_oorn_ml_ibers_asr_aieg_ses____C__
_Hfue_nlcp_teio_rnf_ulinb_crat_iori_ness_fo_r_C_PU_____D__
_Ilinb_sratr_ruiec_sti_on_s_fo_r C_P_U_fu_n_ct_ion___E__
12/2017
A5E35253941-AD
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E35253941-AD 12/2017 Subject to change
Copyright © Siemens AG 2014 - 2018. All rights reserved
Preface
Purpose of the documentation
This documentation describes the specific characteristics of the Open Development Kit (ODK) V2.5.
Definitions and naming conventions
The following terms are used in this documentation: CPU: Designates the products named under "Scope of documentation". ODK: Open Development Kit MFP: Multifunctional platform Windows: Designates the Microsoft operating systems supported by ODK. STEP 7: For the designation of the configuring and programming software, we use "STEP
7" as a synonym for the version "STEP 7 (TIA Portal) V13 SP1 and higher". DLL: Dynamic Link Library SO: Shared Object Visual Studio: Microsoft Visual Studio TCF: Target Communication Framework
Basic knowledge required
This documentation is intended for engineers, programmers, and maintenance personnel with general knowledge of automation systems and programmable logic controllers. To understand this documentation, you need to have general knowledge of automation engineering. You also need basic knowledge of the following topics: SIMATIC Industrial Automation System PC-based automation Using STEP 7 Use of Microsoft Windows operating systems Programming with C/C++, C#, Visual Basic
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
3
Preface
Validity of the documentation
This documentation applies to use of ODK with the following products: CPU 1505SP (T)(F) CPU 1507S (F) CPU 1518-4 PN/DP MFP (F)
Notes
Please also observe notes labeled as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under (https://www.siemens.com/industrialsecurity).
Open Development Kit 1500S V2.5
4
Programming and Operating Manual, 12/2017, A5E35253941-AD
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (http://www.siemens.com/automation/service&support).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com).
Information about third-party software updates
This product contains third-party software. Siemens accepts liability with respect to updates/patches for the third-party software only when these are distributed by Siemens in the context of a Software Update Service contract or officially approved by Siemens. Otherwise, updates/patches are installed at the user's own risk. You can find more information in our Software Update Service (http://w3.siemens.com/mcms/automationsoftware/en/software-update-service/Pages/Default.aspx).
Notes on protecting administrator accounts
A user with administrator rights has extensive access and manipulation possibilities.
Therefore, make sure that the administrator account is adequately protected to prevent unauthorized changes. To do this, set secure passwords and use a standard user account for regular operation. Other measures, such as the use of security policies, should be applied as required.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
5
Table of contents
Preface ................................................................................................................................................... 3
1 Documentation guide .............................................................................................................................. 9
2 Product overview .................................................................................................................................. 10
2.1
Introduction to ODK 1500S .................................................................................................... 10
2.2
Development environments ................................................................................................... 15
2.3
Basic procedure ..................................................................................................................... 16
3 Installation ............................................................................................................................................ 18
3.1
System Requirements............................................................................................................ 18
3.2
Installing ODK ........................................................................................................................ 20
3.3
Licensing ODK 1500S............................................................................................................ 21
3.4
Subsequently integrating project template for Windows CPU function libraries in Visual
Studio ..................................................................................................................................... 24
3.5
Uninstalling ODK.................................................................................................................... 24
4 Developing a CPU function library for the Windows environment........................................................... 25
4.1 4.1.1 4.1.2 4.1.2.1 4.1.2.2 4.1.2.3 4.1.3 4.1.4 4.1.5 4.1.6 4.1.6.1 4.1.6.2 4.1.6.3 4.1.6.4 4.1.6.5 4.1.6.6 4.1.7 4.1.7.1 4.1.7.2 4.1.7.3
Creating a CPU function library ............................................................................................. 25 Requirements......................................................................................................................... 25 Creating a project................................................................................................................... 25 Solution Explorer structure: C++ project ................................................................................ 26 Solution Explorer structure: C# project .................................................................................. 29 Solution Explorer structure: VB Project ................................................................................. 30 Generating a CPU function library ......................................................................................... 31 Defining the runtime properties of a CPU function library ..................................................... 32 Environment for loading or executing the CPU function library ............................................. 33 Defining functions and structures of a CPU function library .................................................. 34 Using ODK_VARIANT as parameter ..................................................................................... 38 Handling strings ..................................................................................................................... 39 Definition of the <Project>.odk file ......................................................................................... 39 Modifying the <Project>.odk file ............................................................................................. 41 Comments .............................................................................................................................. 43 Comments in Visual Basic ..................................................................................................... 45 Implementing functions .......................................................................................................... 46 General notes......................................................................................................................... 46 Callback functions .................................................................................................................. 46 Implementing custom functions ............................................................................................. 48
4.2
Transferring a CPU function library to the target system....................................................... 49
4.3
Importing and generating an SCL file in STEP 7 ................................................................... 50
Open Development Kit 1500S V2.5
6
Programming and Operating Manual, 12/2017, A5E35253941-AD
Table of contents
4.4 4.4.1 4.4.2 4.4.3
Executing a function................................................................................................................51 Loading functions....................................................................................................................51 Calling functions......................................................................................................................56 Unloading functions ................................................................................................................58
4.5 4.5.1
Remote debugging..................................................................................................................61 Performing remote debugging ................................................................................................62
5 Developing a CPU function library for the realtime environment............................................................. 65
5.1 5.1.1 5.1.2 5.1.3 5.1.4 5.1.5 5.1.6 5.1.6.1 5.1.6.2 5.1.6.3 5.1.6.4 5.1.6.5 5.1.6.6 5.1.7 5.1.7.1 5.1.7.2 5.1.7.3 5.1.7.4 5.1.7.5
Creating a CPU function library ..............................................................................................65 Requirements .......................................................................................................................... 65 Creating a project....................................................................................................................65 Generating a CPU function library ..........................................................................................68 Defining the runtime properties of a CPU function library ......................................................69 Environment for loading or running the CPU function library .................................................70 Defining functions and structures of a CPU function library ...................................................72 Defining functions a CPU function library ...............................................................................72 Use of ODK_CLASSIC_DB as parameter ..............................................................................76 Handling strings ......................................................................................................................77 Definition of the <Project>.odk file ..........................................................................................78 Modifying the <Project>.odk file..............................................................................................80 Comments ............................................................................................................................... 80 Implementing functions ...........................................................................................................82 General notes .........................................................................................................................82 Callback functions...................................................................................................................82 Implementing custom functions ..............................................................................................84 Dynamic memory management..............................................................................................85 Debug (Test) ...........................................................................................................................87
5.2
Transferring a CPU function library to the target system........................................................90
5.3
Importing and generating an SCL file in STEP 7....................................................................92
5.4 5.4.1 5.4.2 5.4.3 5.4.4
Executing a function................................................................................................................93 Loading functions....................................................................................................................93 Calling functions......................................................................................................................96 Unloading functions ................................................................................................................99 Reading the trace buffer .......................................................................................................101
5.5 5.5.1 5.5.2
Post Mortem analysis............................................................................................................103 Introduction ...........................................................................................................................103 Execute post mortem analysis..............................................................................................104
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
7
Table of contents
6 Development of a C/C++ runtime application........................................................................................108
6.1
Install additional Eclipse plugins .......................................................................................... 108
6.2 6.2.1 6.2.2 6.2.3 6.2.4
Create C/C++ application..................................................................................................... 109 Requirements....................................................................................................................... 109 Creating a C/C++ Runtime Application project .................................................................... 110 Editing C/C++ code .............................................................................................................. 112 Generate C/C++ runtime application ................................................................................... 113
6.3 6.3.1 6.3.2 6.3.3 6.3.4 6.3.5
Load C/C++ runtime application in the target system.......................................................... 114 Configuring PuTTY .............................................................................................................. 114 Commissioning C/C++ Runtime........................................................................................... 116 Set up new connection to the target system in Eclipse ....................................................... 117 Load and execute C/C++ runtime application in the target system via Eclipse................... 119 Load and debug C/C++ runtime application in the target system via Eclipse ..................... 119
6.4 6.4.1 6.4.2
Execute C/C++ runtime application ..................................................................................... 121 Starting the application automatically .................................................................................. 121 Start application via secure shell ......................................................................................... 121
7 Using example projects........................................................................................................................123
A General conditions ...............................................................................................................................124
A.1
Number of loadable CPU function libraries.......................................................................... 124
A.2
Compatibility......................................................................................................................... 125
B Syntax Interface file <project>.odk for CPU function libraries................................................................126
B.1
Data types ............................................................................................................................ 126
B.2
Parameters........................................................................................................................... 129
C Code generator messages for CPU function libraries ...........................................................................131
C.1
Error messages of the code generator ................................................................................ 131
C.2
Warnings of the code generator........................................................................................... 134
D Helper functions for CPU function libraries ...........................................................................................135
D.1
C++ helper functions ............................................................................................................ 135
D.2
C#/VB helper functions ........................................................................................................ 139
E Instructions for CPU function libraries...................................................................................................142
E.1
"Load" instruction ................................................................................................................. 142
E.2
"Unload" instruction.............................................................................................................. 142
E.3
"GetTrace" instruction .......................................................................................................... 142
Index ...................................................................................................................................................143
Open Development Kit 1500S V2.5
8
Programming and Operating Manual, 12/2017, A5E35253941-AD
Documentation guide
1
Introduction
You can find all information required to use the software in this documentation for the Open Development Kit (ODK).
Overview of the documentation for the CPU
The following table lists additional documents which supplement this description and are available on the Internet.
Table 1- 1 Documentation for the CPU
Topic Description of CPU 1505SP and CPU 1507S
Description of the CPU 1518-4 PN/DP MFP Web server
Automation License Manager
Documentation Operating manual CPU 1505SP and CPU 1507S (http://support.automation.siemens.com/WW/vi ew/en/90466248/133300)
CPU 1518-4 PN/DP MFP (http://support.automation.siemens.com/WW/vi ew/en/109749061) manual
Function manual Web Server (http://support.automation.siemens.com/WW/vi ew/en/59193560)
Automation License Manager (https://support.industry.siemens.com/cs/docu ment/102770153/automation-licensemanager?dti=0&lc=en-WW) manual
Most important contents This documentation describes the complete functionality of the CPU 1505SP and CPU 1507S.
This documentation describes the full functionality of the CPU 1518-4 PN/DP MFP. Basics Function Operation Diagnostics via web server This documentation describes the full functionality of the Automation License Manager.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
9
Product overview
2
2.1
Introduction to ODK 1500S
Overview
ODK is a development kit that allows you to program custom functions and generate files that STEP 7 can call directly. ODK provides an interface for: Windows environment
Execution on your Windows PC Use of resources of your Windows PC Use of operating system functions and system resources with access to external
hardware and software components Realtime environment
Execution on your CPU Synchronous function call (algorithmic, controllers) Calling multiple applications under Windows or in the realtime environment is possible. The CPU function libraries must be used in the STEP 7 program. C/C++ runtime applications running in SIMATIC S7-1500 MFP C/C++ Runtime can be used independently of the STEP 7 program.
Structure and design of a CPU function library
ODK supports the interface for calling custom high-level language programs from the controller program of the CPU.
ODK supports the following templates:
Templates in different programming languages for Microsoft Visual Studio. This allows you to generate a DLL file. The C++, C# and Visual Basic programming languages are supported.
A template for programming in Eclipse. This allows you to generate an SO file. ODK also supplies a class library for Eclipse. The C++ programming language is supported.
You can create a CPU function library for both the Windows and the real-time environment. The programming languages mentioned are available to you for this purpose.
Open Development Kit 1500S V2.5
10
Programming and Operating Manual, 12/2017, A5E35253941-AD
Product overview 2.1 Introduction to ODK 1500S
The ODK program can be executed in the following ways:
Synchronous, i.e. executed as part of the CPU cycle (executed in the realtime environment).
Asynchronous, i.e. started by the CPU program and ended in the background (executed in the Windows environment).
CPU function libraries can be run both under Windows (DLL) and in the realtime core of the CPU (SO). You call the functions of the DLL or SO file using instructions in the user program.
The CPU can perform functions in libraries that can be loaded dynamically. There are several possible functions in a CPU function library. There are specific function blocks for a CPU function library:
Loading and unloading of the CPU function library.
In each case a specific function block for calling a function.
The following illustration provides a schematic overview of how CPU function libraries run on a PC. This graphic applies to the S7-1500 Software Controller.
Figure 2-1 Running a CPU function library on a PC
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
11
Product overview 2.1 Introduction to ODK 1500S
The following illustration provides a schematic overview of how CPU function libraries run on a hardware CPU.
Figure 2-2 Running a CPU function library on a hardware CPU
Open Development Kit 1500S V2.5
12
Programming and Operating Manual, 12/2017, A5E35253941-AD
Structure and design of a C/C++ runtime application
Product overview 2.1 Introduction to ODK 1500S
Figure 2-3 Overview of the performance segment
You can use C/C++ runtime applications to implement parallel processes to the STEP 7 user program, for example, for pre-processing or transmitting data via Industrial Ethernet. A CPU can perform several tasks at the same time, the complexity of functions is reduced and the time required for implementation is reduced.
You can reuse existing C/C++ algorithms. In order to continue using existing technological know-how, you can integrate the existing C/C++ code via the Open Development Kit as C/C++ runtime applications in the SIMATIC S7-1500 MFP C/C++ Runtime.
Once you integrate the C/C++ sources, you can execute them on the CPU.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
13
Product overview 2.1 Introduction to ODK 1500S
The following options are available for communication between CPU Runtime and C/C++ Runtime: On Open User Communication with the "TSTEND" and "TRCV" function blocks. About the Communication protocol OPC UA.
Figure 2-4 Communication between CPU Runtime and C/C++ Runtime
Open Development Kit 1500S V2.5
14
Programming and Operating Manual, 12/2017, A5E35253941-AD
Product overview 2.2 Development environments
2.2
Development environments
The following development environments for creating an ODK project are available for selection.
Microsoft Visual Studio for CPU function libraries for the Windows environment (DLL file).
Eclipse CPU function libraries for the realtime environment (SO file) and C/C++ runtime applications.
Microsoft Visual Studio as a development environment
Use Microsoft Visual Studio. To help you develop a CPU function library, a template for a Microsoft Visual Studio project is included in the installation of ODK 1500S. The ODK template can be found under the entry of the corresponding programming language when a new project is created.
Eclipse as a development environment
Use Eclipse. To help you develop a C/C++ runtime application, a template for an Eclipse project is included in the installation of ODK 1500S. The template can be found in the folder "ODK 1500S Templates".
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
15
Product overview 2.3 Basic procedure
2.3
Basic procedure
The following sections describe the development tasks and procedures for the development and execution of a CPU function library/C/C++ runtime application:
Developing a CPU function library for the Windows environment (Page 25)
Developing a CPU function library for the realtime environment (Page 65)
Development of a C/C++ runtime application (Page 108)
Figure 2-5 Overview of the development steps
Open Development Kit 1500S V2.5
16
Programming and Operating Manual, 12/2017, A5E35253941-AD
Product overview 2.3 Basic procedure
Overview of the development steps
To develop and execute a C/C++ runtime application/CPU function library, follow these steps:
1. Implement your function.
Implement your function for CPU function libraries in Visual Studio (DLL file) or Eclipse (SO file).
Implement your function for C/C++ runtime application in Eclipse.
2. Create the C/C++ runtime application, DLL or SO file and the SCL file.
3. Import the SCL file into STEP 7.
4. Write your user application in STEP 7.
5. Load the user program in the CPU and the C/C++ runtime application or DLL or SO file into the target system.
Result
Your C/C++ runtime application/CPU function library is loaded in the target system.
The CPU function library is loaded and executed by the user program in STEP 7.
The C/C++ runtime application is started via an entry in the "autostart.sh" file in the home directory of C/C++ Runtime.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
17
Installation
3
3.1
System Requirements
Requirements
Your PC must meet the following system requirements in order to use the ODK:
Category Operating system
Processor and memory
Mass storage
Operator interface SIMATIC software Supported PLCs Additional software
Requirements · Microsoft Windows 7 SP1, 64-bit · Microsoft Windows 8.1, 64-bit · Microsoft Windows 10, 64-bit
PC system: · At least systems with Intel Core i5 processor · 1.2 GHz or higher · At least 4 GB of RAM
Depending on the already installed components, you need up to 3 GB of free space on the hard disk C:\. The exact amount of space required is displayed during the installation. Note: The setup files are deleted when the installation is complete. Color monitor, keyboard and mouse or another pointing device (optional) supported by Microsoft Windows · SIMATIC STEP 7 Professional (TIA Portal) V15 or higher
All ODK or MFP supported SIMATIC CPUs (see next table) Not included in the product package: · Java Runtime 32-bit as of V1.7 (for Eclipse) · Microsoft Visual Studio C++ 2013 · Microsoft Visual Studio 2015 · Microsoft Visual Studio 2017 · Microsoft Visual Studio Community 2017 · Eclipse plugins (for MFP use) · SSH Client, for example PuTTY (for MFP use) · Microsoft Development Tool: Download Center (http://www.microsoft.com/en-
us/download/developer-tools.aspx)
Open Development Kit 1500S V2.5
18
Programming and Operating Manual, 12/2017, A5E35253941-AD
Installation 3.1 System Requirements
ODK 1500S V2.5 is compatible with the following devices (support for loadable function libraries depends on the device):
CPU 1505SP (T)(F) V2.5 CPU 1507S (F) V2.5 CPU 1518-4 PN/DP MFP (F)
CPU function library DLL (Windows) Yes Yes No
CPU function library SO (Real-time) Yes Yes Yes
C/C++ runtime application
No No Yes
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
19
Installation 3.2 Installing ODK
3.2
Installing ODK
To install the ODK, insert the Installation DVD. Follow the instructions of the setup program.
If the setup program does not start automatically, open the "Start.exe" file on the Installation DVD manually with a double-click.
Requirements
You need administrator rights for this procedure.
It is possible to operate different ODK versions on one PC at the same time. If the ODK version to be installed is already installed on the PC, you must first uninstall it or perform a repair installation.
Note Close applications before a repair installation/uninstall
Close all applications (especially ODK-related applications), before performing the repair installation/uninstall.
Procedure
If you want to use the Microsoft Visual Studio development environment, we recommend that you install this before ODK. To install ODK, follow these steps: 1. Start the "Start.exe" file from the Installation DVD manually with a double-click. 2. Select the language for performing the installation. 3. Confirm with "Next". 4. Click "Next" to confirm the list of components that are to be installed.
The check mark for Automation License Manager (ALM) cannot be removed. 5. Follow the instructions of the installation wizard. 6. Confirm the installation dialog with the "Install" button. 7. Choose whether you want to carry out the licensing (Page 21) during the installation or at
a later time.
Open Development Kit 1500S V2.5
20
Programming and Operating Manual, 12/2017, A5E35253941-AD
Result
Installation 3.3 Licensing ODK 1500S
The installation is complete. All product languages are installed by default during the installation process. The installation creates a shortcut in the Start menu of Windows. The setup program installs the following components: "Eclipse" development environment for the development of a CPU function library for the
realtime environment or a C/C++ runtime application Project templates for Eclipse
for the CPU function library for the realtime environment for the C/C++ runtime application Project templates for Visual Studio for Windows CPU function libraries Tool to integrate Visual Studio templates Installation script for MinGW32 Code generator Online help HelpStarter tool Automation License Manager, if this is out of date or was not yet installed Certificate of license (Certificate of License)
3.3
Licensing ODK 1500S
To create CPU function libraries, the software requires a product-specific license key that you install with the Automation License Manager. Each SIMATIC software product for automation that is subject to license (e.g., STEP 7) has its own license key. You must install the license key for each product.
Working with the Automation License Manager
The Automation License Manager is a product of Siemens AG and is used for managing license keys. The Automation License Manager is supplied on the installation data medium of this product by default and is transferred automatically during the installation process.
Software products that require license keys for operation register the requirement for license keys automatically in the Automation License Manager. If the Automation License Manager finds a valid license key for this software, the software can be used according to the conditions of use associated with this license key.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
21
Installation 3.3 Licensing ODK 1500S
Certificate of license
A Certificate of License is included in the scope of delivery. It contains your unique license number. The license certificate serves as proof that you have a valid license key. Store this certificate in a safe place.
Note Obtaining a replacement license key You must have a valid certificate of license to get a replacement license key.
Recovering the license key in case of defective mass storage
If a error has occurred on the mass storage or USB flash drive containing your license key file, contact your Siemens representative (http://www.siemens.com/automation/service&support). Make sure you have your certificate of license available for this.
License key
The license key for ODK 1500S is located on a USB flash drive that is included in the scope of delivery.
If the USB flash drive containing the license key is lost or damaged, you can contact Support (http://www.siemens.com/automation/service&support) to obtain a new license key. You need the certificate of license to receive a replacement license key from Siemens.
Handling of license key for download version of ODK 1500S
The download of ODK 1500S allows you to access ordered license keys.
For access, you need:
A personalized login that you can use to fetch all license keys assigned to "your company".
An anonymous login that you can use to fetch an individual license key, and the corresponding license certificate. This document contains all data required for the anonymous download.
Additional information on the license key and the download is available in the Automation License Manager manual (https://support.industry.siemens.com/cs/document/102770153/automation-licensemanager?dti=0&lc=en-WW).
Open Development Kit 1500S V2.5
22
Programming and Operating Manual, 12/2017, A5E35253941-AD
Installation 3.4 Subsequently integrating project template for Windows CPU function libraries in Visual Studio
Transferring the license key
The license key can be transferred during the installation or afterwards. If the USB flash drive with the relevant license key is inserted in the USB port of the PC at the start of installation, the license key will be transferred automatically during the installation. If the USB flash drive is not inserted at the start of installation, you have three options for installing the license key subsequently: To transfer the license key manually from a network computer or other storage medium,
select the "Manual license transfer" button. Insert the USB flash drive with license key, and select the "Retry license transfer" button.
The Automation License Manager opens in order to transfer the license key. If you do not want to install a license key, select the "Skip license transfer" button.
Note Working without license key For legal reasons, a valid license key is required for this product. If no valid license key is present on your PC, you cannot generate any projects. An error message will inform you at regular intervals that no valid license key is present.
Manually transferring the license key subsequently
A message is displayed if you generate a project for a CPU function library without transferred license key. To manually transfer the license key for ODK subsequently, follow these steps: 1. Start the installation of ODK 1500S with administrator rights. 2. In the "License Transfer" section, select the "Manual license transfer" button.
A dialog box for synchronization of the license opens. 3. Select the destination and the source of the license key. 4. To transfer the license key, click the "Synchronize" button.
The license key is transferred.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
23
Installation 3.4 Subsequently integrating project template for Windows CPU function libraries in Visual Studio
3.4
Result
Subsequently integrating project template for Windows CPU function libraries in Visual Studio
When Visual Studio is already installed, the project template for Windows CPU function libraries is automatically installed during the ODK installation. If Visual Studio is installed later, you have the following options to integrate the project template for Windows CPU function libraries: Perform a repair installation of ODK. Run the integration manually. Call your ODK installation file
"ODK_VSTemplate_Integration.exe" in the "bin" folder.
The project templates for Windows CPU function libraries is installed for Visual Studio. You can find this under the corresponding programming language.
3.5
Uninstalling ODK
Procedure
To remove ODK from your PC, follow these steps: 1. Close all running programs, especially ODK-related applications. 2. Select the menu "Control Panel > Programs and Features", select the entry "SIMATIC
ODK 1500S" and click "Uninstall". 3. Select the "Uninstall" command in the shortcut menu.
A dialog box for uninstalling appears. 4. Follow the steps for uninstalling.
Result
ODK is removed.
Open Development Kit 1500S V2.5
24
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment
4
4.1
Creating a CPU function library
4.1.1
Requirements
The Microsoft Visual Studio development environment is not included in the scope of delivery of ODK.
You can find the Download Center for Microsoft development tools in the Internet (http://www.microsoft.com/en-us/download/developer-tools.aspx).
4.1.2
Creating a project
To help you develop a CPU function library, a project template for CPU function libraries for a project in Visual Studio is included in the installation of ODK 1500S. The template supports 32-bit and 64-bit applications.
Procedure
To create a project in Microsoft Visual Studio using the project template, follow these steps: 1. Open Microsoft Visual Studio as a development environment. 2. In the "File > New" menu, select the command "Project..."
The "New Project" dialog opens.
Figure 4-1 Creating a new project in Visual Studio
3. Select your preferred programming language and the corresponding project template (C++, C# or VB).
4. Enter a project name. 5. Click "OK" to confirm.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
25
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
Result
The CPU function library is created using the project template and sets the following project settings: Project settings for generating the DLL file Automates the generation of the DLL and SCL file The project template set ups various structures depending on the programming language: C++ project (Page 26) C# project (Page 29) VB Project (Page 30)
4.1.2.1
Solution Explorer structure: C++ project
Folder / file <project> Definition File
Generated Files
Header Files ODK Helpers
Resource Files Source Files STEP7
<project>.odk <project>.scl.additional
ODK_Types.h ODK_Functions.h ODK_Execution.cpp
ODK_CpuReadData.h ODK_CpuReadData.cpp ODK_CpuReadWriteData.h ODK_CpuReadWriteData.cpp ODK_StringHelper.h ODK_StringHelper.cpp
<project>.rc
<project>.cpp dllmain.cpp
<project>.scl
Description
ODK interface description S7 blocks that are appended to the <project>.scl file. Although the file is not part of the project template, the code generator processes the file. Files from this folder may not be edited! Definition of the ODK base types Function prototypes Implementation of the "Execute" method Header file Files from this folder may not be edited! Definition: Help functions for reading the data blocks Implementation: Help functions for reading the data blocks Definition: Help functions for reading/writing the data blocks Implementation: Help functions for reading/writing the data blocks Definition: Help functions S7 strings / W strings Implementation: Help functions S7 strings / W strings
Source Files Function code Implementation of the "dllmain" file Files from this folder may not be edited! S7 blocks
Open Development Kit 1500S V2.5
26
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
The C++ Native project template supports the following applications:
Configuration and platform Debug Win32 Release Win32 Debug x64 Release x64
Visual Studio Version older than 2015 Yes Yes To be created manually To be created manually
Visual Studio 2015 and later Yes Yes Yes Yes
Note Configuration of C/C++ Redistributables
Since the software controller contains the C/C++ redistributables for the release configuration, build the CPU function library with the configuration "Release".
To use the "Debug" configuration, add the redistributables for the debug configuration on the target system.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
27
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library Creating a CPU function library for x64 platform with Visual Studio version older than 2015
To create a project template for an x64 platform with a Visual Studio version older than 2015, proceed as follows: 1. Open the "Configuration Manager".
2. Create an x64 platform.
The "New Solution Platform" dialog opens.
Select "Win32" from the drop-down list box "Copy settings from:" .
Open Development Kit 1500S V2.5
28
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
3. Define a solution configuration for an x64 platform.
4. Select "Debug" or "Release" from the drop-down list box "Active solution configuration" and "x64" from the drop-down list box "Platform".
4.1.2.2
Solution Explorer structure: C# project
Directory / file <project> Properties Definition File
Generated Files
ODK Helpers Source STEP7
AssemblyInfo.cs <project>.odk <project>.scl.additional
OdkTypes.cs OdkFunctions.cs OdkExecution.cs OdkReadVariant.cs OdkReadWriteVariant.cs <project>.cs <project>.scl
Description
ODK interface description S7 blocks that are appended to the <project>.scl file. The file is not part of the project template, but the code generator processes the file. Files from this folder may not be edited! Definition of the ODK base types Function prototypes Implementation of the "Execute" method Files from this folder may not be edited! Help functions for reading the data blocks Help functions for reading/writing the data blocks Source Files Function code Files from this folder may not be edited! S7 blocks
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
29
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
The C++ project template supports the following applications:
Configuration and platform Debug each CPU Release each CPU
Visual Studio Version older than 2015 Not supported Not supported
Visual Studio 2015 and later Yes Yes
4.1.2.3
Solution Explorer structure: VB Project
Directory / file <project path> My Project Definition File
Generated Files
ODK Helpers
Source STEP7
AssemblyInfo.vb <project>.odk <project>.scl.additional
OdkTypes.vb OdkFunctions.vb OdkExecution.vb OdkReadVariant.vb OdkReadWriteVariant.vb <project>.vb <project>.scl
Description
ODK interface description S7 blocks that are appended to the <project>.scl file. The file is not part of the project template, but the code generator processes the file. Files from this folder may not be edited! Definition of the ODK base types Function prototypes Implementation of the "Execute" method Files from this folder may not be edited! Help functions for reading the data blocks Help functions for reading/writing the data blocks Source Files Function code Files from this folder may not be edited! S7 blocks
The VB project template supports the following applications:
Configuration and platform Debug each CPU Release each CPU
Visual Studio Version older than 2015 Not supported Not supported
Visual Studio 2015 and later Yes Yes
Open Development Kit 1500S V2.5
30
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
4.1.3
Generating a CPU function library
The generation of the project data is divided into two automated steps.
Pre-Build: Generation of the files created by default based on the changed <project>.odk file and generation of the SCL file.
Actual-Build: Generation of the DLL file.
Procedure
To generate the project data, follow these steps: 1. Save all edited files. 2. In the "Build" menu, select the command "Build Solution".
Note C/C++ projects Perform the build of the CPU function library in the "Release" configuration, as the software controller has already installed the C/C++ Redistributables (Release Runtime files). To use the "Debug" configuration, copy the Debug Runtime files to the software controller.
Note The project data is only generated if the files have been changed.
Result
The generation of the project data is started. The automatically generated files are stored in the file system.
DLL file: Project directory\<project>\<BuildConfiguration>\<project>.dll
SCL file: Project directory\<project>\STEP7\<project>.scl
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
31
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
4.1.4
Defining the runtime properties of a CPU function library
The next step is to define the interface description of the CPU function library in the <project>.odk file. The file contains the following elements: Comments Parameters Definitions of functions and structures
Procedure
To define the interface description in the <project>.odk file, follow these steps: 1. Open the <project>.odk file. 2. Change the elements depending on your requirements.
Description of the elements
Comments You can use comments for explanation purposes.
Parameters The definition of the parameters must be within a line of code. <parameter name>=<value> // optional comment The interfaces file supports the following parameters:
Parameter Context STEP7Prefix
FullClassName
Value user system <String>
<String>
Description
Specifies that the CPU function library is loaded in the context of a Windows user (Page 33).
Specifies that the CPU function library is loaded in the context of the Windows system (Page 33).
Describes the string that precedes your functions and is shown after importing the SCL file in STEP 7. The following characters are allowed: {A...Z, a...z, 1...9, -, _}
Umlauts are not permitted.
The project name is entered without spaces by default.
The parameter is required for the C# and VB programming languages.
To change the class names or namespace of the source files of the CPU function library, you need to adjust the "FullClassName" parameter.
Note Spaces in the project name With the STEP7 prefix, invalid characters are replaced by an underscore.
Open Development Kit 1500S V2.5
32
Programming and Operating Manual, 12/2017, A5E35253941-AD
4.1.5
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
Environment for loading or executing the CPU function library
When the SCL file is imported into STEP 7 as an external source, the ODK instructions are created in the selected directory in STEP 7. The ODK instructions enable you to control your CPU function library regardless of the STEP 7 user program after programming and the initial loading. You can load up to 32 CPU function libraries. Depending on whether you have created the CPU function library for a 32-bit, 64-bit system or with the "Any CPU" option, this is loaded into a 32-bit or 64-bit ODK host process. You can choose one of two contexts for your CPU function library: "System" context
Windows is started, a user can be logged on "User" context
Windows is started, a user must be logged on The following graphic shows you when a CPU function library may be loaded depending on the context.
"System" context
Change the following line of code in your <project>.odk file to use the CPU function library in the system context (Session 0): Context=system
In the system context, the CPU function library is running without the logon of a Windows user. This means the CPU function library cannot be actively controlled with user interface elements such as message dialogs.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
33
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
"User" context
Change the following line of code in the <project>.odk file to use the CPU function library in the user context: Context=user
When you load the CPU function library in the user context, it automatically unloads as soon as the user logs off in Windows. The CPU function library can be actively controlled by Windows user interface elements such as message dialogs and provides access to additional resources of the Windows environment.
If multiple users are logged on to Windows, the CPU function library loads or unloads for the user, who has the current screen rights until he logs off in Windows.
4.1.6
Defining functions and structures of a CPU function library
Functions
Functions are defined by the following general lines of code: ODK_RESULT <FunctionName> ([<InOut identifier>] <data type> <tag name>, etc.);
The <project>.odk file is the ODK interface description for CPU function libraries. This is available for all supported programming languages.
The <project>.odk file contains an example function description by default. You can change this description and/or add more function descriptions. ODK_RESULT MyFunc1([IN] INT param1, [OUT] INT param2);
Syntax rules for functions
The following syntax rules apply to functions within the <project>.odk file: Note that the function names are case-sensitive. You can divide function definitions into multiple lines. End a function definition with a semicolon. TAB and SPACE are allowed. Do not define a tag name in a function twice. Do not use any keywords for the programming language that is used (for example
"EN / ENO" as parameter name) Use ODK_RESULT only for the return values of the function. The tag name must start with a letter or an underscore. Illegal function names are displayed during generation in the development environment. The following names are not allowed in combination of <STEP 7Prefix> and <function
name>: ODK_Load, ODK_Unld, ODK_ExcA, ODK_ExcS
Open Development Kit 1500S V2.5
34
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
<FunctionName>
Function names are valid with the syntax and character restrictions of the used programming language.
<InOut-Identifier>
There are three defined InOut-Identifiers. Use these in the following order: [IN], [OUT], [INOUT]
[IN]: Specifies an input tag. The tag is copied to the function when it is called. This is constant and cannot be changed.
[OUT]: Specifies an output tag. The tag is copied back after the function has been completed.
[INOUT]: Specifies an input and output tag. The tag is copied to the function when it is called. This is not constant and can be changed. The tag is copied back after the function has been completed.
<DataType>
The data type defines the type of a tag. The following table defines the possible data types and their representation in the individual programming languages or STEP 7:
Elementary data types:
ODK data type ODK_DOUBLE
SIMATIC data type
LREAL
C++ data type double
C# data type double
ODK_FLOAT REAL
float
float
ODK_INT64 ODK_INT32 ODK_INT16 ODK_INT8 ODK_UINT64 ODK_UINT32 ODK_UINT16 ODK_UINT8 ODK_LWORD ODK_DWORD ODK_WORD ODK_BYTE ODK_BOOL
LINT DINT INT SINT ULINT UDINT UINT USINT LWORD DWORD WORD BYTE BOOL
long long long short char unsigned long long unsigned long unsigned short unsigned char unsigned long long unsigned long unsigned short unsigned char unsigned char
long int short sbyte ulong uint ushort byte ulong uint ushort byte bool
ODK_LTIME
LTIME
long long
long
ODK_TIME
TIME
long
int
VB data type
Double
Single
Long Integer Short SByte ULong UInteger UShort Byte ULong UInteger UShort Byte Boolean
Long
Integer
Description
64-bit floating point, IEEE 754 32-bit floating point, IEEE 754 64-bit signed integer 32-bit signed integer 16-bit signed integer 8-bit signed integer 64-bit unsigned integer 32-bit unsigned integer 16-bit unsigned integer 8-bit unsigned integer 64-bit bit string 32-bit bit string 16-bit bit string 8-bit bit string 1-bit bit string, remaining bits (1..7) are empty 64-bit during in nanoseconds 32-bit during in milliseconds
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
35
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
ODK data type ODK_LDT
SIMATIC data type
LDT
C++ data type unsigned long long
C# data type ulong
ODK_LTOD
LTOD
unsigned long long ulong
ODK_TOD
TOD
unsigned long
uint
ODK_WCHAR ODK_CHAR
WCHAR CHAR
wchar_t char
Complex data types:
char sbyte
VB data type ULong
ULong UInteger Char SByte
Description
64-bit date and time of the day in nanoseconds since 01/01/1970 00:00 64-bit time of the day in nanoseconds since midnight 32-bit time of the day in milliseconds since midnight 16-bit character 8-bit character
ODK data type ODK_DTL
SIMATIC data type
DTL
C++ data type struct ODK_DTL
ODK_S7WSTRI WSTRING NG
unsigned short
C# data type VB data type Description
OdkInternal. Dtl (class) string
OdkInternal. Dtl (class) String
Structure for date and time
Character string: · For SIMATIC and C++:
16-bit character with length max. and act. (4xUSINT)
· For other languages:
ODK_S7STRIN STRING G
unsigned char
string
String
native Character string: · For SIMATIC and C++:
8-bit character with length max. and act. (2xUSINT)
· For other languages:
ODK_VARIANT VARIANT
[ ]
ARRAY
struct ODK_VARIANT
[ ]
byte [ ] [ ]
byte [ ] [ ]
native
Classic data (each data type that can be serialized with classic data.)
Range of same data types.
You can use all data types as array except IN_DATA / INOUT_DATA / OUT_DATA.
User-defined data types:
User-defined data types (UDT) include structured data, especially the names and data types of this component and their order.
A user-defined data type can be defined in the ODK interface description with the keyword "ODK_STRUCT".
Open Development Kit 1500S V2.5
36
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
Example
ODK_STRUCT <StructName>
{
<DataType> <TagName>;
...
};
The following syntax rules apply to the structure: You can divide the structure into multiple lines. The structure definition must end with a semicolon. Any number of tabs and spaces between the elements is permitted. It is not permitted to use any keywords for the generated language used (for example
"en / eno" as tag name). You can create additional structures within a structure.
<StructName> Structure names are valid with the syntax and character restrictions of the programming language and as defined for tag definitions in STEP 7. In STEP 7, the structure name is extended with the STEP 7 prefix.
<TagName> Tag names are subject to the syntax and character restrictions of the programming language.
Example The following code example explains the definitions of functions and structures. Sort the parameters by: IN, OUT, INOUT. //INTERFACE ... ODK_STRUCT MyStruct
{ ODK_DWORD myDword; ODK_S7STRING myString;
}; ODK_RESULT MyFct([IN] MyStruct myInStruct
,[OUT] MyStruct myOutStruct);
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
37
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
4.1.6.1
Using ODK_VARIANT as parameter
Restrictions of the data type ODK_VARIANT:
When a parameter of the data type ODK_VARIANT is used, it is not permitted to use other parameters with the same InOut-Identifier, regardless of data type.
With the data type ODK_VARIANT, an [OUT] is modeled as [INOUT] in the generated FB.
Example // INTERFACE ... // OK: ODK_RESULT MyFunc1([IN] ODK_VARIANT myClassicData); ODK_RESULT MyFunc2([IN] ODK_VARIANT myDataIn
, [OUT] ODK_VARIANT myDataOut , [INOUT] ODK_VARIANT myDataInout); // // NOT OK (Code Generator will throw an error): // If ODK_VARIANT is used for [IN], no other [IN] parameter // may be defined in this function ODK_RESULT MyFunc4([IN] ODK_VARIANT myClassicData , [IN] ODK_INT32 myint);
Application example for C++ #include "ODK_CpuReadData.h" ... ODK_RESULT MyFunc1 (const ODK_VARIANT& myClassicData) {
CODK_CpuReadData myReader(myClassicData); ODK_INT32 myInt1, myInt2; myReader.ReadS7DINT(0, myInt1); myReader.ReadS7DINT(4, myInt2); return myInt1 + myInt2; }
Helper functions (Page 135) of the following classes are available to help you access the data type ODK_VARIANT inside a user function:
Class "CODK_CpuReadData"
Class "CODK_CpuReadWriteData"
Note Size of the ODK_VARIANT tags
The size of the ODK_VARIANT tags is not known at the time of compiling and is therefore not checked during the compiling process. When selecting the other parameters, consider the possible size of the ODK_VARIANT parameter in your application.
Open Development Kit 1500S V2.5
38
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
4.1.6.2
Handling strings
You can define a maximum length for strings (String or WString). Define the maximum number of characters in square brackets directly after the data type:
ODK_S7STRING[30] or
ODK_S7WSTRING[1000]
Without limitation, a string has a default length of 254 characters.
In order to access the data types ODK_S7STRING or ODK_S7WSTRING within a user function, the string helper functions (Page 135) are available:
Example //INTERFACE ... ODK_RESULT MyFct(
[IN] ODK_S7STRING , [OUT] ODK_S7STRING[10] , [INOUT] ODK_S7STRING[20]
myStrHas254Chars myStrHas10Chars myStrArrayHas20Chars5Times[5]);
If you use [INOUT], you can set the string with a length that differs from the [INOUT of the function block in STEP 7.
4.1.6.3
Definition of the <Project>.odk file
The function prototypes and function blocks are generated based on the selected parameters in the <project>.odk file. Define the <project>.odk file for this.
By default, the <project>.odk file contains the following:
Description
The possible data types that are used for the interface are described in comment lines. This simplifies the definition of the correct tag type for your task.
Context=user
The CPU function library is loaded in the "User" context. You can change the parameter to Context=system.
STEP7Prefix="<project>"
Sets a string for the SCL generation in front of the functions of the CPU function library. The string is visible in STEP 7. You can change the parameter. The string length of the prefix including the function name must not exceed a length of 125 characters (for example, ODK_App_SampleFunction)
"SampleFunction" function definition
You can change this default function as you wish in the <project>.odk file and add more functions. The string length may not exceed a length of 125 characters. The associated function is located in the CPP file.
FullClassName="<OdkProject1.Source.CpuFunctionLibrary>"
The parameter is required for the C# and VB programming languages.
To change the class names or namespace of the source files of the CPU function library, you need to adjust the "FullClassName" parameter.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
39
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
Example //INTERFACE Context=user STEP7Prefix=ODKProject FullClassName=ODKProject.Source.CpuFunctionLibrary
/*
* Elementary data types:
* ODK_DOUBLE
LREAL 64-bit floating point, IEEE 754
* ODK_FLOAT
REAL
32-bit floating point, IEEE 754
* ODK_INT64
LINT
64-bit signed integer
* ODK_INT32
DINT
32-bit signed integer
* ODK_INT16
INT
16-bit signed integer
* ODK_INT8
SINT
8-bit signed integer
* ODK_UINT64
ULINT 64-bit unsigned integer
* ODK_UINT32
UDINT 32-bit unsigned integer
* ODK_UINT16
UINT
16-bit unsigned integer
* ODK_UINT8
USINT 8-bit unsigned integer
* ODK_LWORD
LWORD 64-bit bit string
* ODK_DWORD
DWORD 32-bit bit string
* ODK_WORD
WORD
16-bit bit string
* ODK_BYTE
BYTE
8-bit bit string
* ODK_BOOL
BOOL
1-bit bit string
* ODK_LTIME
LTIME 64-bit duration in nanoseconds
* ODK_TIME
TIME
32-bit duration in milliseconds
* ODK_LDT
LDT
64 bit date and time of day
*
in nanoseconds
* ODK_LTOD
LTOD
64 bit time of day in nanoseconds
*
since midnight
* ODK_TOD
TOD
32 bit time of day in milliseconds
*
since midnight
* ODK_CHAR
CHAR
8 bit character
* ODK_WCHAR
WCHAR 16 bit character
* Complex Datatypes:
* ODK_DTL
DTL
structure for date and time
* ODK_S7STRING STRING character string with 8-bit characters
* ODK_VARIANT
VARIANT classic data (any datatype which can be
serialized
*
to classic data)
* ODK_S7WSTRING WSTRING character string with 16 bit characters
* []
ARRAY field of this datatype
* User Defined Datatype:
* ODK_STRUCT
UDT
user defined structure
* Return Datatype:
* ODK_RESULT
0x0000-0x6FFF function succeeded
*
(ODK_SUCCESS = 0x0000)
*
0xF000-0xFFFF function failed
*
(ODK_USER_ERROR_BASE = 0xF000)
*/
// Basic function in order to show // how to create a function in ODK 1500S. ODK_RESULT SampleFunction([IN] ODK_INT32
, [OUT] ODK_BOOL
myInt // integervalue // as input
myBool // bool value
Open Development Kit 1500S V2.5
40
Programming and Operating Manual, 12/2017, A5E35253941-AD
4.1.6.4
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
// as output , [INOUT] ODK_DOUBLE myReal);// double value
// as input // and output
Modifying the <Project>.odk file
The following examples show you how you can change the <project>.odk file to suit your needs. //INTERFACE Context=user STEP7Prefix=ODK_SampleApp_
ODK_RESULT GetString ([OUT] ODK_S7STRING myString);
ODK_RESULT Calculate ([IN] [IN] [OUT] [OUT] [INOUT] [INOUT]
ODK_INT64 ODK_DOUBLE ODK_FLOAT ODK_INT32 ODK_BYTE ODK_BYTE
In1, In2, Out1, Out2, InOut1[64], InOut2[64]);
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
41
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
Function prototypes in the ODK file
Example for C++ ODK_RESULT GetString (
/*OUT*/ ODK_S7STRING myString[256]); #define _ODK_FUNCTION_GETSTRING ODK_RESULT GetString (/*OUT*/ ODK_S7STRING myString[256])
ODK_RESULT Calculate (
/*IN*/
const ODK_INT64& In1,
/*IN*/
const ODK_DOUBLE& In2,
/*OUT*/ ODK_FLOAT& Out1,
/*OUT*/ ODK_INT32& Out2,
/*INOUT*/ ODK_BYTE InOut1[64],
/*INOUT*/ ODK_BYTE InOut2[64]);
#define ODK_FUNCTION_CALCULATE ODK_RESULT Calculate(/*IN*/ const
ODK_INT64& In1,/*IN*/ 2480 const ODK_DOUBLE& In2,/*OUT*/ ODK_FLOAT&
Out1,/*OUT*/ ODK_INT32& Out2,/*INOUT*/ ODK_BYTE2481
InOut1[64],/*INOUT*/ ODK_BYTE InOut2[64])
#endif // ODK_FUNCTIONS_H
Example for C# namespace OdkInternal {
interface IOdkFunctions {
// declaration of the callback methods ushort OnLoad(); ushort OnUnload(); ushort OnRun(); ushort OnStop();
ushort GetString( /*OUT*/ out string myString);
ushort Calculate( /*IN*/ ref long In1, /*IN*/ ref double In2, /*OUT*/ out float Out1, /*OUT*/ out int Out2, /*INOUT*/ ref byte[] InOut1, /*INOUT*/ ref byte[] InOut2);
} }
Open Development Kit 1500S V2.5
42
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
Example for VB Namespace Global.OdkInternal
Public Interface IOdkFunctions // declaration of the callback methods Function OnLoad() As UShort Function OnUnload () As UShort Function OnRun () As UShort Function OnStop () As UShort
Function GetString(
ByRef myString As String `OUT
) As UShort
Function Calculate(
ByRef In1 As Long,
`IN
ByRef In2 As Double,
`IN
ByRef Out1 As Float,
`OUT
ByRef Out2 As Integer, `OUT
ByRef InOut1() As Byte, `INOUT
ByRef InOut2() As Byte `INOUT
) As UShort
End Interface
End Namespace
4.1.6.5
Comments
The following examples for using comments are valid for C++ and C#. Differences to Visual Basic are available under "Comments in Visual Basic (Page 45)"
Comments are started with a double slash "//" and end automatically at the end of the line.
Alternatively, you can limit comments by /* <comment> */, which enables new lines in a comment. Characters after the end of the comment identifier "*/" are further processed by the code generator.
Comments for functions and structures
You place comments on functions and structures directly in front of the functions/structures.
These comments are transferred to the ODK_Functions.h/.cs/.vb and <project>.scl files.
In the <project>.scl file, the comments are copied to the block properties and duplicated in the code area of the function.
Observe the following rules:
Comments for functions and structures must be located directly in front of the functions/structures (without blank line).
The end of the comment is located in front of the ODK_RESULT or ODK_STRUCT keyword.
You can use both identifiers "//" and "/* */" but not in combination within a comment.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
43
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
Example // this comment did not appear in MyStruct, because of the empty line.
// comment MyStruct
// ...
ODK_STRUCT MyStruct
{
ODK_DWORD
myDword;
ODK_S7STRING myString;
};
/* comment MyFct ... */ ODK_RESULT MyFct([IN] MyStruct myInStruct
,[OUT] MyStruct myOutStruct);
Comments for tags in functions and structures
Comments for function and structure tags are placed directly in front of or behind the tag. These comments are transferred to the ODK_Functions.h/ and <project>.scl files. The following rules apply to comments in front of tags: Comments must be directly in front of the tag (without blank line). The end of the comment is the <InOut-Identifier> of the tags. The following rules apply to comments after tags: Comments must be after the tag name (without blank line). The following general rules apply to comments for tags: You can use both identifiers "//" and "/* */" but not in combination within a comment. In the header file, the same comment identifier is used ("//" or "/* */").
Example ODK_STRUCT MyStruct {
// comment myDword BEFORE definition ODK_DWORD myDword;
ODK_S7STRING myString; /* comment myString AFTER definition */ };
ODK_RESULT MyFct([IN] MyStruct myInStruct // comment // myInStruct ... // ... "second line"
, [OUT] MyStruct myOutStruct); /* comment myOutStruct ... ...
*/
Open Development Kit 1500S V2.5
44
Programming and Operating Manual, 12/2017, A5E35253941-AD
4.1.6.6
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
Comments in Visual Basic
Not all comments can be transferred unchanged from the Interface file to the VB source. The following rules are valid only for comments in Visual Basic: Comments are marked with a apostrophe. To mark multiple lines as comment, you need to set an apostrophe before each line.
Example:
<project>.odk /* Multi line comment 1
comment 2 comment 3*/ ODK_RESULT f1();
ODK_Functions.vb ` This file is AUTO GENERATED ... ` <automatically generated comment> ... ` Multi line comment 1 ` comment 2 ` comment 3 Function f1() As UShort
Comments are not permitted in front of source code.
Set the InOut identifier after the function parameter.
Example:
<project>.odk ODK_RESULT f1([IN] ODK_BYTE b);
ODK_Functions.vb Function f1(
b As Byte ` [IN] ) As UShort
Multi-line comments are not permitted between function parameters.
Set multiple comments in a line.
Example:
<project>.odk ODK_RESULT f1(
// c1 // c2 [IN] ODK_BYTE b // c3
// c4 );
ODK_Functions.vb Function f1(
b As Byte ` [IN] c1` c2` c3` c4 ) As UShort
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
45
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
4.1.7
Implementing functions
4.1.7.1
General notes
This section provides an overview of the basic topics relating to the implementation of functions in a Windows environment.
The function call is not limited in time, because the function is called asynchronously.
Traces are possible via OutputDebugString instructions
All asynchronous functions are executed with equal priority - regardless of the priority of the OBs
The complete Windows API (Application Programming Interface) and C++-Runtime library are available
4.1.7.2
Callback functions
The project template includes an execute file to define your functions.
Programming language C++ C# VB
Name of the execute file <project>.cpp <project>.cs <project>.vb
This execute file contains functions filled by default. This file does not necessarily need to be filled with additional user code to be usable. However, neither may the functions be deleted under any circumstances.
The empty function has the following code (using the "OnLoad()" function as an example):
You can define the following functions in the execute file:
OnLoad(): Called after loading the CPU function library
OnUnload(): Called before unloading the CPU function library
OnRun(): Called when the CPU changes to RUN mode after the OnLoad() function
OnStop(): Called when the CPU changes to the STOP mode and before the function OnUnload()
The following table provides an overview of the various actions to invoke the callback functions:
Current operating state New operating state
RUN
RUN
STOP
RUN
RUN STOP
STOP RUN
User action ODK_Load
ODK_Load in startup OB (e.g. OB100) <already loaded> <already loaded>
ODK action 1. OnLoad() 2. OnRun() 1. OnLoad() 2. OnRun()
OnStop() OnRun()
Open Development Kit 1500S V2.5
46
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
Current operating state New operating state
RUN
RUN
RUN any
SHUTDOWN / MRES any
User action ODK_Unload
<already loaded> <already loaded> Exit ODK host
ODK action 1. OnStop() 2. OnUnload()
OnStop()
1. OnStop() (optional, if not already executed)
2. OnUnload()
"OnLoad()" and "OnUnload()" function
The functions have a return value of type "ODK_RESULT" and typically provide information about the status of the "ODK_SUCCESS" value.
The following return values are possible:
Return value for "ODK_RESULT" ODK_SUCCESS = 0x0000
0x0001 0xEFFF 0xF000 0xFFFF ODK_USER_ERROR_BASE = 0xF000
Description Return value following a successful execution of the "OnLoad()" or "OnUnload()" function
Invalid values (system-internal)
You can define your own error values.
The loading stops and the CPU function library unloads for the "OnLoad()" function.
The CPU function library within the specified value range is still unloaded for the "OnUnload()" function.
"OnRun()" and "OnStop()" function
The functions have a return value of type "ODK_RESULT" and typically provide information about the status of the "ODK_SUCCESS" value.
The following return values are possible:
Return value for "ODK_RESULT" ODK_SUCCESS = 0x0000
0x0001 0xFFFF
Description Return value following a successful execution of the "OnRun()" or "OnStop()" function
No direct feedback to the user program is possible. The return value is sent to Windows (WindowsEventLog).
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
47
Developing a CPU function library for the Windows environment 4.1 Creating a CPU function library
4.1.7.3
Implementing custom functions
Once you have defined the ODK interface in the <project>.odk file, you must edit the functions of the CPU function library in the Project Source file.
Procedure
To edit the function of a CPU function library, follow these steps: 1. To generate the function prototypes, execute the build. 2. Open the project source file, or create a custom source file if necessary. 3. Transfer the function prototypes from <ODK_Functions.h>/<OdkFunctions.cs/vb> to the source file.
Note Use the function prototype macro to transfer the step 3 in the future when there is a change to the function parameters.
4. Edit the code of your CPU function library in the execute file.
CPU function library
The execute file contains a schematically represented function description by default. You can change this description with corresponding changes in the <project>.odk file and/or add more function descriptions.
Execute file based on C++ example #include "ODK_Functions.h"
EXPORT_API ODK_RESULT OnLoad (void) {
return ODK_SUCCESS; } EXPORT_API ODK_RESULT OnUnload (void) {
return ODK_SUCCESS; } EXPORT_API ODK_RESULT OnRun (void) {
return ODK_SUCCESS; } EXPORT_API ODK_RESULT OnStop (void) {
return ODK_SUCCESS; } ODK_RESULT SampleFunction( const ODK_INT32& myInt,
ODK_BOOL& myBool, ODK_DOUBLE& myReal) { return ODK_SUCCESS; }
Open Development Kit 1500S V2.5
48
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.2 Transferring a CPU function library to the target system
4.2
Transferring a CPU function library to the target system
Manually transfer the DLL file to a specific Windows folder on the target system (e.g. via a network share or USB flash drive). Use the standard Windows data transfer procedure to transfer of the CPU function library. The storage location in Windows is specified by a registry key. When loading an CPU function library, the ODK service automatically searches for the file in the path specified by the registry key.
Note CPU function library in the debug configuration
When the CPU function library has been transferred to the debug configuration, you also need to transfer the debug DLLs of the development environment to the target system.
The default value that describes the file path is: %ProgramData%\Siemens\Automation\ODK1500S\
Note Administrator rights Assign write permission to this folder only for the administrator. This prevents unauthorized personnel from uploading CPU function libraries. Please note: The setup of the SIMATIC S7-1500 Software Controller checks whether the file path already exists and the required administrator rights are assigned.
If not, the directory is renamed to "ODK1500S_OLD1" or "ODK1500S_OLD2" and a new directory with the correct access rights is created.
The Windows file system can hide the folder based on your setting. You can view the folder using the Windows option "Show hidden files, folders, and drives" in the Explorer menu "Organize > Folder and search options > View".
The registry key for 32-bit systems is: HKEY_LOCAL_MACHINE\SOFTWARE\Siemens\Automation\ODK1500S\odk_app_path
The registry key for 64-bit systems is: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Siemens\Automation\ODK1500S\od k_app_path
You can change the default value of the registry key and thus adapt to the expected location for the DLL file to suit your needs.
Note Changing the path in the registry key
To protect the DLL file, select a storage location that is secured by access protection.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
49
Developing a CPU function library for the Windows environment 4.3 Importing and generating an SCL file in STEP 7
4.3
Importing and generating an SCL file in STEP 7
The following files are created when the project map is created:
SCL file for importing into STEP 7
All files depending on the configuration, e.g. DLL file
If STEP 7 is installed on another PC as the development environment, you must transfer the generated SCL file to the PC where the STEP 7 is installed.
Requirements
The project data were generated.
Procedure
To import and compile the SCL file, follow these steps: 1. Start STEP 7. 2. Open your project. 3. Select the project view. 4. Select the CPU in the project tree. 5. Select the "External Sources" subfolder.
The "Open" dialog box opens. 6. Navigate in the file system to the SCL file that was created during the generation of the
project data. 7. Confirm your selection with "Open".
The SCL file is imported. After completion of the import process, the SCL file is displayed in the "External Sources" folder. 8. You need to compile the SCL file before you can use the blocks in your project. 9. To do this, select the SCL file in "External sources" subfolder. 10.Select the "Generate blocks from source" command in the shortcut menu.
Result
STEP 7 creates the S7 blocks based on the selected SCL file.
The created blocks are now automatically displayed in the "Program blocks" folder below the selected CPU in the project tree. You can load the function blocks during the next download to the target device.
Open Development Kit 1500S V2.5
50
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.4 Executing a function
4.4
Executing a function
4.4.1
Loading functions
Introduction
Regardless of the context in which the CPU function library is running, the loading procedure consists of the following steps:
Call the "<STEP7Prefix>_Load" instruction in the STEP 7 user program.
In the Windows context, the loading process checks if a 32-bit or 64-bit process is required and starts the appropriate host. Each CPU function library runs in a separate Windows process (ODK_Host).
The host loads the CPU function library and calls the "OnLoad()" function and then the "OnRun()" functions.
Note
Loading the same CPU function libraries with a modified <project>.odk file
When you load an CPU function library and subsequently change the <project>.odk file, we recommend that you unload your CPU function library first before you load the newly generated CPU function library. If the "<STEP7Prefix>_Unload" instruction is not executed, both CPU function libraries are in the memory. This can lead to insufficient memory being available for the CPU.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
51
Developing a CPU function library for the Windows environment 4.4 Executing a function
"<STEP7Prefix>_Load" instruction
A CPU function library is loaded by calling the "<STEP7Prefix>_Load" instruction in the STEP 7 user program.
REQ
<STEP7Prefix>_Load
DONE BUSY ERROR STATUS
The following table shows the parameters of the instruction "<STEP7Prefix>_Load":
Section Input Output Output Output
Output
Declaration REQ DONE BUSY ERROR
STATUS
Data type BOOL BOOL BOOL BOOL
INT
Description A rising edge activates the loading of the CPU function library.
Indicates that the instruction has finished loading the CPU function library.
Indicates that the instruction is still loading the CPU function library.
Indicates that an error occurred during the loading of the CPU function library. STATUS gives you more information about the possible cause.
Provides information about possible sources of error, if an error occurs during the loading of the CPU function library.
Input parameters
An edge transition (0 to 1) at the "REQ" input parameter starts the function.
Open Development Kit 1500S V2.5
52
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.4 Executing a function
Output parameters
The following table shows the information that is returned after loading.
DONE 0 0 0 1 1 0
BUSY 0 1 1 0 0 0
ERROR 0 0 0 0 0 1
STATUS 0x7000 =28672 0x7001 =28673 0x7002 =28674 0x7100 =28928 0x0000 =0 0x80A4 =-32604 0x80C2 =-32574
0x80C3 =-32573
0x8090 =-32624 0x8092 =-32622 0x8093 =-32621
0x8094 =-32620 0x8095 =-32619
0x8096 =-32618
0x8097 =-32617
Meaning No active loading
Loading in progress, first call
Loading in progress, ongoing call
CPU 1500 V2.0 and later: CPU function library is already loaded. Loading was performed successfully.
CPU function library could not be loaded. Start the ODK service manually or restart Windows. CPU function library could not be loaded. There are currently not enough resources available from Windows. Reload the CPU function library after a few seconds. CPU function library could not be loaded. The CPU currently does not have enough resources. Reload the CPU function library after a few seconds. CPU function library could not be loaded. An exception occurred during execution of the "OnLoad()" function.
CPU function library could not be loaded because the library name is invalid.
CPU function library could not be loaded because the CPU function library could not be found. Check the file name and path of the file. CPU function library could not be loaded. The CPU function library was created for the Windows user context, but no user is logged on.
CPU function library could not be loaded due to the following reasons: · The DLL file is not a CPU function library · An attempt has been made to load a 64-bit application into a 32-bit
system · Dependencies on other Windows DLL files could not be resolved.
Check that the release build of the CPU function library is used. Check whether the "Visual C++ Redistributables" are installed
for the Visual Studio version you are using. · The CPU does not support the utilized ODK version.
The CPU function library could not be loaded because the internal identification is already being used by another loaded CPU function library. CPU 1500 V1.8 and earlier: CPU function library is already loaded.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
53
Developing a CPU function library for the Windows environment 4.4 Executing a function
DONE
BUSY
ERROR
STATUS 0x8098 =-32616 0x809B =-32613
0xF000 0xFFFF =-4096 -1
Meaning The CPU function library could not be loaded because the CPU function library is currently being unloaded.
CPU 1500 V2.0 and later: The CPU function library could not be loaded and returns an invalid value (the values 0x0000 and 0xF000 - 0xFFFF are allowed)
CPU 1500 V2.0 and later: CPU function library could not be loaded. An error occurred during execution of the "OnLoad()" function.
Example
This example describes how the loading and execution of a Windows CPU function library can be implemented for the Windows environment in STEP 7 after communication disturbances.
When Windows is again available the CPU function library is loaded and the execution of the functions is again possible.
A communication disturbance can be caused by the following:
Windows Restart (or Shut down)
Windows Log off (if application in user area)
TerminateProcess/ODK_Host crash
A flag is necessary for this (here: ODK_Loaded), which is set after successful loading and is reset following a faulty execution of the ODK function.
FUNCTION_BLOCK "ODK_AutoLoad" { S7_Optimized_Access := 'TRUE' } VERSION: 0.1
VAR ODK_Loaded : Bool;
END_VAL BEGIN
// Loading of the Windows-CPU function library IF NOT #ODK_Loaded THEN
// Toggle request flag if loading is not active IF NOT "ODKProject_Load_DB".BUSY THEN
"ODKProject_Load_DB".REQ := NOT "ODKProject_Load_DB".REQ; END_IF;
// Loading of the CPU function library "ODKProject_Load_DB"();
// Set "Loaded" flag if loading is successful IF "ODKProject_Load_DB".DONE THEN
#ODK_Loaded := true; END_IF; END_IF;
// Execute the ODK function(s) (only in loaded state)
Open Development Kit 1500S V2.5
54
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.4 Executing a function
IF #ODK_Loaded THEN // Toggle request flag if function call is not active IF NOT "ODKProjectSampleFunction_DB".BUSY THEN "ODKProjectSampleFunction_DB".REQ := NOT "ODKProjectSampleFunction_DB".REQ; END_IF;
// Execute the function "ODKProjectSampleFunction_DB"();
// The "Loaded" flag must be reset when // a) An error is present in the communication with Windows (0x80A4) // b) the CPU function library was already unloaded before this function call (0x8096) IF "ODKProjectSampleFunction_DB".STATUS = 16#80A4 OR "ODKProjectSampleFunction_DB".STATUS = 16#8096 THEN #ODK_Loaded := false; END_IF; END_IF; END_FUNCTION_BLOCK
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
55
Developing a CPU function library for the Windows environment 4.4 Executing a function
4.4.2
Calling functions
Introduction
Once the CPU function library is loaded, you can execute functions via your STEP 7 user program. This call is made from the corresponding "<STEP7Prefix>SampleFunction" instruction.
You can load up to 32 CPU function libraries at the same time.
"<STEP7Prefix>SampleFunction" instruction
A CPU function library is called by the "<STEP7Prefix>SampleFunction" instruction.
REQ myInt myReal
<STEP7Prefix>SampleFunction
The following table shows the parameters of the instruction "<STEP7Prefix>SampleFunction":
DONE BUSY ERROR STATUS myBool
Section
Declaration Data type
Automatically generated parameters
Input
REQ
BOOL
Output
DONE
BOOL
Output
BUSY
BOOL
Output
ERROR
BOOL
Output
STATUS
INT
User-defined parameter
Input
myInt
InOut
myReal
Output
myBool
Description
A rising edge of this input value activates the execution of the CPU function library. This output value indicates that the instruction has finished execution of the CPU function library. This output value indicates that the instruction is still unloading the CPU function library. This output value indicates that an error occurred during the execution of the CPU function library. The STATUS output value provides more information on this. This output value provides information about possible sources of error, if an error occurs during the execution of the CPU function library.
User-defined input tags User-defined input-output tags User-defined output tags
Input parameters
An edge transition (0 to 1) at the "REQ" input parameter starts the function.
Open Development Kit 1500S V2.5
56
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.4 Executing a function
Output parameters
The following table shows the information for the output parameters returned after execution.
DONE 0 0 0 1
0
BUSY 0 1 1 0
0
ERROR 0 0 0 0
1
STATUS Meaning
0x7000
No active process
=28672
0x7001
First call (asynchronous)
=28673
0x7002
Continuous call (asynchronous)
=28674
0x0000 0x6FFF
Function has been executed and returns a value between 0x0000 and 0x6FFF.
=0 28671 (ODK_SUCCESS = 0x0000)
0x80A4
CPU function library could not be executed for the following reasons:
=-32604
· The "<STEP7Prefix>_Unload" instruction was executed during a function execution. The function execution was aborted at the CPU end. Windows terminates the execution of the function normally. No return value is sent to the CPU.
Wait until the "<STEP7Prefix>_Unload" instruction has ended. Then load the CPU function library again.
· Windows is not available
· ODK service is not running Start the ODK service manually or restart Windows.
0x80C2 =-32574
CPU function library could not be executed. There are currently not enough resources available from Windows.
Execute the CPU function library again after a few seconds.
0x80C3 =-32573
CPU function library could not be executed. The CPU currently does not have enough resources.
Execute the CPU function library again after a few seconds.
0x8090 =-32624
CPU function library could not be executed. An error occurred during execution.
0x8091 =-32623
CPU function library could not be executed. A "STOP" occurred during the function call.
0x8096 =-32618
CPU function library could not be executed because the CPU function library was not loaded or unloading is not yet finished.
0x8098 =-32616
CPU function library could not be executed because the function is not supported.
0x8099 =-32615
CPU function library could not be executed because the maximum amount of input data (1 MB) was exceeded (declarations with "In" and "InOut")
0x809A =-32614
CPU function library could not be executed because the maximum amount of output data (1 MB) was exceeded (declarations with "Out" and "InOut")
0x809B =-32613
The function returns an invalid value (a value between 0x0000 and 0x6FFF; 0xF000 and 0xFFFF is permitted)
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
57
Developing a CPU function library for the Windows environment 4.4 Executing a function
DONE
BUSY
ERROR
STATUS 0x809C =-32612
Meaning Function uses an invalid data type: · IN_DATA
· INOUT_DATA · OUT_DATA
0xF000 0xFFFF
=-4096 -1
CPU 1500 V2.0 and later:
The function could not be executed and returns a value between 0xF000 and 0xFFFF.
(ODK_USER_ERROR_BASE = 0xF000)
Note Call of function(s) influences the cycle time
When you call a function, the function parameters are copied. In particular in the case of large amounts of data or of structured data, this can lead to the cycle time being influenced.
4.4.3
Unloading functions
Introduction
The CPU function library is unloaded by calling the "<STEP7Prefix>_Unload" instruction. Call is made from the STEP 7 user program.
In addition to this call, the CPU function library is also automatically unloaded for the following reasons.
The CPU is switched off
The CPU is reset
Windows is restarted
Logoff off the Windows user (in the context of a Windows user)
Regardless of the context in which the CPU function library is running, the unloading procedure consists of the following steps:
Call the "<STEP7Prefix>_Unload" instruction in the STEP 7 user program.
From now on, no new executes can be carried out for this CPU function library. Still active executes are terminated at the CPU end. Windows terminates the execution of the function normally ("Unload" waits). No return value is sent to the CPU.
The host calls the "OnStop()" and "OnUnload()" functions.
The CPU function library is being unloaded.
Open Development Kit 1500S V2.5
58
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.4 Executing a function
"<STEP7Prefix>_Unload" instruction
A CPU function library is unloaded by calling the "<STEP7Prefix>_Unload" instruction in the STEP 7 user program.
REQ
<STEP7Prefix>_Unload
DONE BUSY ERROR STATUS
The following table shows the parameters of the instruction "<STEP7Prefix>_Unload":
Section Input Output Output Output
Output
Declaration REQ DONE BUSY ERROR
STATUS
Data type BOOL BOOL BOOL BOOL
INT
Description A rising edge activates the unloading of the CPU function library.
Indicates that the instruction has finished unloading the CPU function library.
Indicates that the instruction is still unloading the CPU function library.
Indicates that an error occurred during the unloading of the CPU function library. STATUS gives you more information about the possible cause.
Provides information about possible sources of error, if an error occurs during the unloading of the CPU function library.
Input parameters
An edge transition (0 to 1) at the "REQ" input parameter starts the function.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
59
Developing a CPU function library for the Windows environment 4.4 Executing a function
Output parameter STATUS
The following table shows the information that is returned after unloading.
DONE 0 0 0 1 0
BUSY 0 1 1 0 0
ERROR 0 0 0 0 1
STATUS 0x7000 =28672 0x7001 =28673 0x7002 =28674 0x0000 =0 0x80A4 =-32604
0x80C2 =-32574
0x80C3 =-32573
0x8090 =-32624 0x8096 =-32618 0x809B =-32613
0xF000 0xFFFF =-4096 -1
Meaning No active unloading
Unloading in progress, the first call
Unloading in progress, ongoing call
Unloading was carried out successfully
CPU function library could not be unloaded for the following reasons: · Windows is not available Start the ODK service manually or restart Windows. CPU function library could not be unloaded. There are currently not enough resources available from Windows. Reload the CPU function library after a few seconds. CPU function library could not be unloaded. The CPU currently does not have enough resources. Reload the CPU function library after a few seconds. An exception occurred during the unloading of the CPU function library. The CPU function library has been unloaded nevertheless. CPU function library could not be unloaded because the CPU function library was not loaded or unloading is not yet finished. CPU 1500 V2.0 and later: The CPU function library could be unloaded and returns an invalid value (the values 0x0000 and 0xF000 - 0xFFFF are allowed) CPU 1500 V2.0 and later: CPU function library could be unloaded. An error occurred in the CPU function library during the execution of the "OnUnload()" function.
Open Development Kit 1500S V2.5
60
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.5 Remote debugging
4.5
Remote debugging
If you use Microsoft Visual Studio as a development environment, you can use the debugger for debugging.
You can use the remote debugger to debug a CPU function library on a target system without Visual Studio. It should be noted that the generated CPU function libraries (DLLs) are loaded into one of the following processes:
ODK_Host_x86.exe process (32-bit)
ODK_Host_x64.exe process (64-bit)
The required remote debugger is dependent on the Visual Studio version used on the host system and on the system type (32-bit/64-bit) of the target system.
Installed Visual Studio version Microsoft Visual Studio 2013
Microsoft Visual Studio 2015 Microsoft Visual Studio 2017
Link to the Download Center for the remote debugger
Microsoft Visual Studio 2013 Remote Debugger (https://msdn.microsoft.com/enus/library/bt727f1t(v=vs.120).aspx)
Microsoft Visual Studio 2015 Remote Debugger (https://msdn.microsoft.com/en-us/library/y7f5zaaa.aspx)
Microsoft Visual Studio 2017 Remote Debugger (https://www.visualstudio.com/downloads/)
After downloading, you can install the remote debugger on the target system.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
61
Developing a CPU function library for the Windows environment 4.5 Remote debugging
4.5.1
Performing remote debugging
Procedure
1. Start the Visual Studio remote debugger on the target system using "Start > All Programs > Visual Studio 20xx > Remote Debugger".
2. Configure the authentication. Select the "No authentication" option and select the "Allow any user to debug" check box. Observe the security information.
3. With a C++ CPU function library, copy the Visual Studio Debug DLLs from the folder "<installation path VS>\VC\redist\Debug_NonRedist\<ApplicationType>\Microsoft.<VS version>.DebugCRT" in the target folder. With a managed (C# / VB) CPU function library you can skip step 3. Destination folder with 32-bit Windows and a 32-bit application: <windows install path>\System32 Destination folder with 64-bit Windows and a 64-bit application: <windows install path>\System32 Destination folder with 64-bit Windows and a 32-bit application: <windows install path>\SysWOW64
Note If you use Visual Studio 2015 or 2017, you also need the "ucrtbased.dll". If this DLL is not present in the target system, copy it from the host in the folder: With 32-bit Windows under Program Files\... With 64-bit Windows under Program Files (x86)\... ...\Microsoft SDKs\Windows Kits\10\ExtensionSDKs\Microsoft.UniversalCRT.Debug\<Highest available version>\ Redist\Debug\<Application type (32/64-bit)>
4. Load the CPU function library on the target system in the folder "C:\ProgramData\Siemens\Automation\ODK1500S".
Note If the CPU function library is loaded, unload (Page 58) it before copying.
Open Development Kit 1500S V2.5
62
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the Windows environment 4.5 Remote debugging
5. Load (Page 51) the CPU function library on the target system. 6. Set the breakpoints in the source code and start the debugger via "Debug > Attach to
Process...". Select the following settings in the "Attach to Process" dialog: Transport: Remote Qualifier: IP address of the target system and port of the remote debugger. Attach to:
Use the default value "Automatic: Managed (...) code" for managed CPU function libraries. Only for a C++ CPU function library: Click "Select...", and select the code type "Native" in the "Select Code Type" dialog.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
63
Developing a CPU function library for the Windows environment 4.5 Remote debugging
Debugging OnLoad/OnRun
To attach the debugger to the OnLoad() or OnRun() function, incorporate a wait loop at the start of OnLoad().
Example of a wait loop: EXPORT_API ODK_RESULT OnLoad (void) { #if defined _DEBUG // available in debug configuration, only
while (!IsDebuggerPresent()) // wait for debugger
{ Sleep(100);
} #endif
// your code for OnLoad() ...
Result
The debugger stops the execution of the code after the activated breakpoint.
Open Development Kit 1500S V2.5
64
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment
5
5.1
5.1.1
Creating a CPU function library
Requirements
ODK is installed. The Eclipse development environment is installed. You need administrator rights to create and edit an Eclipse project (CPU function library
for the realtime environment).
Note If you have to move the workspace to a different storage location, make sure you copy the entire workspace.
5.1.2
Creating a project
To help you develop a CPU function library, an Eclipse Project template is included in the installation of ODK 1500S.
Procedure
To create a CPU project in Eclipse using an ODK template, follow these steps: 1. Start Eclipse as a development environment. 2. In the "File > New" menu, select the command "Project..."
The "New Project" dialog opens.
Figure 5-1 Creating a new project with Eclipse
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
65
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
3. Select the project-Template "C++ Project for CPU function library (CPU Runtime)" .
Figure 5-2 Selecting a template
4. Enter a project name. 5. Click "OK" to confirm.
Open Development Kit 1500S V2.5
66
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
Result
The CPU function library for the realtime environment is created using the project template and sets the following project settings: Project settings for generating the SO file Automates the generation of the SO and SCL file The project template sets up the following Project Explorer by default:
Folder / file <project path> def
STEP7 scr_cg_priv src src_odk_helpers
release_so
launches
Description
<project>.odk <project>.scl.additional
<project>.scl ODK_Types.h ODK_Functions.h ODK_Execution.cpp
ODK interface description S7 blocks that are appended to the <project>.scl file. Although the file is not part of the project template, the code generator processes the file. Files from this folder may not be edited! S7 blocks Files from this folder may not be edited! Definition of the ODK base types Function prototypes Implementation of the "Execute" method
<project>.cpp
Function code: This file has always the suffix CPP, regardless of whether you are creating a C or C++ project.
Files from this folder may not be edited!
ODK_CpuReadData.h
Definition of the helper function for reading classic DBs.
ODK_CpuReadData.cpp Implementation of the helper function for reading classic DBs.
Definition of the helper function for reading/writing classic DBs. ODK_CpuReadWriteData.h
Implementation of the helper function for reading/writing classic ODK_CpuReadWriteData.cpp DBs.
ODK_StringHelper.h
Definition of the helper function for access to S7String/S7WString.
ODK_StringHelper.cpp
Implementation of the helper function for access to S7String/S7WString.
<project>.so <project>.debuginfo.so <project>.symbols
ODK Application Binary (release version) that must be transferred to the target system.
ODK Application Binary (debug version) that is required for the post mortem analysis.
Symbol information that is required for the post mortem analysis.
<project>.gdb.launch
Start for the post mortem analysis.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
67
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
Note Invalid characters in the project name All invalid characters in the project name are automatically replaced by an underscore. These characters are allowed {A...Z, a...z, 1...9, -, _}. "My + first#project" becomes, for example, "My___first_project".
5.1.3
Generating a CPU function library
The generation of the project data is divided into two automated steps.
Pre-Build: Generation of the files created by default based on the changed <Project>.odk file
Build: Generation of the SO file
Procedure
To generate the project data, follow these steps: 1. Save all edited files. 2. In the "Build" menu, select the command "Build Project".
Note The project data is only generated if the files have been changed.
Result
The generation of the project data is started. The automatically generated files are stored in the file system.
SO file: Project directory\<Project>\<BuildConfiguration>\<Project>.so
SCL file: Project directory\<Project>\STEP7\<Project>.scl
Open Development Kit 1500S V2.5
68
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
5.1.4
Defining the runtime properties of a CPU function library
The next step is to define the interface description of the CPU function library in the <project>.odk file. The file contains the following elements: Comments Parameters Definitions of functions and structures
Procedure
To define the interface description in the <project>.odk file, follow these steps: 1. Open the <project>.odk file. 2. Change the elements depending on your requirements.
Description of the elements
Comments You can use comments for explanation purposes.
Parameters The definition of the parameters must be within a line of code. <parameter name>=<value> // optional comment The interfaces file supports the following parameters:
Parameter Context Trace
HeapSize
HeapMaxBlockSize SyncCallParallelCount
Value realtime
on
off
[4...<Availabl e CPU memory (Page 124)>] k [8...<HeapSi ze>] [1...9] Default=3
Description Specifies that the CPU function library is loaded in the context of the realtime environment (Page 70). Specifies the trace function in the CPU function library. In this case, the CPU function library requires 32 KB if memory as an additional trace buffer. A "GetTrace" function block is created by default for use in a STEP 7. A "GetTrace" function block is created. The trace buffer contains only one trace entry with the contents: trace is off. Specifies a memory in KB that can be used as heap for these realtime applications.
Specifies the maximum memory size in bytes that can be allocated at one time. If a optional parameter and defines the maximum number of parallel calls in this CPU function library. The size of the memory which is reserved for calls in this CPU function library: SyncCallParallelCount * (SyncCallStackSize + SyncCallDataSize)
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
69
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
Parameter SyncCallStackSize SyncCallDataSize
STEP7Prefix
Value [1...1024]k Default=32k [1...1024]k
Default=auto
<String>
Description
Is a optional parameter and defines the size of the thread stack for a call in this CPU function library. Each new call receives its own stack memory.
Is a optional parameter and defines the size of the data area for a call in this CPU function library. The data area contains IN, INOUT and OUT parameters. Each new call receives its own stack memory.
The required data size is automatically calculated by the code generator.
With an ODK_CLASSIC_DB, 65 KB is applied.
Describes the string that precedes your functions and is shown after importing the SCL file in STEP 7. The following characters are allowed: {A...Z, a...z, 1...9, -, _}
The project name is entered without spaces by default.
5.1.5
Environment for loading or running the CPU function library
When the SCL file is imported into STEP 7 as an external source, the ODK instructions are created in the selected directory in STEP 7. You can load up to 32 CPU function libraries.
You can load and run your CPU function library in the context of the realtime environment:
Realtime environment
Add the following line of code in your <project>.odk file to use the CPU function library in the context of the realtime environment: Context=realtime
In this context, the CPU function library is not running in a host process at the Windows end, but instead in the realtime environment. Because the CPU function library is loaded synchronously, it should be loaded in a startup OB (e.g. OB 100).
The number of loadable CPU function libraries (Page 124) is limited in the context of the realtime environment.
If the CPU function library has to be loaded in a cyclic OB (for example, OB 1), note the following loading times:
CPU CPU 1505SP CPU 1507S (with SSD)
Small SO file Loading time 0.5 MB 20 ms 0.5 MB 20 ms
Large SO file Loading time 3 MB 70 ms 5 MB 100 ms
Open Development Kit 1500S V2.5
70
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
Determining the size of the CPU function library in the CPU memory
To determine the required size of the CPU function library in the CPU memory, follow these steps:
1. Open a command line dialog.
2. Enter the following path from the ODK installation folder (the appended option "-l" is a lower-case "L"): eclipse\ build_tools\x86_64_gcc_pc_elf_4.8.1-1\bin\x86_64-pc-elfreadelf.exe "StorageLocation\File.so>" -l
You can see the size of your CPU function library under the heading "Program Headers" in the "MemSiz" column.
Additional administrative memory is required for each CPU function library in addition to the amount specified here. The administrative memory can be calculated as follows:
Administrative memory = SyncCallParallelCount * (SyncCallStackSize + SyncCallDataSize)
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
71
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
5.1.6
Defining functions and structures of a CPU function library
5.1.6.1
Defining functions a CPU function library
Functions
Functions are defined by the following general lines of code: ODK_RESULT <FunctionName> ([<InOut identifier>] <data type> <tag name>, etc.);
The <project>.odk file contains an example function description by default. You can change this description and/or add more function descriptions. ODK_RESULT MyFunc1([IN] INT param1, [OUT] INT param2);
Syntax rules for functions
The following syntax rules apply to functions within the <project>.odk file: Note that the function names are case-sensitive. You can divide function definitions into multiple lines. End a function definition with a semicolon. TAB and SPACE are allowed. Do not define a tag name in a function twice. Do not use any keywords for the programming language that is used (for example
"EN / ENO" as parameter name) Use ODK_RESULT only for the return values of the function. The tag name must start with a letter or an underscore. Illegal function names are displayed during generation in the development environment. The following names are not allowed in combination of <STEP 7Prefix> and <function
name>: ODK_Load, ODK_Unld, ODK_ExcA, ODK_ExcS
<FunctionName> Function names are valid with the syntax and character restrictions of the used programming language.
Open Development Kit 1500S V2.5
72
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
<InOut-Identifier>
There are three defined InOut-Identifiers. Use these in the following order: [IN], [OUT], [INOUT]
[IN]: Specifies an input tag. The tag is copied to the function when it is called. This is constant and cannot be changed.
[OUT]: Specifies an output tag. The tag is copied back after the function has been completed.
[INOUT]: Specifies an input and output tag. The tag is copied to the function when it is called. This is not constant and can be changed. The tag is copied back after the function has been completed.
<DataType>
The data type defines the type of a tag. The following tables define the possible data types and their method of representation in C++ or STEP 7:
Elementary data types:
ODK data type
ODK_DOUBLE ODK_FLOAT ODK_INT64 ODK_INT32 ODK_INT16 ODK_INT8 ODK_UINT64
SIMATIC data type LREAL REAL LINT DINT INT SINT ULINT
ODK_UINT32 ODK_UINT16 ODK_UINT8 ODK_LWORD
UDINT UINT USINT LWORD
ODK_DWORD ODK_WORD ODK_BYTE ODK_BOOL ODK_LTIME ODK_TIME ODK_LDT
DWORD WORD BYTE BOOL LTIME TIME LDT
ODK_LTOD
LTOD
ODK_TOD ODK_CHAR
TOD CHAR
C++ data type Description
double float long long long short char unsigned long long unsigned long unsigned short unsigned char unsigned long long unsigned long unsigned short unsigned char unsigned char long long long unsigned long long unsigned long long unsigned long char
64-bit floating point, IEEE 754 32-bit floating point, IEEE 754 64-bit signed integer 32-bit signed integer 16-bit signed integer 8-bit signed integer 64-bit unsigned integer
32-bit unsigned integer 16-bit unsigned integer 8-bit unsigned integer 64-bit bit string
32-bit bit string 16-bit bit string 8-bit bit string 1-bit bit string, remaining bits (1..7) are empty 64-bit during in nanoseconds 32-bit during in milliseconds 64-bit date and time of the day in nanoseconds since 01/01/1970 00:00 64-bit time of the day in nanoseconds since midnight
32-bit time of the day in milliseconds since midnight 8-bit character
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
73
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
Complex data types:
ODK data type ODK_DTL
SIMATIC data type
DTL
ODK_S7STRING STRING
ODK_CLASSIC_ VARIANT DB
[ ]
ARRAY
C++ data type Description
ODK_DTL (struct) unsigned char
ODK_CLASSIC_ DB (struct) [ ]
Structure/class for date and time
Character string: · For SIMATIC and C++:
8-bit character with length max. and act. (2xUSINT) · For other languages:
native Classic DB (global or based on UDT)
Range of same data types. You can use all data types as an array except ODK_CLASSIC_DB.
User-defined data types:
User-defined data types (UDT) include structured data, especially the names and data types of this component and their order.
A user-defined data type can be defined in the user interface description with the keyword "ODK_STRUCT".
Example
ODK_STRUCT <StructName>
{
<DataType> <TagName>;
...
};
The following syntax rules apply to the structure: You can divide the structure into multiple lines. The structure definition must end with a semicolon. Any number of tabs and spaces between the elements is permitted. It is not permitted to use any keywords for the generated language used (for example
"en / eno" as tag name). You can create additional structures within a structure.
<StructName>
Structure names are valid with the syntax and character restrictions of the programming language and as defined for tag definitions in STEP 7.
In STEP 7, the structure name is extended with the STEP 7 prefix.
Open Development Kit 1500S V2.5
74
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
<TagName>
Tag names are subject to the syntax and character restrictions of the programming language.
Example
The following code example explains the definitions of functions and structures. Sort the parameters by: IN, OUT, INOUT. //INTERFACE ... ODK_STRUCT MyStruct
{ ODK_DWORD myDword; ODK_S7STRING myString;
}; ODK_RESULT MyFct([IN] MyStruct myInStruct
,[OUT] MyStruct myOutStruct);
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
75
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
5.1.6.2
Use of ODK_CLASSIC_DB as parameter
The ODK_CLASSIC_DB data type may only be used with the InOut-Identifier [IN] and [INOUT]. If a parameter of data type ODK_CLASSIC_DB with InOut-Identifier [IN] or [INOUT] is used, no other parameters, regardless of the data type, can be used with the same InOutIdentifier.
Example // INTERFACE ... // OK: ODK_RESULT MyFunc1([IN] ODK_CLASSIC_DB myDB); ODK_RESULT MyFunc2([IN] ODK_CLASSIC_DB myDB1, [INOUT] ODK_CLASSIC_DB myDB2); // // NOT OK (Code Generator will throw an error): // ODK_CLASSIC_DB not permitted for [OUT] ODK_RESULT MyFunc3([OUT] ODK_CLASSIC_DB myDB); // if ODK_CLASSIC_DB is used for [IN], no other [IN] parameter may be // defined in this function ODK_RESULT MyFunc4([IN] ODK_CLASSIC_DB myDB, [IN] ODK_INT32 myint);
Application example for C++ #include "ODK_CpuReadData.h" ... ODK_RESULT MyFunc1 (const ODK_CLASSIC_DB& myDB) {
CODK_CpuReadData myReader(&myDB); ODK_INT32 myInt1, myInt2;
myReader.ReadS7DINT(0, myInt1); myReader.ReadS7DINT(4, myInt2);
return myInt1 + myInt2; }
In order to access the data type ODK_CLASSIC_DB within a user function, the helper functions (Page 135) of the following classes are available:
Class "CODK_CpuReadData"
Class "CODK_CpuReadWriteData"
Open Development Kit 1500S V2.5
76
Programming and Operating Manual, 12/2017, A5E35253941-AD
5.1.6.3
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
Handling strings
You can define a maximum length for strings (String or WString). Define the maximum number of characters in square brackets directly after the data type:
ODK_S7STRING[30] or
ODK_S7WSTRING[1000]
Without limitation, a string has a default length of 254 characters.
In order to access the data types ODK_S7STRING or ODK_S7WSTRING within a user function, the string helper functions (Page 135) are available:
Example //INTERFACE ... ODK_RESULT MyFct(
[IN] ODK_S7STRING , [OUT] ODK_S7STRING[10] , [INOUT] ODK_S7STRING[20]
myStrHas254Chars myStrHas10Chars myStrArrayHas20Chars5Times[5]);
If you use [INOUT], you can set the string with a length that differs from the [INOUT of the function block in STEP 7.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
77
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
5.1.6.4
Definition of the <Project>.odk file
The function prototypes and function blocks are generated based on the selected parameters in the <project>.odk file. Define the <project>.odk file for this.
By default, the <project>.odk file contains the following:
Description
The possible data types that are used for the interface are described in comment lines. This simplifies the definition of the correct tag type for your task.
Context=realtime
The CPU function library is loaded in the context of the realtime environment.
Trace=on
Specifies the trace function in the CPU function library. A "GetTrace" function block is created by default for use in a STEP 7.
When you define the "ODK_TRACE" instruction (Page 101), it is also compiled and executed. When you define the parameter Trace=on in the <project>.odk file, the instruction is automatically defined with the following code:
#define ODK_TRACE(msg, ...);
Example: ODK_TRACE("number=%d", 13);
Calling the instruction creates an entry in the trace buffer.
HeapSize
Specifies a memory in KB that can be used as heap for these realtime applications.
HeapMaxBlockSize
Specifies the maximum memory size in bytes that can be allocated at one time.
STEP7Prefix="<project>"
Sets a string for the SCL generation in front of the functions of the CPU function library. This is visible in STEP 7. You can change the parameter. The string length of the prefix including function name must not exceed 125 characters (e.g. ODK_App_SampleFunction).
"SampleFunction" function definition
You can change this default function as you wish in the <project>.odk file and add more functions. The string length may not exceed a length of 125 characters. The associated function is located in the CPP file.
Open Development Kit 1500S V2.5
78
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
Example //INTERFACE Context=realtime Trace=on HeapSize=4k HeapMaxBlockSize=1024 STEP7Prefix=ODK_App
/*
* Elementary data types:
*
* ODK_DOUBLE
LREAL 64-bit floating point, IEEE 754
* ODK_FLOAT
REAL
32-bit floating point, IEEE 754
* ODK_INT64
LINT
64-bit signed integer
* ODK_INT32
DINT
32-bit signed integer
* ODK_INT16
INT
16-bit signed integer
* ODK_INT8
SINT
8-bit signed integer
* ODK_UINT64
ULINT 64-bit unsigned integer
* ODK_UINT32
UDINT 32-bit unsigned integer
* ODK_UINT16
UINT
16-bit unsigned integer
* ODK_UINT8
USINT 8-bit unsigned integer
* ODK_LWORD
LWORD 64-bit bit string
* ODK_DWORD
DWORD 32-bit bit string
* ODK_WORD
WORD
16-bit bit string
* ODK_BYTE
BYTE
8-bit bit string
* ODK_BOOL
BOOL
1-bit bit string
* ODK_LTIME
LTIME 64-bit duration in nanoseconds
* ODK_TIME
TIME
32-bit duration in milliseconds
* ODK_LDT
LDT
64 bit date and time of day
*
in nanoseconds
* ODK_LTOD
LTOD
64 bit time of day in nanoseconds
since midnight
* ODK_TOD
TOD
32 bit time of day in milliseconds
since midnight
* ODK_DTL
DTL
structure for date and time
* ODK_CHAR
CHAR
8 bit character
* ODK_S7STRING STRING character string with 8-bit characters
* ODK_CLASSIC_DB VARIANT classic DB (global or based on UDT)
* []
ARRAY field of this datatype
* User Defined Datatype:
* ODK_STRUCT
UDT
user defined structure
* Return data type:
* ODK_RESULT
0x0000 - 0x6FFF function succeeded
*
(ODK_SUCCESS = 0x0000)
*
0xF000 - 0xFFFF function failed
*
(ODK_USER_ERROR_BASE = 0xF000)
*/
ODK_RESULT SampleFunction([IN] ODK_INT32 , [OUT] ODK_BOOL , [INOUT] ODK_DOUBLE
myInt myBool myReal);
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
79
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
5.1.6.5
Modifying the <Project>.odk file
The following example shows you how you can change the <Project>.odk file to suit your needs. //INTERFACE Context=realtime Trace=on HeapSize=4k HeapMaxBlockSize=1024 STEP7Prefix=ODK_SampleApp_
ODK_RESULT GetString ([OUT] ODK_S7STRING myString);
ODK_RESULT Calculate ([IN] [IN] [OUT] [OUT] [INOUT] [INOUT]
ODK_INT64 ODK_DOUBLE ODK_FLOAT ODK_INT32 ODK_BYTE ODK_BYTE
In1, In2, Out1, Out2, InOut1[64], InOut2[64]);
5.1.6.6
Comments
Comments are started with a double slash "//" and end automatically at the end of the line.
Alternatively, you can limit comments by /* <comment> */, which enables new lines in a comment. Characters after the end of the comment identifier "*/" are further processed by the code generator.
Comments for Visual Basic are marked with a apostrophe.
Comments for functions and structures
You place comments on functions and structures directly in front of the functions/structures.
These comments are transferred to the ODK_Functions.h and <project>.scl files.
In the <project>.scl file, the comments are copied to the block properties and duplicated in the code area of the function.
Observe the following rules:
Comments for functions and structures must be located directly in front of the functions/structures (without blank line).
The end of the comment is located in front of the ODK_RESULT or ODK_STRUCT keyword.
You can use both identifiers "//" and "/* */" but not in combination within a comment.
Open Development Kit 1500S V2.5
80
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
Example // this comment did not appear in MyStruct, because of the empty line.
// comment MyStruct
// ...
ODK_STRUCT MyStruct
{
ODK_DWORD
myDword;
ODK_S7STRING myString;
};
/* comment MyFct ... */ ODK_RESULT MyFct([IN] MyStruct myInStruct
,[OUT] MyStruct myOutStruct);
Comments for tags in functions and structures
Comments for function and structure tags are placed directly in front of or behind the tag. These comments are transferred to the ODK_Functions.h/ and <project>.scl files. The following rules apply to comments in front of tags: Comments must be located directly in front of the tag (without blank line) The end of the comment is the <InOut-Identifier> of the tag The following rules apply to comments after tags: Comments must be located after the tag name (without blank line) The following general rules apply to comments for tags: You can use both identifiers "//" and "/* */" but not in combination within a comment. In the header file, the same comment identifier is used ("//" or "/* */").
Example ODK_STRUCT MyStruct {
// comment myDword BEFORE definition ODK_DWORD myDword;
ODK_S7STRING myString; /* comment myString AFTER definition */ };
ODK_RESULT MyFct([IN] MyStruct myInStruct // comment // myInStruct ... // ... "second line"
, [OUT] MyStruct myOutStruct); /* comment myOutStruct ... ...
*/
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
81
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
5.1.7
Implementing functions
5.1.7.1
General notes
This section provides an overview of the basic topics relating to the implementation of functions in a realtime environment.
The function call is limited in time
Since the function is called synchronously, the function call must be adjusted to the timing of the cycle.
Trace functionality
ODK provides a trace function (Page 101) to check variables or the execution of functions in the realtime environment.
The execution of synchronous functions can be interrupted by higher priority OBs (Page 96) running in the same CPU.
Application size
The number of loadable CPU function libraries (Page 70) is limited in the context of the realtime environment.
C++ Runtime library
Functions that need operating system functionality (threading) cannot be used
5.1.7.2
Callback functions
The project for the realtime CPU function library contains a CPP file (execute file: <project>.cpp) to define your functions. This CPP file contains functions filled by default. You do not necessarily have to fill these with additional user code to be usable. However, neither may the functions be deleted under any circumstances.
The empty function has the following code (using the "OnLoad()" function as an example): ODK_RESULT OnLoad (void) {
// place your code here return ODK_SUCCESS; }
You can define the following functions in the CPP file:
OnLoad(): Called after loading the CPU function library
OnUnload(): Called before unloading the CPU function library
OnRun(): Called when the CPU changes to RUN mode after the OnLoad() function
OnStop(): Called when the CPU changes to the STOP mode and before the function OnUnload()
The OnStop() function is terminated if the execution takes longer than 50 ms when CPU changes to STOP mode.
Open Development Kit 1500S V2.5
82
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
"OnLoad()" and "OnUnload()" function
The functions have a return value of type "ODK_RESULT" and typically provide information about the status of the "ODK_SUCCESS" value.
The following return values are possible:
Return value for "ODK_RESULT" ODK_SUCCESS = 0x0000
0x0001 0xEFFF 0xF000 0xFFFF ODK_USER_ERROR_BASE = 0xF000
Description Return value following a successful execution of the "OnLoad()" or "OnUnload()" function
Invalid values (system-internal)
You can define your own return values.
The loading stops and the CPU function library unloads for the "OnLoad()" function.
The CPU function library within the specified value range is still unloaded for the "OnUnload()" function.
"OnRun()" and "OnStop()" function
The functions have a return value of type "ODK_RESULT" and typically provide information about the status of the "ODK_SUCCESS" value.
The following return values are possible:
Return value for "ODK_RESULT" ODK_SUCCESS = 0x0000
0x0001 0xFFFF
Description
Default return value for a successful execution of the function "OnRun()" or "OnStop()"
Direct feedback to the user program is not possible because these functions are not called directly by the user at RUN/STOP mode transitions.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
83
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
5.1.7.3
Implementing custom functions
Once you have defined the ODK interface in the <project>.odk file, you must edit the functions of the CPU function library in the Project Source file.
Procedure
To edit the function of a CPU function library, follow these steps: 1. To generate the function prototypes, execute the build. 2. Open the project source file, or create a custom source file if necessary. 3. Transfer the function prototypes from <ODK_Functions.h>/<OdkFunctions.cs/vb> to the source file.
Note Use the function prototype macro to transfer the step 3 in the future when there is a change to the function parameters.
4. Edit the code of your CPU function library in the execute file.
CPU function library
The execute file contains a schematically represented function description by default. You can change this description with corresponding changes in the <project>.odk file and/or add more function descriptions.
Execute file based on C++ example #include "ODK_Functions.h"
EXPORT_API ODK_RESULT OnLoad (void) {
return ODK_SUCCESS; } EXPORT_API ODK_RESULT OnUnload (void) {
return ODK_SUCCESS; } EXPORT_API ODK_RESULT OnRun (void) {
return ODK_SUCCESS; } EXPORT_API ODK_RESULT OnStop (void) {
return ODK_SUCCESS; } ODK_RESULT SampleFunction( const ODK_INT32& myInt,
ODK_BOOL& myBool, ODK_DOUBLE& myReal) { return ODK_SUCCESS; }
Open Development Kit 1500S V2.5
84
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
5.1.7.4
Dynamic memory management
Introduction
ODK objects work with a dynamic memory management (heap). The following instructions and functionalities are supported by using the dynamic memory management:
The new/delete and malloc/free instructions.
STL (Standard Template Library)
Software exceptions
The default setting for the heap size is 4 KB. The heap size can be from 4 KB up to the available memory of the CPU (Page 124). You change the heap size in the <project>.odk file using the following parameters:
HeapSize
HeapMaxBlockSize
Special features
Because the used memory area (heap) has been optimized with regard to realtime and cyclic processing, it has some special features:
Blocks can only be allocated up to a specified size during the compiling time of the ODK object.
Note
You can specify the maximum block size with the HeapMaxBlockSize parameter in <project>.odk. However, this has an effect on the global memory use for CPU function libraries, because the management information of the following memories is required in addition to the actual heap:
size_heap_admin_data = HeapMaxBlockSize * 3
Example: Therefore, with a maximum block size of 100 KB, this project needs 300 KB of global data in addition to the heap. This data is used for heap administration.
You can find additional information under Environment for loading or running the CPU function library (Page 70).
Blocks can initially be requested in any size. When the blocks are released again, they are entered in free lists. There is a free list in each case for all possible block sizes (up to HeapMaxBlockSize) so that later allocations can be performed in constant time.
There is, however, no merging of neighboring released blocks to form a larger block.
This means continuously recurring requests can be met faster than constantly different requests.
Example: The user allocates only blocks with 8 bytes until the heap is full. The user then releases everything again so that the heap is completely empty. An allocation of a block with 16 bytes is then no longer possible, however, because all free blocks are entered in the free list for 8 bytes and merging is not possible.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
85
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
Example
#include <assert.h> #include <exception> #include <vector> ...
// check parameter assert (NULL != myPointer);
// allocate heap memory with malloc() char* p1 = (char*) malloc(32); if (NULL == p1) {
ODK_TRACE("ERROR: malloc() failed"); } else {
ODK_TRACE("malloc() done"); // free allocated memory free(p1); ODK_TRACE("free() done"); }
// allocate heap memory with new() char* p2 = NULL; try {
p2 = new char [64]; ODK_TRACE("new done"); // delete allocated memory delete[] p2; ODK_TRACE("delete done"); } catch (std::exception& e) { ODK_TRACE("exception: %s", e.what()); } std::vector<int> vec; // empty vector of ints
Open Development Kit 1500S V2.5
86
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
5.1.7.5
Debug (Test)
You have the possibility to write a custom test to debug the CPU function library for the realtime environment in a Windows environment. This will ensure the quality of the code.
Requirements
You need an Internet connection for this procedure. You need administrator rights for this procedure.
Procedure before the first debug process
To perform a test on a CPU function library for the realtime environment in a Windows environment, perform the following once:
1. Close Eclipse.
2. Open the "bin" folder of your ODK installation.
3. Run the "MinGW32_Install.cmd" file with the "Run as administrator" command from the shortcut menu.
A text editing dialog opens. The Windows prompt installs all necessary components.
4. Click on any button. MinGW32 is installed.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
87
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library Basic procedure
To perform the test, proceed as follows: 1. Open your project in Eclipse. 2. Change the debug environment to "Windows". To do this, select the "debug (win32)"
option in menu "Project > Build Configurations > Set Active".
3. Create the project as debug version. To do so, select the "Build Project" command in the "Project " menu.
4. If you debug the project for the first time, you must now set the debug configuration. Otherwise, continue with step 8.
5. To do this, select the "Debug Configurations" command in the "Run" menu. The "Debug Configurations" dialog opens.
6. To create a new application, select the entry "C/C++ Application" and select the "New" command in the context menu.
7. Configure your test environment.
Open Development Kit 1500S V2.5
88
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.1 Creating a CPU function library
8. Click the "Search Project" button to select your application.
9. Start the debug process by clicking the "Debug" button.
10.If you want to debug your project again, select the "Local C/C++ Application" command in the menu "Run > Debug as".
Result
Eclipse suggests a change in the debug perspective.
The test code is executed. The test code for the test is compiled only in the debug environment and is implemented in the "main()" function. This function is located in the <project>.cpp file.
The "main()" function offers you the following possibilities:
Test data are provided and results can be reviewed.
You can monitor tags of the function.
You can use breakpoints to check the execution.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
89
Developing a CPU function library for the realtime environment 5.2 Transferring a CPU function library to the target system
Test code
The following sample code shows the default contents of the "main()" function. /*
* main() is defined for windows debugging, only. * Therefore all automatically invoked functions * (OnLoad, OnRun, OnStop, OnUnload) have to be called manually. */ #ifdef _DEBUG int main (int argc, char* argv[]) {
ODK_RESULT ret = ODK_SUCCESS; ret = OnLoad(); // error handling ret = OnRun(); // error handling
// place your test code here
ret = OnStop(); // error handling ret = OnUnload(); // error handling return ret; } #endif // _DEBUG
5.2
Transferring a CPU function library to the target system
Procedure
Manually transfer the SO file to the target system. Use the file explorer of the web server of the CPU to transfer the CPU function library. To transfer an SO file, follow these steps: 1. Enable the Web server in your STEP 7 project. 2. Open the web server of the CPU in the browser. 3. Open the "Filebrowser" menu.
Open Development Kit 1500S V2.5
90
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.2 Transferring a CPU function library to the target system
4. Open the following directory as the storage location for the CPU function libraries: \ODK1500S\
Figure 5-3 Transferring the SO file via the file explorer from the web server of the CPU
5. Click the "Browse" button. 6. Navigate in the file system to the SO file or copy the location from the properties of the
SO file in Eclipse. 7. Confirm the transfer of the SO file to the web server of the CPU by pressing the "Load
File" button.
Result
The SO file is transferred to the load memory of the CPU.
After a successful transfer, the SO file is loaded by calling the "<STEP7Prefix>_Load" instruction.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
91
Developing a CPU function library for the realtime environment 5.3 Importing and generating an SCL file in STEP 7
5.3
Importing and generating an SCL file in STEP 7
When generating the project data, the following files are created:
SCL file for importing into STEP 7
All files depending on the configuration, e.g. SO file
If STEP 7 is installed on another PC as the development environment, you must transfer the generated SCL file to the PC where the STEP 7 is installed.
Requirements
The project data were generated.
Procedure
To import and compile the SCL file, follow these steps: 1. Start STEP 7. 2. Open your project. 3. Select the project view. 4. Select the CPU in the project tree. 5. Select the "External Sources" subfolder.
The "Open" dialog box opens. 6. Navigate in the file system to the SCL file that was created during generation of the
project data or copy the storage location from the properties of the SCL file to Eclipse. 7. Confirm your selection with "Open".
The SCL file is imported. After completion of the import process, the SCL file is displayed in the "External Sources" folder. 8. Compile the SCL file before you use the blocks in your project. 9. To do this, select the SCL file in "External sources" subfolder. 10.Select the "Generate blocks from source" command in the shortcut menu.
Result
STEP 7 creates the S7 blocks based on the selected SCL file.
The "GetTrace" function block, which makes it possible to read the trace buffer, is created by default.
The created blocks are now automatically displayed in the "Program blocks" folder below the selected CPU in the project tree. You can load the function blocks during the next download to the target device.
Open Development Kit 1500S V2.5
92
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.4 Executing a function
5.4
Executing a function
5.4.1
Loading functions
Introduction
Regardless of the context in which the CPU function library is running, the loading procedure consists of the following steps:
Call the "<STEP7Prefix>_Load" instruction in the STEP 7 user program.
The loading process takes place synchronously
To avoid influencing the cycle time, load the CPU function library in startup OB (e.g. OB 100).
If the CPU function library has to be loaded in a cyclic OB (for example, OB 1), note the following loading times:
CPU CPU 1505SP CPU 1507S (with SSD)
Small SO file Loading time 0.5 MB 20 ms 0.5 MB 20 ms
Large SO file Loading time 3 MB 70 ms 5 MB 100 ms
As soon as the "<STEP7Prefix>_Load" instruction returns after the first call, the CPU function library is loaded.
Note
Loading the same CPU function libraries with a modified <project>.odk file
When you load a CPU function library and subsequently change the <project>.odk file, we recommend that you unload your CPU function library first before you load the newly generated CPU function library. If the "<STEP7Prefix>_Unload" instruction is not executed, both CPU function libraries are in the memory. This can lead to insufficient memory being available for the CPU.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
93
Developing a CPU function library for the realtime environment 5.4 Executing a function
"<STEP7Prefix>_Load" instruction
A CPU function library is loaded by calling the "<STEP7Prefix>_Load" instruction in the STEP 7 user program.
REQ
<STEP7Prefix>_Load
DONE BUSY ERROR STATUS
The following table shows the parameters of the instruction "<STEP7Prefix>_Load":
Section Input Output Output Output
Output
Declaration REQ DONE BUSY ERROR
STATUS
Data type BOOL BOOL BOOL BOOL
INT
Description A rising edge activates the loading of the CPU function library.
Indicates that the instruction has finished loading the CPU function library.
Indicates that the instruction is still loading the CPU function library.
Indicates that an error occurred during the loading of the CPU function library. STATUS gives you more information about the possible cause of the error.
Provides information about possible sources of error, if an error occurs during the loading of the CPU function library.
Input parameters
An edge transition (0 to 1) at the "REQ" input parameter starts the function.
Open Development Kit 1500S V2.5
94
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.4 Executing a function
Output parameters
The following table shows the information that is returned after loading.
DONE 0 1 1 0
BUSY 0 0 0 0
ERROR 0 0 0 1
STATUS 0x7000 =28672 0x7100 =28928 0x0000 =0 0x80A4 =-32604 0x80C3 =-32573
0x8090 =-32624 0x8092 =-32622 0x8093 =-32621 0x8095 =-32619
Meaning No active loading
CPU 1500 V2.0 and later: CPU function library is already loaded. Loading was performed successfully.
CPU function library could not be loaded.
CPU function library could not be loaded. The CPU currently does not have enough resources. Unload the CPU function library before you load a new CPU function library or restart the CPU. CPU function library could not be loaded. An exception occurred during execution of the "OnLoad()" function. CPU function library could not be loaded because the library name is invalid. CPU function library could not be loaded because the CPU function library could not be found. Check the file name and path of the file. CPU function library could not be loaded due to the following reasons: · The SO file is not a CPU function library.
· The CPU does not support the utilized ODK version.
0x8096 =-32618
The CPU function library could not be loaded because the internal identification is already being used by another loaded CPU function library.
0x8097
CPU 1500 V1.8 and earlier:
=-32617 CPU function library is already loaded.
0x8098 =-32616
CPU function library could not be loaded because the CPU function library is currently being unloaded.
0x8099 =-32615
Unable to load the CPU function library because the instruction was not called in an OB with lowest priority. Use a Startup OB (e.g. OB100) or a Program cycle OB (e.g. OB1).
0x809B
CPU 1500 V2.0 and later:
=-32613
The CPU function library could not be loaded and returns an invalid value (the values 0x0000 and 0xF000 - 0xFFFF are allowed)
0xF000 CPU 1500 V2.0 and later:
0xFFFF
CPU function library could not be loaded. An error occurred during
=-4096 -1 execution of the "OnLoad()" function.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
95
Developing a CPU function library for the realtime environment 5.4 Executing a function
5.4.2
Calling functions
Introduction
Once the CPU function library is loaded, you can execute C functions via your STEP 7 user program. This call is made from the corresponding "<STEP7Prefix>SampleFunction" instruction.
Figure 5-4 Calling functions
The execution of synchronous functions can be interrupted by higher priority OBs running in the same CPU. Call another ODK function Call the same function
Therefore, when creating your CPU function library make sure that the function calls are implemented as re-entrant or avoid parallel execution. If you implement more than the number of parallel calls set in "SyncCallParallelCount", the function returns the status 0x80C3.
Open Development Kit 1500S V2.5
96
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.4 Executing a function
"<STEP7Prefix>SampleFunction" instruction
A CPU function library is called by the "<STEP7Prefix>SampleFunction" instruction.
myInt myReal
<STEP7Prefix>SampleFunction
The following table shows the parameters of the instruction "<STEP7Prefix>SampleFunction":
STATUS myBool
Section
Declaration Data type
Automatically generated parameters
Output
STATUS
INT
User-defined parameter
Input
myInt
InOut
myReal
Output
myBool
Description
This output value provides information about possible sources of error, if an error occurs during the execution of the CPU function library.
User-defined input tags User-defined input-output tags User-defined output tags
Output parameters The "<STEP7Prefix>SampleFunction" instruction only has the "STATUS" output parameter.
The following table shows the information for the output parameter returned after execution.
STATUS 0x0000 0x6FFF =0 28671 0x80A4 =-32604
0x80C3 =-32573 0x8090 =-32624
0x8091 =-32623
Meaning Function has been executed and returns a value between 0x0000 and 0x6FFF. (ODK_SUCCESS = 0x0000)
CPU function library could not be executed for the following reasons:
· A stack overflow was detected after execution of the function. To avoid sequential errors, unload the CPU function library. The developer of the CPU function library must ensure that the stack is not overwritten.
· The "<STEP7Prefix>_Unload" instruction was executed during a function execution. The execution of the function was interrupted and terminated immediately. No return value is sent to the CPU.
Wait until the "<STEP7Prefix>_Unload" instruction has ended. Then load the CPU function library again. CPU function library could not be executed. The CPU currently does not have enough resources. Pay attention to the maximum number of parallel calls (SyncCallParallelCount). CPU function library could not be executed. An exception occurred during execution. Each unhandled exception reduces the available heap size. An unhandled exception can damage the CPU function library and lead to this no longer being used for further calls. The CPU function library must be unloaded. The developer of the CPU function library must handle the exception and deliver an application-specific error value. CPU function library could not be executed. A "STOP" occurred during the function call.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
97
Developing a CPU function library for the realtime environment 5.4 Executing a function
STATUS 0x8096 =-32618 0x8098 =-32616
0x8099 =-32615 0x809A =-32614 0x809B =-32613 0xF000 0xFFFF =-4096 -1
Meaning CPU function library could not be executed because the CPU function library was not loaded or unloading is not yet finished.
CPU function library could not be executed because the CPU function library is different than the ODK instructions (FBs) in STEP 7:
· older · newer · different parameters
CPU function libraries could not be executed because the maximum amount of input data (SyncCallDataSize) was exceeded (declarations with "In" and "InOut").
CPU function libraries could not be executed because the maximum amount of data (SyncCallDataSize) was exceeded (declarations with "In", "Out" and "InOut").
The function returns an invalid value (a value between 0x0000 and 0x6FFF; 0xF000 and 0xFFFF is allowed).
CPU 1500 V2.0 and later: The function could not be executed and returns a value between 0xF000 and 0xFFFF. (ODK_USER_ERROR_BASE = 0xF000)
Note Call of function(s) influences the cycle time
When you call a function, the function parameters are copied. In particular in the case of large amounts of data or of structured data, this can lead to the cycle time being influenced.
Open Development Kit 1500S V2.5
98
Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.4 Executing a function
5.4.3
Unloading functions
Introduction
The CPU function library is unloaded by calling the "<STEP7Prefix>_Unload" instruction. Call is made from the STEP 7 user program.
In addition to this call, the CPU function library is also automatically unloaded for the following reasons.
The CPU is switched off
The CPU is reset
Regardless of the context in which the CPU function library is running, the unloading procedure consists of the following steps:
Call the "<STEP7Prefix>_Unload" instruction in the STEP 7 user program.
From now on, no new executes can be carried out for this CPU function library. Executions still running are aborted. The execution of the function is interrupted and terminated immediately. No return value is sent to the CPU.
The host calls the "OnStop()" and "OnUnload()" functions.
The unloading of the cycle time can be influenced because the "OnStop()" and "OnUnload()" functions are called synchronously.
The CPU function library is being unloaded.
"<STEP7Prefix>_Unload" instruction
A CPU function library is unloaded by calling the "<STEP7Prefix>_Unload" instruction in the STEP 7 user program.
REQ
<STEP7Prefix>_Unload
DONE BUSY ERROR STATUS
The following table shows the parameters of the instruction "<STEP7Prefix>_Unload":
Section Input Output Output Output
Output
Declaration REQ DONE BUSY ERROR
STATUS
Data type BOOL BOOL BOOL BOOL
INT
Description A rising edge activates the unloading of the CPU function library.
Indicates that the instruction has finished unloading the CPU function library.
Indicates that the instruction is still unloading the CPU function library.
Indicates that an error occurred during the unloading of the CPU function library. STATUS gives you more information about the possible cause.
Provides information about possible sources of error, if an error occurs during the unloading of the CPU function library.
Open Development Kit 1500S V2.5
Programming and Operating Manual, 12/2017, A5E35253941-AD
99
Developing a CPU function library for the realtime environment 5.4 Executing a function
Input parameters
An edge transition (0 to 1) at the "REQ" input parameter starts the function.
Output parameter STATUS
The following table shows the information that is returned after unloading.
DONE 0 0 0 1 0
BUSY 0 1 1 0 0
ERROR 0 0 0 0 1
STATUS 0x7000 =28672 0x7001 =28673 0x7002 =28674 0x0000 =0 0x80A4 =-32604
0x80C3 =-32573 0x8090 =-32624 0x8096 =-32618 0x809B =-32613
0xF000 0xFFFF =-4096 -1
Meaning No active unloading
Unloading in progress, the first call
Unloading in progress, ongoing call
Unloading was carried out successfully
CPU function library could not be unloaded. A communication error between the CPU and ODK occurred during the execution of the "OnUnload()" function. CPU function library could not be unloaded. The CPU currently does not have enough resources. An exception occurred during the unloading of the CPU function library. The CPU function library has been unloaded nevertheless. CPU function library could not be unloaded because the CPU function library was not loaded or unloading is not yet finished. CPU 1500 V2.0 and later: The CPU function library could be unloaded and returns an invalid value (the values 0x0000 and 0xF000 - 0xFFFF are allowed) CPU 1500 V2.0 and later: CPU function library could be unloaded. An error occurred in the CPU function library during the execution of the "OnUnload()" function.
100
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.4 Executing a function
5.4.4
Reading the trace buffer
ODK provides a trace function to check variables or the execution of functions in the realtime environment. The trace function supports the following elements: An integrated trace buffer for each CPU function library. An "ODK_TRACE" instruction that you can add to your code A "GetTrace" function block, which makes it possible to read the trace buffer
"ODK_TRACE" instruction
If you define the "ODK_TRACE" instruction, it is also compiled and executed. When you define the parameter Trace=on in the <project>.odk file, the instruction is automatically defined with the following code: #define ODK_TRACE(msg, ...);
Example: ODK_TRACE("number=%d", 13);
Calling the instruction creates an entry in the trace buffer.
When you define the parameter Trace=off in the <project>.odk file, no trace data is written.
Trace data is written automatically when an exception occurs.
Reading the trace buffer
The "GetTrace" function block enables you to read the trace buffer. The entries of the trace buffer can be read in the following ways: By a variable table in the web server of the CPU By a variable table in STEP 7 (online) On an HMI display The function block is included in the standard CPP file "<project>.cpp".
TraceCount
GetTrace STATUS
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
101
Developing a CPU function library for the realtime environment 5.4 Executing a function
Section Output Input Output
The following table shows the parameters of the "GetTrace" function block:
Declaration STATUS TraceCount TraceBuffer
Data type Description
INT
Number of trace entries actually read
INT
Number of trace entries to be read
Array [0..255] of String[125]
Trace string array for the user Each trace string consists of: · Date
· Time-of-day
· OB number
· File name
· Line number
· Trace text (trace implemented by the user)
Define the function block in the SCL file as follows: #ret := "ODK_App_MyFct_DB_1"(myInt:=4); IF (#ret > 0) { #ret := "ODK_App_GetTraces_DB_1"(TraceCount:=20); // ret_val = number of entries }
When the "GetTrace" function block is called in STEP 7, the instance block appears as follows:
102
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
5.5
5.5.1
Developing a CPU function library for the realtime environment 5.5 Post Mortem analysis
Post Mortem analysis
Introduction
You use the post mortem analysis to evaluate the system after an exception. The post mortem files map a snapshot at the time of the exception. You can analyze the dump with the post mortem analysis. It includes, for example: Register Stack Local/global data Transfer parameters The exception number under "g_PostMortemExceptionNr" in the window "Expressions" An exception can be triggered by one of the following cases: Execution of an illegal command
Division by zero Access to protected memory An exception triggered by the "throw" instruction but not handled by the "try...catch" instruction The objective of the post mortem analysis is to find the error within the CPU function library that caused the exception.
NOTICE Exception influences the cycle time When an exception occurs in your application, the complete application memory is buffered. This may take some milliseconds and influence the cycle time.
The post mortem files for the snapshot of the first exception are not created until the CPU changes from RUN to STOP. You can use it for the following post mortem analysis. They are stored in the following directory: <load memory>/ODK1500S The following files are created or overwritten during this process and can, for example, be downloaded via the web server: <project>.ed
Binary dump of the shared object in which the exception has occurred <project>.es
Stack at the time of the exception <project>.er
Script for restoring the snapshot at the time of the exception
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
103
Developing a CPU function library for the realtime environment 5.5 Post Mortem analysis
NOTICE Insufficient load memory When there is not enough load memory, the post mortem files are not saved properly. Make sure that you have enough load memory for your applications.
5.5.2
Execute post mortem analysis
Procedure
To run a post mortem analysis, follow these steps:
1. Open Eclipse.
2. Load the post mortem files to the engineering PC via the web server. Load these files to the same directory in which the SO file is stored.
3. Select the required project.
104
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.5 Post Mortem analysis
4. Start the debugging in one of the following ways: From Favorites:
Using "Debug Configurations"
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
105
Developing a CPU function library for the realtime environment 5.5 Post Mortem analysis
When you start a debug process for the first time, a dialog opens prompting you to select the required launch environment. Select the item "GDB (DSF) Hardware Debugging Launcher".
A dialog opens showing you the progress of the loading process for the post mortem image. The loading process can take several minutes, depending on the size of the post mortem image. 5. Select the required debug view.
106
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Developing a CPU function library for the realtime environment 5.5 Post Mortem analysis
6. Run the debug process.
The exception number is displayed as "g_PostMortemExceptionNr" in the window "Expressions".
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
107
Development of a C/C++ runtime application
6
6.1
Install additional Eclipse plugins
Requirement
ODK is installed. The Eclipse development environment is installed.
Procedure
1. Start Eclipse as a development environment. 2. Select the command "Install New Software..." in the menu bar under "Help".
The "Install" dialog opens. 3. Select the "--All Available Sites--" selection under "Work with:".
108
Figure 6-1 Install dialog
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Result
Development of a C/C++ runtime application 6.2 Create C/C++ application
4. Select the following plugins: C/C++ Remote Launch TCF Target Explorer TCF Remote System Explorer You can filter the selection via the text box.
5. Confirm with "Next". 6. Accept the license provisions and install the plugin with "Finish".
The plugins are installed and Eclipse restarted.
6.2
Create C/C++ application
6.2.1
Requirements
ODK is installed. The Eclipse development environment is installed. Additional Eclipse plugins are installed. SSH client (for example, PuTTY) is installed.
Note Root rights The default user and the C/C++ application must not have any root rights. Create a new user to execute the C/C++ application. Performance and jitter influence through C/C++ application Depending on the programming type in the C/C++ application, CPU performance may be influenced by jitter. Know-how protection The customer is responsible for the C/C++ application and its know-how protection.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
109
Development of a C/C++ runtime application 6.2 Create C/C++ application
6.2.2
Creating a C/C++ Runtime Application project
A template for an Eclipse project is included in the installation of ODK 1500S to help you develop a C/C++ runtime application.
Procedure
To create a project in Eclipse using a C++-project ODK template, follow these steps: 1. Start Eclipse as a development environment. 2. In the "File > New" menu, select the command "Project..."
The "New Project" dialog opens.
Figure 6-2 Creating a new project with Eclipse 3. Select "C++ Project for MFP Linux application (CPU 1518MFP)" and confirm with "Next".
Figure 6-3 Selecting a template
4. Enter a project name. 5. Confirm with "Finish".
110
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Result
Development of a C/C++ runtime application 6.2 Create C/C++ application
The C/C++ project is created using the template for the C/C++ runtime application.
The template for the C/C++ runtime application configures the following data structure by default:
Project Explorer Project name:
src
<project>.cpp
launches
MFP 1518_release
<project>.gdb.launch
"<project>"
Description
Function code: This file always has the suffix CPP, regardless of whether you are creating a C or C++ project. Start for the post mortem analysis.
C/C++ Runtime Application Binary (release version) that must be transferred to the target system.
Note Spaces in the project name All spaces in the project name are automatically replaced by an underscore. In the example, "My first project" becomes "My_first_project".
Note If you need to store the workspace at another storage location, ensure that you copy the entire workspace.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
111
Development of a C/C++ runtime application 6.2 Create C/C++ application
6.2.3
Editing C/C++ code
Requirement
You have created a project. Eclipse is open
Procedure
1. Select the "<project>.cpp" file in the project folder under "src". The editing mask opens.
Figure 6-4 Editing a project 2. Edit the code.
112
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Development of a C/C++ runtime application 6.2 Create C/C++ application
3. To add the new C/C++ files to the project, right-click on the "src" folder and select "New > Source File" from the shortcut menu. The "New Source File" dialog opens.
Figure 6-5 Dialog box New Source File
4. Enter a name for the CPP file in the "Source File" and confirm with "Finish". The new CPP file is stored in the "src" folder.
6.2.4
Generate C/C++ runtime application
The generation of the project data runs in an automated "Build" and generates the C/C++ runtime application.
Requirement
A project has been created for the C/C++ runtime application.
Procedure
To generate the project data, follow these steps: 1. Select the project for the C/C++ runtime application. 2. Select the "Build Project" command in the "Project" menu in the system bar.
You can also select the "Build Project" command by right-clicking on the project for the C/C++ Runtime Application in the shortcut menu.
Note The project data is only generated if you have changed the files.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
113
Development of a C/C++ runtime application 6.3 Load C/C++ runtime application in the target system
Result
The generation of the project data starts. The automatically generated files are stored in the file system.
6.3
Load C/C++ runtime application in the target system
6.3.1
Configuring PuTTY
You require a configured SSH client to establish a secure connection between Eclipse and the C++ Runtime of the CPU 1518MFP (for example, PuTTY).
Procedure based on "PuTTY" example
1. Start PuTTY. 2. Enter the target address "Host Name (or IP address)" (default address: 192.168.15.18) in
the text box. This is the IP address of the C/C++ Runtime and not the project IP address of the CPU. 3. Make sure that the following default settings are retained: Port: 22 Connection type: SSH
114
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Development of a C/C++ runtime application 6.3 Load C/C++ runtime application in the target system
4. To identify the PuTTY window and to create the association of the connection to the CPU in Eclipse, enter the title "CPU 1518MFP Linux Secure Connection" in the category "Window > Behavior" in the text box "Window title".
5. Enter the following values in the category "Connection > SSH > Tunnels". Under "Source port" "1534" or "2345". Under "Destination" "localhost:1534" or "localhost: 2345". In each case, confirm the entries with "Add".
6. Enter "CPU-1518MFP-Linux-Secure-Connection" in the category "Session" under "Saved Sessions" and confirm it with "Save".
7. To log on to the CPU 1518MFP, click "Open".
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
115
Development of a C/C++ runtime application 6.3 Load C/C++ runtime application in the target system
6.3.2
Commissioning C/C++ Runtime
Requirement
You have started the CPU 1518-4 PN/DP MFP (F).
Procedure
1. Start the secure shell client (for example, PuTTY).
2. Connect the secure shell client to the CPU 1518-4 PN/DP MFP (F) using the PuTTY configuration "CPU 1518MFP Linux Secure Connection" via the target address (default address: 192.168.15.18).
3. Type in the user name and password and establish a secure shell connection.
The default user name is "root".
The default password is displayed under "Overview > MFP > Default Password:".
4. Change the default password after the first startup of the CPU.
5. The CPU uses the default address 192.168.15.18 (static IP address).
To change the default address or activate DHCP, proceed as follows:
Open the script "network.sh" in the directory "/etc/mfp/etc". Edit the default address in the script:
#!/bin/sh ip address add 192.168.15.18/24 dev br0 # dhclient -i br0
Restart C/C++ Runtime to ensure that the CPU is accessible under the new IP address.
To activate DHCP, remove the hash "#" in front of dhclient -i br0 and comment out the line "ip address add 192.168.15.18/24 dev br0".
6. Start the TCF Agent with the following command:
/usr/sbin/tcf-agent d L- l0 sTCP:localhost
Note Automatic starting of the TCF agent
To automatically start the TCF Agent during startup, enter the command "/usr/sbin/tcfagent d L- l0 sTCP:localhost" in the script file "autostart.sh" (Page 121) in the directory "/home/<user>".
7. On the CPU 1518-4 PN/DP MFP (F), in the directory "/home/<user>" create a folder in which to load the application.
Reference
You can find more information on commissioning and the CPU 1518-4 PN/DP MFP (F) in the CPU manual (http://support.automation.siemens.com/WW/view/en/109749061).
116
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Development of a C/C++ runtime application 6.3 Load C/C++ runtime application in the target system
6.3.3
Set up new connection to the target system in Eclipse
Requirements
An MFP is created in Eclipse. An MFP is generated in Eclipse.
Procedure
Create a C/C++ remote application connection to the CPU 1518-4 PN/DP MFP (F). 1. Select the "Run Configurations..." command in the "Run" menu in the system bar.
The "Run Configurations" dialog opens. 2. Configure your connection.
Figure 6-6 "Run Configurations" dialog with example configuration of a connection
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
117
Development of a C/C++ runtime application 6.3 Load C/C++ runtime application in the target system
3. To set up a new connection, click "New" in the "Main" tab under "Connection". The "New Connection" dialog opens.
4. Select "TCF" and confirm with "Next". 5. Fill the dialog as in the following figure and confirm with "Finish".
Result
Figure 6-7 New connection dialog 6. In the "Run Configurations" dialog, select the connection "localhost" under "Connections". 7. Apply the configuration settings with "Apply"
A new connection to target system has been established.
118
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Development of a C/C++ runtime application 6.3 Load C/C++ runtime application in the target system
6.3.4
Load and execute C/C++ runtime application in the target system via Eclipse
Procedure
Transfer the C/C++ runtime application to the target system. 1. Select the "Run Configurations..." command in the "Run" menu in the system bar.
The "Run Configurations" dialog opens. 2. Select the required configuration under "C/C++ Remote Application". 3. Run the loading process with "Run".
Result
Your program is executed on the CPU 1518-4 PN/DP MFP (F).
6.3.5
Load and debug C/C++ runtime application in the target system via Eclipse
To debug C/C++ applications, you have the option to write a custom test. This will ensure the quality of the code.
Procedure
To perform the test, proceed as follows: 1. Open your project in Eclipse. 2. In the "Run" menu, select the command "Debug Configurations".
The "Debug Configurations" dialog opens. 3. If you debug the project for the first time, you must now set the debug configuration.
Otherwise, continue with step 5.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
119
Development of a C/C++ runtime application 6.3 Load C/C++ runtime application in the target system
4. Configure your connection in the "Main" tab as described under Set up new connection to the target system in Eclipse (Page 117).
Result
120
Figure 6-8 Configuring the connection 5. Select the required configuration under "C/C++ Remote Application". 6. Start the debug process by clicking the "Debug" button.
Eclipse suggests a change in the debug perspective. The test code is executed.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Development of a C/C++ runtime application 6.4 Execute C/C++ runtime application
6.4
Execute C/C++ runtime application
6.4.1
Starting the application automatically
You can create an Autostart file which automatically calls the C/C++ Runtime Application during the startup of the C/C++ Runtime environment.
Procedure
1. Create a Shell Script file "autostart.sh". Example for the content of the file "autostart.sh":
#!/bin/sh echo "Hello world"
2. Save the file "autostart.sh" in the directory "/home/<user>".
Result
The "autostart.sh" file is called during the startup of the C/C++ Runtime environment at the end of the boot process.
6.4.2
Start application via secure shell
Requirement
The CPU is connected to a secure shell client.
Procedure
1. Open the secure shell client.
2. To decouple the application from the secure shell, enter the command "nohup" before calling the application.
3. Call the application via the secure shell client.
Result
The CPU executes the application.
Note The CPU executes the application also after the secure shell client has terminated.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
121
Development of a C/C++ runtime application 6.4 Execute C/C++ runtime application
122
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Using example projects
7
To facilitate your introduction , ODK 1500S offers example projects for both development environments. The example projects consist of the following elements: A project for Microsoft Visual Studio or Eclipse A compiled binary and SCL source that enables you to immediately test the example
projects A STEP 7 example project
Storage location of example projects
The example projects for the CPU function libraries are available on the Internet (https://support.industry.siemens.com/cs/document/106192387/simatic-odk-1500sexamples?dti=0&lc=en-WW) for download.
The example projects for C/C++ runtime applications are available on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109749176) for download.
Using example projects
To open the example projects, follow these steps: 1. Transfer the example projects onto the hard disk of your PC. 2. Transfer the C/C++ runtime application, DLL or SO file to the target system.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
123
General conditions
A
A.1
Number of loadable CPU function libraries
You can load up to 32 CPU function libraries for Windows and realtime environment. Configuration limits for CPU function libraries: CPU function libraries for the Windows environment:
Up to 32 parallel function calls (total) Up to 1 MB input and output data (in total) Up to 1 MB input data per function call Up to 1 MB output data per function call
Note The memory for input and output parameters is allocated dynamically, depending on the quantity needed. The memory is allocated here in blocks of 8 KB each.
Development of a CPU function library for the real time environment Parallel function calls in a CPU function library defined by the parameter "SyncCallParallelCount" Up to 32 parallel function calls (in total) Up to 1 MB input data and output data per function call
Memory for loading CPU function libraries The available memory for loading of CPU function libraries is limited in the context of the real time environment. The table below provides an overview of the available memory of the different CPUs for loading CPU function libraries:
CPU CPU 1505SP (T)(F)
CPU 1507S (F)
CPU 1518-4 PN/DP MFP (F)
Memory available for loading 20 MB 50 MB 50 MB
Maximum size of the SO file 5.8 MB 9.8 MB 9.8 MB
The following restrictions are also in effect in the context of the realtime environment:
SO file name may not exceed 56 characters.
124
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
A.2
General conditions A.2 Compatibility
Compatibility
If you use an ODK version V2.5, note the following: Engineering:
A CPU function library project that was created with an ODK version < V2.5 is not compatible. You need to recreate a CPU function library in the version V2.5. Runtime: A CPU function library that was created with an ODK version < V2.5 is not compatible with newer CPU versions.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
125
Syntax Interface file <project>.odk for CPU function libraries
B
B.1
Data types
The data type defines the type of a tag. The following table defines the possible data types and their representation in the individual program languages or in C++ or STEP 7:
Elementary data types:
ODK data type ODK_DOUBLE
SIMATIC data type
LREAL
C++ data type double
C# data type double
ODK_FLOAT REAL
float
float
ODK_INT64 ODK_INT32 ODK_INT16 ODK_INT8 ODK_UINT64 ODK_UINT32 ODK_UINT16 ODK_UINT8 ODK_LWORD ODK_DWORD ODK_WORD ODK_BYTE ODK_BOOL
LINT DINT INT SINT ULINT UDINT UINT USINT LWORD DWORD WORD BYTE BOOL
long long long short char unsigned long long unsigned long unsigned short unsigned char unsigned long long unsigned long unsigned short unsigned char unsigned char
long int short sbyte ulong uint ushort byte ulong uint ushort byte bool
ODK_LTIME LTIME
long long
long
ODK_TIME ODK_LDT
TIME LDT
long
int
unsigned long long ulong
ODK_LTOD
LTOD
unsigned long long ulong
ODK_TOD
TOD
unsigned long
uint
ODK_WCHAR WCHAR
wchar_t
char
ODK_CHAR CHAR
char
sbyte
VB data type
Double
Single
Long Integer Short SByte ULong UInteger UShort Byte ULong UInteger UShort Byte Boolean
Long
Integer ULong
ULong
UInteger
Char
SByte
Description
64-bit floating point, IEEE 754 32-bit floating point, IEEE 754 64-bit signed integer 32-bit signed integer 16-bit signed integer 8-bit signed integer 64-bit unsigned integer 32-bit unsigned integer 16-bit unsigned integer 8-bit unsigned integer 64-bit bit string 32-bit bit string 16-bit bit string 8-bit bit string 1-bit bit string, remaining bits (1..7) are empty 64-bit during in nanoseconds 32-bit during in milliseconds 64-bit date and time of the day in nanoseconds 64-bit time of the day in nanoseconds since midnight 32-bit time of the day in milliseconds since midnight Only for Windows: 16-bit character 8-bit character
126
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Syntax Interface file <project>.odk for CPU function libraries B.1 Data types
Complex data types:
ODK data type ODK_DTL
SIMATIC data type
DTL
ODK_S7STRING STRING
C++ data type struct ODK_DTL unsigned char
C# data type
OdkInternal. Dtl (class) string
ODK_S7WSTRING WSTRING unsigned short
string
ODK_VARIANT
VARIANT
struct ODK_VARIANT
byte [ ]
ODK_CLASSIC_D VARIANT B
[ ]
ARRAY
struct
-
ODK_CLASSIC_DB
[ ]
[ ]
VB data type Description
OdkInternal. Dtl (class) String String
byte [ ]
[ ]
Structure for date and time
Character string (8-bit character) with max. and act. length (2xUSINT)
Only for Windows: Character string (16-bit character) with max. and act. length (2xUINT)
For Windows only: Classic data (each data type that can be serialized with classic data.)
Only for realtime environment: Classic DB (global or based on UDT)
Range of same data types.
The maximum number of array elements is 220 (=1,048,576).
You can use all data types as array except IN_DATA / INOUT_DATA / OUT_DATA.
User-defined data types:
User-defined data types (UDT) include structured data, especially the names and the data types of this component and their order.
A user-defined data type can be defined in the user interface description with the keyword "ODK_STRUCT".
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
127
Syntax Interface file <project>.odk for CPU function libraries B.1 Data types
Example
ODK_STRUCT <StructName>
{
<DataType> <TagName>;
...
};
The following syntax rules apply to the structure: You can divide the structure into multiple lines. The structure definition must end with a semicolon. Any number of tabs and spaces between the elements is permitted. It is not permitted to use any keywords for the generated language used (for example
"en / eno" as tag name). Restrictions of the data type ODK_VARIANT: When a parameter of the data type ODK_VARIANT is used, it is not permitted to use
other parameters with the same InOut-Identifier, regardless of data type. With the data type ODK_VARIANT, an [OUT] is modeled as [INOUT] in the generated FB. Restrictions of the data type ODK_CLASSIC_DB: The data type ODK_CLASSIC_DB can only be used with the InOut-Identifier [IN] and
[INOUT]. When a parameter of the data type ODK_CLASSIC_DB is used with the InOut-Identifier
[IN] or [INOUT], it is not permitted to use other parameters with the same InOut-Identifier, regardless of data type.
128
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Syntax Interface file <project>.odk for CPU function libraries B.2 Parameters
B.2
Parameters
The parameters of the <project>.odk file are different: Developing a CPU function library for the Windows environment Developing a CPU function library for the realtime environment
Parameters for the Windows environment
The definition of the parameters must be within a line of code. <parameter name>=<value> // optional comment
The <project>.odk file supports the following parameters:
Parameter Context
STEP7Prefix FullClassName
Value user system <String>
<String>
Description
Specifies that the CPU function library is loaded in the context of a Windows user.
Specifies that the CPU function library is loaded in the context of the Windows system.
Describes the string that precedes your functions and is shown after importing the SCL file in STEP 7. The following characters are allowed: {A...Z, a...z, 1...9, -, _}
The parameter is required for the C# and VB programming languages.
To change the class names or namespace of the source files of the CPU function library, you need to adjust the "FullClassName" parameter.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
129
Syntax Interface file <project>.odk for CPU function libraries B.2 Parameters
Parameters for the realtime environment
The definition of the parameters must be within a line of code. <parameter name>=<value> // optional comment
The <project>.odk file supports the following parameters:
Parameter Context Trace
HeapSize HeapMaxBlockSize SyncCallParallelCount
SyncCallStackSize SyncCallDataSize
STEP7Prefix
Value realtime
on
off
[4...<Availabl e CPU memory> (Page 124)]k [8...<HeapSi ze>] [1...9] Default=3
[1...1024]k Default=32k [1...1024]k
Default=auto <String>
Description Specifies that the CPU function library is loaded in the context of the real time environment. Specifies the trace function in the CPU function library. In this case, the CPU function library requires 32 KB if memory as an additional trace buffer. A "GetTrace" function block is created by default for use in a STEP 7. A "GetTrace" function block is created. The trace buffer contains only one trace entry with the contents: trace is off. Specifies a memory in KB that is used as heap for realtime applications.
Specifies the memory size in bytes that can be allocated at one time.
If a optional parameter and defines the maximum number of parallel calls in this CPU function library. The size of the memory which is reserved for calls in this CPU function library: SyncCallParallelCount * (SyncCallStackSize + SyncCallDataSize) Is a optional parameter and defines the size of the thread stack for a call in this CPU function library. Each new call contains a separate stack memory. Is a optional parameter and defines the size of the data area for a call in this CPU function library. The data area contains IN, INOUT and OUT parameters. Each new call contains a separate stack memory. The required data size is automatically calculated by the code generator. Describes the string that precedes your functions and is shown after importing the SCL file in STEP 7. The following characters are allowed: {A...Z, a...z, 1...9, -, _} By default the name is entered without blanks.
130
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Code generator messages for CPU function libraries
C
C.1
Error messages of the code generator
The code generator stops the build process and generates the following error messages:
File errors:
Error number 100
101
Error message
`<Project>.odk' is missing Context is missing in resource file
102
resource file `...' is missing
Possible solution
Rename the file to <project>.odk. Valid for Visual Studio only. One of the following resource files is faulty: · C++: <project>.rc · C#: AssemblyInfo.cs · VB: AssemblyInfo.vb Valid for Visual Studio only. One of the following resource files is missing: · C++: <project>.rc · C#: AssemblyInfo.cs · VB: AssemblyInfo.vb
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
131
Code generator messages for CPU function libraries C.1 Error messages of the code generator
Error number
103
Error message `...' write protected
110
license key missing
111
retrieve license key not possible
Parameter errors:
Possible solution
One of the following files is write-protected: · C++
<project>.rc (only for Visual Studio) ODK_Types.h ODK Functions.h ODK_Execution.cpp · C# (only for Visual Studio) AssemblyInfo.cs OdkTypes.cs OdkFunctions.cs OdkExecution.cs · VB (for Visual Studio only) AssemblyInfo.vb OdkTypes.vb OdkFunctions.vb OdkExecution.vb · General cg.tmp
Temporary file for the code generator to detect changes in the interface file. <project>.scl
Transfer a current license key. Install the ALM with the version 6.0.
Error number 200
201 202
203
204 205
206
207
208
Error message
Possible solution
parameter `...' is not allowed for current con- The indicated parameter is not allowed here. text
missing `...' definition
The indicated parameter (Page 69) is not defined.
more than one definition for `...'
There is more than one definition for the indicated parameter (Page 69).
Context has to be one of `user' or `system' for Choose the context "system" or "user" for Visual Studio. Microsoft Visual Studio
Context has to be `realtime' for Eclipse
Choose the context "realtime" for Eclipse.
Trace has to be on or off
The "Trace" parameter must have the value "on" or "off" (only for realtime environment).
STEP7Prefix must not be longer than 120 characters
The STEP 7 prefix must not exceed 120 characters.
HeapSize has to be interval of [4...100000]k Ensure that the HeapSize parameter is within the value range [4...100000]k.
HeapMaxBlockSize has to be interval of [8...<HeapSize>]
Ensure that the HeapMaxBlockSize parameter is within the value range [8...<HeapSize>].
132
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Code generator messages for CPU function libraries C.1 Error messages of the code generator
Error number 209
210
211
Error message
SyncCallDataSize must be interval of [1...1024]k SyncCallStackSize must be interval of [1...1024]k SyncCallParallelCount must be interval of [1...9]
Syntax errors:
Possible solution
Ensure that the SyncCallDataSize parameter is within the value range [1...1024]k. Ensure that the SyncCallStackSize parameter is within the value range [1...1024]k. Ensure that the SyncCallParallelCount parameter is within the value range [1...9].
Error number 500 501
502 503
504
506 507
508
509 510 511
512
513
514
515
516 517
518
519
520
Error message
Possible solution
unexpected end-of-file found
Always end the file with a semicolon.
`...' should be alpha numeric
The following characters are allowed: a - z, A - Z, 0 - 9, _
Umlauts are not permitted.
`...' should be numeric
The following characters are allowed: 0 - 9
`...' undefined keyword
Use only the keywords [IN], [OUT] and [INOUT] and the defined data types.
... missing before ...
Add the character displayed by the error message.
missing space
Add a space.
`...' undefined type
Use only the defined data types.
`...' type not allowed
Observe the syntax rules in section Defining functions a CPU function library (Page 72)
`...' type redefinition
The function or parameter name is already assigned. Choose a different name.
`...' variable redefinition
The tag name is already assigned. Choose a different name.
Structure `...' must not be empty
Fill the structure with a data type.
`...' no valid name
Observe the syntax rules in section Defining functions a CPU function library (Page 72).
unexpected variable order (must be [IN], [OUT], [INOUT] order)
There are three defined InOut identifiers. Use these in the following order: [IN], [OUT], [INOUT]
size of ODK_S7STRING could not be bigger A string can have a maximum length of 254 characters. than 254
size of ODK_S7WSTRING could not be big- A Wstring can have a maximum length of 16382 characters. ger than 16382
Prefix + Function name `....' exceeds 125 characters
Prefix and function name together are longer than 125 characters.
variable name `...' exceeds 128 characters The tag name is longer than 128 characters.
'...' IN_BUFFER + INOUT_BUFFER could not Altogether, the InOut identifiers [IN] and [INOUT] in a function
be greater than 1 MB
must not exceed 1 MB.
'...' INOUT_BUFFER + OUT_BUFFER could Altogether, the InOut identifiers [OUT] and [INOUT] in a func-
not be greater than 1 MB
tion must not exceed 1 MB.
'...' needs '...k', but data size (SyncCallDataSize) is limited to '...k'
The amount of data is too high.
'...' has an array size of '...', but max. array size is limited to '...'
The maximum Array size is exceeded.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
133
Code generator messages for CPU function libraries C.2 Warnings of the code generator
Error number 521
522 523 524
Error message
Possible solution
no other variable in the same direction for ODK_CLASSIC_DB / ODK_VARIANT type
no array allowed for ODK_CLASSIC_DB / ODK_VARIANT type no [OUT] direction allowed for ODK_CLASSIC_DB type function declarations lead to identical hashes (change name of one parameter): `...', `...'
As soon as the data type ODK_CLASSIC_DB or ODK_VARIANT is used, no other parameter may defined with the same InOut identifier.
No Array may be defined for the data type ODK_CLASSIC_DB or ODK_VARIANT.
The InOut identifier [OUT] may not be defined for the ODK_CLASSIC_DB data type.
Change a parameter name.
C.2
Warnings of the code generator
The code generator continues to execute the build process and generates the following warnings:
Warning number
4100
Warning message
Description
built project with ODK 1500S trial mode - '...' Use the test version. The warning shows when the test version
day(s) left
runs.
134
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Helper functions for CPU function libraries
D
D.1
C++ helper functions
String helper functions for CPU function library for the Windows and realtime environment
The following helper functions provide access to S7 strings:
Helper functions Convert_S7STRING_to_SZSTR
Convert_SZSTR_to_S7STRING
Get_S7STRING_Length Get_S7STRING_MaxLength
Description Convert PLC string types to C/C++ string types ("char" array, null-terminated)
Convert C/C++ string types ("char" array, null-terminated) to PLC string types.
Returns the current length of a PLC string type.
Returns the maximum length of a PLC string type.
String helper functions for CPU function library for the Windows environment
The following helper functions provide access to S7WStrings:
Helper functions
Description
Convert_S7WSTRING_to_SZWSTR Convert PLC WString types to C/C++ WString types ("wchar_t" array, null-terminated)
Convert_SZWSTR_to_S7WSTRING Convert C/C++ WString types ("wchar_t" array, nullterminated) to PLC WString types.
Get_S7WSTRING_Length
Returns the current length of a PLC Wstring type.
Get_S7WSTRING_MaxLength
Returns the maximum length of a PLC WString type.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
135
Helper functions for CPU function libraries D.1 C++ helper functions
Class "CODK_CpuReadData" (Windows and real-time environment)
The "CODK_CpuReadData" class allows read access to classic DBs / classic data:
Value CODK_CpuReadData
SetBuffer ReadS7BOOL ReadS7BYTE ReadS7WORD ReadS7DWORD ReadS7LWORD ReadS7SINT ReadS7INT ReadS7DINT ReadS7LINT ReadS7USINT ReadS7UINT ReadS7UDINT ReadS7ULINT ReadS7REAL ReadS7LREAL ReadS7S5TIME ReadS7DATE ReadS7TIME ReadS7LTIME
ReadS7TIME_OF_DAY ReadS7LTIME_OF_DAY
ReadS7DATE_AND_TIME ReadS7DATE_AND_LTIME
ReadS7DTL
ReadS7CHAR ReadS7STRING_LEN
ReadS7STRING
ReadS7WCHAR
Description Class constructor, initializes the input data area and the data size. Initializes the input data area and the data size. Reads "bool" (1 byte) from the data area. Reads a "byte" (1 byte) from the data area. Reads a "word" (2 bytes) from the data area. Reads a "double word" (4 bytes) from the data area. Reads a "long word" (8 bytes) from the data area. Reads a "short integer" (1 byte) from the data area. Reads a "integer" (2 bytes) from the data area. Reads a "double integer" (4 bytes) from the data area. Reads "long integer" (8 bytes) from the data area. Reads a "unsigned short integer" (1 byte) from the data area. Reads a "unsigned integer" (2 bytes) from the data area. Reads a "unsigned double integer" (4 bytes) from the data area. Reads "unsigned long integer" (8 bytes) from the data area. Reads a "real number" (4 bytes) from the data area. Reads a "long real number" (8 bytes) from the data area. Reads a 16 bit (2 bytes) from the data area. Reads a date value (2 bytes) from the data area. Reads a time value (4 bytes) from the data area. Reads a time value (8 bytes) as nanoseconds from the data area. Reads the time of day (4 bytes) from the data area. Reads the time of day (8 bytes) as nanoseconds since midnight from the data area. Reads a general date and time area. Reads a date and time value (8 bytes) as nanoseconds since 01/01/1970 00:00 from the data area. Reads a date and time information (12 bytes) as a predefined structure from the data area. Reads a "char" (1 byte) from the data area. Reads the information of the string length for a S7 string in the data area. Reads an S7 string from the data area and returns it as language dependent string. The string is shortened when there is insufficient space in the target string. Only available for CPU function libraries for the Windows environment. Reads "wide char" (2 bytes) from the data area.
136
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Helper functions for CPU function libraries D.1 C++ helper functions
Value ReadS7WSTRING_LEN
ReadS7WSTRING
Description
Only available for CPU function libraries for the Windows environment.
Reads the information of the string length for a S7W string in the data area.
Only available for CPU function libraries for the Windows environment.
Reads an S7W string from the data area and returns it as language dependent string.
The string is shortened when there is insufficient space in the target string.
Class "CODK_CpuReadWriteData" (Windows and real-time environment)
The "CODK_CpuReadWriteData" class allows the following write accesses in addition to the all read accesses from "CODK_CpuReadData" to classic DBs / classic data:
Value CODK_CpuReadWriteData
SetBuffer LastByteChanged FirstByteChanged WriteS7BOOL WriteS7BYTE WriteS7WORD WriteS7DWORD WriteS7LWORD WriteS7SINT WriteS7INT WriteS7DINT WriteS7LINT WriteS7USINT WriteS7UINT WriteS7UDINT WriteS7ULINT WriteS7REAL WriteS7LREAL WriteS7S5TIME WriteS7DATE WriteS7TIME WriteS7LTIME WriteS7TIME_OF_DAY WriteS7LTIME_OF_DAY
Description Class constructor, initializes the output data area and the data size. Initializes the output data area and the data size. Retrieves the index of the last byte changed in the data area. Retrieves the index of the first byte changed in the data area. Writes a "bool" (1 byte) to the data area. Writes a "byte" (1 byte) to the data area. Writes a "word" (2 bytes) to the data area. Writes a "double word" (4 bytes) to the data area. Writes a "long word" (8 bytes) to the data area. Writes a "short integer" (1 byte) to the data area. Writes a "integer" (2 bytes) to the data area. Writes a "double integer" (4 bytes) to the data area. Writes a "long integer" (8 bytes) to the data area. Writes a "unsigned short integer" (1 byte) to the data area. Writes a "unsigned integer" (2 bytes) to the data area. Writes a "unsigned double integer" (4 bytes) to the data area. Writes a "unsigned long integer" (2 bytes) to the data area. Writes a "real number" (4 bytes) to the data area. Writes a "long real number" (8 bytes) to the data area. Writes a 16-bit (2 bytes) time value to the data area. Writes a date value (2 bytes) to the data area. Writes a time value (4 bytes) to the data area. Writes a time value (8 bytes) as nanoseconds to the data area. Writes a time of day (4 bytes) to the data area. Writes the time of day (8 bytes) as nanoseconds since midnight to the data area.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
137
Helper functions for CPU function libraries D.1 C++ helper functions
Value WriteS7DATE_AND_TIME WriteS7DATE_AND_LTIME WriteS7DTL WriteS7CHAR WriteS7STRING
WriteS7STRING_MAX_LEN
WriteS7WCHAR WriteS7WSTRING
WriteS7WSTRING_MAX_LEN
Description Writes a "System.DateTime" to the data area.
Writes a date and time value (8 bytes) as nanosecond since 01/01/1970 00:00 to the data area.
Writes a date and time information (12 bytes) as a predefined structure to the data area.
Writes a "char" (1 byte) to the data area.
Writes a S7 string to the data area.
The string is shortened when there is insufficient space in the target string.
If no maximum string length is set in the case of a "[OUT] Variant", the current string length is set as maximum string length.
Only available for CPU function libraries for the Windows environment.
Writes the maximum string length to an S7 string. Is only required for "[OUT] Variant".
Only available for CPU function libraries for the Windows environment.
Writes a "char" (2 bytes) to the data area.
Only available for CPU function libraries for the Windows environment. Writes an S7W string to the data area.
The string is shortened when there is insufficient space in the target string.
If no maximum string length is set in the case of a "[OUT] Variant", the current string length is set as maximum string length.
Only available for CPU function libraries for the Windows environment.
Writes the maximum string length to an S7W string. Is only required for "[OUT] Variant".
138
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Helper functions for CPU function libraries D.2 C#/VB helper functions
D.2
C#/VB helper functions
Access to classic data
For the C# and VB programming languages, the following classes are available for reading and writing in a classic data stream: OdkReadVariant
Supports all "ReadS7..." methods. OdkReadWriteVariant
Supports all "ReadS7..." and "WriteS7..." methods.
ReadS7 methods ReadS7Bool ReadS7Byte ReadS7Word ReadS7DWord
ReadS7LWord ReadS7Sint
ReadS7Int ReadS7Dint
ReadS7Lint
ReadS7USint
ReadS7Uint
ReadS7UDint
ReadS7ULint
ReadS7Real
ReadS7LReal
ReadS7S5Time
ReadS7Time ReadS7LTime ReadS7Date
ReadS7TimeOfDay ReadS7LTimeOfDay
WriteS7 methods WriteS7Bool WriteS7Byte WriteS7Word WriteS7DWord
WriteS7LWord WriteS7Sint
WriteS7Int WriteS7Dint
WriteS7Lint
WriteS7USint
WriteS7Uint
WriteS7UDint
WriteS7ULint
WriteS7Real
WriteS7LReal
WriteS7S5Time
WriteS7Time WriteS7LTime WriteS7Date
WriteS7TimeOfDay WriteS7LTimeOfDay
Description Writes/reads a "bool" (1 byte) to/to/from the data area. Writes/reads a "byte" (1 byte) to/from the data area. Writes/reads a "word" (2 bytes) to/from the data area. Writes/reads a "double word" (4 bytes) to/from the data area.
Writes/reads a "long word" (8 bytes) to/from the data area. Writes/reads a "short integer" (1 byte) to/from the data area.
Writes/reads a "integer" (2 bytes) to/from the data area. Writes/reads a "double integer" (4 bytes) to/from the data area.
Writes/reads a "long integer" (8 bytes) to/from the data area.
Writes/reads a "unsigned short integer" (1 byte) to/from the data area. Writes/reads a "unsigned integer" (2 bytes) to/from the data area. Writes/reads a "unsigned double integer" (4 bytes) to/from the data area. Writes/reads a "unsigned long integer" (8 bytes) to/from the data area. Writes/reads a "real number" (4 bytes) to/from the data area.
Writes/reads a "long real number" (8 bytes) to/from the data area. Writes/reads a 16-bit (2 bytes) time value to/from the data area.
Writes/reads a time value (4 bytes) to/from the data area. Writes/reads a time value (8 bytes) to/from the data area. Writes/reads a date and time value (2 bytes) to/from the data area. Writes/reads the time of day (4 bytes) to/from the data area. Writes/reads the time of day (8 bytes) to/from the data area.
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
139
Helper functions for CPU function libraries D.2 C#/VB helper functions
ReadS7 methods ReadS7DateAndTime ReadS7DateAndLTime ReadS7Dtl ReadS7Char ReadS7String
ReadS7StringCurLen ReadS7StringMaxLen ReadS7WChar ReadS7WString
ReadS7WStringCurLen ReadS7WStringMaxLen
WriteS7 methods WriteS7DateAndTime WriteS7DateAndLTime WriteS7Dtl WriteS7Char WriteS7String
WriteS7StringMaxLen WriteS7WChar WriteS7WString
WriteS7WStringMaxLen
Description Writes/reads a "System.DateTime" to/from the data area.
Writes/reads a date and time value (8 bytes) as nanoseconds since 01/01/1970 00:00 to/from the data area.
Writes/reads a date and time value (12 bytes) as a predefined structure to/from the data area.
Writes/reads a "char" (1 byte) to/from the data area.
Writes/reads an SIMATIC S7 string to/from the data area and returns it as language-dependent string.
The string is shortened when there is insufficient space in the target string.
If no maximum string length is set in the case of a "[OUT] Variant", the current string length is set as maximum string length.
Reads the current string length of a S7 string exception if the current string length is larger than the maximum string length.
Writes/reads the maximum string length to/from a S7 string.
Is only required for "[OUT] Variant".
Writes/reads a "wide char" (2 bytes) to/from the data area.
Writes/reads an S7W string to/from the data area and returns it as language dependent string.
The string is shortened when there is insufficient space in the target string.
If no maximum string length is set in the case of a "[OUT] Variant", the current string length is set as maximum string length.
Reads the current string length of a S7W string exception if the current string length is larger than the maximum string length.
Writes/reads the maximum string length to/from a S7W string. Is only required for "[OUT] Variant".
140
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Helper functions for CPU function libraries D.2 C#/VB helper functions
Access to classic DBs
Use in C# using OdkInternal;
public ushort SampleFunction (byte[] myDB) {
OdkReadVariant rv = new OdkReadVariant(myDB); int i = rv.ReadS7DINT(0); // do something with i return ODK_SUCSESS; }
Use in VB Imports OdkInternal;
Public Function SampleFunction (ByRef myDB As Byte[]) As UShort {
Dim wv As OdkReadWriteVariant = new OdkReadWriteVariant(myDB) Dim value As Short = 5 ` calculate the value somehow wv.WriteS7INT(8, value) return ODK_SUCSESS; }
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
141
Instructions for CPU function libraries
E
E.1
"Load" instruction
The "<STEP7Prefix>_Load" instruction has different parameters that depending on the development environment:
Development of a CPU function library for the Windows environment (Page 51)
Development of a CPU function library for the realtime environment (Page 93)
E.2
"Unload" instruction
The "<STEP7Prefix>_Unload" instruction has different parameters that depending on the development environment:
Development of a CPU function library for the Windows environment (Page 58)
Development of a CPU function library for the realtime environment (Page 99)
E.3
Section Output Input Output
"GetTrace" instruction
The function block (Page 101) "GetTrace" is included in the default CPPfile "<project>.cpp".
TraceCount
GetTrace STATUS
The following table shows the parameters of the "GetTrace" function block:
Declaration STATUS TraceCount TraceBuffer
Data type Description
INT
Number of trace entries actually read
INT
Number of trace entries to be read
Array [0..255] of String[125]
Trace string array for the user Each trace string consists of: · Date
· Time-of-day
· OB number
· File name
· Line number
· Trace text (trace implemented by the user)
142
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
Index
C
Callback functions Realtime, 82 Windows, 46
Calling functions Realtime, 96 Windows, 56
Certificate of license, 21 Commissioning
C/C++ Runtime, 116 Context Application, 33, 70 Context Realtime, 70 Context System, 33 Context User, 33 Creating a project
C/C++ runtime application, 110 Realtime, 65 Windows, 25 Customer service, 3
D
Debug (Test), 87 C/C++ runtime application, 119
Debug (Windows), 61 Defining functions, 34, 72 Defining runtime properties
Realtime, 69 Windows, 32 Definitions, 3 Development environments, 15 Development steps, 17 Documentation, 3 Dynamic memory, 85
G
Generating an application C/C++ runtime application, 113 Realtime, 68 Windows, 31
I
Implementing functions Custom functions, 48, 84 Realtime, 82 Windows, 46
Installation, 20 Licensing, 21
Internet Web sites (Siemens), 3
K
Knowledge required, 3
L
License key, 21 Loading functions
Realtime, 93 Windows, 51
M
Manuals, 3
P
Post Mortem analysis, 103 Product overview, 10
Basic procedure, 17 How it works, 10
S
Siemens contact information, 3 STEP 7 import
Realtime, 92 Windows, 50 Support, 3 Syntax rules, 34, 72 System requirements, 18
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
143
Index
T
Target group, 3 Technical support, 3 Trace buffer, 101 Transfer to target system
C/C++ application, 119 Create connection to the target system, 117 Realtime, 90 Windows, 49
U
Uninstalling, 24 Unloading functions
Realtime, 99 Windows, 58
W
Web sites (Siemens), 3
144
Open Development Kit 1500S V2.5 Programming and Operating Manual, 12/2017, A5E35253941-AD
S7-PLCSIM Advanced
SIMATIC S7-1500 S7-PLCSIM Advanced
Function Manual
Preface
Guide
1
Product overview
2
Installing
3
Communication paths
4
Simulation
5
Virtual time response
6
User interfaces (API)
7
Restrictions, messages and solution
8
List of abbreviations
A
11/2019
A5E37039512-AC
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E37039512-AC 09/2019 Subject to change
Copyright © Siemens AG 2016 - 2019. All rights reserved
Preface
Purpose of the documentation
This function manual describes the simulation software, SIMATIC S7-PLCSIM Advanced V3.0. You can use this software to simulate and test your SIMATIC STEP 7 programs on a virtual controller.
Scope
This function manual is valid for the following order versions
6ES7823-1FA01-0YA5 - SIMATIC S7-PLCSIM Advanced V3.0 Floating License (DVD)
6ES7823-1FE01-0YA5 - SIMATIC S7-PLCSIM Advanced V3.0 Floating License (Download)
6ES7823-1FA01-0YE5 - Upgrade SIMATIC S7-PLCSIM Advanced V2.0 V3.0 (DVD)
6ES7823-1FE01-0YE5 - Upgrade SIMATIC S7-PLCSIM Advanced V2.0 V3.0 (Download)
The articles each contain one license for two instances.
Basic knowledge required
The software must only be used by qualified staff. The following knowledge is required: Industrial Automation and Automation Technology Programming with STEP 7 (TIA Portal) SIMATIC CPUs and CPU programming PC-based automation using S7-1500 and WinCC Runtime Advanced Knowledge of programming with C++ or C# PC technology Windows operating system
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
3
Preface
Conventions
Conventions STEP 7: In this documentation, "STEP 7" is used as a synonym for all versions of the configuration and programming software "STEP 7 (TIA Portal)". We also abbreviate SIMATIC S7-PLCSIM Advanced V3.0 as "PLCSIM Advanced".
Also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Special information
Note Readme You can obtain updates to the function manual as downloads on the Internet (https://support.industry.siemens.com/cs/us/en/view/109739154).
Application examples The following application examples for S7-PLCSIM Advanced are available on the Internet: · SIMATIC S7-PLCSIM Advanced: Co-Simulation via API (1
(https://support.industry.siemens.com/cs/ww/en/view/109739660)) · Digitalization with TIA Portal: Virtual commissioning with SIMATIC and Simulink (2
(https://support.industry.siemens.com/cs/ww/en/document/109749187))
S7-PLCSIM Advanced
4
Function Manual, 11/2019, A5E37039512-AC
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (http://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (http://www.siemens.com/industrialsecurity).
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
5
Table of contents
Preface ................................................................................................................................................... 3
1 Guide.................................................................................................................................................... 27
1.1
Documentation guide ............................................................................................................. 27
1.2
S7-PLCSIM products ............................................................................................................. 30
2 Product overview .................................................................................................................................. 32
2.1
What is S7-PLCSIM Advanced? ............................................................................................ 32
2.2
Compatibility during upgrade ................................................................................................. 33
2.3
Security for S7-PLCSIM Advanced........................................................................................ 34
2.4
Simulations support ............................................................................................................... 35
2.5
Supported CPUs .................................................................................................................... 36
2.6 2.6.1 2.6.2
Differences between a simulated and a real CPU ................................................................. 37 Restrictions for all supported CPUs ....................................................................................... 38 Notes ...................................................................................................................................... 39
3 Installing ............................................................................................................................................... 41
3.1 3.1.1 3.1.2 3.1.3 3.1.4 3.1.5
Introduction ............................................................................................................................ 41 System requirements ............................................................................................................. 41 Restrictions due to antivirus programs .................................................................................. 43 Licenses ................................................................................................................................. 44 Trial License ........................................................................................................................... 44 Installation log ........................................................................................................................ 47
3.2
S7-PLCSIM Advanced ........................................................................................................... 48
3.3
Installing S7-PLCSIM Advanced............................................................................................ 49
3.4
Changing S7-PLCSIM Advanced........................................................................................... 51
3.5
Repairing S7-PLCSIM Advanced........................................................................................... 52
3.6
Uninstalling S7-PLCSIM Advanced ....................................................................................... 53
4 Communication paths ........................................................................................................................... 54
4.1
Local communication ............................................................................................................. 55
4.2
Communication via TCP / IP.................................................................................................. 57
4.3
Enable distributed communication ......................................................................................... 60
S7-PLCSIM Advanced
6
Function Manual, 11/2019, A5E37039512-AC
Table of contents
5 Simulation............................................................................................................................................. 62
5.1 5.1.1 5.1.2 5.1.2.1 5.1.2.2 5.1.2.3 5.1.2.4 5.1.3 5.1.4 5.1.4.1 5.1.4.2 5.1.5 5.1.6 5.1.6.1 5.1.6.2 5.1.7
Simulate CPU .........................................................................................................................62 Basic procedure for the simulation .........................................................................................62 Control Panel - User interface ................................................................................................63 S7-PLCSIM Advanced Symbol...............................................................................................63 Graphical interface..................................................................................................................64 S7-PLCSIM Advanced Control Panel .....................................................................................65 Importing instances.................................................................................................................69 Download ................................................................................................................................71 Network addresses in the simulation ......................................................................................73 Siemens PLCSIM Virtual Ethernet Adapter ............................................................................73 PLCSIM Advanced instances .................................................................................................74 Simulate peripheral I/O ...........................................................................................................75 Simulate communication.........................................................................................................76 Communication services that can be simulated .....................................................................76 Communication between instances ........................................................................................77 Provide project data offline for simulation...............................................................................77
5.2 5.2.1 5.2.2 5.2.3 5.2.4
Simulate CPU with ODK functionality .....................................................................................79 Special features of ODK .........................................................................................................80 Loading functions....................................................................................................................83 Calling functions......................................................................................................................84 Unloading functions ................................................................................................................84
5.3
Simulating Motion Control.......................................................................................................85
6 Virtual time response ............................................................................................................................ 87
6.1
Speed up and slow down simulation ......................................................................................89
6.2
Stop simulation .......................................................................................................................90
6.3 6.3.1 6.3.2
Synchronize simulation partner ..............................................................................................92 Synchronize simulation partner cycle-controlled ....................................................................92 Synchronize simulation partner time-controlled......................................................................94
7 User interfaces (API)............................................................................................................................. 96
7.1 7.1.1 7.1.2 7.1.3 7.1.4 7.1.5 7.1.6
Introduction .............................................................................................................................96 Access to instances ................................................................................................................98 User interfaces (API)...............................................................................................................99 Overview of user interfaces for native C++ ..........................................................................100 Overview of user interfaces for managed code ....................................................................105 Overview of data types for native C++..................................................................................108 Overview of data types for managed code ...........................................................................110
7.2 7.2.1 7.2.2 7.2.2.1 7.2.2.2 7.2.3 7.2.3.1
Initialize API ..........................................................................................................................111 Load API library ....................................................................................................................111 Native C++ ............................................................................................................................112 InitializeApi() .........................................................................................................................112 RuntimeApiEntry_Initialize ....................................................................................................114 .NET (C#) ..............................................................................................................................116 Initialize .................................................................................................................................116
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
7
Table of contents
7.3 7.3.1 7.3.1.1 7.3.1.2 7.3.1.3 7.3.1.4 7.3.2 7.3.2.1
7.4
7.5 7.5.1 7.5.2 7.5.3 7.5.3.1 7.5.4 7.5.4.1 7.5.4.2 7.5.4.3
7.6 7.6.1 7.6.2 7.6.3 7.6.4 7.6.5 7.6.5.1 7.6.5.2 7.6.5.3 7.6.5.4 7.6.5.5 7.6.6 7.6.7 7.6.8 7.6.8.1 7.6.8.2 7.6.8.3 7.6.8.4 7.6.8.5 7.6.8.6 7.6.8.7 7.6.8.8 7.6.8.9 7.6.8.10 7.6.9 7.6.9.1 7.6.9.2
Shut down API ..................................................................................................................... 117 Native C++ ........................................................................................................................... 117 DestroyInterface() ................................................................................................................ 118 RuntimeApiEntry_DestroyInterface...................................................................................... 119 FreeApi() .............................................................................................................................. 120 ShutdownAndFreeApi()........................................................................................................ 121 .NET (C#) ............................................................................................................................. 122 Shut down API ..................................................................................................................... 122
Global functions (Native C++).............................................................................................. 122
API ISimulationRuntimeManager......................................................................................... 127 Interfaces - Information and settings.................................................................................... 127 Simulation Runtime instances.............................................................................................. 129 Remote connections ............................................................................................................ 137 RunAutodiscover() ............................................................................................................... 142 Events for ISimulationRuntimeManager .............................................................................. 143 OnConfigurationChanged events......................................................................................... 144 OnRuntimeManagerLost events .......................................................................................... 147 OnAutodiscoverData events ................................................................................................ 150
API IInstances ...................................................................................................................... 151 Interfaces - Information and settings.................................................................................... 151 Controller - Information and settings.................................................................................... 157 Operating state..................................................................................................................... 166 Tag list.................................................................................................................................. 176 I/O access ............................................................................................................................ 182 Synchronizing inputs and outputs ........................................................................................ 182 I/O access via address - Reading ........................................................................................ 183 I/O access via address - Writing .......................................................................................... 191 I/O access via tag name - Reading...................................................................................... 199 I/O access via tag name - Writing ........................................................................................ 221 Settings for the virtual time .................................................................................................. 245 Cycle control ........................................................................................................................ 248 Acyclic services.................................................................................................................... 256 Overview .............................................................................................................................. 256 ReadRecordDone / WriteRecordDone ................................................................................ 258 AlarmNotification .................................................................................................................. 260 ProcessEvent ....................................................................................................................... 263 PullOrPlugEvent................................................................................................................... 265 StatusEvent .......................................................................................................................... 267 ProfileEvent .......................................................................................................................... 268 UpdateEvent ........................................................................................................................ 269 GetConfiguredProcessEvent ............................................................................................... 271 RackOrStationFaultEvent .................................................................................................... 272 Events for IInstances ........................................................................................................... 273 Events for operating state and cycle control ........................................................................ 273 Events for acyclic services ................................................................................................... 287
S7-PLCSIM Advanced
8
Function Manual, 11/2019, A5E37039512-AC
Table of contents
7.7 7.7.1 7.7.2 7.7.2.1 7.7.3 7.7.3.1
7.8 7.8.1 7.8.1.1 7.8.1.2 7.8.2 7.8.2.1 7.8.2.2 7.8.2.3 7.8.2.4 7.8.2.5 7.8.2.6 7.8.2.7 7.8.2.8 7.8.2.9 7.8.2.10 7.8.2.11 7.8.2.12 7.8.2.13 7.8.2.14 7.8.2.15 7.8.2.16 7.8.3 7.8.3.1 7.8.3.2 7.8.3.3 7.8.3.4 7.8.3.5 7.8.3.6 7.8.3.7 7.8.3.8 7.8.3.9 7.8.3.10 7.8.3.11 7.8.3.12 7.8.3.13 7.8.3.14 7.8.3.15 7.8.3.16 7.8.4 7.8.5 7.8.5.1 7.8.5.2 7.8.6 7.8.6.1 7.8.6.2 7.8.6.3
API IRemoteRuntimeManager ..............................................................................................296 Interfaces - Information and settings ....................................................................................296 Simulation Runtime instances ..............................................................................................300 Simulation Runtime instances (remote)................................................................................300 Events for IRemoteRuntimeManager ...................................................................................308 OnConnectionLost events ....................................................................................................308
Data types .............................................................................................................................311 DLL import functions (Native C++) .......................................................................................312 ApiEntry_Initialize .................................................................................................................. 312 ApiEntry_DestroyInterface ....................................................................................................312 Event callback functions (Native C++)..................................................................................313 EventCallback_VOID ............................................................................................................313 EventCallback_SRCC_UINT32_UINT32_INT32 ................................................................... 313 EventCallback_SRRSI_AD ...................................................................................................314 EventCallback_IRRTM ..........................................................................................................314 EventCallback_II_SREC_ST_SROS_SROS ......................................................................... 315 EventCallback_II_SREC_ST_UINT32_INT64_INT64_UINT32 .............................................316 EventCallback_II_SREC_ST .................................................................................................317 EventCallback_II_SREC_ST_SRICC_UINT32_UINT32_UINT32_UINT32...........................318 EventCallback_II_SREC_ST_SRLT_SRLM ..........................................................................319 EventCallback_II_SREC_ST_SDRI ......................................................................................320 EventCallback_II_SREC_ST_SDRI_BYTE ...........................................................................321 EventCallback_II_SREC_ST_UINT32_UINT32 ....................................................................322 EventCallback_II_SREC_ST_UINT32_UINT32_EPET_UINT32...........................................323 EventCallback_II_SREC_ST_UINT32_EPPET_UINT32 ....................................................... 324 EventCallback_II_SREC_ST_UINT32_ERSFET ..................................................................325 EventCallback_II_SREC_ST_UINT32 ................................................................................... 326 Delegate definitions (managed code) ...................................................................................327 Delegate_Void ....................................................................................................................... 327 Delegate_SRCC_UINT32_UINT32_INT32 ...........................................................................327 Delegate_SRRSI_AD ............................................................................................................328 Delegate_II_EREC_DT .........................................................................................................328 Delegate_II_EREC_DT_EOS_EOS ......................................................................................329 Delegate_II_EREC_DT_ELT_ELM ........................................................................................ 330 Delegate_II_EREC_DT_UINT32_INT64_INT64_UINT32 .....................................................331 Delegate_IRRTM ..................................................................................................................332 Delegate_II_EREC_DT_SRICC_UINT32_UINT32_UINT32_UINT32 ...................................332 Delegate_II_EREC_DT_SDRI ...............................................................................................333 Delegate_II_EREC_DT_SDR ................................................................................................334 Delegate_SREC_ST_UINT32_EPPET_UINT32 ...................................................................335 Delegate_SREC_ST_UINT32_UINT32_EPET_UINT32 .......................................................336 Delegate_SREC_ST_UINT32 ...............................................................................................337 Delegate_SREC_ST_UINT32_UINT32 .................................................................................338 Delegate_SREC_ST_UINT32_ERSFET ...............................................................................339 Definitions and constants......................................................................................................340 Unions (Native C++) .............................................................................................................341 UIP ........................................................................................................................................341 UDataValue ........................................................................................................................... 342 Structures .............................................................................................................................. 343 SDataValue ...........................................................................................................................344 SDVBNI ................................................................................................................................. 346 SDataValueByAddress .........................................................................................................347
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
9
Table of contents
7.8.6.4 7.8.6.5 7.8.6.6 7.8.6.7 7.8.6.8 7.8.6.9 7.8.6.10 7.8.6.11 7.8.6.12 7.8.6.13 7.8.6.14 7.8.6.15 7.8.6.16 7.8.6.17 7.8.6.18 7.8.7 7.8.7.1 7.8.7.2 7.8.7.3 7.8.7.4 7.8.7.5 7.8.7.6 7.8.7.7 7.8.7.8 7.8.7.9 7.8.7.10 7.8.7.11 7.8.7.12 7.8.7.13 7.8.7.14 7.8.7.15 7.8.7.16 7.8.7.17 7.8.7.18 7.8.7.19 7.8.7.20 7.8.7.21
SDataValueByAddressWithCheck ....................................................................................... 347 SDataValueByName ............................................................................................................ 348 SDataValueByNameWithCheck........................................................................................... 348 SConnectionInfo................................................................................................................... 349 SInstanceInfo ....................................................................................................................... 349 SDimension.......................................................................................................................... 350 STagInfo............................................................................................................................... 351 SIP ....................................................................................................................................... 353 SIPSuite4 ............................................................................................................................. 353 SOnSyncPointReachedResult ............................................................................................. 355 SDataRecordInfo.................................................................................................................. 357 SDataRecord........................................................................................................................ 358 SConfiguredProcessEvents ................................................................................................. 358 SDiagExtChannelDescription............................................................................................... 360 SAutodiscoverData .............................................................................................................. 362 Enumerations ....................................................................................................................... 362 ERuntimeErrorCode............................................................................................................. 364 EArea ................................................................................................................................... 369 EOperatingState................................................................................................................... 369 EOperatingMode .................................................................................................................. 370 ECPUType ........................................................................................................................... 371 ECommunicationInterface.................................................................................................... 373 ELEDType ............................................................................................................................ 373 ELEDMode ........................................................................................................................... 374 EPrimitiveDataType ............................................................................................................. 375 EDataType ........................................................................................................................... 377 ETagListDetails .................................................................................................................... 382 ERuntimeConfigChanged .................................................................................................... 383 EInstanceConfigChanged .................................................................................................... 383 EPullOrPlugEventType ........................................................................................................ 384 EProcessEventType ............................................................................................................ 384 EDirection............................................................................................................................. 385 EDiagProperty...................................................................................................................... 385 EDiagSeverity ...................................................................................................................... 386 ERackOrStationFaultType ................................................................................................... 387 ECycleTimeMonitoringMode................................................................................................ 387 EAutodiscoverType .............................................................................................................. 388
8 Restrictions, messages and solution ....................................................................................................389
8.1
Overview .............................................................................................................................. 389
8.2
Restrictions with fail-safe CPUs........................................................................................... 389
8.3
OPC UA server .................................................................................................................... 390
8.4
Web server ........................................................................................................................... 392
8.5
Backing up and restoring the configuration of a PLCSIM Advanced instance .................... 393
8.6
Restrictions for file paths...................................................................................................... 393
8.7
Restrictions for communications services............................................................................ 394
8.8
Restrictions for instructions .................................................................................................. 394
8.9
Restrictions to local communication via Softbus.................................................................. 395
S7-PLCSIM Advanced
10
Function Manual, 11/2019, A5E37039512-AC
Table of contents
8.10
Messages for communication via TCP/IP.............................................................................396
8.11
Restrictions of security with VMware vSphere Hypervisor (ESXi)........................................397
8.12
Monitoring overflow...............................................................................................................398
8.13
Deviating I/O values in the STEP 7 user program................................................................398
8.14
Multiple simulations and possible collision of IP addresses .................................................399
8.15
Lacking access to an IP address ..........................................................................................399
8.16
Simulation in standby mode..................................................................................................399
A List of abbreviations ............................................................................................................................ 400
Tables
Table 1- 1 Table 2- 1 Table 2- 2 Table 3- 1 Table 4- 1 Table 5- 1 Table 5- 2 Table 5- 3 Table 5- 4 Table 6- 1 Table 6- 2 Table 7- 1 Table 7- 2 Table 7- 3 Table 7- 4 Table 7- 5 Table 7- 6 Table 7- 7 Table 7- 8 Table 7- 9 Table 7- 10 Table 7- 11 Table 7- 12 Table 7- 13 Table 7- 14
Comparison of S7-PLCSIM products...........................................................................................30 Compatibility with CPU firmware versions ...................................................................................33 Supported CPUs .......................................................................................................................... 36 System requirements ................................................................................................................... 41 Local and distributed communication ..........................................................................................54 Assignment of the Ethernet interfaces, for example, for a CPU 1518-4 PN/DP..........................74 Supported communication options...............................................................................................76 ODK: Output parameter - Load functions ....................................................................................83 ODK: Output parameter - Call functions ......................................................................................84 Cycle-controlled operating modes (SingleStep) ..........................................................................92 Time-controlled operating modes (TimespanSynchronized) .......................................................94 Components of the Simulation Runtime ......................................................................................96 Overview of initializing and shutting down API - Native C++.....................................................100 Overview of global functions - Native C++.................................................................................101 Overview of API ISimulationRuntimeManager functions - Native C++......................................101 Overview of API ISimulationRuntimeManager events - Native C++..........................................102 Overview of IInstances functions - Native C++..........................................................................102 Overview of IInstances events - Native C++..............................................................................103 Overview of IRemoteRuntimeManager functions - Native C++.................................................104 Overview of IRemoteRuntimeManager events - Native C++.....................................................104 Overview of initializing and shutting down API - .NET (C#).......................................................105 Overview of ISimulationRuntimeManager functions - .NET (C#) ..............................................105 Overview of ISimulationRuntimeManager events - .NET (C#) ..................................................105 Overview of IInstances functions - .NET (C#)............................................................................106 Overview of IInstances events - .NET (C#) ...............................................................................107
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
11
Table of contents
Table 7- 15 Table 7- 16 Table 7- 17 Table 7- 18 Table 7- 19 Table 7- 20 Table 7- 21 Table 7- 22 Table 7- 23 Table 7- 24 Table 7- 25 Table 7- 26 Table 7- 27 Table 7- 28 Table 7- 29 Table 7- 30 Table 7- 31 Table 7- 32 Table 7- 33 Table 7- 34 Table 7- 35 Table 7- 36 Table 7- 37 Table 7- 38 Table 7- 39 Table 7- 40 Table 7- 41 Table 7- 42 Table 7- 43 Table 7- 44 Table 7- 45 Table 7- 46 Table 7- 47 Table 7- 48 Table 7- 49 Table 7- 50
Overview of IRemoteRuntimeManager functions - .NET (C#)...................................................108 Overview IRemoteRuntimeManager events - .NET (C#)...........................................................108 Overview of data types - Native C++ .........................................................................................108 Overview of data types - .NET (C#) ...........................................................................................110 InitializeApi() - Native C++ .........................................................................................................112 RuntimeApiEntry_Initialize - Native C++ ....................................................................................114 Initialize - .NET (C#) ...................................................................................................................116 DestroyInterface() - Native C++ .................................................................................................118 RuntimeApiEntry_DestroyInterface() - Native C++ ....................................................................119 FreeApi() - Native C++ ...............................................................................................................120 ShutdownAndFreeApi() - Native C++ ........................................................................................121 GetNameOfAreaSection() - Native C++.....................................................................................122 GetNameOfCPUType() - Native C++.........................................................................................122 GetNameOfCommunicationInterface() - Native C++ .................................................................123 GetNameOfDataType() - Native C++.........................................................................................123 GetNameOfErrorCode() - Native C++........................................................................................123 GetNameOfLEDMode() - Native C++ ........................................................................................123 GetNameOfLEDType() - Native C++ .........................................................................................123 GetNameOfOperatingMode() - Native C++ ...............................................................................124 GetNameOfErrorCode() - Native C++........................................................................................124 GetNameOfOperatingState() - Native C++ ................................................................................124 GetNameOfPrimitiveDataType() - Native C++...........................................................................124 GetNameOfTagListDetails() - Native C++ .................................................................................124 GetNameOfRuntimeConfigChanged() - Native C++..................................................................125 GetNameOfInstanceConfigChanged() - Native C++ .................................................................125 GetNameOfDirection() - Native C++ ..........................................................................................125 GetNameOfDiagSeverity() - Native C++....................................................................................125 GetNameOfRackOrStationFaultType() - Native C++.................................................................125 GetNameOfProcessEventType() - Native C++ ..........................................................................126 GetNameOfPullOrPlugEventType() - Native C++......................................................................126 GetNameOfCycleTimeMonitoringMode() - Native C++ .............................................................126 GetNameOfDiagProperty() - Native C++ ...................................................................................126 GetNameOfAutodiscoverType() - Native C++ ...........................................................................126 GetVersion() - Native C++..........................................................................................................127 Version { get; } - .NET (C#) ........................................................................................................127 IsInitialized() - Native C++..........................................................................................................128
S7-PLCSIM Advanced
12
Function Manual, 11/2019, A5E37039512-AC
Table of contents
Table 7- 51 Table 7- 52 Table 7- 53 Table 7- 54 Table 7- 55 Table 7- 56 Table 7- 57 Table 7- 58 Table 7- 59 Table 7- 60 Table 7- 61 Table 7- 62 Table 7- 63 Table 7- 64 Table 7- 65 Table 7- 66 Table 7- 67 Table 7- 68 Table 7- 69 Table 7- 70 Table 7- 71 Table 7- 72 Table 7- 73 Table 7- 74 Table 7- 75 Table 7- 76 Table 7- 77 Table 7- 78 Table 7- 79 Table 7- 80 Table 7- 81 Table 7- 82 Table 7- 83 Table 7- 84 Table 7- 85 Table 7- 86
IsInitialized { get; } - .NET (C#) ..................................................................................................128 IsRuntimeManagerAvailable() - Native C++ ..............................................................................128 IsRuntimeManagerAvailable { get; } - .NET (C#) .......................................................................128 Shutdown() - Native C++ ........................................................................................................... 129 Shutdown() - .NET (C#) ............................................................................................................. 129 GetRegisteredInstancesCount() - Native C++ ...........................................................................129 GetRegisteredInstanceInfoAt() - Native C++ .............................................................................130 RegisteredInstanceInfo { get; } - .NET (C#) ...............................................................................130 RegisterInstance() - Native C++ ................................................................................................ 131 RegisterInstance() - .NET (C#) ..................................................................................................132 RegisterCustomInstance() - Native C++ ....................................................................................133 RegisterCustomInstance() - .NET (C#)......................................................................................134 CreateInterface() - Native C++...................................................................................................135 CreateInterface() - .NET (C#) ....................................................................................................136 OpenPort() - Native C++ ............................................................................................................137 OpenPort() - .NET (C#) .............................................................................................................. 137 ClosePort() - Native C++............................................................................................................138 ClosePort() - .NET (C#) ............................................................................................................. 138 GetPort() - Native C++ ............................................................................................................... 138 Port { get; } - .NET (C#)..............................................................................................................138 GetRemoteConnectionsCount() - Native C++ ...........................................................................139 GetRemoteConnectionInfoAt()- Native C++ ..............................................................................139 RemoteConnectionInfo { get; } - .NET (C#) ...............................................................................139 RemoteConnect() - Native C++ ................................................................................................. 140 RemoteConnect() - .NET (C#) ...................................................................................................141 RunAutodiscover() - Native C++ ................................................................................................ 142 RunAutodiscover() - .NET (C#)..................................................................................................143 Events for ISimulationRuntimeManager ....................................................................................143 OnConfigurationChanged - .NET (C#).......................................................................................144 RegisterOnConfigurationChangedCallback() - Native C++ .......................................................144 RegisterOnConfigurationChangedEvent() - Native C++............................................................145 RegisterOnConfigurationChangedEvent() - .NET (C#)..............................................................145 UnregisterOnConfigurationChangedCallback() - Native C++ ....................................................145 UnregisterOnConfigurationChangedEvent() - Native C++ ........................................................146 UnregisterOnConfigurationChangedEvent() - .NET (C#) ..........................................................146 WaitForOnConfigurationChangedEvent() - Native C++.............................................................146
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
13
Table of contents
Table 7- 87 Table 7- 88 Table 7- 89 Table 7- 90 Table 7- 91 Table 7- 92 Table 7- 93 Table 7- 94 Table 7- 95 Table 7- 96 Table 7- 97 Table 7- 98 Table 7- 99 Table 7- 100 Table 7- 101 Table 7- 102 Table 7- 103 Table 7- 104 Table 7- 105 Table 7- 106 Table 7- 107 Table 7- 108 Table 7- 109 Table 7- 110 Table 7- 111 Table 7- 112 Table 7- 113 Table 7- 114 Table 7- 115 Table 7- 116 Table 7- 117 Table 7- 118 Table 7- 119 Table 7- 120 Table 7- 121 Table 7- 122
WaitForOnConfigurationChangedEvent - .NET (C#) .................................................................146 OnRuntimeManagerLost - .NET (C#) ........................................................................................147 RegisterOnRuntimeManagerLostCallback() - Native C++.........................................................147 RegisterOnRuntimeManagerLostEvent() - Native C++ .............................................................148 RegisterOnRuntimeManagerLostEvent() - .NET (C#) ...............................................................148 UnregisterOnRuntimeManagerLostCallback() - Native C++......................................................148 UnregisterOnRuntimeManagerLostEvent() - Native C++ ..........................................................149 UnregisterOnRuntimeManagerLostEvent() - .NET (C#) ............................................................149 WaitForOnRuntimeManagerLostEvent() - Native C++ ..............................................................149 WaitForOnRuntimeManagerLostEvent() - .NET (C#) ................................................................149 OnAutodiscoverData - .NET (C#) ..............................................................................................150 RegisterOnAutodiscoverCallback() - Native C++ ......................................................................150 UnregisterOnAutodiscoverCallback() - Native C++ ...................................................................150 Dispose() - .NET (C#) ................................................................................................................151 GetID() - Native C++ ..................................................................................................................151 ID { get; } - .NET (C#).................................................................................................................151 GetName() - Native C++ ............................................................................................................152 Name { get; } - .NET (C#)...........................................................................................................152 GetCPUType() - Native C++ ......................................................................................................153 SetCPUType() - Native C++.......................................................................................................153 CPUType { get; set; } - .NET (C#) ..............................................................................................153 GetCommunicationInterface() - Native C++...............................................................................154 SetCommunicationInterface() - Native C++ ...............................................................................154 CommunicationInterface { get; set; } - .NET (C#) ......................................................................155 GetInfo() - Native C++................................................................................................................155 Info { get; } - .NET (C#) ..............................................................................................................155 UnregisterInstance() - Native C++ .............................................................................................156 UnregisterInstance() - .NET (C#) ...............................................................................................156 GetControllerName() - Native C++ ............................................................................................157 ControllerName { get; } - .NET (C#) ...........................................................................................157 GetControllerShortDesignation() - Native C++ ..........................................................................158 ControllerShortDesignation { get; } - .NET (C#) .........................................................................158 GetControllerIPCount() - Native C++ .........................................................................................158 GetControllerIP() - Native C++...................................................................................................159 ControllerIP { get; } - .NET (C#) .................................................................................................159 GetControllerIPSuite4() Native C++...........................................................................................159
S7-PLCSIM Advanced
14
Function Manual, 11/2019, A5E37039512-AC
Table of contents
Table 7- 123 Table 7- 124 Table 7- 125 Table 7- 126 Table 7- 127 Table 7- 128 Table 7- 129 Table 7- 130 Table 7- 131 Table 7- 132 Table 7- 133 Table 7- 134 Table 7- 135 Table 7- 136 Table 7- 137 Table 7- 138 Table 7- 139 Table 7- 140 Table 7- 141 Table 7- 142 Table 7- 143 Table 7- 144 Table 7- 145 Table 7- 146 Table 7- 147 Table 7- 148 Table 7- 149 Table 7- 150 Table 7- 151 Table 7- 152 Table 7- 153 Table 7- 154 Table 7- 155 Table 7- 156 Table 7- 157 Table 7- 158
ControllerIPSuite4 { get; } - .NET (#) ......................................................................................... 159 SetIPSuite() - Native C++ .......................................................................................................... 160 SetIPSuite() - .NET (C#) ............................................................................................................ 160 GetStoragePath() - Native C++..................................................................................................161 SetStoragePath() - Native C++ ..................................................................................................162 StoragePath { get; set; } - .NET (C#) .........................................................................................162 ArchiveStorage() - Native C++...................................................................................................163 ArchiveStorage() - .NET (C#).....................................................................................................163 RetrieveStorage() - Native C++ .................................................................................................164 RetrieveStorage() - .NET (C#) ...................................................................................................164 CleanupStoragePath() - Native C++ ..........................................................................................165 CleanupStoragePath() - .NET (C#)............................................................................................165 PowerOn() - Native C++ ............................................................................................................ 166 PowerOn() - .NET (C#) .............................................................................................................. 168 PowerOff() - Native C++ ............................................................................................................ 170 PowerOff() - .NET (C#) .............................................................................................................. 170 Run() - Native C++ ..................................................................................................................... 171 Run() - .NET (C#).......................................................................................................................171 Stop() - Native C++ .................................................................................................................... 172 Stop() - .NET (C#) ...................................................................................................................... 172 GetOperatingState() - Native C++ .............................................................................................173 OperatingState { get; } - .NET (C#) ............................................................................................174 MemoryReset() - Native C++ ..................................................................................................... 175 MemoryReset() - .NET (C#).......................................................................................................175 UpdateTagList() - Native C++ ....................................................................................................177 UpdateTagList() - .NET (C#)......................................................................................................178 GetTagListStatus() - Native C++................................................................................................ 179 GetTagListStatus() - .NET (C#) .................................................................................................179 GetTagInfoCount() - Native C++................................................................................................180 GetTagInfos() - Native C++........................................................................................................180 TagInfos { get; } - .NET (C#) ......................................................................................................181 CreateConfigurationFile() - Native C++ .....................................................................................181 CreateConfigurationFile() - .NET (C#) .......................................................................................181 InputArea { get; } MarkerArea { get; } OutputArea { get; } - .NET (C#) ......................................183 GetAreaSize() - Native C++ .......................................................................................................183 AreaSize { get; } - .NET (C#)......................................................................................................183
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
15
Table of contents
Table 7- 159 Table 7- 160 Table 7- 161 Table 7- 162 Table 7- 163 Table 7- 164 Table 7- 165 Table 7- 166 Table 7- 167 Table 7- 168 Table 7- 169 Table 7- 170 Table 7- 171 Table 7- 172 Table 7- 173 Table 7- 174 Table 7- 175 Table 7- 176 Table 7- 177 Table 7- 178 Table 7- 179 Table 7- 180 Table 7- 181 Table 7- 182 Table 7- 183 Table 7- 184 Table 7- 185 Table 7- 186 Table 7- 187 Table 7- 188 Table 7- 189 Table 7- 190 Table 7- 191 Table 7- 192 Table 7- 193 Table 7- 194
ReadBit() - Native C++...............................................................................................................184 ReadBit() - .NET (C#).................................................................................................................185 ReadByte() - Native C++............................................................................................................186 ReadByte() - .NET (C#)..............................................................................................................186 ReadByte() - Native C++............................................................................................................187 ReadBytes() - .NET (C#)............................................................................................................188 ReadSignals() - Native C++ .......................................................................................................189 ReadSignals() - .NET (C#) .........................................................................................................190 WriteBit() - Native C++ ...............................................................................................................191 WriteBit() - .NET (C#).................................................................................................................192 WriteByte() - Native C++ ............................................................................................................193 WriteByte() - .NET (C#)..............................................................................................................194 WriteBytes() - Native C++ ..........................................................................................................195 WriteBytes() - .NET (C#) ............................................................................................................196 WriteSignals() - Native C++ .......................................................................................................197 WriteSignals() - .NET (C#) .........................................................................................................198 Read() - Native C++ ...................................................................................................................199 Read() - .NET (C#) .....................................................................................................................200 ReadBool() - Native C++............................................................................................................201 ReadBool() - .NET (C#)..............................................................................................................201 ReadInt8() - Native C++ .............................................................................................................202 ReadInt8() - .NET (C#)...............................................................................................................203 ReadInt16() - Native C++ ...........................................................................................................203 ReadInt16() - .NET (C#).............................................................................................................204 ReadInt32() - Native C++ ...........................................................................................................205 ReadInt32() - .NET (C#).............................................................................................................205 ReadInt64() - Native C++ ...........................................................................................................206 ReadInt64() - .NET (C#).............................................................................................................207 ReadUInt8() - Native C++ ..........................................................................................................208 ReadUInt8() - .NET (C#) ............................................................................................................208 ReadUInt16() - Native C++ ........................................................................................................209 ReadUInt16() - .NET (C#) ..........................................................................................................210 ReadUInt32() - Native C++ ........................................................................................................210 ReadUInt32() - .NET (C#) ..........................................................................................................211 ReadInt64() - Native C++ ...........................................................................................................212 ReadUInt64() - .NET (C#) ..........................................................................................................212
S7-PLCSIM Advanced
16
Function Manual, 11/2019, A5E37039512-AC
Table of contents
Table 7- 195 Table 7- 196 Table 7- 197 Table 7- 198 Table 7- 199 Table 7- 200 Table 7- 201 Table 7- 202 Table 7- 203 Table 7- 204 Table 7- 205 Table 7- 206 Table 7- 207 Table 7- 208 Table 7- 209 Table 7- 210 Table 7- 211 Table 7- 212 Table 7- 213 Table 7- 214 Table 7- 215 Table 7- 216 Table 7- 217 Table 7- 218 Table 7- 219 Table 7- 220 Table 7- 221 Table 7- 222 Table 7- 223 Table 7- 224 Table 7- 225 Table 7- 226 Table 7- 227 Table 7- 228 Table 7- 229 Table 7- 230
ReadFloat() - Native C++...........................................................................................................213 ReadFloat() - .NET (C#).............................................................................................................214 ReadDouble() - Native C++ .......................................................................................................215 ReadDouble() - .NET (C#) ......................................................................................................... 215 ReadChar() - Native C++ ........................................................................................................... 216 ReadChar() - .NET (C#) ............................................................................................................. 217 ReadWChar() - Native C++........................................................................................................218 ReadWChar() - .NET (C#) ......................................................................................................... 218 ReadSignals() - Native C++ ....................................................................................................... 219 ReadSignals() - .NET (C#) ......................................................................................................... 220 Write() - Native C++ ................................................................................................................... 222 Write() - .NET (C#) ..................................................................................................................... 223 WriteBool() - Native C++ ............................................................................................................ 224 WriteBool() - .NET (C#)..............................................................................................................224 WriteInt8() - Native C++ ............................................................................................................. 225 WriteInt8() - .NET (C#) ............................................................................................................... 226 WriteInt16() - Native C++ ........................................................................................................... 227 WriteInt16() - .NET (C#) ............................................................................................................. 227 WriteInt32() - Native C++ ........................................................................................................... 228 WriteInt32() - .NET (C#) ............................................................................................................. 229 WriteInt64() - Native C++ ........................................................................................................... 230 WriteInt64() - .NET (C#) ............................................................................................................. 230 WriteUInt8() - Native C++ .......................................................................................................... 231 WriteUInt8() - .NET (C#) ............................................................................................................ 232 WriteUInt16() - Native C++ ........................................................................................................ 233 WriteUInt16() - .NET (C#) .......................................................................................................... 233 WriteUInt32() - Native C++ ........................................................................................................ 234 WriteUInt32() - .NET (C#) .......................................................................................................... 235 WriteUInt64() - Native C++ ........................................................................................................ 236 WriteUInt64() - .NET (C#) .......................................................................................................... 236 WriteFloat() - Native C++ ...........................................................................................................237 WriteFloat() - .NET (C#) .............................................................................................................238 WriteDouble() - Native C++........................................................................................................239 WriteDouble() - .NET (C#) ......................................................................................................... 239 WriteChar() - Native C++ ........................................................................................................... 240 WriteChar() - .NET (C#) ............................................................................................................. 241
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
17
Table of contents
Table 7- 231 Table 7- 232 Table 7- 233 Table 7- 234 Table 7- 235 Table 7- 236 Table 7- 237 Table 7- 238 Table 7- 239 Table 7- 240 Table 7- 241 Table 7- 242 Table 7- 243 Table 7- 244 Table 7- 245 Table 7- 246 Table 7- 247 Table 7- 248 Table 7- 249 Table 7- 250 Table 7- 251 Table 7- 252 Table 7- 253 Table 7- 254 Table 7- 255 Table 7- 256 Table 7- 257 Table 7- 258 Table 7- 259 Table 7- 260 Table 7- 261 Table 7- 262 Table 7- 263 Table 7- 264 Table 7- 265 Table 7- 266
WriteWChar() - Native C++ ........................................................................................................242 WriteWChar() - .NET (C#)..........................................................................................................242 WriteSignals() - Native C++ .......................................................................................................243 WriteSignals() - .NET (C#) .........................................................................................................244 GetSystemTime() - Native C++..................................................................................................245 SetSystemTime() - Native C++ ..................................................................................................245 SystemTime { get; set; } - .NET (C#) .........................................................................................245 GetScaleFactor() - Native C++ ..................................................................................................246 SetScaleFactor() - Native C++ ...................................................................................................246 ScaleFactor { get; set; } - .NET (C#) ..........................................................................................247 GetOperatingMode() - Native C++.............................................................................................248 SetOperatingMode() - Native C++ .............................................................................................248 OperatingMode { get; set; } - .NET (C#).....................................................................................248 SetSendSyncEventInDefaultModeEnabled() - Native C++........................................................249 IsSendSyncEventInDefaultModeEnabled() - Native C++ ..........................................................249 IsSendSyncEventInDefaultModeEnabled { get; set; } - .NET (C#) ............................................249 GetOverwrittenMinimalCycleTime_ns() - Native C++ ................................................................250 SetOverwrittenMinimalCycleTime_ns() - Native C++ ................................................................250 OverwrittenMinimalCycleTime_ns { get; set; } - .NET (C#)........................................................251 RunToNextSyncPoint() - Native C++ .........................................................................................251 RunToNextSyncPoint() - .NET (C#) ...........................................................................................251 StartProcessing() - Native C++ ..................................................................................................252 StartProcessing() - .NET (C#) ....................................................................................................252 SetCycleTimeMonitoringMode() - Native C++ ...........................................................................253 SetCycleTimeMonitoringMode() - .NET (C#) .............................................................................254 GetCycleTimeMonitoringMode() - Native C++...........................................................................255 GetCycleTimeMonitoringMode() - .NET (C#).............................................................................255 Events: Read and write operations ............................................................................................256 API methods and associated events..........................................................................................257 ReadRecordDone() - Native C++...............................................................................................258 ReadRecordDone() - .NET (C#) ................................................................................................258 WriteRecordDone() - Native C++ ...............................................................................................259 WriteRecordDone() - .NET (C#).................................................................................................259 AlarmNotification() - Native C++ ................................................................................................260 AlarmNotification() - .NET (C#) ..................................................................................................262 ProcessEvent() - Native C++ .....................................................................................................263
S7-PLCSIM Advanced
18
Function Manual, 11/2019, A5E37039512-AC
Table of contents
Table 7- 267 Table 7- 268 Table 7- 269 Table 7- 270 Table 7- 271 Table 7- 272 Table 7- 273 Table 7- 274 Table 7- 275 Table 7- 276 Table 7- 277 Table 7- 278 Table 7- 279 Table 7- 280 Table 7- 281 Table 7- 282 Table 7- 283 Table 7- 284 Table 7- 285 Table 7- 286 Table 7- 287 Table 7- 288 Table 7- 289 Table 7- 290 Table 7- 291 Table 7- 292 Table 7- 293 Table 7- 294 Table 7- 295 Table 7- 296 Table 7- 297 Table 7- 298 Table 7- 299 Table 7- 300 Table 7- 301 Table 7- 302
ProcessEvent() - .NET (C#) .......................................................................................................264 PullOrPlugEvent() - Native C++ .................................................................................................265 PullOrPlugEvent() - .NET (C#)...................................................................................................266 StatusEvent() - Native C++ ........................................................................................................ 267 StatusEvent() - .NET (C#) .......................................................................................................... 267 ProfileEvent() - Native C++ ........................................................................................................ 268 ProfileEvent() - .NET (C#) .......................................................................................................... 269 UpdateEvent() - Native C++.......................................................................................................269 UpdateEvent() - .NET (C#) ........................................................................................................ 270 GetConfiguredProcessEvents() - Native C++............................................................................271 GetConfiguredProcessEvents() - .NET (C#)..............................................................................271 RackOrStationFaultEvent() - Native C++...................................................................................272 RackOrStationFaultEvent() - .NET (C#) ....................................................................................272 Events for IInstances ................................................................................................................. 273 OnOperatingStateChanged - .NET (C#) ....................................................................................274 RegisterOnOperatingStateChangedCallback() - Native C++ ....................................................274 RegisterOnOperatingStateChangedEvent() - Native C++ .........................................................274 UnregisterOnOperatingStateChangedCallback() - Native C++ .................................................276 UnregisterOnOperatingStateChangedEvent() - Native C++......................................................276 UnregisterOnOperatingStateChangedEvent() - .NET (C#) .......................................................276 WaitForOnOperatingStateChangedEvent() - Native C++..........................................................276 WaitForOnOperatingStateChangedEvent() - .NET (C#)............................................................277 OnLedChanged - .NET (C#) ......................................................................................................277 RegisterOnLedChangedCallback() - Native C++.......................................................................277 RegisterOnLedChangedEvent() - Native C++ ...........................................................................278 UnregisterOnLedChangedCallback() - Native C++ ...................................................................278 UnregisterOnLedChangedEvent() - Native C++ ........................................................................278 UnregisterOnLedChangedEvent() - .NET (C#)..........................................................................278 WaitForOnLedChangedEvent() - Native C++ ............................................................................279 WaitForOnLedChangedEvent() - .NET (C#) ..............................................................................279 OnConfigurationChanging - .NET (C#) ......................................................................................279 RegisterOnConfigurationChangingCallback() - Native C++ ......................................................280 RegisterOnConfigurationChangingEvent() - Native C++ ...........................................................280 UnregisterOnConfigurationChangingCallback() - Native C++ ...................................................280 UnregisterOnConfigurationChangingEvent() - Native C++........................................................281 UnregisterOnConfigurationChangingEvent() - .NET (C#)..........................................................281
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
19
Table of contents
Table 7- 303 Table 7- 304 Table 7- 305 Table 7- 306 Table 7- 307 Table 7- 308 Table 7- 309 Table 7- 310 Table 7- 311 Table 7- 312 Table 7- 313 Table 7- 314 Table 7- 315 Table 7- 316 Table 7- 317 Table 7- 318 Table 7- 319 Table 7- 320 Table 7- 321 Table 7- 322 Table 7- 323 Table 7- 324 Table 7- 325 Table 7- 326 Table 7- 327 Table 7- 328 Table 7- 329 Table 7- 330 Table 7- 331 Table 7- 332 Table 7- 333 Table 7- 334 Table 7- 335 Table 7- 336 Table 7- 337 Table 7- 338
WaitForOnConfigurationChangingEvent() - Native C++............................................................281 WaitForOnConfigurationChangingEvent() - .NET (C#)..............................................................281 OnConfigurationChanged - .NET (C#) .......................................................................................282 RegisterOnConfigurationChangedCallback() - Native C++ .......................................................282 RegisterOnConfigurationChangedEvent() - Native C++............................................................283 UnregisterOnConfigurationChangedCallback() - Native C++ ....................................................283 UnregisterOnConfigurationChangedEvent() - Native C++.........................................................283 UnregisterOnConfigurationChangedEvent() - .NET (C#) ..........................................................283 WaitForOnConfigurationChangedEvent() - Native C++.............................................................284 WaitForOnConfigurationChangedEvent() - .NET (C#) ..............................................................284 OnSyncPointReached - .NET (C#) ............................................................................................284 RegisterOnSyncPointReachedCallback() - Native C++.............................................................285 RegisterOnSyncPointReachedEvent() - Native C++ .................................................................285 UnregisterOnSyncPointReachedCallback() - Native C++ .........................................................285 UnregisterOnSyncPointReachedEvent() - Native C++ ..............................................................286 UnregisterOnSyncPointReachedEvent() - .NET (C#) ................................................................286 WaitForOnSyncPointReachedEvent() - Native C++ ..................................................................286 WaitForOnSyncPointReachedEvent() - .NET (C#) ....................................................................287 OnDataRecordRead - .NET (C#) ...............................................................................................287 OnDataRecordWrite - .NET (C#) ...............................................................................................287 RegisterOnDataRecordReadCallback() - Native C++ ...............................................................288 UnregisterOnDataRecordReadCallback() - Native C++ ............................................................288 RegisterOnDataRecordWriteCallback() - Native C++................................................................288 UnregisterOnDataRecordWriteCallback() - Native C++ ............................................................289 OnAlarmNotificationDone() - .NET (C#).....................................................................................289 RegisterOnAlarmNotificationDoneCallback() - Native C++ .......................................................289 UnregisterOnAlarmNotificationDoneCallback() - Native C++ ....................................................290 OnProcessEventDone() - .NET (C#)..........................................................................................290 RegisterOnProcessEventDoneCallback() - Native C++ ............................................................290 UnregisterOnProcessEventDoneCallback() - Native C++ .........................................................291 OnPullOrPlugEventDone() - .NET (C#) .....................................................................................291 RegisterOnPullOrPlugEventDoneCallback() - Native C++ ........................................................291 UnregisterOnPullOrPlugEventDoneCallback() - Native C++ .....................................................292 OnStatusEventDone() - .NET (C#) ............................................................................................292 RegisterOnStatusEventDoneCallback() - Native C++ ...............................................................292 UnregisterOnStatusEventDoneCallback() - Native C++ ............................................................293
S7-PLCSIM Advanced
20
Function Manual, 11/2019, A5E37039512-AC
Table of contents
Table 7- 339 Table 7- 340 Table 7- 341 Table 7- 342 Table 7- 343 Table 7- 344 Table 7- 345 Table 7- 346 Table 7- 347 Table 7- 348 Table 7- 349 Table 7- 350 Table 7- 351 Table 7- 352 Table 7- 353 Table 7- 354 Table 7- 355 Table 7- 356 Table 7- 357 Table 7- 358 Table 7- 359 Table 7- 360 Table 7- 361 Table 7- 362 Table 7- 363 Table 7- 364 Table 7- 365 Table 7- 366 Table 7- 367 Table 7- 368 Table 7- 369 Table 7- 370 Table 7- 371 Table 7- 372 Table 7- 373 Table 7- 374
OnProfileEventDone() - .NET (C#) ............................................................................................293 RegisterOnProfileEventDoneCallback() - Native C++ ...............................................................293 UnregisterOnProfileEventDoneCallback() - Native C++ ............................................................294 OnUpdateEventDone() - .NET (C#) ...........................................................................................294 RegisterOnUpdateEventDoneCallback() - Native C++..............................................................294 UnregisterOnUpdateEventDoneCallback() - Native C++ ..........................................................295 OnRackOrStationFaultEvent - .NET (C#) ..................................................................................295 RegisterOnRackOrStationFaultEventCallback() - Native C++ ..................................................295 UnregisterOnRackOrStationFaultEventCallback() - Native C++ ...............................................296 Dispose() - .NET (C#) ................................................................................................................ 296 GetVersion() - Native C++ ......................................................................................................... 297 Version { get; } - .NET (C#) ........................................................................................................ 297 GetIP() - Native C++ .................................................................................................................. 297 IP { get; } - .NET (C#) ................................................................................................................. 297 GetPort() - Native C++ ............................................................................................................... 298 Port { get; } - .NET (C#)..............................................................................................................298 GetRemoteComputerName() - Native C++ ...............................................................................298 RemoteComputerName { get; } - .NET (C#) ..............................................................................298 Disconnect() - Native C++..........................................................................................................299 Disconnect() - .NET (C#) ........................................................................................................... 299 GetRegisteredInstancesCount() - Native C++ ........................................................................... 300 GetRegisteredInstanceInfoAt() - Native C++ .............................................................................300 RegisterInstanceInfo { get; } - .NET (C#) ...................................................................................301 RegisterInstance() - Native C++ ................................................................................................ 301 RegisterInstance() - .NET (C#) ..................................................................................................303 RegisterCustomInstance() - Native C++ ....................................................................................304 RegisterCustomInstance() - .NET (C#)......................................................................................305 CreateInterface() - Native C++...................................................................................................306 CreateInterface() - .NET (C#) ....................................................................................................307 OnConnectionLost - .NET (C#)..................................................................................................308 RegisterOnConnectionLostCallback() - Native C++ ..................................................................308 RegisterOnConnectionLostEvent() - Native C++.......................................................................309 RegisterOnConnectionLostEvent() - .NET (C#).........................................................................309 UnregisterOnConnectionLostCallback() - Native C++ ...............................................................309 UnregisterOnConnectionLostEvent() - Native C++....................................................................310 UnregisterOnConnectionLostEvent() - .NET (C#) .....................................................................310
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
21
Table of contents
Table 7- 375 Table 7- 376 Table 7- 377 Table 7- 378 Table 7- 379 Table 7- 380 Table 7- 381 Table 7- 382 Table 7- 383 Table 7- 384 Table 7- 385 Table 7- 386 Table 7- 387 Table 7- 388 Table 7- 389 Table 7- 390 Table 7- 391 Table 7- 392 Table 7- 393 Table 7- 394 Table 7- 395 Table 7- 396 Table 7- 397 Table 7- 398 Table 7- 399 Table 7- 400 Table 7- 401 Table 7- 402 Table 7- 403 Table 7- 404 Table 7- 405 Table 7- 406 Table 7- 407 Table 7- 408 Table 7- 409 Table 7- 410
WaitForOnConnectionLostEvent() - Native C++........................................................................310 WaitForOnConnectionLostEvent() - .NET (C#)..........................................................................310 ApiEntry_Initialize - Native C++ .................................................................................................312 ApiEntry_DestroyInterface - Native C++ ....................................................................................312 EventCallback_VOID - Native C++ ............................................................................................313 EventCallback_SRCC_UINT32_UINT32_INT32 - Native C++...................................................313 EventCallback_SRRSI_AD - Native C++ ...................................................................................314 EventCallback_IRRTM - Native C++..........................................................................................314 EventCallback_II_SREC_ST_SROS_SROS - Native C++.........................................................315 EventCallback_II_SREC_ST_UINT32_INT64_INT64_UINT32 - Native C++.............................316 EventCallback_II_SREC_ST - Native C++.................................................................................317 EventCallback_II_SREC_ST_SRICC_UINT32_UINT32_UINT32_UINT32 - Native C++...........318 EventCallback_II_SREC_ST_SRLT_SRLM - Native C++..........................................................319 EventCallback_II_SREC_ST_SDRI - Native C++ ......................................................................320 EventCallback_II_SREC_ST_SDRI_BYTE - Native C++ ...........................................................321 EventCallback_II_SREC_ST_UINT32_UINT32 - Native C++ ....................................................322 EventCallback_II_SREC_ST_UINT32_UINT32_EPET_UINT32 - Native C++...........................323 EventCallback_II_SREC_ST_UINT32_EPPET_UINT32 - Native C++.......................................324 EventCallback_II_SREC_ST_UINT32_ERSFET - Native C++ ..................................................325 EventCallback_II_SREC_ST_UINT32 - Native C++ ..................................................................326 Delegate_Void - .NET (C#) ........................................................................................................327 Delegate_SRCC_UINT32_UINT32_INT32 - .NET (C#) .............................................................327 Delegate_SRRSI_AD - .NET (C#)..............................................................................................328 Delegate_II_EREC_DT - .NET (C#) ...........................................................................................328 Delegate_II_EREC_DT_EOS_EOS - .NET (C#) ........................................................................329 Delegate_II_EREC_DT_ELT_ELM - .NET (C#) .........................................................................330 Delegate_II_EREC_DT_UINT32_INT64_INT64_UINT32 - .NET (C#) .......................................331 Delegate_IRRTM - .NET (C#) ....................................................................................................332 Delegate_II_EREC_DT_SRICC_UINT32_UINT32_UINT32_UINT32 - .NET (C#).....................332 Delegate_II_EREC_DT_SDRI - .NET (C#).................................................................................333 Delegate_II_EREC_DT_SDR - .NET (C#)..................................................................................334 Delegate_SREC_ST_UINT32_EPPET_UINT32 - .NET (C#).....................................................335 Delegate_SREC_ST_UINT32_UINT32_EPET_UINT32 - Native C++ .......................................336 Delegate_SREC_ST_UINT32 - .NET (C#).................................................................................337 Delegate_SREC_ST_UINT32_UINT32 - .NET (C#) ..................................................................338 Delegate_SREC_ST_UINT32_ERSFET - .NET (C#).................................................................339
S7-PLCSIM Advanced
22
Function Manual, 11/2019, A5E37039512-AC
Table of contents
Table 7- 411 Table 7- 412 Table 7- 413 Table 7- 414 Table 7- 415 Table 7- 416 Table 7- 417 Table 7- 418 Table 7- 419 Table 7- 420 Table 7- 421 Table 7- 422 Table 7- 423 Table 7- 424 Table 7- 425 Table 7- 426 Table 7- 427 Table 7- 428 Table 7- 429 Table 7- 430 Table 7- 431 Table 7- 432 Table 7- 433 Table 7- 434 Table 7- 435 Table 7- 436 Table 7- 437 Table 7- 438 Table 7- 439 Table 7- 440 Table 7- 441 Table 7- 442 Table 7- 443 Table 7- 444 Table 7- 445 Table 7- 446
Definitions - Native C++ ............................................................................................................. 340 Constants - .NET (C#) ............................................................................................................... 340 UIP - Native C++ ........................................................................................................................ 341 UDataValue - Native C++ .......................................................................................................... 342 SDataValue - Native C++...........................................................................................................344 SDataValue - .NET (C#) ............................................................................................................ 345 SDVBNI - Native C++ ................................................................................................................ 346 SDVBNI - .NET (C#) .................................................................................................................. 347 SDataValueByAddress - Native C++ .........................................................................................347 SDataValueByAddress - .NET (C#) ...........................................................................................347 SDataValueByAddressWithCheck - Native C++........................................................................347 SDataValueByAddressWithCheck - .NET (C#) .........................................................................348 SDataValueByName - Native C++.............................................................................................348 SDataValueByName - .NET (C#)...............................................................................................348 SDataValueByNameWithCheck - Native C++ ...........................................................................348 SDataValueByNameWithCheck - .NET (C#) .............................................................................349 SConnectionInfo - Native C++ ...................................................................................................349 SConnectionInfo - .NET (C#) .....................................................................................................349 SInstanceInfo - Native C++........................................................................................................349 SInstanceInfo - .NET (C#)..........................................................................................................350 SDimension - Native C++ ..........................................................................................................350 SDimension - .NET (C#) ............................................................................................................350 STagInfo - Native C++ ............................................................................................................... 351 STagInfo - .NET (C#) ................................................................................................................. 352 SIP - .NET (C#) .......................................................................................................................... 353 SIPSuite4 - Native C++ .............................................................................................................. 353 SIPSuite4 - .NET (C#)................................................................................................................354 SOnSyncPointReachedResult - Native C++..............................................................................355 SOnSyncPointReachedResult - .NET (C#) ...............................................................................356 SDataRecordInfo - Native C++ .................................................................................................. 357 SDataRecordInfo - .NET (C#) ....................................................................................................357 SDataRecord - .NET (C#) .......................................................................................................... 358 SConfiguredProcessEvents - Native C++..................................................................................358 SConfiguredProcessEvents - .NET (C#) ...................................................................................359 SDiagExtChannelDescription - Native C++ ...............................................................................360 SDiagExtChannelDescription - .NET (C#) .................................................................................361
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
23
Table of contents
Table 7- 447 Table 7- 448 Table 7- 449 Table 7- 450 Table 7- 451 Table 7- 452 Table 7- 453 Table 7- 454 Table 7- 455 Table 7- 456 Table 7- 457 Table 7- 458 Table 7- 459 Table 7- 460 Table 7- 461 Table 7- 462 Table 7- 463 Table 7- 464 Table 7- 465 Table 7- 466 Table 7- 467 Table 7- 468 Table 7- 469 Table 7- 470 Table 7- 471 Table 7- 472 Table 7- 473 Table 7- 474 Table 7- 475 Table 7- 476 Table 7- 477 Table 7- 478 Table 7- 479 Table 7- 480 Table 7- 481 Table 7- 482
Error types according to PROFINET standard...........................................................................361 ExtChannelErrType error types..................................................................................................362 SAutodiscoverData - Native C++ ...............................................................................................362 SAutodiscoverData - .NET (C#) .................................................................................................362 ERuntimeErrorCode - Native C++ .............................................................................................364 ERuntimeErrorCode - .NET (C#) ...............................................................................................367 EArea - Native C++ ....................................................................................................................369 EArea - .NET (C#) ......................................................................................................................369 EOperatingState - Native C++ ...................................................................................................369 EOperatingState - .NET (C#) .....................................................................................................370 EOperatingMode - Native C++...................................................................................................370 EOperatingMode - .NET (C#).....................................................................................................370 ECPUType - Native C++ ............................................................................................................371 ECPUType - .NET (C#)..............................................................................................................372 ECommunicationInterface - Native C++ ....................................................................................373 ECommunicationInterface - .NET (C#) ......................................................................................373 ELEDType - Native C++.............................................................................................................373 ELEDType - .NET (C#) ..............................................................................................................374 ELEDMode - Native C++............................................................................................................374 ELEDMode - .NET (C#) .............................................................................................................374 EPrimitiveDataType - Native C++ ..............................................................................................375 EPrimitiveDataType - .NET (C#) ................................................................................................375 Compatible primitive data types - Reading ................................................................................375 Compatible primitive data types - Write .....................................................................................376 EDataType - Native C++ ............................................................................................................377 EDataType - .NET (C#)..............................................................................................................380 ETagListDetails - Native C++.....................................................................................................382 ETagListDetails - .NET (C#).......................................................................................................382 ERuntimeConfigChanged - Native C++ .....................................................................................383 ERuntimeConfigChanged - .NET (C#) .......................................................................................383 EInstanceConfigChanged - Native C++.....................................................................................383 EInstanceConfigChanged - .NET (C#).......................................................................................383 EPullOrPlugEventType - Native C++ .........................................................................................384 EPullOrPlugEventType - .NET (C#) ...........................................................................................384 EProcessEventType - Native C++ .............................................................................................384 EProcessEventType - .NET (C#) ...............................................................................................385
S7-PLCSIM Advanced
24
Function Manual, 11/2019, A5E37039512-AC
Table of contents
Table 7- 483 Table 7- 484 Table 7- 485 Table 7- 486 Table 7- 487 Table 7- 488 Table 7- 489 Table 7- 490 Table 7- 491 Table 7- 492 Table 7- 493 Table 7- 494
EDirection - Native C++ ............................................................................................................. 385 EDirection - .NET (C#) ............................................................................................................... 385 EDiagProperty - Native C++ ......................................................................................................385 EDiagProperty - .NET (C#) ........................................................................................................ 386 EDiagSeverity - Native C++ .......................................................................................................386 EDiagSeverity - .NET (C#) ......................................................................................................... 386 ERackOrStationFaultType - Native C++ ....................................................................................387 ERackOrStationFaultType - .NET (C#)......................................................................................387 ECycleTimeMonitoringMode - Native C++ ................................................................................387 ECycleTimeMonitoringMode - .NET (C#) ..................................................................................387 EAutodiscoverType - Native C++...............................................................................................388 EAutodiscoverType - .NET (C#) ................................................................................................388
Figures
Figure 2-1 Figure 3-1 Figure 3-2 Figure 3-3 Figure 4-1 Figure 4-2 Figure 4-3 Figure 4-4 Figure 4-5 Figure 4-6 Figure 4-7 Figure 5-1 Figure 5-2 Figure 5-3 Figure 5-4 Figure 5-5 Figure 5-6 Figure 5-7 Figure 5-8 Figure 5-9
Enable simulation capability.........................................................................................................35 Activating the Trial License ..........................................................................................................44 Trial License message ................................................................................................................. 45 Timeout alarm ..............................................................................................................................45 Local communication via Softbus ................................................................................................ 55 Local communication via TCP/IP .................................................................................................56 Distributed communication via Ethernet ......................................................................................57 Distributed communication via network adapters ........................................................................58 Distributed communications with PCs and virtual machines .......................................................59 Activate PLCSIM Virtual Switch ................................................................................................... 60 Accessible devices on the Virtual Ethernet Adapter ....................................................................61 PLCSIM Advanced Symbol..........................................................................................................63 Opening a graphical interface ...................................................................................................... 63 Example: Message in the taskbar................................................................................................63 Control Panel: Title bar ................................................................................................................64 Control Panel V3.0 ....................................................................................................................... 66 Control Panel: Importing instances ..............................................................................................70 Example: Download via the "PLCSIM Virtual Ethernet Adapter" (TCP/IP) after naming ............72 Structure of the MAC address for an instance.............................................................................74 Add card reader ...........................................................................................................................78
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
25
Table of contents
Figure 5-10 Figure 6-1 Figure 6-2 Figure 6-3 Figure 6-4 Figure 7-1 Figure 7-2 Figure 7-3 Figure 7-4 Figure 7-5 Figure 8-1 Figure 8-2
Preview of download dialog .........................................................................................................78 Freeze state of the virtual controller.............................................................................................90 Overview of the synchronization points .......................................................................................91 Example: Sequence in the SingleStep_CP operating mode........................................................93 Example: Sequence in the TimespanSynchronized_CP operating mode ...................................95 External applications and Simulation Runtime.............................................................................97 Access to instances with distributed communication ...................................................................98 API and external applications.......................................................................................................99 Read and write operations flowchart..........................................................................................256 Flowchart for the simulation of events .......................................................................................257 Example: Error code 63 .............................................................................................................396 Policy exceptions for VMware vSphere Hypervisor (ESXi)........................................................397
S7-PLCSIM Advanced
26
Function Manual, 11/2019, A5E37039512-AC
Guide
1
1.1
Documentation guide
The documentation for the SIMATIC S7-1500 automation system and the SIMATIC ET 200SP distributed I/O system is arranged into three areas.
Basic information
System manuals and Getting Started describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500 and ET 200SP systems. The STEP 7 online help supports you in configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, terminal diagrams, characteristics and technical specifications.
General information The function manuals contain detailed descriptions on general topics such as diagnostics, communication, Motion Control, Web server, OPC UA. You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742691). Changes and additions to the manuals are documented in product information sheets. You will find the product information on the Internet: S7-1500 (https://support.industry.siemens.com/cs/us/en/view/68052815) ET 200SP (https://support.industry.siemens.com/cs/us/en/view/73021864)
Manual Collections
The Manual Collections contain the complete documentation of the systems put together in one file. You will find the Manual Collections on the Internet: S7-1500 (https://support.industry.siemens.com/cs/ww/en/view/86140384) ET 200SP (https://support.industry.siemens.com/cs/ww/en/view/84133942)
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
27
Guide 1.1 Documentation guide
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
"mySupport" - Documentation
In the Documentation area in "mySupport" you can combine entire manuals or only parts of these to your own manual. You can export the manual as PDF file or in a format that can be edited later.
You can find "mySupport" - Documentation on the Internet (https://support.industry.siemens.com/My/ww/en/).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
TIA Selection Tool
The TIA Selection Tool can be used to select, configure and order devices for Totally Integrated Automation (TIA). It assembles the configuration editors for automation technology already familiar into a single tool.
With the TIA Selection Tool, you can generate a complete order list from your product selection or product configuration.
You can find the TIA Selection Tool on the Internet (http://w3.siemens.com/mcms/topics/en/simatic/tia-selection-tool).
S7-PLCSIM Advanced
28
Function Manual, 11/2019, A5E37039512-AC
Guide 1.1 Documentation guide
SIMATIC Automation Tool
You can use the SIMATIC Automation Tool to perform commissioning and maintenance activities simultaneously on different SIMATIC S7 stations as a bulk operation independent of TIA Portal. The SIMATIC Automation Tool provides a wide range of functions: Scanning a PROFINET/Ethernet system network and identification of all connected CPUs Address assignment (IP, subnet, gateway) and station name (PROFINET device) to a
CPU Transfer of the date and the PG/PC time converted to UTC time to the module Program download to CPU RUN/STOP mode switchover CPU localization with LED flashing Reading out CPU error information Reading the CPU diagnostics buffer Reset to factory settings Firmware update of the CPU and connected modules You can find the SIMATIC Automation Tool on the Internet (https://support.industry.siemens.com/cs/ww/en/view/98161300).
PRONETA
SIEMENS PRONETA (PROFINET network analysis) allows you to analyze the plant network during commissioning. PRONETA features two core functions:
The topology overview automatically scans the PROFINET and all connected components.
The IO check is a fast test of the wiring and the module configuration of a plant.
You can find SIEMENS PRONETA on the Internet (https://support.industry.siemens.com/cs/ww/en/view/67460624).
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
29
Guide 1.2 S7-PLCSIM products
SINETPLAN
SINETPLAN, the Siemens Network Planner, supports you in planning automation systems and networks based on PROFINET. The tool facilitates professional and predictive dimensioning of your PROFINET installation as early as in the planning stage. In addition, SINETPLAN supports you during network optimization and helps you to exploit network resources optimally and to plan reserves. This helps to prevent problems in commissioning or failures during productive operation even in advance of a planned operation. This increases the availability of the production plant and helps improve operational safety.
The advantages at a glance
Network optimization thanks to port-specific calculation of the network load
Increased production availability thanks to online scan and verification of existing systems
Transparency before commissioning through importing and simulation of existing STEP 7 projects
Efficiency through securing existing investments in the long term and the optimal use of resources
You can find SINETPLAN on the Internet (https://www.siemens.com/sinetplan).
1.2
S7-PLCSIM products
PLCSIM Advanced V3.0, PLCSIM V16 and PLCSIM V5.x
Table 1- 1 Comparison of S7-PLCSIM products
Function Runtime User interface Communication Supported CPU families
PLCSIM Advanced V3.0 Independent Control Panel Softbus, TCP/IP S7-1500 (C, T, F), ET 200SP, ET 200SP F
API for co-simulation1 Web server ODK OPC UA Process diagnostics S7 communication Open user communication Traces2 Motion3 Protected blocks (KHP) Multiple instances Support of distributed instances Virtual time
, only via TCP/IP , only via TCP/IP , UDP only via TCP/IP Up to 16 , only via TCP/IP
PLCSIM V16 Programming with STEP 7 Look&Feel of TIA Portal Softbus only S7-1200 (F), S7-1500 (C, T, F), ET 200SP, ET 200SP F Softbus Softbus () () , for S7-1500 CPUs only Up to 2 -
-
PLCSIM V5.x Programming with STEP 7 Look&Feel of STEP 7 V5.x Softbus only S7-300, S7-300F S7-400, S7-400F
Softbus -
-
S7-PLCSIM Advanced
30
Function Manual, 11/2019, A5E37039512-AC
Guide 1.2 S7-PLCSIM products
Function
Connection of real CPUs/HMIs DNS usage Virtual memory card Communication between the instances
PLCSIM Advanced V3.0 , only via TCP/IP
PLCSIM V16 -
PLCSIM V5.x -
-
-
-
-
-
PLCSIM as of V12 and PLCSIM V5.x can be installed and
operated on the same PC or the same virtual machine.
-
Instances of PLCSIM as of V12 can communicate via Soft-
bus with PLCSIM V5.x.
PLCSIM Advanced 3.0 and PLCSIM V15 and higher can be -
installed and operated on the same PC or the same virtual
machine. The communication between the two applications cannot be simulated.
PLCSIM V5.4 SP8 is automatically installed with PLCSIM Advanced. The communication between the two applications can be simulated. Instances of PLCSIM Advanced can com-
municate via Softbus with PLCSIM V5.4 SP8.
1 Via C++ and C# programs and simulation software 2 Can be monitored with PLCSIM V16 in the TIA Portal; can also be monitored with PLCSIM Advanced V3.0 in the Web
server. 3 With PLCSIM V16 the axes are always in simulation mode irrespective of the axis configuration.
With PLCSIM Advanced V3.0 the axes can also be operated in "Real" mode over the API.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
31
Product overview
2
2.1
What is S7-PLCSIM Advanced?
Using PLCSIM Advanced, you can simulate your CPU programs on a virtual controller. You do not need any real controllers for this. You can configure your CPU with STEP 7 in the TIA Portal, program your application logic and then load the hardware configuration and the program into the virtual controller. From there you can run your program logic, observe the effects of simulated inputs and outputs and adapt your programs.
In addition to communicating via Softbus, PLCSIM Advanced provides a full Ethernet connection and can thus also communicate distributed.
PLCSIM Advanced enables interaction with native C++/C# programs or simulation software over the user interface (API).
Application areas
Verification of the user program (TIA Portal)
Automatic testing of the STEP 7 program
Software in the loop simulation for the virtual commissioning of machine tools/production machines, production cells and production lines in a plant.
Advantages
The use of PLCSIM Advanced offers numerous advantages: Improve quality of automation projects by early error detection Avoid costs for hardware in simulation environments Reduced response times Reduce risk for commissioning Earlier training of operator is possible Increase production efficiency by optimizing program components Increase efficiency during replacement of machine components Increase efficiency during expansion of existing plants
S7-PLCSIM Advanced
32
Function Manual, 11/2019, A5E37039512-AC
Product overview 2.2 Compatibility during upgrade
2.2
Compatibility during upgrade
Compatibility of API and Runtime versions
PLCSIM Advanced V3.0 includes Runtime version V3.0 and API versions V1.0 (SP1) to V3.0.
The installation of PLCSIM Advanced V3.0 leads to an upgrade of an existing earlier version. The Runtime Manager of PLCSIM Advanced V3.0 is compatible with projects that were created with earlier API versions. You can therefore continue to use already created projects.
Note
An API with a higher version number (for example V3.0) cannot connect with an earlier Runtime version (for example V1.0).
Compatibility to TIA Portal and to CPU firmware versions
The firmware used in PLCSIM Advanced V3.0 corresponds to that of a CPU S7-15xx V2.8. The firmware is compatible to the TIA Portal versions V14 to V16.
Table 2- 1 Compatibility with CPU firmware versions
PLCSIM Advanced V1.0 SP1 V2.0 V2.0 SP1 V3.0
Supported CPU firmware version V1.8, V2.0 V1.8 to V2.5 V1.8 to V2.6 V1.8 to V2.8
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
33
Product overview 2.3 Security for S7-PLCSIM Advanced
2.3
Security for S7-PLCSIM Advanced
Restrictions for security
Note the following restrictions when using PLCSIM Advanced:
Authentication The user interfaces (API) do not have options for authentication and authorization. There
is no protection using user accounts and passwords. The Runtime Manager communication is not protected by authentication.
Communication The multi-computer simulation communication is not encrypted. A TCP/IP port is opened on the PC for cross-network communication. The installed WinPcap program library provides access to TCP/IP network
communication.
Note For cross-computer communication, it is recommended to use a closed simulation network that is not connected to a production network.
Know-how protection
Note Know-how protected blocks If know-how-protected blocks for the simulation support are enabled, the know-how protection is limited.
Note CPU function libraries for ODK The SO files for ODK are not know-how-protected. The customer is responsible for the SO files and its know-how protection.
S7-PLCSIM Advanced
34
Function Manual, 11/2019, A5E37039512-AC
Product overview 2.4 Simulations support
2.4
Simulations support
Requirement for simulation
Note Enable simulation capability To use a STEP 7 project with simulation, you must select the "Support simulation during block compilation" option in the "Protection" tab in the properties of the project and confirm with OK.
Figure 2-1 Enable simulation capability
Know-how protection
If a know-how-protected block is to be used for the simulation, it must be unlocked by entering a password. Only through unlocking can the "Simulation with SIMATIC S7-PLCSIM Advanced" option in the tab "General > Compilation" in the properties of the block be activated. Additional information can be found on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109754928).
Global libraries
You cannot use know-how protection with global libraries, because the libraries are writeprotected. The "Simulation with SIMATIC S7-PLCSIM Advanced" option must be set when generating the blocks (source of the blocks).
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
35
Product overview 2.5 Supported CPUs
2.5
Supported CPUs
Supported CPUs from the S7-1500 family
PLCSIM Advanced V3.0 supports the simulation of the following CPUs:
Table 2- 2 Supported CPUs
Type Standard CPUs / Fail-safe CPUs
Compact CPUs1 ET 200SP CPUs Technology CPUs
Version V1.8 to V2.8 CPU 1511-1 PN CPU 1513-1 PN CPU 1515-2 PN CPU 1516-3 PN/DP CPU 1517-3 PN/DP CPU 1518-4 PN/DP CPU 1518-4 PN/DP ODK CPU 1518-4 PN/DP MFP CPU 1511C-1 PN CPU 1512C-1 PN CPU 1510SP-1 PN CPU 1512SP-1 PN CPU 1511T-1 PN CPU 1515T-2 PN CPU 1516T-3 PN/DP CPU 1517T-3 PN/DP
CPU 1511F-1 PN CPU 1513F-1 PN CPU 1515F-2 PN CPU 1516F-3 PN/DP CPU 1517F-3 PN/DP CPU 1518F-4 PN/DP CPU 1518F-4 PN/DP ODK CPU 1518F-4 PN/DP MFP
CPU 1510SP F-1 PN CPU 1512SP F-1 PN CPU 1511TF-1 PN CPU 1515TF-2 PN CPU 1516TF-3 PN/DP CPU 1517TF-3 PN/DP
1 The on-board I/O within the compact CPUs is not simulated. The simulation interface corresponds to the process image.
Unsupported CPUs
PLCSIM Advanced does not support the simulation of the following CPUs: S7-1500R/H CPUs S7-1200 CPUs ET 200pro, ET 200pro F CPUs ET 200SP Open Controller CPU 1515SP PC Software Controller
S7-PLCSIM Advanced
36
Function Manual, 11/2019, A5E37039512-AC
Product overview 2.6 Differences between a simulated and a real CPU
2.6
Differences between a simulated and a real CPU
The virtual controller cannot fully simulate a real CPU down to the individual details. Even if a program is downloaded without errors to the CPU and running successfully, this does not necessarily mean that the virtual controller in the simulation behaves exactly like a real CPU.
Deterministic
PLCSIM Advanced runs on a PC with the Windows operating system. Therefore, the scan cycle time and the exact time of actions in PLCSIM Advanced are not the same as when these actions run on physical hardware. This is because that several programs share the processing resources on your PC.
To provide the best possible deterministic behavior under these conditions, PLCSIM Advanced as of V2.0 requires one free Core (CPU core) per instance.
If your program depends heavily on the time required to execute actions, then make sure that you do not evaluate your program based only on the results of the simulation time.
Know-how protection
Projects with know-how protection for blocks can only be simulated if they are enabled for simulation. You need the block password for this purpose.
Instructions
Instructions are simulated with a few exceptions, see Restrictions for instructions (Page 394).
Programs that are based on the instructions behave different than real CPUs in the simulation.
Display of the quantity structure
In STEP 7 the maximum quantity structure that is based on the CPU 1518-4 PN/DP is shown in the project navigation under "Program info" for all the CPUs.
The maximum quantity structure of the currently simulated CPU is displayed under "Online & diagnositics".
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
37
Product overview 2.6 Differences between a simulated and a real CPU
2.6.1
Restrictions for all supported CPUs
Bus systems
PLCSIM Advanced does not simulate bus systems (PROFINET IO, PROFIBUS DP, backplane bus).
I/O
PLCSIM Advanced simulates the real CPU, but not configured I/O modules and the on-board I/O of the compact CPUs.
Communication modules
PLCSIM Advanced does not support communication modules and the associated features such as "Access to PLC via communication module".
Process image partitions
Process image partitions are supported as with the real CPU.
Address spaces that are not assigned to a process image partition are updated at the cycle control point.
Diagnostics / diagnostic alarms
With PLCSIM Advanced, simple diagnostics buffer entries can be simulated according to PROFINET standard.
PROFIBUS-specific diagnostics (e.g. via DS0, DS1) and user-specific text lists are not supported.
Online and diagnostic functions
Some online and diagnostic functions are not very useful in the simulation and are therefore not supported. These include, for example, the functions "Format memory card" and "Firmware update".
Status indicators LED flashing
In STEP 7, you can have the LED displayed on an CPU flash using the "Extended download to device" dialog. PLCSIM Advanced does not simulate this function.
Data logging
PLCSIM Advanced does not simulate data logging.
S7-PLCSIM Advanced
38
Function Manual, 11/2019, A5E37039512-AC
Product overview 2.6 Differences between a simulated and a real CPU
Recipes
PLCSIM Advanced does not simulate the use of recipes.
Copy protection
PLCSIM Advanced does not simulate copy protection.
Limited support
PLCSIM Advanced simulates some functions to a limited extent. You can find an overview in the section Restrictions, messages and solution (Page 389).
2.6.2
Notes
Password transfer when module is replaced (S7-1500)
Depending on the firmware version of the CPUs affected (the CPU to be replaced and the replacement CPU), you are either offered an update to the latest algorithm or prompted to assign a new password because the replacement CPU cannot use the existing password configuration.
If the CPU to be replaced and the replacement CPU are identical in terms of the algorithm used, no action is required: the password configuration and the other parameter settings are transferred.
PLCSIM Advanced does not support any password encryption for CPU versions with firmware less than V2.0.
In order to use protection levels, the Web server and the access protection of the F-CPU in the simulation, click on the "Update password encryption" button. The button is located in the CPU properties in the "Protection & Security" tab under "Access level".
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
39
Product overview 2.6 Differences between a simulated and a real CPU
HMI devices and CPU protection levels
PLCSIM Advanced supports HMI devices as of version 14. Connections to HMI devices prior to V14 are not supported.
PLCSIM Advanced supports protection levels if the virtual S7-1500 controller is configured with a firmware version V2.0 or higher.
It is possible to connect HMI devices as of V14 to virtual S7-1500 controllers that are configured with a firmware version V2.0 or higher, with or without protection levels.
It is possible to connect HMI devices as of V14 to virtual S7-1500 controllers which are configured with a firmware version lower than V2.0 without protection levels.
Solution To establish a connection to the HMI device V13 or earlier, you have to update this HMI device to version V14. To establish a connection from the virtual controller that is configured with a firmware version lower than V2.0 to the HMI device, you have to remove existing protection levels from the project.
Safety system version V1.6 or V2.0 for fail-safe I/O
To successfully simulate and test a project with fail-safe input and output modules, you need to use safety system version V1.6 or V2.0 for the project. Simulation of the fail-safe input and output modules does not work correctly with an older version.
Priority for hardware interrupt OB
The hardware interrupts triggered via the PLCSIM Advanced API are transmitted in sequence to the user program. The priority of the assigned hardware interrupt OB determines the sequence of execution only if events occur simultaneously.
S7-PLCSIM Advanced
40
Function Manual, 11/2019, A5E37039512-AC
Installing
3
3.1
3.1.1
Introduction
System requirements
You should preferably install PLCSIM Advanced on a SIMATIC Field PG M5 Advanced or comparable PC.
For PLCSIM Advanced to operate efficiently, the following minimum requirements for computer hardware or for a virtual machine must be met.
Table 3- 1 System requirements
Processor
RAM Free hard disk space Screen resolution
Hardware
Virtual machine
· One logical Intel CoreTM i7-6820EQ core per started instance
· One virtual CPU per started instance has to be assigned to the VM
· At least one additional core for · A corresponding number of
the operating system
processors has to be physically
· At least one additional core for
available on the host
the additional active applications · At least one additional core for
the operating system
· At least one additional core for the additional active applications
· At least two cores, if STEP 7 (TIA Portal) is installed on the VM
· 1 GB per started instance
· 1 GB per started instance
· At least 4 GB for the Windows operating system
· At least 4 GB for the Windows operating system
· Additional RAM corresponding to · Additional RAM corresponding to
the requirements of the remain-
the requirements of the remain-
ing active applications
ing active applications
· At least 8 GB, if STEP 7 (TIA Portal) is installed on the VM
5 GB Minimum 1024 x 768
5 GB Minimum 1024 x 768
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
41
Installing 3.1 Introduction
Operating systems (64-bit versions)
PLCSIM Advanced V3.0 supports the following operating systems: Windows 7 Home Premium Windows 7 Professional SP1 Windows 7 Enterprise SP1 Windows 7 Ultimate SP1 Windows 10 Home Version 1809, 1903 Windows 10 Pro Version 1809, 1903 Windows 10 Enterprise Version 1809, 1903 (for SIMATIC Field PG M5) Windows 10 (IoT) Enterprise 2016 LTSB Windows 10 (IoT) Enterprise 2019 LTSC Windows Server 2012 R2 StdE (full installation) Windows Server 2016 Standard (full installation) Windows Server 2019 Standard (full installation)
Note Make sure that the Windows operating system you are using is up to date.
Virtualization platforms
You can install STEP 7 and PLCSIM Advanced on a virtual machine. For this purpose, use one of the following virtualization platforms in the specified version or a newer version: VMware vSphere Hypervisor (ESXi) 6.7 VMware Workstation Pro 15.0.2 VMware Player 15.0.2 The information that you need to install STEP 7 (TIA Portal) on a virtual machine is available on the Internet (https://support.industry.siemens.com/cs/ww/en/view/78788417).
S7-PLCSIM Advanced
42
Function Manual, 11/2019, A5E37039512-AC
3.1.2
Installing 3.1 Introduction
Restrictions due to antivirus programs
NOTICE Restrictions due to antivirus programs Virus scanners that monitor the behavior of processes and communication can have a significant impact on the performance of the runtime and communication of PLCSIM Advanced.
Note Readme You can obtain updates to the topic as downloads on the Internet (https://support.industry.siemens.com/cs/us/en/view/109739154).
Supported antivirus programs
PLCSIM Advanced supports Trend Micro Office Scan 12.0.
Known problems and limitations
Kaspersky When using the Anti-Virus virus scanner from Kaspersky, the network settings may not be set correctly during the installation of PLCSIM Advanced. The result is that communication via TCP/IP cannot be used (error code -50).
Remedy Check your network settings as described in the section Activating distributed communication (Page 60).
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
43
Installing 3.1 Introduction
3.1.3
Licenses
Floating license
PLCSIM Advanced is supplied with a floating type license. It can be stored locally and shared for a network.
Note Validity A license is valid for two instances within a PLCSIM Advanced installation. PLCSIM Advanced V3.0 can only be used with a V3.0 license.
Handling of licenses is described in the Help for SIMATIC Automation License Manager (ALM).
3.1.4
Trial License
A license is available for the limited period of 21 days for S7-PLCSIM Advanced V3.0. After this Trial License has elapsed, the instance is no longer started.
Activating the Trial License
As soon as you start an instance in the Control Panel, the Automation License Manager (ALM) searches the network for a valid license. If a Floating License is available for S7-PLCSIM Advanced, the ALM offers the Trial License for activation.
Figure 3-1 Activating the Trial License
S7-PLCSIM Advanced
44
Function Manual, 11/2019, A5E37039512-AC
Installing 3.1 Introduction
A message at the start of the instances shows the remaining number of days.
Figure 3-2 Trial License message
Note Remote access With remote access, the message must be confirmed on the PC on which the instance was started.
Timeout alarm
If you do not confirm the message for the license in a certain amount of time, the instance is not started and the following message appears:
Figure 3-3 Timeout alarm
Solution Start the instance again and confirm the message for the license.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
45
Installing 3.1 Introduction
API functions for licenses
PLCSIM Advanced regularly checks whether a license is available. The following return values provide information about the status (for example, for C++):
Return values for API function PowerOn() and callback function OnOperatingStateChanged
SREC_OK when a floating license is available.
SREC_WARNING_TRIAL_MODE_ACTIVE when an instance is started with the Trial License.
SREC_WARNING_RUNNING_ON_TIA_PORTAL_TEST_SUITE, no valid license for PLCSIM Advanced is available, but a "TIA Portal Test Suite" license. PLCSIM Advanced starts with this license. A download from the TIA Portal is possible, but the instance terminates without feedback if the download was not made from the TIA Portal Test Suite.
SREC_NOT_EMPTY, if no valid license for PLCSIM Advanced is available, but a "TIA Portal Test Suite" license is available. If this is the case, power-up from the Virtual SIMATIC Memory Card is not supported.
Return value for callback function OnOperatingStateChanged
SREC_LICENSE_NOT_FOUND when the instance is automatically shut down after 21 days.
S7-PLCSIM Advanced
46
Function Manual, 11/2019, A5E37039512-AC
Installing 3.1 Introduction
3.1.5
Installation log
The log files contains automatically recorded information on the following installation processes:
Installation of S7-PLCSIM Advanced
Change or update of installation of S7-PLCSIM Advanced
Repair of an existing installation of S7-PLCSIM Advanced
Uninstallation of S7-PLCSIM Advanced
You can evaluate installation errors and warnings using the log files. You can troubleshoot the installation yourself or contact Siemens Technical Support. Product Support personnel need information from the installation log to analyze the problem. Send the folder with the log files as a ZIP file to Support.
Memory location of the installation log
The memory location of the log file depends on the operating system. To open the folder with the log files, enter the environment variable "%autinstlog%" in the address bar in Windows Explorer. Alternatively, you reach the appropriate directory by entering "cd %autinstlog%" in the command line.
The log files are named as follows:
"SIA_S7-PLCSIM_Advanced_V03@<DATE_TIME>.log"
"SIA_S7-PLCSIM_Advanced_V03@<DATE_TIME>_summary.log"
Setup_Report (CAB file)
The installation log and other required files are stored in a log file. This file can be found at "%autinstlog%\Reports\Setup_report.cab".
A separate CAB file with a date ID is saved for each installation.
If you need help during installation, send this CAB file to Siemens Technical Support for troubleshooting.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
47
Installing 3.2 S7-PLCSIM Advanced
3.2
S7-PLCSIM Advanced
The S7-PLCSIM Advanced package contains the following software:
S7-PLCSIM Advanced
Automation License Manager
S7-PLCSIM V5.4
.NET Framework
WinPcap
The package is available as download and on DVD. SIMATIC S7-PLCSIM Advanced V3.0 Floating License Upgrade SIMATIC S7-PLCSIM Advanced V2.0 V3.0 After installing PLCSIM Advanced, keep the DVD in a secure, easily accessible place.
Setup program
You can use the Setup program to change, repair or uninstall your installation, if necessary.
S7-PLCSIM Advanced
48
Function Manual, 11/2019, A5E37039512-AC
Installing 3.3 Installing S7-PLCSIM Advanced
3.3
Installing S7-PLCSIM Advanced
Installation requirements
The Setup program starts automatically with a double-click on the download package or when you insert the DVD in the drive. Make sure that the following conditions are met before you begin the installation process: The hardware and software of the computer meet the system requirements. You have administrator rights on the installation computer. No other programs are active. This also applies to the Siemens Automation License
Manager and other Siemens applications. All S7-PLCSIM versions prior or equal to V14 are uninstalled.
Note Security settings For licensing via the ALM, you must agree during installation that port 4410 for TCP can be entered as an exception in the Windows Firewall (procedure step 5).
Note Use of virus scanners Note the information provided in section Restrictions due to antivirus programs (Page 43).
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
49
Installing 3.3 Installing S7-PLCSIM Advanced
Installing S7-PLCSIM Advanced
To install, follow these steps:
1. Double-click the download package or insert the installation medium into the DVD drive of your computer. The setup program starts up automatically, provided you have not disabled the Autostart function on the computer. If the setup program does not start up automatically, start it manually by double-clicking the "Start.exe" file. The "General settings" window is displayed.
2. Click the "Read installation notes" button. After you have read the notes, close the file.
3. Click the "Read product information" button. After you have read the information, close the file.
4. Click the "Browse" button if you want to change the default installation path. The installation path must not exceed 89 characters. The path name must not contain any UNICODE characters. If you select a different installation path than the default installation path, the desktop icon may not be displayed correctly.
5. Click "Next". The window with the security settings is displayed. To continue the installation, select the check box at the bottom of the screen to accept changes to the security and permissions settings of your system.
6. Click "Next". The window with the installation settings is displayed. You can save or print a report of the settings by clicking "Save report" or "Print report". Check the settings for correctness. If you want to make any changes, click "Back" until you reach the point in the installation process where you want to make changes. Once you have completed your changes, click "Next".
7. The overview screen shows your installation details. Click the "Install" button. The installation then starts.
8. After completion of the setup program, you must restart your computer. Select "Yes, I want to restart the computer now" to restart the computer immediately or select "No, I will restart computer later" to restart the computer later.
9. Click "Restart". If the computer is not restarted, click "Finish".
Error during installation of S7-PLCSIM Advanced
When PLCSIM Advanced is installed, any existing installation of S7-PLCSIM is displayed.
A requirement for installation of S7-PLCSIM Advanced is that no other S7-PLCSIM installation prior or equal to V14 is located on the same computer.
Even though no installation of S7-PLCSIM is displayed in the "Programs and Features" list, it is still possible that the computer has an existing installation.
Remedy
Run the setup for S7-PLCSIM prior or equal to V14 and uninstall the program.
When the setup is not available, download the setup files for S7-PLCSIM via Siemens Mall (https://support.industry.siemens.com/cs/ww/en/view/65601780).
S7-PLCSIM Advanced
50
Function Manual, 11/2019, A5E37039512-AC
Installing 3.4 Changing S7-PLCSIM Advanced
3.4
Changing S7-PLCSIM Advanced
Requirements
The following conditions must be met before you can start changing the installation: The hardware and software of the computer meet the system requirements. You have administrator rights on the installation computer. No other programs are active.
Procedure
To change your S7-PLCSIM Advanced installation, follow these steps: 1. Double-click the download package or insert the installation medium into the drive. The
setup program starts up automatically, provided you have not disabled the Autostart function on the computer. If the setup program does not start up automatically, start it manually by double-clicking the "Start.exe" file. 2. Follow the prompts until you reach the "Configuration" window. 3. Select the "Change upgrade" check box. 4. Follow the remaining prompts to change your installation. 5. Complete the installation operation by restarting your computer.
Note Target directory You cannot change the target directory because you are changing an existing installation.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
51
Installing 3.5 Repairing S7-PLCSIM Advanced
3.5
Repairing S7-PLCSIM Advanced
Requirements
The following conditions must be met before you can start repairing the installation: The hardware and software meet the system requirements. You have administrator rights on the installation computer. No other programs are active.
Procedure
To repair your installation, follow these steps:
1. Double-click the download package or insert the installation medium into the drive. The setup program starts up automatically, provided you have not disabled the Autostart function on the computer. If the setup program does not start up automatically, start it manually by double-clicking the "Start.exe" file.
2. Follow the prompts until you reach the "Configuration" window. Select the "Repair" check box.
3. Follow the remaining prompts to repair your installation.
4. Complete the repair operation by restarting your computer.
S7-PLCSIM Advanced
52
Function Manual, 11/2019, A5E37039512-AC
Installing 3.6 Uninstalling S7-PLCSIM Advanced
3.6
Uninstalling S7-PLCSIM Advanced
You have two options for uninstalling S7-PLCSIM Advanced:
You uninstall the program using the Windows Control Panel.
You uninstall the entire product using the Setup program.
Uninstalling S7-PLCSIM Advanced using the Windows Control Panel
Proceed as follows: 1. Double-click the "Programs and Features" option in the Windows Control Panel. 2. Right-click "Siemens S7-PLCSIM Advanced V3.0" and select "Uninstall". 3. Follow the prompts for uninstallation. 4. Complete the uninstallation operation by restarting your computer.
If you do not perform a restart, the Runtime Manager continues running. If problems occur when uninstalling PLCSIM Advanced using the Windows Control Panel, use the installation medium for uninstalling.
Uninstalling S7-PLCSIM Advanced using the Setup program
Proceed as follows:
1. Double-click the download package or insert the installation medium into the drive. The setup program starts up automatically, provided you have not disabled the Autostart function on the computer. If the setup program does not start up automatically, start it manually by double-clicking the "Start.exe" file.
If you do not perform a restart, the Runtime Manager continues running.
2. Follow the prompts until you reach the "Configuration" window. Your previous installation is detected. Select the "Uninstall" check box.
3. Follow the prompts for uninstallation.
4. Complete the uninstallation operation by restarting your computer.
If you do not perform a restart, the Runtime Manager continues running.
Uninstalling additional software
During uninstalling the following software from the S7-PLCSIM Advanced package remains installed: Automation License Manager S7-PLCSIM V5.4 .NET Framework WinPcap If you also want to uninstall this software, use the Windows Control Panel.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
53
Communication paths
4
Local and distributed communication
The following paths are open for communication between STEP 7 V15 or higher and the instances of PLCSIM Advanced user interfaces:
Table 4- 1 Local and distributed communication
Communication paths
Protocol Communication interface in PLCSIM Advanced STEP 7 and instances Communication... between STEP 7 and instances among instances via OPC UA server and Web server between an instance and a real hardware CPU
between an instance and a real HMI V14 and higher between an instance and a simulated HMI V14 and higher
Local Softbus PLCSIM
On a PC / VM
Yes Yes No No
No
Yes
Local
Distributed
TCP/IP
TCP/IP
PLCSIM Virtual PLCSIM Virtual Ethernet Adapter Ethernet Adapter
On a PC / VM Distributed
Yes
Yes
Yes
Yes
Yes
Yes
No
Yes
No
Yes
Yes
Yes
Softbus
Softbus is a communication path via a virtual software interface.
The communication is limited to a local PC or a virtual machine. The advantage here is that no data can be accidentally downloaded to a hardware CPU or communicate with real hardware.
Selecting a communication interface
You program the communication interface via the user interfaces (API) or select them in the Control Panel under "Online Access". The setting is valid for all generated instances. The default setting is the communication via "PLCSIM" (Softbus).
Additional network settings are necessary for the distributed communication via the "PLCSIM Virtual Ethernet Adapter" (TCP/IP), see Network addresses in the simulation (Page 73).
S7-PLCSIM Advanced
54
Function Manual, 11/2019, A5E37039512-AC
API functions for selecting the communication interface
GetCommunicationInterface() (Page 154) SetCommunicationInterface() (Page 154) CommunicationInterface { get; set; } (Page 155)
See also
Interfaces - Information and settings (Page 151)
Communication paths 4.1 Local communication
4.1
Local communication
Local communication can be performed via the Softbus protocol or TCP/IP.
For local communication, the PLCSIM Advanced instance is on the same PC or on the same virtualization platform such as STEP 7 or another communication partner.
Local communication via Softbus
Local communication is performed via Softbus in PLCSIM Advanced by default.
This ensures that no data can be accidentally downloaded to a hardware CPU or that there is communication with real hardware.
Figure 4-1 Local communication via Softbus
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
55
Communication paths 4.1 Local communication
Local communication via TCP/IP
Communication is performed via the PLCSIM Virtual Ethernet Adapter, a virtual network interface that behaves like a real network interface. Note Local communication via TCP/IP Make sure that communication is only local and cannot be downloaded to real hardware. For this, there must be no other adapters of your Windows PC configured in the physical network and in the subnet protocol of the PLCSIM Virtual Ethernet adapter. Microsoft KB 175767 provides background.
Figure 4-2 Local communication via TCP/IP
Additional information
See error code SREC_COMMUNICATION_INTERFACE_NOT_AVAILABLE for the function PowerOn() in the section Operating state (Page 166).
S7-PLCSIM Advanced
56
Function Manual, 11/2019, A5E37039512-AC
Communication paths 4.2 Communication via TCP / IP
4.2
Communication via TCP / IP
Distributed communication
Distributed communication via TCP/IP means that the PLCSIM Advanced instances communicate with the other devices via the Virtual Switch . Communication is possible with real or simulated CPUs, real or simulated HMIs. The PLCSIM Virtual Switch must be activated on the PLCSIM Virtual Ethernet Adapter for instances on the network to be visible.
Example 1: Distributed communication
In the following example, STEP 7 is on a PC and the PLCSIM Advanced instances are on another PC or a virtual machine. The PCs are connected via their real Ethernet adapter.
Figure 4-3 Distributed communication via Ethernet
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
57
Communication paths 4.2 Communication via TCP / IP
Example 2: Distributed communication on a PC
In the following example, STEP 7 is on a PC and the PLCSIM Advanced instances are on a virtual machine on the same PC. PC and virtual machine are connected via the (virtual) network adapters.
Figure 4-4 Distributed communication via network adapters
Required settings in the "Virtual Machine Settings" dialog If you have opened STEP 7 (TIA Portal) and your project within the virtual machine, activate the following options for your online connection: 1. Open the "Virtual Machine Settings" dialog via the menu command "Player > Manage >
Virtual Machine Settings". 2. Then click "Network Adapter" in the "Hardware" tab and activate the following options in
the right window: Connected Connect at power on Bridged: Connected directly to the physical network Replicate physical network connection state 3. Click the "Configure Adapters" button and activate your network connection, for example "Intel(R)82574L LM Gigabit Network Connection". 4. Confirm the setting with OK and exit the "Virtual Machine Settings" dialog with OK.
S7-PLCSIM Advanced
58
Function Manual, 11/2019, A5E37039512-AC
Communication paths 4.2 Communication via TCP / IP
Example 3: Distributed communication
The following example shows a structure with PCs on which distributed STEP 7, PLCSIM Advanced instances and virtual machines with PLCSIM Advanced instances are running.
Figure 4-5 Distributed communications with PCs and virtual machines
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
59
Communication paths 4.3 Enable distributed communication
4.3
Enable distributed communication
By default, the PLCSIM Virtual Switch can only communicate locally. For a distributed, i.e. multi-computer, communication to be possible, you must activate the PLCSIM Virtual Switch for a real network adapter.
Note Network adapter
Make sure that only one network adapter of the PLCSIM Virtual Switch is activated. The Control Panel of PLCSIM Advanced checks the activation and may report an incorrect configuration (error code -50).
Activate PLCSIM Virtual Switch
To make the PLCSIM instances visible on the network and to reach other devices, activate the PLCSIM Virtual Switch in the Control Panel of PLCSIM Advanced or under Windows:
1. To do this, open the "Network and Sharing Center" in the Windows Control Panel.
2. Open the properties of the desired network adapter, for example, for the "Local Area Connection".
3. Select the check box for the "Siemens PLCSIM Virtual Switch" and confirm with OK.
Figure 4-6 Activate PLCSIM Virtual Switch
S7-PLCSIM Advanced
60
Function Manual, 11/2019, A5E37039512-AC
Communication paths 4.3 Enable distributed communication
Accessible devices
When the PLCSIM Virtual Switch is activated, STEP 7 shows the devices available on the Virtual Ethernet Adapter in the project tree.
Figure 4-7 Accessible devices on the Virtual Ethernet Adapter
Distributed communication via WLAN
When using distributed communication via WLAN, it may happen that the WinPcap program library installed by PLCSIM Advanced does not work with the integrated WLAN adapter of the PC. In this case, no WLAN connection can be established. Remedy Use the wired network adapter of the PC/notebook and connect a WLAN adapter upstream.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
61
Simulation
5
5.1
Simulate CPU
5.1.1
Basic procedure for the simulation
The following overview shows the basic steps to perform simulation with an instance of a virtual controller.
Requirements
The following requirements must be met for starting simulation via local communication: STEP 7 as of V14 and S7-PLCSIM Advanced V3.0 are installed on the same PC. The CPU hardware is configured in STEP 7.
Note Enable simulation support
In the "Protection" tab in the properties of the project in STEP 7, select the check box "Support simulation during block compilation"; see Simulations support (Page 35).
Create and activate an instance via the Control Panel
Open PLCSIM Advanced Control Panel (see section Control Panel - User interface (Page 63))
Open the "Start Virtual S7-1500 PLC" options Enter a name for an instance Select CPU type Create an instance using the "Start" button
In STEP 7, perform the download and start the simulation
Download the program to the virtual controller (see section Download (Page 71)) Switch the virtual controller to RUN to start the simulation Perform diagnostics
S7-PLCSIM Advanced
62
Function Manual, 11/2019, A5E37039512-AC
5.1.2 5.1.2.1
Simulation 5.1 Simulate CPU
Control Panel - User interface
S7-PLCSIM Advanced Symbol
After installing PLCSIM Advanced, the following icons are on the Windows desktop:
Figure 5-1 PLCSIM Advanced Symbol
A double-click on the symbol opens the Control Panel for PLCSIM Advanced. If the Control Panel is in the background, it is moved to the foreground with another double-click. You can use Windows functions to permanently display the icon in the system tray of the taskbar.
Opening a graphical interface
Right-clicking the icon in the taskbar opens the Control Panel with the quick view. Doubleclick to start the Control Panel as a window.
Figure 5-2 Opening a graphical interface
You can use the mouse-over function to display messages about the current status of the instances.
Figure 5-3 Example: Message in the taskbar
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
63
Simulation 5.1 Simulate CPU
5.1.2.2
Graphical interface
The graphical interfaces synchronize by means of API commands. They are optional and are not needed to operate PLCSIM Advanced via the API.
S7-PLCSIM Advanced V3.0 provides the Control Panel with two views.
Control Panel as quick view
Right-clicking on the icon in the taskbar opens the quick view.
Clicking on an empty area on the desktop minimizes the quick view. The instances are not affected.
Control Panel as window
Double-clicking the icon on the desktop or in the taskbar opens the Control Panel as a window.
Control Panel as window
Unlike the quick view, you can operate the Control Panel with the buttons in the title bar. You can close this window without exiting the simulation Runtime process.
Stores the Control Panel as icon in the taskbar. No function. The window size cannot be changed. Closes the Control Panel and stores it in the system tray of the taskbar.
The instances and the simulation Runtime process remain active.
This function therefore differs from the Exit function . The Exit function switches off the local instances, logs them off and closes the Control Panel.
Pins the Control Panel on the screen so that it remains in the foreground.
Figure 5-4 Control Panel: Title bar
S7-PLCSIM Advanced
64
Function Manual, 11/2019, A5E37039512-AC
5.1.2.3 Design
S7-PLCSIM Advanced Control Panel
The Control Panel is available in English in version V3.0.
Simulation 5.1 Simulate CPU
Online access TCP/IP communication Virtual time
Switch to select the communication interface Selection of network adapter for distributed communication Slider to adjust the scaling factor
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
65
Simulation 5.1 Simulate CPU
Start Virtual S7-1500 PLC
· Name of the instance
· IP address · Subnet mask · Standard gateway
Opens and closes the input boxes for creating the instance (virtual controller).
Here you enter a unique name for the instance. Enter a minimum of 3, a maximum of 64 characters. If the name is unique in the network, the button "Start" is enabled.
The input boxes are visible when you switch the communication interface to "PLCSIM Virtual Ethernet Adapter". The IP address is entered automatically.
· CPU type
Here you select the type of CPU to be simulated.
· "Start" button
Buttons Instance list
LED displays
Icons Runtime Manager Port Virtual SIMATIC Memory
Card
Display messages
Function manual
Exit
Create with the button and start the instance.
Buttons for operating the selected instances. The list shows the available local instances. The instances can be resorted using the mouse cursor. The meaning of the LED is displayed when you move the mouse over it. Icons for operating the instance Here you open a port on the local PC. Open an Explorer window here in which you select the path to the virtual memory card. Here you disable the PLCSIM Advanced messages in the Windows task bar for the duration of the operation. This is where you open the S7-PLCSIM Advanced Function Manual in a standard PDF viewer. Exit logs off all instances and closes the Control Panel.
Figure 5-5 Control Panel V3.0
Switch for communication interface
Use the switch to select the communication interface for all instances to be created:
"PLCSIM" corresponds to the local communication via softbus (default).
"PLCSIM Virtual Ethernet Adapter" corresponds to the communication via TCP/IP.
The setting applies to all other instances. The selected communication interface for starting an instance is maintained until all instances are shut down.
When an instance is already started, it sets "its" communication interface as the default for other instances.
To change the communication interface, switch off all instances and enable the other interface.
S7-PLCSIM Advanced
66
Function Manual, 11/2019, A5E37039512-AC
Simulation 5.1 Simulate CPU
TCP/IP communication
You can select a real network adapter from the drop-down list during operation. You thus activate the PLCSIM Virtual Switch and establish TCP/IP communication between the instances and the real network.
The <Local> setting disables the PLCSIM Virtual Switch and disconnects the instances from the real network. Only local TCP/IP communication over virtual adapter is possible in this case.
Virtual time
Use the slider or the mouse wheel to select the scaling factor for the virtual time.
The selected scaling factor applies to the instances for which the virtual time is enabled.
Clicking on "Off" restores the default (1) again. For further information see Virtual and Real Time (Page 87).
Creating an instance (locally) and starting it
To create an instance, enter a unique name under "Instance Name". If the name already exists in the directory of the Virtual SIMATIC Memory Card, the existing instance is started.
In the "PLC-Type" drop-down list, select the type: "Unspecified CPU 1500" or "Unspecified ET 200SP CPU". Create the instance with the "Start" button and start this instance.
The instance / virtual controller is named with the first download from the TIA Portal.
Instance list
The list contains the instances that are available locally on the PC or virtualization platform. Instances that have already been started on the runtime API are detected and displayed in the list.
Select the operating mode of the instance with the "RUN" and "STOP" buttons. Select one or more instances for this purpose. Perform a memory reset with the "MRES" button.
The LED displays show the status of the instance that corresponds to those of the hardware CPU. RUN and STOP are displayed depending on the current operating state of the instance.
You can "operate" the instance with icons:
Apply scaling factor for the virtual time, disable virtual time,
Switch on instance ("PowerOn"), Switch off instance ("PowerOff"),
Switch off instance and log off from Runtime Manager ("Unregister")
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
67
Simulation 5.1 Simulate CPU
Runtime Manager Port
A remote connection can be established to another Runtime Manager via the specified port. The value must be greater than 1024. If you select the check box, the port remains stored. You can use the remote connection without having to make this setting every time you start the Control Panel. To use this functionality, the Control Panel must be started and running in the background.
Virtual SIMATIC Memory Card
The user program, the hardware configuration and the retentive data is stored on the Virtual SIMATIC Memory Card. Use the button to open an Explorer window in which you select the path to the virtual memory card or in which the path is displayed.
Display messages
Each time the panel starts, help information and messages relating to the Control Panel are displayed, for example, when changing the IP address or when a license is missing. Disable the display if you do not need the messages.
Exit - Log off all instances
The command switches off all local instances on the PC or the VM and logs them off from the Runtime Manager and closes the Control Panel.
This command closes the Runtime Manager if there are no remote connections to other Runtime Managers.
If the Runtime Manager has remote connections to instances on additional PCs, these instances and the Runtime Manager continue to run.
S7-PLCSIM Advanced
68
Function Manual, 11/2019, A5E37039512-AC
Simulation 5.1 Simulate CPU
5.1.2.4
Importing instances
Requirement
This function is only available if you do not start the Control Panel with admin rights.
Importing instances
You can use the drag-and-drop function to import instances from a folder directly into the instance list of the Control Panel.
1. Open a folder with instances, for example, using the "Virtual SIMATIC Memory Card" button.
2. Select one or more instances and drag them into the highlighted area.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
69
Simulation 5.1 Simulate CPU
Figure 5-6 Control Panel: Importing instances
S7-PLCSIM Advanced
70
Function Manual, 11/2019, A5E37039512-AC
Simulation 5.1 Simulate CPU
5.1.3
Download
Requirements
You can download the STEP 7 project to the virtual controller when the following conditions are met:
The instance is created via the Control Panel.
The check box "Support simulation during block compilation" is selected.
Selecting the communication interface
In the Download dialog box, select the PG/PC interface: "PLCSIM" for download via Softbus "Siemens PLCSIM Virtual Ethernet Adapter" for download via TCP/IP For distributed communication the real adapter that is connected to the network
Display in the download dialog
The dialog in STEP 7 at the first download of the CPU shows the compatible PLCSIM Advanced instances.
If the instance has not yet been configured after the first download only one interface is visible and it appears with the device type "CPU-1500 Simulation".
If the instance has been configured, the number of interfaces visible is determined my the number the CPU type has.
The lifelist shows the interfaces of an instance with their IP addresses.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
71
Simulation 5.1 Simulate CPU
Perform download
1. Select the PG/PC interface. 2. Click "Download".
In the "Load preview" window, STEP 7 shows the message "The downloads are performed on a simulated CPU". After the first download, the PLCSIM Advanced instance displays the CPU type.
Figure 5-7 Example: Download via the "PLCSIM Virtual Ethernet Adapter" (TCP/IP) after naming
S7-PLCSIM Advanced
72
Function Manual, 11/2019, A5E37039512-AC
Simulation 5.1 Simulate CPU
5.1.4
Network addresses in the simulation
5.1.4.1
Siemens PLCSIM Virtual Ethernet Adapter
IP address
At the PLCSIM Virtual Ethernet Adapter you assign a static IP address or obtain an IP address via DHCP (default).
MAC address
A randomly generated MAC address is assigned to the PLCSIM Virtual Ethernet Adapter during its installation. PLCSIM Advanced only uses MAC addresses that are designated as "locally administered" (bit 2 in LSB). The Siemens-specific prefix is: 02-1B-1B Three bytes follow, which are determined at random.
Storage location This MAC address is stored in the registry key "PlcsimvminiMacAddress". You can overwrite this value.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
73
Simulation 5.1 Simulate CPU
5.1.4.2
PLCSIM Advanced instances
Detect CPUs and instances
If Ethernet interfaces of CPUs and PLCSIM Advanced instances are mixed in a network, the instances can be recognized by the "PLCSIM" suffix on the station type.
Structure of the MAC address for an instance
The following figure shows the structure of the dynamically generated, locally managed MAC address:
Figure 5-8 Structure of the MAC address for an instance
The MAC address tells you the PC on which a PLCSIM Advanced instance has been started.
Assignment of the Ethernet interfaces
Port configurations of the Ethernet interfaces cannot be simulated in PLCSIM Advanced V3.0. Topological interconnection is not supported. A MAC address for a port is reserved internally for each Ethernet interface.
Table 5- 1 Assignment of the Ethernet interfaces, for example, for a CPU 1518-4 PN/DP
Ethernet interface
IE 1 IE 1 / Port 1
IE 2 IE 2 / Port 1
IE 3 IE 3 / Port 1
Last digit of the MAC Address
...........0 ...........1
...........2 ...........3
...........4 ...........5
S7-PLCSIM Advanced
74
Function Manual, 11/2019, A5E37039512-AC
Example
Simulation 5.1 Simulate CPU
02-C0-A8-00-83-10 means: 02 locally managed MAC address of a PLCSIM Advanced instance
C0-A8-00-83 IP of the Siemens PLCSIM Virtual Ethernet adapter = 192.168.0.131 1 Instance 1 0 Ethernet interface IE 1 If no Virtual SIMATIC Memory Card is loaded during startup of PLCSIM Advanced, the interfaces of PLCSIM Advanced display instances with their locally managed MAC address.
5.1.5
Simulate peripheral I/O
The Runtime API writes to and reads from a memory area. This memory is synchronized with the internal process image of the virtual S7-1500 controller at the cycle control point and when calling cyclic and acyclic OBs (process image partitions, interrupts, events). The direct I/O accesses are made to this memory area. Only one process can access this memory at a given time.
The virtual controller must be in RUN to apply changes made by the API.
Note Dominance of the API when synchronizing
The API dominates when synchronizing. If the user program writes to the same address range as the API, the changes of the API overwrite those of the virtual controller.
See also
Deviating I/O values in the STEP 7 user program (Page 398)
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
75
Simulation 5.1 Simulate CPU
5.1.6
Simulate communication
5.1.6.1
Communication services that can be simulated
PLCSIM Advanced V3.0 supports the following communication options:
Table 5- 2 Supported communication options
Communications options PG communication Open communication using TCP/IP
Open communication using ISO-onTCP
Open communication via UDP2
Communication via Modbus TCP2 E-mail2, 3 S7 communication
OPC UA Server2 Web server2, 3
Functionality / instructions On commissioning, testing, diagnostics · TSEND_C / TRCV_C · TSEND / TRCV · TCON1, 3 · T_DISCON
· TSEND_C / TRCV_C · TSEND / TRCV · TCON · T_DISCON
· TUSEND / TURCV · TCON · T_DISCON
· MB_CLIENT · MB_SERVER
· TMAIL_C
· PUT / GET · BSEND / BRCV · USEND / URCV Data exchange with OPC UA clients Data exchange via HTTP
1 When the "PLCSIM" interface (Softbus) is set, communication is performed internally via ISO-onTCP.
2 Only via the communications interface "PLCSIM Virtual Ethernet Adapter" (TCP/IP). "Access to PLC via communication module" is not supported.
3 Secure TCP communication is not supported.
Special conditions apply when communicating with TUSEND/TURCV, see Restrictions for communications services (Page 394).
TMAIL_C
When the TMAIL_C instruction is used, the mail server might not be located on the same PC as the PLCSIM Advanced instance.
Solution Make the mail server available via a different PC in the network.
S7-PLCSIM Advanced
76
Function Manual, 11/2019, A5E37039512-AC
Simulation 5.1 Simulate CPU
5.1.6.2
Communication between instances
PLCSIM Advanced supports communication between instances. An instance may be a simulation in PLCSIM Advanced V2.0 or a simulation in WinCC Runtime as of V14.
You can run two instances of PLCSIM Advanced, which then communicate with each other. To enable instances to communicate with each other, they must have a unique IP address.
Each simulated CPU requires a unique IP address
If the CPUs have the same IP address, you cannot run multiple simulations. Each simulated CPU requires a unique IP address.
Make sure that the IP addresses in STEP 7 are unique before you start your simulations.
T-block instructions and UDP
PLCSIM Advanced simulates T-block connections for which the UDP protocol is configured only via the communication interface "PLCSIM Virtual Ethernet Adapter" (TCP/IP).
T-block instructions and data segmentation
PLCSIM Advanced implements T-block instructions with a data segmentation of 4 KB. A real CPU has data segmentation of 8192 bytes.
If you send more than 4 KB in a single TSEND instruction and receive data in ad hoc mode with a TRCV instruction, the TRCV instruction generates new data with only 4 KB. You must perform the TRCV instruction several times to receive additional bytes.
5.1.7
Provide project data offline for simulation
Simulations regardless of STEP 7
To perform simulations independent of STEP 7, you can save the user program and the hardware configuration in STEP 7 in a directory.
Saving retentive data securely
The retentive data is automatically saved when the virtual controllers are shut down.
To save the retentive data safely in the virtual SIMATIC Memory Card, the instances must be correctly logged off. Use one of the following functions for this:
The PowerOff() API function
In the Control Panel, the function "Shutdown instance" Exit function "Log off all instances"
, "Log off instance"
or the
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
77
Simulation 5.1 Simulate CPU
Provide project data offline
1. Create a "User-defined Card Reader" for your project data in the "Card Reader/USB storage" folder in the project tree of STEP 7 for the CPU.
2. In the "Load preview" dialog for the target device, select "PLC Simulation Advanced" as an action, click in the selection field for this. The project is saved to the <Virtual Memory Card>\SIMATIC.S7S\OMSSTORE directory.
3. Save the folder "\SIMATIC.S7S" with the project data to a medium of your choice.
Figure 5-9 Add card reader
Figure 5-10 Preview of download dialog
S7-PLCSIM Advanced
78
Function Manual, 11/2019, A5E37039512-AC
Simulation 5.2 Simulate CPU with ODK functionality
Provide project data for simulation
1. On the PC on which PLCSIM Advanced is installed, create the directory "\SIMATIC_MC" in the directory in which the instance saves its data.
2. Move the "\SIMATIC.S7S" folder to the directory you have created. The instances can be started with the project data.
API functions
The project data can be used for an instance via the user interface. Use of the following functions for this:
API functions GetStoragePath() (Page 161) StoragePath { get; set; } (Page 162) ArchiveStorage() (Page 163) RetrieveStorage() (Page 164)
See also
Controller - Information and settings (Page 157)
5.2
Simulate CPU with ODK functionality
Introduction
The ODK is an engineering tool that allows the creation of high-level language applications for S7-1500 CPUs. You use it to generate function libraries that are used in the STEP 7 user program.
The ODK for PLCSIM Advanced V3.0 supports the programming language C ++.
You can find the description of the ODK in the Programming and Operating Manual "S7-1500 Open Development Kit 1500S", as of V2.5 Edition 12/2017: SIMATIC STEP 7 (TIA Portal) Options ODK 1500S (https://support.industry.siemens.com/cs/document/109752687)
Section 5 "Development of a CPU function library for the real-time environment" is relevant for ODK applications under PLCSIM Advanced.
Supported CPUs
PLCSIM Advanced V3.0 supports the ODK functionality of the following controllers: CPU 1518(F)-4 PN/DP ODK CPU 1518(F)-4 PN/DP MFP
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
79
Simulation 5.2 Simulate CPU with ODK functionality
5.2.1
Special features of ODK
Simulating CPU with ODK functionality with PLCSIM Advanced
The simulation of a CPU with ODK functionality requires a special start procedure.
You have the following options:
Start the instances of a Virtual SIMATIC memory card that contains the project data for the CPU with ODK functionality.
Before starting the instances, select the CPU type via the API, for example, "CPU1518MFP".
After the first download, select the functions "Switch off instance" instance" in the Control Panel.
and "Shutdown
Note
If you perform the first download to a CPU with the type "Unspecified CPU 1500" via the PLCSIM Advanced Control Panel, no ODK1500S directory is created on the Virtual SIMATIC Memory Card. The CPU cannot be switched to RUN. In this case, you will find messages about missing ODK blocks (e.g. SFC 2013) in the diagnostics buffer.
Supported function libraries
PLCSIM Advanced V3.0 supports the following function libraries for the real-time environment: CPU function library: Original Shared Object, SO file as for the hardware CPUs PLCSIM Advanced function library (Windows Sync):
a 32-bit Windows DLL for ODK Runtime a 64-bit Windows DLL for ODK Runtime
Note Do not mix function libraries When simulating with PLCSIM Advanced, only function libraries with the same binary format can be loaded at a time. If you want to use function libraries with a different binary format, all others must be unloaded first.
Note No know-how protection for SO files The SO files for ODK are not know-how-protected.
S7-PLCSIM Advanced
80
Function Manual, 11/2019, A5E37039512-AC
Simulation 5.2 Simulate CPU with ODK functionality
Simulation of the ODK with PLCSIM Advanced
If you have loaded the TIA project on the PLCSIM Advanced and the instruction "<STEP7Prefix>_Load" was called for the first time, each PLCSIM Advanced instance starts another Windows process ("ODK client") in which the ODK application is executed synchronously with the STEP 7 user program. Which ODK client is started depends on the function library to be loaded: "Siemens.Simatic.PlcSim.Vplc1500.ODKClient.so.exe" for an original Shared Object "Siemens.Simatic.PlcSim.Vplc1500.ODKClient.x86.exe" for a 32-bit application "Siemens.Simatic.PlcSim.Vplc1500.ODKClient.x64.exe" for a 64-bit application The executable files of these processes are in the same directory as those of the PLCSIM Advanced Instances ("Siemens.SIMATIC.Simulation.Runtime.Instance.exe").
Note PLCSIM Advanced does not support asynchronous ODK functions.
Error codes
The same error codes as described in the Programming and Operating Manual "S7-1500 Open Development Kit 1500S" apply to the instructions in the real-time environment. Error codes are also available for PLCSIM Advanced, because the ODK client processes can be closed unexpectedly and therefore an error handling is required.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
81
Simulation 5.2 Simulate CPU with ODK functionality
Restrictions for stack processing
Note Limitations for stack processing in the version of CPU function libraries for real-timeenvironment PLCSIM Advanced ignores the stack size for a CPU function library that is adjusted via the parameter <SyncCallStackSize>. PLCSIM Advanced always provides the maximum stack size of 1 MB. See Programming and Operating Manual "S7-1500 Open Development Kit 1500S" V2.5, section 5.1.4 Defining the runtime properties of a CPU function library.
PLCSIM Advanced cannot catch any Exceptions of the type "Stack Overflow" while CPU function libraries for the real-time environment (SO files) are being executed. When developing a CPU function library (SO file), make sure that the maximum stack size of 1 MB is not exceeded. An overflow of the stack leads to an undefined behavior and can lead to the termination of the ODK client process.
Note Limitations for heap processing in the version of CPU function libraries (Windows Sync) If a heap corruption occurs when executing a C/C++ function from a CPU function library (DLL file), then this program error is first ignored and execution of the function continues. Only after fully processing the function is the corresponding error code returned (0x8090). When developing a CPU function library (DLL file), make sure to avoid heap corruption. This way you ensure that after fully processing a C/C++ function no error code is returned.
S7-PLCSIM Advanced
82
Function Manual, 11/2019, A5E37039512-AC
Simulation 5.2 Simulate CPU with ODK functionality
5.2.2
Loading functions
Loading functions - Instruction "<STEP7Prefix>_Load"
If you have loaded the TIA project on the PLCSIM Advanced and the instruction "<STEP7Prefix>_Load" was called for the first time, each PLCSIM Advanced instance starts another Windows process. The ODK client then attempts to load the function library which is specified in the SCL file. This is in the directory "<storage path of the instance> \SIMATIC_MC\ODK1500S". See GetStoragePath(), SetStoragePath() in the section Controller - Information and settings (Page 161).
The ODK client process continues until the instruction "<STEP7Prefix>_Unload" is called to unload the last loaded function library or until the process of the PLCSIM Advanced instance ends.
The function call is synchronous and returns after completion of the operation. The output parameter provides information on the progress status.
ODK error code for PLCSIM Advanced
The following table lists the error codes that apply in addition to the error codes that apply to the CPU specifically for ODK applications with PLCSIM Advanced:
Table 5- 3 ODK: Output parameter - Load functions
DONE 0
BUSY 0
ERROR 1
STATUS 0x80A4 = -32604
0
0
1
0x8095
= -32619
Description
· The ODK client process cannot be started. · A connection to the ODK client cannot be es-
tablished or has been interrupted.
· The ODK client process that is currently running expects a function library with a different binary format.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
83
Simulation 5.2 Simulate CPU with ODK functionality
5.2.3
Calling functions
Call functions - Instruction "<STEP7Prefix>SampleFunction"
When calling ODK functions, data is exchanged between the virtual controller and the function library.
The execution of a single function can be interrupted by the execution of higher prioritized OBs.
Technically, the execution of a function is an asynchronous instruction because it is executed in another process. However, the processes are synchronized via the virtual controller. This means that the function call does not return before either the function returns or the ODK client process is closed during the execution.
ODK error code for PLCSIM Advanced
The following table lists the error codes that apply in addition to the error codes that apply to the CPU specifically for ODK applications with PLCSIM Advanced:
Table 5- 4 ODK: Output parameter - Call functions
DONE 0
BUSY 0
ERROR 1
STATUS 0x80A4 = -32604
Description
· The connection to the ODK client was interrupted.
5.2.4
Unloading functions
Unload functions - Instruction "<STEP7Prefix>_Unload"
The CPU function library is unloaded by calling the instruction "<STEP7Prefix>_Unload". If no other function library is loaded or if the process of the PLCSIM Advanced instance is closed, then the ODK client process is shut down.
The function call is asynchronous, the call returns immediately. The output parameter informs about the progress status.
S7-PLCSIM Advanced
84
Function Manual, 11/2019, A5E37039512-AC
Simulation 5.3 Simulating Motion Control
5.3
Simulating Motion Control
Restrictions
PLCSIM Advanced simulates the real CPU, but not configured, connected technology modules or other I/O devices.
It is possible to download a STEP 7 project with technology modules for operation of motion control. However, the built-in logic of the technology modules is not part of the simulation. Therefore, the corresponding motion control instructions are not supported.
OB 91 and OB 92
If you convert a Motion Control project which contains the OB 91 and OB 92 from STEP 7 V13, then you cannot load this project to a PLCSIM Advanced.
Solution
Delete OB 91 and OB 92 in the project and recompile the project.
The OBs are thus created again with the simulation support required for PLCSIM Advanced. Compilation resets the properties of the blocks to the default values. Restore the required settings in the properties.
Overflow of motion control OBs
Due to the low performance of PCs, it may happen that a new motion control OB is started before the previous one has been completely calculated. This can put the CPU into the STOP operating state. In the diagnostics you will only find the note that a switch to STOP operating state has taken place.
Solution
Slow down the running of the virtual time to give the OB more time for processing.
Information on the scaling factor can be found in section Speed up and slow down simulation (Page 89).
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
85
Simulation 5.3 Simulating Motion Control
Simulation with external simulation software
Note In a virtual S7-1500 controller, the technology objects are connected to the process image. Simulation software can thus access the process image via the user interfaces (API) of PLCSIM Advanced and simulate the behavior of the other connected axes.
Simulation mode in STEP 7 The simulation mode in STEP 7 is a standard function of the technology objects and is independent of PLCSIM Advanced. If you want to move an axis in simulation mode, select the "Activate simulation" check box in STEP 7 under "Technology Object > Configuration> Basic Parameters > Simulation". No additional setting is required for a virtual axis.
Feedback of the axis position
The speed setpoint of the simulated drive is integrated into the actual position value with a time delay (PT1). The result of this calculation is returned to the technology object as position actual value of the axis.
Reference point approach of the axis
If you selected "Use zero mark via PROFIdrive frame" in STEP 7 for the reference point approach, PLCSIM Advanced responds immediately to any active (mode 2, 3, 8) or passive (mode 4, 5) reference point approach command (MC_Home). The actual position is predefined as the reference point.
Additional information
Information on "Setting in the drive and encoder connection" for actual value calculation of a virtual axis and on the topic "Virtual axis/Simulation" is available in the S7-1500T Motion Control (https://support.industry.siemens.com/cs/ww/en/view/109481326) function manual. For more information, refer to the S7-1500 Motion Control (https://support.industry.siemens.com/cs/ww/en/view/109739589) function manual and in the manuals for the supported SIMATIC controllers (https://support.industry.siemens.com/cs/ww/en/view/109744173).
S7-PLCSIM Advanced
86
Function Manual, 11/2019, A5E37039512-AC
Virtual time response
6
The virtual controller uses internally two types of clocks for simulation: A virtual clock and a real clock. The virtual clock is always the basis for the user program. It is used by components that are relevant for running the STEP 7 user program, such as cyclic OBs, cycle time monitoring, minimum cycle time, virtual system time and time calculations. Also, the time between two cycle control points is measured in virtual time. The virtual time can be accelerated or slowed for test purposes. The real clock always runs unchanged. It is used by components that are not subject to control processes, for example, communication with STEP 7.
Interruption of the process
Since PLCSIM Advanced runs in a Windows environment, Windows might temporarily suspend the virtual controller process. In such a case, both the virtual and the real clock stop in the virtual controller. They only continue to run when Windows resumes processing.
Virtual system time
When you start PLCSIM Advanced, the virtual system time of the virtual controller starts with the system time of Windows. The virtual system time is based on the virtual clock, i.e. if a scaling factor is used, the system time runs correspondingly faster or slower. All events that the virtual controller sends to the API provides a time stamp based on the system time.
Note Difference between system time and local time · System time: UTC ± 0 with daylight saving / standard time · Local time: UTC ± time zone with daylight saving time / winter time
API functions GetSystemTime() (Page 245) SetSystemTime() (Page 245) SystemTime { get; set; } (Page 245)
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
87
Virtual time response
Time offset
Note
Keep in mind that the time information of virtual system time and real local time differs by the time offset that is formed in addition to the selected scaling factor from the time zone offset and the daylight saving time/standard time offset.
Scaling factor
Using a scaling factor, you can speed up or slow down the virtual clock of the virtual controller for simulations. The default is 1, i.e. the course of the virtual time corresponds to the course of real time. Fast forward: A scaling factor greater than 1 accelerates the virtual clock.
Example: Scaling factor 2.0 The virtual time is running twice as fast. Slow motion: A scaling factor less than 1 decelerates the virtual clock.
Example: Scaling factor 0.5 The progress of the virtual time slows down to 50%.
API functions GetScaleFactor() (Page 246) SetScaleFactor() (Page 246) ScaleFactor { get; set; } (Page 247)
See also
Settings for the virtual time (Page 245)
S7-PLCSIM Advanced
88
Function Manual, 11/2019, A5E37039512-AC
Virtual time response 6.1 Speed up and slow down simulation
6.1
Speed up and slow down simulation
Influence of fast forward and slow motion
Simulations can be accelerated and slowed down. Fast forward and slow motion only affects time-based components, for example, cyclic OBs. Compared to the real time, they are performed more frequently with fast forward and less frequently with slow motion.
Fast forward and slow motion do not change the execution speed of the CPU machine codes. For example, the speed at which all operations of an OB1 cycle are executed does not change. The execution speed depends on the processor of the PC on which the virtual controller running. If you change the scaling factor, more or fewer cycle control points are reached in a given period of virtual time.
Note Performance
The performance depends on the size of your project, among other things.
If the scaling factor is too high and the cycle-time monitoring indicates that the PC was incapable of calculating the OB1 or cyclic OBs in the specified time, the virtual controller goes to STOP.
Recommendation: To avoid this, start with a small scaling factor and gradually increase it step-by-step while keeping the virtual controller in RUN.
If an overflow of events occurs, slow down the speed of the simulation. See Monitoring overflow (Page 398) and Cycle control (Page 248).
Fast forward
To speed up the virtual time, select a scaling factor greater than 1 in the Control Panel or in the API.
Slow motion
To slow down the virtual time, select a scaling factor less than 1 in the Control Panel or in the API.
API functions
GetScaleFactor() (Page 246) SetScaleFactor() (Page 246) ScaleFactor { get; set; } (Page 247)
See also
Settings for the virtual time (Page 245)
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
89
Virtual time response 6.2 Stop simulation
6.2
Stop simulation
Freeze state of the virtual controller
To stop a simulation and to synchronize a simulation partner, a virtual controller can be set to a freeze state via the API. When the virtual controller has reached a synchronization point, it sends the event OnSyncPointReached to the API clients.
Figure 6-1 Freeze state of the virtual controller
The following occurs in the freeze state: The virtual time is stopped. No OBs and no timers are running. The user program is no longer executed. The virtual controller is still accessible from the TIA Portal. The input and output data of the virtual controller are in a consistent state.
Note Freeze state during downloading To complete a download in freeze state, the virtual controller must pass a cycle control point at the end of the download.
Note Freeze-state operating state The freeze state is an internal operating state of the virtual controller. It does not correspond to RUN/STOP mode of a CPU. In the freeze state, the virtual controller maintains the last operating state. · The LED display on the Control Panel and on the Web server accordingly shows RUN or
STOP for instance. · The instance shows the operating state SROS_FREEZE / Freeze, see EOperatingState
(Page 369).
S7-PLCSIM Advanced
90
Function Manual, 11/2019, A5E37039512-AC
Virtual time response 6.2 Stop simulation
Synchronization points
A synchronization point always exists before inputs are read in, for example at the cycle control point or at the beginning of a cyclic OB.
Figure 6-2 Overview of the synchronization points
Trigger freeze state
To trigger the freeze state, following modes are available for the virtual controller: SingleStep operating modes
See Synchronize simulation partner cycle-controlled (Page 92). TimespanSynchronized operating modes
See Synchronize simulation partner time-controlled (Page 94). In Default operating mode, the virtual controller does not change into a freeze state. API functions Settings for the cycle control (Page 248) GetOperatingMode() (Page 248) SetOperatingMode() (Page 248) OperatingMode { get; set; } (Page 248) EOperatingMode (Page 370)
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
91
Virtual time response 6.3 Synchronize simulation partner
6.3
Synchronize simulation partner
6.3.1
Synchronize simulation partner cycle-controlled
SingleStep operating modes
Several simulation partners (clients) are synchronized cycle-controlled with the SingleStep operating modes of the virtual controller. The operating modes define the synchronization point at which the virtual controller changes to the freeze state and sends the OnSyncPointReached event.
Table 6- 1 Cycle-controlled operating modes (SingleStep)
Operating mode
Synchronization point
Minimum cycle time1
Cycle control point
Before reading in the process image partition
"C"
"P"
"T"
SingleStep_C
SingleStep_P
SingleStep_CP
SingleStep_CT
SingleStep_CPT
1 In addition, the minimum cycle time of the OB 1 is overwritten in this operating mode. When you define a minimum cycle time of 200 ms via the API, the minimum distance between two cycle control points is 200 virtual milliseconds. The default setting is 100 ms.
API functions / events GetOverwrittenMinimalCycleTime_ns() (Page 250) SetOverwrittenMinimalCycleTime_ns() (Page 250) OverwrittenMinimalCycleTime_ns { get; set; } (Page 251) RunToNextSyncPoint() (Page 251) OnSyncPointReached (Page 284) EventCallback_II_SREC_ST_UINT32_INT64_INT64_UINT32 (Page 316) /
Delegate_II_EREC_DT_UINT32_INT64_INT64_UINT32 (Page 331)
Terminating the freeze state
The RunToNextSyncPoint() function cancels the freeze state and induces the virtual controller to continue running until the next synchronization point.
Switching to the Default operating mode also terminates the freeze state.
S7-PLCSIM Advanced
92
Function Manual, 11/2019, A5E37039512-AC
Example
Virtual time response 6.3 Synchronize simulation partner
The figure schematically shows the sequence in the SingleStep_CP operating mode. In addition to the OnSyncPointReached event the virtual controller also sends the virtual time since the last synchronization point of the same process image partition ID or of any process image partition ID has been reached (TimeSinceSameSyncPoint_ns / TimeSinceAnySyncPoint_ns). The RunToNextSyncPoint() function cancels the freeze state.
Figure 6-3 Example: Sequence in the SingleStep_CP operating mode
Changing the settings in the watch table
Note Selecting triggers for monitoring of tags in the SingleStep operating modes In TIA Portal the watch table in basic mode shows the values for outputs and bit memories before the processing. In order to display the tag values after the processing, select the extended mode for the watch table and then select "Permanently, at end of scan cycle" in the "Monitor with trigger" column.
See also
Cycle control (Page 248)
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
93
Virtual time response 6.3 Synchronize simulation partner
6.3.2
Synchronize simulation partner time-controlled
TimespanSynchronized operating modes
Several simulation partners (clients) are synchronized time-controlled with the TimespanSynchronized operating modes of the virtual controller. The operating modes define the synchronization point at which the virtual controller changes to the freeze state and sends the OnSyncPointReached event.
Table 6- 2 Time-controlled operating modes (TimespanSynchronized)
Operating mode
TimespanSynchronized_C TimespanSynchronized_CP TimespanSynchronized_P
Synchronization point
Cycle control point
Before reading in the process image partition
"C"
"P"
API functions / events Settings for cycle control (Page 248) StartProcessing() (Page 252) OnSyncPointReached (Page 284)
Terminating the freeze state
The StartProcessing(t) function cancels the freeze state and induces the virtual controller to continue running at least as long as required (on the basis of the virtual time) before it changes back to the freeze state at the next synchronization point.
Switching to the Default operating mode also terminates the freeze state.
S7-PLCSIM Advanced
94
Function Manual, 11/2019, A5E37039512-AC
Example
Virtual time response 6.3 Synchronize simulation partner
The figure schematically shows the sequence in the TimespanSynchronized_CP operating mode. In addition to the OnSyncPointReached event the virtual controller also sends the runtime since the last call of the StartProcessing(t) (TimeSinceSameSyncPoint_ns / TimeSinceAnySyncPoint_ns) function. The StartProcessing() function cancels the freeze state.
Figure 6-4 Example: Sequence in the TimespanSynchronized_CP operating mode
Description
At least two clients are synchronized on the basis of a virtual period for the time-controlled operating modes. A client can be an instance of a virtual controller or an application that uses the Runtime API (API client). The synchronization must be performed by a synchronization master.
The synchronization master instructs a client to run for a specific period. The time period is specified by the master in nanoseconds. The client then runs for the expected period before he goes into the freeze state at the next synchronization point. Before switching to the freeze state, the client sends the master the exact amount of time that he currently needed. Thereafter, the master signals the next client to catch up.
API client as master
The API client as master signals each client when it should start. The master receives events from every client when they occur.
An API client can only "time manage" instances of a virtual controller. The API client does not receive events from other API clients. It cannot send messages to other API clients.
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
95
User interfaces (API)
7
7.1
Introduction
Components of the Simulation Runtime
The following components are relevant for handling the Simulation Runtime of PLCSIM Advanced:
Table 7- 1 Components of the Simulation Runtime
Components
Description
· "Siemens.Simatic.Simulation. Runtime.Manager.exe"
· "Siemens.Simatic.Simulation. Runtime.Instance.exe"
A Windows process that runs in the background. Main component of Runtime that manages all other Runtime components.
The process is started automatically as soon as an application attempts to initialize the Runtime API. It is ended automatically as soon as there is no longer any application running that initialized the Runtime API.
The process of the instance that loads a DLL of a virtual controller. Each virtual controller generates its own process.
· "Siemens.Simatic.Simulation. Runtime.Api.x86.dll"
· "Siemens.Simatic.Simulation. Runtime.Api.x64.dll"
API libraries that must load an application to use the Simulation Runtime. The libraries contain interfaces for native code and managed code.
The "Runtime.Api.x86.dll" is loaded exclusively by 32-bit applications, and the "Runtime.Api.x64.dll" by 64-bit applications.
· "SimulationRuntimeApi.h"
Header file that describes all data types that require a native C++ application to use the API library.
· "Siemens.Simatic.PlcSim.Vplc1500. ODK client process for a CPU function library (original
ODKClient.so.exe"
Shared Object)
· "Siemens.Simatic.PlcSim.Vplc1500. ODK client process for a 32-bit application ODKClient.x86.exe"
· "Siemens.Simatic.PlcSim.Vplc1500. ODK client process for a 64-bit application ODKClient.x64.exe"
S7-PLCSIM Advanced
96
Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.1 Introduction
External applications and Simulation Runtime
The following figure schematically presents the access of external applications to Simulation Runtime via the Runtime API. The Simulation Runtime Manager manages the Runtime instances. These load the libraries of the virtual controllers. An external application can be, for example, another simulation software or a graphical user interface (GUI).
Figure 7-1 External applications and Simulation Runtime
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
97
User interfaces (API) 7.1 Introduction
7.1.1
Access to instances
Access via the Control Panel and the API
You can access only one instance that is available locally on the PC via the Control Panel. It does not matter on which PC an instance was created and started. With distributed communication, the Runtime API accesses the instance of the other PCs via the Simulation Runtime Manager.
Access to a local instance via the Control Panel Access to a remote instance on the Runtime API
Figure 7-2 Access to instances with distributed communication
API functions
Table 7-6 Overview of IInstances functions - Native C++ (Page 102) Table 7-13 Overview of IInstances functions - .NET (C#) (Page 106) Table 7-8 Overview of IRemoteRuntimeManager functions - Native C++ (Page 104) Table 7-15 Overview of IRemoteRuntimeManager functions - .NET (C#) (Page 108)
See also
Overview of user interfaces for managed code (Page 105)
S7-PLCSIM Advanced
98
Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.1 Introduction
7.1.2
User interfaces (API)
The user interfaces of Simulation Runtime include functions you use, for example, to create instances, to change the operating state of a virtual controller, or to exchange I/O data. Simulation Runtime has the following user interfaces: ISimulationRuntimeManager IInstances IRemoteRuntimeManager
API and external applications
The Runtime API makes the interfaces available to an external application.
ISimulationRuntimeManager
Interface of the Runtime Manager. It is used to register new Runtime instances, to search through existing Runtime instances, and to receive an interface of a registered instance. Up to 16 instances can be registered in one Runtime Manager.
IInstances
Interface of a Runtime instance. It is used to change the operating state of a virtual controller and to exchange I/O data. Each instance has a unique name and an ID.
Figure 7-3 API and external applications
S7-PLCSIM Advanced
Function Manual, 11/2019, A5E37039512-AC
99
User interfaces (API) 7.1 Introduction
Access to API functions and data types
Required functions and data types are available for native C++ and .NET (C#). Overview of user interfaces for native C++ (Page 100) Overview of data types for native C++ (Page 108) Overview of user interfaces for managed code (Page 105) Overview of data types for managed code (Page 110)
Note The list of tables in this manual gives you direct access to the description of the individual functions and data types.
Transfer parameters for API functions
All API functions that return a value using the function parameters expect a user-allocated memory area as a transfer parameter. Zero pointers are not permitted. Exceptions to this are the functions that return an interface of a virtual controller: An ISimulationRuntimeManager interface An IRemoteRuntimeManager interface An IInstance interface
7.1.3
Overview of user interfaces for native C++
Initializing and shutting down API
Table 7- 2 Overview of initializing and shutting down API - Native C++
Actions Initialize API
Shut down API (Page 117) Logging off API library (Page 120)
Functions
InitializeApi (Page 112) RuntimeApiEntry_Initialize (Page 114) DestroyInterface RuntimeApiEntry DestroyInterface FreeApi ShutdownAndFreeApi
100
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.1 Introduction
Global functions
Table 7- 3 Overview of global functions - Native C++
Actions Global functions (Page 122)
Functions
GetNameOfAreaSection() GetNameOfCPUType() GetNameOfCommunicationInterface() GetNameOfDataType() GetNameOfLEDMode() GetNameOfLEDType() GetNameOfOperatingMode() GetNameOfOperatingState() GetNameOfPrimitiveDataType() GetNameOfTagListDetails() GetNameOfErrorCode() GetNameOfRuntimeConfigChanged() GetNameOfInstanceConfigChanged() GetNameOfDiagSeverity() GetNameOfDirection() GetNameOfRackOrStationFaultType() GetNameOfProcessEventType() GetNameOfPullOrPlugEventType() GetNameOfCycleTimeMonitoringMode() GetNameOfDiagProperty()
GetNameOfAutodiscoverType()
API ISimulationRuntimeManager
Table 7- 4 Overview of API ISimulationRuntimeManager functions - Native C++
Settings Interface (Page 127)
Simulation Runtime instances (Page 129)
Remote connections (Page 137)
Functions
GetVersion() IsInitialized() IsRuntimeManagerAvailable() Shutdown() GetRegisteredInstancesCount() GetRegisteredInstanceInfoAt() RegisterInstance() RegisterCustomInstance() CreateInterface() OpenPort() ClosePort() GetPort() GetRemoteConnectionsCount() GetRemoteConnectionInfoAt() RemoteConnect() RunAutodiscover()
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
101
User interfaces (API) 7.1 Introduction
Table 7- 5 Overview of API ISimulationRuntimeManager events - Native C++
Events OnConfigurationChanged (Page 144)
OnRuntimeManagerLost (Page 147)
OnAutodiscover (Page 150)
Functions
RegisterOnConfigurationChangedCallback() UnregisterOnConfigurationChangedCallback() RegisterOnConfigurationChangedEvent() UnregisterOnConfigurationChangedEvent() WaitForOnConfigurationChangedEvent() RegisterOnRuntimeManagerLostCallback() UnregisterOnRuntimeManagerLostCallback() RegisterOnRuntimeManagerLostEvent() UnregisterOnRuntimeManagerLostEvent() WaitForOnRuntimeManagerLostEvent() RegisterOnAutodiscoverCallback() UnregisterOnAutodiscoverCallback()
API IInstances
Table 7- 6 Overview of IInstances functions - Native C++
Settings Interface (Page 151)
Controller (Page 157)
Operating state (Page 166)
Tag list (Page 176) I/O access via address - Reading (Page 183) I/O access via address - Writing (Page 191)
Functions
GetID() GetName() GetCPUType() SetCPUType() GetCommunicationInterface() SetCommunicationInterface() GetInfo() UnregisterInstance() GetControllerName() GetControllerShortDesignation() GetControllerIPCount() GetControllerIP() GetControllerIPSuite4() SetIPSuite() GetStoragePath() SetStoragePath() ArchiveStorage() RetrieveStorage() CleanupStoragePath() PowerOn() PowerOff() Run() Stop() GetOperatingState() MemoryReset() UpdateTagList() GetTagListStatus() GetTagInfoCount() GetTagInfos() CreateConfigurationFile() GetAreaSize() ReadBit() ReadByte() ReadBytes() ReadSignals() WriteBit() WriteByte() WriteBytes() WriteSignals()
102
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.1 Introduction
Settings I/O access via tag name Reading (Page 199)
I/O access via tag name Writing (Page 221)
Virtual time (Page 245) Cycle control (Page 248)
Acyclic services (Page 256)
Functions
Read() ReadBool() ReadChar(), ReadWChar() ReadDouble() ReadFloat() ReadInt8(), ReadInt16(), ReadInt32(), ReadInt64() ReadUInt8(), ReadUInt16(), ReadUInt32(), ReadUInt64() ReadSignals() Write() WriteBool() WriteChar(), WriteWChar() WriteDouble() WriteFloat() WriteInt8(), WriteInt16(), WriteInt32(), WriteInt64(), WriteUInt8(), WriteUInt16(), WriteUInt32(), WriteUInt64() WriteSignals() GetSystemTime() SetSystemTime() GetScaleFactor() SetScaleFactor() GetOperatingMode() SetOperatingMode() SetSendSyncEventInDefaultModeEnabled() IsSendSyncEventInDefaultModeEnabled GetOverwrittenMinimalCycleTime_ns() SetOverwrittenMinimalCycleTime_ns() RunToNextSyncPoint() StartProcessing() SetCycleTimeMonitoringMode() GetCycleTimeMonitoringMode()
Table 7- 7 Overview of IInstances events - Native C++
Events OnOperatingStateChanged (Page 274)
OnLedChanged (Page 277)
OnConfigurationChanging (Page 279)
OnConfigurationChanged (Page 282)
OnSyncPointReached (Page 284)
Functions
RegisterOnOperatingStateChangedCallback() UnregisterOnOperatingStateChangedCallback() RegisterOnOperatingStateChangedEvent() UnregisterOnOperatingStateChangedEvent() WaitForOnOperatingStateChangedEvent() RegisterOnLedChangedCallback() UnregisterOnLedChangedCallback() RegisterOnLedChangedEvent() UnregisterOnLedChangedEvent() WaitForOnLedChangedEvent() RegisterOnConfigurationChangingCallback() UnregisterOnConfigurationChangingCallback() RegisterOnConfigurationChangingEvent() UnregisterOnConfigurationChangingEvent() WaitForOnConfigurationChangingEvent() RegisterOnConfigurationChangedCallback() UnregisterOnConfigurationChangedCallback() RegisterOnConfigurationChangedEvent() UnregisterOnConfigurationChangedEvent() WaitForOnConfigurationChangedEvent() RegisterOnSyncPointReachedCallback()UnregisterOnSyncPointReachedCallback() RegisterOnSyncPointReachedEvent()UnregisterOnSyncPointReachedEvent()WaitFo rOnSyncPointReachedEvent()
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
103
User interfaces (API) 7.1 Introduction
API IRemoteRuntimeManager
Table 7- 8 Overview of IRemoteRuntimeManager functions - Native C++
Settings Interface (Page 296)
Simulation Runtime instances (Page 300)
Functions
GetVersion() GetIP() GetPort() GetRemoteComputerName() Disconnect() GetRegisteredInstancesCount() GetRegisteredInstanceInfoAt() RegisterInstance() RegisterCustomInstance() CreateInterface()
Table 7- 9 Overview of IRemoteRuntimeManager events - Native C++
Events OnConnectionLost (Page 308)
Functions
RegisterOnConnectionLostCallback() UnregisterOnConnectionLostCallback() RegisterOnConnectionLostEvent() UnregisterOnConnectionLostEvent() WaitForOnConnectionLostEvent()
104
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.1 Introduction
7.1.4
Overview of user interfaces for managed code
Initializing and shutting down API
Table 7- 10 Overview of initializing and shutting down API - .NET (C#)
Actions Initialize API (Page 116) Shut down API (Page 122)
Functions Siemens.Simatic.Simulation.Runtime.SimulationRuntimeManager
API ISimulationRuntimeManager
Table 7- 11 Overview of ISimulationRuntimeManager functions - .NET (C#)
Settings Interface (Page 127)
Simulation Runtime instances (Page 129)
Remote connections (Page 137)
Functions
Version { get; } IsInitialized { get; } IsRuntimeManagerAvailable { get; } Shutdown() RegisterInstanceInfo { get; } RegisterInstance() RegisterCustomInstance() CreateInterface() OpenPort() ClosePort() Port { get; } RemoteConnectionInfo { get; } RemoteConnect() RunAutodiscover()
Table 7- 12 Overview of ISimulationRuntimeManager events - .NET (C#)
Events OnConfigurationChanged (Page 144)
OnRuntimeManagerLost (Page 147)
OnAutodiscover (Page 150)
Functions
OnConfigurationChanged RegisterOnConfigurationChangedEvent() UnregisterOnConfigurationChangedEvent() WaitForOnConfigurationChangedEvent() OnRuntimeManagerLost() RegisterOnRuntimeManagerLostEvent() UnregisterOnRuntimeManagerLostEvent() WaitForOnRuntimeManagerLostEvent() OnAutodiscoverData
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
105
User interfaces (API) 7.1 Introduction
API IInstances
Table 7- 13 Overview of IInstances functions - .NET (C#)
Settings Interface (Page 151)
Controller - Information and settings (Page 157)
Operating state (Page 166)
Tag list (Page 176) I/O access via address - Reading (Page 183)
I/O access via address - Writing (Page 191) I/O access via tag name Reading (Page 199)
I/O access via tag name Writing (Page 221)
Virtual time (Page 245)
Functions
Dispose () ID { get; } Name { get; } CPUType { get; set; } CommunicationInterface { get; } Info { get; } UnregisterInstance() ControllerName { get; } ControllerShortDesignation { get; } ControllerIPSuite4 { get; } SetIPSuite() StoragePath { get; set; } ArchiveStorage() RetrieveStorage() CleanupStoragePath() PowerOn() PowerOff() Run() Stop() OperatingState { get; } MemoryReset() UpdateTagList() GetTagListStatus() TagInfos { get; } CreateConfigurationFile() InputArea | MarkerArea | OutputArea { get; } AreaSize { get; } ReadBit() ReadByte() ReadBytes() ReadSignals() WriteBit() WriteByte() WriteBytes() WriteSignals() Read() ReadBool() ReadChar(), ReadWChar() ReadDouble() ReadFloat() ReadInt8(), ReadInt16(), ReadInt32(), ReadInt64() ReadUInt8(), ReadUInt16(), ReadUInt32(), ReadUInt64() ReadSignals() Write() WriteBool() WriteChar(), WriteWChar() WriteDouble() WriteFloat() WriteInt8(), WriteInt16(), WriteInt32(), WriteInt64(), WriteUInt8(),WriteUInt16(), WriteUInt32(), WriteUInt64() WriteSignals() SystemTime { get; set; } ScaleFactor { get; set; }
106
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.1 Introduction
Settings Cycle control (Page 248)
Acyclic services (Page 256)
Functions
OperatingMode { get; set; } IsSendSyncEventInDefaultModeEnabled { get; set; } OverwrittenMinimalCycleTime_ns { get; set; } RunToNextSyncPoint StartProcessing() SetCycleTimeMonitoringMode() GetCycleTimeMonitoringMode()
Table 7- 14 Overview of IInstances events - .NET (C#)
Events OnOperatingStateChanged (Page 274)
OnLedChanged (Page 277)
OnConfigurationChanging (Page 279)
OnConfigurationChanged (Page 282)
OnSyncPointReached (Page 284)
Functions
OnOperatingStateChanged RegisterOnOperatingStateChangedEvent() UnregisterOnOperatingStateChangedEvent() WaitForOnOperatingStateChangedEvent() OnLedChanged RegisterOnLedChangedEvent() UnregisterOnLedChangedEvent() WaitForOnLedChangedEvent() OnConfigurationChanging RegisterOnConfigurationChangingEvent() UnregisterOnConfigurationChangingEvent() WaitForOnConfigurationChangingEvent() OnConfigurationChanged RegisterOnConfigurationChangedEvent() UnregisterOnConfigurationChangedEvent() WaitForOnConfigurationChangedEvent() OnSyncPointReached RegisterOnSyncPointReachedEvent() UnregisterOnSyncPointReachedEvent() WaitForOnSyncPointReachedEvent()
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
107
User interfaces (API) 7.1 Introduction
API IRemoteRuntimeManager
Table 7- 15 Overview of IRemoteRuntimeManager functions - .NET (C#)
Settings Interface (Page 296)
Simulation Runtime instances (Page 129)
Functions
Dispose() Version { get; } IP { get; } Port { get; } RemoteComputerName { get; } Disconnect() RegisterInstanceInfo { get; } RegisterInstance() RegisterCustomInstance() CreateInterface()
Table 7- 16 Overview IRemoteRuntimeManager events - .NET (C#)
Events
OnConnectionLost() (Page 308)
Functions
OnConnectionLost() RegisterOnConnectionLostEvent() UnregisterOnConnectionLostEvent() WaitForOnConnectionLostEvent()
7.1.5
Overview of data types for native C++
The following table shows which data types are available for the simulation in Runtime Manager.
Table 7- 17 Overview of data types - Native C++
Data type
DLL import functions (Page 312)
ApiEntry_Initialize ApiEntry_DestroyInterface
Event callback functions (Page 313)
EventCallback_VOID EventCallback_SRCC_UINT32_UINT32_INT32 EventCallback_SRRSI_AD EventCallback_IRRTM EventCallback_II_SREC_ST_SROS_SROS EventCallback_II_SREC_ST_UINT32_INT64_INT64_UINT32 EventCallback_II_SREC_ST EventCallback_II_SREC_ST_SRICC_UINT32_UINT32_UINT32_UINT32 EventCallback_II_SREC_ST_SRLT_SRLM EventCallback_II_SREC_ST_SDRI EventCallback_II_SREC_ST_SDRI_BYTE EventCallback_II_SREC_ST_UINT32_UINT32 EventCallback_II_SREC_ST_UINT32_UINT32_EPET_UINT32 EventCallback_II_SREC_ST_UINT32_EPPET_UINT32 EventCallback_II_SREC_ST_UINT32_ERSFET EventCallback II SREC ST UINT32
Definitions and constants (Page 340)
Unions (Page 341)
UIP UDataValue
108
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Data type Structures (Page 343)
Enumerations (Page 364)
SDataValue SDVBNI SDataValueByAddress SDataValueByName SConnectionInfo SInstanceInfo SDimension STagInfo SIP SIPSuite4 SOnSyncPointReachedResult SDataValueByAddressWithCheck SDataValueByNameWithCheck SDataRecordInfo SDataRecord SConfiguredProcessEvents SDiagExtChannelDescription SAutodiscoverData ERuntimeErrorCode EArea EOperatingState EOperatingMode ECPUType ECommunicationInterface ELEDType ELEDMode EPrimitiveDataTypes EDataType ETagListDetails ERuntimeConfigChanged EInstanceConfigChanged EPullOrPlugEventType EProcessEventType EDirection EDiagProperty EDiagSeverity ERackOrStationFaultType ECycleTimeMonitoringMode EAutodiscoverType
User interfaces (API) 7.1 Introduction
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
109
User interfaces (API) 7.1 Introduction
7.1.6
Overview of data types for managed code
The following table shows which data types are available for the simulation in Runtime Manager.
Table 7- 18 Overview of data types - .NET (C#)
Data type
Delegate definitions (Page 327)
- Event handler methods
Delegate_Void Delegate_SRCC_UINT32_UINT32_INT32 Delegate_SRRSI_AD Delegate_IRRTM Delegate_II_EREC_DT_EOS_EOS Delegate_II_EREC_DT_UINT32_INT64_INT64_UINT32 Delegate_II_EREC_DT Delegate_II_EREC_DT_SRICC_UINT32_UINT32_UINT32_UINT32 Delegate_II_EREC_DT_ELT_ELM Delegate_II_EREC_DT_SDRI Delegate_II_EREC_DT_SDR Delegate_SREC_ST_UINT32_UINT32 Delegate_SREC_ST_UINT32_UINT32_EPET_UINT32 Delegate_SREC_ST_UINT32_EPPET_UINT32 Delegate_SREC_ST_UINT32_ERSFET Delegate SREC ST UINT32
Definitions and constants (Page 340)
Structures (Page 343)
SDataValue SDVBNI SDataValueByAddress SDataValueByName SConnectionInfo SInstanceInfo SDimension STagInfo SIP SIPSuite4 SOnSyncPointReachedResult SDataValueByAddressWithCheck SDataValueByNameWithCheck SDataRecordInfo SDataRecord SConfiguredProcessEvents SDiagExtChannelDescription SAutodiscoverData
Enumerations (Page 362)
ERuntimeErrorCode EArea EOperatingState EOperatingMode ECPUType ECommunicationInterface ELEDType ELEDMode EPrimitiveDataTypes EDataType ETagListDetails ERuntimeConfigChanged EInstanceConfigChanged EPullOrPlugEventType EProcessEventType EDirection EDiagProperty EDiagSeverity ERackOrStationFaultType ECycleTimeMonitoringMode EAutodiscoverType
110
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
7.2
Initialize API
User interfaces (API) 7.2 Initialize API
7.2.1
Load API library
Description
With PLCSIM Advanced the interfaces of the API V3.0 are not compatible with the interfaces of previous API versions. However, the Runtime Manager of PLCSIM Advanced V3.0 is compatible with the API of previous PLCSIM Advanced versions.
Earlier versions of the API are also installed during the installation of PLCSIM Advanced V3.0.
The default path is:
C:\Program Files (x86)\Common Files\Siemens\PLCSIMADV\API\1.0
C:\Program Files (x86)\Common Files\Siemens\PLCSIMADV\API\2.0
C:\Program Files (x86)\Common Files\Siemens\PLCSIMADV\API\2.1
C:\Program Files (x86)\Common Files\Siemens\PLCSIMADV\API\3.0
The installation path of PLCSIM Advanced is contained in the registry:
Key: "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Siemens\Shared Tools\PLCSIMADV_SimRT"
Value: "Path"
To maintain the path to the API, add the character string of the following subdirectory at the end: "API\<API version>" (e.g. "API\3.0").
When you use this path the API library (DLL) is loaded directly from the installation directory.
Reference
Additional information can be found in:
For Native C++ in section InitializeApi() (Page 112).
For .NET via the call of the function "System.Reflection.Assembly.LoadFile(string)" in the online documentation for MSDN.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
111
User interfaces (API) 7.2 Initialize API
7.2.2
Native C++
7.2.2.1
InitializeApi()
Description
The InitializeApi function loads the API library (DLL) and initializes the API. The function loads the version of the DLL that is compatible with the architecture of your application and which is also compatible with the header file of the API ("SimulationRuntimeApi.h").
To load the DLL, the function InitializeApi searches in the following directories one after the other:
In the directory to which the parameter of the function leads (in_SimulationRuntimeApiDllPath)
In the directory of your application that calls this function.
In the installation directory of PLCSIM Advanced
If no DLL is available, the function accesses the next directory.
The function returns an interface to the Simulation Runtime Manager. Use this interface to create a new instance of the virtual controller or to obtain access to an existing instance.
Table 7- 19 InitializeApi() - Native C++
Syntax Parameters
ERuntimeErrorCode InitializeApi( ISimulationRuntimeManager** out_SimulationRuntimeManagerInterface
); ERuntimeErrorCode InitializeApi(
WCHAR* in_SimulationRuntimeApiDllPath, ISimulationRuntimeManager** inout_SimulationRuntimeManagerInterface );
· ISimulationRuntimeManager** out_SimulationRuntimeManagerInterface:
Pointer to a Runtime Manager interface pointer. The pointer must be initialized with NULL. The interface is created within the function. See Data types (Page 311).
· WCHAR* in_SimulationRuntimeApiDllPath:
The path to the Runtime API library.
112
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.2 Initialize API
Return values Example C++
Runtime error code SREC_OK SREC_WRONG_ARGUMENT
SREC_WRONG_VERSION
Condition
The function is successful.
The pointer to the Runtime Manager interface does not equal NULL.
· The required version of the interface is incompatible with the version used to compile the API.
· The version of the API is not compatible
with Runtime.
See Compatibility during upgrade (Page 33).
SREC_CONNECTION_ERROR
Unable to establish a connection to the Runtime Manager.
SREC_ERROR_LOADING_DLL
The API library cannot be loaded.
SREC_RUNTIME_NOT_AVAILABLE No Runtime Manager runs in this Windows user session.
// Include The Headerfile Of The API #include "SimulationRuntimeApi.h"
// Prepare The Variables ERuntimeErrorCode result = SREC_INVALID_ERROR_CODE; ISimulationRuntimeManager* api = NULL;
// Initialize The API And Get The RuntimeManager Interface result = InitializeApi(&api);
Note If you no longer require the interface, delete it. See DestroyInterface() (Page 118).
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
113
User interfaces (API) 7.2 Initialize API
7.2.2.2
RuntimeApiEntry_Initialize
Description
Use the function RuntimeApiEntry_Initialize only if the API library (DLL) is to be loaded from a different directory than the directory of your application that calls this function.
When the API is initialized, the API library is first loaded and the Initialize function is then imported and called.
The function returns an interface to the Simulation Runtime Manager. Use this interface to create a new instance of the virtual controller or to obtain access to an existing instance.
Table 7- 20 RuntimeApiEntry_Initialize - Native C++
Syntax Parameters
__declspec(dllexport) ERuntimeErrorCode RuntimeApiEntry_Initialize( ISimulationRuntimeManager** out_SimulationRuntimeManagerInterface, UINT32 in_InterfaceVersion
); · ISimulationRuntimeManager**
out_SimulationRuntimeManagerInterface:
Pointer to a Runtime Manager interface pointer. The pointer must be initialized with NULL. The interface is created within the function. See Data types (Page 311).
· UINT32 in_InterfaceVersion:
Return values
Version of the API interface to be downloaded: DAPI_DLL_INTERFACE_VERSION.
Runtime error code SREC_OK
Condition The function is successful.
SREC_WRONG_ARGUMENT SREC_WRONG_VERSION
The pointer to the Runtime Manager interface does not equal NULL.
· The required version of the interface is incompatible with the version used to compile the API.
SREC_CONNECTION_ERROR SREC_RUNTIME_NOT_AVAILABLE
· The version of the API is not compatible with Runtime.
See Compatibility during upgrade (Page 33).
Unable to establish a connection to the Runtime Manager.
No Runtime Manager runs in this Windows user session.
114
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.2 Initialize API
Example C++
// Include The Headerfile Of The API #include "SimulationRuntimeApi.h"
// Prepare The Variables ERuntimeErrorCode result = SREC_INVALID_ERROR_CODE; HMODULE dllHandle = NULL; ApiEntry_Initialize Initialize = NULL; ISimulationRuntimeManager* api = NULL;
// Load The DLL And Import The "Initialize" Function (using the Win32 API) dllHandle = LoadLibrary(DAPI_DLL_NAME_X86); if ( dllHandle != NULL ) {
Initialize = (ApiEntry_Initialize)GetProcAddress(dllHandle, DAPI_ENTRY_INITIALIZE); }
// Initialize The API And Get The RuntimeManager Interface if ( Initialize != NULL ) {
result = Initialize(&api, DAPI_DLL_INTERFACE_VERSION); }
Note If you no longer require the interface, delete it. See DestroyInterface() (Page 118).
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
115
User interfaces (API) 7.2 Initialize API
7.2.3
.NET (C#)
7.2.3.1
Initialize
Description
The entry point to the API is the static class Siemens.Simatic.Simulation.Runtime.SimulationRuntimeManager. The API is initialized when a function of this class is used the first time.
Table 7- 21 Initialize - .NET (C#)
Exceptions
Siemens.Simatic.Simulation.Runtime.SimulationInitializationException
Runtime error code
Condition
ERuntimeErrorCode.ConnectionError
Unable to establish a connection to the Runtime Manager.
ERuntimeErrorCode.WrongVersion
The version of the API is not compatible with Runtime.
See Compatibility during upgrade (Page 33).
ERuntimeErrorCode.RuntimeNotAvailable
No Runtime Manager runs in this Windows user session.
116
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
7.3
Shut down API
User interfaces (API) 7.3 Shut down API
7.3.1
Native C++
Basic procedure for deleting the user interfaces
To delete all user interfaces, generally follow these steps: 1. Delete the interfaces IInstances and IRemoteRuntimeManager. 2. Call the Shutdown() function of the ISimulationRuntimeManager interface. 3. Delete the ISimulationRuntimeManager interface. 4. Unload the API library (DLL) with the Win32 API-Funktion FreeLibrary().
Deleting the user interfaces via functions
Deleting the user interfaces is also possible via functions. If the API was initialized using the InitializeApi() function, you delete the user interfaces using the following functions: FreeApi() (Page 120) ShutdownAndFreeApi() (Page 121)
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
117
User interfaces (API) 7.3 Shut down API
7.3.1.1
DestroyInterface()
Description
A function pointer to the RuntimeApiEntry_DestroyInterface function. The function pointer DestoyInterface() is only valid if the InitializeApi function has been successfully called.
The function unloads the memory of an ISimulationRuntimeManager, IRemoteRuntimeManager or IInstance interface.
Table 7- 22 DestroyInterface() - Native C++
Syntax Parameters
ERuntimeErrorCode DestroyInterface( IBaseInterface* in_Interface
); · IBaseInterface* in_Interface:
Return values Example C++
The interface to be deleted.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_WRONG_ARGUMENT
The pointer to the interface is NULL.
// Include The Headerfile Of The API #include "SimulationRuntimeApi.h"
// The Interfaces ERuntimeErrorCode result; ISimulationRuntimeManager* api = NULL; IInstance* instance = NULL;
// Init the DLL and create an instance result = InitializeApi(&api); result = api->RegisterInstance(&instance);
// Destroy Instance Interfaces result = DestroyInterface(instance); instance = NULL;
118
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.3 Shut down API
7.3.1.2
RuntimeApiEntry_DestroyInterface
Description
Use the RuntimeApiEntry_DestroyInterface function only if the API library (DLL) is to be loaded from a different directory than the Startup directory of the application that calls this function.
If the API was initialized using the InitializeApi function, you select the DestroyInterface() (Page 118) function.
The function unloads the memory of an ISimulationRuntimeManager, IRemoteRuntimeManager or IInstance interface.
Table 7- 23 RuntimeApiEntry_DestroyInterface() - Native C++
Syntax Parameters
__declspec(dllexport) ERuntimeErrorCode RuntimeApiEntry_DestroyInterface(
IBaseInterface* in_Interface ); · IBaseInterface* in_Interface:
Return values Example C++
The interface to be deleted.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_WRONG_ARGUMENT
The pointer to the interface is NULL.
// Include The Headerfile Of The API #include "SimulationRuntimeApi.h"
// Prepare The Variables ERuntimeErrorCode result = SREC_INVALID_ERROR_CODE; HMODULE dllHandle = NULL; ApiEntry_DestroyInterface Destroy = NULL; IInstance* instance = NULL;
// Load The DLL And Import The "DestroyInterface" Function (using the Win32 API) dllHandle = LoadLibraryA(DAPI_DLL_NAME_X86); if ( dllHandle != NULL ) {
Destroy = (ApiEntry_ DestroyInterface)GetProcAddress(dllHandle, DAPI_ENTRY_DESTROY_INTERFACE); } ... // Frees the memory of an IInstance interface
result = Destroy(instance);
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
119
User interfaces (API) 7.3 Shut down API
7.3.1.3
FreeApi()
Description
The FreeApi() function unloads the library of the Runtime API.
This function can only be called after the successful call of the InitializeApi function. If the InitializeApi function was not called, the library must be unloaded using the Win32 API function FreeLibrary().
Table 7- 24 FreeApi() - Native C++
Syntax Parameters Return values
Example C++
ERuntimeErrorCode FreeApi();
None
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_API_NOT_INITIALIZED
The InitializeApi function was not called successfully.
// Include The Headerfile Of The API #include "SimulationRuntimeApi.h"
// The Interfaces ERuntimeErrorCode result; ISimulationRuntimeManager* api = NULL; IInstance* instance = NULL;
// Init the API result = InitializeApi(&api);
...
// Shutdown The API api->Shutdown(); result = DestroyInterface(api); api = NULL;
result = FreeApi();
120
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.3 Shut down API
7.3.1.4
ShutdownAndFreeApi()
Description
The ShutdownAndFreeApi() function shuts down the Runtime API, deletes the IRuntimeManager interface and unloads the library of the Runtime API.
This function can only be called after the successful call of the InitializeApi function. If the InitializeApi function was not called, the library must be unloaded using the Win32 APIFunktion FreeLibrary().
Table 7- 25 ShutdownAndFreeApi() - Native C++
Syntax Parameters
ERuntimeErrorCode ShutdownAndFreeApi( ISimulationRuntimeManager* in_SimulationRuntimeManagerInterface
); · ISimulationRuntimeManager* in_SimulationRuntimeManagerInterface:
Return values Example C++
The interface of the Runtime Manager to be deleted.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_API_NOT_INITIALIZED
The InitializeApi function was not called successfully.
SREC_WRONG_ARGUMENT
The pointer to the interface is NULL.
// Include The Headerfile Of The API #include "SimulationRuntimeApi.h"
// The Interfaces ERuntimeErrorCode result; ISimulationRuntimeManager* api = NULL; IInstance* instance = NULL;
// Init the API result = InitializeApi(&api);
...
// Shutdown The API result = ShutdownAndFreeApi(api); api = NULL;
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
121
User interfaces (API) 7.4 Global functions (Native C++)
7.3.2
.NET (C#)
7.3.2.1
Shut down API
You can terminate the .NET components of the API for the IInstance and IRemoteRuntimeManager interfaces by calling the Dispose (Page 151) function.
In addition these interfaces can also be cleared automatically by the .NET Garbage Collector.
Manually clearing the API
To manually clear the API, follow these steps: 1. Delete all interfaces. Interfaces - Information and settings (Page 151) 2. Call the Shutdown() (Page 127) function of the ISimulationRuntimeManager interface.
7.4
Global functions (Native C++)
The global functions GetNameOf... return the name of the enumeration entry (const WCHAR*).
GetNameOfAreaSection()
Table 7- 26 GetNameOfAreaSection() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfAreaSection( EArea in_AreaSection
); EArea in_AreaSection: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfCPUType()
Table 7- 27 GetNameOfCPUType() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfCPUType( ECPUType in_CPUType
); ECPUType in_CPUType: Enumeration entry const WCHAR*: Name of the enumeration entry
122
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.4 Global functions (Native C++)
GetNameOfCommunicationInterface()
Table 7- 28 GetNameOfCommunicationInterface() - Native C++
Syntax Parameters Return values
const WCHAR* GetNameOfCommunicationInterface( ECommunicationInterface in_CommunicationInterface
); ECommunicationInterface in_CommunicationInterface: Enumeration entry
const WCHAR*: Name of the enumeration entry
GetNameOfDataType()
Table 7- 29 GetNameOfDataType() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfDataType( EDataType in_DataType
); EDataType in_DataType: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfErrorCode()
Table 7- 30 GetNameOfErrorCode() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfErrorCode( ERuntimeErrorCode in_ErrorCode
); ERuntimeErrorCode in_ErrorCode: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfLEDMode()
Table 7- 31 GetNameOfLEDMode() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfLEDMode( ELEDMode in_LEDMode
); ELEDMode in_LEDMode: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfLEDType()
Table 7- 32 GetNameOfLEDType() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfLEDType( ELEDType in_LEDType
); ELEDType in_LEDType: Enumeration entry. const WCHAR*: Name of the enumeration entry
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
123
User interfaces (API) 7.4 Global functions (Native C++)
GetNameOfOperatingMode()
Table 7- 33 GetNameOfOperatingMode() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfOperatingMode( EOperatingMode in_OperatingMode
); EOperatingMode in_OperatingMode: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfErrorCode()
Table 7- 34 GetNameOfErrorCode() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfErrorCode( ERuntimeErrorCode in_ErrorCode
); ERuntimeErrorCode in_ErrorCode: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfOperatingState
Table 7- 35 GetNameOfOperatingState() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfOperatingState( EOperatingState in_OperatingState
); EOperatingState in_OperatingState: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfPrimitiveDataType
Table 7- 36 GetNameOfPrimitiveDataType() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfPrimitiveDataType( EPrimitiveDataType in_DataType
); EPrimitiveDataType in_DataType: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfTagListDetails
Table 7- 37 GetNameOfTagListDetails() - Native C++
Syntax
const WCHAR* GetNameOfTagListDetails(
Parameters Return values
ETagListDetails in_TagListDetails ); ETagListDetails in_TagListDetails: Enumeration entry const WCHAR*: Name of the enumeration entry
124
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.4 Global functions (Native C++)
GetNameOfRuntimeConfigChanged()
Table 7- 38 GetNameOfRuntimeConfigChanged() - Native C++
Syntax Parameters Return values
const WCHAR* GetNameOfRuntimeConfigChanged( ERuntimeConfigChanged in_RuntimeConfigChanged);
); ERuntimeConfigChanged in_RuntimeConfigChanged: Enumeration entry
const WCHAR*: Name of the enumeration entry
GetNameOfInstanceConfigChanged()
Table 7- 39 GetNameOfInstanceConfigChanged() - Native C++
Syntax Parameters Return values
const WCHAR* GetNameOfInstanceConfigChanged( EInstanceConfigChanged in_InstanceConfigChanged);
); EInstanceConfigChanged in_InstanceConfigChanged: Enumeration entry
const WCHAR*: Name of the enumeration entry
GetNameOfDirection()
Table 7- 40 GetNameOfDirection() - Native C++
Syntax
Parameter Return values
const WCHAR* GetNameOfDirection( EDirection in_Direction
); EDirection in_Direction: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfDiagSeverity()
Table 7- 41 GetNameOfDiagSeverity() - Native C++
Syntax
Parameter Return values
const WCHAR* GetNameOfDiagSeverity( EDiagSeverity in_DiagSeverity
); EDiagSeverity in_DiagSeverity: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfRackOrStationFaultType()
Table 7- 42 GetNameOfRackOrStationFaultType() - Native C++
Syntax Parameter Return values
const WCHAR* GetNameOfRackOrStationFaultType( ERackOrStationFaultType in_RackOrStationFaultType
); ERackOrStationFaultType in_RackOrStationFaultType: Enumeration entry
const WCHAR*: Name of the enumeration entry
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
125
User interfaces (API) 7.4 Global functions (Native C++)
GetNameOfProcessEventType()
Table 7- 43 GetNameOfProcessEventType() - Native C++
Syntax
Parameters Return values
const WCHAR*(GetNameOfProcessEventType( EProcessEventType in_ProcessEventType
); EProcessEventType in_ProcessEventType: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfPullOrPlugEventType()
Table 7- 44 GetNameOfPullOrPlugEventType() - Native C++
Syntax Parameters Return values
const WCHAR* GetNameOfPullOrPlugEventType( EPullOrPlugEventType in_PullOrPlugEventType
); EPullOrPlugEventType in_PullOrPlugEventType: Enumeration entry
const WCHAR*: Name of the enumeration entry
GetNameOfCycleTimeMonitoringMode()
Table 7- 45 GetNameOfCycleTimeMonitoringMode() - Native C++
Syntax Parameters Return values
const WCHAR* GetNameOfCycleTimeMonitoringMode( ECycleTimeMonitoringMode in_CycleTimeMonitoringMode
); ECycleTimeMonitoringMode in_CycleTimeMonitoringMode: Enumeration entry
const WCHAR*: Name of the enumeration entry
GetNameOfDiagProperty()
Table 7- 46 GetNameOfDiagProperty() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfDiagProperty( EDiagProperty in_DiagProperty
); EDiagProperty in_DiagProperty: Enumeration entry const WCHAR*: Name of the enumeration entry
GetNameOfAutodiscoverType()
Table 7- 47 GetNameOfAutodiscoverType() - Native C++
Syntax
Parameters Return values
const WCHAR* GetNameOfAutodiscoverType( EAutodiscoverType in_AutodiscoverType
); EAutodiscoverType in_AutodiscoverType: Enumeration entry const WCHAR*: Name of the enumeration entry
126
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
See also
EPrimitiveDataType (Page 375) EDataType (Page 377) Enumerations (Page 362)
User interfaces (API) 7.5 API ISimulationRuntimeManager
7.5
API ISimulationRuntimeManager
7.5.1
Interfaces - Information and settings
GetVersion() / Version { get; }
Returns the version of Runtime Manager. If the function fails, version 0.0 is returned.
Table 7- 48 GetVersion() - Native C++
Syntax Parameters Return values
UINT32 GetVersion();
None UINT32: Runtime Manager Version (HIWORD = Major, LOWORD = Minor)
Table 7- 49 Version { get; } - .NET (C#)
Syntax Parameters Return values
UInt32 Version { get; }
None Uint32: Runtime Manager Version (HIWORD = Major, LOWORD = Minor)
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
127
User interfaces (API) 7.5 API ISimulationRuntimeManager
IsInitialized() / IsInitialized { get; }
Returns a value that indicates whether the API was successfully initialized.
Table 7- 50 IsInitialized() - Native C++
Syntax Parameters Return values
bool IsInitialized();
None · false: If the API was not initialized. · true: If the API was initialized.
Table 7- 51 IsInitialized { get; } - .NET (C#)
Syntax Parameters Return values
bool IsInitialized { get; }
None · false: If the API was not initialized. · true: If the API was initialized.
IsRuntimeManagerAvailable() / IsRuntimeManagerAvailable { get; }
The function returns false when the connection to Runtime Manager is interrupted. This happens only when the Runtime Manager process is closed.
Subscribe to the OnRuntimeManagerLost() event to find out whether the connection is interrupted. See Events (Page 143).
Table 7- 52 IsRuntimeManagerAvailable() - Native C++
Syntax Parameters Return values
bool IsRuntimeManagerAvailable();
None · false: If the connection is interrupted. · true: If the connection is active.
Table 7- 53 IsRuntimeManagerAvailable { get; } - .NET (C#)
Syntax Parameters Return values
bool IsRuntimeManagerAvailable{ get; }
None · false: If the connection is interrupted. · true: If the connection is active.
128
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.5 API ISimulationRuntimeManager
Shutdown()
Ends communication with Runtime Manager and clears the interfaces. Call this function in the following cases: Immediately before the API library (DLL) is unregistered (native C++). When your application is no longer using Runtime Manager.
Table 7- 54 Shutdown() - Native C++
Syntax Parameters Return values
ERuntimeErrorCode Shutdown()
None Runtime error code SREC_OK
Condition The function is successful.
Table 7- 55 Shutdown() - .NET (C#)
Syntax Parameters Return values
void Shutdown()
None None
7.5.2
Simulation Runtime instances
GetRegisteredInstancesCount()
Returns the number of instances that are registered in Runtime Manager. If the function fails, the return value is 0.
Table 7- 56 GetRegisteredInstancesCount() - Native C++
Syntax Parameters Return values
UINT32 GetRegisteredInstancesCount();
None UINT32: Number of available instances.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
129
User interfaces (API) 7.5 API ISimulationRuntimeManager
GetRegisteredInstanceInfoAt()
Returns information about an already registered instance. You can use the ID or name to create an interface of this instance, see CreateInterface().
Table 7- 57 GetRegisteredInstanceInfoAt() - Native C++
Syntax Parameters
ERuntimeErrorCode GetRegisteredInstanceInfoAt( UINT32 in_Index, SInstanceInfo* out_InstanceInfo
); · UINT32 in_Index:
Index of the created instance from which you want to receive the information. The index must be less than the value you receive when you call GetRegisteredInstanceCount().
· SInstanceInfo* out_InstanceInfo:
Return values
The information with name and ID of the instance. See Data types (Page 340).
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_TIMEOUT
The function does not return on time.
SREC_DOES_NOT_EXIST
There is no instance information for this index.
SREC_INDEX OUT_OF_RANGE
The index is greater than 15.
RegisteredInstanceInfo { get; }
Returns information about all already registered instances. Use the ID or name of this instance to create an interface of this instance, see CreateInterface().
Table 7- 58 RegisteredInstanceInfo { get; } - .NET (C#)
Syntax Parameters Return values Exceptions
SInstanceInfo[] RegisteredInstanceInfo { get; }
None
SInstanceInfo[]: An array of information about all registered instances.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.Timeout
The function does not return on time.
130
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.5 API ISimulationRuntimeManager
RegisterInstance()
Registers a new instance of a virtual controller in Runtime Manager. Creates and returns an interface of this instance.
Table 7- 59 RegisterInstance() - Native C++
Syntax Parameters
ERuntimeErrorCode RegisterInstance( IInstance** out_InstanceInterface
); ERuntimeErrorCode RegisterInstance(
WCHAR* in_InstanceName, IInstance** out_InstanceInterface ); ERuntimeErrorCode RegisterInstance( ECPUType in_CPUType, IInstance** out_InstanceInterface ); ERuntimeErrorCode RegisterInstance( ECPUType in_CPUType, WCHAR* in_InstanceName, IInstance** out_InstanceInterface );
· ECPUType in_CPUType:
Defines which CPU type is simulated at the start of the instance. The default setting is "SRCT_1500_Unspecified".
When a different CPU type is loaded via STEP 7 or from the Virtual SIMATIC Memory Card, this CPU type applies.
· WCHAR* in_InstanceName:
Name to be assigned to the instance. Every instance must have a unique name. If no name is assigned when registering a new instance, the instance is given the name "Instance_#" (# is the ID of the instance). If this name already exists, the name "Instance_#.#" is used, in which the second # is a counter that is incremented until the name is unique. The length of the name must be less than DINSTANCE_NAME_LENGTH. See Data types (Page 340).
· IInstance** out_InstanceInterface:
Return values Example C++
Pointer to a Simulation Runtime interface pointer. The pointer must be initialized with ZERO. The interface is created within the function.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_TIMEOUT
The function does not return on time.
SREC_WRONG_ARGUMENT
The name or the IInstance pointer is invalid.
SREC_LIMIT_REACHED
There are already 16 instances registered in Runtime Manager.
SREC_ALREADY_EXISTS
An instance with this name already exists.
ISimulationRuntimeManager * api = ZERO; ERuntimeErrorCode result = Initialize(&api);
// Example: How To Create And Register An Instance IInstance* psa = ZERO; if (result == SREC_OK) {
result = api->RegisterInstance(&psa); }
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
131
User interfaces (API) 7.5 API ISimulationRuntimeManager
Note Native C++ If you no longer require the interface, delete it. See DestroyInterface() (Page 118).
Table 7- 60 RegisterInstance() - .NET (C#)
Syntax Parameters
IInstance RegisterInstance(); IInstance RegisterInstance(
string in_InstanceName ); IInstance RegisterInstance(
ECPUType in_CPUType ); IInstance RegisterInstance(
ECPUType in_CPUType string in_InstanceName );
· ECPUType in_CPUType:
Defines which CPU type is simulated at the start of the instance. The default setting is "ECPUType.Unspecified".
When a different CPU type is loaded via STEP 7 or from the Virtual SIMATIC Memory Card, this CPU type applies.
· string in_InstanceName:
Return values Exceptions
Name to be assigned to the instance. Every instance must have a unique
name. If no name is assigned when registering a new instance, the instance is given the name "Instance_#" (# is the ID of the instance). If this name already exists, the name "Instance_#.#" is used, in which the second # is a counter that is incremented until the name is unique. The length of the name must be
less than DINSTANCE_NAME_LENGTH. See Data types (Page 340).
If the function is successful, an interface of a virtual controller, otherwise a null pointer.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument The name is invalid.
ERuntimeErrorCode.LimitReached
There are already 16 instances registered in Runtime Manager.
ERuntimeErrorCode.AlreadyExists
An instance with this name already exists.
132
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.5 API ISimulationRuntimeManager
RegisterCustomInstance()
Registers a new instance of a virtual controller in Runtime Manager. Creates and returns an interface of this instance.
Table 7- 61 RegisterCustomInstance() - Native C++
Syntax Parameters
ERuntimeErrorCode RegisterCustomInstance( WCHAR* in_VplcDll, IInstance** out_InstanceInterface
); ERuntimeErrorCode RegisterCustomInstance(
WCHAR* in_VplcDll, WCHAR* in_InstanceName, IInstance** out_InstanceInterface );
· WCHAR* in_VplcDll:
The complete path to the DLL of the virtual controller that "Siemens.Simatic.Simulation.Runtime.Instance.exe" loads at PowerOn.
· WCHAR* in_InstanceName:
Name to be assigned to the instance. Every instance must have a unique name. If no name is assigned when registering a new instance, the instance is given the name "Instance_#" (# is the ID of the instance). If this name already exists, the name "Instance_#.#" is used, in which the second # is a counter that is incremented until the name is unique. The length of the name must be less than DINSTANCE_NAME_LENGTH. See Data types (Page 340).
· IInstance** out_InstanceInterface:
Return values Example C++
Pointer to a Simulation Runtime interface pointer. The pointer must be initialized with ZERO. The interface is created within the function.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_TIMEOUT
The function does not return on time.
SREC_WRONG_ARGUMENT
The DLL name, the instance name or the IInstance pointer is invalid.
SREC_LIMIT_REACHED
There are already 16 instances registered in Runtime Manager.
SREC_ALREADY_EXISTS
An instance with this name already exists.
ISimulationRuntimeManager * api = ZERO; ERuntimeErrorCode result = Initialize(&api);
// Example: How To Create And Register An Instance IInstance* psa = ZERO; if (result == SREC_OK) {
result = api->RegisterCustomInstance(L"C:\\Temp\\vplc.dll"); }
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
133
User interfaces (API) 7.5 API ISimulationRuntimeManager
Note Native C++ If you no longer require the interface, delete it. See DestroyInterface() (Page 118).
Table 7- 62 RegisterCustomInstance() - .NET (C#)
Syntax Parameters
IInstance RegisterCustomInstance( string in_VplcDll
); IInstance RegisterCustomInstance(
string in_VplcDll, string in_InstanceName );
· string in_VplcDll:
The complete path to the DLL of the virtual controller that "Siemens.Simatic.Simulation.Runtime.Instance.exe" loads at PowerOn.
· string in_InstanceName:
Return values Exceptions
Name to be assigned to the instance. Every instance must have a unique name. If no name is assigned when registering a new instance, the instance is given the name "Instance_#" (# is the ID of the instance). If this name already
exists, the name "Instance_#.#" is used, in which the second # is a counter
that is incremented until the name is unique. The length of the name must be
less than DINSTANCE_NAME_LENGTH. See Data types (Page 340).
If the function is successful, an interface of a virtual controller; otherwise a Null pointer.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument The name or the ID is invalid.
ERuntimeErrorCode.LimitReached
There are already 16 instances registered in Runtime Manager.
ERuntimeErrorCode.AlreadyExists
An instance with this name already exists.
134
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.5 API ISimulationRuntimeManager
CreateInterface()
Creates and returns an interface of an already registered instance of a virtual controller.
The instance could have been registered via the application or another application that uses the Simulation Runtime API.
Table 7- 63 CreateInterface() - Native C++
Syntax Parameters
ERuntimeErrorCode CreateInterface( WCHAR* in_InstanceName, IInstance** out_InstanceInterface
); ERuntimeErrorCode CreateInterface(
INT32 in_InstanceID, IInstance** out_InstanceInterface );
· INT32 in_InstanceID:
The ID of the registered instance from which you want to receive the interface. · WCHAR* in_InstanceName:
The name of the registered instance from which you want to receive the interface.
· IInstance** out_InstanceInterface:
Return values Example C++
Pointer to a Simulation Runtime interface pointer. The pointer must be initialized with ZERO. The interface is created within the function.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_TIMEOUT
The function does not return on time.
SREC_WRONG_ARGUMENT
The name, the ID or the IInstance pointer is invalid.
SREC_DOES_NOT_EXIST
The instance is not registered in Runtime Manager.
ISimulationRuntimeManager * api = ZERO; ERuntimeErrorCode result = Initialize(&api);
Example C++
IInstance* psa1 = ZERO; IInstance* psa2 = ZERO; if (result == SREC_OK) {
result = api->CreateInterface(0, &psa1);
result = api->CreateInterface(0, &psa2); // psa2 will be the same as psa1 }
ISimulationRuntimeManager * api = ZERO; ERuntimeErrorCode result = Initialize(&api);
IInstance* psa = ZERO; if (result == SREC_OK)
{ result = api->CreateInterface(L"My SimulationRuntime Instance",
&psa);
}
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
135
User interfaces (API) 7.5 API ISimulationRuntimeManager
Note Native C++ If you no longer require the interface, delete it. See DestroyInterface() (Page 118).
Table 7- 64 CreateInterface() - .NET (C#)
Syntax Parameters
IInstance CreateInterface( string in_InstanceName
); IInstance CreateInterface(
INT32 in_InstanceID );
· INT32 in_InstanceID:
The ID of the registered instance from which you want to receive the interface. · string in_InstanceName:
Return values Exceptions
The name of the registered instance from which you want to receive the inter-
face.
If the function is successful, an interface of a virtual controller; otherwise a Null pointer.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument The name or the ID is invalid.
ERuntimeErrorCode.DoesNotExists
The instance is not registered in Runtime Manager.
136
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.5 API ISimulationRuntimeManager
7.5.3
Remote connections
OpenPort()
Opens a port to which another Runtime Manager can connect.
Table 7- 65 OpenPort() - Native C++
Syntax Parameters
ERuntimeErrorCode OpenPort( UINT16 in_Port
); · UINT16 in_Port:
Return values
The port. The value must be greater than 1024.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_TIMEOUT
The function does not return on time.
SREC_ALREADY_EXISTS
A port is already open.
SREC_WRONG_ARGUMENT
The port is invalid.
SREC_CONNECTION_ERROR
The port cannot be opened.
Table 7- 66 OpenPort() - .NET (C#)
Syntax Parameters
void OpenPort( UInt16 in_Port
); · UInt16 in_Port:
Return values Exceptions
The port. The value must be greater than 1024.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.AlreadyExists A port is already open.
ERuntimeErrorCode.WrongArgument The port is invalid.
ERuntimeErrorCode.ConnectionError
The port cannot be opened.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
137
User interfaces (API) 7.5 API ISimulationRuntimeManager
ClosePort()
Closes an open port and all open connections that another Runtime Manager has created to this open port.
Table 7- 67 ClosePort() - Native C++
Syntax Parameters Exceptions
ERuntimeErrorCode ClosePort();
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_TIMEOUT
The function does not return on time.
SREC_WARNING_INVALID_CALL
No port is open.
Table 7- 68 ClosePort() - .NET (C#)
Syntax
Parameters Return values Exceptions
void ClosePort( UInt16 in_Port
);
None
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.Timeout
The function does not return on time.
GetPort() / Port { get; }
Returns the open port. If no port is open or the function fails, the return value is 0.
Table 7- 69 GetPort() - Native C++
Syntax Parameters Return values
UINT16 GetPort();
None UINT16: The open port. 0, if no port is open.
Table 7- 70 Port { get; } - .NET (C#)
Syntax Parameters Return values Exceptions
UInt16 Port { get; }
None UInt16: The open port. 0, if no port is open. None
138
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.5 API ISimulationRuntimeManager
GetRemoteConnectionsCount()
Supplies the number of open remote connections.
Table 7- 71 GetRemoteConnectionsCount() - Native C++
Syntax Parameters Return values
UINT32 GetRemoteConnectionsCount();
None UINT32: Number of open remote connections.
GetRemoteConnectionInfoAt()
Returns information about an open connection.
Table 7- 72 GetRemoteConnectionInfoAt()- Native C++
Syntax Parameters
ERuntimeErrorCode GetRemoteConnectionInfoAt( UINT32 in_Index, SConnectionInfo* out_ConnectionInfo
); · UINT32 in_Index:
Index of the connection information that is expected. · SConnectionInfo* out_ConnectionInfo:
Return values
The connection information for this index.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_TIMEOUT
The function does not return on time.
SREC_INDEX_OUT_OF_RANGE
Connection information for this index does not exist.
RemoteConnectionInfo { get; }
Returns an array of information about all open connections.
Table 7- 73 RemoteConnectionInfo { get; } - .NET (C#)
Syntax Parameters Return values Exceptions
SConnectionInfo[] RemoteConnectionInfo { get; }
None
SConnectionInfo[]: An array of information about all open connections.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.Timeout
The function does not return on time.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
139
User interfaces (API) 7.5 API ISimulationRuntimeManager
RemoteConnect()
Creates a new connection to a remote Runtime Manager or uses an existing connection to create an IRemoteRuntimeManager interface.
Table 7- 74 RemoteConnect() - Native C++
Syntax Parameters
ERuntimeErrorCode RemoteConnect( UINT8 in_IP3, UINT8 in_IP2, UINT8 in_IP1, UINT8 in_IP0, UINT16 in_Port, IRemoteRuntimeManager** out_RemoteRuntimeManagerInterface
ERuntimeErrorCode RemoteConnect( UIP in_IP, UINT16 in_Port, IRemoteRuntimeManager** out_RunTimeManagerInterface
); · UINT8 in_IP3:
First part of the IP address of the remote PC. · UINT8 in_IP2:
Second part of the IP address of the remote PC. · UINT8 in_IP1:
Third part of the IP address of the remote PC.
Return values Example C++
UINT8 in_IP0:
Last part of the IP address of the remote PC. · UIP in_IP:
IP address of the remote PC. · UINT16 in_Port:
The port that is open on the remote PC. · IRemoteRuntimeManager** out_RemoteRuntimeManagerInterface:
Pointer to a remote Runtime Manager interface pointer. The pointer must be initialized with ZERO. The interface is created in the function.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_TIMEOUT
The function does not return on time.
SREC_CONNECTION_ERROR
The connection to the remote Runtime Manager cannot be established.
SREC_WRONG_ARGUMENT
IP, port or IInstance pointer is invalid.
SREC_WRONG_VERSION
The version of the API is not compatible with Runtime.
See Compatibility during upgrade (Page 33).
ISimulationRuntimeManager* api = ZERO; ERuntimeErrorCode result = Initialize(&api);
IRemoteRuntimeManager * client = ZERO;
if (result == SREC_OK) {
result = api->RemoteConnect(192,203,145,144, 4444, &client); }
140
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.5 API ISimulationRuntimeManager
Note Native C++ If you no longer require the interface, delete it. See DestroyInterface() (Page 118).
Table 7- 75 RemoteConnect() - .NET (C#)
Syntax Parameters
IRemoteRuntimeManager RemoteConnect( string in_ConnectionString
); IRemoteRuntimeManager RemoteConnect(
SIP in_IP, UInt16 in_Port ); IRemoteRuntimeManager RemoteConnect( Byte in_IP3, Byte in_IP2, Byte in_IP1, Byte in_IP0, UInt16 in_Port );
· Byte in_IP3:
First part of the IP address of the remote PC. · Byte in_IP2:
Second part of the IP address of the remote PC. · Byte in_IP1:
Third part of the IP address of the remote PC. · Byte in_IP0:
Last part of the IP address of the remote PC. · string in_ConnectionString:
A string in the form of "<IP3>.<IP2>.<IP1>.<IP0>:<Port>" Example: "182.203.145.144:4444".
· SIP in_IP:
IP address of the remote PC. · UInt16 in_Port:
Return values Exceptions
The port that is open on the remote PC.
IRemoteRuntimeManager: Interface to the remote Runtime Manager.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.ConnectionError
Connection to the remote Runtime Manager cannot be established.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument IP or port is invalid.
ERuntimeErrorCode.WrongVersion
The version of the API is not compatible with Runtime.
See Compatibility during upgrade (Page 33).
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
141
User interfaces (API) 7.5 API ISimulationRuntimeManager
See also
Tag list (Page 176) Data types (Page 311)
7.5.3.1
RunAutodiscover()
Description
This function identifies all Runtime Managers that are on the network and that are ready to establish a remote connection.
Note The function identifies Runtime Managers as of PLCSIM Advanced V3.0.
Requirements
The Runtime Manager must be running and allowing remote connections.
The firewall of the remote PC must not block traffic on the selected UDP port.
Devices in the local network (such as routers, switches, firewalls) must not block multicast packets of the selected class.
RunAutodiscover()
The function starts the identification of the Runtime Manager in the network.
Table 7- 76 RunAutodiscover() - Native C++
Syntax Parameters
ERuntimeErrorCode RunAutodiscover( UINT32 in_Timeout = 2000
); · UINT32 in_Timeout
A timeout value in milliseconds that defines how long the local Runtime Manager waits for responses from the Remote Manager.
A value between 500 ms and 30000 ms is valid.
Return values
Default: 2000 ms. Runtime error code SREC_OK SREC_WRONG_ARGUMENT SREC_AUTODISCOVER_ALREADY_RUNNIN G
SREC_TIMEOUT
Condition
The function is successful.
The timeout value is outside the permissible range.
A RunAutodiscover() call is already running in the background. Wait for the message SRRSI_DISCOVER_FINISHED in the callback function.
See EAutodiscoverType (Page 388).
Communication errors in the local Runtime Manager.
142
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.5 API ISimulationRuntimeManager
Table 7- 77 RunAutodiscover() - .NET (C#)
Syntax Parameters
void RunAutodiscover( UInt32 in_Timeout = 2000
); · UInt32 in_Timeout
A timeout value in milliseconds that defines how long the local Runtime Manager waits for responses from the Remote Manager.
A value between 500 ms and 30000 ms is valid.
Return values Exceptions
Default: 2000 ms.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.WrongArgument
The timeout value is outside the permissible range.
ERuntimeErrorCode.AutodiscoverAlreadyRunning
A RunAutodiscover() call is already running in the background. Wait for the message AutodiscoverFinished in the callback function.
See EAutodiscoverType (Page 388).
ERuntimeErrorCode.Timeout
Communication errors in the local Runtime Manager.
7.5.4
Events for ISimulationRuntimeManager
Events for runtime instances and remote connections
The following events are triggered for the ISimulationRuntimeManager interface:
Table 7- 78 Events for ISimulationRuntimeManager
Event OnConfigurationChanged (Page 144)
OnRuntimeManagerLost (Page 147) RunAutodiscover (Page 150)
Cause The Runtime Manager configuration has changed: · A new instance is registered. · An instance is removed. · A connection to a client is established. The Control Panel uses such an event to update the list of available instances. The connection to the Runtime Manager is interrupted.
The network searches for Runtime Managers which are ready to establish a remote connection.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
143
User interfaces (API) 7.5 API ISimulationRuntimeManager
7.5.4.1
OnConfigurationChanged events
OnConfigurationChanged
Registers or unregisters an event handler method.
Table 7- 79 OnConfigurationChanged - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_SRCC_UINT32_UINT32_INT32 OnConfigurationChanged;
None. See Delegate_SRCC_UINT32_UINT32_INT32 (Page 327). None None The event handler method runs in a separate thread.
RegisterOnConfigurationChangedCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. The registration of a new callback function causes the previous callback function to be deleted.
Table 7- 80 RegisterOnConfigurationChangedCallback() - Native C++
Syntax Parameters
void RegisterOnConfigurationChangedCallback( EventCallback_SRCC_UINT32_UINT32_INT32 in_CallbackFunction
); · EventCallback_SRCC_UINT32_UINT32_INT32 in_CallbackFunction:
Return values Note
A callback function to subscribe to an event. See EventCallback_SRCC_UINT32_UINT32_INT32 (Page 313). None
The event handler method runs in a separate thread.
144
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.5 API ISimulationRuntimeManager
RegisterOnConfigurationChangedEvent()
When the event occurs, the registered event object is set to the signaled state. Only one event object can be registered for the event. Registration of a new event object causes the previous event object to be deleted.
Table 7- 81 RegisterOnConfigurationChangedEvent() - Native C++
Syntax Parameters
void RegisterOnConfigurationChangedEvent(); void RegisterOnConfigurationChangedEvent(
HANDLE* in_Event );
· None:
An internal event object is registered. · HANDLE* in_Event:
Return values
A handle for a user-specific event object. The event object is registered. None
Table 7- 82 RegisterOnConfigurationChangedEvent() - .NET (C#)
Syntax Parameters Return values
void RegisterOnConfigurationChangedEvent();
None None
UnregisterOnConfigurationChangedCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 83 UnregisterOnConfigurationChangedCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnConfigurationChangedCallback();
None None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
145
User interfaces (API) 7.5 API ISimulationRuntimeManager
UnregisterOnConfigurationChangedEvent()
Unregisters the event object.
Table 7- 84 UnregisterOnConfigurationChangedEvent() - Native C++
Syntax Parameters Return values
void UnregisterOnConfigurationChangedEvent();
None None
Table 7- 85 UnregisterOnConfigurationChangedEvent() - .NET (C#)
Syntax Parameters Return values
void UnregisterOnConfigurationChangedEvent();
None None
WaitForOnConfigurationChangedEvent()
The function blocks the program until the registered event object is set to the signaled state or the timeout interval is exceeded.
Table 7- 86 WaitForOnConfigurationChangedEvent() - Native C++
Syntax Parameters
bool WaitForOnConfigurationChangedEvent(); bool WaitForOnConfigurationChangedEvent(
UINT32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UINT32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
Table 7- 87 WaitForOnConfigurationChangedEvent - .NET (C#)
Syntax Parameters
bool WaitForOnConfigurationChangedEvent(); bool WaitForOnConfigurationChangedEvent(
UInt32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UInt32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
146
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.5 API ISimulationRuntimeManager
7.5.4.2
OnRuntimeManagerLost events
OnRuntimeManagerLost
Registers or unregisters an event handler method.
Table 7- 88 OnRuntimeManagerLost - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_Void OnRuntimeManagerLost;
None. See Delegate_Void (Page 327). None None The event handler method runs in a separate thread.
RegisterOnRuntimeManagerLostCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. The registration of a new callback function causes the previous callback function to be deleted.
Table 7- 89 RegisterOnRuntimeManagerLostCallback() - Native C++
Syntax Parameters
void RegisterOnRuntimeManagerLostCallback( EventCallback_VOID in_CallbackFunction
); · EventCallback_VOID in_CallbackFunction:
Return values Note
A callback function that subscribes to the event. See EventCallback_VOID (Page 313). None
The event handler method runs in a separate thread.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
147
User interfaces (API) 7.5 API ISimulationRuntimeManager
RegisterOnRuntimeManagerLostEvent()
When the event occurs, the registered event object is set to the signaled state. Only one event object can be registered for the event. Registration of a new event object causes the previous event object to be deleted.
Table 7- 90 RegisterOnRuntimeManagerLostEvent() - Native C++
Syntax Parameters
void RegisterOnRuntimeManagerLostEvent(); void RegisterOnRuntimeManagerLostEvent(
HANDLE* in_Event );
· None:
An internal event handle is registered. · HANDLE* in_Event:
Return values
A user-specific event handle is registered. None
Table 7- 91 RegisterOnRuntimeManagerLostEvent() - .NET (C#)
Syntax Parameters Return values
void RegisterOnRuntimeManagerLostEvent();
None None
UnregisterOnRuntimeManagerLostCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 92 UnregisterOnRuntimeManagerLostCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnRuntimeManagerLostCallback();
None None
148
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.5 API ISimulationRuntimeManager
UnregisterOnRuntimeManagerLostEvent()
Unregisters the event object.
Table 7- 93 UnregisterOnRuntimeManagerLostEvent() - Native C++
Syntax Parameters Return values
void UnregisterOnRuntimeManagerLostEvent();
None None
Table 7- 94 UnregisterOnRuntimeManagerLostEvent() - .NET (C#)
Syntax Parameters Return values
void UnregisterOnRuntimeManagerLostEvent();
None None
WaitForOnRuntimeManagerLostEvent()
The function will block the program until the registered event object is set to the signaled state or the timeout interval is exceeded.
Table 7- 95 WaitForOnRuntimeManagerLostEvent() - Native C++
Syntax Parameters
bool WaitForOnRuntimeManagerLostEvent(); bool WaitForOnRuntimeManagerLostEvent(
UINT32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UINT32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined timeout interval.
Table 7- 96 WaitForOnRuntimeManagerLostEvent() - .NET (C#)
Syntax Parameters
bool WaitForOnRuntimeManagerLostEvent(); bool WaitForOnRuntimeManagerLostEvent(
UInt32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UInt32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined timeout interval.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
149
User interfaces (API) 7.5 API ISimulationRuntimeManager
7.5.4.3
OnAutodiscoverData events
OnAutodiscoverData
Registers or unregisters an event handler method.
Table 7- 97 OnAutodiscoverData - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_SRRSI_AD OnAutodiscoverData
None. See Delegate_SRRSI_AD (Page 328). None None The event handler method runs in a separate thread.
RegisterOnAutodiscoverCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. The registration of a new callback function causes the previous callback function to be deleted.
Table 7- 98 RegisterOnAutodiscoverCallback() - Native C++
Syntax Parameters
void RegisterOnAutodiscoverCallback( EventCallback_SRRSI_AD in_CallbackFunction
); · EventCallback_SRRSI_AD in_CallbackFunction:
Pointer to a user-defined callback function.
Return values
See EventCallback_SRRSI_AD (Page 314). None
UnregisterOnAutodiscoverCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 99 UnregisterOnAutodiscoverCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnAutodiscoverCallback( ); None None
150
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
7.6
API IInstances
User interfaces (API) 7.6 API IInstances
7.6.1
Interfaces - Information and settings
Dispose()
Deletes the managed interface and unloads the native components of the user interfaces.
Table 7- 100 Dispose() - .NET (C#)
Syntax Parameters Return values
void Dispose()
None None
GetID() / ID { get; }
Returns the instance ID. The ID is assigned by Runtime Manager when the instance is registered.
Table 7- 101 GetID() - Native C++
Syntax Parameters Return values
INT32 GetID();
None INT32: Instance ID
Table 7- 102 ID { get; } - .NET (C#)
Syntax Parameters Return values Exceptions
UInt32 ID { get; }
None Uint32: Instance ID None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
151
User interfaces (API) 7.6 API IInstances
GetName() / Name { get; }
Returns the name of the instance.
Table 7- 103 GetName() - Native C++
Syntax Parameters
ERuntimeErrorCode GetName( WCHAR inout_Name[], UINT32 in_ArrayLength
); · WCHAR inout_Name[]:
A user-allocated storage for the name of the instance. The field length should be at least as long as DINSTANCE_NAME_MAX_LENGTH. See Definitions and constants (Page 340).
· UINT32 in_ArrayLength:
Return values Example C++
Field length (Wide character)
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_WRONG_ARGUMENT
The name does not fit in the storage.
ISimulationRuntimeManager * api = NULL; ERuntimeErrorCode result = Initialize(&api);
IInstance* psa = NULL; if (result == SREC_OK) {
result = api->RegisterInstance(&psa); }
WCHAR name[DINSTANCE_NAME_MAX_LENGTH]; if (result == SREC_OK) {
result = psa->GetName(name, DINSTANCE_NAME_MAX_LENGTH);
}
Table 7- 104 Name { get; } - .NET (C#)
Syntax Parameters Return values Exceptions
string Name { get; }
None
Name of the instance.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
152
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
GetCPUType()
Returns the CPU type of the virtual controller.
Table 7- 105 GetCPUType() - Native C++
Syntax Parameters Return values
ECPUType GetCPUType();
None An enumeration element that defines the CPU type. See ECPUType (Page 371).
SetCPUType()
Sets the CPU type of the virtual controller. A change of CPU type occurs only when the controller is restarted.
Table 7- 106 SetCPUType() - Native C++
Syntax Parameters
void SetCPUType(ECPUType in_Value); · ECPUType in_Value:
Defines which CPU type is simulated at the start of the instance.
Return values
When a different CPU type is loaded via STEP 7 or from the Virtual Memory Card, this CPU type applies.
None
CPUType { get; set; }
Returns or sets the CPU type of the virtual controller. A change of CPU type occurs only when the controller is restarted.
When a different CPU type is loaded via STEP 7 or from the Virtual Memory Card, this CPU type applies.
Table 7- 107 CPUType { get; set; } - .NET (C#)
Syntax Parameters Return values Exceptions
ECPUType CPUType { get; set; }
None An enumeration element that defines the CPU type. None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
153
User interfaces (API) 7.6 API IInstances
GetCommunicationInterface()
Returns the communication interface of the virtual controller: Local communication (Softbus) or TCPIP. A change of communication interface occurs only when the controller is restarted. All instances that are started must use the same communication interface.
PowerOn is prevented if a communication interface that is not used by the started instances is selected.
Table 7- 108 GetCommunicationInterface() - Native C++
Syntax Parameters Return values
ECommunicationInterface GetCommunicationInterface(); None · SRCI_NONE
Cannot be selected. Is returned if the instance interface is no longer valid. · SRCI_SOFTBUS
Is returned if the virtual controller uses the Softbus. · SRCI_TCPIP
Is returned if the virtual controller communicates over the virtual adapter.
SetCommunicationInterface()
Sets the communication interface of the virtual controller: Local communication (Softbus) or TCPIP. A change of communication interface occurs only when the controller is restarted. All instances that are started must use the same communication interface.
PowerOn is prevented if a communication interface that is not used by the started instances is selected.
Table 7- 109 SetCommunicationInterface() - Native C++
Syntax Parameters
void SetCommunicationInterface(ECommunicationInterface in_Value); · SRCI_NONE
Cannot be selected. · SRCI_SOFTBUS
Is set to activate communication via Softbus. · SRCI_TCPIP
Return values
Is set to activate communication over the virtual adapter. None
154
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
CommunicationInterface { get; set; }
Sets or returns the communication interface of the virtual controller: Local communication (Softbus) or TCPIP. A change of communication interface occurs only when the controller is restarted. All instances that are started must use the same communication interface.
PowerOn is prevented if a communication interface that is not used by the started instances is selected.
Table 7- 110 CommunicationInterface { get; set; } - .NET (C#)
Syntax Parameters Return values
ECommunicationInterface CommunicationInterface { get; set; } None · ECommunicationInterface.None
Cannot be selected. Is returned if the instance interface is no longer valid. · ECommunicationInterface.Softbus
Is returned if the virtual controller uses the Softbus. · ECommunicationInterface.TCPIP
Exceptions
Is returned if the virtual controller communicates over the virtual adapter. None
GetInfo() / Info { get; }
Returns a structure that provides information about the instance.
Table 7- 111 GetInfo() - Native C++
Syntax Parameters Return values
SInstanceInfo GetInfo();
None SInstanceInfo: A structure that provides information about the instance. See SInstanceInfo (Page 349).
Table 7- 112 Info { get; } - .NET (C#)
Syntax Parameters Return values Exceptions
SInstanceInfo Info { get; }
None SInstanceInfo: A structure that provides information about the instance. None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
155
User interfaces (API) 7.6 API IInstances
UnregisterInstance()
Unregisters this instance from Runtime Manager.
Note Loss of the interfaces Other applications that are connected to this instance will lose their interface to this instance.
Table 7- 113 UnregisterInstance() - Native C++
Syntax Parameters Return values
ERuntimeErrorCode UnregisterInstance();
None Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT
Condition The function is successful. The instance is not registered in Runtime Manager. The function does not return on time.
Table 7- 114 UnregisterInstance() - .NET (C#)
Syntax Parameters Return values Exceptions
void UnregisterInstance();
None
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
156
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
7.6.2
Controller - Information and settings
GetControllerName() / ControllerName { get; }
Returns the downloaded name of the virtual controller.
Table 7- 115 GetControllerName() - Native C++
Syntax Parameters
ERuntimeErrorCode GetControllerName( WCHAR inout_Name[], UINT32 in_ArrayLength
); · WCHAR inout_Name[]:
A user-allocated storage for the name. · UINT32 in_ArrayLength:
Return values
The length of the storage. Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INDEX_OUT_OF_RANGE
Condition The function is successful. The instance is not registered in Runtime Manager. The function does not return on time. The name does not fit in the storage.
Table 7- 116 ControllerName { get; } - .NET (C#)
Syntax Parameters Return values
Exceptions
string ControllerName { get; }
None
string:
The downloaded name of the virtual controller.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
157
User interfaces (API) 7.6 API IInstances
GetControllerShortDesignation() / ControllerShortDesignation { get; }
Returns the downloaded short designation of the virtual controller.
Table 7- 117 GetControllerShortDesignation() - Native C++
Syntax Parameters
ERuntimeErrorCode GetControllerShortDesignation( WCHAR inout_ShortDesignation[], UINT32 in_ArrayLength
); · WCHAR inout_ShortDesignation[]:
A user-allocated storage for the short designation. · UINT32 in_ArrayLength:
Return values
The length of the storage. Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INDEX_OUT_OF_RANGE
Condition The function is successful. The instance is not registered in Runtime Manager. The function does not return on time. The name does not fit in the storage.
Table 7- 118 ControllerShortDesignation { get; } - .NET (C#)
Syntax Parameters Return values
Exceptions
string ControllerShortDesignation { get; }
None
string:
The downloaded short designation of the virtual controller.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
GetControllerIPCount()
Returns the number of configured IP addresses of the virtual controller. If the function fails, the return value is 0.
Table 7- 119 GetControllerIPCount() - Native C++
Syntax Parameters Return values
UINT32 GetControllerIPCount();
None INT32: Number of configured IP addresses of the virtual controller.
158
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
GetControllerIP() / ControllerIP { get; }
Returns a configured IP address of the instance.
Table 7- 120 GetControllerIP() - Native C++
Syntax Parameters
UIP GetControllerIP(); UIP GetControllerIP(
UINT32 in_Index );
· WCHAR in_Index:
Return values
The index of the IP address you want to receive. The index must be less than the value you receive from GetControllerIPCount(). The default setting is 0.
UIP: IP address of the virtual controller. If the function fails, the return value is 0.
Table 7- 121 ControllerIP { get; } - .NET (C#)
Syntax Parameters Return values
Exceptions
string[] ControllerIP { get; }
None string: All downloaded IP addresses of the virtual controller. If the function fails, the field is empty. None
GetControllerIPSuite4() / ControllerIPSuite4 { get; }
Returns the IP suite instance. If the "Softbus" communication interface is used, the subnet mask and default gateway are 0.
Table 7- 122 GetControllerIPSuite4() Native C++
Syntax Parameters
SIPSuite4 GetControllerIPSuite4(); SIPSuite4 GetControllerIPSuite4(
UINT32 in_Index );
· WCHAR in_Index:
Return values
The index of the IP address you want to receive. The index must be less than the value you receive from GetControllerIPCount(). The default setting is 0.
SIPSuite4: The IP suite of the virtual controller. If the function fails, the return values are 0.
Table 7- 123 ControllerIPSuite4 { get; } - .NET (#)
Syntax Parameters Return values
Exceptions
SIPSuite4[] ControllerIPSuite4 { get; };
None SIPSuite4[]: All downloaded IP suites of the virtual controller. If the function fails, the field is empty. None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
159
User interfaces (API) 7.6 API IInstances
SetIPSuite()
Sets the IP suite of the network interface of a virtual controller.
Table 7- 124 SetIPSuite() - Native C++
Syntax Parameters
ERuntimeErrorCode SetIPSuite( UINT32 in_InterfaceID, SIPSuite4 in_IPSuite, bool in_IsRemanent
); · UINT32 in_InterfaceID:
The ID of the network interface. · SIPSuite4 in_IPSuite:
The IP suite that is to be assigned to the network interface. The IP suite contains the IP address, the subnet mask and the standard gateway.
If the communication interface is "Softbus", the subnet mask and standard gateway are ignored.
· bool in_IsRemanent:
If true, the IP suite is saved after restart of the virtual controller.
Return values
If the communication interface is "Softbus", this flag is ignored.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INSTANCE_NOT_RUNNING
The process of the virtual controller is not running.
SREC_DOES_NOT_EXIST
There is no network interface with this ID.
SREC_INVALID_OPERATING_STATE
The virtual controller has not yet completed the boot process or is already in the shutdown phase.
Table 7- 125 SetIPSuite() - .NET (C#)
Syntax Parameters
void SetIPSuite( UInt32 in_InterfaceID, SIPSuite4 in_IPSuite, bool in IsRemanent );
· UInt32 in_InterfaceID:
The ID of the network interface. · SIPSuite4 in_IPSuite:
If the communication interface is "Softbus", the subnet mask and standard gateway are ignored.
· bool in_IsRemanent:
If true, the IP suite is saved after restart of the virtual controller.
If the communication interface is "Softbus", this flag is ignored.
160
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Return values Exceptions
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.DoesNotExist There is no network interface with this ID.
ERuntimeErrorCode.InvalidOperatingState
The virtual controller has not yet completed the boot process or is already in the shutdown phase.
GetStoragePath()
Returns the full directory in which the instance stores its data.
Table 7- 126 GetStoragePath() - Native C++
Syntax Parameters
ERuntimeErrorCode GetStoragePath( WCHAR inout_StoragePath[], UINT32 in_ArrayLength
); · WCHAR inout_StoragePath[]:
A user-allocated storage for the storage path. The length of the array should be at least as long as DSTORAGE_PATH_MAX_LENGTH. See Data types (Page 311).
· UINT32 in_ArrayLength:
Return values
Length of the array (Wide character)
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INDEX_OUT_OF_RANGE
The path does not fit in the storage.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
161
User interfaces (API) 7.6 API IInstances
SetStoragePath()
Sets the full path of the directory in which the instance stores its data. This can also be a network share.
Set the path before you start the instance. A change to the path takes effect only when the controller is restarted.
If no path is set, the default setting: <My Documents>\Siemens\Simatic\Simulation\Runtime\Persistence\<Instance Name> is used.
Table 7- 127 SetStoragePath() - Native C++
Syntax Parameters
ERuntimeErrorCode SetStoragePath( WCHAR* in_StoragePath
); · WCHAR* in_StoragePath:
Return values
Full name of the storage path. The length of the name must be less than DSTORAGE_PATH_MAX_LENGTH. See Data types (Page 311).
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INDEX_OUT_OF_RANGE
The length of the path exceeds the limit.
SREC_WRONG_ARGUMENT
The path contains invalid characters.
StoragePath { get; set; }
Returns or sets the full path of the directory in which the instance stores its retentive data. This can also be a network share.
Set the path before you start the instance. A change to the path takes effect only when the controller is restarted.
If no path is set, the default setting: <My Documents>\Siemens\Simatic\Simulation\Runtime\Persistence\<Instance Name> is used.
Table 7- 128 StoragePath { get; set; } - .NET (C#)
Syntax Parameters Return values Exceptions
string StoragePath { get; set; }
None
string: The configured storage path.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.IndexOutOfRange ERuntimeErrorCode.WrongArgument
The length of the path exceeds the limit. The path contains invalid characters.
162
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
ArchiveStorage()
The user program, the hardware configuration and the retentive data is stored in a file, the Virtual SIMATIC Memory Card. ArchiveStorage() stores this file as a ZIP file. The instance of the virtual controller must be in OFF operating state for this.
Table 7- 129 ArchiveStorage() - Native C++
Syntax Parameters
ERuntimeErrorCode ArchiveStorage( WCHAR* in_FullFileName
); · WCHAR in_FullFileName:
Return values
The full path to the ZIP file. The path relates to directories of the computer
where the API is being called.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INVALID_OPERATING_STATE
The instance is not in OFF operating state.
SREC_INVALID_ARCHIVE_PATH
The archive path is invalid.
SREC_CREATE_DIRECTORIES_FAILED
The directory for the ZIP file could not be created.
SREC_ARCHIVE_STORAGE_FAILED
The ZIP file could not be created.
SREC_STORAGE_TRANSFER_ERROR
Error during network data transfer. Memory data between client and server computers do not match.
Table 7- 130 ArchiveStorage() - .NET (C#)
Syntax Parameters
void ArchiveStorage( string in_FullFileName
); · string in_FullFileName:
Return values Exceptions
The full path to the ZIP file. The path relates to directories of the computer
where the API is being called.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InvalidOperatingState
The instance is not in OFF operating state.
ERuntimeErrorCode.InvalidArchivePath ERuntimeErrorCode.CreateDirectoriesFailed
The archive path is invalid.
The directory for the ZIP file could not be created.
ERuntimeErrorCode.ArchiveStorageNotCreated ERuntimeErrorCode.StorageTransferError
The ZIP file could not be created.
Error during network data transfer. Memory data between client and server computers do not match.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
163
User interfaces (API) 7.6 API IInstances
RetrieveStorage()
RetrieveStorage() creates a Virtual SIMATIC Memory Card from the archived ZIP file. The virtual controller must be in OFF operating state for this.
Table 7- 131 RetrieveStorage() - Native C++
Syntax Parameters
ERuntimeErrorCode RetrieveStorage( WCHAR* in_FullFileName
); · WCHAR* in_FullFileName:
Return values
The full path to the ZIP file. The path relates to directories of the computer
where the API is being called.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INVALID_OPERATING_STATE
The instance is not in OFF operating state.
SREC_INVALID_ARCHIVE_PATH
The archive path is invalid.
SREC_DELETE_EXISTING_STORAGE_FAI LED
The old storage cannot be deleted.
SREC_RETRIEVE_STORAGE_FAILURE
The ZIP file cannot be unzipped.
SREC_STORAGE_TRANSFER_ERROR
Error during network data transfer. Memory data between client and server computers do not match.
Table 7- 132 RetrieveStorage() - .NET (C#)
Syntax Parameters
void RetrieveStorage( string in_FullFileName
); · string in_FullFileName:
Return values Exceptions
The full path to the ZIP file. The path relates to directories of the computer where the API is being called.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InvalidOperatingState
The instance is not in OFF operating state.
ERuntimeErrorCode.InvalidArchivePath ERuntimeErrorCode.DeleteExistingStorageFailed ERuntimeErrorCode.RetrieveStorageFailure ERuntimeErrorCode.StorageTransferError
The archive path is invalid.
The old storage cannot be deleted.
The ZIP file cannot be unzipped.
Error during network data transfer. Memory data between client and server computers do not match.
164
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
CleanupStoragePath()
The function deletes the directory with the Virtual SIMATIC Memory Card of a local instance or a remote instance. To do this, the function checks whether required and invalid files are available. Even if the directory is missing, the function is considered successful.
To make sure that the correct directory is deleted, the function checks if there are any files that need to be present in the Virtual SIMATIC Memory Card:
"../SIMATIC_MC/sim_hwdb.ini"
"../SIMATIC_MC/SIMATIC.S7S/"
"../SIMATIC_MC/RData/"
To permanently delete the directory, only the following directories with files are also allowed:
"../CrashDump/"
"../Traces/"
The instance must be in OFF operating state ("PowerOff").
Table 7- 133 CleanupStoragePath() - Native C++
Syntax Return values
ERuntimeErrorCode CleanupStoragePath( );
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INVALID_OPERATING_STATE
The instance is not in OFF operating state.
SREC_DELETE_EXISTING_STORAGE_FAI LED
The directory with the memory cannot be
deleted.
SREC_INVALID_STORAGE
The memory is invalid. It contains files or directories that are not permitted.
Table 7- 134 CleanupStoragePath() - .NET (C#)
Syntax Return values Exceptions
void CleanupStoragePath( );
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InvalidOperatingState
The instance is not in OFF operating state.
ERuntimeErrorCode.DeleteExistingStorageFailed
The directory with the memory cannot be
deleted.
SREC_INVALID_STORAGE
The memory is invalid. It contains files or directories that are not permitted.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
165
User interfaces (API) 7.6 API IInstances
7.6.3
Operating state
PowerOn()
The function creates the process for the Simulation Runtime instance and starts the firmware of the virtual controller.
Table 7- 135 PowerOn() - Native C++
Syntax Parameters
ERuntimeErrorCode PowerOn(); ERuntimeErrorCode PowerOn(
UINT32 in_Timeout_ms ); · UINT32 in_Timeout_ms:
Return values
A timeout value in milliseconds.
If no timeout value is set, the function returns immediately. Subscribe to the OnOperatingStateChanged() event to find out when the operation has been completed.
If the value is greater than 0 (a value of 60000 is recommended), the function returns when the operation has been completed or after a timeout.
Expected operating states if this function is successful: { SROS_STOP , SROS_RUN }
Runtime error code SREC_OK SREC_INTERFACE_REMOVED SREC_TIMEOUT SREC_ERROR_LOADING_DLL
SREC_STORAGE_PATH_ALREADY_IN_USE SREC_NO_STORAGE_PATH_SET
SREC_WARNING_ALREADY_EXISTS SREC_VIRTUAL_SWITCH_MISCONFIGURE D SREC_INSTANCE_NOT_RUNNING SREC_WARNING_UNSUPPORTED_PCAP_DR IVER
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The expected operating state does not occur on time.
The "Siemens.Simatic.Simulation.Runtime.Instan ce.exe" cannot load the "Siemens.Simatic.PlcSim.Vplc1500.dll".
The selected path for this instance is already being used by another instance.
The path could not be created. The length of the DSTORAGE_PATH_MAX_LENGTH characters might be exceeded.
Warning: The instance is started.
The virtual switch is configured incorrectly.
The process of the virtual controller is no longer running.
Warning: The PCAP driver used is not supported. PLCSIM Advanced supports WinPcap V4.1.3.
PLCSIM Advanced still tries to boot, but there may be limitations in TCP/IP communication.
166
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
SREC_WARNING_TRIAL_MODE_ACTIVE SREC_WARNING_RUNNING_ON_TIA_PORT AL_TEST_SUITE SREC_NOT_EMPTY SREC_COMMUNICATION_INTERFACE_NOT _AVAILABLE
Warning: No license available. You can use the instance without restrictions with the Trial License. Afterwards, the instance is shut down.
Warning: No valid license is available, but a "TIA Portal Test Suite" license.
PLCSIM Advanced starts with this license. A download from the TIA Portal is possible, but the instance terminates without feedback if the download was not made from the TIA Portal Test Suite.
Warning: No valid license for PLCSIM Advanced is available, but a "TIA Portal Test Suite" license.
If this is the case, power-up from the Virtual SIMATIC Memory Card is not supported.
For local communication via Softbus
PLCSIM Advanced cannot connect to the Softbus.
Solution
· Try again to establish the connection.
· Close PLCSIM Advanced and the TIA Portal and restart the applications.
· Reboot the PC.
· Repair the PLCSIM Advanced installation.
For TCP/IP communication
Another application is connected to the Softbus on your PC.
Solution
· Close all SIMATIC applications, e.g. TIA Portal, WinCC, PLCSIM.
· Reboot the PC.
· Repair the PLCSIM Advanced installation.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
167
User interfaces (API) 7.6 API IInstances
Table 7- 136 PowerOn() - .NET (C#)
Syntax Parameters
ERuntimeErrorCode PowerOn(); ERuntimeErrorCode PowerOn(
UInt32 in_Timeout_ms ); · UInt32 in_Timeout_ms:
A timeout value in milliseconds.
If no timeout value is set, the function returns immediately. Subscribe to the OnOperatingStateChanged() event to find out when the operation has been completed.
If the value is greater than 0 (a value of 60000 is recommended), the function returns when the operation has been completed or after a timeout.
Return values
Expected operating states when this function is successful:
{ EOperatingState.Run, EOperatingState.Stop }
Runtime error code
Condition
ERuntimeErrorCode.OK
The function is successful.
ERuntimeErrorCode.WarningAlreadyExists ERuntimeErrorCode.WarningUnsupportedPcapDrive r
Warning: The instance is started.
Warning: The PCAP driver used is not supported. PLCSIM Advanced supports WinPcap V4.1.3.
PLCSIM Advanced still tries to boot, but there may be limitations in TCP/IP communication.
ERuntimeErrorCode.WarningTrialModeActive
Warning: No license available. You can use the instance without restrictions with the Trial License. Afterwards, the instance is shut down.
ERuntimeErrorCode.WarningRunningOnTiaPortalTe
Warning: No valid license is available,
stSuite
but a "TIA Portal Test Suite" license.
PLCSIM Advanced starts with this license. A download from the TIA Portal is possible, but the instance terminates without feedback if the download was not made from the TIA Portal Test Suite.
ERuntimeErrorCode.NotEmpty
Warning: No valid license for PLCSIM Advanced is available, but a "TIA Portal Test Suite" license.
If this is the case, power-up from the Virtual SIMATIC Memory Card is not supported.
168
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Exceptions
ERuntimeErrorCode.CommunicationInterfaceNotAv ailable
For local communication via Softbus
PLCSIM Advanced cannot connect to the Softbus.
Solution
· Try again to establish the connection.
· Close PLCSIM Advanced and the TIA Portal and restart the applications.
· Reboot the PC.
· Repair the PLCSIM Advanced installation.
For TCP/IP communication
Another application is connected to the Softbus on your PC.
Solution
· Close all SIMATIC applications, e.g. TIA Portal, WinCC, PLCSIM.
· Reboot the PC.
· Repair the PLCSIM Advanced installation.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The expected operating state does not occur on time.
ERuntimeErrorCode.ErrorLoadingDll
The "Siemens.Simatic.Simulation. Runtime.Instance.exe" cannot load the "Siemens.Simatic.PlcSim.Vplc1500.dll".
ERuntimeErrorCode.StoragePathAlreadyInUse
The selected path for this instance is already being used by another instance.
ERuntimeErrorCode.NoStoragePathSet
The path could not be created. The length of the DSTORAGE_PATH_MAX_LENGTH characters might be exceeded.
ERuntimeErrorCode.VirtualSwitchMisconfigured
The virtual switch is configured incorrectly.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is no longer running.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
169
User interfaces (API) 7.6 API IInstances
PowerOff()
Shuts down the Simulation Runtime and closes its process.
Table 7- 137 PowerOff() - Native C++
Syntax Parameters
ERuntimeErrorCode PowerOff(); ERuntimeErrorCode PowerOff(
UINT32 in_Timeout_ms );
· UINT32 in_Timeout_ms:
A timeout value in milliseconds.
If no timeout value is set, the function returns immediately. Subscribe to the OnOperatingStateChanged() event to find out when the operation has been completed.
If the value is greater than 0 (a value of 60000 is recommended), the function returns when the operation has been completed or after a timeout.
Return values
Expected operating state when this function is successful:
{ SROS_OFF }
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The expected operating state does not occur on time.
SREC_INSTANCE_NOT_RUNNING
The process of the virtual controller is not running.
Table 7- 138 PowerOff() - .NET (C#)
Syntax Parameters
void PowerOff(); void PowerOff(
UInt32 in_Timeout_ms ); · UInt32 in_Timeout_ms:
A timeout value in milliseconds.
If no timeout value is set, the function returns immediately. Subscribe to the OnOperatingStateChanged() event to find out when the operation has been completed.
If the value is greater than 0 (a value of 60000 is recommended), the function returns when the operation has been completed or after a timeout.
Return values Exceptions
Expected operating state when this function is successful:
{ EOperatingState.Stop }
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The expected operating state does not occur on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
170
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Run()
User interfaces (API) 7.6 API IInstances
Calls on the virtual controller to change to RUN operating state.
Table 7- 139 Run() - Native C++
Syntax Parameters
ERuntimeErrorCode Run(); ERuntimeErrorCode Run(
UINT32 in_Timeout_ms ); · UINT32 in_Timeout_ms:
A timeout value in milliseconds.
If no timeout value is set, the function returns immediately. Subscribe to the OnOperatingStateChanged() event to find out when the operation has been completed.
If the value is greater than 0 (a value of 60000 is recommended), the function returns when the operation has been completed or after a timeout.
Return values
Expected operating states if this function is successful:
{ SROS_STOP , SROS_RUN }
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The expected operating state does not occur on time.
SREC_INSTANCE_NOT_RUNNING
The process of the virtual controller is not running.
Table 7- 140 Run() - .NET (C#)
Syntax Parameters
void Run(); void Run(
Uint32 in_Timeout_ms );
· UInt32 in_Timeout_ms:
A timeout value in milliseconds.
If no timeout value is set, the function returns immediately. Subscribe to the OnOperatingStateChanged() event to find out when the operation has been completed.
If the value is greater than 0 (a value of 60000 is recommended), the function returns when the operation has been completed or after a timeout.
Return values Exceptions
Expected operating states when this function is successful:
{ EOperatingState.Run }
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The expected operating state does not occur on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
171
User interfaces (API) 7.6 API IInstances
Stop()
Calls on the virtual controller to change to STOP operating state.
Table 7- 141 Stop() - Native C++
Syntax Parameters
ERuntimeErrorCode Stop(); ERuntimeErrorCode Stop(
UINT32 in_Timeout_ms ); · UINT32 in_Timeout_ms:
A timeout value in milliseconds.
If no timeout value is set, the function returns immediately. Subscribe to the OnOperatingStateChanged() event to find out when the operation has been completed.
If the value is greater than 0 (a value of 60000 is recommended), the function returns when the operation has been completed or after a timeout.
Return values
Expected operating state when this function is successful:
{ SROS_STOP }
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The expected operating state does not occur on time.
SREC_INSTANCE_NOT_RUNNING
The process of the virtual controller is not running.
Table 7- 142 Stop() - .NET (C#)
Syntax Parameters
void Stop(); void Stop(
bool in_IsSynchronous ); · UInt32 in_Timeout_ms:
A timeout value in milliseconds.
If no timeout value is set, the function returns immediately. Subscribe to the OnOperatingStateChanged() event to find out when the operation has been completed.
If the value is greater than 0 (a value of 60000 is recommended), the function returns when the operation has been completed or after a timeout.
Return values Exceptions
Expected operating state if this function is successful:
{ EOperatingState.Stop }
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The expected operating state does not occur on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
172
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
GetOperatingState() / OperatingState { get; }
Returns the operating state of the virtual controller. When the operating state changes, the OnOperatingStateChanged() (Page 274) event is triggered. For details about the operating state, see Data types (Page 369).
Table 7- 143 GetOperatingState() - Native C++
Syntax Parameters Return values
EOperatingState GetOperatingState();
None
· SROS_INVALID_OPERATING_STATE: If the function fails.
· SROS_OFF: If the Simulation Runtime instance is not running.
· SROS_BOOTING: If PowerOn() was called while in this state and the virtual controller is not yet ready to start the user program.
· SROS_STOP: If the virtual controller is in STOP state.
· SROS_STARTUP: If the user program is currently changing from STOP to RUN.
· SROS_RUN: If the user program is running.
· SROS_FREEZE:
If the user program is being stopped (Freeze status).
· SROS_HOLD: If the user program is set to HOLD when the breakpoint is reached.
· SROS_SHUTTING_DOWN: If PowerOff() was called but the virtual controller is still in the Shutdown phase.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
173
User interfaces (API) 7.6 API IInstances
Table 7- 144 OperatingState { get; } - .NET (C#)
Syntax Parameters Return values
EOperatingState OperatingState { get; }
None
· EOperatingState.InvalidOperatingState: If the function fails.
· EOperatingState.Off: If the Simulation Runtime instance is not running.
· EOperatingState.Booting: If PowerOn() was called while in this state and the virtual controller is not yet ready to start the user program.
· EOperatingState.Stop: If the virtual controller is in STOP state.
· EOperatingState.Startup: If the user program is currently changing from STOP to RUN.
· EOperatingState.Run: If the user program is running.
· EOperatingState.Freeze: If the user program is being stopped (Freeze status).
· EOperatingState.Hold: If the user program is set to HOLD when the breakpoint is reached.
· EOperatingState.ShuttingDown: If PowerOff() was called but the virtual controller is still in the Shutdown phase.
174
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
MemoryReset()
Shuts down the virtual controller, closes its processes and performs a restart.
Table 7- 145 MemoryReset() - Native C++
Syntax Parameters
ERuntimeErrorCode MemoryReset(); ERuntimeErrorCode MemoryReset(
UINT32 in_Timeout_ms );
· UINT32 in_Timeout_ms:
A timeout value in milliseconds.
If no timeout value is set, the function returns immediately. Subscribe to the OnOperatingStateChanged() event to find out when the operation has been completed.
If the value is greater than 0 (a value of 60000 is recommended), the function returns when the operation has been completed or after a timeout.
Return values
Expected operating states if this function is successful:
{ SROS_STOP , SROS_RUN }
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The expected operating state does not occur on time.
SREC_INSTANCE_NOT_RUNNING
The process of the virtual controller is not running.
Table 7- 146 MemoryReset() - .NET (C#)
Syntax Parameters
void MemoryReset(); void MemoryReset(
UInt32 in_Timeout_ms ); · UInt32 in_Timeout_ms:
A timeout value in milliseconds.
If no timeout value is set, the function returns immediately. Subscribe to the OnOperatingStateChanged() event to find out when the operation has been completed.
If the value is greater than 0 (a value of 60000 is recommended), the function returns when the operation has been completed or after a timeout.
Return values Exceptions
Expected operating states when this function is successful:
{ EOperatingState.Run, EOperatingState.Stop }
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The expected operating state does not occur on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
175
User interfaces (API) 7.6 API IInstances
7.6.4
Tag list
Note Elements with data types not known to the API (EDataType.Unknown) are not included in the tag list.
UpdateTagList()
The function reads the tags from the virtual controller and writes them to the shared storage arranged by name. If the tag is an array or a structure, there are multiple entries. In the case of a structure, there is an entry for the structure itself and an additional entry for each structure element.
Entry_1: "StructName" Entry_2: "StructName.ElementName_1" .. Entry_N: "StructName.ElementName_n"
In the case of an array, in this example a two-dimensional array, there is an entry for the array itself and an additional entry for each array element.
Entry_1: "ArrayName" Entry_2: "ArrayName[a,b]", {a} and {b} correspond to the first index of the respective dimension) .. Entry_N: "ArrayName[x,y]", {x} and {y} correspond to the last index of the respective dimension)
176
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Memory for up to 500000 entries (not PLC tags) is reserved for the list. If the list becomes too large, the function returns the error/exception "NOT_ENOUGH_MEMORY".
If there are problems with the maximum number of entries and not all tags are needed, two filters can be used when refreshing the tag table.
Table 7- 147 UpdateTagList() - Native C++
Syntax Parameters
ERuntimeErrorCode UpdateTagList(); ERuntimeErrorCode UpdateTagList(
ETagListDetails in_TagListDetails ); ERuntimeErrorCode UpdateTagList(
ETagListDetails in_TagListDetails, bool in_IsHMIVisibleOnly ); ERuntimeErrorCode UpdateTagList( ETagListDetails in_TagListDetails, bool in_IsHMIVisibleOnly, WCHAR* in_DataBlockFilterList );
· ETagListDetails in_TagListDetails:
Every combination of the following four areas:
IO: Inputs and Outputs M: Bit memory CT: Counters and Timers DB: Data Blocks
The default setting is IOMCTDB.
Example: IOM reads only the tags from the area Inputs / Outputs and Bit memory.
· bool in_IsHMIVisibleOnly:
If true, only tags marked with "HMI Visible" are read. The default setting is true.
· WCHAR* in_DataBlockFilterList:
A string that includes the name of all data blocks that are supposed to be available in the tag table. The string must be in quotation marks.
Example: ""\"DB_1\", \"DB_2\" \"DB_3\"|\"DB_4\"\"DB_5\""
All characters within the quotation marks are interpreted as a DB name. If the data block does not exist in the PLC program, it is not added to the tag table memory. No error is triggered in the process.
For this list to be taken into consideration, in_DataBlockFilterList has to be unequal to NULL and in_TagListDetails has to contain "DB".
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
177
User interfaces (API) 7.6 API IInstances
Return values
Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_NOT_ENOUGH_MEMORY SREC_WARNING_ALREADY_EXISTS SREC_WRONG_ARGUMENT
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
More than 500000 entries are requested.
The tag table is current.
The syntax of in_DataBlockFilterList is invalid. The list has to be 3 characters long; the first and last character have to be a quotation mark.
Table 7- 148 UpdateTagList() - .NET (C#)
Syntax Parameters
void UpdateTagList(); void UpdateTagList(
ETagListDetails in_TagListDetails ); void UpdateTagList(
ETagListDetails in_TagListDetails, bool in_IsHMIVisibleOnly ); ERuntimeErrorCode UpdateTagList( ETagListDetails in_TagListDetails,
bool in_IsHMIVisibleOnly, string in_DataBlockFilterList );
· ETagListDetails in_TagListDetails:
Every combination of the following four areas:
IO: Inputs and Outputs M: Bit memory CT: Counters and Timers DB: Data Blocks
The default setting is IOMCTDB.
Example: IOM reads only the tags from the area Inputs / Outputs and Bit memory.
· bool in_IsHMIVisibleOnly:
If true, only tags marked with "HMI Visible" are read. The default setting is true.
· string in_DataBlockFilterList:
A string that includes the name of all data blocks that are supposed to be available in the tag table. The string must be in quotation marks.
Example: ""\"DB_1\", \"DB_2\" \"DB_3\"|\"DB_4\"\"DB_5\""
All characters within the quotation marks are interpreted as a DB name. If the data block does not exist in the PLC program, it is not added to the tag table memory. No error is triggered in the process.
For this list to be taken into consideration, in_DataBlockFilterList has to be unequal to NULL and in_TagListDetails has to contain "DB".
178
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Return values Exceptions
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.NotEnoughMemory
More than 500000 entries are requested.
ERuntimeErrorCode.WrongArgument
The syntax of in_DataBlockFilterList is invalid. The list has to be 3 characters long; the first and last character have to be a quotation mark.
GetTagListStatus()
Returns the current update status of the tag list storage. "inout_TagListDetails" is NONE, if the list needs to be updated.
Table 7- 149 GetTagListStatus() - Native C++
Syntax Parameters
ERuntimeErrorCode GetTagListStatus( ETagListDetails* out_TagListDetails, bool* out_IsHMIVisibleOnly
); · ETagListDetails out_TagListDetails:
Status of the tag list details. SRTLD_NONE when an update of the list is required. · bool out_IsHMIVisibleOnly:
Return values
If true, only tags marked with "HMI Visible" are available in the list.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
Table 7- 150 GetTagListStatus() - .NET (C#)
Syntax Parameters
void GetTagListStatus( out ETagListDetails out_TagListDetails, out bool out_IsHMIVisibleOnly
); · out ETagListDetails out_TagListDetails:
Status of the tag list details. ETagListDetails.None when an update of the list is required.
· out bool out_IsHMIVisibleOnly:
If true, only tags marked with "HMI Visible" are available in the list.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
179
User interfaces (API) 7.6 API IInstances
Return values Exceptions
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
GetTagInfoCount()
Returns the number of entries in the tag list storage. If the function fails, the return value is 0.
Table 7- 151 GetTagInfoCount() - Native C++
Syntax Parameters Return values
UINT32 GetTagInfoCount();
None Number of entries in the tag list storage.
GetTagInfos() / TagInfos { get; }
Returns a list of all tags.
Table 7- 152 GetTagInfos() - Native C++
Syntax Parameters
ERuntimeErrorCode GetTagInfos( UINT32 in_BufferLength, STagInfo* inout_TagInfos, UINT32* out_TagCount
); · UINT32 in_BufferLength:
The number of elements that the storage can accommodate. · STagInfo* inout_TagInfos:
The user-allocated storage that accommodates the tags. · UINT32* out_TagCount:
Return values
Returns the number of tags that were written to the storage.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INSTANCE_NOT_RUNNING
The process of the virtual controller is not running.
SREC_INDEX_OUT_OF_RANGE
The elements do not fit in the storage.
180
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 153 TagInfos { get; } - .NET (C#)
Syntax Parameters Return values Exceptions
STagInfo[] TagInfos { get; }
None
An array that contains all available entries of the storage.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
CreateConfigurationFile()
Writes all entries from the tag list to an XML file.
Table 7- 154 CreateConfigurationFile() - Native C++
Syntax Parameters
ERuntimeErrorCode CreateConfigurationFile( WCHAR* in_FullFileName
); · WCHAR* in_FullFileName:
Return values
Full file name of the XML file:
<Path> + <File name> + <File extension>.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_WRONG_ARGUMENT
The file name is invalid.
Table 7- 155 CreateConfigurationFile() - .NET (C#)
Syntax
Parameters Return values
void CreateConfigurationFile( string in_FullFileName
); None · string in_FullFileName:
Exceptions
File name of the XML file that is to be written to:
<Path> + <File name> + <File extension>.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument The file name is invalid.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
181
User interfaces (API) 7.6 API IInstances
7.6.5
I/O access
7.6.5.1
Synchronizing inputs and outputs
Description
In PLCSIM Advanced the complete scope of the input and output area is used (see GetAreaSize/AreaSize (Page 183)). This is also possible when no IO module is configured.
Inputs and outputs that are defined via configured IO modules are synchronized to the defined update of the process image partition (PIP).
Inputs and outputs that are not assigned to an IO module are synchronized in the cycle control point.
Note the following when synchronizing these inputs and outputs:
Inputs can only be used as inputs.
You can write the values via the API, but values which are written via the user program (TIA Portal) are not visible in the API.
Outputs can be used as output and as input.
You can write the values via the API and via the CPU / the user program (TIA Portal). If API and user program write to the same area, the values from the API will overwrite the vales from the user program.
182
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
7.6.5.2
I/O access via address - Reading
InputArea { get; }, MarkerArea { get; }, OutputArea { get; }
Returns an interface that you use to call the .NET functions in this section.
Table 7- 156 InputArea { get; } MarkerArea { get; } OutputArea { get; } - .NET (C#)
Syntax
Parameters Return values
IIOArea InputArea { get; } IIOArea MarkerArea { get; } IIOArea OutputArea { get; } None IIOArea: The interface is used to call the "I/O access via address" functions.
GetAreaSize() / AreaSize { get; }
Returns the size of the area in bytes.
Table 7- 157 GetAreaSize() - Native C++
Syntax Parameters
UINT32 GetAreaSize( EArea in_Area
); · EArea in_Area:
Return values
The area whose size you want to receive. Permissible values: {SRA_INPUT, SRA_MARKER, SRA_OUTPUT}. See EArea (Page 369).
UINT32: Size of the area in bytes. If the function was successful, the value is not equal to 0.
Table 7- 158 AreaSize { get; } - .NET (C#)
Syntax
Parameters Return values
UInt32 InputArea.AreaSize { get; } UInt32 MarkerArea.AreaSize { get; } UInt32 OutputArea.AreaSize { get; } None
Uint32: Size of the area in bytes. If the function was successful, the value is not equal to 0.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
183
User interfaces (API) 7.6 API IInstances
ReadBit()
Reads an individual bit from the area.
Note The function allows access to the entire storage area of the virtual controller. Therefore, use access via the tag name (Page 199) and not via the address areas.
Table 7- 159 ReadBit() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadBit( EArea in_Area, UINT32 in_Offset, UINT8 in_Bit, bool* out_Value
); · EArea in_Area:
The area from which you want to read. Permissible values: {SRA_INPUT, SRA_MARKER, SRA_OUTPUT}. See EArea (Page 369).
· UINT32 in_Offset:
The byte offset within the area. The value must be between 0 and the value that GetAreaSize() returns.
· UINT8 in_Bit:
The bit offset within the byte. The value must be between 0 and 7. · bool* out_Value:
Return values
Returns the bit value. Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE SREC_WRONG_ARGUMENT
Condition The function is successful. The instance is not registered in Runtime Manager. The function does not return on time. The process of the virtual controller is not running. Offset or bits are invaid. The area is invalid.
184
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 160 ReadBit() - .NET (C#)
Syntax Parameters
bool InputArea.ReadBit( UInt32 in_Offset, Byte in_Bit
); bool MarkerArea.ReadBit(
UInt32 in_Offset, Byte in_Bit ); bool OutputArea.ReadBit( UInt32 in_Offset, Byte in_Bit );
· UInt32 in_Offset:
The byte offset within the area. The value must be between 0 and the value that AreaSize returns.
· Byte in_Bit:
Return values Exceptions
The bit offset within the byte. The value must be between 0 and 7.
bool: Bit value
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
Offset or bits are invaid.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
185
User interfaces (API) 7.6 API IInstances
ReadByte()
Reads an individual bit from the area.
Note The function allows access to the entire storage area of the virtual controller. Therefore, use access via the tag name and not via the address areas.
Table 7- 161 ReadByte() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadByte( EArea in_Area, UINT32 in_Offset, BYTE* out Value);
· EArea in_Area:
The area from which you want to read. Permissible values: {SRA_INPUT, SRA_MARKER, SRA_OUTPUT}. See EArea (Page 369).
· UINT32 in_Offset:
The byte offset within the area. The value must be between 0 and the value that GetAreaSize() returns.
· BYTE* out_Value:
Return values
Returns the byte value. Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE SREC_WRONG_ARGUMENT
Condition The function is successful. The instance is not registered in Runtime Manager. The function does not return on time. The process of the virtual controller is not running. Offset is invalid. The area is invalid.
Table 7- 162 ReadByte() - .NET (C#)
Syntax Parameters
Byte InputArea.ReadByte( UInt32 in_Offset
); Byte MarkerArea.ReadByte(
UInt32 in_Offset ); Byte OutputArea.ReadByte(
UInt32 in_Offset );
· UInt32 in_Offset:
Return values
The byte offset within the area. The value must be between 0 and the value that AreaSize returns.
Byte: Byte value.
186
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Exceptions
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
Offset is invalid.
ReadBytes()
Reads a byte array from the area.
Note The function allows access to the entire storage area of the virtual controller. Therefore, use access via the tag name and not via the address areas.
Table 7- 163 ReadByte() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadBytes( EArea in_Area, UINT32 in_Offset, UINT32 in_BytesToRead, UINT32* out_BytesRead, BYTE inout_Values[]
); · EArea in_Area:
The area from which you want to read. Permissible values: {SRA_INPUT, SRA_MARKER, SRA_OUTPUT}. See EArea (Page 369).
· UINT32 in_Offset:
The byte offset within the area. The value must be between 0 and the value that GetAreaSize() returns.
· UINT32 in_BytesToRead:
Contains the size of the value storage. · UINT32* out_BytesRead:
Returns the number of bytes that were just written to the value storage. · BYTE inout_Values[]:
The storage for the bytes that are read from the area.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
187
User interfaces (API) 7.6 API IInstances
Return values
Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_WRONG_ARGUMENT
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset is outside the area size. No byte could be read.
The area is invalid.
Table 7- 164 ReadBytes() - .NET (C#)
Syntax Parameters
Byte[] InputArea.ReadBytes( UInt32 in_Offset, UInt32 in_BytesToRead
); Byte[] MarkerArea.ReadBytes(
UInt32 in_Offset, UInt32 in_BytesToRead ); Byte[] OutputArea.ReadBytes( UInt32 in_Offset, UInt32 in_BytesToRead );
· UInt32 in_Offset:
The byte offset within the area. The value must be between 0 and the value that AreaSize returns.
· UInt32 in_BytesToRead:
Return values Exceptions
The number of bytes to be read.
Byte[]: The read bytes.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset is outside the area size. No byte could be read.
188
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
ReadSignals()
Structures and fields can be emulated through signal lists and be read by using the ReadSignals() function.
The function also takes into consideration the byte order (Endianness).
Only primitive data type signals are supported, but the function is not type-safe.
Note The function allows access to the entire storage area of the virtual controller. Therefore, use access via the tag name (Page 199) and not via the address areas.
Table 7- 165 ReadSignals() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadSignals( EArea in_Area, SDataValueByAddress* inout_Signals, UINT32 in_SignalCount
); ERuntimeErrorCode ReadSignals(
EArea in_Area, SDataValueByAddressWithCheck* inout_Signals, UINT32 in_SignalCount, bool* out_SignalsHaveChanged );
· EArea in_Area:
The area from which you want to read. Permissible values: {SRA_INPUT, SRA_MARKER, SRA_OUTPUT}. See EArea (Page 369).
· SDataValueByAddress* inout_Signals:
The signal list to be read. The result is stored in the structure. · SDataValueByAddressWithCheck* inout_Signals:
The signal list that is read. The result is stored in the structure. "ValueHasChanged" is set to true if the value of the signal has changed since the preceding call.
· UINT32 in_SignalCount:
Number of signals in the list. · bool* out_SignalsHaveChanged:
Signal error
Returns true if the value of at least one signal has changed since the preced-
ing call.
Error code
Condition
SREC_OK
The signal operation is successful.
SREC_DOES_NOT_EXIST
The entry does not exist in the stored tag table.
SREC_NOT_SUPPORTED
Access to entire structures or arrays is not supported.
SREC_TYPE_MISMATCH
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
189
User interfaces (API) 7.6 API IInstances
Return values
Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_WRONG_ARGUMENT SREC_SIGNAL_CONFIGURATION_ER ROR
Condition The function is successful. The instance is not registered in Runtime Manager. The function does not return on time. The process of the virtual controller is not running. The area is invalid. At least one signal error is in the list.
Table 7- 166 ReadSignals() - .NET (C#)
Syntax Parameters
void ReadSignals( ref SDataValueByAddress[] inout_Signals
); void ReadSignals(
ref SDataValueByAddressWithCheck[] inout_Signals out bool out_SignalsHaveChanged); );
· ref SDataValueByAddress[] inout_Signals:
The signal list to be read. · ref SDataValueByAddressWithCheck[] inout_Signals:
The signal list that is read. The result is stored in the structure. "ValueHasChanged" is set to true if the value of the signal has changed since the preceding call.
· out bool out_SignalsHaveChanged:
Return values Signal error
Exceptions
Returns true if the value of at least one signal has changed since the preceding call.
None
Runtime error code
Condition
ERuntimeErrorCode.OK
The signal operation is successful.
ERuntimeErrorCode.IndexOutOfRange
Offset or bits are invalid.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.SignalConfigurationError
At least one signal error is in the list.
190
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
7.6.5.3
I/O access via address - Writing
WriteBit()
Writes an individual bit to the area.
Note Data can be overwritten The function allows access to the entire storage area of the virtual controller. Therefore, use access via the tag name (Page 221) and not via the address areas.
Table 7- 167 WriteBit() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteBit( EArea in_Area, UINT32 in_Offset, UINT8 in_Bit, bool in_Value
); · EArea in_Area:
The area that is to be written. Permissible values: {SRA_INPUT, SRA_MARKER, SRA_OUTPUT}. See EArea (Page 369).
· UINT32 in_Offset:
The byte offset within the area. The value must be between 0 and the value that GetAreaSize() returns.
· UINT8 in_Bit:
The bit offset within the byte. The value must be between 0 and 7. · bool in_Value:
Return values
Bit value. Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE SREC_WRONG_ARGUMENT
Condition The function is successful. The instance is not registered in Runtime Manager. The function does not return on time. The process of the virtual controller is not running. Offset or bits are invaid. Area is invalid.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
191
User interfaces (API) 7.6 API IInstances
Table 7- 168 WriteBit() - .NET (C#)
Syntax Parameters
void InputArea WriteBit( UInt32 in_Offset, Byte in_Bit, bool in_Value
); void MarkerArea WriteBit(
UInt32 in_Offset, Byte in_Bit, bool in_Value ); void OutputArea WriteBit( UInt32 in_Offset, Byte in_Bit, bool in_Value );
· UInt32 in_Offset:
The byte offset within the area. The value must be between 0 and the value that AreaSize returns.
· Byte in_Bit:
The bit offset within the byte. The value must be between 0 and 7. · bool in_Value:
Return values Exceptions
Bit value.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
Offset or bits are invaid.
192
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
WriteByte()
User interfaces (API) 7.6 API IInstances
Writes an individual byte to the area. Note Data can be overwritten The function allows access to the entire storage area of the virtual controller. Therefore, use access via the tag name (Page 221) and not via the address areas.
Table 7- 169 WriteByte() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteByte( EArea in_Area, UINT32 in_Offset, BYTE in Value);
· EArea in_Area:
The area that is to be written. Permissible values: {SRA_INPUT, SRA_MARKER, SRA_OUTPUT}. See EArea (Page 369).
· UINT32 in_Offset:
The byte offset within the area. The value must be between 0 and the value that GetAreaSize() returns.
· BYTE in_Value:
Return values
Byte value. Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE SREC_WRONG_ARGUMENT
Condition The function is successful. The instance is not registered in Runtime Manager. The function does not return on time. The process of the virtual controller is not running. Offset is invalid. Area is invalid.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
193
User interfaces (API) 7.6 API IInstances
Table 7- 170 WriteByte() - .NET (C#)
Syntax Parameters
void InputArea.WriteByte( UInt32 in_Offset, Byte in_Value
); void MarkerArea.WriteByte(
UInt32 in_Offset, Byte in_Value ); void OutputArea.WriteByte( UInt32 in_Offset, Byte in_Value );
· UINT32 in_Offset:
The byte offset within the area. The value must be between 0 and the value that AreaSize returns.
· BYTE in_Value:
Return values Exceptions
Byte value.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
Offset is invalid.
194
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
WriteBytes()
Writes a byte array to the area.
Note Data can be overwritten The function allows access to the entire storage area of the virtual controller. In particular, do not write to bytes that belong to other applications or contain internal data, for example, qualifier bits for fail-safe I/O modules. Therefore, use access via the tag name (Page 221) and not via the address areas.
Table 7- 171 WriteBytes() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteBytes( EArea in_Area, UINT32 in_Offset, UINT32 in_BytesToWrite, UINT32* out_BytesWritten, BYTE in_Values[])
; · EArea in_Area:
The area that is to be written. Permissible values: {SRA_INPUT, SRA_MARKER, SRA_OUTPUT}. See EArea (Page 369).
· UINT32 in_Offset:
The byte offset within the area. The value must be between 0 and the value that GetAreaSize() returns.
· UINT32 in_BytesToWrite:
Contains the size of the array value to be written. · UINT32* out_BytesWritten:
Contains the number of bytes that were just written. · BYTE in_Values[]:
Return values
Byte array that is to be written to the area.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INSTANCE_NOT_RUNNING
The process of the virtual controller is not running.
SREC_INDEX_OUT_OF_RANGE
The offset is outside the area size. No byte could be written.
SREC_WRONG_ARGUMENT
The area is invalid.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
195
User interfaces (API) 7.6 API IInstances
Table 7- 172 WriteBytes() - .NET (C#)
Syntax
UInt32 InputArea.WriteBytes( UInt32 in_Offset, Byte[] in_Values
); UInt32 InputArea.WriteBytes(
UInt32 in_Offset, UInt32 in_BytesToWrite, Byte[] in_Values
Parameters
); UInt32 MarkerArea.WriteBytes(
UInt32 in_Offset, Byte[] in_Values ); UInt32 MarkerArea.WriteBytes( UInt32 in_Offset, UInt32 in_BytesToWrite, Byte[] in_Values ); UInt32 OutputArea.WriteBytes( UInt32 in_Offset, Byte[] in_Values ); UInt32 OutputArea.WriteBytes( UInt32 in_Offset, UInt32 in_BytesToWrite, Byte[] in_Values );
· UINT32 in_Offset:
The byte offset within the area. The value must be between 0 and the value that AreaSize returns.
· UInt32 in_BytesToWrite:
Contains the number of bytes to be written. The value must be between 1 and the size of the array value.
· BYTE in_Value:
Return values Exceptions
Byte value.
Uint32: Contains the number of bytes that were just written.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset is outside the area size. No byte could be written.
196
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
WriteSignals()
Writes multiple signals within an API call. The function also takes into consideration the byte order (Endianness).
The function supports only primitive data type signals, but it is not typical.
Note Data can be overwritten The function allows access to the entire storage area of the virtual controller. Therefore, use access via the tag name (Page 221) and not via the address areas.
Table 7- 173 WriteSignals() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteSignals( EArea in_Area, SDataValueByAddress* in_Signals, UINT32 in_SignalCount
); · EArea in_Area:
The area that is to be written. Permissible values: {SRA_INPUT, SRA_MARKER, SRA_OUTPUT}. See EArea (Page 369).
· SDataValueByAddress* inout_Signals:
The signal list to be written. · UINT32 in_SignalCount:
Signal error Return values
Number of signals in the list. Error code SREC_OK SREC_INDEX_OUT_OF_RANGE Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_SIGNAL_CONFIGURATION_ERROR SREC_WRONG_ARGUMENT
Condition The signal operation is successful. Offset or bits are invalid. Condition The function is successful. The instance is not registered in Runtime Manager. The function does not return on time. The process of the virtual controller is not running. At least one signal error is in the list. The area is invalid.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
197
User interfaces (API) 7.6 API IInstances
Table 7- 174 WriteSignals() - .NET (C#)
Syntax Parameters
void InputArea.WriteSignals( SDataValueByAddress[] in_Signals
); void MarkerArea.WriteSignals(
SDataValueByAddress[] in_Signals ); void OutputArea.WriteSignals(
SDataValueByAddress[] in_Signals );
· SDataValueByAddress[] in_Signals:
Return values Signal error
Exceptions
The signal list to be written.
None
Error code
Condition
ERuntimeErrorCode.OK
The signal operation is successful.
ERuntimeErrorCode.IndexOutOfRange
Offset or bits are invalid.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.SignalConfigurationError
At least one signal error is in the list.
198
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
7.6.5.4
User interfaces (API) 7.6 API IInstances
I/O access via tag name - Reading
Individual access to IO data is used for displaying and writing values that are not refreshed regularly in a graphical user interface (GUI).
Note To simulate a regular exchange of signals, create a signal list for each set of signals. Use this signal list for all further accesses. Create a new list as soon as the set of signals changes. For the signal lists use the functions ReadSignals() and WriteSignals().
Read()
Reads the value of a PLC tag.
Table 7- 175 Read() - Native C++
Syntax Parameters
ERuntimeErrorCode Read( WCHAR* in_Tag, SDataValue* inout_Value
); · WCHAR* in_Tag:
The name of the PLC tag that is to be read. · SDataValue* inout_Value:
Contains the value and the expected type of the PLC tag. If the expected type is UNSPECIFIC, it is set to the stored type when the function was successful. The STRUCT type is not supported.
Return values
Structures and fields can be emulated through signal lists and be read by using the ReadSignals() function.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INSTANCE_NOT_RUNNING
The process of the virtual controller is not running.
SREC_INDEX_OUT_OF_RANGE
The offset lies outside the area range. No value could be read.
SREC_DOES_NOT_EXIST
The entry does not exist in the stored tag list.
SREC_NOT_SUPPORTED
Access to entire structures or arrays is not supported.
SREC_TYPE_MISMATCH
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
SREC_NOT_UP_TO_DATE
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
199
User interfaces (API) 7.6 API IInstances
Table 7- 176 Read() - .NET (C#)
Syntax Parameters
SDataValue Read( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
SDataValue: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
200
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
ReadBool()
Reads the value of a PLC tag.
Table 7- 177 ReadBool() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadBool( WCHAR* in_Tag, bool* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · bool* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 178 ReadBool() - .NET (C#)
Syntax Parameters
bool ReadBool( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
bool: Contains the value of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
ERuntimeErrorCode.DoesNotExist The entry does not exist in the stored tag
list.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
201
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.NotSupported ERuntimeErrorCode.TypeMismatch ERuntimeErrorCode.NotUpToData
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
ReadInt8()
Reads the value of a PLC tag.
Table 7- 179 ReadInt8() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadInt8( WCHAR* in_Tag, INT8* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · INT8* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
202
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 180 ReadInt8() - .NET (C#)
Syntax Parameters
Int8 ReadInt8( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
Int8: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
ReadInt16()
Reads the value of a PLC tag.
Table 7- 181 ReadInt16() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadInt16( WCHAR* in_Tag, INT16* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · INT16* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
203
User interfaces (API) 7.6 API IInstances
SREC_DOES_NOT_EXIST SREC_NOT_SUPPORTED SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 182 ReadInt16() - .NET (C#)
Syntax Parameters
Int16 ReadInt16( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
Int16: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
ERuntimeErrorCode.DoesNotExist The entry does not exist in the stored tag
list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
204
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
ReadInt32()
Reads the value of a PLC tag.
Table 7- 183 ReadInt32() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadInt32( WCHAR* in_Tag, INT32* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · INT32* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 184 ReadInt32() - .NET (C#)
Syntax Parameters
Int32 ReadInt32( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
Int32: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
205
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.DoesNotExist ERuntimeErrorCode.NotSupported ERuntimeErrorCode.TypeMismatch
ERuntimeErrorCode.NotUpToData
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
ReadInt64()
Reads the value of a PLC tag.
Table 7- 185 ReadInt64() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadInt64( WCHAR* in_Tag, INT64* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · INT64* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
ERuntimeErrorCode.NotSupported
ERuntimeErrorCode.TypeMismatch
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
206
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 186 ReadInt64() - .NET (C#)
Syntax Parameters
Int64 ReadInt64( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
Int64: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
207
User interfaces (API) 7.6 API IInstances
ReadUInt8()
Reads the value of a PLC tag.
Table 7- 187 ReadUInt8() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadUInt8( WCHAR* in_Tag, UINT8* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · UINT8* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 188 ReadUInt8() - .NET (C#)
Syntax Parameters
UInt8 ReadUInt8( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
UInt8: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
208
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.DoesNotExist ERuntimeErrorCode.NotSupported ERuntimeErrorCode.TypeMismatch
ERuntimeErrorCode.NotUpToData
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
ReadUInt16()
Reads the value of a PLC tag.
Table 7- 189 ReadUInt16() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadUInt16( WCHAR* in_Tag, UINT16* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · UINT16* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
209
User interfaces (API) 7.6 API IInstances
Table 7- 190 ReadUInt16() - .NET (C#)
Syntax Parameters
UInt16 ReadUInt16( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
UInt16: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
ReadUInt32()
Reads the value of a PLC tag.
Table 7- 191 ReadUInt32() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadUInt32( WCHAR* in_Tag, UINT32* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · UINT32* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
210
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
SREC_DOES_NOT_EXIST SREC_NOT_SUPPORTED SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
User interfaces (API) 7.6 API IInstances
The entry does not exist in the stored tag list. Access to entire structures or arrays is not supported. The expected type does not match the stored type. See Compatible primitive data types (Page 375). The stored tag list must be updated.
Table 7- 192 ReadUInt32() - .NET (C#)
Syntax Parameters
UInt32 ReadUInt32( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
Uint32: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
ERuntimeErrorCode.DoesNotExist The entry does not exist in the stored tag
list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
211
User interfaces (API) 7.6 API IInstances
ReadUInt64()
Reads the value of a PLC tag.
Table 7- 193 ReadInt64() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadUInt64( WCHAR* in_Tag, UINT64* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · UINT64* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 194 ReadUInt64() - .NET (C#)
Syntax Parameters
UInt64 ReadUInt64( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
UInt64: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
212
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.DoesNotExist ERuntimeErrorCode.NotSupported ERuntimeErrorCode.TypeMismatch
ERuntimeErrorCode.NotUpToData
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
ReadFloat()
Reads the value of a PLC tag.
Table 7- 195 ReadFloat() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadFloat( WCHAR* in_Tag, float* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · float* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
ERuntimeErrorCode.IndexOutOfRange SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
213
User interfaces (API) 7.6 API IInstances
Table 7- 196 ReadFloat() - .NET (C#)
Syntax Parameters
float ReadFloat( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
float: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
214
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
ReadDouble()
Reads the value of a PLC tag.
Table 7- 197 ReadDouble() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadDouble( WCHAR* in_Tag, double* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · double* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
ERuntimeErrorCode.IndexOutOfRange SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 198 ReadDouble() - .NET (C#)
Syntax Parameters
double ReadDouble( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
double: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
215
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.DoesNotExist ERuntimeErrorCode.NotSupported ERuntimeErrorCode.TypeMismatch
ERuntimeErrorCode.NotUpToData
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
ReadChar()
Reads the value of a PLC tag.
Table 7- 199 ReadChar() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadChar( WCHAR* in_Tag, char* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · char* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
ERuntimeErrorCode.IndexOutOfRange SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
216
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 200 ReadChar() - .NET (C#)
Syntax Parameters
sbyte ReadChar( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
sbyte: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
217
User interfaces (API) 7.6 API IInstances
ReadWChar()
Reads the value of a PLC tag.
Table 7- 201 ReadWChar() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadWChar( WCHAR* in_Tag, WCHAR* out_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be read. · WCHAR* out_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
ERuntimeErrorCode.IndexOutOfRange SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be read.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 202 ReadWChar() - .NET (C#)
Syntax Parameters
char ReadWChar( string in_Tag
)
· string in_Tag: The name of the PLC tag that is to be read.
Return values Exceptions
char: Contains the value and the type of the PLC tag.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be read.
218
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.DoesNotExist ERuntimeErrorCode.NotSupported ERuntimeErrorCode.TypeMismatch
ERuntimeErrorCode.NotUpToData
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
ReadSignals()
Reads multiple signals within an API call. When the function is called for the first time, it stores internal information in the structures SDataValueByName* to improve the performance of the subsequent calls.
Note
To simulate a regular exchange of signals, create a signal list for each set of signals. Use this signal list for all further accesses. Create a new list as soon as the set of signals changes.
Table 7- 203 ReadSignals() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadSignals( SDataValueByName* inout_Signals, UINT32 in_SignalCount
); ERuntimeErrorCode ReadSignals(
SDataValueByNameWithCheck* inout_Signals, UINT32 in_SignalCount bool* out_SignalsHaveChanged );
· SDataValueByName* inout_Signals:
Contains the name, the value and the expected type of the PLC tag. If the expected type is UNSPECIFIC, it is set to the stored type when the function was successful. The STRUCT type is not supported.
· SDataValueByNameWithCheck* inout_Signals:
Contains the name, the value and the expected type of the PLC tag. If the expected type is UNSPECIFIC, it is set to the stored type when the function was successful. The STRUCT type is not supported. "ValueHasChanged" is set to true if the value of the signal has changed since the preceding call.
· UINT32 in_SignalCount:
The number of signals to be read. · bool* out_SignalsHaveChanged:
Returns true if the value of at least one signal has changed since the preceding call.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
219
User interfaces (API) 7.6 API IInstances
Signal error Return values
Runtime error code SREC_OK SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_INDEX_OUT_OF_RANGE Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_NOT_UP_TO_DATE SREC_SIGNAL_CONFIGURATION_ERROR
Condition
The signal operation is successful.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
Offset or bits are invalid.
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The stored tag list must be updated.
At least one signal error is in the list.
Table 7- 204 ReadSignals() - .NET (C#)
Syntax Parameters
void ReadSignals( ref SDataValueByName[] inout_Signals
) void ReadSignals(
ref SDataValueByNameWithCheck[] inout_Signals out bool out_SignalsHaveChanged );
· ref SDataValueByName[] inout_Signals:
Contains the name, the value and the expected type of the PLC tag. If the expected type is UNSPECIFIC, it is set to the stored type when the function was successful. The STRUCT type is not supported.
· ref SDataValueByNameWithCheck[] inout_Signals:
Contains the name, the value and the expected type of the PLC tag. If the expected type is UNSPECIFIC, it is set to the stored type when the function was successful. The STRUCT type is not supported. "ValueHasChanged" is set to true if the value of the signal has changed since the preceding call.
· out bool out_SignalsHaveChanged:
Return values
Returns true if the value of at least one signal has changed since the preceding call.
SDataValue: Contains the value and the type of the PLC tag.
220
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
7.6.5.5
User interfaces (API) 7.6 API IInstances
Signal error Exceptions
Runtime error code
Condition
ERuntimeErrorCode.OK
The signal operation is successful.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.IndexOutOfRange
Offset or bits are invalid.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
I/O access via tag name - Writing
Individual access to IO data is used for displaying and writing values that are not refreshed regularly in a graphical user interface (GUI).
Note To simulate a regular exchange of signals, create a signal list for each set of signals. Use this signal list for all further accesses. Create a new list as soon as the set of signals changes. For the signal lists use the functions ReadSignals() and WriteSignals().
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
221
User interfaces (API) 7.6 API IInstances
Write()
Writes the value of a PLC tag.
Table 7- 205 Write() - Native C++
Syntax Parameters
ERuntimeErrorCode Write( WCHAR* in_Tag, SDataValue* in_Value
); · WCHAR* in_Tag:
The name of the PLC tag that is to be written. · SDataValue* in_Value:
Contains the value and the expected type of the PLC tag. The UNSPECIFIC and STRUCT types are not supported.
Return values
Structures and fields can be emulated through signal lists and then be read by using the ReadSignals() function and written by using the WriteSignals() function.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INSTANCE_NOT_RUNNING
The process of the virtual controller is not running.
SREC_INDEX_OUT_OF_RANGE
The offset lies outside the area range. No value could be written.
SREC_DOES_NOT_EXIST
The entry does not exist in the stored tag list.
SREC_NOT_SUPPORTED
Access to entire structures or arrays is not supported.
SREC_TYPE_MISMATCH
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
SREC_NOT_UP_TO_DATE
The stored tag list must be updated.
SREC_WRONG_ARGUMENT
The expected type is UNSPECIFIC.
222
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 206 Write() - .NET (C#)
Syntax Parameters
void Write( string in_Tag SDataValue in_Value
)
· string in_Tag:
The name of the PLC tag that is to be written. · SDataValue in_Value:
Contains the value and the expected type of the PLC tag. The UNSPECIFIC and STRUCT types are not supported.
Return values Exceptions
Structures and fields can be emulated through signal lists and then be written
by using the WriteSignals() function.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be written.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
ERuntimeErrorCode.WrongArgument The expected type is UNSPECIFIC.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
223
User interfaces (API) 7.6 API IInstances
WriteBool()
Writes the value of a PLC tag.
Table 7- 207 WriteBool() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteBool( WCHAR* in_Tag, bool in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · bool in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 208 WriteBool() - .NET (C#)
Syntax Parameters
void WriteBool( string in_Tag bool in_Value
)
· string in_Tag:
The name of the PLC tag that is to be written. · bool in_Value:
Return values
Contains the value of the PLC tag. None
224
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Exceptions
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be written.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 376).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
WriteInt8()
Writes the value of a PLC tag.
Table 7- 209 WriteInt8() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteInt8( WCHAR* in_Tag, INT8 in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · INT8 in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
225
User interfaces (API) 7.6 API IInstances
Table 7- 210 WriteInt8() - .NET (C#)
Syntax Parameters
void WriteInt8( string in_Tag Int8 in_Value
)
· string in_Tag:
The name of the PLC tag that is to be written. · Int8 in_Value:
Return values Exceptions
Contains the value of the PLC tag.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be written.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMissmatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
226
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
WriteInt16()
Writes the value of a PLC tag.
Table 7- 211 WriteInt16() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteInt16( WCHAR* in_Tag, INT16 in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · INT16 in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 212 WriteInt16() - .NET (C#)
Syntax Parameters
void WriteInt16( string in_Tag Int16 in_Value
)
· string in_Tag: The name of the PLC tag that is to be written.
· Int16 in_Value: Contains the value of the PLC tag.
Return values Exceptions
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
227
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.IndexOutOfRange ERuntimeErrorCode.DoesNotExist ERuntimeErrorCode.NotSupported ERuntimeErrorCode.TypeMissmatch
ERuntimeErrorCode.NotUpToData
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
WriteInt32()
Writes the value of a PLC tag.
Table 7- 213 WriteInt32() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteInt32( WCHAR* in_Tag, INT32 in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · INT32 in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
228
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 214 WriteInt32() - .NET (C#)
Syntax Parameters
void WriteInt32( string in_Tag Int32 in_Value
)
· string in_Tag: The name of the PLC tag that is to be written.
· Int32 in_Value: Contains the value of the PLC tag.
Return values Exceptions
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be written.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMissmatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
229
User interfaces (API) 7.6 API IInstances
WriteInt64()
Writes the value of a PLC tag.
Table 7- 215 WriteInt64() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteInt64( WCHAR* in_Tag, INT64 in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · INT64 in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 216 WriteInt64() - .NET (C#)
Syntax Parameters
void WriteInt64( string in_Tag Int64 in_Value
)
· string in_Tag: The name of the PLC tag that is to be written.
· Int64 in_Value: Contains the value of the PLC tag.
Return values Exceptions
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
230
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
WriteInt8()
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.IndexOutOfRange ERuntimeErrorCode.DoesNotExist ERuntimeErrorCode.NotSupported ERuntimeErrorCode.TypeMissmatch
ERuntimeErrorCode.NotUpToData
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Writes the value of a PLC tag.
Table 7- 217 WriteUInt8() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteUInt8( WCHAR* in_Tag, UINT8 in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · UINT8 in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
231
User interfaces (API) 7.6 API IInstances
Table 7- 218 WriteUInt8() - .NET (C#)
Syntax Parameters
void WriteUInt8( string in_Tag UInt8 in_Value
)
· string in_Tag: The name of the PLC tag that is to be written.
· UInt8 in_Value: Contains the value of the PLC tag.
Return values Exceptions
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be written.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMissmatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
232
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
WriteUInt16()
Reads the value of a PLC tag.
Table 7- 219 WriteUInt16() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteUInt16( WCHAR* in_Tag, UINT16 in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · UINT16 in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 220 WriteUInt16() - .NET (C#)
Syntax Parameters
void WriteUInt16( string in_Tag UInt16 in_Value
)
· string in_Tag: The name of the PLC tag that is to be written.
· UInt16 in_Value: Contains the value of the PLC tag.
Return values Exceptions
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
233
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.IndexOutOfRange ERuntimeErrorCode.DoesNotExist ERuntimeErrorCode.NotSupported ERuntimeErrorCode.TypeMissmatch
ERuntimeErrorCode.NotUpToData
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
WriteUInt32()
Writes the value of a PLC tag.
Table 7- 221 WriteUInt32() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteUInt32( WCHAR* in_Tag, UINT32 in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · UINT32 in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
234
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 222 WriteUInt32() - .NET (C#)
Syntax Parameters
void WriteUInt32( string in_Tag UInt32 in_Value
)
· string in_Tag:
The name of the PLC tag that is to be written. · UInt32 in_Value:
Return values Exceptions
Contains the value of the PLC tag.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be written.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMissmatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
235
User interfaces (API) 7.6 API IInstances
WriteUInt64()
Writes the value of a PLC tag.
Table 7- 223 WriteUInt64() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteUInt64( WCHAR* in_Tag, UINT64 in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · UINT64 in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 224 WriteUInt64() - .NET (C#)
Syntax Parameters
void WriteUInt64( string in_Tag UInt64 in_Value
)
· string in_Tag:
The name of the PLC tag that is to be written. · UInt64 in_Value:
Return values Exceptions
Contains the value of the PLC tag.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
236
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.IndexOutOfRange ERuntimeErrorCode.DoesNotExist ERuntimeErrorCode.NotSupported ERuntimeErrorCode.TypeMissmatch
ERuntimeErrorCode.NotUpToData
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
WriteFloat()
Writes the value of a PLC tag.
Table 7- 225 WriteFloat() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteFloat( WCHAR* in_Tag, float in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · float in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
237
User interfaces (API) 7.6 API IInstances
Table 7- 226 WriteFloat() - .NET (C#)
Syntax Parameters
void WriteFloat( string in_Tag float in_Value
)
· string in_Tag:
The name of the PLC tag that is to be written. · float in_Value:
Return values Exceptions
Contains the value of the PLC tag.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be written.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMissmatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
238
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
WriteDouble()
Writes the value of a PLC tag.
Table 7- 227 WriteDouble() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteDouble( WCHAR* in_Tag, double in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · double in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 228 WriteDouble() - .NET (C#)
Syntax Parameters
void WriteDouble( string in_Tag double in_Value
)
· string in_Tag:
The name of the PLC tag that is to be written. · double in_Value:
Return values Exceptions
Contains the value of the PLC tag.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
239
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.InstanceNotRunning ERuntimeErrorCode.IndexOutOfRange ERuntimeErrorCode.DoesNotExist ERuntimeErrorCode.NotSupported ERuntimeErrorCode.TypeMissmatch
ERuntimeErrorCode.NotUpToData
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
WriteChar()
Writes the value of a PLC tag.
Table 7- 229 WriteChar() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteChar( WCHAR* in_Tag, char in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · char in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
240
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 230 WriteChar() - .NET (C#)
Syntax Parameters
void WriteChar( string in_Tag sbyte in_Value
)
· string in_Tag:
The name of the PLC tag that is to be written. · sbyte in_Value:
Return values Exceptions
Contains the value of the PLC tag.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.IndexOutOfRange
The offset lies outside the area range. No value could be written.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMissmatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
241
User interfaces (API) 7.6 API IInstances
WriteWChar()
Writes the value of a PLC tag.
Table 7- 231 WriteWChar() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteWChar( WCHAR* in_Tag, WCHAR in_Value
);
· WCHAR* in_Tag:
The name of the PLC tag that is to be written. · WCHAR in_Value:
Return values
Contains the value of the PLC tag. Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
SREC_INDEX_OUT_OF_RANGE
SREC_DOES_NOT_EXIST
SREC_NOT_SUPPORTED
SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
The offset lies outside the area range. No value could be written.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
Table 7- 232 WriteWChar() - .NET (C#)
Syntax Parameters
void WriteWChar( string in_Tag char in_Value
)
· string in_Tag:
The name of the PLC tag that is to be written. · char in_Value:
Return values
Contains the value of the PLC tag. None
242
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Exceptions
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
SREC_INDEX_OUT_OF_RANGE
The offset lies outside the area range. No value could be written.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMissmatch
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
WriteSignals()
Writes multiple signals within an API call. When the function is called for the first time, it stores internal information in the structures SDataValueByName* to improve the performance of the subsequent calls.
Note
To simulate a regular exchange of signals, create a signal list for each set of signals. Use this signal list for all further accesses. Create a new list as soon as the set of signals changes.
Table 7- 233 WriteSignals() - Native C++
Syntax Parameters
ERuntimeErrorCode WriteSignals( SDataValueByName* inout_Signals, UINT32 in_SignalCount
);
· SDataValueByName* inout_Signals:
Contains the name, the value and the expected type of the PLC tag. The UNSPECIFIC and STRUCT types are not supported.
· UINT32 in_SignalCount:
Signal error Return values
Number of signals. Error code SREC_INDEX_OUT_OF_RANGE
Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_TIMEOUT
Condition Offset or bits are invalid. Condition The function is successful. The instance is not registered in Runtime Manager. The function does not return on time.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
243
User interfaces (API) 7.6 API IInstances
SREC_INSTANCE_NOT_RUNNING SREC_DOES_NOT_EXIST SREC_NOT_SUPPORTED SREC_TYPE_MISMATCH
SREC_NOT_UP_TO_DATE SREC_WRONG_ARGUMENT
The process of the virtual controller is not running.
The entry does not exist in the stored tag list.
Access to entire structures or arrays is not supported.
The expected type does not match the stored type. See Compatible primitive data types (Page 375).
The stored tag list must be updated.
The expected type is UNSPECIFIC.
Table 7- 234 WriteSignals() - .NET (C#)
Syntax Parameters
void WriteSignals( SDataValueByName[] in_Signals
)
· SDataValueByName:
Return values Signal error
Exceptions
Contains the name, the value and the expected type of the PLC tag. The UNSPECIFIC and STRUCT types are not supported.
None
Error code
Condition
ERuntimeErrorCode.IndexOutOfRange
Offset or bits are invalid.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.DoesNotExist
The entry does not exist in the stored tag list.
ERuntimeErrorCode.NotSupported
Access to entire structures or arrays is not supported.
ERuntimeErrorCode.TypeMismatch
The expected type does not match the stored type. See Compatible primitive data types (Page 376).
ERuntimeErrorCode.NotUpToData
The stored tag list must be updated.
ERuntimeErrorCode.WrongArgument The expected type is UNSPECIFIC.
244
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
7.6.6
Settings for the virtual time
GetSystemTime()
Returns the virtual system time of the virtual controller. Returns an empty structure when the function fails.
Table 7- 235 GetSystemTime() - Native C++
Syntax Parameters Return values
SYSTEMTIME GetSystemTime();
None SYSTEMTIME: System time of the virtual controller.
SetSystemTime()
Sets the virtual system time of the virtual controller. A system time between "Jan 1 1970 00:00:00:000" and "Dec 31 2200 23:59:59:999" is valid.
Table 7- 236 SetSystemTime() - Native C++
Syntax Parameters
ERuntimeErrorCode SetSystemTime( SYSTEMTIME in_SystemTime
); · SYSTEMTIME in_SystemTime:
Return values
System time that is to be set for the virtual controller.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_WRONG_ARGUMENT
The value is outside the limits.
SystemTime { get; set; }
Sets or returns the virtual system time of the virtual controller. A system time between "Jan 1 1970 00:00:00:000" and "Dec 31 2200 23:59:59:999" is valid.
Table 7- 237 SystemTime { get; set; } - .NET (C#)
Syntax Parameters Return values
DateTime SystemTime { get; set; }
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument The value is outside the limits.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
245
User interfaces (API) 7.6 API IInstances
GetScaleFactor()
Returns the scaling factor with which the virtual time advances.
Table 7- 238 GetScaleFactor() - Native C++
Syntax Parameters Return values
double GetScaleFactor();
None double: Scaling factor of the virtual time.
SetScaleFactor()
Sets the scaling factor with which the virtual time advances.
Start with a small scaling factor and incrementally approach a scaling factor at which the virtual controller remains in RUN.
A value between 0.01 and 100 is valid. The default setting is 1.
If the value is less than 1, the virtual time of the virtual controller runs X-times slower than the real time.
If the value is greater than 1, the virtual time of the virtual controller runs X-times faster than the real time.
A change in the value during runtime only takes effect at the cycle control point.
Table 7- 239 SetScaleFactor() - Native C++
Syntax Parameters
ERuntimeErrorCode SetScaleFactor ( double in_Value
); · double in_Value:
Return values
Scaling factor of the virtual time. Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_WRONG_ARGUMENT
Condition The function is successful. The instance is not registered in Runtime Manager. The function does not return on time. The value is outside the limits.
246
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
ScaleFactor { get; set; }
Sets or returns the scaling factor with which the virtual time advances.
Start with a small scaling factor and incrementally approach a scaling factor at which the virtual controller remains in RUN.
A value between 0.01 and 100 is valid. The default setting is 1.
If the value is less than 1, the virtual time of the virtual controller runs X-times slower than the real time.
If the value is greater than 1, the virtual time of the virtual controller runs X-times faster than the real time.
A change in the value during runtime only takes effect at the cycle control point.
Table 7- 240 ScaleFactor { get; set; } - .NET (C#)
Syntax Parameters Return values Exceptions
double ScaleFactor { get; set; }
None
double: Scaling factor of the virtual time.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument The value is outside the limits.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
247
User interfaces (API) 7.6 API IInstances
7.6.7
Cycle control
GetOperatingMode()
Returns the operating mode (Page 370) of the virtual controller.
Table 7- 241 GetOperatingMode() - Native C++
Syntax Parameters Return values
EOperatingMode GetOperatingMode();
None EOperatingMode: Operating mode of the virtual controller
SetOperatingMode()
Sets the operating mode of the virtual controller. A change in the value during runtime only takes effect at the synchronization point.
Table 7- 242 SetOperatingMode() - Native C++
Syntax Parameters
void SetOperatingMode( EOperatingMode in_OperatingMode
); · EOperatingMode in_OperatingMode:
Return values
Operating mode of the virtual controller
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
OperatingMode { get; set; }
Returns or sets the operating mode of the virtual controller. A change in the value during runtime only takes effect at the synchronization point.
Table 7- 243 OperatingMode { get; set; } - .NET (C#)
Syntax Parameters Return values Exceptions
EOperatingMode OperatingMode { get; set; }
None
EOperatingMode: Operating mode of the virtual controller
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
248
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
SetSendSyncEventInDefaultModeEnabled()
Sets the SendSyncEventInDefault mode. In this mode the OnSyncPointReached event is triggered after each cycle end in the Default operating mode. See OnSyncPointReached (Page 284).
Table 7- 244 SetSendSyncEventInDefaultModeEnabled() - Native C++
Syntax Parameters
ERuntimeErrorCode SetSendSyncEventInDefaultModeEnabled( bool in_Enable
); · bool in_Enable:
Return values
If true, the OnSyncPointReached event is triggered after each cycle in the Default operating mode.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
IsSendSyncEventInDefaultModeEnabled()
Returns the SendSyncEventInDefaultMode mode. When the function fails, the return value is false.
Table 7- 245 IsSendSyncEventInDefaultModeEnabled() - Native C++
Syntax Parameters Return values
bool IsSendSyncEventInDefaultModeEnabled();
None · false: The event is not triggered (unless the Sync-Freeze mode is active). · true: The event is triggered after every cycle.
IsSendSyncEventInDefaultModeEnabled { get; set; }
Returns or sets the SendSyncEventInDefaultMode mode. In this mode the OnSyncPointReached event is triggered after each cycle end for every operating mode. If the event is also to be received in the Default operating mode, set the return value to true. See OnSyncPointReached (Page 284).
Table 7- 246 IsSendSyncEventInDefaultModeEnabled { get; set; } - .NET (C#)
Syntax Parameters Return values
Exceptions
bool IsSendSyncEventInDefaultModeEnabled { get; set;}
None
· false: The event is not triggered (unless the Sync-Freeze mode is active).
· true: The event is triggered after every cycle.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
249
User interfaces (API) 7.6 API IInstances
GetOverwrittenMinimalCycleTime_ns()
Returns the overwritten minimum cycle time (in nanoseconds) that is used in the SingleStep_CT and SingleStep_CPT operating modes.
Table 7- 247 GetOverwrittenMinimalCycleTime_ns() - Native C++
Syntax Parameters Return values
INT64 GetOverwrittenMinimalCycleTime_ns();
None INT64: The overwritten minimum cycle time in nanoseconds.
SetOverwrittenMinimalCycleTime_ns()
Sets the overwritten minimum cycle time (in nanoseconds) that is used in the SingleStep_CT and SingleStep_CPT operating modes.
A value between 0 and 6000000000 is valid. The default setting is 100 ms.
A change in the value during runtime only takes effect at the cycle control point.
Table 7- 248 SetOverwrittenMinimalCycleTime_ns() - Native C++
Syntax Parameters
ERuntimeErrorCode SetOverwrittenMinimalCycleTime_ns( INT64 in_CycleTime_ns
); · INT64 in_CycleTime_ns:
Return values
The overwritten minimum cycle time in nanoseconds.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_WRONG_ARGUMENT
The value is outside the limits.
250
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
OverwrittenMinimalCycleTime_ns { get; set; }
Returns or sets the overwritten minimum cycle time in nanoseconds that is used in the SingleStep_CT and SingleStep_CPT operating modes.
A value between 0 and 6000000000 is valid. The default setting is 100 ms.
A change in the value during runtime only takes effect at the cycle control point.
Table 7- 249 OverwrittenMinimalCycleTime_ns { get; set; } - .NET (C#)
Syntax Parameters Return values Exceptions
Int64 OverwrittenMinimalCycleTime_ns { get; set; }
None
Int64: The overwritten minimum cycle time in nanoseconds.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument The value is outside the limits.
RunToNextSyncPoint()
If the virtual controller is running in a SingleStep operating mode, it is stopped at the synchronization point (Freeze state). The RunToNextSyncPoint() function cancels the freeze state. The virtual controller continues to run until the next synchronization point.
Table 7- 250 RunToNextSyncPoint() - Native C++
Syntax Parameters Return values
ERuntimeErrorCode RunToNextSyncPoint();
None Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT SREC_INSTANCE_NOT_RUNNING
Condition
The function is successful.
The instance is not registered in Runtime Manager.
The function does not return on time.
The process of the virtual controller is not running.
Table 7- 251 RunToNextSyncPoint() - .NET (C#)
Syntax Parameters Return values Exceptions
void RunToNextSyncPoint();
None
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
251
User interfaces (API) 7.6 API IInstances
StartProcessing()
If the virtual controller is running in a TimespanSynchronized operating mode, it is stopped at the synchronization point (Freeze state). The StartProcessing() function cancels the freeze state. The virtual controller will now run for at least the requested time before it changes to Freeze state at the next synchronization point.
Table 7- 252 StartProcessing() - Native C++
Syntax Parameters
ERuntimeErrorCode StartProcessing( INT64 in_MinimalTimeToRun_ns
); · INT64 in_MinimalTimeToRun_ns:
Return values
The minimum virtual time (in nanoseconds) that the virtual controller runs be-
fore it changes to Freeze state.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INSTANCE_NOT_RUNNING
The process of the virtual controller is not running.
SREC_WRONG_ARGUMENT
The value is less than 0.
Table 7- 253 StartProcessing() - .NET (C#)
Syntax Parameters
void StartProcessing( Int64 in_MinimalTimeToRun_ns
); · Int64 in_MinimalTimeToRun_ns:
Return values Exceptions
The minimum virtual time (in nanoseconds) that the virtual controller runs be-
fore it changes to Freeze state.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.InstanceNotRunning
The process of the virtual controller is not running.
ERuntimeErrorCode.WrongArgument The value is less than 0.
Additional information
For further information, see sections Virtual time response (Page 87), Stop simulation (Page 90).
252
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
SetCycleTimeMonitoringMode()
With this function the source of the timer for the maximum cycle time monitoring can be changed.
Table 7- 254 SetCycleTimeMonitoringMode() - Native C++
Syntax Parameter
ERuntimeErrorCode SetCycleTimeMonitoringMode( ECycleTimeMonitoringMode in_CycleTimeMonitoringMode
) ERuntimeErrorCode SetCycleTimeMonitoringMode(
ECycleTimeMonitoringMode in_CycleTimeMonitoringMode, INT64 in_MaxCycleTime_ns )
· ECycleTimeMonitoringMode in_CycleTimeMonitoringMode:
Select one of the following options for the maximum cycle time monitoring: SRCTMM_DOWNLOADED:
The maximum cycle time from the project that was downloaded from STEP 7 is used as maximum cycle time monitoring.
SRCTMM_IGNORED (default):
A timer value of one minute is used as maximum cycle time monitoring to prevent a potential error in case of an overflow of cyclic events. See Monitoring overflow (Page 398).
SRCTMM_SPECIFIED:
A value that is specified with the in_MaxCycleTime_ns parameter is used as maximum cycle time monitoring.
Default: 150 ms. · INT64 in_MaxCycleTime_ns:
The user-specific value for the maximum cycle time monitoring.
Return values
A value between 1000000 and 60000000000 ns (1 millisecond to 1 minute) is valid. If no value is specified in the API, the default value of 150 ms applies.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_WRONG_ARGUMENT
The cycle time monitoring mode is invalid.
SREC_INDEX_OUT_OF_RANGE
The user-specific value for the maximum cycle time monitoring is outside the limits.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
253
User interfaces (API) 7.6 API IInstances
Table 7- 255 SetCycleTimeMonitoringMode() - .NET (C#)
Syntax
void SetCycleTimeMonitoringMode( ECycleTimeMonitoringMode in_CycleTimeMonitoringMode
)
Parameter
Return values Exceptions
void SetCycleTimeMonitoringMode( ECycleTimeMonitoringMode in_CycleTimeMonitoringMode, Int64 in_MaxCycleTime_ns
) · ECycleTimeMonitoringMode in_CycleTimeMonitoringMode:
Select one of the following options for the maximum cycle time monitoring: ECycleTimeMonitoringMode.Downloaded:
The maximum cycle time from the project that was downloaded from STEP 7 is used as maximum cycle time monitoring.
ECycleTimeMonitoringMode.Ignored (default):
A timer value of one minute is used as maximum cycle time monitoring to prevent a potential error in case of an overflow of cyclic events. See Monitoring overflow (Page 398).
ECycleTimeMonitoringMode.Specified:
A value that is specified with the in_MaxCycleTime_ns parameter is used as maximum cycle time monitoring.
Default: 150 ms. · Int64 in_MaxCycleTime_ns:
The user-specific value for the maximum cycle time monitoring.
A value between 1000000 and 60000000000 ns (1 millisecond to 1 minute) is
valid. If no value is specified in the API, the default value of 150 ms applies.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument
The cycle time monitoring mode is invalid.
ERuntimeErrorCode.IndexOutOfRange
The user-specific value for the maximum cycle time monitoring is outside the limits.
254
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
GetCycleTimeMonitoringMode()
This function returns information on the source of the timer for the maximum cycle time monitoring.
Table 7- 256 GetCycleTimeMonitoringMode() - Native C++
Syntax Parameter
ERuntimeErrorCode GetCycleTimeMonitoringMode( ECycleTimeMonitoringMode* out_CycleTimeMonitoringMode, INT64* out_MaxCycleTime_ns
) · ECycleTimeMonitoringMode* out_CycleTimeMonitoringMode:
The configured mode for cycle time monitoring. The default setting is SRCTM_IGNORED.
· INT64 in_MaxCycleTime_ns:
Return values
The user-specific value for the maximum cycle time monitoring. If no value is
specified in the API, the default value of 150 ms is returned.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
Table 7- 257 GetCycleTimeMonitoringMode() - .NET (C#)
Syntax Parameter
void GetCycleTimeMonitoringMode( out ECycleTimeMonitoringMode out_CycleTimeMonitoringMode, out Int64 out_MaxCycleTime_ns
) · ECycleTimeMonitoringMode out_CycleTimeMonitoringMode:
The configured mode for cycle time monitoring. The default setting is ECycleTimeMonitoringMode.Ignored.
· Int64 in_MaxCycleTime_ns:
Return values Exceptions
The user-specific value for the maximum cycle time monitoring. If no value is
specified in the API, the default value of 150 ms is returned.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
255
User interfaces (API) 7.6 API IInstances
7.6.8
Acyclic services
7.6.8.1
Overview
The acyclic services of PLCSIM Advanced include:
Read and write processes of parameter and status data from the user program of the PLC to the I/O modules
Interrupt and event information which the I/O modules send to the CPU.
Read and write operations
Events triggered by the user program (TIA Portal), which have logged on for the notification:
Table 7- 258 Events: Read and write operations
SFB Name
52
RDREC
53
WRREC
API method (alarm) ReadRecordDone (Page 258) WriteRecordDone (Page 258)
API event for triggering the SFB OnDataRecordRead (Page 287) OnDataRecordWrite (Page 287)
Flowchart
Figure 7-4 Read and write operations flowchart 256
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
API methods and associated events
Events which are triggered by the I/O modules and associated API methods:
Table 7- 259 API methods and associated events
OB Name
API methods for triggering the OB (query)
82 Diagnostic error Inter- AlarmNotification (Page 260) rupt
4x Hardware Interrupt
ProcessEvent (Page 263)
83 Pull or Plug of module PullOrPlugEvent (Page 265)
55 Status
StatusEvent (Page 267)
57 Profile
ProfileEvent (Page 268)
56 Update
UpdateEvent (Page 269)
86 Rack or station failure RackOrStationFaultEvent (Page 272)
API event after OB execution (alarm)
OnAlarmNotificationDone (Page 289)
OnProcessEventDone (Page 290)
OnPullOrPlugEventDone (Page 291)
OnStatusEventDone (Page 292)
OnProfileEventDone (Page 293)
OnUpdateEventDone (Page 294)
OnRackOrStationFaultEventDone (Page 295)
Flowchart
Flowchart for the simulation of events which are triggered by the I/O modules.
Figure 7-5 Flowchart for the simulation of events
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
257
User interfaces (API) 7.6 API IInstances
7.6.8.2
ReadRecordDone / WriteRecordDone
ReadRecordDone()
With this API method, the simulation of an I/O module signals to the CPU that the asynchronous reading of a data record has been completed. The simulation hereby makes the read information available.
Table 7- 260 ReadRecordDone() - Native C++
Syntax Parameters
ERuntimeErrorCode ReadRecordDone( SDataRecordInfo in_RecordInfo, BYTE* in_Data, UINT32 in_Status
);
· SDataRecordInfo in_RecordInfo:
Structure which contains the data record information. See SDataRecordInfo (Page 357).
· BYTE* in_Data:
Byte array of the read data record with the length defined by DataSize in the structure SDataRecordInfo.
· UINT32 in_Status:
Return values
Status of the job execution Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_DOES_NOT_EXIST SREC_INDEX_OUT_OF_RANGE
SREC_TIMEOUT
Condition
The function is successful.
The instance is not registered in Runtime Manager.
No hardware identifier of the module.
The byte array of the read data record exceeds the length DDATARECORD_MAX_SIZE = 64000.
The function does not return on time.
Table 7- 261 ReadRecordDone() - .NET (C#)
Syntax Parameters
void ReadRecordDone( SDataRecordInfo in_RecordInfo, BYTE[] in_Data, UInt32 in_Status
);
· SDataRecordInfo in_RecordInfo:
Structure which contains the data record information. See SDataRecordInfo (Page 357).
· BYTE[] in_Data:
Byte array of the read data record with the length defined by DataSize in the structure SDataRecordInfo.
· UInt32 in_Status:
Status of the job execution
258
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Return values Exceptions
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.DoesNotExist No hardware identifier of the module.
ERuntimeErrorCode.IndexOutOfRange
The byte array of the read data record exceeds the length DataRecordMaxSize = 64000.
ERuntimeErrorCode.Timeout
The function does not return on time.
WriteRecordDone()
With this API method, the simulation of an I/O module signals to the CPU that the asynchronous writing of a data record has been completed.
Table 7- 262 WriteRecordDone() - Native C++
Syntax Parameters
Return values
ERuntimeErrorCode WriteRecordDone( SDataRecordInfo in_RecordInfo, UINT32 in_Status
);
· SDataRecordInfo in_RecordInfo:
Structure which contains the data record information. See SDataRecordInfo (Page 357).
· UINT32 in_Status:
Status of the job execution Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_DOES_NOT_EXIST SREC_TIMEOUT
Condition The function is successful. The instance is not registered in Runtime Manager. No hardware identifier of the module. The function does not return on time.
Table 7- 263 WriteRecordDone() - .NET (C#)
Syntax Parameters
void WriteRecordDone( SDataRecordInfo in_RecordInfo, UInt32 in_Status
); · SDataRecordInfo in_RecordInfo:
Structure which contains the data record information. See SDataRecordInfo (Page 357).
· UInt32 in_Status:
Return values Exceptions
Status of the job execution
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.DoesNotExist No hardware identifier of the module.
ERuntimeErrorCode.Timeout
The function does not return on time.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
259
User interfaces (API) 7.6 API IInstances
7.6.8.3
AlarmNotification
AlarmNotification()
This function triggers diagnostic alarms according to the PROFINET standard.
Each call of this function calls the OB 82 once, regardless of the number and the severity level of the transferred diagnostic entries.
Table 7- 264 AlarmNotification() - Native C++
Syntax Parameters
ERuntimeErrorCode AlarmNotification( UINT16 in_HardwareIdentifier, UINT16 in_ModuleState, UINT16 in_NumberOfDiagnosisEvents,
SDiagExtChannelDescription* in_ArrayOfDiagnosisEvents, UINT16* out_SequenceNumber );
· UINT16 in_HardwareIdentifier:
The hardware identifier of the module or submodule which sends the diagnostics entry. The identifier must belong to a hardware component in the currently loaded project.
· UINT16 in_ModuleState:
Module status. The following statuses are valid: DMODULE_STATE_OK = 0, DMODULE_STATE_ERROR = 1, DMODULE_STATE_MAINT_DEMANDED = 2, DMODULE_STATE_MAINT_REQUIRED = 4 The in_ModuleState parameter is derived from the sum (ORed) of the severity level in the SDiagExtChannelDescription field. If a diagnostic interrupt should be generated for both "Maintenance demanded" as well as "Maintenance required", select "6" as the module status.
· UINT16 in_NumberOfDiagnosisEvents:
Multiple diagnostic entries can be sent to the CPU with a single API call. Valid range: 0 to 16. 0 means that no diagnostics entry should appear for the submodule or the channel.
· SDiagExtChannelDescription* in_ArrayOfDiagnosisEvents:
Pointer to a field with diagnostic entries. The field must match the number of diagnostic entries. It can also be a zero pointer. For definitions, see SDiagExtChannelDescription (Page 360).
· UINT16* out_SequenceNumber:
PLCSIM Advanced assigns a unique consecutive number to each interrupt event. According to PROFINET standard the sequence number is 10 bits wide (1 to 7FFH). When the highest number is reached the numbering starts again at 1.
260
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Return values
Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_WRONG_MODULE_STATE SREC_DOES_NOT_EXIST SREC_WRONG_MODULE_TYPE
SREC_WRONG_ARGUMENT SREC_TIMEOUT
User interfaces (API) 7.6 API IInstances
Condition The function is successful. The instance is not registered in Runtime Manager. The module is currently unplugged. No hardware identifier of the module. The channel number does not exist for the module. The value for the module status is invalid. The function does not return on time.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
261
User interfaces (API) 7.6 API IInstances
Table 7- 265 AlarmNotification() - .NET (C#)
Syntax Parameters
void AlarmNotification( ushort in_HardwareIdentifier, ushort in_ModuleState, ushort in_NumberOfDiagnosisEvents,
SDiagExtChannelDescription [] in_ArrayOfDiagnosisEvents, Out ushort out_SequenceNumber );
· ushort in_HardwareIdentifier:
The hardware identifier of the module or submodule which sends the diagnostics entry.
The identifier must belong to a hardware component in the currently loaded project.
· ushort in_ModuleState:
Module status. The following statuses are valid:
ModuleState.Ok = 0, ModuleState.Error = 1, ModuleState.MaintenanceDemanded = 2, ModuleState.MaintenanceRequired = 4
The in_ModuleState parameter is derived from the sum (ORed) of the severity level in the SDiagExtChannelDescription field.
If a diagnostic interrupt should be generated for both "Maintenance demanded" as well as "Maintenance required", select "6" as the module status.
· ushort in_NumberOfDiagnosisEvents
Multiple diagnostic entries can be sent to the CPU with a single API call.
Valid range: 0 to 16. 0 means that no diagnostics entry should appear for the submodule or the channel.
· SDiagExtChannelDescription [] in_ArrayOfDiagnosisEvents:
Pointer to a field with diagnostic entries. The field must match the number of diagnostic entries. It can also be a zero pointer. For definitions, see SDiagExtChannelDescription (Page 360).
· Out ushort out_SequenceNumber:
PLCSIM Advanced assigns a unique consecutive number to each alarm event.
Exceptions
According to PROFINET standard the sequence number is 10 bits wide (1 to
7FFH). When the highest number is reached the numbering starts again at 1.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.WrongModuleState
The module is currently unplugged.
ERuntimeErrorCode.DoesNotExist No hardware identifier of the module.
ERuntimeErrorCode.WrongArgument The value for the module status is invalid.
ERuntimeErrorCode.WrongModuleType
The channel number does not exist for the module.
ERuntimeErrorCode.Timeout
The function does not return on time.
262
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Example
ushort seqNumber; var In_ArrayOfDiagnosisEvent = new SDiagExtChannelDescription[] { new SDiagExtChannelDescription() {ChannelNumber = 0x8000, Error-
Type = 0x0001, ExtErrorType = 0, Direction = EDiagProperty.Appear,Severity =EDiagSeverity.MaintDemanded},
new SDiagExtChannelDescription() {ChannelNumber = 0x8000, ErrorType = 0x0002, ExtErrorType = 0, Direction = EDiagProperty.Appear,Severity =EDiagSeverity.Failure},
new SDiagExtChannelDescription() {ChannelNumber = 0x8000, ErrorType = 0x0003, ExtErrorType = 0, Direction = EDiagProperty.Appear,Severity =EDiagSeverity.MaintRequired},
Instance.AlarmNotification(269, 7, 3, In_ArrayOfDiagnosisEvent, out seqNumber); //ModuleState parameter is sum of the severities in the SDiagExtChannelDescription array above: 4+2+1
7.6.8.4
ProcessEvent
ProcessEvent()
Process events from central and distributed input modules can be simulated with this function.
Table 7- 266 ProcessEvent() - Native C++
Syntax Parameters
ERuntimeErrorCode ProcessEvent( UINT16 in_HardwareIdentifier, UINT16 in_Channel,
EProcessEventType in_ProcessEventType, UINT16* out SequenceNumber);
· UINT16 in_HardwareIdentifier:
The hardware identifier of the module or submodule which sends the process event.
The identifier must belong to a hardware component in the currently loaded project.
· UINT16 in_Channel:
The channel of the IO module which sends the process event. · EProcessEventType in_ProcessEventType:
A value from the list of predefined types of events for S7 modules, see EProcessEventType (Page 384).
· UINT16* out_SequenceNumber:
PLCSIM Advanced assigns a unique consecutive number to each interrupt event.
According to PROFINET standard the sequence number is 10 bits wide (1 to 7FFH). When the highest number is reached the numbering starts again at 1.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
263
User interfaces (API) 7.6 API IInstances
Return values
Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_WRONG_MODULE_STATE SREC_DOES_NOT_EXIST SREC_NOT_SUPPORTED_BY_MODULE
SREC_TIMEOUT
Condition The function is successful. The instance is not registered in Runtime Manager. The module is currently unplugged. No hardware identifier of the module. The module is not supported by this user action. The function does not return on time.
Table 7- 267 ProcessEvent() - .NET (C#)
Syntax Parameters
void ProcessEvent( ushort in_HardwareIdentifier, ushort in_Channel, EProcessEventType in_ProcessEventType, Out ushort out_SequenceNumber );
· ushort in_HardwareIdentifier:
The hardware identifier of the module or submodule which generates the process event.
The identifier must belong to a hardware component in the currently loaded project.
· ushort in_Channel:
The channel of the IO module which generates the process event. · EProcessEventType in_ProcessEventType:
A value from the list of predefined types of events for S7 modules, see EProcessEventType (Page 384).
· Out ushort out_SequenceNumber:
PLCSIM Advanced assigns a unique consecutive number to each interrupt event.
Return values Exceptions
According to PROFINET standard the sequence number is 10 bits wide (1 to
7FFH). When the highest number is reached the numbering starts again at 1.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.WrongModuleState ERuntimeErrorCode.DoesNotExist
The module is currently unplugged. No hardware identifier of the module.
ERuntimeErrorCode.NotSupportedByModule
The module is not supported by this user action.
ERuntimeErrorCode.Timeout
The function does not return on time.
264
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
7.6.8.5
PullOrPlugEvent
PullOrPlugEvent()
This function triggers pull/plug events. The interrupt OB (OB 83) "Pull or plug of modules" is executed for these events.
Table 7- 268 PullOrPlugEvent() - Native C++
Syntax Parameters
ERuntimeErrorCode PullOrPlugEvent( UINT16 in_HardwareIdentifier, EPullOrPlugEventType in_PullOrPlugEventType, UINT16* out_SequenceNumber );
· UINT16 in_HardwareIdentifier:
The hardware identifier of the module or submodule which generates the pull/plug event.
The identifier must belong to a hardware component in the currently loaded project.
· EPullOrPlugEventType in_PullOrPlugEventType:
A value from the list of predefined types of pull/plug events, see EPullOrPlugEventType (Page 384).
· UINT16* out_SequenceNumber:
PLCSIM Advanced assigns a unique consecutive number to each interrupt event.
Return values
According to PROFINET standard the sequence number is 10 bits wide (1 to 7FFH). When the highest number is reached the numbering starts again at 1.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_WRONG_MODULE_STATE
The module is currently unplugged.
SREC_WRONG_MODULE_TYPE
The wrong module type was selected.
For example, if an onboard IO of a compact CPU is to be pulled.
SREC_NOT_SUPPORTED_BY_MODULE
The module is not supported by this user action.
SREC_DOES_NOT_EXIST
No hardware identifier of the module.
SREC_TIMEOUT
The function does not return on time.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
265
User interfaces (API) 7.6 API IInstances
Table 7- 269 PullOrPlugEvent() - .NET (C#)
Syntax Parameters
void PullOrPlugEvent( ushort in_HardwareIdentifier, EPullOrPlugEventType in_PullOrPlugEventType, Out ushort out_SequenceNumber );
· ushort in_HardwareIdentifier:
The hardware identifier of the module or submodule which generates the pull/plug event.
The identifier must belong to a hardware component in the currently loaded project.
· EPullOrPlugEventType in_PullOrPlugEventType:
A value from the list of predefined types of pull/plug events, see EPullOrPlugEventType (Page 384).
· Out ushort out_SequenceNumber
PLCSIM Advanced assigns a unique consecutive number to each interrupt event.
Return values Exceptions
According to PROFINET standard the sequence number is 10 bits wide (1 to
7FFH). When the highest number is reached the numbering starts again at 1.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.WrongModuleState ERuntimeErrorCode.WrongModuleType
The module is currently unplugged.
The wrong module type was selected. For example, if an onboard IO of a compact CPU is to be pulled.
ERuntimeErrorCode.DoesNotExist No hardware identifier of the module.
ERuntimeErrorCode.NotSupportedByModule
The module is not supported by this user action.
ERuntimeErrorCode.Timeout
The function does not return on time.
266
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
7.6.8.6
StatusEvent
StatusEvent()
This function is used to trigger the status event OB (OB 55). Status events are only supported for modules in a distributed IO system.
Table 7- 270 StatusEvent() - Native C++
Syntax Parameters
ERuntimeErrorCode StatusEvent( UINT16 in_HardwareIdentifier, UINT16 in_Specifier );
· UINT16 in_HardwareIdentifier:
The hardware identifier of the module that generates the status event.
The identifier must belong to a hardware component in the currently loaded project.
· UINT16 in_Specifier:
Return values
The parameter is transferred to the interrupt frame as interrupt specifier. It is
available as input parameter of the OB 55 call.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_WRONG_MODULE_STATE
The module is currently unplugged.
SREC_NOT_SUPPORTED_BY_MODULE
The module is not supported by this user action.
SREC_DOES_NOT_EXIST
No hardware identifier of the module.
SREC_TIMEOUT
The function does not return on time.
Table 7- 271 StatusEvent() - .NET (C#)
Syntax Parameters
void StatusEvent( ushort in_HardwareIdentifier,
ushort in_Specifier );
· ushort in_HardwareIdentifier:
The hardware identifier of the module that generates the status event.
The identifier must belong to a hardware component in the currently loaded project.
· ushort in_Specifier:
Return values
The parameter is transferred to the interrupt frame as interrupt specifier. It is available as input parameter of the OB 55 call.
None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
267
User interfaces (API) 7.6 API IInstances
Exceptions
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.WrongModuleState
The module is currently unplugged.
ERuntimeErrorCode.DoesNotExist No hardware identifier of the module.
ERuntimeErrorCode.NotSupportedByModule
The module is not supported by this user action.
ERuntimeErrorCode.Timeout
The function does not return on time.
7.6.8.7
ProfileEvent
ProfileEvent()
This function is used to trigger the Profile event OB (OB 57). Profile events are only supported for modules in a distributed IO system.
Table 7- 272 ProfileEvent() - Native C++
Syntax Parameters
ERuntimeErrorCode ProfileEvent( UINT16 in_HardwareIdentifier, UINT16 in_Specifier );
· UINT16 in_HardwareIdentifier:
The hardware identifier of the module that generates the profile event.
The identifier must belong to a hardware component in the currently loaded project.
· UINT16 in_Specifier:
Return values
The parameter is transferred to the interrupt frame as interrupt specifier. It is available as input parameter of the OB 57 call.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_WRONG_MODULE_STATE
The module is currently unplugged.
SREC_NOT_SUPPORTED_BY_MODULE
The module is not supported by this user action.
SREC_DOES_NOT_EXIST
No hardware identifier of the module.
SREC_TIMEOUT
The function does not return on time.
268
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 273 ProfileEvent() - .NET (C#)
Syntax Parameters
void ProfileEvent( ushort in_HardwareIdentifier, ushort in_Specifier );
· ushort in_HardwareIdentifier:
The hardware identifier of the module that generates the profile event.
The identifier must belong to a hardware component in the currently loaded project.
· ushort in_Specifier:
Return values Exceptions
The parameter is transferred to the interrupt frame as interrupt specifier. It is
available as input parameter of the OB 57 call.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.WrongModuleState ERuntimeErrorCode.DoesNotExist
The module is currently unplugged. No hardware identifier of the module.
ERuntimeErrorCode.NotSupportedByModule
The module is not supported by this user action.
ERuntimeErrorCode.Timeout
The function does not return on time.
7.6.8.8
UpdateEvent
UpdateEvent()
This function is used to trigger the Update event OB (OB 56). Update events are only supported for modules in a distributed IO system.
Table 7- 274 UpdateEvent() - Native C++
Syntax Parameters
ERuntimeErrorCode UpdateEvent( UINT16 in_HardwareIdentifier, UINT16 in_Specifier );
· UINT16 in_HardwareIdentifier:
The hardware identifier of the module that triggers the update event.
The identifier must belong to a hardware component in the currently loaded project.
· UINT16 in_Specifier:
The parameter is transferred to the interrupt frame as interrupt specifier. It is available as input parameter of the OB 56 call.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
269
User interfaces (API) 7.6 API IInstances
Return values
Runtime error code SREC_OK
SREC_INTERFACE_REMOVED
SREC_WRONG_MODULE_STATE SREC_NOT_SUPPORTED_BY_MODULE
SREC_DOES_NOT_EXIST SREC_TIMEOUT
Condition The function is successful. The instance is not registered in Runtime Manager. The module is currently unplugged. The module is not supported by this user action. No hardware identifier of the module. The function does not return on time.
Table 7- 275 UpdateEvent() - .NET (C#)
Syntax Parameters
void UpdateEvent( ushort in_HardwareIdentifier, ushort in_Specifier );
· ushort in_HardwareIdentifier:
The hardware identifier of the module that triggers the update event.
The identifier must belong to a hardware component in the currently loaded project.
· ushort in_Specifier:
Return values Exceptions
The parameter is transferred to the interrupt frame as interrupt specifier. It is available as input parameter of the OB 56 call.
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.WrongModuleState ERuntimeErrorCode.DoesNotExist
The module is currently unplugged. No hardware identifier of the module.
ERuntimeErrorCode.NotSupportedByModule
The module is not supported by this user action.
ERuntimeErrorCode.Timeout
The function does not return on time.
270
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
7.6.8.9
GetConfiguredProcessEvent
GetConfiguredProcessEvents()
With this API method, the process events configured in the TIA Portal can be read out during runtime.
If no process events are present, SREC_OK is returned. The value for EventsCount is then 0.
Table 7- 276 GetConfiguredProcessEvents() - Native C++
Syntax Parameters
ERuntimeErrorCode GetConfiguredProcessEvents( UINT16* out_EventsCount, ); · SConfiguredProcessEvents* inout_ProcessEvents:
Pointer or reference to a user-defined memory which contains the field with the downloaded configured process events. The structure SConfiguredProcessEvents (Page 358) contains information about these process events.
· UINT16* out_EventsCount:
Return values
Pointer or reference to a tag which contains the number of configured process
events.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
Table 7- 277 GetConfiguredProcessEvents() - .NET (C#)
Syntax Parameters Return values
Exceptions
SConfiguredProcessEvents [] GetConfiguredProcessEvents( );
None
Field with configured process events and field size provide the number of configured process events.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
271
User interfaces (API) 7.6 API IInstances
7.6.8.10
RackOrStationFaultEvent
Description
This function is used to trigger the RackOrStationFault event OB (OB 86). These events are only supported for distributed devices.
Table 7- 278 RackOrStationFaultEvent() - Native C++
Syntax Parameter
ERuntimeErrorCode RackOrStationFaultEvent( UINT16 in_HardwareIdentifier,
ERackOrStationFaultType in_EventType );
· UINT16 in_HardwareIdentifier:
The hardware identifier of the device that sends the event. · ERackOrStationFaultType in_EventType:
Return values
A value from the list of predefined types of events, see ERackOrStation-
FaultType (Page 387).
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The instance is not registered in Runtime Manager.
SREC_WRONG_MODULE_TYPE
The specified HW identifier is not that of a distributed device.
SREC_WRONG_MODULE_STATE
The device with the specified HW identifier already reports the status Fault/Return.
SREC_DOES_NOT_EXIST
The specified HW identifier of the device does not exist.
SREC_TIMEOUT
The function does not return on time.
Table 7- 279 RackOrStationFaultEvent() - .NET (C#)
Syntax
void RackOrStationFaultEvent( ushort in_HardwareIdentifier,
Parameter Exceptions
ERackOrStationFaultType in_EventType );
· ushort in_HardwareIdentifier:
The hardware identifier of the device that sends the event. · ERackOrStationFaultType in_EventType:
A value from the list of predefined types of events, see ERackOrStation-
FaultType (Page 387).
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The instance is not registered in Runtime Manager.
272
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
ERuntimeErrorCode.DoesNotExist ERuntimeErrorCode.WrongModuleType ERuntimeErrorCode.WrongModuleState
ERuntimeErrorCode.Timeout
The specified HW identifier of the device does not exist.
The specified HW identifier is not that of a distributed device.
The device with the specified HW identifier already reports the status Fault/Return.
The function does not return on time.
7.6.9
Events for IInstances
7.6.9.1
Events for operating state and cycle control
Events for operating state and cycle control
The following events are triggered for the IInstances interface:
Table 7- 280 Events for IInstances
Event OnOperatingStateChanged (Page 274) OnLedChanged (Page 277) OnConfigurationChanging (Page 279)
OnConfigurationChanged (Page 282)
OnSyncPointReached (Page 284)
Cause The operating state of the virtual controller has changed.
The LED display of the virtual controller has changed. The configuration of the virtual controller changes: · During power up from the Virtual SIMATIC Memory Card · At the start of a download When this event is triggered, the stored tag list is reset. The configuration of the virtual controller has changed: · After power up from the Virtual SIMATIC Memory Card · At the end of a download · When the IP address changes
The virtual controller has reached a synchronization point. If the virtual controller is being operated in Default mode, the SendSyncEventInDefaultMode flag must be set to receive the event. See SendSyncEventInDefaultMode (Page 248).
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
273
User interfaces (API) 7.6 API IInstances
OnOperatingStateChanged events
OnOperatingStateChanged
Registers or unregisters an event handler method.
Table 7- 281 OnOperatingStateChanged - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_II_EREC_DT_EOS_EOS OnOperatingStateChanged;
None. See Delegate_II_EREC_DT_EOS_EOS (Page 329). None None The event handler method runs in a separate thread.
RegisterOnOperatingStateChangedCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 282 RegisterOnOperatingStateChangedCallback() - Native C++
Syntax Parameters
void RegisterOnOperatingStateChangedCallback( EventCallback_II_SREC_ST_SROS_SROS in_CallbackFunction
); · EventCallback_II_SREC_ST_SROS_SROS in_CallbackFunction:
Return values Note
A callback function that subscribes to the event. See EventCallback_II_SREC_ST_SROS_SROS (Page 315). None
The callback function runs in a separate thread.
RegisterOnOperatingStateChangedEvent()
When the event occurs, the registered event object is set to the signaled state. Only one event object can be registered for the event. Registering a new event object causes the previous event object to be deleted.
Table 7- 283 RegisterOnOperatingStateChangedEvent() - Native C++
Syntax Parameters
void RegisterOnOperatingStateChangedEvent(); void RegisterOnOperatingStateChangedEvent(
HANDLE* in_Event );
· None:
An internal event object is registered. · HANDLE* in_Event:
Return values
A handle for a user-specific event object. The event object is registered. None
274
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Example C++ Example C++
// Thread 1 -------------------------------------------------ISimulationRuntimeManager * api = NULL; ERuntimeErrorCode result = Initialize(&api);
IInstance* psa = NULL; if (result == SREC_OK) {
result = api->RegisterInstance(&psa); }
// Register the internal event object psa->RegisterOnOperatingStateChangedEvent();
// Thread 2 -------------------------------------------------while (condition) {
// Wait for the event to be set (timeout after 10s) bool isEventSet = psa>WaitForOnOperatingStateChangedEvent(10000); if (isEventSet) { // Do Something ... } } // Thread 1 -------------------------------------------------ISimulationRuntimeManager * api = NULL; ERuntimeErrorCode result = Initialize(&api);
IInstance* psa = NULL; if (result == SREC_OK) {
result = api->RegisterInstance(&psa); }
// Create an event object HANDLE eventHandle = CreateEvent(NULL, FALSE, FALSE, NULL);
// Register the user created event object psa->RegisterOnOperatingStateChangedEvent(&eventHandle);
// Do Something ... // Clean up the handle CloseHandle(eventHandle);
// Thread 2 -------------------------------------------------while (condition) {
// Wait for the event to be set //OR: WaitForSingleObject(eventHandle, INFINITE); //psa>WaitForOnOperatingStateChangedEvent();
// Do Something ... }
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
275
User interfaces (API) 7.6 API IInstances
UnregisterOnOperatingStateChangedCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 284 UnregisterOnOperatingStateChangedCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnOperatingStateChangedCallback();
None None
UnregisterOnOperatingStateChangedEvent()
Unregisters the event object.
Table 7- 285 UnregisterOnOperatingStateChangedEvent() - Native C++
Syntax Parameters Return values
void UnregisterOnOperatingStateChangedEvent();
None None
Table 7- 286 UnregisterOnOperatingStateChangedEvent() - .NET (C#)
Syntax Parameters Return values
void UnregisterOnOperatingStateChangedEvent();
None None
WaitForOnOperatingStateChangedEvent()
The function blocks the program until the registered event object is in the signaled state or the timeout interval is exceeded.
Table 7- 287 WaitForOnOperatingStateChangedEvent() - Native C++
Syntax Parameters
bool WaitForOnOperatingStateChangedEvent(); bool WaitForOnOperatingStateChangedEvent(
UINT32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UINT32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
276
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 288 WaitForOnOperatingStateChangedEvent() - .NET (C#)
Syntax Parameters
bool WaitForOnOperatingStateChangedEvent(); bool WaitForOnOperatingStateChangedEvent(
UInt32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UInt32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
OnLedChanged events
OnLedChanged
Registers or unregisters an event handler method.
Table 7- 289 OnLedChanged - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_II_EREC_DT_ELT_ELM OnLedChanged;
None. See Delegate_II_EREC_DT_ELT_ELM (Page 330). None None The event handler method runs in a separate thread.
RegisterOnLedChangedCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 290 RegisterOnLedChangedCallback() - Native C++
Syntax Parameters
void RegisterOnLedChangedCallback( EventCallback_II_SREC_ST_SRLT_SRLM in_CallbackFunction
); · EventCallback_II_SREC_ST_SRLT_SRLM in_CallbackFunction:
Return values Note
A callback function that subscribes to an event. See EventCallback_II_SREC_ST_SRLT_SRLM (Page 319). None
The callback function runs in a separate thread.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
277
User interfaces (API) 7.6 API IInstances
RegisterOnLedChangedEvent()
When the event occurs, the registered event object is set to the signaled state. Only one event object can be registered for the event. Registering a new event object causes the previous event object to be deleted.
Table 7- 291 RegisterOnLedChangedEvent() - Native C++
Syntax Parameters
void RegisterOnLedChangedEvent(); void RegisterOnLedChangedEvent(
HANDLE* in_Event );
· None:
An internal event object is registered. · HANDLE* in_Event:
Return values
A handle for a user-specific event object. The event object is registered. None
UnregisterOnLedChangedCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 292 UnregisterOnLedChangedCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnLedChangedCallback();
None None
UnregisterOnLedChangedEvent()
Unregisters the event object.
Table 7- 293 UnregisterOnLedChangedEvent() - Native C++
Syntax Parameters Return values
void UnregisterOnLedChangedEvent();
None None
Table 7- 294 UnregisterOnLedChangedEvent() - .NET (C#)
Syntax Parameters Return values
void UnregisterOnLedChangedEvent();
None None
278
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
WaitForOnLedChangedEvent()
The function blocks the program until the registered event object is in the signaled state or the timeout interval is exceeded.
Table 7- 295 WaitForOnLedChangedEvent() - Native C++
Syntax Parameters
bool WaitForOnLedChangedEvent(); bool WaitForOnLedChangedEvent(
UINT32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UINT32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
Table 7- 296 WaitForOnLedChangedEvent() - .NET (C#)
Syntax Parameters
bool WaitForOnLedChangedEvent(); bool WaitForOnLedChangedEvent(
UInt32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UInt32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
OnConfigurationChanging events
OnConfigurationChanging
Registers or unregisters an event handler method.
Table 7- 297 OnConfigurationChanging - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_II_EREC_DT OnConfigurationChanging;
None. See Delegate_II_EREC_DT (Page 328). None None The event handler method runs in a separate thread.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
279
User interfaces (API) 7.6 API IInstances
RegisterOnConfigurationChangingCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 298 RegisterOnConfigurationChangingCallback() - Native C++
Syntax Parameters
void RegisterOnConfigurationChangingCallback( EventCallback_II_SREC_ST in_CallbackFunction
); · EventCallback_II_SREC_ST in_CallbackFunction:
Return values Note
A callback function that subscribes to an event. See EventCallback_II_SREC_ST (Page 317). None The callback function runs in a separate thread.
RegisterOnConfigurationChangingEvent()
When the event occurs, the registered event object is set to the signaled state. Only one event object can be registered for the event. Registration of a new event object causes the previous event object to be deleted.
Table 7- 299 RegisterOnConfigurationChangingEvent() - Native C++
Syntax Parameters
void RegisterOnConfigurationChangingEvent(); void RegisterOnConfigurationChangingEvent(
HANDLE* in_Event );
· None:
An internal event object is registered. · HANDLE* in_Event:
Return values
A handle for a user-specific event object. The event object is registered. None
UnregisterOnConfigurationChangingCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 300 UnregisterOnConfigurationChangingCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnConfigurationChangingCallback();
None None
280
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
UnregisterOnConfigurationChangingEvent()
Unregisters the event object.
Table 7- 301 UnregisterOnConfigurationChangingEvent() - Native C++
Syntax Parameters Return values
void UnregisterOnConfigurationChangingEvent();
None None
Table 7- 302 UnregisterOnConfigurationChangingEvent() - .NET (C#)
Syntax Parameters Return values
void UnregisterOnConfigurationChangingEvent();
None None
WaitForOnConfigurationChangingEvent()
The function blocks the program until the registered event object is in the signaled state or the timeout interval is exceeded.
Table 7- 303 WaitForOnConfigurationChangingEvent() - Native C++
Syntax Parameters
bool WaitForOnConfigurationChangingEvent(); bool WaitForOnConfigurationChangingEvent(
UINT32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UINT32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
Table 7- 304 WaitForOnConfigurationChangingEvent() - .NET (C#)
Syntax Parameters
bool WaitForOnConfigurationChangingEvent(); bool WaitForOnConfigurationChangingEvent(
UInt32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UInt32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
281
User interfaces (API) 7.6 API IInstances
OnConfigurationChanged events
OnConfigurationChanged
Registers or unregisters an event handler method.
Table 7- 305 OnConfigurationChanged - .NET (C#)
Syntax Parameters
Return values Exceptions Note
event Delegate_II_EREC_DT_SRICC_UINT32_UINT32_UINT32_UINT32 OnConfigurationChanged; None. See Delegate_II_EREC_DT_SRICC_UINT32_UINT32_UINT32_UINT32 (Page 332). None None The event handler method runs in a separate thread.
RegisterOnConfigurationChangedCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 306 RegisterOnConfigurationChangedCallback() - Native C++
Syntax Parameters
void RegisterOnConfigurationChangedCallback( EventCallback_II_SREC_ST_SRICC_UINT32_UINT32_UINT32_UINT32
in_CallbackFunction ); · EventCallback_II_SREC_ST_SRICC_UINT32_UINT32_UINT32_UINT32
in_CallbackFunction:
Return values Note
A callback function that subscribes to an event. See EventCallback_II_SREC_ST_SRICC_UINT32_UINT32_UINT32_UINT32 (Page 318). None
The callback function runs in a separate thread.
282
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
RegisterOnConfigurationChangedEvent()
When the event occurs, the registered event object is set to the signaled state. Only one event object can be registered for the event. Registering a new event object causes the previous event object to be deleted.
Table 7- 307 RegisterOnConfigurationChangedEvent() - Native C++
Syntax Parameters
void RegisterOnConfigurationChangedEvent(); void RegisterOnConfigurationChangedEvent(
HANDLE* in_Event );
· None:
An internal event object is registered. · HANDLE* in_Event:
Return values
A handle for a user-specific event object. The event object is registered. None
UnregisterOnConfigurationChangedCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 308 UnregisterOnConfigurationChangedCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnConfigurationChangedCallback();
None None
UnregisterOnConfigurationChangedEvent()
Unregisters the event object.
Table 7- 309 UnregisterOnConfigurationChangedEvent() - Native C++
Syntax Parameters Return values
void UnregisterOnConfigurationChangedEvent();
None None
Table 7- 310 UnregisterOnConfigurationChangedEvent() - .NET (C#)
Syntax Parameters Return values
void UnregisterOnConfigurationChangedEvent();
None None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
283
User interfaces (API) 7.6 API IInstances
WaitForOnConfigurationChangedEvent()
The function blocks the program until the registered event object is in the signaled state or the timeout interval is exceeded.
Table 7- 311 WaitForOnConfigurationChangedEvent() - Native C++
Syntax Parameters
bool WaitForOnConfigurationChangedEvent(); bool WaitForOnConfigurationChangedEvent(
UINT32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UINT32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
Table 7- 312 WaitForOnConfigurationChangedEvent() - .NET (C#)
Syntax Parameters
bool WaitForOnConfigurationChangedEvent(); bool WaitForOnConfigurationChangedEvent(
UInt32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UInt32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
OnSyncPointReached events
OnSyncPointReached
Registers or unregisters an event handler method.
Table 7- 313 OnSyncPointReached - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_II_EREC_DT_UINT32_INT64_INT64_UINT32 OnSyncPointReached; None. See Delegate_II_EREC_DT_UINT32_INT64_INT64_UINT32 (Page 331). None None The event handler method runs in a separate thread.
284
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
RegisterOnSyncPointReachedCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 314 RegisterOnSyncPointReachedCallback() - Native C++
Syntax Parameters
void RegisterOnSyncPointReachedCallback( EventCallback_II_SREC_ST_UINT32_INT64_INT64_UINT32
in_CallbackFunction );
· EventCallback_II_SREC_ST_UINT32_INT64_INT64_UINT32 in_CallbackFunction:
Return values Note
A callback function that subscribes to an event. See EventCallback_II_SREC_ST_UINT32_INT64_INT64_UINT32 (Page 316). None
The callback function runs in a separate thread.
RegisterOnSyncPointReachedEvent()
When the event occurs, the registered event object is set to the signaled state. Only one event object can be registered for the event. Registering a new event object causes the previous event object to be deleted.
Table 7- 315 RegisterOnSyncPointReachedEvent() - Native C++
Syntax Parameters
void RegisterOnSyncPointReachedEvent(); void RegisterOnSyncPointReachedEvent(
HANDLE* in_Event );
· None:
An internal event object is registered. · HANDLE* in_Event:
Return values
A handle for a user-specific event object. The event object is registered. None
UnregisterOnSyncPointReachedCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 316 UnregisterOnSyncPointReachedCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnSyncPointReachedCallback();
None None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
285
User interfaces (API) 7.6 API IInstances
UnregisterOnSyncPointReachedEvent()
Unregisters the event object.
Table 7- 317 UnregisterOnSyncPointReachedEvent() - Native C++
Syntax Parameters Return values
void UnregisterOnSyncPointReachedEvent();
None None
Table 7- 318 UnregisterOnSyncPointReachedEvent() - .NET (C#)
Syntax Parameters Return values
void UnregisterOnSyncPointReachedEvent();
None None
WaitForOnSyncPointReachedEvent()
The function blocks the program until the registered event object is in the signaled state or the timeout interval is exceeded.
Table 7- 319 WaitForOnSyncPointReachedEvent() - Native C++
Syntax Parameters
SOnSyncPointReachedResult WaitForOnSyncPointReachedEvent(); SOnSyncPontReachedResult WaitForOnEndOfCycleOnSyncPointReachedEvent(
UINT32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UINT32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · SOnSyncPointReachedResult:
A structure that supplies information about the event. See SOnSyncPointReachedResult (Page 355).
286
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
Table 7- 320 WaitForOnSyncPointReachedEvent() - .NET (C#)
Syntax Parameters
SOnSyncPointReachedResult WaitForOnSyncPointReachedEvent(); SOnSyncPointReachedResult WaitForOnSyncPointReachedEvent(
UInt32 in_Time_ms );
· None:
The time limit is set to INFINITE. · UInt32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · SOnSyncPointReachedResult:
A structure that supplies information about the event. See SOnSyncPointReachedResult (Page 355).
7.6.9.2
Events for acyclic services
OnDataRecordRead / OnDataRecordWrite events
OnDataRecordRead
Registers or unregisters an event handler method.
Table 7- 321 OnDataRecordRead - .NET (C#)
Syntax Parameter Return values Exceptions Note
event Delegate_II_EREC_DT_SDRI OnDataRecordRead;
None. See Delegate_II_EREC_DT_SDRI (Page 334). None None The Event-Handler Methode runs in a separate thread.
OnDataRecordWrite
Registers or unregisters an event handler method.
Table 7- 322 OnDataRecordWrite - .NET (C#)
Syntax Parameter Return values Exceptions Note
event Delegate_II_EREC_DT_SDR OnDataRecordWrite;
None. See Delegate_II_EREC_DT_SDR (Page 333). None None The event handler method runs in a separate thread.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
287
User interfaces (API) 7.6 API IInstances
RegisterOnDataRecordReadCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 323 RegisterOnDataRecordReadCallback() - Native C++
Syntax Parameters
void RegisterOnDataRecordReadCallback ( Event Callback_II_SREC_ST_SDRI in_CallbackFunction
); · EventCallback_II_SREC_ST_SDRI in_CallbackFunction:
Return values Note
A callback function that subscribes to the event. See EventCallback_II_SREC_ST_SDRI. None The callback function runs in a separate thread.
UnregisterOnDataRecordReadCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 324 UnregisterOnDataRecordReadCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnDataRecordReadCallback();
None None
RegisterOnDataRecordWriteCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 325 RegisterOnDataRecordWriteCallback() - Native C++
Syntax Parameters
Return values Note
void RegisterOnDataRecordWriteCallback ( EventCallback_II_SREC_ST_SDRI_BYTE in_CallbackFunction
);
· EventCallback_II_SREC_ST_SDRI_BYTE in_CallbackFunction: A callback function that subscribes to the event. See EventCallback_II_SREC_ST_SDRI_BYTE. None The callback function runs in a separate thread.
288
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
UnregisterOnDataRecordWriteCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 326 UnregisterOnDataRecordWriteCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnDataRecordWriteCallback();
None None
OnAlarmNotification events
OnAlarmNotificationDone()
Registers or unregisters an event handler method.
Table 7- 327 OnAlarmNotificationDone() - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_SREC_ST_UINT32_UINT32 OnAlarmNotificationDone;
None. See Delegate_SREC_ST_UINT32_UINT32 (Page 338). None None The event handler method runs in a separate thread.
RegisterOnAlarmNotificationDoneCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 328 RegisterOnAlarmNotificationDoneCallback() - Native C++
Syntax Parameters
void RegisterOnAlarmNotificationDoneCallback ( Event Callback_II_SREC_ST_SDRI in_CallbackFunction
); · EventCallback_II_SREC_ST_UINT32_UINT32 in_CallbackFunction:
A callback function that subscribes to the event.
Return values Note
See EventCallback_II_SREC_ST_UINT32_UINT32 (Page 322). None The callback function runs in a separate thread.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
289
User interfaces (API) 7.6 API IInstances
UnregisterOnAlarmNotificationDoneCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 329 UnregisterOnAlarmNotificationDoneCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnAlarmNotificationDoneCallback ();
None None
OnProcessEvent events
OnProcessEventDone()
Registers or unregisters an event handler method.
Table 7- 330 OnProcessEventDone() - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_SREC_ST_UINT32_UINT32_EPET_UINT32 OnProcessEventDone; None. See Delegate_SREC_ST_UINT32_UINT32_EPET_UINT32. (Page 336) None None The event handler method runs in a separate thread.
RegisterOnProcessEventDoneCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 331 RegisterOnProcessEventDoneCallback() - Native C++
Syntax Parameters
Return values Note
· void RegisterOnProcessEventDoneCallback ( EventCallback_II_SREC_ST_UINT32_UINT32_EPET_UINT32
in_CallbackFunction );
· EventCallback_II_SREC_ST_UINT32_UINT32_EPET_UINT32 in_CallbackFunction:
A callback function that subscribes to the event. See EventCallback_II_SREC_ST_UINT32_UINT32_EPET_UINT32 (Page 323) None The callback function runs in a separate thread.
290
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
UnregisterOnProcessEventDoneCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 332 UnregisterOnProcessEventDoneCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnProcessEventDoneCallback ();
None None
OnPullOrPlugEvent events
OnPullOrPlugEventDone()
Registers or unregisters an event handler method.
Table 7- 333 OnPullOrPlugEventDone() - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_SREC_ST_UINT32_EPPET_UINT32 OnPullOrPlugEventDone;
None. See Delegate_SREC_ST_UINT32_EPPET_UINT32 (Page 335). None None The event handler method runs in a separate thread.
RegisterOnPullOrPlugEventDoneCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 334 RegisterOnPullOrPlugEventDoneCallback() - Native C++
Syntax
Parameters
Return values Note
· void RegisterOnPullOrPlugEventDoneCallback ( EventCallback_II_SREC_ST_UINT32_EPPET_UINT32
in_CallbackFunction ); · EventCallback_II_SREC_ST_UINT32_EPPET_UINT32
in_CallbackFunction:
A callback function that subscribes to the event. See EventCallback_II_SREC_ST_UINT32_EPPET_UINT32 (Page 324). None The callback function runs in a separate thread.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
291
User interfaces (API) 7.6 API IInstances
UnregisterOnPullOrPlugEventDoneCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 335 UnregisterOnPullOrPlugEventDoneCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnPullOrPlugEventDoneCallback ();
None None
OnStatusEvent events
OnStatusEventDone()
Registers or unregisters an event handler method.
Table 7- 336 OnStatusEventDone() - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_SREC_ST_UINT32 OnStatusEventDone;
None. See Delegate_SREC_ST_UINT32 (Page 337). None None The event handler method runs in a separate thread.
RegisterOnStatusEventDoneCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 337 RegisterOnStatusEventDoneCallback() - Native C++
Syntax Parameters
Return values Note
· void RegisterOnStatusEventDoneCallback ( EventCallback_II_SREC_ST_UINT32 in_CallbackFunction
); · EventCallback_II_SREC_ST_UINT32 in_CallbackFunction:
A callback function that subscribes to the event.
See EventCallback_II_SREC_ST_UINT32 (Page 326). None The callback function runs in a separate thread.
292
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
UnregisterOnStatusEventDoneCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 338 UnregisterOnStatusEventDoneCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnStatusEventDoneCallback ();
None None
OnProfileEvent events
OnProfileEventDone()
Registers or unregisters an event handler method.
Table 7- 339 OnProfileEventDone() - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_SREC_ST_UINT32 OnProfileEventDone;
None. See Delegate_SREC_ST_UINT32 (Page 337). None None The event handler method runs in a separate thread.
RegisterOnProfileEventDoneCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 340 RegisterOnProfileEventDoneCallback() - Native C++
Syntax Parameters
Return values Note
· void RegisterOnProfileEventDoneCallback ( EventCallback_II_SREC_ST_UINT32 in_CallbackFunction
); · EventCallback_II_SREC_ST_UINT32 in_CallbackFunction:
A callback function that subscribes to the event.
See EventCallback_II_SREC_ST_UINT32 (Page 326). None The callback function runs in a separate thread.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
293
User interfaces (API) 7.6 API IInstances
UnregisterOnProfileEventDoneCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 341 UnregisterOnProfileEventDoneCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnProfileEventDoneCallback ();
None None
OnUpdateEvent events
OnUpdateEventDone()
Registers or unregisters an event handler method.
Table 7- 342 OnUpdateEventDone() - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_SREC_ST_UINT32 OnUpdateEventDone;
None. See Delegate_SREC_ST_UINT32 (Page 337). None None The event handler method runs in a separate thread.
RegisterOnUpdateEventDoneCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 343 RegisterOnUpdateEventDoneCallback() - Native C++
Syntax Parameters
Return values Note
· void RegisterOnUpdateEventDoneCallback ( EventCallback_II_SREC_ST_UINT32 in_CallbackFunction
); · EventCallback_II_SREC_ST_UINT32 in_CallbackFunction:
A callback function that subscribes to the event.
See EventCallback_II_SREC_ST_UINT32 (Page 326). None The callback function runs in a separate thread.
294
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.6 API IInstances
UnregisterOnUpdateEventDoneCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 344 UnregisterOnUpdateEventDoneCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnUpdateEventDoneCallback ();
None None
RackOrStationFault events
OnRackOrStationFaultEvent
Registers or unregisters an event handler method.
Table 7- 345 OnRackOrStationFaultEvent - .NET (C#)
Syntax Parameter Return values Exceptions Note
event Delegate_SREC_ST_UINT32_ERSFET OnRackOrStationFault;
None. See Delegate_SREC_ST_UINT32_ERSFET (Page 339). None None The event handler method runs in a separate thread.
RegisterOnRackOrStationFaultEventCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be deleted.
Table 7- 346 RegisterOnRackOrStationFaultEventCallback() - Native C++
Syntax Parameter
void RegisterOnRackOrStationFaultEventCallback ( EventCallback_II_SREC_ST_UINT32_ERSFET in_CallbackFunction ); · EventCallback_II_ SREC_ST_UINT32_ERSFET in_CallbackFunction.
A callback function that subscribes to the event.
Return values Note
See EventCallback_II_SREC_ST_UINT32_ERSFET (Page 325) None The callback function runs in a separate thread.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
295
User interfaces (API) 7.7 API IRemoteRuntimeManager
UnregisterOnRackOrStationFaultEventCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 347 UnregisterOnRackOrStationFaultEventCallback() - Native C++
Syntax Parameter Return values
void UnregisterOnRackOrStationFaultEventCallback ();
None None
7.7
API IRemoteRuntimeManager
7.7.1
Interfaces - Information and settings
Dispose()
Deletes the managed interface and unloads the native components of the user interfaces.
Note When the interface of the Remote Runtime Manager is deleted, no IInstance interface which was generated by the IRemoteRuntimeManager interface can be used. The .NET Garbage Collector clears its IRemoteRuntimeManager interface when no active references are present.
Table 7- 348 Dispose() - .NET (C#)
Syntax Parameters Return values
void Dispose()
None None
296
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.7 API IRemoteRuntimeManager
GetVersion()
Returns the version of the remote Runtime Manager. If the function fails, version 0.0 is returned.
Table 7- 349 GetVersion() - Native C++
Syntax Parameters Return values
UINT32 GetVersion();
None UINT32: Remote Runtime Manager Version (HIWORD = Major, LOWORD = Minor)
Table 7- 350 Version { get; } - .NET (C#)
Syntax Parameters Return values
UInt32 Version { get; }
None Uint32: Remote Runtime Manager Version (HIWORD = Major, LOWORD = Minor)
GetIP() / IP { get; }
Returns the IP address of the PC on which the remote Runtime Manager is running. If the function fails, the return value is 0.
Table 7- 351 GetIP() - Native C++
Syntax Parameters Return values
UIP GetIP();
None UIP: Returns the IP address of the PC on which the Runtime Manager is running.
Table 7- 352 IP { get; } - .NET (C#)
Syntax Parameters Return values
SIP IP { get; }
None SIP: Returns the IP address of the PC on which the Runtime Manager is running.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
297
User interfaces (API) 7.7 API IRemoteRuntimeManager
GetPort() / Port { get; }
Returns the open port of the PC on which the remote Runtime Manager is running. If the function fails, the return value is 0.
Table 7- 353 GetPort() - Native C++
Syntax Parameters Return values
UINT16 GetPort();
None UINT16: Open port of the PC on which the remote Runtime Manager is running.
Table 7- 354 Port { get; } - .NET (C#)
Syntax Parameters Return values
UInt16 Port { get; }
None UInt16: Open port of the PC on which the remote Runtime Manager is running.
GetRemoteComputerName() / RemoteComputerName { get; }
Returns the name of the PC on which the remote Runtime Manager is running.
Table 7- 355 GetRemoteComputerName() - Native C++
Syntax Parameters
ERuntimeErrorCode GetRemoteComputerName( WCHAR* inout_Name, UINT32 in_ArrayLength
); · WCHAR* inout_Name:
A user-allocated array for the computer name. · UINT32 in_ArrayLength:
Return values
The array length. The array should be longer than MAX_COMPUTERNAME_LENGTH.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The interface is disconnected from the remote Runtime Manager.
SREC_INDEX_OUT_OF_RANGE
The array is too small to accommodate the computer name.
Table 7- 356 RemoteComputerName { get; } - .NET (C#)
Syntax Parameters Return values Exceptions
string RemoteComputerName { get; }
None
string: Name of the PC on which the remote Runtime Manager is running.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The interface is disconnected from the remote Runtime Manager.
ERuntimeErrorCode.IndexOutOfRange
The array is too small to accommodate the computer name.
298
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.7 API IRemoteRuntimeManager
Disconnect()
Closes the connection to the remote Runtime Manager.
Note All applications that are connected to the remote Runtime Manager lose this connection.
Table 7- 357 Disconnect() - Native C++
Syntax Parameters Return values
ERuntimeErrorCode Disconnect();
None Runtime error code SREC_OK SREC_INTERFACE_REMOVED
SREC_TIMEOUT
Condition The function is successful. The interface is disconnected from the remote Runtime Manager. The function does not return on time.
Table 7- 358 Disconnect() - .NET (C#)
Syntax Parameters Return values Exceptions
void Disconnect();
None
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The interface is disconnected from the remote Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
299
User interfaces (API) 7.7 API IRemoteRuntimeManager
7.7.2
Simulation Runtime instances
7.7.2.1
Simulation Runtime instances (remote)
GetRegisteredInstancesCount()
Returns the number of instances that are registered in Runtime Manager. If the function fails, the return value is 0.
Table 7- 359 GetRegisteredInstancesCount() - Native C++
Syntax Parameters Return values
UINT32 GetRegisteredInstancesCount();
None UINT32: Number of available instances.
GetRegisteredInstanceInfoAt()
Returns information about an already registered instance. You can use the ID or name to create an interface of this instance (see CreateInterface()).
Table 7- 360 GetRegisteredInstanceInfoAt() - Native C++
Syntax Parameters
ERuntimeErrorCode GetRegisteredInstanceInfoAt( UINT32 in_Index, SInstanceInfo* out_InstanceInfo
); · UINT32 in_Index:
Index of the created instance from which you want to receive the information. The index must be less than the value you receive when you call GetRegisteredInstanceCount().
· SInstanceInfo* out_InstanceInfo:
Return values
The information with name and ID of the instance. See SInstanceInfo
(Page 349).
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The interface is disconnected from the remote Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_INDEX OUT_OF_RANGE
There is no instance information for this index.
300
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.7 API IRemoteRuntimeManager
RegisteredInstanceInfo { get; }
Returns information about an already registered instance. You can use the ID or name of this instance to create an interface of this instance, see CreateInterface().
Table 7- 361 RegisterInstanceInfo { get; } - .NET (C#)
Syntax Parameters Return values Exceptions
SInstanceInfo[] RegisteredInstanceInfo { get; }
None
None
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The interface is disconnected from the remote Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
RegisterInstance()
Registers a new instance of a virtual controller in Runtime Manager. Creates and returns an interface of this instance.
Table 7- 362 RegisterInstance() - Native C++
Syntax Parameters
ERuntimeErrorCode RegisterInstance( IInstance** out_InstanceInterface
); ERuntimeErrorCode RegisterInstance(
WCHAR* in_InstanceName, IInstance** out_InstanceInterface ); ERuntimeErrorCode RegisterInstance( ECPUType in_CPUType, IInstance** out_InstanceInterface ); ERuntimeErrorCode RegisterInstance( ECPUType in_CPUType, WCHAR* in_InstanceName, IInstance** out_InstanceInterface );
· ECPUType in_CPUType:
Defines which CPU type is simulated at the start of the instance. The default setting is "SRCT_1500_Unspecified".
When a different CPU type is loaded via STEP 7 or from the Virtual SIMATIC Memory Card, this CPU type applies.
· WCHAR* in_InstanceName:
Name to be assigned to the instance. Every instance must have a unique name. If no name is assigned when registering a new instance, the instance is given the name "Instance_#" (# is the ID of the instance). If this name already exists, the name "Instance_#.#" is used, in which the second # is a counter that is incremented until the name is unique. The length of the name must be less than DINSTANCE_NAME_LENGTH. See Data types (Page 340).
· IInstance** out_InstanceInterface:
Pointer to a Simulation Runtime interface pointer. The pointer must be initialized with NULL. The interface is created within the function.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
301
User interfaces (API) 7.7 API IRemoteRuntimeManager
Return values Example C++
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The interface is disconnected from the remote Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_WRONG_ARGUMENT
The name or the IInstance pointer is invalid.
SREC_LIMIT_REACHED
There are already 16 instances registered in Runtime Manager.
SREC_ALREADY_EXISTS
An instance with this name already exists.
ISimulationRuntimeManager * api = NULL; ERuntimeErrorCode result = Initialize(&api);
// Example: How To Create And Register An Instance // And To Get An Interface Of The Instance The Same Time IInstance* psa = NULL; if (result == SREC_OK) {
result = api->RegisterInstance(&psa); }
Note Native C++ If you no longer require the interface, delete it. See DestroyInterface() (Page 118).
302
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.7 API IRemoteRuntimeManager
Table 7- 363 RegisterInstance() - .NET (C#)
Syntax Parameters
IInstance RegisterInstance(); IInstance RegisterInstance(
string in_InstanceName ); IInstance RegisterInstance(
ECPUType in_CPUType ); IInstance RegisterInstance(
ECPUType in_CPUType string in_InstanceName );
· ECPUType in_CPUType:
Defines which CPU type is simulated at the start of the instance. The default setting is "ECPUType.Unspecified".
When a different CPU type is loaded via STEP 7 or from the Virtual SIMATIC Memory Card, this CPU type applies.
· string in_InstanceName:
Return values Exceptions
Name to be assigned to the instance. Every instance must have a unique name. If no name is assigned when registering a new instance, the instance is
given the name "Instance_#" (# is the ID of the instance). If this name already
exists, the name "Instance_#.#" is used, in which the second # is a counter
that is incremented until the name is unique. The length of the name must be
less than DINSTANCE_NAME_LENGTH. See Data types (Page 340).
If the function is successful, an interface of a virtual controller. Otherwise, a Null pointer.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The interface is disconnected from the remote Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument The name is invalid.
ERuntimeErrorCode.LimitReached
There are already 16 instances registered in Runtime Manager.
ERuntimeErrorCode.AlreadyExists
An instance with this name already exists.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
303
User interfaces (API) 7.7 API IRemoteRuntimeManager
RegisterCustomInstance()
Registers a new instance of a virtual controller in Runtime Manager. Creates and returns an interface of this instance.
Table 7- 364 RegisterCustomInstance() - Native C++
Syntax Parameters
ERuntimeErrorCode RegisterCustomInstance( WCHAR* in_VplcDll, IInstance** out_InstanceInterface
); ERuntimeErrorCode RegisterCustomInstance(
WCHAR* in_VplcDll, WCHAR* in_InstanceName, IInstance** out_InstanceInterface );
· WCHAR* in_VplcDll:
The complete path to the DLL of the virtual controller that Siemens.Simatic.Simulation.Runtime.Instance.exe loads at PowerOn.
· WCHAR* in_InstanceName:
Name to be assigned to the instance. Every instance must have a unique name. If no name is assigned when registering a new instance, the instance is given the name "Instance_#" (# is the ID of the instance). If this name already exists, the name "Instance_#.#" is used, in which the second # is a counter that is incremented until the name is unique. The length of the name must be less than DINSTANCE_NAME_LENGTH. See Data types (Page 340).
· IInstance** out_InstanceInterface:
Return values Example C++
Pointer to a Simulation Runtime interface pointer. The pointer must be initialized with NULL. The interface is created within the function.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The interface is disconnected from the remote Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_WRONG_ARGUMENT
The DLL name, the instance name or the IInstance pointer is invalid.
SREC_LIMIT_REACHED
There are already 16 instances registered in Runtime Manager.
SREC_ALREADY_EXISTS
An instance with this name already exists.
ISimulationRuntimeManager * api = NULL; ERuntimeErrorCode result = Initialize(&api);
// Example: How To Create And Register An Instance // And To Get An Interface Of The Instance The Same Time IInstance* psa = NULL; if (result == SREC_OK) {
result = api->RegisterCustomInstance("C:\\Temp\\vplc.dll"); }
304
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Note Native C++ If you no longer require the interface, delete it. See DestroyInterface() (Page 118).
User interfaces (API) 7.7 API IRemoteRuntimeManager
Table 7- 365 RegisterCustomInstance() - .NET (C#)
Syntax Parameters
IInstance RegisterCustomInstance( string in_VplcDll
); IInstance RegisterCustomInstance(
string in_VplcDll, string in_InstanceName );
· string in_VplcDll:
The complete path to the DLL of the virtual controller that Siemens.Simatic.Simulation.Runtime.Instance.exe loads at PowerOn.
· string in_InstanceName:
Return values Exceptions
Name to be assigned to the instance. Every instance must have a unique name. If no name is assigned when registering a new instance, the instance is given the name "Instance_#" (# is the ID of the instance). If this name already
exists, the name "Instance_#.#" is used, in which the second # is a counter
that is incremented until the name is unique. The length of the name must be
less than DINSTANCE_NAME_LENGTH. See Data types (Page 340).
If the function is successful, an interface of a virtual controller; otherwise a Null pointer.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The interface is disconnected from the remote Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument The name or the ID is invalid.
ERuntimeErrorCode.LimitReached
There are already 16 instances registered in Runtime Manager.
ERuntimeErrorCode.AlreadyExists
An instance with this name already exists.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
305
User interfaces (API) 7.7 API IRemoteRuntimeManager
CreateInterface()
Creates and returns an interface of an already registered instance of a virtual controller.
The instance could have been registered via the application or another application that uses the Simulation Runtime API.
Table 7- 366 CreateInterface() - Native C++
Syntax Parameters
ERuntimeErrorCode CreateInterface( WCHAR* in_InstanceName, IInstance** out_InstanceInterface
); ERuntimeErrorCode CreateInterface(
INT32 in_InstanceID, IInstance** out_InstanceInterface );
· INT32 in_InstanceID:
The ID of the registered instance from which you want to receive the interface. · WCHAR* in_InstanceName:
The name of the registered instance from which you want to receive the interface.
· IInstance** out_InstanceInterface:
Return values Example C++
Pointer to a Simulation Runtime interface pointer. The pointer must be initialized with NULL. The interface is created within the function.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_INTERFACE_REMOVED
The interface is disconnected from the remote Runtime Manager.
SREC_TIMEOUT
The function does not return on time.
SREC_WRONG_ARGUMENT
The name, the ID or the IInstance- pointer is invalid.
SREC_DOES_NOT_EXIST
The instance is not registered in Runtime Manager.
ISimulationRuntimeManager * api = NULL; ERuntimeErrorCode result = Initialize(&api);
Example C++
IInstance* psa1 = NULL; IInstance* psa2 = NULL; if (result == SREC_OK) {
result = api->CreateInterface(0, &psa1);
result = api->CreateInterface(0, &psa2); // psa2 will be the same as psa1 }
ISimulationRuntimeManager * api = NULL; ERuntimeErrorCode result = Initialize(&api);
IInstance* psa = NULL; if (result == SREC_OK)
{ result = api->CreateInterface(L"My SimulationRuntime Instance",
&psa);
}
306
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Note Native C++ If you no longer require the interface, delete it. See DestroyInterface() (Page 118)
User interfaces (API) 7.7 API IRemoteRuntimeManager
Table 7- 367 CreateInterface() - .NET (C#)
Syntax Parameters
IInstance CreateInterface( string in_InstanceName
); IInstance CreateInterface(
INT32 in_InstanceID );
· INT32 in_InstanceID:
The ID of the registered instance from which you want to receive the interface. · string in_InstanceName:
Return values Exceptions
The name of the registered instance from which you want to receive the inter-
face.
If the function is successful, an interface of a virtual controller; otherwise a Null pointer.
Siemens.Simatic.Simulation.Runtime.SimulationRuntimeException
Runtime error code
Condition
ERuntimeErrorCode.InterfaceRemoved
The interface is disconnected from the remote Runtime Manager.
ERuntimeErrorCode.Timeout
The function does not return on time.
ERuntimeErrorCode.WrongArgument The name or the ID is invalid.
ERuntimeErrorCode.DoesNotExists
The instance is not registered in Runtime Manager.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
307
User interfaces (API) 7.7 API IRemoteRuntimeManager
7.7.3
Events for IRemoteRuntimeManager
7.7.3.1
OnConnectionLost events
Description
The event is triggered when the connection to the Remote Runtime Manager has been terminated.
OnConnectionLost
Registers or unregisters an event handler method.
Table 7- 368 OnConnectionLost - .NET (C#)
Syntax Parameters Return values Exceptions Note
event Delegate_IRRTM OnConnectionLost;
None. See Delegate_IRRTM (Page 332) None None The event handler method runs in a separate thread.
RegisterOnConnectionLostCallback()
When the event occurs, the registered callback function is called. Only one callback function can be registered for the event. Registering a new callback function causes the previous callback function to be unregistered.
Table 7- 369 RegisterOnConnectionLostCallback() - Native C++
Syntax Parameters
void RegisterOnConnectionLostCallback( EventCallback_IRRTM in_CallbackFunction
); · EventCallback_IRRTM in_CallbackFunction:
Return values Note
A callback function that subscribes to an event. See EventCallback_IRRTM (Page 314). None
The callback function runs in a separate thread.
308
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.7 API IRemoteRuntimeManager
RegisterOnConnectionLostEvent()
When the event occurs, the registered event object is set to the signaled state. Only one event object can be registered for the event. Registration of a new event object causes the previous event object to be deleted.
Table 7- 370 RegisterOnConnectionLostEvent() - Native C++
Syntax Parameters
void RegisterOnConnectionLostEvent(); void RegisterOnConnectionLostEvent(
HANDLE* in_Event );
· None:
An internal event object is registered. · HANDLE* in_Event:
Return values
A handle for a user-specific event object. The event object is registered. None
Table 7- 371 RegisterOnConnectionLostEvent() - .NET (C#)
Syntax Parameters Return values
void RegisterOnConnectionLostEvent();
None None
UnregisterOnConnectionLostCallback()
Unregisters the callback function. When the event occurs, no callback function is called.
Table 7- 372 UnregisterOnConnectionLostCallback() - Native C++
Syntax Parameters Return values
void UnregisterOnConnectionLostCallback();
None None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
309
User interfaces (API) 7.7 API IRemoteRuntimeManager
UnregisterOnConnectionLostEvent()
Unregisters the event object.
Table 7- 373 UnregisterOnConnectionLostEvent() - Native C++
Syntax Parameters Return values
void UnregisterOnConnectionLostEvent();
None None
Table 7- 374 UnregisterOnConnectionLostEvent() - .NET (C#)
Syntax Parameters Return values
void UnregisterOnConnectionLostEvent();
None None
WaitForOnConnectionLostEvent()
The function blocks the program until the registered event object is in the signaled state or the timeout interval is exceeded.
Table 7- 375 WaitForOnConnectionLostEvent() - Native C++
Syntax Parameters
bool WaitForOnConnectionLostEvent(); bool WaitForOnConnectionLostEvent(
UINT32 in_Time_ms ) ;
· None:
The time limit is set to INFINITE. · UINT32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
Table 7- 376 WaitForOnConnectionLostEvent() - .NET (C#)
Syntax Parameters
bool WaitForOnConnectionLostEvent(); bool WaitForOnConnectionLostEvent(
UInt32 in_Time_ms ) ;
· None:
The time limit is set to INFINITE. · UInt32 in_Time_ms:
Return values
Value for the time limit in milliseconds. · true: If the event object was set to the signaled state. · false: If no event was received during the defined time limit.
310
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8
Data types
Note Unsupported data types The Runtime API does not support the STRING and WSTRING data types.
Supported data types
In PLCSIM Advanced V3.0, the Runtime API supports the data types of the S7-1500 CPUs.
Converting data types
When writing, data types are not transferred BCD-coded but mapped onto primitive data types. The data types Counter, Date and Time must be transferred to the API BDC-coded so that the values are written to the counter and no incorrect values are returned when reading. For these data types, you must perform a BCD conversion before writing and a BCD backconversion after reading.
Example: If the value 999 is transferred to the API as 2457H, then Write modifies the value 2457H to 999. Without BCD conversion, there is no UInt16 value and Write writes no value at all.
Additional information
For information on data types and conversion, refer to section "Data types" in the SIMATIC STEP 7 Basic/Professional (https://support.industry.siemens.com/cs/ww/en/view/109755202) System Manual.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
311
User interfaces (API) 7.8 Data types
7.8.1
DLL import functions (Native C++)
7.8.1.1
ApiEntry_Initialize
Description
Type of the central entry point for the API library (DLL).
Table 7- 377 ApiEntry_Initialize - Native C++
Syntax Parameters
typedef ERuntimeErrorCode(*ApiEntry_Initialize)( ISimulationRuntimeManager** out_RuntimeManagerInterface
); · ISimulationRuntimeManager**
out_SimulationRuntimeManagerInterface:
Pointer to a Runtime Manager interface pointer. The pointer must be initialized with NULL. The interface is created within the function.
· UINT32 in_InterfaceVersion:
Return values
Version of the API interface to be downloaded:
API_DLL_INTERFACE_VERSION.
Runtime error code
Condition
SREC_OK
The function is successful.
SREC_WRONG_ARGUMENT
The pointer to the Runtime Manager interface is NULL.
SREC_WRONG_VERSION
The version of the interface in use does not match the version of the API library (DLL).
SREC_CONNECTION_ERROR
Unable to establish a connection to the Runtime Manager.
7.8.1.2
ApiEntry_DestroyInterface
Description
Type of the entry point for DestroyInterface (Page 118).
Table 7- 378 ApiEntry_DestroyInterface - Native C++
Syntax Parameters
typedef ERuntimeErrorCode(*ApiEntry_DestroyInterface)( IBaseInterface* in_Interface
); · IBaseInterface* in_Interface:
Return values
The interface to be deleted. Runtime error code SREC_OK
SREC_WRONG_ARGUMENT
Condition The function is successful. The pointer to the interface is NULL.
312
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.2
Event callback functions (Native C++)
7.8.2.1
EventCallback_VOID
Description
Table 7- 379 EventCallback_VOID - Native C++
Syntax Parameters Return values
typedef void (*EventCallback_VOID)();
None None
7.8.2.2
EventCallback_SRCC_UINT32_UINT32_INT32
Description
Table 7- 380 EventCallback_SRCC_UINT32_UINT32_INT32 - Native C++
Syntax Parameters
Return values
ERuntimeConfigChanged in_RuntimeConfigChanged, UINT32 in_Param1, UINT32 in_Param2, INT32 in_Param3
);
ERuntimeCon-
UInt32
figChanged
in_Param1
in_RuntimeConfi
gChanged
UInt32 in_Param2
SRCC_INSTANCE_R -
-
EGISTERED
SRCC_INSTANCE_U -
-
NREGISTERED
SRCC_CONNECTION _OPENED
SRCC_CONNECTION _CLOSED
SRCC_PORT_OPENE D SRCC_PORT_CLOSE D None
IP of the remote Runtime Manager
IP of the remote Runtime Manager
The open port
-
Port of the remote Runtime Manager Port of the remote Runtime Manager -
-
Int32 in_Param3
ID of the registered instance ID of the unregistered instance -
-
-
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
313
User interfaces (API) 7.8 Data types
7.8.2.3
EventCallback_SRRSI_AD
Description
Table 7- 381 EventCallback_SRRSI_AD - Native C++
Syntax Parameters
typedef void (*EventCallback_SRRSI_AD)( EAutodiscoverType in_AutodiscoverMsg, SAutodiscoverData in_AutodiscoverData
);
· in_AutodiscoverMsg:
A value from the list of predefined types of events, see EAutodiscoverType (Page 362).
SRRSI_DISCOVER_STARTED, if the identification process was started by successfully calling the function RunAutodisover().
SRRSI_DISCOVER_DATA, if a Runtime Manager in the network was determined by the identification process. For detailed information about the found Runtime Manager, see parameter in_AutodiscoverData.
SRRSI_DISCOVER_FINISHED, if the identification process was completed after the time defined by the "in_Timeout" parameter had elapsed.
SRRSI_DISCOVER_STARTED and SRRSI_DISCOVER_FINISHED are always triggered, even if no data is received.
· in_AutodiscoverData:
Return values
Data from the Remote Runtime Manager. The parameter contains valid data only if in_AutodiscoverMsg = SRRSI_DISCOVER_DATA. Otherwise it is initialized with 0. See SAutodiscoverData (Page 388).
None
7.8.2.4
EventCallback_IRRTM
Description
Table 7- 382 EventCallback_IRRTM - Native C++
Syntax Parameters
typedef void (*EventCallback_IRRTM)( IRemoteRuntimeManager* in_Sender
); · IRemoteRuntimeManager* in_Sender:
Return values
An interface of the remote Runtime Manager that receives this event. None
314
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.2.5
EventCallback_II_SREC_ST_SROS_SROS
Description
Table 7- 383 EventCallback_II_SREC_ST_SROS_SROS - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST_SROS_SROS)( IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SystemTime, EOperatingState in_PrevState, EOperatingState in_OperatingState
);
· IInstance* in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SystemTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· EOperatingState in_PrevState:
The operating state before the change. · EOperatingState in_OperatingState:
Return values Error codes
The current operating state. None Runtime error code SREC_OK SREC_WARNING_TRIAL_MODE_ACTIVE
SREC_LICENSE_NOT_FOUND SREC_COMMUNICATION_INTERFACE_NOT _AVAILABLE
Condition
The function is successful.
No license available. You can use the instance without restrictions with the Trial License. Afterwards, the instance is shut down.
Test mode has expired.
A problem has occurred with the selected communication interface. Check your settings.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
315
User interfaces (API) 7.8 Data types
7.8.2.6
EventCallback_II_SREC_ST_UINT32_INT64_INT64_UINT32
Description
Table 7- 384 EventCallback_II_SREC_ST_UINT32_INT64_INT64_UINT32 - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST_UINT32_INT64_INT64_UINT32)(
IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SystemTime, UINT32 in_PipId, INT64 in_TimeSinceSameSyncPoint_ns, INT64 in_TimeSinceAnySyncPoint_ns, UINT32 in_SyncPointCount );
· IInstance* in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SystemTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· UINT32 in_PipId:
The ID of the process image partition (PIP) that triggers this event.
0 for the cycle control point (End of cycle). · INT64 in_TimeSinceSameSyncPoint_ns:
The virtual time (in nanoseconds) since the last synchronization point of the same process image partition ID was reached.
For the time-controlled operating modes (Page 94): The runtime since the last call of the StartProcessing() function.
· INT64 in_TimeSinceAnySyncPoint_ns:
The virtual time (in nanoseconds) since the last synchronization point of any process image partition ID was reached.
For the time-controlled operating modes (Page 94): The runtime since the last call of the StartProcessing() function.
· UINT32 in_SyncPointCount:
Return values
The number of synchronization points since the last event. If the events are triggered faster than they are received, multiple events are combined into one event. In this case, this value contains the number of cycles since the last event was received.
None
316
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.2.7
EventCallback_II_SREC_ST
Description
Table 7- 385 EventCallback_II_SREC_ST - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST)( IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SystemTime
);
· IInstance* in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SystemTime:
Return values
The virtual system time of the virtual controller at the time when this event was triggered.
None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
317
User interfaces (API) 7.8 Data types
7.8.2.8
EventCallback_II_SREC_ST_SRICC_UINT32_UINT32_UINT32_UINT32
Description
Table 7- 386 EventCallback_II_SREC_ST_SRICC_UINT32_UINT32_UINT32_UINT32 - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST_SRICC_UINT32_UINT32_UINT32_UINT32)(
IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SystemTime, EInstanceConfigChanged in_InstanceConfigChanged, UINT32 in_Param1, UINT32 in_Param2, UINT32 in_Param3, UINT32 in_Param4 ); · IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SystemTime:
Return values
The virtual system time of the virtual controller at the time when this event
was triggered.
EInstanceConfigChanged in_Instance ConfigChanged
UINT32 in_Param1
UINT32 in_Param2
UINT32 in_Param3
UINT32 in_Param4
SRICC_HARDW -
-
-
-
ARE_SOFTWAR
E CHANGED
SRICC_IP_CH ANGED
The ID of the
The new IP
interface
The new sub- The new
net mask
standard
gateway
None
318
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.2.9
EventCallback_II_SREC_ST_SRLT_SRLM
Description
Table 7- 387 EventCallback_II_SREC_ST_SRLT_SRLM - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST_SRLT_SRLM)( IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SystemTime, ELEDType in_LEDType, ELEDMode in_LEDMode,
);
· IInstance* in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SystemTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· ELEDType in_LEDType:
The LED type that changed its state. · ELEDMode in_LEDMode:
Return values
The new state of the LED display. None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
319
User interfaces (API) 7.8 Data types
7.8.2.10
EventCallback_II_SREC_ST_SDRI
Description
Table 7- 388 EventCallback_II_SREC_ST_SDRI - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST_SDRI)( IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SystemTime, SDataRecordInfo in_DataRecordInfo
);
· IInstance* in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SystemTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· SDataRecordInfo in_DataRecordInfo:
Return values
The structure SDataRecordInfo contains the following information: The HW identifier from which the CPU wants to read the data record The index of the collected data record The maximum size of the data record which the IO device can transfer.
None
320
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.2.11
EventCallback_II_SREC_ST_SDRI_BYTE
Description
Table 7- 389 EventCallback_II_SREC_ST_SDRI_BYTE - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST_SDRI_BYTE)( IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SystemTime, SDataRecordInfo in_DataRecordInfo const BYTE* in_Data
);
· IInstance* in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SystemTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· SDataRecordInfo in_DataRecordInfo:
The structure SDataRecordInfo contains the following information: The HW identifier to which the CPU wants to write the data record The index of the supplied data record Size of data record · const BYTE* in_Data:
Return values
The data record. This pointer becomes invalid after the callback function has returned.
None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
321
User interfaces (API) 7.8 Data types
7.8.2.12
EventCallback_II_SREC_ST_UINT32_UINT32
Description
Table 7- 390 EventCallback_II_SREC_ST_UINT32_UINT32 - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST_UINT32_UINT32)( IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SystemTime, UINT32 in_HardwareIdentifier),
UINT32 in_SequenceNumber );
· IInstance* in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SYSTEMTIME:
The virtual system time of the virtual controller at the time when this event was triggered.
· UINT32 in_HardwareIdentifier:
The hardware identifier of the module or submodule which sends the diagnostics event.
· UINT32 in_SequenceNumber:
PLCSIM Advanced assigns a unique consecutive number to each interrupt event.
According to PROFINET standard the sequence number is 10 bits wide (1 to 7FFH). When the highest number is reached the numbering starts again at 1.
Note
In a real hardware system the IO controller uses the sequence number to check if it has lost a hardware interrupt.
Return values
During the simulation, the sequence number creates the relation between interrupt request and the associated acyclic alarm.
None
322
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.2.13
EventCallback_II_SREC_ST_UINT32_UINT32_EPET_UINT32
Description
Table 7- 391 EventCallback_II_SREC_ST_UINT32_UINT32_EPET_UINT32 - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST_UINT32_UINT32_EPET_UINT32)( IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SystemTime, UINT32 in_HardwareIdentifier,
UINT32 in_Channel, EProcessEventType in_ProcessEventType,
UINT32 in_SequenceNumber );
· IInstance* in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SystemTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· UINT32 in_HardwareIdentifier:
The hardware identifier of the IO module that sends the process event. · UINT32 in_Channel:
The channel of the IO module which sends the process event. · EProcessEventType in_ProcessEventType:
A value from the list of predefined types of events for S7 modules, see EProcessEventType (Page 384).
· UINT32 in_SequenceNumber:
PLCSIM Advanced assigns a unique consecutive number to each interrupt event.
According to PROFINET standard the sequence number is 10 bits wide (1 to 7FFH). When the highest number is reached the numbering starts again at 1.
Note
In a real hardware system the IO controller uses the sequence number to check if it has lost a hardware interrupt.
Return values
During the simulation, the sequence number creates the relation between interrupt request and the associated acyclic alarm.
None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
323
User interfaces (API) 7.8 Data types
7.8.2.14
EventCallback_II_SREC_ST_UINT32_EPPET_UINT32
Description
Table 7- 392 EventCallback_II_SREC_ST_UINT32_EPPET_UINT32 - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST_UINT32_EPPET_UINT32)( IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SYSTEMTIME, UINT32 in_HardwareIdentifier,
EPullOrPlugEventType in_PullOrPlugEventType, UINT32 in_SequenceNumber );
· IInstance* in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SYSTEMTIME:
The virtual system time of the virtual controller at the time when this event was triggered.
· UINT32 in_HardwareIdentifier:
The hardware identifier of the module or submodule which sends the pull/plug event.
· EPullOrPlugEventType in_PullOrPlugEventType:
A value from the list of predefined types of events for S7 modules, see EPullOrPlugEventType (Page 384).
· UINT32 in_SequenceNumber:
PLCSIM Advanced assigns a unique consecutive number to each interrupt event.
According to PROFINET standard the sequence number is 10 bits wide (1 to 7FFH). When the highest number is reached the numbering starts again at 1.
Note
In a real hardware system the IO controller uses the sequence number to check if it has lost a hardware interrupt.
Return values
During the simulation, the sequence number creates the relation between interrupt request and the associated acyclic alarm.
None
324
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.2.15
EventCallback_II_SREC_ST_UINT32_ERSFET
Description
Table 7- 393 EventCallback_II_SREC_ST_UINT32_ERSFET - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST_UINT32_ERSFET)( IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SystemTime, UINT32 in_HardwareIdentifier,
ERackOrStationFaultType in_EventType );
· IInstance* in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SYSTEMTIME:
The virtual system time of the virtual controller at the time when this event was triggered.
· UINT32 in_HardwareIdentifier:
The hardware identifier of the module or submodule which sends the diagnostics event.
· ERackOrStationFaultType in_EventType:
Return values
A value from the list of predefined RackOrStationFault event types. See ERackOrStationFaultType (Page 387).
None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
325
User interfaces (API) 7.8 Data types
7.8.2.16
EventCallback_II_SREC_ST_UINT32
Description
Table 7- 394 EventCallback_II_SREC_ST_UINT32 - Native C++
Syntax Parameters
typedef void (*EventCallback_II_SREC_ST_UINT32)( IInstance* in_Sender, ERuntimeErrorCode in_ErrorCode, SYSTEMTIME in_SystemTime, UINT32 in_HardwareIdentifier);
);
· IInstance* in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · SYSTEMTIME in_SYSTEMTIME:
The virtual system time of the virtual controller at the time when this event was triggered.
· UINT32 in_HardwareIdentifier:
The hardware identifier of the module or submodule which generates the status, update or Profile event.
Return values
The identifier must belong to a hardware component in the currently loaded project.
None
326
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.3
Delegate definitions (managed code)
7.8.3.1
Delegate_Void
Description
Table 7- 395 Delegate_Void - .NET (C#)
Syntax Parameters Return values
delegate void Delegate_Void();
None None
7.8.3.2
Delegate_SRCC_UINT32_UINT32_INT32
Description
Table 7- 396 Delegate_SRCC_UINT32_UINT32_INT32 - .NET (C#)
Syntax Parameters
Return values
delegate void Delegate_SRCC_UINT32_UINT32_INT32(
ERuntimeConfigChanged in_RuntimeConfigChanged, UInt32 in_Param1, UInt32 in_Param2, Int32 in_Param3
);
ERuntimeCon-
UInt32
figChanged
in_Param1
in_RuntimeConfi
gChanged
UInt32 in_Param2
InstanceRegis- -
-
tered
InstanceUnreg- -
-
istered
ConnectionOpened
ConnectionClosed
PortOpened PortClosed None
IP of the Remote Runtime Manager
IP of the Remote Runtime Manager
The open port -
Port of the remote Runtime Manager
Port of the remote Runtime Manager -
-
Int32 in_Param3
ID of the registered instance ID of the unregistered instance -
-
-
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
327
User interfaces (API) 7.8 Data types
7.8.3.3
Delegate_SRRSI_AD
Description
Table 7- 397 Delegate_SRRSI_AD - .NET (C#)
Syntax Parameters
delegate void Delegate_SRRSI_AD( EAutodiscoverType in_AutodiscoverType, SAutodiscoverData in_AutodiscoverData
);
· in_AutodiscoverType
A value from the list of predefined types of events, see EAutodiscoverType (Page 388).
AutodiscoverStarted, if the identification process was started by successfully calling the function RunAutodisover().
AutodiscoverData, if a Runtime Manager in the network was determined by the identification process. For detailed information about the found Runtime Manager, see parameter in_AutodiscoverData.
AutodiscoverFinished, if the identification process is completed after the time defined by the parameter "in_Timeout" has elapsed.
AutodiscoverStarted and AutodiscoverFinished are always triggered, even if no data is received.
· in_AutodiscoverData
Return values
Data from the Remote Runtime Manager. The parameter contains valid data only if in_AutodiscoverType = AutodiscoverData. Otherwise it is initialized with 0. See SAutodiscoverData (Page 362).
None
7.8.3.4
Delegate_II_EREC_DT
Description
Table 7- 398 Delegate_II_EREC_DT - .NET (C#)
Syntax Parameters
delegate void Delegate_II_EREC_DT ( IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime
);
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
Return values
The virtual system time of the virtual controller at the time when this event was triggered.
None
328
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.3.5
Delegate_II_EREC_DT_EOS_EOS
Description
Table 7- 399 Delegate_II_EREC_DT_EOS_EOS - .NET (C#)
Syntax Parameters
delegate void Delegate_II_EREC_DT_EOS_EOS( IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime, EOperatingState in_PrevState, EOperatingState in_OperatingState
);
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· EOperatingState in_PrevState:
The operating state before the change. · EOperatingState in_OperatingState:
Return values Error codes
The current operating state. None Runtime error code ERuntimeErrorCode.OK ERuntimeErrorCode.WarningTrialModeActive
ERuntimeErrorCode.LicenseNotFound ERuntimeErrorCode.CommunicationInterfaceNotAv ailable
Condition
The function is successful.
No license available. You can use the instance without restrictions with the Trial License. Afterwards, the instance is shut down.
Test mode has expired.
A problem has occurred with the selected communication interface. Check your settings.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
329
User interfaces (API) 7.8 Data types
7.8.3.6
Delegate_II_EREC_DT_ELT_ELM
Description
Table 7- 400 Delegate_II_EREC_DT_ELT_ELM - .NET (C#)
Syntax Parameters
delegate void Delegate_II_EREC_DT_ELT_ELM( IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime, ELEDType in_LEDType, ELEDMode in_LEDMode,
);
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· ELEDType in_LEDType:
The LED type that changed its state. · ELEDMode in_LEDMode:
Return values
The new state of the LED display. None
330
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.3.7
Delegate_II_EREC_DT_UINT32_INT64_INT64_UINT32
Description
Table 7- 401 Delegate_II_EREC_DT_UINT32_INT64_INT64_UINT32 - .NET (C#)
Syntax Parameters
delegate void Delegate_II_EREC_DT_UINT32_INT64_INT64_UINT32 ( IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime, UInt32 in_PipId, Int64 in_TimeSinceSameSyncPoint_ns, Int64 in_TimeSinceAnySyncPoint_ns, UInt32 in_SyncPointCount
);
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· UInt32 in_PipId:
The ID of the process image partition (PIP) that triggers this event. 0 for the cycle control point (End of cycle).
· Int64 in_TimeSinceSameSyncPoint_ns:
The virtual time (in nanoseconds) since the last synchronization point of the same process image partition ID was reached.
Or the process time for the time-controlled operating modes (Page 94). · Int64 in_TimeSinceAnySyncPoint_ns:
The virtual time (in nanoseconds) since the last synchronization point of any process image partition ID was reached.
Or the process time for the time-controlled operating modes (Page 94). · UInt32 in_SyncPointCount:
Return values
The number of synchronization points since the last event. If the events are triggered faster than they are received, multiple events are combined into one event. In this case, this value contains the number of cycles since the last event was received.
None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
331
User interfaces (API) 7.8 Data types
7.8.3.8
Delegate_IRRTM
Description
Table 7- 402 Delegate_IRRTM - .NET (C#)
Syntax Parameters
delegate void Delegate_IRRTM( IRemoteRuntimeManager in_Sender,
);
· IRemoteRuntimeManager in_Sender:
Return values
An interface of the remote Runtime Manager that receives this event. None
7.8.3.9
Delegate_II_EREC_DT_SRICC_UINT32_UINT32_UINT32_UINT32
Description
Table 7- 403 Delegate_II_EREC_DT_SRICC_UINT32_UINT32_UINT32_UINT32 - .NET (C#)
Syntax Parameters
delegate void Delegate_II_EREC_DT_SRICC_UINT32_UINT32_UINT32_UINT32(
IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime, EInstanceConfigChanged in_InstanceConfigChanged, UInt32 in_Param1, UInt32 in_Param2, UInt32 in_Param3, UInt32 in_Param4 );
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
Return values
The virtual system time of the virtual controller at the time when this
event was triggered.
EInstanceConfigChanged in_Instance ConfigChanged
UInt32 in_Param1
UInt32 in_Param2
UInt32 in_Param3
UInt32 in_Param4
Hard-
-
-
-
-
wareSoft-
wareChanged
IPChanged The ID of the The new IP The new
The new
interface
subnet mask standard
gateway
None
332
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.3.10
Delegate_II_EREC_DT_SDRI
Description
Table 7- 404 Delegate_II_EREC_DT_SDRI - .NET (C#)
Syntax Parameters
delegate void Delegate_II_EREC_DT_SDRI ( IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime, SDataRecordInfo in_DataRecordInfo
);
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· SDataRecordInfo in_DataRecordInfo:
Return values
The structure SDataRecordInfo contains the following information: The HW identifier to which the CPU wants to write the data record The index of the supplied data record Size of data record The data record
None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
333
User interfaces (API) 7.8 Data types
7.8.3.11
Delegate_II_EREC_DT_SDR
Description
Table 7- 405 Delegate_II_EREC_DT_SDR - .NET (C#)
Syntax Parameters
delegate void Delegate_II_EREC_DT_SDR ( IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime, SDataRecord in_DataRecord
);
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· SDataRecord in_DataRecord:
Return values
The structure SDataRecord contains the following information: The HW identifier to which the CPU wants to write the data record The index of the supplied data record Size of data record The data record
None
334
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.3.12
Delegate_SREC_ST_UINT32_EPPET_UINT32
Description
Table 7- 406 Delegate_SREC_ST_UINT32_EPPET_UINT32 - .NET (C#)
Syntax Parameters
delegate void Delegate_SREC_ST_UINT32 ( IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime, UInt32 in_HardwareIdentifier,
EPullOrPlugEventType in_PullOrPlugEventType, UInt32 in_SequenceNumber );
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· UInt32 in_HardwareIdentifier:
The hardware identifier of the module or submodule which sends the pull/plug event.
· EPullOrPlugEventType in_PullOrPlugEventType:
A value from the list of predefined types of events for S7 modules, see EPullOrPlugEventType (Page 384).
· UInt32 in_SequenceNumber:
PLCSIM Advanced assigns a unique consecutive number to each interrupt event.
According to the PROFINET standard, the sequence number is only 10 bits wide, from 1 to 0x7FF. When the highest number is reached the numbering starts again at 1.
Note
In a real hardware system the IO controller uses the sequence number to check if it has lost a hardware interrupt.
Return values
During the simulation, the sequence number creates the relation between interrupt request and the associated acyclic alarm.
None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
335
User interfaces (API) 7.8 Data types
7.8.3.13
Delegate_SREC_ST_UINT32_UINT32_EPET_UINT32
Description
Table 7- 407 Delegate_SREC_ST_UINT32_UINT32_EPET_UINT32 - Native C++
Syntax Parameters
delegate void Delegate_SREC_ST_UINT32_UINT32_EPET_UINT32( IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime, UInt32 in_HardwareIdentifier
UInt32 in_Channel, EProcessEventType in_ProcessEventType,
UInt32 in_SequenceNumber );
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· UInt32 in_HardwareIdentifier:
The hardware identifier of the module or submodule that sends the process event.
· UInt32 in_Channel:
The channel of the IO module which sends the process event. · EProcessEventType in_ProcessEventType:
A value from the list of predefined types of events for S7 modules, see EProcessEventType (Page 384).
· UInt32 in_SequenceNumber:
PLCSIM Advanced assigns a unique consecutive number to each interrupt event.
According to PROFINET standard the sequence number is 10 bits wide (1 to 7FFH). When the highest number is reached the numbering starts again at 1.
Note
In a real hardware system the IO controller uses the sequence number to check if it has lost a hardware interrupt.
Return values
During the simulation, the sequence number creates the relation between interrupt request and the associated acyclic alarm.
None
336
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.3.14
Delegate_SREC_ST_UINT32
Description
Table 7- 408 Delegate_SREC_ST_UINT32 - .NET (C#)
Syntax Parameters
delegate void Delegate_SREC_ST_UINT32 ( IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime, UInt32 in_HardwareIdentifier
);
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· UInt32 in_HardwareIdentifier:
Return values
The ID of the module which generates the status event, update event or profile event.
None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
337
User interfaces (API) 7.8 Data types
7.8.3.15
Delegate_SREC_ST_UINT32_UINT32
Description
Table 7- 409 Delegate_SREC_ST_UINT32_UINT32 - .NET (C#)
Syntax Parameters
delegate void Delegate_SREC_ST_UINT32 ( IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime, UInt32 in_HardwareIdentifier
UInt32 in_SequenceNumber );
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· UInt32 in_HardwareIdentifier:
The hardware identifier of the module or submodule which sends the diagnostics entry.
· UInt32 in_SequenceNumber:
PLCSIM Advanced assigns a unique consecutive number to each interrupt event.
According to PROFINET standard the sequence number is 10 bits wide (1 to 7FFH). When the highest number is reached the numbering starts again at 1.
Note
In a real hardware system the IO controller uses the sequence number to check if it has lost a hardware interrupt.
Return values
During the simulation, the sequence number creates the relation between interrupt request and the associated acyclic alarm.
None
338
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.3.16
Delegate_SREC_ST_UINT32_ERSFET
Description
Table 7- 410 Delegate_SREC_ST_UINT32_ERSFET - .NET (C#)
Syntax Parameters
delegate void Delegate_SREC_ST_UINT32_ERSFET( IInstance in_Sender, ERuntimeErrorCode in_ErrorCode, DateTime in_DateTime, UInt32 in_HardwareIdentifier,
ERackOrStationFaultType in_EventType );
· IInstance in_Sender:
An interface of the instance that receives this event. · ERuntimeErrorCode in_ErrorCode:
A possible error code. · DateTime in_DateTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· UInt32 in_HardwareIdentifier:
The hardware identifier of the module or submodule which sends the diagnostics entry.
· ERackOrStationFaultType in_EventType:
Return values
A value from the list of predefined RackOrStationFault event types. See ERackOrStationFaultType (Page 387).
None
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
339
User interfaces (API) 7.8 Data types
7.8.4
Definitions and constants
The following identifiers are used in the API:
Table 7- 411 Definitions - Native C++
Identifier DINSTANCE_NAME_MAX_LENGTH
Value 64
DSTORAGE_PATH_MAX_LENGTH
130
DTAG_NAME_MAX_LENGTH
300
DTAG_ARRAY_DIMENSION
6
DCONTROLLER_NAME_MAX_LENGTH
128
DCONTROLLER_SHORT_DESIGNATION_MA X_LENGTH
32
DALARM_NOTIFICATION_MAX_DIAG_EVE NTS
100
DPROCESS_EVENT_NAME_MAX_LENGTH
123
DPROCESS_EVENTS_MAX_ITEMS
256
DMODULE_STATE_OK
0
DMODULE_STATE_ERROR
1
DMODULE_STATE_MAINT_DEMANDED
2
DMODULE_STATE_MAINT_REQUIRED
4
Description
The unique name of an instance must be less than this value.
The maximum path length to the virtual memory card. Including ZERO termination.
The maximum length of the name of a PLC tag. Including ZERO termination.
The maximum number of dimension for a multidimensional field.
The maximum length of the controller name. Including ZERO termination.
The maximum length of the abbreviation of the controller (CPU type). Including ZERO termination.
The maximum number of diagnostic events that are sent in a diagnostic alarm.
The maximum length of the name for the process event. Including NULL termination.
The maximum number of configurable process events.
AlarmNotification: Module status OK
AlarmNotification: Module status faulty
AlarmNotification: Maintenance demanded
AlarmNotification: Maintenance required
Table 7- 412 Constants - .NET (C#)
Identifier RuntimeConstants.InstanceNameLength
Value 64
RuntimeConstants.StoragePathMaxLength
130
RuntimeConstants.TagNameMaxLength
300
RuntimeConstants.TagArrayDimension
6
RuntimeConstants.ControllerNameMaxLength
128
RuntimeConstants.ControllerShortDesignatio
32
nMaxLength
ModuleState.Ok
0
ModuleState.Error
1
ModuleState. MaintenanceDemanded
2
ModuleState. MaintenanceRequired
4
Description
The unique name of an instance must be less than this value.
The maximum path length to the virtual memory card. Including ZERO termination.
The maximum length of the name of a PLC tag. Including ZERO termination.
The maximum number of dimension for a multidimensional field.
The maximum length of the controller name. Including ZERO termination.
The maximum length of the abbreviation of the controller (CPU type). Including ZERO termination.
AlarmNotification: Module status OK
AlarmNotification: Module status faulty
AlarmNotification: Maintenance demanded
AlarmNotification: Maintenance required
340
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.5
Unions (Native C++)
7.8.5.1
UIP
Description
Contains an IPv4 address.
Table 7- 413 UIP - Native C++
Syntax Member
union UIP {
DWORD IP; BYTE IPs[4]; };
· DWORD IP:
The IP address in a single DWORD · BYTE IPs[4]:
Example
The four elements of IP in descending order
Example for an IP address: 192.168.0.1
UIP.IP = 0xC0A80001 UIP.IPs[3] = 192, UIP.IPs[2] = 168, UIP.IPs[1] = 0, UIP.IPs[0] = 1
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
341
User interfaces (API) 7.8 Data types
7.8.5.2
UDataValue
Description
Contains the value of a PLC tag.
Table 7- 414 UDataValue - Native C++
Syntax
union UDataValue {
bool Bool; INT8 Int8; INT16 Int16; INT32 Int32; INT64 Int64; UINT8 UInt8; UINT16 UInt16; UINT32 UInt32; UINT64 UInt64; float Float; double Double; CHAR Char; WCHAR WChar; };
342
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Member
· bool Bool: 1 byte boolean value
· INT8 Int8: 1 byte integer with sign
· INT16 Int16: 2 byte integer with sign
· INT32 Int32: 4 byte integer with sign
· INT64 Int64: 8 byte integer with sign
· UINT8 UInt8: 1 byte integer without sign
· UINT16 UInt16: 2 byte integer without sign
· UINT32 UInt32: 4 byte integer without sign
· UINT64 UInt64: 8 byte integer without sign
· float Float: 4 byte floating-point value
· double Double: 8 byte floating-point value
· CHAR Char: 1 byte value character
· WCHAR WChar: 2 byte value character
7.8.6
Structures
The following structures are available: SDataValue (Page 344) SDVBNI (Page 346) SDataValueByAddress (Page 347) SDataValueByAddressWithCheck (Page 347) SDataValueByName (Page 348) SDataValueByNameWithCheck (Page 348) SConnectionInfo (Page 349)
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
343
User interfaces (API) 7.8 Data types
SInstanceInfo (Page 349) SDimension (Page 350) STagInfo (Page 351) SIP (Page 353) SIPSuite4 (Page 353) SOnSyncPointReachedResult (Page 355) SDataRecordInfo (Page 357) SDataRecord (Page 358) SConfiguredProcessEvents (Page 358) SDiagExtChannelDescription (Page 360) SAutodiscoverData (Page 362)
7.8.6.1
SDataValue
Description
The structure contains the value and type of a PLC tag.
Table 7- 415 SDataValue - Native C++
Syntax Member
struct SDataValue {
UDataValue Value; EPrimitiveDataType Type; };
· UDataValue Value:
The value of the PLC tags · EPrimitiveDataType Type:
Type of PLC tag
344
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Table 7- 416 SDataValue - .NET (C#)
Syntax
struct SDataValue {
bool Bool { get; set; } Int8 Int8 { get; set; } Int16 Int16 { get; set; } Int32 Int32 { get; set; } Int64 Int64 { get; set; } UInt8 UInt8 { get; set; } UInt16 UInt16 { get; set; } UInt32 UInt32 { get; set; } UInt64 UInt64 { get; set; } float Float { get; set; } double Double { get; set; } sbyte Char { get; set; } char WChar { get; set; }
EPrimitiveDataType Type { get; set; } }
User interfaces (API) 7.8 Data types
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
345
User interfaces (API) 7.8 Data types
Member
· bool Bool: 1 byte boolean value
· Int8 Int8: 1 byte integer with sign
· Int16 Int16: 2 byte integer with sign
· Int32 Int32: 4 byte integer with sign
· Int64 Int64: 8 byte integer with sign
· UntT8 UInt8: 1 byte integer without sign
· UInt16 UInt16: 2 byte integer without sign
· UInt32 UInt32: 4 byte integer without sign
· UInt64 UInt64: 8 byte integer without sign
· float Float: 4 byte floating-point value
· double Double: 8 byte floating-point value
· sbyte Char: 1 byte value character
· char WChar: 2 byte value character
· EPrimitiveDataType Type: Type of PLC tag
7.8.6.2
SDVBNI
Description
This structure is for internal use only. Do not change this structure.
Table 7- 417 SDVBNI - Native C++
Syntax
struct SDVBNI
346
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
Table 7- 418 SDVBNI - .NET (C#)
Syntax
struct SDVBNI
7.8.6.3
SDataValueByAddress
Description
This structure represents a PLC tag that is accessed via its address.
Table 7- 419 SDataValueByAddress - Native C++
Syntax
struct SDataValueByAddress {
UINT32 Offset; UINT8 Bit; SDataValue DataValue; ERuntimeErrorCode ErrorCode; };
Table 7- 420 SDataValueByAddress - .NET (C#)
Syntax
struct SDataValueByAddress {
UInt32 Offset; UInt8 Bit; SDataValue DataValue; ERuntimeErrorCode ErrorCode; }
7.8.6.4
SDataValueByAddressWithCheck
Description
This structure represents a PLC tag that is accessed via its address.
Table 7- 421 SDataValueByAddressWithCheck - Native C++
Syntax
struct SDataValueByAddressWithCheck {
UINT32 Offset; UINT8 Bit; SDataValue DataValue; ERuntimeErrorCode ErrorCode; bool ValueHasChanged; };
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
347
User interfaces (API) 7.8 Data types
Table 7- 422 SDataValueByAddressWithCheck - .NET (C#)
Syntax
struct SDataValueByAddressWithCheck {
UInt32 Offset; UInt8 Bit; SDataValue DataValue; ERuntimeErrorCode ErrorCode; bool ValueHasChanged; }
7.8.6.5
SDataValueByName
Description
This structure represents a PLC tag that is called by its name.
Table 7- 423 SDataValueByName - Native C++
Syntax
struct SDataValueByName {
WCHAR Name[DTAG_NAME_MAX_LENGTH]; SDataValue DataValue; ERuntimeErrorCode ErrorCode; SDVBNI Internal; };
Table 7- 424 SDataValueByName - .NET (C#)
Syntax
struct SDataValueByName {
String Name; SDataValue DataValue; ERuntimeErrorCode ErrorCode; SDVBNI Internal; }
7.8.6.6
SDataValueByNameWithCheck
Description
This structure represents a PLC tag that is called by its name.
Table 7- 425 SDataValueByNameWithCheck - Native C++
Syntax
struct SDataValueByNameWithCheck {
WCHAR Name[DTAG_NAME_MAX_LENGTH]; SDataValue DataValue; ERuntimeErrorCode ErrorCode; SDVBNI Internal; bool ValueHasChanged; };
348
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
Table 7- 426 SDataValueByNameWithCheck - .NET (C#)
Syntax
struct SDataValueByNameWithCheck {
String Name; SDataValue DataValue; ERuntimeErrorCode ErrorCode; SDVBNI Internal; bool ValueHasChanged; }
7.8.6.7
SConnectionInfo
Description
This structure contains the IP address and port of a TCP/IP connection.
Table 7- 427 SConnectionInfo - Native C++
Syntax
struct SConnectionInfo {
UIP IP; UINT16 Port; };
Table 7- 428 SConnectionInfo - .NET (C#)
Syntax
struct SConnectionInfo {
SIP IP; UInt16 Port; }
7.8.6.8
SInstanceInfo
Description
This structure contains an IPv4 address.
Table 7- 429 SInstanceInfo - Native C++
Syntax Member
struct SInstanceInfo {
INT32 ID; WCHAR Name[DINSTANCE_NAME_MAX_LENGTH]; };
· INT32 ID:
The ID of the instance · WCHAR Name[DINSTANCE_NAME_MAX_LENGTH]:
The name of the instance
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
349
User interfaces (API) 7.8 Data types
Table 7- 430 SInstanceInfo - .NET (C#)
Syntax Member
struct SInstanceInfo {
Int32 ID; String Name; }
· Int32 ID:
The ID of the instance · String name:
The name of the instance
7.8.6.9
SDimension
Description
This structure contains information about the dimension of a field.
Table 7- 431 SDimension - Native C++
Syntax
struct SDimension {
INT32 StartIndex; UINT32 Count; };
Table 7- 432 SDimension - .NET (C#)
Syntax
struct SDimension {
Int32 StartIndex; UInt32 Count; }
350
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.6.10
STagInfo
Description
This structure contains information about a PLC tag.
Table 7- 433 STagInfo - Native C++
Syntax Member
struct STagInfo {
WCHAR Name[DTAG_NAME_MAX_LENGTH]; EArea Area; EDataType DataType; EPrimitiveDataType PrimitiveDataType; UINT16 Size; UINT32 Offset; UINT8 Bit; UINT8 DimensionCount; UINT32 Index; UINT32 ParentIndex; SDimension Dimension[DTAG_ARRAY_DIMENSION]; };
· WCHAR Name[DTAG_NAME_MAX_LENGTH]:
The name of the tag · EArea area:
The CPU area where the tag is located. · EDataType DataType:
The CPU data type of the tag · EPrimitiveDataType PrimitiveDataType:
The primitive data type of the tag · UINT16 size:
The size of the tag in bytes · UINT32 offset:
The byte offset of the tag if it is not located in a data block. · UINT8 bit:
The bit offset of the tag if it is not located in a data block. · UINT8 DimensionCount:
The number of dimensions of the array. 0 if the tag is not a field. · UINT32 index:
The index of the tag · UINT32 ParentIndex:
If this tag is embedded in another tag (for example, an element of a structure), this value then displays the index of the parent tag. The value is 0 if the tag has no parent tag.
· SDimension Dimension[DTAG_ARRAY_DIMENSION]:
Information about each dimension of the field
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
351
User interfaces (API) 7.8 Data types
Table 7- 434 STagInfo - .NET (C#)
Syntax Member
public struct STagInfo {
String Name; EArea Area; EDataType DataType; EPrimitiveDataType PrimitiveDataType; UInt16 Size; UInt32 Offset; UInt8 Bit; UInt32 Index; UInt32 ParentIndex; SDimension[] Dimension; }
· String name:
The name of the tag · EArea area:
The CPU area where the tag is located. · EDataType DataType:
The CPU data type of the tag · EPrimitiveDataType PrimitiveDataType:
The primitive data type of the tag · UInt16 size:
The size of the tag in bytes. · UInt32 offset:
The byte offset of the tag if it is not located in a data block. · UInt8 bit:
The bit offset of the tag if it is not located in a data block. · UInt32 index:
The index of the tag · UInt32 ParentIndex:
If this tag is embedded in another tag (for example, an element of a structure), this value then displays the index of the parent tag. The value is 0 if the tag has no parent tag.
· SDimension[] Dimension:
Information about each dimension of the field. Empty, if the tag is not an array.
352
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.6.11
SIP
Description
This structure contains an IPv4 address.
Table 7- 435 SIP - .NET (C#)
Syntax Member
struct SIP {
byte[] IPArray { get; set; } UInt32 IPDWord { get; set; } string IPString { get; set; } }
· UInt32 IPDWord:
The IP address in a single DWORD · byte[] IPArray:
The four elements of IP in descending order · string IPString:
Example
The IPv4 address as a string
Example for an IP address: 192.168.0.1
SIP.IPDWord = 0xC0A80001 SIP.IPArray[3] = 192, SIP.IPArray[2] = 168, SIP.IPArray[1] = 0, SIP.IPArray[0] = 1 SIP.IPString = "192.168.0.1"
7.8.6.12
SIPSuite4
Description
This structure contains an IPv4 suite.
Table 7- 436 SIPSuite4 - Native C++
Syntax Member
struct SIPSuite4 {
UIP IPAddress; UIP SubnetMask; UIP DefaultGateway; };
· UIP IPAddress:
The IP address · UIP SubnetMask:
The subnet mask · UIP DefaultGateway:
The standard gateway
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
353
User interfaces (API) 7.8 Data types
Table 7- 437 SIPSuite4 - .NET (C#)
Syntax Member
struct SIPSuite4 {
SIP IPAddress; SIP SubnetMask; SIP DefaultGateway; }
· SIP IPAddress:
The IP address · SIP SubnetMask:
The subnet mask · SIP DefaultGateway:
The standard gateway
354
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.6.13
SOnSyncPointReachedResult
Description
This structure contains the results of the OnSyncPointReached event.
Table 7- 438 SOnSyncPointReachedResult - Native C++
Syntax Member
struct SOnSyncPointReachedResult {
ERuntimeErrorCode ErrorCode; SYSTEMTIME SystemTime; UINT32 PipId; INT64 TimeSinceSameSyncPoint_ns; INT64 TimeSinceAnySyncPoint_ns; UINT32 SyncPointCount; };
· ERuntimeErrorCode ErrorCode:
SREC_TIMEOUT, if no event was triggered during the defined time interval.
SREC_WARNING_INVALID_CALL, if no function RegisterOnSyncPointReachedEvent was called before.
See ERuntimeErrorCode (Page 364). · SYSTEMTIME SystemTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· UINT32 PipId:
The ID of the process image partition (PIP) that triggers this event.
0 for the cycle control point (End of cycle). · INT64 TimeSinceSameSyncPoint_ns:
The virtual time (in nanoseconds) since the last synchronization point of the same process image partition ID was reached.
For the time-controlled operating modes (Page 94): The runtime since the last call of the StartProcessing() function.
· INT64 TimeSinceAnySyncPoint_ns:
The virtual time (in nanoseconds) since the last synchronization point of any process image partition ID was reached.
For the time-controlled operating modes (Page 94): The runtime since the last call of the StartProcessing() function.
· UINT32 SyncPointCount:
The number of synchronization points since the last event. If the events are triggered faster than they are received, multiple events are combined into one event. In this case, this value contains the number of cycles since the last event was received.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
355
User interfaces (API) 7.8 Data types
Table 7- 439 SOnSyncPointReachedResult - .NET (C#)
Syntax Member
struct SOnSyncPointReachedResult {
ERuntimeErrorCode ErrorCode; DateTime SystemTime; UInt32 PipId; Int64 TimeSinceSameSyncPoint_ns; Int64 TimeSinceAnySyncPoint_ns; UInt32 SyncPointCount; }
· ERuntimeErrorCode ErrorCode:
ERuntimeErrorCode.Timeout, if no event was triggered during the defined time interval.
WarningInvalidCall, if no function RegisterOnSyncPointReachedEvent was called before.
See ERuntimeErrorCode. · DateTime DateTime:
The virtual system time of the virtual controller at the time when this event was triggered.
· UInt32 PipId:
The ID of the process image partition (PIP) that triggers this event.
0 for the cycle control point (End of cycle). · Int64 TimeSinceSameSyncPoint_ns:
The virtual time (in nanoseconds) since the last synchronization point of the same process image partition ID was reached.
For the time-controlled operating modes: The runtime since the last call of the StartProcessing() function.
· Int64 TimeSinceAnySyncPoint_ns:
The virtual time (in nanoseconds) since the last synchronization point of any process image partition ID was reached.
For the time-controlled operating modes: The runtime since the last call of the StartProcessing() function.
· UInt32 SyncPointCount:
The number of synchronization points since the last event. If the events are triggered faster than they are received, multiple events are combined into one event. In this case, this value contains the number of cycles since the last event was received.
356
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.6.14
SDataRecordInfo
Description
This structure contains read/write data record information.
Table 7- 440 SDataRecordInfo - Native C++
Syntax Member
struct SDataRecordInfo {
UINT32 HardwareId; UINT32 RecordIdx; UINT32 DataSize; };
· UINT32 HardwareId:
The ID of the hardware module (hardware identifier) · UINT32 RecordIdx:
The data record number · UINT32 DataSize:
The data record size
Table 7- 441 SDataRecordInfo - .NET (C#)
Syntax Member
struct SDataRecordInfo {
UInt32 HardwareId; UInt32 RecordIdx; UInt32 DataSize; }
· UInt32 ID:
The ID of the hardware module · UInt32 RecordIdx:
The data record number · UInt32 DataSize:
The data record size
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
357
User interfaces (API) 7.8 Data types
7.8.6.15
SDataRecord
Description
This structure contains read/write data record information and data records.
Table 7- 442 SDataRecord - .NET (C#)
Syntax Member
struct SDataRecord { UInt32 HardwareId; byte[] Data }
· SDataRecordInfo Info:
The data record information, see SDataRecordInfo (Page 357) · byte[] Data:
The array length
7.8.6.16
SConfiguredProcessEvents
Description
This structure contains information about the configured process events.
Table 7- 443 SConfiguredProcessEvents - Native C++
Syntax Member
struct SConfiguredProcessEvents {
UINT16 HardwareIdentifier; UINT16 Channel; EProcessEventType ProcessEventType; WCHAR Name[DPROCESS_EVENT_NAME_MAX_LENGTH]; };
· UINT16 HardwareIdentifier:
The HW identifier · UINT16 Channel:
The channel of the IO module which generates the process event. · EProcessEventType ProcessEventType:
The type of the configured process event · WCHAR Name[DPROCESS_EVENT_NAME_MAX_LENGTH]:
The name of the process event
358
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
Table 7- 444 SConfiguredProcessEvents - .NET (C#)
Syntax Member
public struct SConfiguredProcessEvents {
ushort HardwareIdentifier; ushort Channel; EProcessEventType ProcessEventType; string Name; }
· ushort HardwareIdentifier:
The HW identifier · ushort Channel:
The channel of the IO module which generates the process event. · EProcessEventType ProcessEventType:
The type of the configured process event · String name:
The name of the process event
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
359
User interfaces (API) 7.8 Data types
7.8.6.17
SDiagExtChannelDescription
Description
This structure contains read/write data record information and data records.
Table 7- 445 SDiagExtChannelDescription - Native C++
Syntax Member
struct SDiagExtChannelDescription {
UINT16 ChannelNumber; UINT16 ErrorType; UINT16 ExtErrorType; EDiagSeverity Severity; EDiagProperty Direction; };
· UINT16 ChannelNumber:
If the interrupt relates to a specific channel of the IO device (e.g. short circuit), this parameter must contain the number of the faulty channel.
If the interrupt was generated by a module or submodule, the number of the channel must be set to 0x8000.
· UINT16 ErrorType:
The parameter defines error types according to PROFINET standard, see "Error types" section.
· EDiagSeverity Severity:
The value of the severity for the diagnostics, see EDiagSeverity (Page 386). · EDiagProperty Direction:
The value for the incoming/outgoing information, see EDiagProperty (Page 385).
· UINT16 ExtErrorType:
This parameter provides the option of defining more details for the diagnostic interrupt. This is helpful in combination with PDEV error types which are generated for CPU-internal modules. Should be 0 by default.
360
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Error types
User interfaces (API) 7.8 Data types
Table 7- 446 SDiagExtChannelDescription - .NET (C#)
Syntax Member
struct SDiagExtChannelDescription {
UInt16 ChannelNumber; UInt16 ErrorType; UInt16 ExtErrorType; EDiagSeverity Severity; EDiagProperty Direction; };
· UInt16 ChannelNumber:
If the interrupt relates to a specific channel of the IO device (e.g. short circuit), this parameter must contain the number of the faulty channel.
If the interrupt was generated by a module or submodule, the number of the channel must be set to 0x8000.
· UInt16 ErrorType:
The parameter defines error types according to PROFINET standard, see "Error types" section.
· EDiagSeverity Severity:
The value of the severity for the diagnostics, see EDiagSeverity (Page 386). · EDiagProperty Direction:
The value for the incoming/outgoing information, see EDiagProperty (Page 385).
· UInt16 ExtErrorType:
This parameter provides the option of defining more details for the diagnostic interrupt. This is helpful in combination with PDEV error types which are generated for CPU-internal modules. Should be 0 by default.
The following table contains important error types (ErrorType) according to PROFINET standard:
Table 7- 447 Error types according to PROFINET standard
Value 0x0000 0x0001 0x0002 0x0003 0x0004 0x0005 0x0006 0x0007 0x0008: 0x0009
Meaning Reserved / unknown error Short-circuit Undervoltage Overvoltage Overload Overtemperature Wire break High limit violated Low limit violated Error
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
361
User interfaces (API) 7.8 Data types
The following table contains error types ExtChannelErrorType for ChannelErrorType "Remote mismatch":
Table 7- 448 ExtChannelErrType error types
Value 0x0000 0x0001 to 0x7FFF 0x8000 0x8001 0x8002 0x8003
Meaning Reserved Manufacturer ID Peer name of station mismatch Peer name of port mismatch Peer RT_CLASS_3 mismatch Peer MAU Type mismatch
Use Interrupt/diagnostics Interrupt/diagnostics Interrupt/diagnostics Interrupt/diagnostics Interrupt/diagnostics
7.8.6.18
SAutodiscoverData
Description
This structure contains the IP address, the port, the Runtime version, and the name of the computer that has a Runtime Manager ready to make a remote connection.
Table 7- 449 SAutodiscoverData - Native C++
Syntax
public struct SAutodiscoverData {
UIP IP; UINT16 Port; DWORD RuntimeVersion; WCHAR ComputerName[MAX_COMPUTERNAME_LENGTH + 1]; };
Table 7- 450 SAutodiscoverData - .NET (C#)
Syntax
public struct SAutodiscoverData {
public SIP IP; public ushort Port; public uint RuntimeVersion; public string ComputerName; }
7.8.7
Enumerations
The following enumerations are available: ERuntimeErrorCode (Page 364) EArea (Page 369) EOperatingState (Page 369) EOperatingMode (Page 370)
362
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
See also
ECPUType (Page 371) ECommunicationInterface (Page 373) ELEDType (Page 373) ELEDMode (Page 374) EPrimitiveDataType (Page 375) EDataType (Page 377) ETagListDetails (Page 382) ERuntimeConfigChanged (Page 383) EInstanceConfigChanged (Page 383) EPullOrPlugEventType (Page 384) EProcessEventType (Page 384) EDirection (Page 385) EDiagProperty (Page 385) EDiagSeverity (Page 386) ERackOrStationFaultType (Page 387) ECycleTimeMonitoringMode (Page 387) EAutodiscoverType (Page 388)
Global functions (Native C++) (Page 122)
User interfaces (API) 7.8 Data types
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
363
User interfaces (API) 7.8 Data types
7.8.7.1
ERuntimeErrorCode
Description
This enumeration contains all error codes that are used by the Simulation Runtime API. Most API functions return one of these error codes. If the function is successful, the return value is always SREC_OK / OK. Errors are returned with negative values, warnings with positive values.
Table 7- 451 ERuntimeErrorCode - Native C++
Syntax
enum ERuntimeErrorCode {
SREC_OK = 0, SREC_INVALID_ERROR_CODE = -1, SREC_NOT_IMPLEMENTED = -2, SREC_INDEX_OUT_OF_RANGE = -3, SREC_DOES_NOT_EXIST = -4, SREC_ALREADY_EXISTS = -5, SREC_UNKNOWN_MESSAGE_TYPE = -6, SREC_INVALID_MESSAGE_ID = -7, SREC_WRONG_ARGUMENT = -8, SREC_WRONG_PIPE = -9, SREC_CONNECTION_ERROR = -10, SREC_TIMEOUT = -11, SREC_MESSAGE_CORRUPT = -12, SREC_WRONG_VERSION = -13, SREC_INSTANCE_NOT_RUNNING = -14, SREC_INTERFACE_REMOVED = -15, SREC_SHARED_MEMORY_NOT_INITIALIZED = -16, SREC_API_NOT_INITIALIZED = -17, SREC_WARNING_ALREADY_EXISTS = 18, SREC_NOT_SUPPORTED = -19, SREC_WARNING_INVALID_CALL = 20, SREC_ERROR_LOADING_DLL = -21, SREC_SIGNAL_NAME_DOES_NOT_EXIST = -22, SREC_SIGNAL_TYPE_MISMATCH = -23, SREC_SIGNAL_CONFIGURATION_ERROR = -24, SREC_NO_SIGNAL_CONFIGURATION_LOADED = -25, SREC_CONFIGURED_CONNECTION_NOT_FOUND = -26, SREC_CONFIGURED_DEVICE_NOT_FOUND = -27, SREC_INVALID_CONFIGURATION = -28, SREC_TYPE_MISMATCH = -29, SREC_LICENSE_NOT_FOUND = -30, SREC_NO_LICENSE_AVAILABLE = -31, SREC_WRONG_COMMUNICATION_INTERFACE = -32, SREC_LIMIT_REACHED = -33, SREC_NO_STORAGE_PATH_SET = -34, SREC_STORAGE_PATH_ALREADY_IN_USE = -35,
364
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
SREC_MESSAGE_INCOMPLETE = -36, SREC_ARCHIVE_STORAGE_NOT_CREATED = -37, SREC_RETRIEVE_STORAGE_FAILURE = -38 SREC_INVALID_OPERATING_STATE = -39, SREC_INVALID_ARCHIVE_PATH = -40, SREC_DELETE_EXISTING_STORAGE_FAILED = -41, SREC_CREATE_DIRECTORIES_FAILED = -42, SREC_NOT_ENOUGH_MEMORY = -43, SREC_WARNING_TRIAL_MODE_ACTIVE = 44, SREC_NOT_RUNNING = -45, SREC_NOT_EMPTY = -46, SREC_NOT_UP_TO_DATE = -47, SREC_COMMUNICATION_INTERFACE_NOT_AVAILABLE = -48, SREC_WARNING_NOT_COMPLETE = 49, SREC_VIRTUAL_SWITCH_MISCONFIGURED = -50, SREC_RUNTIME_NOT_AVAILABLE = -51, SREC_IS_EMPTY = -52, SREC_WRONG_MODULE_STATE = -53, SREC_WRONG_MODULE_TYPE = -54, SREC_NOT_SUPPORTED_BY_MODULE = -55, SREC_INTERNAL_ERROR = -56, SREC_STORAGE_TRANSFER_ERROR = -57, SREC_ANOTHER_VARIANT_OF_PLCSIM_RUNNING = -58, SREC_ACCESS_DENIED = -59, SREC_NOT_ALLOWED_DURING_DOWNLOAD = -60 SREC_AUTODISCOVER_ALREADY_RUNNING = -61, SREC_INVALID_STORAGE = -62 SREC_WARNING_UNSUPPORTED_PCAP_DRIVER = 63, SREC_WARNING_RUNNING_ON_TIA_PORTAL_TEST_SUITE = 64
};
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
365
Table 7- 452 ERuntimeErrorCode - .NET (C#)
Syntax
enum ERuntimeErrorCode {
OK = 0, InvalidErrorCode = -1, NotImplemented = -2, IndexOutOfRange = -3, DoesNotExist = -4, AlreadyExists = -5, UnknownMessageType = -6, InvalidMessageId = -7, WrongArgument = -8, WrongPipe = -9, ConnectionError = -10, Timeout = -11, MessageCorrupt = -12, WrongVersion = -13, InstanceNotRunning = -14, InterfaceRemoved = -15, SharedMemoryNotInitialized = -16, ApiNotInitialized = -17, WarningAlreadyExists = 18, NotSupported = -19, WarningInvalidCall = 20, ErrorLoadingDll = -21, SignalNameDoesNotExist = -22, SignalTypeMismatch = -23, SignalConfigurationError = -24, NoSignalConfigurationLoaded = -25, ConfiguredConnectionNotFound = -26, ConfiguredDeviceNotFound = -27, InvalidConfiguration = -28, TypeMismatch = -29, LicenseNotFound = -30, NoLicenseAvailable = -31, WrongCommunicationInterface = -32, LimitReached = -33, NoStartupPathSet = -34, StartupPathAlreadyInUse = -35, MessageIncomplete = -36, ArchiveStorageNotCreated = -37, RetrieveStorageFailure = -38, InvalidOperatingState = -39, InvalidArchivePath = -40, DeleteExistingStorageFailed = -41, CreateDirectoriesFailed = -42, NotEnoughMemory = -43, WarningTrialModeActive = 44,
User interfaces (API) 7.8 Data types
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
367
User interfaces (API) 7.8 Data types
NotRunning = -45, NotEmpty = -46, NotUpToDate = -47, CommunicationInterfaceNotAvailable = -48, WarningNotComplete = 49, RuntimeNotAvailable = -51, IsEmpty = -52, WrongModuleState = -53, WrongModuleType = -54, NotSupportedByModule = -55, InternalError = -56, StorageTransferError = -57, AnotherVariantOfPlcsimRunning = -58, AccessDenied = -59, NotAllowedDuringDownload = -60, AutodiscoverAlreadyRunning = -61, InvalidStorage = -62, WarningUnsupportedPcapDriver = 63, WarningRunningOnTiaPortalTestSuite = 64
}
368
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.7.2
EArea
Description
This enumeration contains all PLC areas that contain the available PLC tags.
Table 7- 453 EArea - Native C++
Syntax
enum EArea {
SRA_INVALID_AREA = 0, SRA_INPUT = 1, SRA_MARKER = 2, SRA_OUTPUT = 3, SRA_COUNTER = 4, SRA_TIMER = 5, SRA_DATABLOCK = 6,
SRA_ENUMERATION_SIZE = 7 };
Table 7- 454 EArea - .NET (C#)
Syntax
public enum EArea {
InvalidArea = 0, Input = 1, Marker = 2, Output = 3, Counter = 4, Timer = 5, DataBlock = 6, }
7.8.7.3
EOperatingState
Description
This enumeration contains all the operating states of a virtual controller.
Table 7- 455 EOperatingState - Native C++
Syntax
enum EOperatingState {
SROS_INVALID_OPERATING_STATE = 0, SROS_OFF = 1, SROS_BOOTING = 2, SROS_STOP = 3, SROS_STARTUP = 4, SROS_RUN = 5, SROS_FREEZE = 6, SROS_SHUTTING_DOWN = 7, SROS_HOLD = 8,
SROS_ENUMERATION_SIZE = 9 };
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
369
User interfaces (API) 7.8 Data types
Table 7- 456 EOperatingState - .NET (C#)
Syntax
enum EOperatingState {
InvalidOperatingState = 0, Off = 1, Booting = 2, Stop = 3, Startup = 4, Run = 5, Freeze = 6, ShuttingDown = 7, Hold = 8 }
7.8.7.4
EOperatingMode
Description
This enumeration contains all the operating modes of a virtual controller.
Table 7- 457 EOperatingMode - Native C++
Syntax
enum EOperatingMode {
SROM_DEFAULT = 0, SROM_SINGLE_STEP_C = 1, SROM_SINGLE_STEP_CT = 2, SROM_TIMESPAN_SYNCHNRONIZED_C = 3, SROM_SINGLE_STEP_P = 4, SROM_TIMESPAN_SYNCHNRONIZED_P = 5, SROM_SINGLE_STEP_CP = 6, SROM_SINGLE_STEP_CPT = 7, SROM_TIMESPAN_SYNCHNRONIZED_CP = 8 };
Table 7- 458 EOperatingMode - .NET (C#)
Syntax
public enum EOperatingMode {
Default = 0, SingleStep_C = 1, SingleStep_CT = 2, TimespanSynchronized_C = 3, SingleStep_P = 4, TimespanSynchronized_P = 5, SingleStep_CP = 6, SingleStep_CPT = 7, TimespanSynchronized_CP = 8 }
370
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.7.5
ECPUType
Description
This enumeration contains all CPU types that can be loaded in a virtual controller.
Table 7- 459 ECPUType - Native C++
Syntax
enum ECPUType {
SRCT_1500_Unspecified = 0x000005DC, SRCT_1511 = 0x000005E7, SRCT_1511v2 = 0x010005E7,
SRCT_1511v3 = 0x020005E7, SRCT_1513 = 0x000005E9, SRCT_1513v2 = 0x010005E9, SRCT_1513v3 = 0x020005E9 SRCT_1515 = 0x000005EB, SRCT_1515v2 = 0x010005EB, SRCT_1516 = 0x000005EC, SRCT_1516v2 = 0x010005EC, SRCT_1517 = 0x000005ED, SRCT_1518 = 0x000005EE, SRCT_1511C = 0x000405E7, SRCT_1511Cv2 = 0x010405E7, SRCT_1512C = 0x000405E8, SRCT_1512Cv2 = 0x010405E8, SRCT_1511F = 0x000105E7, SRCT_1511Fv2 = 0x010105E7, SRCT_1511Fv3 = 0x020105E7, SRCT_1513F = 0x000105E9, SRCT_1513Fv2 = 0x010105E9, SRCT_1513Fv3 = 0x020105E9, SRCT_1515F = 0x000105EB, SRCT_1515Fv2 = 0x010105EB, SRCT_1516F = 0x000105EC, SRCT_1516Fv2 = 0x010105EC, SRCT_1517F = 0x000105ED, SRCT_1518F = 0x000105EE, SRCT_1511T = 0x000805E7, SRCT_1515T = 0x000805EB, SRCT_1516T = 0x000805EC, SRCT_1517T = 0x000805ED, SRCT_1511TF = 0x000905E7, SRCT_1515TF = 0x000905EB, SRCT_1516TF = 0x000905EC, SRCT_1517TF = 0x000905ED, SRCT_1518ODK = 0x001005EE, SRCT_1518FODK = 0x001105EE, SRCT_1518MFP = 0x004005EE,
SRCT_1518FMFP = 0x004105EE, SRCT_ET200SP_Unspecified = 0x000205DC, SRCT_1510SP = 0x000205E6, SRCT_1510SPv2 = 0x010205E6, SRCT_1512SP = 0x000205E8, SRCT_1512SPv2 = 0x010205E8, SRCT_1510SPF = 0x000305E6, SRCT_1510SPFv2 = 0x010305E6, SRCT_1512SPF = 0x000305E8, SRCT_1512SPFv2 = 0x010305E8 }
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
371
User interfaces (API) 7.8 Data types
Table 7- 460 ECPUType - .NET (C#)
Syntax
enum ECPUType {
CPU1500_Unspecified = 0x000005DC, CPU1511 = 0x000005E7, CPU1511v2 = 0x010005E7, CPU1513 = 0x000005E9, CPU1513v2 = 0x010005E9, CPU1511v3 = 0x020005E7, CPU1515 = 0x000005EB, CPU1515v2 = 0x010005EB, CPU1513v3 = 0x020005E9, CPU1516 = 0x000005EC, CPU1516v2 = 0x010005EC, CPU1517 = 0x000005ED, CPU1518 = 0x000005EE, CPU1511C = 0x000405E7, CPU1511Cv2 = 0x010405E7, CPU1512C = 0x000405E8, CPU1512Cv2 = 0x010405E8, CPU1511F = 0x000105E7, CPU1511Fv2 = 0x010105E7, CPU1511Fv3 = 0x020105E7, CPU1513F = 0x000105E9, CPU1513Fv2 = 0x010105E9, CPU1513Fv3 = 0x020105E9, CPU1515F = 0x000105EB, CPU1515Fv2 = 0x010105EB, CPU1516F = 0x000105EC, CPU1516Fv2 = 0x010105EC, CPU1517F = 0x000105ED, CPU1518F = 0x000105EE, CPU1511T = 0x000805E7, CPU1515T = 0x000805EB, CPU1516T = 0x000805EC, CPU1517T = 0x000805ED, CPU1511TF = 0x000905E7, CPU1515TF = 0x000905EB, CPU1516TF = 0x000905EC, CPU1517TF = 0x000905ED, CPU1518ODK = 0x001005EE, CPU1518FODK = 0x001105EE, CPU1518MFP = 0x004005EE, CPU1518FMFP = 0x004105EE, CPUET200SP_Unspecified = 0x000205DC, CPU1510SP = 0x000205E6, CPU1510SPv2 = 0x010205E6, CPU1512SP = 0x000205E8, CPU1512SPv2 = 0x010205E8, CPU1510SPF = 0x000305E6, CPU1510SPFv2 = 0x010305E6, CPU1512SPF = 0x000305E8, CPU1512SPFv2 = 0x010305E8 }
372
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.7.6
ECommunicationInterface
Description
This enumeration contains the available communication interfaces of a virtual controller.
Table 7- 461 ECommunicationInterface - Native C++
Syntax
enum ECommunicationInterface {
SRCI_NONE = 0, SRCI_SOFTBUS = 1, SRCI_TCPIP = 2, SRCI_ENUMERATION_SIZE = 3 };
Table 7- 462 ECommunicationInterface - .NET (C#)
Syntax
enum ECommunicationInterface {
None = 0, Softbus = 1, TCPIP = 2, }
7.8.7.7
ELEDType
Description
This list includes all types of LEDs of a virtual controller.
Table 7- 463 ELEDType - Native C++
Syntax
enum ELEDType {
SRLT_STOP = 0, SRLT_RUN = 1, SRLT_ERROR = 2, SRLT_MAINT = 3, SRLT_REDUND = 4, SRLT_FORCE = 5, SRLT_BUSF1 = 6, SRLT_BUSF2 = 7, SRLT_BUSF3 = 8, SRLT_BUSF4 = 9,
SRLT_ENUMERATION_SIZE = 10 };
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
373
User interfaces (API) 7.8 Data types
Table 7- 464 ELEDType - .NET (C#)
Syntax
enum ELEDType {
Stop = 0, Run = 1, Error = 2 Maint = 3, Redund = 4, Force = 5, Busf1 = 6, Busf2 = 7, Busf3 = 8, Busf4 = 9 }
7.8.7.8
ELEDMode
Description
This list contains all the LED states of a virtual controller.
Table 7- 465 ELEDMode - Native C++
Syntax
enum ELEDMode {
SRLM_OFF = 0, SRLM_ON = 1, SRLM_FLASH_FAST = 2, SRLM_FLASH_SLOW = 3, SRLM_INVALID = 4 };
Table 7- 466 ELEDMode - .NET (C#)
Syntax
enum ELEDMode {
Off = 0, On = 1, FlashFast = 2, FlashSlow = 3, Invalid = 4 }
374
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.7.9
EPrimitiveDataType
Description
This list contains all the primitive data types that are used by the I/O access functions.
Table 7- 467 EPrimitiveDataType - Native C++
Syntax
enum EPrimitiveDataType {
SRPDT_UNSPECIFIC = 0, SRPDT_STRUCT = 1, SRPDT_BOOL = 2, SRPDT_INT8 = 3, SRPDT_INT16 = 4, SRPDT_INT32 = 5, SRPDT_INT64 = 6, SRPDT_UINT8 = 7, SRPDT_UINT16 = 8, SRPDT_UINT32 = 9, SRPDT_UINT64 = 10, SRPDT_FLOAT = 11, SRPDT_DOUBLE = 12, SRPDT_CHAR = 13, SRPDT_WCHAR = 14 };
Table 7- 468 EPrimitiveDataType - .NET (C#)
Syntax
enum EPrimitiveDataType {
Unspecific = 0, Struct = 1, Bool = 2, Int8 = 3, Int16 = 4, Int32 = 5, Int64 = 6, UInt8 = 7, UInt16 = 8, UInt32 = 9, UInt64 = 10, Float = 11, Double = 12, Char = 13, WChar = 14 }
Compatible primitive data types
The following tables shows the primitive data types of the user interface (API) and the data types of the PLCSIM Advanced instance that are configured in the stored tag list. The data types that can be used as compatible are marked with "X".
Table 7- 469 Compatible primitive data types - Reading
API Bool
PLCSIM Advanced instance
INT
UINT
Float Dou- Char WChar
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
375
User interfaces (API) 7.8 Data types
8
16
32
64
8
16
32
64
ble
Bool
X
INT8
X
INT16
X
X
X
INT32
X
X
X
X
X
INT64
X
X
X
X
X
X
X
UINT8
X
UINT16
X
X
UINT32
X
X
X
UINT64
X
X
X
X
Float
X
Double
X
Char
X
WChar
X
Table 7- 470 Compatible primitive data types - Write
API
Bool
8
Bool
X
INT8
X
INT16
INT32
INT64
UINT8
UINT16
UINT32
UINT64
Float
Double
Char
WChar
INT
16
32
X
X
X
X
X
X
X
X
PLCSIM Advanced instance
UINT
64
8
16
32
64
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
Float Dou- Char WChar ble
X X X X
376
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
7.8.7.10
EDataType
Description
This enumeration contains all the PLC data types (STEP 7).
Table 7- 471 EDataType - Native C++
Syntax
enum EDataType {
SRDT_UNKNOWN = 0, SRDT_BOOL = 1,
SRDT_BYTE = 2, SRDT_CHAR = 3, SRDT_WORD = 4, SRDT_INT = 5, SRDT_DWORD = 6, SRDT_DINT = 7, SRDT_REAL = 8, SRDT_DATE = 9, SRDT_TIME_OF_DAY = 10, SRDT_TIME = 11, SRDT_S5TIME = 12, SRDT_DATE_AND_TIME = 14, SRDT_STRUCT = 17, SRDT_STRING = 19, SRDT_COUNTER = 28, SRDT_TIMER = 29, SRDT_IEC_Counter = 30, SRDT_IEC_Timer = 31, SRDT_LREAL = 48, SRDT_ULINT = 49, SRDT_LINT = 50, SRDT_LWORD = 51, SRDT_USINT = 52, SRDT_UINT = 53, SRDT_UDINT = 54, SRDT_SINT = 55, SRDT_WCHAR = 61, SRDT_WSTRING = 62, SRDT_LTIME = 64, SRDT_LTIME_OF_DAY = 65, SRDT_LDT = 66, SRDT_DTL = 67, SRDT_IEC_LTimer = 68, SRDT_IEC_SCounter = 69, SRDT_IEC_DCounter = 70, SRDT_IEC_LCounter = 71, SRDT_IEC_UCounter = 72, SRDT_IEC_USCounter = 73, SRDT_IEC_UDCounter = 74, SRDT_IEC_ULCounter = 75, SRDT_ERROR_STRUCT = 97, SRDT_NREF = 98, SRDT_CREF = 101,
User interfaces (API) 7.8 Data types
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
377
SRDT_AOM_IDENT = 128, SRDT_EVENT_ANY = 129, SRDT_EVENT_ATT = 130, SRDT_EVENT_HWINT = 131, SRDT_HW_ANY = 144, SRDT_HW_IOSYSTEM = 145, SRDT_HW_DPMASTER = 146, SRDT_HW_DEVICE = 147, SRDT_HW_DPSLAVE = 148, SRDT_HW_IO = 149, SRDT_HW_MODULE = 150, SRDT_HW_SUBMODULE = 151, SRDT_HW_HSC = 152, SRDT_HW_PWM = 153, SRDT_HW_PTO = 154, SRDT_HW_INTERFACE = 155, SRDT_HW_IEPORT = 156, SRDT_OB_ANY = 160, SRDT_OB_DELAY = 161, SRDT_OB_TOD = 162, SRDT_OB_CYCLIC = 163, SRDT_OB_ATT = 164, SRDT_CONN_ANY = 168, SRDT_CONN_PRG = 169, SRDT_CONN_OUC = 170, SRDT_CONN_R_ID = 171, SRDT_PORT = 173,
SRDT_RTM = 174, SRDT PIP = 175
User interfaces (API) 7.8 Data types
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
379
User interfaces (API) 7.8 Data types
Table 7- 472 EDataType - .NET (C#)
Syntax
public enum EDataType {
Unknown = 0, Bool = 1, Byte = 2, Char = 3, Word = 4, Int = 5, DWord = 6, DInt = 7, Real = 8, Date = 9, TimeOfDay = 10, Time = 11, S5Time = 12, DateAndTime = 14, Struct = 17, String = 19, Counter = 28, Timer = 29, IEC_Counter = 30, IEC_Timer = 31, LReal = 48, ULInt = 49, LInt = 50, LWord = 51, USInt = 52, UInt = 53, UDInt = 54, SInt = 55, WChar = 61, WString = 62, LTime = 64, LTimeOfDay = 65, LDT = 66, DTL = 67, IEC_LTimer = 68, IEC_SCounter = 69, IEC_DCounter = 70, IEC_LCounter = 71, IEC_UCounter = 72, IEC_USCounter = 73, IEC_UDCounte = 74, IEC_ULCounter = 75, ErrorStruct = 97,
380
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
NREF = 98, CREF = 101, Aom_Ident = 128, Event_Any = 129, Event_Att = 130, Event_HwInt = 131, Hw_Any = 144, Hw_IoSystem = 145, Hw_DpMaster = 146, Hw_Device = 147, Hw_DpSlave = 148, Hw_Io = 149, Hw_Module = 150, Hw_SubModule = 151, Hw_Hsc = 152, Hw_Pwm = 153, Hw_Pto = 154, Hw_Interface = 155, Hw_IEPort = 156, OB_Any = 160, OB_Delay = 161, OB_Tod = 162, OB_Cyclic = 163, OB_Att = 164, Conn_Any = 168, Conn_Prg = 169, Conn_Ouc = 170, Conn_R_ID = 171, Port = 173, Rtm = 174, Pip = 175
User interfaces (API) 7.8 Data types
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
381
User interfaces (API) 7.8 Data types
7.8.7.11
ETagListDetails
Description
This list contains all PLC areas that can be used as a filter to update the tag table.
Table 7- 473 ETagListDetails - Native C++
Syntax
enum ETagListDetails {
SRTLD_NONE = 0, SRTLD_IO = 1, SRTLD_M = 2, SRTLD_IOM = 3, SRTLD_CT = 4, SRTLD_IOCT = 5, SRTLD_MCT = 6, SRTLD_IOMCT = 7, SRTLD_DB = 8, SRTLD_IODB = 9, SRTLD_MDB = 10, SRTLD_IOMDB = 11, SRTLD_CTDB = 12, SRTLD_IOCTDB = 13, SRTLD_MCTDB = 14, SRTLD_IOMCTDB = 15 };
Table 7- 474 ETagListDetails - .NET (C#)
Syntax
enum ETagListDetails {
None = 0, IO = 1, M = 2, IOM = 3, CT = 4, IOCT = 5, MCT = 6, IOMCT = 7, DB = 8, IODB = 9, MDB = 10, IOMDB = 11, CTDB = 12, IOCTDB = 13, MCTDB = 14, IOMCTDB = 15 }
382
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.7.12
ERuntimeConfigChanged
Description
This list contains all possible causes of a OnConfigurationChanged event that the Runtime Manager sends.
Table 7- 475 ERuntimeConfigChanged - Native C++
Syntax
enum ERuntimeConfigChanged {
SRCC_INSTANCE_REGISTERED = 0, SRCC_INSTANCE_UNREGISTERED = 1 SRCC_CONNECTION_OPENED = 2, SRCC_CONNECTION_CLOSED = 3, SRCC_PORT_OPENED = 4, SRCC_PORT_CLOSED = 5 };
Table 7- 476 ERuntimeConfigChanged - .NET (C#)
Syntax
enum ERuntimeConfigChanged
{ InstanceRegistered = 0, InstanceUnregistered = 1, ConnectionOpened = 2, ConnectionClosed = 3, PortOpened = 4, PortClosed = 5
}
7.8.7.13
EInstanceConfigChanged
Description
This list contains all possible causes for a OnConfigurationChanged event that the virtual controller sends.
Table 7- 477 EInstanceConfigChanged - Native C++
Syntax
enum EInstanceConfigChanged {
SRICC_HARDWARE_SOFTWARE_CHANGED = 0, SRICC_IP_CHANGED = 1 };
Table 7- 478 EInstanceConfigChanged - .NET (C#)
Syntax
enum EInstanceConfigChanged {
HardwareSoftwareChanged = 0, IPChanged = 1 }
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
383
User interfaces (API) 7.8 Data types
7.8.7.14
EPullOrPlugEventType
Description
This enumeration contains predefined types of pull/plug events for S7 modules.
Table 7- 479 EPullOrPlugEventType - Native C++
Syntax
enum EPullOrPlugEventType {
SR_PPE_UNDEFINED = 0, SR_PPE_PULL_EVENT = 1, SR_PPE_PLUG_EVENT = 2, SR_PPE_PLUG_EVENT_ERROR_REMAINS = 3, SR_PPE_PLUG_WRONG_MODULE_EVENT = 4 };
Table 7- 480 EPullOrPlugEventType - .NET (C#)
Syntax
enum EPullOrPlugEventType {
Undefined = 0, Pull = 1, Plug = 2, PlugErrorRemains = 3, PlugWrongModule = 4 }
7.8.7.15
EProcessEventType
Description
This enumeration contains predefined types of process events for S7 modules.
Table 7- 481 EProcessEventType - Native C++
Syntax
enum EProcessEventType {
SR_PET_UNDEFINED = 0, SR_PET_RISING_EDGE = 1, SR_PET_FALLING_EDGE = 2, SR_PET_LIMIT1_UNDERRUN = 3, SR_PET_LIMIT1_OVERRUN = 4, SR_PET_LIMIT2_UNDERRUN = 5, SR_PET_LIMIT2_OVERRUN = 6 };
384
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Table 7- 482 EProcessEventType - .NET (C#)
Syntax
enum EProcessEventType {
Undefined = 0, RisingEdge = 1, FallingEdge = 2, Limit_1_Underrun = 3, Limit_1_Overrun = 4, Limit_2_Underrun = 5, Limit_2_Overrun = 6 }
7.8.7.16
EDirection
Description
This enumeration contains properties of the diagnostic alarm.
Table 7- 483 EDirection - Native C++
Syntax
enum EDirection {
SRD_DIRECTION_INPUT = 0, SRD_DIRECTION_OUTPUT = 1 };
User interfaces (API) 7.8 Data types
Table 7- 484 EDirection - .NET (C#)
Syntax
enum EDirection {
Input = 0, Output = 1 }
7.8.7.17
EDiagProperty
Description
This enumeration contains the incoming/outgoing information of the diagnostic alarm.
Table 7- 485 EDiagProperty - Native C++
Syntax
enum EDiagProperty {
SRP_DIAG_APPEAR = 1, SRP_DIAG_DISAPPEAR = 2 };
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
385
User interfaces (API) 7.8 Data types
Table 7- 486 EDiagProperty - .NET (C#)
Syntax
enum EDiagProperty {
Appear = 1, Disappear = 2 }
7.8.7.18
EDiagSeverity
Description
This enumeration contains the severity of the diagnostic alarm (error, maintenance demanded, maintenance required).
Table 7- 487 EDiagSeverity - Native C++
Syntax
enum EDiagSeverity {
SRDS_SEVERITY_FAILURE = 0, SRDS_SEVERITY_MAINTENANCE_DEMANDED = 1, SRDS_SEVERITY_MAINTENANCE_REQUIRED = 2 };
Table 7- 488 EDiagSeverity - .NET (C#)
Syntax
enum EDiagSeverity {
Failure = 0, MaintDemanded = 1, MaintRequired = 2 }
386
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
User interfaces (API) 7.8 Data types
7.8.7.19
ERackOrStationFaultType
Description
This enumeration contains the types of the RackOrStationFault event.
Table 7- 489 ERackOrStationFaultType - Native C++
Syntax
enum ERackOrStationFaultType {
SR_RSF_FAULT = 0, SR_RSF_RETURN = 1 };
Table 7- 490 ERackOrStationFaultType - .NET (C#)
Syntax
enum ERackOrStationFaultType {
Fault = 0, Return = 1 }
7.8.7.20
ECycleTimeMonitoringMode
Description
This enumeration contains the sources of the timer for the maximum cycle time monitoring.
Table 7- 491 ECycleTimeMonitoringMode - Native C++
Syntax
enum ECycleTimeMonitoringMode {
SRCTMM_DOWNLOADED = 0, SRCTMM_IGNORED = 1, SRCTMM_SPECIFIED = 2 };
Table 7- 492 ECycleTimeMonitoringMode - .NET (C#)
Syntax
enum ECycleTimeMonitoringMode {
Downloaded = 0, Ignored = 1, Specified = 2 }
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
387
User interfaces (API) 7.8 Data types
7.8.7.21
EAutodiscoverType
Description
This enumeration is used in the Autodiscover Callback function.
Table 7- 493 EAutodiscoverType - Native C++
Syntax
enum EAutodiscoverType {
SRRSI_DISCOVER_STARTED = 0, SRRSI_DISCOVER_DATA = 1, SRRSI_DISCOVER_FINISHED = 2 };
Table 7- 494 EAutodiscoverType - .NET (C#)
Syntax
public enum EAutodiscoverType {
AutodiscoverStarted = 0, AutodiscoverData = 1, AutodiscoverFinished = 2 }
388
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Restrictions, messages and solution
8
8.1
Overview
Certain actions or events can lead to behavior in PLCSIM Advanced or in STEP 7 which deviates from that of a hardware CPU. Messages and possible solutions can be found in the following sections: Restrictions with fail-safe CPUs (Page 389) OPC UA server (Page 390) Web server (Page 392) Backing up and restoring the configuration of a PLCSIM Advanced instance (Page 393) Restrictions for file paths (Page 393) Restrictions for communications services (Page 394) Restrictions for instructions (Page 394) Restrictions to local communication via Softbus (Page 395) Messages for communication via TCP/IP (Page 396) Restrictions of security with VMware vSphere Hypervisor (ESXi) (Page 397) Monitoring overflow (Page 398) Deviating I/O values in the STEP 7 user program (Page 398) Multiple simulations and possible collision of IP addresses (Page 399) Lacking access to an IP address (Page 399) Simulation in standby mode (Page 399)
8.2
Restrictions with fail-safe CPUs
Error downloading program changes
The error message "Corrupt" appears when downloading program changes to an F-CPU. The F-CPU remains in STOP mode when the "Start all" check box is selected.
Remedy Deselect the "Start all" check box in the "Load results" dialog. Once the download is complete, set the CPU to RUN mode manually using the RUN button.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
389
Restrictions, messages and solution 8.3 OPC UA server
8.3
OPC UA server
With OPC UA, data exchange is performed through an open, standardized and manufacturer-independent communication protocol. The CPU acting as the OPC UA server can communicate with OPC UA clients, for example, with HMI panels V14 and SCADA systems.
For technical reasons, the security settings in PLCSIM Advanced differ from a hardware CPU. Some features are disabled for simulations or are available to a limited extent.
Configuring OPC UA server
Start the instances via the communication interface "PLCSIM Virtual Ethernet Adapter" (TCP/IP) to use the OPC UA server.
The OPC UA server functionality is not available if communication takes place via the Softbus.
OPC UA security settings
Based on the OPC UA security settings, the same settings can be made in STEP 7 for the hardware CPU. However, PLCSIM Advanced does not take these security settings into consideration. This ensures that the user does not have his project change to perform a simulation.
NOTICE
OPC UA clients
OPC UA clients which are simulated with PLCSIM Advanced do not support security settings (certificates).
Therefore, select the check box "No Security" in the "Properties" tab for the OPC UA server.
390
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Restrictions, messages and solution 8.3 OPC UA server
Certificate
Note Do not use server certificates for secure connections PLCSIM Advanced uses its own certificate in the firmware and not that of STEP 7. The certificate need not be changed for simulations. However, it does not have the same security level as a downloaded server certificate and cannot be used for secure connections!
Server Security Endpoints PLCSIM Advanced only supports Security Endpoint "none".
Client certificate PLCSIM Advanced does not evaluate certificates the imported and configured in STEP 7 . PLCSIM Advanced accepts all client certificates automatically. This setting cannot be changed.
User authentication PLCSIM Advanced does not use the user name configured in STEP 7. Only one logon is possible as "guest" or "anonymous".
User authorization for OPC UA
The PLCSIM Advanced license also contains the user authorization for OPC UA. The user authorization applies for two instances.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
391
Restrictions, messages and solution 8.4 Web server
8.4
Web server
The Web server integrated in a CPU enables monitoring and administering of the CPU by authorized users over a network. This permits evaluation and diagnostics over long distances.
Each PLCSIM Advanced instance can simulate its own Web server.
The simulation of the Web server is restricted under S7-PLCSIM Advanced V3.0:
It is not possible to back up and restore a configuration via the Web server.
The freeze state of a virtual controller is not shown as an internal operating state.
Configuring the Web server
S7 PLCSIM Advanced Start the instances via the communication interface "PLCSIM Virtual Ethernet Adapter" (TCP/IP) to use the Web server. The Web server functionality is not available if the communication is performed via the Softbus.
STEP 7 Configure the Web server in STEP 7 in the CPU properties.
Restricted Web server functionality
Logon "PLCSIM" is preset as the user. There is no logon for users. A user configured in STEP 7 and his rights have no effect on the "PLCSIM" user.
There is no access via the secure transmission protocol "HTTPS". The information may not be fully displayed on some websites due to different data
handling. There is no topology information. "Online Backup&Restore" is not available. FW updates are not supported.
Number of maximum connections
A fixed value of 384 is displayed in the Web server for the maximum possible number of connections.
Remedy The correct value can be found in the technical data for the loaded CPU.
392
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Restrictions, messages and solution 8.5 Backing up and restoring the configuration of a PLCSIM Advanced instance
8.5
Backing up and restoring the configuration of a PLCSIM Advanced
instance
Backing up and restoring the configuration
As of PLCSIM Advanced V2.0 it is possible to back up and restore a PLCSIM Advanced instance.
You can create as many backups as you want and store a variety of configurations for a PLCSIM Advanced instance.
You perform the backup and restore in the TIA Portal as you would in a real CPU.
Backup and restore via the Web server and (simulated) display are not supported.
A backup that was created with PLCSIM Advanced can only be used with PLCSIM Advanced.
It is not possible to restore the configuration of a real CPU with a backup from PLCSIM Advanced.
Requirements
The configuration of a PLCSIM Advanced instance is backed up and restored over the TCP/IP protocol, Softbus is not supported.
It is only possible to restore the configuration of a PLCSIM Advanced instance with the corresponding backup from PLCSIM Advanced.
8.6
Restrictions for file paths
The following restrictions apply for user interfaces which expect a path or a complete file name as the transfer parameter:
Restrictions for local paths
Restrictions for network paths
Write permissions to system-critical directories such as the Windows directory (%Windows%) or the program directories (%Program Files%, %Program Files (x86)%) are not allowed.
In this case the C++ user interface returns the error code SREC_WRONG_ARGUMENT. In this case the managed user interface returns an exception with the error code RuntimeErrorCode.WrongArgument.
In order to be able to use network paths, you must incorporate them as a network drive.
Otherwise, the C++ user interface returns the error code SREC_WRONG_ARGUMENT. The managed user interface returns an exception with the error code RuntimeErrorCode.WrongArgument.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
393
Restrictions, messages and solution 8.7 Restrictions for communications services
8.7
Restrictions for communications services
TUSEND / TURCV
When you run the UDP blocks TUSEND and TURCV via the "PLCSIM" communication interface (Softbus), you get error code 0x80C4 at the transmission end and receiving end: Temporary communications error. The specified connection is temporarily down.
Solution Set "PLCSIM Virtual Ethernet Adapter" (TCP/IP) as the communication interface in PLCSIM Advanced.
Secure TCP connections
PLCSIM Advanced does not support TLS (Transport Layer Security) and has no certificate management. It is therefore not possible to establish secure TCP connections from the simulation. This means that the following connections are not supported: Secure OUC connections (Secure Open User Communication) Secure connections to a mail server using TMAIL_C HTTPS connections to the Web server
8.8
Restrictions for instructions
PLCSIM Advanced simulates instructions for CPUs S7-1500 and ET 200SP as close to reality as possible. PLCSIM Advanced checks the input parameters for validity and returns outputs that are valid but do not necessarily correspond to those that a real CPU with physical inputs/outputs would return.
Instructions not supported
Unsupported instructions are handled as not ready, their value is always "OK". PLCSIM Advanced does not support the following instructions:
DP_TOPOL
PORT_CFG
394
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Restrictions, messages and solution 8.9 Restrictions to local communication via Softbus
8.9
Restrictions to local communication via Softbus
Identical IP addresses for instances
If the "PLCSIM" communication interface (Softbus) is set, then identical IP addresses are created automatically for all instances when creating the instances through the Control Panel. In STEP 7, only one instance is therefore displayed in the lifelist.
Solution Use the API function SetIPSuite() to assign a unique address for each instance, then all instances are displayed in STEP 7 with their IP addresses.
API function SetIPSuite() (Page 160)
Working with multiple instances
When you are working with instances without unique IP addresses, note the following procedure for downloading from TIA Portal via "PLCSIM" (Softbus):
1. Start only one instance with the symbol in the Control Panel. 2. In TIA Portal, download the program to this instance. 3. Repeat the steps until you have created all instances and downloaded all projects.
Online and diagnostics
If the "PLCSIM" (Softbus) communication interface is set, no details are displayed for the "Online and Diagnostics" function under the PROFINET interface (IP address, MAC address, etc.).
See also
Controller - Information and settings (Page 157)
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
395
Restrictions, messages and solution 8.10 Messages for communication via TCP/IP
8.10
Messages for communication via TCP/IP
Error codes
If an ID with error designation appears in the taskbar, you will find the description in section 7 "User interfaces (API)".
Figure 8-1 Example: Error code 63
Messages and remedy
The settings for TCP/IP communication are checked in the S7-PLCSIM Advanced Control Panel. The messages and the corresponding remedies are listed below:
Message "Siemens PLCSIM Virtual Ethernet Adapter was not found. Please reinstall PLCSIM Advanced."
Remedy The PLCSIM Virtual Ethernet Adapter cannot be found on the system. Run PLCSIM Advanced Setup again: 1. Double-click the download package or insert the installation medium into the drive. The
setup program starts up automatically, provided you have not disabled the Autostart function on the computer. If the setup program does not start up automatically, start it manually by double-clicking the "Start.exe" file. 2. Follow the prompts until you reach the "Configuration" window. Select the "Repair" check box. 3. Follow the remaining prompts to repair your installation. 4. Complete the repair operation by restarting your computer.
Message "Siemens PLCSIM Virtual Ethernet Adapter is disabled. Please enable it."
Remedy The PLCSIM Virtual Ethernet Adapter is deactivated on the system. In the Control Panel, under "Network and Sharing Center" > "Change Adapter Settings" and activate the network adapter.
396
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
8.11
Restrictions, messages and solution 8.11 Restrictions of security with VMware vSphere Hypervisor (ESXi)
Message "NetGroup Packet Filter Driver (NPF) is not running. Start it from cmd with 'net start npf'."
Remedy The NetGroup Packet Filter Driver (NPF) is not active on the system. Open a command line in administrator mode and enter the command "net start npf".
Message "You have to set a valid IP address for the Siemens PLCSIM Virtual Ethernet Adapter."
Remedy Assign a static IP address to the Siemens PLCSIM Virtual Ethernet Adapter or obtain an IP address via DHCP (default setting).
Restrictions of security with VMware vSphere Hypervisor (ESXi)
When you use the virtualization platform VMware vSphere Hypervisor (ESXi), you must change the policy exception to communicate over TCP/IP.
Remedy Accept the "Promiscuous mode and "Forged transmit" options for the Virtual Switch of the ESXi.
NOTICE Restrictions of security For security reasons, Promiscuous mode is disabled by default. If you accept the Promiscuousmode, the real Ethernet adapter even receives telegrams that are not addressed to it.
Figure 8-2 Policy exceptions for VMware vSphere Hypervisor (ESXi)
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
397
Restrictions, messages and solution 8.12 Monitoring overflow
8.12
Monitoring overflow
Monitoring of main cycle
The maximum cycle time monitoring for PLCSIM Advanced is one minute.
If you want to use the values that are configured in the TIA Portal, set them using the following API function: SetCycleTimeMonitoringMode().
See Cycle control (Page 248)
Monitoring of cyclical events
If your simulation contains cyclic interrupts, the queue of PLCSIM Advanced may overflow for cyclic events. Due to the execution speed of PLCSIM Advanced compared to real hardware, the time required to create the diagnostics buffer entry may be longer than the time until the next cyclic interrupt.
In this case, an additional entry is placed in the queue, causing another overflow. In the event of an overflow, PLCSIM Advanced provides visual information in the form of diagnostics buffer messages and a red error icon in the project tree.
See also
Speed up and slow down simulation (Page 89)
8.13
Deviating I/O values in the STEP 7 user program
Updated values
Each value change made by a STEP 7 user program in the I/O address areas is overwritten in the cycle control point with the updated value that was written via the API functions Write...(). The API functions Read...() only return this updated value and not the value from STEP 7 for the input range.
Non-updated values
If the value was not updated via the API functions Write...(), the API functions Read...() return the value from STEP 7 for the output range.
See also
Simulate peripheral I/O (Page 75)
398
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
8.14
Restrictions, messages and solution 8.14 Multiple simulations and possible collision of IP addresses
Multiple simulations and possible collision of IP addresses
You can simultaneously simulate multiple CPUs, but each simulated CPU interface requires a unique IP address. Make sure your CPUs have different IP addresses before starting the simulation.
8.15
Lacking access to an IP address
Special feature of distributed communication
If you use multiple network nodes on the same subnet through different virtual or real adapters, the operating system may search for the node on the wrong adapter.
Remedy Repeat your requests or enter "arp -d <IP address>" in the command line editor of Windows.
8.16
Simulation in standby mode
If your computer or programming device goes into standby or hibernation mode, the simulation may be stopped. In this case, the communication between STEP 7 and PLCSIM Advanced is stopped. When your computer or programming device starts up again, the communication may need to be reestablished. In some cases, it may also be necessary to open the simulation project again.
To prevent this situation, disable the standby mode on your computer or programming device.
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
399
List of abbreviations
Abbreviation ALM
API arp BCD CPU DLL HMI IE GUI LAN
MFP OB ODK OPC UA PG PLC PN RAM RT SO TCP/IP TIA PIP UTC VM VPLC WinCC
Term Automation License Manager Tool for managing license keys in STEP 7 Application Programming Interface user interface Address resolution protocol Binary Coded Decimal Central Processing Unit (Synonym for PLC) Dynamic Link Library Human Machine Interface user interface Industrial Ethernet Graphical User Interface Local Area Network Computer network that is limited to a local area. Multifunctional platform Organization Block Open Development Kit Open Platform Communications Unified Architecture Programming device Programmable Logic Controller PROFINET Random Access Memory Runtime Shared Object Transmission Control Protocol/Internet Protocol Totally Integrated Automation Process Image Partition Coordinated Universal Time Virtual Machine Virtual Programmable Logic Controller Windows Control Center
A
400
S7-PLCSIM Advanced Function Manual, 11/2019, A5E37039512-AC
Diagnostics
SIMATIC
S7-1500, ET 200MP, ET 200SP, ET 200AL, ET 200pro Diagnostics
Function Manual
Preface
Function manuals Documentation Guide
1
Overview of system diagnostics
2
Quick start
3
Setting and determining system diagnostics
4
System diagnostics by means of the user program
5
Alarms
6
Diagnostics of the S71500R/H redundant system
7
11/2019
A5E03735838-AF
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03735838-AF 10/2019 Subject to change
Copyright © Siemens AG 2013 - 2019. All rights reserved
Preface
Purpose of the documentation
This function manual provides an overview of the diagnostics options for the automation system SIMATIC S7-1500, for the CPUs 1513pro-2 PN and 1516pro-2 PN based on SIMATIC S7-1500, and for the distributed I/O systems SIMATIC ET 200MP, ET 200SP and ET 200AL. The documentation covers the following: Illustration of the uniformity and consistency of system diagnostics Overview of the options for establishing system diagnostics information
Basic knowledge required
The following knowledge is required in order to understand the function manual: General knowledge in the field of automation technology Knowledge of the industrial automation system SIMATIC Knowledge of working with STEP 7 and WinCC Knowledge about the use of Microsoft Windows operating systems
Scope of the documentation
This documentation is the basic documentation for all products of the S7-1500, ET 200MP, ET 200SP and ET 200AL systems, as well as for the CPUs 1513pro-2 PN und 1516pro-2 PN. The product documentation is based on this documentation.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
3
Preface
What's new in the Diagnostics function manual, Edition 11/2019 compared to Edition 10/2018
What's new?
Changed contents
Updated restrictions for the S7-1500R/H redundant system
What are the customer benefits?
Functions with which you are familiar from the SIMATIC S7-1500 automation system are implemented for the S7-1500R/H redundant system.
Where can I find the information?
Section Diagnostics of the S71500R/H redundant system (Page 97)
What's new in the Diagnostics function manual, Edition 10/2018 compared to Edition 09/2016
What's new? New contents
Changed contents
Description of the diagnostics of the S7-1500R/H redundant system
Scope of the function manual expanded to include the S7-1500R/H redundant system
What are the customer benefits?
Where can I find the information?
You obtain information in compact form on Section Diagnostics of the S7-
the special features of the diagnostics in 1500R/H redundant system
the S7-1500R/H redundant systems.
(Page 97)
Functions with which you are familiar from the SIMATIC S7-1500 automation system are implemented for the S7-1500R/H redundant system.
Redundant System S71500R/H System Manual (https://support.industry.sieme ns.com/cs/ww/en/view/109754 833)
Diagnostics
4
Function Manual, 11/2019, A5E03735838-AF
Preface
What's new in the Diagnostics function manual, Edition 09/2016 compared to Edition 06/2014
What's new? New contents
What are the customer benefits?
Extended functionality of the · Web server
·
You obtain information about:
Know-how protection or copy protection of the PLC program
Program/communication load and cycle time
F-collective signatures, cycle times and runtimes of the F-runtime group(s) (with an F-CPU)
You can monitor statuses, errors, technology alarms and the current values of technology objects (TOs) with the Web server.
Where can I find the information?
Section Diagnostics information using the web server (Page 48),
Web server (http://support.automation.siem ens.com/WW/view/en/5919356 0) function manual,
Using the trace and logic analyzer function (https://support.industry.sieme ns.com/cs/ww/en/view/648971 28) function manual
· You can read, view and save trace recordings via the Web server and thus obtain plant and project information for diagnostics and maintenance without STEP 7.
· You can set four additional languages for the Web server interface.
Changed contents
Assignment of different project languages extended
You can assign up to three different project languages for comments and alarm texts to the user interface languages of display devices.
Section Editing alarms in the alarm editor (Page 78)
Scope of the function manual expanded to include CPU 1516pro-2 PN
Functions that you will be familiar with from the SIMATIC S7-1500 CPUs are implemented in the CPU 1516pro-2 PN (degree of protection IP65, IP66 and IP67).
Operating instructions CPU 1516pro-2 PN (https://support.industry.sieme ns.com/cs/ww/en/view/109482 416)
Security events added
You know which types of events are registered as security events in the diagnostics buffer and can configure group alarms for them.
Section CPU diagnostics buffer (Page 42)
Influence of the value status You know which factors influence the bit in Section System diagnostics
explained
the value status and can take this into
using process image inputs
account during configuration.
(Page 73)
Note added on the maximum configuration limits of program alarms.
Section Creating alarms with the "Program_Alarm" instruction (Page 77).
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
5
Preface
Conventions
STEP 7: We refer to "STEP 7" in this documentation as a synonym for the configuration and programming software "STEP 7 as of V12 (TIA Portal)" and subsequent versions. This document contains illustrations of the described devices. The illustrations may differ slightly from the device supplied. You should also pay particular attention to notes such as the one shown below:
Note A note contains important information on the product, on the handling of the product or on the section of the documentation to which particular attention should be paid.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Diagnostics
6
Function Manual, 11/2019, A5E03735838-AF
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
Catalogs for all the products in automation and drives are available on the Internet (https://mall.industry.siemens.com).
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
7
Table of contents
Preface ................................................................................................................................................... 3
1 Function manuals Documentation Guide ............................................................................................... 10
2 Overview of system diagnostics ............................................................................................................ 12
2.1
Properties of system diagnostics ........................................................................................... 12
2.2
Benefits of innovative system diagnostics ............................................................................. 14
3 Quick start ............................................................................................................................................ 15
3.1
Using the display of the CPU ................................................................................................. 16
3.2
Using STEP 7......................................................................................................................... 18
4 Setting and determining system diagnostics .......................................................................................... 23
4.1
Configuring alarms for system diagnostics ............................................................................ 23
4.2 4.2.1 4.2.1.1 4.2.1.2 4.2.2 4.2.2.1 4.2.2.2 4.2.2.3 4.2.2.4 4.2.2.5 4.2.2.6 4.2.2.7 4.2.2.8 4.2.3 4.2.4 4.2.4.1 4.2.4.2 4.2.4.3 4.2.4.4
Options for displaying system diagnostics ............................................................................. 25 Diagnostics information at the devices .................................................................................. 26 LEDs ...................................................................................................................................... 26 Display of the CPU................................................................................................................. 27 Diagnostics information in STEP 7 ........................................................................................ 29 Explanation of diagnostics symbols ....................................................................................... 29 Accessible devices (without project) ...................................................................................... 31 Devices & networks ............................................................................................................... 33 Online & diagnostics .............................................................................................................. 36 "Diagnostics" tab in the Inspector window ............................................................................. 39 CPU diagnostics buffer .......................................................................................................... 42 "Online tools" task card .......................................................................................................... 45 Configuring the settings for I/O modules in STEP 7 .............................................................. 47 Diagnostics information using the web server ....................................................................... 48 Diagnostics information using the HMI diagnostics view ....................................................... 59 Configuring system diagnostics ............................................................................................. 60 Different views of the HMI diagnostics view .......................................................................... 63 Inserting system diagnostics indicator ................................................................................... 66 Configuring button as system diagnostics indicator............................................................... 68
5 System diagnostics by means of the user program................................................................................ 71
5.1
Options of system diagnostics in the user program............................................................... 71
5.2
System diagnostics using process image inputs ................................................................... 73
Diagnostics
8
Function Manual, 11/2019, A5E03735838-AF
Table of contents
6 Alarms .................................................................................................................................................. 76
6.1
Creating alarms with the "Program_Alarm" instruction...........................................................77
6.2
Editing alarms in the alarm editor ...........................................................................................78
6.3
Display of program alarms ......................................................................................................81
6.4
Output of the alarm state with the "Get_AlarmState" instruction ............................................82
6.5 6.5.1 6.5.2 6.5.3 6.5.4
Example program for program alarms ....................................................................................83 Task ........................................................................................................................................83 Example 1: Program alarm without associated values...........................................................84 Example 2: Program alarm with associated value..................................................................89 Displaying the alarm ...............................................................................................................96
7 Diagnostics of the S7-1500R/H redundant system................................................................................. 97
7.1
Online and Diagnostics view.................................................................................................100
7.2
"Online Tools" task card........................................................................................................103
7.3
Diagnostics view in the project tree and in the device view and network view ....................106
7.4
Diagnostics in the RUN-Redundant system state ................................................................111
7.5
Restrictions in the RUN-Solo system state...........................................................................117
7.6
System diagnostics by means of the user program..............................................................118
Glossary ............................................................................................................................................. 119
Index................................................................................................................................................... 123
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
9
Function manuals Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system, for CPU 1516pro-2 PN based on SIMATIC S7-1500, and for the distributed I/O systems SIMATIC ET 200MP, ET 200SP and ET 200AL is divided into three areas. This division allows you easier access to the specific information you require.
Basic information
System manuals and Getting Started manuals describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500, ET 200MP, ET 200SP and ET 200AL systems; use the corresponding operating instructions for CPU 1516pro-2 PN. The STEP 7 online help supports you in configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, terminal diagrams, characteristics and technical specifications.
Diagnostics
10
Function Manual, 11/2019, A5E03735838-AF
Function manuals Documentation Guide
General information The function manuals contain detailed descriptions on general topics such as diagnostics, communication, Motion Control, Web server, OPC UA. You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742705). Changes and additions to the manuals are documented in product information sheets. You will find the product information on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/us/en/view/68052815) ET 200SP (https://support.industry.siemens.com/cs/us/en/view/73021864) ET 200AL (https://support.industry.siemens.com/cs/us/en/view/99494757)
Manual Collections
The Manual Collections contain the complete documentation of the systems put together in one file. You will find the Manual Collections on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/86140384) ET 200SP (https://support.industry.siemens.com/cs/ww/en/view/84133942) ET 200AL (https://support.industry.siemens.com/cs/ww/en/view/95242965)
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
11
Overview of system diagnostics
2
2.1
Properties of system diagnostics
Introduction
In the SIMATIC environment, the term "system diagnostics" refers to diagnostics of devices and modules.
All SIMATIC products have integrated diagnostic functions that you can use to detect and remedy faults. The components automatically flag a potential fault in the operation and provide detailed information. You can minimize unscheduled standstill times with plant-wide diagnostics.
The SIMATIC automation system monitors the following states in the running plant:
Device failure/recovery
Insert/remove event
Module fault
I/O access error
Channel fault
Parameter assignment error
Failure of the external auxiliary voltage
Properties ofSIMATIC system diagnostics
Integrated as standard in the hardware System-wide across bus limits Automatic localization of the error source Automatic output of the cause of the error in plain text Plant-wide diagnostics of all components Archiving and logging of alarms Configurability of alarms
Diagnostics
12
Function Manual, 11/2019, A5E03735838-AF
Overview of system diagnostics 2.1 Properties of system diagnostics
Consistent diagnostics from the field level all the way to the management level
The various diagnostics media give you a uniform view of maintenance-related information of every automation component in the plant: System status (module and network status, alarms for system errors) are available plant-wide in a uniform display.
Figure 2-1 Overview of system diagnostics in a plant
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
13
Overview of system diagnostics 2.2 Benefits of innovative system diagnostics
2.2
Benefits of innovative system diagnostics
System diagnostics is also possible in STOP
The system diagnostics is integrated in the firmware of the CPU and works independently of the cyclic user program. This means it is also available in the STOP CPU operating mode. Faults are detected immediately and signaled to the higher-level HMI devices, the Web server and the display of the SIMATIC S7-1500 CPU, even in STOP mode. This makes system diagnostics consistent with the actual plant state at all times.
Uniform display concept
All clients of a system are provided with diagnostics information by a uniform mechanism. The same system diagnostics information is used regardless of the display medium.
Step
Description The device detects an error and sends diagnostics data to the assigned CPU. The CPU informs the connected display media. The display of the system diagnostics is updated.
Figure 2-2 Sequence of the system diagnostics
Diagnostics
14
Function Manual, 11/2019, A5E03735838-AF
Quick start
3
Introduction
The following chapters of this documentation describe the different options for establishing system diagnostics. All described options can be used independently of one another. This chapter gives you an overview of the basic procedure to get initial diagnostics information fast.
Note System diagnostics is generally available for the devices of the SIMATIC series.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
15
Quick start 3.1 Using the display of the CPU
3.1
Using the display of the CPU
The display of the SIMATIC S7-1500 CPU offers a fast and direct option to get diagnostics information. You can call up status information in different menus on the display.
Requirements
A project has been created. The project has been downloaded to the CPU.
Determining diagnostics information using the display of the SIMATIC S7-1500 CPU
To determine diagnostics information using the display, follow these steps: 1. Select the "Diagnostics" menu on the display. 2. Select the "Diagnostics buffer" command from the "Diagnostics" menu.
Figure 3-1 Display of SIMATIC S7-1500 CPU
Diagnostics
16
Function Manual, 11/2019, A5E03735838-AF
Result
Quick start 3.1 Using the display of the CPU
The diagnostics events are displayed in the diagnostics buffer in the sequence in which they occur.
Figure 3-2 Display of the diagnostics buffer in the display of the SIMATIC S7-1500 CPU
Note Automatic updating of diagnostics information You set automatic updating of the diagnostics information under: "Display" > "DiagnosticRefresh".
Additional information
You can find information about the configuration of alarms in the section Configuring alarms for system diagnostics (Page 23).
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
17
Quick start 3.2 Using STEP 7
3.2
Using STEP 7
Getting started with STEP 7 gives you fast access to detailed diagnostics information.
Requirements
A project has been created. The project has been downloaded to the CPU. An error has occurred. The programming device must be able to establish a connection to the CPU via an
interface.
Determining diagnostics information using STEP 7
To determine diagnostics information using STEP 7, follow these steps: 1. Open the respective project in STEP 7. 2. Open the portal view of STEP 7. 3. Select the "Online & Diagnostics" portal. 4. Select the "Online status" action.
The "Select device" dialog opens. The dialog is an image of the configured devices in the project.
Figure 3-3 Device selection for online connection in the portal view
5. Activate the "Go online" option button for the device that you want to use to establish an online connection.
6. Click on the "Go online" button.
Diagnostics
18
Function Manual, 11/2019, A5E03735838-AF
7. The "Go online" dialog opens.
Quick start 3.2 Using STEP 7
Figure 3-4 Establishing an online connection 8. Make the settings for the interface.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
19
Quick start 3.2 Using STEP 7
9. Click on the "Go online" button. The project view of STEP 7 opens. The network view is opened in the work area. The symbols in the project tree provide initial information about the faulty modules.
Figure 3-5 Display of the fault in the network view
Diagnostics
20
Function Manual, 11/2019, A5E03735838-AF
Quick start 3.2 Using STEP 7
10.Double-click the device which displays an alarm message to access the faulty module directly. This is the CPU in the example. The device view of the CPU is opened in the work area. In this view you can see directly in which module the error has occurred.
Figure 3-6 Display of the faulty module in the device view
11.Open the "Diagnostics" tab and the subordinate "Device information" tab in the Inspector window for a more detailed error description.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
21
Quick start 3.2 Using STEP 7
Result
The link in the "Details" table column takes you to the online and diagnostics view of the device and to the diagnostics buffer there, for example. This includes more information on all diagnostics events in the order in which they occurred.
Figure 3-7 Diagnostics buffer with detailed error description
Note Symbols and their meaning You can find a legend with the meaning of each symbol in Explanation of diagnostics symbols (Page 29) and in the online help for STEP 7.
Diagnostics
22
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics
4
Introduction
System diagnostics is generally available for the devices of the SIMATIC series.
In the properties of each individual CPU, you can specify if you want to receive alarms for system diagnostics on your display device. Alarms are provided on the display of the SIMATIC S7-1500 CPU, the CPU Web server and the HMI device. Alarms are enabled by default. If you do not want to receive alarms for system diagnostics on your display devices, you can disable the sending of alarms.
4.1
Configuring alarms for system diagnostics
Predefined alarm texts are available for establishing the system diagnostics.
Requirements
STEP 7 is open. A project is open.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
23
Setting and determining system diagnostics 4.1 Configuring alarms for system diagnostics
Procedure
To make alarm settings for system diagnostics of the project in STEP 7, follow these steps:
1. Open the "Common data" folder in the project tree.
2. Double-click the "System diagnostics settings" entry.
You now have access to the alarm settings. System diagnostics is enabled by default. System diagnostics cannot be disabled for the use of a CPU from the SIMATIC S7-1500 product series.
Figure 4-1 Properties of system diagnostics and alarm settings
3. In the settings, specify the alarm category that is to be displayed and if it needs to be acknowledged.
The check boxes in the "Activation" column are enabled by default. When you disable all check boxes, the status of the HMI system diagnostics view is still updated with the "Info Report" functionality.
Result
You have configured the alarms for system diagnostics of the project in STEP 7.
The settings are saved with the project and become effective after the compiling and downloading of the hardware configuration to the involved components.
Maintenance events (maintenance demanded, maintenance required) are entered in the alarm buffer of the CPU just like any other event.
Diagnostics
24
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4.2
Options for displaying system diagnostics
Example
This section includes a diagnostics example to show how system diagnostics is established with the help of different display options. The example includes a CPU from the SIMATIC S7-1500 product series that is connected to an ET 200S distributed I/O system and an HMI Comfort Panel via PROFINET.
Figure 4-2 System diagnostics display options
The following sections include figures that illustrate how diagnostics information is displayed with the help of different display options. Using the LEDs on the hardware (Page 26) Local error analysis via the display of the CPU (Page 27) Using STEP 7 as of V12 (Page 29) Remote diagnostics using the Web server (Page 48) Stationary system diagnostics using the HMI diagnostics view (Page 59)
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
25
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4.2.1
Diagnostics information at the devices
4.2.1.1
LEDs
Overview
All hardware components, such as CPUs, interface modules and modules, provide information about their operating mode as well as internal and external errors through their LEDs. Diagnostics by means of LEDs is an initial tool for error localization.
The graphics below include examples for the arrangement of LEDs on some modules.
Table 4- 1 LED displays on the modules
CPU 1516-3 PN/DP
IM 155-5 PN ST
DI 32x24VDC HF
PS 25W 24VDC
RUN/STOP LED
RUN LED
(two-colored LED: green/yellow) (two-colored LED:
green/yellow)
RUN LED (single-colored LED: green)
RUN LED (single-colored LED: green)
ERROR LED
(single-colored LED: red)
ERROR LED
ERROR LED
ERROR LED
(single-colored LED: red) (single-colored LED: red) (single-colored LED: red)
MAINT LED
(single-colored LED: yellow)
MAINT LED (single-colored LED: yellow)
without function
MAINT LED (single-colored LED: yellow)
X1 P1
(two-colored LED: green/yellow)
X1 P1 (single-colored LED: green)
LED CHx (two-colored LED: green/red)
Diagnostics
26
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
CPU 1516-3 PN/DP
X1 P2
(two-colored LED: green/yellow)
X2 P1
(two-colored LED: green/yellow)
IM 155-5 PN ST
X1 P2 (single-colored LED: green)
DI 32x24VDC HF
PS 25W 24VDC
Additional information
The meaning of the individual LED displays, their different combinations and the remedial measures resulting from them in case of errors are device-specific. The explanation can be found in the manuals of the modules.
4.2.1.2
Display of the CPU
Introduction
Each CPU in the S7-1500 automation system has a front cover with a display and operating keys. You can display status information in various menus on the display of the CPU. You use the operating keys to navigate through the menus.
Figure 4-3 Display - diagnostics screen
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
27
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Display options
The display of the SIMATIC S7-1500 CPU shows the following diagnostics information: CPU operating state "Diagnostics" menu Error and alarm texts (system diagnostics alarms) Information entered in the diagnostics buffer Watch tables Information on the cycle times of the user program Utilization of the CPU memory "Modules" menu Information on modules and the network Detailed device view with diagnostics symbols Order number, CPU version and central I/O modules Module status for central and distributed modules Information about the currently installed firmware
Additional information
For additional information on the topic "Functions and operation of the display of the SIMATIC S7-1500 CPU", see the documentation for the S7-1500 automation system (http://support.automation.siemens.com/WW/view/en/59191792). You can find detailed information on the individual options, a training course and a simulation of the available menu commands of the display for the CPU in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterial-as/interactive-manuals/gettingstarted_simatic-s7-1500/disp_tool/start_en.html).
Diagnostics
28
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4.2.2
Diagnostics information in STEP 7
4.2.2.1
Explanation of diagnostics symbols
Diagnostics symbols for modules and devices
When the online connection to a device is established in STEP 7, the diagnostics status of the device and its lower-level components and, if applicable, the device operating mode are also determined. The following table shows the possible symbols and their meaning.
Table 4- 2 Symbol
Diagnostics symbols for modules and devices
Meaning The connection with a CPU is being established.
The CPU is not reachable at the set address.
The configured CPU and the CPU actually present are of incompatible types. Example: An existing CPU 315-2 DP is incompatible with a configured CPU 15163 PN/DP.
On establishment of the online connection to a protected CPU, the password dialog was terminated without specification of the correct password.
No fault
Maintenance required
Maintenance demanded
Error
The module or device is deactivated.
The module or the device cannot be reached from the CPU (valid for modules and devices below a CPU).
Diagnostics data is not available because the current online configuration data differ from the offline configuration data.
The configured module or device and the module or device actually present are incompatible (valid for modules or devices under a CPU).
The configured module does not support display of the diagnostics status (valid for modules under a CPU).
The connection is established, but the module status has not yet been determined or is unknown.
Hardware error in lower-level component: A hardware fault has occurred in at least one lower-level hardware component (occurs as a separate symbol only in the project tree).
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
29
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Symbols for the comparison status
The diagnostics symbols can be combined at the bottom right with additional smaller symbols that indicate the result of the online/offline comparison. The following table shows the possible comparison symbols and their meaning.
Table 4- 3 Symbol
Symbols for the comparison status
Meaning Hardware error in lower-level component: The online and offline versions differ (only in the project tree) in at least one lower-level hardware component. Software error in lower-level component: The online and offline versions differ (only in the project tree) in at least one lower-level software component. Online and offline versions of the object are different
Object only exists online
Object only exists offline
Online and offline versions of the object are the same
Operating mode symbols for CPUs and CPs
The following table shows the possible symbols and their respective operating states.
Table 4- 4 Symbol
Operating mode symbols for CPUs and CPs
Operating mode RUN
STOP
STARTUP
DEFECTIVE
Unknown operating mode
The configured module does not support display of the operating mode.
Diagnostics
30
Function Manual, 11/2019, A5E03735838-AF
Event table
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
The following information is displayed in the table for each diagnostics event: Sequential number of the entry
The first entry contains the latest event. Date and time of the diagnostics event
If no date and time are shown, the module has no integrated clock. Short designation of the event and, if applicable, the reaction of the CPU Symbol for information on incoming/outgoing status The following table shows the possible symbols and their meaning.
Table 4- 5 Symbol
Symbols in the event table
Meaning Incoming event
Outgoing event
Incoming event for which there is no independent outgoing event
User-defined diagnostics event
Additional information
For additional information on the individual symbols, please refer to the online help for STEP 7.
4.2.2.2
Accessible devices (without project)
Accessible devices
Accessible devices are all devices that are connected to a PG/PC either directly by an interface or by means of a subnet and that are switched on. These devices can display diagnostic information even without an offline project.
Requirements
STEP 7 is open. The portal view or project view is open.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
31
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Procedure
To display diagnostic information for specific devices even without an offline project, follow these steps: 1. Establish a connection to the respective CPU. 2. Select the command "Accessible devices" from the "Online" menu.
The "Accessible devices" dialog opens.
Figure 4-4 "Accessible devices" dialog
3. Make the settings for the interface. 4. Select the respective device under "Accessible nodes of the selected interface". 5. Confirm the dialog with the "Display" button.
Diagnostics
32
Function Manual, 11/2019, A5E03735838-AF
Result
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
The device is displayed in the project tree. You open the diagnostic information in the work area with a double-click on "Online & Diagnostics". Information is available on the diagnostic status, cycle times, memory usage and the diagnostics buffer.
Figure 4-5 Device in the project tree
4.2.2.3
Devices & networks
Devices & networks - Go online
You can get an overview of the current state of your automation system in the device view or network view. You implement the following tasks in the device view: Device configuration and parameter assignment Module configuration and parameter assignment You implement the following tasks in the network view: Device configuration and parameter assignment Networking devices
Requirements
STEP 7 is open. A project is open. The project view is open.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
33
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Procedure
To get an overview of the current state of your automation system, follow these steps:
1. Open the "Network view" in the working area.
2. Select the CPU.
3. Click the "Go online"
button in the toolbar.
The "Go online" dialog opens.
Figure 4-6 Go online
4. Make the settings for the interface. 5. Select the respective device under "Compatible devices in the target subnet". 6. Confirm the dialog with the "Connect" button.
The online mode is started.
Diagnostics
34
Function Manual, 11/2019, A5E03735838-AF
Result
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
The connected devices are now displayed with diagnostic information in the network view in the working area. Here you get an overview of the current state of your automation device.
Figure 4-7 CPU with diagnostic information
You get to the "Device view" with a double-click on the device. The diagnostic information for the individual modules is displayed in this view.
Note Symbols and their meaning You will find a legend with the meaning of each symbol in Explanation of diagnostics symbols (Page 29) and in the online help for STEP 7.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
35
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4.2.2.4
Online & diagnostics
Online mode
In online mode there is an online connection between your PG/PC and one or several devices. Depending on the properties of a device, you are offered specific diagnostics options and certain functions in online mode. Diagnostics
General module information Diagnostics status Cycle time Memory Diagnostics buffer Display Interface information (e.g. IP parameter, port information) Functions Assign IP address Set time and date of the CPU Firmware update (e.g. for PLC, display) Assign device name Reset to factory settings Format memory card Save service data
Diagnostics
36
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
To establish an online connection at least one PG/PC interface must be installed that is physically connected with a device, for example, with an Ethernet cable. The current online status of a device is indicated by a symbol to the right of the device in the project tree.
Figure 4-8 Partial view of network view
Requirements
STEP 7 is open. A project is open. The project view is open.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
37
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Procedure
To display an overview of the faulty devices, follow these steps: 1. Select the affected device folder in the project tree. 2. Select the shortcut menu command "Online & Diagnostics".
The online and diagnostics view of the module to be diagnosed is started.
Figure 4-9 Setting online access
3. Make the settings for the interface. Here you can change an interface access that has already been set for an online connection that was successfully established previously.
4. Click on the "Go online" button. The online connection is established.
Result
You can find detailed diagnostics information on each device in the Inspector window, in the "Diagnostics" section of the area navigation on the "Properties" tab.
Diagnostics
38
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4.2.2.5
"Diagnostics" tab in the Inspector window
"Diagnostics" tab in the Inspector window
The "Diagnostics" tab of the Inspector window includes information on diagnostics events and configured alarm events.
Figure 4-10 Diagnostics in the Inspector window, "Device information" tab
Note Symbols and their meaning You can find a legend with the meaning of each symbol in Explanation of diagnostics symbols (Page 29) and in the online help for STEP 7.
Subordinate "Device information" tab
This tab gives you an overview of faulty devices to which an online connection exists or has existed. The table provides the following diagnostics information on the faulty devices:
Online status: Includes the online status as diagnostics symbol and in words
Operating mode: Includes the operating mode as symbol and in words
Device/module: Name of the affected device or the affected module
Connection established via ...: Specifies the path used to establish the connection to the failed device.
Alarm: This explains the entry in the previous columns and displays an alarm, if necessary
Details: The link opens the online and diagnostics view associated with the device or puts it in the foreground. If the device cannot be reached, the link opens the "Go online" dialog.
Help: The link provides additional information on the fault.
Note Communication and access errors
Errors that occur in the user program (e.g., communication errors, access errors) are not reported in the "Diagnostics" tab of the device information. You must read out the diagnostics buffer of the CPU in the online and diagnostics view to get this information. The link in the "Details" column opens the diagnostics buffer.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
39
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Subordinate "Connection information" tab
The "Connection information" tab displays detailed diagnostics information for connections. There will only be information on the "Connection information" tab if there is an active online connection to at least one end point of the relevant connection. If a connection has been selected (connection table), the tab contains the following groups: Connection details Address details of the connection
Figure 4-11 "Connection information" tab and open connection overview
If a module has been selected (network view), the tab contains the following group: Connection resources
Diagnostics
40
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Subordinate "Alarm display" tab
System diagnostics alarms are output in the "Alarm display" tab.
Figure 4-12 "Alarm display" tab To receive alarms in STEP 7, follow these steps: 1. Open the project view. 2. Select the required CPU in the project tree. 3. To connect online with the respective CPU, select the shortcut menu command "Go online". 4. Select the required CPU once again in the project tree and select the shortcut menu command "Receive alarms".
Figure 4-13 Receive alarms
5. Alarms are now displayed in the alarm display. "Archive view" is enabled by default. 6. To display the latest alarms, click the "Active alarms" icon .
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
41
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4.2.2.6
CPU diagnostics buffer
Definition
Each CPU and some other modules have their own diagnostics buffer, in which detailed information on all diagnostic events is entered in the order in which they occurred.
The CPU diagnostics buffer can be displayed on all display media (STEP 7, SIMATIC HMI devices, SIMATIC S7-1500 Web server and display of the CPU).
Diagnostic events
The entries available in the diagnostics buffer include:
Internal and external errors on a module
System errors in the CPU
Operating mode transitions (e.g., from RUN to STOP)
Errors in the user program
Removal/insertion of modules
Security events
The contents of the diagnostics buffer are stored in the retentive memory in case of a memory reset of the CPU. Errors or events can be evaluated even after a longer period of time thanks to the diagnostics buffer to determine the cause of a STOP or to trace the occurrence of a single diagnostic event and to be able to assign it.
Diagnostics
42
Function Manual, 11/2019, A5E03735838-AF
Procedure
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
To display the diagnostics buffer of a CPU in STEP 7, follow these steps: 1. Select the respective CPU. 2. Select the shortcut menu command "Online & Diagnostics".
The "Online access" view is opened in the work area.
Figure 4-14 Setting up online access 3. Set the interface.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
43
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4. Click
.
5. Select the area "Diagnostics buffer".
Figure 4-15 Diagnostics buffer in STEP 7
Note Filtering events You can filter the entries in the diagnostics buffer in the settings of the "Diagnostics buffer" area to only display specific types of events. This means that specific events, such as "CPU and configuration-internal events" or "Connection diagnostics events", can be displayed separately.
Diagnostics
44
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Security events
The following security events (event types) result in an entry in the diagnostics buffer. Going online with the correct or incorrect password Manipulated communications data detected Manipulated data detected on memory card Manipulated firmware update file detected Changed protection level (access protection) downloaded to the CPU Password legitimization restricted or enabled (by instruction or CPU display) Online access denied due to the possible number of simultaneous access attempts being
exceeded Timeout when an existing online connection is inactive Logging on to the Web server with the correct or incorrect password Creating a backup of the CPU Restoring the CPU configuration (Restore) To prevent the diagnostics buffer being "swamped" by large numbers of identical security events, you can set parameters so that these events are entered in the diagnostics buffer as a group alarm. For every interval (monitoring time), the CPU then only generates one group alarm per event type.
Configuring a group alarm for security events To configure group alarms for security events, follow these steps: 1. Click on the CPU icon in the network view.
The properties of the CPU are displayed in the Inspector window. 2. Navigate to the "Protection" > "Security event" area. 3. Click "Security event". 4. Select the option "Summarize security events in case of high message volume" to enable
group alarms for security events. 5. Set the duration of an interval (monitoring period); the default is 20 seconds.
4.2.2.7
"Online tools" task card
Online view in the "Online tools" task card
The following requirements must be met to display the online view of the "Online tools" task card in STEP 7:
An online connection to the CPU is available.
You have selected the CPU in the topology view, network view or device view.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
45
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
The "Online tools" task card provides an overview of the CPU state, the cycle time and the memory usage.
The "CPU operator panel" pane displays the current state of some LEDs and the mode selector of a CPU.
The "Cycle time" pane displays the cycle time diagram and below it the measured cycle times as absolute values.
The "Memory" pane contains the current memory usage of the associated CPU. The free memory is shown both as a bar graph and as a numerical value (percentage). The display for "Load memory" contains, in addition to the online project data (program code, data blocks, hardware configuration etc.), all other data that may be on the SIMATIC memory card, such as recipes, data logs, HMI backups or non-SIMATIC files that have been copied to the memory card via the Web server of the CPU or offline in Explorer (for example, PDF files).
Figure 4-16 "Online tools" task card
Diagnostics
46
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4.2.2.8
Configuring the settings for I/O modules in STEP 7
You can also make settings for system diagnostics in STEP 7 for I/O modules. The parameters you have to configure depend on the I/O module.
The settings are optional.
Requirements
STEP 7 is open. A project is open. The project view is open. A design with I/O modules has been configured.
Procedure
To make settings for system diagnostics of I/O modules in STEP 7, follow these steps:
1. Select the respective I/O module in the device view.
2. Open the "Properties" tab in the Inspector window.
3. Select the area "Inputs", for example.
You have access to the settings for system diagnostics of the I/O module. If you select "Wire break", for example, a possible wire break for the channel is signaled during operation.
Figure 4-17 I/O setting with a digital input module
4. Save the hardware configuration. 5. Download the new hardware configuration to the CPU.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
47
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Additional information
The documentation for the respective module includes additional information on parameter assignment of I/O modules.
4.2.3
Diagnostics information using the web server
System diagnostics using the CPU Web server
The CPUs of the SIMATIC series have an integrated Web server and let you display the system diagnostics information by means of PROFINET. Any terminal devices, such as PCs or smartphones, can thus access module data, user program data and diagnostics data of a CPU by using an Internet browser. This means access to CPUs is possible without installed STEP 7.
In addition to normal websites, the Web server provides so-called basic websites with reduced content that are adapted to the requirements of small screens with low resolution.
Using CPU 1516-3 PN/DP as an example, the following figure shows the start page of the Web server:
Figure 4-18 Web server, Start page 48
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
The following diagnostics options are available with the integrated Web server: Start page with general CPU information Information on diagnostics Contents of the diagnostics buffer Module information Alarms Information about communication PROFINET topology Motion Control diagnostics Trace
Configuring the Web server in STEP 7
Proceed as follows to activate the Web server:
Requirements You have opened STEP 7. You have added a CPU to the project. You have opened the project view.
Procedure 1. Open the network view. 2. Select the CPU. 3. Open the "Properties" tab in the Inspector window. 4. Select the entry "Web server" in the "General" area navigation.
Figure 4-19 Activate the Web server
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
49
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
5. Select the "Activate web server on this module" check box.
6. "Permit access only with HTTPS": The activation of the Web server using the secure transmission protocol "HTTPS" requires a valid Web server certificate in the CPU.
NOTICE
Utilizing the full functionality of the Web server
A valid CA-signed Web server certificate in the CPU is a requirement for: · User management with password-protected users · Saving and downloading diagnostic information in csv files · Using the following safety-related functions:
Backing up and restoring the CPU configuration
To use the full functionality of the Web server, we recommend that you create a CAsigned server certificate and assign it to the CPU.
To create a CA-signed Web server certificate, you must enable the Certificate Manager in the global security settings of STEP 7 and assign a CA-signed server certificate to the Web server in the properties of the CPU.
You can find additional information on handling Web server certificates in the "Configuring the Web server" section of the Web server function manual (http://support.automation.siemens.com/WW/view/en/59193560).
Detailed information on Certification Authority (CA) certificates, device certificates (End Entity certificate), "Public Key Infrastructure" (PKI) and certificate management can be found in the Communication function manual (https://support.industry.siemens.com/cs/ww/en/view/59192925) and in the online help for STEP 7, keyword "Secure communication".
7. Automatic updating is activated in the default setting of a configured CPU.
8. Activate the Web server also for each interface via which you want to access the Web server. To do this, open the "Properties" tab in the Inspector window and select the "Web server" entry in the "General" area navigation. In the "Overview of interfaces" area, select the "Enabled web server access" check box for the corresponding interface.
9. Compile and load the configuration into the CPU.
Diagnostics
50
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Accessing the Web server
To access the Web server, proceed as follows:
1. Connect the display device (PG/PC, HMI, mobile terminal device) with the CPU or a communication module using a PROFINET interface. If you are working with WLAN, activate the WLAN on the display device and establish a connection to the access point (e.g. SCALANCE W788-1RR or SCALANCE W784-1), which is in turn connected to the CPU.
2. Open the web browser on the display device.
3. Enter the IP address of the interface of the CPU which is connected to the client in the "Address" field of the web browser in the following format: http://a.b.c.d or https://a.b.c.d (example input: https://192.168.3.141). The intro page of the CPU opens.
4. You need to perform the installation of the CA certificate again for each display device you want to use. A valid CA certificate is available for download from the "Intro" web page under "Download certificate". You can find instructions for installing the certificate in the help system of your Web browser and in the FAQ with the entry ID 103528224 at the Service&Support (https://support.industry.siemens.com/cs/ww/en/view/103528224) website.
5. Click the NEXT link to go to the Web server pages.
Note Managing access rights
In STEP 7, you can create users, define access rights and assign passwords under "Web server > User management". Users only have access to the options that are permanently linked to the access rights.
You can find additional information on managing access rights in the "Configuring the Web server" section of the Web server function manual (http://support.automation.siemens.com/WW/view/en/59193560).
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
51
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
"Diagnostics" option
The "Diagnostics" web page provides more information about the tabs: Identification
This tab contains the characteristics of the CPU (serial number, article number, hardware and firmware version, etc.). Program protection This tab provides information on whether the PLC program contains know-how protection or copy protection. Memory This tab contains current values on the memory currently in use. Runtime information Current information on program/communication load and cycle time can be found in this tab. Fail-safe (only with an F CPU) The safety program of an F-CPU consists of one or two F-runtime groups. You can find their cycle time (F-monitoring time) and runtime in this tab.
Figure 4-20 Web server, "Diagnostics" Web page
Diagnostics
52
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics Diagnostics option "Diagnostics buffer" The browser displays the content of the diagnostics buffer on the "Diagnostics buffer" Web page.
Figure 4-21 Web server, "Diagnostics buffer" Web page
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
53
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Diagnostics option "Module information"
The status of a device is indicated by the Web browser with symbols and comments on the "Module information" Web page. Modules are displayed on the "Module information" Web page in the "Name" column with a link. You can thus get to the faulty module in hierarchical order.
Figure 4-22 Web server, "Module information" Web page
Diagnostics option "Messages"
The Web browser displays the content of the message buffer on the "Messages" Web page. The messages can be acknowledged via the Web server if you have the appropriate user rights.
Figure 4-23 Web server, "Messages" Web page
Diagnostics
54
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Diagnostics option "Communication"
The "Communication" web page provides detailed information about the following tabs: Parameter
A summary of the information on the PROFINET and Ethernet interfaces of the selected CPU is available in this tab. Statistics You will find information on data transmission in this tab. Resources Information about the resource consumption of the connections is available in this tab. Connections Information about the status of the communication connections is available in this tab.
Figure 4-24 Web server, "Communication" Web page
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
55
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics "Topology" diagnostics option
The "Topology" Web page provides information on the topological configuration and status of the PROFINET devices in your PROFINET IO system.
Figure 4-25 Web server, "Topology" Web page
Diagnostics
56
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
"Motion Control Diagnostics" diagnostic option
The Web server displays statuses, errors, technology alarms and the current values of the configured technology objects (TOs). The "Motion Control Diagnostics" web page provides detailed information on the configured technology objects in the following views: Diagnostics
This view provides an overview list of configured technology objects, the status and error messages of a selected technology object, as well as values and limits of the movement status for a selected axis. Service overview This view contains diagnostic information for multiple technology objects and a filter option for selecting the displayed technology objects.
Figure 4-26 Web server, "Motion Control diagnostics" webpage
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
57
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics "Trace" diagnostic options
You can read, view and save the trace recordings via the Web server and thus obtain plant and project information for diagnostics and maintenance. The web page of the trace and logic analyzer function consists of several areas. The example in the figure below shows how the Web server user interface is divided when the "Trace" web page is first called.
Figure 4-27 Web server, "Trace" home page (without measurement)
Additional information
Additional information on the topic is available in the Web server function manual (http://support.automation.siemens.com/WW/view/en/59193560). You can find additional information on the trace function in the Using the trace and logic analyzer function (https://support.industry.siemens.com/cs/ww/en/view/64897128) function manual.
Diagnostics
58
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4.2.4
Diagnostics information using the HMI diagnostics view
Objects for system diagnostics
The full functionality of the HIM diagnostics view is only available with Comfort Panels and WinCC RT Advanced . Basic Panels do not support the complete range of system diagnostics functions.
Two objects are available for system diagnostics on an HMI device.
System diagnostics view
The system diagnostics view reflects the current status of all accessible devices in your plant. You navigate directly to the cause of the error and the associated device. You have access to all diagnostics-capable devices that you have configured in the STEP 7 hardware and network editor.
System diagnostics window
The system diagnostics window is an operating element and display object. The functions of the system diagnostics window are the same as for the system diagnostics view. Because the system diagnostics window is configured in the "Global screen", you can also specify, for example, if the object can be closed in WinCC Runtime.
Note Compatibility with Basic Panels Only the "System diagnostics view" object is available with Basic Panels. Basic Panels do not support the "System diagnostics window" object or the graphic symbol "System diagnostics indicator".
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
59
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4.2.4.1
Configuring system diagnostics
Introduction
You add a system diagnostics view or a system diagnostics window to your project to get an overview of all devices available in your plant.
The system diagnostics window behaves like the system diagnostics view but is only available in the global screen.
Requirements
At least one CPU has been set up in the project. An HMI device (e.g., Comfort Panel) has been set up in the project. CPU and the HMI device are connected with each other by an HMI connection. You have created a screen (for the system diagnostics view). The global screen is open (for the system diagnostics window). The Inspector window is open.
Diagnostics
60
Function Manual, 11/2019, A5E03735838-AF
Procedure
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Proceed as follows to configure the system diagnostics: 1. Double-click the "System diagnostics view" object in the "Tools" task card. The object is
added to the screen.
Figure 4-28 Adding a system diagnostics view
2. Select the "Properties" tab in the Inspector window. 3. Select the area "Columns". 4. Enable the columns that you require in the device view for WinCC Runtime, for example:
Status Name Operating mode Slot Address 5. Enable the columns that you require in the detail view for WinCC Runtime, for example: Status Name Operating mode Plant designation Address 6. You can change the column headers in the "Columns" area, if necessary. 7. Select the "Display" area. 8. Enable "Column settings > Columns moveable" to move the columns in WinCC Runtime. 9. To close the system diagnostics window in WinCC Runtime, select "Properties > Window > Closable" in the "Properties" tab of the Inspector window.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
61
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Result
The system diagnostics view has been added to the screen. The diagnostics status of the entire plant is displayed in the system diagnostics view in WinCC Runtime.
Figure 4-29 System diagnostics view in the screen
The system diagnostics window has been added to the global screen. If there is an error message in the plant, the system diagnostics window responds and displays the affected device.
Diagnostics
62
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4.2.4.2
Different views of the HMI diagnostics view
Introduction
There are three different views available in the system diagnostics view and the system diagnostics window. Device view Details view Distributed I/O view (only for PROFIBUS and PROFINET systems)
Device view
The device view shows all the available devices of a layer in a table. Double-clicking on a device opens either the lower-level devices or the detail view. Symbols in the first column provide information about the current state of the device.
Figure 4-30 Device view
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
63
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Details view
The detail view gives detailed information about the selected device and any pending errors. Check whether the data is correct in the detail view.
Figure 4-31 Details view
Diagnostics
64
Function Manual, 11/2019, A5E03735838-AF
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Distributed I/O view
The distributed I/O view is only available for distributed I/O systems. The distributed I/O view shows the status of the devices of the PROFIBUS/PROFINET subnet. Each element in the view shows the device name, the device type and the IP address or the PROFIBUS address.
Figure 4-32 Distributed I/O view
Navigation buttons
Button
Function Opens the lower-level devices or the detail view if there are no lowerlevel devices.
Opens the higher-level device or the device view if there is no higherlevel device.
Opens the device view.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
65
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
4.2.4.3
Inserting system diagnostics indicator
Introduction
The system diagnostics indicator is a predefined graphic symbol of the library which alerts you to errors in your plant. The library object shows two different states: No error Error
Requirements
An HMI device (e.g., Comfort Panel) has been set up in the project. The "Libraries" task card is opened. The global library "Buttons and Switches > DiagnosticsButtons" is open. A screen is open. The system diagnostics window has been set up in the global screen.
Diagnostics
66
Function Manual, 11/2019, A5E03735838-AF
Procedure
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
1. Select the "DiagnosticsIndicator" object in the library. 2. Drag-and-drop the library object to the position in the work area where you want to insert
the object. The library object is added.
Figure 4-33
Inserting library object in the work area 3. Select the library object. 4. Open the "Events" tab in the Inspector window. The "ShowSystemDiagnosticsWindow" is preset for the event "Click".
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
67
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Result
The system diagnostics indicator has been added to the project and connected with the system diagnostics window.
The system diagnostics indicator changes its appearance if an error message is output in WinCC Runtime. The system diagnostics window opens when you click on the system diagnostics indicator. The system diagnostics window shows the detail view of the affected device.
Configuring access protection for the system diagnostics window
Configure access protection for the system diagnostics indicator to prevent unauthorized access to the system diagnostics windows.
1. Select the "DiagnosticsIndicator" object in the screen.
2. Open the "Properties" tab in the Inspector window.
3. Select an authorization in the "Security in Runtime" area.
A logon dialog opens when you click on the system diagnostics indicator in WinCC Runtime. The system diagnostics window does not open unless you have the required authorization.
4.2.4.4
Configuring button as system diagnostics indicator
Introduction
Instead of using the object "DiagnosticsIndicator" from the library, you can, for example, configure a button in "Graphic" mode to indicate errors in your plant.
Requirements
At least one CPU has been created. An HMI device (e.g., Comfort Panel) has been set up in the project. The "Tools" task card is open. A bit graphics list has been created with two different graphics for the states. A screen is open. You have created a system diagnostics view.
Diagnostics
68
Function Manual, 11/2019, A5E03735838-AF
Procedure
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Follow these steps to configure a button as system diagnostics indicator: 1. Double-click the "Button" object in the "Tools" task card. A button is added to the screen. 2. Enable the "Properties" tab in the Inspector window and the "Graphic" mode in the
"General" area. 3. Select the bit graphics list as graphics list. 4. Select the "Properties" tab in the Inspector window and select the tag
@DiagnosticsIndicatorTag under "Tag" in the "General" area. 5. To assign a function to the button, select the "Events" tab in the Inspector window. 6. Select the "Click" event. 7. Click on "Add function" in the table. 8. Select "EnableSystemDiagnosticsView". 9. Select the system diagnostics view.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
69
Setting and determining system diagnostics 4.2 Options for displaying system diagnostics
Result
You have configured an interface that reacts to error events from the CPU. The button changes when an error event occurs in Runtime.
Figure 4-34 Configured button
The button has two states. Error
The system diagnostics view opens when you click on the button. The system diagnostics view shows the detail view of the affected device. No error The system diagnostics view opens when you click on the button. The system diagnostics view shows the device view.
Diagnostics
70
Function Manual, 11/2019, A5E03735838-AF
System diagnostics by means of the user program
5
5.1
Options of system diagnostics in the user program
Introduction
You can configure responses to diagnostics alarms in the user program. You can, for example, specify that your plant is stopped in case of specific diagnostics alarms.
Instructions
A vendor-independent structure of data records with diagnostics information applies. The following instructions are available for determining the system diagnostics of a device:
Table 5- 1 Instructions for determining the system diagnostics
Instruction RDREC
RALRM
DPNRM_DG GEN_DIAG
Gen_UsrMsg GET_DIAG
GET_Name T_DIAG
RD_SINFO
LED Get_IM_Data
DeviceStates ModuleStates
Description · Reads data records of a component (module or submodule) of a DP slave/IO device that may
contain error information · Works asynchronously, which means processing takes place across several calls · Reads the start information of the OB when calling the diagnostics interrupt OB (OB 82) · Provides information on cause and location of error · Reads the current diagnostics data of a DP slave (DP standard diagnostics) · Generates diagnostics information · To generate diagnostics information, the module or submodule is identified with its logical address · Generates an alarm that is entered in the diagnostics buffer · Provides diagnostics information · To provide diagnostics information, the module or submodule is selected · Reads the name of an IO device · Provides diagnostics and status information on a connection · Works asynchronously, which means processing takes place across several calls · Reads the start information of the OB called last that has not been processed completely and the
startup OB started last · Provides general error information · Reads the status of the module LED · Reads the Information&Maintenance data of the CPU · Works asynchronously, which means processing takes place across several calls · Outputs the state of all devices of an IO system · Outputs the state of all modules of a device
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
71
System diagnostics by means of the user program 5.1 Options of system diagnostics in the user program
Additional information
Online help In the online help for STEP 7, you can find: Additional information on instructions for system diagnostics Information about further options for evaluating diagnostic information in the user program
(e.g. with the "RDREC", "RALRM", "GET_DIAG" instructions) Information on SIMATIC ProDiag. This functionality enables targeted and fast machine
and plant diagnostics for SIMATIC S7-1500 and SIMATIC HMI: Standardized diagnostics concept for different SIMATIC components No additional configuration work for diagnostics functionality Reduces the load on PLC memory and program run time You can find details in the online help under "Supervising machinery and plants with ProDiag".
Manuals You can find additional information about evaluating diagnostic information in the user program in the following manuals: PROFINET function manual
(http://support.automation.siemens.com/WW/view/en/49948856) From PROFIBUS DP to PROFINET IO
(https://support.industry.siemens.com/cs/ww/en/view/19289930) programming manual Manual for the respective module
Application examples You can find detailed application examples with further documentation and example projects on the Service&Support Website: Diagnostic overview for SIMATIC S7-1200 and S7-1500
(https://support.industry.siemens.com/cs/ww/en/view/109752283)
FAQ For more information about how to realize channel diagnostics in the user program of the SIMATIC S7-1500, refer to the FAQ with entry ID 109480387 on the Service&Support Website (https://support.industry.siemens.com/cs/ww/en/view/109480387).
Diagnostics
72
Function Manual, 11/2019, A5E03735838-AF
System diagnostics by means of the user program 5.2 System diagnostics using process image inputs
5.2
System diagnostics using process image inputs
Introduction
In addition to event-driven system diagnostics, the input and output modules of the SIMATIC series provide diagnostics information using the process image input.
The system diagnostics described in the preceding sections is made available asynchronously to the program processing. To ensure the correct processing of the input and output data in the case of faults while reading the input and output data, some modules offer the so-called value status (QI = Quality Information) for evaluation.
Requirement for evaluation of the value status
The diagnostics information about the process image input is transmitted synchronized with the user data. Select the "Value status" check box in the properties of the I/O module in STEP 7 if you want to evaluate the value status of the channel.
Figure 5-1 Enable value status
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
73
System diagnostics by means of the user program 5.2 System diagnostics using process image inputs
Evaluation of the value status
If you have enabled the value status for an I/O module, this module provides additional information on the value status in addition to the user data. This information is directly available in the process image input and can be called with simple binary operations.
Each channel is uniquely assigned one bit in the value status. The bit in the value status indicates the validity of the read-in value in the user data.
Table 5- 2 Example for evaluation of the user datum in case of a wire break for a digital input module
Faulty channel Fault-free channel
Bit in user datum Logical 0 Logical 0 (actual value)
Bit in value status 0 1
Value in user datum Invalid Valid
Influence of the value status
The value status of an active channel is "Invalid" when any one of the following factors is given:
Channel diagnostics pending (regardless of whether diagnostics, for example wire break, is configured for this channel)
For output channels: "Reaction to CPU STOP" feature is active (due to CPU STOP, interrupted connection)
For output channels of the digital on-board I/O of compact CPUs: If a channel is used for technology functions, it returns the value status 0 ("Invalid"). It does not matter in this context whether the output value is incorrect or not.
PROFIenergy is active, i.e. hibernation is enabled (except in "Continue working mode")
When working with non-fail-safe modules, note that an invalid active channel also sets the value status of all other active channels to "Invalid". We therefore recommend that you disable all unconnected or unused channels.
Diagnostics
74
Function Manual, 11/2019, A5E03735838-AF
System diagnostics by means of the user program 5.2 System diagnostics using process image inputs
Example - Evaluation of the value status for the input channel of an analog input module
The example below shows the basic evaluation of the value status for the input channel of an analog input module in the user program. The diameter of a cylinder is measured by means of a channel and its circumference is calculated. If the value status indicates the channel is error-free, the circumference is to be
calculated. If the value status indicates the channel is defective, the value "0" is to be output as
substitute value for the circumference. The figure below shows the evaluation of the value status in the user program.
Figure 5-2 Example - Evaluation of the value status in the user program
Additional information
Depending on the I/O module, the value status reserves different addresses in the process image input. The manual for the module used includes specific information on the assignment and arrangement.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
75
Alarms
6
Introduction
Alarms allow you to display events from processing in the automation system and to quickly detect errors, to precisely localize them and to remove them. Downtimes are significantly reduced in a plant.
Before alarms can be output, they need to be configured.
You can create, edit and compile event-dependent alarms along with their alarm texts and alarm attributes and display them on display devices.
In STEP 7, you create program alarms in the user program with the "Program_Alarm" instruction. You edit the attributes and alarm texts in the alarm editor in STEP 7.
You can output the alarm status with the "Get_AlarmState" instruction.
Advantages of program alarms
Compared to other alarm methods, such as HMI discrete alarms, program alarms offer the following advantages:
Central engineering in STEP 7: You only configure a program alarm once for the CPU. The program alarm is automatically transferred from the CPU to all registered HMI devices.
System-supported acknowledgment: The acknowledgment of a program alarm on an HMI device is automatically updated on other HMI devices by the CPU.
Time stamping close to the event in the CPU
Identical time stamps of the alarms on multiple HMI devices without time synchronization
Diagnostics
76
Function Manual, 11/2019, A5E03735838-AF
Alarms 6.1 Creating alarms with the "Program_Alarm" instruction
6.1
Creating alarms with the "Program_Alarm" instruction
"Program_Alarm" instruction
You create a program alarm in STEP 7 with the "Program_Alarm" instruction. The figure below shows the "Program_Alarm" instruction with the most important input tags.
The "Program_Alarm" instruction monitors the signal at the SIG block input and generates a
program alarm in case of a signal change at the SIG parameter. The instruction generates an incoming alarm when the signal changes from 0 to 1 and an outgoing program alarm if the signal changes from 1 to 0. The program alarm is triggered synchronously to program execution.
The time stamp is automatically created when the alarm event occurs in the automation system
and is passed along with the alarm.
You can append up to ten associated values to the program alarm at the parameters SD_i (1
i 10). The associated values are acquired at the time of the signal change at the SIG parameter and assigned to the program alarm. Associated values are used to display dynamic contents in alarms. Example: The temperature in the tank <associated value 1> is <associated value 2> °C.
You can find more information on associated values in the STEP 7 online help.
Figure 6-1 "Program_Alarm" instruction
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
77
Alarms 6.2 Editing alarms in the alarm editor
Note
The "Program_Alarm" instruction can only be called in a function block.
A program alarm can be up to 256 bytes long in total (with associated values and texts from the text list).
The associated values can be a maximum of 512 bytes in length. Text lists are not affected by this.
The CPUs of the SIMATIC S7-1500 product series have the following memory for text lists: · CPU 1510-x to CPU 1513-x: 2.25 MB · CPU 1515-x to CPU 1516-x: 4.5 MB · CPU 1517-x to CPU 1518-x: 6.75 MB
The number of configurable program alarms depends on the CPU used. With a CPU 1515-2 PN, for example, a maximum of 10,000 program alarms are possible. You can find this information in the device manual for the respective CPU under "Number of configurable alarms".
The number of simultaneously active "Program_Alarms" depends on the CPU used. With a 1515-2 PN CPU, for example, a maximum of 600 program alarms are possible. You can find this information in the device manual for the respective CPU under "Number of reserved user interrupts".
Sometimes, it is not possible for all program alarms that are active at the same time to be output within one cycle. Query the status of each "Program_Alarm" and activate the instruction again, if necessary. The cycle time is increased for a short time by simultaneously activating/sending multiple "Program_Alarms".
A maximum of 40,000 program alarms should be configured in a STEP 7 project on a 64-bit operating system.
Additional information
You can find more information on creating program alarms in the STEP 7 online help under "Creating and editing alarms".
6.2
Editing alarms in the alarm editor
Introduction
You can edit the created alarms in STEP 7 either in the program editor or in the alarm editor.
You can find additional information on editing alarms in the program editor in the STEP 7 online help under "Creating and editing alarms".
Diagnostics
78
Function Manual, 11/2019, A5E03735838-AF
Alarms 6.2 Editing alarms in the alarm editor
Editing alarms in the alarm editor
You can edit alarm texts in the alarm editor and specify attributes such as alarm class or priority for the alarms. 1. Double-click "PLC supervisions & alarms" in the project tree. Select the "Alarms" tab. The
alarm editor opens. 2. Enter the required texts and attributes in the appropriate columns. The figure below shows the layout of the alarm editor.
"Program alarms" tab: You can edit program alarms here.
"System alarms" tab: System alarms can only be viewed but not edited. To edit these alarms, you must navigate to
the device view ("Go to device" menu command), where you can modify the system diagnostics alarms in the In-
spector window.
"Type alarms" area:
This is where the type alarms created in a function block with the "Program_Alarm" instruction are displayed. Type
alarms serves as templates for instance alarms ().
All the inputs you make for the type alarm are automatically included in the instance alarms derived from it.
You can find more information on type alarms in the STEP 7 online help under "Alarm types and alarms".
"Instance alarms" area:
When you assign an instance DB to the message block (for example, call in an OB, FB, FC), instance alarms are automatically generated based on the template of the type alarm and alarm numbers are assigned. You can modify the instance alarms for specific instances.
You can find more information on instance alarms in the STEP 7 online help under "Alarm types and alarms".
Properties of the selected type and instance alarm in the Inspector window
Figure 6-2 Layout of the alarm editor
You can enter or modify the necessary parameters, texts and attributes in the table or in the Inspector window.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
79
Alarms 6.2 Editing alarms in the alarm editor
Multilingual alarms
You can have program alarms displayed in multiple languages by assigning different project languages to the interface languages of the display devices.
Note The project languages you want to assign must be activated and the corresponding texts (translations) must be available in the project. The project language selection can be found in the project tree under "Languages & Resources".
To create the texts of the program alarm as multilingual, follow these steps: 1. In the Inspector window of the alarm editor, open the "Properties" tab and the lower-level
"Texts" tab. 2. Enter the text in the desired project language. 3. Open the "Properties" tab in the Inspector window of the CPU and select the "Display"
command in the "General" area navigation. Under "Multilingual", assign one of the activated project languages to each interface language of the display devices. Overall, you can assign up to three different project languages to the user interface languages. All assigned project languages are loaded into the CPU.
Additional information
You can find additional information on texts and attributes in the STEP 7 online help under "Texts and attributes". You can find more information on text lists in the STEP 7 online help under "Text lists for alarms".
Diagnostics
80
Function Manual, 11/2019, A5E03735838-AF
Alarms 6.3 Display of program alarms
6.3
Display of program alarms
Program alarms you create with the "Program_Alarm" instruction are automatically made available to the display devices.
You have the following options to display the alarms:
STEP 7
HMI
Web server of the CPU
Display of the CPU
Figure 6-3 Display of program alarms
Multilingual alarms You can have program alarms displayed in multiple languages by assigning different project languages to the interface languages. See section Editing alarms in the alarm editor (Page 78).
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
81
Alarms 6.4 Output of the alarm state with the "Get_AlarmState" instruction
6.4
Output of the alarm state with the "Get_AlarmState" instruction
"Get_AlarmState" instruction
The "Get_AlarmState" instruction outputs the alarm state of a program alarm. The output of the alarm state always refers to a program alarm that was created using the "Program_Alarm" instruction.
The program alarm is selected with the "Alarm" input parameter. Specify the instance DB of the "Program_Alarm" instruction at the "Alarm" parameter.
Figure 6-4 Call - Get_AlarmState
Additional information
You can find additional information on evaluation of the "Get_AlarmState" instruction in the STEP 7 online help.
Diagnostics
82
Function Manual, 11/2019, A5E03735838-AF
Alarms 6.5 Example program for program alarms
6.5
Example program for program alarms
6.5.1
Task
Introduction
This section describes the basic configuration of program alarms with the "Program_Alarm" instruction based on two examples. The two examples solve the same problem but use a different approach. Example 1 does not use associated values. In example 2, an associated value is assigned to the program alarm to reference a text list.
Example - Minimum/maximum fill level of a tank
A tank is filled with a liquid. The fill level is monitored by two sensors. If the liquid in the tank drops below a minimum fill level, an alarm is output for low fill level. If the liquid in the tank exceeds a maximum fill level, an alarm is output for high fill level.
Figure 6-5 Example for fill level alarms
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
83
Alarms 6.5 Example program for program alarms
6.5.2
Example 1: Program alarm without associated values
Introduction
In this example, you create a program alarm for the maximum and the minimum fill level.
How the example works
When the maximum fill level is exceeded in the tank, a program alarm with the alarm text for the excessive fill level is output.
When the minimum fill level is undershot in the tank, a program alarm with the alarm text indicating that the fill level is too low is output.
Steps
The following steps are necessary for this example: 1. Define tags for signal acquisition 2. Create function block 3. Create program alarms 4. Call function block 5. Edit alarm text
Define tags for signal acquisition
The following table shows the tags that are used in this example. Define these tags in the standard tag table. The standard tag table is available in the project tree under "PLC tags".
Table 6- 1 Tags for fill level alarms
Name max
min
Data type BOOL
BOOL
Description Tag for maximum fill level If "max" = 1, the maximum fill level is exceeded. Tag for minimum fill level If "min" = 1, the minimum fill level is undershot.
The figure below shows the standard tag table with the defined tags "max" and "min".
Figure 6-6 Define tags 84
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Alarms 6.5 Example program for program alarms
Create function block
To create a function block, follow these steps: 1. Open the "Program blocks" folder in the project tree. 2. Double-click "Add new block".
The "Add new block" dialog opens. 3. Select the button "Function block".
Figure 6-7 Create FB
4. Enter a name for the new block. 5. Select the language SCL. 6. Click on "OK" to confirm your input. Result: You have created a function block.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
85
Alarms 6.5 Example program for program alarms
Create program alarms
To create the program alarm for the example program, follow these steps: 1. Select the created function block (FB) in the "Program blocks" folder in the project tree
and double-click the function block to open it. 2. Insert the call of the "Program_Alarm" instruction in the instruction part of the function
block. The "Program_Alarm" instruction is available in the "Instructions" task card under "Extended instructions" > "Alarms". The "Call options" window opens.
Figure 6-8 Call Program_Alarm
3. Enter "level_max" as the name and confirm the call options by clicking "OK".
Result: The input tags of the "Program_Alarm" instruction are displayed in the instruction part.
4. Supply the SIG input tag of the "Program_Alarm" instruction with the tags for the maximum fill level.
#level_max(SIG:="max");
SIG: If a signal change occurs at the SIG input tag, the "Program_Alarm" instruction generates a program alarm.
5. Insert another call of the "Program_Alarm" instruction. The "Call options" window opens.
6. Enter "level_min" as the name and confirm the call options by clicking "OK".
Result: The input tags of the "Program_Alarm" instruction are displayed in the instruction part.
7. Supply the SIG input tag of the "Program_Alarm" instruction with the tags for the minimum fill level.
#level_min(SIG:="min");
Result: You have created two type alarms.
Diagnostics
86
Function Manual, 11/2019, A5E03735838-AF
Alarms 6.5 Example program for program alarms Call function block To call the function block in the user program, follow these steps: 1. In the "Program blocks" folder, select the cycle OB (e.g., OB1) in which you want to call the function block and open the cycle OB with a double-click. 2. Select the function block you want to call in the "Program blocks" folder. 3. Drag the function block into the instruction part of the cycle OB. The "Call options" window opens.
Figure 6-9 Call function block 4. Confirm the call options by clicking "OK". Result: You have called the alarm block in the user program and created an instance alarm.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
87
Alarms 6.5 Example program for program alarms
Edit alarm text
To edit the alarm text, follow these steps: 1. Double-click "PLC supervisions & alarms" in the project tree. Select the "Alarms" tab. The
alarm editor opens. 2. Select the type alarm for the maximum fill level. 3. Enter the alarm text for the maximum fill level in the "Alarm text" column. 4. Select the type alarm for the minimum fill level. 5. Enter the alarm text for the minimum fill level in the "Alarm text" column.
Figure 6-10 Edit alarm text Result: You have created the alarm texts for both type alarms.
Additional information
You can learn how to create multilingual texts under "Multilingual alarms" in the section Editing alarms in the alarm editor (Page 78).
Diagnostics
88
Function Manual, 11/2019, A5E03735838-AF
Alarms 6.5 Example program for program alarms
6.5.3
Example 2: Program alarm with associated value
Introduction
In this example, you create a shared program alarm for the maximum and the minimum fill level. The program alarm is given an associated value. The program alarm uses the associated value to access a text list entry and outputs a separate alarm text for the minimum and the maximum fill level.
How the example works
The program alarm is output if either the minimum fill level is undershot or the maximum fill level is exceeded.
The associated value 1 of the "Program_Alarm" instruction is assigned the tag for the maximum fill level. The associated value references a text list with the entries "0" and "1".
The following scenarios are possible for output of the alarm text:
Associated value is "0": The entry "0" of the text list with the alarm text for the undershot fill level is output.
Associated value is "1": The entry "1" of the text list with the alarm text for the excessive fill level is output.
Steps
The following steps are necessary for this example: 1. Define tags for signal acquisition 2. Create function block 3. Create program alarm 4. Call function block 5. Create a text list 6. Edit alarm text
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
89
Alarms 6.5 Example program for program alarms
Define tags for signal acquisition
The following table shows the tags that are used in this example. Define these tags in the standard tag table. The standard tag table is available in the project tree under "PLC tags".
Table 6- 2 Tags for fill level alarms
Name max
min
Data type BOOL
BOOL
Description Tag for maximum fill level If "max" = 1, the maximum fill level is exceeded. Tag for minimum fill level If "min" = 1, the minimum fill level is undershot.
The figure below shows the standard tag table with the defined tags "max" and "min".
Figure 6-11 Define tags
Diagnostics
90
Function Manual, 11/2019, A5E03735838-AF
Alarms 6.5 Example program for program alarms
Create function block
To create a function block, follow these steps: 1. Open the "Program blocks" folder in the project tree. 2. Double-click "Add new block".
The "Add new block" dialog opens. 3. Select the button "Function block".
Figure 6-12 Create FB
4. Enter a name for the new block. 5. Select the language SCL. 6. Click on "OK" to confirm your input. Result: You have created a function block.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
91
Alarms 6.5 Example program for program alarms
Create program alarm
To create the program alarm for the example program, follow these steps: 1. Select the created function block (FB) in the "Program blocks" folder in the project tree. 2. Insert the call of the "Program_Alarm" instruction in the instruction part of the function
block. The "Program_Alarm" instruction is available in the "Instructions" task card under "Extended instructions" > "Alarms". The "Call options" window opens.
Figure 6-13 Call Program_Alarm
3. Enter "level_alarm" as the name and confirm the call options by clicking "OK".
Result: The input tags of the "Program_Alarm" instruction are displayed in the instruction part.
4. Supply the SIG input tag of the "Program_Alarm" instruction with the XOR logic operation of the tags for minimum and maximum fill level and the input tag SD_1 with the tag for the maximum fill level.
#level_alarm(SIG:="min"XOR"max",SD_1:="max");
SIG: If a signal change occurs at the SIG input tag, the "Program_Alarm" instruction generates a program alarm. SD_1: The associated value is acquired at the time of the signal change at the input tag and assigned to the program alarm.
Result: You have created a type alarm.
Diagnostics
92
Function Manual, 11/2019, A5E03735838-AF
Alarms 6.5 Example program for program alarms Call function block To call the function block in the user program, follow these steps: 1. In the "Program blocks" folder, select the cycle OB (e.g., OB1) in which you want to call the function block and open the cycle OB with a double-click. 2. Select the function block you want to call in the "Program blocks" folder. 3. Drag the function block into the instruction part of the cycle OB. The "Call options" window opens.
Figure 6-14 Call function block 4. Confirm the call options by clicking "OK". Result: You have called the alarm block in the user program and created an instance alarm.
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
93
Alarms 6.5 Example program for program alarms
Creating a text list
To create the text list for the example program, follow these steps: 1. Double-click on the "Text lists" command in the program tree.
The text list editor opens. 2. Double-click "<Add>" in the Text lists area.
A new text list is added. 3. Name the text list "level_textlist". 4. Double-click "<Add>" in the Text list entries area of level_textlist.
A new text list entry is added in the level_textlist text list. 5. Enter the alarm text for the maximum fill level in the "Entry" column. 6. Add another entry in the text list. 7. Enter the alarm text for the minimum fill level in the "Entry" column.
Figure 6-15 Creating a text list Result: You have created the text list for the alarm text.
Diagnostics
94
Function Manual, 11/2019, A5E03735838-AF
Alarms 6.5 Example program for program alarms
Edit alarm text
To edit the alarm text for the example program, follow these steps: 1. Double-click "PLC supervisions & alarms" in the project tree. Select the "Alarms" tab. The
alarm editor opens. 2. Select the type alarm created for the example. 3. Click in the "Alarm text" column. 4. Open the shortcut menu and select the command "Insert a dynamic parameter (text list)".
Figure 6-16 Edit alarm text The window below opens.
Figure 6-17 Insert a dynamic parameter (text list)
5. Select the text list "level_textlist" and the tag "max". Confirm your selection by clicking "OK".
Result: You have created the alarm text for the type alarms. If the tag "max" (associated value 1) is 0, the alarm text "level too low" is output. If the tag "max" (associated value 1) is 1, the alarm text "level too high" is output.
Additional information
You can learn how to create multilingual texts under "Multilingual alarms" in the section Editing alarms in the alarm editor (Page 78).
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
95
Alarms 6.5 Example program for program alarms
6.5.4
Displaying the alarm
Displaying the alarm in the Web server
The figure below shows the display of the alarm in the Web server for both examples.
Figure 6-18 Displaying the alarm in the Web server
Displaying the alarm in STEP 7
Note Displaying alarms in STEP 7 To display alarms in STEP 7, enable the option "Receive alarms" in the shortcut menu of the CPU.
The figure below shows the display of the alarm in STEP 7 for both examples.
Figure 6-19 Display in STEP 7
Diagnostics
96
Function Manual, 11/2019, A5E03735838-AF
Diagnostics of the S7-1500R/H redundant system
7
S7-1500R/H diagnostics
Diagnostics for a S7-1500R/H redundant system is basically the same as a standard S71500. You have the following display options: Via STEP 7 Via HMI devices Via the display of the CPUs The CPUs provide information about their operating states as well as internal and external errors through their LEDs. The special features of the diagnostics of S7-1500R/H redundant systems are described below. In addition, the information of the current function manual and the STEP 7 online help also apply to S7-1500R/H redundant systems.
Diagnostics information in STEP 7
Hardware diagnostics can be performed as follows: Via the Online and Diagnostics view Via the "Online Tools" task card Via the "Diagnostics > Device Information" area of the Inspector window Via diagnostics icons, for example, in the device view and in the project tree
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
97
Diagnostics of the S7-1500R/H redundant system
Diagnostics view in STEP 7 in dependence on the online connection and system states
The diagnostics view for S7-1500R/H redundant systems is partly dependent on: Which of the two CPUs the programming device / PC currently has a connection to The current system state in the redundant system The table below provides an overview. The following sections illustrate the diagnostics view for S7-1500R/H using examples.
Table 7- 1 Diagnostics view in dependence on the online connection and system states
Diagnostics view in STEP 7
Online data and diagnostics of the redundant system
Online data and diagnostics of the primary CPU The following are not displayed: · Online data and diagnostics from the backup CPU Online data and diagnostics of the backup CPU The following are not displayed:
An online connection is System state available to the
Primary CPU or backup RUN-Redundant CPU
Primary CPU
RUN-Solo or STOP
Backup CPU
RUN-Solo or STOP
Examples in section
Online and Diagnostics view (Page 100) Online and Diagnostics view (Page 100) and Restrictions in the RUN-Solo system state (Page 117)
· Online data and diagnostics from the primary CPU
· Online data and diagnostics of the distributed I/O
Display of the 3 operator panels in the "Online Tools" task card Cycle time of the primary CPU (of the system) and memory of the primary CPU in "Online Tools" task card Cycle time and memory of the primary CPU in the "Online Tools" task card Cycle time and memory of the backup CPU in the "Online Tools" task card Memory reset of the primary CPU via "Online Tools" task card Memory reset of the backup CPU via "Online Tools" task card "Alarm display" tab: Alarms from the primary CPU "Alarm display" tab: Alarms from the backup CPU
Diagnostics of the distributed I/O
Diagnostics of the distributed I/O
Primary CPU or backup Not relevant CPU
Primary CPU or backup RUN-Redundant CPU
"Online Tools" task card (Page 103)
Primary CPU Backup CPU Primary CPU
RUN-Solo or STOP
RUN-Solo or STOP
STOP
Backup CPU
Primary CPU Backup CPU
RUN-Solo or STOP
Not relevant
Not relevant
Primary CPU or backup RUN-Redundant CPU
Primary CPU
RUN-Solo
Diagnostics view in the project tree and in the device view and network view (Page 106)
Diagnostics in the RUN-Redundant system state (Page 111)
Restrictions in the RUN-Solo system state (Page 117)
Diagnostics
98
Function Manual, 11/2019, A5E03735838-AF
Diagnostics of the S7-1500R/H redundant system
Accessible devices
As for standard S7-1500 systems, the following can be displayed in STEP 7: All devices accessible from programming device/PC The diagnostics information of devices of a redundant system, for example, from the R/H
CPUs The procedure is described in the section Accessible devices (without project) (Page 31).
Diagnostics
Function Manual, 11/2019, A5E03735838-AF
99
Diagnostics of the S7-1500R/H redundant system 7.1 Online and Diagnostics view
7.1
Online and Diagnostics view
Introduction
You open the Online and Diagnostics view for the redundant system or for each CPU of the redundant system.
Online & diagnostics for the redundant system
"Online access":
For the S7-1500R/H redundant system, it is displayed whether an online connection exists between the programming device/PC and a CPU. The additional note "Online (via Primary CPU)" or "Online (via Backup CPU)" indicates which role the "Online" connected CPU has.
If you enable "Receive alarms", you receive asynchronous alarms of diagnostics events from the CPU with online connection. The display corresponds to the representation for standard CPUs.
Figure 7-1 Online and Diagnostics view: Redundant system S7-1500R/H
100
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Diagnostics of the S7-1500R/H redundant system 7.1 Online and Diagnostics view
"Diagnostics": "Diagnostics" provides an overview for the redundant system about the: System state Pairing state Operating states of the CPU Status of which CPU is the primary CPU and which CPU is the backup CPU
Figure 7-2 Online and Diagnostics view: Diagnostics status of the S7-1500R/H system
Diagnostics Function Manual, 11/2019, A5E03735838-AF
101
Diagnostics of the S7-1500R/H redundant system 7.1 Online and Diagnostics view
Online & diagnostics for the primary CPU or backup CPU
The Online and Diagnostics view for the CPUs of the redundant system match the display for standard CPUs. In the RUN-Redundant system state, the primary and backup CPU display the online data of the redundant system irrespective of which of the two CPUs the online connection has been made. In non-redundant mode, the programming device/PC displays the data of the CPU for which there is an online connection, i.e. either the primary CPU or of the backup CPU. You select the CPU for display of the online data in the project tree.
Figure 7-3 Online and Diagnostics view: CPU (RUN-Redundant system state)
Reference
You can find information on the operating and system states in the Redundant System S71500R/H System Manual (https://support.industry.siemens.com/cs/ww/en/view/109754833).
102
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Diagnostics of the S7-1500R/H redundant system 7.2 "Online Tools" task card
7.2
"Online Tools" task card
Introduction
If an online connection exists to a CPU of the redundant system, the "Online Tools" task card displays online information for the redundant system. For a S7-1500R/H redundant system, "Online Tools" displays: 3 panes operator panel Cycle time Memory
R/H system operator panel
For the redundant system, the "R/H system operator panel" pane shows the: Current states of the LEDs of the primary CPU System state Status of which CPU is the primary CPU and which CPU is the backup CPU with their
current operating states The "STOP R/H-System" button can be used to switch the S7-1500R/H system to the system state STOP.
Note Reaching RUN-Redundant system state Note that you cannot switch the S7-1500R/H to RUN-Redundant system state using the R/HSystem operator panel. You reach the RUN-Redundant system state by switching the operating state for each CPU to RUN in the operator panel of the respective CPU.
CPU operator panel
The two "CPU operator panel" panes show for the respective CPU of the redundant system: The role of the CPU, primary CPU or backup CPU The current states of the LEDs The operating state of the CPU Use the "RUN / STOP" button to change the operating state for the respective CPU. Use the "MRES" button to perform a memory rest for the CPU, under the following conditions: Online connection to this CPU is available The CPU is in STOP operating state. The switch position at the real CPU is displayed under "Mode selector".
Diagnostics Function Manual, 11/2019, A5E03735838-AF
103
Diagnostics of the S7-1500R/H redundant system 7.2 "Online Tools" task card
Example
The following figure shows an example of the "Online Tools" task card for the RUN-Solo system state. The primary CPU is in RUN operating state, the backup CPU in STOP operating state.
Figure 7-4 "Online Tools" task card: Operator panel (RUN-Solo system state)
104
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Diagnostics of the S7-1500R/H redundant system 7.2 "Online Tools" task card
Cycle time and memory
In the RUN-Redundant system state, the "Cycle time" and "Memory" panes show the current values of the primary CPU. In redundant mode, the cycle time of the primary CPU matches the cycle time of the system. In the RUN-Solo system state, the panes show the current values for the CPU for which there is an online connection. The display corresponds to the representation for standard CPUs.
Reference
Figure 7-5 "Online Tools" task card: Cycle time and memory of the primary CPU
You can find information on the operating and system states in the Redundant System S7-1500R/H System Manual (https://support.industry.siemens.com/cs/ww/en/view/109754833).
Diagnostics Function Manual, 11/2019, A5E03735838-AF
105
Diagnostics of the S7-1500R/H redundant system 7.3 Diagnostics view in the project tree and in the device view and network view
7.3
Diagnostics view in the project tree and in the device view and
network view
Additional icons for redundant systems in the project tree
Table 7- 2 Icons for redundant systems in the project tree of STEP 7
Icon in the project tree
Meaning
Identifier of the folder S7-1500R/H-System: RUN-Redundant system state Identifier of the folder S7-1500R/H-System: RUN-Solo system state Identifier of the folder S7-1500R/H-System: STARTUP system state Identifier of the folder S7-1500R/H-System: STOP system state Identifier of the folder for the primary CPU: RUN operating state Identifier of the folder for the backup CPU: RUN operating state Identifier of the folder for the primary CPU: STARTUP operating state Identifier of the folder for the backup CPU: STARTUP operating state Identifier of the folder for the primary CPU: STOP operating state Identifier of the folder for the backup CPU: STOP operating state Identifier of the folder of a CPU of the redundant system: "Online via partner": The other CPU of the redundant system is connected online to the programming device / PC.
Example: Diagnostics view in the project tree and in the device view and network view
An example of the diagnostics view for a S7-1500R/H system is shown below.
The sample configuration consists of two CPUs S7-1517H-3 PN and one interface module IM 155-6 PN HF as PROFINET IO device. PLC_1 is the primary CPU (in RUN operating state). PLC_2 is the backup CPU (in STOP operating state). The hardware configuration and the user program were loaded in the primary CPU.
The system is connected online via PLC_1 (primary CPU) and is in RUN-Solo system state.
106
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Diagnostics of the S7-1500R/H redundant system 7.3 Diagnostics view in the project tree and in the device view and network view View of the system in the project tree The system is in RUN-Solo system state . PLC_1 is in RUN operating state , PLC_2 is in STOP operating state . Because the system is in RUN-Solo system state, the following is displayed: For the system, maintenance demanded with problem in lower-level component For PLC_1, maintenance demanded For PLC_2, online connection via partner is displayed, as the programming device/PC is connected online to PLC_1.
Figure 7-6 Diagnostics example: Redundant system project tree (RUN-Solo)
Diagnostics Function Manual, 11/2019, A5E03735838-AF
107
Diagnostics of the S7-1500R/H redundant system 7.3 Diagnostics view in the project tree and in the device view and network view Network view of the system
The network view shows no faults for the H-CPUs or the IO device. Maintenance demanded in lower-level component indicated for the system, since the system is not in the RUN-Redundant system state. No operating states and system states of the redundant system are displayed in the network view.
Figure 7-7 Diagnostics example: Network view of redundant system (RUN-Solo) Doubling-clicking on the system gives you access to the device view of both CPUs.
108
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Diagnostics of the S7-1500R/H redundant system 7.3 Diagnostics view in the project tree and in the device view and network view
Device view of the system
In the device view, you see the operating states of the CPUs based on the icons above PLC_1: Green icon: PLC_1 is in the RUN operating state. Yellow icon (wrench) for maintenance demanded: PLC_2 is in the STOP operating state. PLC_2 indicates that the online connection is available through the partner (PLC_1). You can find more detailed information on the system faults in the "Diagnostics" tab, in "Device information". The device information indicates maintenance demanded and RUN operating state for PLC_1.
Figure 7-8 Diagnostics example: Device view of redundant system (RUN-Solo)
Diagnostics Function Manual, 11/2019, A5E03735838-AF
109
Diagnostics of the S7-1500R/H redundant system 7.3 Diagnostics view in the project tree and in the device view and network view Alarm display of the system
As in the RUN-Solo system state, the alarms of the CPU for which there is an online connection are displayed via the "Alarm display" tab (in the example from PLC_1).
Figure 7-9 Diagnostics example: Alarm display of redundant system (RUN-Solo)
Device view of the IO device
The IO device is an interface module IM 155-6 PN HF with two I/O modules and one server module. The device view shows that there is no faults in the modules.
Figure 7-10 Diagnostics example: Device view of IO device
110
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Diagnostics of the S7-1500R/H redundant system 7.4 Diagnostics in the RUN-Redundant system state
7.4
Diagnostics in the RUN-Redundant system state
Diagnostics view in redundant mode
Primary CPU and backup CPU are each in the RUN-Redundant operating state. In the RUN-Redundant system state, the primary and backup CPU display the online data of the redundant system irrespective of which of the two CPUs the online connection has been made. The diagnostics between the two CPUs is synchronized (diagnostics entries, diagnostics events). The "Alarm display" tab shows the alarms of the redundant system. You can find more information in the Diagnostics view in the project tree and in the device view and network view (Page 106).
No error in RUN-Redundant system state
If no error is detected in the RUN-Redundant system state, all diagnostics icons in the project tree and in the network view show "No fault" .
Figure 7-11 Diagnostics example: No fault in the RUN-Redundant project tree
Diagnostics Function Manual, 11/2019, A5E03735838-AF
111
Diagnostics of the S7-1500R/H redundant system 7.4 Diagnostics in the RUN-Redundant system state
Error in the RUN-Redundant system state
Most errors in the redundant system do not result in a loss of redundancy. The RUNRedundant system state is retained, for example, if a module in an IO device fails. The diagnostics view is similar to the standard S7-1500 systems. In the RUN-Redundant system state the redundancy of the system can be restricted, e.g. during the interruption of one of the two redundancy connections in S7-1500H. You can find information on the redundancy scenarios in the Redundant System S7-1500R/H System Manual (https://support.industry.siemens.com/cs/ww/en/view/109754833). Special examples of a redundant system S7-1500H are shown below:
S7-1500H Example 1: The PROFINET ring between the CPU of the redundant S7-1500H system and an IO device was interrupted.
Evaluate diagnostics via LINK TX/RX LEDs on the CPU TX/RX X1 P1 LED is not illuminated. This means: No Ethernet connection between the P1 port of the respective PROFINET interface and
the communication partner
112
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Diagnostics of the S7-1500R/H redundant system 7.4 Diagnostics in the RUN-Redundant system state
Diagnostics in STEP 7 The diagnostics buffer of the CPU displays that the PROFINET ring is open. The diagnostics in the project tree shows: Maintenance demanded in lower-level component in the S7-1500H system Maintenance demanded in lower-level components of PLC_1 and PLC_2 Maintenance demanded in lower-level components of local modules of PLC_2 The diagnostics in the network view indicates errors at the affected port of the PROFINET interfaces of PLC_2.
Figure 7-12 Diagnostics example: RUN-Redundant system state, open PROFINET ring
You can evaluate the diagnostics using the displays of the CPUs via the "Diagnostics" menu as with standard CPUs. You can find additional information in the section Display of the CPU (Page 27).
S7-1500H Example 2: A synchronization module has been removed from a CPU of the redundant S7-1500H system.
Evaluating diagnostics via X3 and X4 LEDs on the CPU The X3 LED on PLC_2 CPU is not illuminated. This means: The redundancy connection on the synchronization module was interrupted at the H-Sync
interface X3. or There is no synchronization module at the H-Sync interface X3.
Diagnostics Function Manual, 11/2019, A5E03735838-AF
113
Diagnostics of the S7-1500R/H redundant system 7.4 Diagnostics in the RUN-Redundant system state
Diagnostics in STEP 7 The diagnostics buffer of the CPU displays: that there is only one redundancy connection which synchronization module has failed on which CPU The diagnostics in the project tree shows: Maintenance demanded in lower-level component in the S7-1500H system Maintenance demanded in lower-level components of PLC_1 and PLC_2 Maintenance demanded in lower-level components of local modules of PLC_1 and PLC_2 The diagnostics in the network view displays: Errors for the Synchronisationsmodul_1 of the Synchronisationsschnittstelle_2 of PLC_1 Synchronisationsmodul_1 of Synchronisationsschnittstelle_1 of PLC_2 not reachable
Figure 7-13 Diagnostics example: RUN-Redundant system state, a synchronization module fails
114
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Diagnostics of the S7-1500R/H redundant system 7.4 Diagnostics in the RUN-Redundant system state
Evaluate diagnostics on the display For example 2, display of the PLC_2 CPU shows:
In the "Overview" menu command: A message is available in the next lower level page. In the "Diagnostics" menu command: A message is available in the next lower level page. In the Module menu command: An error has occurred. To evaluate the display, proceed as follows: 1. Navigate to "Pairing state" via the menu commands "Overview" > "Redundancy". 2. This is displayed as the pairing state: Single paired (X4).
This means that the redundancy connection is available at the H-Sync interface X4, but not at the X3. 3. Navigate to "Alarms" via the "Diagnostics" menu command. 4. View the details of the alarm (evaluate diagnostics buffer).
S7-1500H Example 3: A redundancy connection in S7-1500H is interrupted.
Evaluating diagnostics via X3 and X4 LEDs on the CPU The LED X4 on CPU PLC_1 does not light up. This means: The redundancy connection on the synchronization module was interrupted at the H-Sync
interface X4. or There is no synchronization module at the H-Sync interface X4.
Diagnostics Function Manual, 11/2019, A5E03735838-AF
115
Diagnostics of the S7-1500R/H redundant system 7.4 Diagnostics in the RUN-Redundant system state
Diagnostics in STEP 7 The diagnostics buffer of the CPU displays: that there is only one redundancy connection Fiber-optic error with specification of the CPU and the synchronization module The diagnostics in the project tree shows: Maintenance demanded in lower-level component in the S7-1500H system Maintenance demanded in lower-level components of PLC_1 and PLC_2 Maintenance demanded in lower-level components of local modules of PLC_1 and PLC_2 The diagnostics in the network view displays: Errors for the Synchronisationsmodul_1 of the Synchronisationsschnittstelle_2 of PLC_1 Errors for the Synchronisationsmodul_1 of the Synchronisationsschnittstelle_1 of PLC_2
Figure 7-14 Diagnostics example: RUN-Redundant system state, a redundancy connection has failed
Evaluate diagnostics on the display Perform the analysis of the display of PLC_2 CPU exactly as for example 2.
116
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Diagnostics of the S7-1500R/H redundant system 7.5 Restrictions in the RUN-Solo system state
7.5
Restrictions in the RUN-Solo system state
The primary CPU is in RUN operating state. The Backup CPU is in STOP operating state, is switched off, defective, or not available.
Restrictions in the RUN-Solo system state
The primary CPU records the diagnostics states of the distributed I/O.
Figure 7-15 Diagnostics of the primary CPU and backup CPU in RUN-Solo system state
Diagnostics of the backup CPU The following restrictions apply to the backup CPU: Diagnostics information from the backup CPU is only available when there is an online
connection to the backup CPU. A memory reset can only be performed with the backup CPU operator panel when an
online connection to the backup CPU is available.
Diagnostics Function Manual, 11/2019, A5E03735838-AF
117
Diagnostics of the S7-1500R/H redundant system 7.6 System diagnostics by means of the user program
Reference
You can evaluate the diagnostics using the displays of the CPUs via the "Diagnostics" menu as with standard CPUs. You can find additional information in the section Display of the CPU (Page 27).
7.6
System diagnostics by means of the user program
Instructions
Instructions for determining the system diagnostics are listed in the section System diagnostics options in the user program (Page 71).
The following instruction for diagnostics cannot be used for S7-1500R/H redundant systems:
DPNRM_DG: Read diagnostics data from a DP slave
Organization blocks
You can find the description of the applicable OBs for S7-1500R/H in the S7-1500R/H redundant system (https://support.industry.siemens.com/cs/ww/en/view/109754833) system manual.
118
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Glossary
Alarm
An message sent to the operator due to events or states of the system.
Backup CPU
Role of a CPU in the S7-1500R/H redundant system. If the R/H system is in RUN-Redundant system state, the primary CPU controls the process. The backup CPU processes the user program synchronously and can take over the process control if the primary CPU fails.
Button (WinCC)
Object in WinCC that points out faults in the plant
Channel fault
Channel-related error of an individual channel - an I/O with inputs, for example, wire break or short circuit
Device
Modules with a network connection are referred to as device. Devices are installed on racks where they can be interconnected with other modules.
Diagnostics buffer
A buffered memory area in the CPU; it stores diagnostics events in the order of their occurrence
Firmware of the CPU
In SIMATIC, a distinction is made between the firmware of the CPU and user programs.
The firmware is a software embedded in electronic devices, which means it is permanently connected with the hardware functionally. It is usually saved in a flash memory, such as EPROM, EEPROM or ROM, and cannot be replaced by the user or only with special means or functions.
User program: see glossary entry "User program"
Global screen (WinCC)
A screen that is opened in the system diagnostics window is a global screen.
Diagnostics Function Manual, 11/2019, A5E03735838-AF
119
Glossary
HMI device
Human Machine Interface, device for visualization and control of automation processes.
HMI diagnostics view (WinCC)
The HMI diagnostics view is an object in WinCC. The HMI diagnostics view can only be used with Comfort Panels and WinCC Advanced RT.
I/O module
Device of the distributed I/O that is used as interface between the controller and the process.
Industrial Ethernet
Guideline for setting up Ethernet in an industrial environment. The main difference to the standard Ethernet is the mechanical current carrying capacity and interference immunity of the individual components.
Memory reset
Procedure to set the memories of the CPU to a defined initial state.
Operating states
Operating states describe the behavior of a single CPU at a specific time.
The CPUs of the SIMATIC standard systems feature the STOP, STARTUP and RUN operating states.
The primary CPU of the S7-1500R/H features the STOP, STARTUP, RUN, RUN-Syncup and RUN-Redundant operating states. The backup CPU features the STOP, SYNCUP and RUN-Redundant operating states.
PLC
Programmable Logic Controller: Component of the CNC by which the machine manufacturer coordinates the interaction between the NC requirements (part program), the inputs of the machine operator and the current machine state.
Primary CPU
Role of a CPU in the S7-1500R/H redundant system. If the R/H system is in RUN-Redundant system state, the primary CPU controls the process. The backup CPU processes the user program synchronously and can take over the process control if the primary CPU fails.
PROFIBUS
Standard for fieldbus communication in automation technology.
120
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Glossary
PROFINET
PROcess FIeld NETwork, open industrial Ethernet standard which further develops PROFIBUS and industrial Ethernet. A cross-manufacturer communication, automation, and engineering model defined by PROFIBUS International e.V., as an automation standard.
Redundant systems
Redundant systems are identified by the fact that important automation components are available in multiple units (redundant). Process control is maintained if a redundant component fails.
Subnet
Part of a network whose parameters must be synchronized with the devices (e.g., with PROFINET). It includes the bus components and all connected stations. Subnets can be linked by means of gateways, for example, to form a network.
Synchronization module
The synchronization module is used to provide a redundant connection between the CPUs of the S7-1500H redundant system. You require two synchronization modules per CPU, which you connect using a fiber-optic cable.
System diagnostics
In the SIMATIC environment, the term "system diagnostics" refers to diagnostics of devices and modules. System diagnostics is used, for example, to monitor the states of the following components in the system: Power supply, device, I/O.
System diagnostics indicator (WinCC)
The system diagnostics indicator is a predefined graphic symbol of the library which alerts you to errors in your plant and displays two states: No error, error
System states
The system states of the S7-1500R/H redundant system result from the operating states of the primary and backup CPU. The term 'system state' is used as simple expression that identifies the operating states of the two CPUs that occur at the same time. The S7-1500R/H redundant system features the system states STOP, STARTUP, RUN-Solo, SYNCUP and RUN-Redundant.
Diagnostics Function Manual, 11/2019, A5E03735838-AF
121
Glossary
Topology
Structure of a network. Common structures include: Linear bus topology Ring topology Star topology Tree topology
User program
In SIMATIC, a distinction is made between user programs and the firmware of the CPU.
The user program contains all instructions, declarations and data by which a plant or process can be controlled. It is assigned to a programmable module (for example, CPU, FM) and can be structured in smaller units.
Firmware: see glossary entry "Firmware of the CPU"
Value status
The value status describes a specific signal state. The value status is constantly updated and cyclically transmitted by the field device as quality statement together with the measured value.
Web server
Software/ communication service for data exchange using Ethernet. The web server provides the documents by means of standardized transmission protocols (HTTP, HTTPS) to a web browser. Documents can be static or dynamic upon request by the web browser composed from different sources by the web server.
WinCC
Windows Control Center: a PC-based process visualization system
WinCC Runtime
Component of the basic software WinCC
122
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Index
"
"Diagnostics" tab Alarm display, 39 Connection information, 39 Device information, 39 Inspector window, 39
F
FAQs Download certificate, 51 Implementing channel diagnostics in the user program, 72
A
Accessible devices Diagnostics status, 31 Offline project, 31 S7-1500R/H, 99
Alarm display Active alarms, 41 Archive view, 41
Alarms Editing in the alarm editor, 79 Multilingual, 80
Application examples Diagnostic overview for SIMATIC S7-1200 and S71500, 72
B
Backup CPU, 102, 117
D
Device information Online status, 39 Operating mode, 39
Devices & networks Current state, 33 Go online, 33
Diagnostics buffer Diagnostic events, 42 Retentive memory, 42
Display of the CPU Display options, 27 Input options, 27 Status information, 27
dynamize Object appearance, 68
H
HMI System diagnostics view, 59 System diagnostics window, 59
HMI diagnostics view Comfort Panels, 59 Details view, 63 Device view, 63 Distributed I/O view, 63 Views, 63 WinCC Advanced RT, 59
I
I/O module Inputs, 47 Settings, 47
L
LED arrangement, 26 Library
System diagnostics indicator, 66
O
Online & diagnostics Activities, 36 Information, 36 Online access, 36 Online mode, 36 S7-1500R/H, 100
Online tools CPU operator panel, 45 Cycle time, 45 Memory, 45 Memory usage, 45
Diagnostics Function Manual, 11/2019, A5E03735838-AF
123
Index
Online view, 45 S7-1500R/H, 103 Task card, 45
P
Primary CPU, 102, 117 Process image inputs, 73
Quality Information, 73 User datum, 73 Value status, 73
Q
Quick start, 15 Using display, 16 Using STEP 7, 18
R
Redundancy connection, 115 Redundant mode
Diagnostics, 111 Redundant system, 100 RUN-Redundant system state
Diagnostics, 111 RUN-Solo system state
Diagnostics, 117
S
S7-1500H, 113 S7-1500R/H
Diagnostics, 97 Instructions, 118 Organization blocks, 118 Security events, 45 Setting options, 23 Symbol For comparison, 30 For hardware diagnostics, 29 For operating mode, 30 For software diagnostics, 30 Synchronization module, 113 System diagnostics Advantages, 14 Alarm settings, 24 Button, 68 Display concept, 14 Properties, 12
124
System diagnostics indicator Button as system diagnostics indicator, 68 Inserting, 66 System diagnostics window, 66
System diagnostics view, 59 Configuring, 60 System diagnostics indicator, 66
System diagnostics window, 59 Configuring, 60 Global screen, 60
U
User program Instructions, 71 Response to diagnostics alarms, 71
W
Web server Access to, 51 Activating, 49 Alarms, 54 Browser, 48 Certificate, 49 Configuring, 49 Diagnostics, 52 Diagnostics buffer, 53 HTTPS, 49 Integrated Web server, 48 Module information, 54 Motion Control diagnostics, 57 Topology, 56 Trace, 58 Web pages, 48
Diagnostics Function Manual, 11/2019, A5E03735838-AF
Using the trace and logic analyzer function
SIMATIC / SINAMICS
S7-1500, S7-1200 / SINAMICS Using the trace and logic analyzer function
Function Manual
Preface
Description
1
2 Trace software user interface
Project trace software user interface
3
Operation
4
Devices
5
12/2019
A5E31277292-AF
Legal information
Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Division Digital Factory Postfach 48 48 90026 NÜRNBERG GERMANY
A5E31277292-AF 10/2019 Subject to change
Copyright © Siemens AG 2012 - 2019. All rights reserved
Preface
Purpose of the documentation
The diagnostics options available with the trace and logic analyzer function are described in this documentation. Depending on the device used, the recording options can vary.
Required basic knowledge
In order to understand this documentation, the following knowledge is required: General knowledge in the field of automation Knowledge about the use of Windows-based computers S7-1200/1500 CPUs, ET 200SP, ET 200Pro
Knowledge of the SIMATIC industrial automation system Knowledge of working with STEP 7 SINAMICS Drives Knowledge of working with the drive SIRIUS SIMOCODE pro, SIRIUS Soft Starter 3RW Proficiency in using these systems
Validity of the documentation
This documentation applies to all products of the product series S7-1200, S7-1500, S71500 Software Controller, S7-1500 Drive Controller, ET 200SP, ET 200SP Open Controller, CPU 1513(F)pro-2 PN, CPU 1516(F)pro-2 PN, SINAMICS drives, SIRIUS SIMOCODE pro and SIRIUS Soft Starter 3RW as of TIA Portal V16.
Conventions
This documentation contains pictures of the devices described. The pictures may differ slightly from the devices supplied. Please also observe notes marked as follows:
Note A note contains important information on the product described in the documentation, on the handling of the product and on the section of the documentation to which particular attention should be paid.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
3
Preface
"mySupport"
With "mySupport", your personal working area, you make the most of your Industry Online Support.
In "mySupport" you can store filters, favorites and tags, request CAx data and put together your personal library in the Documentation area. Furthermore, your data is automatically filled into support requests and you always have an overview of your current requests.
You need to register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en/).
"mySupport" - Documentation
In the Documentation area of "mySupport", you have the possibility to combine complete manuals or parts of them to make your own manual. You can export the manual in PDF format or in an editable format.
You can find "mySupport" - Documentation on the Internet (http://support.industry.siemens.com/My/ww/en/documentation).
Further support
The range of technical documentation for the individual SIMATIC products and automation systems can be found on the Internet (http://www.siemens.com/simatic-techdoku-portal).
The online catalog and the online ordering system is available on the Internet (https://mall.industry.siemens.com).
Using the trace and logic analyzer function
4
Function Manual, 12/2019, A5E31277292-AF
Preface
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
5
Table of contents
Preface ................................................................................................................................................... 3
1 Description.............................................................................................................................................. 9
1.1
Supported hardware ................................................................................................................ 9
1.2
Recording of measured values with the trace function ............................................................ 9
1.3
Trace configuration, recording, installed trace and measurement......................................... 11
1.4
Data storage........................................................................................................................... 13
1.5 1.5.1 1.5.2
Project trace ........................................................................................................................... 14 General .................................................................................................................................. 14 Time synchronization ............................................................................................................. 14
2 Trace software user interface ................................................................................................................ 16
2.1 2.1.1 2.1.2 2.1.3 2.1.4
Project tree ............................................................................................................................. 18 User interface - "Traces" project tree folder ........................................................................... 18 User interface - "Measurements" project tree folder .............................................................. 19 User interface - "Installed measurements (memory card)" project tree folder ....................... 20 User interface - "Overlay measurements" project tree folder ................................................ 22
2.2 2.2.1 2.2.2 2.2.2.1 2.2.3 2.2.3.1 2.2.3.2 2.2.3.3 2.2.3.4 2.2.4 2.2.4.1
Working area.......................................................................................................................... 23 User interface - trace toolbar ................................................................................................. 23 User interface - Configuration tab .......................................................................................... 24 User interface - Configuration ................................................................................................ 24 User interface - Diagram tab .................................................................................................. 24 User interface - curve diagram............................................................................................... 24 User interface - signal table ................................................................................................... 30 Interface - Formula editor....................................................................................................... 34 User interface - Measurements (overlay measurements)...................................................... 37 User interface - Signal selection tab (overlay measurements) .............................................. 39 User interface - Signal selection (overlay measurements) .................................................... 39
2.3 2.3.1
Inspector window ................................................................................................................... 40 Interface - Inspector window .................................................................................................. 40
2.4 2.4.1 2.4.2
Trace task card ...................................................................................................................... 41 User interface - Measurement cursor pane ........................................................................... 41 User interface - Snapshots pane ........................................................................................... 43
Using the trace and logic analyzer function
6
Function Manual, 12/2019, A5E31277292-AF
Table of contents
3 Project trace software user interface ..................................................................................................... 44
3.1
Structure of the user interface ................................................................................................44
3.2 3.2.1
Project tree..............................................................................................................................46 User interface - Project tree folder "Cross-device functions" - "Project traces"......................46
3.3 3.3.1 3.3.2 3.3.3 3.3.3.1 3.3.4
Working area...........................................................................................................................47 User interface - Project trace toolbar ......................................................................................47 User interface - status overview of the participating devices..................................................47 User interface - Configuration tab...........................................................................................49 User interface - Configuration.................................................................................................49 User interface - Diagram tab...................................................................................................50
3.4 3.4.1
Inspector window ....................................................................................................................50 Interface - Inspector window...................................................................................................50
3.5
Trace task card .......................................................................................................................51
4 Operation.............................................................................................................................................. 52
4.1
Trace quick start .....................................................................................................................52
4.2
Project trace quick start ..........................................................................................................57
4.3
Using the trace function - overview.........................................................................................60
4.4 4.4.1 4.4.2 4.4.3 4.4.4 4.4.5
Project tree..............................................................................................................................60 Creating a trace ......................................................................................................................60 Displaying a configuration.......................................................................................................61 Displaying a diagram ..............................................................................................................61 Apply overlay measurement ...................................................................................................62 Configuring objects in groups .................................................................................................63
4.5 4.5.1 4.5.2 4.5.3 4.5.4 4.5.5 4.5.6 4.5.7 4.5.8
Working area - general ...........................................................................................................64 Transferring the trace configuration to the device ..................................................................64 Activating/deactivating an installed trace................................................................................65 Displaying the recording .........................................................................................................66 Analyze an ongoing recording ................................................................................................67 Saving measurements in the project ......................................................................................68 Exporting and importing measurements .................................................................................69 Transferring the trace configuration from the device to the project ........................................70 Deleting installed traces..........................................................................................................71
4.6 4.6.1
Working area - Configuration tab............................................................................................72 Configuring the trace...............................................................................................................72
4.7 4.7.1 4.7.2 4.7.3 4.7.4 4.7.5 4.7.6 4.7.7
Working area - Diagram tab....................................................................................................72 Use of the curve diagram........................................................................................................72 Use of the signal table ............................................................................................................74 Using the signal group in the signal table ...............................................................................75 Observation of fast signals .....................................................................................................77 Compare records (overlay measurements) ............................................................................78 Align measurements precisely (overlay measurements)........................................................80 Printing a recording.................................................................................................................80
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
7
Table of contents
5 Devices................................................................................................................................................. 81
5.1 5.1.1 5.1.2 5.1.3 5.1.4 5.1.5 5.1.6 5.1.7 5.1.8 5.1.8.1 5.1.8.2 5.1.8.3 5.1.8.4 5.1.9 5.1.9.1 5.1.9.2 5.1.9.3 5.1.9.4 5.1.9.5
S7-1200/1500 CPUs .............................................................................................................. 81 Recordable variables ............................................................................................................. 81 Lifetime of the installed trace configuration and recorded values.......................................... 82 Recording levels..................................................................................................................... 83 Time synchronization with Motion Control ............................................................................. 84 Quantity structure................................................................................................................... 85 CPU load through trace recording ......................................................................................... 85 Project trace ........................................................................................................................... 85 Software user interface of the configuration .......................................................................... 86 Layout of the trace user interface .......................................................................................... 86 Layout of the project trace user interface .............................................................................. 87 User interface - Signals.......................................................................................................... 88 Recording conditions ............................................................................................................. 89 Configuration.......................................................................................................................... 98 Trace configuration - overview............................................................................................... 98 Selecting signals .................................................................................................................... 99 Configuring the recording cycle and duration ........................................................................ 99 Configuring the trigger conditions ........................................................................................ 100 Configure installed measurements (memory card).............................................................. 101
Glossary ..............................................................................................................................................102
Index ...................................................................................................................................................104
Using the trace and logic analyzer function
8
Function Manual, 12/2019, A5E31277292-AF
Description
1
1.1
Supported hardware
If a device supports the trace and logic analyzer function, "Traces" is offered for selection in the project tree below the device.
The following devices (Page 81) support the trace and logic analyzer function: SIMATIC S7-1200 CPUs (as of firmware version V4.0) SIMATIC S7-1500, ET 200SP, CPU 1513pro-2 PN and CPU 1516pro-2 PN CPUs SIMATIC S7-1500 Software Controller ET 200SP Open Controller SINAMICS drives that are supported in Startdrive SINAMICS V90 (with HSP 0185) SIRIUS SIMOCODE pro (with Simocode ES) SIRIUS Soft Starter 3RW (with Soft Starter ES)
1.2
Recording of measured values with the trace function
Introduction
The trace and logic analyzer function can be called in the project tree (Page 16) by doubleclicking an entry in the "Traces" system folder. The measurements on the memory card can also be read and displayed via the diagnostic interface of the Web server.
You record device tags and evaluate the recordings with the trace and logic analyzer function. Tags are, for example, drive parameters or system and user tags of a CPU. The number of installed traces is hardware-dependent. You can use the project trace to record tags from multiple devices across devices.
The recordings are saved on the device and, when required, can be read out with the engineering system (ES) and saved permanently. The trace and logic analyzer function is therefore suitable for monitoring highly dynamic processes. The recorded values are overwritten when the recording is activated again.
The trace and logic analyzer functions are also used in the commissioning editors of technology objects (for example, axle control panels). Active recordings from the axis control panel are displayed in the "Traces" system folder as installed traces. Recordings can be added to the measurements in the curve diagram of the axis control panel or the PID via a shortcut menu command.
Depending on the device (Page 81) used, the recording options can vary.
A quick start (Page 52) for working with the trace and logic analyzer function can be found in the Operation section.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
9
Description 1.2 Recording of measured values with the trace function
The following figure shows the mode of operation of the trace:
Trace configuration on the programming device (PG) in the TIA Portal
You can specify the signals to be recorded, the duration of the recording and the trigger condition in the trace configuration. The trace configuration depends on the device and is described at the respective device (Page 81).
Transferring the trace configuration from the PG to the device
You can transfer the complete trace configuration (Page 64) to the device when an online connection is established.
Waiting for the recording
If the installed trace configuration is activated (Page 65), then the recording is performed independently of the PG. The recording is started as soon as the trigger condition is satisfied.
Transferring the measurement from the device to the PG
The saving of the measurement in the project (Page 68) stores the measurement in the opened project of the TIA Portal. The measurement can be saved at any time after completing the recording, irrespective of the time of the measurement.
Evaluating, managing and saving the measurement
Numerous options are available for the evaluation of the measurement in the curve diagram and in the signal table (Page 66). Various display types are possible, for example, a bit representation for binary signals. Signal waves from different measurements can be put together as an overlay measurement and compared with each other. Measurements can also be exported and imported as a file. With the saving of the project (Page 68) in the TIA Portal, the measurements transferred to the project are also saved.
Using the trace and logic analyzer function
10
Function Manual, 12/2019, A5E31277292-AF
Description 1.3 Trace configuration, recording, installed trace and measurement
1.3
Trace configuration, recording, installed trace and measurement
This section explains the meaning and relationships of the terms: trace configuration, recording, installed trace and measurement.
Trace configuration
Implement the following settings in the trace configuration: Signals to be recorded with display options Recording conditions
Sampling Trigger Installed measurements (memory card) Trace configurations can be copied to the "Traces" folder by drag-and-drop operation or by means of the clipboard. The application of a configuration depends on the device type. The following sources are possible: Trace configuration Measurement Measurements on device (memory card) Superimposed measurement (selection of a measurement contained in it)
Recording
A recording is performed in the device. There is only one recording for each installed trace configuration. When a new recording is started, the old recording is overwritten.
An installed recording is not retentive (it is lost when the device is switched off/on) but can be saved permanently in the project as a measurement.
Installed trace
An installed trace consists of a trace configuration and optionally a recording. The maximum number of installed traces depends on the device.
The trace configuration is stored retentively on the device. The retentivity of the trace configuration may also be configurable depending on the device, e.g. with the S120.
Measurement
A measurement consists of a trace configuration and a recording, provided that recorded data is present. Each installed trace can be saved as a measurement in the project.
The recording of a measurement can be viewed offline.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
11
Description 1.3 Trace configuration, recording, installed trace and measurement
Installed measurements (memory card)
The "Measurements on device (memory card)" folder contains measurements that are saved on the device (for example, on the memory card). These measurements are retentive and can only be deleted by the user. The installed measurements can be transferred to the "Measurements" folder using drag & drop and are then saved as measurements in the project.
Trace configuration with an installed trace of the same name
Usually, there is a trace configuration in the project with the same name for an installed trace. When there is an online connection, this trace is displayed with the icon in the project tree. See also User interface - "Traces" project tree folder (Page 18).
Overlay measurement
The overlay measurement allows a comparison and analysis of signals from different measurements with each other. The measurements can be synchronized with each other and displayed as overlay measurements.
Using the trace and logic analyzer function
12
Function Manual, 12/2019, A5E31277292-AF
Description 1.4 Data storage
1.4
Data storage
The trace toolbar and the curve diagram also enable the transfer of the trace configuration and the viewing of the recording.
The following figure is a schematic diagram of the data storage:
Note Saving the trace configuration and measurement
You save the trace configuration and measurement with the project in the TIA Portal.
If you close the project without saving, the trace configurations and the measurements transferred to the project are discarded. The trace editor can be closed and reopened without loss of data until the project is closed.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
13
Description 1.5 Project trace
1.5
Project trace
1.5.1
General
A project trace includes trace configurations of multiple devices and records the signals across devices.
Each device can trigger the recording on all participating devices. After receiving the global trigger, the devices with valid project trace configuration start the recording.
Each of the respective devices (Page 81) describes whether the project trace function is supported.
Requirements
The following requirements must be fulfilled for recording with project trace: PROFINET RT or IRT communication All devices are located in a PROFINET subnet (no routing) To transfer the project trace to the devices, an online connection from the TIA portal to all
devices. The "Record immediately" trigger mode may be configured for a maximum of one device. A trigger must be configured for at least one device.
1.5.2
Time synchronization
The accuracy of the time synchronization depends on how the trace sample event is determined. Isochronous communication provides the highest accuracy, because the IRT cycle is used. In all other cases, the clock time of the controller is used.
A project trace can contain devices with RT and IRT communication.
For a synchronous display of the signals, the X axis must be set in "Time (relative)" mode. In this representation, the measurements are arranged in time so that their trigger events are at 0 ms.
To facilitate the evaluation with absolute time, synchronize the clock times of the devices.
Information on the trace sample event can be found in the device-specific descriptions, e.g. for S7-1200/1500 CPU (Page 81) under "Recording levels".
Using the trace and logic analyzer function
14
Function Manual, 12/2019, A5E31277292-AF
Description 1.5 Project trace
Trigger time for RT communication
Devices which receive the trigger from another device, have a time-delayed trigger event. For RT communication, the time of a trigger event is derived from the transfer time and the recording time. The trigger event is first detected at the end of the recording OB and uses this time as the trigger time. The time delay between the original trigger time and the evaluation in the OB cannot be determined for RT communication. This means the signal trends of devices which receive the trigger from another device appear moved forward. After saving the measurements, you can manually correct these signals with a time offset.
Example of a recording with project trace
The figure below shows a recording with project trace and the correction of the representation with an offset.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
15
Trace software user interface
2
The user interface of the trace and logic analyzer function consists of several areas. The layout of the user interface in the TIA portal is described here.
The figure below shows an example of the distribution of the surface:
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
16
Trace software user interface
Project tree Management and creation of the trace and measurements directly in the project tree and via context menu commands. Working area
Title bar of the working area
Shows the device to which the current display belongs.
Trace toolbar
Buttons for managing the trace in the project and device: · Activation/deactivation of installed traces · Deletion of installed traces · Transfer of trace configurations and measurements between the device and the project · Export of trace configurations and measurements · Switchover between offline and online display
Status display of the trace
Display of the current status of the recording.
Configuration tab
Device-specific configuration of the recording duration, trigger condition and signal selection. Configuring the devices for project trace. See Device-specific descriptions (Page 81).
Diagram tab
Display of the recorded values as a curve diagram and the signals from the displayed measurement. Specification of the display options. Signal selection tab Display of all signals that are contained in the overlay measurements. "Trace" task card
Display of the measurement cursor data with mathematical evaluation and snapshots.
Inspector window Display of general information about the trace configuration
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
17
Trace software user interface 2.1 Project tree
2.1
Project tree
2.1.1
User interface - "Traces" project tree folder
Trace configurations and installed traces are displayed in the "Traces" folder.
More information about the "Traces" sub-folder is provided in the following sections.
Double-click a trace to open the corresponding "Configuration" or "Diagram" tab in the working area.
Icons in the "Traces" folder
The following table explains the icons in the "Traces" folder:
Icon
Description
Add trace configuration
Double-click the icon to add a new trace configuration.
Trace configuration (offline)
Double-click the icon to open the "Configuration" tab.
Installed trace (online)
The icon is only displayed when there is no offline trace configuration of the same name for the installed trace.
Double-click the icon to open the "Diagram" tab.
Trace configuration with an installed trace of the same name
If the button is deactivated, the trace configuration from the project is displayed. The trace corresponds to a trace configuration.
If the button is activated, the trace configuration from the device is displayed. The trace corresponds to an installed trace. Double-click on the symbol to open the "Diagram" tab of the installed trace.
Status
When there is an online connection, the status is displayed in the right-hand column of the project tree. The status is also displayed as tooltip above the respective icon.
The following table shows the meaning of the icons:
Icon
Description
Online and offline configuration are identical
Online and offline configuration are different
Configuration only exists online
Using the trace and logic analyzer function
18
Function Manual, 12/2019, A5E31277292-AF
Trace software user interface 2.1 Project tree
Shortcut menu commands
The following table shows the shortcut menu commands for the "Traces" system folder:
Shortcut menu command
"Add new group"
"Add new trace"
"Import trace configuration"
Description
Inserts a new folder. Inserts a new trace configuration and opens the configuration tab. Imports a trace configuration from a file.
The following table shows the shortcut menu commands for trace configurations and installed traces / :
Shortcut menu command "Copy"
"Paste"
"Delete"
"Rename" "Export trace configuration"
Trace configuration
x
x
x
x x
Installed trace -
-
x
-
Description
Copies the trace configuration or trace to the clipboard.
Inserts a trace configuration or measurement from the clipboard.
Deletes the selected objects from the project tree or from the device.
Switches the selected object to the editing mode.
Export a trace configuration as a file with the file extension "* .ttcfgx" or a trace in the device with the file extension "* .ttrecx". For reasons of compatibility, the "* .ttcfg" and "* .ttrec" file extensions are supported by TIA Portal V12, although they do not contain any information about the device family.
The trace configuration can also be copied across devices within the same device family.
2.1.2
User interface - "Measurements" project tree folder
The "Measurements" folder shows the saved measurements.
Icons in the "Measurements" folder
The following table explains the icons in the "Measurements" folder:
Icon
Description
Measurement (offline)
Double-click the icon to open the "Diagram" tab.
The configuration for a measurement can be transferred to the "Traces" folder using drag & drop.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
19
Trace software user interface 2.1 Project tree
Shortcut menu commands
The following table shows the shortcut menu commands for the folder:
"Measurements" system
Shortcut menu command
"Add new group"
"Import measurement"
Description
Inserts a new folder. Imports a measurement from a file with the "*.ttrecx" file extension. The import is device-independent. For reasons of compatibility, the "*.ttrec" file extension is supported in V12, although it does not contain any information about the device family.
The following table shows the shortcut menu commands for measurements :
Shortcut menu command
"Copy"
"Paste"
"Delete"
"Rename"
"Generate new overlay measurement"
"Export measurement"
Description
Copies the trace configuration of the selected objects to the clipboard. Inserts a measurement from the clipboard. Deletes the selected objects from the project tree or from the device. Switches the selected object to the editing mode. Generates a new overlay measurement with the selected measurements.
Exports a measurement with the last saved standard view The measurement is saved with the extension "*.ttrecx" or "*.csv". For reasons of compatibility, the "*.ttrec" file extension is supported in V12, although it does not contain any information about the device family.
The measurements can also be copied independent of the device family.
2.1.3
User interface - "Installed measurements (memory card)" project tree folder
The "Measurements on device (memory card)" folder shows all measurements present on the memory card. The folder is only displayed when there is an online connection to the device.
Drag folders or measurements contained here to the "Measurements" system folder using drag & drop. This transfers the measurements to the project.
Note Transferring numerous and large trace measurements from the device (memory card)
Transferring trace measurements from the device to the project increases the memory requirement.
Avoid copying a large number of measurements with large amounts of data at the same time because this can lead to high memory consumption and extended periods needed for copying.
Using the trace and logic analyzer function
20
Function Manual, 12/2019, A5E31277292-AF
Trace software user interface 2.1 Project tree
Icons in the "Traces" folder
The following table explains the icons in the system folder :
Icon Description Folders generated automatically with information on the recording activation time: The name of the folder cannot be changed. Installed measurement Double-click the icon to open the "Diagram" tab. The time stamp in the name shows the occurrence of the trigger event.
Shortcut menu commands
The following table shows the shortcut menu commands for the group folder :
Shortcut menu command "Copy" "Delete"
Description
Copies the selected objects to the clipboard. Deletes the selected objects from the project tree and from the device.
The following table shows the shortcut menu commands for measurements :
Shortcut menu command "Open" "Copy" "Delete" "Export measurement"
"Properties"
Description
Opens the measurement in the "Diagram" tab. Copies the selected objects to the clipboard. Deletes the selected objects from the project tree and from the device. Exports a measurement as a file with the extension "*.ttrecx" or "*.csv". For reasons of compatibility, the "*.ttrec" file extension is supported in V12, although it does not contain any information about the device family. Displays the general properties of the measurement (Page 40).
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
21
Trace software user interface 2.1 Project tree
2.1.4
User interface - "Overlay measurements" project tree folder
The system folder "Overlay measurements" shows the configured overlay measurements.
Icons in the "Overlay measurements" folder
The following table explains the icons in the system folder "Overlay measurements":
Icon
Description
Add new overlay measurements
Double-click the icon to add a new overlay measurement and open the "Diagram" tab.
Overlay measurement
Double-click the icon to open the "Diagram" tab.
Shortcut menu commands
The following table shows the shortcut menu commands for the system folder measurements" or for a group folder contained within this :
"Overlay
Shortcut menu command
"Add new group"
"Add new overlay measurement"
"Import overlay measurement"
Description
Inserts a new folder. Inserts a new overlay measurement and opens the "Diagram" tab. Imports an overlay measurement from a file with the file extension "*.ttcbmx"
The following table shows the shortcut menu commands for overlay measurements :
Shortcut menu command "Open" "Import measurement"
"Export overlay measurement"
"Copy" "Paste"
"Delete" "Rename" "Properties"
Description
Opens the selected overlay measurements in the working area.
Imports a measurement from a file with the file extension "*.ttrecx" For reasons of compatibility, the "*.ttrec" file extension is supported in V12, although it does not contain any information about the device family.
Exports an overlay measurement The overlay measurement is saved with the extension "*.ttcbmx" or "*.csv". The "*.ttcbmx" format can also be imported again.
Copies the selected objects to the clipboard.
Pastes measurements, measurements from traces in the device or from an overlay measurement from the clipboard. Multiple objects can be inserted from the clipboard if they are all of the same type.
Deletes the selected objects from the project tree or from the device.
Switches the selected object to the editing mode.
Displays the general properties for the overlay measurements.
The overlay measurements can also be copied device-wide.
Using the trace and logic analyzer function
22
Function Manual, 12/2019, A5E31277292-AF
2.2
2.2.1
Working area
Trace software user interface 2.2 Working area
User interface - trace toolbar
Tools are available for handling the trace via buttons. The following table shows the functions of the buttons:
Icon
Description
Transfer the selected trace configuration to the device
The selected trace configuration is transferred to the device.
Transfer the selected trace configuration from the device
The selected trace configuration is transferred, together with the current display options, from the device to the project.
Observe on/off
Change of the display between online and offline.
Note
Once monitor and automatic scaling are activated at the same time, no more actions can be undone using the "Undo" button.
Note
When an installed trace is first started the display in the curve diagram is set to automatic scaling by default. Make sure when the recording is restarted that any changes to the scaling settings are retained. Reactivate automatic scaling manually if necessary in order to monitor the recording.
Activate recording
If the recording of an installed trace is repeated, then the settings relevant for the display (curve diagram and signal table) are also retained for the new recording.
Note
When a recording is restarted, the previously recorded values are lost.
To save the recorded values, save the measurement in the project (Page 68) before you activate the recording again.
Deactivate recording
Delete installed trace Deletes the selected trace from the device. Automatically repeat recording After a recording, the recording is automatically activated again. The display of the curve is refreshed when the recording is completed. This type of refresh is particularly suitable for monitoring fast signals (Page 77). Transfer the selected measurement from the device to the project The measurement is added to the "Measurements" system folder. Note Only the data loaded from the device is saved. This data is displayed in the curve diagram. If necessary, wait until the display is updated.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
23
Trace software user interface 2.2 Working area
Icon
Description
Export trace configuration
Exports a trace configuration as a file with the file extension "*.ttcfgx". For reasons of compatibility, the "*.ttcfg" file extension is supported by V12, although it does not contain information about the device family.
Generate a trace configuration
Generates a new trace configuration from the measurement.
Export measurement with the settings from the current view
Exports a measurement as a file with the file extension "*.ttrecx" or "*.csv". For reasons of compatibility, the "*.ttrec" file extension is supported in V12, although it does not contain any information about the device family.
Import measurement (only with overlay measurements)
Imports a measurement from a file with the file extension "*.ttrecx". For reasons of compatibility, the "*.ttrec" file extension is supported in V12, although it does not contain any information about the device family.
Export overlay measurement (only with overlay measurements)
The overlay measurement is saved with the extension "*.ttcbmx" or "*.csv". The "*.ttcbmx" format can also be imported again.
Select a measurement (only with overlay measurements) The drop down list box contains the imported measurements. Select the desired measurement to display the configuration.
2.2.2 2.2.2.1
User interface - Configuration tab
User interface - Configuration
The trace configuration depends on the device and is described at the respective device (Page 81).
2.2.3 2.2.3.1
User interface - Diagram tab
User interface - curve diagram
The curve diagram displays the selected signals of a recording. Analog signals are displayed in the upper curve diagram. Binary signals are displayed as bit track in the lower diagram. You can adjust the display of the signals in the signal table (Page 30) and with the toolbar of the curve diagram. With project trace, the curve diagram displays a finished or canceled recording. Under the device you can monitor any recording.
Using the trace and logic analyzer function
24
Function Manual, 12/2019, A5E31277292-AF
Setting options and displays in the curve diagram
The following figure shows an example of the display:
Trace software user interface 2.2 Working area
The scale in the diagram applies to the selected (highlighted in gray) signal in the legend. The legend can be moved and its size can be adjusted with the mouse.
The icon shows the device trigger time with a vertical line.
A drop-down list for selecting the unit is available below the curve for the "Time (relative)" setting for the time axis. The "Automatic" setting automatically adjusts the unit based on the displayed time range.
Note Non-interpretable data types
Some data types require a defined format, e.g. the S7 data type LTime_of_Day. If this format is not available, the data type is interpreted as INT.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
25
Trace software user interface 2.2 Working area
Functions using the mouse wheel
The following table shows which functions are possible in the curve diagram using the mouse wheel:
Function of the mouse wheel Move the curve diagram vertically
Move the curve diagram horizontally Zoom in and zoom out
Description
Turning the mouse wheel moves the display in the upper curve diagram up or down.
If the signals are arranged in traces, the display of the group is shifted below the cursor.
The mouse pointer must be positioned above the curve with the analog signals.
Turning the mouse wheel with the <Shift> button pressed down moves the display in the curve diagram to the left or the right.
The cursor must be positioned above the curve diagram.
Turning the mouse wheel with the <Ctrl> button pressed down zooms in or out of the display in the curve diagram. The cursor position is the starting point for zooming in or out.
The value axis of the lower curve diagram (bit tracks) is not affected.
The cursor must be positioned above the curve diagram.
Functions using the keyboard
The following table shows which keyboard commands are possible with a focus on the curve diagram:
Shortcut key
Description
Selecting a measurement cursor
<Ctrl+Shift+1>
The vertical measurement cursor t1 is selected or deselected.
<Ctrl+Shift+2>
The vertical measurement cursor t2 is selected or deselected.
<Ctrl+Shift+3>
The horizontal measurement cursor Y1 is selected or deselected.
<Ctrl+Shift+4>
The horizontal measurement cursor Y2 is selected or deselected.
<Tab>
The next measurement cursor is selected.
Positioning a vertical measurement cursor
<Left>, <Right>
With the unit "Samples", the selected measurement cursor is moved by one sample by the signal in the foreground. With the unit "Time (relative)", the measurement cursor is moved by one pixel.
<Shift+Left>, <Shift+Right>
With the unit "Samples", the selected measurement cursor is moved by 10 samples by the signal in the foreground. With the unit "Time (relative)", the measurement cursor is moved by 10 pixels.
Positioning a horizontal measurement cursor
<Up>, <Down>
The selected measurement cursor is moved by one pixel along the value axis.
<Shift+Up>, <Shift+Down>
The selected measurement cursor is moved by 10 pixels along the value axis.
Using the trace and logic analyzer function
26
Function Manual, 12/2019, A5E31277292-AF
Trace software user interface 2.2 Working area
Shortcut key
Description
Display of vertical measurement cursors
<Ctrl+Space>
The vertical measurement cursors are shown or hidden.
<Ctrl+Shift+Space>
The vertical measurement cursors are shown and centered for the current view.
Changing the view
<Space>
Move view
<Ctrl+0>
Set 100% view in open editor
<Ctrl++>
Apply zoom in with 10%
<Ctrl+->
Apply zoom out with 10%
Shortcut menu commands
The following table shows the shortcut menu commands in the curve diagram:
Shortcut menu command "Save diagram as image" "Copy image to clipboard" "Center measurement cursors"
"Add to measurements" (only axis control panel and PID) "Automatic bit track height"
Description
Exports the current display in graphic format, e.g. as a bitmap.
Copies the current display to the clipboard.
Positions the activated measurement cursors at a central point in the current display.
Adds the displayed recording to the "Measurements" system folder.
Automatically adjusts the height of the bit tracks and thereby determines the size of the lower curve diagram.
The setting is automatically deactivated once you change the space allocation between the curve diagrams manually.
Note You can change the vertical space allocation between the upper and lower curve diagram. To do this drag the time axis of the upper curve diagram up or down with the mouse.
Toolbar of the curve diagram
Tools are available for adapting the display via buttons. The following table shows the functions of the buttons:
Icon
Function
Undo zoom
Redo zoom
Standard view
Description
Undoes the zoom function executed last. If several zoom functions have been executed, they can be undone step-by-step.
Redoes the last undone zoom function. If several zoom functions have been undone, they can be redone step-by-step.
Uses the current view as standard for this recording. If the trace recording is shown again later, the standard view is restored.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
27
Trace software user interface 2.2 Working area
Icon
Function
Move view
Description Moves the display with the mouse button pressed.
Zoom selection Vertical zoom selection Horizontal zoom selection Zoom in Zoom out Display all Automatic scaling of the value axis
Show the overall time range
Arrange in tracks
Selection of an arbitrary range with the mouse button pressed. The display is scaled to the range selection.
Selection of a vertical range with the mouse button pressed. The display is scaled to the range selection.
Selection of a horizontal range with the mouse button pressed. The display is scaled to the range selection.
Enlargement of the display. The ranges of the time axis and value axis are reduced every time the button is clicked. The curves are displayed larger.
Reduction of the display. The ranges of the time axis and value axis are increased every time the button is clicked. The curves are displayed smaller.
Scales the display of the available data so that the entire time range and all values are displayed.
Scaling of the display so that all values are displayed for the currently displayed time range.
The relative scaling ratio between the signals may change.
Note
The automatic scaling of the value axis is stopped when the zoom function is activated for the value axis. This button reactivates the automatic adjustments to the minimum/maximum values.
Scaling of the display so that the values in the value range currently displayed are displayed for the overall time range.
The value range displayed only then changes if "Display all values" is activated.
Note
The automatic scaling of the time axis is stopped when a zoom function is activated for the time axis. This button reactivates the automatic adjustments for the time range.
Activate or deactivate the trace arrangement.
When the trace arrangement is activated the signals are arranged among themselves with the relevant value axes.
Signal groups are displayed in the same trace.
This setting does not affect the display for the bit tracks.
Using the trace and logic analyzer function
28
Function Manual, 12/2019, A5E31277292-AF
Trace software user interface 2.2 Working area
Icon
Function
Description
Unit changeover of the time axis
Switching the unit of the time axis The following units are adjustable:
· "Samples"
· "Time (relative)"
Relative time related to the trigger time · "Time stamp of the samples"
Display samples
The samples are displayed as small circles on the curves.
Interpolated representation
Display vertical measurement cursors
Linear interpolation between two consecutive measuring points for floating point numbers
If linear interpolation is not enabled (default), the connection between the measuring points is drawn in steps.
Display of the vertical measurement cursors. The vertical position of the two measurement cursors can be moved with the mouse. The associated measured values and the difference of the measurement cursors corresponding to the position are shown in the signal table. Display the "Measurement cursor" pane (Page 41) in the Trace task card in order to display further information.
Also use the cursor keys. The following actions are possible for vertical measurement cursors with the cursor keys:
· Select
· Positioning
· Show or hide measurement cursor
· Center measurement cursors
Display horizontal measurement cursors
Display of the horizontal measurement cursors.
The horizontal position of the two measurement cursors can be moved with the mouse.
Display the "Measurement cursor" pane (Page 41) in the Trace task card in order to display the values or to reposition the measurement cursor through entering the position.
Also use the cursor keys. The following actions are possible for horizontal measurement cursors with the cursor keys:
· Select
· Positioning
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
29
Trace software user interface 2.2 Working area
Icon
Function
Time range display
Description
Show or hide the time range display below the curve
The time range display shows the area in the curve in yellow based on a selected signal.
The yellow area can be moved with the mouse and the borders can be changed horizontally.
Display chart legend
Align the chart legend to the left Align the chart legend to the right Change background color
Showing or hiding of the legend in the curve diagram and the bit track labels.
Display of the legend and the bit track labels on the left side of the curve diagram.
Display of the legend and the bit track labels on the right side of the curve diagram.
Changeover between various background colors.
2.2.3.2
User interface - signal table
The signal table lists the signals of the selected measurement and provides setting options for some properties.
Trace settings can be changed on the device in online mode. The changes of the display options can be applied to the project using the button. Otherwise the changes are discarded during the switch to offline mode.
If the installed trace is added to the measurements, the current settings of the signal table are saved in the measurement.
The signals can be sorted using drag-and-drop. The bits of a signal can be resorted within a signal.
Setting options and displays in the signal table
The following figure shows an example of the display:
Using the trace and logic analyzer function
30
Function Manual, 12/2019, A5E31277292-AF
Trace software user interface 2.2 Working area
The following table shows the settings and displays of the recorded signals:
Column
"Status"
(Only project trace in online mode)
Description Status display
No online connection
Configuration only exists offline
Online and offline configuration are different
No access right
Online and offline configuration are identical
Signal or error symbol
Signal
Failsafe signal
Signal from a data block
Signal from a failsafe data block
Calculated signal (formula)
Error in the formula of the calculated signal
"Signal reference" (only trace) "Device" (project trace only) "Name"
"Measurement" (Only combined measurements)
Selection for display in the curve diagram - a maximum of 16 signals can be selected. The point indicates that at least one bit has been selected for display as bit track for the signal in the bit selection. Automatically generated number of the signal The signal are accessed via the signal reference in the formulas.
Display of the device name
Display of the signal name A click on the name of a displayed signal updates the scale in the curve diagram. You can enter a name for a calculated signal in the last line without a signal symbol. The calculated signal is entered with its name. Display of the measurement Shows the name of the measurement to which the signal belongs.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
31
Trace software user interface 2.2 Working area
Column
Description Open bit selection Individual bits can also be selected for the following data types for display as a bit track in the lower curve diagram:
· Byte, Word, DWord, LWord · SInt, USInt, Int, UInt, DInt, UDInt, LInt, ULInt Example of an opened bit selection for the DWORD data type:
"Data type" "Display format" "Address" "Formula" (only trace)
"Color" "Signal group"
Gray field for chain icon
Input field "Min. Y-scale"
Select or deselect the relevant bit for display by clicking the icon. Display of the data type
Display format of the signal The display formats supported for the signal are offered for selection. A display format suitable for the data type is set with "Default".
Display of the address of the signal The field remains empty with optimized / type correct tags.
Display or entry of a formula
A formula can contain mathematical functions with numbers and signals. Use the formula editor to conveniently create formulas.
Call of the formula editor for calculated signals Click on the icon to open the formula editor.
Display and setting option for the color of the signal
Display or input of the signal group name for one signal group The Y-scales are scaled identically for all signals of one signal group. Enter an identical signal group name for those signals that are to be scaled identically. Remove signals from the scaling group by deleting the scaling group name.
The signal groups are saved via the function "Use current view as standard" (button ).
Notes
You cannot group binary signal events.
In hex display format, group only the signals with a format compatible to the sign for the display.
Move the cursor over the gray field or the chain icon ( or ) to add the signal to a signal group or delete the signal from the signal group.
Clicking the chain icon adds the signal to a signal group or creates a new signal group.
Clicking the chain icon removes the signal from the signal group.
For a selected signal with signal group, the the same signal group.
chain icon displays all signals of
The input field displays the signal group name. As an alternative to the chain icon, you can assign or delete a group name via text input in this field.
Display or input of the minimum value for the scaling of the signal
Using the trace and logic analyzer function
32
Function Manual, 12/2019, A5E31277292-AF
Trace software user interface 2.2 Working area
Column "Max. Y-scale" "Y(t1)" "Y(t2)" "Y"
"Unit" "Comment"
Description
Display or input of the maximum value for the scaling of the signal
Display of the value at the position of the first measurement cursor
Display of the value at the position of the second measurement cursor
Display of the value difference between the first and the second measurement cursor
Selection of the automatic scaling of the value axis for the signal When the check box is selected, the minimum and maximum values for scaling the signal are adjusted so that all values are displayed for the currently displayed time range. The button on the toolbar of the curve diagram activates automatic scaling for all scalable signals.
Display of the unit For example, for unit-based values from technology objects
Display and input option for a comment about the signal
Shortcut menu commands
The following table shows the shortcut menu commands of the signal table:
Shortcut menu command "Insert calculated signal" "Edit formula" "Cut" "Copy" "Paste" "Delete" "Rename" "Display format"
"Display signal(s)" "Hide signal(s)"
Description Inserts a re-calculated signal at the top in the table Opens the formula editor for the calculated signal Cannot be selected. Copies the contents of the selected lines to the clipboard. Cannot be selected. Cannot be selected. Cannot be selected Allows you to switch the display format The display formats supported for the signal are offered for selection. Displays the selected signals in the curve diagram. Hides the selected signals in the curve diagram.
See also
Use of the signal table (Page 74) Using the signal group in the signal table (Page 75)
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
33
Trace software user interface 2.2 Working area
2.2.3.3
Interface - Formula editor
The formula editor provides various mathematical functions for analyzing signals. Open the editor in the signal table by clicking the button.
Configuration options and displays in the formula editor
The following figure shows an example of the display:
Figure 2-1 Formula editor The following table shows the configuration options and displays of the formula editor:
Field/Button "Name"
"Data type"
"Unit" Drop-down list with signals
Description
Display and input of the name for the created formula The name must be unique and only contain characters that are allowed in Windows file names.
Display of formula data type The data type is pre-assigned with a floating-point number of LREAL type and cannot be changed.
Display and input of a unit Freely specified user-defined unit. Selection of the signals The drop-down list contains the signals from the signal table and inserts a selected signal into the formula.
Using the trace and logic analyzer function
34
Function Manual, 12/2019, A5E31277292-AF
Trace software user interface 2.2 Working area
Field/Button "Formula entry"
Mathematical functions
+ * / () SQR SQRT ABS
MOD
REC DIFF 1)
INT 1)
RMS 1)
AV
Description Text field to display and enter the formula Create a formula by typing into this text box or by using the buttons for the mathematical functions. Signals can be referenced in the text box using the signal reference with a prefixed $ character or the name in double quotes in the formula. Mixed input is possible. Bits from a bit selection (e.g. below the INT data type) are not allowed in the formula.
Addition Subtraction Multiplication Division Brackets Grouping expressions Square Square root Absolute value Calculates the size of a number. Examples ABS(5) 5 ABS(-3) 3 ABS(-3.14) 3.14 Modulo Calculates the residual value of a division Examples MOD(5,3) 2 MOD(3.14,3) 0.14 Reciprocal value (1/x) Numerical differentiation Examples Formula: DIFF($0,SAMPLETIME) Numerical integration Examples Formula: INT($0,SAMPLETIME) Quadratic mean The quadratic mean is given by first adding the squares of all the measured values and dividing them by the number of measured values. The quadratic mean is the square root of this value. Examples Formula: RMS($0,SAMPLETIME) Mean value filter from 1st to 5th order If the specification of an order is missing, the mean filter of the 1st order is used. Examples AV($0,1) Mean filter 1st order AV($0,5) Mean filter 5th order
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
35
Trace software user interface 2.2 Working area
Field/Button AM DIF
DIF2
"Show signal name" "Validate" "Result of validation" "OK" "Cancel"
Description
Mathematical constant Pi Arithmetic mean The arithmetic mean is a moving average over five measuring points. Simple subtraction with mean filter from 1st to 5th order If the specification of an order is missing, simple subtraction is performed with a 1st order filter. Examples DIF($0,1) Single subtraction with 1st order filter DIF($0,5) Single subtraction with 5th order filter DIF($0) Single subtraction with 1st order filter Example: Calculate an acceleration curve from a velocity signal $0: Velocity signal in meters per second Cycle time of the constant cycle velocity recording: 1 ms Formula: DIF($0,1)/0.001 Unit: m/s2 Double subtraction with mean filter from 1st to 5th order If the specification of an order is missing, then double subtraction is executed with a 1st order filter. Examples DIF2($0,1) Double subtraction with 1st order filter DIF2($0,5) Double subtraction with 5th order filter DIF2($0) Double subtraction with 1st order filter Example: Calculate an acceleration curve from a position sequence $0: Position sequence in meters Cycle time of the constant cycle position recording: 1 ms Formula: DIF2($0,1)/SQR(0.001) Unit: m/s2 Display of the signal names If the check box is selected, the signal names in the formula are displayed instead of the signal references. Check the validity of the formula Result of validation Displays the result of the validation and indicates errors and error locations. Transfer the entries in the formula editor Discard the entries in the formula editor
1) The constant SAMPLETIME is only available for equidistant recording cycles. Time unit for SAMPLETIME is always s.
Note
The functions DIF, DIF2, DIFF, AM, RMS, AV and INT can only process one recorded signal as argument. Not all invalid formulas are marked as errors.
Using the trace and logic analyzer function
36
Function Manual, 12/2019, A5E31277292-AF
Trace software user interface 2.2 Working area
2.2.3.4
User interface - Measurements (overlay measurements)
The Measurements tab displays the individual measurements and among other things provides the setting options for synchronization.
Setting options and displays in the Measurements tab
The following figure shows an example of the display:
The following table shows the settings and displays for the measurements:
Column
Description
Alignment of the measurements
"Trigger/measure ment point"
Alignment of the measurements in accordance with the trigger or measurement point
The individual zero point for the measurement is predefined in the table under the "Alignment" column.
"Time stamp (absolute time)"
Alignment of the measurements in accordance with their time stamp
The signals are aligned in accordance with the time from the absolute time stamp.
Table columns
Static display of the measurement icon
"Name" "Alignment"
Display and change options for the measurement name The name must be a unique one and can be changed.
Alignment of the measurement (only adjustable with the "Trigger/measurement point" check box activated) Determines the individual zero point for a measurement. All signals for the measurement are displayed in relation to this zero point. The following settings are possible:
· Trigger
· First measurement point following the trigger event
· First measurement point
· Last measurement point
"Offset"
"Time stamp" "Comment"
Offset related to the time axis Moves the measurement left or right by the offset stated on the time axis. The offset can also be transferred via the clipboard to the cell from the X value of the measurement cursor. See Align measurements precisely (overlay measurements) (Page 80).
Display of the trigger time
Display and input option for a comment about the signal
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
37
Trace software user interface 2.2 Working area
Shortcut menu commands
The following table shows the shortcut menu commands of the signal table:
Shortcut menu command "Cut" "Copy" "Paste" "Delete" "Rename" "Import measurement"
"Export measurement"
Description
Cannot be selected.
Copies the contents of the selected lines to the clipboard.
Cannot be selected.
Cannot be selected.
Switches the selected cell to the editing mode.
Imports a measurement from a file, e.g. with the "*.ttrecx" file extension.
The import is device-independent and also suitable, for example, for comparing measurements of a PLC with the measurements of a drive device.
For reasons of compatibility, the "*.ttrec" file extension is supported in V12, although it does not contain any information about the device family.
Exports a measurement as a file with the extension "*.ttrecx" or "*.csv".
For reasons of compatibility, the "*.ttrec" file extension is supported in V12, although it does not contain any information about the device family.
Using the trace and logic analyzer function
38
Function Manual, 12/2019, A5E31277292-AF
Trace software user interface 2.2 Working area
2.2.4
User interface - Signal selection tab (overlay measurements)
2.2.4.1
User interface - Signal selection (overlay measurements)
The Signal selection tab shows the signals for all measurements and allows signals that are presented in the signal table of the diagram to be preselected.
Setting options and displays in the Signal selection tab.
The following figure shows an example of the display:
The following table shows the settings and displays for the table:
Column
Description Static display of the signal icon
"Available in the diagram"
"Measurement" "Name" "Data type " "Address" "Scaling group" "Comment"
Selection for the display in the curve diagram When the selection is activated the signal is transferred to the signal table for the curve diagram. Display of the measurement to which the signal belongs Display of the signal name Display of the data type Display of the address (not for symbolic tags) Display of the scaling group name Display of a comment on the signal
You will find further information on the specific settings in User interface - signal table (Page 30).
Shortcut menu commands
The following table shows the shortcut menu commands for the signal selection:
Shortcut menu command
"Copy"
"Display selection in the signal table"
"Remove selection from the signal table"
Description
Copies the content of the selected lines to the clipboard. The selected signals are displayed in the signal table and are available in the diagram. The removed signals are not available in the diagram.
Several objects can be selected.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
39
Trace software user interface 2.3 Inspector window
2.3
Inspector window
2.3.1
Interface - Inspector window
The Inspector window displays general information about the trace. Additional information is available for measurements: Time stamp range
The availability of the time stamps depends on the configured recording conditions. Measuring point range Cycle time range
For equidistant cycle recordings, the time duration between two measurement points is displayed. This time, for example, can be used in the formula editor.
Sample time stamp
The following figure shows the time stamps for a measurement:
Note Analysis of measurements with sporadically occurring recording condition
When evaluating your measurements, keep in mind that the recording condition between the activation time and the trigger time may not have been fulfilled.
Using the trace and logic analyzer function
40
Function Manual, 12/2019, A5E31277292-AF
2.4
Trace task card
Trace software user interface 2.4 Trace task card
2.4.1
User interface - Measurement cursor pane
The "Measurement cursor" pane shows the position of the measurement cursor in the curve diagram and the values at the intersection points.
Setting options and displays of the "Measurement cursor" pane
The figure below shows the "Measurement cursor" pane:
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
41
Trace software user interface 2.4 Trace task card
The following table describes the settings and displays:
Setting/display
Description
Horizontal measurement cursor
Y1
Position of first measurement cursor
The value states the position in relation to the scale of the signal currently selected. You also have the option of specifying a new position for the measurement cursor in this entry field for moving with the mouse.
Y2
Position of the second measurement cursor
The value states the position in relation to the scale of the signal currently selected. You also have the option of specifying a new position for the measurement cursor in this entry field for moving with the mouse.
Y
Display of the position difference between the first and the second measure-
ment cursor
Vertical measurement cursor
t1
Position of first measurement cursor
You also have the option of specifying a new position for the measurement cursor in this entry field for moving with the mouse.
t2
Position of the second measurement cursor
You also have the option of specifying a new position for the measurement cursor in this entry field for moving with the mouse.
t
Display of the position difference between the first and the second measure-
ment cursor
Intersection points with selected signal
Y(t1)
Display of the value at the position of the first measurement cursor
Y(t2)
Display of the value at the position of the second measurement cursor
Y
Display of the value difference between the first and the second measurement
cursor
Mathematical analysis in the range of the measurement cursor·[t1;t2] for the selected signal
AM(Y)
Mean
The arithmetic mean is calculated for the range between the vertical measurement cursors.
INT(Y)
Integral
The integral is calculated for the range between the vertical measurement cursors.
RMS(Y)
RMS value
The root-mean square (RMS value) is calculated for the range between the vertical measurement cursors.
See also
User interface - curve diagram (Page 24)
Using the trace and logic analyzer function
42
Function Manual, 12/2019, A5E31277292-AF
Trace software user interface 2.4 Trace task card
2.4.2
User interface - Snapshots pane
The "Snapshots" pane allows the user to save and restore different views for a measurement.
A snapshot is taken of the current view in the "Diagram" tab. The snapshots are saved in the measurement with the project.
Setting options and displays of the "Snapshots" pane
The figure below shows the "Snapshots" pane:
The following table shows the functions of the buttons:
Icon
Description
Generate snapshot of the current view
Saves the current view as a snapshot in the "Diagram" tab.
The following table shows the settings and displays:
Column
Description Static display of the snapshot symbol
"Name" "Time stamp" "Comment"
Display and change options for the name Display of the snapshot generation time Display and input option for a comment
Several rows can be selected and deleted.
Double-clicking on a row opens the measurement with the saved view in the "Diagram" tab.
Shortcut menu commands
The following table shows the shortcut menu commands of the table:
Shortcut menu command "Restore snapshot"
"Delete" "Rename"
Description
Shows the measurement with the saved view in the "Diagram" tab. Deletes the snapshot Switches the cell to the editing mode
Several rows can be selected and deleted.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
43
Project trace software user interface
3.1
Structure of the user interface
The user interface of the project trace consists of several combined areas.
The figure below shows an example of the layout of the user interface:
3
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
44
Project trace software user interface 3.1 Structure of the user interface
See also
Project tree Manage and create project traces and measurements directly in the project tree and via shortcutmenu commands. Working area
Title bar of the working area
Displays the name of the project trace.
Project trace toolbar
Buttons to manage the project traces: · Transfer trace configurations to the devices · Display status overview of participating devices · Establish online connection to participating devices · Activating/deactivating project traces · Deleting project traces · Transferring measurements from the devices to the project
Status display of the project trace
Display of the current status of the recording.
Configuration tab
Configuration of the participating devices and signals for the project trace.
Diagram tab
Display of the recorded values as a curve diagram and the signals from the displayed measurement. Specification of the display options. "Trace" task card
Display of the measurement cursor data with mathematical evaluation and snapshots.
Inspector window Device-specific configuration of the recording duration, trigger condition and signal selection. Display of general information about the project trace.
Devices (Page 81)
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
45
Project trace software user interface 3.2 Project tree
3.2
Project tree
3.2.1
User interface - Project tree folder "Cross-device functions" - "Project traces"
Project trace configurations and measurements are shown in the system folder "Project traces".
Double-click a project trace to open the corresponding "Configuration" or "Diagram" tab in the working area.
Symbols in the "Project traces" folder
The following table explains the symbols in the folder "Project traces":
Icon
Description
Adding a project trace configuration Double-click the symbol to add a new project trace configuration and open the "Configuration" tab. Project trace configuration Double-click the icon to open the "Configuration" or "Diagram" tab. "Measurements" folder
The folder contains combined measurements that were added using the button. The measurements are compatible with the combined measurements within the devices. The configurations of the individual measurements are displayed when the combined measurement is copied or moved to the corresponding folder of a device.
Measurement Double-click the icon to open the "Diagram" tab.
Shortcut menu commands
The following table shows the shortcut-menu commands for the system folder traces":
"Project
Shortcut menu command
"Add new project trace"
Description Adds a new project trace and opens the "Configuration" tab.
The following table shows the shortcut-menu commands for the project trace configuration :
Shortcut menu command "Delete" "Rename"
Description
Deletes the selected objects from the project tree or from the device. Switches the selected object to the editing mode.
Using the trace and logic analyzer function
46
Function Manual, 12/2019, A5E31277292-AF
3.3
3.3.1
3.3.2
Working area
Project trace software user interface 3.3 Working area
User interface - Project trace toolbar
Buttons provide tools for handling the project trace. The following table shows the functions of the buttons:
Icon
Description
Transferring the trace configurations to the devices
The trace configurations are transferred to the participating devices.
Display of the status overview
Shows the status overview of the participating devices (Page 47).
Establishing an online connection
The online connection to the participating devices is established.
Activate recording
If the recording of an installed trace is repeated, then the settings relevant for the display (curve diagram and signal table) are also retained for the new recording.
You cannot redo an interrupted recording.
Note
When a recording is restarted, the previously recorded values are lost.
To save the recorded values, save the measurement in the project before you activate the recording again.
Deactivate recording
Deactivates the traces in all devices that can be reached online.
Delete traces from devices
Deletes the traces from the participating devices that can be reached online.
Transferring measurements from the devices to the project
The measurements are added to the system folder "Measurements".
Note
Only the data loaded from the devices is saved. This data is displayed in the curve diagram. If necessary, wait until the display is updated.
User interface - status overview of the participating devices
The dialog shows status information about the participating devices.
For participating devices with status without error, you can apply trace configurations to the devices.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
47
Project trace software user interface 3.3 Working area
Display in the status overview table
The following table shows the displays of the status overview:
Column -
Device Device status
Trace status
Description Display of whether there is an error for the project trace in the participating device or whether the trace configuration is faulty. A tooltip above the symbol displays information about the cause of the error. Meaning in offline mode · Configured trace is faulty Meaning in online mode · Configured trace is faulty · Recording was interrupted · Connection error Display of the device name Status display of the online connection Offline
Connect or disconnect
Online
Status display of the trace A tooltip above the symbol displays information on the status. Online and offline configuration are identical
Online and offline configuration are different
Configuration only exists offline
Remedy for errors
The following list shows possible sources of error and the remedy. Firmware
With the devices (Page 81) it is described if and from which firmware a device supports the project trace. Trace configuration Check the settings for the respective device in the "Properties" tab of the Inspector window. Canceled recording You can restart an interrupted recording by transferring the trace configurations again. Project trace requirements Check that the general requirements for the project trace (Page 14) are met.
Using the trace and logic analyzer function
48
Function Manual, 12/2019, A5E31277292-AF
Project trace software user interface 3.3 Working area
3.3.3
User interface - Configuration tab
3.3.3.1
User interface - Configuration
The "Configuration" tab is used to define the participating devices for the project trace. You configure the device-dependent trace configuration and the properties of the project trace in the Inspector window (Page 50).
The displayed trace configuration is always the offline configuration, even with an existing online connection. Transfer changes of the trace configurations to the devices using the button.
Setting options and displays in the overview of the participating devices
The figure below shows an example of the display of the overviews table:
The following table shows the settings and displays of the participating devices:
Column Device
Trigger
Trace sample event
Cycle time Record every Number of samples Recording duration Errors
Description
Input of the device name
Button to open the device selection table The button is displayed when the table line is selected. Clicking the symbol opens a table which offers possible devices for selection. The selected device is displayed in the input field.
The symbol indicates which devices can activate a trigger. Configure this device-dependent setting in the "Properties" tab of the Inspector window.
Display of the trace sample event In the "Properties" tab of the Inspector window, configure in which cycle (OB with a SIMATIC CPU) the recording should take place.
Display of the time cycle resulting from the selection of the trace sample event
Input of the reduction ratio
Input of the number of samples to be recorded The recording duration is adjusted according to the input.
Input of the recording duration The number of samples is adjusted according to the input.
Display of an error in the trace configuration
A tooltip above the symbol displays information about the cause of the error. Configured traces with the Error status cannot be transferred to the device.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
49
Project trace software user interface 3.4 Inspector window
3.3.4
User interface - Diagram tab
The "Diagram" tab of the project trace behaves in the same way as the trace and is described in the section User interface - Diagram tab (Page 24).
3.4
Inspector window
3.4.1
Interface - Inspector window
The display in the "Properties" tab of the Inspector window depends on the current selection in the working area.
If no table row with a device is selected in the working area, general information about the project trace is displayed. If a table row with a device is selected, the device-dependent trace configuration is displayed, which is described for the respective device (Page 81).
General information in the "Properties" tab.
The following figure shows an example of the display:
The following table shows the settings and displays of the recorded signals:
Field Name Author Comment Trace ID
Port number
Description
Input field for the name of the project trace Input field for the name of the author Input field for a comment. Display of the Trace ID Using this ID, you can distinguish, for example, between several active project traces. Input field for the port number of the connection The devices participating in the project trace communicate via this port. The numbers must be identical and unique on all devices. Also note the instructions for assigning port numbers in the TIA Portal information system.
Using the trace and logic analyzer function
50
Function Manual, 12/2019, A5E31277292-AF
Project trace software user interface 3.5 Trace task card
3.5
Trace task card
The displayed panes are described in the section "Trace task card (Page 41)".
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
51
Operation
4
4.1
Trace quick start
This description shows the steps for a recording of the S7-1500 CPU as an example. The displayed settings can differ depending on the device.
Requirement
A device is configured that supports the trace and logic analyzer function.
Creating a trace
The following figure shows the project tree with the device:
"Traces" system folder below the
Procedure: 1. Double-click the "Add new trace" entry.
A new trace configuration is created and the "Configuration" tab opens in the working area. 2. Adapt the name of the trace configuration by clicking the text.
Using the trace and logic analyzer function
52
Function Manual, 12/2019, A5E31277292-AF
Selecting signals
The following figure shows the configuration of the signals:
Operation 4.1 Trace quick start
Procedure: 1. Select the signals to be recorded in the "Signals" area.
Or: 2. Drag one or more signals, e.g. from a tag table, and drop them in the signal table.
Configuring the recording cycle
The following figure shows the configuration of the sampling:
Procedure: 1. Configure the sampling.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
53
Operation 4.1 Trace quick start Configuring the trigger
The following figure shows the configuration of the trigger:
Procedure: 1. Configure the trigger mode and the condition for the selected trigger.
Configuring display options (optional)
The following figure shows the configuration of the display options:
Procedure: 1. Switch to the "Diagram" tab. 2. Set the desired display options in the diagram and in the signal table.
Using the trace and logic analyzer function
54
Function Manual, 12/2019, A5E31277292-AF
Operation 4.1 Trace quick start
Transferring the trace configuration to the device
Procedure: 1. Transfer the trace configuration to the device with the
The following functions are executed: An online connection is established to the device. The trace configuration is transferred to the device. The monitoring is activated. The display switches to the "Diagram" tab.
button.
Activating a recording
Procedure: 1. Click the
button.
Displaying the recording
The following figure shows the curve diagram with a recording:
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
55
Operation 4.1 Trace quick start
Procedure:
1. Wait until the "Recording" or "Recording completed" status is displayed in the status display of the trace.
2. Switch to the "Diagram" tab.
3. Click the icon of a signal in the signal table.
The individual bits of the signal are offered for display as a bit track.
4. In the signal table, select or deselect the individual signals and bits for display with the icon.
Saving the measurement in the project
Procedure:
1. Transfer the measurement to the project with the button. The measurement is displayed in the project tree under the "Measurements" system folder.
See also
User interface - trace toolbar (Page 23)
Using the trace and logic analyzer function
56
Function Manual, 12/2019, A5E31277292-AF
Operation 4.2 Project trace quick start
4.2
Project trace quick start
This description shows an example of the steps for a recording with project trace for two S7-1500 CPUs. The displayed settings can differ depending on the device.
Requirements
Two S7-1500 CPUs with firmware version V2.8 or higher are configured. The general requirements for the project trace (Page 14) are fulfilled.
Add project trace
The following figure shows the project tree with the the cross-device functions:
"Project traces" system folder below
Procedure: 1. Double-click the "Add new project trace" entry.
A new project trace configuration is created and the "Configuration" tab opens in the working area. 2. Adapt the name of the project trace configuration by clicking the text.
Adding devices
The following figure shows the adding of the devices.
Procedure: 1. Select the devices in the "Participating devices" area.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
57
Operation 4.2 Project trace quick start
Configuring signals and recording conditions of devices
The following figure shows two participating devices and the configuration of "PLC_1".
Procedure: 1. Select a device in the "Participating devices" area. 2. Select the "Properties" tab in the Inspector window. 3. Select the signals to be recorded in the "Signals" area.
Or: 4. Drag one or more signals, e.g. from a tag table, and drop them in the signal table. 5. Configure the sampling. 6. Configure the trigger mode and the condition for the selected trigger. 7. Redo the configuration from step 1 for each participating device. For "PLC_2", "Trigger from another Device" is configured as trigger mode in the example shown here.
Using the trace and logic analyzer function
58
Function Manual, 12/2019, A5E31277292-AF
Operation 4.2 Project trace quick start
Apply trace configurations to the devices
Procedure: 1. Open the status overview of the participating devices using the button. 2. Transferring the trace configurations to the devices using the button. 3. Check the status in Status overview (Page 47) and correct any errors that have occurred.
Activate recording
Procedure: 1. Click the
button.
Displaying recordings
Procedure:
1. In the status overview of the participating devices, check whether the required recordings have already been completed.
2. Switch to the "Diagram" tab.
Saving measurements in the project
Procedure:
1. Transfer the measurements to the project using the button. The measurements are displayed in the project tree under the system folder "Measurements".
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
59
Operation 4.3 Using the trace function - overview
4.3
Using the trace function - overview
Requirement
A device is configured in the TIA Portal that supports the trace and logic analyzer function and to which an online connection has been established.
Procedure
The following table shows a procedural overview with typical steps when working with the trace and logic analyzer function.
Step 1 2 3 4 5 6 7 8 9
Description Creating a trace (Page 60) Configuring the trace (Page 72) Transferring the trace configuration to the device (Page 64) Activating/deactivating an installed trace (Page 65) Monitoring the recording (Page 66) Saving measurements in the project (Page 68) Displaying the recording (Page 66) Analyze an ongoing recording (Page 67) Compare records (overlay measurements) (Page 78)
See also
Displaying a configuration (Page 61)
4.4
Project tree
4.4.1
Creating a trace
Traces can be created in the form of trace configurations in the project tree.
The following instructions describe how you can create a trace configuration under the "Traces" system folder
Procedure
To create a trace configuration, proceed as follows: 1. Double-click the "Add new trace" entry. A new trace configuration is created.
Using the trace and logic analyzer function
60
Function Manual, 12/2019, A5E31277292-AF
Operation 4.4 Project tree
4.4.2
Displaying a configuration
Requirement
A trace configuration, an installed trace, a measurement or an overlay measurement is available in the "Traces" system folder.
Procedure
To display a trace configuration, proceed as follows: 1. Double-click the appropriate icon of a trace configuration, an installed trace, a
measurement or an overlay measurement in the project tree. The "Configuration" or "Diagram" tab opens in the working area. 2. If required, click the "Configuration" tab for the display.
Note Write protection The configuration data of an installed trace and in all measurements is displayed with write protection.
See also
User interface - "Traces" project tree folder (Page 18)
4.4.3
Displaying a diagram
Requirement
An installed trace, a measurement or an overlay measurement is available in the "Traces" system folder.
Procedure
To display a diagram, proceed as follows: 1. Double-click the corresponding symbol of an installed trace, a measurement or a
combined measurement in the project tree. The "Configuration" or "Diagram" tab opens in the working area. 2. If required, click the "Diagram" tab for the display.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
61
Operation 4.4 Project tree
See also
User interface - "Traces" project tree folder (Page 18)
4.4.4
Apply overlay measurement
Combined measurements can be applied in the project tree with a comparison function for different measurements.
The following instructions describe how you can create an overlay measurement under the "Overlay measurements" system folder
Requirement
A device is configured that supports the trace and logic analyzer function.
Procedure
To apply an overlay measurement, proceed as follows: 1. Select one or more measurements in the "Measurements" system folder. 2. Drag the measurements to the "Overlay measurements" system folder. A new overlay measurement is created. This contains copies of the selected measurements.
Using the trace and logic analyzer function
62
Function Manual, 12/2019, A5E31277292-AF
4.4.5
Operation 4.4 Project tree
Configuring objects in groups
You can set up groups in system folders in the project tree. Use this option to configure the view for multiple objects. The following instructions use measurements as an example in order to describe how to consolidate the measurements into groups. The same functionality is also available for the "Traces" and "Combined measurements" system folders.
Note Traces in the device can also be displayed in groups A trace configuration in a group with a trace of the same name in the device is displayed under the group. Therefore, all traces in the device on the first level in the "Traces" folder are not necessarily displayed.
Requirement
Measurements are available in the "Measurements" system folder.
Procedure
Proceed as follows to configure measurements into groups: 1. Select the shortcut menu command "Add new group" by right-clicking on the
"Measurements" system folder. A new group folder is created. 2. Assign a meaningful name to the new group. 3. Repeat step 1 until all required groups have been created. (Sub-groups (groups within groups) can also be created.) 4. Drag & drop the corresponding measurements to the group folder that has been created.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
63
Operation 4.5 Working area - general
4.5
Working area - general
4.5.1
Transferring the trace configuration to the device
Requirement
A valid trace configuration is in the "Traces" system folder. The maximum number of installed traces has not been reached yet.
Procedure
To transfer a trace configuration to the device, proceed as follows: 1. Open a valid trace configuration in the working area. 2. Click the button.
Result
The trace configuration is transferred to the device.
Using the trace and logic analyzer function
64
Function Manual, 12/2019, A5E31277292-AF
Operation 4.5 Working area - general
4.5.2
Activating/deactivating an installed trace
Requirement
There is an online connection to the device. There is a trace in the device. The installed trace is displayed in the working area. The button is activated for viewing the displayed trace.
Activating an installed trace
To activate the recording for an installed trace, proceed as follows:
1. Click the button.
The installed trace is activated and starts the recording according to the configured trigger condition. The trigger condition is device-specific and described in Section "Configuration" below the respective device (Page 81). The current status of the recording is displayed in the status display of the trace.
Note When a recording is restarted, the previously recorded values are lost. To save the recorded values, save the measurement in the project (Page 68) before you activate the recording again.
Deactivating an installed trace
To deactivate an activated installed trace, proceed as follows: 1. Click the button.
The installed trace is deactivated. The status display of the trace changes to "Inactive".
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
65
Operation 4.5 Working area - general
4.5.3
Displaying the recording
Requirement
There is an online connection to the device. There is a trace with recording in the device. Or: A measurement is in the "Measurements" system folder.
Procedure
To display the recording, proceed as follows: 1. Select an installed trace. 2. Double-click the selected trace. 3. If required, activate the button for viewing. Or: 1. Select a measurement in the "Measurements" system folder. 2. Double-click the selected measurement.
Result
The recording is displayed in the "Diagram" tab.
See also
User interface - "Traces" project tree folder (Page 18)
Using the trace and logic analyzer function
66
Function Manual, 12/2019, A5E31277292-AF
Operation 4.5 Working area - general
4.5.4
Analyze an ongoing recording
Requirements
An ongoing recording is displayed in the "Diagram" tab.
Save the data currently recorded as a measurement
To analyze a certain time range for an ongoing recording, follow these steps:
1. Click the button. The data recorded up to now is added to the measurements. The current recording is not affected by this and continues running uninterrupted.
Analyze the measurement
To display the saved measurement, follow these steps:
1. In the "Measurements" system folder double-click the measurement that has just been saved in order to open it
The "Diagram" tab for the measurement opens in the working area.
See also
Displaying the recording (Page 66) Working area - Diagram tab (Page 72)
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
67
Operation 4.5 Working area - general
4.5.5
Saving measurements in the project
Requirement
There is an online connection to the device.
There is a trace with recording in the device.
The installed trace data must have been displayed at least once in the curve diagram. The recording data is loaded from the device for the display.
Procedure
To save a recording in the project, proceed as follows: 1. Open the installed trace with the recorded data. 2. If required, make sure that the current data is loaded from the device by activating the
button. 3. After activating the button wait until all data has been loaded and displayed. 4. Click the button.
The measurement is added to the "Measurements" system folder. 5. Save the project in the TIA Portal.
Note Generate measurements A measurement of an installed trace can be generated at any time. Use this functionality e.g. to save the data recorded up until this point in a recording and to analyze it as a static measurement.
Using the trace and logic analyzer function
68
Function Manual, 12/2019, A5E31277292-AF
Operation 4.5 Working area - general
4.5.6
Exporting and importing measurements
Requirement
At least one measurement is in the "Measurements" system folder for export.
Exporting measurements
To export a measurement, proceed as follows: 1. Right-click a measurement in the "Measurements" system folder and select the
shortcut menu command "Export measurement". 2. Select a folder, a file name and a data type to save the measurement. 3. Click the "Save" button.
Importing measurements
To import a measurement, proceed as follows: 1. Right-click in the "Measurements" system folder and select the shortcut menu
command "Import measurement". 2. Select the file e.g. of the "*.ttrecx" file type with the measurement to be imported. 3. Click the "Open" button.
The imported measurement is displayed with the file name in the "Measurements" system folder.
Note Export and import trace configurations The same functionality is available for exporting and importing trace configurations.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
69
Operation 4.5 Working area - general
4.5.7
Transferring the trace configuration from the device to the project
Requirement
There is an online connection to the device. There is a trace in the device.
Procedure
To transfer a trace configuration to the project, proceed as follows: 1. Open an installed trace. 2. If required, activate the button for viewing. 3. Click the button to transfer the trace configuration from the device.
Result
The configuration is taken over as new trace configuration in the "Traces" system folder. The current display options are included in the new trace configuration. A trace configuration of the same name is overwritten in the system folder.
Using the trace and logic analyzer function
70
Function Manual, 12/2019, A5E31277292-AF
Operation 4.5 Working area - general
4.5.8
Deleting installed traces
Requirement
There is an online connection to the device. There is a trace in the device.
Procedure
To delete an installed trace, proceed as follows: 1. Open an installed trace. 2. If required, activate the button for viewing. 3. Click the button.
A confirmation prompt opens. 4. Confirm the prompt for deletion. Or 1. Select one or more installed traces / in the project tree. 2. Press <Delete> to delete the installed traces.
A confirmation prompt opens. 3. If required, select an option for deletion and confirm the prompt.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
71
Operation 4.6 Working area - Configuration tab
4.6
Working area - Configuration tab
4.6.1
Configuring the trace
Requirement
The "Configuration" tab is open in the working area.
Configuring the trace
In the configuration, you specify the recording and trigger conditions and select the signals to be recorded. See Section "Configuration" below the respective device (Page 81).
Note Saving the trace configuration You save the trace configuration with the project in the TIA Portal. If you close the project without saving, the configuration is discarded.
See also
Displaying a configuration (Page 61)
4.7
Working area - Diagram tab
4.7.1
Use of the curve diagram
The curve diagram shows the signals of a recording selected in the signal table.
The display area can be zoomed as required. Measurement cursors can be used to select individual values for display in the signal table.
The following operating instructions describe the use of the curve diagram and of the measurement cursors as examples.
Requirements
An installed trace or a measurement has been selected for display. The button is activated to monitor an installed trace. The "Diagram" tab is open in the working area.
Using the trace and logic analyzer function
72
Function Manual, 12/2019, A5E31277292-AF
Operation 4.7 Working area - Diagram tab
Monitor an ongoing recording.
To display all of the data in an ongoing recording, proceed as follows: 1. Activate "Display all" via the button. The entire time range and all values for the ongoing recording are displayed.
To display a consistent time window in an ongoing recording, proceed as follows: 1. Activate "Display all" via the button. 2. Select the desired time range via the button. The trend view is updated while the scaling of the time range remains the same.
Evaluation of a certain instant of a recording
To display the values for a specific sample, proceed as follows: 1. Display the vertical measurement cursors via the button. 2. Move a measurement cursor with the mouse to the required position in the recording.
The values of the signals are displayed in the signal table and in the "Measurement cursor" pane of the "Trace" task card.
Evaluation of the difference between two samples
To display the difference, proceed as follows: 1. Display the vertical measurement cursors via the button. 2. Move both measurement cursors with the mouse to the required samples in the
recording. The values of the signals and the difference are displayed in the signal table and in the "Measurement cursor" pane of the "Trace" task card.
Using horizontal measurement cursors
To check whether a certain value has been reached, proceed as follows: 1. Display the horizontal measurement cursors via the button. 2. Move a measurement cursor with the mouse to the required value of the recording.
The values of the measurement cursors for the selected signal are displayed in the "Measurement cursor" pane of the "Trace" task card.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
73
Operation 4.7 Working area - Diagram tab
Moving the time range displayed
Proceed as follows to move the time range displayed:
1. Select a time range via the button. 2. Move the curve to the desired time range by turning the mouse wheel with the <Shift> key
pressed down.
Bringing a signal into the foreground
1. Display the legend via the button. 2. Click a signal in the legend. Or: 1. Click a signal in the curve diagram. The signal is displayed in the foreground and is highlighted/selected in the signal table. The value axis is updated for the selected signal.
See also
Displaying a diagram (Page 61) User interface - curve diagram (Page 24) User interface - signal table (Page 30)
4.7.2
Use of the signal table
The signal table shows the signals of an installed trace or a measurement. The preselected signals in the signal selection are displayed with an overlay measurement. You can show or hide individual signals for the display in the table and adapt the properties for the display. Individual bits can be selected for some data types and displayed as a bit track.
The following operating instructions describe the operation of the signal table.
Requirements
An installed trace or a measurement has been opened in the "Diagram" tab.
The button is activated to monitor an installed trace.
For the display of individual bits as a bit track: at least one recorded signal supports the display as a bit track.
Using the trace and logic analyzer function
74
Function Manual, 12/2019, A5E31277292-AF
Operation 4.7 Working area - Diagram tab
Display or hide individual signals and change the color
To adapt the display to suit your requirements, proceed as follows: 1. Click the icon of the respective signal in the column to select or deselect it for the
display. 2. Click in the "Color" column for the respective signal and select a color.
The default color for the signal changes.
Bringing a signal into the foreground
1. In the signal table, select the line of the signal. The Y-scale of the signal is displayed. The signal curve is brought into the foreground in the curve diagram.
Selecting individual bits for display as a bit track
To display individual bits as a bit track in the lower curve diagram, proceed as follows: 1. Click the icon of a signal in the signal table. 2. Click the icon in the open bit selection of the signal.
The bits are selected or deselected for display.
See also
Displaying the recording (Page 66)
4.7.3
Using the signal group in the signal table
Individual signals can be scaled identically in a signal group, which makes it easier to compare the curve characteristics. Binary signals cannot be grouped. The following operating instructions describe how to work with the signal group.
Note Saving signal groups
The signal groups can be saved individually for each measurement via the "Use current view as standard" function ( button). If the signal groups and the project are not saved then the signal groups created will be lost when the "Diagram" tab is closed.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
75
Operation 4.7 Working area - Diagram tab
Requirements
An installed trace or a measurement is displayed. The button is activated to monitor an installed trace. The "Diagram" tab is open in the working area. There are at least two signals in the signal table that are not of the BOOL type.
Assigning signals to a signal group
To apply a signal group and assign signals to this group, proceed as follows: 1. In the signal table, select the line or cell of the required signal. 2. Click the gray field in the "Signal group" column.
The sequence icon is displayed in the gray field and the name of the signal group is preassigned: 3. Click the gray fields of further signals that are to be assigned to this signal group.
Or: 1. Click in the text field of the "Signal group" column for a signal to be grouped. 2. Enter a name for the group. 3. Enter the same group name in the respective text fields for further signals or select the
group name via the drop-down list.
The Y-scales of the grouped signals are scaled with the values of the signal that was selected first. Changes to a scale value always affect the entire group.
Removing signals from a signal group
To delete the assignment of a signal to a signal group, proceed as follows: 1. Click the sequence icon for the required signal in the "Signal group" column.
Or: 1. Click the text field for the required signal in the "Signal group" column. 2. Press the <Del> key.
Or:
1. Select the respective text field in the "Signal group" column for several signals using the <Shift> and <Ctrl> keys.
2. Press the <Del> key.
The signals are removed from the signal group or the signal group is deleted.
Using the trace and logic analyzer function
76
Function Manual, 12/2019, A5E31277292-AF
Operation 4.7 Working area - Diagram tab
4.7.4
Observation of fast signals
Requirements
There is an online connection to the device. There is a trace in the device.
Procedure
To monitor the progress of a fast signal, proceed as follows: 1. Select a trace in the device. 2. Double-click the selected trace. 3. Click on the button for monitoring. 4. Click on the button to automatically repeat the recording.
Result
The recording is automatically re-activated at the end of each recording. The display in the curve is similar to the display of an oscilloscope.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
77
Operation 4.7 Working area - Diagram tab
4.7.5
Compare records (overlay measurements)
Requirement
An overlay measurement is created or is created implicitly by dragging the measurements to the system folder "Overlay measurements".
See also Apply overlay measurement (Page 62).
Adding measurements for comparison
To compare measurements, insert the measurements to be compared to the overlay measurements. Proceed as follows for this:
1. In the project tree drag one or more measurements from the system folder "Measurements" to the icon for the overlay measurement .
Or:
1. Import saved measurements via the "Import measurement" shortcut menu command.
A copy of the measurements is added to the overlay measurement.
Note Changes to the settings for measurements within the overlay measurement have no impact on the original measurements. The original measurements remain unchanged.
Select signals of the measurements for the signal table
Proceed as follows to select the signals for the signal table in the "Diagram" tab: 1. Double-click on the icon for the overlay measurement in the project tree.
The tabs for the overlay measurement will be displayed in the working area. 2. Click the "Signal selection" tab in the working area.
The signals for all measurements are displayed in the table. 3. Activate or deactivate the signal check box for those signals that should be visible or
should not be visible in the signal table. The activated signals are displayed in the signal table of the "Diagram" tab.
Use of the signal table
Proceed as follows to open and use the signal tables: 1. Click the "Diagram" tab in the working area. 2. Click on the "Signals" tab within the "Diagram" tab. 3. Use the signal tables as described under Use of the signal table (Page 74).
Using the trace and logic analyzer function
78
Function Manual, 12/2019, A5E31277292-AF
Operation 4.7 Working area - Diagram tab
Align measurements
Proceed as follows to align the time axis for the measurements for the comparison: 1. Click on the "Measurements" tab within the "Diagram" tab. 2. Select the alignment for the measurements via the check box. 3. Adjust the alignment and if necessary set an offset for the alignment of the individual
measurements. The measurements are aligned with each other accordingly on the time axis. (The precise alignment of two measurements is described in the next section.)
Use of the curve diagram
Proceed as follows to open and use the curve diagram: 1. Click the "Diagram" tab in the working area. 2. Use the curve diagram as described under Use of the curve diagram (Page 72).
See also
Align measurements precisely (overlay measurements) (Page 80)
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
79
Operation 4.7 Working area - Diagram tab
4.7.6
Align measurements precisely (overlay measurements)
Requirement
An overlay measurement is applied. Measurements for comparison are added to the overlay measurement. Signals of the measurements for the signal table are selected. The "Diagram" tab for the overlay measurement opens in the working area.
Align measurements precisely with position difference X
Proceed as follows to align the time axis for two measurements precisely: 1. Display the vertical measurement cursors via the button.
2. Zoom into the time range, e.g. with the button until you are able to position the first measurement cursor precisely on the desired reference point for the first measurement.
3. Move the first measurement cursor with the mouse to the required position.
4. Search for the reference point for the second measurement, e.g. by switching to "Display all" with the button.
5. Zoom into the time range, e.g. with the button until you are able to position the second measurement cursor precisely on the desired reference point for the second measurement.
6. Move the second measurement cursor with the mouse to the required position. 7. Open the "Trace" task card. 8. In the "Measurement cursor" pane select the position difference value X. 9. Copy the value to the clipboard. 10.Insert the value from the clipboard into the Offset cell of the first or second measurement. Both measurements are precisely aligned with each other at the desired measurement points.
Note When inserting the position difference as the offset make sure that you also adjust the leading character as necessary.
4.7.7
Printing a recording
The curve diagram supports the saving of the display as a graphic and the copying of the display to the clipboard. Also use these functions (Page 24) for printing.
Using the trace and logic analyzer function
80
Function Manual, 12/2019, A5E31277292-AF
Devices
5
5.1
S7-1200/1500 CPUs
5.1.1
Recordable variables
Device-dependent recording of tags
The following list shows the operand areas from which tags can be recorded: Process image input Process image output Bit memory Data blocks I/O devices
Data types
A selection of elementary and composite data types can be recorded. The availability of the individual data types depends on the device used:
For more information, see the help under "Overview of valid data types".
The following table lists the supported data types:
Data types Binary numbers BOOL Bit strings BYTE WORD DWORD LWORD 1) Integers SINT USINT INT UINT DINT UDINT
Note
-
Symbolic name required
-
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
81
Devices 5.1 S7-1200/1500 CPUs
Data types
Note
LINT 1)
Symbolic name required
ULINT 1)
Symbolic name required
Floating-point numbers
REAL
-
LREAL
Symbolic name required
Timers
TIME
-
LTIME 1)
-
Date and time
DATE
-
TOD
-
LTOD 1)
-
LDT 1)
-
1) Not supported by S7-1200.
5.1.2
Lifetime of the installed trace configuration and recorded values
Installed trace configurations are retained after POWER OFF. The recording is activated again after the restart of the CPU. Recorded values are lost during the restart.
Note Downloading a configuration to the device in the "STOP" operating state Note that after downloading a configuration in the "STOP" operating state, you must check the installed traces and, if required, reactivate them or transfer them again.
Note If trigger tags that affect the address are changed, the trace configuration must also be transferred to the device again. This is the case for example, when a data block is shortened or extended or the data type is changed.
Using the trace and logic analyzer function
82
Function Manual, 12/2019, A5E31277292-AF
5.1.3
Devices 5.1 S7-1200/1500 CPUs
Recording levels
All runtime levels can be used for the recording cycle. The cyclic execution levels are offered for selection via the button . In non-periodic recording levels, the recording time is undefined.
Note The measured values are recorded at the end of the OB after the processing of the user program.
Note Trace sample event with Motion Control The time reference for the measured values is determined differently if a Motion Control organization block is configured as trace sample event and the device is time synchronized via IRT. This behavior is described in Time synchronization with Motion Control (Page 84).
See also
Time synchronization of SIMATIC S7 CPUs (https://support.industry.siemens.com/cs/ww/en/view/82203451)
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
83
Devices 5.1 S7-1200/1500 CPUs
5.1.4
Time synchronization with Motion Control
With Motion Control, a time reference to the cycle limits of the application cycle is required for the analysis. For this reason, the time reference for the measured values in the configuration of Motion Control organization blocks is determined differently than trace sample event. The synchronized (absolute) time from the start of the current application cycle is always stored as the time for the measured value. The tags of the technology objects are always consistently related to cycle limits.
The described behavior applies to the following Motion Control organization blocks:
MC-Servo [OB91]
MC-PreServo [OB67]
MC-PostServo [OB95]
MC-Interpolator [OB92]
MC PreInterpolator [OB68]
The devices must communicate via IRT.
The following figure shows the stored times of the measured values with an application cycle of 3 and MC interpolator as configured trace sample event:
T0 to T6 T0 T3 T6
IRT cycle Start of application cycle n Start of application cycle n+1 Start of application cycle n+2
Note OB61-OB63 as trace sample event With these OBs as configured trace sample event, the system time is used independently of the communication. The recording behavior is the same as for devices without IRT communication. To facilitate the evaluation with absolute time, synchronize the clock times of the devices.
Note Measured values with identical timers An overflow of the recording level (such as MC-Interpolator OB in the example above) can result in measured values with identical time stamp.
Using the trace and logic analyzer function
84
Function Manual, 12/2019, A5E31277292-AF
5.1.5
5.1.6 5.1.7
Devices 5.1 S7-1200/1500 CPUs
Quantity structure
The following table shows the maximum quantity structure that you can record using the trace and logic analyzer function:
Device
S7-1200 (as of firmware version V4.0) S7-1500, ET 200SP, CPU 1513pro-2 PN, CPU 1516pro-2 PN, S7-1500 Software Controller, S7-1500 Drive Controller, ET 200SP Open Controller
Maximum number of installed traces
2
Maximum number of signals per trace configuration
16
At least 4
16
(depending on the CPU type)
The same quantity structures apply for the project trace as for the devices.
Example CPU 1516-3 PN/DP
Maximum of 7281 samples for 16 signals from PLC tags of the DWORD data type
Maximum of 21844 samples for 16 signals from PLC tags of the BOOL data type
Maximum of 58250 samples for 1 signal from a PLC tag of the BOOL data type
Further information can also be found in the form of FAQs under the ID 102781176 (http://support.automation.siemens.com/WW/view/en/102781176).
CPU load through trace recording
An activated trace recording increases the runtime of the respective recording level that can result in an execution level overflow with high utilization of the CPU. Remedy for execution level overflow: Change the trace configuration
1) Configure fewer tags and signals. 2) Then increase the number of tags and signals up to the maximum number of signals step-by-step without an execution level overflow. Select a slower recording level
Project trace
The following devices support the project trace as of firmware version V2.8: SIMATIC S7-1500, ET 200SP, CPU 1513pro-2 PN and CPU 1516pro-2 PN CPUs SIMATIC S7-1500 Software Controller SIMATIC S7-1500 drive controller ET 200SP Open Controller
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
85
Devices 5.1 S7-1200/1500 CPUs
5.1.8
Software user interface of the configuration
5.1.8.1
Layout of the trace user interface
The settings options differ depending on the configured device.
Display in the "Configuration" tab of the working area
The following figure shows an example of the display:
The area navigation provides the following entries for selection: Configuration
Signals (Page 88) Recording conditions (Page 89)
Displaying and changing properties of a trace configuration
A trace is selected in the project tree and displayed in the "Configuration" tab. You change the trace configuration offline. Online, the trace configuration is displayed readyonly.
Using the trace and logic analyzer function
86
Function Manual, 12/2019, A5E31277292-AF
Devices 5.1 S7-1200/1500 CPUs
5.1.8.2
Layout of the project trace user interface
The device-dependent trace configuration is displayed in the Inspector window when a device is selected in the configuration tab of the "Participating devices" table.
Configuration in the "Properties" tab of the Inspector window
The following figure shows an example of the display for a selected device:
The area navigation provides the following entries for selection: Configuration
Signals (Page 88) Recording conditions (Page 89)
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
87
Devices 5.1 S7-1200/1500 CPUs
5.1.8.3
User interface - Signals
The "Signals" area shows a table in which the signals to be recorded are configured for the selected trace configuration.
Signals can also be inserted in the table using drag-and-drop. The signals can be sorted using drag-and-drop.
Setting options and displays in "Signals"
The following figure shows an example of the display:
The following table shows the settings and displays:
Column
Icon
-
"Name"
-
-
"Data type"
-
"Address"
-
"Comment"
-
Description Display of the signal icon for a selected signal.
Input field for the name or address of the signal. Examples: · "Data_block_1".pressure · M0.0 · DB1.DBW3
Button to open the signal selection table. The button is displayed when the table line is selected. Clicking the icon opens a table which offers possible signals for selection. The selected signal is displayed in the input field. Text field with display of the data type for the signal. Input field for the address of the signal. The field remains empty with optimized / type correct tags. Input field for a comment on the signal.
Shortcut menu commands
The following table shows the shortcut menu commands of the table:
Shortcut menu command "Cut" "Copy" "Paste"
"Delete"
"Rename"
Description
Cannot be selected. Copies the contents of the selected lines to the clipboard. Pastes the contents of the clipboard to the selected line. The existing contents are overwritten. Deletes the selected lines from the table or deletes the content of the selected cell. Switches the selected cell to the editing mode.
Using the trace and logic analyzer function
88
Function Manual, 12/2019, A5E31277292-AF
Devices 5.1 S7-1200/1500 CPUs
5.1.8.4
Recording conditions
User interface - Recording conditions
The "Recording conditions" area shows the trigger condition for the selected trace configuration and in which cycle, how fast and how long the recording is made.
Sampling
The following figure shows an example of the settings for the sampling:
The following table explains the settings and displays:
Setting/display
"Recording time" Recording level entry field
Address of the OB text field "Record every" Reduction entry field Reduction ratio dropdown list
Description
Selection of the recording time. See Recording levels (Page 83) Detailed information on the selected recording time.
Input of the reduction in relation to the reduction ratio and the unit. Selection of the reduction ratio unit The following settings are possible:
· "Cycle" · "s" for seconds
The setting depends on the recording level selected in "Trace sample event".
Sampling time text field Display of the sampling time, taking into account the configured reduction and the selected unit (only for constant bus cycle time OBs).
"Max. recording duration"
Max. recording duration Displays the calculated maximum recording duration.
text field
The "Max. recording duration" depends on how many signals are rec-
orded and the data type of these signals.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
89
Devices 5.1 S7-1200/1500 CPUs
Setting/display "Use max. recording duration"
"Recording duration" Recording duration entry field Unit drop-down list
Calculated recording duration text field
Description Set the recording duration to the maximum value. When the checkbox is activated, the recording duration is set to the maximum possible recording duration. The set reduction in the "Record every" input field is taken into account. If more signals are added, the recording duration will be adjusted. Further information can also be found in the form of FAQs under the ID 102781176 (http://support.automation.siemens.com/WW/view/en/102781176).
Input of the recording duration in relation to the selected unit. If the "Recording duration = max. recording duration" checkbox is activated, entries are overwritten by the value displayed in "Max. recording duration". Selection of the unit for the recording duration. The following settings are possible:
· "Samples"
The maximum number of samples recorded is the number for which parameters are assigned under recording duration. · "s" for seconds
The setting depends on the recording level selected in "Trace sample event". Display of the calculated recording duration (only for constant bus cycle time OBs)
Using the trace and logic analyzer function
90
Function Manual, 12/2019, A5E31277292-AF
Trigger
Devices 5.1 S7-1200/1500 CPUs
The following figure shows an example of the settings for the trigger:
The following table explains the settings and displays:
Setting/display "Trigger mode"
Trigger mode dropdown list
Text field "Trigger tag"
Trigger tag entry field
Description Selection of the trigger mode. The following settings are possible:
· "Record immediately"
Recording is started immediately after the activation in the device. The global trigger is triggered immediately, regardless of the operating state of the device. · "Trigger on tag"
The recording is made as soon as the installed trace is activated and the configured trigger condition is fulfilled. · "Monitor without trigger" (traces)
The recording takes place as soon as the installed trace is activated and is not automatically terminated. After termination by the user, there are a maximum of as many measured values in the device as were configured under recording duration. This trigger mode is particularly suitable for monitoring slow signals and is only available for traces. · "Trigger from another device" (project trace)
The global trigger for the start of the trace is triggered by another device. This trigger mode is only available for a project trace. The "Trigger tag" specifies a signal that triggers the recording. Enter a signal. Examples:
· "DataBlock_1".Temperature
· M0.0
· DB1.DBW3 See also Data types for trigger tags (Page 95).
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
91
Devices 5.1 S7-1200/1500 CPUs
Setting/display
Trigger tag address text field "Event" Trigger events dropdown list Text field "Value"
"Pre-trigger"
Duration entry field Unit drop-down list
Resulting pre-trigger duration text field
Description
Opens the signal selection table. Clicking the symbol opens a table offering possible signals for selection as trigger tag. The selected signal is displayed in the input field. Display of the trigger tag address. With purely symbolic signals the field remains empty. The events that can be used on this trigger tag are offered for selection according to the data type of the trigger tag. The event can be configured provided a valid signal is entered as trigger tag. Event selection for which the trigger tag is checked. The entries in the drop-down list are described in Section Trigger event (Page 95). Configuration of the selected event. The configuration options differ depending on the format of the trigger tag and the selected event. SeeTrigger event (Page 95). "Pre-trigger" defines the number of samples that are already recorded before the actual trigger condition is fulfilled. If the trigger event occurs immediately or shortly after the recording has been activated, this may result in a shorter recording duration. Examples of "Recording duration (a)" = 20 samples and "Pre-trigger (b)" = 5 samples:
· Case 1: Trigger event occurs 50 samples after activation of the recording
Actual recording duration (a) = 20 samples
· Case 2: Trigger event occurs 2 samples after activation of the recording
Actual recording duration (a) = 17 samples Input of the duration in relation to the selection in the drop-down list. Selection of the unit The following settings are possible:
· "Samples"
· "s" for seconds
The setting depends on the recording level selected in "Trace sample event". Display of the calculated "Pre-trigger" duration. The duration is displayed when recording in constant bus cycle time OBs.
Using the trace and logic analyzer function
92
Function Manual, 12/2019, A5E31277292-AF
Devices 5.1 S7-1200/1500 CPUs
Installed measurements (memory card)
The following figure shows an example of the settings for the saving of installed measurements:
Saving measurements on device (memory card) is not possible with project traces. Note Available memory in the device (memory card) The memory in the device (memory card) is partly used by system-relevant functions or reserved for that purpose. Thus it is not possible for the entire memory to be used for saving measurements. For further information please refer to the Function Manual Structure and Use of the CPU Memory (https://support.industry.siemens.com/cs/us/en/view/59193101).
Note Memory requirements upon restart Following a device reboot the maximum number of measurements saved in the device is the number configured under "Number of measurements". With repeated restarts note that the measurements already saved are not overwritten and the "Number of measurements" configured in the device is saved once again.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
93
Devices 5.1 S7-1200/1500 CPUs
The following table explains the settings and displays:
Setting/display
Description
"Saving of installed measurements (memory card)"
Repeat measurement automatically and store in the device retentively This setting is only possible with "Trigger on tag" trigger mode. The measurements are stored on the "primary" memory card.
For traces which have been saved in the device (memory card), the function for automatically repeating the recording is not available.
Note
Only completed measurements are stored in the device. Any recording deactivated by the user is not saved on the device.
This function is available with the following firmware versions:
· S7-1200 as of V4.2
· S7-1500 as of V2.0
The function is not supported by CPU S7-1500 R/H.
"Number of measurements" Input of the number of measurements to be saved on the card.
"Memory requirements"
Display of the expected memory requirement for all measurements
Displaying memory usage Shows the tab with the memory usage
"Behavior if number reached"
Selection for the behavior once "Number of measurements" is reached The following settings are possible: · "Deactivating a recording"
The measurements are repeated until the "Number of measurements on the card" is reached. · "Overwrite oldest recording"
The measurements are saved in a ring buffer and repeated until the user deactivates the recording. Once the number of measurements exceeds the "Number of measurements on the card" the oldest measurement on the card is overwritten in each case.
Note
Note that write processes that are repeated frequently may damage the card.
Using the trace and logic analyzer function
94
Function Manual, 12/2019, A5E31277292-AF
Devices 5.1 S7-1200/1500 CPUs
Data types for trigger tags
The following table shows the supported data types for the trigger tag:
Memory requirement and format of the number 1 byte 8-bit integers 16-bit integers 32-bit integers 64-bit integers 1) 32-bit floating-point numbers 64-bit floating-point numbers
1) Not supported by S7-1200.
Data type BOOL SINT, USINT, BYTE INT, UINT, WORD, DATE DINT, UDINT, DWORD, TIME, TOD LINT, ULINT, LWORD, LTIME, LTOD, LDT REAL LREAL
Trigger event
Depending on the selection in the drop-down list, the further settings differ for the "event". The individual events are described below.
"=TRUE"
Supported data types: Bit (Page 95) The recording starts when the state of the trigger is TRUE.
"=FALSE"
Supported data types: Bit (Page 95) The recording starts when the state of the trigger is FALSE.
"Rising edge"
Supported data types: Bit (Page 95)
The recording is started when the trigger state changes from FALSE to TRUE. After activation of the installed trace, at least two cycles are required to identify the edge.
"Rising signal"
Supported data types: Integers and floating-point numbers (Page 95) (no times, date and time of day)
The recording is started when the rising value of the trigger reaches or exceeds the value configured for this event. After activation of the installed trace, at least two cycles are required to identify the edge.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
95
Devices 5.1 S7-1200/1500 CPUs
"Falling edge"
Supported data types: Bit (Page 95)
The recording is started when the trigger state changes from TRUE to FALSE. After activation of the installed trace, at least two cycles are required to identify the edge.
"Falling signal"
Supported data types: Integers and floating-point numbers (Page 95) (no times, date and time of day)
The recording is started when the falling value of the trigger reaches or falls below the value configured for this event. After activation of the installed trace, at least two cycles are required to identify the edge.
"In the range"
Supported data types: Integers and floating-point numbers (Page 95)
The recording starts as soon as the value of the trigger is in the value range configured for this event.
"Outside of the range"
Supported data types: Integers and floating-point numbers (Page 95)
The recording starts as soon as the value of the trigger is outside the value range configured for this event.
"Value change"
All data types are supported.
The value is checked for change when the recording is activated. The recording starts when the value of the trigger changes.
This trigger event is supported as of V13 SP1. Older versions of the TIA Portal cannot interpret the trigger. Note that no explicit information is output in this case. This can occur, for example, when the trace is transferred from a CPU to a TIA Portal less than V13 SP1 or a trace configuration is imported.
"= value"
Supported data types: Integers (Page 95)
The recording starts when the value of the trigger is equal to the value configured for this event.
"<> value"
Supported data types: Integers (Page 95)
The recording starts when the value of the trigger is not equal to the value configured for this event.
Using the trace and logic analyzer function
96
Function Manual, 12/2019, A5E31277292-AF
Devices 5.1 S7-1200/1500 CPUs
"= bit pattern"
Supported data types: Integers and floating-point numbers (Page 95) (no times, date and time of day)
The recording starts when the value of the trigger matches the bit pattern configured for this event.
The following figure shows the setting options for a "bit pattern":
It is possible to switch between the icons by clicking the respective button. The following table shows the icons:
Icon
Description
Bit is not evaluated
Bit is checked for FALSE
Bit is checked for TRUE
"<> bit pattern"
Supported data types: Integers and floating-point numbers (Page 95) (no times, date and time of day)
The recording starts when the value of the trigger does not match the bit pattern configured for this event.
See also
Configuring the trigger conditions (Page 100) Recordable variables (Page 81)
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
97
Devices 5.1 S7-1200/1500 CPUs
5.1.9
Configuration
5.1.9.1
Trace configuration - overview
The configuration of the recording conditions and the signals to be recorded is devicespecific.
Requirement
A trace configuration has been created and opened in the working area of the "Configuration" tab.
Procedure
The following table shows the procedure for configuring.
Step 1 2 3 4
5
Description
Documentation of the configuration (optional) Enter a comment and an author for the configuration in the Inspector window. Selecting signals (Page 99) Select the signals to be recorded in the "Signals" area. Configuring the recording cycle and duration (Page 99) Select a recording time, a cycle and the duration in the "Recording conditions" area. Configuring the trigger conditions (Page 100) In the "Recording conditions" area, select whether the recording is to be performed immediately or depending on a trigger condition. Configure installed measurements (memory card) (Page 101) In the "Recording conditions" area, select whether the recording is to be saved on the device (memory card).
Using the trace and logic analyzer function
98
Function Manual, 12/2019, A5E31277292-AF
Devices 5.1 S7-1200/1500 CPUs
5.1.9.2
Selecting signals
Requirement
A trace configuration has been created and opened. The "Signals" area is open in the "Configuration" tab.
Procedure
To configure the signals to be recorded, proceed as follows: 1. Select a signal. The following options are available:
In the "Name" column, click the button and select a tag. Enter the symbolic tag name in the cell in the "Name" column. Enter the address directly in the "Address" column. Drag a signal to the table using drag-and-drop. 2. Click in the "Comment" column and enter a comment for the signal. 3. Repeat the procedure from step 1 until all the signals to be recorded have been entered in the table.
5.1.9.3
Configuring the recording cycle and duration
Requirement
A trace configuration has been created and opened. The "Recording conditions" area is open in the "Configuration" tab.
Procedure
To configure the cycle and the duration of a recording, proceed as follows: 1. Click the button for the recording time. 2. Select an OB for the recording time (Page 83). 3. Select a unit for the reduction factor in the drop-down list for "Record every". 4. Enter the factor for the reduction in the input field for "Record every". 5. Select a unit in the drop-down list for "Recording duration". 6. Specify the recording duration.
The following options are available: Enter a value for the duration in the input field for "Recording duration". Activate the "Use max. recording duration" checkbox.
Using the trace and logic analyzer function
Function Manual, 12/2019, A5E31277292-AF
99
Devices 5.1 S7-1200/1500 CPUs
5.1.9.4
Configuring the trigger conditions
Requirement
A trace configuration has been created and opened. The "Recording conditions" area is open in the "Configuration" tab.
"Record immediately" trigger condition
To start the recording immediately, proceed as follows: 1. Select the "Record immediately" entry in the drop-down list for "Trigger mode".
The input fields for the trigger tag are hidden.
"Trigger on tag" trigger condition
To start the recording depending on a condition, proceed as follows: 1. Select the "Trigger on tag" entry in the drop-down list for "Trigger mode". 2. Select a trigger tag. The following options are available:
Click the button for the trigger tag and select a tag. Enter the address or the symbolic name of the tag directly in the input field for the
trigger tag. A drop-down list with events and input fields is displayed. The display depends on the data type of the tag. 3. Configure the event. 4. Select a unit for the pre-trigger in the drop-down list for "Pre-trigger". 5. In order to record a period before the trigger event, enter a value greater than 0 in the input field for the pre-trigger.
Note Cyclic test of the trigger condition The trigger condition is checked in every cycle irrespective of the setting in "Record every". To reliably identify the trigger, the trigger signal must be present for at least one full cycle.
100
Using the trace and logic analyzer function Function Manual, 12/2019, A5E31277292-AF
Devices 5.1 S7-1200/1500 CPUs
5.1.9.5
Configure installed measurements (memory card)
Requirement
A trace configuration has been created and opened. The "Recording conditions" area is open in the "Configuration" tab. The "Trigger on tag" trigger mode is set. The firmware on the device supports the recording of an installed measurement.
Procedure
Proceed as follows to save the installed measurement (on the memory card): 1. Select the "Save measurements on device (memory card)" check box. 2. Enter the number of measurements that ought to be saved on the card in the "Number of
measurements" entry field. 3. Set the desired behavior once the "Number of measurements" has been reached in the
"Behavior if number reached" drop-down list.
Note No evaluation of the trigger during saving No new trigger can be evaluated as long as the recording is saved.
Using the trace and logic analyzer function Function Manual, 12/2019, A5E31277292-AF
101
Glossary
Curve diagram
Displays the selected signals of a recording.
Global trigger
If a project trace is triggered by a participating device to start recording synchronously in all participating devices.
Installed trace
Consists of a trace configuration and optionally a recording.
Measurement
Consists of a trace configuration with an associated recording.
Overlay measurement
Permits a comparison and analysis of signals from different measurements.
Pre-trigger
Defines the interval in which the signals are already recorded before the actual trigger condition is fulfilled.
Project trace
Contains all the information to record signals from multiple devices with a global trigger.
Recording
Is performed in the device. There is only one recording for each installed trace configuration.
Recording condition
Sampling and trigger for a trace configuration.
Recording duration
Factor in number of samples. The factor of 100 means, for example, that 100 samples are recorded.
102
Using the trace and logic analyzer function Function Manual, 12/2019, A5E31277292-AF
Glossary
Reduction
Factor in number of cycles. A factor of 2 means, for example, that a recording is made every second cycle.
Sampling
Setting, in which cycle, how fast and how long the recording is to be made.
Signal table
Lists the signals of the selected measurement and provides setting options for some properties.
Snapshot
Contains the settings for the view for a measurement.
Trace configuration
Contains all the information required to record signals in a device.
Trigger
Specifies the trigger mode and the condition for the "Trigger on tag" mode.
Trigger mode
Specifies whether the recording should be started immediately or based on a trigger tag.
Trigger tag
Signal to trigger the recording.
Trigger time
The meaning of the measurement trigger time depends on the device.
e.g. SIMATIC S7-1200/1500 CPUs: Specifies the absolute time of the control system at the start of recording.
Using the trace and logic analyzer function Function Manual, 12/2019, A5E31277292-AF
103
Index
C
CPU load through trace, 85
L
Logic analyzer function, 9
M
Measurements Project tree, 19
P
Project trace Project tree, 46 Quick start, 57 Recording conditions, 89 Supported devices, 85 User interface, 44, 50, 87
T
Trace, 9, 9, (Trigger time) Align overlay measurements, 80 Analyze an ongoing recording, 67 Apply overlay measurement, 62 Bit track, 24 Configure project navigator into groups, 63 CPU load, 85 Creating a trace configuration, 60 Curve diagram, 24, 72 Data storage, 13 Display options, 30, 54 Displaying a diagram, 61 Displaying a trace configuration, 61 Inspector window, 40 Installed measurements (memory card), 12, 20 Installed trace, 11 Keyboard operation, 26 Lifetime of the values, 82 Mathematical functions, 34 Measurement, 11, 13, 68, 69 Measurement cursor, 72
Measurement cursor pane, 41 Monitor fast signals, 77 Mouse wheel, 26 Overlay measurement, 12, 22, 37, 78 Pre-trigger, 92 Print, 80 Project tree, 18 Quantity structure, 85 Quick start, 52 Recordable variables, 81 Recording, 11, 65, 66 Recording conditions, 89, 95, 95 Recording cycle, 53, 99 Recording duration, 99 Recording levels, 83 Reduction, 89 Sampling, 53 Save installed measurements, 94, 101 Saving the trace configuration, 72 Signal group, 76 Signal table, 30, 75 Signals, 88, 99 Snapshots pane, 43 Status, 18 Supported devices, 9 Time stamp, 40 Time synchronization, 84 Trace configuration, 11, 13, 64, 70, 71, 72, 98 Trigger, 100 Trigger mode, 91 Trigger tag, 91, 95 User interface, 16, 40, 86 Trace function, 9 Trace S7-1200/1500, 81
104
Using the trace and logic analyzer function Function Manual, 12/2019, A5E31277292-AF
Communication
SIMATIC
S7-1500, ET 200MP, ET 200SP, ET 200AL, ET 200pro Communication
Function Manual
Preface
Function manuals Documentation Guide
1
Product overview
2
Communications services
3
PG communication
4
HMI communication
5
Open User Communication
6
S7 communication
7
Point-to-point link
8
OPC UA communication
9
Routing
10
Connection resources
11
Diagnostics and fault correction
12
Communication with the
redundant system S7-
13
1500R/H
Industrial Ethernet Security with CP 1543-1
14
11/2019
A5E03735815-AH
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03735815-AH 10/2019 Subject to change
Copyright © Siemens AG 2013 - 2019. All rights reserved
Preface
Purpose of the documentation This function manual provides you with an overview of the communication options, the CPUs, communication modules and processors and PC systems of the systems SIMATIC S7-1500, ET 200MP, ET 200SP, ET 200AL, ET 200pro and SIMATIC Drive Controller. This function manual describes the connection-oriented, asynchronous communication. The documentation covers the following: Overview of the communication services Properties of the communication services Overview of the user activities for setting up the communication services
Basic knowledge required The following knowledge is required in order to understand the Function manual: General knowledge of automation technology Knowledge of the industrial automation system SIMATIC Knowledge about how to use STEP 7 (TIA Portal)
Scope of the documentation This documentation is the basic documentation for all products of the SIMATIC S7-1500, ET 200MP, ET 200SP, ET 200AL and ET 200pro systems. The product documentation is based on this documentation.
Communication
Function Manual, 11/2019, A5E03735815-AH
3
Preface
What's new in the Communication Function Manual, Edition 11/2019 as compared to Edition 10/2018?
What's new? IP forwarding
OPC UA server expansion
What are the customer benefits?
Where can I find the information?
Simple access from the control level to the field IP forwarding (Page 294) level for configuration and parameter assignment of devices, e.g. via PDM or Web browser.
For S7-1500 CPUs as of firmware V2.8 and TIA Portal version 16, with a corresponding Runtime license, you can benefit from the following expansions of the integrated OPC UA server:
Section OPC UA communication (Page 126)
· Improved diagnostics: The OPC UA user receives information on the status of the OPC UA server via messages in the diagnostic buffer, an OPC UA category in the Online & Diagnostics area of TIA Portal as well as an improved connection resources display.
· Download behavior: In RUN mode, the OPC UA server only performs a restart during download from the TIA Portal when the newly downloaded data has an effect on the data management of the OPC UA server.
· Server interface modeling: It is now possible in the TIA Portal to model server interfaces or import OPC UA Companion Specifications and map them to the PLC data management.
What's new in the Communication Function Manual, Edition 10/2018 as compared to Edition 12/2017?
What's new?
Description of communication with the redundant system S7-1500R/H
Scope of the function manual expanded to include the redundant system S7-1500R/H
What are the customer benefits?
You receive information on the particularities of communication with the redundant system S71500R/H
Functions with which you are familiar from the SIMATIC S7-1500 automation system are implemented for the redundant system S7-1500R/H.
Where can I find information?
Section Communication with the redundant system S7-1500R/H (Page 324)
Redundant System S7-1500R/H System Manual (https://support.industry.siemens.co m/cs/ww/en/view/109754833)
Communication
4
Function Manual, 11/2019, A5E03735815-AH
Preface
What's new in the Communication Function Manual, Edition 12/2017 compared to Edition 09/2016
What's new? OPC UA Companion Specification
Setting up a secure connection to a mail server over the CPU interface Secure communication over Modbus TCP
What are the customer benefits?
Through OPC UA Companion Specification, methods can be specified in a uniform and manufacturer-neutral way. Using these specified methods, you can easily integrate devices from various manufacturers into the plant and the production processes.
You can set up a secure connection to a mail server without additional hardware.
Where can I find the information? Section OPC UA server interface configuration (Page 199)
Section Secure OUC via e-mail (Page 107)
You can establish secure TCP connections between a Modbus TCP client and a Modbus TCP server.
Section Secure OUC with Modbus TCP (Page 106)
What's new in the Communication Function Manual, Edition 09/2016 compared to Edition 12/2014
What's new? OPC UA server
Secure Open User Communication Certificate handling in STEP 7 Deactivating SNMP for the CPU
What are the customer benefits?
OPC UA is a uniform standard for data communication and is independent of any particular operating system platforms. OPC UA uses integrated safety mechanisms on various automation systems, for example with data exchange, at application level, for the legitimation of the user. The OPC UA server provides a large amount of data:
· Values of PLC tags that clients can access
· Data types of these PLC tags
· Information about the OPC UA server itself and the CPU
In this way, clients can gain an overview of the tag management and can read and write values. Secure data exchange with other devices.
You can manage certificates for the following applications in STEP 7:
· OPC UA server
· Secure Open User Communication
· Web server of the CPU
You can deactivate SNMP for the CPU. This can make sense under certain conditions, for example if the security guidelines in your network do not permit SNMP.
Where can I find the information? Section OPC UA communication (Page 126)
Section Secure Open User Communication (Page 92) Section Managing certificates with STEP 7 (Page 43)
Section Disabling SNMP (Page 57)
Communication
Function Manual, 11/2019, A5E03735815-AH
5
Preface
Conventions
STEP 7: We refer to "STEP 7" in this documentation as a synonym for the configuration and programming software "STEP 7 as of V12 (TIA Portal)".
"S7-1500 CPUs" also refers to the CPU variants S7 1500F, S7 1500T, S7 1500TF, S7 1500C, S7-1500R/H, S7 1500pro, ET200S, S7 1500 Software Controller as well as SIMATIC Drive Controller.
This documentation contains pictures of the devices described. The figures may differ slightly from the device supplied.
You should also pay particular attention to notes such as the one shown below:
Note
A note contains important information on the product, on handling of the product and on the section of the documentation to which you should pay particular attention.
Security information
Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Communication
6
Function Manual, 11/2019, A5E03735815-AH
Preface
Siemens Industry Online Support
You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (http://www.siemens.com/automation/service&support).
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com).
Communication
Function Manual, 11/2019, A5E03735815-AH
7
Table of contents
Preface ...................................................................................................................................................... 3
1 Function manuals Documentation Guide ................................................................................................. 12
2 Product overview ..................................................................................................................................... 14
3 Communications services ........................................................................................................................ 19
3.1
Overview of communication options ...................................................................................... 19
3.2
Communications protocols and port numbers used for Ethernet communication ................. 22
3.3
Overview of connection resources......................................................................................... 27
3.4
Setting up a connection ......................................................................................................... 27
3.5
Data consistency.................................................................................................................... 31
3.6 3.6.1 3.6.2 3.6.3 3.6.4 3.6.5 3.6.6
Secure Communication.......................................................................................................... 34 Basics of Secure Communication .......................................................................................... 34 Confidentiality through encryption.......................................................................................... 36 Authenticity and integrity through signatures......................................................................... 39 Managing certificates with STEP 7 ........................................................................................ 43 Examples for the management of certificates........................................................................ 47 Example: HTTP over TLS ...................................................................................................... 53
3.7 3.7.1 3.7.2
SNMP ..................................................................................................................................... 57 Disabling SNMP ..................................................................................................................... 57 Example: Disabling SNMP for a CPU 1516-3 PN/DP............................................................ 58
4 PG communication .................................................................................................................................. 60
5 HMI communication ................................................................................................................................. 63
6 Open User Communication...................................................................................................................... 65
6.1
Overview of Open User Communication ............................................................................... 65
6.2
Protocols for Open User Communication .............................................................................. 66
6.3
Instructions for Open User Communication ........................................................................... 68
6.4
Open User Communication with addressing via domain names ........................................... 73
6.5
Setting up Open User Communication via TCP, ISO-on-TCP, UDP and ISO ...................... 75
6.6
Setting up communication over FDL...................................................................................... 82
6.7
Setting up communication with Modbus TCP ........................................................................ 84
6.8
Setting up communication via e-mail ..................................................................................... 87
6.9
Setting up communication via FTP ........................................................................................ 88
6.10
Establishment and termination of communications relations................................................. 91
Communication
8
Function Manual, 11/2019, A5E03735815-AH
Table of contents
6.11 6.11.1 6.11.2 6.11.3 6.11.4 6.11.5 6.11.6
Secure Open User Communication ........................................................................................92 Secure OUC of an S7-1500 CPU as TLS client to an external PLC (TLS server) .................92 Secure OUC of an S7-1500 CPU as TLS server to an external PLC (TLS client) .................95 Secure OUC between two S7-1500 CPUs .............................................................................97 Secure OUC via CP interface ...............................................................................................101 Secure OUC with Modbus TCP ............................................................................................106 Secure OUC via e-mail .........................................................................................................107
7 S7 communication ................................................................................................................................. 112
8 Point-to-point link ................................................................................................................................... 121
9 OPC UA communication ........................................................................................................................ 126
9.1 9.1.1 9.1.2 9.1.3 9.1.4 9.1.5 9.1.6 9.1.7
What you need to know about OPC UA ...............................................................................126 OPC UA and Industrie 4.0 ....................................................................................................126 General features of OPC UA ................................................................................................126 OPC UA for S7-1200/S7-1500 CPUs ...................................................................................130 Access to OPC UA applications ...........................................................................................131 Addressing nodes .................................................................................................................135 What you need to know about OPC UA clients ....................................................................139 Mapping of data types ..........................................................................................................142
9.2 9.2.1 9.2.2 9.2.3 9.2.4 9.2.5 9.2.6
Security at OPC UA ..............................................................................................................146 Security settings....................................................................................................................146 Certificates pursuant to ITU X.509........................................................................................147 Certificates with OPC UA......................................................................................................151 Creating self-signed certificates............................................................................................152 Generating PKI key pairs and certificates yourself...............................................................153 Secure transfer of messages................................................................................................156
9.3 9.3.1 9.3.1.1 9.3.1.2 9.3.1.3 9.3.2 9.3.2.1 9.3.2.2 9.3.2.3 9.3.2.4 9.3.2.5 9.3.2.6 9.3.2.7 9.3.3 9.3.3.1 9.3.3.2 9.3.3.3 9.3.3.4 9.3.3.5 9.3.3.6 9.3.3.7 9.3.3.8 9.3.3.9 9.3.3.10
Using the S7-1500 as an OPC UA server ............................................................................159 Interesting information about the OPC UA server of the S7-1500 CPUs .............................159 The OPC UA server of the S7-1500 CPUs...........................................................................159 End points of the OPC UA server .........................................................................................161 Runtime behavior of the OPC UA server..............................................................................163 Configuring access to PLC tags ...........................................................................................165 Managing write and read rights ............................................................................................165 Managing write and read rights for a complete DB ..............................................................167 Coordinating write and read rights for CPU tags ..................................................................169 Consistency of CPU tags......................................................................................................171 Accessing OPC UA server data............................................................................................173 MinimumSamplingInterval attribute ......................................................................................174 Export OPC UA XML file.......................................................................................................174 Configuring the OPC UA server............................................................................................175 Enabling the OPC UA server ................................................................................................175 Access to the OPC UA server ..............................................................................................177 General settings of the OPC UA server................................................................................179 Settings of the server for subscriptions.................................................................................181 Handling client and server certificates ..................................................................................183 Generating server certificates with STEP 7 ..........................................................................190 User authentication ...............................................................................................................193 Users and roles with OPC UA function rights.......................................................................194 Diagnostic settings of the server...........................................................................................197 License for OPC UA..............................................................................................................198
Communication
Function Manual, 11/2019, A5E03735815-AH
9
Table of contents
9.3.4 9.3.4.1 9.3.4.2 9.3.4.3 9.3.4.4 9.3.4.5 9.3.4.6 9.3.4.7 9.3.4.8 9.3.5 9.3.5.1 9.3.5.2 9.3.6 9.3.6.1 9.3.6.2 9.3.6.3 9.3.6.4 9.3.6.5 9.3.6.6 9.3.6.7
OPC UA server interface configuration................................................................................ 199 What is a server interface? .................................................................................................. 199 Creating a user-defined server interface ............................................................................. 201 Using OPC UA companion specifications............................................................................ 206 Rules for OPC UA XML files ................................................................................................ 213 Data types for companion specifications ............................................................................. 214 Creating a server interface for companion specification...................................................... 218 Creating a server interface for reference namespace ......................................................... 223 Notes on configuration limits when using server interfaces................................................. 226 Providing methods on the OPC UA server .......................................................................... 227 Useful information about server methods ............................................................................ 227 Boundary conditions for using server methods.................................................................... 231 Using diagnostics options .................................................................................................... 233 Diagnostics of the OPC UA server....................................................................................... 233 Server state transition diagnostics ....................................................................................... 235 Session state transition diagnostics..................................................................................... 236 Check for security events..................................................................................................... 237 Request of a remote client failed ......................................................................................... 238 Subscription diagnostics ...................................................................................................... 240 Summarizing diagnostics ..................................................................................................... 243
9.4 9.4.1 9.4.2 9.4.3 9.4.4 9.4.5 9.4.6 9.4.7 9.4.8 9.4.9 9.4.9.1 9.4.9.2 9.4.9.3 9.4.9.4
Using the S7-1500 CPU as an OPC UA client .................................................................... 245 Overview and requirements ................................................................................................. 245 Useful information about the client instructions ................................................................... 246 Number of client instructions that can be used simultaneously ........................................... 248 Example configuration for OPC UA ..................................................................................... 249 Creating client interfaces ..................................................................................................... 251 Determine server interface online ........................................................................................ 260 Using multilingual texts ........................................................................................................ 264 Rules for the access to structures........................................................................................ 266 Using connection parameter assignment ............................................................................ 268 Creating and configuring connections ................................................................................. 268 Handling of the client certificates of the S7-1500 CPU........................................................ 272 User authentication .............................................................................................................. 275 Using a configured connection............................................................................................. 276
9.5 9.5.1 9.5.2 9.5.3
Tips and recommendations.................................................................................................. 284 Rules for subscriptions......................................................................................................... 284 Rules for the user program .................................................................................................. 285 Master copies for OPC UA communication ......................................................................... 286
10 Routing .................................................................................................................................................. 288
10.1
Overview of the routing mechanisms of S7-1500 CPUs ..................................................... 288
10.2
S7 routing............................................................................................................................. 289
10.3
IP forwarding ........................................................................................................................ 294
10.4
Data record routing .............................................................................................................. 301
10.5
Virtual interface for IP-based applications ........................................................................... 303
Communication
10
Function Manual, 11/2019, A5E03735815-AH
Table of contents
11 Connection resources ............................................................................................................................ 307
11.1
Connection resources of a station ........................................................................................307
11.2
Allocation of connection resources .......................................................................................311
11.3
Display of the connection resources.....................................................................................316
12 Diagnostics and fault correction ............................................................................................................. 320
12.1
Connection diagnostics.........................................................................................................320
12.2
Emergency address ..............................................................................................................323
13 Communication with the redundant system S7-1500R/H....................................................................... 324
13.1
System IP addresses ............................................................................................................325
13.2
Response to Snycup.............................................................................................................331
13.3
Response to primary-backup switchover..............................................................................331
13.4
Connection resources of the redundant system S7-1500R/H ..............................................332
13.5 13.5.1
HMI communication with the redundant system S7-1500R/H..............................................334 HMI connection via the system IP address ..........................................................................334
13.6 13.6.1
Open User Communication with the redundant system S7-1500R/H ..................................336 Setting up the connection of the Open User Communication with the redundant S71500R/H system ...................................................................................................................336
14 Industrial Ethernet Security with CP 1543-1 .......................................................................................... 342
14.1
Firewall .................................................................................................................................. 343
14.2
Logging .................................................................................................................................344
14.3
NTP client .............................................................................................................................345
14.4
SNMP .................................................................................................................................... 345
14.5
VPN ....................................................................................................................................... 346
Glossary ................................................................................................................................................ 347
Index...................................................................................................................................................... 359
Communication
Function Manual, 11/2019, A5E03735815-AH
11
Function manuals Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system, for CPU 1516pro-2 PN based on SIMATIC S7-1500, and for the distributed I/O systems SIMATIC ET 200MP, ET 200SP and ET 200AL is divided into three areas. This division allows you easier access to the specific information you require.
Basic information
System manuals and Getting Started manuals describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500, ET 200MP, ET 200SP and ET 200AL systems; use the corresponding operating instructions for CPU 1516pro-2 PN. The STEP 7 online help supports you in configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, terminal diagrams, characteristics and technical specifications.
Communication
12
Function Manual, 11/2019, A5E03735815-AH
Function manuals Documentation Guide
General information The function manuals contain detailed descriptions on general topics such as diagnostics, communication, Motion Control, Web server, OPC UA. You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742705). Changes and additions to the manuals are documented in product information sheets. You will find the product information on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/us/en/view/68052815) ET 200SP (https://support.industry.siemens.com/cs/us/en/view/73021864) ET 200AL (https://support.industry.siemens.com/cs/us/en/view/99494757)
Manual Collections The Manual Collections contain the complete documentation of the systems put together in one file. You will find the Manual Collections on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/86140384) ET 200SP (https://support.industry.siemens.com/cs/ww/en/view/84133942) ET 200AL (https://support.industry.siemens.com/cs/ww/en/view/95242965)
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system - separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
Communication
Function Manual, 11/2019, A5E03735815-AH
13
Product overview
2
CPUs, communications modules and processors, and PC systems of the S7-1500, ET 200MPET 200SPET 200pro and ET 200AL systems provide you with interfaces for communication via PROFINET, PROFIBUS and point-to-point connections.
CPUs, communications modules and communications processors
PROFINET and PROFIBUS DP interfaces are integrated in the S7-1500 CPUs. The CPU 1516-3 PN/DP for example has two PROFINET interfaces and one PROFIBUS DP interface. Other PROFINET and PROFIBUS DP interfaces are available by using communications modules (CM) and communications processors (CP).
PROFINET interface (X2) with 1 port PROFINET interface (X1) with 2-port switch PROFIBUS DP interface (X3) PROFINET interface (X1) with 3-port switch
Figure 2-1 Interfaces of the CPU 1516-3 PN/DP and CPU 1512SP-1 PN
Communication
14
Function Manual, 11/2019, A5E03735815-AH
Product overview Interfaces of communications modules
Interfaces of communications modules (CMs) extend the interfaces of CPUs (for example, the communication module CM 1542-5 adds a PROFIBUS interface to S7-1500 automation system).
PROFIBUS DP interface
Figure 2-2 PROFIBUS DP interface of the CM 1542-5 and CM DP (to an ET 200SP CPU)
Communication
Function Manual, 11/2019, A5E03735815-AH
15
Product overview
Interfaces of communications processors Interfaces of communication processors (CP) offer additional functionality to what is provided by the integrated interfaces of the CPUs. CPs allow special applications, for example the CP 1543-1 provides Industrial Ethernet security functions for protecting Industrial Ethernet networks via its Industrial Ethernet interface.
Industrial Ethernet interface
Figure 2-3 Industrial Ethernet interface of the CP 1543-1
Communication
16
Function Manual, 11/2019, A5E03735815-AH
Product overview
Interfaces of communications modules for point-to-point connections The communication modules for point-to-point connections provide communication via their RS 232-, RS 422- and RS 485 interfaces, for example, Freeport or Modbus communication.
Interface for point-to-point connections
Figure 2-4 Example of interface for point-to-point connection at the CM PtP RS422/485 BA
Communication
Function Manual, 11/2019, A5E03735815-AH
17
Product overview
Interfaces of interface modules PROFINET and PROFIBUS DP interfaces of the interface modules (IM) in ET 200MP, ET 200SP and ET 200AL are used to connect the distributed I/O ET 200MP, ET 200SP and ET 200AL to PROFINET or PROFIBUS of the higher-level IO controller or DP master.
PROFINET interface with 2-port switch
Figure 2-5 PROFINET interfaces IM 155-5 PN ST (ET 200MP), IM 155-6 PN ST (ET 200SP), and IM 157-1 PN (ET 200AL)
Communications services The communications services described below use the interfaces and communication mechanisms provided by the system via CPUs, communication modules and processors.
Communication
18
Function Manual, 11/2019, A5E03735815-AH
Communications services
3
3.1
Overview of communication options
Overview of communications options The following communications options are available for your automation task.
Table 3- 1 Communications options Communications options
Functionality
PG communication2 HMI communication2 Open communication via TCP/IP2
Open communication using ISO-onTCP2
Open communication via UDP2
On commissioning, testing, diagnostics On operator control and monitoring Data exchange via PROFINET/Industrial Ethernet with TCP/IP Instructions: · TSEND_C/TRCV_C · TSEND/TRCV · TCON · T_DISCON
Data exchange via PROFINET/Industrial Ethernet with ISO-on-TCP Instructions: · TSEND_C/TRCV_C · TSEND/TRCV · TCON · T_DISCON
Data exchange via PROFINET/Industrial Ethernet with UDP Instructions: · TSEND_C/TRCV_C · TUSEND/TURCV · TCON · T_DISCON
Via interface:
PN/IE1 DP serial
X
X
-
X
X
-
X
-
-
X
-
-
X
-
-
Communication
Function Manual, 11/2019, A5E03735815-AH
19
Communications services 3.1 Overview of communication options
Communications options
Functionality
Open communication via ISO (only CPs with PROFINET/Industrial Ethernet interface)
Data exchange via PROFINET/Industrial Ethernet with the ISO protocol
Instructions:
· TSEND_C/TRCV_C · TSEND/TRCV · TCON · T_DISCON
Open communication with FDL (only CM 1542-5 as of firmware V2.0)
Data exchange via PROFIBUS with the FDL protocol
Instructions:
· TSEND_C/TRCV_C · TSEND/TRCV · TUSEND/TURCV · TCON · T_DISCON
OPC UA server3 Communication via Modbus TCP
Data exchange with OPC UA clients
Data exchange via PROFINET with Modbus TCP protocol Instructions:
· MB_CLIENT · MB_SERVER
E-mail
Sending process alarms via e-mail Instruction:
· TMAIL_C
FTP (only CPs with
File management and file access via FTP (File
PROFINET/Industrial Ethernet interface) Transfer Protocol); CP can be FTP client and FTP
server
Instruction:
· FTP_CMD
Fetch/Write (only CPs with
Server services via TCP/IP, ISO-on-TCP and ISO
PROFINET/Industrial Ethernet interface) Via special instructions for Fetch/Write
S7 communication
Data exchange via PROFINET/PROFIBUS with the S7 protocol.
Instructions:
· PUT/GET · BSEND/BRCV · USEND/URCV
Serial point-to-point connection
Data exchange via point-to-point with Freeport, 3964(R), USS or Modbus protocol
Via special instructions for PtP, USS or Modbus RTU
Via interface:
PN/IE1 DP serial
X
-
-
-
X
-
X
-
-
X
-
-
X
-
-
X
-
-
X
-
-
X
X
-
-
-
X
Communication
20
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.1 Overview of communication options
Communications options
Web server SNMP (Simple Network Management Protocol) Time-of-day synchronization
Functionality
Data exchange via HTTP(S), for example for diagnostics For monitoring and error recognition of IP networks, possibly parameterization of the IP network components via standard SNMP protocol Via PN/IE interface: CPU is NTP client (Network Time Protocol) Via DP interface: CPU/CM/CP is time-of-day master or time slave
Via interface:
PN/IE1 DP serial
X
-
-
X
-
-
X
-
-
-
X
-
1 IE - Industrial Ethernet 2 Observe the special characteristics for S7-1500R/H 3 Only via internal PROFINET interface of the CPU and via Ethernet interface CP 1543 1 with activated "Access to PLC
via communication module" function.
Information on S7-1500R/H
You can find information on the communication possibilities with the redundant system S7-1500R/H in the section Communication with the redundant system S7-1500R/H (Page 324).
Additional information
Application example: CPU-CPU communication with SIMATIC controllers (compendium) You can find the application example on the Internet (https://support.industry.siemens.com/cs/ww/en/view/20982954).
This FAQ (https://support.industry.siemens.com/cs/ww/en/view/102420020) describes how to configure fetch/write communication via CP1543-1 with S7-1500.
Additional information about the Fetch/Write services is available in the STEP 7 online help.
You can find additional information on the PtP link in the function manual CM PtP Configurations for Point-to-Point Connections (http://support.automation.siemens.com/WW/view/en/59057093).
You will find the description of the web server functionality in the function manual Web server (http://support.automation.siemens.com/WW/view/en/59193560).
You will find information about the standard protocol SNMP on the Service & Support pages on the Internet (http://support.automation.siemens.com/WW/view/en/15166742).
You will find information about time-of-day synchronization in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/86535497).
Communication
Function Manual, 11/2019, A5E03735815-AH
21
Communications services 3.2 Communications protocols and port numbers used for Ethernet communication
3.2
Communications protocols and port numbers used for Ethernet
communication
This section provides an overview of the supported protocols and port numbers used for communication over PN/IE interfaces. For each protocol the address parameters, the respective communications layer as well as the communications role and the communications direction are specified.
This information makes it possible to match the security measures for protection of the automation system to the used protocols (for example firewall). Because the security measures are limited to Ethernet or PROFINET networks, the tables do not include PROFIBUS protocols.
Note Port numbers used
The specified port numbers are the standard port numbers used by the S7-1500 CPU. Many communication protocols and implementations enable you to use other port numbers.
The following tables show the different layers and protocols used in the S7-1500 CPUs and S7 1500 communication modules.
The following table shows the protocols supported by the S7-1500 CPUs, ET 200SP CPUs and the CPUs 1513/1516pro 2 PN. The S7-1500 software controllers also support the protocols listed in the following table for the Ethernet interfaces that are assigned to the software controller.
Table 3- 2 Layers and protocols of the S7-1500 CPUs and software controllers (via PROFINET interface of the CPU)
Protocol
Port number
(2) Link layer
Function
(4) Transport layer
PROFINET protocols
DCP
Discovery and basic configuration protocol
Not relevant (2) Ethertype 0x8892 (PROFINET)
Accessible devices
PROFINET Discovery and configuration
LLDP
Link Layer Discovery protocol
Not relevant (2) Ethertype 0x88CC (LLDP)
PROFINET Link Layer Discovery protocol
MRP
Not relevant (2) Ethertype
Media Redundancy Protocol
0x88E3 (IEC 62493-2-2010)
PROFINET medium redundancy
Description
DCP is used by PROFINET to discover PROFINET devices and provide basic settings.
LLDP is used by PROFINET to discover and manage neighbor relationships between PROFINET devices. LLDP uses the special multicast MAC address: 01-80-C2-00-00-0E MRP provides control of redundant transmission paths by means of a ring topology. MRP uses standard-compliant Multicast MAC addresses.
Communication
22
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.2 Communications protocols and port numbers used for Ethernet communication
Protocol
PTCP Precision Transparent Clock Protocol
Port number
(2) Link layer
Function
(4) Transport layer
Not relevant (2) Ethertype 0x8892 (PROFINET)
PROFINET
send clock and time synchronization, based on IEEE 1588
PROFINET IO Not relevant (2) Ethertype
data
0x8892
(PROFINET)
PROFINET Cyclic IO data transfer
PROFINET Context Manager
34964
(4) UDP
PROFINET connection less RPC
Connection-oriented communications protocols
SMTP
25
(4) TCP
Simple mail transfer protocol
SMTPS
465
(SMTP over
TLS)
(4) TCP
SMTP with
25
STARTTLS 587
(4) TCP
HTTP
80
Hypertext transfer protocol
ISO-on-TCP 102 (according to RFC 1006)
(4) TCP (4) TCP
Simple mail transfer protocol
Secure SMTP
Simple mail transfer protocol with the SMTP command "STARTTLS" Hypertext transfer protocol
ISO-on-TCP protocol
NTP
Network time protocol
SNMP
Simple network management protocol
HTTPS
Secure Hypertext transfer protocol
123 161 162 (trap)
443
(4) UDP (4) UDP
(4) TCP
Network time protocol
Simple network management protocol
Secure Hypertext transfer protocol
Description
PTCP provides a time delay measurement between RJ45 ports and thus send clock synchronization and time synchronization. PTCP uses standard-compliant Multicast MAC addresses. The PROFINET IO frames are used to transmit IO data cyclically between PROFINET IO controller and IO devices via Ethernet. The PROFINET Context Manager provides an endpoint mapper in order to establish an application relation (PROFINET AR).
SMTP is used for sending e-mails.
SMTP is used for sending e-mails over secure connections.
SMTP with STARTTLS is used for sending e-mails over secure connections.
HTTP is used for communication with the CPU-internal web server.
ISO-on-TCP (according to RFC 1006) is used for message-oriented data exchange with remote CPU or software controller. S7 communication with ES, HMI, OPC server, etc. NTP is used for synchronization of the CPU system time with the time of an NTP server.
SNMP is used for reading and setting of network management data (SNMP managed Objects) by the SNMP Manager.
HTTPS is used for communication with the CPU-internal web server via Secure Socket Layer (SSL).
Communication
Function Manual, 11/2019, A5E03735815-AH
23
Communications services 3.2 Communications protocols and port numbers used for Ethernet communication
Protocol
Modbus TCP Modbus Transmission Control Protocol OPC UA Open Platform Communications Unified Architecture OUC1 Open User Communication and Secure OUC
IGMPv2 Internet Group Management Protocol Reserved
Port number
502
(2) Link layer
Function
(4) Transport layer
(4) TCP
Modbus/TCP protocol
Description
Modbus/TCP is used by MB_CLIENT/MB_SERVER instructions in the user program.
4840
(4) TCP
Based on the TCP/IP proto- Communication standard ranging from
col
the enterprise level to the field level.
1 ... 1999 (4) TCP
can be used (4) UDP to limited extent2
2000 ... 5000
Recommended
5001 ... 49151
can be used to limited extent2
Not relevant (3) Network layer
Open User Communication
(TCP/UDP)
Secure Open User Communication (TLS)
OUC instructions provide connection establishment, connection termination and data transfer based on the socket layer.
Internet Group Management Network protocol for the organization of
Protocol
multicast groups.
49152 ... (4) TCP
-
65535
(4) UDP
Dynamic port area used for active connection end point if the application does not determine the local port number.
1 Note: The open communication provides direct access to the UDP/TCP for the user. The user is responsible for observing the port restrictions/definitions of the IANA (Internet Assigned Numbers Authority).
2 Do not use ports for OUC, which are already used by other protocols.
Communication
24
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.2 Communications protocols and port numbers used for Ethernet communication
The following table shows the protocols that are supported by the S7-1500 software controller via the Ethernet interfaces assigned to Windows.
Table 3- 3 Layers and protocols of the S7-1500 Software Controller (via Ethernet interface on the Windows side)
Protocol
Port number
(2) Link layer (4) Transport layer
PROFINET protocols
DCP
Discovery and basic configuration protocol
Not relevant (2) Ethertype 0x8892 (PROFINET)
Connection-oriented communications protocols
SMTP
25
(4) TCP
Simple mail transfer protocol
HTTP
Adjustable 1 (4) TCP
Hypertext transfer protocol
ISO-on-TCP (according to RFC 1006)
OUC2
Open User Communication
and
Secure OUC
102
(4) TCP
1 ... 1999 (4) TCP
can be used (4) UDP to limited extent3, 4
2000 ... 5000
recommended4
5001 ... 49151
can be used to limited extent3, 4
Function
Accessible devices PROFINET Discovery and configuration
Simple mail transfer protocol
Hypertext transfer protocol
ISO-on-TCP protocol
Open User Communication (TCP/UDP) Secure Open User Communication (TLS)
Description
DCP is used by PROFINET to discover PROFINET devices and provide basic settings.
SMTP is used for sending e-mails.
HTTP is used for communication with CPUinternal web server. You can change the port number to avoid conflict with other web servers on Windows. If you want to use web server access, you must activate the port in the Windows Firewall. ISO-on-TCP (according to RFC 1006) for S7 communication with PG/PC or HMI.
OUC instructions provide connection establishment, connection termination and data transfer based on the socket layer. If you want to use OUC, you must activate the ports in the Windows Firewall.
Communication
Function Manual, 11/2019, A5E03735815-AH
25
Communications services 3.2 Communications protocols and port numbers used for Ethernet communication
Protocol
IGMPv2 Internet Group Management Protocol Reserved
Port number
(2) Link layer (4) Transport layer
Not relevant (3) Network layer
49152 ... 65535
(4) TCP (4) UDP
Function
Internet Group Management Protocol
-
Description
Network protocol for the organization of multicast groups.
Dynamic port range that is used for the active connection end point, if the application does not determine the local port number. If you wish to use this communication, you must activate the ports in the Windows Firewall.
1 Default setting for Windows assigned interfaces: 81 2 Note: The open user communication provides direct access to the UDP/TCP for the user. The user is responsible for
observing the port restrictions/definitions of the IANA (Internet Assigned Numbers Authority). 3 Do not use ports for OUC, which are already used by other protocols. 4 Do not use ports for OUC, which are already used by other Windows applications.
Table 3- 4
The following table shows the protocols that are supported in addition to those listed in the tables for the S7-1500 communications modules (e.g. CP 1543-1).
Layers and protocols of S7-1500 communications modules
Protocol
Port number
(2) Link layer (4) Transport layer
PROFINET/Industrial Ethernet protocols
Connection-oriented communications protocols
FTP
20 (data)
(4) TCP
File transfer protocol
21 (control)
secureFTP
20 (data)
(4) TCP
File transfer protocol
21 (control)
DHCP
68
(4) UDP
Dynamic Host Configuration Protocol
Secure NTPv3 123
(4) UDP
Network time protocol
SNMP
161
(4) UDP
Simple network management protocol
162 (trap)
Function
File transfer protocol
File transfer protocol
Dynamic Host Configuration Protocol
Network time protocol
Simple network management protocol
Description
FTP is used for the transmission of files (only in connection with CP 1543-1).
SecureFTP is used for the transmission of files by means of a TSL connection (only in connection with CP 1543-1). DHCP is used to retrieve the IP Address Suite from a DHCP server when starting up the IE interface.
Secure NTP is used to synchronize the CP 1543-1 internal system clock with an NTP server. SNMPv3 permits the CP 1543-1 to read network management data (MIBs) from SNMPv3 agent with authentication.
Special consideration S7-1500 MFP: Port 111: The S7-1500 MFP uses Port 111 to the NFS service for internal communication.
Communication
26
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.3 Overview of connection resources
3.3
Overview of connection resources
Connection resources Some communications services require connections. Connections allocate resources on the CPUs, CPs and CMs involved (for example memory areas in the CPU operating system). In most cases one resource per CPU/CP/CM is allocated for a connection. In HMI communication, up to 3 connection resources are required per HMI connection. The connection resources available depend on the CPU being used, the CPs and CMs and must not exceed a defined high limit for the automation system.
Available connection resources in a station The maximum number of resources of a station is determined by the CPU. Each CPU has reserved connection resources for PG, HMI and web server communication. In addition, there are available resources for other communication services, e.g. for SNMP, e-mail connections, HMI and S7 communication as well as for open communication.
When are connection resources allocated? The time for allocation of connection resources depends on how the connection is set up, automatic, programmed or configured (see section Setting up a connection (Page 27)).
Additional information You will find more detailed information on the allocation of connection resources and the display of connection resources in STEP 7 in the section Connection resources (Page 307).
3.4
Setting up a connection
Automatic connection
STEP 7 sets up a connection automatically (for example PG or HMI connection) if you have connected the PG/PC interface to an interface of the CPU physically and have made the interface assignment in STEP 7 in the "Go online" dialog.
Communication
Function Manual, 11/2019, A5E03735815-AH
27
Communications services 3.4 Setting up a connection
Setting up a programmed connection You set up the programmed connection in the program editor of STEP 7 in the context of a CPU by assigning instructions for communication, for example TSEND_C. When specifying the connection parameters (in the Inspector window, in the properties of the instruction), you are supported by the easy-to-use user interface.
Figure 3-1 Programmed setup
28
Communication Function Manual, 11/2019, A5E03735815-AH
Communications services 3.4 Setting up a connection
Setting up a configured connection You set up the configured connection in the network view of the Devices & networks editor of STEP 7 in the context of a CPU or a software controller.
Figure 3-2 Configured setup
Communication
Function Manual, 11/2019, A5E03735815-AH
29
Communications services 3.4 Setting up a connection
Effects on the connection resources of the CPU
You can often choose between a configured or a programmed connection. Programmed connection setup allows connection resources to be released following data transfer. Like routed connections, programmed connections are not guaranteed, meaning that they are only established when resources are available. With configured connection setup, the resource is available after download of the configuration until the configuration changes again. Corresponding resources are therefore reserved for connection establishment via configured connections. The "Connection resources" table in the Inspector window of the CPU displays an overview of connection resources already used and those still available.
How do I set up a connection?
Table 3- 5 Setting up the connection
Connection
Programming device connection
HMI connection
Web communication
OPC UA server communication
OPC UA client communication
Open communication via TCP/IP connection
Open communication via ISO-onTCP connection
Open communication via UDP connection
Open communication via ISO connection
Open communication via FDL connection
Communication via Modbus TCP connection
E-mail connection
FTP connection
S7 connection*
Automatically X X X X -
-
-
-
-
-
-
Programmed setup X X
Configured setup X X
X
X
X
X
X
X
X
X
X
-
X
-
X
-
-
X
* Note that for an S7-1500 CPU you must enable the use of PUT/GET communication in the properties of the CPU. You can find more information on this topic in the STEP 7 online help.
Additional information
You will find further information on the allocation of connection resources and the display of connection resources in STEP 7 in the section Connection resources (Page 307).
Communication
30
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.5 Data consistency
3.5
Data consistency
Definition
Data consistency is important for data transfer and you need to take this into account when configuring the communication task. Otherwise, malfunctions may occur.
A data area which cannot be modified by concurrent processes is called a consistent data area. This means that a data area which belongs together and which is larger than the maximum size of the consistent data area can consist in part of new and of old data at the same time.
An inconsistency can occur when an instruction for communication is interrupted, for example by a hardware interrupt OB with higher priority. This interrupts the transfer of the data area. If the user program in this OB now changes the data that has not yet been processed by the communication instruction, the transferred data originates from different times:
The following figure shows a data area that is smaller than the maximum size of the consistent data area. In this case, when transferring the data area, it is ensured that there is no interruption by the user program during data access so that the data is not changed.
The source data area is smaller than the maximum size of the consistent data area (). The
instruction transfers the data together to the destination data area.
Maximum size of the consistent data area
Figure 3-3 Consistent transfer of data
Communication
Function Manual, 11/2019, A5E03735815-AH
31
Communications services 3.5 Data consistency
The following figure shows a data area that is larger than the maximum size of the consistent data area. In this case, the data can be changed during an interruption of the data transfer. An interruption also occurs if, for example, the data area needs to be transferred in several parts. If the data is changed during the interruption, the transferred data originates from different times.
The source data area is larger than the maximum size of the consistent data area (). At time
T1, the instruction only transfers as much data from the source data area into the destination data area as fits in the consistent data area.
At time T2, the instruction transfers the rest of the source data area to the destination data
area. After the transfer, data from different points in time exist in the destination data area. If the data in the source data area has changed in the meantime, an inconsistency may result.
Maximum size of the consistent data area
Figure 3-4 Transfer of data larger than the maximum consistency area
Example of an inconsistency
The figure below shows an example of changing data during the transfer. The destination data area contains data from different points in time.
Maximum size of the consistent data area
Figure 3-5 Example: Changing data during the transfer
Communication
32
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.5 Data consistency
System-specific maximum data consistency for S7-1500: No inconsistency occurs if the system-specific maximum size of the consistent data is kept to. With an S7-1500, communication data is copied consistently into or out of the user memory in blocks of up to 512 bytes during the program cycle. Data consistency is not ensured for larger data areas. Where defined data consistency is required, the length of communication data in the user program of the CPU must not exceed 512 bytes. You can then access these data areas consistently, for example from an HMI device by reading/writing tags.
If more data than the system-specific maximum size needs to be transferred consistently, you yourself must ensure the data consistency with suitable measures in the user program.
Ensuring data consistency Use of instructions for access to common data:
If the user program contains instructions for communication that access common data, for example TSEND/TRCV, you can coordinate access to this data area yourself, for example using the "DONE" parameter. The data consistency of the data areas that are transferred with an instruction for communication can therefore be ensured in the user program.
Note Measures in the user program
To achieve data consistency, you can copy transferred data to a separate data area (for example, global data block). While the user program continues to work with the original data, you can transfer the data saved in the separate data area consistently with the communication instruction.
For the copying, use uninterruptible instructions such as UMOVE_BLK or UFILL_BLK. These instructions ensure data consistency up to 16 KB.
Use of PUT/GET instructions or Write/Read via HMI communication:
In S7 communication with the PUT/GET instructions or Write/Read via HMI communication, you need to take into account the size of the consistent data areas during programming or configuration. In the user program of an S7-1500 as server, there is no instruction available that can coordinate the data transfer in the user program. The data exchanged using PUT/GET instructions updates the S7-1500 while the user program is running. There is no point in time within the processing of the cyclic user program at which the data is exchanged consistently. The length of the data area to be transferred should be smaller than 512 bytes.
Additional information You will also find the maximum amount of consistent data in the device manuals of the communications modules in the Technical Specifications.
You will find further information on data consistency in the description of the instructions in the STEP 7 online help.
Communication
Function Manual, 11/2019, A5E03735815-AH
33
Communications services 3.6 Secure Communication
3.6
Secure Communication
3.6.1
Basics of Secure Communication
For STEP 7 (TIA Portal) as of V14 and for S7-1500 CPUs as of firmware V2.0, the options for secure communication have been broadened considerably.
Introduction
The attribute "secure" is used for the identification of communication mechanisms that are based on a Public Key Infrastructure (PKI) (for example RFC 5280 for Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List Profile). A Public Key Infrastructure (PKI) is a system that can issue, distribute and check digital certificates. The digital certificates issued are used in the PKI to secure computer-based communication. If a PKI uses asymmetric key cryptography, the messages in a network can be digitally signed and encrypted.
Components that you have configured in STEP 7 for secure communication use an asymmetric key encryption scheme with a Public Key and Private Key. TLS (Transport Layer Security) is used as the encryption protocol. TLS is the successor for the SSL (Secure Sockets Layer) protocol.
Objectives of secure communication
Secure communication is used to achieve the following objectives:
Confidentiality i.e. the data are secret / cannot by read by eavesdroppers.
Integrity i.e. the message that reaches the recipient is the same message, unchanged, that the sender sent. The message has not been altered on the way.
End point authentication i.e. the end point communication partner is exactly who it claims to be and the party who is to be reached. The identity of the partner has been checked.
These objectives were in the past primarily relevant to IT and networked computers. Now, industrial machinery and control systems with sensitive data are at equally high risk, as they are also networked, and consequently pose strict security requirements for data exchange.
Protection of the automation cell by means of the cell protection concept through firewall, or via connection through VPN, for example with the security module, was common in the past and remains so.
However, it is becoming increasingly necessary to also transfer data to external computers in encrypted form via Intranet or public networks.
Communication
34
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.6 Secure Communication
Common principles of secure communication
Independent of the context, secure communication is based on the concept of the Public Key Infrastructure (PKI) and contains the following components:
An asymmetric encryption scheme that allows:
Encryption or decryption of messages using public or private keys.
The verification of signatures in messages and certificates.
The messages/certificates are signed by the sender/certificate subject with their private key. The recipient/verifier checks the signature with the public key of the sender/certificate subject.
Transport and storage of the public key using X.509 certificates:
X.509 certificates are digitally signed data that allow public key authentication in terms of the bound identity.
X.509 certificates can contain information that describes in more detail or restricts use of the public key. For example the date as of which a public key in a certificate is valid and when it expires.
X.509 certificates contain information about the issuer of the certificate in secure form.
The following paragraphs give an overview of these basic concepts, which are required for managing certificates in STEP 7 (TIA Portal), for example, and for programming communication instructions for secure Open User Communication (sOUC).
Secure communication with STEP 7
STEP 7 as of V14 provides the required PKI for the configuration and operation of secure communication.
Examples:
The Hypertext Transfer Protokoll (HTTP) turns into Hypertext Transfer Protokoll Secure (HTTPS) with the help of the TLS (Transport Layer Security) protocol. Since HTTPS is a combination of HTTP and TLS, it is called "HTTP over TLS" in the corresponding RFC. You can see in the browser that HTTPS is being used; this is indicated by the URL "https://" instead of "http://" in the address bar of the browser. Most browsers highlight such secure connections.
Open User Communication turns into secure Open User Communication. The underlying protocol is also TLS.
E-mail providers also offer access over the "Secure SMTP over TLS" protocol to increase the security of e-mail communication.
Communication
Function Manual, 11/2019, A5E03735815-AH
35
Communications services 3.6 Secure Communication
The figure below shows the TLS protocol in the context of communication layers.
Figure 3-6 TLS protocol in the context of communication layers
Secure communication with OPC UA
An OPC UA server is implemented in S7-1500 CPUs as of firmware V2.0. OPC UA Security also covers authentication, encryption and data integrity with digital X.509 certificates and also uses a Public Key Infrastructure (PKI). Depending on the requirements placed by the application, you can select different security levels for the end point security. You will find the description of the OPC UA server functionality in the section Using the S7-1500 as an OPC UA server (Page 159).
3.6.2
Confidentiality through encryption
Message encryption is an important element of data security. When encrypted messages are intercepted by third parties during communication, these potential eavesdroppers cannot access the information they contain.
There is a wide range of mathematical processes (algorithms) for encrypting messages.
All algorithms process a "key" parameter to encrypt and decrypt messages.
Algorithm + key + message => encrypted message
Encrypted message + key + algorithm => (decrypted) message
Communication
36
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.6 Secure Communication
Symmetric encryption The central aspect of symmetric encryption is that both communication partners use the same key for message encryption and decryption, as shown in the figure below. Bob uses the same key for encryption as Alice uses for decryption. In general, we also say that the two sides share the secret key with which they encrypt or decrypt a message as a secret.
Bob encrypts his message with the symmetric key Alice decrypts the encrypted message with the symmetric key
Figure 3-7 Symmetric encryption
The process can be compared to a briefcase to which the sender and recipient have the same key, which both locks and opens the case. Advantage: Symmetric encryption algorithms (such as AES, Advanced Encryption
Algorithm) are fast. Disadvantages: How can the key be sent to a recipient without getting into the wrong
hands? This is a key distribution problem. If enough messages are intercepted, the key can also be worked out and must therefore be changed regularly. If there are a large number of communication partners, there is also a large number of keys to distribute.
Communication
Function Manual, 11/2019, A5E03735815-AH
37
Communications services 3.6 Secure Communication
Asymmetric encryption
Asymmetric encryption works with a pair of keys consisting of one public key and one private key. Used with a PKI, it is also known as Public Key cryptography or simply PKI cryptography. A communication partner, Alice in the figure below, has a private key and a public key. The public key is provided to the public, in other words any potential communication partner. Anyone with the public key can encrypt messages for Alice. In the figure below, this is Bob.
Alice's private key, which she must not disclose, is used by Alice to decrypt an encrypted message addressed to her.
Alice provides Bob with her public key. No precautionary measures are required to this pur-
pose: Anyone can use the public key for messages to Alice if they are sure that it is actually Alice's public key.
Bob encrypts his message with Alice's public key. Alice decrypts the encrypted message from Bob with her private key. As only Alice has the
private key and never discloses it, only she can decrypt the message. With her private key, she can decrypt any message encrypted with her public key - not only messages from Bob.
Figure 3-8 Asymmetric encryption
The system can be compared to a mailbox into which anyone can put a message, but from which only the person with the key can remove messages.
Advantages: A message encrypted with a public key can only be decrypted by the owner of the private key. As another (private) key is required for decryption, it is also much harder to work out the decryption key on the basis of large numbers of encrypted messages. This means that the public key does not have to be kept strictly confidential, unlike with symmetric keys.
Another advantage is easier distribution of public keys. No specially secured channel is required in asymmetric cryptography to transfer the public key from the recipient to the sender encrypting the messages. Less work is thus required in managing the keys than would be the case in symmetric encryption procedures.
Disadvantages: Complex algorithm (e.g. RSA, named after the three mathematicians Rivest, Shamir and Adleman), and therefore poorer performance than with symmetric encryption.
Communication
38
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.6 Secure Communication
Encryption processes in practice
In practice, for example with a CPU Web server and Secure Open User Communication, the TLS protocol is used below the relevant application layer. Application layers are HTTP or SMTP, for example, as detailed above.
TLS (Transport Layer Security) uses a combination of asymmetric encryption and symmetric encryption (hybrid encryption) for secure data transfer, for example, over the Internet, and uses the following subprotocols:
TLS Handshake Protocol, responsible for authentication of communication partners and negotiation of the algorithms and keys to be used for subsequent data transfer on the basis of asymmetric encryption.
TLS Record Protocol, responsible for encryption of user data with symmetric encryption and data exchange.
Both asymmetric and symmetric encryption are considered secure encryption schemes there is basically no difference in security between the two procedures. The degree of security depends on parameters such as the selected key length.
Abuse of encryption
You cannot tell what identity is assigned to a public key from the bit string. A fraud could provide their public key and claim to be someone else. If a third party then uses this key thinking that they are addressing their required communication partner, confidential information could end up with the fraud. The fraud then uses their private key to decrypt the message that was not intended for them, and sensitive information falls into the wrong hands.
To prevent this type of abuse, the communication partners must be confident that they are dealing with the right communication partner. This trust is established by using digital certificates in a PKI.
3.6.3
Authenticity and integrity through signatures
Attacks from programs that intercept communication between the server and client and act as if they themselves were client or server, are called man-in-the-middle attacks. If the false identity of these programs is not detected, they can obtain important information about the S7 program, for example, or set values in the CPU and attack a machine or plants. Digital certificates are used to avoid such attacks.
Secure communication uses digital certificates that meet the X.509 standard of the International Telecommunication Union (ITU). This allows the identity of a program, a computer or an organization to be checked (authenticated).
Communication
Function Manual, 11/2019, A5E03735815-AH
39
Communications services 3.6 Secure Communication
How certificates establish trust
The main role of X.509 certificates is to bind an identity with the data of a certificate subject (for example, e-mail address or computer name) to the public key of the identity. Identities can be people, computers or machines.
Certificates are issued by certificate authorities (Certificate Authority, CA) or by the subject of a certificate itself. PKI systems specify how users can trust the certificate authorities and the certificates that they issue.
The certificate process:
1. Anyone wishing to own a certificate submits a certificate application to a registration authority linked to the certificate authority.
2. The certificate authority assesses the application and applicant on the basis of set criteria.
3. If the identity of the applicant can be clearly established, the certificate authority confirms that identity by issuing a signed certificate. The applicant has now become the certificate subject.
The figure below is a simplified overview of the process. It does not show how Alice can check the digital signature.
Figure 3-9 Signing of a certificate by a certificate authority
Self-signed certificates Self-signed certificates are certificates whose signature comes from the certificate subject and not from an independent certificate authority.
Examples:
You can create and sign a certificate yourself, for example, to encrypt messages to a communication partner. In the example above, Bob (instead of Twent) could himself sign his certificate with his private key. Using Bob's public key, Alice can check that the signature and public key from Bob match. This procedure is sufficient for simple internal plant communication that is to be encrypted.
A root certificate is, for example, a self-signed certificate, signed by the certificate authority (CA), that contains the public key of the certificate authority.
Communication
40
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.6 Secure Communication
Features of self-signed certificates The "CN" (Common Name of Subject) for the certificate subject and "Issuer" attributes of self-signed certificates are identical: You have signed your certificate yourself. The field "CA" (Certificate Autority) must be set to "False"; the self-signed certificate should not be used to sign other certificates. Self-signed certificates are not embedded in a PKI hierarchy.
Certificate content A certificate to the X.509 V3 standard, the standard that is also used by STEP 7 and the S7-1500 CPUs, consists primarily of the following elements: Public key Details of the certificate subject (i.e. the holder of the key), for example, the Common Name (CN) of Subject . Attributes such as serial number and validity period Digital signature from the certificate authority (CA) confirming that the information is correct. There are also extensions, for example: Specification of what the public key may be used for (Key Usage), for example, signing or key encryption. When you create a new certificate with STEP 7, for example in the context of Secure Open User Communication, select the correct entry from the list of possible usages, e.g. "TLS". Specification of a Subject Alternative Name (SAN), which is used in secure communication with Web servers (HTTP over TLS), for example, to ensure that the certificate in the address bar of the Web browser also belongs to the Web server specified in the URL.
How signatures are generated and verified Asymmetric key usage ensures that certificates can be verified: The example of the "MyCert" certificate illustrates the "Sign" and "Verify signature" processes. Generating a signature: 1. The issuer of the "MyCert" certificate generates a hash value from the certificate data using a specific hash function (for example SHA-1, Secure Hash Algorithm). The hash value is a bit string of a constant length. The advantage of the constant length of the hash value is that it always takes the same amount of time to sign. 2. Using the hash value generated in this way and the private key, the issuer of the certificate then generates a digital signature. The RSA signature scheme is often used. 3. The digital signature is saved in the certificate. The certificate is now signed.
Communication
Function Manual, 11/2019, A5E03735815-AH
41
Communications services 3.6 Secure Communication
Verifying a signature: 1. The authenticator of the "MyCert" certificate obtains the certificate of the issuer and thus
the public key. 2. A new hash value is formed from the certificate data with the same hash algorithm that
was used for signing (for example SHA-1). 3. This hash value is then compared with the hash value that is determined by means of the
public key of the certificate issuer and the signature algorithm for checking the signature. 4. If the signature check produces a positive result, both the identity of the certificate subject
as well as the integrity, meaning authenticity and genuineness, of the certificate content are proven. Anyone who has the public key, i.e. the certificate from the certificate authority, can check the signature and thus recognize that the certificate was actually signed by the certificate authority. The figure below shows how Alice uses the public key in the certificate from Twent (who represents the certificate authority, CA) to verify the signature on Bob's public key. All that is required for verification is therefore the availability of the certificate from the certificate authority at the moment of checking. The validation itself is executed automatically in the TLS session.
Figure 3-10 Verification of a certificate with the public key of the certificate of a certificate authority
Signing messages The method described above for signing and verifying also uses the TLS session for signing and verifying messages. If a hash value is generated by a message and this hash value is signed with the private key of the sender and attached to the original message, the recipient of the message is able to check the integrity of the message. The recipient decrypts the hash value with the public key of the sender, puts together the hash value from the message received and compares the two values. If the values are not the same, the message has been tampered with on the way.
Communication
42
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.6 Secure Communication
Chain of certificates to root certificate
The certificates of a PKI are often organized hierarchically: The top of the hierarchy is formed by root certificates. Root certificates are certificates that are not signed by a higherlevel certificate authority. The certificate subject and certificate issuer of root certificates are identical. Root certificates enjoy absolute trust. They form the "anchor" of trust and must therefore be known to the receiver as trusted certificates. They are stored in an area provided for trusted certificates.
Depending on the PKI, the function of root certificates is, for example, to sign certificates from lower-level certificate authorities, so-called intermediate certificates. This transfers the trust from the root certificate to the intermediate certificate. An intermediate certificate can sign a certificate just like a root certificate; both are therefore referred to as "CA certificates".
This hierarchy can be continued over multiple intermediate certificates until the end-entity certificate. The end-entity certificate is the certificate of the user who is to be identified.
The validation process runs through the hierarchy in the opposite direction: As described above, the certificate issuer is established and the signature checked with the issuer's public key, then the certificate of the higher-level certificate issuer is established along the entire chain of trust to the root certificate.
Conclusion: The chain of intermediate certificates to the root certificate, the certificate path, must be available in every device that is to validate an end-entity certificate of the communication partner, irrespective of the type of secure communication that you configure.
3.6.4
Managing certificates with STEP 7
STEP 7 as of version V14 together with the S7-1500-CPUs as of firmware version 2.0 support the Internet PKI (RFC 5280) in as far as an S7-1500-CPU is able to communicate with devices that also support the Internet PKI.
The usage of X.509 certificates for verifying certificates as described in the preceding sections, for example, is a result of this.
STEP 7 as of V14 uses a PKI similar to Internet PKI. Certificate Revocation Lists (CRLs), for example, are not supported.
Communication
Function Manual, 11/2019, A5E03735815-AH
43
Communications services 3.6 Secure Communication
Creating or assigning certificates You create certificates for various applications in STEP 7 for devices with security properties, such as an S7-1500 CPU as of firmware V2.0. The following areas in the Inspector window of the CPU allow the creation of new certificates or the selection of existing ones: "Protection & Security > Certificate manager" - for the generation and assignment of all types of certificates. TLS certificates for Secure Open User Communication are preset for the generation of certificates. "Web server > Security" - for the generation and assignment of Web server certificates. "OPC UA > Server > Security" - for the generation and assignment OPC UA certificates.
Figure 3-11 Security settings for an S7-1500 CPU in STEP 7
Communication
44
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.6 Secure Communication
Special features of the section "Protection & Security > Certificate manager"
Only in this section of the Inspector window do you switch between the global, i.e. projectwide, and the local, i.e. device-specific, certificate manager (option "Use global security settings for the certificate manager"). The option decides whether you have access to all the certificates in the project or not.
If you do not use the certificate manager in the global security settings, you only have access to the local certificate memory of the CPU. You do not have access, for example, to imported certificates or root certificates. Without these certificates only a restricted functionality is available. You can, for example, only generate self-signed certificates.
If you use the certificate manager in the global security settings and you are logged on as an administrator, you have access to the global, project-wide certificate memory. You can, for example, assign imported certificates to the CPU, or create certificates that are issued and signed by the project CA (certificate authority of the project).
The figure below shows how the "Global security settings" are shown in the project tree after the "Use global security settings for certificate manager" option has been activated in the Inspector window of the CPU.
Communication
Function Manual, 11/2019, A5E03735815-AH
45
Communications services 3.6 Secure Communication
When you double-click "User login" in the project tree below the global security settings and log in, a line called "Certificate manager" is displayed, among other data. When you double-click the "Certificate manager" line, you obtain access to all the certificates in the project, divided into the tabs "CA" (certificate authorities), "Device certificates" and "Trusted certificates and root certificate authorities".
Private keys
STEP 7 generates private keys while generating device certificates and server certificates (end-entity certificates). The location where the private key is stored encrypted depends on the use of the global security settings for the certificate manager:
If you use global security settings, the private key is stored encrypted in the global (project-wide) certificate memory.
If you do not use global security settings, the private key is stored encrypted in the local (CPU-specific) certificate memory.
The existence of the private key, which is required to decrypt data, for example, is displayed in the "Private key" column of the "Device certificates" tab of the certificate manager in the global security settings.
When the hardware configuration is loaded, the device certificate, the public key as well as the private key are loaded into the CPU.
NOTICE
The "Use global security settings for certificate manager" option influences the previously used private key: If you have already created certificates without using the certificate manager in the global security settings and then change the option for using the certificate manager, the private keys are lost and the certificate ID can change. A warning draws your attention to this fact. Therefore specify at the beginning of the project configuration which option is required for the certificate manager.
Communication
46
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.6 Secure Communication
3.6.5
Examples for the management of certificates.
As explained in the preceding sections, certificates are required for every type of secure communication. The following section shows as an example how you handle the certificates with STEP 7 so that the requirements for Secure Open User Communication are fulfilled.
The devices which are involved at the respective communication partners are differentiated below. The respective steps for supplying the required certificates to the communications participants are described. An S7-1500 CPU or an S7-1500 software controller as of firmware version 2.0 is always required.
The general rule is:
While a secure connection is being established (handshake"), the communication partners as a rule only communicate their end-entity certificates (device certificates).
Therefore the CA certificates required to verify the transmitted device certificate must be located in the certificate memory of the respective communication partner.
Secure Open User Communication between two S7-1500 CPUs
Two S7-1500-CPUs, PLC_1 and PLC_2, are to exchange data with each other via Secure Open User Communication.
You generate the required device certificates with STEP 7 and assign them to the CPUs as described below.
STEP 7 project certificate authorities (CA of the project) are used to sign the device certificates.
The certificates are to be referenced by their certificate ID in the user program (TCON communication instruction in combination with the associated system data type, for example TCON_IPV4_SEC). STEP 7 assigns the certificate ID automatically during the generation or creation of certificates.
Communication
Function Manual, 11/2019, A5E03735815-AH
47
Communications services 3.6 Secure Communication
Procedure
STEP 7 automatically loads the required CA certificates together with the hardware configuration to the participating CPUs so that the requirements for certificate verification exist for both CPUs. You therefore only have to generate the device certificates for the respective CPU; STEP 7 does the rest for you.
1. Mark PLC_1 and activate the "Use global security settings for certificate manager" option in the "Protection & Security" section.
2. Log in as a user in the project tree in the "Global security settings" section. For a new project, the "Administrator" role is planned for the first login.
3. Return to the PLC-1 in the "Protection & Security" section. Click in an empty line in the "Certificate subject" column in the "Device certificates" table to add a new certificate.
4. In the drop-down list for selecting a certificate click the "Add" button.
The "Create Certificate" dialog opens.
5. Leave the default settings in this dialog. They are tailored to the usage of Secure Open User Communication (usage: TLS).
Tip: Supplement the default name of the certificate subject, in this case the CPU name. In order to differentiate you better leave the default CPU name in case you have to manage a large number of device certificates.
Example: PLC_1/TLS becomes PLC_1-SecOUC-Chassis17FactoryState.
6. Compile the configuration.
The device certificate and the CA certificate are part of the configuration.
7. Repeat the steps described above for PLC_2.
In the next step you have to create the user programs for the data exchange and load the configurations together with the program.
Communication
48
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.6 Secure Communication
Using self-signed certificates instead of CA certificates
When creating device certificates you can select the "Self-signed" option. You can create self-signed certificates without being logged in for the global security settings. This procedure is not recommended because the resulting certificates do not exist in the global certificate memory and can therefore not be assigned directly to a partner CPU.
As described above, you should select the name of the certificate subject with care so that the right certificate can be assigned to a device without any doubt.
Verification with the CA certificates of the STEP 7 project is not possible for self-signed certificates. To ensure that self-signed certificates can be verified you have to include the self-signed certificates of the communication partner into the list of trusted partner devices for each CPU. To this purpose you must have activated the "Use global security settings for certificate manager" option and be logged in as a user in the global security settings.
Proceed as follows to add the self-signed certificate of the communication partner of the CPU:
1. Mark PLC_1 and navigate to the "Certificates of partner devices" table in the "Protection & Security" section.
2. Click in an empty line in the "Certificate subject" column in the "Device certificates" table to add a new certificate.
3. Select the self-signed certificate of the communication partner from the drop-down list and confirm the selection.
In the next step you have to create the user programs for the data exchange and load the configurations together with the program.
Communication
Function Manual, 11/2019, A5E03735815-AH
49
Communications services 3.6 Secure Communication
Secure Open User Communication between S7-1500 CPU as a TLS client and an external device as a TLS server
Two devices are to exchange data with each other via TLS connection or TLS session, for example, exchanging recipes, production data or quality data: An S7-1500 CPU (PLC_1) as TLS client; the CPU uses Secure Open User
Communication An external device, for example a Manufacturing Execution System (MES), as TLS server The S7-1500 CPU establishes the TLS connection / session to the MES system as TLS client.
TLS client TLS server
The S7-1500 CPU requires the CA certificates of the MES system to authenticate the TLS server: The root certificate and, if appropriate, the intermediate certificates for verifying the certificate path.
You have to import these certificates into the global certificate memory of the S7-1500 CPU.
Proceed as follows to import certificates of the communication partner:
1. Open the certificate manager in the global security settings in the project tree.
2. Select the appropriate table (trusted certificates and root certificate authorities) for the certificate to be imported.
3. Right-click in the table to open the shortcut menu. Click "Import" and import the required certificate or the required CA certificates.
Through the import the certificate has a certificate ID assigned to it and can be assigned to a module in the next step.
4. Mark PLC_1 and navigate to the "Certificates of partner devices" table in the "Protection & Security" section.
5. Click in an empty line in the "Certificate subject" column to add the imported certificates.
6. Select the required CA certificates of the communication partner from the drop-down list and confirm the selection.
Communication
50
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.6 Secure Communication
Optionally the MES system can also request a device certificate of the CPU to authenticate the CPU (i.e., the TLS client). In this case, the CA certificates of the CPU must be made available to the MES system. The prerequisite for importing the certificates into the MES system is a preceding export of the CA certificates from the STEP 7 project of the CPU. Follow these steps:
1. Open the certificate manager in the global security settings in the project tree.
2. Select the matching table (CA certificate) for the certificate to be exported.
3. Right-click the selected certificate to open the shortcut menu.
4. Click "Export".
5. Select the export format of the certificate.
In the next step you have to create the user programs for the data exchange and load the configurations together with the program.
Secure Open User Communication between an S7-1500 CPU as TLS server and an external device as TLS client
If the S7-1500 CPU acts as TLS server and the external device, for example an ERP system (Enterprise Resource Planning System) establishes the TLS connection / session, you require the following certificates:
For the S7-1500 CPU, you generate a device certificate (server certificate) with a private key and download it with the hardware configuration into the S7-1500 CPU. You use the "Signed by certificate authority" option when generating the server certificate.
The private key is required for the key exchange as explained in the figure for the example "HTTP over TLS".
You have to export the CA certificate of the STEP 7 project for the ERP system and import / load it into the ERP system. With the CA certificate the ERP system verifies the server certificate of the S7-1500 that was transferred from the CPU to the ERP system during the establishment of the TLS connection / session.
TLS server TLS client
Figure 3-12 Secure OUC between an S7-1500 CPU and ERP system
The required steps are described in the preceding sections.
Communication
Function Manual, 11/2019, A5E03735815-AH
51
Communications services 3.6 Secure Communication
Secure Open User Communication to a mail server (SMTP over TLS) An S7-1500 CPU can establish a secure connection to an e-mail server with the communication instruction TMAIL-C. The system data types TMail_V4_SEC and TMail_QDN_SEC allow you to determine the partner port of the e-mail server and thus to reach the e-mail server via "SMTP over TLS".
Figure 3-13 Secure OUC between a S7-1500 CPU and a mail server
Requirement for secure e-mail connection is the importing of the root certificate and the intermediate certificates of the mail server (provider) into the global certificate memory of the S7-1500 CPU. By means of these certificates the CPU can check the server certificate that is sent by the mail server during the establishment of the TLS connection / session. Proceed as follows to import certificates of the mail server: 1. Open the certificate manager in the global security settings in the project tree. 2. Select the appropriate table (trusted certificates and root certificate authorities) for the
certificate to be imported. 3. Right-click in the table to open the shortcut menu. Click "Import" and import the required
certificate or the required CA certificates. As a result of the import, the certificate has a certificate ID assigned to it and can be assigned to a module in the next step. 4. Mark PLC_1 and navigate to the "Certificates of partner devices" table in the "Protection & Security" section. 5. Click in an empty line in the "Certificate subject" column to add the imported certificates. 6. Select the required CA certificates of the communication partner from the drop-down list and confirm the selection. In the next step you have to create the user programs for the e-mail client function of the CPU and load the configurations together with the program.
Communication
52
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.6 Secure Communication
3.6.6
Example: HTTP over TLS
The following paragraphs show how the mechanisms described are used to establish a secure communication between a Web browser and the Web server of an S7-1500 CPU.
Initially the changes for the "Permit access only with HTTPS" option in STEP 7 are described. As of STEP 7 V14 you have the possibility to influence the server certificate of the Web server of an S7-1500 CPU as of firmware V2.0: The server certificate is generated as of these versions with STEP 7.
In addition it illustrates the processes that are executed when a website of the CPU Web server is called with a Web browser of a PC through an encrypted HTTPS connection.
Using Web server certificates for S7-1500 CPUs, FW V2.0 or higher
For S7-1500 CPUs with a firmware version before V2.0, you were able to set "Permit access only with HTTPS" when setting the Web server properties, without specific requirements applying.
You did not have to handle certificates for these CPUs; the CPU automatically generates the certificates required for the Web server.
For S7-1500 CPUs as of firmware V2.0, STEP 7 generates the server certificate (end-entity certificate) for the CPU. You assign a server certificate to the Web server in the properties of the CPU (Web server > Security).
Because a server certificate name is always preset, there is no change to the easy configuration of the Web server: You activate the Web server. The "Permit access only with HTTPS" option is enabled by default - STEP 7 generates a server certificate with the default name during compiling.
Irrespective of whether you use the certificate manager in the global security settings or not: STEP 7 has all the information required to generate the server certificate.
In addition, you have the possibility to determine the properties of the server certificate, for example, the name or the validity period.
Communication
Function Manual, 11/2019, A5E03735815-AH
53
Communications services 3.6 Secure Communication
Loading the Web server certificate
The server certificate generated by STEP 7 is then automatically also loaded to the CPU when the hardware configuration is loaded.
If you use the certificate manager in the global security settings, the certificate authority of the project (CA certificate) signs the server certificate of the Web server: During loading the CA certificate of the project is loaded as well automatically.
If you do not use the certificate manager in the global security settings, STEP 7 generates the server certificate as a self-signed certificate.
When you address the Web server of the CPU over the IP address of the CPU, a new server certificate (end-entity certificate) must be generated and loaded with each change in the IP address of an Ethernet interface of the CPU. This is necessary because the identity of the CPU changes with the IP address and the identity requires a signature in accordance with the PKI rules.
You can avoid this problem by addressing the CPU with a domain name instead of its IP address, for example "myconveyer-cpu.room13.myfactory.com". For this purpose, you have to manage the domain names of the CPU via a DNS server.
Supplying a Web browser with a CA certificate of the Web server
In the Web browser the user who accesses the websites of the CPU through HTTPS should install the CA certificate of the CPU. If no certificate is installed, a warning is output recommending that you do not use the page. To view this page, you must explicitly "Add an exception".
The user receives the valid root certificate for download from the "Intro" Web page of the CPU Web server under "Download certificate".
STEP 7 offers a different possibility: Export the CA certificate of the project with the certificate manager into the global security settings in STEP 7. Subsequently import the CA certificate into the browser.
Communication
54
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.6 Secure Communication
Course of the secure communication The figure below shows, in simplified terms, how communication is established ("handshake") focusing on the negotiation of keys used for data exchange (here with HTTP over TLS). However, the course can be applied to all communication options that are based on the usage of TLS, i.e. also for Secure Open User Communication (see Basics for secure communication).
Figure 3-14 Handshake with https
The figure does not show the measures taken at Alice's end (browser) to verify the certificate sent by the Web server. Whether Alice can trust the Web server certificate received and therefore the identity of the Web server, and can accept the exchange of data, depends on positive verification.
Communication
Function Manual, 11/2019, A5E03735815-AH
55
Communications services 3.6 Secure Communication
The steps for verifying the authenticity of the Web server:
1. Alice must know the public keys of all relevant certificate authorities, which means she requires the complete certificate chain to verify the Web server certificate (i.e. the endentity certificate of the Web server):
Alice will generally have the required root certificate in her certificate memory. When a Web browser is installed, a range of trusted root certificates is also installed. If she does not have the root certificate, she has to download it from the certificate authority and install it in the certificate store of the browser. The certificate authority can also be the device on which the Web server is located.
You have the following options for obtaining the intermediate certificates:
The server itself sends the required intermediate certificates to Alice along with its end-entity certificate in the form of a signed message so that Alice can verify the integrity of the certificate chain.
The certificates often contain the URLs of the certificate issuer. Alice can load the required intermediate certificates from these URLs.
When you work with certificates in STEP 7 it is always assumed that you have imported the intermediate certificates and the root certificate into the project and assigned them to the module.
2. Alice validates the signatures in the certificate chain with the public keys of the certificates.
3. The symmetric key must be generated and transferred to the Web server.
4. If the Web server is addressed by its domain name, Alice also verifies the identity of the Web server in accordance with the Internet PKI rules defined in RFC 2818. She is able to do this because the URL of the Web server, in this case the "Fully Qualified Domain Name" (FQDN), is saved in the end-entity certificate of the Web server. If the certificate entry in the "Subject Alternative Name" field corresponds to the entry in the address bar of the browser, everything is fine.
The process continues with the exchange of data with the symmetric key, as shown in the figure above.
Communication
56
Function Manual, 11/2019, A5E03735815-AH
3.7
SNMP
Communications services 3.7 SNMP
3.7.1
Disabling SNMP
The network management protocol SNMP (Simple Network Management Protocol) is a protocol that uses various services and tools for detection and diagnostics of the network topology.
Which SNMP requests the S7-1500 CPUs and the S7-1200 CPUs can receive, is described in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/79993228).
SNMP uses the transport protocol UDP. SNMP recognizes two network components, the SNMP manager and the SNMP client. The SNMP manager monitors the network nodes: The SNMP clients collect the various network-specific information in the individual network nodes and store it in a structured form in the MIB (Management Information Base). Various services and tools can run detailed network diagnostics with the help of these data.
Under certain conditions, it is useful to disable SNMP. Examples:
The security guidelines in your network do not allow the use of SNMP.
You use your own SNMP solution, e.g. with your own communications instructions.
If you disable SNMP for a device, various diagnostics options for the network topology (e.g. in the PRONETA tool or in the Web server of the CPU) are no longer available.
Disabling SNMP To disable SNMP for one of the integrated interfaces of an S7 1500 CPU, proceed as follows:
1. In STEP 7, create a data block that contains the structure of data record B071H.
The following table shows the structure of the data record B071H.
Byte 0-1 2-3 4 5 6-7 8-11
Element BlockID BlockLength Version Subversion Reserved SNMP controller
Code F003H 8 01 H 00 H Disable/enable SNMP
Explanation
Header The data record length is counted starting at byte 4 "Version".
If you want to disable SNMP, enter the value 0. If you want to enable SNMP, enter the value 1.
2. Transfer the data record B071H in the startup OB (OB100) with the WRREC instruction (write data record) to the CPU. Use the hardware ID of an integrated interface of the CPU here.
Communication
Function Manual, 11/2019, A5E03735815-AH
57
Communications services 3.7 SNMP
3.7.2
Example: Disabling SNMP for a CPU 1516-3 PN/DP
Task
As the security guidelines in your network do not allow SNMP, you want to disable SNMP for a CPU 1516-3 PN/DP.
Requirements
CPU 1516-3 PN/DP with firmware version V2.0 STEP 7 as of V14
Solution
First, create a data block that contains the structure of data record B071H. The figure below shows the data block "Deactivate SNMP". The data block "Deactivate SNMP" contains the data record B071H as well as additional tags that you use to transfer the data record. The tag "snmp_deactivate" is used to trigger the job for WRREC. Place this tag in the retentive memory area so that the value is also available in the startup OB (OB100).
Figure 3-15 Example: Data block for disabling SNMP
Transfer the data record B071H in the startup OB (OB100) to CPU 1516-3 PN/DP with the WRREC instruction (write data record).
Communication
58
Function Manual, 11/2019, A5E03735815-AH
Communications services 3.7 SNMP
In the following program code, the data record B071H is transferred with the WRREC instruction in a REPEAT UNTIL loop. ORGANIZATION_BLOCK "Startup" TITLE = "Complete Restart" { S7_Optimized_Access := 'TRUE' } VERSION : 0.1 BEGIN
REPEAT "WRREC_DB_1" (REQ := "Deactivate SNMP".snmp_deactivate,
//Transfer data record INDEX:=16#B071,
//Data record number for SNMP deactivation ID:="Local~PROFINET_interface_1",
//any integrated PROFINET Interface DONE => "Deactivate SNMP".snmp_done, ERROR => "Deactivate SNMP".snmp_error, STATUS => "Deactivate SNMP".snmp_status, RECORD := "Deactivate SNMP".snmp_record)
//Data record UNTIL "Deactivate SNMP".snmp_done OR "Deactivate SNMP".snmp_error END_REPEAT; END_ORGANIZATION_BLOCK
Using program code You will find the full program code here.
Follow these steps to apply the program code to your project:
1. Copy the entire program code to the clipboard with Ctrl+A, Ctrl+C.
2. Open a text editor (e.g. "Editor").
3. Paste the content of the clipboard to the text editor with Ctrl+V.
4. Save the document as an scl file, e.g. SNMP_DEACT.scl.
5. Open your project in STEP 7.
6. Import the scl file as an external source. You will find further information on importing external sources in the STEP 7 online help.
7. Generate the startup OB and the data blocks. (right-click on the scl file, shortcut menu: "Generate blocks from source")
Re-enabling SNMP With small changes, you can use the program code used above to enable SNMP.
In the user program, assign the "Deactivate SNMP".snmp_record.SNMPControl tag the value "1": "Deactivate SNMP".snmp_record.SNMPControl := 1;
SNMP will then be enabled again the next time the CPU is started.
Communication
Function Manual, 11/2019, A5E03735815-AH
59
PG communication
4
Properties
Using PG communication, the CPU or another module capable of communication exchanges data with an engineering station (for example PG, PC). The data exchange is possible via PROFIBUS and PROFINET subnets. The gateway between S7 subnets is also supported.
PG communication provides functions needed to load programs and configuration data, run tests, and evaluate diagnostic information. These functions are integrated in the operating system of the module capable of communication.
Requirements
The PG/PC is physically connected to the communication-capable module.
If the communication-capable module is to be reached via S7 routing, the hardware configuration has to be loaded in the participating stations (S7 router and end point).
Procedure for connecting online You must establish an online connection to the CPU for the programming device communication:
1. Select the CPU in the project tree in STEP 7.
2. Select the "Online > Go online" menu command.
Communication
60
Function Manual, 11/2019, A5E03735815-AH
PG communication
3. In the "Go online" dialog, make the following settings for your online connection: Select interface type (e.g. PN/IE) in the "Type of PG/PC interface" drop-down list. In the "PG/PC interface" drop-down list, select the PG/PC interface (e.g. Ind. Ethernet card) you want to use to establish the online connection. Select the interface or the S7 subnet with which the programming device/PC is physically connected from the "Connection to interface/subnet" drop-down list. If the communication-capable module can be reached via an S7 router (gateway), select the S7 router that connects the subnets in question from the "1st gateway" drop-down list.
Figure 4-1 Setting up PG communication
Communication
Function Manual, 11/2019, A5E03735815-AH
61
PG communication
4. Click "Start search". All devices that you can address with PG communication appear shortly thereafter in the table "Compatible devices in target subnet".
5. In the "Compatible devices in target subnet" table, select the relevant CPU and confirm with "Go online".
Additional information You can find more information on "Go online" in the STEP 7 online help.
Communication
62
Function Manual, 11/2019, A5E03735815-AH
HMI communication
5
Properties
Using HMI communication, one or more HMI devices (for example HMI Basic/Comfort/Mobile Panel) exchanges data with a CPU for operator control and monitoring with via the PROFINET or PROFIBUS DP interface. The data exchange is via HMI connections.
If you want to set up several HMI connections to a CPU, use for example:
The PROFINET and PROFIBUS DP interfaces of the CPU
CPs and CMs with the relevant interfaces
Procedure for setting up HMI communication
As soon as you drag-and-drop a tag, for example a tag from a global data block into an HMI screen or into the HMI tag table, STEP 7 automatically sets up an HMI connection. Alternatively, you can also set up the HMI connection yourself.
To set up an HMI connection, follow these steps.
1. Configure the HMI device in an existing configuration with a CPU in the network view of the Devices & networks editor of STEP 7.
2. Select the "Connections" button and then "HMI connection" from the drop-down list.
3. Drag-and-drop a line between the end points of the connection (HMI device and CPU). The end points are highlighted in color. If the required S7 subnet does not yet exist, it is created automatically.
Communication
Function Manual, 11/2019, A5E03735815-AH
63
HMI communication
4. In the "Connections" tab, select the row of the HMI connection. In the "General" area of the "Properties" tab, you see the properties of the HMI connection, some of which you can change.
Figure 5-1 Setting up HMI communication
5. Download the hardware configuration to the CPU. 6. Download the hardware configuration to the HMI device.
Additional information
You can find information on S7 routing for HMI connections in the section S7 Routing (Page 289).
You can find more information on setting up HMI connections in the STEP 7 online help.
Communication
64
Function Manual, 11/2019, A5E03735815-AH
Open User Communication
6
6.1
Overview of Open User Communication
Features of Open User Communication
Through Open User Communication, also called "open communication", the CPU exchanges data with another device capable of communication. Open User Communication has the following features and characteristics:
Open standard (communication partners can be two SIMATIC CPUs or a SIMATIC CPU and a suitable third-party device).
Communication via various protocols (in STEP 7 known as "Connection types")
High degree of flexibility in terms of the data structures transferred; this allows open data exchange with any communications devices as long as these support the connection types available.
Secure Communication: To protect your automation system, you can exchange data securely over Open User Communication. With Secure Open User Communication, the data is sent signed and encrypted.
Open User Communication is possible in various automation systems, see technical specifications of the respective manuals. Examples:
Integrated PROFINET / Ind. Ethernet interfaces of CPUs (S7-1500, ET 200SP CPU, S7-1500 Software Controller, CPUs 1513/1516pro 2 PN)
PROFINET / Ind. Ethernet interfaces of communications modules (for example CP 1543-1, CM 1542-1, CP 1543SP-1)
Information on Secure Open User Communication is available in the section Secure Communication (Page 34).
Information on S7-1500R/H
You can find information on Open User Communication with the S7-1500R/H redundant system in section Communication with the redundant system S7-1500R/H (Page 324).
Communication
Function Manual, 11/2019, A5E03735815-AH
65
Open User Communication 6.2 Protocols for Open User Communication
6.2
Protocols for Open User Communication
Protocols for Open User Communication The following protocols are available for open communication:
Table 6- 1 Transport protocols for open communication
Transport protocol TCP according to RFC 793 ISO-on-TCP according to RFC 1006 (Class 4) ISO according to ISO/IEC 8073 UDP according to RFC 768 FDL
Via interface PROFINET/Industrial Ethernet PROFINET/Industrial Ethernet Industrial Ethernet (only CP 1543-1) PROFINET/Industrial Ethernet PROFIBUS
Table 6- 2 Application protocols for open communication
Application protocol Modbus TCP E-mail FTP
Used transport protocol TCP according to RFC 793 TCP according to RFC 793 TCP according to RFC 793
TCP, ISO-on-TCP, ISO, UDP
Prior to data transfer, these protocols (except UDP) establish a transport connection to the communications partner. Connection-oriented protocols are used when potential loss of data needs to be avoided.
The following is possible with UDP:
Unicast to one device or broadcast to all devices on PROFINET via the PROFINET interface of the CPU or the Industrial Ethernet interface of the CP 1543-1
Multicast to all recipients of a multicast group via the PROFINET interface of the CPU* or the PROFINET / Industrial Ethernet interface of the CP 1543-1
* As of firmware version V2.0, the PROFINET interface of the CPU supports a maximum of 5 multicast groups
Maximum user data length: You can find the maximum user data lengths supported in the technical specifications of the respective device manuals.
Communication
66
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.2 Protocols for Open User Communication
Protocol for communication via PROFIBUS: FDL
Data transfer via an FDL connection (Fieldbus Data Link) is suitable for the transfer of related blocks of data to a communications partner on PROFIBUS that supports the sending and receiving of data according to the FDL service SDA (Send Data with Acknowledge) according to EN 50170, Vol 2. Both partners have the same rights; in other words, each partner can initiate sending and receiving event-driven.
In keeping with the FDL service SDN (Send Data with No Acknowledge) according to EN 50170, Vol 2, the following is possible with FDL:
Broadcast to all devices on PROFIBUS via the PROFIBUS interface of the CM 1542-5
Multicast to all recipients of a multicast group via the PROFIBUS interface of the CM 1542-5
Modbus TCP
The Modbus protocol is a communication protocol with linear topology based on a master/slave architecture. In the Modbus TCP (Transmission Control Protocol), the data is transmitted as TCP/IP packets.
Communication is controlled solely by suitable instructions in the user program.
E-mail and FTP
You can use email to send for example, data block contents (e.g. process data) as an attachment.
You can use the FTP connection (FTP = File Transfer Protocol) to transmit files to and from S7 devices.
The communication is controlled by instructions in the user program at the client end.
Application example: MQTT Publisher for the SIMATIC S7-1500 CPU
The "Message Queue Telemetry Transport" (MQTT) is a simple protocol on the TCP/IP level. It is suitable for the exchange of messages between devices with lower functionality and for the transfer via unreliable networks.
The application example provides a function block with which you can implement the MQTT protocol into the SIMATIC S7-1500.
You can find the application example on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109748872).
Communication
Function Manual, 11/2019, A5E03735815-AH
67
Open User Communication 6.3 Instructions for Open User Communication
Block library for SYSLOG messages
Syslog is a simply structured binary profile on UDP/IP level. It enables applications to send messages, warnings or error states to a Syslog server. Syslog is typically used for computer system management and security monitoring, and has established itself as a standard in the field of protocols.
The "LSyslog" library offers you a solution to implement the Syslog protocol in an S7-1500. In addition to the library, an application example is provided that shows you how to generate Syslog messages in your controller and send them to the Syslog server.
You can find the block library "LSyslog" and the associated application example on the Internet (https://support.industry.siemens.com/cs/ww/en/view/51929235).
6.3
Instructions for Open User Communication
Introduction
You set up Open User Communication via the corresponding connection (for example, TCP connection) as follows:
By programming in the user programs of the communications partners or
By configuring the connection in STEP 7 in the hardware and network editor
Regardless of whether you set up the connection by programming or configuring, instructions are always required in the user programs of both communications partners for sending and receiving the data.
Setting up the connection via the user program
If the connection is set up by programming, the connection establishment and termination is implemented using instructions in the user program.
In certain application areas, it is advantageous not to set up the communication connections statically via hardware configuration, but via the user program instead. You can set up the connections via a specific application program-controlled and therefore when necessary. Programmed connection setup also allows connection resources to be released following data transfer.
A data structure is necessary for each communications connection that contains the parameters for establishing the connection (for example system data type "TCON_IP_v4" for TCP).
The system data types (SDT) are provided by the system and have a predefined structure that cannot be changed.
The various protocols have their own data structures (see table below). The parameters are stored in a data block ("connection description DB") for example of the system data type TCON_IP_v4.
Communication
68
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.3 Instructions for Open User Communication
There are two ways in which you can specify the DB with the data structure:
Recommendation: Have the data block created automatically in the properties in the program editor during parameter assignment of the connection for the TSEND_C, TRCV_C and TCON instructions.
Create the data block manually, assign parameters to it and write it directly to the instruction Necessary for:
Secure OUC
Connection over DNS
E-mail
FTP
You can modify the connection parameters in the "connection description DB".
This FAQ (https://support.industry.siemens.com/cs/ww/en/view/58875807) describes how to program the TCON instruction to set up a connection for Open User Communication between two S7-1500 CPUs.
Protocols, system data types and employable instructions for programmed setup
The following table shows the protocols of the Open User Communication and the matching system data types and instructions.
Table 6- 3 Instructions for programmed setup of the connection
Protocol TCP ISO-on-TCP ISO according to ISO/IEC 8073 (Class 4) UDP
FDL1
System data type · TCON_QDN · TCON_IP_v4
· TCON_IP_RFC · TCON_ISOnative1 · TCON_Configured
Instructions
Establish connection and send/receive data via:
· TSEND_C/TRCV_C or
· TCON, TSEND/TRCV or
· TCON, TUSEND/TURCV (connection can be terminated via TDISCON)
· TCON_IP_v4
Establish connection and
· TADDR_Param
send/receive data via:
· TADDR_SEND_QDN · TSEND_C/TRCV_C
· TADDR_RCV_IP
· TUSEND/TURCV/TRCV (connection can be terminated via
TDISCON)
· TCON_FDL
Establish connection and send/receive data via:
· TSEND_C/TRCV_C or
· TCON, TSEND/TRCV or
· TCON, TUSEND/TURCV (connection can be terminated via TDISCON)
Communication
Function Manual, 11/2019, A5E03735815-AH
69
Open User Communication 6.3 Instructions for Open User Communication
Protocol Modbus TCP
E-mail
FTP2
System data type · TCON_IP_v4 · TCON_QDN · TCON_Configured
Instructions · MB_CLIENT · MB_SERVER
· TMAIL_v4 · TMAIL_v6 · TMAIL_FQDN
· TMAIL_C
· FTP_CONNECT_IPV · FTP_CMD 43
· FTP_CONNECT_IPV 63
· FTP_CONNECT_NA ME3
1 This protocol can only be used with the CM 1542-5 2 This protocol can only be used with the CP 1543-1 3 User-defined data type
The following table shows you the different connections of the Secure Open User Communication and the matching system data types and instructions.
Secure OUC connection
Secure TCP connection from an S7-1500 CPU as TLS client to a third-party PLC (TLS server)
Secure TCP connection from an S7-1500 CPU as TLS server to a third-party PLC (TLS client)
Secure TCP connection between two S7-1500 stations
Secure connection to a mail server2
System data type · TCON_QDN_SEC
· TCON_IP_V4_SEC1 · TMAIL_V4_SEC · TMAIL_QDN_SEC
Secure Modbus TCP connection · TCON_IP_V4_SEC1
· TCON_QDN_SEC
Instructions · TSEND_C/TRCV_C · TCON, TSEND/TRCV
· TMAIL_C (V5.0 or higher) · MB_Client · MB_Server
1 Also possible for CP 1543-1 2 Secure connection to a mail server also possible with CP1543-1 und TMAIL_C (V4.0)
Communication
70
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.3 Instructions for Open User Communication
Setting up the connection with connection configuration
When setting up through the configuration of the connection, the address parameters of the connection are specified in the hardware and network editor of STEP 7.
To send and receive the data, use the same instructions as when the connections are set up by programming:
Table 6- 4 Instructions for sending/receiving with configured connections
Protocol Supported instructions: TCP ISO-on-TCP ISO according to ISO/IEC 8073 (Class 4) UDP
FDL
Modbus TCP E-mail FTP
Send/receive with configured connections
Send/receive data via: · TSEND_C/TRCV_C or · TSEND/TRCV or · TUSEND/TURCV Send/receive data via: · TSEND_C/TRCV_C or · TUSEND/TURCV Send/receive data via: · TSEND_C/TRCV_C or · TSEND/TRCV or · TUSEND/TURCV Not supported Not supported Not supported
Additional instructions for open communication You can use the following instructions for connections set up in the user program as well as for configured connections:
T_RESET: Terminating and establishing a connection
T_DIAG: Check the connection
Basic examples for Open User Communication
The Siemens Online Support offers you function blocks (FBs) that facilitate the handling of the instructions of the Open User Communication. You can find the function block with corresponding examples on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109747710).
Communication
Function Manual, 11/2019, A5E03735815-AH
71
Open User Communication 6.3 Instructions for Open User Communication
Additional information The STEP 7 online help describes: The user and system data types The instructions for open communication The connection parameters You will find information about the allocation and release of connection resources in the section Allocation of connection resources (Page 311).
See also
Secure Open User Communication (Page 92)
Communication
72
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.4 Open User Communication with addressing via domain names
6.4
Open User Communication with addressing via domain names
As of firmware version V2.0, S7-1500 CPUs, ET 200SP CPUs and the CPUs 1513/1516pro-2 PN support Open User Communication with addressing via Domain Name System (DNS). A DNS client is integrated in the CPU. In the case of communication via DNS, you use domain names as an alias for IP addresses to address communication partners. Addressing of the communication partners via domain names is possible for open communication via TCP and UDP.
At least one DNS server must be located in your network as a requirement for communication via DNS.
The S7-1500 software controller supports communication via DNS for all interfaces that are assigned to the software controller.
Setting up communication via DNS
The DNS client of the CPU must know the IPv4 address of at least one DNS server so that a CPU can establish a connection to a communication partner via its domain name. The CPU supports up to 4 different DNS servers.
To set up communication via domain names for an S7-1500 CPU, follow these steps:
1. Select the CPU in the network view of STEP 7.
2. In the Inspector window, navigate to "Properties" > "General" > "Advanced configuration" > "DNS configuration".
3. Enter the IPv4 address of a DNS server in the "DNS server addresses" column of the "Server list" table. You can enter up to 4 IPv4 addresses of DNS servers.
Figure 6-1 Entering DNS server addresses using a CPU 1516-3 PN/DP as an example
Communication
Function Manual, 11/2019, A5E03735815-AH
73
Open User Communication 6.4 Open User Communication with addressing via domain names
Setting up a TCP connection via the domain name of the communication partner For TCP communication via the domain name you need to create a data block with the TCON_QDN system data type yourself, assign parameters and call it directly at the instruction. The TCON, TSEND_C and TRCV_C instructions support the system data type TCON_QDN: To set up a TCP connection via the domain name of the communication partner, follow these steps: 1. Create a global data block in the project tree. 2. Define a tag of the data type TCON_QDN in the global data block. The example below shows the global data block "Data_block_1" in which the tag "DNS Connection1" of data type TCON_QDN is defined.
Figure 6-2 Data type TCON_QDN
3. Program the parameters of the TCP connection (for example the fully qualified domain name (FQDN)) in the tag of data type TCON_QDN.
4. Create a TCON instruction in the program editor. 5. Interconnect the CONNECT parameter of the TCON instruction with the tag of the data
type TCON_QDN. In the example below, the CONNECT parameter of the TCON instruction is interconnected with the tag "DNS connection1" (data type TCON_QDN).
Figure 6-3 TCON instruction
74
Communication Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.5 Setting up Open User Communication via TCP, ISO-on-TCP, UDP and ISO
Addressing a UDP connection via the domain name of the communication partner For S7-1500 CPUs as of firmware version V2.0, you can address the recipient with its fully qualified domain name (FQDN) when sending data via UDP. With the instruction TUSEND at the parameter ADDR, you hereby reference a structure of the type TADDR_SEND_QDN. The receiver can return an IPv4 or an IPv6 address. With the TURCV instruction at the ADDR parameter, you therefore reference a structure of the TADDR_RCV_IP type. Only this structure can include both IP address types.
Note Network load In contrast to the TCP the UDP protocol does not work connection-oriented. For every edge at the block parameter REQ, the TUSEND or TURCV command performs queries of the DNS server. This can lead to high network load or load on the DNS server.
Additional information
You can find more information about the system data types TCON_QDN, TADDR_SEND_QDN and TADDR_RCV_IP in the STEP 7 online help.
How to set up a secure TCP connection via the domain name of the communication partner is described in the section Secure Open User Communication (Page 92).
6.5
Setting up Open User Communication via TCP, ISO-on-TCP, UDP
and ISO
Configuring a connection for the TSEND_C, TRCV_C or TCON instructions
Requirement: A TSEND_C, TRCV_C or TCON instruction is created in the programming editor.
1. Select a TCON, TSEND_C or TRCV_C block of Open User Communication in the program editor.
2. Open the "Properties > Configuration" tab in the inspector window.
Communication
Function Manual, 11/2019, A5E03735815-AH
75
Open User Communication 6.5 Setting up Open User Communication via TCP, ISO-on-TCP, UDP and ISO
3. Select the "Connection parameters" group. Until you select a connection partner, only the empty drop-down list for the partner end point is enabled. All other input options are disabled. The connection parameters already known are displayed: Name of the local end point Interface of the local end point IPv4 address of the local end point
Figure 6-4 Connection parameters for TSEND_C
76
Communication Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.5 Setting up Open User Communication via TCP, ISO-on-TCP, UDP and ISO
4. In the drop-down list box of the partner end point, select a connection partner. You can select an unspecified device or a CPU in the project as the communication partner. Certain connection parameters are then entered automatically. The following parameters are set: Name of the partner end point Interface of the partner end point IPv4 address of the partner end point If the connection partners are networked, the name of the subnet is displayed.
5. In the "Configuration type" drop-down list, select between using program blocks or configured connections.
Communication
Function Manual, 11/2019, A5E03735815-AH
77
Open User Communication 6.5 Setting up Open User Communication via TCP, ISO-on-TCP, UDP and ISO
6. Select an existing connection description DB in the "Connection data" drop-down list or for configured connections select an existing connection under "Connection name". You can also create a new connection description DB or a new configured connection. Later, you can still select other connection description DBs or configured connections or change the names of the connection description DBs in order to create new data blocks:
You can also see the selected data block at the interconnection of the CONNECT input parameter of the selected TCON, TSEND_C or TRCV_C instruction.
If you have already specified a connection description DB for the connection partner using the CONNECT parameter of the TCON, TSEND_C or TRCV_C instruction, you can either use this DB or create a new DB.
If you edit the name of the displayed data block in the drop-down list, a new data block with the changed name but with the same structure and content is generated and used for the connection.
Changed names of a data block must be unique in the context of the communication partner.
A connection description DB must have the structure TCON_Param, TCON_IP_v4 or TCON_IP_RFC, depending on CPU type and connection.
A data block cannot be selected for an unspecified partner.
Additional values are determined and entered after the selection or creation of the connection description DB or configured connection.
The following is valid for specified connection partners:
ISO-on-TCP connection type
Connection ID with default of 1
Active connection establishment by local partner
TSAP ID for S7-1200/1500: E0.01.49.53.4F.6F.6E.54.43.50.2D.31
The following is valid for unspecified connection partners:
TCP connection type
Partner port 2000
The following applies for a configured connection with a specified connection partner:
TCP connection type
Connection ID with default of 257
Active connection establishment by local partner
Partner port 2000
The following applies for a configured connection with an unspecified connection partner:
TCP connection type
Local port 2000
Communication
78
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.5 Setting up Open User Communication via TCP, ISO-on-TCP, UDP and ISO
7. Enter a connection ID as needed for the connection partner. No connection ID can be assigned to an unspecified partner.
Note You must enter a unique value for the connection ID at a known connection partner. The uniqueness of the connection ID is not checked by the connection parameter settings and there is no default value entered for the connection ID when you create a new connection.
8. Select the desired connection type in the relevant drop-down list. Default values are set for the address details depending on the connection type. You can choose between the following: TCP ISO-on-TCP UDP ISO (only with Configuration mode "Use configured connection") You can edit the input boxes in the address details. Depending on the selected protocol, you can edit the ports (for TCP and UDP) or the TSAPs (for ISO-on-TCP and ISO).
9. Use the "Active connection establishment" check box to set the connection establishment characteristics for TCP, ISO and ISO-on-TCP. You can decide which communication partner establishes the connection actively.
Changed values are checked immediately for input errors by the connection configuration and entered in the data block for the connection description.
Note Open User Communication between two communication partners can only work when the program section for the partner end point has been downloaded to the hardware. To achieve fully functional communication, make sure that you load not only the connection description of the local CPU on the device but also that of the partner CPU as well.
Communication
Function Manual, 11/2019, A5E03735815-AH
79
Open User Communication 6.5 Setting up Open User Communication via TCP, ISO-on-TCP, UDP and ISO
Configuring connections, e.g. for TSEND/TRCV
If you want to use the instructions for TSEND/TRCV for open communication, for example, you first need to configure a connection (e.g. TCP connection).
To configure a TCP connection, follow these steps:
1. Configure the communications partners in the network view of the Devices & networks editor of STEP 7.
2. Click the "Connections" button and select the "TCP connection" connection type from the drop-down list.
3. Using drag-and-drop, connect the communication partner with each other (via an interface or local end point). If the required S7 subnet does not yet exist, it is created automatically.
You can also set up a connection to unspecified partners.
4. Select the created connection in the network view.
5. Set the properties of the connection in the "Properties" tab in the "General" area, for example the name of the connection and the interfaces of the communications partner that will be used.
For connections to an unspecified partner, set the address of the partner. You can find the local ID (reference of the connection in the user program) in the "Local ID" area.
6. In the Project tree, select the "Program blocks" folder for one of the CPUs and open OB1 in the folder by double-clicking on it. The program editor opens.
7. Select the required instruction from the "Instructions" task card, "Communication" area, "Open user communication", for example TSEND and drag it to a network of OB1.
8. At the ID parameter of the instruction, assign the local ID of the configured connection to be used for the transmission of data.
9. Interconnect the "DATA" parameter of the TSEND instruction with the user data, for example in a data block.
10.Download the hardware configuration and user program to the CPU.
Based on the procedure described above, set up the connection on the partner CPU with the instruction for receiving, TRCV, and download it to the CPU.
Communication
80
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.5 Setting up Open User Communication via TCP, ISO-on-TCP, UDP and ISO Point to note with ISO connections with CP 1543-1 If you use the "ISO connection" connection type, you will need to select the "Use ISO protocol" check box in the properties of the CP so that addressing using MAC addresses will work.
Figure 6-5 Select CP 1543-1 ISO protocol
Additional information The STEP 7 online help describes: The instructions for open communication The connection parameters This FAQ (https://support.industry.siemens.com/cs/ww/en/view/109479564) describes how the instructions TSEND_C and TRCV_C behave in the S7-1500.
Communication
Function Manual, 11/2019, A5E03735815-AH
81
Open User Communication 6.6 Setting up communication over FDL
6.6
Setting up communication over FDL
Requirements
Configuration software: STEP 7 Professional V14
End point of the connection: CPU S7-1500 firmware version V2.0 or higher with communication module CM 1542-5 with firmware version V2.0
Setting up a configured FDL connection Proceed as follows to set up a configured FDL connection in STEP 7: 1. Create a TSEND_C instruction in the program editor. 2. Select the TSEND_C instruction and go to "Properties" > "General" > "Connection parameters" in the Inspector window. 3. Under End point, select the partner end point. Use one of the two partner end points below: CPU S7-1500 with CM 1542-5 Unspecified 4. Under Configuration type, select "Use configured connection". 5. Under Connection type, select "FDL". 6. Under Interface, select the following interfaces: Local: PROFIBUS interface of CM 1542-5 Specified partner: PROFIBUS interface of CM 1542-5 7. Under Connection data, select the setting <new>.
Communication
82
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.6 Setting up communication over FDL
The figure below shows a fully configured FDL connection in STEP 7.
Figure 6-6 Configuring the FDL connection
Setting up an FDL connection in the user program For communication via FDL, you need to create the data block of the TCON_FDL system data type yourself in each case, assign parameters and call it directly at the instruction. Follow these steps: 1. Create a global data block in the project tree. 2. In the global data block, define a tag of the data type TCON_FDL. The example below shows the global data block "FDL_connection" in which the tag "FDL_connection" of the data type TCON_FDL is defined.
Figure 6-7 Programming an FDL connection
3. Program the parameters of the FDL connection (e.g. the PROFIBUS addresses) in the tag of the data type TCON_FDL.
Communication
Function Manual, 11/2019, A5E03735815-AH
83
Open User Communication 6.7 Setting up communication with Modbus TCP
4. Create a TCON instruction in the program editor. 5. Interconnect the CONNECT parameter of the TCON instruction with the tag of the data
type TCON_FDL. In the example below, the CONNECT parameter of the TCON instruction is interconnected with the tag "FDL_Connection" (data type TCON_FDL).
Figure 6-8 Example: TCON Instruction for FDL connection
6.7
Setting up communication with Modbus TCP
Setting up a connection for Modbus TCP via the user program
The parameter assignment takes place in the program editor at the instruction MB_CLIENT or MB_SERVER.
Procedure for setting up communication using Modbus TCP
The MB_CLIENT instruction communicates as a Modbus TCP client via the TCP connection. You establish a connection between the client and the server with the instruction, send Modbus requests to the server and receive the corresponding Modbus responses. You also control the setup of the TCP connection with this instruction.
The MB_SERVER instruction communicates as a Modbus TCP server via the TCP connection. The instruction processes connection requests of a Modbus client, receives and processes Modbus requests and sends responses. You also control the setup of the TCP connection.
Requirement: The client can reach the server via IP communication in the network.
1. Configure an S7-1500 automation system with CPU in the network view of the Devices & networks editor of STEP 7.
2. In the Project tree, select the "Program blocks" folder and open OB1 in the folder by double-clicking on it. The program editor opens.
Communication
84
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.7 Setting up communication with Modbus TCP
3. Select the required instruction, for example MB_CLIENT, from the "Instructions" task card, "Communication" area, "Other", "MODBUS TCP" and drag it to a network of OB1.
4. Assign the parameters of the MB_CLIENT or MB_SERVER instruction. Observe the following rules: An IPv4 server address must be specified for each MB_CLIENT connection. Each MB_CLIENT or MB_SERVER connection must use a unique instance DB with one of the data structures TCON_IP_v4, TCON_QDN or TCON_Configured. Each connection requires a unique connection ID. The connection ID and instance DB belong together in pairs and must be unique for each connection.
Figure 6-9 MB_CLIENT
Figure 6-10 MB_SERVER
5. Download the hardware configuration and user program to the CPU.
Communication
Function Manual, 11/2019, A5E03735815-AH
85
Open User Communication 6.7 Setting up communication with Modbus TCP
Modbus TCP server as gateway to Modbus RTU
If you use a Modbus TCP server as a gateway to a Modbus RTU protocol, address the slave device in the serial network using the static parameter, MB_UNIT_ID. The MB_UNIT_ID parameter corresponds to the field of the slave address in the Modbus RTU protocol. The MB_UNIT_ID parameter in this case would forward the request to the correct Modbus RTU slave address.
You do not have to program the gateway function yourself.
You can find the MB_UNIT_ID parameter in the instance data block associated with MB_CLIENT instruction.
You can find more information on the MB_UNIT_ID parameter in the STEP 7 online help.
Reference
This FAQ (https://support.industry.siemens.com/cs/ww/en/view/94766380) describes how to program and configure the Modbus TCP communication between two S7-1500 CPUs.
This FAQ (https://support.industry.siemens.com/cs/ww/en/view/102020340) describes how to program and configure Modbus TCP communication between an S7-1500 CPU and an S7-1200 CPU.
Communication
86
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.8 Setting up communication via e-mail
6.8
Setting up communication via e-mail
Setting up a connection for e-mail via the user program For communication using e-mail, you need to create the data block of the relevant system data type yourself, assign parameters and call the instruction directly. This procedure is introduced below.
Procedure for setting up communication using e-mail A CPU can send e-mails. To send e-mails from the user program of the CPU, use the TMAIL_C instruction. Requirement: The SMTP server can be reached via the IPv4 network. 1. Configure an S7-1500 automation system with CPU in the network view of the Devices & networks editor of STEP 7. 2. Assign parameters to the instruction TMAIL_C, for example enter the subject of the e-mail in Subject. 3. In a global data block create a variable of the type TMAIL_v4, TMAIL_v6 (only CP 1543-1) or TMAIL_FQDN (only CP 1543-1). 4. Set the connecting parameters of the TCP connection in the variable in the "Start value" column. Enter the IPv4 address of the mail server, for example, for the "MailServerAddress" (for TMAIL_v4)
Note Connection parameter Interface ID Note that you can enter the value "0" for the interface ID with instruction version V5.0 or higher of the instruction TMAIL_C in the data type TMAIL_V4_SEC. In this case, the CPU itself searches for a suitable local CPU interface.
Interconnect the variable to the MAIL_ADDR_PARAM parameter of the TMAIL_C instruction. 5. Download the hardware configuration and user program to the CPU.
Additional information The STEP 7 online help describes: The system data types The instructions for open communication The connection parameters
Communication
Function Manual, 11/2019, A5E03735815-AH
87
Open User Communication 6.9 Setting up communication via FTP
6.9
Setting up communication via FTP
Setting up a connection for FTP via the user program For communication via FTP, you need to create the data block of the relevant system data type yourself, assign parameters and call the instruction directly. This procedure is introduced below.
FTP client and server functionality Files can be sent by a CPU to an FTP server and can be received from the FTP server. Communication with FTP is only possible for the S7-1500 using the CP 1543-1. The CP can be an FTP server, FTP client or both. FTP clients can also be third-party systems/PCs.
For the FTP server functionality, configure the CP accordingly in STEP 7.
You can use the FTP client functionality to implement, for example, the establishment and termination of an FTP connection, the transfer and deletion of files on the server. For the FTP client functionality, use the FTP_CMD instruction.
Communication
88
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.9 Setting up communication via FTP
Procedure for setting up FTP server functionality Requirement: The FTP server can be reached via the IPv4 network. 1. Configure an S7-1500 automation system with CPU and CP 1543-1 in the device view of the Devices & networks editor of STEP 7. At the same time, you need to select the option "Permit access with PUT/GET communication from remote partner (PLC, HMI, OPC, ...)" in the HW configuration of the S7-1500 CPU under the "Protection" area navigation in the section "Connection mechanisms". 2. Make the following settings in the properties of the CP under "FTP configuration": Select the "Use FTP server for S7 CPU data" check box. Assign the CPU, a data block and a file name under which the DB for FTP will be stored.
Figure 6-11 Setting up the FTP configuration
3. Download the hardware configuration to the CPU.
Communication
Function Manual, 11/2019, A5E03735815-AH
89
Open User Communication 6.9 Setting up communication via FTP
Procedure for setting up FTP client functionality Requirement: The FTP server can be reached via the IPv4 network. 1. Configure an S7-1500 automation system with CPU and CP 1543-1 in the device view of the Devices & networks editor of STEP 7. At the same time, you need to select the check box "Permit access with PUT/GET communication from remote partner (PLC, HMI, OPC, ...)" in the HW configuration of the S7-1500 CPU under the "Protection" area navigation in the section "Connection mechanisms". 2. Call the FTP_CMD instruction in the user program of the CPU. 3. Set the connection parameters for the FTP server in the FTP_CMD instruction. 4. Create a global DB and within this DB a tag of the type FTP_CONNECT_IPV4, FTP_CONNECT_IPV6 or FTP_CONNECT_NAME. 5. Interconnect the tag within the data block with the FTP_CMD instruction. 6. For the connection to the FTP server, specify the following in the DB: The user name, the password and the IP address for the FTP access in the relevant data type (FTP_CONNECT_IPV4, FTP_CONNECT_IPV6 or FTP_CONNECT_NAME) 7. Download the hardware configuration and user program to the CPU.
Application examples Application example: FTP communication with S7-1500 and CP 1543-1 You can find the application example on the Internet (https://support.industry.siemens.com/cs/ww/en/view/103550797). Application example: FTP client communication with S7-1200/1500 You can find the application example on the Internet (https://support.industry.siemens.com/cs/ww/en/view/81367009).
Additional information The STEP 7 online help describes: The system data types The instructions for open communication The connection parameters
Communication
90
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.10 Establishment and termination of communications relations
6.10
Establishment and termination of communications relations
Establishment and termination of communications
The table below shows the establishment and termination of communications as part of open communication.
Table 6- 5 Establishment and termination of communications
Setting up the connection With the user program
By configuring a connection
Establishing communication
Terminating communication
After downloading the user program to the CPUs:
· Using the TSEND_C/TRCV_C, TDISCON and T_RESET instructions
The passive communications partner sets up · When the CPU changes from RUN to
the local connection access by calling TSEND_C/TRCV_C or TCON. Calling
STOP mode
TSEND_C/TRCV_C or TCON on the active · With POWER OFF/POWER ON on a
partner starts connection establishment. If
CPU
the connection could be established, there is
positive feedback to the instructions in the
user program.
After you have terminated a connection using the instruction T_RESET, the connection is reestablished.
If the connection aborts, the active partner attempts to re-establish the connection. This applies only if the connection was successfully established beforehand with TCON.
After downloading the connection configura- By deleting the connection configuration in
tion and the user program to the CPUs.
STEP 7 and downloading the changed con-
figuration to the CPU.
Communication
Function Manual, 11/2019, A5E03735815-AH
91
Open User Communication 6.11 Secure Open User Communication
6.11
Secure Open User Communication
6.11.1
Secure OUC of an S7-1500 CPU as TLS client to an external PLC (TLS server)
The following section describes how you can set up Open User Communication via TCP from an S7-1500 CPU as TLS client to a TLS server.
Setting up a secure TCP connection from an S7-1500 CPU as TLS client to a TLS server S7-1500 CPUs as of firmware version V2.0 support secure communication with addressing via a Domain Name System (DNS).
For secure TCP communication over the domain name you need to create a data block with the TCON_QDN_SEC system data type yourself, assign parameters and call it directly at one of the instructions TSEND_C, TRCV_C or TCON.
Requirements:
Current date and time are set in the CPU.
Your network includes at least one DNS server.
You have configured at least one DNS server for the S7-1500 CPU.
TLS client and TLS server have all the required certificates.
To set up a secure TCP connection to a TLS server, follow these steps:
1. Create a global data block in the project tree.
2. Define a tag of the data type TCON_QDN_SEC in the global data block.
The example below shows the global data block "Data_block_1" in which the tag "DNS ConnectionSEC" of the data type TCON_QDN_SEC is defined.
Figure 6-12 Data type TCON_QDN_SEC
92
Communication Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.11 Secure Open User Communication
3. Set the connection parameters of the TCP connection in the "Start value" column. Enter the fully qualified domain name (FQDN) of the TLS server, for example, for "RemoteQDN".
4. Set the parameters for secure communication in the "Start value" column. "ActivateSecureConn": Activation of secure communication for this connection. If this parameter has the value FALSE, the subsequent security parameters are irrelevant. You can set up a non-secure TCP or UDP connection in this case. "ExtTLSCapabilities": If you enter the value 1, the client validates the subjectAlternateName in the X.509-V3 certificate of the server to verify the identity of the server. This validation is executed in the context of the instruction. "TLSServerCertRef": ID of the X.509-V3 certificate (usually a CA certificate) that is used by the TLS client to validate the TLS server authentication. If this parameter is 0, the TLS client uses all (CA) certificates currently loaded in the client certificate store to validate the server authentication.
Figure 6-13 Certificate handling from the perspective of the S7-1500 as a TLS client
"TLSClientCertRef": ID of the own X.509-V3 certificate.
Communication
Function Manual, 11/2019, A5E03735815-AH
93
Open User Communication 6.11 Secure Open User Communication
5. Create one of the instructions TSEND_C, TRCV_C or TCON in the program editor. 6. Interconnect the CONNECT parameter of one of the instructions TSEND_C, TRCV_C or
TCON with the tags of the data type TCON_QDN_SEC. In the example below, the CONNECT parameter of the TCON instruction is interconnected with the tag "DNS connectionSEC" (data type TCON_QDN_SEC).
Figure 6-14 TCON instruction
Additional information You can find more information on the TCON_QDN_SEC system data type in the STEP 7 online help. For additional information on secure communication, refer to the section Secure Communication (Page 34).
Communication
94
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.11 Secure Open User Communication
6.11.2
Secure OUC of an S7-1500 CPU as TLS server to an external PLC (TLS client)
The following section describes how you can set up Open User Communication via TCP from an S7-1500 CPU as TLS server to a TLS client.
Setting up a secure TCP connection via the domain name of the communication partner S7-1500 CPUs as of firmware version V2.0 support secure communication with addressing via a Domain Name System (DNS).
For secure TCP communication over the domain name you need to create a data block with the TCON_QDN_SEC system data type yourself, assign parameters and call it directly at one of the instructions TSEND_C, TRCV_C or TCON.
Requirements:
Current date and time are set in the CPU.
Your network includes at least one DNS server.
You have configured at least one DNS server for the S7-1500 CPU.
TLS client and TLS server have all the required certificates.
To set up a secure TCP connection to a TLS client, follow these steps:
1. Create a global data block in the project tree.
2. Define a tag of the data type TCON_QDN_SEC in the global data block.
The example below shows the global data block "Data_block_1" in which the tag "DNS ConnectionSEC" of the data type TCON_FDL_SEC is defined.
Figure 6-15 TCON_QDN_SEC_Server
3. Set the connection parameters of the TCP connection in the "Start value" column. Enter, for example, the local ID of the TCP connection for "ID".
Communication
Function Manual, 11/2019, A5E03735815-AH
95
Open User Communication 6.11 Secure Open User Communication
4. Set the parameters for secure communication in the "Start value" column. "ActivateSecureConn": Activation of secure communication for this connection. If this parameter has the value FALSE, the subsequent security parameters are irrelevant. You can set up a non-secure TCP or UDP connection in this case. "TLSServerReqClientCert": Request for an X.509-V3 certificate from the TLS client. "TLSServerCertRef": ID of the own X.509-V3 certificate.
Figure 6-16 Certificate handling from the perspective of the S7-1500 as TLS server
"TLSClientCertRef": ID of the X.509-V3 certificate (or a group of X.509-V3 certificates) that is used by the TLS server to validate TLS client authentication. If this parameter is 0, the TLS server uses all (CA) certificates currently loaded in the server certificate store to validate the client authentication.
5. Create one of the instructions TSEND_C, TRCV_C or TCON in the program editor. 6. Interconnect the CONNECT parameter of one of the instructions TSEND_C, TRCV_C or
TCON with the tags of the data type TCON_QDN_SEC. In the example below, the CONNECT parameter of the TCON instruction is interconnected with the tag "DNS connectionSEC" (data type TCON_QDN_SEC).
Figure 6-17 TCON instruction
96
Communication Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.11 Secure Open User Communication
Additional information You can find more information about the system data types TCON_QDN_SEC in the STEP 7 online help. For additional information on secure communication, refer to the section Secure Communication (Page 34).
6.11.3
Secure OUC between two S7-1500 CPUs
The following section describes how you can set Secure Open User Communication via TCP between two S7-1500 CPUs. In the process one S7-1500 CPU acts as TLS client (active establishing of the connection) and the other S7-1500 CPU as TLS server (passive establishing of the connection).
Setting up a secure TCP connection between two S7-1500 CPUs
For secure TCP communication between two S7-1500 CPUs you need to create a data block with the TCON_IP_V4_SEC system data type yourself in every CPU, assign parameters and call it directly at one of the instructions TSEND_C, TRCV_C or TCON.
Requirements:
Current date and time are set in the CPU.
Both S7-1500 CPUs have at least firmware version V2.0
TLS client and TLS server have all the required certificates.
Figure 6-18 Certificate handling for Secure OUC between two S7-1500 CPUs
Communication
Function Manual, 11/2019, A5E03735815-AH
97
Open User Communication 6.11 Secure Open User Communication
Settings at the TLS client To set up a secure TCP connection in the TLS client, follow these steps: 1. Create a global data block in the project tree. 2. Define a tag of the data type TCON_IP_4_SEC in the global data block.
The example below shows the global data block "Data_block_1" in which the tag "SEC connection 1 TLS-Client" of the data type TCON_IP_V4_SEC is defined.
Figure 6-19 IP_V4_SEC_Client
3. Set the connection parameters of the TCP connection in the "Start value" column. For example, enter the IPv4 address of the TLS server for "RemoteAddress".
Note Connection parameter Interface ID Note that you can enter the value "0" for the interface ID in the data type TCON_IP_V4_SEC. In this case, the CPU itself searches for a suitable local CPU interface.
Communication
98
Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.11 Secure Open User Communication
4. Set the parameters for secure communication in the "Start value" column. "ActivateSecureConn": Activation of secure communication for this connection. If this parameter has the value FALSE, the subsequent security parameters are irrelevant. You can set up a non-secure TCP or UDP connection in this case. "TLSServerCertRef": Enter the value 2 (reference to the CA certificate of the TIA Portal project (SHA256) or the value 1 (reference to the CA certificate of the TIA Portal project (SHA1)). If you use a different CA certificate, enter the corresponding ID from the certificate manager of the global security settings. "TLSClientCertRef": ID of the own X.509-V3 certificate.
5. Create one of the instructions TSEND_C, TRCV_C or TCON in the program editor. 6. Interconnect the CONNECT parameter of one of the instructions TSEND_C, TRCV_C or
TCON with the tags of the data type TCON_IP_V4_SEC.
Settings at the TLS server To set up a secure TCP connection in the TLS server, follow these steps: 1. Create a global data block in the project tree. 2. Define a tag of the data type TCON_IP_4_SEC in the global data block.
The example below shows the global data block "Data_block_1" in which the tag "SEC connection 1 TLS-Server" of the data type TCON_IP_V4_SEC is defined.
Figure 6-20 IP_V4_SEC_Server
3. Set the connection parameters of the TCP connection in the "Start value" column. For example, enter the IPv4 address of the TLS client for "RemoteAddress".
Communication
Function Manual, 11/2019, A5E03735815-AH
99
Open User Communication 6.11 Secure Open User Communication
4. Set the parameters for secure communication in the "Start value" column.
"ActivateSecureConn": Activation of secure communication for this connection. If this parameter has the value FALSE, the subsequent security parameters are irrelevant. You can set up a non-secure TCP or UDP connection in this case.
"TLSServerReqClientCert ": Request for an X.509-V3 certificate from the TLS client. Enter the value "true".
"TLSServerCertRef": ID of the own X.509-V3 certificate.
"TLSClientCertRef": Enter the value 2 (reference to the CA certificate of the TIA Portal project (SHA256) or the value 1 (reference to the CA certificate of the TIA Portal project (SHA1)). If you use a different CA certificate, enter the corresponding ID from the certificate manager of the global security settings.
5. Create one of the instructions TSEND_C, TRCV_C or TCON in the program editor.
6. Interconnect the CONNECT parameter of one of the instructions TSEND_C, TRCV_C or TCON with the tags of the data type TCON_IP_V4_SEC.
In the example below, the CONNECT parameter of the TSEND_C instruction is interconnected with the "SEC connection 1 TLS client" tags (data type TCON_IP_4_SEC).
Figure 6-21 TSEND_C
Additional information You can find more information about the system data types TCON_IP_4_SEC in the STEP 7 online help. For additional information on secure communication, refer to the section Secure Communication (Page 34).
100
Communication Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.11 Secure Open User Communication
6.11.4
Secure OUC via CP interface
The following sections describes the particular points to be taken into consideration in the case of Secure Open User Communication via a CP interface. At least one station is an S7-1500 station with the following modules:
S7-1500 CPU as of firmware version V2.0 (with the exception of S7-1500 Software Controller)
CP 1543-1 as of firmware version V2.0 or CP 1543SP-1 as firmware version V1.0
The CP acts in an S7-1500 station as a TLS client (active connection establishment) or a TLS server (passive connection establishment).
The fundamental procedure and the concept for using secure communication via a CP interface is similar to that of secure communication via the interfaces of the S7-1500 CPUs. Essentially, you have to assign the certificates to the CPU in the role of a TLS server or TLS client and not to the CPU. Other rules and procedures therefore apply. These are described below.
Handling certificates for CPs
The following applies in general: You have to be logged on at the certificate manager in the global security settings. The generation of self-signed certificates also requires logon for the global security settings. You have to have sufficient rights as a user (administrator or user with the "Standard" role with the right to "Configure security").
The starting point for the generation or assignment of certificates at the CP is the section "Security > Security properties". In this section, you log on for the global security settings.
Procedure:
1. In the network view of STEP 7, mark the CP and select the section "Security > Security properties" in the Inspector window.
2. Click on the "User logon" button.
3. Log on using your user name and password.
4. Enable the "Activate security functions" option.
The security properties are initialized.
5. Click in the first line of the "Device certificates" table to generate a new certificate or select an existing device certificate.
6. If the communication partner is also an S7-1500 station, you also have to assign a device certificate to the communication partner with STEP 7 as described here or for the S71500 CPU.
Communication Function Manual, 11/2019, A5E03735815-AH
101
Open User Communication 6.11 Secure Open User Communication
Example: Setting up a secure TCP connection between two S7-1500 CPUs via CP interfaces
For secure TCP communication between two S7-1500 CPs you need to create a data block with the TCON_IP_V4_SEC system data type yourself in every CPU, assign parameters and call it directly at one of the instructions TSEND_C, TRCV_C or TCON.
Requirements:
Both S7 1500 CPUs have at least firmware version V2.0. If you use the CP 1543SP-1: Firmware version as of V1.0.
Both CPs (for example CP 1543-1) must have at least firmware version V2.0
TLS client and TLS server have all the required certificates.
A device certificate (end-entity certificate) for the CP must be generated and be located in the certificate memory of the CP. If a communication partner is an external device (for example an MES or ERP system), a device certificate also has to exist for this device.
The root certificate (CA certificate) with which the device certificate of the communication partner is signed must also be located in the certificate memory of the CP or in the certificate memory of the external device. If you use intermediate certificates, you have to ensure that the complete certificate path exists in the validating device. A device uses these certificates to validate the device certificate of the communication partner.
The communication partner must always be addressed via its IPv4 address, not via its domain name.
The following figure shows the different certificates in the devices for the case that both communication partners communicate via a CP 1543-1. In addition, the figure shows the transfer of the device certificates during establishment of the connection ("Hello").
Figure 6-22 Certificate handling in secure OUC between two S7-1500 CPUs via CP interfaces.
102
Communication Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.11 Secure Open User Communication
Settings at the TLS client To set up a secure TCP connection in the TLS client, follow these steps: 1. Create a global data block in the project tree. 2. Define a tag of the data type TCON_IP_4_SEC in the global data block. To do so, enter
the string "TCON_IP_V4_SEC" in the "Data type" field. The example below shows the global data block "Data_block_1" in which the tag "SEC connection 1 TLS-Client" of the data type TCON_IP_V4_SEC is defined. The Interface ID has the value of the HW identifier of the IE interface of the local CP (TLS client).
Figure 6-23 IP_V4_SEC_Client
3. Set the connection parameters of the TCP connection in the "Start value" column. For example, enter the IPv4 address of the TLS server for "RemoteAddress".
4. Set the parameters for secure communication in the "Start value" column. "ActivateSecureConn": Activation of secure communication for this connection. If this parameter has the value FALSE, the subsequent security parameters are irrelevant. You can set up a non-secure TCP or UDP connection in this case. "TLSServerCertRef": Enter the value 2 (reference to the CA certificate of the TIA Portal project (SHA256) or the value 1 (reference to the CA certificate of the TIA Portal project (SHA1)). If you use a different CA certificate, enter the corresponding ID from the certificate manager of the global security settings. "TLSClientCertRef": ID of the own X.509-V3 certificate.
Communication Function Manual, 11/2019, A5E03735815-AH
103
Open User Communication 6.11 Secure Open User Communication
5. Create one of the instructions TSEND_C, TRCV_C or TCON in the program editor. 6. Interconnect the CONNECT parameter of one of the instructions TSEND_C, TRCV_C or
TCON with the tags of the data type TCON_IP_V4_SEC.
Settings at the TLS server To set up a secure TCP connection in the TLS server, follow these steps: 1. Create a global data block in the project tree. 2. Define a tag of the data type TCON_IP_4_SEC in the global data block.
The example below shows the global data block "Data_block_1" in which the tag "SEC connection 1 TLS-Server" of the data type TCON_IP_V4_SEC is defined. The interface ID has the value of the HW identifier of the IE interface of the local CP (TLS server).
Figure 6-24 IP_V4_SEC_Server
3. Set the connection parameters of the TCP connection in the "Start value" column. For example, enter the IPv4 address of the TLS client for "RemoteAddress".
104
Communication Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.11 Secure Open User Communication
4. Set the parameters for secure communication in the "Start value" column.
"ActivateSecureConn": Activation of secure communication for this connection. If this parameter has the value FALSE, the subsequent security parameters are irrelevant. You can set up a non-secure TCP or UDP connection in this case.
"TLSServerReqClientCert ": Request for an X.509-V3 certificate from the TLS client. Enter the value "true".
"TLSServerCertRef": ID of the own X.509-V3 certificate.
"TLSClientCertRef": Enter the value 2 (reference to the CA certificate of the TIA Portal project (SHA256) or the value 1 (reference to the CA certificate of the TIA Portal project (SHA1)). If you use a different CA certificate, enter the corresponding ID from the certificate manager of the global security settings.
5. Create one of the instructions TSEND_C, TRCV_C or TCON in the program editor.
6. Interconnect the CONNECT parameter of the instruction TSEND_C, TRCV_C or TCON with the tags of the data type TCON_IP_V4_SEC.
Upload device as new station
When you upload a configuration with certificates and configured secure Open User Communication as a new station into your STEP 7 project, the certificates of the CP are not uploaded, in contrast to the certificates of the CPU. After the device has been loaded as a new station, no more certificates are contained in the corresponding tables of the CPs for the device certificates.
You have to perform configuration of certificates again after the upload. Otherwise, renewed loading of the configuration results in the certificates that originally exist in the CP being deleted so that secure communication does not function.
Secure OUC connections via CPU and CP interfaces - similarities
Connection resources: No differences between OUC and secure OUC. A programmed secure OUC connection uses a connection resource just like an OUC connection, irrespective of which IE/PROFINET interface communicates with the station.
Connection diagnostics: No differences between OUC and secure OUC connection diagnostics.
Loading of projects with secure OUC connections into the CPU: Only possible in STOP of the CPU, if certificates are loaded as well. Recommendation: Load to device > Hardware and software. Reason: Ensuring the consistency between the program with secure OUC, hardware configuration and certificates. Certificates are loaded with the hardware configuration - therefore loading requires a stop of the CPU. The reloading of blocks that utilize further secure OUC connections is only possible in RUN if the certificates required for this purpose are already located on the module.
Communication Function Manual, 11/2019, A5E03735815-AH
105
Open User Communication 6.11 Secure Open User Communication
6.11.5
Secure OUC with Modbus TCP
For secure Modbus TCP connection you need to create a data block with one of the system data types TCON_IP_V4_SEC or TCON_QDN_SEC yourself, assign parameters and call it directly at the MB_Server or MB_CLIENT instruction.
Requirements:
S7-1500 CPU CPU firmware version V2.5 or higher
The Modbus client (TLS client) can reach the Modbus server (TLS server) over IP communication in the network.
TLS client and TLS server have all the required certificates.
Example of setting up a secure Modbus TCP connection to a Modbus TCP server
The following section describes how you can set up a Secure Open User Communication over Modbus TCP from a Modbus TCP client to a Modbus TCP server.
To set up a secure connection from a Modus TCP client (TLS client) to a Modbus TCP server (TLS server) and set up the IPv4 address of the mail server, follow these steps:
1. Create a global data block in the project tree.
2. Define a tag of the data type TCON_IP_V4 SEC in the global data block.
Figure 6-25 TCON_IP_V4_SEC
3. Set the connection parameters of the TCP connection in the "Start value" column. Enter the IPv4 address of the mail server, for example, for the "MailServerAddress".
106
Communication Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.11 Secure Open User Communication
4. Set the parameters for secure communication in the "Start value" column. Enter the certificate ID of the CA certificate of the communication partner, for example, for "TLSServerCertRef".
"ActivateSecureConn": Activation of secure communication for this connection. If this parameter has the value FALSE, the subsequent security parameters are irrelevant. In this case you can set up an unsecured Modbus TCP connection.
"TLSServerCertRef": Reference to the X.509 V3 (CA) certificate of the Modbus TCP server, which is used by the TLS client to validate the authentication of the Modbus TCP server.
5. Create an MB_CLIENT instruction in the program editor.
6. Interconnect the CONNECT parameter of the MB_Client instruction with the tags of the data type TCON_IP_4_SEC.
6.11.6
Secure OUC via e-mail
Setting up a secure connection to a mail server over the CPU interface
For secure communication to a mail server you need to create a data block with one of the system data types TMAIL_V4_SEC, TMAIL_QDN_SEC yourself, assign parameters and call it directly at the TMAIL_C instruction.
Requirements:
TMAIL_C instruction version V5.0 or higher STEP 7 V15 and higher S7-1500 CPU V2.5 and higher You have assigned all the CA certificates of the mail server (TLS server) to the CPU (TLS
client) and have downloaded the configuration to the CPU. Current date and time are set in the CPU.
Communication Function Manual, 11/2019, A5E03735815-AH
107
Open User Communication 6.11 Secure Open User Communication
Process for establishing a secure connection to the mail server
You can choose between two processes for establishing the secure connection to the mail server:
SMTPS: The client attempts to immediately establish a TLS connection to the mail server ("handshake" process). If the mail server does not support TLS, then no connection is established.
STARTTLS: Client establishes a TCP connection to the mail server. The client sends a request to "upgrade" the existing connection to a secure TLC connection over the TCP connection. If the mail server supports TLS, the client sends the command to establish a secure connection. The mail server uses the SMTP command "STARTTLS" to do this. The client then establishes a secure connection to the mail server. Advantage: If the mail server does not support TLS, client and mail server can communicate unsecured with each other.
You use the "Remote Port" setting in the data types at the block parameter "MAIL_ADDR_PARAM" to define which process is used for the communication.
Table 6- 6 Port numbers for the SMTPS and STARTTLS processes
Process SMTPS: STARTTLS
Port 4651 Any (465)2
1 The instruction TMAIL_C uses SMTPS only for Port 465. For all other ports STARTTLS is used.
2 According to RFC, mail servers use Ports 25 and 587 for secure connections with STARTTLS. The use of other port numbers for SMTP is not RFC-compliant, successful communication with such a mail server is not guaranteed.
108
Communication Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.11 Secure Open User Communication
Example: Setting up a secure connection to a mail server over IPv4 The following section describes how to set up a secure connection to an IPv4 mail server with the TMAIL_C communication instruction. To set up a secure connection via the IP4 address of the mail server, follow these steps: 1. Create a global data block in the project tree. 2. Define a tag of the data type TMAIL_V4_SEC in the global data block. The example below shows the global data block "MailConnDB" in which the tag "MailConnectionSEC" of the data type TMAIL_V4_SEC is defined.
Figure 6-26 Data type TMAIL_V4_SEC
3. Set the connection parameters of the TCP connection in the "Start value" column. Enter the IPv4 address of the mail server, for example, for the "MailServerAddress".
Note Connection parameter Interface ID Note that as of instruction version V5.0 of TMAIL_C instruction in the TMAIL_V4_SEC data type, you need to enter the value "0" for the Interface ID. In this case, the CPU itself searches for a suitable local CPU interface.
Communication Function Manual, 11/2019, A5E03735815-AH
109
Open User Communication 6.11 Secure Open User Communication
4. Set the parameters for secure communication in the "Start value" column. Enter the certificate ID of the CA certificate of the communication partner, for example, for "TLSServerCertRef".
"ActivateSecureConn": Activation of secure communication for this connection. If this parameter has the value FALSE, the subsequent security parameters are irrelevant. You can set up a non-secure TCP or UDP connection in this case.
"TLSServerCertRef": Reference to the X.509 V3 (CA) certificate of the mail server, which is used by the TLS client to validate the authentication of the mail server.
5. Create a TMAIL_C instruction in the program editor.
6. Interconnect the MAIL_ADDR_PARAM parameter of the TMAIL_C instruction with the tag of the data type TMAIL_V4_SEC.
In the following example the MAIL_ADDR_PARAM parameter of the TMAIL_C instruction is interconnected with the tag "MailConnectionSEC" (data type TMAIL_V4_SEC).
Figure 6-27 TMAIL_C instruction
Setting up a secure connection to a mail server over the interface of a communication module For secure communication to a mail server over a communication module, you need to create a data block with one of the system data types TMAIL_V4_SEC, TMAIL_QDN_SEC or TMAIL_V6_SEC yourself, assign parameters and call it directly at the TMAIL_C instruction. Requirements: TMAIL_C instruction with version V4.0 S7-1500 CPU as of firmware version V2.0 with communication module CP 1543-1 as of firmware version V2.0 ET 200SP CPU as of firmware version V2.0 with communication module CP 1542SP-1 (IRC) as of firmware version V1.0 You have assigned all the CA certificates of the mail server (TLS server) to the CP (TLS client) and have downloaded the configuration to the CPU. Current date and time are set in the CPU. The STEP 7 online help describes how to set up a secure connection to a mail server over the interface of a communication module.
110
Communication Function Manual, 11/2019, A5E03735815-AH
Open User Communication 6.11 Secure Open User Communication
Application example This application example (https://support.industry.siemens.com/cs/ww/en/view/46817803) show how you can use the CP of an S7-1500 or S7-1200 station to set up a secure connection to an email server and send an email with the default application "TMAIL_C" from the S7 CPU.
Additional information You can find more information about the system data types TMail_V4_SEC and TMAIL_QDN_SEC in the STEP 7 online help. For additional information on secure communication, refer to the section Secure Communication (Page 34).
Communication Function Manual, 11/2019, A5E03735815-AH
111
S7 communication
7
Characteristics of S7 communication S7 communication as homogeneous SIMATIC communication is characterized by vendorspecific communication between SIMATIC CPUs (not an open standard). S7 communication is used for migration and for connecting to existing systems (S7-300, S7-400). For data transfer between two S7-1500 automation systems, we recommend that you use open communication (see section Open User Communication (Page 65)).
Properties of S7 communication Using S7 communication, the CPU exchanges data with another CPU. Once the user has received the data at the receiver end, the reception data is automatically acknowledged to the sending CPU. The data is exchanged via configured S7 connections. S7 connections can be configured at one end or at both ends. S7 communication is possible via: Integrated PROFINET or PROFIBUS DP interface of a CPU Interface of a CP/CM
S7 connections configured at one end For an S7 connection configured at one end, the configuration for this connection takes place in only one communication partner and is only downloaded to it. A one-sided S7 connection can be configured to a CPU that is only a server of an S7 connection (e.g. CPU 315-2 DP). The CPU is configured and the address parameters and interfaces are thus known. In addition, a one-sided S7 connection can be configured to a partner who is not in the project and whose address parameters and interface and therefore are not known. You need to enter the address; it is not checked by STEP 7. The partner is initially unspecified (no partner address is registered when you create the S7 connection). Once you enter the address, it is "unknown" (i.e. it is named, but the project is unknown). This makes it possible to use S7 connections beyond the boundaries of a project. The communication partner is unknown to the local project (unspecified) and is configured in another STEP 7 or third-party project.
S7 connections configured at both ends When an S7 connection is configured at both ends, the configuration and download of the configured S7 connection parameters takes place in both communication partners.
112
Communication Function Manual, 11/2019, A5E03735815-AH
S7 communication
Instructions for S7 communication For S7 communication with S7-1500, the following instructions can be used:
PUT/GET
You write data to a remote CPU with the PUT instruction. You can use the GET instruction to read data from a remote CPU. The PUT and GET instructions and are onesided instructions, i.e. you need only an instruction in one communication partner. You can can easily set up the PUT and GET instructions via the connection configuration.
Note Data blocks for PUT/GET instructions
When using the PUT/GET instructions, you can only use data blocks with absolute addressing. Symbolic addressing of data blocks is not possible.
You must also enable this service for protection in the CPU configuration in the "Protection" area.
This FAQ (https://support.industry.siemens.com/cs/ww/en/view/82212115) provides information about how to configure and program an S7 instruction and the GET and PUT communication instructions for data exchange between two S7-1500 CPUs.
BSEND/BRCV
The BSEND instruction sends data to a remote partner instruction of the type BRCV. The BRCV instruction receives data from a remote partner instruction of the type BSEND. You use the S7 communication via the BSEND/BRCV instruction pair for secure transmission of data.
USEND/URCV
The USEND instruction sends data to a remote partner instruction of the type URCV. The URCV instruction receives data from a remote partner instruction of the type USEND. You use the S7 communication via the USEND/URCV instruction pair for fast, non-secure transmission of data regardless of the timing of the processing by the communications partner; for example for operating and maintenance messages.
Communication Function Manual, 11/2019, A5E03735815-AH
113
S7 communication
S7 communication via PROFIBUS DP interface in slave mode You can find the "Test, commissioning, routing" check box in STEP 7 in the properties of the PROFIBUS DP interface of communications modules (e.g. CM 1542-5). Using this check box, you decide whether the PROFIBUS DP interface of the DP slave is an active or passive device on PROFIBUS. Check box selected: The slave is an active device on PROFIBUS. Check box cleared: The DP slave is a passive device on PROFIBUS. You can only set up S7 connections configured at one end for this DP slave.
Figure 7-1 "Test, commissioning, routing" check box
Configuring S7 connections for PUT/GET instructions You can create S7 connections and assign the parameters for these in the connection parameter assignment of the PUT/GET instructions. Changed values are checked immediately by the connection parameter assignment for input errors. Requirement: A PUT or GET instruction is created in the programming editor. To configure an S7 connection using PUT/GET instructions, follow these steps: 1. In the program editor, select the call of the PUT or GET instruction. 2. Open the "Properties > Configuration" tab in the inspector window.
114
Communication Function Manual, 11/2019, A5E03735815-AH
S7 communication
3. Select the "Connection parameters" group. Until you select a connection partner, only the empty drop-down list for the partner end point is enabled. All other input options are disabled. The connection parameters already known are displayed: Name of the local end point Interface of the local end point IPv4 address of the local end point
Figure 7-2 Connection configuration for PUT instruction
Communication Function Manual, 11/2019, A5E03735815-AH
115
S7 communication
4. In the drop-down list box of the partner end point, select a connection partner. You can select an unspecified device or a CPU in the project as the communication partner.
The following parameters are automatically entered as soon as you have selected the connection partner:
Name of the partner end point
Interface of the partner end point. If several interfaces are available, you can change the interface as required.
Interface type of the partner end point
Subnet name of both end points
IPv4 address of the partner end point
Name of the connection which is used for the communication.
5. If required, change the connection name in the "Connection name" input box. If you want to create a new connection or edit an existing connection, click on the "Select connection" button on the right side next to the input box for the connection name.
Note
The PUT and GET instructions between two communication partners can only run if both the hardware configuration and the program part for the partner end point have been loaded into the hardware. To achieve fully functional communication, make sure that you load not only the connection description of the local CPU on the device but also that of the partner CPU as well.
Configuring S7 connections for e.g. BSEND/BRCV
If you want to use the instructions for BSEND/BRCV for S7 communication, for example, you first need to configure an S7 connection.
To configure a S7 connection, follow these steps:
1. Configure the communications partners in the network view of the Devices & networks editor of STEP 7.
2. Select the "Connections" button and the "S7 connection" entry from the drop-down list.
3. Using drag-and-drop, connect the communication partner with each other (via an interface or local end point). If the required S7 subnet does not yet exist, it is created automatically.
You can also set up a connection to unspecified partners.
4. In the "Connections" tab, select the row of the S7 connection.
5. Set the properties of the S7 connection in the "Properties" tab in the "General" area, for example the name of the connection and the interfaces of the communications partner that will be used.
For S7 connections to an unspecified partner, set the address of the partner. You can find the local ID (reference of the S7 connection in the user program) in the "Local ID" area.
116
Communication Function Manual, 11/2019, A5E03735815-AH
S7 communication
6. In the Project tree, select the "Program blocks" folder for one of the CPUs and open OB1 in the folder by double-clicking on it. The program editor opens.
7. In the program editor, call the relevant instructions for S7 communication in the user program of the communication partner (configured at one end) or in the user programs of the communication partners (configured at both ends). Select the BSEND and BRCV instructions from the "Communication" area of the "Instructions" task card, for example, and drag them to a network of OB1.
8. At the ID parameter of the instruction, assign the local ID of the configured connection to be used for the transmission of data.
9. Assign the parameters for the instructions indicating which data will be written to where and which data will be read from where.
10.Download the hardware configuration and user program to the CPU(s).
S7 communication via CP 1543-1 If you set up S7 communication via the Industrial Ethernet interface of the CP 1543-1, you can select the transport protocol for data transfer in the properties of the S7 connection under "General": "TCP/IP" check box selected (default): ISO-on-TCP (RFC 1006): for S7 communication between S7-1500 CPUs "TCP/IP" check box cleared: ISO protocol (ISO/IEC 8073): Addressing using MAC addresses
Figure 7-3 Selecting the CP 1543-1 transport protocol
Communication Function Manual, 11/2019, A5E03735815-AH
117
S7 communication
Procedure for setting up an S7 connection via different S7 subnets You have the option of using an S7 connection over multiple S7 subnets (PROFIBUS, PROFINET/Industrial Ethernet) (S7 routing (Page 289)). 1. Configure the communications partners in the network view of the Devices & networks editor of STEP 7. 2. Select the "Network" button. 3. Connect the relevant interfaces with the S7 subnets (PROFIBUS, PROFINET/Industrial Ethernet) using drag-and-drop.
118
Communication Function Manual, 11/2019, A5E03735815-AH
S7 communication
4. Select the "Connections" button and the "S7 connection" entry from the drop-down list. 5. Using drag-and-drop in our example, connect PLC_1 in the left S7 subnet (PROFIBUS) to
PLC_3 in the right S7 subnet (PROFINET). The S7 connection between CPU 1 and CPU 3 is configured.
Figure 7-4 S7 connections via different subnets
Communication Function Manual, 11/2019, A5E03735815-AH
119
S7 communication
ET 200SP Open Controller as router for S7 connections
If you assign the "PROFINET onboard [X2]" interface to the CPU 1515SP PC (F) of the SIMATIC PC station, the CPU 1515SP PC (F) can be used as a router for S7 connections. If you use the CP interface for "None, or a different Windows setting", you cannot use the Open Controller as a router for routed S7 connections.
An existing S7 connection routed by the CPU 1515SP PC (F) becomes invalid if the assignment of the interface of the CPU 1515SP PC (F) is changed from "SIMATIC PC station" to "None, or a different Windows setting". Since the PLC now no longer handles routing functions for this connection, when the CPU 1515SP PC (F) is compiled, no message relating to the invalid connection is displayed. The invalid routed S7 connection is displayed only when the end points of the connection are compiled.
The interfaces required for routed S7 connections must remain explicitly assigned on the CPU 1515SP PC (F) . You can edit the assignment of the interface of the CPU 1515SP PC (F) in the properties under "PROFINET onboard [X2] > Interface assignment".
Figure 7-5 S7 routing PC station
Additional information You can find detailed information on configuring S7 connections and how to use the instructions for S7 communication in the user program in the STEP 7 online help.
120
Communication Function Manual, 11/2019, A5E03735815-AH
Point-to-point link
8
Functionality
A point-to-point connection for S7-1500, ET 200MP and ET 200SP is established via communications modules (CMs) with serial interfaces (RS232, RS422 or RS485):
S7-1500/ET 200MP:
CM PtP RS232 BA
CM PtP RS422/485 BA
CM PtP RS232 HF
CM PtP RS422/485 HF
ET 200SP:
CM PtP
The bidirectional data exchange via a point-to-point connection works between communications modules or third-party systems or devices capable of communication. At least 2 communication partners are required for communication ("point-to-point"). With RS422 and RS485, more than two communications partners are possible.
Protocols for communication via a point-to-point connection Freeport protocol (also called ASCII protocol) Procedure 3964(R) Modbus protocol in RTU format (RTU: Remote Terminal Unit) USS protocol (universal serial interface protocol) The protocols use different layers according to the ISO/OSI reference model: Freeport: Uses layer 1 (physical layer) 3964 (R), USS and Modbus: Use layer 1 and 2 (physical layer and data link layer; therefore greater transmission reliability than with Freeport). USS and Modbus use additionally layer 4.
Properties of the Freeport protocol
The recipient recognizes the end of the data transfer by means of a selectable end criterion (e.g. character delay time elapsed, receipt of end character, receipt of a fixed amount of data).
The sender cannot recognize whether the sent data arrived free of errors at the recipient.
Communication Function Manual, 11/2019, A5E03735815-AH
121
Point-to-point link
Properties of procedure 3964 (R) When the data is sent, control characters are added (start, end and block check characters). Make sure that these control characters are not included as data in the frame. Connection establishment and termination makes use of control characters. If transfer errors occur, data transfer is automatically repeated.
Data exchange using Freeport or 3964 (R) communication The data to be sent is stored in the user program of the corresponding CPU in data blocks (send buffer). A receive buffer is available on the communications module for the received data. Check the properties of the receive buffer and adapt them if necessary. You must create a data block for receiving in the CPU. In the user program of the CPU, the "Send_P2P" and "Receive_P2P" instructions handle the data transfer between the CPU and CM.
Procedure for setting up Freeport or 3964 (R) communication 1. Configure an S7-1500 configuration with CPU and CM in the device view of the hardware and network editor of STEP 7. 2. Select the interface of the CM in the device view of STEP 7. 3. Assign the parameters of the interface (for example connection communication, configuration of message sending) in the Inspector window of STEP 7 under "Properties" > "General". 4. Select the "Send_P2P" or "Receive_P2P" instruction in the "Instructions" task card under "Communication" > "Communications processor" and drag-and-drop the instruction into the user program (for example into a FB). 5. Assign the parameters for the instructions according to your configuration. 6. Download the hardware configuration and user program to the CPU.
Otherwise: Dynamic parameter assignment of the communications module In certain types of application it is an advantage to set up communication dynamically; in other words, program-controlled by a specific application. Typical applications for this, could be, for example manufacturers of serial machines. To make the user interfaces as convenient as possible for their customers, these manufacturers adapt the communications services to the particular operator entries.
122
Communication Function Manual, 11/2019, A5E03735815-AH
Point-to-point link
Instructions for Freeport communication There are 3 instructions available for the dynamic configuration in the user program for Freeport communication. The following applies to all 3 instructions: the previously valid configuration data is overwritten but not stored permanently in the target system. The "Port_Config" instruction is used for the program-controlled configuration of the relevant port of the communications module. The "Send_Config" instruction is used for the dynamic configuration, for example of time intervals and breaks in transmission (serial transmission parameters) for the relevant port. The "Receive_Config" instruction is used for dynamic configuration, for example of conditions for the start and end of a message to be transferred (serial receive parameters) for the relevant port.
Instructions for 3964 (R) communication There are 2 instructions available for dynamic configuration in the user program for 3964 (R) communication. The following applies to the instructions: the previously valid configuration data is overwritten but not stored permanently in the target system. The "Port_Config" instruction is used for the program-controlled configuration of the relevant port of the communications module. The "P3964_Config" instruction is used for the dynamic configuration of protocol parameters.
Properties of the USS protocol Simple, serial data transfer protocol with cyclic message frame traffic in half duplex mode that is tailored to the requirements of drive technology. Data transfer works according to the master-slave principle. The master has access to the functions of the drive and can, among other things, control the drive, read status values and read and write the drive parameters.
Data exchange using USS communication The communications module is the master. The master continuously sends frames (job frames) to the up to 16 drives and expects a response frame from each addressed drive. A drive sends a response frame under the following conditions: When a frame is received without errors When the drive is addressed in this frame A drive must not send if these conditions are not met or the drive was addressed in the broadcast. The connection to the relevant drives exists for the master once it receives a response frame from the drive after a specified processing time (response delay time).
Communication Function Manual, 11/2019, A5E03735815-AH
123
Point-to-point link
Procedure for setting up USS communication 1. Configure an S7-1500 configuration with CPU and CM in the device view of the hardware and network editor of STEP 7. 2. In the Project tree, select the "Program blocks" folder and open OB1 in the folder by double-clicking on it. The program editor opens. 3. Select the instructions for USS communication according to your task in the "Communication" area, "Communications processor" folder of the "Instructions" task card and drag them to a network of OB1: The "USS_Port_Scan" instruction allows you to communicate via the USS network. The "USS_Drive_Control" instruction prepares send data for the drive and evaluates the response data of the drive. The "USS_Read_Param" instruction is used to read out parameters from the drive. The "USS_Write_Param" instruction is used to change parameters on the drive. 4. Assign the parameters for the instructions according to your configuration. 5. Download the hardware configuration and user program to the CPU.
Properties of the Modbus protocol (RTU) Communication takes the form of serial, asynchronous transfer with a transmission speed of up to 115.2 kbps, half duplex. Data transfer works according to the master-slave principle. The Modbus master can send jobs for reading and writing operands to the Modbus slave: Reading inputs, timers, counters, outputs, memory bits, data blocks Writing outputs, memory bits, data blocks Broadcast to all slaves is possible.
Data exchange using Modbus communication (RTU) The communications module can be a Modbus master or Modbus slave. A Modbus master can communicate with one or more Modbus slaves (the number depends on the physical interface). Only the Modbus slave explicitly addressed by the Modbus master is permitted to return data to the Modbus master. The slave detects the end of the data transfer and acknowledges it. If an error occurs, it provides an error code to the master.
124
Communication Function Manual, 11/2019, A5E03735815-AH
Point-to-point link
Procedure for setting up Modbus communication (RTU) 1. Configure an S7-1500 configuration with CPU and CM in the device view of the hardware and network editor of STEP 7. 2. In the Project tree, select the "Program blocks" folder and open OB1 in the folder by double-clicking on it. The program editor opens. 3. Select the instructions for Modbus communication according to your task in the "Communication" area, "Communications processor" folder of the "Instructions" task card and drag them to a network of OB1: The "Modbus_Comm_Load" instruction configures the port of the CM for Modbus communication. The "Modbus_Master" instruction is used for Modbus master functionality. The "Modbus_Slave" instruction is used for Modbus slave functionality. 4. Assign the parameters for the instructions according to your configuration. 5. Download the hardware configuration and user program to the CPU.
Additional information You can find more detailed information on communication via point-to-point connections and basics of serial data transmission in the function manual CM PtP communication module - Configurations for point-to-point connections (http://support.automation.siemens.com/WW/view/en/59057093). You can find a description of how to use the instructions for point-to-point connections in the user program in the STEP 7 online help. You can find information about the communications modules with a serial interface in the manual of the particular communications module.
Communication Function Manual, 11/2019, A5E03735815-AH
125
OPC UA communication
9
9.1
What you need to know about OPC UA
9.1.1
OPC UA and Industrie 4.0
Uniform standard for information and data exchange
Industry 4.0 stands for the intensive utilization, evaluation and analysis of the large volumes of data from production in IT systems at the enterprise level. With Industry 4.0, data exchange between the production and enterprise levels is rapidly increasing. However, a prerequisite for success is a uniform standard for the information and data exchange.
Classic OPC only runs on Windows operating systems. To get around this restriction, the OPC Foundation developed the OPC UA (OPC Unified Architecture) standard.
The OPC UA standard is particularly suitable for data exchange across different levels thanks to its independence from specific operating systems, its secure transfer procedures and the semantic description of data. Machine data (controlled variables, measured values or parameters) can also be transferred in this way.
An important component of this concept is that OPC UA communication can take place in parallel with real-time communication for time-critical, machine-level data transfer.
OPC UA is highly scalable so that a consistent information exchange between sensors, controllers and MES or ERP systems is possible.
OPC UA makes available not only data but also information about the data (data types), at the same time making possible machine-interpretable access to the data.
9.1.2
General features of OPC UA
OPC UA and PROFINET
OPC UA and PROFINET can be used together. The two protocols use the same network infrastructure.
Independence from the operating system
The OPC UA standard is platform-independent and uses an optimized TCP-based binary protocol for high-performance applications.
OPC UA can be used, for example, under Windows, Linux, Mac OS X, a realtime operating system or a mobile operating system (Android or iOS).
126
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.1 What you need to know about OPC UA
Independence of a specific transport layer OPC UA currently supports the following transport mechanisms and protocols: The transfer of messages as a binary stream directly via TCP/IP The transfer of messages with XML via TCP/IP and HTTP. This transport mechanism allows only a slow transfer and is therefore almost never used. S7-1500 CPUs do not support this transport mechanism. Binary data exchange is supported by all OPC UA applications (required in OPC UA specification).
Simple client-server principle An OPC UA server provides a great deal of information within a network, e.g. relating to the CPU, the OPC UA server itself, the data and the data types. An OPC UA client accesses this information.
Implementation in different programming languages The OPC Foundation has implemented the OPC UA standard in several programming languages: Stacks for .NET, ANSI C and Java are available, although maintenance has been discontinued for the stacks for ANSI C and Java. The OPC Foundation offers the .NET stack as well as example programs as open source software. See Github (https://github.com/opcfoundation). A number of companies offer Software Development Kits (SDK). These development packages contain the stacks of the OPC Foundation and other functionalities that facilitate the development of solutions. Advantages of using SDKs: Support from the supplier Tested software Detailed documentation Clear license conditions (important for selling of solutions)
Communication Function Manual, 11/2019, A5E03735815-AH
127
OPC UA communication 9.1 What you need to know about OPC UA
Scalability
OPC UA can be used for devices of different performance classes:
Sensors
Embedded systems
Controllers
PC systems
Smartphones
Servers running MES or ERP applications.
The performance class of the devices is differentiated by profiles. Different OPC UA profiles offer the possibility to scale OPC UA for very small and simple devices as well as for very high-performance devices.
An OPC UA profile describes functions and services that must be supported by the server and client. In addition, other functionalities/services that are not required by the profile can be optionally provided.
OPC UA profiles differ from PROFINET profiles; the latter define additional cross-vendor properties and behavior for installations and systems in the sense of a vendor-neutral software interface.
Nano Embedded Device 2017 Server Profile
For the smallest devices with severely limited functionality, there is the "Nano Embedded Device 2017 Server Profile" of the OPC Foundation. This profile is functionally equivalent to the core server facet and defines the OPC UA TCP binary protocol as the required transport profile. The profile allows for connections without UA Security and does not allow subscriptions or method calls. Support for diagnostic objects and variables is optional for this profile.
Additional profiles build on the "Nano Embedded Device 2017 Server Profile", requiring more resources and offering more functionality.
Micro Embedded Device 2017 Server Profile
This profile provides limited functionality; it requires at least two parallel connections. Additionally, it allows subscriptions/data monitoring, but no UA Security and no method calls.
S7-1200 Basic Controllers support the "Micro Embedded Device 2017 Server Profile". The S7-1200 additionally supports UA Security.
Embedded 2017 UA Server Profile
This profile has been developed for devices with more than 50 MB RAM and a more highperformance processor. It is based on the Micro Embedded Device Server profile. In addition, it requires UA security and method calls.
In addition, the servers must make their used type model (data types, reference types, variable types, etc.) available.
S7-1500 Advanced Controllers support the "Embedded 2017 UA Server Profile".
128
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.1 What you need to know about OPC UA
Standard and global discovery profiles
The "OPC UA Specification Part 7" defines additional profiles:
The "Standard 2017 UA Server Profile", which is suitable for PC-based OPC UA servers
2 global profiles, "Global Discovery Server 2017 Profile" and "Global Discovery and Certificate Management 2017 Server Profile", that cover the required service and information models of a Global Discovery Server
Type-instance concept
OPC UA offers a fully networked (full-meshed network), object-oriented information model for namespaces, including metadata for the object description. Any object structures can be generated via referencing of the instances among each other and their types. Because servers disclose their instance and type systems, clients can navigate through this network and obtain all the information they need. Both instances and their type definitions are available in runtime.
Procedures or concepts on how to handle references to types are optimized over time. These optimizations lead to new versions of the OPC UA Specification (e.g. V1.03 => V1.04).
PLC tag mapping
The information of the OPC UA server (for example the PLC tags) is modeled as nodes connected to one another via references. The semantics are displayed by the server in the address space and can be acquired by clients (while navigating). This makes it possible to browse from node to node with an OPC UA client and find out what content can be read, monitored or written.
Integrated security mechanisms
OPC UA uses security mechanisms at various levels:
A secure connection can only be established between an OPC UA server and an OPC UA client if the client and server can register with X.509-v3 certificates and accept each other's certificates (security at the application level). Various security policies are possible, including an unsecured connection between server and client (Security Policy: "No security").
A server can always request the following information from the user for authorized access (authentication):
- A user certificate (not configurable in STEP 7)
- User name and password
- No user authorization
The security mechanisms are optional and configurable.
See also
OPC Foundation (https://opcfoundation.org)
Communication Function Manual, 11/2019, A5E03735815-AH
129
OPC UA communication 9.1 What you need to know about OPC UA
9.1.3
OPC UA for S7-1200/S7-1500 CPUs
In OPC UA, one system operates as a server and provides data the existing information to other systems (clients).
OPC UA clients, for example, have read and write access to data on an OPC UA server. OPC UA clients call methods on the OPC UA server.
You can access this data online with a client, including e.g. information on performance and diagnostics. In OPC UA terminology, this function is called "Browsen". The "Subscription" function eliminates regular reading of a tag; with this function, the server informs a client about value changes.
A system can be both a client and a server at the same time.
OPC UA server of the S7-1500 CPU
As of firmware version 2.0, an S7-1500 CPU is equipped with an OPC UA server.
The following sections describe how you configure the OPC UA server of the S7-1500 CPU to make data and methods available for OPC UA clients so that clients have read or write access to PLC tags on the CPU and can call server methods.
The following sections also set out how to integrate companion specifications into the address space of the OPC UA server.
OPC UA server of the S7-1200 CPU
As of firmware V4.4, an S7-1200 CPU is equipped with an OPC UA server.
The OPC UA server is generally configured as it is for an S7-1500 CPU; the scope of functions and the quantity limits are limited according to the supported "Micro Embedded Device 2017 Server Profile". Unlike for an S7-1500 CPU, the following functions are not available:
Server methods
Structured data type (structures and arrays)
Registered Read and Registered Write
You can find additional information in the STEP 7 online help.
OPC UA client of the S7-1500 CPU
As of firmware version V2.6, an S7-1500 CPU is additionally equipped with an OPC UA client.
The following sections show how to use standardized instructions (PLCopen function blocks) to create a user program that, as an OPC UA client, provides the following functions:
Reading data from an OPC UA server
Writing data to an OPC UA server
Calling methods of an OPC UA server
STEP 7 (TIA Portal) assists you in creating user programs by providing an editor for client interfaces and a parameter assignment for OPC UA connections.
The OPC UA instructions for an S7-1500 CPU as client are described in detail in the help to the instructions (Instructions > Communication > OPC UA).
130
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.1 What you need to know about OPC UA
OPC UA client for test purposes The following description uses various different OPC UA clients to illustrate the use of OPC UA clients:
"UaExpert" of Unified Automation. An extensive client that can be used free of charge: Link for downloading UaExpert (https://www.unified-automation.com/downloads/opc-uaclients.html)
"UA Sample Client" of the OPC Foundation. This client is available free of charge for users who are registered with the OPC Foundation : Link for downloading the example client of the OPC Foundation (https://opcfoundation.org)
Application example in Industry online support Siemens Industry Online Support provides a free application example with a client API for various applications. You use the functions of this interface to create your own OPC UA clients that match your application. To simplify handling the API, we offer a higher-level .NET helper class.
The client API is based on the .NET OPC UA stack of the OPC Foundation.
The application example shows how to establish connections between servers and clients, for example. It also demonstrates the reading and writing of PLC tags.
Link to download: OPC UA .NET client for the SIMATIC S7-1500 OPC UA Server (http://support.automation.siemens.com/WW/view/en/109737901)
9.1.4
Access to OPC UA applications
The access possibilities that an S7-1500 CPU with an OPC UA application (client or server) has via a CP in the same station are described below. In addition, an approach for combining these access possibilities with the "IP Forwarding" function to allow access to devices of another IP subnet via an S7-1500 station is presented.
All the settings for this can be found in the CPU properties, "Advanced configuration" area in the Inspector window.
The possibility of accessing the OPC UA application in the CPU via CP interface is subject to the following requirements:
S7-1500 CPU (except S7-1500 R/H) as of firmware version V2.8
CP 1543-1 firmware version V2.2 or higher
Communication Function Manual, 11/2019, A5E03735815-AH
131
OPC UA communication 9.1 What you need to know about OPC UA
Principle: Interface for access via communication module For a CPU application, such as OPC UA, to be accessed via CP interface, you must configure a virtual interface (W1). IP-based applications can then be accessed via the IP address parameters of this virtual interface. The schematic is shown in the following figure.
CPU S7-1500 FW V2.8 or higher (e.g. CPU 1515-2 PN) CP 1543-1 (FW V2.2 or higher) Virtual interface (W1) Protocol conversion PROFINET / Industrial Ethernet on backplane bus or backplane bus on PROFINET / Industrial
Ethernet
Backplane bus
Figure 9-1 Principle: Interface for access via communication module
132
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.1 What you need to know about OPC UA
Example: Access of OPC UA clients to the OPC UA server of the CPU For access of an OPC UA client to the OPC UA server of the CPU, the following interfaces of the S7-1500 station are available: The local PROFINET interfaces of the S7-1500 CPU The Ethernet interface of a CP 1543-1 (firmware version V2.2 and higher) The following figure shows an example of a possible configuration: The CPU could also have the role OPC UA client and the device on the subnet of the CP could have the role OPC UA server.
Figure 9-2 Example: Access of OPC UA clients to the OPC UA server of the CPU
Communication Function Manual, 11/2019, A5E03735815-AH
133
OPC UA communication 9.1 What you need to know about OPC UA
Example: Access of OPC UA clients to OPC UA servers via S7-1500 CPU with activated IP Forwarding
OPC UA client and OPC UA server can also be connected to one another via an S7-1500 CPU, in which case the S7-1500 CPU operates as an IP Forwarder. This configuration option allows for flexible expansion of existing systems.
Figure 9-3 Example: Access of OPC UA clients to OPC UA servers via S7-1500 CPU with activated IP Forwarding
Additional information Additional information on access options via the virtual interface and via IP forwarding can be found in the following sections: IP forwarding (Page 294) Virtual interface for IP-based applications (Page 303)
134
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.1 What you need to know about OPC UA
9.1.5
Addressing nodes
Nodes are the basic elements of OPC UA, they are comparable with objects from objectoriented programming. Nodes are used, for example, for user data (tags) or other metadata. Nodes are used to model an OPC UA address space that also contains a type model with type definitions.
Node ID (NodeId)
Nodes in the OPC UA address space are uniquely identified by a NodeId (Node Identifier).
The NodeId consists of an identifier, identifier type and a namespace index. Namespaces are used to avoid naming conflicts.
The OPC Foundation has defined a wide range of nodes that provide information about the given OPC UA server. These nodes can be found in the namespace of the OPC Foundation and have the index 0.
The OPC Foundation also defines data types and tag types.
Namespace (Namespace)
In addition to the above-described namespace of the OPC Foundation, the namespace for accessing CPU data is of interest: All the tags or methods of an S7-1500 OPC UA server are contained in the namespace (Namespace) of the standard server interface "http://www.siemens.com/simatic-s7-opcua".
By default this namespace has the Index 3. The index may change later if additional namespaces are inserted into the server or if existing ones are deleted. It is therefore necessary for an OPC UA client to request the current index of the namespace (e.g. "http://www.siemens.com/simatic-s7-opcua") from the server before reading or writing its values.
The following figure shows an example of the result of such a request.
Communication Function Manual, 11/2019, A5E03735815-AH
135
OPC UA communication 9.1 What you need to know about OPC UA
Identifier
The Identifier corresponds to the name of the PLC tag in quotation marks. The quotation mark is the only sign that is not permitted as part of a name in STEP 7. Quotation marks avoid naming conflicts.
The following example reads the value of the "StartTimer" tag:
The Identifier can consist of several components. The individual components are then separated by a dot.
The following example reads the "MyDB" array data block completely. This data block contains an array with ten integer values. All ten values should be read in one pass. Therefore, "0:9" is entered at the array range.
Example of NodeIds, identifiers and namespaces
The following figure illustrates the relation between NodeIds, identifiers and namespaces: It is no problem if two nodes have the same identifiers but belong to different namespaces.
STEP 7 (TIA Portal) allows you to easily import namespaces via a server interface.
136
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.1 What you need to know about OPC UA
PLC tags in the address space of the OPC UA server The figure below shows where the PLC tags in the example are located in the address space of the OPC UA server (excerpt from UA client): The "MyDB" data block is a global data block. The data block is therefore located below the node "DataBlocksGlobal". "StartTimer" is a memory tag and is therefore stored below the "Memory" node.
Figure 9-4 PLC tags in the address space of the OPC UA server
Communication Function Manual, 11/2019, A5E03735815-AH
137
OPC UA communication 9.1 What you need to know about OPC UA
Methods in the address space of the OPC UA server If you implement a method via your user program, it takes the following form in the address space of the OPC UA Server (see Providing methods on the OPC UA server (Page 227)):
Figure 9-5 Methods in the address space of the OPC UA server
138
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.1 What you need to know about OPC UA
9.1.6
What you need to know about OPC UA clients
Basics of OPC UA clients OPC UA clients are programs that do the following: Access the information from an OPC UA server (for example an S7-1500 CPU): read/browse access, write access, subscriptions Execute methods through the OPC UA server However, OPC US clients can only access data that is enabled for this purpose (see "Managing write and read rights (Page 165)"). You need the endpoint of the server to establish a connection to an OPC UA server (see "Endpoints of the OPC UA servers (Page 161)").
Reading out information from the OPC UA server When a connection to an end point of the server exists, you can use the navigation function of the client: You navigate starting from a defined starting point (from the "root" node) through the address space of the server. The following information is provided in the process: Enabled PLC tags, data blocks and data block components Namespace index and identifiers of these PLC tags, data blocks and DB components Data types of the PLC tags and DB components Number of components in arrays (required for reading and writing arrays) In addition, you receive information about the OPC UA server itself as well as information about the S7-1500 based on the "OPC UA for Devices" standard of the OPC Foundation (for example, serial number, firmware version).
Communication Function Manual, 11/2019, A5E03735815-AH
139
OPC UA communication 9.1 What you need to know about OPC UA
Reading data from the server and writing to the server You now know the namespace, identifier and data type of PLC tags. This means that you can now specifically read individual PLC tags and DB components as well as complete arrays and structures. You can find examples of the reading of Boolean tags and array data blocks in Addressing nodes (Page 135). Rules for access to structures are available here (Page 266). With the information that you obtain while navigating through the address space of the server (index, identifier and data type), you can also transfer values to the S7-1500 with the OPC UA client. The following example overwrites the first three values in the array data block "MyDB".
For "Array Range" you specify which components of the array you want to overwrite. The "Good" status code indicates that the values were transferred successfully. However, you can only write the values to the S7-1500 but not the time stamps of these values. The time stamps can only be read.
Faster access through registration Registered Read/Write lends itself to repeated, optimized access to data with maximum performance. When tag nodes are registered, the OPC UA server creates a numerical Identifier (numerical NodeId) that directly references the registered node. For read or write jobs of the client to this numerical Identifier, the server does not have to resolve any strings as Identifier and can access the requested tag in an optimized manner. This Identifier applies solely to the current session and has to be queried again when the session connection is terminated/lost. In the following example, the "StartTimer" tag is first registered on the server. Afterwards, the rapid function "RegisteredWrite" is used for setting the value.
140
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.1 What you need to know about OPC UA
Subscription
In accordance with the same scheme, the "RegisteredRead" function can also be used, which is particularly useful for recurring data readouts. Take into account, however, that depending on the application it may be advisable to use a Subscription instead.
Recommendation: It is best to place registrations in the startup program of the OPC UA client, since the registration takes up time.
Please note that you can set the maximum number of registered nodes in the properties of the S7-1500 CPU and that the Clients have to respect this number, see General settings of the OPC UA server (Page 179).
The term "Subscription" is used for a function in which only those tags for which an OPC UA client has registered at the OPC UA server are transferred. The OPC UA server only sends a message to the OPC UA client for these registered tags (monitored Items) when a value has changed. The monitoring of these tags makes constant sampling by the OPC UA client (Polling)superfluous, which reduces the network load.
You have to create a Subscription to use this function. For this purpose, you specify the "Publishing Interval" at the UA client and click the "Create" button. The publishing interval is the time interval in which the server sends new values to the client in a notification (data change notification).
In the following example a subscription has been created: The client receives a message with the new values (publishing interval 50 ms) every 50 milliseconds here.
Preventing server overload
You can set the OPC UA server of the S7-1500 CPU by means of the "Minimum publishing interval" so that it does not serve extremely short send intervals requested by the client, see Settings of the server for subscriptions (Page 181).
Example: A client wants to be operated at a publishing interval of 50 ms as detailed above. Such a short publishing interval would, however, result in a high network and server load. You should therefore set 1000 ms as the "Minimum publishing interval" for the server. Clients whose subscription requires shorter publishing intervals are "slowed" to 1000 ms and the server is protected from overload.
Sampling and transmission (Sampling & Publishing) within the scope of a subscription are communication processes which, like other communication processes (TCP/UDP/Web server communication...), are processed by the CPU with priority 15. OBs with higher priority interrupt the communication. If you set the sampling and transmission intervals too short, this setting causes a high communication load. Therefore, select intervals as large as possible, which are still sufficient for the application.
For information about the consistency of tags, refer to Consistency of CPU tags (Page 171).
Communication Function Manual, 11/2019, A5E03735815-AH
141
OPC UA communication 9.1 What you need to know about OPC UA
Monitoring of PLC tags When the Subscription has been created, you inform the server which tags are to be monitored with it. In the following example, the "Voltage" tag was added to the subscription.
The "Voltage" tag contains the value of a voltage that is detected by an S7-1500 CPU.
The sampling interval ("Sampling Interval") contains a negative value (-1). This determines that the default setting of the OPC UA server is used for the sampling interval. The default setting is defined by the transmission interval ("Publishing Interval") of the subscription. If you want to set the smallest possible sampling interval, select the value "0".
In this example, the length of the queue is set to "1": Only one value is read from the CPU at an interval of 50 milliseconds and subsequently sent to the OPC UA client when the value has changed.
The "Deadband" parameter in this example is "0.1": Changes in value have to amount to 0.1 Volt; only then does the sender send the new value to the client. The server does not send smaller changes in value. You can use this parameter, for example, to disable signal noise: Slight changes in a process variable which do not have a real meaning.
9.1.7
Mapping of data types
SIMATIC and OPC UA data types
SIMATIC data types do not always correspond with OPC UA data types.
S7-1500 CPUs provide SIMATIC tags (with SIMATIC data types) to their own OPC UA server as OPC UA data types. OPC UA clients can then access these tags with OPC UA data types via the server interface.
A client can read the attribute "DataType" from such a tag and reconstruct the original data type in SIMATIC.
142
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.1 What you need to know about OPC UA
Example
A tag has the SIMATIC data type "COUNTER". You read COUNTER UInt16 in the table. You now know that you do not need to convert; the COUNTER value is sent over the line as a UInt16 data type.
The client detects from the attribute "DataType" that the tag is actually the SIMATIC data type "COUNTER". With this knowledge, the client reconstructs the data type.
Table 9- 1 SIMATIC and OPC UA data types SIMATIC data type BOOL BYTE
WORD
DWORD
LWORD
SINT INT DINT LINT USINT UINT UDINT ULINT REAL LREAL S5TIME
TIME
LTIME
DATE
TIME_OF_DAY (TOD)
LTIME_OF_DAY (LTOD)
DATE_AND_TIME (DT)
LDT
OPC UA data type Boolean BYTE Byte WORD UInt16 DWORD UInt32 LWORD UInt64 SByte Int16 Int32 Int64 Byte UInt16 UInt32 UInt64 Float Double S5TIME UInt16 TIME Int32 LTIME Int64 DATE UInt16 TOD UInt32 LTOD UInt64 DT Byte[8] DateTime
Communication Function Manual, 11/2019, A5E03735815-AH
143
OPC UA communication 9.1 What you need to know about OPC UA
SIMATIC data type DTL Special note: You can only describe the structure completely with an OPC UA client. You have read-only access individual elements of this structure (e.g. "YEAR") CHAR
WCHAR
STRING (Code page 1252 or Windows-1252) WSTRING (UCS-2; Universal Coded Character Set) TIMER
COUNTER
OPC UA data type mapped as structure
CHAR Byte WCHAR UInt16 STRING String String
TIMER UInt16 COUNTER UInt16
Arrays
A read or write job with OPC UA is always an array access, which means that it always has an index and length. A single tag is a special case of an array (index 0 and length 1). The data type is simply sent repeatedly on the line. For the tags, the "DataType" attribute indicates the basic data type. The attributes "ValueRank" and "ArrayDimensions" show whether or not you are dealing with an array and how large the array is.
Data types based on arrays
There are SIMATIC data types for which an OPC UA value is mapped to an array of bytes. An array of these data types is then mapped to a two-dimensional array.
Example: The SIMATIC data type DATE_AND_TIME (DT) is mapped on the OPC UA side to an 8-byte array (Byte[8]), see table above. When you define an array of the SIMATIC data type DATE_AND_TIME (DT), then it is considered as two-dimensional array.
This fact affects the use of system data types such as OPC_UA_NodeAdditionalInfo and OPC_UA_NodeAdditionalInfoExt, for example:
For the data types described above, you must use the system data type OPC_UA_NodeAdditionalInfoExt for multidimensional arrays instead of OPC_UA_NodeAdditionalInfo.
144
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.1 What you need to know about OPC UA
Structures
Structures are transferred as ExtensionObject. The S7-1500 server uses binary representation for transmission of the ExtensionObjects over the line; the individual structure elements come one after the other. At the front is the NodeId of the data type; this is used by the client to establish the structure.
For OPC UA Specification <= V1.03, a client has to read, decode and interpret the complete DataTypeDictionary for this (unless it has already learned this library offline through an XML import).
Starting in OPC UA V1.04, the DataTypeDescription attribute is also available for this, which can be read and interpreted more quickly and easily. A client only determines the setup of the structure once, before or during the first access, and then uses this information for the duration of the session.
Special SIMATIC data types
SIMATIC data types that are not in the table above and cannot be defined as elements of a structure or PLC data type are not supported by the OPC UA client.
These are, for example, "ANY" or "POINTER" pointers, function block "Block_FB", function "Block_FC" or hardware data type "REMOTE".
The selection of an unsupported data type leads to an error message.
Additional information
More details on mapping of basic data types, arrays and structures can be found in the OPC UA Specification Part 6, "Mappings" (see OPC UA BINARY there).
What must be considered with arrays and data types DTL and LDT in the OPC UA server of a SIMATIC S7-1500? FAQ (https://support.industry.siemens.com/cs/ww/en/view/109766726)
Communication Function Manual, 11/2019, A5E03735815-AH
145
OPC UA communication 9.2 Security at OPC UA
9.2
Security at OPC UA
9.2.1
Security settings
Addressing risks OPC UA allows the exchange of data between different systems, both within the process and production levels and to systems at the control and enterprise level.
This possibility also entails security risks. That is why OPC UA provides a range of security mechanisms:
Verification of the identity of OPC UA server and clients.
Checking of the identity of the users.
Signed/encrypted data exchange between OPC UA server and clients.
These security policies should only be bypassed in cases where it is absolutely necessary:
During commissioning
In stand-alone projects without external Ethernet connection
If you have selected the endpoint "None" for "UA Sample Client" of the OPC Foundation, for example, the program issues a clear warning:
When STEP 7 compiles your project it also checks whether you have considered the setting options for the protection and warns you of possible risks. This also includes an OPC UA security policy with the setting "no security", which corresponds to the end point "None".
Note
Disabling security policies you do not want
If you have enabled all security policies in the secure channel settings of the S7-1500 OPC UA server thus, also the end point "None" (no security) unsecured data traffic (neither signed nor encrypted) between the server and client is also possible. The OPC UA server of the S7-1500 CPU also sends its public certificate to the client at "None" (No security). And some clients check this certificate. However, the client is not forced to send a certificate to the server. The identity of the client may possibly remain unknown. Each OPC UA client can then connect to the server irrespective of any subsequent security settings.
When configuring the OPC UA server, make sure that only security policies that are compatible with the security concept of your machine or plant are selected. All other security policies should be disabled.
Recommendation: Use the setting "Basic256Sha256 - Sign and Encrypt", which means that the server only accepts Sha256 certificates. The security policies "Basic128Rsa15" and "Basic256" are deactivated by default and should not be used as an end point. Select end points with a higher security policy.
146
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.2 Security at OPC UA
Additional security rules Only use the end point "None" in exceptional cases. Only use the "guest authentication" of the user in exceptional cases. Only allow access to PLC tags and DB components via OPC UA if it is genuinely necessary. Use the list of trusted clients in the settings of the S7-1500 OPC UA client to allow access to certain clients only.
9.2.2
Certificates pursuant to ITU X.509
Security mechanisms are integrated in several layers in OPC UA. Digital certificates have an important role here. An OPC UA client can only establish a secure connection to an OPC UA server when the server accepts the digital certificate of the client and classifies it as trusted.
See section Handling client and server certificates (Page 183).
The client must also check and trust the certificate of the server. The server and client must show their identities and prove that they are what they claim to be: They must prove their identity. Mutual authentication of client and server, for example, prevents man-in-the-middle attacks.
Man-in-the-middle attacks
A "man-in-the-middle" could have positioned itself between server and client. A man-in-themiddle is a program that intercepts communication between server and client and claims to be a client or server, and is thus able to obtain information about the S7 program or to set values in the CPU and attack a machine or plant.
OPC UA uses digital certificates that meet standard X.509 of the International Telecommunication Union (ITU).
This allows the identity of a program, a computer or an organization to be proven (authenticated).
Communication Function Manual, 11/2019, A5E03735815-AH
147
OPC UA communication 9.2 Security at OPC UA
X.509 certificates An X.509 certificate includes the following information: Version number of the certificate Serial number of the certificate Information on the algorithm used by the certificate authority to sign the certificate. Name of the certificate authority Start and end of the validity period of the certificate Name of the program, person or organization for which/whom the certificate has been signed by the certificate authority. The public key of the program, person or organization. An X509 certificate thus links an identity (name of a program, person or an organization) to the public key of the program, person or organization.
Check during connection establishment When a connection is being established between the client and server, the devices check all information from the certificate that is required to determine its integrity, such as signature, period of validity, application name (URN) and, in case of firmware version V2.5 only, also the IP address of the client in the client certificate.
Note The validity period stored in the certificate is also checked. The CPU clock must therefore be set and date/time must be within the validity period, otherwise no communication takes place.
148
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.2 Security at OPC UA
Signing and encryption
To allow you to check whether a certificate has been manipulated, certificates are signed.
There are various possible procedures here:
Within the TIA Portal you have the possibility to generate and sign certificates. If you have protected your project and are logged in as a user with the function right to make security settings, you can use the global security settings. The global security settings allow access to the certificate manager and therefore to the certificate authority (CA) of the TIA Portal.
Additional options are available for creating and signing certificates. In the TIA Portal, you can import certificates into the global certificate manager.
You contact a certificate authority (CA) and have your certificate signed.
In this case, the certificate authority checks your identity and signs your certificate with the private key of the certificate authority. For this purpose you send a CSR (Certificate Signing Request) to the certificate authority.
You yourself create a certificate and sign it.
To this purpose you use, for example, the "Opc.Ua.CertificateGenerator" program of the OPC Foundation. Alternatively, you use OpenSSL. You can find additional information in Generating PKI key pairs and certificates yourself (Page 153).
Useful information: Certificate types
Self-signed certificate:
Each device generates and signs its own certificate. Application examples: Static configuration with limited number of communication nodes.
No new certificates can be derived from a self-signed certificate. However, you need to load all self-signed certificates from partner devices to the CPU (STOP required).
CA certificate:
All certificates are generated and signed by a certificate authority. Application examples: Dynamically growing plants.
You only need to download the certificate from the certificate authority to the CPU. The certificate authority can generate new certificates (partner devices can be added without CPU STOP).
Communication Function Manual, 11/2019, A5E03735815-AH
149
OPC UA communication 9.2 Security at OPC UA
Signing
The signature makes it possible to prove the integrity and source of a message as detailed below.
Signing starts with the sender creating a hash value from the plain text (plain text message). The sender then encrypts the hash value with its private key and subsequently transfers the plain text together with the encrypted hash value to the recipient. To verify the signature, the recipient needs the public key of the sender (this is contained in the X509 certificate of the sender). The recipient uses the sender's public key to decrypt the hash value received. The recipient then forms the hash value themselves from the plain text received (the hash process is contained in the sender's certificate). The recipient compares the two hash values:
If the two hash values are identical, the plain text message has reached the receiver unchanged and has not been manipulated.
If the two hash values do not match, the plain text message has not reached the receiver unchanged. The plain text message has been manipulated or has been distorted during transfer.
Encryption
Encrypting data prevents unauthorized parties from reading the content. X509 certificates are not encrypted; they are public and can be viewed by anyone.
Encryption involves the sender encrypting the plain text message with the public key of the recipient. To do so, the sender requires the recipient's X509 certificate, as it contains the public key of the recipient. The recipient decrypts the message with their private key. Only the recipient can decrypt the message: They alone hold the private key. The private key must therefore never be disclosed.
Secure channel
OPC UA uses the private and public key of client and server to establish a secure connection, the secure channel. Once the secure connection has been established, the client and server generate an internal key only known to them which they both use for signing and encrypting messages. This symmetric process (a shared key) is much faster than asymmetric processes (private and public key).
See also
Creating self-signed certificates (Page 152) Certificates with OPC UA (Page 151) Secure Communication (Page 34) Using certificates with TIA Portal (https://support.industry.siemens.com/cs/ww/en/view/109769068)
150
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.2 Security at OPC UA
9.2.3
Certificates with OPC UA
Usage of X509 certificates with OPC UA OPC UA uses various types of X.509 certificates for establishing a connection from client to server: OPC UA application certificates Such X.509 certificates identify the software instance, the installation of client or server software. For the "Organization name" attribute, you enter the name of the company that uses the software.
Note The OPC UA server of the S7-1500 uses application certificates even for the security setting "None" (no security). This ensures compatibility to OPC UA V1.1 and earlier versions.
OPC UA software certificates This X-509 certificate identifies a specific version of the client or server software. These certificates contain attributes that describe which tests this version of the software has passed during certification by the OPC Foundation (or recognized test laboratories). For the "Organization name" attribute, you enter the name of the company that has developed or markets the software.
Note Software certificates are not supported in STEP 7.
OPC UA user certificates This X.509 certificate identifies the specific user who, for example, retrieves process data from the OPC UA server of an S7-1500 CPU. This certificate is not required if the user can authenticate itself with a password, or if anonymous access is configured.
Note User certificates are not supported in STEP 7.
These certificates are end-entity certificates: They identify, for example, a person, an organization, a company or an instance (installation) of a software.
Communication Function Manual, 11/2019, A5E03735815-AH
151
OPC UA communication 9.2 Security at OPC UA
9.2.4
Creating self-signed certificates
Using the client's certificate generator
Many OPC UA client applications or SDKs are integrated in a sample application that allows you to generate certificates for the client from this application.
The description for certificate generation can generally be found in the context for describing the OPC UA client application.
Example client from the online support
The OPC UA .NET client for the SIMATIC S7-1500 OPC UA server (https://support.industry.siemens.com/cs/ww/en/view/109737901) creates a self-signed software certificate of the client application in the Windows Certificate Store during the first program start. The documentation for this example describes the procedure for handling these certificates.
Using the certificate generator of the TIA Portal
If you use an OPC UA client that does not generate a client certificate, you can create selfsigned certificates with STEP 7.
To do this, follow these steps:
1. In the properties of the CPU, double-click "<Add new>" under "Protection & Security > Certificate manager > Device certificates".
2. Click "Add".
3. In the "Create a new certificate" dialog, select the "OPC UA client" option for "Usage".
4. Click "OK".
In the field "Subject Alternative Name" STEP 7 automatically enters the URI for the generated certificate. In the program-specific certificate generation by means of the .NET stack of the OPC Foundation, the field is called, for example, "ApplicationUri" - it can have a different name in other tools for certificate generation.
See also
Handling of the client certificates of the S7-1500 CPU (Page 272)
152
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.2 Security at OPC UA
9.2.5
Generating PKI key pairs and certificates yourself
This section is only relevant if you want to use an OPC UA client that cannot itself create a PKI key pair and a client certificate. In this case, you generate a private and a public key using OpenSSL, generate an X.509 certificate, and sign the certificate yourself.
Using OpenSSL
OpenSSL is a tool for Transport Layer Security that you can use to create certificates. You can also use other tools, for example XCA, a type of key management software with a graphical user interface for an improved overview of certificates issued.
To work with OpenSSL under Windows, follow these steps:
1. Install OpenSSL under Windows. If you are using a 64-bit version of the operating system, install OpenSSL in the "C:\OpenSSL-Win64" directory, for example. You can obtain OpenSSL-Win64 as a download from various providers for open source software.
2. Create a directory, for example "C:\demo".
3. Open the command prompt. To do so, click "Start" and enter "cmd" or "command prompt" in the search field. Right-click "cmd.exe" in the results list and run the program as an administrator. Windows opens the command prompt.
4. Change to the "C:\demo" directory. To do this, enter the following command: "cd C:\demo".
5. Set the following network variables:
set RANDFILE=c:\demo\.rnd
set OPENSSL_CONF=C:\OpenSSL-Win64\bin\openssl.cfg
The figure below shows the command line with the following commands:
6. Now start OpenSSL. If OpenSSL has been installed in the C:\OpenSSL-Win64 directory, enter the following: C:\OpenSSL-Win64\bin\openssl.exe The figure below shows the command line with the following command:
Communication Function Manual, 11/2019, A5E03735815-AH
153
OPC UA communication 9.2 Security at OPC UA
7. Generate a private key. Save the key to the "myKey.key" file. The key in this example is 1024 bits long; for greater RSA security, use 2048 bits in practice. Enter the following command: "genrsa -out myKey.key 2048" ("genrsa -out myKey.key 1024" in the example). The figure below shows the command line with the command and the output of OpenSSL:
8. Generate a CSR (Certificate Signing Request). To do this, enter the following command: "req -new -key myKey.key -out myRequest.csr". During execution of this command, OpenSSL queries information about your certificate: Country name: for example "DE" for Germany, "FR" for France State or province name: for example "Bavaria". Location Name: for example "Augsburg". Organization Name: Enter the name of your company. Organizational Unit Name: for example "IT" Common Name: for example "OPC UA client of machine A" Email Address:
Note Note for S7-1500 CPU as server with firmware version V2.5 The IP address of the client program has to be stored in the "Subject Alternative Name" field of the created certificate for S7-1500 CPUs version V2.5 (only for this version); otherwise, the CPU will not accept the certificate.
The information you enter is added to the certificate. The figure below shows the command line with the command and the output of OpenSSL:
The command creates a file in the C:\demo directory containing the Certificate Signing Request (CSR); in the example, this is "myRequest.csr".
154
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.2 Security at OPC UA
Using the CSR
There are two ways to use a CSR:
You send the CSR to a certificate authority (CA): Read the information of the respective certification authority. The certificate authority (CA) checks your information and identity (authentication) and signs the certificate with the private key of the certificate authority. You receive the signed X.509 certificate and use this certificate for OPC UA, HTTPS or Secure OUC (secure open user communication), for example. Your communication partners use the public key of the certificate authority to check whether your certificate was really issued and signed by that CA (i.e. that the certificate authority has confirmed your information).
You sign the CSR yourself: Using your private key. This option is shown in the next step.
Signing the certificate yourself
Enter the following command so that you can generate and sign your certificate (self-signed certificate) yourself: "x509 -req -days 365 -in myRequest.csr -signkey myKey.key -out myCertificate.crt".
The figure below shows the command line with the command and OpenSSL:
See also
The command generates an X.509 certificate with the attributes that you transfer with the CSR (in the example "myRequest.csr"), for example with a validity of one year (-days 365). The command also signs the certificate with your private key ("myKey.key" in the example). Your communication partners can use your public key (contained in your certificate) to check that you are in possession of the private key that belongs to this public key. This also prevents your public key from being misused by an attacker. With self-signed certificates, you yourself confirm that the information in your certificate is correct. There is no independent body that checks your information.
Handling of the client certificates of the S7-1500 CPU (Page 272)
Communication Function Manual, 11/2019, A5E03735815-AH
155
OPC UA communication 9.2 Security at OPC UA
9.2.6
Secure transfer of messages
Establishing secure connections with OPC UA
OPC UA uses secure connections between client and server. OPC UA checks the identity of the communication partners. OPC UA uses certificates in accordance with X.509-V3 from the ITU (International Telecommunication Union) for client and server authentication. Exception: A secure connection is not established with the "No security" security policy.
Message security mode
OPC UA uses the following security policies to protect messages:
No security
All messages are unsecured. In order to use this security policy, establish a connection to a None end point of a server.
Signing
All message are signed. This allows the integrity of the messages received to be checked. Manipulations are detected. In order to use this security policy, establish a connection to a Sign end point of a server.
Sign & Encrypt
All messages are signed and encrypted. This allows the integrity of the messages received to be checked. Manipulations are detected. What is more, no attacker can read the content of the message (protection of confidentiality). In order to use this security policy, establish a connection to a "SignAndEncrypt" end point of a server.
The security policies are also named according to the algorithms used. Example: "Basic256Sha256 - Sign & Encrypt" means: Secure endpoint, supports a series of algorithms for 256-bit hashing and 256-bit encryption.
156
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.2 Security at OPC UA
Layers required The figure below shows the three layers that are always required for establishing a connection: the transport layer, the secure channel and the session.
Figure 9-6 Necessary layers: transport layer, secure channel and session
Transport layer:
This layer sends and receives messages. OPC UA uses an optimized TCP-based binary protocol here. The transport layer is the basis for the subsequent secure channel.
Secure channel
The secure channel receives the data received from the transport layer, and forwards that data to the session. The secure channel forwards data of the session that is to be sent to the transport layer.
In "Sign" security mode, the secure channel signs the data (messages) that is sent. When a message is received, the secure channel checks the signature to detect any manipulations.
With a "SignAndEncrypt" security policy, the secure channel signs and encrypts the send data. Data received is decrypted by the secure channel, and the secure channel then checks the signature.
With the "No security" security policy, the message packages pass the secure channel unchanged (the messages are received and sent in plain text).
Session
The session forwards the messages from the secure channel to the application, or receives from the application the messages that are to be sent. The application uses the process values or provides the values.
Communication Function Manual, 11/2019, A5E03735815-AH
157
OPC UA communication 9.2 Security at OPC UA
Establishing the secure channel The secure channel is established as follows: 1. The server starts establishing the secure channel when it receives a request to this effect from the client. This request is signed or signed and encrypted, or the message is sent in plain text (security mode of the selected server end point). With "Sign" and "Sign & Encrypt", the client sends a "secret" (random number) with the request. 2. The server validates the client certificate (contained in the request, unencrypted) and checks the identity of the client. If the server trusts the client certificate, it decrypts the message and checks the signature ("Sign & Encrypt"), checks the signature only ("Sign"), or leaves the message unchanged ("No security") 3. The server then sends a response to the client (same level of security as the request). The server secret is contained in the response. The client and server calculate a symmetric key from the client and server secret. The secure channel is now established. The symmetric key (instead of the private and public key of client and server) is now used for signing and encrypting messages.
Establishment of the session The session is executed as follows: 1. The client starts establishing the session by sending a CreateSessionRequest to the server. This message contains a Nonce, a random number that is only used once. The server must sign this random number (Nonce) to prove that it is the owner of the private key. The private key belongs to the certificate that the server uses to establish the secure channel. This message (and all subsequent messages) is secured in line with the security policies of the selected server endpoint (selected security policies). 2. The server responds with the CreateSession Response. This message contains the public key of the server and the signed Nonce. The client checks the signed Nonce. 3. If the server passes the test, the client sends a SessionActivateRequest to the server. This message contains the information that is required for user authentication: User name and password, or X.509 certificate of the user (not supported in STEP 7), or No data (if anonymous access is configured). 4. If the user has the necessary rights, the server returns a message to the client (ActivateSessionResponse). This activates the session. The secure connection between the OPC UA client and server has been established.
Establishing a connection to PLCopen function block The PLCopen specification defines a range of IEC 61131 function blocks for OPC UA clients. The instruction UA_Connect initiates both a secure channel and a session following the pattern described above.
158
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3
Using the S7-1500 as an OPC UA server
9.3.1
Interesting information about the OPC UA server of the S7-1500 CPUs
9.3.1.1
The OPC UA server of the S7-1500 CPUs
The S7-1500 CPUs as of firmware V2.0 are equipped with an OPC UA server. Apart from the Standard-S7-1500 CPUs this applies to the variants S7-1500F, S7-1500T, S7-1500C, S7-1500pro CPUs, ET 200SP CPUs, SIMATIC S7-1500 SW controllers and PLCSIM Advanced.
Convention: "S7-1500 CPUs" also includes the above-mentioned CPU variants.
S7-1500 CPU OPC UA server basics
Access to the OPC UA server of the CPU is possible via all integrated PROFINET interfaces of the S7-1500 CPU.
Direct access to the OPC UA server of the CPU over the backplane bus of the automation system is not possible via CPs under the following conditions:
Configuration with TIA Portal Version V16 or higher
S7-1500 CPU firmware version 2.8 or higher and CP 1543-1 firmware version V2.2 or higher
For configuration, see Access to OPC UA applications (Page 131).
Direct access to the OPC UA server of the CPU over the backplane bus of the automation system is not possible via CMs.
For access by clients, the server saves the enabled PLC tags and other information in the form of nodes (see Configuring access to PLC tags (Page 165)). These nodes are interconnected and form a network. OPC UA defines access points to this network (wellknown nodes) that enable navigation to subordinate nodes.
With an OPC UA client you can read, observe or write values of tags of the PLC program as well as call methods that are available to the server. As of firmware version 2.5 you can implement methods, see Useful information about server methods (Page 227).
Communication Function Manual, 11/2019, A5E03735815-AH
159
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Node classes
OPC UA servers provide information in the form of nodes. A node can be, for example, an object, a tag, a method or a property.
The example below shows the address space of the OPC UA server of an S7-1500 CPU (extract from the OPC UA client "UaExpert" from Unified Automation).
Figure 9-7 Example of the address space of the OPC UA server of an S7-1500 CPU
In the figure above, the "MyValue" tag is selected (highlighted in gray). This tag is located below the "Memory" node, which has the node class "Object". "Memory" is below the "PLC_1" node (also an Object).
Address space
The nodes are linked over references, for example, the reference "HasComponent, which represents a hierarchical relationship between a node and its subordinate nodes. With their references, the nodes form a network that can, for example, take the form of a tree.
A network of nodes is also called an address space. Starting from the root, all nodes can be reached in the address space.
160
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.1.2
End points of the OPC UA server
The end points of the OPC UA server define the security level for a connection. Depending on the purpose of use or desired security level, you have to carry out the corresponding settings for the connection at the end point.
Different security settings
Before establishing a secure connection, OPC UA clients ask the server with which security settings connections are possible. The server returns a list with all the security settings (endpoints) that the server offers.
Structure of end points End points consist of the following components: Identifier for OPC: "opc.tcp" IP address: 192.168.178.151 (in the example) Port number for OPC UA: 4840 (standard port) The port number can be configured. Security setting for messages (Message Security Mode): None, Sign, SignAndEncrypt. Encryption and hash procedures (Security Policy): None, Basic128Rsa15, Basic256, Basic256Sha256 (in the example). The following figure shows the "UA Sample Client" of the OPC Foundation. The client has established a secure connection to the OPC UA server of an S7-1500 CPU to the end point "opc.tcp://192.168.178.151:4840 - [SignAndEncrypt: Basic256Sha256:Binary]". The security settings "SignAndEncrypt:Basic256Sha256" are contained in the end point.
Note Select an endpoint with as strict as possible a security policy Select an application-appropriate security policy for the end point and disable the less strict security policy at the OPC UA server. A Sha256 certificate is required for the most secure end points (Basic256Sha256) of the S71500 CPU OPC UA server.
Communication Function Manual, 11/2019, A5E03735815-AH
161
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Figure 9-8 "UA Sample Client" program of the OPC Foundation
A connection to a server end point is only established if the OPC UA client complies with the security policies of that end point.
Through the information provided by the OPC UA server OPC UA servers provide a wide range of information: The values of PLC tabs and DB components which clients may access. The data types of these PLC tags and DB components. Information on the OPC UA server itself and on the CPU. This gives clients an overview and allows them to read out specific information. Previous knowledge of the PLC program and the CPU data is not required. You do not need to ask the developer of the PLC program when PLC tags are to be read. All necessary information is stored on the server itself (for example, the data types of the PLC tags).
162
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Display of the information of the OPC UA server
You have the following options:
Online: You have all the available information displayed during the runtime of the OPC UA server. To do so, navigate (browse) the address space of the server.
Offline: You export an XML file that is based on the XML schemes of the OPC Foundation.
Server methods created by the user (FB instance that can be called by an OPC UA client) are not exported as of STEP 7 V15.1), see Providing methods on the OPC UA server (Page 227).
Offline with the Openness API: In your program, you use the API (Application Programming Interface) of the TIA Portal to access the function for exporting all PLC tags that can be read by OPC UA. This requires .NET Framework 4.0; see TIA Portal Openness, Automating SIMATIC projects with scripts (https://support.industry.siemens.com/cs/ww/en/view/109477163).
If you already know the syntax and the PLC program, you can access the OPC UA server without first researching the information.
9.3.1.3
Runtime behavior of the OPC UA server
OPC UA server in operation
The OPC UA server of the S7-1500 CPU starts when you activate the server and download the project to the CPU.
How to activate the OPC UA server is described here.
Behavior in the operating state STOP of the CPU
An activated OPC UA server remains in operation even if the CPU switches to "STOP". The OPC UA server continues to respond to requests from OPC UA clients.
Server response in detail:
If you request the values of PLC tags, you will get what were the latest values before the CPU switched to or was set to "STOP".
If you write values to the OPC UA server, the OPC UA server will accept those values.
However, the CPU will not process the values because the user program is not executed in "STOP" mode.
An OPC UA client can nonetheless read the values written at STOP from the OPC UA server of the CPU.
During restart, the CPU overwrites the values written at STOP with the start of the PLC tags.
If you call a server method, the error message 16#00AF_0000 (BadInvalidState) is output because the server method (user program) is not running.
Connections to the OPC UA server remain active during an operating mode transition (STOP > RUN or RUN > STOP). Exception: OPC UA-relevant data is loaded, see next section.
Communication Function Manual, 11/2019, A5E03735815-AH
163
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Download to the CPU may affect OPC UA server
If you load a CPU with running OPC UA server, you may need to stop and restart the server depending on the loaded objects. In this case, active connections are interrupted and must be re-established once the server restarts.
The duration of the restart depends mainly on the following parameters:
The scope of the data structure
The number of variables visible in the OPC UA address space
The setting for downward compatible data type definition according to OPC UA specification to V1.03 (TypeDictionary enabled)
Settings for the communication load and minimum cycle time, you can find additional information here (Page 284)
With CPU FW versions older than V2.8, the OPC UA server was stopped at each download to the CPU and then restarted.
As of FW version V2.8, the behavior of the OPC UA server has been optimized as follows:
When objects are downloaded in STOP operating state of the CPU, the OPC UA server still always stops and then restarts. STEP 7 does not show a warning in this case.
When objects are downloaded in RUN operating state of the CPU, the OPC UA server only stops if the downloaded objects are, or could be, OPC UA-relevant. The OPC UA server restarts after re-initialization due to the modified OPC UA data.
Before OPC-UA-relevant objects are loaded into the CPU and stop the OPC UA server, STEP 7 displays a warning in the preview dialog for loading. You can then decide whether a server restart is compatible for the running process or whether you want to cancel the download. These warnings are only displayed when the OPC UA server is running. If the OPC UA server is not enabled, modified OPC UA data have no influence on the download process.
Examples
You only want to add another code module to the program. Neither data blocks nor inputs, outputs, flags, times or counters are affected. Reaction during loading: A running OPC UA server is not interrupted.
You want to load a new data module and you have flagged the data module as non-OPCUA-relevant: Reaction during loading: A running OPC UA server is not interrupted.
You want to overwrite a data module. Reaction during loading: A warning appears that the server will be restarted. Background: STEP 7 cannot determine whether the changes refer to OPC-UA-relevant data or not.
164
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Reading CPU operating mode over OPC UA server The OPC UA server allows you to read out the CPU mode, see figure below:
Figure 9-9 Reading CPU operating mode over OPC UA server
In addition to the operating mode of the CPU you can, for example, read out information in the manual (DeviceManual) or firmware version (HardwareRevision).
9.3.2
Configuring access to PLC tags
9.3.2.1
Managing write and read rights
Enabling PLC tags and DB tags for OPC UA
OPC UA clients can have read and write access to PLC tags and DB tags if the tags are enabled for OPC UA (default setting). For an enabled tag the check box "Accessible from HMI/OPC UA" is activated.
You can change the default setting in the settings of the TIA Portal: Command "Settings > PLC programming > General" in "Options" menu. You will find the corresponding options in the "Block interface/data block elements" area.
Communication Function Manual, 11/2019, A5E03735815-AH
165
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
The following example shows an array data block:
Figure 9-10 Enabling PLC tags and DB tags for OPC UA tags
This array can be read completely in one pass by OPC UA clients (see Addressing nodes (Page 135)). The check boxes at "Accessible from HMI/OPC UA" and "Writable from HMI/OPC UA" are activated for all the components of the array. Result: OPC UA clients can both read and write these components.
Removing write rights
If you want to write-protect a tag, deselect the "Writable from HMI/OPC UA" option for that tag. This removes the write right for the OPC UA clients and HMI devices.
Result: Only read access by OPC UA clients and HMI devices is possible. OPC UA clients cannot assign values to this tag and therefore cannot influence execution of the S7 program.
Removing write and read rights To write-protect and read-protect a tag, disable the "Accessible from HMI/OPC UA" option for that tag (checkbox not selected). This makes the OPC UA server remove the tag from its address space. OPC UA clients can no longer see that CPU tag. Result: OPC UA clients and HMI devices can neither read nor write the tag.
Write and read rights of structures If you remove the read or write right for the component of a structure, the structure or the data block cannot be written or read as a whole. If you remove read and write rights for individual components of a PLC data type (UDT), the rights will also be removed from any data block based on that data type!
Visible in HMI engineering The option "Visible in HMI Engineering" applies to Siemens engineering tools. If you disable the option "Visible in HMI Engineering" (check mark not set), you can no longer configure the tag in WinCC (TIA Portal). The option does not have any effect on OPC UA.
166
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Rules
Only allow read access to PLC tags and tags of data blocks in STEP 7 if this is necessary for communication with other systems (controllers, embedded systems or MES).
You should not enable other PLC tags.
Only allow write access over OPC UA if write rights are genuinely necessary for specific PLC tags and tags of data blocks.
If you have reset the "Accessible from HMI/OPC UA" option for all elements of a data block, the data block for an OPC UA client is no longer visible in the address space of the OPC UA server of the S7-1500 CPU.
You can also prevent access to an entire data block centrally (see Managing write and read rights for a complete DB (Page 167)). This setting "overrules" the settings for the components in the DB editor.
See also
Coordinating write and read rights for CPU tags (Page 169)
9.3.2.2
Managing write and read rights for a complete DB
Hiding DBs or DB contents for OPC UA clients
You can easily prevent access to a complete data block by an OPC UA client.
With this option, the data of the corresponding DB, including instance DBs of function blocks, remains hidden for OPC UA clients.
In the default setting, data blocks can be read and written from OPC UA clients. You can change this default setting in the settings of the TIA Portal: Command "Settings > PLC programming > General" in "Options" menu. You will find the corresponding option in the "Default settings for new blocks" area.
Procedure
Proceed as follows to completely hide a data block for OPC UA clients or to protect a data block from write access from OPC UA clients:
1. Select the data block to be protected in the project tree.
2. Select the "Properties" shortcut menu.
Communication Function Manual, 11/2019, A5E03735815-AH
167
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
3. Select the "Attributes" area. 4. Select/clear the "DB accessible from OPC UA" checkbox as required.
Figure 9-11 Hiding DBs or DB contents for OPC UA clients
Note Effect on settings in the DB editor If you hide a DB using the DB attribute described here, the settings for the components in the DB editor are no longer relevant; individual components can no longer be accessed or written.
Tip: Using the overview of all program blocks If you are using multiple data blocks, it is appropriate to use the detailed overview of the "Program blocks" folder for selective activation or deactivation of the OPC UA accessibility. Follow these steps: 1. Select the "Program blocks" folder in the project tree. 2. Select the "Overview" command in the "View" menu. 3. Select the "Details" tab. An overview of the blocks with their attributes is displayed. 4. Ensure that the "Data block accessible via OPC UA" column is selected. 5. Select only the data blocks that are to be accessible via OPC UA.
Figure 9-12 Overview of the program blocks
168
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.2.3
Coordinating write and read rights for CPU tags
Definition of write and read rights in the information model (OPC UA XML) In the OPC UA information model, the attribute "AccessLevel" regulates access to tags. AccessLevel is defined bit by bit: Bit 0 = CurrentRead and Bit 1 = CurrentWrite. The meaning of the bit combinations is as follows: AccessLevel = 0: no access AccessLevel = 1: read only AccessLevel = 2: write only AccessLevel = 3: read+write
Example of the assignment of write and read rights (read+write)
Definition of write and read rights in STEP 7 When you define tags, you specify the access rights using the properties "Accessible from HMI/OPC UA" and "Writable from HMI/OPC UA".
Example of the assignment of write and read rights
Figure 9-13 Example of the assignment of write and read rights
Interaction between write and read rights If you have imported an OPC UA server interface and AccessLevel attributes are set in this OPC UA XML file, the write and read rights are defined by the following rule: The least extensive access rights for each setting apply.
Example AccessLevel = 1 (read only) in the OPC UA server interface Both "Accessible from HMI/OPC UA" and "Writable from HMI/OPC UA" are selected in
the PLC tag table Result: This tag can only be read.
Communication Function Manual, 11/2019, A5E03735815-AH
169
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Rules
If write rights are required: AccessLevel = 2 oder 3 "Writable from HMI/OPC UA" enabled If read rights are required: AccessLevel = 1 (AccessLevel 3 is also possible, but misleading. The settings suggests
that an OPC UA client has write and read rights) "Accessible from HMI/OPC UA" enabled, "Writable from HMI/OPC UA" disabled If neither read nor write rights are to be granted (no access): AccessLevel = 0 "Accessible from HMI/OPC UA" disabled
Only one of the two conditions needs to be met to block all access. In this case, review whether the tag in the OPC UA server interface is actually necessary at all.
Access table
"Accessible from HMI/OPC UA" must be set if access over OPC UA is to be possible at all. "Writable from HMI/OPC UA" must be set to allow an OPC UA client to write a tag / DB element.
Please see the table for the resulting access right.
Table 9- 2 Access table
OPC UA XML AccessLevel
0 x 1 2 3 2 3
(x = don't care)
STEP 7 (TIA Portal), for example tag table
Accessible from HMI/OPC UA
Writable from HMI/OPC Resulting access right UA
x
x
No access
0
x
No access
Enabled
x
Read only
Enabled
Disabled
No access
Enabled
Disabled
Read only
Enabled
Enabled
Write only
Enabled
Enabled
Read+write
See also
Consistency of CPU tags (Page 171) Managing write and read rights (Page 165)
170
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.2.4
Consistency of CPU tags
"AccessLevelEx" attribute extends access properties
As of firmware version V2.6, the OPC UA server of the S7-1500 CPU supports not only the attribute "AccessLevel" (see Coordinating write and read rights for CPU tags (Page 169)) but also the attribute "AccessLevelEx" which, in addition to the already explained bits for read access and write access, provides information on the consistency of a OPC UA tag. The new attribute was introduced with version V1.04 of the OPC UA specification (Part 3, Address Space Model).
Reading consistency properties In the OPC UA information model of the OPC UA server, the attribute "AccessLevel" defines the access. AccessLevelEx is defined bit by bit; in this case the relevant bits are: Bit 0 = CurrentRead Bit 1 = CurrentWrite Bits 2 to 7 are not relevant for the OPC UA server of an S7-1500 CPU The meaning of the bit combinations is explained in the section on read and write rights. The following bits for consistency are also added: Bit 8 = NonatomicRead; the bit is set if the tag cannot be read consistently. For read consistency of tags, bit 8=0. Bit 9 = NonatomicWrite; is set if the tag cannot be written consistently. For write consistency of tags, or if no write access is granted, bit 9=0.
Examples An OPC UA tag (structure) is readable and writable; but inconsistent for reading and writing access. Consequently: Bits 0, 1, 8 and 9 are set: AccessLevelEx = "771" (1+2+256+512). Another structure is read-only. Consequently: Bits 0 and 8 are set, bit 1 and bit 9 are not set: AccessLevelEx = "257" (1+0+256+0).
Communication Function Manual, 11/2019, A5E03735815-AH
171
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Handling of the attribute in the server The "AccessLevelEx" attribute is only available in the OPC UA server. The attribute is not present in a node set file (XML export file). However, the attribute "AccessLevel", which is exported, includes the information from "AccessLevelEx", see next section.
Export During XML export of the standard SIMATIC server interface, the server sets the "AccessLevel" attribute, which was expanded to 32 bits in V1.04 compared to V1.03, to the value of the "AccessLevelEx" attribute.
Import When importing a node set file (e.g. from an export of a server interface), the S7-1500 CPU sets the attribute "AccessLevelEx" according to its own estimate of the consistency of the imported data type, see next section. The imported value is ignored.
Consistency of data types at the server interface The consistency of tags ("atomicity" in the language usage of OPC UA) within a program cycle of an S7-1500 CPU is ensured at the nodes of the server interface for the following data types: BOOL, BYTE, WORD, DWORD, LWORD SINT, INT, LINT, DINT, USINT, UINT, ULINT, UDINT REAL, LREAL DATE, LDT, TIME, LTIME, TIME_OF_DAY, LTIME_OF_DAY, S5TIME CHAR, WCHAR System data types and hardware data types that are based on the above-mentioned data types are also consistent. Example: HW_ANY, derived from UINT (UInt16). Tip: If you browse in the address space of the S7-1500 CPU (e.g. with the OPC UA Client UaExpert), you can find the consistent data types under Types > BaseDataType > Enumeration/Number/String.
Tags of the following data types are not consistent ("nonatomic" in the language usage of OPC UA): SIMATIC structures are generally not consistent. This means that all tags which, for
example, have unknown structures or a UDT data type are not consistent. System data types such as DTL, IEC_Counter, IEC_TIMER, etc. are data types that are
derived from structures. Tip: If you browse in the address space of the S7-1500 CPU (e.g. with the OPC UA Client UaExpert), you can find data types based on structures under Types > BaseDataType > Structure.
172
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.2.5
Accessing OPC UA server data
High performance in line with application
OPC UA is designed for the transfer of a high volume of data within a short period of time. You can increase the performance significantly if you do not access individual PLC tags, but rather read and write arrays and structures as a whole.
It is fastest to access arrays. Therefore, you should combine the data for OPC UA clients into arrays.
Recommendations for access to the OPC UA server by the OPC UA client
For one-off or infrequent data access, use standard read/write access.
For cyclic access to small amounts of data (up to ca. every 5 seconds), use subscriptions.
Optimize the settings for the smallest publishing interval and the smallest sampling interval at the OPC UA server.
If you access specific tags regularly (recurring access), you should use the functions "RegisteredRead" and "RegisteredWrite".
Allow a greater communication load for the PLC by increasing the value for "Cycle load due to communication". Make sure that your application still works properly with the changed settings.
Procedure for creating an array DB You can create arrays for example in global data blocks, in the instance data block of a function block or as an array DB . The following sections describe how to create an ArrayDB. To create a data block with an array (array data block), follow these steps: 1. Select the CPU with the OPC UA server in the project tree. 2. Double-click "Program blocks". 3. Double-click "Add new block". 4. Click "Data block". 5. Select a unique name for the data block and accept the name that is already entered. 6. Select the "Array DB" entry from the drop-down list for "Type". 7. Select the data type for the individual components of the array from the drop-down list for "Array data type". 8. Enter the high limit of the array for "Array limit". 9. Click "OK".
Communication Function Manual, 11/2019, A5E03735815-AH
173
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.2.6
MinimumSamplingInterval attribute
MinimumSamplingInterval attribute of tags
In addition to "Value", "DataType" and "AccessLevel", you can also set the "MinimumSamplingInterval" attribute for a tag in the XML file that represents the server address space.
The attribute specifies how fast the server can sample the tag value.
The OPC UA server of the S7-1500 CPU handles the values for MinimumSamplingInterval as follows:
Negative values and values greater than 4294967 are set to -1; this means: The minimum sampling rate is indeterminate. The server does not specify how fast the tag value can be sampled.
Decimal numbers are rounded to three decimal places.
9.3.2.7
Export OPC UA XML file
Generating an OPC UA export file The OPC Foundation has specified a standard XML-based format for describing information models. It allows the information model of an OPC UA server to be provided to a client in advance, or information models can be downloaded to an OPC UA server. A file in this format is called a nodeset file because it describes an information model as a set of nodes.
With STEP 7 (TIA Portal) you can easily export the standard SIMATIC information model of the S7-1500 CPU as a server to an OPC UA XML file (node set file); including all PLC variables and methods you have enabled for OPC UA.
You use the OPC UA XML file for the offline configuration of an OPC UA client; it is structured according to the OPC UA specification and acts as a standard SIMATIC server interface.
To create and export the OPC UA XML file, follow these steps:
1. Select the CPU. Click on the CPU symbol (for example in the network view).
2. Click "General > OPC UA > Server > Export" in the properties of the CPU.
3. Click "Export OPC UA XML file".
4. Select the directory in which you want to save the export file.
5. Select a new name for the file or keep the name that is already entered.
6. Click "Save".
Note
As of STEP 7 (TIA Portal) V15.1, server methods are contained in the OPC UA export file (node set) together with their input and output parameters.
174
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Exporting all array elements separately If the "Export all array elements as separate nodes" option is selected in the CPU properties under "OPC UA > Server > Export", the OPC UA XML file contains all elements of arrays as individual XML elements. In addition, the arrays themselves are each described in an XML element in the XML file. If an array contains many array elements, the XML file can be very large.
Tip The following FAQ contains a converter with which you can convert the export file into CSV format. You then obtain a list of the tags of the CPU that can be accessed by OPC UA. You can find the FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742903).
9.3.3
Configuring the OPC UA server
9.3.3.1
Enabling the OPC UA server
Requirement
If you use certificates for secured communication, e.g. HTTPS, Secure OUC, OPC UA, make sure that the modules involved have the current time of day and the current date. Otherwise, the modules evaluate the used certificates as invalid and secure communication does not work.
You have acquired a runtime license for the operation of the OPC UA functions, see License for OPC UA (Page 198).
Commissioning an OPC UA server By default, the OPC UA server of the CPU is not enabled for reasons of security: OPC UA clients have neither write nor read access to the S7-1500 CPU. Follow these steps to activate the OPC UA server of the CPU: 1. Select the CPU. Click on the CPU symbol (for example in the network view). 2. Click "OPC UA > Server" in the properties of the CPU. 3. Activate the OPC UA server of the CPU. 4. Confirm the security notes. 5. Go to the CPU properties, select "Runtime licenses" and set the runtime license acquired for the OPC UA server. 6. Compile the project. 7. Download the project to the CPU. The OPC UA server of CPU now starts.
Communication Function Manual, 11/2019, A5E03735815-AH
175
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Settings remain stored
If you have already enabled the server and made settings, those settings are not lost if the server is disabled. The settings are saved as before and are available when you enable the server again.
Application name
The application name is the name of the OPC UA application and applies to the server and the client. The name is displayed under "OPC UA > General":
The default for the application name is: "SIMATIC.S7-1500.OPC-UA.Application:PLC_1".
The default consists of "SIMATIC.S7-1500.OPC-UA.Application:" and the name of the CPU selected under "General > Product information > Name", in this case "PLC_1".
The OPC UA server uses this application name to identify itself to a communication partner (OPC UA client), for example, when an OPC UA client uses the discovery service to detect accessible servers.
The displayed application name uses the OPC UA client of the CPU when connecting to an OPC UA Server. This means that the CPU enters this application name automatically as "ApplicationName" for the instruction "OPC_UA_Connect" (tag of type "OPC_UA_SessionConnectInfo" at the parameter "SessionConnectInfo" of the instruction "OPC_UA_Connect").
When you program the instruction "OPC_UA_Connect" you must therefore assign an empty string to the "ApplicationName". You can use the application name, for example, to identify the client and its sessions (SessionNames) for diagnostic purposes.
If you have activated the server, you can also use a different name that is meaningful in your project and that fulfills the requirements of your project, e.g. for worldwide uniqueness.
The example below originates from UaExpert:
Changing the application name
To change the application name, follow these steps:
1. Select the CPU. Click on the CPU symbol (for example in the network view).
2. Click "OPC UA > General" in the properties of the CPU.
3. Enter a meaningful name.
Please note that the application name is also entered on the certificate (Subject Alternative Name) and you may have to generate an existing certificate again after changing the application name.
176
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.3.2
Access to the OPC UA server
Server addresses
The OPC UA server of the S7-1500 CPU can be reached over all integrated PROFINET interfaces of the CPU (firmware V2.0 and higher).
Direct access to the OPC UA server of the CPU over the backplane bus of the automation system is not possible via CPs under the following conditions:
Configuration with TIA Portal Version V16 or higher, S7-1500 CPU firmware version 2.8 or higher and CP 1543-1 firmware version V2.2 or higher.
For configuration, see Access to OPC UA applications (Page 131).
Direct access to the OPC UA server of the CPU over the backplane bus of the automation system is not possible via CMs.
With SIMATIC S7-1500 SW controllers, access to the OPC UA server is possible via PROFINET interfaces that are assigned to the software PLC.
Additional access options of SW controllers are described in the following application example: Internal and external OPC UA connection via the virtual Ethernet interface of the software controller V2.5 or higher (https://support.industry.siemens.com/cs/ww/en/view/109760541).
Example for URLs (Uniform Resource Locator) that can be used to set up connections to the OPC UA server of the CPU:
Figure 9-14 Display of the server addresses
Communication Function Manual, 11/2019, A5E03735815-AH
177
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
The URLs are structured as follows: Protocol identifier "opc.tcp://" IP address
192.168.178.151 The IP address at which the OPC UA server can be accessed from the Ethernet subnet 192.168.178.
192.168.1.1 The IP address at which the OPC UA server can be accessed from the Ethernet subnet 192.168.1.
TCP Port number Default: 4840 (standard port) The port number can be changed under "OPC > UA > Server > Port".
Dynamic IP addresses In the example below, the IP address for the PROFINET interface [X2] has not yet been specified.
Figure 9-15 Display of the server addresses with dynamic IP address
The placeholder "<dynamically>" appears in the table. The IP address of this PROFINET interface is set later on the device, e.g. via the display of the CPU.
178
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Activating the standard SIMATIC Server interface If the "Enable standard SIMATIC server interface" option is selected, the OPC UA server of the CPU provides the enabled PLC tags and server methods to the clients, as was specified by SIEMENS in the self-defined namespace.
This option is selected in the default setting.
Leave the option selected so that OPC UA clients can automatically connect to the OPC UA server of the CPU and exchange data.
If you do not select this option, you must add the server interface by entering the "OPC UA communication" entry in the project tree. This interface is then used as OPC UA server interface, see OPC UA server interface configuration (Page 199).
Note General device information is readable even with deactivated standard SIMATIC server interface
Even if you disable the standard SIMATIC server interface, OPC UA clients can read general device information about the OPC UA server of the CPU.
Examples of such device information: DeviceManual, DeviceRevision, OrderNumber. In this case, however, all objects of the application program remain invisible to clients.
If you want to prevent that this device information is not visible, you have to disable the OPC UA server of the CPU.
9.3.3.3
General settings of the OPC UA server
TCP port for OPC UA
By default, OPC UA uses TCP port 4840. You can, however, select a different port. Entries from 1024 to 49151 are possible. You must, however, make sure that there are no conflicts with other applications. OPC UA clients must use the selected port when establishing a connection.
In the example below, port 48400 is selected:
Figure 9-16 TCP port for OPC UA
An overview of the supported protocols and the port numbers used by the S7-1500 CPUs can be found in section Communications protocols and port numbers used for Ethernet communication (Page 22).
Communication Function Manual, 11/2019, A5E03735815-AH
179
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Settings for sessions Maximum timeout for sessions In this field, you specify the maximum time period before the OPC UA server closes a session without data exchange. Possible values between 1 and 600000 seconds. Maximum number of OPC UA sessions In this field, you specify the maximum number of sessions the OPC UA server starts and simultaneously operates. The maximum number of sessions is dependent on the performance capability of the CPU. Each session ties up resources.
Maximum number of registered nodes In this field, you specify the maximum number of nodes the OPC UA server registers. The maximum number of registered nodes depends on the capacity of the CPU and is displayed when you configure the field content (place cursor in field). Each registration ties up resources.
Note No error message following attempt to register more than the configured maximum number of registrable nodes If a client tries to register more nodes during runtime than the configured maximum number, the server of the S7-1500 CPU only registers the configured maximum number. Starting from the configured maximum number of registrable nodes, the server returns the regular string node IDs unchanged to the client so that the speed advantage gained by registration for these nodes is lost. The client does not receive an error message. When configuring, make sure you have a sufficient reserve by taking into account the maximum number of nodes that can be registered (for example, using the technical data of the CPU).
Additional information Details on which ports are used by the various services for data transfer via TCP and UDP, and what are the points to note when using routers and firewalls can be found in the FAQ (https://support.industry.siemens.com/cs/ww/en/view/8970169).
180
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Backward compatible data type definitions according to OPC UA specification V1.03
The OPC UA specification (<= V1.03) defines mechanisms in order to read out data type definitions, for example for user-defined structures (UDTs), from a server by means of the TypeDictionaries.
In the OPC UA server properties of the CPU, you can set whether the CPU generates these backward compatible data type definitions according to the OPC UA specification V1.03 for the standard SIMATIC server interface or not.
Because TypeDictionaries are complex and result in large OPC UA XML files (server interfaces) which the client has to interpret, a simpler solution was introduced with OPC UA Specification V1.04 (attribute "DataTypeDefinition" at the data type node). If your client supports the OPC UA specification V1.04 or higher, then disable the option.
Advantages of the data type definitions according to OPC UA specification as of V1.04:
The server starts faster
The memory is used more efficiently
The "Browse" function is faster
9.3.3.4
Settings of the server for subscriptions
Subscription instead of cyclic queries
An alternative to cyclic queries for a PLC tag (polling) is to monitor this value. Use a Subscription: The server informs the client if the value of PLC tags changes. See "The OPC UA client".
One server usually monitors a large number of PLC values. For this reason, the server sends notifications to the client at regular intervals containing the new values of the PLC tags.
Advantages of subscriptions:
The server starts faster
The memory is used efficiently
Communication Function Manual, 11/2019, A5E03735815-AH
181
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
How frequently does the server send notifications? When a Subscription is set up, the OPC UA client specifies the intervals at which it wants to be sent the new values in the event of changes. To limit the communication load through OPC UA, set a minimum interval for the messages. For this purpose, use the parameters for the minimum publishing interval and the minimum sampling interval.
Figure 9-17 Principle of a subscription
Minimum publishing interval With "Minimum publishing interval", you set the time intervals at which the server sends a message to the client with the new values in the event of changes. 250 ms is used as the "Minimum sampling interval" in the figure below. The value 200 ms is entered as the "Minimum publishing interval".
Figure 9-18 Subscription settings
In the example, following a value change the OPC UA server will send a new message every 200 ms if the OPC UA client requests an update.
If the OPC UA client requests an update every 1000 ms, the OPC UA server will only send a message with the new values once every 1000 ms (one second).
If the OPC UA client requests an update every 100 ms, the server will still only send a message every 200 ms (minimum publishing interval).
182
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Minimum sampling interval
With "Minimum sampling interval", you set the time intervals at which the OPC UA server records the value of a CPU tag and compares it with the previous value to detect any changes.
If the sampling interval is selected smaller than the publishing interval and an OPC UA client requests a high sampling rate for certain PLC tags, two or more values may be measured during each publishing interval.
In this case, the OPC UA server writes the value changes into the queue and sends all value changes to the client after the completion of the publishing interval. If more value changes occur in the publishing interval than fit in the queue, the OPC UA server overwrites the oldest values (depending on the set "Discard Policy" of the client subscribing to the data, the option "Discard Oldest" has to be activated in this case). The most recent values are sent to the client.
Maximum number of monitored elements (monitored items)
In this field, you specify the maximum number of elements that the OPC UA server of the CPU simultaneously monitors for a value change.
The monitoring ties up resources. The maximum number of monitored elements is dependent on the utilized CPU.
Additional information
Information about the system limits of the OPC UA server of the S7-1500 CPUs (firmware V2.0 and V2.1) regarding subscriptions, sampling intervals and publishing intervals can be found in the following FAQ (https://support.industry.siemens.com/cs/ww/en/view/109755846).
When using subscriptions, certain status codes of errors provide information on the error that occurred. For information on causes and remedies for status codes of OPC UA client that appear, see the list of error codes in the online help of STEP 7 (TIA Portal) or in the following FAQ (https://support.industry.siemens.com/cs/ww/en/view/109755860).
See also
Rules for subscriptions (Page 284) Subscription diagnostics (Page 240)
9.3.3.5
Handling client and server certificates
A secure connection between the OPC UA server and an OPC UA client is only established when the server can prove its identity to the client. This is done with the server certificate.
Communication Function Manual, 11/2019, A5E03735815-AH
183
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server Certificate of the OPC UA server
When you have activated the OPC UA server and have confirmed the security prompts, STEP 7 automatically generates the certificate for the server and saves it in the local certificate directory of the CPU. You can view and manage this directory with the local certificate manager of the CPU (exporting or deleting certificates). The figure below shows the local certificate manager of the CPU with the automatically generated certificate for the OPC UA server:
Figure 9-19 Local certificate manager of the CPU
Alternatively, you can also generate a server certificate yourself. The certificate of the server is transferred from the server to the client during establishment of a connection. The client checks the certificate.
184
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
The client user decides whether the server certificate is to be trusted. The user at the client side now has to decide whether the server certificate is to be trusted. If the user trusts the server certificate, the client stores the server certificate in its directory containing the trusted server certificates. The following example shows a dialog of the client "UA Sample Client". When the user clicks the "Yes" button, the client trusts the server certificate:
Figure 9-20 Dialog of the client "UA Sample Client"
Where does a client certificate come from?
Client of the S7-1500 If you are using the OPC UA client of an S7-1500 CPU (OPC UA client enabled), you can create certificates for these clients with STEP 7 V15 and higher. 1. In the project tree, select the CPU you want to use as a client. 2. Double-click "Device configuration". 3. In the properties of the CPU, click "Protection & Security > Certificate manager". 4. Double-click "<Add new>" in the "Device certificates" table.
STEP 7 opens a dialog. 5. Click the "Add" button. 6. Select the "OPC UA client" entry from the "Usage" list.
Note: The IP addresses under which the CPU can be accessed in your system must be entered under "Subject Alternative Name (SAN)". You must therefore configure the IP interfaces of the CPU before you generate a client certificate. 7. Click "OK". STEP 7 now shows the client certificate in the "Device certificates" table.
Communication Function Manual, 11/2019, A5E03735815-AH
185
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
8. Right-click this line and select the "Export certificate" entry from the shortcut menu. 9. Select a directory where you will store the client certificate.
Clients of other manufacturers When you use UA clients from manufacturers or the OPC Foundation, a client certificate is generated automatically during installation or upon the first program call. You have to import these certificates via the global certificate manager in STEP 7 and use them for the corresponding CPU (as shown above). When you program an OPC UA client yourself, you can have the certificates generated by the program; see the section "Instance certificate for the client". Alternatively, you can generate certificates with tools, for example with OpenSSL or the certificate generator of the OPC Foundation: The procedure for OpenSSL is described here: "Generating PKI key pairs and certificates
yourself". Working with the certificate generator of the OPC Foundation is described here: "Creating
self-signed certificates".
Announcing client certificates to the server You need to send client certificates to the server to allow a secure connection to be established. To do this, follow these steps: 1. Select the "Use global security settings for certificate manager" option in the local certificate manager of the server. This makes the global certificate manager available. You will find this option under "Protection & Security > Certificate manager" in the properties of the CPU that is acting as server. If the project is not yet protected, select "Security settings > Settings" in the STEP 7 project tree, click the "Protect this project" button and log on. The "Global security settings" item is now displayed under "Security settings" in the STEP 7 project tree. 2. Double click "Global security settings". 3. Double click "Certificate manager". STEP 7 opens the global certificate manager. 4. Click on the "Trusted certificates" tab. 5. Right-click in the tab on a free area (not on a certificate). 6. Select the "Import" command from the shortcut menu. The dialog for importing certificates is displayed. 7. Select the client certificate that the server is to trust. 8. Click "Open" to import the certificate. The certificate of the client is now contained in the global certificate manager. Note the ID of the client certificate just imported.
186
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9. Click the "General" tab in the properties of the CPU that is acting as server. 10.Click "OPC UA > Server > Security > Secure Channel". 11.Scroll down in the "Secure Channel" dialog to the section "Trusted clients". 12.Double-click in the table on the empty row with "<add new>". A browse button is
displayed in the row. 13.Click this button. 14.Select the client certificate that you have imported. 15.Click the button with the green check mark. 16.Compile the project. 17.Load the configuration onto the S7-1500 CPU. Result: The server now trusts the client. If the server certificate is also considered trusted, the server and client can establish a secure connection.
Accepting client certificates automatically When you select the option "Automatically accept all client certificates during runtime" (below the "Trusted clients" list), the server automatically accepts all client certificates.
NOTICE Setting after commissioning In order to avoid security risks, deactivate the "Automatically accept client certificates during runtime" option again after commissioning.
Communication Function Manual, 11/2019, A5E03735815-AH
187
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Configuring security settings of the server The figure below shows the available server security settings for signing and encrypting messages.
Figure 9-21 Configuring security settings of the server
By default, a server certificate is created that uses SHA256 signing. The following security policies are enabled:
None Unsecured end point
Note Disabling security policies you do not want
If you have enabled all security policies in the secure channel settings of the S7-1500 OPC UA server (default setting) thus, also the end point "None" (no security) unsecured data traffic (neither signed nor encrypted) between the server and client is also possible. The identity of the client remains unknown with "No security". Each OPC UA client can then connect to the server irrespective of any subsequent security settings.
When configuring the OPC UA server, make sure that only security policies that are compatible with the security concept of your machine or plant are selected. All other security policies should be disabled.
Recommendation: If possible, use the setting "Basic256Sha256".
Basic128Rsa15 -Sign Insecure end point, supports a series of algorithms that use the hash algorithm RSA15 and 128-bit encryption. This endpoint protects the integrity of the data through signing.
188
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Basic128Rsa15 -Sign & Encrypt Secure endpoint, supports a series of algorithms that use the hash algorithm RSA15 and 128-bit encryption. This endpoint protects the integrity and confidentiality of the data through signing and encrypting.
Basic256Rsa15 -Sign Secure endpoint, supports a series of algorithms that use the hash algorithm RSA15 and 256-bit encryption. This endpoint protects the integrity of the data through signing.
Basic256Rsa15 -Sign & Encrypt Secure endpoint, supports a series of algorithms that use the hash algorithm RSA15 and 256-bit encryption. This end point protects the integrity and confidentiality of the data through signing and encrypting.
Basic256Sha256 - Sign Secure endpoint, supports a series of algorithms for 256-bit hashing and 256-bit encryption. This endpoint protects the integrity of the data through signing.
Basic256Sha256 - Sign & Encrypt Secure endpoint, supports a series of algorithms for 256-bit hashing and 256-bit encryption. This endpoint protects the integrity and confidentiality of the data through signing and encryption.
To enable the security setting, click the check box in the relevant line.
Note
If you use the settings "Basic256Sha256 -Sign" and "Basic256Sha256 -Sign & Encrypt", the OPC UA server and OPC UA clients must use "SHA256"-signed certificates.
For the settings "Basic256Sha256 -Sign" and "Basic256Sha256 -Sign & Encrypt", the certificate authority of STEP 7 automatically signs the certificates with "SHA256".
"No Security" security policy and authentication via user name and password
You can set the following combination:
Security policy = "No Security" and authentication via user name and password.
The OPC UA server of the S7-1500 supports this combination. OPC UA clients can connect and encrypt the authentication data or not.
OPC UA client of the S7-1500 CPU also supports this combination: However, in runtime it only connects if it can send the authentication data encrypted via cable!
See also
Generating server certificates with STEP 7 (Page 190)
Communication Function Manual, 11/2019, A5E03735815-AH
189
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.3.6
Generating server certificates with STEP 7
The description below shows the procedure for generating new certificates with STEP 7 and applies in principle to various uses of the certificates. STEP 7 sets the appropriate purpose in this case "OPC UA Client & Server" - depending on which area of the CPU properties is used to start the following dialog.
Recommendation: To use the full functionality for the security of the OPC UA server, use the global security settings.
The global security settings are enabled in the CPU properties under "Protection & Security > Certificate manager".
Customizing server certificates
STEP 7 automatically generates a certificate for the OPC UA server of the S7-1500 when you activate the server (see "Activating the OPC UA server (Page 175)"). In the process STEP 7 uses the default values for the parameters of the certificate. If you want to change the parameters, follow these steps:
1. Click the Browse button under "General > OPC UA > Server > Security > Secure channel > Server certificate" in the properties of the CPU. A dialog is displayed that shows the certificates available locally.
2. Click the "Add" button.
190
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
3. The dialog for generating new certificates is displayed (figure below). The values for an example are already entered:
Figure 9-22 Customizing server certificates
4. Use other parameters if this is necessary in accordance with the security specifications in your company or your customer.
Communication Function Manual, 11/2019, A5E03735815-AH
191
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Explanation of fields for certificate generation
CA
Select whether the certificate is to be self-signed or signed by one of the CA certificates of the TIA Portal. The certificates are described under "Certificates with OPC UA". If you want to generate a certificate that is to be signed by one of the CA certificates of the TIA-Portal, the project must be protected and you must be logged in as a user with all the required function rights. Further information can be found under "Basics of user administration in the TIA Portal".
Certificate holder
The default setting always consists of the name of the project and "\OPCUA-1". In the example, the project name is "PLC1". In the properties of the CPU set the project name under "General > Project information" > Name". Keep the default or enter a different name that is more meaningful for the OPC-UA server under "Certificate holder".
Signature
Here you select the hash and encryption process that is to be used when signing the server certificate. The following entries are available:
"sha1RSA",
"sha256RSA".
Valid from
Here you enter the date and time for the beginning of the validity of the server certificate.
Valid until
Here you enter the date and time for the end of the validity of the server certificate. Ensure that the certificate is valid not only for one year or a few years. In the example the certificate is valid for 30 years. However, for reasons of security you should renew the certificate at much shorter intervals. The long period of validity gives you the opportunity to decide when a suitable moment would be, for example, when the system is being serviced.
192
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Usage
The default is "OPC UA client & server". Keep this default for the OPC UA server. The "Create a new certificate" dialog can be called from several points in STEP 7. If, for example, you call this dialog for the Web server of the CPU, "Web server" is entered under "Usage". The following entries are available in the Usage drop-down list:
"OPC UA client"
"OPC UA client & server"
"OPC UA server"
"TLS"
"Web server"
Subject Alternative Name (SAN)
The following is entered in the example above: "URI:urn:SIMATIC.S7-1500.OPCUAServer:PLC1,IP:192.168.178.151,IP:192.168.1.1". This URI must be correctly entered because it is checked against the communicated application description.
The following entry would also be valid: "IP: 192.168.178.151, IP: 192.168.1.1". The important thing here is that the IP addresses via which the OPC UA server of the CPU can be accessed are entered here.
See "Access to the OPC UA server (Page 177)".
This allows OPC UA clients to verify whether a connection to the OPC UA server of the S7-1500 is really to be established or whether in fact an attacker is trying to send manipulated values from another PC to the OPC UA client.
9.3.3.7
User authentication
Types of user authentication
For the OPC UA server of the S7-1500, you can set what authentication is required for a user of the OPC UA client wishing to access the server.
You have the following options:
Guest authentication
The user does not have to prove their authorization (anonymous access). The OPC UA server does not check the authorization of the client user
If you want to use this type of user authentication, select the "Enable guest authentication" option under "OPC UA > Server > Security > User authentication".
Note
To increase security, you should only allow access to the OPC UA server with user authentication.
Communication Function Manual, 11/2019, A5E03735815-AH
193
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
User name and password authentication
The user has to prove their authorization (no anonymous access). The OPC UA server checks whether the client user is authorized to access the server. Authorization is given by the user name and the correct password.
If you want to use this type of user authentication, select the "Enable user name and password authentication" option under "OPC UA > Server > Security > User authentication".
Deactivate the guest authentication.
Enter the user in the "User management" table.
To do so, click the "<Add new user>" entry. A new user is created with an automatically assigned name. You can edit the user name and enter the password for the user name. You can add a maximum of 21 users.
Additional user administration via the security settings of the project
The "Enable additional user administration via the security settings of the project" option can be found under the general OPC UA settings (CPU properties: OPC UA > General). If you select this option, the user management for the open project will also be used for user authentication for the OPC UA server: The same user names and passwords are then valid in OPC UA as in the current project.
Proceed as follows to activate user management for the project:
Click "Security settings > Settings" in the project tree.
Click the "Protect this project" button.
Enter your user name and your password.
Enter additional users under "Security settings > Users and roles".
If you configure an additional OPC UA server in your project, also select the option "Enable additional user administration via the security settings of the project". Repeated input of user names and passwords is then unnecessary.
See also
User authentication (Page 275) Users and roles with OPC UA function rights (Page 194)
9.3.3.8
Users and roles with OPC UA function rights
The following options for user authentication use central project settings for project users:
For the server:
For configuration of CPU properties (OPC UA > Server > Security > User authentication). Option: "Enable additional user administration via the security settings of the project"
For the client:
For configuration of client interface ("Configuration" tab, "Security"). Option: "User (TIA Portal - security settings)"
194
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Requirement
Before you can edit the security settings, the project must be protected and you must be logged on with sufficient rights, for example as administrator.
Settings in the project tree > "Security settings"
You access the central user settings and roles in the protected project in the project tree under "Security settings". This is where you centrally define users with user name, password and function rights. You can simply use these settings elsewhere.
Figure 9-23 Setting user and roles
Reusing central security settings Examples for reusing elsewhere: User selection for user authentication for OPC UA server With this setting, you tell the server which client (user) with which user name and which password is allowed to access the server. User selection for OPC UA client authentication With this setting, you tell the client the user name and password that it is to use for client authentication for the server. The settings for the client and server must correspond: The user name and password used by the client to log on must have been set up on the server and assigned the required authorizations.
Function rights for server and client The corresponding function rights for the client or the server must also be enabled for users of the client function and users of the server function on an S7-1500 CPU. It is not enough simply to save the user name and password centrally. Here is an example to illustrate this type of rights use. 1. Under "Security settings > Users and roles", you define a new role in the "Roles" tab with the name "PLC-opcua-role-all-inclusive", for example. Tip: The tab may be covered by an information window ("The current status has not yet been checked..."). In this case, first close the information window. 2. In the "Categories of function rights" section, you navigate to the runtime rights and then to the CPU function rights, and select the CPU whose function rights you want to set, for example PLC_2.
Communication Function Manual, 11/2019, A5E03735815-AH
195
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
3. You will find the following function rights in the "Function rights" section:
OPC UA server access
This function right apples on the OPC UA server of the S7-1500 CPU. Only when this option is selected does a user of the CPU PLC_2 server who has been assigned the role "PLC-opcua-role-all-inclusive" have the following right: For the establishment of a session with the server, the user requires client authentication with one of the user names and corresponding passwords that have been centrally defined (and loaded to the CPU).
User authentication of the OPC UA client
This function right apples on the OPC UA client of the S7-1500 CPU (with client instructions). Only when this option is selected can the user of the client of CPU PLC_2 who has been assigned the role "PLC-opcua-role-all-inclusive" use the user name and password for authentication to establish a session with a server.
Figure 9-24 Setting function rights
4. The role "PLC-opcua-role-all-inclusive" still needs to be assigned to the relevant users ("Users" tab under "Security settings" in the project tree).
See also
User authentication (Page 193) User authentication (Page 275)
196
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.3.9
Diagnostic settings of the server
Diagnostics
You can specify the scope of the diagnostics of the OPC UA server in the CPU settings. To change the diagnostics scope, navigate to the "OPC UA > Server > Diagnostics" area.
Figure 9-25 Diagnostic settings of OPC UA server
Default setting
The default setting is a diagnostics behavior that supports the most important diagnostics without appreciably increasing the communication load.
You enable diagnostics for subscriptions when the OPC UA server also uses subscriptions, i.e. if necessary during the commissioning phase only.
Reason: A large volume of diagnostic activity generates a high communication load in the CPU and may suppress other important messages. Or, the high volume of diagnostics may result in important messages disappearing in the mass of messages and being ignored.
Additional information
You will find additional information on the meaning and effect of the settings shown above here (Page 233).
Communication Function Manual, 11/2019, A5E03735815-AH
197
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.3.10
License for OPC UA
Runtime licenses
A license is required to run the OPC UA server of the S7-1500 CPU. The type of license required depends on the performance of the respective CPU. The following license types are differentiated:
SIMATIC OPC UA S7-1500 small (required for CPU 1511, CPU 1512, CPU 1513, ET 200SP CPUs, CPU 1515SP PC)
SIMATIC OPC UA S7-1500 medium (required for CPU 1515, CPU 1516, Software Controller CPU 1507, CPU 1516pro-2PN)
SIMATIC OPC UA S7-1500 large (required for CPU 1517, CPU 1518)
The required license type is displayed under "Properties > General > Runtime licenses > OPC-UA > Type of required license":
Figure 9-26 OPC UA server Runtime licenses
To confirm purchase of the required license, follow these steps: 1. Click "Runtime licenses > OPC UA" in the properties of the CPU. 2. Select the required license from the "Type of purchased license" drop-down list.
198
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.4
OPC UA server interface configuration
9.3.4.1
What is a server interface?
Definition
A server interface combines nodes of an OPC UA address space of a CPU into a unit, so that a specific view on this CPU is provided for OPC UA clients.
Each server interface defines one or more namespaces in the OPC UA server of the CPU.
STEP 7 (TIA Portal) differentiates between the following types of server interfaces:
Companion specification
For this type of server interface, you use a Companion Specification created by a workgroup, for example.
The workgroup is typically composed of members of the OPC Foundation and another industry organization who have jointly specified an OPC UA information model for a specific purpose (for example, for data exchange with RFID devices or with injection molding machines).
This information model is realized in the form of OPC UA nodes in the address space of an OPC UA server. OPC UA clients can access these OPC UA nodes.
You can also use the server interface type "Companion specification", for example, to download company-internal information models, e.g. in SiOME.
If you implement a certain companion specification in your project, you apply the specifications of this companion specification into your project as server interface.
For "Companion specification"-type server interfaces, you can import multiple namespaces which the Companion specification uses.
Additional information on companion specifications is available here (Page 218).
Additional information on SiOME is available here (https://support.industry.siemens.com/cs/ww/en/view/109755133).
User-defined server interface:
For this type of server interface you combine OPC UA nodes of an OPC UA server into a unit.
To do this, use the specifications for your project or the requirements for your machine or your plant as a basis.
Additional information on the user-defined server interface is available here (Page 201).
Communication Function Manual, 11/2019, A5E03735815-AH
199
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Injection molding machine as an example for companion specification
In this example, a server interface contains the following elements:
OPC UA nodes which you can write with an OPC UA client to receive information about this injection molding machine (in readable PLC tags)
OPC UA nodes which you can write with an OPC UA client to transfer values to the injection molding machine (in writable PLC tags)
OPC UA nodes which you can call with an OPC UA client to start functions of the injection molding machine (via server methods)
This server interface enables a default view of a CPU, which can be used to control an injection molding machine.
For injection molding machines, the companion specification "Euromap" defines a whole series of OPC UA nodes which you can combine in a server interface.
Other OPC UA nodes of the CPU are not included in this server interface. This provides a better overview.
Example of user-defined server interface
A CPU should control the production of workpieces. Production begins when a production job arrives from the higher-level control system.
The production jobs are transferred via a server method: A control system transmits information on a workpiece by calling the server method in the CPU. This server method also starts production.
The control system, i.e. the connected OPC UA client, should only see this one server method. Therefore, you create a user-defined server interface in the CPU and assign the server method to this server interface. You enable only this server interface for OPC UA clients and thus limit the view of the CPU to this one function.
See also
Using OPC UA companion specifications (Page 206)
200
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.4.2
Creating a user-defined server interface
Introduction
The description is based on the following example:
A protective fence surrounds the production cell "Cell_1". The fence is equipped with the gate "Gate_1".
An S7-1500 CPU controls the entire production cell and also controls access through Gate_1.
A robot packs drugs into boxes in the production cell and then stacks the boxes on pallets.
Self-driving vehicles for automated material transport move the pallets to the central warehouse, thereby passing through Gate_1.
The CPU publishes a server interface via which the driverless transport systems arrange for Gate_1 to open.
The server interface contains the server method "smOpenGate" for opening the gate and the tag "Gate_1_State" which indicates the status of the gate (open or closed).
Creating a user-defined server interface To create an Server interface, follow these steps: 1. Select the CPU that you have used and configured as OPC UA server. 2. Click "OPC UA communication > Server interfaces". 3. Double-click "Add new server interface". STEP 7 displays the following dialog.
Figure 9-27 Adding the server interface
4. Change the name of the new server interface so that it is descriptive in your project. In the example, change the name "Server-interface_1" suggested by STEP 7 to "Cell_1".
5. Click "Server interface" and then "OK".
Communication Function Manual, 11/2019, A5E03735815-AH
201
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
6. Click on the triangle in front of "Program blocks" in the area "OPC UA elements" to open the "Program blocks" folder. STEP 7 displays the following table for editing:
Figure 9-28 Editing the server interface
The editor is divided into two areas. OPC UA server interface
On the left is the root node of the server interface "Cell_1". This interface is currently still empty: No OPC UA elements have been added to the server interface yet. OPC UA elements On the right are the OPC UA elements. OPC UA elements are objects that have been created so far in the STEP 7 project and have the property "Accessible from HMI/OPC UA". You can add the OPC UA elements to the new server interface "Cell_1". 7. Drag the OPC UA elements into the "<Add new>" line of the new server interface.
Note The following applies in general: If you store data blocks or technology objects in the left area of the table, STEP 7 (TIA Portal) creates an object in the server interface. The elements of the data blocks are arranged as separate nodes below this. If you store structures in the left area of the table, STEP 7 creates a node for the structure as a whole and nodes for each element of the structure. The same applies to arrays: Again, STEP 7 creates a node for the array as a whole and nodes for each element of the array. When you place a method in the left area of the table, STEP 7 creates a single node; the arguments of the inserted method are displayed for information purposes.
In the example, you drag the "Gate_1_State" tag from the right area to the left area to "<Add new>". Then, drag the server method into the left area. This server method is located within the "smOpenGate_DB [DB3]" data block in the right area.
202
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
STEP 7 (TIA Portal) displays the dialog as follows:
Figure 9-29 Adding OPC UA elements to the server interface
Limiting the view to OPC UA servers By selecting the OPC UA elements, you limit the view to the OPC UA server and the options of the OPC UA clients. In the server interface of the example, the "Robot_1" data block is missing because industrial trucks do not need access to the server methods and tags of the robot. In this case, it is best to disable the standard server interface (SIMATIC namespace) in the OPC UA properties of the S7-1500 CPU so that the filtered nodes cannot be accessed any other way.
Figure 9-30 Disabling the standard server interface
You can also disable the visibility of each configured server interface in the properties of the server interface and thus prevent that this server interface can be used by clients during operation. This option lets you define multiple server interfaces, for example, and download only the required server interface.
Communication Function Manual, 11/2019, A5E03735815-AH
203
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Once a server interface has been defined, you can drag it to another CPU in the project tree.
Figure 9-31 Disabling the visibility of the server interface
Information on the server interface The "OPC UA Server Interface" dialog is structured as a table and provides the following information: Note that not all columns are displayed initially. You determine what is displayed by rightclicking on the header line of the table. When a row is selected, you can display the OPC UA attributes of the node in the Inspector window ("OPC UA attributes" area), such as node ID, node class, node type, and description. BrowseName The language neutral name of the user-defined server interface is at the top (BrowseName). This name can be freely selected. The names (BrowseNames) of the individual OPC UA nodes that have been added to the server interface are under the name of the interface. You cannot change the name of an OPC UA node in this dialog. The names come from the STEP 7 project. You can delete an OPC UA node from the table. This means that it no longer belongs to the server interface and is no longer visible to OPC UA clients. DisplayName Similar to BrowseName. However, the name can be translated and is displayed, if available, in the corresponding language. Node ID NodeId of the OPC UA node, e.g. http://Server-Node_1; i=1
204
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Node type Type of the OPC UA node, for example BOOL, BYTE, INT. These node types were defined by Siemens, not by the OPC Foundation. For example, the OPC Foundation uses the Boolean node type for BOOL. BOOL is directly derived from Boolean. The specified node type cannot be changed in this dialog: If you want to use a different node type, you must change the type of the respective PLC tags in the STEP 7 project.
Data type The SIMATIC data type used in the STEP 7 project is specified, for example, Bool, Byte, Int. etc.
Access level If an OPC UA node is a tag (UAVariable type), the node can only be readable (RD) or readable and writable (RD/WR). If an OPC UA node is a method (UAMethod type), this node can always be called.
Local data The SIMATIC data type of the data block in the CPU, from which the value of an OPC UA node (UAVariable type) is read, or to which a value is written.
Consistency check You have the option to check the server interface. During the consistency check, STEP 7 checks whether the OPC UA nodes of the server interface are each assigned to a suitable OPC UA element (identical data type) or whether the used element still exists in the CPU. To check the consistency of the server interface, click on the following icon in the toolbar of the OPC UA server interface editor:
Figure 9-32 "Consistency check" button
Export interface You have the option of exporting the OPC UA server interface as an XML file. This XML file contains all data type definitions referenced by the server interface. To export the OPC UA server interface, click on the following icon in the toolbar of the OPC UA server interface editor:
See also
Figure 9-33 "Export interface" button
Master copies for OPC UA communication (Page 286)
Communication Function Manual, 11/2019, A5E03735815-AH
205
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.4.3
Using OPC UA companion specifications
Introduction
OPC UA is universally applicable: The standard itself does not, for example, specify how PLC tags are to be named. It is also up to the individual user (application developer) to program and name server methods that can be called over OPC UA.
Information modeling and standardization for devices and sectors
For applications of the same kind, it is worth standardizing your device or machine interface with the "OPC UA toolkit".
Many different bodies and working groups have driven forward standardization and developed a range of companion specifications.
These specifications define:
The objects, methods and tags with which a typical device or machine is to be described.
The namespace intended for the specified objects.
Machines are typically structured in functional or technological units, and these units are then standardized.
Companion specifications offer machine and plant operators the benefits of a standardized interface. For example, all RFID readers that comply with the AutoID specifications can be integrated in the same way. This means that all RFID readers that comply with the AutoID specifications can be addressed by OPC UA clients in the same way irrespective of manufacturer.
Another example of companion specifications is the Euromap 77 Companion Specifications from the injection molding machinery sector.
The following section uses the example of Euromap 77 to detail how to apply companion specifications in STEP 7 (TIA Portal) and create the necessary PLC tags.
Example: Euromap 77
Euromap 77 standardizes the exchange of data between injection molding machines and the higher-level MES (Manufacturing Execution System). This allows the MES to connect all lower-level injection molding machines in the same way.
The standardized data interface facilitates the integration of injection molding machines into a plant.
206
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Using companion specifications: Overview Euromap 77 is described in the OPC UA XML file "Opc_Ua.EUROMAP77.NodeSet2.xml".
Note Euromap 77, Euromap 83 and OPC UA for Devices (DI) With Release Candidate 2, some of the Euromap definitions have been transferred from Euromap 77 to Euromap 83. You will therefore also need to import the OPC UA server interface of Euromap 83. "OPC UA for Devices" is a generally applicable information model for the configuration of hardware and software components. The information model also serves as the basis for other companion standards and is therefore also imported.
The OPC UA XML files are available here: Euromap77 (http://www.euromap.org/euromap77) Euromap83 (http://www.euromap.org/euromap83) OPC UA for Devices (https://opcfoundation.org/UA/schemas/DI/) These XML files define an OPC UA interface of an injection molding machine that complies with Euromap 77.
Using Euromap 77: Overview To use Euromap 77, proceed as follows: 1. Generate an XML file by creating an instance of the type "IMM_MES_InterfaceType" using the SiOME program. How to proceed is described below in "Step 1: Create instances in SiOME". 2. In STEP 7 (TIA Portal), create PLC tags and server methods that correspond to the instance of the type "IMM_MES_InterfaceType" (created in Step 1). See below for information on how to proceed in "Step 2: Create PLC tags in STEP 7". An example of OPC UA nodes and the corresponding PLC tags can be found in section "Creating a server interface for companion specification (Page 218)". 3. In STEP 7 (TIA Portal), add a new server interface of companion specification type and import the XML file you created in step 1. The "Creating a server interface for companion specification (Page 218)" section describes how to proceed. 4. Assign the OPC UA nodes of the new server interface to the corresponding PLC tags, which you created in step 2. The "Creating a server interface for companion specification (Page 218)" section describes how to proceed.
Communication Function Manual, 11/2019, A5E03735815-AH
207
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Step 1: Create instances in SiOME The following section describes how to use the free program "SiOME", the "Siemens OPC UA Modeling Editor". With SiOME, you can create an OPC UA XML file, which describes the server interface (an information model). Download link and explanations about SiOME are available here (https://support.industry.siemens.com/cs/ww/en/view/109755133).
Procedure in STEP 7 To use the new server interface, import the server interface into the STEP 7 project, see section "Creating a server interface for companion specification (Page 218)". When the project is loaded into the CPU, the new server interface is available for OPC UA clients.
Procedure in SiOME 1.7.3 The following description shows the work steps in SiOME 1.7.3. To use Euromap 77, create an XML file with an instance of "IMM_MES_InterfaceType". The object type must be instantiated in order for the information model of the specific machine to appear in the address space of the OPC UA server. The object type "IMM_MES_InterfaceType" is the root object type of Euromap 77. "IMM" stands for "Injection Moulding Machine". Follow these steps: 1. Download the files "Opc_Ua.EUROMAP77.NodeSet2.xml" and
"Opc_Ua_EUROMAP83_NodeSet2.xml" from the Euromap website (see above). 2. Download the file "Opc.Ua.Di.NodeSet2.xml" from the OPC Foundation website.
The "Opc.Ua.Di.NodeSet2.xml" file contains type definitions which Euromap 77 uses. 3. Start SiOME. 4. First, import the namespace "http://opcfoundation.org/UA/DI/".
To do so, click the "Import XML" button in the "Information model" area.
Figure 9-34 "Import XML" button in SiOME
SiOME displays the dialog for the opening files. 5. To import the file, select the "Opc.Ua.Di.NodeSet2.xml" file and click "Open".
Result: SiOME imports the XML file and shows the namespace "http://opcfoundation.org/UA/DI/" in the "Namespaces" area. The standard namespace "http://opfoundation.org/UA/" is always available in SiOME and does not have to be imported.
208
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
6. Now import the namespace "http://www.euromap.org/euromap83/" To do so, click the "Import XML" button again in the "Information model" area. Select the file "Opc_Ua.EUROMAP83.NodeSet2.xml". Result: SiOME imports the XML file and shows the namespace "http://www.euromap.org/euromap83/" in the "Namespaces" area.
7. Now import the namespace "http://www.euromap.org/euromap77/" To do so, click the "Import XML" button again in the "Information model" area. Select the file "Opc_Ua.EUROMAP77.NodeSet2.xml".
8. Create your own namespace for your project. To do this, right-click in the "Namespaces" area on "OPC UA Modelling Editor Project" or on "Namespaces" and select "Add Namespace". SiOME opens the "Add Namespace" dialog.
9. Enter the name of a new namespace. The "YourCompany.org" namespace is used in the example. SiOME now also displays the new namespace:
Figure 9-35 Display of the namespace in SiOME
10.Create an instance from the root object type IMM_MES_InterfaceType of the Companion specification Euromap 77. To do so, in the "Information model" area, right-click the "DeviceSet" directory and select "Add Instance".
SiOME displays the "Add Instance" dialog.
11.For "Name", enter a meaningful name for your instance.
In the example, enter "IMM_Manufacturer_01234".
For "TypeDefinition", select "IMM_MES_InterfaceType".
This object type is the root object type of Euromap 77: If you generate an instance of this object type, then use the Euromap 77 once in the address space of your OPC UA server.
Communication Function Manual, 11/2019, A5E03735815-AH
209
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
12.Click "OK". SiOME shows the new instance "IMM_Manufacturer_01234" in the "Information model" area under "DeviceSet":
Figure 9-36 Display information model
13.Create an instance of the data type "InjectionUnitType". To do this, right-click on the "InjectionUnits" directory in the "Information model" area and select "Add Instance". SiOME displays the "Add Instance" dialog. For "Name", enter a meaningful name for the instance. In the example, enter "InjectionUnit_1". For "TypeDefinition", select "InjectionUnitType". Click "OK".
14.Create a new "Mould_1" instance of the "MouldType" object type in the "Moulds" directory.
15.Create a new instance "PowerUnit_1" of the "PowerUnitType" object type in the "PowerUnits" directory.
210
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
16.Save the XML file. To do so, click the "Quick save" button in the "Information model" area:
Figure 9-37 "Quick save" button in SiOME
17.Export the XML file. To do so, click the "Export XML" button in the "Information model" area.
Figure 9-38 "Export XML" button in SiOME
SiOME shows the "Export XML" dialog. 18.Leave all namespaces activated and click "OK".
SiOME displays the "Save as" dialog. 19.Select a meaningful name and save the exported file.
In the example, name the XML file "IMM_Manufacturer_01234". Result: You have now created an XML file which uses the companion specification "Euromap 77" once (with one instance).
Communication Function Manual, 11/2019, A5E03735815-AH
211
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Step 2: Creating PLC tags for the Euromap 77 instance in STEP 7. For Euromap 77, you must provide PLC tags and server methods in your user program and assign the instance of the "IMM_MES_InterfaceType" type. To create PLC tags for the instance of the "IMM_MES_InterfaceType" type, proceed as follows. 1. Create a user-defined data type (UDT). The figure below shows the beginning of the user-defined data type "InjectionUnit" as example. This data type has the same structure as "InjectionUnit" in the type "IMM_MES_InterfaceType". Make sure that you use SIMATIC data types that are compatible with the OPC UA data types (see "Mapping of data types" below).
Result
Figure 9-39 Creating a UDT in STEP 7
2. Add a new global data block to your STEP 7 project. In the example, name the data block "IMM_Manufacturer_01234", so that there is a reference to the injection molding machine of the respective manufacturer and the serial number.
3. Create a new element in this data block. In the example, name this element "InjectionUnit_1"
4. Assign the new user-defined data type "InjectionUnit" to this element.
In your STEP 7 project, you have created a tag for the Euromap 77 in the "IMM_Manufacturer_01234" data block.
212
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.4.4
Rules for OPC UA XML files
Importing exported OPC UA XML files to an S7-1500 CPU
Please note the following information when importing server interfaces that come from the OPC UA XML export of an S7-1500.
Note Import blocked for namespace "http://www.siemens.com/simatic-s7-opcua"
You cannot import server interfaces with the namespace "http://www.siemens.com/simatics7-opcua" to an S7-1500 CPU because this namespace is reserved for S7-1500 CPUs (standard SIMATIC server interface) and is not available for imports.
If you want to import a server interface with the namespace "http://www.siemens.com/simatic-s7-opcua", open the server interface to be imported (OPC UA XML file) and change the namespace in the relevant places. The file thus changed can then be imported.
Integrity of the OPC UA XML files OPC UA XML files represent the server address space. These files are, for example, imported by you in the context of OPC UA Companion specifications as a server interface after adaptation to the application, loaded with the hardware configuration into the S7-1500 CPU and tested.
WARNING No checking of imported OPC UA XML files Protect these OPC UA XML files against unauthorized manipulation since STEP 7 does not check the integrity of these files.
Recommendation To minimize risks in the case of an extension or adaptation of the server address space, follow these steps: 1. Protect the project (project navigation: Security settings > Settings). 2. Export the corresponding server interface before the extension or adaptation. 3. Revise this OPC UA XML file. 4. Import the file again as a server interface.
Communication Function Manual, 11/2019, A5E03735815-AH
213
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.4.5
Data types for companion specifications
Mapping of data types
The table below shows the compatible SIMATIC data type for each OPC UA data type.
Assign the data types as shown below (SIMATIC data type - OPC UA data type). Other assignments are not permitted. STEP 7 does not check the observance of this rule and does not prevent an incorrect assignment. You are responsible for the rule-compliant selection and assignment of the data types.
You can also use the listed data types, for example, as elements of structures/UDTs for input and output parameters of self-created server methods (UAMethod_InParameters and UAMethod_OutParameters).
Table 9- 3 Mapping of data types
SIMATIC data type
OPC UA data type
BOOL
Boolean
SINT
SByte
INT
Int16
DINT
Int32
LINT
Int64
USINT
Byte
UINT
UInt16
UDINT
UInt32
ULINT
UInt64
REAL
Float
LREAL
Double
LDT
DateTime
WSTRING
String
DINT
Enumeration (Encoding Int32) and all derived data types
User-defined data type required (UDT, user-defined data UNION and all derived data types type)
The user-defined data type must be created with the prefix "Union_", for example "Union_MyDatatype". See example below the table.
The first element (Selector) in this UDT must have the data type "UDINT".
214
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
User-defined data type for UNION required The figure below shows the tag "MyVariable", which has the "Union_MyDatatype" data type. This SIMATIC data type corresponds to an OPC UA tag with the data type UNION. The figure shows an example of the declaration: When Selector = 1, Union takes a ByteArray; when Selector = 2, Union takes a WString.
Using other OPC UA basic data types Apart from the OPC UA data types listed in the section "Mapping of data types" and their correspondences on the SIMATIC side, there are the following OPC UA basic data types which you can also use: OpcUa_NodeId OpcUa_QualifiedName OpcUa_Guid OpcUa_LocalizedText OpcUa_ByteString OpcUa_XmlElement Requirement for the use of the basic data types listed above as variables in the application program: The basic data types have to exist as complex data types that are structured exactly like the corresponding OPC UA basic data types. OpcUa_NodeId and OpcUa_QualifiedName exist as system data types; that's why you can use these data types not only for single variables but also as elements of a structure. For the remaining basic types you have to create a PLC data type in accordance with the OPC UA specification and subsequently use it as an element in a structure so that the data types of the elements can be resolved. What each PLC data type must look like is described below for every single basic data type. "EUInformation" is an example of a data structure in which, for example, the UDT "LocalizedText" is used. EUInformation contains information on EngineeringUnits. You can find an example of the implementation of the EUInformation data structure at the end of the PLC data type descriptions.
Communication Function Manual, 11/2019, A5E03735815-AH
215
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
System data type "OPC_UA_NodeId" For the OPC UA basic data type "OpcUa_NodeId", please refer to the following table for the meaning of the parameters. Use OPC_UA_NodeId for the identification of a node in the OPC UA server.
Parameter NamespaceIndex Identifier
IdentifierType
S7 data type UINT WSTRING[254]
UDINT
Meaning Namespace index of the node in the OPC UA server. A node can, for example, be a tag. The designation of the node (object or tag) depends on the identifier type:
· Numeric identifier: The node is labeled with a number, for example "12345678".
· String identifier: The node is labeled with a name, for example "MyTag". No distinction is made between upper and lower case.
Type of identifier
· 0: Numeric identifier · 1: String identifier · 2: GUID · 3: Opaque
System data type "OPC_UA_QualifiedName" See the following table for the structure of the system data type "OPC_UA_QualifiedName":
Name NamespaceIndex Name
S7 data type UINT WSTRING[64]
Meaning The namespace index of the name. Name of the node or tag.
UDT "Guid"
For the basic data type "Guid", create the following PLC data type. The default values used as examples can also be set differently.
Figure 9-40 "Guid" UDT
216
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
UDT "LocalizedText" For the basic data type "LocalizedText", create the following PLC data type:
Figure 9-41 "LocalizedText" UDT
The EncodingByte indicates which fields (Locale or Text) are available:
EncodingByte 0 1 2 3
Meaning The fields Locale and Text are empty The field Locale has content, the field Text is empty The field Locale is empty, the field Text has content The fields Locale and Text have content
UDT "ByteString"
For the basic data type "ByteString", create the following PLC data type; in this case, for example, a ByteString array with 12 elements:
Figure 9-42 "ByteString" UDT
Communication Function Manual, 11/2019, A5E03735815-AH
217
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
UDT "XmlElement" An XmlElement is a serialized XML fragment (UTF-8 string). For the basic data type "XmlElement", create the following PLC data type:
Figure 9-43 "XmlElement" UDT
Example: Structure of EUInformation with UDT "LocalizedText"
Figure 9-44 Example: Structure of EUInformation with UDT "LocalizedText"
9.3.4.6
Creating a server interface for companion specification
For basic information on companion specifications, refer to the section "Using OPC UA companion specifications (Page 206)". The benefits of the Euromap 77 companion scpecification, which provides a model for injection molding machines, is also discussed in detail there.
Using this companion standard, the S7-1500 CPU can control an injection molding machine, for example, and provide an OPC UA client, such as a higher-level MES system, with an interface for accessing the functions and tags of injection molding machine.
An OPC UA server interface of the type "Companion Standard" limits the access of clients to exactly those functions and tags that are required, for example, for higher-level systems (MES systems).
The following description shows how to create a server interface in STEP 7 (TIA Portal) which contains only the Euromap 77 companion specification.
If you want to make OPC UA clients accessible to other tags or methods than those required for the management of an injection molding machine, simply create another OPC UA server interface. In this way, you can clearly arrange the functionality of the CPU as OPC UA server.
218
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Creating a server interface for a companion specification To create a server interface for a companion specification with STEP 7 (TIA Portal), proceed as follows: 1. Select the CPU that you want to use as an OPC UA server. 2. In the project tree, click "OPC UA communication > Server interfaces". 3. Double-click "Add new server interface". 4. To select this type of server interface, click "Companion specification". A general name for the new server interface is entered in the dialog, for example "Server_Interface_1". 5. Change the name of the new server interface so that it is descriptive in your project. The name should have the following structure according to Euromap 77: "IMM_<Manufacturer>_<Serial number>". The example uses the name "IMM_Manufacturer_01234".
Communication Function Manual, 11/2019, A5E03735815-AH
219
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
6. In the "Import XML file" field, select an XML file that describes an information model. The "Using OPC UA companion specifications (Page 206)" section describes how to create such an XML file with the SiOME tool. The figure below shows a section from the information model: "IMM_MANUFACTURER_0123456" an instance (use) of the type "IMM_MES_InterfaceType" which was defined by Euromap 77 . "InjectionUnit_1" is an instance of the "InjectionUnitType" type of Euromap 77.
220
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
7. Click "OK". STEP 7 (TIA Portal) imports the information model described in the selected XML file. An error occurs when type definitions are used in the imported XML file that are not yet present in STEP 7 (TIA Portal) and that are also not contained in the imported XML file. In the example, an XML file is imported that uses type definitions defined in the following namespaces (Namespaces): http://opcfoundation.org/UA/DI/ http://www.euromap.org/euromap83/ http://www.euromap.org/euromap77/ Tip: STEP 7 displays missing namespaces in the lower area of the OPC UA interface editor ("Properties" tab). To do this, select the server interface in the project tree (here: IMM_Manufacturer_01234) and select the "Namespaces" area in the inspector window. Missing namespaces are selected. If one or more namespaces are missing in your STEP 7 project, create a new server interface of the "Reference namespace" type for each namespace. The "Creating a server interface for reference namespace (Page 223)" section describes the procedure. If all reference namespaces are available, STEP 7 displays the table without errors:
8. Drag the OPC UA elements from the right area of the table (OPC UA elements) to the left part of the table (OPC UA server interface) so that the respective OPC UA elements (the local PLC tags) are assigned to the respective OPC UA nodes of Euromap 77.
Communication Function Manual, 11/2019, A5E03735815-AH
221
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
The figure below shows a section from the assignment of the local data (PLC tags) to the OPC UA nodes of the Euromap 77:
Information on the server interface
The editor for configuring the OPC UA server interface is structured as a table and provides the following information:
Name
The top node (root node) is named "IMM_Manufacturer_01234" in the example. If a client browses in the address space of the server, this node is the container for all lower-level nodes. BrowseName and the DisplayName of this node depend on the name you have assigned for the server interface.
In this case, for example, this name stands for the injection molding machine as a whole. It is the name of the instance of the Euromap 77 companion specification that is used here. According to the companion specification, the instance name should begin with "IMM", followed by the name of the manufacturer of the injection molding machine; the serial number of the machine is added to the end. This allows a unique identification of the machine.
The names of all other (lower-level) nodes are defined by the specification (in the example above by Euromap 77). These node names must not be changed. This ensures a uniform view of all injection molding machines, which complies with the specification.
Node type
Type of the OPC UA node. The type is specified by the companion specification that is used.
In the following cases, STEP 7 marks a node type in the table in color:
No definition is included for this in the imported XML file or
The namespace in which the type was defined is not available in STEP 7.
In this case, create a server interface of the "Reference namespace" type for the missing namespace or for each of the missing namespaces.
The missing namespaces can be found under "Namespaces" in the properties of the server interface.
222
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Local data STEP 7 displays the data block which is assigned to the OPC UA node: The CPU reads the value of the OPC UA node from this data block. If a data block is highlighted in color (e.g. after a consistency check), the specified data block is not available in the CPU. In this case, you have to create the missing data block in the CPU (of user program) and supply it with values.
Data type The SIMATIC data type of the PLC tag (e.g. element of a data block) in the CPU, from which the value of an OPC UA node (UAVariable type) is read, or to which a value is assigned.
Consistency check You have the option to check the server interface. STEP 7 (TIA Portal) checks whether the OPC UA node of the server interface PLC tags (data blocks) has been assigned compatible SIMATIC data types. To check the consistency of the server interface, click on the following icon in the toolbar of the OPC UA server interface editor:
Export interface
You have the option of exporting the OPC UA server interface as an XML file. This XML file contains all data type definitions referenced by the server interface.
To export the OPC UA server interface, click on the following icon in the toolbar of the OPC UA server interface editor:
9.3.4.7
Creating a server interface for reference namespace
Companion specifications and referenced namespaces
A series of OPC UA object types (as well as additional definitions) are defined in a companion specification. These object types are each defined in namespaces so that the names of the object types (type definitions) are unique.
To use a companion specification in your project, create instances of object types of this companion specification.
To do this the object definitions must be available in your STEP 7 project. If this is not the case, you must import the object definitions. To import all definitions of a namespace, create a server interface of type "Reference namespace" for each namespace in STEP 7.
Communication Function Manual, 11/2019, A5E03735815-AH
223
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Example Euromap 77 You have added a server interface for the companion specification Euromap 77 . The server interface uses object types defined in OPC UA DI as well as in Euromap 83 and Euromap 77 in their corresponding namespaces. Therefore, in addition to the server interface Euromap 77 of the "Companion Specification" type, create additional server interfaces of "Reference namespace" type in STEP 7, in each case for the following namespaces: http://opcfoundation.org/UA/DI/ http://www.euromap.org/euromap83/ http://www.euromap.org/euromap77/ The following description shows you how to proceed.
Creating a server interface for a reference namespace To create a server interface for a namespace, proceed as follows: 1. Select the CPU that you want to use as an OPC UA server. 2. Click "OPC UA communication > Server interfaces". 3. Double-click "Add new server interface". STEP 7 (TIA) now displays the dialog "Add new server interface". A general name for the new server interface is entered in the dialog, for example "Server_Interface_1". 4. Assign a descriptive name for the new server interface. In the example, select the name "OPC.Ua.Di" or a similar name that clearly references the namespace "http://opcfoundation.org/UA/DI/". This namespace must be imported first. It contains basic definitions (for example, the UAObjectType "DeviceType").
224
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
5. For "Import XML file", select an XML file that contains the definitions of the namespace "http://opcfoundation.org/UA/DI/". Select the file "Opc.Ua.Di.NodeSet2.xml" in the example. You can download this file here: (https://opcfoundation.org/UA/schemas/DI/) The figure below shows the dialog with the entries:
6. Click "OK".
STEP 7 (TIA) now generates the new server interface.
You can find the server interface in the project navigation of STEP 7 (TIA Portal), under "OPC UA Communication > Server interfaces > Namespace references".
If a companion specification uses additional namespaces, add a new server interface for each namespace.
Add additional server interfaces for Euromap77
For Euromap 77, you still need the following namespaces:
http://www.euromap.org/euromap83/
http://www.euromap.org/euromap77/
First, add a server interface for the namespace "http://www.euromap.org/euromap83/".
This namespace contains basic definitions for Euromap 77, therefore it is required here first. All definitions of this namespace are included in the XML file "Opc_Ua.EUROMAP83NodeSet2.xml", which you can download from the Euromap website (www.euromap.org/en/euromap83).
Then add a server interface for the namespace "http://www.euromap.org/euromap77". All definitions of this namespace are included in the XML file "Opc_Ua.EUROMAP77.NodeSet2.xml", which you can also download from the Euromap website (www.euromap.org/en/euromap77).
Communication Function Manual, 11/2019, A5E03735815-AH
225
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.4.8
Notes on configuration limits when using server interfaces
When you use OPC UA server interfaces, you must comply with limits for the following objects in line with the S7-1500 CPU performance class:
Number of server interfaces
Number of OPC UA nodes
Load object data volume
If you have implemented methods: Number of server methods or server method instances
Configuration limits for OPC UA server interfaces and methods
The table below sets out the configuration limits for S7-1500 CPUs; these must also be taken into account when you compile and load a configuration (up-to-date technical specifications of the CPUs can be found on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td)).
A violation of configuration limits results in an error message.
Table 9- 4 Configuration limits for OPC UA server interfaces
Technical specification value
CPU 1510SP (F)
CPU 1505 (S/SP/SP F/SP T/SP TF) CPU 1507S (F)
CPU 1511 (C/F/T/TF) CPU 1515 (F/T/TF)
CPU 1517 (F/T/TF)
CPU 1512C
CPU 1515 SP PC (F/T/TF)
CPU 1518 (F)
CPU 1512SP (F)
CPU 1516 (F/T/TF)
CPU 1513 (F)
Use of imported companion specifications (information models)
Maximum number of OPC UA server interfaces:
· "Companion specification" type 10
10
10
· "Reference namespace" type
20
20
20
· "Server interface" type
10
10
10
· Maximum number of OPC UA nodes in user-defined server interfaces
1000
5000
30000
· Maximum size of loadable OPC 1024 KB UA server interfaces
5120 KB
15360 KB
Provision of methods
Maximum number of usable server 20
50
100
methods or max. number of server
method instances (instructions
OPC_UA_ServerMethodPre,
OPC_UA_ServerMethodPost)
226
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.5
Providing methods on the OPC UA server
9.3.5.1
Useful information about server methods
Providing user program for server methods
On the OPC UA server of an S7-1500 CPU (as of firmware V2.5), you have the option of providing methods via your user program. These methods can be used by OPC UA clients, for example to start a manufacturing job using the method call of the S7-1500 CPU.
OPC UA methods, an implementation of "Remote Procedure Calls", provide an efficient mechanism for interactions between different communication nodes. The mechanism provides both job confirmation and feedback values so you no longer have to program handshaking mechanisms.
Using OPC UA methods, you can transfer data consistently without trigger bits/handshaking, for example, or trigger specific actions on the controller.
How does an OPC UA method work?
An OPC UA method in principle operates like a know-how protected function block that is called by an external OPC UA client in runtime.
The OPC UA client only "sees" the defined inputs and outputs. The content of the function block, the method or algorithm, remains hidden to the external OPC UA client. The OPC UA client receives feedback on successful execution and values returned by the function block (method), or an error message if execution has not been successful.
As the programmer, you have full control over and responsibility for the program context in which the OPC UA method runs.
Rules for programming a method and runtime behavior
Make sure that the values returned by the OPC UA method are consistent with the input values provided by the OPC UA client.
Follow the rules on assigning name and the structure of parameters, and the permitted data types (see description of the OPC UA server instructions).
Behavior during runtime: The OPC UA server accepts one call per instance. The method instance is not available for other OPC UA clients until the call has been processed by the user program or has timed out.
The basic procedure for implementing a user program as a server method is set out below.
Communication Function Manual, 11/2019, A5E03735815-AH
227
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Implementing a server method
A program (function block) for implementing a server method is structured as follows:
1. Querying the server method call with OPC_UA_ServerMethodPre
You first call the "OPC_UA_ServerMethodPre" instruction in your user program (i.e. in your server method).
This instruction has the following tasks:
With this instruction you ask the OPC UA server of the CPU whether your server method was called from an OPC UA client.
If the method was called and the server method has input parameters, your server method now receives the input parameters.
The input parameters of the server method come from the calling OPC UA client.
2. Editing the server method
In this section of the server method, you provide the actual user program.
You have the same options as in any other user program (for example, access to other function blocks or global data blocks).
If the server method uses input parameters, these parameters are available to you.
This section of the server method should only be executed if an OPC UA client has called the server method.
After successful execution of the method, you set the output parameters of the server method if the method has output parameters.
3. Responding to server method with OPC_UA_ServerMethodPost
To complete the server method, call the "OPC_UA_ServerMethodPost" instruction.
Use the parameters to notify the "OPC_UA_ServerMethodPost" instruction whether or not the user program has been processed.
If the user program has been successfully executed, the OPC UA server is notified via the relevant parameters. The OPC UA server then sends the output parameters of the server method to the OPC UA client.
Always call the instructions "OPC_UA_ServerMethodPre" and "OPC_UA_ServerMethodPost" as a pair irrespective of whether the user program is processed by both instructions or continued in the next cycle.
You will find an example of a server method implementation in the STEP 7 online help.
228
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Integrating the server method The diagram below shows how an OPC UA client (A) calls the server method "Cool":
The CPU executes the instance "Cool1" of the server method "Cool" in the cyclic user
program . The CPU first uses the instruction "OPC_UA_ServerMethodPre" to query whether an OPC UA client has called the server method "Cool" .
If the server method has not been called, program execution returns directly to the cyclic
user program over and . The CPU resumes the cyclic user program after "Cool1".
If the server method has been called, this information is returned to the server method
"Cool" over . The actual functionality is now executed in the Cool server method,
see"<Method Functionality>" in the graphic.
The server method then uses the instruction "OPC_UA_ServerMethodPost" to notify the firmware (B) that the instruction has been executed . The firmware returns this information over to the calling OPC UA client (A).
Communication Function Manual, 11/2019, A5E03735815-AH
229
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
The CPU resumes the cyclic user program after "Cool1".
A
Call of the server method and management of the "Done" information (method complete)
Asynchronous call of the server method
Asynchronous "Done" information for the method called (method complete)
B
Wait for OPC UA client calls, management of calls in the queue, forwarding of "Done" information from the cyclic
user program to the OPC UA client
Data transfer from the OPC UA server to the method instances of the user program and vice versa
C
Check whether method has been called.
If it has, forwarding of input data from the OPC UA server to the method instance of the user program and feed-
back to the method instance that the method has been called ("called")
Synchronous call of the instruction OPC_UA_ServerMethodPre as a multi-instance stating the storage area for the
input data from the OPC UA server.
The return value indicates whether or not the method has been called by the OPC UA client.
Check whether the method has been completed or is still active ("busy").
D
Check whether the method has been completed.
If it has, the output data of the method instance is forwarded to the OPC UA server and the method instance is
notified that the method has been completed. The OPC UA server is notified.
Call of the method FB (in this case: FB Cool) with the required instance and the process parameters
Figure 9-45 Example: Calling the "Cool" server method
Information about server instructions
The "OPC_UA_ServerMethodPre" and "OPC_UA_ServerMethodPost" are described in detail in the help to the Instructions > Communication > OPC UA > OPC UA server.
See also
Boundary conditions for using server methods (Page 231)
230
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.5.2
Boundary conditions for using server methods
Permitted data types
If you provide server methods, observe the following rule:
Assign the data types as shown below (SIMATIC data type - OPC UA data type). Other assignments are not permitted.
STEP 7 does not check the observance of this rule and does not prevent an incorrect assignment. You are responsible for the rule-compliant selection and assignment of the data types.
You can also use the listed data types, for example, as elements of structures/arrays/UDTs for input and output parameters of self-created server methods (UAMethod_InParameters and UAMethod_OutParameters).
SIMATIC data type BOOL SINT INT DINT LINT USINT UINT UDINT ULINT REAL LREAL LDT WSTRING DINT
User-defined data type required (UDT, user-defined data type) The user-defined data type must be created with the prefix "Union_", for example "Union_MyDatatype". The first element (Selector) in this UDT must have the data type "UDINT".
OPC UA data type Boolean SByte Int16 Int32 Int64 Byte UInt16 UInt32 UInt64 Float Double DateTime String Enumeration (Encoding Int32) and all derived data types UNION and all derived data types
Communication Function Manual, 11/2019, A5E03735815-AH
231
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Number of implementable server methods and number of arguments
If you implement server methods via your user program, the number of usable methods is limited depending on the CPU type, see the following table (up-to-date technical data of the CPUs can be found in the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td)).
Technical specification value
Maximum number of usable server methods or max. number of server method instances (OPC_UA_ServerMethodPre, OPC_UA_ServerMethodPost instructions) Maximum number of arguments per method (More than the specified number of arguments can be configured and loaded into the CPU, but an OPC UA client cannot call the method).
CPU 1510SP (F) CPU 1511 (C/F/T/TF) CPU 1512C CPU 1512SP (F) CPU 1513 (F) 20
20
CPU 1505 (S/SP/SP F/SP T/SP TF) CPU 1515 (F/T/TF) CPU 1515 SP PC (F/T/TF) CPU 1516 (F/T/TF)
CPU 1507S (F) CPU 1517 (F/T/TF) CPU 1518 (F)
50
100
20
20
Error message when exceeded
If the maximum number of server methods is exceeded, the OPC_UA_ServerMethodPre or OPC_UA_ServerMethodPost instructions report the error code 0xB080_B000 (TooManyMethods).
Supply of structured data types with nested arrays
If a structured data type (Struct/UDT) contains an array, the OPC UA server does not provide information about the length of this array.
If you use such a structure as the input or output parameter of a server method, for example, you must ensure that the nested array is supplied with the correct length when the method is called.
If you do not adhere to this rule, the method fails with the error code "BadInvalidArgument".
232
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.6
Using diagnostics options
9.3.6.1
Diagnostics of the OPC UA server
Online diagnostics of the OPC UA server The S7-1500 CPU OPC UA server can be diagnosed online with standard OPC UA clients, such as UaExpert. The diagnostic information is subdivided into the following areas: Server Diagnostics Sessions Diagnostics Subscriptions Diagnostics
In the address space of the server, for example, the following nodes are available with diagnostic information:
ServerDiagnosticsSummary: Server diagnostics summary
CurrentSessionCount: Number of active sessions
SecurityRejectedSessionCount: Number of sessions rejected due to mismatching end point security settings between client and server
SessionsDiagnosticsSummary: Session diagnostics summary
ActualSessionTimeout: Set time that a session lasts, e.g. in the event of disconnection
SubscriptionsDiagnosticsArray: ARRAY with one element per subscription for each session
Communication Function Manual, 11/2019, A5E03735815-AH
233
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Figure 9-46 Server diagnostics
The SessionsDiagnosticsSummary node also shows the properties of the client application accessing the server within the session.
Figure 9-47 Sessions diagnostics with the properties of the client application
Diagnostics of the connection between client and server
To diagnose the status of the connection during program runtime in the client, use the following instruction:
OPC_UA_ConnectionGetStatus: Read connection status.
234
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
9.3.6.2
Server state transition diagnostics
Information on the server state
S7-1500 CPUs as of firmware version V2.8 are able to create an entry in the diagnostic buffer upon state changes of the OPC UA server.
The diagnostic buffer displays the new state.
The cause of the state change is also displayed, such as download to the CPU, POWER OFF - POWER ON transition, user program instruction or service request from a partner (client).
Requirement
The "Change of OPC UA server status" option is selected (OPC UA > Server > Diagnostics) in the OPC UA properties of the CPU.
Note If this option is selected, the CPU also automatically enters the lowest set security policy into the diagnostic buffer after startup.
Examples
If the OPC UA server of the CPU shuts down due to a download process and then starts with a valid new configuration, the diagnostic buffer shows new server state, e.g. Shutdown => Starting => Running.
If the OPC UA server shuts down due to a download process and the server cannot start because the type dictionary is too large, the diagnostic buffer finally shows the state "Failed" (Shutdown => Starting => Failed).
Communication Function Manual, 11/2019, A5E03735815-AH
235
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Server states and state transitions
,
POWER ON or Load in RUN, if OPC UA relevant data could be affected.
Loading the hardware configuration with deactivated OPC UA server. The server remains shut down.
Loading the hardware configuration with activated OPC UA server and faulty OPC UA data (for example, too many structures with the result that the type dictionary becomes too
large). In this case, the server cannot start (see ).
OPC UA server cannot start due, for example, to faulty configuration.
Figure 9-48 Server states and state transitions
Description of the server states The individual states that the OPC UA server can assume are explained below.
Server states Shutdown
Starting Running Failed
Explanation Initial status · After POWER ON · After loading the hardware configuration with activated or deactivated OPC UA
server. · After loading OPC UA relevant data
OPC UA address space in server is initialized. OPC UA server running (normal productive state for OPC UA server). Error state. OPC UA server cannot start due, for example, to faulty configuration.
9.3.6.3
Session state transition diagnostics
Information on the session state
S7-1500 CPUs as of firmware version V2.8 are able to create an entry in the diagnostic buffer for state changes of an OPC UA session.
The diagnostic buffer displays the new state. The corresponding session ID is also displayed.
236
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Requirement
The "Change of session states" option (OPC UA > Server > Diagnostics) is selected in the OPC UA properties of the CPU.
Example
A client transmits incorrect authentication data (for example, incorrect password) when a connection is established. The new state of the "ActivationFailed" session is entered with the corresponding session ID in the diagnostic buffer.
Subscription states and state transitions
Client connects to server, login with correct authentication data (correct credentials). Client closes connection correctly. Client no longer sends messages; session ends with timeout. Client connects to server, login with incorrect authentication data.
Figure 9-49 Session states and state transitions
9.3.6.4
Check for security events
If the CPU diagnostics detects a security event during the OPC UA communication, it can enter it in the diagnostic buffer.
Requirements
S7-1500 CPUs as of firmware version 2.8
The "Check for security events" option is activated (properties of the CPU > OPC UA > Server > Diagnostics).
Communication Function Manual, 11/2019, A5E03735815-AH
237
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Security events detected in diagnostics
S7-1500 CPUs perform diagnostics on the following OPC UA relevant security events:
Client-certificate is invalid (for example, syntactically or semantically incorrect, incorrect signature, current date is not in the validity period)
User name/password login failed (deactivated or incorrect data)
Client wants to use a specific security policy or a specific message security mode; the server does not support the security policy or the requested security mode.
Client does not establish connection according to specification (OPC UA Spec) (for example, unexpected SecureChannelID/SessionID/client Nonce)
Example
If an attempt is made to compromise communications (for example, by session hijacking, man-in-the-middle attacks etc.), the server detects this via analysis.
9.3.6.5
Request of a remote client failed S7-1500 CPUs as of firmware version V2.8 are able to create an entry in the diagnostic buffer for the following events: Bad client requests (incorrect use) Service error occurred CPU-specific high limits of the OPC UA server were violated
Example of a faulty client request
For example, there is an incorrect request when a client addresses a node (tag) that does not exist or if a resource is requested that does not exist.
In this case, the corresponding service that caused the fault is entered in the diagnostic buffer and the corresponding session ID is also entered.
Service fault
If a service itself fails, the server returns a ServiceFault. In this case, the status code (Bad...) and the according session ID are entered in the diagnostics buffer.
Example of limit violations
If a service request exceeds a CPU-specific limit, for example, number of sessions, number of monitored items, number of subscriptions, etc., this diagnostics is entered in the diagnostics buffer. Together with the message, it is indicated which limit has been violated.
Exception: If you summarize diagnostics and the message occurs frequently, the limit causing the error is not entered. You receive general information that the supported configuration limit has been violated.
238
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Possible entries for the service that is causing the error Depending on the client application used, requests to the server can be triggered differently from the user's viewpoint, for example, by an online tool with a graphical user interface or by instructions in a client's program. With its service-oriented architecture, OPC UA follows a request-response paradigm, therefore the respective client application converts the requests into the service requests defined in OPC UA. The names of these services are defined and grouped according to their use, see also opcfoundation.org. In the case of an incorrect use, you can find precisely these names of the services, together with the corresponding session ID, in the diagnostic buffer as the service that caused the error. The services available with OPC UA are listed below.
Discovery Service Set FindServers GetEndpoints
Session Service Set CreateSession ActivateSession CloseSession Cancel
View Service Set Browse BrowseNext TranslateBrowsePathsToNodeIds RegisterNodes UnregisterNodes
Attribute Service Set Write Read
Method Service Set Call
Communication Function Manual, 11/2019, A5E03735815-AH
239
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Monitored Item Service Set CreateMonitoredItems ModifyMonitoredItems DeleteMonitoredItems SetMonitoringMode SetTriggering
Subscription Service Set CreateSubscription ModifySubscription DeleteSubscriptions Publish Republish SetPublishingMode
9.3.6.6
Subscription diagnostics
Information about a subscription
S7-1500 CPUs as of firmware version V2.8 are able to create an entry in the diagnostic buffer at state changes of a subscription.
The diagnostic buffer displays the new state; exception: "KeepAlive".
Requirement
In the OPC UA properties of the CPU, the option "Subscriptions: Change of status" (OPC UA > Server > Diagnostics) is selected.
Example
An OPC UA client is connected to an S7-1500 CPU as OPC UA server and generates a subscription in the server.
The diagnostic options for subscriptions are selected in the OPC UA properties of the CPU.
The "Creating" and "Normal" states are entered one after the other with the corresponding subscription ID in the diagnostic buffer.
240
Communication Function Manual, 11/2019, A5E03735815-AH
Subscription states and state transitions
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Subscription is generated and is then active. Status change is not entered in the diagnostic buffer because too many entries may be made
in the diagnostic buffer depending on the amount of data.
See explanation in table for "Late"; for example, no requests to send from client. Maximum KeepAlive value reached. See explanation in table for "TimedOut". Maximum lifetime of subscription reached. Client has deleted subscription.
Figure 9-50 Subscription states and state transitions
Description of the subscription states A subscription in the OPC UA server can have the following states:
Status Creating Normal Closed KeepAlive Late
TimedOut
Meaning
Client has requested a subscription in the server; the server creates the subscription.
Subscription is created in the server and active.
Client has deleted the subscription.
Status if the monitored items do not change over a long period of time. These state transitions are not entered in the diagnostic buffer.
Client has generated a subscription with minimal sampling and publishing intervals. The amount of monitored items is not transmitted to the client during this time.
Client no longer transmits requests to send (for example, due to failure).
The client has requested a subscription.
The server can only honor the subscription (send Publish Response) when there is a sufficient number of send requests (Publish Requests) from the client.
When the client stops sending subscription requests, the subscription enters the "TimedOut" state after a certain time.
Communication Function Manual, 11/2019, A5E03735815-AH
241
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Subscription: Error in the sampling times
As of firmware V2.5 of the SIMATIC S7-1500 CPU, the OPC UA server can transmit the status code "GoodOverload" when using subscriptions, if an overload of the CPU occurs when sampling the items.
As of firmware V2.8 of the SIMATIC S7-1500 CPU, the OPC UA server can also enter this event into the diagnostic buffer.
Requirement
In the OPC UA properties of the CPU, the option "Subscriptions: Sampling time errors" (OPC UA > Server > Diagnostics) is selected.
Error-free subscription
In the case of an OPC UA subscription to various elements (such as tags), the OPC UA server of the SIMATIC S7-1500 must check the elements for value changes at specified intervals (sampling interval). This check, referred to as "sampling", requires some time, which depends on the number and the data type of the items. After the sampling is completed and a publishing request has been received, the server sends the elements to the client.
Figure 9-51 Error-free subscription
242
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
Subscription with error If there are too many elements in the queue, there may be an overload of the communication stack. The CPU cannot check all elements in the given sampling interval and must therefore skip the next sampling job. In this case, the CPU sends the status code "GoodOverload" (0x002F0000) per element, even though the elements were not checked. The meaning of the status code according to IEC 61131-3 is as follows: "Sampling has slowed down due to resource limitations".
See also
Sampling job is skipped
Figure 9-52 Subscription with error
See also FAQ 109763090.
Settings of the server for subscriptions (Page 181) Meaning of the "GoodOverload" status (https://support.industry.siemens.com/cs/ww/en/view/109763090)
9.3.6.7
Summarizing diagnostics
To prevent the diagnostics buffer being "swamped" by large numbers of identical OPC UA diagnostics, as of STEP 7 V16 service pack 1, you can set parameters so that these diagnostics are entered in the diagnostics buffer as group alarm. Per interval (monitoring time), the CPU then only generates one group alarm per OPC UA diagnostics.
The following sections describe which diagnostics the CPU groups together and how the process runs with a high message volume.
Requirement
The "Summarize diagnostics in case of high message volume" option is activated in the OPC UA properties of the CPU (OPC UA > Server > Diagnostics, "Summarize diagnostics" area).
Example
An OPC UA client repeatedly "overloads" an S7-1500 CPU as OPC UA server with a sampling rate that the server cannot handle (overload).
The "Summarize diagnostics in case of high message volume" setting is activated.
A message appears in the diagnostics buffer for this diagnostic option. It states that the sampling rate cannot be reached; followed by the number of these events within the configured interval.
Communication Function Manual, 11/2019, A5E03735815-AH
243
OPC UA communication 9.3 Using the S7-1500 as an OPC UA server
OPC UA diagnostics that can be summarized The diagnostics listed below each form their own groups (type). Diagnostic events from the same group are combined using the setting "Summarize diagnostics in case of high message volume": Incorrect use of an OPC UA service OPC UA Service error Subscription status has changed Sampling rate could not be achieved (subscriptions, overload) OPC UA security check failed Configuration limit of the OPC UA server violated
Principle of operation The CPU enters the first three events of an event type in the diagnostics buffer. It then ignores all subsequent diagnostics of this group. At the end of the monitoring time (interval), the CPU generates a group alarm in which it enters the diagnostics and the frequency of this diagnostics during the elapsed interval. If these diagnostics also occur in the intervals that follow, the CPU only generates one group alarm per subsequent interval. A diagnostic surge leaves the following pattern in the diagnostics buffer: Three individual messages followed by a series of group alarms. This series can consist of two, three or more group alarms depending on the selected monitoring time and duration of the diagnostic surge.
Diagnostic results of a group (of a type), for example "Sampling rate could not be reached". Interval (monitoring time): When a diagnostic event occurs the first time (or reoccurs), the mon-
itoring time is started (or restarted).
Single alarms: The first three diagnostic events from the same group are entered in the diag-
nostics buffer immediately. Starting with the fourth diagnostic event, the CPU generates only group alarms. If a diagnostic event of this group occurs after a pause of at least one interval, the CPU enters a single alarm in the diagnostics buffer and restarts the monitoring time.
Group alarms: After three diagnostic events, the CPU only generates a group alarm as a sum-
mary of all additional diagnostic events in this interval. If these diagnostic events also occur in the intervals that follow, the CPU only generates one group alarm per subsequent interval.
Figure 9-53 Summary of diagnostics
244
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
9.4
Using the S7-1500 CPU as an OPC UA client
9.4.1
Overview and requirements
With STEP 7 (TIA Portal) Version V15.1 and higher, you can assign parameters and program an OPC UA client that can read PLC tags in an OPC UA server. Furthermore it is possible to transfer new values for PLC tags to an OPC UA server. In addition, you can call methods that an OPC UA server provides in your user program. You use the instructions for OPC UA clients in your user program for this.
The instructions of the OPC UA client are based on the standard "PLCopen OPC UA Client for IEC61131-3".
PLCopen specification
With these standardized instructions, you can develop an OPC UA client functions in your user program that can be executed in an S7-1500 CPU.
In addition, it is possible with just a few adaptations to run this user program in controllers of other manufacturers if these manufacturers have also implemented the OPC UA Specification "PLCopen OPC UA client for IEC61131-3".
Convenient editors in STEP 7
For the parameter assignment of the instructions for OPC UA clients, a convenient editor is available in the TIA Portal the connection parameter assignment (Page 175).
As of Version 15.1, STEP 7 also features an editor for client interfaces (Page 251).
This section describes how you work with these editors.
First, you will be shown how to create and configure a new interface with the interface editor, because you need this type of interface for the subsequent connection parameter assignment.
The description uses an example for better comprehensibility, see Description of the example (Page 249).
Requirements
You have the required runtime license for OPC UA and have configured the license in STEP 7 (CPU Properties > Runtime Licenses).
The client of the S7-1500 CPU is activated.
To use the client of the S7-1500 CPU, you must enable it:
1. Select the area "OPC UA > Client" in the properties of the CPU.
2. Select the "Enable OPC UA client" option.
If you do not enable the client, the connection is not established. You receive a corresponding error message at the instructions, for example "OPC_UA_Connect".
For information about the application name, which also applies to the server and the client, see here (Page 175).
Communication Function Manual, 11/2019, A5E03735815-AH
245
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Overview
To use the editor and the connection parameter assignment, follow these steps:
1. First, specify a client interface. Add to this the PLC tags and PLC methods interface that you want to access ("First step (Page 251)").
2. Next, configure the connection to the OPC UA server (Second step (Page 268)).
3. Finally, use the configured connection for the OPC UA client instructions (Third step (Page 276)).
9.4.2
Useful information about the client instructions
With the standardized OPC UA client instructions you are able to control communication for the following tasks with the S7-1500 CPU as an OPC UA client: Read/write tags of the OPC UA server Call methods in the OPC UA server Optional instructions can be used to determine the following information: The status of the connection between the OPC UA client and OPC UA server Node IDs of nodes with known hierarchy of the address space
Standardized sequence of OPC UA communication
The sequence of the communication, and thus the order of the instructions, follows a pattern that is illustrated in the following.
Instructions for preparation of read and write operations Read and write instructions Instructions for "clean-up" after a completed read or write operation
Figure 9-54 Run sequence for a read or write operation
246
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Instructions for preparation of method calls Method calls Instructions for "clean-up" after completed method calls
Figure 9-55 Run sequence for a method call in the OPC UA server
Optional instructions (reading out the status of a connection / reading out node IDs of nodes with known hierarchy of the address space) OPC_UA_ConnectionGetStatus OPC_UA_TranslatePathList
Instructions for preparation of read and write operations with inserted instruction for requesting,
for example, the NodeIDs of nodes of the OPC UA server.
You can determine the connection status between the establishment and termination of the
connection in parallel with other instructions.
Instructions for "clean-up"
Figure 9-56 Run sequence of optional instructions
Convenient editors in STEP 7
The OPC UA client instructions are described in detail in the reference part (STEP 7 information system). For parameter assignment of the instructions, a convenient editor is available in the TIA Portal the connection parameter assignment (Page 268).
We recommend starting with the connection parameter assignment for the first program draft and using additional instructions and manually optimizing the program as required.
Communication Function Manual, 11/2019, A5E03735815-AH
247
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Information about the client instructions The client instructions are described in detail in the help to the Instructions > Communication > OPC UA > OPC UA client.
Application example in Online Support This application example (https://support.industry.siemens.com/cs/ww/en/view/109762770) provides you with an S7 user block "OpcUaClient" that summarizes the most important functions of the OPC UA instructions, accelerates the implementation for you and simplifies the programming. The OPC UA server in the example is an S7-1500 controller with a simple simulation program for process values. The S7 user block performs the following: Establishment and termination of the connection to the server Diagnostics of the connection and automatic reconnection after connection terminations Registered Read Registered Write Registered Method Call
9.4.3
Number of client instructions that can be used simultaneously
SIMATIC error codes for OPC UA client instructions
The following limits apply to the simultaneous use of OPC UA client instructions (up-to-date technical specifications of the CPUs can be found on the Internet (https://support.industry.siemens.com/cs/ww/en/ps/td)):
Table 9- 5 Quantity structures for OPC UA client instructions
OPC UA instruction
OPC_UA_Connect OPC_UA_NamespaceGetIndexList OPC_UA_NodeGetHandleList OPC_UA_MethodGetHandleList OPC_UA_TranslatePathList OPC_UA_ReadList
Maximum number for CPU 1510SP (F) CPU 1511 (C/F/T/TF) CPU 1512C CPU 1512SP (F) CPU 1513 (F) 4 4* 4* 4* 4* 20 in total (max. 5 per connection, see OPC_UA_Connect)
Maximum number for CPU 1505 (S/SP/SP F/SP T/SP TF) CPU 1515 (F/T/TF) CPU 1515 SP PC (F/T/TF) CPU 1516 (F/T/TF)
Maximum number for CPU 1507S (F) CPU 1517 (F/T/TF) CPU 1518 (F)
10 10* 10* 10* 10* 50 in total (max. 5 per connection, see OPC_UA_Connect)
40
40* 40* 40* 40*
200 in total (max. 5 per connection, see OPC_UA_Connect)
248
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
OPC UA instruction
OPC_UA_WriteList OPC_UA_MethodCall
OPC_UA_NodeReleaseHandleList OPC_UA_MethodReleaseHandleLi st OPC_UA_Disconnect OPC_UA_ConnectionGetStatus
Maximum number for CPU 1510SP (F) CPU 1511 (C/F/T/TF) CPU 1512C CPU 1512SP (F) CPU 1513 (F) 20 in total (max. 5 per connection, see OPC_UA_Connect) 20 in total (max. 5 per connection, see OPC_UA_Connect) 4* 4*
4* 4*
* maximum 1 per connection
Maximum number for CPU 1505 (S/SP/SP F/SP T/SP TF) CPU 1515 (F/T/TF) CPU 1515 SP PC (F/T/TF) CPU 1516 (F/T/TF)
Maximum number for CPU 1507S (F) CPU 1517 (F/T/TF) CPU 1518 (F)
50 in total (max. 5 per connection, see OPC_UA_Connect)
50 in total (max. 5 per connection, see OPC_UA_Connect)
10* 10*
200 in total (max. 5 per connection, see OPC_UA_Connect)
200 in total (max. 5 per connection, see OPC_UA_Connect)
40*
40*
10*
40*
10*
40*
Maximum number of usable OPC UA client interfaces
If you create OPC UA client interfaces using the connection parameter assignment, the number of client interfaces is limited to 40.
Create the OPC UA client interfaces by double-clicking the "Add new client interface" symbol in the project tree of the "OPC UA communication" area.
The maximum number of OPC UA client interfaces is independent of whether you also use the CPU as OPC UA server.
9.4.4
Example configuration for OPC UA
The following sections describe how you can use the client interfaces editor and the connection parameter assignment.
The description is based on a specific example: Two S7-1500 CPUs operate in the system: One CPU serves as the OPC UA client and the other as the OPC UA server.
You can, of course, also use controllers, sensors and IT systems of other manufacturers as OPC UA clients or servers. In particular, the data exchange between different systems (interoperability) is a major advantage of OPC UA.
Communication Function Manual, 11/2019, A5E03735815-AH
249
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Connection parameter assignment using an example: The plant produces blanks in a production line. The following controllers are used: 1. An S7-1511 CPU serves as the controller of the production line. The controller is named "Productionline" in the example. The OPC UA server of the controller is enabled. The CPU has the IP address 192.168.1.1 in the example. This CPU publishes the values of following tags via the OPC UA server: NewProduct The tag has the data type "BOOL". When this PLC tag has the value TRUE, the production line has processed a blank. The blank is ready for pick-up. ProductNumber This tag contains the identification number of the blank. The tag has the data type "Int". Temperature This tag contains temperature values recorded during the production of the blank. The tag is an array with elements of the "Real" data type. In addition, this CPU provides the following writable tag: ProductionEnabled The tag is set by the OPC UA client. The tag has the data type "BOOL". If the value is set to TRUE, the production line is released and may produce blanks. In addition, this CPU provides the following method via the OPC UA server: OpenDoor. OPC UA clients can hereby arrange for an access door to be opened to the production line. 2. An S7-1516 CPU controls the interaction with other production lines. This CPU is named "Supervisor" in the example. The OPC UA client of this CPU is enabled. Using OPC UA, this CPU can read the NewProduct and ProductNumber tags, set the ProductionEnabled tag and call the OpenDoor method. The CPU has the IP address 192.168.1.2 in the example.
250
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
The following figure shows the example in the network view of the TIA Portal:
Figure 9-57 Example of assigning connection parameters in the network view
9.4.5
Creating client interfaces
As of Version 15.1, the TIA Portal has an editor for client interfaces.
You group all PLC tags that you want to read or write from an OPC UA server in a client interface.
In addition, the client interface contains all methods that the OPC UA server provides and that you want to call with your user program (that acts as an OPC UA client).
If you create a client interface, STEP 7 also creates data blocks for the parameter assignment of the connection to the OPC UA server from which you want to read data or to which you want to write data.
Maximum number of client interfaces
You can create a maximum of 40 client interfaces.
Editor for client interfaces To create a client interface, follow these steps: 1. Select the project view in the TIA Portal. 2. In the "Devices" area, select the CPU you want to use as an OPC UA client. 3. Click "OPC UA communication > Client interfaces".
Communication Function Manual, 11/2019, A5E03735815-AH
251
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
4. Double-click "Add new client interface". STEP 7 creates a new client interface and display in the editor.
Figure 9-58 Adding OPC UA client interface
STEP 7 names the new interface "Client interface_1". If a "Client interface_1" already exists, the new interface receives the designation "Client interface_2" etc. In addition, STEP 7 creates the following data blocks: Client_Interface_1_Configuration
The data block already contains all system data types that are needed for the instructions of the OPC UA client. This data block is filled when you configure the connection to the OPC UA server. You configure a connection in the properties of the client interface, see: Example configuration for OPC UA (Page 249). Client_Interface_1_Data A data block for the PLC tags that you want to read or write from an OPC UA server as well as for methods that you want to call in the OPC UA server. You use this data block in your user program. This data block is currently still empty. 5. Select a descriptive name for the new client interface. Select "Productionline" in the example. This also changes the names of the associated data blocks to: Productionline_Data Productionline_Configuration 6. To import an OPC UA server interface, click the "Import interface" button in the top right of the editor. This allows you to import an XML file which describes the server interface of an OPC UA server. Alternative: To determine online the server interface of a connected OPC UA server, see: Determine server interface online (Page 260).
252
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
7. STEP 7 displays a dialog with which you can select an XML file. This XML file describes a address space of an OPC UA server. The address space of an OPC UA server contains all PLC tags and server methods published by an OPC UA server. OPC UA clients can access this address space: - Read PLC tags - Write PLC tags - Calling Server Methods The address space of an OPC UA server can be divided into one or more server interfaces. For creating server interfaces, see: Creating a server interface for companion specification (Page 218).
Communication Function Manual, 11/2019, A5E03735815-AH
253
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
8. Create a read list in this client interface. To do this, follow these steps: Click "Add new read list" in the left section of the editor. STEP 7 adds a new list named "ReadList_1". For the example, change the name to "ReadListProduct" Now add the new read list of the PLC tags that you want to read from the OPC UA server. In the example the "NewProduct" and "ProductNumber" tags are added to the "ReadListProduct" read list. Select the "NewProduct" tag in the right-hand field of the editor ("OPC UA Server interface"). Drag the "NewProduct" tag to the "ReadProduct" read list in the middle field of the editor. Follow the same procedure with the "ProductNumber" tag. The figure below shows the right field of the editor.
Figure 9-59 Read list in the OPC UA server interface
Alternative:
You can also select a new read list by dragging the right field of the editor ("OPC UA Server interface") to a node of the type Object or Folder and then dragging it to "Add new read list" in the left field of the editor. The new read list then contains all PLC tags of the node that has been moved.
In the example, select the object "Data_for_OPC_UA_Clients", which contains the tags "NewProduct" and "ProductNumber". STEP 7 generates the new read list "Data_for_OPC_UA_Clients". In addition, the object contains the tag "Temperature". Delete the "Temperature" tag from the read list. Since they should not be read in the example.
Change the name of the read list in "ReadListProduct".
The following figure shows the content of the read list:
Figure 9-60 Read list
254
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Note Read and write lists do not support all node types. The OPC UA client of the S7-1500 CPU does not support all OPC UA data types (node types) that can be made available via an OPC UA server interface. If you place an unsupported node type, for example, in a read list or write list a corresponding error signal appears. In this case, you cannot include the corresponding node in the read or write list. Which types are supported is described here: Mapping of data types (Page 142)
9. If you want assign new values to PLC tags, create a write list in this client interface. To do this, follow these steps: Click "Add new write list" in the left section of the editor. STEP 7 adds a new list with the name "ReadList_1". For the example, change the name to "WriteListStatus". Now add the new write list of all OPC UA server tags to which you want to assign new values. In the example, add the "WriteListStatus" tag to the write list "ProductionEnabled". Select the Tag of right field of the editor ("OPC UA Server interface"). Drag the tag to the write list in the middle field of the editor. Alternative: You can also create a new write list by selecting a node of the type Object or Folder in the right field of the editor ("OPC UA server interface") and then dragging to "Add new write list" in the left field of the editor. The new write list then contains all tags of the relevant node. In the example, select the object "Data_from_OPC_UA_Clients", which contains the tag "ProductionEnabled". STEP 7 generates the new write list "Data_from_OPC_UA_Clients". Change the name in "WriteListStatus". The following figure shows the content of the write list:
Figure 9-61 Write list
Communication Function Manual, 11/2019, A5E03735815-AH
255
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
10.If you want to call a method of this OPC UA server, generate a new method list. To do this, follow these steps: In the left section of the editor, click "Add new method list". STEP 7 adds a new list with the name "Method list_1". For the example, change the name to "MethodListOpenDoor". Now add a method of the OPC UA server to the new method list. In this example, add the method "OpenDoor" to the method list "MethodListOpenDoor". Select the method of right field of the editor ("OPC UA Server interface"). Drag the method to the method list in the middle field of the editor. Alternative: You can also generate a new method list by selecting a method (node of the type Object) in the right field of the editor (OPC UA Server interface) and then dragging it to "Add new method list" in the left field of the editor. The new method list then contains the method of the relevant node. The following figure shows the content of the method list:
Figure 9-62 Methods list
If you want to call another method of the OPC UA server, you must create a new method list. Each method list contains only one method. See also Useful information about server methods (Page 227). 11.Compile the project. To do so, select the project and click the following button in the toolbar:
STEP 7 compiles the project and updates the data blocks that belong to the "Productionline" client interface.
Note During compilation, STEP 7 overwrites all data in the data blocks belonging to the client interface. For this reason, you should neither add to nor correct these data blocks manually.
256
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Note Renaming nod names (DisplayNames)
In read lists, write lists and method lists you can rename the name of a node by means of the shortcut menu. This is the "DisplayName" in the OPC UA language usage.
If you rename the name of a method list node and the node is already used in a programmed block for the method call "OPC_UA_MethodCall", the compilation of the project leads to consistency errors: During the compilation the UDTs of the method are generated with the changed name. The references to the method used in the program are then no longer correct.
To correct the consistency errors, you can either undo the name change of the method in the client interface or navigate to the method call and assign the relevant parameters again there under "Properties > Block parameters" ("Configuration" tab).
Communication Function Manual, 11/2019, A5E03735815-AH
257
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Data blocks of client interface The following data blocks belong to the "Productionline" client interface: Productionline_Configuration A data block for the configuration. In the example, this data block is called "Productionline_Configuration". The data block already contains all system data types that are needed for the instructions of the OPC UA client. In addition, the data block contains general default values for parameter assignment of the connection to an OPC UA server. If you are working with connection parameter assignment, this data block will be filled. ProductionLine_Data A data block for the PLC tags that you have entered in the client interface editor. In the example, this data block is called "Productionline_Data". The figure below shows the data block.
Figure 9-63 "Productionline_Data" data block
Use the "Productionline_Data" data block in your user program and access the read values of the "NewProduct" and "ProductNumber" PLC tags. This is explained in the following section using an example.
258
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Reading and writing PLC tags of the client interface Example: Reading the "ProductNumber" value For example, you write in an SCL program: #MyLocalVariable := "Productionline_Data".ReadListProduct.Variable.ProductNumber;
You use this, for example, to assign the number of the blank that was just produced in the production line to the local tag "#MyLocalVariable". Requirements: A connection exists to the OPC UA server of the CPU, which controls the production line. The OPC UA client has read the current values. For this reason you check whether a read value is valid: Check whether the value in "Productionline_Data".ReadListProduct.NodeStatusList[1] is
equal to 0. Optional: Check when this value was sent from the OPC UA server. This value is in
"Productionline_Data".Product.TimeStamps[1]. If no time stamp is requested, the communication load is reduced. Example: Writing the "ProductEnabled" value Transfer the new values for PLC tags, in the example for the "ProductionEnabled" tag, to the OPC UA server using the data block. With the following assignment, you enable the production line in the example plant: "Productionline_Data".WriteListStatus.Variable.ProductionEnabled := TRUE;
This is only successful, however, if the following requirements are met: A connection exists to the OPC UA server of the CPU, which controls the production line. Current values are being written via the OPC UA client
Communication Function Manual, 11/2019, A5E03735815-AH
259
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Consistency check Finally, check the consistency of the read/write list or method list. 1. Select the list that you want to check. 2. Click the "Consistency check" button above the "OPC UA client interface" area. A green check mark indicates an error-free assignment of the tags or methods to the corresponding elements of the server interface.
You can assume that the data exchange between client and server and method calls operate without problem in runtime.
In the event of an error a list appears in the Inspector window. From this list you can jump to the respective error.
During the consistency check, STEP 7 checks:
Whether all elements that you use in the respective list are also present in the server.
Do the data types used match?
For methods: Do the number, name, order, and data types of method arguments match?
9.4.6
Determine server interface online
With STEP 7 (TIA Portal) you can determine the interface of an OPC UA server online. This provides information on which tags of a connected OPC UA server you can read or set (write) with OPC UA clients. It also provides information on which server methods of the OPC UA server are available for OPC UA clients.
If you are work offline you can create the interface of the OPC UA server by means of an OPC UA XML file. The address space of the server is described in the OPC UA XML file, see: Export OPC UA XML file (Page 174).
Determine online server interfaces
To determine a server interface online, follow these steps:
1. In the STEP 7 project tree, select the CPU which is configured as OPC UA client (Supervisor in the example).
2. Select the client interface (in the example, OPC UA Communication > Client interfaces > Productionline).
If no client interface has been created, double-click "Add new client interface".
260
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client 3. Double-click the selected client interface. The editor for client interfaces is displayed.
Figure 9-64 Editor for client interface
4. In the left section of the editor, click "Add new read list", "Add new write list", or "Add new method list".
5. In the right field of the editor, select "Online[]" as data source for "Source of server data":
Communication Function Manual, 11/2019, A5E03735815-AH
261
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
6. Click the "Online Access" button. STEP 7 displays the "Connect to OPC UA server" dialog.
Figure 9-65 "Connect to OPC UA server" dialog
Tip: When establishing an online connection to an OPC UA server for the first time, use the "Online access" button. When reconnecting after a disconnection, select the "Connect to Online Server" button next to the "Online" selection field.
In the top right, enter the IP address of the OPC UA server whose server interface you want to determine online.
7. Click "Find selected server".
STEP 7 establishes a connection to the OPC UA server and determines all security settings (server endpoints) that the server holds in readiness.
STEP 7 displays the end points as list:
Figure 9-66 Found OPC UA server with all server endpoints
8. Click on the end point you want to use for a connection of STEP 7 to the OPC UA server.
262
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
9. Do you want to use a secure connection?
If you have selected a secure end point, then select the entry "TIA Portal" for the "Certificate location".
And under "Certificate (Client)", select a client certificate for your PC on which STEP 7 (TIA Portal) is currently running.
If a client certificate does not yet exist for your PC, you can generate a client certificate here in the TIA Portal.
Proceed as follows to generate a certificate for your PC:
- Click on the button in the "Certificate (Client)" input field.
- Click "Add".
- For "Certificate owners" enter "STEP 7 (TIA Portal)".
- Select the "OPC UA client" entry at "Usage".
- For "Subject Alternative Name (SAN)", enter the IP address of your PC, on which you are currently running STEP 7 (TIA Portal), under "Value". Overwrite the already entered IP address.
- If your PC uses a second IP address, enter this address as well. If your PC does not use a second IP address, delete the second IP address already entered.
- Click "OK".
If you have not selected a secure end point, then keep the default ("None").
10.How do you want log on?
If you want to log onto the OPC UA server as guest, then apply the default with "User authentication".
If you want to log on with user name and password, select "User name and password".
Use the user name and password which was stored during the configuration of the OPC UA server in the properties of the CPU under "General > OPC UA > Server > Security > User authentication > User management".
11.Click on the "Go online" button.
When a secure connection is established, a message appears that you must accept the server certificate for the secure connection to be established. In the message window, you can display further details about the server certificate via a link.
This standard Windows window only provides information about the server certificate. If you click on the button to install the server certificate, the server certificate is not saved to the certificate memory of the TIA Portal, i.e. at the next connection attempt you will be prompted again to accept the server certificate.
STEP 7 then establishes a connection to the OPC UA server and again displays the editor for client interfaces.
In the right field of the editor, STEP 7 displays the uppermost level of the address space of the OPC UA server:
Communication Function Manual, 11/2019, A5E03735815-AH
263
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
12.Click on the small black triangle next to "Objects". STEP 7 now also displays the level below Objects.
13.Click on the small black triangle next to "Productionline". STEP 7 now also displays the level below Productionline.
14.Now open additional lower-level folders:
See also
Figure 9-67 Online view of OPC UA server interface
Mapping of data types (Page 142) Creating client interfaces (Page 251)
9.4.7
Using multilingual texts
In the client interface editor, you are also importing texts that can be displayed in different languages with the OPC UA XML files (information models). Multilingualism is optional, and each node can be defined differently regarding the languages it offers.
In the XML file, these are the following fields that can be prepared for different languages:
Display name
Description
264
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Example for multilingual texts in an OPC UA XML file In the XML file below, the display name and the description, for example, are entered with a "default" text and multiple localizable texts. Default text is the first entry without localization information. Localized text is the text after "Locale=" followed by a language code, e.g. "it-IT" for
Italian
Figure 9-68 Example of multilingual texts in an OPC UA XML file
Display of multilingual texts When importing a server interface, the available multilingual texts are saved internally and downloaded to a CPU together with the project.
The client editor displays the text from the OPC UA XML file in the columns "Name of the node" (corresponds to "DisplayName") and "Description" (corresponds to "Description").
The following cascading rules determine which language is shown for a node:
When the node contains text in the currently used editing language, the text is also displayed in the editing language.
(Setting the editing language: In the project tree, select the area "Languages & resources > Project languages")
When the node does not contain text in the editing language but a default text is defined there (without language code), the default text is displayed.
"Name of the node" column: If no default text is defined either but a text in any other language exists, the DisplayName text is displayed in the first available language. This rule does not apply to description texts.
If none of the conditions listed above is met, no text is displayed.
Figure 9-69 Display for multilingual texts
Communication Function Manual, 11/2019, A5E03735815-AH
265
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
When you change the editing language, the multilingual text in the imported interface will also change according to the rules explained above. You can then apply the nodes in the corresponding lists (read list, write list, method list) with drag and drop. You cannot change the language in the lists (read list, write list, method list).
Applying the displayed description texts as comment in PLC data types When you compile the program, STEP 7 automatically creates PLC data types (UDTs) for each read list, for each write list and for inputs or outputs of each method. These UDTs each have one element for each node. The UDTs apply the description text as comment according to the rules stated above. STEP 7 creates the comment in only one language, just like the texts in the OPC UA server interface can only be displayed in one language.
9.4.8
Rules for the access to structures
The rules for the access to structures are explained below. Note these rules when reading and writing values of complete structures provided by an OPC UA server.
How the client of the S7-1500 CPU accesses structures
The OPC UA client of the S7-1500 CPU uses neither TypeDictionaries nor DataTypeDefinition attributes, which a server offers for the resolution of these structures.
These options of the OPC UA client for checking structural elements in runtime are limited in the client.
Rules for the access to structures
If you use the client interfaces to configure the read and write lists (connection parameterization) and assign the PLC data types to the imported or online determined address model of the server, the read and write accesses to structures operate trouble-free in runtime.
The configuration by means of client interface automatically ensures that the sequence and the data type of the structural elements are coordinated on client and server side.
Recommendation: Update an S7-1500 CPU (as server) to the current firmware version (e.g. V2.0 > V2.5.2 or higher).
In runtime the OPC UA client only checks the total length of the transmitted value; more detailed checks are not possible.
Mapping rules apply to the assignment of OPC UA structures to PLC tags or DB tags (see Mapping of data types (Page 142)). Non-executed data type (such as OPC UA byte strings) are not supported.
266
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client Example of an error-free assignment of the structure elements In the imported node set file (XML export), the structure is defined as follows:
The structure mapped in the read list matches, both in the order and in the assigned data types, the corresponding nodes of the node set file.
If the structure now changes on the server, for example tagA and tagB are swapped, and the read list remains the same in the client, the assignment is no longer correct: The total length of the data remains the same (only the order has changed) The configuration of the structure is different for client and server!
WARNING No error message in the case of different structure configuration between client and server If the structures of client and server do not match, this rule violation will possibly not generate any error during compilation and also not in runtime. Make sure not to change the configured assignments for structures in runtime. If required, reconfigure the assignment in the read and write lists!
Communication Function Manual, 11/2019, A5E03735815-AH
267
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
9.4.9
Using connection parameter assignment
9.4.9.1
Creating and configuring connections
With the instructions for OPC UA clients, you create a user program that exchanges data with an OPC UA server. A series of system data types are required for this.
To simplify your work with these system data types, a connection parameter assignment for OPC UA clients is available starting in STEP 7 (TIA Portal) Version 15.1.
Use of the connection parameter assignment is optional and not mandatory. You can also manually create the required system data types.
We use an example to make the description easier to follow, see description of the example (Page 249).
Opening the connection parameter assignment To configure the connection to an OPC UA server, follow these steps:
1. In the "OPC UA communication" area, double-click the client interface whose parameters you want to assign in the project tree.
For the example configuration: Double-click the "ProductionLine" client interface.
The section "Create client interface (Page 251)" describes how to create a client interface.
2. Click the "Properties" tab (Inspector window) if the tab is not already displayed.
STEP 7 now displays the connection parameter assignment for the instructions of the OPC UA client.
The "General" tab is open.
3. Click on the "Configuration" tab and set the connection to the OPC UA server.
Setting the connection parameters
1. Select a descriptive name for the session. For the example, select the name "OPC UA Connection to ProductionLine".
2. In the "Address" field, enter the IP address of the OPC UA server to which your user program (that operates as an OPC UA client) is to establish a connection. In the example configuration, the CPU that controls the production line has the IP address "192.168.1.1". A connection to the OPC UA server of this CPU is to be established. For this reason, you enter this IP address in the "Address" field. In this case, the OPC UA server uses the default port 4840.
Alternatively, you can enter a valid DNS name in the "Address" field. The length of the DNS name is limited to 242 characters. If the address is not valid, the error message is shown: "Enter a valid address". If the string of the "Address", "Port" and "Path" fields contains more than 254 characters, an error message is also displayed.
268
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
3. Enter a path within the OPC UA server to restrict access to this path. The information is optional. However, some servers only establish a connection if a server path is specified. When you specify a path, it is automatically entered at the "ServerEndpointUrl" entry in the configuration DB for the client interface. The entry then consists of the components "OPC Schematic Prefix", "IP address", "Port number" and "Server path", for example: "opc.tcp://192.168.0.10:4840/example/path". The following figure shows the entry of the IP address for the OPC UA server:
Figure 9-70 Connection parameters
4. If the OPC UA server is not using the standard port 4840, you must insert the port number here.
For example, enter the number 65535 in the field, if the OPC UA server to which you want to establish a connection uses this port number.
5. In addition, you accept the default settings for session timeout (30 seconds) and monitoring time (5 seconds).
Communication Function Manual, 11/2019, A5E03735815-AH
269
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Setting the security parameters 1. Click the "Security" area in the "Configuration" tab. This area contains all security settings for the connection to the OPC UA server. The following settings are possible:
"General" area
Security mode: Select the security mode that the connection to the OPC UA server must meet from the drop-down list. If the server does not meet the selected mode, a session is not established. The following settings are available: No security: No secure connection! Sign: OPC UA server and OPC UA client sign the data transmission (all messages):
Manipulations can thus be detected. Sign & Encrypt: OPC UA server and OPC UA client sign and encrypt the data
transmission (all messages):
Security policy: Set the encryption techniques for the signing and encryption of messages. The following settings are possible: No security Basic128Rsa15 Basic256 Basic256Sha256 To configure a secure connection, you must observe the following items: A certificate is required for the client for a secure connection. You have to make the client certificate known to the server. To find out how to proceed, see the section "Handling client and server certificates (Page 183)" under "Certificate of the OPC UA client".
"Certificates" area
Client certificate: The certificate confirms the authenticity of the OPC UA client. To select a certificate, click the following symbol:
STEP 7 displays a list of certificates. Select the certificate that you have made known to the server.
270
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Click the symbol with the green check mark:
Or, create a new certificate. To do so, click the "Add" symbol. If you create a new certificate, you must make this certificate known to the server.
"User authentication" area The following settings are possible for user authentication: Guest User name and password Users (TIA Portal - Security Settings) For more information, see Users and roles with OPC UA function rights (Page 194).
Setting languages UA tags of the String type can be localized with OPC UA, that is, texts (values for the UA tag) can be available in different languages for the server. For example, localized texts can be available for DisplayName (Name of the node) and Description (Description). In the "Languages" area of the "Configuration" tab you can, for example, influence the language of the texts returned by the server as follows: In the "Languages" area, enter a number of languages that the server transfers to the client during connection setup. The language or the local ID ("language code") associated with it that you enter in the first line is the language preferred by the client. If the server can provide the UA tag in the requested language, it is transferred to the client. If the server cannot provide the UA tag in the requested language, it checks whether it can provide the UA tag in the language you have entered in the second line (first substitute language). The server works its way down the list, and when it can provide neither the requested language nor a substitute language, it will provide the default language.
Additional information
What causes the connection to an OPC UA server to fail? FAQ (https://support.industry.siemens.com/cs/ww/en/view/109766709)
See also
Handling of the client certificates of the S7-1500 CPU (Page 272)
Communication Function Manual, 11/2019, A5E03735815-AH
271
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
9.4.9.2
Handling of the client certificates of the S7-1500 CPU
Where does the client certificate come from?
If you are using the OPC UA client of an S7-1500 CPU (OPC UA client enabled), you can create certificates for these clients with STEP 7 V15.1 and higher as described in the following sections.
When you use UA clients from manufacturers or the OPC Foundation, a client certificate is generated automatically during installation or upon the first program call. You have to import these certificates with the global certificate manager in STEP 7 and use them for the respective CPU.
If you program an OPC UA client yourself, you can generate certificates through the program. Alternatively, you can generate certificates with tools, for example with OpenSSL or the certificate generator of the OPC Foundation:
The procedure for OpenSSL is described here: "Generating PKI key pairs and certificates yourself (Page 153)".
Working with the certificate generator of the OPC Foundation is described here: "Creating self-signed certificates (Page 152)".
Certificate of the OPC UA client of the S7-1500 CPU
A secure connection between the OPC UA server and an OPC UA client is only established if the server classifies the certificate of the client as trusted.
Therefore you have to make the client certificate known to the server.
The following sections describe how you can initially generate a certificate for the OPC UA client of the S7-1500 CPU and then make it available to the server.
1. Generate and export a certificate for the client For a secure connection you have to generate a client certificate and - if the server and client are located in different projects - export the certificate.
If client and server are in the same project, exporting the client certificate and subsequent import are not necessary.
Requirements
The IP interface of the CPU is configured, an IP address is available.
Background: The IP address under which the CPU can be accessed in your system is entered under "Subject Alternative Name (SAN)".
272
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Creating an OPC UA Client certificate The easiest way to generate a client certificate for an S7-1500 CPU is to configure a client interface. The configuration of the client interface provides for the selection or generation of a client certificate, see Creating and configuring connections (Page 268). Alternatively, you can generate the client certificate as follows: 1. In the project tree, select the CPU you want to use as a client. 2. Double-click "Device configuration". 3. In the properties of the CPU, click "Protection & Security > Certificate manager". 4. Double-click "<Add new>" in the "Device certificates" table.
STEP 7 opens a dialog. 5. Click the "Add" button. 6. Select the "OPC UA client" entry from the "Usage" list. 7. Click "OK".
STEP 7 now shows the client certificate in the "Device certificates" table. 8. If the server is in another project: Right-click this line and select "Export certificate" from
the shortcut menu. 9. Select a directory where you will store the client certificate.
Communication Function Manual, 11/2019, A5E03735815-AH
273
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
2. Announcing the client certificate to the server You have to make the client certificate available to the server to allow a secure connection to be established. To do this, follow these steps: 1. If the client was configured in another project and you created and exported the client certificate there:
Select the "Use global security settings for certificate manager" option in the local certificate manager of the server. This makes the global certificate manager available.
You will find this option under "Protection & Security > Certificate manager" in the properties of the CPU that is acting as server. If the project is not yet protected, select "Security settings > Settings" in the STEP 7 project tree, click the "Protect this project" button and log on.
The "Global security settings" item is now displayed under "Security settings" in the STEP 7 project tree. Double click "Global security settings".
Double click "Certificate manager".
STEP 7 opens the global certificate manager. Click the "Device certificates" tab.
Right-click in the tab on a free area (not on a certificate).
Select the "Import" shortcut menu.
The dialog for importing certificates is displayed. Select the client certificate that the server is to trust.
Click "Open" to import the certificate.
The certificate of the client is now contained in the global certificate manager. Note the ID of the client certificate just imported. 2. Click the "General" tab in the properties of the CPU that is acting as server.
3. Click "OPC UA > Server > Security > Secure Channel".
4. Scroll down in the "Secure Channel" dialog to the section "Trusted clients".
5. Double-click in the table on the empty row with "<add new>". A browse button is displayed in the row.
6. Click this button.
7. Select the prepared client certificate.
8. Click the button with the green check mark.
9. Compile the project.
10.Load the configuration onto the S7-1500 CPU (server).
Result
The server now trusts the client. If the server certificate is also considered trusted, the server and client can establish a secure connection.
274
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
9.4.9.3
User authentication
In the OPC UA client interface of the S7-1500, you can set what authentication is required for a user of the OPC UA client wishing to access the server. To do so, you must select the corresponding client interface in the project tree of the requested S7-1500 CPU under "OPC UA communication > Client interfaces" and select the type of user authentication in the Inspector window under "Properties > Configuration > Security".
Types of user authentication
The following options are available for user authentication:
Guest
The user does not need to verify authorization (anonymous access). The CPU creates an anonymous session for the user, and the OPC UA server does not check the authorization of the client user.
User name and password
The user must prove authorization (no anonymous access). The OPC UA server checks whether the client user is authorized to access the server. Authorization is given by the user name and the correct password. These inputs cannot be checked by the client interface, which means all values are accepted as being valid.
Note
STEP 7 stores user name and password unencrypted in the data block/instance data block. Recommendation: Use the user authentication "User (TIA Portal - Security Settings)".
Users (TIA Portal - Security Settings)
You can enter a user name from the list of users entered in the project for authentication. The names of the registered users for the current project are available in the user administration in the project tree under "Security Settings > Users and roles". There you can also enter additional users.
You can also enter a name that is not listed in the user administration of the project or leave the field blank. This is necessary when the corresponding user name is only provided by a different source during runtime, for example, via HMI or from a different OPC UA client.
Communication Function Manual, 11/2019, A5E03735815-AH
275
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
"No Security" security policy and authentication via user name and password
You can set the following combination:
Security policy = "No Security" and authentication via user name and password.
The OPC UA server of the S7-1500 supports this combination. OPC UA clients can connect and encrypt the authentication data or not.
OPC UA client of the S7-1500 CPU also supports this combination: However, in runtime it only connects if it can send the authentication data encrypted via cable!
Result: With the following configuration, not connection can be established in runtime.
S7-1500 as OPC UA client
OPC UA server which supports no encryption of authentication data when "No Security" (="none") is set as security policy.
See also
Users and roles with OPC UA function rights (Page 194)
9.4.9.4
Using a configured connection
Introduction
This section shows you how to use a configured connection for OPC UA instructions (third step).
Requirements
You have created a client interface and added PLC tags and PLC methods to this interface, see ("First step (Page 251)").
You have configured a connection to an OPC UA server (Second step (Page 268)).
Overview
To read data from an OPC UA server or write data to an OPC UA server, use the following instructions: OPC_UA_Connect OPC_UA_NamespaceGetIndexList OPC_UA_NodeGetHandleList OPC_UA_ReadList or OPC_UA_WriteList OPC_UA_NodeReleaseHandleList OPC_UA_Disconnect
276
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Order of the OPC UA instructions The following figure shows the order in which the OPC UA instructions are called in a user program in order to use these instructions to read or write PLC tags:
Instructions for preparation of read and write operations Read and write instructions Instructions for "clean-up" after a completed read or write operation
The "OPC_UA_NodeReleaseHandleList" instruction can be omitted if "OPC_UA_Disconnect" is called immediately afterwards. Figure 9-71 Call sequence for write and read operations
STEP 7 (TIA Portal) automatically supplies the parameters of these instructions if you are using a client interface and a configured connection to an OPC UA server. The procedure is shown in the following section.
Using a client interface and configured connection To use a configured OPC UA connection, follow these steps: 1. Open your user program in the TIA Portal. 2. Using drag-and-drop, move the "UA_Connect" instruction into the program editor. You will find the instruction under "Instructions > Communication > OPC UA" in the TIA Portal.
Communication Function Manual, 11/2019, A5E03735815-AH
277
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
3. Select a call option for the instruction The example uses a multi-instance. STEP 7 displays the instruction in the program editor. The editor for the Function Block Diagram (FBD) programming language uses the following display:
The editor for the Ladder Logic (LAD) programming language displays the instruction similarly. 4. Click the toolbox symbol in the editor for FBD or LAD. The symbol is located in the heading of the instruction: If you are using the editor for STL or SCL: Click the small green rectangle below the first character of the instance name: The example (Page 249) uses "#OPC_UA_Connect_Instance" as the instance name. STEP 7 displays the properties of the instruction in a separate dialog.
278
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
5. For "Client interface" select the client interface that you want to use for the instruction. We select the "ProductionLine" client interface in the example. STEP 7 now interconnects the "ProductionLine" client interface with the parameters of the OPC_UA_Connect instruction:
"ProductionLine" is the interface that the OPC UA client of the example (Page 249) uses for data exchange with the OPC UA server "ProductionLine".
6. Using drag-and-drop, move the "UA_NamespaceGetIndexList" instruction into the program editor.
You will find the instruction under "Instructions > Communication > OPC UA" in the TIA Portal.
Select the "Multi-instance" call option.
Click the toolbox symbol (LAD and FBD) or the small green box below the instance name (STL and SCL) if the editor is not already open.
Select the client interface that you want to use ("ProductionLine" in the example).
STEP 7 now automatically interconnects all parameters of the "OPC_UA_NamespaceGetIndexList" instruction:
Communication Function Manual, 11/2019, A5E03735815-AH
279
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
7. Using drag-and-drop, move the "UA_NodeGetHandleList" instruction into the program editor. Select the "Multi-instance" call option. Click the toolbox symbol (LAD and FBD) or the small green box below the instance name (STL and SCL) if the editor is not already open. Select the client interface that you want to use. The example uses the "ProductionLine" client interface. Under "Data access > Read/Writelist" select the read list that you want to use (in the example the read list "Product"). STEP 7 now automatically interconnects all parameters of the "OPC_UA_NodeGetHandleList" instruction:
280
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
If you want to write data to an OPC UA server, select the write list you want to use under "Data access > Read/Writelist" (the "ProductionStatus" write list in the example).
Communication Function Manual, 11/2019, A5E03735815-AH
281
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
8. Using drag-and-drop, move the "UA_ReadList" instruction into the program editor.
Select the "Multi-instance" call option.
Click the toolbox symbol (LAD and FBD) or the small green box below the instance name (STL and SCL) if the editor is not already open.
Select the client interface that you want to use. The example uses the "ProductionLine" client interface.
Under "Data access > Read/Writelist" select the read list that you want to use (in the example the "Product" read list).
STEP 7 now automatically interconnects all parameters of the "OPC_UA_ReadList" instruction.
If you want to write data to an OPC UA server, use the "OPC_UA_Write" instruction and select the list of tags you want to send to the server under "Data access > Writelist" ("ProductionStatus" write list in the example).
9. If you use different read lists or write lists as program-controlled lists in your user program, move the "UA_NodeReleaseHandleList" instruction to the program editor using drag-and-drop operation.
Select the client interface that you want to use.
Now select a read list or write list that you want to release: Only release read or write lists that you rarely use, since re-registering is time-consuming.
Then, repeat the steps starting with step 7 with the "UA_NodeGetHandleList" instruction.
10.Using drag-and-drop, move the "UA_Disconnect" instruction into the program editor.
Select the "Multi-instance" call option.
Click the toolbox symbol (LAD and FBD) or the small green box below the instance name (STL and SCL) if the editor is not already open.
Select the client interface that you want to use. The example uses the "ProductionLine" client interface.
STEP 7 now automatically interconnects all parameters of the "OPC_UA_Disconnect" instruction.
282
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.4 Using the S7-1500 CPU as an OPC UA client
Supported instructions For the following instructions, STEP 7 automatically supplies the parameters if you are using a client interface and a configured connection to an OPC UA server: OPC_UA_Connect OPC_UA_NamespaceGetIndexList OPC_UA_NodeGetHandleList OPC_UA_MethodGetHandleList OPC_UA_MethodReleaseHandleList OPC_UA_ReadList OPC_UA_WriteList OPC_UA_MethodCall OPC_UA_NodeReleaseHandleList OPC_UA_Disconnect
Communication Function Manual, 11/2019, A5E03735815-AH
283
OPC UA communication 9.5 Tips and recommendations
9.5
Tips and recommendations
9.5.1
Rules for subscriptions
The following rules apply to subscriptions:
Group subscriptions in the client according to different sampling and publishing intervals and distribute the monitored elements (variables) to these groups.
Example: Create a subscription for longer publishing intervals (e.g. 5 seconds) and a subscription for shorter publishing intervals (e.g. 0.1 second).
Disable unneeded subscriptions.
Reason: The "Deactivated" subscription mode reduces resource consumption.
Consider the maximum number of monitored items of subscriptions for the corresponding S7-1500 CPU.
The information can be found in the technical specification of the respective CPU. The information is based on a sampling / publishing interval of 1 second.
You can find additional information in the FAQ 109755846 (https://support.industry.siemens.com/cs/us/en/view/109755846).
Select the same sampling and publishing intervals for the OPC UA client and for the OPC UA server.
Avoid arrays and structures as elements of subscriptions if the process allows.
Reason: If even one value of an array/structure changes, the entire structure is transferred, creating an unnecessary communication load.
Occasional non-compliance with the required sampling rate is acknowledged by the OPC UA server of the S7-1500 CPU according to OPC UA specification with a "GoodOverload" error code, see also TIA Portal Help. Different OPC UA clients handle "Good" error codes unequal to "0" differently. Consider this behavior and, if needed, reduce the communication load according to the measures described above.
See also
Settings of the server for subscriptions (Page 181)
284
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.5 Tips and recommendations
9.5.2
Rules for the user program
User programs for OPC UA
The following rules apply to user programs:
If your application allows it and the communication load is high, you should set a minimum time for cycle OBs.
Advantages:
The cycle time remains constant for the most part
The CPU has more time for communication tasks throughout
Tip: Use the instruction "Runtime_Info"; mode 21 or mode 25 (see TIA Portal Help) to analyze the CPU utilization (e.g. communication).
Reduce the number of variables or data blocks that can be reached from OPC UA/HMI. By default, all variables from OPC UA/HMI are accessible when creating variables/DBs/IDBs. This measure leads to improved performance when loading in RUN.
Tip: Using the detailed object display in the TIA Portal, you can easily mark the non-OPCUA-relevant data blocks as "not accessible from OPC UA".
Consistent transfer of data beyond the limits of simple data types is only possible with OPC UA methods. If you use other OPC UA functions (Subscriptions, Read/Write), you must ensure data consistency in the application.
OPC UA offers the "RegisterNodes" service for repeated read and write accesses to the same variables. Servers can use this service to prepare for optimized access to variables. The instruction "OPC_UA_NodeGetHandleList" of the S7-1500 as OPC UA client implicitly calls this service to prepare the server for optimized accesses (in OPC UA usage "Registered Read/Write").
Calling detailed object display in the TIA Portal To call up the detailed object display, proceed as follows: 1. Switch to the "PLC Programming" portal in the portal view. 2. Select "Show all objects".
Communication Function Manual, 11/2019, A5E03735815-AH
285
OPC UA communication 9.5 Tips and recommendations
3. Switch to the "Details" tab in the selection window. 4. In the "DB accessible from OPC UA" column, disable the accessibility from OPC UA for
individual objects.
Figure 9-72 Calling detailed object display in the TIA Portal
9.5.3
Master copies for OPC UA communication
Master copies for the OPC UA interfaces
Interfaces of OPC UA servers and OPC UA clients that you want to use multiple times can be stored either in the project library or in a global library. Master copies in the project library can only be used within the project. When you create the master copy in a global library, it can be used in different projects.
The OPC UA capable CPUs differentiate between 3 interface types of the OPC UA server:
Standard OPC UA server interface
Companion specification interface
Namespace reference
When adding the OPC UA interface in the project tree under "OPC UA Communication" each interface type gets its own symbol. The same symbol is used by the master copy.
Create either single master copies or a master copy with multiple interfaces.
Creating multiple master copies from selection You select one or more elements and create individual master copies from them 1. Open the library in the "Libraries" task card. 2. Select the desired elements. 3. Using a drag-and-drop operation, move the elements to the "Master copies" folder or any subfolder of "Master copies".
286
Communication Function Manual, 11/2019, A5E03735815-AH
OPC UA communication 9.5 Tips and recommendations
Creating a master copy from selection You select multiple elements and create a single master copy from them that contains all selected elements. 1. Copy to the clipboard the elements that you want to create as master copies. 2. Right-click on the "Master copies" folder or any of its subfolders in the library. 3. In the shortcut menu, select "Paste as a single master copy" command. If multiple interfaces are added to a master copy from the OPC UA server or OPC UA client, the label and the symbol in the library are changed accordingly. A symbol with "+" is displayed instead of the simple symbol.
See also
Figure 9-73 Create copy template in STEP 7
Creating a user-defined server interface (Page 201)
Communication Function Manual, 11/2019, A5E03735815-AH
287
Routing
10
10.1
Overview of the routing mechanisms of S7-1500 CPUs
The following table gives an overview of the routing mechanisms of the S7-1500 CPU.
Routing mechanism S7 routing
Description
Applications
S7 routing is the transfer of data beyond S7 subnet boundaries. You can send information from a transmitter to a receiver across several s7 subnets.
Download user programs
Load hardware configuration
Execute testing and diagnostics functions
Section S7 routing (Page 289)
IP forwarding Data record routing
IP forwarding is a function of devices to forward IP packets between two connected IP subnets.
Simple access from the control level to the field level for configuration and parameter assignment of devices, e.g. via PDM or Web browser.
IP forwarding (Page 294)
Simplified integration of devices for remote access, e.g. for diagnostics during remote maintenance or firmware update.
Data can be sent over PROFINET from an engineering station to field devices via multiple networks. Since the engineering station addresses the field devices using standardized records and these records are routed via S7 devices, the term "data record routing" is used to refer to this type of routing.
Data record routing is used, for example, when field devices of different manufacturers are used. The field devices are addressed using standardized data records ( PROFINET) for configuration and diagnostics.
Data record routing (Page 301)
288
Communication Function Manual, 11/2019, A5E03735815-AH
Routing 10.2 S7 routing
10.2
S7 routing
Definition of S7 routing
S7 routing is the transfer of data beyond S7 subnet boundaries. You can send information from a transmitter to a receiver across several s7 subnets. The gateway from one S7 subnet to one or more other subnets is provided by the S7 router The S7 router is a device which has interfaces to the respective S7 subnets. S7 routing is possible via various S7 subnets (PROFINET/Industrial Ethernet and/or PROFIBUS).
Requirements for S7 routing
All devices that can be reached in a network have been configured in a project in STEP 7 and downloaded.
All devices involved in the S7 routing must receive routing information about the S7 subnets that can be reached through specific S7 routers. The devices obtain the routing information by downloading the hardware configuration to the CPUs, since the CPUs play the role of an S7 router.
In a topology with several consecutive S7 subnets, the following order must be kept to when downloading: First download the hardware configuration to the CPU(s) directly connected to the same S7 subnet as the PG/PC, then download one by one the CPUs of the S7 subnets beyond this starting with the nearest S7 subnet through to the S7 subnet furthest away.
The PG/PC you want to use to establish a connection via a S7 router must be assigned to the S7 subnet it is physically connected to. You can assign the PG/PC to a PG/PC in STEP 7 under Online & Diagnostics > Online accesses > Connection to interface/subnet.
For S7 subnets of the type PROFIBUS: Either the CPU must be configured as DP master or, if it is configured as a DP slave, the "Test, commissioning, routing" check box must be selected in the properties of the DP interface of the DP slave.
S7 routing for HMI connections is possible as of STEP 7 V13 SP1.
Note Firewall and S7 routing
A firewall does not recognize the IP address of the sender during S7 routing when the sender is located outside the S7 subnet adjacent to the firewall.
An overview of the devices that support the "S7 routing" function is provided in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/584459).
Communication Function Manual, 11/2019, A5E03735815-AH
289
Routing 10.2 S7 routing S7 routing for online connections
With the PG/PC, you can reach devices beyond S7 subnets, for example to do the following: Download user programs Download a hardware configuration Execute test and diagnostics functions In the following figure, CPU 1 is the S7 router between S7 subnet 1 and S7 subnet 2.
Figure 10-1 S7 routing: PROFINET - PROFINET
290
Communication Function Manual, 11/2019, A5E03735815-AH
Routing 10.2 S7 routing
The following figure shows the access from a PG via PROFINET to PROFIBUS. CPU 1 is the S7 router between S7 subnet 1 and S7 subnet 2; CPU 2 is the S7 router between S7 subnet 2 and S7 subnet 3.
Figure 10-2 S7 routing: PROFINET - PROFIBUS
S7 routing for HMI connections You have the option of setting up an S7 connection from an HMI to a CPU via different subnets (PROFIBUS and PROFINET or Industrial Ethernet). In the following figure, CPU 1 is the S7 router between S7 subnet 1 and S7 subnet 2.
Figure 10-3 S7 routing via HMI connections
Communication Function Manual, 11/2019, A5E03735815-AH
291
Routing 10.2 S7 routing S7 routing for CPU-CPU communication
You have the option of setting up an S7 connection from a CPU to another CPU via different subnets (PROFIBUS and PROFINET or Industrial Ethernet). The procedure is described based on examples in the section S7 communication (Page 112).
Figure 10-4 S7 routing via CPU-CPU communication
Using S7 routing For the CPU, select the PG/PC interface and the S7 subnet in the "Go online" dialog of STEP 7. S7 routing is performed automatically.
Number of connections for S7 routing The number of connections available for S7 routing in the S7 routers (CPUs, CMs or CPs) can be found in the technical specifications in the manuals of the relevant CPU/CM/CP.
292
Communication Function Manual, 11/2019, A5E03735815-AH
Routing 10.2 S7 routing
S7 routing: Example of an application The figure below shows the example of an application for remote maintenance of a system using a PG. The connection is made here beyond two S7 subnets via a modem connection. You configure a remote connection via TeleService in STEP 7 using "Online access" or "Go online".
Figure 10-5 Remote maintenance of a plant using TeleService
Additional information
The allocation of connection resources with S7 routing is described in the section Allocation of connection resources (Page 311).
You can find more information on setting up TeleService in the STEP 7 online help.
You can find more information on S7 routing and TeleService adapters when you search the Internet using the following links:
Device manual Industrial Software Engineering Tools TS Adapter IE Basic (http://support.automation.siemens.com/WW/view/en/51311100)
Downloads for the TS Adapter (http://support.automation.siemens.com/WW/view/en/10805406/133100)
See also
HMI communication (Page 63)
Communication Function Manual, 11/2019, A5E03735815-AH
293
Routing 10.3 IP forwarding
10.3
IP forwarding
Forwarding of IP packets with IP forwarding
IP forwarding is a function of devices to forward IP packets between two connected IP subnets.
Enable/disable the IP forwarding function in STEP 7. When IP forwarding is enabled, the S7-1500 CPU forwards received IP packets not addressed to the CPU to locally connected IP subnets or to a configured router.
The following figure shows how a programming device accesses data of an HMI device. Programming device and HMI device are located in different IP subnets. The IP subnets are connected to the two interfaces X1 and X2 of the CPU.
Figure 10-6 Access of a programming device to an HMI via IP forwarding
Areas of application Easy access from the control level to the field level for configuration and parameter assignment of field devices, e.g. via PDM or web browser Simplified integration of devices for remote access, e.g. for diagnostics during remote maintenance or firmware update
294
Communication Function Manual, 11/2019, A5E03735815-AH
Routing 10.3 IP forwarding
Requirements for using IP forwarding
S7-1500 CPU as of firmware version V2.8
Number of Ethernet interfaces:
The CPU has at least two Ethernet interfaces.
Or the CPU has one Ethernet interface, and a CP 1543-1 as of firmware version V2.2 provides the other Ethernet interface. In this case, the "Access to PLC via communication module" function must be enabled for the CP in the CPU.
IP forwarding is enabled.
Suitable standard gateways/routes are configured in each participating device along the outgoing and return paths of the IP packets.
IP route table
When IP forwarding is enabled, the CPU forwards received IP packets that are not addressed to itself. How the CPU forwards the IP packets is defined in its internal IP route table.
The CPU automatically creates the IP route table from the following information of the loaded hardware configuration:
IP configuration of the Ethernet interfaces
Configured router
Example of a configuration with IP forwarding
The following figure shows a sample configuration along with the required IP address settings and router settings.
A PC on the IP subnet 192.168.4.0 communicates with an HMI device on the IP subnet 192.168.2.0.
The IP address of a router ("Standard Gateway") is configured at the CPU, Ethernet interface X3; in the figure below it is the device that is designated as "IP Router". In STEP 7, you configure a router in the interface properties under "Ethernet Addresses" > "IP Protocol".
Figure 10-7 Configuring the router
Communication Function Manual, 11/2019, A5E03735815-AH
295
Routing 10.3 IP forwarding
For the PC, the IP router, the IO device and the HMI device, the IP addresses of a standard gateway or the corresponding routes are also entered.
Figure 10-8 Sample configuration
This example configuration results in the following IP routing table for the CPU.
Table 10- 1 IP route table of the CPU
Network destination 0.0.0.0/0 192.168.1.0/24 192.168.2.0/24 10.10.0.0/24
Interface 10.10.0.10 192.168.1.1 192.168.2.1 10.10.0.10
Gateway 10.10.0.1 -
For IP communication between the PG/PC and the HMI device, you need to set up additional IP routes to the IP subnet of the HMI device both in the PC and in the IP router. In the HMI device, you configure the IP address of the CPU interface X1 as the standard gateway.
296
Communication Function Manual, 11/2019, A5E03735815-AH
Routing 10.3 IP forwarding
In a Windows computer, for example, you set up an additional IP route from the command prompt using the command "route add <destination IP subnet> mask <subnet mask> <gateway>". However, you need certain access rights for this. For this example, enter the following prompt: "route add 192.168.2.0 mask 255.255.255.0 192.168.4.20" In an IP router, you set up additional routes, e.g. via a web interface. Set up the following route for this example: Destination IP subnet: 192.168.2.0 Subnet mask: 255.255.255.0 Gateway: 10.10.0.10
Communication Function Manual, 11/2019, A5E03735815-AH
297
Routing 10.3 IP forwarding
Restrictions
You cannot configure any additional IP routes other than the router ("Standard Gateway") for an S7-1500 CPU. The network destination is either a connected IP subnet, or the network destination can be reached via exactly one configurable router. Because the S7-1500 CPU does not support additional IP routes, you cannot build bi-directional IP router cascades.
In the following configuration, you can configure either "Router 1" or "Router 2" in the CPU. "Router 1" is configured as an example. In this case, you cannot configure "Router 2". IP communication between the PC and the HMI device is not possible because the route is not continuous in both directions.
Figure 10-9 Unsupported IP router cascade
298
Communication Function Manual, 11/2019, A5E03735815-AH
Routing 10.3 IP forwarding
IP forwarding via the interface of a CP IP forwarding also works via the interface of a CP. For this you have to activate the "Access to PLC via communication module" function for this CP in the CPU. How you enable the "Access to PLC via communication module" function is described in the online help of STEP 7.
Reaching C/C++ Runtime of the CPU 1518 4 PN/DP MFP via interfaces X1 or X2 If you activate PN/DP MFP IP forwarding for the CPU 1518 4 PN/DP, you will not only reach devices in the IP subnet of interface X3 via interfaces X1 and X2, but also C/C++ Runtime. From the C/C++ Runtime of the CPU 1518 4 PN/DP MFP, you reach all devices in the IP subnets of the interfaces X1, X2 and X3. Conditions: IP forwarding is enabled for the CPU 1518 4 PN/DP MFP. The IP address of C/C++ Runtime and the IP address of interface X3 are located in the same IP subnet. The routes to the IP subnets at X1 and X2 are entered in C/C++ Runtime. In C/C++ Runtime, enter a route with the following command: "Route add-net <destination IP subnet> mask <subnet mask> gw <gateway> The following figure shows a configuration in which a PC accesses the C/C++ Runtime of CPU 1518-4 PN/DP MFP via interface X2.
Figure 10-10 Access to C/C++ Runtime via interface X2
Communication Function Manual, 11/2019, A5E03735815-AH
299
Routing 10.3 IP forwarding
Take network security into account for IP forwarding If you activate IP forwarding for a CPU, you enable "external" access to devices that are actually only accessible and controlled by the CPU. These devices are therefore usually not protected against attacks. The following figure shows how to protect your automation system against unauthorized access.
Figure 10-11 Network security for IP forwarding
The CPU accesses all devices within the dark green IP subnets B and C close to the CPU via the interfaces X1 and X2.
A SCALANCE S router is configured in the CPU. The CPU accesses the devices in the remote, light green IP subnet A via the router.
The "Access to PLC via communication module" function is enabled for the CP 1543 in the CPU. The CPU reaches all devices within the IP subnet D via W1 interface.
If IP forwarding is enabled in the CPU, then a device from IP subnet A can access any device within IP subnets B,C and D close to the CPU.
Protect your automation system and connected devices against unauthorized access from outside.
Separate the CPU-related IP subnets from the remote IP subnets with a firewall. For example, use the SCALANCE S security modules with integrated firewall. This application example (https://support.industry.siemens.com/cs/ww/en/view/22376747) describes how to protect an automation cell with a firewall using the SCALANCE S602 V3 and SCALANCE S623 security modules.
300
Communication Function Manual, 11/2019, A5E03735815-AH
Routing 10.4 Data record routing
Enabling/disablng IP forwarding To enable IP forwarding, proceed as follows: 1. Select the CPU in the network view of STEP 7 (TIA Portal). 2. In the properties of the CPU of the Inspector window, navigate to "General" > "Advanced Configuration" > "IP forwarding". 3. In the "Configuration IPv4 Forwarding" area, select the check box "Activate IPv4 for interfaces of this PLC".
Figure 10-12 Enabling IP forwarding
Result: IP forwarding is enabled for all interfaces of the S7-1500 CPU. You disable IP forwarding by clearing the check box "Enable IPv4 forwarding for interfaces of this PLC".
10.4
Data record routing
Definition of data record routing
Data can be sent over PROFINET from an engineering station to field devices via multiple networks. Since the engineering station addresses the field devices using standardized records and these records are routed via S7 devices, the term "data record routing" is used to refer to this type of routing.
The data sent using data record routing include the parameter assignments for the participating field devices (slaves) and device-specific information (e.g. setpoint values, limit values).
Data record routing is used, for example, when field devices of different manufacturers are used. The field devices are addressed using standardized data records ( PROFINET) for configuration and diagnostics.
Data record routing with STEP 7
You can perform data routing with STEP 7 by calling a device tool (for example, PCT) via the TCI interface (Tool Calling Interface) and passing call parameters. The device tool uses the communication paths that STEP 7 also uses for communication with the field device.
No configuration is required for this type of routing except the installation of the TCI tools on the STEP 7 computer.
Communication Function Manual, 11/2019, A5E03735815-AH
301
Routing 10.4 Data record routing
Example: Data record routing with the Port Configuration Tool (PCT) You can use the Port Configuration Tool (PCT) to configure the IO link master of the ET200 and assign parameters to connected IO link devices. The subnets are connected via data record routers. Data record routers are, for example, CPUs, CPs, IMs, IO link master. You can learn about the constellations of data record routers supported by the PCT in this FAQ (http://support.automation.siemens.com/WW/view/en/87611392). The figure below shows an example configuration with the data record routing with PCT.
Figure 10-13 Example configuration for data record routing with PCT
Additional information The differences that exist between "normal" routing and data record routing are described in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/7000978). Whether or not the CPU, CP or CM you are using supports data record routing can be found in the relevant manuals. The allocation of connection resources with data record routing is described in the section Allocation of connection resources (Page 311). You can find additional information on configuration with STEP 7 in the STEP 7 online help.
302
Communication Function Manual, 11/2019, A5E03735815-AH
Routing 10.5 Virtual interface for IP-based applications
10.5
Virtual interface for IP-based applications
As of firmware version 2.8, the S7-1500 CPU offers the option of reaching its IP-based applications, such as OPC UA, not only via its local (PN) interfaces, but also via the interfaces of communication processors in the same station. A communication partner reaches these IP-based applications via a virtual interface that can be configured in the TIA Portal as of version V16. The virtual interface is called W1 (according to IEC 81346-2).
Features of the virtual interface
The virtual interface is not a fully diagnosable interface with the familiar properties of conventional interfaces. The virtual interface is not displayed in the graphical views, because the internal connection via the backplane bus does not represent an S7 subnet and does not have any ports. A physical connection by means of a network cable therefore cannot be established.
The IP address of the virtual interface is displayed (e.g. in the TIA Portal, in the display of the CPU) and can be configured.
The following IP-based services can be used e.g. via the virtual interface W1:
OPC UA (client and server)
Programmed OUC connections
S7 communication (ES/HMI access and instructions for S7 communication such as PUT, GET)
The activated interface can be used in dialogs where IP-based connections are configured.
Figure 10-14 Principle of the virtual interface
Communication Function Manual, 11/2019, A5E03735815-AH
303
Routing 10.5 Virtual interface for IP-based applications
Compared to conventional interfaces, the virtual interface has the following restrictions: No access to the web server over the virtual interface. Online backup is not possible via a connected programming device with the TIA Portal. If the CPU and communication partners are connected via the virtual interface, they
cannot exchange data via LLDP (Link Layer Discovery Protocol). The S7 routing service does not use the virtual interface W1.
Requirement
For a CPU service to be accessible via the Ethernet interface of a CP, the following requirements must be fulfilled: S7-1500 CPU firmware V2.8 or higher CP 1543-1 firmware V2.2 or higher R/H CPUs do not support this function because R/H CPUs do not support CPs.
Configuration of the virtual interface W1
In the properties of an S7-1500 CPU as of firmware V2.8, you can assign a plugged communication module to the virtual interface W1 under "Advanced Configuration > Access to PLC via communication module". You can then use this for external access to the CPU. If no CPs are plugged in or the plugged CPs do not support access to the CPU, the selection is empty.
Figure 10-15 Selecting the CP in the CPU properties
After selecting the CP, the specifications and parameters for the virtual interface are displayed. Here, you can edit the settings for the IP protocol and the PROFINET parameters.
The IP subnet is freely selectable, just like with the CP. The IP subnet is entered via the subnet mask and IP address of the virtual interface.
When entering the IP subnet for the virtual interface, note that you are not using the same IP subnet as for the local interfaces of the CPU.
304
Communication Function Manual, 11/2019, A5E03735815-AH
Routing 10.5 Virtual interface for IP-based applications
Once the IP address is entered, it is shown in the properties dialog of the OPC UA server in the list of server addresses. These settings provide the CPU with the new virtual interface W1 via which CPU services like the OPC UA server can be accessed via a communication module. The corresponding connections and S7 communication (e.g. HMI and BSEND, BRCV) are made via this interface. The OPC UA server does not allow selection of a specific interface (selection via an IP address), either all or none are possible.
Note The IP address of the virtual interface is not listed as W1 in the device display under the currently displayed local interfaces (Xn) but is available under "Addresses" in the "Settings" section. The virtual interface is also visible when no CP is plugged or when the virtual interface is not activated. If no IP suite is available, the IP address and the subnet mask are 0.0.0.0.
If you change the configured and loaded IP address parameters of the virtual interface via display, T_CONFIG instruction or online, the loaded configuration is active again after the CPU restarts.
Configuration changes on the CP A change of the assigned communication module may have an effect on the configuration of the virtual interface: In the properties of the CPU: Assignment of a different CP: The configuration is used for the new CP. Deselect the assigned CP: The virtual interface W1 is deactivated and the configuration is lost. When a CP is assigned again, the configuration must be performed again. On the device: Moving the CP: If the CP is only moved to another slot of the device, the configuration continues to be valid. Removing the CP: If the CP is deleted or moved to another device, the configuration is retained. In the drop-down list of the CPU, the CP is displayed as missing and compiling the configuration indicates an error. The missing CP can be deselected or assigned to another CP.
Display in the diagnostics and the system constants The virtual interface W1 is displayed in the diagnostics view under "Online & Diagnostics". The hardware ID of the virtual interface is displayed in the system constants of the CPU properties.
Communication Function Manual, 11/2019, A5E03735815-AH
305
Routing 10.5 Virtual interface for IP-based applications
Settings in the communication module The settings of the internal CP firewall do not have an effect on communication over the virtual interface. This means the security functions of the communication module cannot protect the data traffic via the virtual interface.
NOTICE Connecting to non-secure networks If you connect the CP to a non-secure network, it is absolutely necessary to connect an additional firewall between the CP and the non-secure network. For example, use the security modules SCALANCE S602 V3 and SCALANCE S623 with integrated firewall.
306
Communication Function Manual, 11/2019, A5E03735815-AH
Connection resources
11
11.1
Connection resources of a station
Introduction
Some communications services require connections. Connections occupy resources in the automation system (station). The connection resources are made available to the station by the CPUs, communications processors (CPs) and communications modules (CMs).
Connection resources of a station
The connection resources available depend on the CPUs, CPs and CMs being used and must not exceed a maximum number per station.
The maximum number of resources of a station is determined by the CPU.
Reserved connection resources
Each CPU has reserved connection resources for PG, HMI and Web server communication. This ensures, for example, that a PG can always establish at least one online connection with the CPU regardless of how many other communications services are already using connection resources.
Dynamic connection resources
In addition, dynamic resources exist. The difference between the maximum number of connection resources and the number of reserved connection resources is the maximum number of dynamic connection resources.
The communication services PG Communication, HMI Communication, S7 Communication, Open User Communication, Web Communication, OPC UA Client/Server Communication and other communication from the pool of dynamic connection resources are used.
Communication Function Manual, 11/2019, A5E03735815-AH
307
Connection resources 11.1 Connection resources of a station
The figure below shows an example of how individual components make connection resources available to an S7-1500 station.
Available connection resources of the station, of which
A
Reserved connection resources of the station
A + B Connection resources of CPU 1518
C
Connection resources of communications module CM 1542-1
D
Connection resources of communications processor CP 1543-1
Maximum communications resources of the station using the example of a configuration from
CPU 1518, CM 1542-1 and CP 1543-1
Figure 11-1 Connection resources of a station
308
Communication Function Manual, 11/2019, A5E03735815-AH
Connection resources 11.1 Connection resources of a station
Number of connection resources of a station
Table 11- 1 Maximum number of connection resources supported for some CPU types
Connection resources of a station
Maximum connection resources of the station
of which reserved
of which dynamic
Connection resources of the CPU
Max. additionally usable connection resources by plugging in CMs/CPs
Additional connection resources CM 1542-1
Additional connection resources CP 1543-1
Additional connection resources CM 1542-5
Additional connection resources CP 1542-5
1511 1511C
96
86 64
32
1512C 1513 128
118 88
40
1515
1516
192
256
10
182
246
108
128
84
128
64 118 40 16
1517 320
310 288 32
1518 384
374 320 64
The number of connection resources that a CPU or a communication module supports is specified in the device manuals in the Technical Specifications.
Example
You have configured a CPU 1516-3 PN/DP with a CM 1542-1 communication module and a CP 1542-5 communication processor. Maximum connection resources of the station: 256 Available connection resources:
CPU 1516-3 PN/DP: 128 CM 1542-1: 64 CP 1542-5: 16 Total: 208 The setup provides 208 connection resources. By adding further communication modules, the station can support a maximum of 48 additional connection resources.
Communication Function Manual, 11/2019, A5E03735815-AH
309
Connection resources 11.1 Connection resources of a station
Reserved connection resources 10 connection resources are reserved for stations with S7-1500 CPU, ET 200SP CPU and ET 200pro CPU based on S7-1500: 4 for PG communication required by STEP 7, for example, for test and diagnostics functions or downloading to the CPU 4 for HMI communication which are occupied by the first HMI connections configured in STEP 7 2 for communication with the Web server
310
Communication Function Manual, 11/2019, A5E03735815-AH
Connection resources 11.2 Allocation of connection resources
11.2
Allocation of connection resources
Overview - occupation of connection resources The following figure shows how different connections occupy the resources of the S7-1500.
HMI communication: See below. Open User Communication: Connections of Open User Communication occupy a connection
resource in every end point.
S7 communication: Connections of S7 communication occupy a connection resource in every
end point.
Web communication: The Web server connection occupies at least one connection resource in
the station. The number of occupied connections depends on the browser.
PG communication: The PG connection occupies one connection resource in the station. OPC UA client/server communication: Connection resource allocation for the server, see below OPC UA client/server communication: Connection resource allocation for the client, see below
Connection resource for HMI communication
Connection resource for Open User Communication
Connection resource for S7 communication
Connection resource for Web communication
Connection resource for PG communication
Connection resources for OPC UA server communication
Figure 11-2 Allocation of connection resources
Communication Function Manual, 11/2019, A5E03735815-AH
311
Connection resources 11.2 Allocation of connection resources
Connection resources for HMI communication
With HMI communication, the occupation of connection resources in the station depends on the HMI device being used.
Table 11- 2 Maximum occupied connection resources for different HMI devices
HMI device
Maximum occupied connection resources of the station per HMI connection
Basic Panel
1
Comfort Panel
21
RT Advanced
21
RT Professional
3
1 If you do not use system diagnostics or alarm configuration, the station occupies only one connection resource per HMI connection.
Example: You have configured the following HMI connections for a CPU 1516-3 PN/DP:
Two HMI connections to an HMI TP700 Comfort. (2 connection resources each)
One HMI connection to an HMI KTP1000 Basic. (1 connection resource)
In total 5 connection resources are occupied for HMI communication in the CPU.
Connection resources for OPC UA client communication
Each connection that the OPC UA client of the CPU has established to an OPC UA server occupies a connection resource in the station.
When establishing and closing an OPC UA connection, the OPC UA client temporarily occupies an additional connection resource. According to RFC 793, this connection resource is released again after a wait of approx. 60 seconds.
Note Lack of resources due to temporary connection resources
A lack of connection resources occurs in the following situation: · The OPC UA client of the CPU establishes or closes several connections simultaneously. · The number of available connection resources of the station is insufficient for permanent
and temporary connection resources of the OPC UA client communication.
Ensure that there are always enough available connection resources in the station to establish and end OPC UA connections.
Measures: · Plan enough reserve for the OPC UA client connections. · If necessary, establish or close the OPC UA connections one after the other.
312
Communication Function Manual, 11/2019, A5E03735815-AH
Connection resources 11.2 Allocation of connection resources
Connection resources for routing To transfer data beyond S7 subnets ("S7 routing"), an S7 connection is established between two CPUs. The S7 subnets are connected via gateways known as S7 routers. CPUs, CMs and CPs in S7-1500 are S7 routers. The following applies for a routed S7 connection: A routed connection occupies one connection resource each in both end points. STEP 7 shows these connection resources in the "Connection resources" table. On the S7 router, two special connection resources are occupied for S7 routing. STEP 7 does not show the special connection resources for S7 routing in the "Connection resources" table. The number of resources for S7 routing depends on the CPU. You will find the resources for S7 routing in the technical specifications of the CPU in "Number of S7 routing connections".
Connection resource for S7 communication
Special connection resources for S7 routing
Figure 11-3 Connection resources with S7 routing
Data record routing also enables transfer of data beyond S7 subnets from an engineering station connected to PROFINET to various field devices via PROFIBUS. With data record routing, as with S7 routing, two of the special connection resources for S7 routing are also occupied on every data record router.
Note Connection resources with data record routing With data record routing, on the data record router, two special connection resources for S7 routing are occupied. Neither the data record connection nor the allocated connection resources are displayed in the table of connection resources.
Communication Function Manual, 11/2019, A5E03735815-AH
313
Connection resources 11.2 Allocation of connection resources
When are connection resources occupied?
The time for the occupation of connection resources depends on how the connection is set up (see section Setting up a connection (Page 27)).
Programmed setup of a connection: As soon as an instruction to establish a connection is called in the user program (TSEND_C/TRCV_C or TCON), a connection resource is occupied.
With suitable parameter assignment of the CONT parameter of the TSEND_C/TRCV_C instructions or by calling the TDISCON instruction, the connection can be terminated following data transfer and the connection resource is available again. When the connection is terminated, the connection resources on the CPU/CP/CM are available again.
Configured connections (e.g. S7 connection): If you have configured a connection in STEP 7, the connection resource is occupied as soon as the hardware configuration is downloaded to the CPU.
After using a configured connection for data transfer, the connection is not terminated. The connection resource is permanently occupied. To release the connection resource again, you need to delete the configured connection in STEP 7 and download the modified configuration to the CPU.
PG connection: As soon as you have connected the PG to a CPU online in STEP 7, connection resources are occupied.
Web server: As long as you have opened the Web server of the CPU in a browser, connection resources are occupied in the CPU.
OPC UA server
Each connection to the OPC UA server of the CPU occupies a connection resource in the station. This connection resource is released immediately when the connection is terminated.
OPC UA client
Each connection that the OPC UA client of the CPU has established to an OPC UA server occupies a connection resource in the station. When an OPC UA connection is established, the OPC UA client temporarily occupies an additional connection resource. When an OPC UA connection is terminated, the connection resource is not released again until after a wait time of approx. 60 seconds in accordance with RFC 793.
314
Communication Function Manual, 11/2019, A5E03735815-AH
Connection resources 11.2 Allocation of connection resources
Monitoring the maximum possible number of connection resources
Offline During configuration of connections, STEP 7 monitors the occupation of the connection resources. If the maximum possible number of connection resources is exceeded, STEP 7 signals this with a suitable warning.
Online The CPU monitors the use of connection resources in the automation system. If you establish more connections in the user program than those provided by the automation system, the CPU acknowledges the instruction to establish the connection with an error.
S7-1500 and S7-300 comparison You will find a comparison of how the communication resources of the S7-1500 and S7-300 are managed in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/109747092).
Communication Function Manual, 11/2019, A5E03735815-AH
315
Connection resources 11.3 Display of the connection resources
11.3
Display of the connection resources
Display of the connection resources in STEP 7 (offline view)
You can display the connection resources of an automation system in the hardware configuration. You will find the connection resources in the Inspector window in the properties of the CPU.
Figure 11-4 Example: Reserved and available connection resources (offline view)
Station-specific connection resources
The columns of the station-specific connection resources provide information about the used and available connection resources of the station.
In the example, a maximum of 256 station-specific connection resources are available for the automation system.
10 reserved connection resources, of which 4 are already in use and a further 6 available. The used resources are divided up as follows:
4 Resources for HMI communication
246 dynamic connection resources, of which 26 are already in use and a further 220 available. The used resources are divided up as follows:
6 resources for HMI communication
7 resources for S7 communication
13 resources for Open User Communication
316
Communication Function Manual, 11/2019, A5E03735815-AH
Connection resources 11.3 Display of the connection resources
The warning triangle in the column of the dynamic station resources is displayed because the sum of the maximum available connection resources of CPU, CP and CM (= 310 connection resources) exceeds the station limit of 256.
Note Available connection resources exceeded STEP 7 signals the exceeding of the station-specific connection resources with a warning. To make full use of the connection resources from the CPU, CP and CM, either use a CPU with a higher maximum number of available station-specific connection resources or reduce the number of communications connections.
Module-specific connection resources
The columns of the module-specific connection resources provide information about the use of resources on the CPUs, CPs and CMs of an automation system: The display is per module and not per interface. In the example, the CPU makes a maximum of 128 connection resources available, of which 18 are already in use and 110 still available. The used resources are divided up as follows: 6 resources for HMI communication 4 resources for S7 communication 8 resources for Open User Communication
Communication Function Manual, 11/2019, A5E03735815-AH
317
Connection resources 11.3 Display of the connection resources
Display of the connection resources in STEP 7 (online view) If you are connected to the CPU online, you can also see how many resources are currently being used under "Connection information".
Figure 11-5 Connection resources - online
The online view of the "Connection resources" table in addition to the offline view also contains columns with the connection resources currently being used. Thus, the online view displays all used connection resources in the automation system, regardless of how the connection was set up.
The "Other communication" row displays connection resources assigned for communication with external devices. The table is updated automatically.
Note
If a routed S7 connection goes through a CPU, the required connection resources of the CPU do not appear in the table of connection resources.
318
Communication Function Manual, 11/2019, A5E03735815-AH
Connection resources 11.3 Display of the connection resources
Display of the connection resources for HMI For information regarding the availability and assignment of connection resources for HMI connections, refer to the "Connection resources" properties in the Inspector window of the offline view (in the context of the HMI device).
Figure 11-6 Connection resources - HMI communication
The following is displayed in the connection resources area: Number of available connections on the HMI reserved for HMI communication and HTTP
communication Number of connection resources for HMI communication and HTTP communications
used offline in the HMI If the maximum number of available connection resources for an HMI device is exceeded, a corresponding message is output by STEP 7. "Maximum number of used PLC resources per HMI connection". This parameter is a factor that is to be multiplied by the number of HMI connections used offline. The product is the number of HMI resources occupied on the CPU.
Displaying the connection resources in the Web server You can display the connection resources not only in STEP 7, but also with a browser that displays the relevant page of the Web server. You will find information on displaying connection resources in the Web server in the Web Server (http://support.automation.siemens.com/WW/view/en/59193560)function manual.
Communication Function Manual, 11/2019, A5E03735815-AH
319
Diagnostics and fault correction
12
12.1
Connection diagnostics
Connections table in the online view
After selecting a CPU in the Devices & networks editor of STEP 7, you will see the status of your connections displayed in the online view of the connections table.
Figure 12-1 Online view of the connections table
After selecting the connection in the connections table, you obtain detailed diagnostic information in the "Connection information" tab.
320
Communication Function Manual, 11/2019, A5E03735815-AH
"Connection information" tab: Connection details
Diagnostics and fault correction 12.1 Connection diagnostics
Figure 12-2 Diagnostics of connections - connection details
Communication Function Manual, 11/2019, A5E03735815-AH
321
Diagnostics and fault correction 12.1 Connection diagnostics
"Connection information" tab: Address details
Figure 12-3 Diagnostics of connections - address details
Diagnostics via web server You can evaluate diagnostic information from the CPU using a web browser via the integrated web server of a CPU. On the "Communication" Web page, you will find the following information about communication via PROFINET in various tabs: Information on the PROFINET interfaces of the CPU (for example addresses, subnets, physical properties). Information on the quality of the data transfer (for example number of data packets sent/received error-free). Information about the allocation/availability of connection resources. The "Connection status" page is similar to the online view in STEP 7 and also provides an overview of all connections with detail view.
322
Communication Function Manual, 11/2019, A5E03735815-AH
Diagnostics and fault correction 12.2 Emergency address
Diagnostics with the user program When you program the T_DIAG instruction, you can evaluate diagnostic information about the configured and programmed connections of the CPU using the user program.
Additional information You will find the description of the web server functionality in the function manual Web server (http://support.automation.siemens.com/WW/view/en/59193560).
12.2
Emergency address
If you cannot reach the CPU via the IP address, you can set a temporary emergency address (emergency IP) for the CPU. Via this emergency address, you can re-establish the connection with a CPU in order to load a device configuration with a valid IP address.
You can set an emergency address regardless of the protection level of the CPU
When do you need an emergency address? Your CPU cannot be reached in the following cases: The IP address of your PROFINET interface is assigned twice. The subnet mask is set incorrectly.
Requirements
You have selected "Set IP address in the project" for the IP protocol in the device configuration in STEP 7.
The CPU is in STOP mode.
Restoring a valid device configuration with an emergency address
1. Set the emergency address for the interface of the CPU with a DCP tool. For example, the SIMATIC Automation Tool has a DCP command "Define IP address". The maintenance LED of the CPU lights up. The diagnostic buffer also shows that an emergency address was activated for an Ethernet interface.
2. Load a STEP 7 project with a valid IP address into the CPU.
3. Switch the CPU off and on again. The emergency address is reset.
Result
The CPU starts up with the valid IP address.
Communication Function Manual, 11/2019, A5E03735815-AH
323
Communication with the redundant system S7-1500R/H
13
Introduction
Communication with the S7-1500R/H redundant system basically functions as with the S7-1500 standard system.
This chapter describes the special features and restrictions for communication with the S7-1500R/H redundant system.
Communication options for the S7-1500R/H redundant system Open User Communication via TCP/IP, UDP, ISO on-TCP and Modbus/TCP S7 communication as server HMI communication PG communication SNMP Time-of-day synchronization via NTP
Restrictions for communication with the S7-1500R/H redundant system Open User Communication:
no configured connections
Secure Open User Communication: Not supported, as certificate management is not possible for the R/H CPUs.
If you have activated Secure OUC, then although you can compile the user program and load it, you cannot add certificates to the R/H-CPUs.
no FDL connections
Email: The S7-1500R/H CPUs with firmware version V2.6 support the versions < V5.0 of the "TMAIL_C" instruction. Versions from V5.0 are not supported.
No support of connection descriptions according to "TCON_Param"
no OPC UA
no S7 communication as client
no web server
PG communication: It is not possible to access two CPUs online at the same time. You can either access the primary CPU or the backup CPU.
The CPUs of the S7-1500R/H do not support centrally plugged communication modules.
324
Communication Function Manual, 11/2019, A5E03735815-AH
Communication with the redundant system S7-1500R/H 13.1 System IP addresses
13.1
System IP addresses
The system IP address of the S7-1500R/H redundant system
In addition to the device IP addresses of the CPUs, the S7-1500R/H redundant system supports system IP addresses:
System IP address for the PROFINET interfaces X1 of the two CPUs (system IP-address X1)
System IP address for the PROFINET interfaces X2 of the two CPUs (system IP-address X2)
You use the system IP addresses for communication with other devices (for example, HMI devices, CPUs, PCs). The devices always communicate via the system IP address with the primary CPU of the redundant system. This ensures, for example, that the communication partner can communicate with the new primary CPU (previously backup CPU) in the RUNSolo system state after failure of the original primary CPU in redundant operation.
There is a virtual MAC address for each system IP address.
You enable the system IP addresses in STEP 7.
Advantages of the system IP addresses compared to device IP addresses
The communication partner communicates specifically with the primary CPU.
Communication of the S7-1500R/H redundant system via a system IP address still also works in the event of the failure of the primary CPU.
Applications
You use the system IP addresses for the following applications:
HMI communication with the S7-1500R/H redundant system: You can use an HMI device to control or monitor the process on the redundant S7 1500R/H system.
Open User Communication with the S7-1500R/H redundant system:
Another CPU or an application on a PC accesses data of the S7-1500R/H redundant system.
The S7-1500R/H redundant system accesses a different device.
TCP, UDP and ISO-on-TCP-connections are possible.
IP forwarding: If you use the system IP addresses as the gateway/default route for IP routes through the S7-1500R/H redundant system, IP packets are forwarded even if one CPU fails.
Communication Function Manual, 11/2019, A5E03735815-AH
325
Communication with the redundant system S7-1500R/H 13.1 System IP addresses
Requirements
The interface of the communication partner and the PROFINET interfaces of the two CPUs are located in the same subnet.
The interface of the communication partner is connected to both CPUs, each via the same interface (e.g. X2).
The system IP address for the interfaces of the S7-1500R/H system is enabled.
Communication via the system IP address X2
If the CPUs of the S7-1500R/H redundant system have two PROFINET interfaces, preferably use the PROFINET interface X2 for communication with other devices.
The following figure shows a configuration in which the communication partners are connected via the respective PROFINET interfaces X2 with the CPUs of the redundant system S7-1500R/H.
Open User Communication between a different CPU and the S7-1500R/H redundant system HMI communication with the S7-1500R/H redundant system Open User Communication between the S7-1500R/H redundant system and a PC
Figure 13-1 Example: Communication of the S7-1515R redundant system via the system IP address X2
326
Communication Function Manual, 11/2019, A5E03735815-AH
Communication with the redundant system S7-1500R/H 13.1 System IP addresses
Communication via the system IP address X1
The following diagram shows a configuration where the communication partners are connected with a switch to the PROFINET ring of the S7-1500R/H redundant system. The PROFINET ring connects the communication partners with the respective PROFINET interfaces X1 of the two CPUs. As the CPU 1513R only has one PROFINET interface, connection via the PROFINET ring is the only possibility of communicating via the system IP address X1.
Open User Communication between the S7-1500R/H redundant system and a different CPU HMI communication with the S7-1500R/H redundant system Open User Communication between the S7-1500R/H redundant system and a PC
Figure 13-2 Example: Communication of the S7-1513R redundant system via the system IP address X1
Communication Function Manual, 11/2019, A5E03735815-AH
327
Communication with the redundant system S7-1500R/H 13.1 System IP addresses
Communication via the system IP addresses X1 and X2 If the CPUs of the redundant system S7-1500R/H have two PROFINET interfaces (X1 and X2), you can use the a system IP address for each PROFINET interface. PROFINET devices which are connected to the interfaces X1 of the CPUs communicate via the system IP address X1. PROFINET devices which are connected to the interfaces X2 of the CPUs communicate via the system IP address X2.
Open User Communication between the S7-1500R/H redundant system and a different CPU. HMI communication with the S7-1500R/H redundant system Open User Communication between the S7-1500R/H redundant system and a PC
Figure 13-3 Example: Communication of the S7-1515R redundant system via the system IP addresses X1 and X2
328
Communication Function Manual, 11/2019, A5E03735815-AH
Communication with the redundant system S7-1500R/H 13.1 System IP addresses
IP forwarding via the system IP address If you use the system IP addresses as the gateway/default route for IP routes through the S7-1500R/H redundant system, IP packets are forwarded even if one CPU fails. In the following figure, the PC is connected to the two X2 interfaces of the S7-1500R CPUs. Enter the system IP address X2 as gateway in the PC for the route to the HMI device. The HMI device is connected to the PROFINET ring of the redundant system S7-1500 via a switch. The system IP address X1 is configured as router in the HMI device.
Figure 13-4 Example: IP forwarding via the system IP address
Communication Function Manual, 11/2019, A5E03735815-AH
329
Communication with the redundant system S7-1500R/H 13.1 System IP addresses
Enable system IP addresses Requirements: STEP 7 V15.1 or higher redundant system S7-1500R/H with two CPUs, e.g. two CPUs 1513R-1PN If the CPUs of the S7-1500R/H redundant system have two PROFINET interfaces (X1 and X2), then you can use a system IP address for both PROFINET interfaces. The following section describes how to enable the system IP address for the interface X1. Proceed as follows to enable the system IP address for your S7-1500R/H redundant system: 1. In the network view of STEP 7, select the interface X1 of one of the two CPUs. 2. In the Inspector window go to "Properties" > "General" > "Ethernet addresses" in the area "System IP address for switched communication". 3. Select the check box "Enable the system IP address for switched communication". STEP 7 automatically creates a system IP address.
Figure 13-5 Configure IP address
4. Change the system IP address if necessary. 5. If required, change the virtual MAC address. To do this, in "Virtual MAC address", assign
a project-wide unique value (value range 01H to FFH) for the last byte.
Note Uniqueness of the virtual MAC address The redundant system S7-1500R/H uses a MAC address from the address range 00-00-5E-00-01-00 to 00-00-5E-00-01-00 for each system IP address. This address range is also used for VRRP (Virtual Redundancy Protocol). If you use devices with VRRP, e.g. switches, ensure the uniqueness of the MAC addresses within an Ethernet broadcast domain.
Result: The system IP address X1 for the PROFINET interface X1 of the two CPUs is enabled.
330
Communication Function Manual, 11/2019, A5E03735815-AH
Communication with the redundant system S7-1500R/H 13.2 Response to Snycup
13.2
Response to Snycup
Response of communication connections via the system IP address in the system state SYNCUP
HMI, PG- and S7-connections are temporarily closed. For a short time during the SYNCUP it is not possible to establish connections to the S7-1500R/H redundant system.
All existing connections of Open User Communication are interrupted:
Connections set up by the CPUs of the redundant system as an active connection partner are set up again after the SYNCUP.
The S7-1500R/H redundant system sets up connection endpoints again for the passive connection establishment after the SYNCUP.
The processing of running instances of the instructions TSEND and TRCV is stopped. The block parameter STATUS returns 80C4H (temporary communication error).
13.3
Response to primary-backup switchover
Response of communication connections via the system IP address during a primary-backup switchover
Running instances of the instructions TSEND and TRCV are stopped and return the status 80C4H (temporary communication error).
Connections successfully established by the S7-1500R/H redundant system are established again by the new primary CPU.
The new primary CPU sets up connection endpoints again for the passive connection establishment.
Note Increased duration of connection interruption
If the remote system does not transmit actively after the primary-backup switchover, the connection monitoring (e.g. TCP-Keep-Alive or application) may have to be performed by the remote system until the connection can be re-established.
Communication Function Manual, 11/2019, A5E03735815-AH
331
Communication with the redundant system S7-1500R/H 13.4 Connection resources of the redundant system S7-1500R/H
13.4
Connection resources of the redundant system S7-1500R/H
Maximum number of connection resources of the S7-1500R/H redundant system The S7-1500R/H redundant system supports a maximum number of connection resources. The CPU used determines the maximum number of resources for the redundant system: CPU 1513R: max. 88 connection resources CPU 1515R: max. 108 connection resources CPU 1517H: max. 288 connection resources
Allocation of connection resources
Communication connections occupy communication resources in the S7-1500R/H redundant system.
Each communication connection to the redundant system S7 1500R/H occupies connection resources in the S7 1500R/H station. The S7-1500R/H station comprises the hardware setup of both CPUs of the redundant S7-1500R/H system.
Depending on the IP address used, a communication connection also uses connection resources in one or both CPUs of the redundant S7-1500R/H system. The S7-1500R/H station can also be used to establish a communication connection.
The following table shows in which CPU a communication connection occupies connection resources depending on the IP address used.
Connect via...
a system IP address a device IP address of the CPU with redundancy ID 1 a device IP address of the CPU with redundancy ID 2
Connection resources of the station X X
Connection resources CPU with redundancy ID 1 X X
Connection resources CPU with redundancy ID 2 X -
X
-
X
332
Communication Function Manual, 11/2019, A5E03735815-AH
Communication with the redundant system S7-1500R/H 13.4 Connection resources of the redundant system S7-1500R/H Display of the occupied connection resources in STEP 7 Requirements: Online connection to the redundant system S7-1500R/H You will find the online display of the connection resources in the inspector window under "Diagnostics" > "Connection information". STEP 7 always displays the connection resources of the selected CPU and the S7-1500R/H-station.
Figure 13-6 Display of the connection resources of the S7-1500R/H redundant system in STEP 7
Communication Function Manual, 11/2019, A5E03735815-AH
333
Communication with the redundant system S7-1500R/H 13.5 HMI communication with the redundant system S7-1500R/H
13.5
HMI communication with the redundant system S7-1500R/H
13.5.1
HMI connection via the system IP address
Requirements
A redundant S7-1500R/H system, e.g. CPU 1513R-1PN System IP address is enabled HMI device with PROFINETI interface
Procedure
To set up a HMI connection to an S7-1500R/H redundant system, follow these steps:
1. In the network view of STEP 7, select a PROFINET interface of the HMI device.
2. Using a drag&drop operation, draw a line between the PROFINET interface of the HMI device and a PROFINET interface of the S7-1500R/H redundant system. The HMI device and the S7-1500R/H redundant system are networked together.
Figure 13-7 Networking an HMI device with the S7-1500R/H redundant system
3. In the list of functions, click the "Connections" icon. This activates connection mode. 4. Using a drag-and-drop operation, draw a line between the HMI device and a CPU of the
S7-1500R/H redundant system. The list "Connection partners" opens.
Figure 13-8 Setting up an HMI connection to the S7-1500R/H redundant system
5. Select the S7-1500R/H redundant system in the list "Connection partners". Result: You have set up a HMI connection between the HMI device and the S7-1500R/H redundant system. The HMI connection uses the system IP address. The HMI device always connects to the primary CPU.
334
Communication Function Manual, 11/2019, A5E03735815-AH
Communication with the redundant system S7-1500R/H 13.5 HMI communication with the redundant system S7-1500R/H
Changing the HMI connection over to the device IP address To permanently change the HMI connection over to the selected CPU, clear the check box "Use the system IP address for switched communication" in the properties of the HMI connection. The HMI connection then uses the device IP address of the PROFINET interface. In the event of the failure of this CPU, then the HMI connection to this CPU permanently fails.
Figure 13-9 Properties of the HMI connection
Note Automatic setup of HMI connection When you drag-and-drop a tag from the S7-1500R/H redundant system into an HMI screen or into the HMI tag table, STEP 7 automatically sets up an HMI connection. This HMI connection exists by default between the PROFINET interface of the HMI device and the PROFINET interface X1 of the CPU with redundancy ID 1. The connection uses the device IP address of the PROFINET interface X1. You can change the HMI connection to a system IP address in the properties of the HMI connection.
Communication Function Manual, 11/2019, A5E03735815-AH
335
Communication with the redundant system S7-1500R/H 13.6 Open User Communication with the redundant system S7-1500R/H
13.6
Open User Communication with the redundant system S7-1500R/H
The following table shows which protocols of the Open User Communication you can use for the S7-1500R/H redundant system and the matching system data types and instructions.
Table 13- 1 Protocols, system data types and usable instructions for Open User Communication with the redundant system S7-1500R/H
Protocol TCP
ISO-on-TCP
System data type · TCON_QDN · TCON_IP_v4
· TCON_IP_RFC
UDP Modbus TCP
· TCON_IP_v4 · TADDR_Param · TADDR_SEND_QDN · TADDR_RCV_IP
· TCON_IP_v4 · TCON_QDN
Instructions Establish connection and send/receive data via: · TSEND_C/TRCV_C or · TCON, TSEND/TRCV or · TCON, TUSEND/TURCV
(connection can be terminated via TDISCON)
Establish connection and send/receive data via: · TSEND_C/TRCV_C · TUSEND/TURCV/TRCV
(connection can be terminated via TDISCON)
· MB_CLIENT · MB_SERVER
13.6.1
Setting up the connection of the Open User Communication with the redundant S7-1500R/H system
Introduction
The S7-1500R/H redundant system can communicate with other devices via Open User Communication.
You set up the connections in the user program, e.g. via the "TSEND_C" instruction. The S7-1500R/H redundant system does not support configured connections.
You can either set up the connections either via the device IP addresses or via the system IP addresses of the PROFINET interfaces.
Open User Communication via a system IP address of the redundant system S7 1500R/H
If you set up the connection via a system IP address, then communication always takes place via the primary CPU.
Recommendation: Always use a system IP address for Open User Communication.
336
Communication Function Manual, 11/2019, A5E03735815-AH
Communication with the redundant system S7-1500R/H 13.6 Open User Communication with the redundant system S7-1500R/H
Open User Communication via a device IP address of the redundant system S7 1500R/H
In redundant mode, the redundant system can establish or terminate connections and send or receive data via every device IP address.
If you set up the connection via a device IP address, then communication takes place via the associated CPU. In the event of the failure of the CPU, then the entire communication via the device IP addresses of this CPU fails.
Setting up a connection via a system IP address
The following describes how to establish a connection to another CPU via a system IP address of a PROFINET interface of the redundant S7 1500R/H system.
You set up the connection in the user program of the redundant system S7-1500R/H with a TSEND_C instruction. You create a corresponding TRCV_C instruction in the user program of the other CPU.
The procedure is described using the example of a TCP connection between the S7-1500R/H redundant system and a CPU 1516-3PN/DP.
Requirements
A redundant system S7 1500R/H, e.g. 2 CPUs 1513 1PN System IP address of the PROFINET interface X1 is enabled. CPU 1516-3PN/DP The PROFINET interfaces X1 of the CPUs 1513R and the PROFINET interface X2 of the
CPU 1516-3PN/DP are located in the same subnet.
Figure 13-10 Example configuration for TCP-connection
Communication Function Manual, 11/2019, A5E03735815-AH
337
Communication with the redundant system S7-1500R/H 13.6 Open User Communication with the redundant system S7-1500R/H TSEND_C instruction in the user program of the S7-1500R/H redundant system
To set up a TCP-connection to a different CPU, follow these steps: 1. Create a "TSEND_C" instruction in the user program.
Figure 13-11 S7-1500R/H: "TSEND_C" instruction
2. Select the "TSEND_C" instruction.
338
Communication Function Manual, 11/2019, A5E03735815-AH
Communication with the redundant system S7-1500R/H 13.6 Open User Communication with the redundant system S7-1500R/H
3. In the Inspector window, go to "Properties" > "Configuration" > "Connection parameters". On the left-hand side you can see the S7-1500R/H redundant system as a local end point of the connection: "Interface:": X1 is the preset interface. "Subnet:": If the interface X1 is assigned to an S7-subnet, then STEP 7 displays the name of the S7-subnet. The check box "Use address of the H-system" is selected. The system IP address of the S7-1500R/H redundant system is in "Address".
Figure 13-12 S7-1500R/H: Assigning parameters to the TSEND_C instruction in STEP 7
4. In "Partners" under "End point:" select the CPU 1516-3PN/DP as the communication partner.
5. In "Partners" under "Interface:" select the PROFINET interface X2 of the CPU 1516-3PN/DP.
6. In "Local" under "Connection data" select the setting "<new>". STEP 7 creates a data block for the connection data in the user program of the S7-1500R/H redundant system, for example "PLC_1_Send_DB". "TCP" is set by default as the connection type.
7. In "Partners" under "Connection type" select the setting "NEW". STEP 7 creates a data block for the connection data in the user program of the other CPU, for example "PLC_3_Receive_DB".
Communication Function Manual, 11/2019, A5E03735815-AH
339
Communication with the redundant system S7-1500R/H 13.6 Open User Communication with the redundant system S7-1500R/H
TRCV_C instruction in the user program of the CPU 1516 3PN/DP Create a TRCV_C instruction in the user program of the CPU 1516-3PN/DP and assign parameters as below:
Figure 13-13 S7-1500-3PN/DP: Assigning parameters to the TRCV_C instruction in STEP 7
340
Communication Function Manual, 11/2019, A5E03735815-AH
Communication with the redundant system S7-1500R/H 13.6 Open User Communication with the redundant system S7-1500R/H
Setting up a connection via a device IP address To set up an OUC-connection via a device IP address of one of the two CPUs: Select a suitable PROFINET interface of the S7-1500R/H redundant system. Deselect the "Use address of H-system" check box.
Figure 13-14 OUC-connection via a device IP address
Reference
You can find additional information on system states in the S7-1500R/H (https://support.industry.siemens.com/cs/ww/en/view/109754833) system manual.
See also
PROFINET FUNCTION MANUAL (https://support.industry.siemens.com/cs/ww/en/view/49948856)
Communication Function Manual, 11/2019, A5E03735815-AH
341
Industrial Ethernet Security with CP 1543-1
14
All-round protection - the task of Industrial Ethernet Security With Industrial Ethernet Security, individual devices, automation cells or network segments of an Ethernet network can be protected. Data transfer can also be protected by a combination of different security measures: Data espionage Data manipulation Unauthorized access
Security measures Firewall IP firewall with stateful packet inspection (layer 3 and 4) Firewall also for Ethernet "non-IP" frames according to IEEE 802.3 (layer 2) Bandwidth limitation Global firewall rules All network nodes located in the internal network segment of a CP 1543-1 are protected by its firewall. Exception: If you access the CPU via the interface of the CP with the "Access to PLC via communication module" function, the firewall does not protect this connection. Logging To allow monitoring, events can be stored in log files that can be read out using the configuration tool or can be sent automatically to a Syslog server. HTTPS For encrypted transfer of websites, for example during process control. FTPS (explicit mode) For encrypted transfer of files. Secure NTP For secure time-of-day synchronization and transmission. SNMPv3 For secure transmission of network analysis information safe from eavesdropping.
342
Communication Function Manual, 11/2019, A5E03735815-AH
Industrial Ethernet Security with CP 1543-1 14.1 Firewall
VPN groups You can combine the CP 1543-1 with other security modules into VPN groups through configuration. IPsec tunnels are established between all the security modules of a VPN group (VPN). All internal nodes of these security modules can communicate securely with each other through this tunnel.
Protection for devices and network segments The firewall and VPN groups protective functions can be applied to the operation of single devices, multiple devices, or entire network segments.
Additional information An overview with links to the most important contributions on Industrial Security is available in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/92651441).
14.1
Firewall
Tasks of the firewall
The purpose of the firewall functionality is to protect networks and stations from outside influences and disturbances. This means that only certain previously specified communications relations are permitted.
To filter the data traffic, IPv4 addresses, IPv4 subnets, port numbers or MAC addresses among other things can be used.
The firewall functionality can be configured for the following protocol levels:
IP firewall with stateful packet inspection (layer 3 and 4)
Firewall also for Ethernet "non-IP" frames according to IEEE 802.3 (layer 2)
Firewall rules
Firewall rules describe which packets are permitted or forbidden in which direction.
Communication Function Manual, 11/2019, A5E03735815-AH
343
Industrial Ethernet Security with CP 1543-1 14.2 Logging
14.2
Logging
Functionality
For test and monitoring purposes, the security module has diagnostics and logging functions.
Diagnostics functions
These include various system and status functions that you can use in online mode.
Logging functions
This involves the recording of system and security events. Depending on the event type, the recording is made in volatile or non-volatile local buffer areas of the CP 1543-1. As an alternative, it is also possible to record on a network server.
The parameter assignment and evaluation of these functions is only possible with a network connection.
Recording events with logging functions
You specify which events should be recorded with the log settings. Here you can configure the following recording variants:
Local logging
With this variant, you record the events in local buffers of the CP 1543-1. In the online dialog of the Security Configuration Tool, you can then access these recordings, visualize them and archive them on the service station.
Network Syslog
With the network Syslog, you use a Syslog server in the network. This records the events according to the configuration in the log settings.
344
Communication Function Manual, 11/2019, A5E03735815-AH
Industrial Ethernet Security with CP 1543-1 14.3 NTP client
14.3
NTP client
Functionality
To check the time validity of a certificate and the time stamp of log entries, the date and time are maintained on the CP 1543-1 as on the CPU. This time can be synchronized with NTP. The CP 1543-1 forwards the synchronized time to the CPU via the backplane bus of the automation system. This way the CPU also receives a synchronized time for the time events in program execution.
The automatic setting and periodic synchronization of the time takes place either via a secure or non-secure NTP server. You can assign a maximum of 4 NTP servers to the CP 1543-1. A mixed configuration of non-secure and secure NTP servers is not possible.
14.4
SNMP
Functionality
Like the CPU, the CP 1543-1 supports the transfer of management information using the Simple Network Management Protocol (SNMP). To achieve this, an "SNMP agent" is installed on the CP/CPU that receives and responds to the SNMP queries. Information about the properties of devices capable of SNMP is contained in so-called MIB files (Management Information Base) for which the user needs to have the appropriate rights.
With SNMPv1, the "community string" is also sent. The "community string" is like a password that is sent along with the SNMP query. The requested information is sent when the "community string" is correct. The request is discarded when the string is incorrect.
With SNMPv3, data can be transferred encrypted. To do this, select either an authentication method or an authentication and encryption method.
Possible selection:
Authentication algorithm: none, MD5, SHA-1
Encryption algorithm: none, AES-128, DES
You can deactivate the use of SNMP for the CP/CPU. Deactivate SNMP if the security guidelines in your network do not permit SNMP or if you use your own SNMP solution.
To find out how to deactivate SNMP for the CPU, refer to section Disabling SNMP (Page 57).
Communication Function Manual, 11/2019, A5E03735815-AH
345
Industrial Ethernet Security with CP 1543-1 14.5 VPN
14.5
VPN
Functionality
For security modules that protect the internal network, VPN (Virtual Private Network) tunnels provide a secure data connection through the non-secure external network.
The module uses the IPsec protocol (tunnel mode of IPsec) for tunneling.
In STEP 7 you can assign VPN groups to security modules. VPN tunnels are automatically established between all modules of a VPN group. A module in one project can belong to several different VPN groups at the same time in the process.
346
Communication Function Manual, 11/2019, A5E03735815-AH
Glossary
Automation system
Programmable logic controller for the open-loop and closed-loop control of process chains of the process engineering industry and manufacturing technology. The automation system consists of different components and integrated system functions according to the automation task.
Backup CPU
If the R/H system is in RUN-Redundant system state, the primary CPU controls the process. The backup CPU processes the user program synchronously and can take over process control if the primary CPU fails.
Bus
Transmission medium that connects several devices together. Data transmission can be performed electrically or via optical fibers, either in series or in parallel.
Client
Device in a network that requests a service from another device in the network (server).
CM Communications module
Communications module
Module for communications tasks used in an automation system as an interface expansion of the CPU (for example PROFIBUS) and providing additional communications options (PtP).
Communications processor
Module for expanded communications tasks covering special applications, for example in the area of security.
Consistent data Data that belongs together in terms of content and must not be separated when transferred.
Communication Function Manual, 11/2019, A5E03735815-AH
347
Glossary
CP Communications processor
CPU
Central Processing Unit - Central module of the S7 automation system with a control and arithmetic unit, memory, operating system and interface for programming device.
Device
Generic term for: Automation systems (PLC, PC, for example) Distributed I/O systems Field devices (for example, PLC, PC, hydraulic devices, pneumatic devices) and Active network components (for example, switches, routers) Gateways to PROFIBUS, AS interface or other fieldbus systems
Device certificates Such certificates are signed by a certificate authority (CA).
The signature of an end-entity certificate is checked with the public key of the certificate authority certificate.
The "Subject" attribute must not be identical to the "Issuer" attribute.
The "Subject", for example, contains the name of a program as with the OPC UA application certificate.
"Issuer" is the certificate authority that signed the certificate.
The "CA" field must be set to "False".
DP master
Within PROFIBUS DP, a master in the distributed I/O that behaves according to the EN 50170 standard, Part 3.
See also DP slave
DP slave
Slave in the distributed I/O that is operated on PROFIBUS with the PROFIBUS DP protocol and behaves according to the EN 50170 standard, Part 3.
See also DP master
348
Communication Function Manual, 11/2019, A5E03735815-AH
Glossary
Duplex
Data transmission system; a distinction is made between full and half duplex.
Half duplex: One channel is available for alternate data exchange (sending or receiving alternately but not at the same time).
Full duplex: Two channels are available for simultaneous data exchange in both directions (simultaneous sending and receiving in both directions).
End-entity certificate See also device certificate
Ethernet
International standard technology for local area networks (LAN) based on frames. It defines types of cables and signaling for the physical layer and packet formats and protocols for media access control.
Ethernet network adapter
Electronic circuitry for connecting a computer to an Ethernet network. It allows the exchange of data / communication within the network.
FETCH/WRITE
Server services using TCP/IP, ISO-on-TCP and ISO for access to system memory areas of S7 CPUs. Access (client function) is possible from a SIMATIC S5 or a third-party device/PC. FETCH: Read data directly; WRITE: Write data directly.
Field device
Device
Freeport
Freely programmable ASCII protocol; here for data transfer via a point-to-point connection.
FTP
File Transfer Protocol; a network protocol for transferring files via IP networks. FTP is used to download files from the server to the client or to upload files from the client to the server. FTP directories can also be created and read out and directories and files can be renamed or deleted.
HMI
Human Machine Interface, device for visualization and control of automation processes.
Communication Function Manual, 11/2019, A5E03735815-AH
349
Glossary
IE Industrial Ethernet
IM Interface module
Industrial Ethernet
Guideline for setting up an Ethernet network in an industrial environment. The essential difference compared with standard Ethernet is the mechanical ruggedness and immunity to noise of the individual components.
Instruction
The smallest self-contained unit of a user program characterized by its structure, function or purpose as a separate part of the user program. An instruction represents an operation procedure for the processor.
Interface module
Module in the distributed I/O system. The interface module connects the distributed I/O system via a fieldbus to the CPU (IO controller/DP master) and prepares the data for the I/O modules.
Intermediate CA certificate
This is a certificate authority certificate that is signed with the private key of a root certificate authority.
An intermediate certificate authority signs end-entity certificates with its private key.
The signature of these end-entity certificates is verified with the public key of the intermediate certificate authority.
The "Subject" and "Issuer" attributes of the intermediate CA certificate must not be identical. This certificate authority has after all not signed its certificate itself.
The "CA" field must be set to "True".
IO controller, PROFINET IO controller
Central device in a PROFINET system, usually a classic programmable logic controller or PC. The IO controller sets up connections to the IO devices, exchanges data with them, thus controls and monitors the system.
350
Communication Function Manual, 11/2019, A5E03735815-AH
Glossary
IO device, PROFINET IO device
Device in the distributed I/O of a PROFINET system that is monitored and controlled by an IO controller (for example distributed inputs/outputs, valve islands, frequency converters, switches).
IP address
Binary number that is used as a unique address in computer networks in conjunction with the Internet Protocol (IP). It makes these devices uniquely addressable and individually accessible. An IPv4 address can be evaluated using a binary subnet mask that results in a network part or a host part as a structure. The textual representation of an IPv4 address consists, for example, of 4 decimal numbers with the value range 0 to 255. The decimal numbers are separated by periods.
IPv4 subnet mask
Binary mask, with which an IPv4 address (as a binary number) is divided into a "network part" and a "host part".
ISO protocol
Communications protocol for message or packet-oriented transfer of data in an Ethernet network. This protocol is hardware-oriented, very fast and allows dynamic data lengths. The ISO protocol is suitable for medium to large volumes of data.
ISO-on-TCP protocol
Communications protocol capable of S7 routing for packet-oriented transfer of data in an Ethernet network; provides network addressing. The ISO-on-TCP protocol is suitable for medium and large volumes of data and allows dynamic data lengths.
Linear bus topology Network topology characterized by the arrangement of the devices in a line (bus).
MAC address
Worldwide unique device identification for all Ethernet devices. The MAC address is assigned by the manufacturer and has a 3-byte vendor ID and 3-byte device ID as a consecutive number.
Master
Higher-level, active participant in the communication/on a PROFIBUS subnet. The master has rights to access the bus (token) and can request and send data.
See also DP master
Communication Function Manual, 11/2019, A5E03735815-AH
351
Glossary
Modbus RTU
Remote Terminal Unit; Open communications protocol for serial interfaces based on a master/slave architecture.
Modbus TCP
Transmission Control Protocol; Open communications protocol for Ethernet based on a master/slave architecture. The data are transmitted as TCP/IP packets.
Network
A network consists of one or more interconnected subnets with any number of devices. Several networks can exist alongside each other.
NTP
The Network Time Protocol (NTP) is a standard for synchronizing clocks in automation systems via Industrial Ethernet. NTP uses the connectionless UDP transport protocol for the Internet.
OPC UA
OPC Unified Automation is a protocol for communication between machines, developed by the OPC Foundation.
Operating states
Operating states describe the behavior of a single CPU at a specific time.
The CPUs of the SIMATIC standard systems have the STOP, STARTUP and RUN operating states.
The primary CPU of the redundant system S7-1500R/H has the operating states STOP, STARTUP, RUN, RUN-Syncup and RUN-Redundant. The backup CPU has the operating states STOP, SYNCUP and RUN-Redundant.
Operating system
Software that allows the use and operation of a computer. The operating system manages resources such as memory, input and output devices and controls the execution of programs.
PG Programming device
PNO
PROFIBUS user organization
352
Communication Function Manual, 11/2019, A5E03735815-AH
Glossary
Point-to-point connection
Bidirectional data exchange via communications modules with a serial interface between two communications partners (and two only).
Port
Physical connector to connect devices to PROFINET. PROFINET interfaces have one or more ports.
Primary CPU
If the R/H system is in RUN-Redundant system state, the primary CPU controls the process. The backup CPU processes the user program synchronously and can take over process control if the primary CPU fails.
Process image (I/O)
The CPU transfers the values from the input and output modules to this memory area. At the start of the cyclic program, the CPU transfers the process image output as a signal state to the output modules. The CPU then reads the signal states of the input modules into the process image input. The CPU then executes the user program.
PROFIBUS
Process Field Bus - European Fieldbus standard.
PROFIBUS address
Unique identifier of a device connected to PROFIBUS. The PROFIBUS address is sent in the frame to address a device.
PROFIBUS device
Device with at least one PROFIBUS interface either electrical (for example RS-485) or optical (for example Polymer Optical Fiber).
PROFIBUS user organization
Technical committee dedicated to the definition and development of the PROFIBUS and PROFINET standard.
PROFIBUS DP
A PROFIBUS with DP protocol that complies with EN 50170. DP stands for distributed I/O = fast, real-time capable, cyclic data exchange. From the perspective of the user program, the distributed I/O is addressed in exactly the same way as the centralized IO.
Communication Function Manual, 11/2019, A5E03735815-AH
353
Glossary
PROFINET
Open component-based industrial communications system based on Ethernet for distributed automation systems. Communications technology promoted by the PROFIBUS user organization.
PROFINET device Device that always has a PROFINET interface (electrical, optical, wireless).
PROFINET interface
Interface of a module capable of communication (for example CPU, CP) with one or more ports. A MAC address is assigned to the interface in the factory. Along with the IP address and the device name (from the individual configuration), this interface address ensures that the PROFINET device is identified uniquely in the network. The interface can be electrical, optical or wireless.
PROFINET IO
IO stands for input/output; distributed I/O (fast, cyclic data exchange with real-time capability). From the perspective of the user program, the distributed I/O is addressed in exactly the same way as the centralized IO.
PROFINET IO as the Ethernet-based automation standard of PROFIBUS & PROFINET International defines a cross-vendor communication, automation, and engineering model.
With PROFINET IO, a switching technology is used that allows all devices to access the network at any time. In this way, the network can be used much more efficiently through the simultaneous data transfer of several devices. Simultaneous sending and receiving is enabled via the full-duplex operation of Switched Ethernet.
PROFINET IO is based on switched Ethernet with full-duplex operation and a bandwidth of 100 Mbps.
Programming device
Programming devices are essentially compact and portable PCs which are suitable for industrial applications. They are identified by a special hardware and software configuration for programmable logic controllers.
Protocol
Agreement on the rules by which the communication between two or more communication partners transpires.
PtP
Point-to-Point, interface and/or transmission protocol for bidirectional data exchange between two (and only two) communications partners.
354
Communication Function Manual, 11/2019, A5E03735815-AH
Glossary
Redundant systems
Redundant systems have multiple (redundant) instances of key automation components. Process control is maintained if a redundant component fails.
Ring topology
All devices of a network are connected together in a ring.
Root CA certificates See also root certificate
Root certificate
This is the certificate of a certificate authority: It signs end-entity certificates and intermediate CA certificates with its private key.
The "Subject" attribute and the "Issuer" of this certificate must be identical. This certificate authority has signed its certificate itself.
The "CA" field must be set to "True".
TIA Portal V14 has such a root CA certificate:
If you configure the OPC UA server of an S7-1500 in the TIA Portal, the TIA Portal generates an end-entity certificate for the OPC UA server and signs that certificate with its own private key.
The signature of this end-entity certificate can be verified with the public key of the TIA Portal. This key can be found in the root CA certificate of the TIA Portal.
Router
Network node with a unique identifier (name and address) that connects subnets together and allows transportation of data to uniquely identified communications nodes in the network.
RS232, RS422 and RS485 Standard for serial interfaces.
RTU
Modbus RTU (RTU: Remote Terminal Unit, transfers the data in binary form; allows a good data throughput. The data must be converted to a readable format before it can be evaluated.
S7 routing
Communication between S7 automation systems, S7 applications or PC stations in different S7 subnets via one or more network nodes functioning as S7 routers.
Communication Function Manual, 11/2019, A5E03735815-AH
355
Glossary
SDA service
Send Data with Acknowledge. SDA is an elementary service with which an initiator (for example DP master) can send a message to other devices and then receives acknowledgment of receipt immediately afterwards.
SDN service
Send Data with No Acknowledge. This service is used primarily to send data to multiple stations and the service therefore remains unacknowledged. Suitable for synchronization tasks and status messages.
Security
Generic term for all the measures taken to protect against Loss of confidentiality due to unauthorized access to data Loss of integrity due to manipulation of data Loss of availability due to the destruction of data
Self-signed certificates
These are certificates that you sign with your private key and use as end-entity certificates.
The signature of these end-entity certificates is verified with your public key.
The "Subject" and "Issuer" attributes of self-signed certificates must be identical: You have signed your certificate yourself.
The "CA" field must be set to "False".
You can, for example, use self-signed certificates as application certificates for an OPC UA client.
The procedure required to generate a self-signed certificate with the certificate generator of the OPC Foundation is described here (Page ).
Server
A device or more generally an object that can provide certain services; the service is performed at the request of a client.
Slave
Distributed device in a fieldbus system that can only exchange data with a master after the master has requested this.
See also DP slave
356
Communication Function Manual, 11/2019, A5E03735815-AH
Glossary
SNMP
Simple Network Management Protocol, uses the wireless UDP transport protocol. SNMP works in much the same way as the client/server model. The SNMP manager monitors the network nodes. The SNMP agents collect the various network-specific information in the individual network nodes and makes this information available in a structured form in the MIB (Management Information Base). This information allows a network management system to run detailed network diagnostics.
Subnet
Part of a network whose parameters must be matched up on the devices (for example in PROFINET). A subnet includes the bus components and all connected stations. Subnets can be linked together, for example using gateways or routers to form one network.
Switch
Network components used to connect several terminal devices or network segments in a local network (LAN).
Switched communication
In addition to the device IP addresses of the CPUs, the redundant system S7-1500R/H supports system IP addresses:
System IP address for the X1 PROFINET interfaces of the two CPUs (system IP address X1)
System IP address for the X2 PROFINET interfaces of the two CPUs (system IP address X2)
You use the system IP addresses for communication with other devices (for example, HMI devices, CPUs, PG/PC). The devices always communicate over the system IP address with the primary CPU of the redundant system. This ensures that the communication partner can communicate with the new primary CPU (previously backup CPU) in the RUN-Solo system state after failure of the original primary CPU in redundant operation.
System states
The system states of the redundant system S7-1500R/H result from the operating states of the primary and backup CPUs. The term system state is used as a simplified expression that refers to the operating states that occur simultaneously on both CPUs. The redundant system S7-1500R/H has the system states STOP, STARTUP, RUN-Solo, SYNCUP and RUN-Redundant.
TCP/IP
Transmission Control Protocol / Internet Protocol, connection-oriented network protocol, generally recognized standard for data exchange in heterogeneous networks.
Communication Function Manual, 11/2019, A5E03735815-AH
357
Glossary
Time-of-day synchronization
Capability of transferring a standard system time from a single source to all devices in the system so that their clocks can be set according to the standard time.
Tree topology
Network topology characterized by a branched structure: Two or more bus nodes are connected to each bus node.
Twisted-pair
Fast Ethernet via twisted-pair cables is based on the IEEE 802.3u standard (100 Base-TX). The transmission medium is a shielded 2x2 twisted-pair cable with an impedance of 100 Ohms (22 AWG). The transmission characteristics of this cable must meet the requirements of category 5.
The maximum length of the connection between the terminal and the network component must not exceed 100 m. The connectors are designed according to the 100Base-TX standard with the RJ-45 connector system.
UDP
User Datagram Protocol; communications protocol for fast and uncomplicated data transfer, without acknowledgment. There are no error checking mechanisms as found in TCP/IP.
User program
In SIMATIC, a distinction is made between the CPU operating system and user programs. The user program contains all instructions, declarations and data by which a system or process can be controlled. The user program is assigned to a programmable module (for example, CPU, FM) and can be structured in smaller units.
USS
Universal Serial Interface protocol (Universelles Serielles Schnittstellen-Protokoll); defines an access method according to the master-slave principle for communication via a serial bus.
Web server
Software/communications service for data exchange via the Internet. The web server transfers the documents using standardized transmission protocols (HTTP, HTTPS) to a Web browser. Documents can be static or put together dynamically from different sources by the web server on request from the Web browser.
358
Communication Function Manual, 11/2019, A5E03735815-AH
Index
A
Advanced Encryption Algorithm, 37 AES, 37 Applicant, 40 Asymmetric encryption, 38
B
BRCV, 113 BSEND, 113
C
Certificate authorities, 40 Certificate subject, 40 CM, 14 Communication
Data record routing, 301 HMI communication, 63 Open communication, 65 Open User Communication, 65 PG communication, 60 Point-to-point connection, 121 S7 communication, 112 S7 routing, 289 Communication options Overview, 19 Communication via PUT/GET instruction Creating and configuring a connection, 114 Communications Communication protocols, 66 Establishment and termination, 91 Communications module, 14 Communications processor, 14 Communications services Connection resources, 27 Connection Diagnostics, 320 Instructions for Open User Communication, 68 Connection diagnostics, 320 Connection resources Data record routing, 313 HMI communication, 312 Module-specific, 317 occupying, 314
Communication Function Manual, 11/2019, A5E03735815-AH
Overview, 27, 307 S7 routing, 313 Station specific, 316 Consistency of data, 31 CP, 14
D
Data consistency, 31 Data record routing, 301 Digital certificates, 40
E
E-mail, 19, 67, 87 End-entity certificate, 43 Establishment and termination of communications, 91 Export file for OPC UA, 174
F
FDL, 67 Fetch, 19 Firewall, 343 Freeport protocol, 121 FTP, 19, 67, 87, 88
G
GET, 113
H
Handshake Protocol, 39 HMI communication, 19, 63
I
IM, 18 Industrial Ethernet Security, 342 Interface module, 18 Interfaces for communication, 15 Interfaces of communications modules
Point-to-point connection, 17 Interfaces of communications processors, 16
359
Index
IP address, emergency address (temporary), 323 IP forwarding, 294 ISO, 19, 66 ISO-on-TCP, 66, 75
L
Logging, 344
M
Man-in-the-middle attack, 40 Modbus protocol (RTU), 121 Modbus TCP, 67
N
NTP, 19, 345
O
Occupation of connection resources, 314 OPC UA
Certificate generator, 152 DB tags, 165 End points, 161 Identifier, 136 Introduction, 131 Layer model, 157 Namespace, 135 NodeId, 135 OpenSSL, 153 PLC tags, 165 Secure channel, 156 Secure connection, 156 Security mechanisms, 146 Security settings, 161 Signing and encryption, 149 X.509 certificates, 151 OPC UA client Authentication, 275 Basics, 139 Certificate, 272 OPC UA server Address space, 137 Addressing, 177 Application name, 176 Authentication, 193 Basics, 159 Commissioning, 175
360
Customizing the server certificate, 190 Generating a server certificate, 184 Performance, 173 Performance increase, 173 Publishing interval, 182 Runtime licenses, 197, 198 Sampling interval, 183 Security settings, 188 Subscription, 180 TCP port, 179, 181 Write and read rights, 165 XML export file, 174 Open communication Connection configuration, 75 Setting up e-mail, 87 Setting up FTP, 88 Setting up TCP, ISO-on-TCP, UDP, 75 Open User Communication Features, 65 Instructions, 68 Protocols, 66 OpenSSL, 153
P
PCT, 302 PG communication, 19, 60 Point-to-point connection, 19, 121 Private Key, 35 Procedure 3964(R), 121 Protocols for Open User Communication, 66 Public Key, 35 PUT, 113
R
Record Protocol, 39 RFC 5280, 35 Root certificate, 43
S
S7 communication, 19, 112, 313 S7 routing, 289
Connection resources, 313 Secure communication, 35 Secure Socket Layer, 39 Security, 342 Security measures, 342
Firewall, 343 Logging, 344
Communication
Function Manual, 11/2019, A5E03735815-AH
NTP, 345 SNMP, 345 Self-signed certificates, 40 Server certificate, 190 Setting up a connection, 27 By configuring, 80 ISO connection with CP 1543-1, 81 Signature, 41 SNMP, 19, 345 SSL, 39 Symmetric encryption, 37 Syslog, 344 System data type, 69
T
TCON, 68 TCP, 19, 66, 75 TDISCON, 68 Time-of-day synchronization, 19 TLS, 39 Transport Layer Security, 39 TRCV, 68 TRCV_C, 68 TSEND, 68 TSEND_C, 68
U
UDP, 19, 66, 75 URCV, 113 USEND, 113 USS protocol, 121
W
Web server, 19 Write, 19
X
X.509, 35
Communication Function Manual, 11/2019, A5E03735815-AH
Index 361
PROFINET with STEP 7 V16
SIMATIC PROFINET PROFINET with STEP 7 V16
Function Manual
Preface
Function manuals Documentation Guide
1
Description
2
Parameter assignment/addressing
3
Diagnostics and maintenance
4
Functions
5
PROFINET with the
redundant S7-1500R/H
6
system
11/2019
A5E03444486-AK
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.
DANGER indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION indicates that minor personal injury can result if proper precautions are not taken.
NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY
A5E03444486-AK 10/2019 Subject to change
Copyright © Siemens AG 2013 - 2019. All rights reserved
Preface
Purpose of the documentation
This function manual provides an overview of the PROFINET communication system with SIMATIC STEP 7 V16.
STEP 7 V16 is integrated into the high-performance graphical Totally Integrated Automation Portal (TIA Portal), the integration platform for all automation software tools.
This function manual supports you in planning a PROFINET system. The manual is structured into the following subject areas:
PROFINET basics
PROFINET diagnostics
PROFINET functions
Basic knowledge required The following knowledge is required in order to understand the manual: General knowledge of automation technology Knowledge of the industrial automation system SIMATIC Knowledge about the use of Windows-based computers Knowledge about how to use STEP 7 (TIA Portal)
Scope
This documentation is the basic documentation for all SIMATIC products from the PROFINET environment. The product documentation is based on this documentation.
The examples are based on the functionality of the S7-1500 automation system.
What's new in the PROFINET Function Manual, Edition 11/2019 compared to Edition 10/2018
Function Direct data exchange
Switched S1 device
What are the customer benefits?
In the case of direct data exchange, an S7-1500 CPU provides cyclic user data from the I/O area to one or more partners. The "Direct data exchange" function enables deterministic, isochronous IO communication between multiple S7-1500 CPUs.
The "Switched S1 device" function of the CPU enables operation of standard IO devices in the S7-1500R/H redundant system.
Where can I find this information? Section Direct data exchange (Page 214)
Section Switched S1 device (Page 277)
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
3
Preface
What's new in the PROFINET Function Manual, Edition 10/2018 compared to Edition 12/2017
This manual (version 10/2018) includes the following new functions compared to the previous version (version 12/2017):
Function
PROFINET IO with the redundant S7-1500R/H system
Applications
In a PROFINET IO system with the redundant S7-1500R/H system, the IO communication continues even when one CPU fails.
Your benefits
The redundant S7-1500R/H system offers a high degree of reliability and system availability. A redundant configuration of the most important automation components reduces the probability of production downtimes and the consequences of component failures.
What's new in the PROFINET function manual, version 12/2017 compared to version 09/2016
This manual (version 12/2017) encompasses the following new functions compared to the previous version (version 09/2016):
Function
Applications
Your benefits
Specifying the router for a PROFINET IO device
You can specify the IP address of a router for each IO device. You reach the IO device from outside the IP subnet through the router.
In the past, it was only possible to specify a router for a PROFINET IO interface at the IO controller. The IO devices inherited the setting of the IO controller interface.
Now you can set the router address independently of the IO controller setting. This allows, for example, a router address at the IO device although you have not set a router address or have set a different address at the IO controller.
Configuring an IO device through hardware detection
You can detect an existing IO device and enter it in your project.
STEP 7 inserts the IO device with all the modules and submodules into the project. Article numbers and firmware versions between real and configured IO devices match.
You reduce the project planning work required.
Asset management
You can centrally manage non-PROFINET components (assets) of a PROFINET device. The PROFINET device makes the identification data of the assets available for evaluation via a standardized data record.
The new standardized PROFINET service makes it possible to manage all the hardware and firmware components of PROFINET devices centrally. The possibilities available for filtering device data, for example, depend on the range of performance of the evaluating application.
Asset manage-
Special application of asset management:
ment data record for I- From the point of view of a higher-level IO
devices
controller, the modules plugged into the I-
device represent assets. The user program in
the I-device compiles the asset management
data record. The IO controller can read identi-
fication data of the I-device modules through
this data record.
See Asset management.
PROFINET with STEP 7 V16
4
Function Manual, 11/2019, A5E03444486-AK
Preface
What's new in the PROFINET function manual, Version 09/2016 compared to Version 12/2014
This manual (version 09/2016) encompasses the following new functions compared to the previous version (version 12/2014):
Function PROFINET IO on the 2nd PROFINET interface
IRT with very short data cycle times down to 125 µs MRPD: Media Redundancy with Planned Duplication of frames
PROFINET performance upgrade
Limitation of the data infeed into the network
Applications You can operate another PROFINET IO system on the CPU or connect additional IO devices.
You realize high-end applications with IO communication which place very high performance demands on the IO processing. PROFINET IO IRT enables you to realize applications that place particularly high demands on the reliability and accuracy (isochronous mode).
You can implement applications with high speed and send clock requirements. This is of interest to applications with high demands on performance. You limit the network load for standard Ethernet communication to a maximum value.
Your benefits
You use a fieldbus type in the plant. The CPU can perform fast and deterministic data exchange as an I-device with a higher-level controller (PROFINET/Ethernet) through the second line.
You make PROFINET IO communication and standard communication possible via one cable even with a send clock of 125 µs.
By sending the cyclic IO data in both directions in the ring, the communication to the IO devices is maintained even when the ring is interrupted and does not result in device failure even with fast update times. You achieve higher reliability than with MRP.
Better utilization of the bandwidth results in short reaction times.
You flatten peaks in the data feed. You share the remaining bandwidth based on demand.
Conventions
STEP 7: We refer to "STEP 7" in this documentation as a synonym for the configuration and programming software "STEP 7 as of V12 (TIA Portal)" and subsequent versions. This documentation contains pictures of the devices described. The figures may differ slightly from the device supplied. You should also pay particular attention to notes such as the one shown below:
Note A note contains important information on the product, on handling of the product and on the section of the documentation to which you should pay particular attention.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
5
Preface
Security information Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement and continuously maintain a holistic, state-of-the-art industrial security concept. Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit (https://www.siemens.com/industrialsecurity).
Siemens' products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers' exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed visit (https://www.siemens.com/industrialsecurity).
Siemens Industry Online Support You can find current information on the following topics quickly and easily here:
Product support
All the information and extensive know-how on your product, technical specifications, FAQs, certificates, downloads, and manuals.
Application examples
Tools and examples to solve your automation tasks as well as function blocks, performance information and videos.
Services
Information about Industry Services, Field Services, Technical Support, spare parts and training offers.
Forums
For answers and solutions concerning automation technology.
mySupport
Your personal working area in Industry Online Support for messages, support queries, and configurable documents.
This information is provided by the Siemens Industry Online Support in the Internet (https://support.industry.siemens.com).
PROFINET with STEP 7 V16
6
Function Manual, 11/2019, A5E03444486-AK
Preface
Industry Mall
The Industry Mall is the catalog and order system of Siemens AG for automation and drive solutions on the basis of Totally Integrated Automation (TIA) and Totally Integrated Power (TIP).
You can find catalogs for all automation and drive products on the Internet (https://mall.industry.siemens.com).
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
7
Table of contents
Preface ...................................................................................................................................................... 3
1 Function manuals Documentation Guide ................................................................................................. 12
2 Description............................................................................................................................................... 14
2.1 2.1.1 2.1.2 2.1.3 2.1.4
Introduction to PROFINET ..................................................................................................... 14 PROFINET terms ................................................................................................................... 16 Basic terminology of communication ..................................................................................... 20 PROFINET interface .............................................................................................................. 23 Implementation of the PROFINET device model in SIMATIC ............................................... 26
2.2 2.2.1 2.2.2 2.2.3 2.2.3.1 2.2.3.2 2.2.4 2.2.4.1 2.2.4.2 2.2.4.3
Setting up PROFINET............................................................................................................ 28 Active Network Components.................................................................................................. 28 Cabling technology ................................................................................................................ 30 Wireless design...................................................................................................................... 33 Basics..................................................................................................................................... 33 Tips on assembly ................................................................................................................... 35 Network security..................................................................................................................... 36 Basics..................................................................................................................................... 36 Network components and software........................................................................................ 38 Application example ............................................................................................................... 39
3 Parameter assignment/addressing .......................................................................................................... 41
3.1
Assigning an IO device to an IO controller ............................................................................ 42
3.2 3.2.1 3.2.2 3.2.3 3.2.4 3.2.5
Device name and IP address................................................................................................. 44 Device name .......................................................................................................................... 45 IP address .............................................................................................................................. 46 Assigning a device name and IP address.............................................................................. 49 Assign device name via communication table ....................................................................... 54 Permitting changes to the device name and IP address directly on the device .................... 57
3.3
Configuring an IO device through hardware detection .......................................................... 59
3.4
Specifying the router for a PROFINET IO device .................................................................. 60
3.5 3.5.1 3.5.2 3.5.3 3.5.4 3.5.5 3.5.6 3.5.7
Configuring topology .............................................................................................................. 64 Topology view in STEP 7 ....................................................................................................... 66 Interconnecting ports in the topology view............................................................................. 69 Interconnecting ports - Inspector window .............................................................................. 70 Automatic assignment of devices by offline/online comparison ............................................ 71 Apply the port interconnections identified online manually to the project .............................. 72 Include the devices identified online manually in the project ................................................. 73 Automatic assignment of devices by advanced offline/online comparison............................ 73
4 Diagnostics and maintenance .................................................................................................................. 74
4.1 4.1.1
Diagnostics mechanisms of PROFINET IO ........................................................................... 74 Diagnostics levels in PROFINET IO ...................................................................................... 75
4.2
Diagnostics via LEDs ............................................................................................................. 78
PROFINET with STEP 7 V16
8
Function Manual, 11/2019, A5E03444486-AK
Table of contents
4.3
Diagnostics via the display of the S7-1500 CPUs ..................................................................79
4.4
Diagnostics via Web server ....................................................................................................83
4.5
Online diagnostics with STEP 7..............................................................................................86
4.6
Extended maintenance concept .............................................................................................89
4.7
Diagnostics of the network topology .......................................................................................91
4.8 4.8.1 4.8.2
Diagnostics in the user program .............................................................................................92 Diagnostics and configuration data records ...........................................................................92 Evaluate diagnostics in the user program ..............................................................................94
4.9 4.9.1 4.9.2 4.9.3 4.9.3.1 4.9.3.2 4.9.3.3
Maintenance ...........................................................................................................................97 I&M data (identification and maintenance) .............................................................................97 Loading I&M data to PROFINET IO devices and your modules ............................................97 Asset management .................................................................................................................98 Further information about asset management at PROFINET ................................................98 Content and structure of an asset management record .......................................................100 Asset management data record for I-devices.......................................................................107
5 Functions ............................................................................................................................................... 113
5.1 5.1.1 5.1.2
Connecting other bus systems .............................................................................................113 Linking PROFINET and PROFIBUS.....................................................................................115 Connect the DP slave via the IE/PB Link to a PROFINET IO system..................................116
5.2 5.2.1 5.2.2 5.2.3 5.2.4 5.2.5 5.2.6 5.2.7 5.2.8 5.2.9 5.2.10
Intelligent IO devices (I-devices)...........................................................................................118 I-device functionality .............................................................................................................118 Properties and Advantages of the I-Device ..........................................................................119 Characteristics of an I-Device...............................................................................................120 Data Exchange between higher- and lower-level IO system................................................124 Configuring the I-device........................................................................................................126 Program examples................................................................................................................128 Diagnostics and interrupt characteristics ..............................................................................131 Rules for the Topology of a PROFINET IO System with I-Device........................................134 Boundary conditions when using I-devices ..........................................................................136 Configuring PROFIenergy with I-devices .............................................................................137
5.3 5.3.1 5.3.2 5.3.3 5.3.4
Shared device .......................................................................................................................139 Useful information on shared devices...................................................................................139 Configuring shared device ....................................................................................................142 Configuring an I-device as a shared device .........................................................................146 Module-internal shared input/shared output (MSI/MSO) ......................................................155
5.4 5.4.1 5.4.2 5.4.3 5.4.4
Media redundancy (ring topologies) .....................................................................................162 Media Redundancy Protocol (MRP) .....................................................................................163 Configuring media redundancy.............................................................................................166 Media redundancy with planned duplication of frames (MRPD; not for S7-1500R/H) .........169 Multiple rings.........................................................................................................................171
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
9
Table of contents
5.5 5.5.1 5.5.2 5.5.3 5.5.4 5.5.5 5.5.6 5.5.7 5.5.8
5.6 5.6.1 5.6.2 5.6.3 5.6.4 5.6.5
5.7 5.7.1 5.7.2 5.7.3 5.7.4 5.7.4.1 5.7.4.2 5.7.4.3 5.7.5 5.7.5.1 5.7.5.2 5.7.5.3
5.8 5.8.1 5.8.2 5.8.3
5.9 5.9.1 5.9.2 5.9.3
5.10 5.10.1 5.10.1.1 5.10.1.2 5.10.1.3 5.10.2 5.10.2.1 5.10.2.2 5.10.2.3 5.10.2.4 5.10.2.5 5.10.2.6
5.11
Real-time communication .................................................................................................... 175 Introduction .......................................................................................................................... 175 RT ........................................................................................................................................ 176 IRT ....................................................................................................................................... 177 Comparison of RT and IRT .................................................................................................. 180 Configuring PROFINET IO with IRT .................................................................................... 180 Setting the bandwidth usage for the send clock .................................................................. 183 Setup recommendations for optimizing PROFINET ............................................................ 185 Limitation of the data infeed into the network ...................................................................... 189
PROFINET with performance upgrade ................................................................................ 190 Dynamic frame packing ....................................................................................................... 191 Fragmentation ...................................................................................................................... 193 Fast forwarding .................................................................................................................... 194 Configuration of IRT with high performance ........................................................................ 195 Sample configuration for IRT with high performance........................................................... 199
Isochronous mode ............................................................................................................... 200 What is isochronous mode?................................................................................................. 200 Use of isochronous mode .................................................................................................... 201 Time sequence of synchronization on PROFINET IO ......................................................... 202 Configuring isochronous mode ............................................................................................ 204 Introduction .......................................................................................................................... 204 Configuring isochronous mode on PROFINET IO ............................................................... 205 Setting the application cycle and delay time ........................................................................ 208 Programming isochronous mode ......................................................................................... 209 Basics of Programming ........................................................................................................ 209 Program execution according to the IPO model .................................................................. 210 Program execution according to the OIP model .................................................................. 212
Direct data exchange ........................................................................................................... 214 Introduction .......................................................................................................................... 214 Configuring direct data exchange between two S7-1500 CPUs.......................................... 217 Configuring direct data exchange between multiple IO controllers ..................................... 220
Device replacement without exchangeable medium ........................................................... 225 Device replacement without exchangeable medium/PG function ....................................... 226 Replacing an IO device without exchangeable medium ...................................................... 227 Permit overwriting of PROFINET device name ................................................................... 228
Standard machine projects .................................................................................................. 232 Multiple use IO systems ....................................................................................................... 233 What you should know about multiple use IO systems ....................................................... 233 Configuring multiple use IO systems ................................................................................... 236 Adapt multiple use IO systems locally ................................................................................. 239 Configuration control for IO systems.................................................................................... 241 Information about configuration control of IO systems ........................................................ 241 Configuring IO devices as optional ...................................................................................... 244 Enabling optional IO devices in the program ....................................................................... 245 Configuring flexible order of IO devices ............................................................................... 251 Customizing arrangement of IO devices in the program ..................................................... 253 System behavior and rules .................................................................................................. 256
Saving energy with PROFIenergy........................................................................................ 258
PROFINET with STEP 7 V16
10
Function Manual, 11/2019, A5E03444486-AK
Table of contents
5.12 5.12.1
Docking systems...................................................................................................................260 Configuring docking systems................................................................................................262
5.13 5.13.1 5.13.2 5.13.3 5.13.4 5.13.5 5.13.6
Accelerating startup ..............................................................................................................265 Options for accelerating the startup of IO devices................................................................265 Prioritized startup ..................................................................................................................266 Configuring prioritized startup...............................................................................................268 Optimize the port settings .....................................................................................................269 Optimize the cabling of the ports ..........................................................................................270 Measures in the user program..............................................................................................271
6 PROFINET with the redundant S7-1500R/H system ............................................................................. 272
6.1
Media redundancy in the redundant S7-1500R/H system....................................................273
6.2
H-Sync Forwarding ...............................................................................................................273
6.3
System redundancy S2.........................................................................................................276
6.4
Switched S1 device...............................................................................................................277
6.5
Main differences between IO device with S2 system redundancy and standard IO
device .................................................................................................................................... 279
6.6
Installation guidelines ...........................................................................................................280
6.7
Configuring PROFINET IO on a redundant S7-1500R/H system.........................................281
6.8
Assigning IO device to the redundant S7-1500R/H system .................................................287
6.9
Configuring media redundancy (MRP) for a configuration with the redundant S7-
1500R/H system ...................................................................................................................290
Glossary ................................................................................................................................................ 292
Index...................................................................................................................................................... 307
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
11
Function manuals Documentation Guide
1
The documentation for the SIMATIC S7-1500 automation system, for CPU 1516pro-2 PN based on SIMATIC S7-1500, and for the distributed I/O systems SIMATIC ET 200MP, ET 200SP and ET 200AL is divided into three areas. This division allows you easier access to the specific information you require.
Basic information
System manuals and Getting Started manuals describe in detail the configuration, installation, wiring and commissioning of the SIMATIC S7-1500, ET 200MP, ET 200SP and ET 200AL systems; use the corresponding operating instructions for CPU 1516pro-2 PN. The STEP 7 online help supports you in configuration and programming.
Device information
Product manuals contain a compact description of the module-specific information, such as properties, terminal diagrams, characteristics and technical specifications.
PROFINET with STEP 7 V16
12
Function Manual, 11/2019, A5E03444486-AK
Function manuals Documentation Guide
General information The function manuals contain detailed descriptions on general topics such as diagnostics, communication, Motion Control, Web server, OPC UA. You can download the documentation free of charge from the Internet (https://support.industry.siemens.com/cs/ww/en/view/109742705). Changes and additions to the manuals are documented in product information sheets. You will find the product information on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/us/en/view/68052815) ET 200SP (https://support.industry.siemens.com/cs/us/en/view/73021864) ET 200AL (https://support.industry.siemens.com/cs/us/en/view/99494757)
Manual Collections The Manual Collections contain the complete documentation of the systems put together in one file. You will find the Manual Collections on the Internet: S7-1500/ET 200MP (https://support.industry.siemens.com/cs/ww/en/view/86140384) ET 200SP (https://support.industry.siemens.com/cs/ww/en/view/84133942) ET 200AL (https://support.industry.siemens.com/cs/ww/en/view/95242965)
"mySupport"
With "mySupport", your personal workspace, you make the best out of your Industry Online Support.
In "mySupport", you can save filters, favorites and tags, request CAx data and compile your personal library in the Documentation area. In addition, your data is already filled out in support requests and you can get an overview of your current requests at any time.
You must register once to use the full functionality of "mySupport".
You can find "mySupport" on the Internet (https://support.industry.siemens.com/My/ww/en).
Application examples
The application examples support you with various tools and examples for solving your automation tasks. Solutions are shown in interplay with multiple components in the system separated from the focus on individual products.
You will find the application examples on the Internet (https://support.industry.siemens.com/sc/ww/en/sc/2054).
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
13
Description
2
2.1
Introduction to PROFINET
What is PROFINET IO?
Within the framework of Totally Integrated Automation (TIA), PROFINET IO is the logical further development of:
PROFIBUS DP, the established fieldbus and
Industrial Ethernet
PROFINET IO is based on 20 years of experience with the successful PROFIBUS DP and combines the normal user operations with the simultaneous use of innovative concepts of Ethernet technology. This ensures the integration of PROFIBUS DP into the PROFINET world.
PROFINET IO as the Ethernet-based automation standard of PROFIBUS/PROFINET International defines a cross-vendor communication, automation, and engineering model.
Objectives of PROFINET The objectives of PROFINET: Industrial networking, based on Industrial Ethernet (open Ethernet standard) Compatibility of Industrial Ethernet and standard Ethernet components High robustness due to Industrial Ethernet devices. Industrial Ethernet devices are suited to the industrial environment (temperature, noise immunity, etc.). Use of IT standards such as TCP/IP, http. Real-time capability Seamless integration of other fieldbus systems
PROFINET with STEP 7 V16
14
Function Manual, 11/2019, A5E03444486-AK
Description 2.1 Introduction to PROFINET
Implementation of PROFINET in SIMATIC PROFINET is implemented in SIMATIC as follows: We have implemented communication between field devices in SIMATIC with PROFINET IO. Installation technology and network components are available as SIMATIC NET products. Ethernet standard protocol and procedures (e.g., SNMP = Simple Network Management Protocol for network parameter assignment and diagnostics) are used for remote maintenance and network diagnostics.
Figure 2-1 PROFINET overview configuration
STEP 7
The STEP 7 engineering tool supports you in setting up and configuring an automation solution. STEP 7 provides a uniform application view over all bus systems.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
15
Description 2.1 Introduction to PROFINET
Documentation from PROFIBUS & PROFINET International on the Internet You will find numerous documents on the topic of PROFINET at the Internet address (http://www.profibus.com) of the "PROFIBUS & PROFINET International" PROFIBUS user organization, which is also responsible for PROFINET. Additional information can be found on the Internet (http://www.siemens.com/profinet).
Overview of the most important documents and links A compilation of the most important PROFINET application examples, FAQs and other contributions in the Industry Online Support is available in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/108165711).
2.1.1
PROFINET terms
Definition: Devices in the PROFINET environment In the PROFINET environment, "device" is the generic term for: Automation systems (PLC, PC, for example) Distributed I/O systems Field devices (for example, hydraulic devices, pneumatic devices) Active network components (for example, switches, routers) Gateways to PROFIBUS, AS interface or other fieldbus systems
PROFINET with STEP 7 V16
16
Function Manual, 11/2019, A5E03444486-AK
Description 2.1 Introduction to PROFINET
PROFINET IO devices The following graphic shows the general names used for the most important devices in PROFINET. In the table below the graphic you can find the names of the individual components in the PROFINET IO context.
Number PROFINET
PROFINET IO System
IO controller
Programming device / PC
(PROFINET IO supervisor)
PROFINET/Industrial Ethernet
HMI (Human Machine Interface)
IO device
I-device
Figure 2-2 PROFINET devices
Explanation
Device used to address the connected IO devices. This means that: The IO controller exchanges input and output signals with field devices. PG/PC/HMI device used for commissioning and for diagnostics Network infrastructure Device for operating and monitoring functions. A distributed field device that is assigned to one of the IO controllers (e.g., Distributed IO, valve terminals, frequency converters, switches with integrated PROFINET IO functionality) Intelligent IO device
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
17
Description 2.1 Introduction to PROFINET
IO communication via PROFINET IO The inputs and outputs of distributed I/O devices are read and written by means of PROFINET IO using what is referred to as IO communication. The following figure provides an overview of IO communication by means of PROFINET IO.
A
IO controller - IO controller communication via PN/PN coupler
B
IO controller - I-device communication
C
IO controller - IO-device communication
D
Direct data exchange between S7-1500-CPUs
Figure 2-3 IO communication via PROFINET IO
PROFINET with STEP 7 V16
18
Function Manual, 11/2019, A5E03444486-AK
Description 2.1 Introduction to PROFINET
IO communication via PROFINET IO
Table 2- 1 IO communication via PROFINET IO
Communication between ... IO controllers and IO devices IO controller and I-device
IO controller and IO controller (PN/PN coupler)
S7-1500-CPU and S7-1500-CPU (direct data exchange)
Explanation
The IO controller sends data cyclically to the IO devices of its PROFINET IO system and receives data from these devices.
A fixed quantity of data is transferred cyclically between the user programs in CPUs of IO controllers and I-devices.
The IO controller does not access the I/O module of the I-device, but instead accesses configured address ranges, i.e. transfer ranges, which may be located inside our outside the process image of the CPU of the I-device. If parts of the process image are used as transfer ranges, it is not permitted to use these for real I/O modules.
Data transfer takes place using load- and transfer operations via the process image or via direct access.
A fixed quantity of data is cyclically transferred between the user programs in CPUs of IO controllers. A PN/PN coupler is required as additional hardware.
The IO controllers mutually access configured address ranges, i.e. transfer ranges, which may be located inside or outside the process image of the CPU. If parts of the process image are used as transfer ranges, it is not permitted to use these for real I/O modules.
Data transfer takes place using load- and transfer operations via the process image or via direct access.
I/O communication with PN/PN coupler is possible between two PROFINET IO systems.
In the case of direct data exchange, an S7-1500 CPU provides cyclic user data from the I/O area to one or more partners.
The direct data exchange is based on PROFINET with IRT and isochronous mode.
The data exchange takes place via transfer areas.
See also
Communication (http://support.automation.siemens.com/WW/view/en/59192925) Network security (Page 36) Functions (Page 113)
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
19
Description 2.1 Introduction to PROFINET
2.1.2
Basic terminology of communication
PROFINET communication
PROFINET communication takes place via Industrial Ethernet. The following transmission types are supported:
Acyclic transmission of engineering and diagnostics data and interrupts
Cyclic transmission of user data
The PROFINET-IO communication takes place in real-time.
For additional information on the real-time communication, refer to chapter Real-time communication (Page 175).
PROFINET with STEP 7 V16
20
Function Manual, 11/2019, A5E03444486-AK
Description 2.1 Introduction to PROFINET
Transparent data access
Access to process data from different levels of the factory is supported by PROFINET communication. By using Industrial Ethernet, standard mechanisms of communication and information technology such as OPC/XML can now be used along with standard protocols such as UDP/TCP/IP and HTTP in automation engineering. This allows transparent access from company management level directly to the data from the automation systems at the control level and production level.
Management level Control level Production level
Figure 2-4 Access to process data
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
21
Description 2.1 Introduction to PROFINET
Update time
The update time is a time interval. IO controller and IO device/I-device exchange IO data cyclically in the IO system within this time interval. The update time can be configured separately for each IO device and determines the interval at which output data is sent from the IO controller to the IO device (output module/submodule) as well as input data from the IO device to the IO controller (input module/submodule).
STEP 7 calculates the update time automatically in the default setting for each IO device of the PROFINET IO system, taking into account the volume of data to be exchanged as well as the set send clock.
For additional information on the update time, refer to section Real-time communication (Page 175).
Watchdog time
The watchdog time is the time interval that an IO controller or IO device permits, without receiving IO data. If the IO device is not supplied by the IO controller with data within the watchdog time, the IO device detects the missing frames and outputs substitute values. This is reported in the IO controller as a station failure.
In STEP 7, the watchdog time is made up from an integral multiple of the update time and can be set by the user.
Send clock
The period of time between two consecutive communication cycles. The send clock is the shortest possible interval in data exchange and thus also the smallest value that can be set for the update time.
Relationship between the update time and send clock
The calculated update times are reduction ratios (1, 2, 4, 8, ..., 512) of the send clock. The minimum possible update time thus depends on the minimum send clock of the IO controller that can be set and the efficiency of the IO controller and IO device. Depending on the send clock, it can be that only some of the reduction ratios are available (STEP 7 guarantees this through a pre-selection).
The following tables illustrate the dependency of the update time that can be set on the send clock, using an example of the CPU 1516-3 PN/DP. The update times satisfy the requirements of the PROFINET standard IEC 61158.
Table 2- 2 With real-time communication the following applies:
Send clock 250 s 500 s 1 ms 2 ms 4 ms
Update time 250 s to 128 ms 500 s to 256 ms 1 ms to 512 ms 2 ms to 512 ms 4 ms to 512 ms
Reduction ratios 1,2, ..., 512 1,2, ..., 512 1,2, ..., 512 1,2, ..., 256 1,2, ..., 128
Additional information
For information on real-time communication, refer to the section Real-Time Communication (RT) (Page 176).
PROFINET with STEP 7 V16
22
Function Manual, 11/2019, A5E03444486-AK
Description 2.1 Introduction to PROFINET
2.1.3
PROFINET interface
Overview
PROFINET devices of the SIMATIC product family have one or more PROFINET interfaces (Ethernet controller/interface). The PROFINET interfaces have one or more ports (physical connection options).
In the case of PROFINET interfaces with multiple ports, the devices have an integrated switch.
PROFINET devices with two ports on one interface allow you to configure the system in a line or ring topology. PROFINET devices with three or more ports on one interface are also ideal for setting up tree topologies.
Properties and rules for naming the PROFINET interface and its representation in STEP 7 are explained in the following.
Properties
Every PROFINET device on the network is uniquely identified via its PROFINET interface. For this purpose, each PROFINET interface has: A MAC address (factory default) An IP address A PROFINET device name
Identification and numbering of the interfaces and ports
Interfaces and ports for all modules and devices in the PROFINET system are identified with the following characters:
Table 2- 3 Identification for interfaces and ports of PROFINET devices
Element Interface Port
Ring port
Symbol X P
R
Interface number
In ascending order starting from number 1
In ascending order starting from number 1 (for each interface)
Examples of identification
Three examples illustrate the rules for identifying PROFINET interfaces:
Table 2- 4 Examples for identifying PROFINET interfaces
Sample labeling X2 P1 X1 P2 X1 P1 R
Interface number 2 1 1
Port number 1 2 1 (ring port)
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
23
Description 2.1 Introduction to PROFINET
Representation of PROFINET Interfaces in the Topology Overview in STEP 7 You can find the PROFINET interface in the topology overview in STEP 7. The PROFINET interface for an IO controller and an IO device is represented as follows in STEP 7:
Num-
ber
Description
PROFINET interface of an IO controller in STEP 7 PROFINET interface of an IO device in STEP 7 These lines represent the PROFINET interface. These lines represent the "ports" of a PROFINET interface.
Figure 2-5 Representation of the PROFINET interfaces in STEP 7
Schematic Representation of a PROFINET Interface with Integrated Switch
The following schematic diagram shows the PROFINET interface with integrated switch and its ports for all PROFINETdevices.
Figure 2-6 PROFINET interface with integrated switch
PROFINET with STEP 7 V16
24
Function Manual, 11/2019, A5E03444486-AK
Description 2.1 Introduction to PROFINET
Functional differences of the PROFINET interfaces
PROFINET interfaces can provide different functions. PROFINET interface functions include identification, configuration, diagnostics and communication services (e.g., open communication). PROFINET interfaces that provide PROFINET IO functions and network security functions are also available.
The following table illustrates the differences using the example of the CPU 1516-3 PN/DP (as of firmware version V2.0), which features two PROFINET interfaces with different functionality.
Table 2- 5 Differences between the PROFINET interfaces of the CPU 1516-3 PN/DP (as of firmware version V2.0)
PROFINET interface (X1)
PROFINET interface (X2)
2 ports with PROFINET IO functionality:
1 port with PROFINET IO functionality:
Identification, configuration and diagnostics
PG communication
HMI communication
S7 communication
Time-of-day synchronization
Web server
Open communication
OPC UA server
IO controller
I-device
RT
IRT
-
Isochronous mode
-
Media redundancy
-
Prioritized startup
-
Additional Information on the Functionality of PROFINET interfaces
You can find information on the number and functionality of the interfaces of a PROFINET device in the documentation for the specificPROFINET device.
PROFINET communication services are described in the Communication function manual (http://support.automation.siemens.com/WW/view/en/59192925).
In the Network security (Page 36) section you can find components that are used to protect networks against hazards.
The Functions (Page 113) section describes the PROFINET IO functions.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
25
Description 2.1 Introduction to PROFINET
2.1.4
Implementation of the PROFINET device model in SIMATIC
Slots and modules
A PROFINET device can have a modular and compact structure. A modular PROFINET device consists of slots into which the modules are inserted. The modules have channels which are used to read and output process signals. A compact device has the same design and can include modules, however, it cannot be physically expanded, which means that no modules can be inserted.
This is illustrated by the following graphic.
Figure 2-7 Configuration of a PROFINET device
Number
Description Slot with bus interface Slot with module Subslot with submodule Channel
A module can contain multiple submodules.
PROFINET with STEP 7 V16
26
Function Manual, 11/2019, A5E03444486-AK
Description 2.1 Introduction to PROFINET Representation of PROFINET Device Model in the Device View of STEP 7 The following figure shows the representation of the PROFINET device model in the device view of STEP 7, based on the example of a distributed I/O system ET 200MP:
Figure 2-8 PROFINET device model in the device view of STEP 7
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
27
Description 2.2 Setting up PROFINET
2.2
Setting up PROFINET
Contents of this chapter The following chapter provides background information on building your communication network. Overview of the most important passive network components: These are network components that forward a signal without the possibility of actively influencing it, for example, cables, connectors, etc. Overview of the most important active network components: These are network components that actively affect a signal, for example switches, routers, etc. Overview of the most common network structures (topologies).
Physical connections of industrial networks PROFINET devices can be networked in industrial systems in two different physical ways: Connected line By means of electrical pulses via copper cables By means of optical pulses via fiber-optic cables Wireless via wireless network using electromagnetic waves PROFINET devices and cabling technology in SIMATIC are suited for industrial use, as they are based on Fast Ethernet and Industrial Ethernet. Fast Ethernet You can use Fast Ethernet to transfer data at a speed of 100 Mbps. This transmission technology uses the 100 Base-T standard for this. Industrial Ethernet Structure of Ethernet in industrial environment. The biggest difference from standard Ethernet is the mechanical current carrying capacity and noise immunity of the individual components.
2.2.1
Active Network Components
Introduction
The following active network components are available for PROFINET: Switch Router
PROFINET with STEP 7 V16
28
Function Manual, 11/2019, A5E03444486-AK
Description 2.2 Setting up PROFINET
Switched Ethernet
PROFINET IO is based on switched Ethernet with full-duplex operation and a bandwidth of 100 Mbps. In this way, the network can be used much more efficiently through the simultaneous data transfer of several devices. The PROFINET IO frames are processed with high priority.
Switches
Switches are network components used to connect several terminal devices or network segments in a local network (LAN).
For the communication of a device with several other devices on PROFINET, the device is connected to the port of a switch. Other communication devices (including switches) can then be connected to the other ports of the switch. The connection between a communication device and the switch is a point-to-point connection.
A switch has the task of receiving and distributing frames. The switch "learns" the Ethernet address(es) of a connected PROFINET device or additional switches and only forwards those frames that are intended for the connected PROFINET device or the connected switch.
Switch variants Switches are available in two models: Integrated into a PROFINET device For PROFINET devices with multiple ports (two or more), we are dealing with devices with an integrated switch (for example, CPU 1516-3 PN/DP). As autonomous device (for example, switches of the SCALANCE product family)
Selection Guide for Switches
To use PROFINET with the RT class "RT", you can use any switch of "PROFINET Conformance Class A" or higher. All switches of the SCALANCE product family meet these requirements.
If you want to use PROFINET functions that provide an additional value, such as topology recognition, diagnostics, device exchange without exchangeable medium/programming device, you have to use a switch of the "PROFINET Conformance Class B" or higher.
To use PROFINET with the RT class "IRT", you must use a switch of "PROFINET Conformance Class C". With switches of the SCALANCE product family, watch out for the catalog feature "IRT PROFINET IO switch".
To select appropriate switches, we recommend the SIMATIC NET Selection Tool on the Internet (http://support.automation.siemens.com/WW/view/en/39134641).
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
29
Description 2.2 Setting up PROFINET
Switches of the SCALANCE product family
Use the switches of the SCALANCE product family if you want to use the full scope of PROFINET. They are optimized for use in PROFINET IO.
In the SCALANCE X device family, you will find switches with electrical and optical ports and with a combination of both variants. SCALANCE X202-2IRT, for example, has two electrical ports and two optical ports and supports IRT communication.
Beginning with the SCALANCE X200, you can configure, diagnose and address switches of the SCALANCE X device series as PROFINET IO devices using STEP 7.
Router
A router connects separated network segments with each other (e.g. management level and control level). The volume of data volume must be coordinated with the services of the respective network segment. A router also separates two networks and acts as a mediator between both networks. It thus reduces the network load. Routing functionality is provided in the SCALANCE X device family, with SCALANCE X300 or higher.
Communication devices on different sides of a router can only communicate with one another if you have explicitly enabled communication between them via the router.
If you want to access manufacturing data directly from SAP, for example, use a router to connect your Industrial Ethernet in the factory with the Ethernet in your office.
Note
If devices need to communicate beyond the limits of a network, you must configure the router so that it allows this communication to take place.
Information on routing with STEP 7 is available in the function manual Communication (http://support.automation.siemens.com/WW/view/en/59192925).
2.2.2
Cabling technology
Cables for PROFINET
Electrical and optical cables are available for PROFINET. The type of cable depends on the data transfer requirements and on the ambient conditions.
PROFINET with STEP 7 V16
30
Function Manual, 11/2019, A5E03444486-AK
Description 2.2 Setting up PROFINET
Simple method for the prefabrication of twisted pair cables When you set up your PROFINET system, you can cut the twisted-pair cable to the required length on site, strip it with the stripping tool (for Industrial Ethernet), and fit the Industrial Ethernet Fast Connect RJ45 plugs using the cut-and-clamp method. For more information on installation, refer to the installation instructions in the "SIMATIC NET Industrial Ethernet Network Manual" (http://support.automation.siemens.com/WW/view/en/8763736).
Note A maximum of four plug-in pairs are allowed between two switches per Ethernet path.
Simple method for the prefabrication of fiber-optic cables The FastConnect FO cabling system is available for the easy, fast and error-free prefabrication of fiber-optic cables. The glass-fiber optic cable consists of: FC FO Termination Kit for SC and BFOC plug (cleave tool, Kevlar scissors, buffer grip, fiber remains container) FC BFOC Plug FC SC Duplex plug FO FC Standard cable FO FC Trailing cable
Simple method for the prefabrication of POF and PCF cables The following special tools provide an easy and safe way to prefabricate POF / PCF cables and fit the SC RJ POF plugs: POF cable Prefabrication case IE Termination Kit SC RJ POF plug PCF cable Prefabrication case IE Termination Kit SC RJ PCF plug
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
31
Description 2.2 Setting up PROFINET
Overview of transmission media with PROFINET
The following table summarizes the technical specifications of a PROFINET interface with integrated switch or an external switch, and possible transmission media.
Table 2- 6 Transmission media with PROFINET
Physical properties Electrical Optical
Electromagnetic waves
Connection methods
RJ45 connector ISO 60603-7
SCRJ 45 ISO/IEC 61754-24
BFOC (Bayonet Fiber Optic Connector) and SC (Subscriber Connector) ISO/IEC 60874
-
Cable type / transmission medium
standard
100Base-TX 2x2 twisted, symmetrical and shielded copper cable, CAT 5 transmission requirement IEEE 802.3
100Base-FX POF fiber-optic cable (Polymer Optical Fiber, POF) 980/1000 µm (core diameter / external diameter) ISO/IEC 60793-2
Plastic-cladded glass fiber (Polymer Cladded Fiber, PCF) 200/230 µm (core diameter / external diameter) ISO/IEC 60793-2
Monomode glass fiber optic cable 10/125 µm (core diameter / external diameter) ISO/IEC 60793-2
Multimode glass fiber optic cable 50/125 µm and 62.5/125 µm (core diameter / external diameter) ISO/IEC 9314-4
IEEE 802.11 x
Transmission rate / mode 100 Mbps, full duplex
100 Mbps, full duplex
100 Mbps, full duplex
100 Mbps, full duplex
100 Mbps, full duplex
Depends on the extension used (a, g, h, etc.)
Max. segment length (between two devices) 100 m
50 m
100 m
26 km
3000 m
100 m
1 Applies for fiber-optic cables only
Advantages
Simple and cheap cable connection
Use when there are large differences in potential Insensitive towards electromagnetic radiation Low line attenuation Considerably longer segments possible1
Greater mobility Cost-effective networking to remote, difficult to access devices
PROFINET with STEP 7 V16
32
Function Manual, 11/2019, A5E03444486-AK
See also
Description 2.2 Setting up PROFINET
PROFINET interface (Page 23) Assembly Instructions for SIMATIC NET Industrial Ethernet (http://support.automation.siemens.com/WW/view/en/27069465) PROFINET Installation Guideline (http://www.profibus.com/nc/download/installationguide/downloads/profinet-installation-guide/display/)
2.2.3
Wireless design
2.2.3.1
Basics
What is Industrial Wireless LAN?
In addition to data communication in accordance with the IEEE 802.11 standard, the SIMATIC NET Industrial Wireless LAN provides a number of enhancements which offer significant benefits for industrial customers. IWLAN is particularly suitable for demanding industrial applications that require reliable wireless communication. This is supported by the following properties:
Automatic roaming when the connection to Industrial Ethernet is interrupted (Forced Roaming)
Cost savings generated by using a single wireless network for reliable operation of a process with both process-critical data (alarm message, for example) and non-critical communication (service and diagnostics, for example)
Cost-effective connection to devices in remote environments that are difficult to access
Predictable data traffic (deterministic) and defined response times
Cyclical monitoring of the wireless link (link check)
Objectives and advantages of Industrial Wireless LAN
Wireless data transmission achieves the following objectives:
Seamless integration of PROFINET devices into the existing bus system via the wireless interface
Mobile use of PROFINET devices for different production-linked tasks
Flexible configuration of the system components for fast development in accordance with customer requirements
Maintenance costs are minimized by savings in cables
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
33
Description 2.2 Setting up PROFINET
Application examples Communication with mobile subscribers (mobile controllers and devices, for example), conveyor lines, production belts, translation stages , and rotating machines Wireless coupling of communication segments for fast commissioning or cost-effective networking where routing of wires is extremely expensive (e.g. public streets, railroad lines) Stacker trucks, automated guided vehicle systems and suspended monorail systems The following graphic illustrates the many possible applications and configurations for SIMATIC device family wireless networks.
Figure 2-9 Application example for the use of Industrial Wireless LAN
Data transmission rate In Industrial Wireless LAN, gross data transmission rates of 11 Mbps or 54 Mbps without full duplex are permitted.
PROFINET with STEP 7 V16
34
Function Manual, 11/2019, A5E03444486-AK
Range
Description 2.2 Setting up PROFINET
With SCALANCE W (access points), wireless networks can be set up indoors and outdoors. Multiple access points can be installed to create large wireless networks in which mobile subscribers are transferred seamlessly from one access point to another (roaming). As an alternative to a wireless network, point-to-point connections of Industrial Ethernet segments can also be set up over large distances (several hundred meters). In this case, the range and characteristics of the RF field are determined by the antennas used.
Note Range The range can be considerably less, depending on spatial factors, the wireless standard used, the data rate, and the antennas on the send and receive sides.
2.2.3.2
Tips on assembly
Wireless networks, SCALANCE device family
With PROFINET, you can also set up wireless networks with Industrial Wireless Local Area Network (IWLAN) technology. We recommend implementing the SCALANCE W device line for this.
Update time in STEP 7
If you set up PROFINET with Industrial Wireless LAN, you may have to increase the update time for the wireless devices. The IWLAN interface provides lower performance than the wired data network: Several communication stations have to share the limited transmission bandwidth. For wired solutions, 100 Mbps is available for each communication device.
The Update time parameter can be found in the "Realtime settings" section in the Inspector window of IO devices in STEP 7.
Figure 2-10 Update time in STEP 7
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
35
Description 2.2 Setting up PROFINET
Additional information
More information about SCALANCE W Industrial Wireless LAN components can be found in the manual SIMATIC NET SCALANCE W-700 (http://support.automation.siemens.com/WW/view/en/42784493).
More information about wired data transmission can be found in the manual SIMATIC NET Twisted Pair and Fiber Optic Networks (http://support.automation.siemens.com/WW/view/en/8763736).
More information about wireless data transmission can be found in the manual Basics for configuring an industrial wireless LAN (http://support.automation.siemens.com/WW/view/en/9975764).
You should also read the PROFINET installation guideline of the PROFIBUS User Organization on the Internet (http://www.profibus.com/nc/download/installationguide/downloads/profinet-installation-guide/display/). Various documents that assist with the setting up of your PROFINET automation solution are available here:
PROFINET planning guideline
PROFINET installation guideline
PROFINET commissioning guideline
Additional documents for setup of PROFINET
2.2.4
Network security
2.2.4.1
Basics
Introduction
The topic of data security and access protection (Security) has become increasingly important in the industrial environment. The increased networking of entire industrial systems, vertical integration and networking of levels within a company and new techniques such as remote maintenance all result in higher requirements for protecting the industrial plant.
Data security solutions for office environments cannot simply be transferred one-to-one to industrial applications to protect against manipulation in sensitive systems and production networks.
PROFINET with STEP 7 V16
36
Function Manual, 11/2019, A5E03444486-AK
Description 2.2 Setting up PROFINET
Requirements
Additional security requirements arise from the specific communication requirements in the industrial environment (real-time communication, for example): Protection against interaction between automated cells Protection of network segments Protection against faulty and unauthorized access Scalability of network security Must not influence the network structure
Definition of security Generic term for all the measures taken to protect against: Loss of confidentiality due to unauthorized access to data Loss of integrity due to manipulation of data Loss of availability due to destruction of data, for example, through faulty configuration and denial-of-service attacks
Threats
Threats can arise from external and internal manipulation. The loss of data security is not always caused by intentional actions. Internal threats can arise due to: Technical errors Operator errors Defective programs Added to these internal threats there are also external ones. The external threats are not really any different to the known threats in the office environment: Software viruses and worms Trojans Man-in-the-middle attacks Password Phishing Denial of Service
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
37
Description 2.2 Setting up PROFINET
Protective measures
The most important precautions to prevent manipulation and loss of data security in the industrial environment are:
Physical access protection to the devices
Filtering and control of data traffic by means of firewall
A virtual private network (VPN) is used to exchange private data on a public network (Internet, for example).
The most common VPN technology is IPsec. IPsec (Internet Protocol Security) is a collection of security protocols that are used as the basis for the IP protocol at the mediation level and allow a secured communication via potentially unsecure IP networks.
Segmenting in protected automation cells
This concept has the aim of protecting the lower-level network devices by means of security modules. A group of protected devices forms a protected automation cell.
Authentication (identification) of the devices
The security modules identify each other over a safe (encrypted) channel using authentication procedures. It is therefore impossible for unauthorized parties to access a protected segment.
Encrypting the data traffic
The confidentiality of data is ensured by encrypting the data traffic. Each security module is given a VPN certificate which includes the encryption key.
2.2.4.2
Network components and software
Protection against unauthorized access
The following solutions may be used to connect industrial networks to the intranet and Internet to protect against internal and external threats:
Communication processors, such as the SIMATIC CP 1543-1
SCALANCE X-300 and SCALANCE S - the data security components of the SIMATIC NET product family
SOFTNET security client for use on PCs
Features
Both of these products have a wide variety of features, such as: Easy integration of existing networks without configuration, with integrated firewall. Segmenting in protected automation cells Authentication (identification) of the devices Encrypting the data traffic
PROFINET with STEP 7 V16
38
Function Manual, 11/2019, A5E03444486-AK
Description 2.2 Setting up PROFINET
2.2.4.3
Application example
Data security at the office and production levels
The following graphic contains an application example with protected areas at different levels of the company created using SCALANCE S and the security client. The protected areas are highlighted in light gray.
Figure 2-11 Network configuration with the SCALANCE S security module and the SOFTNET security client
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
39
Description 2.2 Setting up PROFINET
Additional information Additional information on the configuration of a security standard in PROFINET, is available: In the PROFINET security guideline. These guidelines can be found on the homepage of the PROFIBUS user organization on the Internet (http://www.profinet.com). In the Industrial Ethernet Security (http://support.automation.siemens.com/WW/view/en/56577508) manual In the SCALANCE S and SOFTNET Security Client (http://support.automation.siemens.com/WW/view/en/21718449) manual You can find general information on industrial security concepts, functions and news on the Industrial Security website (http://www.siemens.com/industrialsecurity).
PROFINET with STEP 7 V16
40
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing
3
To set up an automation system, you will need to configure, assign parameters and interlink the individual hardware components. In STEP 7, the work needed for this is undertaken in the device, topology and network view.
Configuring
"Configuring" is understood to mean arranging, setting and networking devices and modules within the device, topology or network view.
An I/O address is automatically assigned to each module. The I/O addresses can be subsequently modified.
The CPU compares the configuration preset in STEP 7 with the actual current configuration of the system. In this way, potential errors can be detected and reported straight away.
The exact procedure for configuring devices is described in detail in the STEP 7 online help.
Assigning parameters
"Assigning parameters" is understood to mean setting the properties of the components used. The settings for the hardware components and for data communication are configured at the same time.
In STEP 7, you can "assign parameters" for the following settings PROFINET:
Device names and IP address parameters
Port interconnection and topology
Module properties / parameters
The parameters are loaded into the CPU and transferred to the corresponding modules when the CPU starts up. Modules are easy to replace from spare parts, as the parameters assigned for the SIMATIC CPUs are automatically loaded into the new module at each startup.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
41
Parameter assignment/addressing 3.1 Assigning an IO device to an IO controller
Adjusting the hardware to the project requirements You need to configure hardware if you want to set up, expand or change an automation project. To do this, add hardware components to your structure, link these with existing components, and adapt the hardware properties to the tasks. The properties of the automation systems and modules are preset such that in many cases they do not have to be assigned parameters again. Parameter assignment is however needed in the following cases: You want to change the default parameter settings of a module. You want to use special functions. You want to configure communication connections.
3.1
Assigning an IO device to an IO controller
PROFINET IO System
A PROFINET IO system is comprised of a PROFINET IO controller and its assigned PROFINET IO devices. After these devices have been placed in the network or topology view, STEP 7 assigns default values for them. Initially, you only have to worry about the assignment of IO devices to an IO controller.
Requirement
You are in the network view of STEP 7. A CPU has been placed (e.g., CPU 1516-3 PN/DP). An IO device has been placed (e.g., IM 155-6 PN ST).
Procedure
To assign IO devices to an IO controller, proceed as follows:
1. Place the pointer of the mouse over the interface of the IO device.
2. Press and hold down the left mouse button.
3. Move the pointer.
The pointer now uses the networking symbol to indicate "Networking" mode. At the same time, you see the lock symbol on the pointer. The lock symbol disappears only when the pointer is over a valid target position.
4. Now move the pointer onto the interface of the IO controller. You can keep the left mouse button pressed or release it when performing this action.
PROFINET with STEP 7 V16
42
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.1 Assigning an IO device to an IO controller
5. Now release the left mouse button or press it again (depending on your previous action).
Figure 3-1 Assigning an IO device to an IO controller in the network view of STEP 7
Result
You have assigned an IO device to an IO controller.
Checking the assignment
You can find an overview of the communication relationships in the "IO communication" tab in the tabular area of the network view. This table is context-sensitive for selection in the graphic area:
Selection of the interface shows the I/O communication of the respective interface.
Selection of the CPU shows all I/O communication of the CPU (including PROFIBUS).
Selection of the station (as in the above figure) interface shows the I/O communication of the complete station.
Information on S7-1500R/H
You can find the procedure for assigning an IO device with system redundancy S2 to the redundant S7-1500R/H system in section Assigning IO device to the redundant S7-1500R/H system (Page 287).
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
43
Parameter assignment/addressing 3.2 Device name and IP address
3.2
Device name and IP address
Introduction
In order that the PROFINET device can be addressed as node on PROFINET, the following are required:
A unique PROFINET device name
A unique IP address in the relevant IP subnet
STEP 7 assigns a device name during the arrangement of a PROFINET device in the hardware and network editor. The IP addresses are typically assigned automatically by STEP 7 and assigned to the devices based on the device name.
You can change the name and IP address manually.
In STEP 7
You can find the device name and the IP address under "Ethernet addresses" in the properties of the PROFINET interface in the Inspector window.
Figure 3-2 Device name and IP address in STEP 7
The function, the assignment and the changing of the device name and the IP address are described in the following sections.
PROFINET with STEP 7 V16
44
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.2 Device name and IP address
3.2.1
Device name
Device names
Before an IO device can be addressed by an IO controller, it must have a device name. In PROFINET, this method was selected because it is simpler to work with names than with complex IP addresses.
The assignment of a device name for a specific IO device can be compared to setting the PROFIBUS address of a DP slave.
In delivery state, an IO device does not have a device name. A device name must first be assigned before an IO device can be addressed by an IO controller, for example, for transferring configuration data during startup or for exchanging user data in cyclic mode. You assign the device names to the IO device, for example, with the programming device / PC.
IO devices that have a slot for removable storage media provide the option of writing the device name directly to the removable storage medium in the programming device.
When a device is replaced by a device without removable medium, the IO controller assigns the device name based on topological configuration (see section Configuring topology (Page 64)).
Structured device names
The device name is automatically assigned by default for PROFINET devices S7-1200, S7-1500, ET 200MP, ET 200SP and ET 200AL when these are configured in STEP 7. The device names are formed from the name of the CPU or the name of the interface module. For devices with several PROFINET interfaces, the name of the interface is enhanced, for example, "plc_1.profinet-interface_2" or "io-device_1".
You can structure the device names using DNS conventions.
These conventions are defined by "Internationalizing Domain Names in Applications (IDNA). According to this, device names are written in lower case.
The "Domain Name System" (DNS) is a distributed database (http://iana.org), which manages the name space on the Internet. To structure the names, you use the dot ("."). The hierarchy is shown in ascending order from left to right.
...<Subdomain name>.<Domain name>.<Top-level domain name>
If the name is not DNS-compliant, the name will be converted by STEP 7, for example, to "plcxb1.profinet-schnittstellexb2022c" or "io-devicexb15b32".
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
45
Parameter assignment/addressing 3.2 Device name and IP address
Device number In addition to the device name, STEP 7 also assigns a device number beginning with "1" when an IO device is allocated. The device number is located in the Inspector window in the properties of the PROFINET interface, under "Ethernet addresses" in the area PROFINET.
Figure 3-3 Device number
This device number can be used to identify an IO device in the user program (for example, with the instruction "LOG2GEO").
3.2.2
IP address
IP address
To allow a PROFINET device to be addressed as a device on Industrial Ethernet, this device also requires an IP address that is unique within the network. The IP addresses are typically assigned automatically by STEP 7 and assigned to the devices based on the device name. If it is a standalone network, you can apply the IP address and subnet mask suggested by STEP 7. If the network is part of an existing Ethernet company network, obtain the information from your network administrator.
Configuration of the IP address
In accordance with Internet Protocol version 4 (IPv4), the IP address is made up of four decimal numbers with a range of values from 0 through 255. The decimal numbers are separated by periods (for example, 192.162.0.0).
The IP address consists of the following:
Address of the network
Address of the device (PROFINET interface of the IO controller/IO device)
PROFINET with STEP 7 V16
46
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.2 Device name and IP address
Generating IP addresses
You assign the IP addresses of the IO devices in STEP 7. The IO devices receive their IP addresses during parameter assignment by the IO controller. In addition, for some IO devices (e.g., SCALANCE X, S7-300 CPs), it is possible not to obtain the IP address during startup of the IO controller, but rather to set it beforehand on the device (see Permitting changes to the device name and IP address directly on the device (Page 57)).
The IP addresses of the IO devices always have the same subnet mask as the IO controller and are assigned from the IP address of the IO controller in ascending order. The IP address can be changed manually, if necessary.
For devices with several PROFINET interfaces (e.g., CPU 1516-3 PN/DP), the IP addresses must be located in different subnets.
Default router
The default router is used when data has to be forwarded via TCP/IP or UDP to a partner located outside the local network.
In STEP 7, the default router is named Router. You can activate the use of a router in the Inspector window of a CPU with the "Use router" check box in the "IP protocol" section. STEP 7 assigns the local IP address to the default router by default.
The router address that is set on the PROFINET interface of the IO controller is automatically transferred for the configured IO devices.
Subnet mask
The bits set in the subnet mask decide the part of the IP address that contains the address of the network.
In general, the following applies:
The network address is obtained from the AND operation of the IP address and subnet mask.
The device address is obtained from the AND NOT operation of the IP address and subnet mask.
Example of the subnet mask Subnet mask: 255.255.0.0 (decimal) = 11111111.11111111.00000000.00000000 (binary)
IP address: 192.168.0.2 (decimal) = 11000000.10101000.00000000.00000010 (binary)
Meaning: The first 2 bytes of the IP address determine the network - i.e., 192.168. The last two bytes address the device, i.e. 0.2.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
47
Parameter assignment/addressing 3.2 Device name and IP address
Relation between IP address and default subnet mask
An agreement exists relating to the assignment of IP address ranges and so-called "Default subnet masks". The first decimal number (from the left) in the IP address determines the structure of the default subnet mask with respect to the number of "1" values (binary) as follows:
IP address (decimal) 0 to 126 128 to 191 192 to 223
IP address (binary) 0xxxxxxx.xxxxxxxx.... 10xxxxxx.xxxxxxxx... 110xxxxx.xxxxxxxx...
Address class A B C
Default subnet mask 255.0.0.0 255.255.0.0 255.255.255.0
Note Range of values for the first decimal point
A value between 224 and 255 is also possible for the first decimal number of the IP address (address class D etc.). However, this is not recommended because there is no address check for these values.
Masking other subnets
You can use the subnet mask to add further structures and form "private" subnets for a subnet that is assigned one of the address classes A, B or C. This is done by setting other, less significant bits of the subnet mask to "1". For each bit set to "1", the number of "private" networks doubles and the number of devices they contain is halved. Externally, the network continues to function as an individual network.
Example:
You have a subnet of address class B (for example, IP address 129.80.xxx.xxx) and change the default subnet mask as follows:
Masks Default subnet mask
Subnet mask
Decimal 255.255.0.0
255.255.128.0
Binary
11111111.11111111.00000000. 00000000
11111111.11111111.10000000. 00000000
Result:
All devices with addresses from 129.80.001.000 to 129.80.127.254 are located in a subnet, all devices with addresses from 129.80.128.000 to 129.80.255.254 in a different subnet.
Reading out an IP address in the user program
You can read out the IP address of a PROFINET device in the user program of a S7-1500 CPU. You can find information in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/82947835).
PROFINET with STEP 7 V16
48
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.2 Device name and IP address
3.2.3
Assigning a device name and IP address
Assigning an IP address and subnet mask for an IO controller for the first time
You have the following options:
Using a programming device or PC:
Connect your programming device/PC to the same network as the relevant PROFINET device. The interface of the programming device/PC must be set to TCP/IP mode. During the download, first of all display all available devices via the "Accessible devices" download dialog box. Select the target device via its MAC address and then assign its IP address before you download the hardware configuration including the configured IP address (IP address is saved retentively).
Using the display of a S7-1500 CPU:
The S7-1500 CPUs have a front cover with a display and operating keys. You can use this display to assign or change the IP address. To set the IP address, navigate on the display via the menu items "Settings" > "Addresses" > "X1 (IE/PN)" > "Parameters".
Using a memory card:
If your PROFINET device is equipped for a memory card (Micro Memory Card/SIMATIC memory card), plug this into your programming device/PC and save the hardware configuration together with the configured IP address on this memory card. Then plug the memory card into the PROFINET device. Once inserted, the PROFINET device automatically applies the IP address.
If you have saved a configuration to the memory card with the "IP address is set directly at the device" option, you must assign the IP address using a different method after inserting the memory card (see section Permitting changes to the device name and IP address directly on the device (Page 57)).
Assigning device names and IP address for "Device replacement without exchangeable medium/programming device"
For devices without exchangeable medium (e.g., ET 200MP, ET 200SP) and devices that support "Device replacement without exchangeable medium/PG" (e.g., ET 200S), the IO controller can identify the device without name from the neighbor relationships specified by the set topology and from actual neighbor relationships determined by the real PROFINET devices. The IO controller then assigns the PROFINET device the configured name and incorporates the PROFINET device in the user data traffic. (See also Device replacement without exchangeable medium (Page 225)).
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
49
Parameter assignment/addressing 3.2 Device name and IP address
IP address assignment when replacing IO devices with exchangeable mediumPG The following is contained on the memory card of the programmable logic controller: On the IO controller: Device name and IP address On the IO device: Device name When you remove the memory card from a PROFINET device and insert it in another PROFINET device with exchangeable medium (e.g., ET 200S), device-specific information and the device name are loaded to the device. If an IO device has to be replaced in its entirety due to a device or module defect, the IO controller automatically assigns parameters and configures the replaced device or module. The cyclic exchange of user data is then restarted. In addition to this, before the power ON of the IO device, the memory card with the valid name must be removed from the faulty IO device and added to the replaced device. In the event of an error in the PROFINET device, the memory card allows you to replace a module without a programming device/PC. You can also transfer the device data directly from the programming device/PC to the memory card.
Procedure: Changing the device name using properties of the PROFINET interface You can change the PROFINET name via the properties of the PROFINET interface. This is useful when the PROFINET device has not received its previous name from the automatic generation, for example, in the case of a migration. 1. In the network or device view of the STEP 7 hardware and network editor, select the PROFINET interface of a PROFINET device. 2. In the Inspector window, go to "Ethernet addresses" in the PROFINET area. 3. Clear the "Generate PROFINET device name automatically" check box. 4. Enter the new PROFINET device name in the relevant field.
Figure 3-4 Changing the device name of a PROFINET device in the properties
PROFINET with STEP 7 V16
50
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.2 Device name and IP address
Alternative procedure: Changing the device name of a PROFINET device in the network view Requirement: The "Generate PROFINET device name automatically" check box is selected. 1. In STEP 7, select the "Network overview" tab in the tabular area of the network view. 2. In the "Device" column, overwrite the name in the row of the relevant PROFINET device. The name is also changed accordingly in the graphic area of the network view.
Figure 3-5 Changing the device name of a PROFINET device in STEP 7
Procedure: Changing the IP address To change the IP address, follow these steps: 1. In the network or device view of the STEP 7 hardware and network editor, select the PROFINET interface of a PROFINET device. 2. In the Inspector window, go to "Ethernet addresses" in the "IP protocol" area.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
51
Parameter assignment/addressing 3.2 Device name and IP address
3. Check that the option "Set IP address in the project" is selected. 4. Enter the new IP address in the relevant field.
Figure 3-6 Changing the IP address of a PROFINET device in STEP 7
Downloading configured device name to IO device To load the configured device names to the IO device, follow these steps: 1. Connect your programming device/PC to the same network as the relevant IO device. The interface of the programming device/PC must be set to TCP/IP mode. 2. In STEP 7, select the relevant IO device in the "Accessible devices" dialog based on the MAC address. 3. Click "Assign name" to download the configured device name to the IO device. The IO controller recognizes the IO device automatically by its device name and automatically assigns the configured IP address to it.
PROFINET with STEP 7 V16
52
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.2 Device name and IP address
Identification of the PROFINET device
To clearly identify a device from several identical devices in a control cabinet, for example, you can flash the link LED of the PROFINET device.
To do this, select the menu command Online > Accessible devices... in STEP 7. In the "Accessible devices" dialog, set the "PG/PC" interface by means of which you are connected to the devices. STEP 7 now automatically searches for the accessible devices and displays them in the "Accessible devices in target subnet" table. Select the desired PROFINET device and click on the "Flash LED" button. The PROFINET device is identified based on its MAC address.
Figure 3-7 "Accessible devices" dialog
Using an different way to assign IP addresses for IO devices Various IO devices, for example, SCALANCE X,S7-300 CPs, support the option of not having the IP addresses assigned by the IO controller during startup. In this case, the IP address is assigned in a different way. For additional information, refer to the manual of the respective PROFINET device of the SIMATIC device family.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
53
Parameter assignment/addressing 3.2 Device name and IP address
Additional information You can find a detailed description of the operation and functions of the display of the S7-1500 CPUs in the system manual S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792).
3.2.4
Assign device name via communication table
Introduction
You can assign the device names of PROFINET IO devices configured offline to the devices online. You can do this in the table area of the network view in the table "I/O communication". You can also assign the device names to several devices at the same time.
"Online assignment" tab
In the I/O communication table, you will find the tabs "Offline configuration" and "Online assignment". In the "Online assignment" tab, you can assign the PROFINET device names that were assigned offline to the corresponding IO devices online. To do this, use the buttons "Check devices" and "Assign now".
Figure 3-8 Assign device name via communication table
The objects displayed in the table of the "Online assignment" tab depend on the setting of the filter function. If only selected objects should be displayed, only objects of the corresponding context are displayed depending on the selection in the network view.
PROFINET subnet: All connected devices and their PROFINET interfaces
IO system All devices involved and their PROFINET interfaces
Sync domain: All devices involved and their PROFINET interfaces
Devices: The device and any existing PROFINET interfaces
Other subnets or interfaces such as MPI or PROFIBUS are not displayed
If the display is set for all devices using the filter function, all devices are displayed that have a PROFINET interface, regardless of whether they are connected via a PROFINET subnet or are part of an IO system. Devices without a PROFINET interface, for example only with a DP or MPI interface, are not displayed.
PROFINET with STEP 7 V16
54
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.2 Device name and IP address
General procedure
To assign PROFINET device names, you must first detect the IO devices available online. With this procedure, it matters whether the MAC addresses are known or unknown. This results in a general procedure in two steps:
1. Detecting the IO devices available online
2. Assigning configured PROFINET device names to the IO devices available online
Requirements
You are in the network view. There is an online connection to the devices.
Procedure (step 1) To detect IO devices available online from the I/O communication table, follow these steps: 1. Optional: Entered known MAC addresses in the "MAC address" column. After every valid entry, the check box under "Assign device" is selected for the relevant row.
Note You can enter, insert or import the MAC address in different formats. The correct format is automatically entered in the cell. The following entries are supported and then converted to the required format: · "08:00:06:BA:1F:20" · "08 00 06 BA 1F 20" · "080006BA1F20" The formats used in the example are automatically converted to "08-00-06-BA-1F-20".
2. Click "Check devices" to start the check of the IO devices available online. 3. Set the PG/PC interface in the dialog window and click "Start".
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
55
Parameter assignment/addressing 3.2 Device name and IP address
Intermediate result
After the check, the result is displayed for every device in the table. Online data found is automatically entered in the table and the check box "Assign device" is set to "checked" in the rows in which a MAC address was entered or found online. The result of the check is shown as an icon in the "Status" column.
Status
Meaning Matching device and compatible type Matching device and incompatible type Non-matching device Device cannot be reached (with a known MAC address) Ready for assignment (with known MAC address)
Note The icon "Ready for assignment" appears when a MAC address exists and matching device data was found, but no PROFINET device name was found online.
You can update the data of the detected devices again via their MAC addresses at any time. To do this, you specify the MAC address and the status of the device is displayed immediately without having to re-detect the device.
Procedure (step 2) All PROFINET device names configured offline will be assigned to the devices available online in a bulk operation. 1. Click the "Assign now" button.
Note The bulk operation cannot be reversed. A message to this effect appears in a dialog window.
2. Click "Start" in the dialog window to start the assignment of the PROFINET device names.
Result
The PROFINET device names configured offline will be assigned to the devices available online. This relates to devices in whose row the check box under "Assign device" is selected, that have a MAC address and have the status "Ready for assignment".
PROFINET with STEP 7 V16
56
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.2 Device name and IP address
Importing and exporting data Using the import and export button, you can import or export the data of the I/O communication table for the online assignment: When you export, the currently displayed data of the table is exported to a CSV file. Using the filter function of the table, you can select which data will be exported. When you import, the data of the CSV file is written to the table. If there are conflicts with values already existing in the table, you can decide whether the data should be overwritten or whether the import needs to be stopped.
3.2.5
Permitting changes to the device name and IP address directly on the device
Introduction
Machines are frequently commissioned on site or integrated into the existing infrastructure without STEP 7. You can find typical applications in all areas of the series machine building. Alternative means for assigning the IP address are available for this.
Procedure
1. In the network or device view of the STEP 7 Hardware and Network editor, select the PROFINET interface of an IO controller.
2. Navigate in the Inspector window to "Ethernet addresses".
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
57
Parameter assignment/addressing 3.2 Device name and IP address
3. Select the "IP address is set directly at the device" option in the "IP protocol" area. 4. In the "PROFINET" area, select the " PROFINET device name is set directly at the
device" check box.
Figure 3-9 Setting the device name and IP address on the device
Note Gateway When you operate a PROFINET device with the option "Allow adaption of the device name/IP address directly on device", you cannot use this PROFINET device as gateway for S7 routing.
Options for assigning IP addresses and device names Apart from the known address and device name assignment in the "Ethernet addresses" section of the Inspector window, there are other ways in which the IP address and name can be assigned: Assigning by means of the user program with the instruction "T_CONFIG" Assignment when downloading the configuration to the target system via the "Extended download to device" dialog box. Assignment via the Primary Setup Tool (PST) Assignment via the PRONETA ("PROFINET network analysis") commissioning and diagnostics tool Assignment via the SIMATIC Automation Tool
PROFINET with STEP 7 V16
58
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.3 Configuring an IO device through hardware detection
Additional information For information on the "T_CONFIG" instruction and on downloading to the target system, refer to the STEP 7 online help. A free Download (http://support.automation.siemens.com/WW/view/en/14929629) of the Primary Setup Tool (PST) can be found on the Internet. On this Internet page, you will also find a list of devices for which the PST is approved.
3.3
Configuring an IO device through hardware detection
Introduction
As of STEP 7 V15, you have the possibility to detect a real existing IO device and to import it into your project.
You find the IO device in STEP 7 through the "Hardware detection" function. A detected device can be imported into your project. STEP 7 inserts the IO device with all the modules and submodules.
Requirements
STEP 7 (TIA Portal) as of V15 It must be possible to technically access the IO device via IP
Procedure
To detect one or more existing IO devices in STEP 7 and add them to the project, follow these steps:
1. In STEP 7, navigate to "Online" > "Hardware detection".
2. Click "PROFINET devices from network...". STEP 7 opens the "Hardware detection of PROFINET devices" window.
3. Select the interface of your programming device at "PG/PC interface:".
4. Click "Start search". STEP 7 begins with the hardware detection. When the hardware detection is completed, STEP 7 displays the detected IO devices.
5. Select the IO devices that you want to add to the project by clicking the corresponding check box before the IO device.
6. Click "Add devices". After a brief moment, a window is opens to report about the success or failure of the hardware detection.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
59
Parameter assignment/addressing 3.4 Specifying the router for a PROFINET IO device
Result of the hardware detection If the hardware detection is successful, STEP 7 inserts the IO device with all the modules and submodules into the project.
An IO device configured via hardware detection responds as follows:
Modules configured through the "Hardware detection" are configured as if they have been inserted from the catalog.
MAC address: STEP 7 imports the MAC address of the detected IO device into the project.
IP settings:
If the detected IO device already has an IP address, STEP 7 imports the IP address into the project.
If the detected IO device does not have an IP address, STEP 7 automatically assigns an IP address in the project.
PROFINET device name:
If the detected IO device already has a PROFINET device name, STEP 7 imports the PROFINET device name into the project.
If the detected IO device does not have a PROFINET device name, STEP 7 automatically assigns a PROFINET device name in the project.
IO devices configured through "Hardware detection" have neither an IP subnet nor an IO controller assigned.
3.4
Specifying the router for a PROFINET IO device
Introduction
You always require a router (also referred to as a "Standard Gateway") when the PROFINET device has to communicate with a node whose IP addresses lie outside the own IP subnet. If the PROFINET device sends an IP packet to an IP address outside its own IP subnet, the IP packet first goes to the configured router. The router in turn checks the IP address. If this lies outside its own subnet, the router passes the IP packet on to the next router. The IP packet is routed to the next router until it has reached the target address.
Like all S7-1500 CPUs, S7-1500 CPUs with several PROFINET interfaces provide the possibility to configure the IP address of a router. However, there is the restriction that you can only enter the IP address of a router at a PROFINET interface.
You cannot configure an IP address of a router for the other PROFINET interfaces of the CPU. IO devices that are connected to this PROFINET interface adopt this setting. Up to and including STEP 7 V14 SP1, these IO devices did not have any possibility to reach devices in a different IP subnet.
PROFINET with STEP 7 V16
60
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.4 Specifying the router for a PROFINET IO device
As of STEP 7 V15, you have the possibility to assign the address of a router for an IO device independent of the setting of the IO controller. You can now, for example, set a router address at the IO device in the following cases as well: You have not set an IP address of a router for the interface of the associated IO
controller. You have already set a router address for a different interface in the CPU.
Router R1 configured at PROFINET X1 If a router is configured at X1, you cannot configure a router at X2. Because a router is configured at X1, the IO device adopts the IP address of the router R1.
The IO device can be reached from a different IP subnet.
As of STEP 7 V15, you set the IP address of the router R2 at the IO device irrespective of
the setting at the interface X2. The IO device can be reached from a different IP subnet. Figure 3-10 Specifying the router for an IO device
Further information about the "User router" setting
You have the possibility to configure the use of a router including IP address of the router in the "IP protocol" section of the settings for the PROFINET interface (Ethernet addresses).
Rules
Observe the following rules if you want to configure a router for the PROFINET interface of an IO controller:
A PROFINET IO device supports exactly one router, irrespective of the number of interfaces.
You can configure a router for exactly one PROFINET interface. All IO devices that are assigned to the PROFINET interface adopt the configured router from the IO controller.
You cannot configure a router for the further PROFINET interfaces of the CPU. The further PROFINET interfaces take on the IP address "0.0.0.0" as the router and pass it on to their IO devices.
As of STEP 7 V15, you can configure the use of a router for an IO device. This allows the IO device to communicate with a node outside its own IP subnet, irrespective of the setting of the PROFINET interface of the IO controller.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
61
Parameter assignment/addressing 3.4 Specifying the router for a PROFINET IO device
Configuration example: Configuring a router for an IO device The following example shows a configuration in which you configure a router at the IO device so that the IO device reaches IP addresses in the higher-level network.
Figure 3-11 Configuration example: Configuring a router for an IO device
You have a CPU 1516-3PN/DP. The two PROFINET interfaces X1 and X2 of the CPU work in the "IO controller" operating mode. The PROFINET interface X1 is connected with the subnet "Production line 1". PROFINET interface X2 is connected with the subnet "Production line 2". The two subnets "Production line 1" and "Production line 2" are each connected via a router with the higher-level network "Superior line".
For PROFINET X1, you configure the router "Router 1" with the IP address 192.168.1.100.
The IO device (ET 200SP) in the "Production line 1" subnet adopts the router from the IO controller.
You cannot configure a router for the PROFINET interface X2 because you have already configured a router for the PROFINET interface X1 of the CPU.
No router is transferred by the PROFINET interface X2 to the IO device in the subnet "Production line 2".
In order for the IO device in the subnet "Production line 2" to reach nodes in the higher-level "Superior line", configure the router "Router 2" with the IP address 192.168.2.100 for the IO device.
PROFINET with STEP 7 V16
62
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.4 Specifying the router for a PROFINET IO device
Configuring the router for the IO controller Requirements: You use the "Set IP address in the project" option for the PROFINET interface. Follow these steps to configure a router for the IO controller in STEP 7: 1. In the network view of STEP 7, select the PROFINET interface of the IO controller. 2. In the Inspector window, navigate to "Properties" > "General" > "Ethernet addresses". 3. Select the "Use router" check box in the "IP protocol" field. 4. Enter the IP address of the router at "Router address".
Configuring a router for an IO device Requirements: STEP 7 as of V15 CPU 1500 as of firmware version V2.5 IO device is assigned to the PROFINET interface of an IO controller. The PROFINET interface of the IO controller uses the "Set IP address in the project" option. Follow these steps to configure a router for the IO device in STEP 7: 1. In the network view of STEP 7, select the PROFINET interface of the IO device. 2. In the Inspector window, navigate to "Properties" > "General" > "Ethernet addresses". 3. Clear the "Synchronize router settings with IO controller" check box. 4. Select the "Use router" check box. 5. Enter the IP address of the router at "Router address".
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
63
Parameter assignment/addressing 3.5 Configuring topology
3.5
Configuring topology
Introduction
If an IO device is assigned to an IO controller, this does not yet specify how the ports are connected to each other.
A port interconnection is not required to use RT, but it provides the following advantages:
A set topology is assigned with the port interconnection. Based on an online-offline comparison, it is possible to conduct a set-actual comparison with all devices that support this function.
The "Device replacement without exchangeable medium" function can be used.
A port interconnection is an essential requirement for using IRT.
An overview of various options for setting up a PROFINET network is given below.
Line
Star Tree Ring
All the communication devices are connected in a linear bus topology. In PROFINET, the linear bus topology is implemented with switches that are already integrated into the PROFINET devices. Therefore, the linear bus topology at PROFINET is merely a special form of tree / star topology. If a link element (switch, for example) fails, communication across the failed link element is no longer possible. The network is then divided into 2 subsegments. Linear bus topology structures require the least cabling.
If you connect communication devices to a switch with more than two PROFINET ports, you automatically create a star network topology. If an individual PROFINET device fails, this does not automatically lead to failure of the entire network, in contrast to other structures. It is only if a switch fails that part of the communication network will fail as well
If you interconnect several star structures, you obtain a tree network topology.
In order to increase the availability of a network, use ring structures. In principle, a linear bus topology is connected to a ring through a so-called redundancy manager. The task of the redundancy manager is managed by an external switch SCALANCE X, a CPU that supports the Media Redundancy Protocol MRP (e.g., CPU 1516-3 PN/DP) or a CP (e.g., CP 343-1 Lean). If there is a break in the network, the redundancy manager ensures that the data is redirected over an alternative network connection in the ring.
PROFINET with STEP 7 V16
64
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.5 Configuring topology
Example for topology The following example shows a combination of different topologies.
Number
Meaning S7-1500 as IO controller S7-300 as IO controller Industrial WLAN with SCALANCE W SCALANCE X 307-3 with seven electrical and three optical ports ET 200SP with integrated 2-port switch SCALANCE X 204 with four electrical ports PROFINET/Industrial Ethernet IE/PB-Link PN IO PROFIBUS DP ET 200S with two optical ports Star topology
Linear bus topology
The combination of topology forms results in a tree topology.
Figure 3-12 Combined topology
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
65
Parameter assignment/addressing 3.5 Configuring topology
Additional information Observe the PROFINET Installation Guideline (http://www.profibus.com/nc/download/installation-guide/downloads/profinet-installationguide/display/) of the PROFIBUS User Organization when planning your PROFINET topology.
For more detailed information, see the SIMATIC NET Twisted Pair and Fiber Optic Networks (http://support.automation.siemens.com/WW/view/en/8763736) manual.
You can find basic information in the Communication with SIMATIC (http://support.automation.siemens.com/WW/view/en/1254686) manual.
3.5.1
Topology view in STEP 7
Introduction
The topology view is one of three working areas of the hardware and network editor. You undertake the following tasks here: Displaying the Ethernet topology Configuring the Ethernet topology Identify and minimize differences between the set and actual topology (online) The topology view in STEP 7 consists of a graphic area and a table area.
PROFINET with STEP 7 V16
66
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.5 Configuring topology
Graphic area
The graphic area of the topology view displays PROFINET devices with their appropriate ports and port connections. Here you can add more PROFINET devices.
The following figure shows the graphic area of the topology view.
Selector: Device view/Network view/Topology view
Toolbar
Graphic area of the topology view
Overview navigation
Selector for the table area of the topology view
Figure 3-13 Graphic area of the topology view
Overview navigation
Click in the overview navigation to obtain an overview of the created objects in the graphic area. By holding down the mouse button, you can quickly navigate to the desired objects and display them in the graphic area.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
67
Parameter assignment/addressing 3.5 Configuring topology
Table area
Topology overview: This displays the Ethernet or PROFINET devices with their appropriate ports and port connections in a table. This table corresponds to the network overview table in the network view.
Topology comparison: Here you can import devices and port interconnections automatically through offline/online comparison or extended Offline/Online comparison into STEP 7.
Selector for the graphic area of the topology view
Selector: Device view/Network view/Topology view
Selector: Topology overview/Topology comparison
Table area of the topology view
Figure 3-14 Table area of the topology view
PROFINET with STEP 7 V16
68
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.5 Configuring topology
3.5.2
Interconnecting ports in the topology view
Requirement
You are in the graphic view of the topology view.
Procedure
To interconnect ports in the topology view, follow these steps:
1. Place the pointer of the mouse on the port you want to interconnect.
2. Press and hold down the left mouse button.
3. Move the pointer.
The pointer now uses the networking symbol to indicate "Interconnecting" mode. At the same time, you see the lock symbol on the pointer. The lock symbol disappears only when the pointer is over a valid target position.
4. Now drag the pointer to the target port. You can keep the left mouse button pressed or release it when performing this action.
5. Now release the left mouse button or press it again (depending on your previous action).
Result
Figure 3-15 Interconnecting ports in the topology view
You have created a port interconnection.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
69
Parameter assignment/addressing 3.5 Configuring topology
3.5.3
Interconnecting ports - Inspector window
Interconnecting ports in the Inspector window
To interconnect ports, follow these steps:
1. In the device or network view, select the PROFINET device or PROFINET interface.
2. In the Inspector window, navigate to the port property "Port interconnection".
When the PROFINET interface is selected, you can find this setting in the Inspector window as follows: "Properties > General > Advanced Options > Port [...] > Port Interconnection."
3. In the "Local port" section, you can find the settings at the local port. In the case of fiberoptic cable you can, for example, set the cable names here.
In the "Partner port" area, select the drop-down list for "Partner port" in order to display the available partner ports and make a selection.
Figure 3-16 Interconnecting ports in the Inspector window in STEP 7
If the PROFINET interface was disconnected, it is automatically connected by this action. In the properties of the subnet you can set whether this subnet should or should not be used for the networking.
PROFINET with STEP 7 V16
70
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.5 Configuring topology
3.5.4
Automatic assignment of devices by offline/online comparison
Overview
During the offline/online comparison, the configured topology is compared with the actual existing topology. Devices identified online are automatically assigned to configured devices as far as this is possible.
Start of availability detection You start the availability detection the first time by clicking the "Compare offline/online" button in the toolbar of the "Topology comparison" tab. You restart availability detection by clicking the "Update" button.
Note The availability detection can take several seconds. During this time, no user input is possible.
Automatic assignment of a PNIO device A PNIO device identified online is automatically assigned to a configured device if the following properties of the two devices match up: Article no. Type PROFINET device name
No automatic assignment
In the following situations, no automatic assignment is possible:
No device can be identified online to match a configured device. (This means that the corresponding columns in the "Online topology" area of the topology comparison table are empty.)
In this case, you should add the already configured device to your system or delete the configured device from the configuration.
A device identified online can be assigned to a configured device, but there are differences in the port interconnections.
In this case, you can Apply the port interconnections identified online manually to the project (Page 72).
A device identified online cannot be assigned to a configured device. (In this case, the corresponding columns in the "Offline topology" area of the topology comparison table are empty.)
In this case, you can Include the devices identified online manually in the project (Page 73).
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
71
Parameter assignment/addressing 3.5 Configuring topology
3.5.5
Apply the port interconnections identified online manually to the project
Requirements
You have run an offline/online comparison in the topology view. The result of this is that at least one device identified online was automatically assigned to a configured device, but that there are differences relating to the interconnection.
Procedure
To adopt one more port interconnections identified online in the project manually, follow these steps: 1. Select the row belonging to the port interconnection. 2. If applicable, select further roles using multi-selection. 3. Select "Apply" > "Use selected" in the shortcut menu.
The content of the corresponding table cells in the "Action" column changes to "Apply". 4. If you have mistakenly prepared too many port interconnections to be included in the
project: Select the rows belonging to the port interconnections you have mistakenly prepared for inclusion in the project using multi-selection. Select "Reset" > "Reset selected" in the shortcut menu. The content of the corresponding table cells in the "Action" column change to "No action". 5. Click the "Synchronize" button.
Result
The port interconnections identified online for the corresponding devices are included in the project. Successful adoption is indicated by the diagnostics icon "Identical topology information" for each port.
Note
If other port interconnections are recognized for a device identified online and these differ from those that exist in the project, adopting these in the project means that the port interconnections that were previously in the project are replaced by those identified online. If no port interconnections are detected for a device identified online, adopting in the project means that all the port interconnections of this device are deleted in the project.
PROFINET with STEP 7 V16
72
Function Manual, 11/2019, A5E03444486-AK
Parameter assignment/addressing 3.5 Configuring topology
3.5.6
Include the devices identified online manually in the project
Requirements
You have run an offline/online comparison in the topology view. The result of this is that at least one device identified online could not be assigned to any configured device.
Procedure
To adopt one more devices identified online in the project manually, follow these steps:
1. For a configured device without an online partner, move the mouse pointer to the "Device/port" column of the online topology.
2. Select the device you want to assign to the configured device from the drop-down list of this box.
3. Repeat the previous steps if necessary for other configured devices without an online partner.
Result
The selected device that was identified online is moved up from the end of the table. Following this, it is in the row of the configured device to which you have just assigned it.
3.5.7
Automatic assignment of devices by advanced offline/online comparison
Overview
With the advanced offline/online comparison, ICMP is also used alongside DCP to be able to detect devices that do not support DCP.
Automatic assignment of devices detected by ICMP
With devices detected by ICMP, no type is available.
With passive devices, no article number is available. For this reason, passive devices can only be assigned automatically if you have not assigned an article number in the configured data and the offline and online IP addresses match.
With switches, automatic assignment is possible if the offline and online article number, IP address and PROFINET device name match.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
73
Diagnostics and maintenance
4
4.1
Diagnostics mechanisms of PROFINET IO
Totally Integrated Diagnostics Concept
All SIMATIC products have integrated diagnostics functions that they can use to detect and remedy faults. The components automatically flag a potential fault in the operation and provide detailed information.
Each individual error or several errors occurring concurrently are transferred from the IO device to the IO controller. If you require the full status of the IO device including any pending errors, you can also read the status directly from the IO device.
The following sections provide basic information on using diagnostics via PROFINET IO. You can find a detailed description of the system diagnostics for S7-1500, ET 200MP, ET 200SP and ET 200AL in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual.
PROFINET with STEP 7 V16
74
Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.1 Diagnostics mechanisms of PROFINET IO
Accessing the status of an IO device with a PG/PC or an HMI device If you are connected to the Industrial Ethernet via a PG/PC with STEP 7 or an HMI device, you can also call up diagnostics information online. This is illustrated by the following graphic.
Number
Description
The IO device detects an error and sends diagnostics data to the IO controller. The IO controller notifies the programming/HMI device. The display of the system diagnostics is updated. In STEP 7, you can read the station status for "Accessible devices" directly from the IO device regardless of the IO controller. This is only possible if the programming device is connected to Industrial Ethernet. This means that you can access diagnostics information during the commissioning phase or for servicing even if the IO controller is not operational.
Figure 4-1 PROFINET IO diagnostics with PG/PC or HMI device
4.1.1
Concept
Diagnostics levels in PROFINET IO
The IO device sends all error messages that occur to the IO controller. The scope and volume of diagnostics information varies according to the level of diagnostics data evaluation and the PROFINET devices you are using.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
75
Diagnostics and maintenance 4.1 Diagnostics mechanisms of PROFINET IO
Diagnostics levels You can evaluate diagnostics data at different levels. The number and type of channels is selected, for example, at the diagnostics level 4. The following figure shows the diagnostics levels with PROFINET IO.
Figure 4-2 Diagnostics levels with PROFINET IO
PROFINET with STEP 7 V16
76
Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.1 Diagnostics mechanisms of PROFINET IO
Representation of diagnostics levels in the device view in STEP 7 The following figure shows the representation of the PROFINET device model in the device view of STEP 7, based on the example of a distributed I/O system ET 200MP:
Number
Description Level 1: Level 2:
Error(s) in the device Error(s) in the module
Figure 4-3 Diagnostics levels in the device view of STEP 7
Which PROFINET nodes support the extended PROFINET diagnostics?
An overview of the PROFINET nodes that support extended PROFINET diagnostics and of what you have to configure is provided in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/23678970).
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
77
Diagnostics and maintenance 4.2 Diagnostics via LEDs
4.2
Diagnostics via LEDs
LEDs for diagnostics on PROFINET
Each port of a PROFINET interface of a SIMATIC device has one LED.
The following table shows a summary of the meaning of these LEDs in the S7-1500, ET 200MP, ET 200SP and ET 200AL systems.
Table 4- 1 S7-1500, ET 200MP, ET 200SP, ET 200AL: LEDs for diagnostics on PROFINET
LED image Meaning
S7-1500 ET 200MP ET 200SP
ET 200AL
LED off
LED green
LED flashes green
LED flickers yellow
There is no Ethernet connection between the PROFINET interface of the PROFINET device and the communication partner. No data is currently being sent/received via the PROFINET interface. There is an Ethernet connection between the PROFINET interface of your PROFINET device and a communication partner. The "LED flashing test" is being performed.
Data is currently being received from or sent to a communications partner on Ethernet via the PROFINET interface of the PROFINET device.
LINK/TX/RX LED
X
X
X
X
X
X
X
X
LK LED X
P1 Link LED P2 Link LED
X
X
X
X
X
-
-
Additional information
You can find a detailed description of all LEDs of the module with cause of the error and remedies in the relevant documentation for the module.
PROFINET with STEP 7 V16
78
Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.3 Diagnostics via the display of the S7-1500 CPUs
4.3
Diagnostics via the display of the S7-1500 CPUs
Display
The S7-1500 CPU has a display and operating keys. The display of the CPU shows you the control and status information in different menus. You use operating keys to navigate through the menus and make a variety of settings in the process.
Diagnostics via the display The following indicators can be evaluated for diagnostics purposes on the display: Error and alarm texts (system diagnostics, alarm messages) Module status for central and distributed modules In the following example of a display of the CPU 1516-3 PN/DP, you can see a warning on the diagnostics icon and an exclamation mark on the icon for module.
Figure 4-4 Display of overview
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
79
Diagnostics and maintenance 4.3 Diagnostics via the display of the S7-1500 CPUs
Module status
To show the module status, navigate on the display through the menu items "Module" > "PROFINET I/O (X1)" > "Station" > "Slot" > "Status" > "Module status".
The module status indicates that a fault has occurred in the module. The "lower-level status" is the status of the module in the diagnostics level below this. In the example, the status is "good", i.e., the fault is not in the lower diagnostics level submodule or channel, but instead in the module.
Figure 4-5 Display of module status
PROFINET with STEP 7 V16
80
Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.3 Diagnostics via the display of the S7-1500 CPUs
Error and alarm texts You can show diagnostics buffer entries and alarm messages for the relevant automation system on the display. To show the diagnostics buffer entries of the CPU, navigate on the display via the menu items "Diagnostics" > "Diagnostics buffer".
Figure 4-6 Display of diagnostics buffer
To show the alarm messages of the automation system, navigate through the menu items "Diagnostics" > "Alarms" > "Alarm text" on the display.
Note Updating the alarm display The display shows the currently read status of the CPU in static form, the display is not automatically updated. The alarm display is updated after it has been exited and opened again. You set the automatic updating of the diagnostics information under: "Display" > "DiagnosticRefresh".
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
81
Diagnostics and maintenance 4.3 Diagnostics via the display of the S7-1500 CPUs
Figure 4-7 Display of alarms
Figure 4-8 Display of alarm message
Additional information You can find the description of the operation and functions of the display in the SIMATIC S7-1500 Display Simulator (http://www.automation.siemens.com/salesmaterialas/interactive-manuals/getting-started_simatic-s7-1500/disp_tool/start_de.html).
PROFINET with STEP 7 V16
82
Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.4 Diagnostics via Web server
4.4
Diagnostics via Web server
The CPUs belonging to the S7 family have their own integrated Web server with a wide range of functions.
The following diagnostics options are available to you:
Start page with general CPU information
Information on diagnostics
Contents of the diagnostics buffer
Module information
Alarms
Information about communication
PROFINET topology
Motion Control diagnostics
Trace
Contents of the diagnostic buffer
Module status
Actual topology of the PROFINET system
Set topology of the PROFINET system (from the configuration)
Set topology and actual topology - graphic view Requirements for displaying the set and actual topology:
You have configured the PROFINET ports in the topology editor of the hardware and network editor of STEP 7.
You have loaded the entire project with STEP 7 in the CPU.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
83
Diagnostics and maintenance 4.4 Diagnostics via Web server
The following shows an example of the graphic view.
Figure 4-9 Topology - graphic view via the Web server
Meaning of the colored connections in the set/actual topology:
Table 4- 2 Meaning of the colored connections in the set/actual topology:
Connection green red yellow
Meaning
Set topology
The current actual connection matches the configured set connection.
The current actual connection does not match the configured set connection (e.g., port interchanged).
The connection cannot be diagnosed. Causes:
Actual topology detected connections
-
-
· The communication to an IO device has been disrupted (e.g., cable removed)
· Connection to a passive component
· Connection to PROFINET devices of another IO controller or PROFINET system
PROFINET with STEP 7 V16
84
Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.4 Diagnostics via Web server
Configured and accessible PROFINET devices
Configured and accessible PROFINET devices are displayed dark-gray. Connections show the ports through which the PROFINET devices of a station are connected.
Configured but not accessible PROFINET devices
The configured but not accessible PROFINET devices are displayed in pink with red border (e.g., device has failed, cable disconnected).
Disabled devices
All disabled, configured PROFINET devices are displayed light-gray.
Interchanged ports
Interchanged ports are marked red in the set topology view. The currently connected ports are displayed in the actual topology, the configured set connection in the set topology.
PROFINET devices of another PROFINET IO system
In the set topology:
A PROFINET device of another PROFINET IO system is displayed with a green connection (or red connected if the ports have been interchanged), when it is directly
adjoining a configured and accessible PROFINET device and it is also accessible.
When the PROFINET device of another PROFINET IO system is not accessible, a yellow connection line is displayed.
The connection between two PROFINET devices that both belong to a different PROFINET IO system, cannot be determined and is always displayed in yellow.
In the actual topology:
A PROFINET device of another PROFINET IO system is only displayed if the PROFINET device is in direct proximity to a configured PROFINET device. The PROFINET device is displayed light-gray and with dashed line.
For PROFINET devices of a different PROFINET IO system, no status display is shown on the device head.
Representation of faulty neighbor relations
The devices whose neighbor relations cannot be read out completely or correctly are displayed light-gray with red border.
Additional information
The tabular view of the actual topology and the status overview of the PROFINET devices in the project are possible.
You can find these views, additional topology examples, and detailed information on the operation and the functions of the Web server in the Web server (http://support.automation.siemens.com/WW/view/en/59193560) manual.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
85
Diagnostics and maintenance 4.5 Online diagnostics with STEP 7
4.5
Online diagnostics with STEP 7
For PROFINET, you have the following options to evaluate diagnostics in STEP 7:
Online & diagnostics - Devices & networks
Online & diagnostics - diagnostics of PROFINET ports
Online & diagnostics network view
In the hardware and network editor (launched from the "Project tree" by double-clicking "Devices & networks"), you can get an overview of the current state of your system by clicking on the "Go online" button. It also shows the configuration information (for example, non-configured modules). This option is also available in the topology view in similar form.
Schematic drawing of the network view (online):
Figure 4-10 Online & diagnostics network view
PROFINET with STEP 7 V16
86
Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.5 Online diagnostics with STEP 7
Online & diagnostics device view In STEP 7, you can display an overview of the modules in which faults have occurred. To do this, select the menu command "Online > Online & diagnostics". Once you are connected, you can see the status of the accessible devices in the project tree.
Double-click the device which displays an alarm message to access the faulty module directly. The device view is opened in the work area. In the device view of the device that reports the fault you can see directly in which module the fault occurs.
Open the "Diagnostics" tab and the subordinate "Device information" tab in the Inspector window for a more detailed error description.
Schematic drawing of the device view (online):
Figure 4-11 Online & diagnostics device view
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
87
Diagnostics and maintenance 4.5 Online diagnostics with STEP 7
Diagnostics of PROFINET ports If you select "PROFINET interface > Ports" in the Diagnostics area in the online & diagnostics device view of a PROFINET device, the ports of the PROFINET interface are listed in a table. The table provides you with the following information about the ports of the PROFINET interface. Name Status Settings Operating mode
Figure 4-12 Diagnostics of PROFINET ports in STEP 7
Additional information You can find information on the system diagnostics for S7-1500, ET 200MP, ET 200SP and ET 200AL in the Diagnostics (http://support.automation.siemens.com/WW/view/en/59192926) function manual and online help for STEP 7.
PROFINET with STEP 7 V16
88
Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.6 Extended maintenance concept
4.6
Extended maintenance concept
Extended maintenance concept
The PROFINET interfaces with integrated switch of the SIMATIC devices support the fourlevel diagnostics concept in accordance with PROFINET specification Version V2.3 or higher with the following status:
Table 4- 3 Classification of the diagnostic status
Diagnostic status Good
Symbol Green checkmark
Severity of the error
Maintenance required Maintenance demanded Bad
Green wrench Yellow wrench Red wrench
The aim of the diagnostics concept is the early detection and elimination of potential faults before they cause a production outage.
Other status information is defined in addition to the Good (no fault) and Bad (fault) status information for a PROFINET device.
The maintenance information is generated with the following system alarms:
Maintenance required (symbolized by a green wrench) and
Maintenance demanded (symbolized by a yellow wrench)
The times at which the two system alarms are generated can be customized for most wear parameters.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
89
Diagnostics and maintenance 4.6 Extended maintenance concept
Example: Maintenance demanded for a PROFINET cable The following graphic illustrates how diagnostics information is exchanged when the transmission quality on the optical cable decreases due to ageing, for example. In this example, the scenario is considered after a maintenance required has already been diagnosed.
Number
Description
The system reserve of the fiber-optic cable drops below 0 dB. Both the ET 200S PN FO and the switch send the maintenance demanded alarm to the IO controller. Based on the interrupts, the IO controller detects the maintenance demanded from the switch and from the IO device. The module information data is updated in the IO controller and the corresponding error OBs are called. Note: To be able to start the error OBs in the IO controller, the "Call the user program if communication errors occur" property must be selected in STEP 7 for the relevant IO controller. In STEP 7 (on the programming device/PC), the maintenance demanded message is indicated on the IO device and at the switch by a yellow wrench symbol. STEP 7 can also read out detailed information directly from the switch.
Figure 4-13 Maintenance demanded for a PROFINET cable
PROFINET with STEP 7 V16
90
Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.7 Diagnostics of the network topology
4.7
Diagnostics of the network topology
Availability
As an open standard, you can use any SNMP based systems or software solutions for diagnostics in PROFINET.
Network diagnostics
The network management protocol SNMP (Simple Network Management Protocol) uses the wireless UDP transport protocol. It consists of two network components, similar to the client/server model. The SNMP manager monitors the network nodes and the SNMP clients collect the various network-specific information in the individual network nodes and store it in a structured form in the MIB (Management Information Base). This information allows a network management system to run detailed network diagnostics.
MIB
The MIB (Management Information Base) is the database of a device. SNMP clients access this database in the device. The S7 device family supports the following standard MIBs:
MIB II, standardized in the RFC 1213
LLDP-MIB, standardized in the international standard IEC 802.1AB
LLDP-PNIO-MIB, standardized in the international standard IEC 61158-6-10
You will find the MIBs for ET 200 interface modules and couplers with PROFINET interface in this product note (https://support.industry.siemens.com/cs/ww/en/view/109770525).
Detecting the network topology
LLDP (Link Layer Discovery Protocol) is a protocol that is used to detect the closest neighbor. LLDP enables a device to send information about itself and to receive information from its neighbor devices. This information is then saved in the LLDP MIB, for example, and can be queried using SNMP. This information allows a network management system to determine the network topology.
Use of SNMP (Simple Network Management Protocol)
SNMP can be used as follows:
By users to integrate network diagnostics into a central HMI/SCADA system using the SIMATIC NET OPC server
By the IT administration of machine and plant operators to monitor their Industrial Ethernet network using standard network management systems.
By the IT administration, to monitor the automation network, alongside the office network, using standard network management systems.
Use of SNMP in the SIMATIC NET environment
SNMP-compliant devices from the SIMATIC NET family can be monitored and operated via a conventional standard Internet browser. The management system known as web-based management offers a wide range of device-specific information (network statistics, status of redundant supply, for example).
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
91
Diagnostics and maintenance 4.8 Diagnostics in the user program
4.8
Diagnostics in the user program
4.8.1
Diagnostics and configuration data records
Diagnostics mechanism
The IO device outputs a diagnostics interrupt to the IO controller when it detects faults such as wire break on an IO module. This interrupt calls a corresponding organization block in the user program (diagnostics interrupt OB82), in order to generate a defined (programmed) response to the fault and passes a diagnostics data record.
Diagnostics data records in PROFINET IO
There are two different types of diagnostics data record:
1. Channel diagnostics data records
Channel diagnostics data records are generated if a channel is in an error state and / or has triggered an interrupt.
A diagnostics data record of length 0 is returned if there is no fault.
2. Vendor-specific diagnostics data records
The structure and size of vendor-specific diagnostics data records depend on the vendor's settings.
For information about vendor-specific diagnostics data records, refer to the appropriate device manual.
PROFINET with STEP 7 V16
92
Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.8 Diagnostics in the user program
Addressing levels of diagnostics data records Diagnostics and configuration data is evaluated at the following addressing levels: Device level AR (Application Relation) API (Application Process Identifier) Slot Subslot A group of diagnostics and configuration data records are available for each address level (exception: device level always 0xF80c). In HEX representation, the individual groups of data records are distinguished by the first letter of the data record number.
Figure 4-14 Addressing levels of diagnostics data records
The information for each IO device (addressing level AR), module (addressing level slot) or submodule (addressing level subslot) is always transferred in separate diagnostics or configuration data records. The data record returns diagnostics data or configuration data for one or more subslots, slots and APIs, depending on the addressing level.
Note The diagnostics information is only generated for configured modules / submodules / channels.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
93
Diagnostics and maintenance 4.8 Diagnostics in the user program
Library for PROFINET data records The "LPNDR" block library contains various function blocks. You can use these blocks to read out various device and status information from a PROFINET device and write parameters. You can execute the following functions using the library blocks: Read device information: Information about the interface, e.g. IP and MAC address Information about the device interface, e.g. status, medium, name Information about the link status of the interfaces, e.g. link down, link up Information about the role of the device for MRP, e.g. client, manager Information about the port statistics, e.g. number of received bytes Read the MRP status Modification of the parameters of analog input module of the ET 200SP in runtime, e.g. in order to disable/enable the channel diagnostics. The finished functions are freely adaptable and can therefore be used universally. The "LPNDR" block library with an example project can be found on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109753067).
4.8.2
Evaluate diagnostics in the user program
Diagnostics in the user program
For PROFINET IO, a cross-vendor structure of data records with diagnostics information applies. Diagnostics information is created only for channels on which a fault has occurred. With PROFINET, there are two basic ways to obtain diagnostics information.
PROFINET with STEP 7 V16
94
Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.8 Diagnostics in the user program
1. Evaluating the diagnostics status Read out the diagnostics of your PROFINET IO system using the instructions "DeviceStates" and "ModuleStates" to localize faulty stations / modules or station / modules with maintenance demanded or maintenance required within a PROFINET IO system. The instruction RDREC (read data record) is then used to read various diagnostics data records directly from the module concerned and thus obtain detailed information about the error.
Number
Description
All individual errors are collected in a single data record on the interface module. In your user program, the instruction "RDREC" reads the entire station status asynchronously directly from the IO device.
Figure 4-15 Example: Evaluating diagnostics data records with the instruction "RDREC"
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
95
Diagnostics and maintenance 4.8 Diagnostics in the user program
2. Evaluation of interrupts When the error OB (OB 82) is called, the OB's start information provides you with information on the cause and location of the error. Detailed information on the error event can be obtained in the error OB using the instruction "RALRM" (read additional interrupt information).
Number
Description
Every error is sent to the IO controller individually as channel diagnostics information in the form of an interrupt. In the IO controller, the module status data is updated automatically and the error OB (OB 82) is started. In your user program in the error OB (OB 82), the instruction "RALRM" reads the error synchronously from the IO controller without addressing the IO device.
Figure 4-16 Diagnostics with OB 82 and the instruction "RALRM"
Instructions and OBs You will find information on the instructions and OBs in the STEP 7 online help.
PROFINET with STEP 7 V16
96
Function Manual, 11/2019, A5E03444486-AK
4.9
Maintenance
Diagnostics and maintenance 4.9 Maintenance
4.9.1
I&M data (identification and maintenance)
Definition and properties
Identification and maintenance data (I&M) is information saved to module memory in order to provide support when:
Checking the plant configuration
Locating hardware changes in a plant
Identification data (I data) is module information (some of which may be printed on the module housing) such as the order and serial number. I data is read-only vendor-specific module data.
Maintenance data (M data) is plant-specific information such as the location identifier and installation date. M data is created during configuration.
The modules can be uniquely identified in online mode by means of the I&M data.
Further information
To find out whether and to what extent a PROFINET device supports I&M data, refer to the documentation of the relevant device.
4.9.2
Loading I&M data to PROFINET IO devices and your modules
Which I&M data can be loaded to PROFINET IO devices and your modules?
You can load I&M 1 data (plant designation and location identifier) and/or I&M 2 data (installation date) and/or I&M 3 data (additional information) to the actual hardware.
Requirements
In the project settings (Options > Settings, Hardware configuration > Compiling and downloading), the option "Download I&M data" must be enabled.
There is an online connection to the PROFINET IO devices and the modules to which you want to load I&M data.
You have entered the I&M data you want to download in the properties of the respective PROFINET IO devices and your modules (Inspector window: "Properties" tab > "General" tab, Settings > Identification & Maintenance).
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
97
Diagnostics and maintenance 4.9 Maintenance
Where do I specify which I&M data is downloaded to which PROFINET IO devices? You specify which I&M data you want to download to which PROFINET IO devices in the "Load preview" dialog. You will find the following alternatives in the drop-down list of the "Identification and maintenance data (I&M)" row: Load nothing The check boxes for all PROFINET IO devices as well as the check boxes for the loadable I&M data are cleared. No I&M data is transferred to the actual hardware during loading with this setting. Load data The check boxes for all PROFINET IO devices as well as the check boxes for the loadable I&M data are selected. The respective I&M 1, I&M 2 and I&M 3 data is transferred to all PROFINET IO devices during loading with this setting. Load selected You select the check boxes of those PROFINET IO devices to which you want to load I&M data. You also select the check boxes of the identification data you want to load. With this setting, you transfer the selected I&M data to the selected PROFINET IO devices during loading.
Note Language dependency of the I&M data to be loaded The I&M data are loaded to the real hardware in the form that you specified in the properties of the relevant PROFINET IO devices and your modules. There is no language dependency.
4.9.3
4.9.3.1
98
Asset management
Further information about asset management at PROFINET Operation of machines and plants without a detailed knowledge of devices and assets is difficult to imagine. Maintenance requires data for this data that is extensive and up-to-date as far as possible. The requirement of greater transparency with regard to the data made available by plant components has been fulfilled by PROFIBUS & PROFINET International (PI): The identification and maintenance data familiar since PROFIBUS times have been extended. The current PROFINET fulfills this requirement through the definition of a special data record: the Asset Management Record (AMR). The aim of this definition is to enable you to acquire all the components to be maintained online - and not only those components that can be addressed and accessed through the PROFINET device model (Device / Module / Submodule). PROFINET now also reaches non-PROFINET components!
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.9 Maintenance
Assets general and asset management data records
Assets are components (hardware and software / firmware) of a machine, for example a laser welding machine, or a plant.
A large number of these device components can already be identified through tried-andtested I&M functions or corresponding data records (I&M0 to I&M5) in the PROFINET context: The device itself as well as its modules and submodules. Meaning all components that can be addressed through the PROFINET device model.
Components that cannot be addressed via the PROFINET device model, but whose data it should be possible to acquire online for operation and maintenance, can be identified through asset management functions. This asset management data (short: AM data) is stored in a defined structure in a special data record, the asset management record (AMR) mentioned above.
The PROFINET Guideline "Identification & Maintenance Functions" differentiates here between I&M functions (I&M data) and asset management functions (AM data): The following sections only deal with the AM data.
The components that can be read additionally online through asset management data records include both hardware components, such as backplane bus modules of a device as well as firmware components such as a drive control unit with own versioning.
Application examples
Importing asset management records enables you to read the following information during installation or operation, for example:
Are only approved devices being used (whitelist check)?
A firmware update is due. Obtain a fast overview: Which devices or components are affected and have to be upgraded?
Making asset management data available
The concept for the asset management of PROFINET devices stipulates that the manufacturers of PROFINET devices have to ensure that non-PROFINET automation components are made available through an asset management record. This data record is assigned to the PROFINET device.
In contrast to a "standard" IO device, with an I-device the project engineer has to make the asset management record available. In this case, the central modules of the I-device are assets. From the perspective of PROFINET, these central modules are not visible from the point of view of the higher-level IO controller. The higher-level IO controller only "sees" the transfer areas through which it exchanges IO data with the I-device.
The principle of this provision is explained in the section.
PROFINET with STEP 7 V16
Function Manual, 11/2019, A5E03444486-AK
99
Diagnostics and maintenance 4.9 Maintenance
Reading asset management data
The asset management record has the index 0xF880 and is read with standard PROFINET mechanisms by the user of the records, for example a tool or program for evaluating these data.
A user program in the S7-1500 IO controller, for example, can read out the AMR of an IO device with the RDREC instruction (Index 0xF880).
It is not possible to write to this data record.
Further information
Whether and to which extent a PROFINET device supports asset management data, meaning whether it makes an AMR available, is specified in the documentation of the respective device.
4.9.3.2
Content and structure of an asset management record
Basic structure of the asset management record
You are first provided with an overview of the general structure of the record. The following table describes the framework within which the asset management data blocks are embedded. Each data block represents an asset, a terminal block for example.
Element of the data structure Header AssetManagementData
Designation according to IEC 61158-6-10
BlockType BlockLength
AssetManagementInfo AssetManagementBlocks (n)
BlockVersion NumbersOfEntries
AssetManagementBlock 1 AssetManagementBlock 2 ... AssetManagementBlock n
Code
0x0035 Number of bytes without counting the bytes for BlockType and BlockLength 0x0100 Number of AssetManagementBlocks See the table below
Data type / length in bytes UINT / 2 UINT / 2
UINT / 2 UINT / 2
100
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.9 Maintenance
Structure of asset management blocks
Each AssetManagementBlock contains identification data and localization information for an asset. An AssetManagementBlock has a substructure with basic characteristics described below.
The header of an AssetManagementBlock contains the coded information about which of the three possible AM data compilations the data record contains. Devices make a suitable BlockType available in accordance with the various device types:
Complex devices with information about the hardware and firmware (BlockType "AM_FullInformation")
Complex devices with information about the hardware (BlockType "AM_HardwareOnlyInformation")
Devices with information about the firmware (BlockType "AM_FirmwareOnlyInformation")
The differentiation provides an efficient data structure below the header. Nevertheless, the data record can have a considerable size (maximum of 64 KB, depending on the number of assets that the IO device supplies).
Table 4- 4 Structure of AssetManagementBlock
Element of the data structure
Header AssetManagementBlock
Designation according to IEC 61158-6-10
BlockType
BlockLength
AssetManagementBlock
(Structure depends on the BlockType. Here it is shown using AM_FullInformation as an example)
BlockVersion Padding Padding IM_UniqueIdentifier
AM_Location
IM_Annotation
Code
0x0036 (AM_FullInformation) 0x0037 (AM_HardwareOnlyInformation) 0x0038 (AM_FirmwareOnlyInformation) Number of bytes without counting the bytes for BlockType and BlockLength 0x0100 0x0000 (padding byte) 0x0000 (padding byte) Manufacturer-generated Universal Unique Identifier (UUID) conforming to ISO/IEC 9834-8. Used as a reference key to uniquely identify this asset. Example: 550c5300-d34a-22b4-11d35533991111b3 Description of the location of the asset: Either slot-oriented ("Slot and SubslotNumber format") or hierarchical ("Twelve level tree format"). See following description Manufacturer-specific notation Example: "Terminal block, Type xyz123 ". 64 bytes are always used. Spaces are used for padding if the string is shorter.
Data type / length in bytes UINT / 2
UINT / 2 UINT / 2 USINT / 1 USINT / 1 Array of Byte / 16
Array of Byte / 16
Array of Char / 64
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
101
Diagnostics and maintenance 4.9 Maintenance
Element of the data structure
Designation according to IEC 61158-6-10 IM_OrderID
AM_SoftwareRevision (not at AM_HardwareOnlyInformation)
AM_HardwareRevision (not at AM_FirmwareOnlyInformation)
IM_Serial_Number
IM_Software_Revision (not at AM_HardwareOnlyInformation)
Code
Data type / length in bytes
Manufacturer-specific article number
Array of Char / 64
Example: "6ES7 131-6BF00-0BA0 ".
64 bytes are always used. Spaces are used for padding if the string is shorter.
Manufacturer-specific SW version
Array of Char / 64
Example: "V6.3.8 ".
64 bytes are always used. Spaces are used for padding if the string is shorter.
If the asset supports IM_Software_Revision, the AM_SoftwareRevision is padded with spaces.
Manufacturer-specific hardware version Array of Char / 64
Example: "A4 ".
64 bytes are always used. Spaces are used for padding if the string is shorter.
If the asset supports IM_Hardware_Revision, the AM_HardwareRevision is padded with spaces.
Manufacturer-specific unique production- Array of Char / 16 related number.
The characters come from the visible range (0x20 ... 0x7E), no control characters.
Example: "A78C-1C82 ".
16 bytes are always used. Spaces are used for padding if the string is shorter.
Software version, follows a strict structure (SW version prefix, for example "V", digits for functional extension, digits for BugFix, digits for internal change).
Example: 'V' 0x01 0x2 0x3
Array of Byte / 4
Prefix (character "V", "R", "P", "U", or "T"), then 3 digits "0" to "9"
If AM_SoftwareRevision is padded with spaces, you should evaluate IM_Software_Revision.
If the asset does not support any hardware, the coding 'V' 0x00 0x00 0x00.
102
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.9 Maintenance
Element of the data structure
Designation according to IEC 61158-6-10 AM_DeviceIdentification
AM_TypeIdentification
IM_Hardware_Revision (not at AM_FirmwareOnlyInformation)
Code
Data type / length in bytes
Identification of the device. The structure Array of Byte / 8 is as follows:
AM_DeviceIdentification.DeviceSubID
(for SIEMENS e.g. 0x0000)
AM_DeviceIdentification.DeviceID
(Device ID from manufacturer, 0x0000 to 0xFFFF)
AM_DeviceIdentification.VendorID
(Example for Siemens assets: 0x002A)
AM_DeviceIdentification.Organization: Example for Siemens assets: 0x0000 (PROFINET)
Manufacturer-allocated type identification:
UINT / 2
0x0000: Unspecified
0x0001: Controller (PLC)
0x0002: PC-based
0x0003: IO module, IO submodule
0x0004: Communications module / submodule
0x0005: Interface module / submodule
0x0006: Active network component
0c0007: Media attached unit (bus adapter)
0x0100 to 0x7FF: Manufacturer-specific
Version of the hardware (0x0000 to 0xFFFF)
UINT / 2
Example: 0x0003
If AM_HardwareRevision is padded with spaces, you should evaluate IM_Hardware_Revision.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
103
Diagnostics and maintenance 4.9 Maintenance
AM_Location
Asset management at PROFINET supports two formats for coding the location of an asset:
Slot-oriented format ("Slot and SubslotNumber format")
Hierarchical format ("Twelve Level Tree format" abbreviated LT format)
Assets that are part of the PROFINET device use the slot-oriented format. These assets are bound completely to the PROFINET modules and submodules.
Assets that are located outside the PROFINET device use the hierarchical format (LT format) for coding the location of an asset.
These assets are localized by their tree level. The tree level begins with Level 0. The value of Level 0 provides information about the proximity to the PROFINET device:
If the asset is connected to a module that can be addressed through the PROFINET device model, Level 0 has the value 0. The subsequent levels (Level 1 to Level 3) then have the meaning of slot address, subslot address and channel number. If further assets are connected to this asset, the next Level 4 is used. The limit is reached at Level 11.
If the asset belongs to a PROFINET device but is not connected to a module that can be addressed through the PROFINET device model, Level 0 has a value between 1 and 0x1FF. An example of such an asset is a power supply unit in the PROFINET device. If a further asset is connected to this power supply unit, for example a sensor, the next tree level is used to localize this sensor (Level 1).
If the asset is located outside the PROFINET device, but, for example, belongs to a machine into which the PROFINET device is installed, Level 0 has a value between 0x200 and 0x3FE.
The value 0x3FF for a tree level shows that this tree level is not used. This means that no further asset is connected. In this case, all the lower tree levels down to Level 11 must also have this value.
104
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.9 Maintenance
Example AM_Location slot-oriented A rack and the terminal blocks located on it each supply AM data. The slot assignments are shown in the figure.
Figure 4-17 Example of assets with slot-oriented AM_Location coding.
Code the AM_Location as an asset for each module as follows: Bit 0 7: AM_Location.Structure = 0x02 (coding "Slot and SubslotNumber format") Bit 8 15: AM_Location.Reserved1 = 0x00 (padding byte) Bit 16 31: AM_Location.BeginSlotNumber = 2 (the "Rack" asset begins from Slot 2 on) Bit 32 47: AM_Location.BeginSubslotNumber = 0xFFFF (the asset encompasses all the subslots of Slot 2. Otherwise you specify the no. of the subslot at which the asset begins) Bit 48 63: AM_Location.EndSlotNumber = 4 (the asset ends at Slot 4) Bit 64 79: AM_Location.EndSubslotNumber = 0xFFFF (the asset encompasses all the subslots of Slot 4. Otherwise you specify the no. of the subslot at which the asset ends) Bit 80 95: AM_Location.Reserved2 = 0x0000 (padding byte) Bit 96 111: AM_Location.Reserved3 = 0x0000 Bit 112 127: AM_Location.Reserved4 = 0x0000
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
105
Diagnostics and maintenance 4.9 Maintenance
Example AM_Location level-oriented A complex sensor is connected to an IO module (Slot 5, Subslot 1, Channel 1). Two simple sensors, in turn, are connected to the complex sensor. The module can be addressed within the PROFINET device model. Level 0 therefore has the value 0x0000. The next level (Level 1) is specified by the assigned slot. This is followed by the further levels for the subslot and channel and, if appropriate, further subordinate layers.
Figure 4-18 Example of assets with hierarchical AM_Location coding.
Detailed coding for the example: Bit 0 7: AM_Location.Structure = 0x01 (LT format) Bit 8 17: AM_Location.Level0 = 0x000 (assets that are assigned to modules always have the Level 0 value 0x000) Bit 18 27: AM_Location.Level1 = 0x005 (Slot 5) Bit 28 37: AM_Location.Level2 = 0x001 (Subslot 1) Bit 38 47: AM_Location.Level3 = 0x001 (Channel 1) Bit 48 57: AM_Location.Level4 = 0x3FF (coding for "Level not used") Bit 58 67: AM_Location.Level5 = 0x3FF (coding for "Level not used") ... Bit 118 127: AM_Location.Level11 = 0x3FF (coding for "Level not used") Notation used in the screen for the LT coding of complex sensors: 0.5.1.1 The following correspondingly applies for the remaining sensors: LT coding for simple Sensor 1 at complex sensor: 0.5.1.1.1 LT coding for second simple Sensor 2 at complex sensor: 0.5.1.1.2
106
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.9 Maintenance
4.9.3.3
Asset management data record for I-devices
With STEP 7 (TIA Portal) as of V15 and with S7-1500 CPUs as of firmware V2.5.2, you can compile an asset management data record via a user program. Configured as an I-device, these CPUs then supply the data from centrally plugged modules to a requesting IO controller as assets.
"S7-1500 CPUs" also refers to the CPU variants S7-1500F, S7-1500T, S7-1500C, S7-1500 SW Controller, S7-1500pro CPUs and ET 200SP CPUs.
Asset management records for I-devices
I-devices often represent machines. The PROFINET IO controller to which the I-device is assigned only sees the PROFINET interface (also configured as an IO device) and the transfer areas of the I-device configured by the machine manufacturer. The local modules of the I-device are not visible or cannot be accessed.
The assigned IO controller can read the central modules as assets of the I-device by means of an asset management record that the user program of the I-device compiles.
Figure 4-19 Assets of an I-device
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
107
Diagnostics and maintenance 4.9 Maintenance
Requirement
S7-1500 CPU as of firmware V2.5.2, configured as I-device
STEP 7 (TIA Portal) as of V15
If an IO controller is to read the asset management record:
The PROFINET IO controller is programmed correspondingly to read an asset management record.
For a SIMATIC IO controller, for example, you call a read instruction (RDREC) with record index 0xF880. The instruction addresses any submodule of the I-device, for example the first configured transfer area submodule.
108
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.9 Maintenance
Basic procedure The following steps are fundamentally required to create the requirements so that an Idevice can make its local modules available as an asset management record to a requesting IO controller: 1. Make the settings in the properties of the PROFINET interface of the CPU. Activate "IO device" operating mode Activate the "Activate asset management using user program" option PROFINET interface forwards a request of an IO controller to the user program of the I-device for reading the asset management record only if the option is selected.
Figure 4-20 Activating asset management using a data record
2. Configure the program routine for compiling the asset management record. The program part collects the required I&M0 data of the plugged central modules and stores them in the corresponding fields of the data record structure of the asset management record.
3. Configure the program part for coordinating the data record provision: For this, call the instruction PRVREC (Provide Record) in accordance with the following templates in the corresponding modes:
Cyclic calling (for example in the cycle OB) of the PRVREC instruction with Mode 0, in order to recognize the AMR request.
When the AM record request is recognized, the PRVREC program has to acknowledge within one second that the request has been recognized. This means that PRVREC must be called with the Mode 2, and with the required AM record. If the I-device does not adhere to the time frame, the I-device acknowledges the record request of the IO controller as negative.
Particular aspect for configuration of the PRVREC call: PRVREC has to be called with F_ID = 0. This codes that this is an IO-device-specific data record. The SLOT and SUBSLOT output parameters therefore also return the value 0.
Within 10 seconds the AM record now has to be completed and PRVREC be called with Mode 3 (positive response to the IO controller with provision of the AM record). If the I-device does not adhere to the time frame, the I-device acknowledges the record request of the IO controller as negative.
A detailed description of the PRVREC instruction and possible error codes for evaluating the function can be found in the online help of STEP 7 (TIA Portal).
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
109
Diagnostics and maintenance 4.9 Maintenance
Compilation of the asset management record
You have various possibilities for compiling the asset management record for an I-device:
Recommendation: The Siemens Industry Online Support makes an application available to you that helps you to compile the asset management record. The data area of the asset management record is divided in two. The first part consists of an automatically determined area that packages the IM0 data of the slots of the I-device into an asset management block. The second part consists of the user-specific asset management blocks. You configure the user-specific asset management blocks based on pre-configured asset management record structures, fill them with information and make them available to the application. The application performs the following:
The application determines the required size of all the asset management blocks.
The application fills the data block in accordance with the specifications of an asset management record with the automatically determined asset management blocks and your user-specific asset management blocks.
The application makes this asset management record available to the higher-level IO controller.
The application is described in this application example (https://support.industry.siemens.com/cs/ww/en/view/109748894)
You create the asset management record yourself. The following section describes how you can compile an asset management record for an I-device yourself. The concept assumes you yourself determine the I&M data for each centrally plugged module and fill the asset management record with this information. The I&M0 data of a module contains basic information about the module such as the manufacturer's code, article number, serial number, hardware and firmware version. These are the data that are also required in the AM record for an asset.
Determine the I&M data of centrally plugged modules
The central structure consists of an optionally plugged power supply unit (Slot 0), followed by the I-device CPU (Slot 1), and then followed by the further modules, such as digital modules, analog modules, etc. (as of Slot 2).
You determine the I&M data with the "Get_IM_Data" instruction for the plugged modules with exception of the CPU:
To assign parameters for the "Get_IM_Data" instruction, you require the hardware identifier (LADDR input parameter). You determine the hardware identifier for each occupied slot with the "GEO2LOG" instruction (Determine hardware identifier from slot).
Summary of the theoretical steps:
1. In a loop, determine the hardware identifiers of the plugged modules with the "GEO2LOG" instruction.
2. For each hardware identifier found, determine the I&M data by using the "Get_IM_Data" instruction and store these data in a data block that you address with the input parameter DATA. Use ARRAY of BYTE for the data storage. This corresponds to the description of the AM record contents in the preceding section.
110
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Diagnostics and maintenance 4.9 Maintenance
Forming an AM record with the determined I&M data
The following sections are based on the description of the fundamental structure of the AM record, see the preceding section.
Since each module of an S7-1500 contains hardware and firmware information, select the coding for "AM_FullInformation" for the assigned BlockType.
For the data types used:
IM_Annotation, IM_OrderID, AM_SoftwareRevision and AM_HardwareRevision: Characters (UTF-8)
IM_Serial_Number: Characters ("ASCII characters") with the exception of the characters for DEL (0x7F)
Do not use String data types. They require additional bytes and therefore do not conform to the conventions of the PROFINET standard 61158-6-10 "Application layer protocol specification".
Form the AM_FullInformationBlock for each module as follows:
Table 4- 5 AM_FullInformationBlock for modules
Data record element IM_UniqueIdentifier
AM_Location IM_Annotation IM_OrderID AM_SoftwareRevision AM_HardwareRevision IM_Serial_Number IM_Software_Revision
Description
Generate a (pseudo) random UUID (hash value) in accordance with ISO 9834-8 as follows:
· Generate an 8-byte hash value across the I&M0 data of the module (as of Slot 2). Use the algorithm Fowler-Noll-Vo (in short: FNV); an algorithm for generating variance coefficients (hash values) across data field, see corresponding example code in the Internet or online support.
· Generate an 8-byte hash value across the I&M0 data of the CPU. (Use the algorithm Fowler-Noll-Vo (in short: FNV) as described above)
· IM_UniqueIdentifier Byte 0 to 7: Hash value of module I&M0 data Bytes 8 to 15: Hash value for CPU-I&M0 data Required customizations to ISO 9834-8: Byte 8, Bit 7 has to be set to 1, and Byte 8, Bit 6 to 0 (result of the AND operator with 0011 1111, subsequent OR operator with 1000 0000) Byte 6, Bit 4 to 7 have to be set to 0100 (result of the AND operation with 0000 1111, then OR operation with 0001 0000)
Since this algorithm is based on the I&M0 data of the CPU as well as of the modules, it generates a constant IM_UniqueIdentifier for an individual module. When the configuration changes the IM_UniqueIdentifier also changes.
Byte 0 = 0x02 (slot-oriented coding), see description in the preceding section.
Example: "S7-1500 module" and pad the remaining bytes of IM_Annotation with spaces (0x20).
Copy 20 bytes of the I&M0 data of the module (beginning with offset 2 of the I&M0 data). Pad the remaining 44 bytes with spaces (0x20)
Pad the field with 64 spaces (0x20)
Pad the field with 64 spaces (0x20)
Copy 16 bytes of the I&M0 data of the module (beginning with offset 22 of the I&M0 data)
Copy 4 bytes of the I&M0 data of the module (beginning with offset 40 of the I&M0 data)
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
111
Diagnostics and maintenance 4.9 Maintenance
Data record element AM_DeviceIdentification
AM_TypeIdentification IM_Hardware_Revision
Description
Byte 0, 1, 2, 6, 7 = 0x00 Byte 3 = 0x2A (Vendor = Siemens) Byte 4 = 01, Byte 5 = DeviceID (e.g. CPU 15xx = 0x0E)
Copy 2 bytes of the I&M0 data of the module (beginning with offset 48 of the I&M0 data)
Copy 2 bytes of the I&M0 data of the module (beginning with offset 38 of the I&M0 data)
112
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions
5
Introduction
The following section describes the PROFINET IO functions for field of application, properties and configuration in STEP 7.
Refer to the documentation for the respective device to see to what extent the PROFINET devices support the described functions.
You can find a tabular overview of the PROFINET devices and the functions these support on the Internet (https://support.industry.siemens.com/cs/ww/en/view/102325771).
5.1
Connecting other bus systems
Fieldbus integration
PROFINET allows you to use a proxy-capable PROFINET device to integrate existing fieldbus systems (for example, PROFIBUS, AS interface). The devices of these fieldbus systems are mapped on proxy PROFINET devices. In this way, you can set up any hybrid systems consisting of fieldbus and Ethernet-based subsystems. This allows a continuous exchange of information.
Figure 5-1 Gateways on PROFINET IO
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
113
Functions 5.1 Connecting other bus systems
Gateways of an S7-1500 CPU An overview of the gateways at an S7-1500 CPU is provided in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/88778900).
Connecting to building busses BACnet: You can find the procedure for configuring communication between a SIMATIC PLC and a BACnet network with a gateway in this application example (https://support.industry.siemens.com/cs/ww/en/view/109476182). M-bus: You can find the procedure for configuring communication between a SIMATIC PLC and an M-bus network with a gateway in this application example (https://support.industry.siemens.com/cs/ww/en/view/109478527). DALI: You can find the procedure for configuring communication between a SIMATIC PLC and a DALI network with a gateway in this application example (https://support.industry.siemens.com/cs/ww/en/view/109740160). KNX: You can find the procedure for configuring communication between a SIMATIC PLC and a KNX network with a gateway in this application example (https://support.industry.siemens.com/cs/ww/en/view/109739689).
114
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.1 Connecting other bus systems
5.1.1
Linking PROFINET and PROFIBUS
Linking PROFINET and PROFIBUS
With a proxy-capable PROFINET device which is equipped with a PROFINET interface in addition to a PROFIBUS interface (for example, IE/PB Link PN IO), you can integrate existing PROFIBUS configurations into the PROFINET configuration.
The following figures shows how a PROFIBUS system is connected via IE/PB Link to a CPU S7-1500 (as of firmware version 1.7).
Figure 5-2 Gateway from PROFINET and PROFIBUS via IE/PB link
PROFINET device with proxy functionality
The PROFINET device with proxy functionality is the substitute for a PROFIBUS device on Ethernet. The proxy functionality allows a PROFIBUS device to communicate not only with its master but also with all devices on PROFINET.
With PROFINET you can connect an existing PROFIBUS system to an IO controller, for example with the help of an IE/PB Link PN IO.
From the IO controller perspective, the PROFIBUS DP slaves are connected to the same network as the IE/PB Link PN IO. These slaves have the same device name and IP address as the IE/PB Link PN IO, but different device numbers. Furthermore, each also has a specific PROFIBUS address.
In this way, you can link both DPV0 and DPV1 slaves to PROFINET.
For information on how to connect a DP slave to a PROFINET IO system, refer to section Connect the DP slave via the IE/PB Link to a PROFINET IO system (Page 116).
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
115
Functions 5.1 Connecting other bus systems
Diagnostic options with a CPU S7-1500 as IO controller The CPU S7-1500 (as of firmware version 1.7) as IO controller detects disrupted DP slaves behind the IP/PB link.
5.1.2
Connect the DP slave via the IE/PB Link to a PROFINET IO system
Requirements
STEP 7 as of V13 SP1 CPU supports IE/PB link, e.g.:
S7-1500 CPU as of firmware version 1.7 S7-1500 Software Controller as of firmware version 1.7 S7-300/400 CPU
Procedure for connecting a DP slave via an IE/PB Link
To connect a DP slave to a PROFINET IO system via an IE/PB Link in STEP 7, follow these steps:
1. Drag-and-drop a PROFINET CPU, for example CPU 1513-1 PN, from the hardware catalog into the network view of STEP 7.
2. Drag-and-drop an IE/PB Link PN IO from the hardware catalog into the network view of STEP 7. The IE/PB Link PN IO is located under Network components > Gateways > IE/PB Link PN IO.
3. Assign the IE/PB Link PN IO to the CPU.
4. Drag a PROFIBUS interface module e.g. IM155-6 DP HF, from the hardware catalog to the network view.
5. Assign the interface module to the IE/PB Link.
Figure 5-3 Configuring an IE/PB link
6. Select the IE/PB Link PN IO in the network view of STEP 7.
116
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.1 Connecting other bus systems
7. In the Inspector window, go to the "Gateway" area and select the "Network gateway as PROFINET IO proxy" option.
Figure 5-4 Setting a gateway
8. In the PROFINET device number area, you can assign a PROFINET device number for the DP slave. If you have selected the "Device number = PB address" check box (default), STEP 7 automatically assigns the device number according to the PROFIBUS address of the slave. In addition, you no longer need to update the device number if the PROFIBUS address changes.
Result Reference
Figure 5-5 Assigning PN device numbers for IE/PB link
You have connected the DP slave to the PROFINET IO system.
Additional information on the IE/PB link is available in the manual Gateway IE/PB Link PN IO (http://support.automation.siemens.com/WW/view/en/19299692).
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
117
Functions 5.2 Intelligent IO devices (I-devices)
5.2
Intelligent IO devices (I-devices)
5.2.1
I-device functionality
I-device functionality
The "I-device" (intelligent IO device) functionality of a CPU facilitates data exchange with an IO controller and operation of the CPU as intelligent preprocessing unit of sub processes, for example. The I-device is linked as an IO device to a "higher-level" IO controller.
The preprocessing is handled by the user program in the I-device. The process values acquired in the centralized or distributed (PROFINET IO or PROFIBUS DP) I/O are preprocessed by the user program and made available to the IO controller.
Figure 5-6 I-device
"I-device" naming conventions In the remainder of this description, a CPU or a CP with I-device functionality is simply called an "I-device".
Application example: Configuration and application of the PROFINET I-device function A detailed application example is available here (https://support.industry.siemens.com/cs/ww/en/view/109478798).
118
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.2 Intelligent IO devices (I-devices)
5.2.2
Properties and Advantages of the I-Device
Fields of application
Fields of application of the I-device:
Distributed processing
A complex automation task can be divided into smaller units/subprocesses. This results in manageable processes which lead to simplified subtasks.
Separating subprocesses
Complicated, widely distributed and extensive processes can be subdivided into several subprocesses with manageable interfaces by using I-devices. These subprocesses can be stored in individual STEP 7 projects if necessary, which can later be merged to form one master project.
Know-how protection
Components can only be delivered with a GSD file for the I-device interface description instead of with a STEP 7 project. The know-how of the user program may no longer be published.
Properties
Properties of the I-device:
Unlinking STEP 7 projects
Creators and users of an I-device can have completely separated STEP 7 automation projects. The GSD file forms the interface between the STEP 7 projects. This allows a link to standard IO controllers via a standardized interface.
Real-time communication
The I-device is provided with a deterministic PROFINET IO system via a PROFINET IO interface and therefore supports RT (real-time communication) and IRT (isochronous real time).
Advantages
The I-device has the following advantages: Simple linking of IO controllers Real-time communication between IO controllers Relieving the IO controller by distributing the computing capacity to I-devices. Lower communication load by processing process data locally. Manageable, due to processing of subtasks in separate STEP 7 projects
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
119
Functions 5.2 Intelligent IO devices (I-devices)
5.2.3
Characteristics of an I-Device
Principle
An I-device is included in an IO system like a standard IO device.
I-device without lower-level PROFINET IO system
The I-device does not have its own distributed I/O. The configuration and parameter assignment of the I-devices in the role of an IO device is the same as for a distributed I/O system (for example ET 200).
Figure 5-7 I-device without lower-level PROFINET IO system
120
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.2 Intelligent IO devices (I-devices)
I-device with lower-level PROFINET IO system Depending on the configuration, an I-device can also be an IO controller on a PROFINET interface in addition to having the role of an IO device. This means that the I-device can be part of a higher-level IO system via its PROFINET interface and as an IO controller can support its own lower-level IO system. The lower-level IO system can, in turn, contain I-devices (see figure below). This makes hierarchically structured IO systems possible. In addition to its role as IO controller, an I-device can also be used via a PROFIBUS interface as DP master for a lower-level PROFIBUS system.
Figure 5-8 I-device with lower-level IO system
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
121
Functions 5.2 Intelligent IO devices (I-devices)
Example - the I-device as IO device and IO controller The I-device as IO device and IO controller is explained based on the example of a print process. The I-device controls a unit (a subprocess). One unit is used, for example, to insert additional sheets such as flyers or brochures in a package of printed material.
Figure 5-9 Example - the I-device as IO device and IO controller
Unit 1 and unit 2 each consist of an I-device with centralized I/O. The I-device along with the distributed I/O system (for example ET 200) forms unit 3. The user program on the I-device is responsible for preprocessing the process data. For this task, the user program of the I-device requires default settings (for example control data) from the higher-level IO controller. The I-device provides the higher-level IO controller with the results (for example status of its subtask).
122
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.2 Intelligent IO devices (I-devices)
I-device as a shared device An I-device can also be used simultaneously by multiple IO controllers as a shared device.
Figure 5-10 I-device as a shared device
Information about configuring an I-device as a shared device is available in the section Configuring an I-device as a shared device (Page 146).
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
123
Functions 5.2 Intelligent IO devices (I-devices)
5.2.4
Data Exchange between higher- and lower-level IO system
Introduction
The next chapter shows the data exchange between the higher- and lower-level IO system.
Transfer areas
Transfer areas are an interface to the user program of the I-device CPU. Inputs are processed in the user program and outputs are the result of the processing in the user program.
The data for communication between IO controller and I-device is made available in the transfer areas. A transfer area contains an information unit that is exchanged consistently between IO controller and I-device. You can find more information on configuration and use of transfer areas in the section Configuring the I-device (Page 126).
124
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.2 Intelligent IO devices (I-devices)
The next figure shows the data exchange between the higher- and lower-level IO system. The individual communication relations are explained below based on the numbers.
Figure 5-11 Data exchange between higher- and lower-level IO system
Data exchange between higher-level IO controller and normal IO-device
In this way, the IO controller and IO devices exchange data through PROFINET.
Data exchange between higher-level IO controller and I-device
In this way, the IO controller and the I-device exchange data through PROFINET. The data exchange between a higher-level IO controller and an I-device is based on the conventional IO controller / IO device relationship. For the higher-level IO controller, the transfer areas of the I-devices represent submodules of a preconfigured station. The output data of the IO controller is the input data of the I-device. Analogously, the input data of the IO controller is the output data of the I-device.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
125
Functions 5.2 Intelligent IO devices (I-devices)
Transfer relationship between the user program and the transfer area
In this way, the user program and the transfer area exchange input and output data.
Data exchange between the user program and the I/O of the I-device
In this way, the user program and the centralized / distributed I/O exchange input and output data.
Data exchange between the I-device and a lower-level IO device
In this way, the I-device and its IO devices exchange data. The data transfer is via PROFINET.
5.2.5
Configuring the I-device
Introduction
There are basically two possibilities for configuration:
Configuration of an I-device within a project
Configuration of an I-device that is used in another project or in another engineering system.
STEP 7 allows you to configure an I-device for another project or for another engineering system by exporting a configured I-device to a GSD file. You import the GSD file in other projects or engineering systems as with other GSD files. The transfer areas for the data exchange, among other data, are stored in this GSD file.
Configuration of an I-device within a project
1. Drag-and-drop a PROFINET CPU from the hardware catalog into the network view.
2. Drag-and-drop a PROFINET CPU, which can also be configured as an IO device, from the hardware catalog into the network view. This device is configured as I-device (e.g., CPU 1516-3 PN/DP).
3. Select the PROFINET interface for the I-device.
4. In the Inspector window in the area navigation choose "Operating mode" and select the check box "IO device".
126
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.2 Intelligent IO devices (I-devices) 5. Now you have the option of choosing the IO controller in the "Assigned IO controller" drop-down list. Once you have chosen the IO controller, the networking and the IO system between both devices are displayed in the network view.
Figure 5-12 Configuring the I-device
6. With the "Parameter assignment of PN interface by higher-level IO controller" check box, you specify whether the interface parameters will be assigned by the I-device itself or by a higher-level IO controller. If you operate the I-device with a lower-level IO system, then the parameters of the I-device PROFINET interface (for example, port parameter) cannot be assigned with the higher-level IO controller.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
127
Functions 5.2 Intelligent IO devices (I-devices)
7. Configure the transfer areas. The transfer areas are found in the area navigation section "I-device communication". Click in the first field of the "Transfer area" column. STEP 7 assigns a default name which you can change. Select the type of communication relation: you can currently only select CD or F-CD for "Controller-device communication relation". Addresses are automatically preset; you can correct addresses if necessary, and determine the length of the transfer area which is to be consistently transferred.
Figure 5-13 Configuring the transfer areas
8. A separate entry is created in the area navigation for each transfer area. If you select one of these entries, you can adjust the details of the transfer area, or correct them and comment on them.
Configuring an I-device with a GSD file If you use an I-device in another project, or if the I-device is used in another engineering system, then configure the higher-level IO controller and the I-device as described above. However, click on the "Export" button after configuring the transfer areas so a new GSD file is created from the I-device. This GSD file represents the configured I-device in other projects. The "Export" button is found in the "I-device communication" section of the Inspector window. The hardware configuration is compiled and the export dialog opened. Assign a name for the I-device proxy as well as a description in the fields provided. Click the "Export" button to complete your process. Finally, import the GSD file, for example, in another project.
5.2.6
Program examples
Introduction
This simple program example shows how you use the transfer areas of an I-device.
Requirements You have configured an I-device.
128
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.2 Intelligent IO devices (I-devices)
Task
The result of an "AND logic operation" of two inputs (preprocessing) in the I-device is to be provided to the higher-level IO controller. This result is to be assigned to a local output in the IO master (further processing). Use a transfer area with the following addresses for this purpose:
Address in the I-device: Q568
Address in the IO controller: I68
Required steps The following steps to solve the task: 1. Configuring the transfer area 2. Programming I-device 3. Programming IO controller
Configuring the transfer area Configure a transfer area with the following properties in the I-device:
Figure 5-14 I-device transfer area, sample program
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
129
Functions 5.2 Intelligent IO devices (I-devices)
Programming I-device To program the sample program for the I-device, follow these steps: 1. Using the SCL programming language, create a new function with the name "preprocessing" in the project tree in "Program blocks" > "Add new block". Open the function. 2. In the interface of the function "preprocessing", create the following tags:
Name input 1 input 2 result
Data type bool bool bool
Input / output type Input Input Output
3. In the instruction window of the function "preprocessing", write the following program code: #result:=#input 1&#input 2;
4. Call the function "preprocessing" in a program cycle OB, for example, in OB1.
5. Wire the function "preprocessing" in the program cycle OB as follows:
Figure 5-15 I-device sample program
Programming IO controller To program the sample program for the IO controller, follow these steps: 1. Using the SCL programming language, create a new function with the name "further processing" in the project tree in "Program blocks" > "Add new block". Open the function. 2. In the interface of the function "further processing", create the following tags:
Name result output
Data type bool bool
Input / output type Input Output
3. In the instruction window of the function "further processing", write the following program code: #output:=#result;
130
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.2 Intelligent IO devices (I-devices)
4. Call the function "further processing" in a program cycle OB, for example, in OB1. 5. Wire the function "further processing" in the program cycle OB as follows:
Result
Figure 5-16 IO controller sample program
The IO controller and the I-device can exchange data with each other through the input/output transfer areas.
5.2.7
Diagnostics and interrupt characteristics
Diagnostics and interrupt characteristics
S7 CPUs have numerous diagnostics and interrupt functions that can, for example, report errors or failures of lower-level IO systems. These diagnostics messages reduce down times and simplify localization and elimination of problems.
Diagnostics options in the higher-level IO controller and in the I-device The following diagnostics functions are available to the higher-level IO controller and the I-device CPU: OB 83 (pull/plug) OB 86 (rack failure) OB 122 (I/O access error)
Note The diagnostics messages of the I/O can be processed in the user program of the Idevice CPU and passed on from there to the higher-level IO controller via transfer areas.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
131
Functions 5.2 Intelligent IO devices (I-devices)
Operating state changes and station failure / station return
In the following table, you can see which consequences an operating state change or the failure of an IO controller / I-device of the SIMATIC family has on the respective other(s):
Table 5- 1 Operating state changes and station failure / station return
Initial status I-device CPU is in RUN, higherlevel IO controller is in RUN
I-device CPU is in STOP higherlevel IO controller is in RUN
I-device CPU is in RUN, higherlevel IO controller is in RUN
Higher-level IO controller is in STOP, I-device CPU in RUN
Event The I-device CPU changes to STOP
The I-device CPU is starting up
The higher-level IO controller changes to STOP
The higher-level IO controller starts up
I-device response -
Call of OB 100 (startup). Call of OB 83 (pull/plug) for input transfer areas to the higher-level IO controller. Until call of OB 83 in the case of direct access to the input transfer areas to the higher-level IO controller: depending on the type of error handling, e.g., call of OB 122 (IO access error). During the updating of the process image with the instructions "UPDAT_PI" and "UPDAT_PO" an error report is returned at the parameter RET_VAL. With direct IO access to the input transfer areas to the higher-level IO controller: depending on the type of error handling, e.g., call of OB 122 (IO access error). Note: Output transfer areas can still be accessed. Call of OB 83 (pull/plug) for input transfer areas to the higher-level IO controller. Until call of OB 83 in the case of direct access to the input transfer areas to the higher-level IO controller: depending on the type of error handling, e.g., call of OB 122 (IO access error).
Higher-level IO controller During the updating of the process image with the instructions "UPDAT_PI" and "UPDAT_PO" an error report is returned at the parameter RET_VAL. With direct IO access to all transfer areas to the I-device: depending on the type of error handling, e.g., call of OB 122 (IO access error). Call of OB 83 (pull/plug) for all transfer areas to the I-device. Until call of OB 83 in the case of direct access to the transfer areas to the Idevice: depending on the type of error handling, e.g., call of OB 122 (IO access error).
-
Call of OB 100 (startup).
132
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.2 Intelligent IO devices (I-devices)
Initial status I-device CPU is in RUN, higherlevel IO controller is in RUN
I-device CPU is in RUN, higherlevel IO controller is in RUN, communication connection between IO controller and I-device is interrupted (bus interruption).
Event Station failure Idevice, for example, through bus interruption
The bus connection between the IO controller and Idevice has been reestablished and the I-device is again included in the user data traffic.
I-device response
If the I-device continues to run without a bus connection:
Call of OB 86 (rack failure).
During the updating of the process image with the instructions "UPDAT_PI" and "UPDAT_PO" an error report is returned at the parameter RET_VAL.
With direct IO access to all transfer areas to the higher-level IO controller: depending on the type of error handling, e.g., call of OB 122 (IO access error).
Call of OB 86 (rack failure).
Call of OB 83 (pull/plug) for input transfer areas to the higher-level IO controller.
Until call of OB 83 in the case of direct access to the input transfer areas to the higher-level IO controller: depending on the type of error handling, e.g., call of OB 122 (IO access error).
Higher-level IO controller Call of OB 86 (rack failure). During the updating of the process image with the instructions "UPDAT_PI" and "UPDAT_PO" an error report is returned at the parameter RET_VAL. With direct IO access to all transfer areas to the I-device: depending on the type of error handling, e.g., call of OB 122 (IO access error).
Call of OB 86 (rack failure). Until reporting of station re-integration by OB 86 with direct IO access to all transfer areas to the I-device: depending on the type of error handling, e.g., call of OB 122 (IO access error)
Note
Special characteristic during startup of the higher-level IO controller
In contrast to the station return message from IO devices in the IO controller, which are covered completely by the call of the OB 86, the station return message of a higher-level IO controller in the I-device is separated into 2 parts:
1. Call of the OB 86: The initial values for the outputs of the I-device are set. However, the input values are not yet valid. These values will first be valid with the opening of OB 86 in the higher-level IO controller.
2. Call of OB 83 for each input transfer area; with this call, the validity of an input transfer area is displayed. The starting up of the I device is first complete when the OB 83 has been called for the input transfer areas. This step can be delayed or not occur at all in the following situations: Higher-level IO controller is in STOP: OB 83 is first called at the STOP-RUN transition of the higher-level IO controller.
The IRT communication has been disrupted (sync-master failure, topology error, ...). OB 83 is opened only after the IRT communication has taken place.
Reference
For more information on error handling in the case of direct I/O access, refer to "Error handling" in the STEP 7 online help.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
133
Functions 5.2 Intelligent IO devices (I-devices)
5.2.8
Rules for the Topology of a PROFINET IO System with I-Device
Introduction
The following recommendations for the structure and configuration of an IO system when using I-devices will help you to keep the bandwidths required for keeping communication small.
The following communication paths should not overlap:
Communication paths between the IO controller and the IO device of its IO system.
Communication paths of the I-device CPU and the IO devices of your IO system.
I-device with one port
Connect an I-device with only one port to a PROFINET switch that is uncoupled from the higher-level IO system. Connect the lower-level IO system to another port of the switch as shown in the following figure.
Figure 5-17 I-device with one port
134
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.2 Intelligent IO devices (I-devices)
I-device with two ports With an I-device with two ports, connect one port, uncoupled from the higher-level IO system, to the port of the PROFINET switch. Use the second port for the lower-level IO system as shown in the following figure.
Figure 5-18 I-device with two ports
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
135
Functions 5.2 Intelligent IO devices (I-devices)
I-device with three or more ports If you have an I-device with three or more ports, connect the I-device to one or both ports to the higher-level IO system in a linear bus topology. Connect the third port to the lower-level IO system uncoupled from the linear bus topology as shown in the following figure.
Figure 5-19 I-device with three or more ports
5.2.9
Boundary conditions when using I-devices
Note the following boundary conditions when using I-devices:
Bandwidth
The number of addresses of the configured transfer areas affects the usable bandwidth of the I-device:
Bandwidth of the transfer areas + bandwidth of the lower-level IO system = total bandwidth used on the I-device
If the address space of the transfer areas is too large, this indicates a larger bandwidth requirement and can thus lead to longer update times.
Tip: Keep the address space of the transfer area as small as possible.
136
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.2 Intelligent IO devices (I-devices)
Rules for RT and IRT communication. IO systems with I-devices are also suitable for setting up real-time applications with RT and IRT communication. The following rules must be followed for this: Both the higher-level and the lower-level IO system support RT communication. You can use RT communication for both IO systems at the same time. IRT communication can be combined with RT communication. You can use IRT communication in one of the two IO systems. Use IRT either in a higher-level or in a lower-level IO system.
5.2.10
Configuring PROFIenergy with I-devices
The requirement for program-controlled pauses for saving energy with PROFINET devices is that the PROFINET devices support the PROFIenergy protocol.
Only if a PROFINET device (I/O device) supports the PROFIenergy protocol does an I/O controller actually send PE commands to this I/O device, for example to start or stop pauses.
If an I/O device supports the PROFIenergy protocol, this property is saved in its PROFINET GSD file and is available for configuration in an engineering system.
For S7-1500 CPUs as intelligent I/O devices (I-devices), you have the option with STEP 7 V13 service pack 1 or later to set PROFIenergy support for each transfer area.
If you have selected the "Enable PROFIenergy communication" option for a transfer area and import the generated PROFINET GSD file into another project, you can handle an Idevice as a PE entity there.
Requirements
STEP 7 as of V13 service pack 1
CPU supports PROFIenergy with I-devices, for example CPU 1215C DC/DC/DC as of firmware version 4.2
You use the PROFINET IO interface as an I-device and have created transfer areas.
The user program in the I-device handles PROFIenergy commands
Background: You need to program PROFIenergy functions with I-devices in the user program using the "PE_I_DEV" instruction and corresponding auxiliary blocks; this is different compared with IO devices for which this functionality is made available by the firmware. You may therefore only activate the PROFIenergy support for transfer areas if the user program in the I-device is configured correspondingly as well.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
137
Functions 5.2 Intelligent IO devices (I-devices)
Enabling PROFIenergy for transfer areas of I-devices Proceed as follows to assign parameters for the support of PROFIenergy: 1. Select the PROFINET interface (X1) of the CPU. 2. Select the required transfer area in the area navigation, for example: Operating mode > I-device communication > Transfer_area_1. 3. Select the check box "Enable PROFIenergy communication".
Figure 5-20 Configuring PROFIenergy with I-devices
Once the I-device is fully configured, generate the GSD file for the I-device and import this file in the project for the I/O controller. The GSD file generated contains an entry that specifies that the I-device supports the PROFIenergy profile.
To address the I-device, for example for the PE command "PE_START_END", use the hardware identifier of the "PROFIenergy supporting" transfer area in the I-device.
To address the IO controller for the PE command "PE_I_DEV", use the hardware identifier of the transfer area that is supplied with the data for PROFIenergy on the IO controller.
You can find more information on PROFIenergy in the sectoin Saving energy with PROFIenergy (Page 258).
138
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
5.3
Shared device
Functions 5.3 Shared device
5.3.1
Useful information on shared devices
Shared device functionality
Numerous IO controllers are often used in larger or widely distributed systems.
Without the "Shared Device" function, each I/O module of an IO device is assigned to the same IO controller. If sensors that are physically close to each other must provide data to different IO controllers, several IO devices are required.
The "Shared Device" function allows the modules or submodules of an IO device to be divided up among different IO controllers. Thus allowing flexible automation concepts. You have, for example, the possibility of combining I/O modules lying near other into an IO device.
PROFINET Logical assignment
Figure 5-21 Example: Shared device with 2 IO controllers
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
139
Functions 5.3 Shared device
Principle
Access to the submodules of the shared device is then divided up among the individual IO controllers. Each submodule of the shared device is assigned exclusively to one IO controller.
Requirement
STEP 7 V12 Service Pack 1 or higher
IO device supports the shared device function, e.g. interface module IM 155-5 PN ST
IO controller supports the shared device function, for example CPU 1516-3 PN/DP as of firmware version 1.1 or CPU 1215 DC/DC/DC as of firmware version 4.1
Explanatory notes:
A CPU that is configured as an I-device can be used as a shared device. For this purpose, you create a GSD file for the I-device in STEP 7 via "GSD export". You then import the GSD file into a different project and assign the I-device to the IO controller there. The CPU has to support the GSD export, for example CPU 1215C DC/DC/DC as of firmware version 4.1. The maximum number of IO controllers that you can assign to a CPU configured as a shared I-device is given in the technical specifications in the CPU manuals.
Configuring the access
The IO device must be present in several projects so that the modules or submodules of an IO device can be assigned to different IO controllers. A separate project is required for each IO controller.
You use the "Shared device" parameter of the interface module to determine the modules or submodules to which the IO controller has access:
If the local IO controller has access to the configured module, select the name of the IO controller from the list.
If the IO controller from a different project and not the local IO controller is to have access to the configured module, select the entry "---".
The configuration is consistent regarding access if each module or submodule in exactly one project is assigned to an IO controller.
Module or submodule is assigned to another IO controller
The paragraph below describes the consequences of the "---" setting of the "Shared device" parameter from the point of view of the local IO controller.
In this case, the local IO controller does not have access to the module configured in this way. Specifically, this means:
No data exchange with the module or submodule
No reception of alarms or diagnostics, which means no display of the diagnostics status in the online view
No parameter assignment of the module or submodule
140
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.3 Shared device
Setting of the real-time properties
STEP 7 calculates the communication load and thus the resulting update times. You must enter the number of project-external IO controllers in the project in which the PROFINET interface of the shared device is assigned to the IO controller so that a calculation is possible with shared device configurations.
The maximum possible number of IO controllers for the shared device depends on the device. This number is stored in the GSD file of the shared device.
You can set a very short send clock with a CPU as IO controller. The send clock can be shorter than the shortest send clock supported by the shared device. In this case, the shared device is operated by the IO controller with a send clock that it supports (send clock adaptation).
Example:
A CPU supports send clocks starting from 0.25 ms. A configured IO device also supports send clocks starting at 0.25 ms; another IO device supports send clocks starting at 1 ms. In this case, you have the option of setting the short send clock of 0.25 ms for the CPU. The CPU operates the "slow" IO device with the send clock of 1 ms, for example.
Rules for the configuration
IO controllers that use the shared device are created in different projects. In each project, care must be taken that the shared device is configured identically in each station. Only one IO controller may ever have full access to a submodule. Inconsistencies in the configuration result in a failure of the shared device.
If you have selected the "Use router" option for the IO controllers involved, you must have set the same router address in all these IO controllers.
I/O addresses of a module or submodule can only be edited if a module or submodule is assigned to the IO controller in the same project.
The shared device must have the same IP parameters and the same device name in each project.
The send clock must be identical for all IO controllers that have access to the shared device.
The S7 subnet ID of the subnet to which the shared device is connected must be identical in all projects.
The following functions are only available if the PROFINET interface of the shared device is assigned to the local IO controller:
IRT operation
Prioritized startup
Parameter assignment of the port properties
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
141
Functions 5.3 Shared device
Boundary conditions
The following boundary conditions result because a shared device configuration is distributed across several projects:
The addresses of modules or submodules that are not assigned to this IO controller are missing in the address overview of each IO controller that has access to a shared device.
The modules or submodules that are not assigned are not taken into consideration in the configuration limit calculation for the shared device during the consistency check. For this reason, you must verify for yourself that the maximum number of submodules or the maximum amount of cyclic IO data for the shared device will not be exceeded. For information on the maximum quantities, refer to the documentation for the devices you are using.
Configuration errors such as the assignment of a module or submodule to several IO controllers are not detected in STEP 7.
CPUs that are loaded with a shared device configuration do not have any information on whether the IO device is a shared device. Modules or submodules that are assigned to other IO controllers and therefore other CPUs are missing in the loaded configuration. These modules or submodules are therefore displayed neither in the CPU web server nor in the CPU display.
Response in the event of fault
Information about how PROFINET IO controllers behave in the event of a fault when accessing the data of a shared device is available in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/109572804).
5.3.2
Configuring shared device
Below, you will find a description of how to configure a distributed I/O system as a shared device with STEP 7 V12, Service Pack 1 or higher.
A "distributed" configuration with different engineering tools for different IO controller families is always possible. However, the description of the procedure is based solely on STEP 7 as of V12, service pack 1. The description is limited to two IO controllers of the S7-1500 family that share a shared device.
Two projects are created (Shared-Device-1 and Shared-Device-2), each with one IO controller (PLC1 and PLC2). You must create the shared device in both projects, even though it is physically one and the same IO device.
Requirements
STEP 7 V12 Service Pack 1 or higher
The IO controller supports the shared device function, for example CPU 1513-1 PN as of firmware version 1.1.
IO device supports shared device functionality, for example interface module IM 155-5 PN ST as of firmware version 2.0.
142
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.3 Shared device
Procedure - Creating project 1 To create the first project with a shared device, follow these steps: 1. Start STEP 7. 2. Create a new project with the name "Shared-Device-1". 3. Insert, for example, a CPU 1513-1 PN from the hardware catalog in the network view. Name it "PLC1". 4. Insert an IO device with the "Shared device" function from the hardware catalog. 5. Assign the IO controller "PLC1" to the IO device. 6. Double-click the IO device and insert all required modules and submodules from the hardware catalog in the device overview table. 7. Assign the module parameters. 8. Save the project.
Procedure - Creating project 2 To create the second project with a shared device, follow these steps: 1. Start STEP 7 once again. A new instance of STEP 7 opens. 2. In the new instance, create a new project with the name "Shared-Device-2". 3. Insert, for example, a CPU 1513-1 PN in the network view. Name it "PLC2". 4. Copy the IO device from the project "Shared-Device-1" and insert it in the network view of project "Shared-Device-2". 5. Assign the IO controller "PLC2" to the IO device. 6. Save the project. Both projects now have an identically structured IO device that must be configured in the next step for the different types of IO controller access.
Procedure - Configuring access to the shared device The modules and submodules you insert in the shared device are automatically assigned to the local CPU. To change the assignment, follow these steps: 1. Select the interface module in the network view or device view of project "Shared-Device1". 2. Select the "Shared Device" area in the Inspector window. A table shows which CPU has access to the respective module or submodule for all configured modules. The default setting is that the local CPU has access to all modules and submodules.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
143
Functions 5.3 Shared device
3. Keep the "PLC1" setting for all modules and submodules that are to remain in the address range of the local CPU. Select the setting "---" for all modules and submodules that are to be located in the address range of the CPU from the "Shared-Device-2" project (PLC2). This means that an IO controller outside the project is to have access to the module or submodule.
Figure 5-22 Configuring shared device
4. Select the interface module in the network view or device view of project "Shared-Device2".
5. Select the "Shared Device" area in the Inspector window.
A table shows which CPU has access to the respective module or submodule for all configured modules.
6. Select the setting "---" for all modules and submodules that are to be located in the address range of the CPU from the "Shared-Device-1" project (PLC1).
7. Finally, check whether the settings for access are "complementary" for each module or submodule in both projects. This means that if the local CPU has access in one project, the option "---" must be set in the other project and vice versa.
Special consideration: The option "---" for the PROFINET interface and therefore for the ports makes the associated parameters read-only and not changeable. Parameters of the PROFINET interface and port parameters can only be edited in the project in which the PROFINET interface is assigned to the local CPU. The ports can be interconnected in both projects regardless of this.
8. Check whether the same IP address parameters and device name are set for the shared device in all projects.
Check whether the same S7 subnet ID is set in all projects for the subnet to which the shared device is connected (subnet properties, "General" area in the Inspector window).
Note
If you make changes to the shared device: Make the same changes in each project on the shared device. Make sure that only one IO controller has access to a module or submodule.
144
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.3 Shared device
Procedure - Adjusting the real-time settings
To ensure that all IO controllers and shared devices are operated with the appropriate send clock and that the update times are calculated correctly based on the communication load, you must adjust and check the following settings:
1. Select the project whose IO controllers have access to the PROFINET interface and the ports of the shared device.
2. Select the interface module of the shared device in the network view.
3. In the Inspector window, navigate to the "PROFINET interface > Advanced options > Real time settings > IO cycle" area.
4. In the "Shared Device" area, set the number of project-external IO controllers. The maximum number depends on the IO device (specification in GSD file).
5. You must set the same send clock for each IO controller that has access to modules and submodules of the shared device:
If you configure the IO controller with STEP 7 (TIA Portal):
Open the corresponding project.
Select the PROFINET interface of the IO controller.
Select the "Advanced options > Real time settings > IO communication" area in the Inspector window and set the shared send clock.
If you configure the IO controller with a different engineering tool:
Select the PROFINET interface of the shared device in STEP 7 (TIA Portal) and read out the send clock on the shared device ("Advanced options > Real time settings" area)
Enter the read send clock in the engineering tool.
Special consideration: If you configure all IO controllers that have access to the shared device in STEP 7 (TIA Portal or V5.5), you can set shorter send clocks on the IO controller than supported by the shared device (send clock adaptation).
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
145
Functions 5.3 Shared device
Compiling and loading You must compile the configurations for the different IO controllers and load them to the CPUs one after the other. Due to the distributed configuration with separate projects, STEP 7 does not output consistency errors in the case of incorrect access parameter assignment. Example for incorrect access parameter assignment: Several IO controllers have access to the same module IP address parameters or send clocks are not identical These errors do not show up until operation and are output as configuration errors, for example.
Note After a configuration has been loaded in the IO controller, non-assigned modules or submodules retain their current parameterization state to ensure the independence from the parameterizations of other IO controllers.
5.3.3
Configuring an I-device as a shared device
Below, you will find a description of how you configure an S7-1500 as an I-device with STEP 7 Version 13 or higher and then use it in two projects as a shared device.
A "distributed" configuration with different engineering tools for different IO controller families is generally also possible here. The procedure described below is based on STEP 7 V13 and is limited to a configuration with two IO controllers of the S7-1500 family that share the transfer areas of an I-device as a shared device. The I-device itself is also an S7-1500 CPU.
Three projects are created with one IO controller each (PLC-I-Device, PLC_1, and PLC_2).
PLC-I-Device is used to configure the I-device. The PROFINET GSD variant of PLC-I-Device is used in the PLC_1 and PLC_2 projects in order to assign the transfer areas in the respective higher-level IO controller.
Shared I-device concept
For the introduction of the shared I-device concept, two roles are distinguished:
The role of manufacturer (e.g., machine manufacturer): The manufacturer configures and programs an I-device that performs a particular automation task. Transfer areas are defined as the I/O interface to the operator of the machine. These transfer areas can be assigned to different IO controllers. For the connection to higher-level IO controllers, the manufacturer provides a PROFINET GSD file and discloses the transfer areas via which the I-device can be accessed.
The role of the operator: The operator uses the I-device as a PROFINET GSD variant during configuration of the PROFINET IO system and, in this process, specifies the I/O addresses under which the IO controllers access the transfer areas.
146
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.3 Shared device
Manufacturer view
You assign the following parameters for an S7-1500 CPU as an I-device: centralized and distributed I/O, the desired transfer areas, and the number of IO controllers having access to this I-device (always greater than 1 for a shared device!).
Special consideration: The I-device is configured without a higher-level IO controller. As a result, only the local I/O addresses of the transfer area are available (= "Address in the Idevice") in order to create the user program for editing the addresses from the transfer area. The I-device that has been completely configured except for the connection to the higherlevel IO controller is loaded to the S7-1500 CPU.
You export a PROFINET GSD file from the I-device configuration.
Figure 5-23 Exporting an I-device as a GSD file
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
147
Functions 5.3 Shared device
Operator view
You must install the PROFINET GSD file created from the I-device configuration in all engineering systems that are involved in configuring a PROFINET IO system with this shared I-device. If all uses of this I-device will be configured with STEP 7 V13, it is sufficient to install the GSD file in STEP 7.
You configure the I-device as a GSD variant on the PROFINET IO system in the projects involved. In STEP 7 V13, this I-device can be found under "Other field devices > PROFINET IO > PLCs & CPs" following installation.
Figure 5-24 Configuring an I-device as a GSD file
148
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.3 Shared device
In each of the projects involved, you define which transfer areas are assigned exclusively to the higher-level IO controller (default setting: all). You set the other transfer areas to "---" (not assigned). As a result of this setting, the local IO controller has no access to this transfer area and it can therefore be assigned to another IO controller in another project.
Figure 5-25 Setting the access to the shared I-device.
You adapt the addresses from the view of the IO controller in the device overview. To open the device overview, double-click the I-device.
Figure 5-26 I/O addresses of the transfer areas in the device overview
Requirements STEP 7 as of V13
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
149
Functions 5.3 Shared device
Procedure - Creating the PLC-I-device project To create the project with a shared I-device, follow these steps: 1. Start STEP 7. 2. Create a new project with the name "PLC-I-device". 3. Insert, for example, a CPU 1518-4 PN/DP from the hardware catalog in the network view. Assign the name "PLC-I-device". 4. Double-click the IO device and configure all required modules and submodules.
150
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.3 Shared device
5. Assign the module parameters. In particular, the following settings for the CPU are necessary in the area of the PROFINET interface [X1]: Enable the "IO device" option in the "Operating mode" area. Configure the transfer areas in the "Operating mode" > "I-device configuration" area. The "Address in IO controller" column remains empty because no IO controller is assigned. Note: To change an input area to an output area, and vice versa, you must navigate to the area of the corresponding transfer area.
Figure 5-27 Changing the address type for the transfer area
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
151
Functions 5.3 Shared device
Select the number of IO controllers (at least two) that will access the shared I-device during operation ("Operating mode" > "Real time settings" area, "Shared Device" area).
6. Save the project. 7. Click the "Export" button ("Mode" > "I-device configuration" area, "Export general station
description file (GSD)" section). If you do not change the name in the Export dialog, the GSD file has a name in the form "GSDML-V2.31-#Siemens-PreConf_PLC-I-Device-20130925-123456", for example.
Procedure - Creating the PLC_1 project To create the first project with a shared I-device, follow these steps: 1. Start STEP 7. 2. Install the PROFINET GSD file from the export of the I-device CPU (PLC-I-Device). 3. Create a new project with the name "PLC_1". 4. Insert, for example, a CPU 1516-3 PN/DP in the network view. The name of the CPU should be "PLC_1". 5. Insert the I-device from the hardware catalog (Hardware catalog: Other field devices > PROFINET IO > PLCs & CPs). 6. Assign the IO controller "PLC_1" to the I-device. 7. Select the "Shared Device" area in the properties of the I-device. In the table, all transfer areas and the PROFINET interface are assigned to the local IO controller (PLC_1). 8. Define the transfer areas to which the PLC_1 CPU should not have access. Select the "--" entry for these areas. These transfer areas are provided for PLC_2. 9. Save the project.
Procedure - Creating the PLC_2 project To create the second project with a shared I-device, follow these steps: 1. Start STEP 7 once again. A new instance of STEP 7 opens. 2. In the new instance, create a new project with the name "PLC_2". 3. Insert, for example, a CPU 1516-3 PN/DP in the network view. Assign the name "PLC_2". 4. Insert the I-device from the hardware catalog (Hardware catalog: Other field devices > PROFINET IO > PLCs & CPs). 5. Assign the IO controller "PLC_2" to the I-device. 6. Adapt the access to the transfer areas as in the PLC_1 project. Ensure that no duplicate assignments result.
152
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.3 Shared device
7. Adapt the parameters of the subnet and PROFINET interface. Because the shared I-device involves the same device in different projects, these data must match.
8. Save the project.
Both projects now have an identically configured shared I-device. The IO controller access and the parameters of the PROFINET interface should still be checked in the different projects during the next step.
Summary - Assigning parameters for access to the shared device
The transfer areas are automatically assigned to the local IO controller. To change the assignment, follow these steps:
1. Click the "PLC_I-Device" device in the network view of the "PLC_1" project, and select the "Shared Device" area.
2. A table shows which CPU has access to each of the configured transfer areas. The default setting is that the local CPU has access to all modules and submodules.
3. Keep the setting "PLC_1" for all transfer areas that are to remain in the address range of the local CPU
Select the setting "---" for all transfer areas that are to be located in the address range of the "PLC_2" CPU from the "PLC_2" project. This means that an IO controller outside the project is to have access to the transfer area.
4. Follow the same procedure for the remaining projects.
5. Finally, check whether the settings for access are "complementary" for each module or submodule in both projects. This means that if the local CPU has access in one project, the option "---" must be set in the other project and vice versa.
Special consideration: The option "---" for the PROFINET interface and therefore for the ports makes the associated parameters read-only and not changeable. Parameters of the PROFINET interface and port parameters can only be edited in the project in which the PROFINET interface is assigned to the local CPU. The ports can be interconnected in both projects regardless of this.
6. Check whether the same IP address parameters and device name are set for the shared device in all projects.
Check whether the same S7 subnet ID is set in all projects for the subnet to which the shared device is connected (subnet properties, "General" area in the Inspector window).
Note
If you make changes to the I-device (e.g., change the number or length of the transfer areas):
Export the I-device as a GSD file again. Re-install the GSD file in each project that uses the I-device as a shared device. Make sure that only one IO controller has access to a transfer area.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
153
Functions 5.3 Shared device
Procedure - Adjusting the real-time settings To ensure that all IO controllers and shared devices are operated with the appropriate send clock and that the update times are calculated correctly based on the communication load, you must adjust and check the following settings: 1. You must set the same send clock for each IO controller that has access to modules and submodules of the shared device: If you configure the IO controller with STEP 7 (TIA Portal): Open the corresponding project. Select the PROFINET interface of the IO controller. Select the "Advanced options > Real time settings > IO communication" area in the Inspector window and set the shared send clock. If you configure the IO controller with a different engineering tool: Select the PROFINET interface of the shared device in STEP 7 (TIA Portal) and read out the send clock on the shared device ("Advanced options > Real time settings" area) Enter the read send clock in the engineering tool. Special consideration: If you configure all IO controllers that have access to the shared I-device in STEP 7 (TIA Portal or V5.5), you can set shorter send clocks on the IO controller than supported by the shared device (send clock adaptation).
Compiling and loading You must compile the configurations for the different IO controllers and load them to the CPUs one after the other. Due to the distributed configuration with separate projects, STEP 7 does not output consistency errors in the case of incorrect access parameter assignment. Example for incorrect access parameter assignment: Several IO controllers have access to the same module IP address parameters or send clocks are not identical These errors do not show up until operation and are output as configuration errors, for example.
Note After a configuration has been loaded in the IO controller, non-assigned modules or submodules retain their current parameterization state to ensure the independence from the parameterizations of other IO controllers.
154
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.3 Shared device
5.3.4
Module-internal shared input/shared output (MSI/MSO)
Introduction
This section describes the module-internal shared input/shared output (MSI/MSO) functionality for I/O modules that are operated on PROFINET.
Module-internal shared input/shared output functionality
The module-internal shared input (MSI) function allows an input module to make its input data available to up to four IO controllers. Each controller has read access to the same channels.
The following figure shows the MSI functionality.
CPU 1516-3 PN/DP as IO controller CPU 1511-1 PN as IO controller Input module with MSI Read access to the input channels of the input module Write access to the channels of the I/O module (only with MSO)
Figure 5-28 Example configuration with MSI
The module-internal shared output (MSO) function allows an output module to make its output data available to up to four IO controllers. An IO controller has write access to the channels of the output module. Up to three IO controllers can additionally have read-access to the channels.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
155
Functions 5.3 Shared device
The following figure shows the MSO functionality.
CPU 1516-3 PN/DP as IO controller CPU 1511-1 PN as IO controller Output module with MSO Write access to the output channels of the output module Read access to the output channels of the output module
Figure 5-29 Example configuration with MSO
Advantages of MSI/MSO Module-internal shared input/shared output (MSI/MSO) offers the following advantages: Real-time acquisition in multiple CPUs Lower costs due to saving on additional IO devices and modules Lower space requirements due to saving on additional IO devices and modules Reduced communication load because no CPU-CPU communication is needed No additional programming effort is needed for CPU-CPU communication
156
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.3 Shared device
Requirements for the use of MSI/MSO Observe the following requirements: MSI/MSO can only be used with PROFINET IO Configuration software: STEP 7 (TIA Portal) as of V12 SP1 with GSD file; the modules are integrated in the hardware catalog as of V13. The IM 155-5 PN ST interface module and the modules support MSI/MSO as of firmware version V2.0.0.
Boundary conditions for the use of MSI/MSO Note the following boundary conditions: The use of MSI/MSO is not possible in the case of module grouping. Modules with MSI/MSO cannot be operated in isochronous mode. The maximum number of IO controllers is dependent on the interface module. To find out how many IO controllers the interface module supports, refer to the manual for the respective interface module.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
157
Functions 5.3 Shared device
MSI submodules
The input values of all channels are copied to a basic submodule and up to three other MSI submodules during MSI configuration of an input module. The channels of the module are then available with identical input values in the basic submodule and the MSI submodules. The MSI submodules can be assigned to up to three IO controllers when the module is used in a shared device. Each IO controller has read access to the same channels.
The following figure shows a digital input module with the basic submodule and three MSI submodules. Each submodule is assigned to an IO controller. Diagnostics and parameter assignment of the digital input module can be performed from the IO controller 1 via the basic submodule.
Read access Parameter assignment and system diagnostics
Figure 5-30 DI module with MSI submodules
Value status (Quality Information, QI) The meaning of the value status depends on the submodule to which it pertains. With basic submodule (= 1st submodule), the "0" value status indicates that the value is incorrect. With an MSI submodule (2nd to 4th submodule), the "0" value status indicates that the value is incorrect or the basic submodule has not yet been configured (not ready).
158
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.3 Shared device
MSO submodules
During MSO configuration of an output module, the output values of all channels of the module are copied from a basic submodule to up to three other MSO submodules. The channels of the module are then available with identical values in the basic submodule and the MSO submodules. The MSO submodules can be assigned to up to three IO controllers when the module is used in a shared device.
The IO controller to which the basic submodule is assigned has write access to the outputs of the module. The basic submodule therefore occupies output addresses in the process image of the IO controller.
The IO controllers to which the MSO submodules are assigned have read access to the outputs of the module. MSO submodules therefore occupy input addresses in the process image of the IO controller.
The following figure shows a digital output module with the basic submodule and three MSO submodules. Each submodule is assigned to an IO controller. Diagnostics and parameter assignment of the digital output module can be performed from IO controller 1 via the basic submodule.
Write access Read access Parameter assignment and system diagnostics
Figure 5-31 DQ module with MSO submodule
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
159
Functions 5.3 Shared device
Value status (Quality Information, QI) The meaning of the value status depends on the submodule to which it pertains. With basic submodule (= 1st submodule), the "0" value status indicates that the value is incorrect. With MSO submodule (= 2nd to 4th submodule) the "0" value status indicates that the value is incorrect or one of the following errors has occurred: The basic submodule parameters have not yet been assigned (not ready for operation). The connection between the IO controller and the basic submodule has been interrupted. The IO controller of the basic submodule is in STOP or POWER OFF state.
Configuring I/O modules with MSI/MSO submodules
Requirements Configuration software STEP 7 as of V13 IO device supports MSI/MSO (for example IM 155-5 PN ST as of firmware version 2.0.0)
Procedure 1. In the network view of STEP 7, insert an IM 155-5 PN ST interface module as of V2.0. 2. Double-click the IO device.
You are now in the device view.
160
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.3 Shared device
3. Place the I/O modules from the hardware catalog in a suitable slot. 4. Add MSI/MSO submodules to the I/O modules:
Input modules: Select the number of MSI submodules under "Module parameters " > "DI configuration" or "AI configuration" in the area "Copy of module for Shared Device (MSI)".
Output modules: Select the number of MSO submodules under "Module parameters " > "DQ configuration" or "AW configuration" in the area "Copy of module for shared device (MSO)".
Figure 5-32 Configuring I/O modules with MSI/MSO
Assigning MSI/MSO submodules to an IO controller You can assign the submodules in a shared device to an IO controller. For more information, refer to Configuring shared device (Page 142).
Configuring access to a shared device and the module-internal shared input / shared output (MSI /MSO) function
You can learn how to access a shared device and the MSI /MSO function in STEP 7 with this FAQ (https://support.industry.siemens.com/cs/ww/en/view/109736536).
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
161
Functions 5.4 Media redundancy (ring topologies)
5.4
Media redundancy (ring topologies)
In order to increase the network availability of an Industrial Ethernet network with optical or electrical linear bus topologies, you can convert a linear bus topology to a ring topology by joining the ends together.
Media redundancy in ring topologies
Devices in a ring topology can be IO devices, IO controllers, external switches and/or the integrated switches of communication modules.
To set up a ring topology with media redundancy, you need to bring together the two free ends of a linear bus topology in one device. Closing the linear bus topology to form a ring is achieved with two ports (ring ports) of a device in the ring. One device of the resulting ring then takes over the role of the redundancy manager. All other devices in the ring are redundancy clients.
Redundancy manager Test frames Redundancy clients
Figure 5-33 Media redundancy in ring topology
The ring ports of a device are the ports that establish the connection to the two neighboring devices in the ring topology. The ring ports are selected and set in the configuration of the relevant device (is also preset, if applicable).
162
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.4 Media redundancy (ring topologies)
How media redundancy works in a ring topology
The data paths between the individual devices are automatically reconfigured if the ring is interrupted at any point. The devices are available again after reconfiguration.
In the redundancy manager, one of the two ring ports is blocked in uninterrupted network operation for normal communication so that no data frames are circulated. In terms of data transmission, the ring topology is a linear bus topology. The redundancy manager monitors the ring for interruptions. For this purpose, it sends test frames not only from ring port 1 but also from ring port 2. The test frames pass through the ring in both directions until they arrive at the other ring port of the redundancy manager.
An interruption of the ring can be caused by loss of the connection between two devices or by failure of a device in the ring.
If the test frames of the redundancy manager no longer arrive at the other ring port during an interruption of the ring, the redundancy manager connects its two ring ports. This substitute path once again restores a functioning connection between all remaining devices in the form of a linear bus topology.
The time between the ring interruption and restoration of a functional linear topology is known as the reconfiguration time.
As soon as the interruption has been eliminated, one of the two ring ports is blocked again in the redundancy manager. The redundancy clients are informed about the change and use the original paths to the other devices again.
Media redundancy method
The standard method of media redundancy in SIMATIC is MRP (Media Redundancy Protocol) with a typical reconfiguration time of 200 ms. Up to 50 devices can participate per ring.
In addition, the real-time capable media redundancy process MRPD (Media Redundancy with Planned Duplication of frames) is also available.
5.4.1
Media Redundancy Protocol (MRP)
Media Redundancy Protocol (MRP)
The "MRP" process works in conformity with the Media Redundancy Protocol (MRP) that is specified in the standard IEC 62439-2.
Requirements
All devices in the ring support MRP.
You have complied with the rules for topology set out below. STEP 7 monitors compliance with the rules during compilation and outputs corresponding alarms.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
163
Functions 5.4 Media redundancy (ring topologies)
Topology
The following schematic shows a possible topology for devices in a ring with MRP. The devices inside the shaded oval are in the redundancy domain.
Example of a ring topology with the MRP media redundancy protocol:
Figure 5-34 Example of a ring topology with the MRP media redundancy protocol:
The following rules apply to a ring topology with media redundancy using MRP:
All devices must be connected to one other via their ring ports.
All devices in the ring belong to the same redundancy domain.
A device in the ring takes on the task of a redundancy manager.
One device only has the role of "Manager". No other device may have the role of "Manager". Or
Several devices in the ring have the role of "Manager (auto)". The devices with the role of "Manager (auto)" then negotiate between themselves which device is to take on the role of redundancy manager. In this case, no device is permitted to have the role of "Manager".
All other devices in the ring are redundancy clients.
You can connect up to 50 devices in a ring.
Non MRP-compliant devices can, for example, be connected to the ring via a SCALANCE X switch or via a PC with a CP 1616.
164
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.4 Media redundancy (ring topologies)
Rules for loading the devices of an MRP domain When loading devices of an MRP domain, frame loops can occur and result in network failure if there is an invalid MRP configuration. Example: You change the MRP roles of several devices and consecutively load the configuration into the devices involved. Configurations can arise that contradict the roles mentioned above, for example, there may be devices that simultaneously have the "Manager" and "Manager (auto)" roles in the ring. In order to ensure that an invalid MRP configuration does not result in the failure of the network, delete the ring before loading. Follow these steps: 1. Delete the ring. 2. Load the error-free and consistent MRP configuration from your project onto all the devices involved and ensure that the devices are in data exchange mode (i.e. the application relations (ARs) are set up). 3. Close the ring.
Boundary conditions
MRP and RT RT operation is possible with the use of MRP.
Note The RT communication is disrupted (station failure) if the reconfiguration time of the ring is greater than the selected response monitoring time of the IO device. This is why you should select a response monitoring time of the IO devices that is sufficiently large.
MRP and IRT IRT mode is not possible together with MRP. If you want to use media redundancy together with IRT in a ring, only use devices that support MRPD.
MRP and TCP/IP (TSEND, HTTP, ...) The TCP/IP communication with MRP is possible, because lost data packages are resent, if applicable.
MRP and prioritized startup If you configure MRP in a ring, you cannot use the "prioritized startup" function in PROFINET applications on the devices involved. If you want to use the "prioritized startup" function, then you must disable MRP in the configuration (the device may also not be part of the ring).
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
165
Functions 5.4 Media redundancy (ring topologies)
Information on S7-1500R/H You can find information on the media redundancy method MRP of the redundant S7-1500R/H system in section Configuring PROFINET IO on a redundant S7-1500R/H system (Page 281).
Application example: Reading the MRP status in the user program The "LPNDR_ReadMRPState" function block from the "LPNDR" block library helps you to determine the status of the MRP ring per program. The block reads the MRP information from the PROFINET device (MRP Manager) and outputs the status. The "LPNDR" block library and the corresponding documentation can be found in this application example (https://support.industry.siemens.com/cs/ww/de/view/109753067).
5.4.2
Configuring media redundancy
Configuring MRP
Proceed as follows to create a PROFINET IO configuration with MRP in STEP 7:
1. Generate a ring via the port interconnections in the topology view. First interconnect the devices to a line topology. Connect the unassigned port of the last device in the line with the unassigned port of the first device. The following example shows one CPU 1516-3 PN/DP and two interface modules IM 155-6 PN HF that are interconnected in a ring in the topology view of STEP 7.
Figure 5-35 Configuring media redundancy
2. Select the PROFINET IO system in the network view.
3. In the Inspector window, navigate to "Properties" > "General" > "PROFINET" > "MRP domains" in the "Ring interconnections" field. This field shows you all the topological rings in the IO system with the associated MRP domains.
166
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.4 Media redundancy (ring topologies) 4. Select the ring generated above in the "Ring interconnections" field. The table below it shows all the PROFINET devices in the ring. 5. Set the media redundancy role for the PROFINET devices in the MRP role column.
Figure 5-36 MRP domain
Automatic MRP configuration You can also have the media redundancy roles assigned automatically for your PROFINET devices in the ring. To have the media redundancy roles assigned automatically, click the "Configure MRP automatically" button. STEP 7 automatically assigns the media redundancy role for each device in the ring. After the automatic MRP configuration, you can make modifications to the media redundancy roles in the "MRP role" column.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
167
Functions 5.4 Media redundancy (ring topologies)
"Media redundancy" setting options
Media redundancy role
Depending on the device used, the roles "Manager", "Manager (Auto)", "Client" and "Not device in the ring" are available.
Rules:
A ring must have precisely one device with the role "Manager". No additional devices with the role "Manager" or "Manager (Auto)" are permissible. All the other devices may only have the "Client" role.
If a ring has no device with the "Manager" role, the ring must at least have a device with the role "Manager (Auto)". Any number of devices with the "Client" role may exist.
Managers and clients of an MRP domain can be configured in different projects. In the project without a manager, you need to select the "Redundancy manager outside the project" option so that the configuration can be compiled. For multiple ring configurations, you need to set the option identically for each MRP domain.
Ring port 1 / Ring port 2
Select one at a time those ports you want to configure as ring port 1 or ring port 2. The dropdown list box shows the selection of possible ports for each device type. If the ports are set at the factory, then the fields are unavailable.
If you use single-stage commissioning, use the preset ring ports in STEP 7.
Diagnostic interrupts
If diagnostic interrupts to the MRP state are to be output in the local CPU, select the "Diagnostic interrupts" check box. The following diagnostic interrupts can be configured:
Wiring or port error
Diagnostic interrupts will be generated for the following errors in the ring ports:
A neighbor of the ring port does not support MRP.
A ring port is connected to a non-ring port
A ring port is connected to the ring port of another MRP domain.
Interruption / return (redundancy manager only)
If the ring is interrupted and the original configuration is returned, diagnostic interrupts will be generated. If both of these interrupts occur within 0.2 seconds, this indicates an interruption of the ring.
You can respond to these events in the user program by programming the appropriate response in the diagnostic error interrupt OB (OB 82).
Reference
You can find the procedure for configuring a common MRP ring and the topology with two projects in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/109741671).
168
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.4 Media redundancy (ring topologies)
5.4.3
Media redundancy with planned duplication of frames (MRPD; not for S7-1500R/H)
MRP extension "Media Redundancy with Planned Duplication of frames" (MRPD)
The MRP extension "Media Redundancy with Planned Duplication of frames" (MRPD) provides the advantage that, in the case of a failure of a device or a line in the ring, all other devices continue to be supplied with IO data without interruption and with short update times.
MRPD is based on IRT and MRP. To realize media redundancy with short update times, the PROFINET devices participating in the ring send their data in both directions. The devices receive this data at both ring ports so that there is no reconfiguration time.
Requirements for media redundancy with MRPD
All the devices of the ring must support MRPD, for example interface module IM 155-6 PN HS as of firmware version 4.0.
You have configured MRP for all the devices of the ring. You have assigned the MRP role "Not device in the ring" to devices that are not located in the ring.
You have configured IRT for all the involved components.
Configuring MRPD
You do not have to explicitly activate MRPD in STEP 7. The function is available automatically as soon as all the requirements for MRPD are fulfilled.
Redundancy levels of IO devices with MRPD
The redundancy level of an IO device specifies how strongly the real-time communication is influenced in the case of a power interruption between an IO device and its IO controller.
Full redundancy: No influence, because the IO controller and IO device are located in the same ring.
Partial redundancy:
If the interruption takes place on a non-redundant part (line) between the IO device and IO controller, real-time communication is influenced.
If the interruption takes place on a redundant part (ring), real-time communication is not influenced.
No redundancy: No redundant path between the IO device and its IO controller, communication is always influenced.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
169
Functions 5.4 Media redundancy (ring topologies)
The figure below shows the redundancy levels of the IO devices for an example configuration with MRPD. The three devices in the ring and the switch have the redundancy level "Full redundancy". Device 4 has the redundancy level "Partial redundancy", because the connection between the switch and the device is not redundant.
IO controller in the ring IO device in the ring with redundancy level "Full redundancy" Switch in the ring with redundancy level "Full redundancy" IO device in the spur with the redundancy level "Partial redundancy"
Figure 5-37 Example configuration with MRPD
The figure below shows the display of the redundancy levels in STEP 7 for the example configuration.
Figure 5-38 Display of the redundancy levels in STEP 7
170
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.4 Media redundancy (ring topologies)
5.4.4
Multiple rings
Multiple rings
Use multiple rings to achieve higher availability for PROFINET IO networks with star topology.
In a multiple ring configuration, several PROFINET lines lead from a switch (star topology). The individual PROFINET lines lead from IO device to IO device. Redundant PROFINET cables run back to the switch from the last IO device on each individual line.
The switch operates as a manager. The manager must have two ring ports for each ring. Multiple rings are possible. The SCALANCE X414 as of firmware version 3.10, for example, supports up to 4 rings.
The manager monitors all the rings individually: It checks for each particular ring (an MRP domain) whether the transmission path is intact. To do this, it uses an MRP instance in each case. An MRP instance is required for each connected ring (set up automatically by STEP 7).
Figure 5-39 Configuration with several rings
Requirements
SCALANCE X414 as of version 3.10 SCALANCE X300 as of version 4.0 (configured via GSD file)
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
171
Functions 5.4 Media redundancy (ring topologies)
Rules for the configuration of multiple rings MRP role at multiple rings: The device that belongs to all the rings must have the MRP role in every instance that is entered in the GSD file in the "SupportedMultipleRole" attribute. The switches from the series SCALANCE X300 as of version 4.0 and the switch X414 as of version 4.10 support the MRP role "Manager" for multiple rings. If the device that belongs to all rings has the "Manager" role in one ring, no devices with the "Manager (Auto)" role may exist in this ring.
Configuring multiple rings To configure an MRP configuration with multiple rings, follow these steps: 1. In the topology view, interconnect the ring ports of the devices that are intended to belong to an MRP domain to form a ring. 2. Select the PROFINET IO system in the network view. 3. In the Inspector window, navigate to "Properties" > "General" > "PROFINET" > "MRP domains" in the "Ring interconnections" field. This field shows you all the topological rings in the IO system with the associated MRP domains. 4. Select one of the rings generated above in the "Ring interconnections" field. The table below it shows all the PROFINET devices in the ring. 5. Set the media redundancy role for the PROFINET devices in the MRP role column.
Example of multiple rings The following figure shows an example configuration for multiple rings.
Figure 5-40 Example configuration with two rings and
172
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.4 Media redundancy (ring topologies)
In the example, Switch 1 belongs to two MRP rings. Ring 1 is formed by Switch 1 and PLC 1, Ring 2 by Switch 1 and IO device 1.
STEP 7 automatically assigns the "Manager" role to the switch. The other devices receive the "Client" role.
The manager is located at the point of intersection of the two rings 1 and 2. The manager monitors the two rings separately. To do this, it uses two MRP instances.
One MRP instance checks whether all devices in ring 1 are reachable, another instance monitors whether all devices in ring 2 are reachable (only one device in each case in the example).
You can configure each MRP instance separately.
The following figure shows the two MRP instances in the manager (PROFINET interface of the switch). Here in the example, MRP instance 1 checks whether the devices in the MRP domain "mrpdomain-1" can be reached. The MRP instance 2 is responsible for monitoring the devices of the MRP domain "mrpdomain-2".
Figure 5-41 Setting media redundancy for multiple rings
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
173
Functions 5.4 Media redundancy (ring topologies)
The following figure shows Ring 1 (mrpdomain-1). The participants of the mrpdomain-1 are the PROFINET interface of the CPU as the "Client" and the MRP interface 1 of the PROFINET interface of the switch as the "Manager".
Figure 5-42 Ring 1
The following figure shows Ring 2 (mrpdomain-2). The participants of the mrpdomain-2 are the PROFINET interface of the IO device as the "Client" and the MRP instance 2 of the PROFINET interface of the switch as the "Manager".
Figure 5-43 Ring 2
174
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
5.5
Real-time communication
Functions 5.5 Real-time communication
5.5.1
Introduction
Properties
PROFINET IO is a scalable real-time communication system based on the Layer 2 protocol for Fast Ethernet. With the RT transmission method, two real-time-support performance levels are available for time-critical process data and IRT for high-accuracy and also isochronous processes .
Figure 5-44 Real-time communication performance
Real-time communication and IT communication Industrial communication, especially in the factory automation and process automation, requires a punctual and deterministic data transmission. This is why, for the cyclic exchange of time-critical IO user data, PROFINET IO does not use TCP/IP, it uses real-time communication (RT) or isochronous real-time communication (IRT) for the synchronized data exchange in reserved time intervals.
Fields of application of PROFINET with RT PROFINET with RT is suited for: Time-critical applications in factory automation The implementation of large quantity structures in line process plants
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
175
Functions 5.5 Real-time communication
Fields of application of PROFINET with IRT PROFINET with IRT is particularly suitable for: Considerable deterministics with large quantity structures concerning the I/O user data communication (productive data) Considerable performance also with many devices concerning the I/O user data communication (productive data) Parallel transfer of productive and TCP/IP data via a cable, even with considerable data traffic whilst ensuring the forwarding of productive data by reserving the transmission bandwidth.
International standard IEC 61158 The communication procedures RT and IRT are standardized in the international standard IEC 61158.
5.5.2
RT
PROFINET IO with real-time communication (RT) is the ideal solution for integrating IO systems. This is a solution that also uses standard Ethernet in the devices and commercially available industrial switches as infrastructure components. A special hardware support is not required.
If you want to use PROFINET functions that provide an additional value, such as topology detection, diagnostics, device exchange without exchangeable medium/PG, you have to use switches that support the PROFINET standard according to the IEC 61158 standard. In the integrated switches of PROFINET devices and PROFINET switches (e.g., the SCALANCE product family), PROFINET functions in accordance with the PROFINET standard are implemented and can be used without restriction for integration in the PROFINET IO system (see also section Active network components (Page 28).
Real-time communication (RT)
PROFINET IO frames have priority over standard frames in accordance with IEEE802.1Q. This ensures the required determinism in the automation technology. The data is transferred via prioritized Ethernet frames. With RT, you can achieve update times 250 s with RT.
Switching mechanisms
Switches in SIMATIC meet the real-time requirements with two mechanisms on PROFINET: "Store and forward" and "Cut through".
Store and forward
In the Store and forward method, the switch stores the frames completely and places them in a queue. If the switch supports the international standard IEEE 802.1Q, then the data is sorted according to its priority in the queue. The frames are then forwarded selectively to the specific port that can access the addressed node (Store and forward).
176
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.5 Real-time communication
Cut through
In the Cut through process the entire data package is not stored temporarily in a buffer, it is passed directly onto the target port as soon as the target address and the target port have been determined.
The times required by the data package to pass through the switch are then minimal and independent of the frame length. The data are only stored temporarily in accordance with the Store and forward process as per priority when the section between the target segment and the port of the next switch is occupied.
5.5.3
IRT
Isochronous real-time communication (IRT)
IRT is a synchronized communication protocol for cyclic exchange of IRT data between PROFINET devices. A reserved bandwidth is available in the send cycle for IRT data. The reserved bandwidth ensures that the IRT data can be transferred at reserved synchronized intervals, without being influenced also by higher other network loads (such as TCP/IP communication, or additional real-time communication).
Advantages
PROFINET with IRT is synchronized communication in reserved time intervals. With IRT you have the option to be able to control time-critical applications such as motion control via PROFINET. With IRT you use further advantages:
High-precision deterministics allow highest control quality and thus, for example, exact positioning of axes
Simple and flexible integration of PROFINET devices for real-time applications in existing company networks
Shortest response times and highest deterministics by means of bandwidth reservation and thus also for applications that have to satisfy highest performance requirements (e.g., printing control/position control for presses, print-mark recognition with packaging machines)
Secured standard communication parallel to real-time communication via the same transmission medium
You can continue to use standard components for your PROFINET IO system outside of the sync domain
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
177
Functions 5.5 Real-time communication
Properties of isochronous real-time Topology configuration is a prerequisite for IRT. In addition to the reserved bandwidth, the frames from defined transmission paths are exchanged for the further optimization of data transfers. For this, the topological information from the configuration is used for planning the communication. Transmission and reception points of every individual data frame at every communication node are thus guaranteed. This allows you to achieve optimal usage of the bandwidth and reach the best possible performance in the PROFINET IO system. Use of IRT allows you to achieve update times with very high deterministics 125 µs and a jitter accuracy of the send clock < 1 µs. Isochronous applications are possible with IRT (see section Isochronous mode (Page 200)). * The minimum update time depends on the CPU used. The update times supported by a CPU are listed in the technical specifications of the CPU manual.
Note IWLAN and IRT PROFINET devices that are connected to PROFINET IO via access points, do not support IRT.
Synchronization The prerequisite for the IRTcommunication is a synchronization cycle for all PROFINET devices in a sync domain for distributing a mutual time basis. A synchronism of the transmission cycle of the PROFINET devices within a sync domain is achieved with this basic synchronization. A sync master specifies the clock to which sync slaves are synchronized. An IO controller or an IO device can have the role of sync master. If the sync master fails, all IO devices with IRT will fail. Sync master and sync slaves are always devices in a sync domain. Bandwidth is reserved within the sync domain for IRT communication. Real-time and non-real-time communication (TCP/IP communication) is possible outside of the reserved bandwidth.
Default sync domain If you have created a PROFINET subnet, a special sync domain is automatically created, the default sync domain. All PROFINET devices configured for the PROFINET subnet automatically belong to this sync domain. For additional information on creating sync domains, refer to the STEP 7 online help.
178
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.5 Real-time communication
Time ranges of the communication cycle The communication cycle is divided into three time ranges, which are shown in the following chart:
Figure 5-45 Reserving bandwidth
IRT data (synchronized communication) This time range can be reserved in specific steps, depending on the send clock. Only IRT data is transmitted during this time range.
RT data (real-time communication) The cyclic RT data is transferred in this time range. RT data is prioritized over "normal" TCP/IP data. TCP/IP data or Ethernet frames can have a priority of between 1 and 7. RT data have the Priority 6.
TCP/IP data (standard communication) Standard communication (e.g., TCP/IP) is transmitted in the remaining interval of the communication cycle.
In STEP 7, you can set the ratio of the bandwidth usage of cyclic IO data to standard communication. For information on how to set the bandwidth usage, refer to the section Setting the bandwidth usage for the send clock (Page 183)
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
179
Functions 5.5 Real-time communication
5.5.4
Comparison of RT and IRT
The most important differences between RT and IRT
Table 5- 2 Comparison between RT and IRT
Property Transmission method
Determinism
Hardware support through special Ethernet controllers is required Isochronous application Starting time of the isochronous application
RT Prioritizing the RT frames through Ethernet priority (VLAN tag)
Variance of the duration of transmission by the shared use of the transmission bandwidth with other protocols (e.g., TCP/IP) Not required
-
IRT Path-based switching on the basis of a communication path plan; no transmission of TCP/IP frames in the time range with IRT communication. Exact, planned transmission, transmission and reception times are guaranteed for all topologies.
Required
Yes The point in time for the reception of the data is planned exactly. Application can be started synchronized to the cycle.
5.5.5
Configuring PROFINET IO with IRT
Introduction
If you want to configure a PROFINET IO system with IRT, you have to configure the PROFINET IO devices. These PROFINET devices must support IRT. Set which device acts as the sync master and synchronizes the other devices. This is done by configuring a sync domain with a sync master and at least one sync slave.
Requirement
There is an IO system with an IO controller and at least one IO device. You have configured the topology for the IO system. The devices support IRT.
180
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Procedure
Functions 5.5 Real-time communication
Proceed as follows to enable an existing IO system for the use of IRT: 1. Select the PROFINET interface of the IO controller. 2. In the Inspector window, navigate to "Advanced options > Real time settings >
Synchronization".
Figure 5-46 IRT configuring sync master
3. Assign the IO controller the role of sync master under "Synchronization role". 4. Select the PROFINET interfaces of an associated IO device.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
181
Functions 5.5 Real-time communication
5. In the Inspector window, navigate to "Advanced options > Real time settings > Synchronization".
Figure 5-47 IRT configuring sync slave
6. Activate the RT class "IRT". The IO device will then automatically be assigned the synchronization role "sync slave".
7. You can check and correct your settings at any time using the "Domain settings" button. Or 1. Highlight the PROFINET IO system in the network view. 2. Click on the PROFINET IO system.
182
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.5 Real-time communication
3. Navigate to the device of the required sync domain in the Inspector window.
Figure 5-48 IRT configuring sync domain
4. Enter all necessary settings in the tables: Select an IO system. Set the synchronization role "sync master" for the IO controller. Set the RT class for the IO devices to "IRT". The IO devices will then automatically be assigned the synchronization role "sync slave".
You can now load the configuration to the relevant devices with PROFINET IRT.
5.5.6
Setting the bandwidth usage for the send clock
Bandwidth level For PROFINET IO with IRT, you can specify the maximum portion of the send cycle that you want to use for cyclic IO communication.
You have the following setting options for the bandwidth usage in STEP 7.
Maximum 25% cyclic IO data. Focus on non-cyclic data.
Maximum 37.5% cyclic IO data. Focus on non-cyclic data.
Maximum 50% cyclic IO data. Balanced proportion.
Maximum 90% cyclic IO data. Focus on cyclic IO data. (Requirement: The "Make 'high performance' possible" option is activated)
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
183
Functions 5.5 Real-time communication
Setting the bandwidth usage To set the bandwidth usage for a PROFINET IO system in STEP 7, follow these steps: 1. Select your IO system in the network view of STEP 7. 2. In the Inspector window, go to "Properties" > "General" > "PROFINET" > "Domain management" > "Sync domains" > "Name of the sync domain" > "Details". 3. Select the desired level of bandwidth usage from the "Bandwidth use" drop-drop down list box.
Figure 5-49 Setting the bandwidth usage
For information on how to set the bandwidth usage for IRT with maximum performance, refer to the section Configuration of IRT with high performance (Page 195)
184
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.5 Real-time communication
5.5.7
Setup recommendations for optimizing PROFINET
Optimizing PROFINET with RT PROFINET provides you with high-performance communication on all levels. The following figures shows an example of an optimized PROFINET topology.
Figure 5-50 Optimized PROFINET topology
When setting up your PN network topology, take care that the various automation applications are distributed among separate network branches so that a sufficient bandwidth reserve will be available for future expansions.
If you integrate standard Ethernet devices into the network topology or use standard Ethernet communication, take into account the network load caused by standard Ethernet and adapt the network topology as appropriate (max. bandwidth 100 Mbps).
For communication with higher-level networks with a high data volume, use the most direct paths possible to the higher-level network infrastructure.
Also observe the Installation Guideline (http://www.profibus.com/nc/download/installationguide/downloads/profinet-installation-guide/display/) of the PROFIBUS User Organization.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
185
Functions 5.5 Real-time communication
Setting up PROFINET with IRT
Keep in mind the following rules for setting up and operating a PROFINET IO system in IRT mode. These rules will ensure best possible operation of your PROFINET IO system.
When using IRT, you must configure the topology. This will enable exact calculation of the update time, bandwidth, and other parameters.
If you would like to use multiple sync domains, configure a sync boundary for the port which is currently connected to the PROFINET device of another sync domain.
In a sync domain, you can only configure one sync master at a time.
A PROFINET IO system may only be part of a single sync domain.
If you configure PROFINET devices in a sync domain and want to synchronize with IRT, the PROFINET devices concerned must support IRT communication.
If possible, use the same PROFINET device as the PROFINET IO controller and sync master.
If only some of the PROFINET devices in a PROFINET IO system are synchronized, please keep in mind the following: Assign PROFINET devices that are not participating in the IRT communication to the RT class "RT" and the synchronization role "unsynchronized" in the sync domain.
186
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.5 Real-time communication
Applications for CPU with multiple PROFINET IO interfaces Connecting machines: Your configuration contains machines located on separate IO lines. You can perform real-time communication between the CPUs over PROFINET IO interface X2. Use the I-device or shared I-device function for this purpose. The figure below shows an example configuration for two machines connected over the X2 interface with an I-device relationship.
Figure 5-51 I-device connection over 2nd PNIO interface
Distribution by automation tasks: For automation tasks with high performance and deterministic requirements, use PROFINET with IRT over the X1 interface. For other tasks that you can implement with RT, use the X2 interface.
If you use interface X2 as the PROFINET IO interface for one of the following CPUs, this can affect performance: CPU 1515(F)-2 PN CPU 1515T(F)-2 PN CPU 1516(F)-3 PN/DP CPU 1516T(F)-3 PN/DP CPU 1516(F)pro-2 PN You can find additional information in the section PROFINET interface (Page 23) and in the Cycle and Response Times (https://support.industry.siemens.com/cs/ww/en/view/59193558) function manual.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
187
Functions 5.5 Real-time communication
Topological overlap of IO systems in multi-controller applications In a configuration with multiple IO controllers, shared paths are subject to the combined network loads of all connected PROFINET IO systems. To avoid high communication loads in multi-controller applications, observe the following recommendations: Avoid paths that are shared by multiple IO systems. The figure below shows a configuration with two PROFINET IO systems that use the same paths.
Shared path
Figure 5-52 Multi-controller application with shared path
In the figure below, the two PROFINET IO systems do not use shared paths.
Figure 5-53 Multi-controller application with separate paths
If separation is not possible: Increase the update time for the affected IO devices.
Installation guidelines of the PROFIBUS user organization The installation guidelines can be found on the Internet (http://www.profibus.com/nc/download/installation-guide/downloads/profinet-installationguide/display/).
188
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.5 Real-time communication
5.5.8
Limitation of the data infeed into the network
Limiting the data infeed into the network on PROFINET interfaces
The "Limit data infeed into the network" function limits the network load of standard Ethernet communication which is fed into the network by the interface to a maximum value. This does not apply to cyclic real-time communication (RT/IRT).
In a PROFINET IO system, critical network loads can occur quickly with standard Ethernet communication, especially in line topologies. Devices which feed a lot of standard Ethernet communication into the PROFINET IO system, should support the function "Limit data infeed into the network". If necessary, you should optimize your topology by avoiding e.g. standard Ethernet devices in line topologies. You can find additional information on this in section Setup recommendations for optimizing PROFINET (Page 185).
Depending on the interface, you can activate or deactivate the "Limit data infeed into the network" function. If you use the X1 interface of an S7-1500 CPU as the IO controller or Idevice, the "Limit data infeed into the network" function is always enabled. Example: If you are not using the X1 interface of an S7-1500 CPU as IO controller or I-device, you can enable or disable the function.
Uses of the limitation of the data infeed to the network
Division of the bandwidth for standard Ethernet communication between devices: In PROFINET networks cyclic real-time communication and standard Ethernet communication share the same network. This means that only a limited bandwidth remains for standard Ethernet communication. The limitation of the data infeed ensures that the remaining bandwidth for standard Ethernet communication is not used just by one device, but is divided between several devices.
Smoothing peaks in the data infeed: The limitation of the data infeed smooths peak loads of standard Ethernet communication (for example, from Open User Communication, access by the Web server).
Limiting problems in the data infeed: If applications in a device generate too much data, this data is not forwarded to the PROFINET network. Negative effects (for example data loss, communication breakdown) remain limited to the device and its communications partner. Other nodes are not disturbed.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
189
Functions 5.6 PROFINET with performance upgrade
Setting limitation of the data infeed into the network for a CPU To set the limitation of the data infeed into the network, follow these steps: 1. In the network view of STEP 7, select the interface of the CPU. 2. In the Inspector window, go to "Properties" > "General" > "Advanced options" > "Interface options". 3. Select or clear the "Limit data infeed into the network" check box.
Figure 5-54 Limit data infeed into the network
5.6
PROFINET with performance upgrade
Performance upgrade
The performance upgrade implements the application class "High Performance" of the PROFINET specification V2.3.
The performance upgrade provides a series of measures that lead to the following improvements for PROFINET with IRT:
Reduction of runtime delays in the IO devices
Increase in the bandwidth for cyclic IO data
Reduction of the bandwidth used for PROFINET frames
Reduction of the send clocks
The improvements achieved with the performance upgrade mean that you can operate your PROFINET IO system with more devices with the same send clock or the same number of devices with a shorter send clock.
With PROFINET, it was previously possible to reach a send clock of 250 µs.
With the performance upgrade, it is now possible to achieve isochronous send clocks of up to 125 µs with the fast forwarding, dynamic frame packing and fragmentation procedures, depending on the performance capability of the CPU (see Technical Specifications in the device manuals). With short send clocks, standard communication remains possible.
The performance upgrade will help you to implement applications with high speed and send clock requirements.
190
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.6 PROFINET with performance upgrade
5.6.1
Dynamic frame packing
Dynamic frame packing
Previously, individual PROFINET IO frames were sent for every PROFINET IO device.
The performance upgrade uses the dynamic frame packing procedure that is based on the summation frame method. With the summation frame method, a frame contains the user data for neighboring devices on a line. With Dynamic Frame Packing, every IO device takes its data from the frame and forwards the rest. The frame is shortened from IO device to IO device. Dynamic frame packing improves the use of the bandwidth in a line topology.
The following figure shows how Dynamic Frame Packing works based on the example of a frame containing the user data for 3 IO devices.
The PROFINET IO frame contains the user data for all 3 IO devices (green, blue and orange). The PROFINET IO frame reaches the first IO device. The IO device takes its user data (green)
from the frame and forwards the remaining frame.
The PROFINET IO frame contains the user data for two IO devices (blue and orange). The PROFINET IO frame reaches the second IO device. The IO device takes its user data
(blue) from the frame and forwards the remaining frame.
The PROFINET IO frame contains the user data for one IO device (orange). The PROFINET IO frame reaches the last IO device. The IO device saves the entire frame
including user data (orange).
Figure 5-55 Dynamic Frame Packing (DFP)
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
191
Functions 5.6 PROFINET with performance upgrade
DFP groups
Dynamic frame packing automatically groups IO devices that support the performance upgrade into DFP groups. To be grouped together in a DFP group. the IO devices must be located one after the other in a line and must have the same update time and watchdog time. As soon as a maximum frame size for the DFP group is exceeded or a maximum number of members for a DFP group is reached, Dynamic Frame Packing automatically opens a new DFP group.
STEP 7 shows the DFP groups in "Domain management" > "Sync domains" > "Name of the sync domain" > "Device" in the "IO devices" box.
Figure 5-56 Display of the DFP groups in STEP 7
Note Dynamic frame packing with high watchdog times If you set the "Accepted update cycles without IO data" parameter higher than 31 for an IO device, Dynamic Frame Packing does not place this IO device in a DFP group.
192
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
5.6.2
Functions 5.6 PROFINET with performance upgrade
Fragmentation
The transfer of a complete standard Ethernet frame with TCP/IP data takes up to 125 µs. This means that the cycle time for PROFINET IO data cannot be reduced by any desired amount.
The performance upgrade uses the fragmentation procedure, which breaks down TCP/IP frames into sub-frames. These frame segments are transferred to the target device over multiple send clocks; there they are reassembled to the original TCP/IP frame.
Fragmentation is a requirement for cycle times lower than 250 µs. In these short send clocks, you can use more bandwidth for cyclic IO data, since the fragments of the standard Ethernet frames use significantly less bandwidth than a complete standard Ethernet frame.
The following figure shows how fragmentation works.
A standard Ethernet frame with TCP/IP data is up to 125 µs. During fragmentation, the standard Ethernet frame is divided into frame segments. The frame segments are divided into multiple short send clocks.
Figure 5-57 Fragmentation
Note The PROFINET IO interface of the IO controller supports fragmentation if all the ports except one are deactivated.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
193
Functions 5.6 PROFINET with performance upgrade
5.6.3
Fast forwarding
To be able to decide whether a frame should be forwarded or used, a PROFINET IO device requires the frame ID. It previously took 1440 ns until the frame ID was present in the IO device.
The performance upgrade uses the fast forwarding procedure in which the frame ID is located nearer the front of the frame. The throughput time in the device is reduced to 320 ns.
With fast forwarding, the throughput time of the frame is reduced in your PROFINET IO system. This results in decisive performance advantages, particularly in line, ring and tree topologies.
The figure below compares the throughput of a PROFINET IO frame in an IO device with and without fast forwarding.
Start:
· Both PROFINET frames reach the IO device. The IO devices start to check the frames for the frame ID
After 320 ns:
· Without fast forwarding: The IO device is still checking the PROFINET frame for the frame ID.
· With fast forwarding: The IO device receives the frame ID from the PROFINET frame and forwards the frame.
After 1440 ns:
· Without fast forwarding: The IO device receives the frame ID from the PROFINET frame and forwards the frame.
· The PROFINET frame with fast forwarding is "ahead" of the PROFINET frame without fast forwarding.
Figure 5-58 Fast forwarding
194
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.6 PROFINET with performance upgrade
5.6.4
Configuration of IRT with high performance
High-end applications with IO communication require excellent performance in IO processing, for example in the control of wind turbines (converter control).
To use IRT communication with the highest performance in your PROFINET IO system, enable the option "Make 'high performance' possible".
When you enable the "Make 'high performance' possible" option, this has the following effects:
You can set send clocks of 187.5 µs and 125 µs (for example CPU 1518-4 PN/DP) or 187.5 µs (for example CPU 1517-3 PN/DP), see Technical specifications in the CPU device manuals.
You can set more bandwidth use for cyclic IO data.
You can use the option "Allows the use of 'fast forwarding'".
Requirements S7-1500 CPU as of firmware version V2.0
Enable the "Make 'high performance' possible" option. Follow these steps to activate the "Make 'high performance' possible" option: 1. Select the PROFINET IO system in the network view of STEP 7. 2. In the Inspector window, go to "Properties" > "General" > "PROFINET" > "Domain management" > "Sync domains" > "Name of the sync domain". 3. Enable the "Make 'high performance' possible" option.
Figure 5-59 Activating high performance
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
195
Functions 5.6 PROFINET with performance upgrade
Using more bandwidth for cyclic IO data Requirement: The "Make 'high performance' possible" option is enabled. To set more bandwidth for cyclic IO data for your PROFINET IO system, follow these steps: 1. Select your IO system in the network view of STEP 7. 2. In the Inspector window, go to "Properties" > "General" > "PROFINET" > "Domain management" > "Sync domains" > "Name of the sync domain" > "Details". 3. In the drop-down list, select "Maximum 90% cyclic IO data. Focus on cyclic IO data".
Figure 5-60 Using more bandwidth for cyclic IO data
Note Bandwidth usage in isochronous mode If you operate your PROFINET IO system in isochronous mode, avoid using the setting for the bandwidth usage "Maximum 90% cyclic IO data. Focus on cyclic IO data."
Setting low send clocks (example CPU 1518-4 PN/DP) Requirement: The "Make 'high performance' possible" option is enabled. 1. Select the PROFINET IO system in the network view of STEP 7. 2. In the Inspector window, go to "Properties" > "General" > "PROFINET" > "Domain management" > "Sync domains" > "Name of the sync domain". 3. Select the send clock for "Send clock" in the drop-down list.
Figure 5-61 Setting low send clocks
196
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.6 PROFINET with performance upgrade
Requirements for the fragmentation process (example CPU 1518-4 PN/DP) If you use the following combinations for send clock and bandwidth settings, the devices in the IO system use the fragmentation process. Send clock cycle 125 µs: Always fragmentation irrespective of the bandwidth setting. Send clock cycle 187.5 µs: Fragmentation with the bandwidth settings "Maximum 50% cyclic IO data. Balanced proportion." and "Maximum 90% cyclic IO data. Focus on cyclic IO data." The PROFINET IO interface of the controller supports fragmentation if all the ports except one are deactivated.
Optimizing port settings for low send clocks You can further optimize the bandwidth use in your PROFINET IO system by using cables with a short cable length (< 20 m) or a short signal delay (max. 0.12 µs) between the devices. To configure cables with a shorter length or signal delay in STEP 7, follow these steps: 1. Select the port in the topology view of STEP 7. 2. Navigate in the Inspector window to "Port interconnection" in the "Partner port" box. 3. Select the option "Cable length" or "Signal delay:". 4. Select the cable length or enter the signal delay.
Figure 5-62 Optimizing port settings for low send clocks
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
197
Functions 5.6 PROFINET with performance upgrade
Allowing fast forwarding Requirements: The PROFINET IO device has to support the fast forwarding process so that the process can be used by the device. The "Make 'high performance' possible" option is enabled. The PROFINET IO interface supports fast forwarding if all the ports except one are deactivated. Follow these steps to allow fast forwarding: 1. Select the PROFINET IO system in the network view of STEP 7. 2. In the Inspector window, go to "Properties" > "General" > "PROFINET" > "Domain management" > "Sync domains" > "Name of the sync domain". 3. Enable the "Allows the use of `fast forwarding'" option.
Figure 5-63 Allowing fast forwarding
Note Fast forwarding and IPv6 The operation of fast forwarding in combination with IPv6 is not supported. As soon as an IO device in the subnet uses an IPv6 address, you must not activate "fast forwarding".
198
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
5.6.5
Functions 5.6 PROFINET with performance upgrade
Sample configuration for IRT with high performance
The figure below shows an example configuration with which you can achieve maximum performance.
Port 1 of the X1 interface of the CPU is deactivated.
Port 2 of the X1 interface and the ports of the interface modules on the bus use the following setting: Medium copper, cable length < 20 m or signal delay max. 0.12µs A programming device connection to the CPU can be established via the interfaces X2 and X3 of the CPU or via the free port at the end of the line. Figure 5-64 Example configuration for IRT with high performance
Use the following settings for the Sync domain: Enable the "Make 'high performance' possible" option. Set the send clock to 125 µs. Enable the "Allows the use of `fast forwarding'" option.
Standard Ethernet communication for IRT with high performance Standard Ethernet communication is still possible even in a PROFINET IO system with high performance. Keep in mind that you first arrange the IRT nodes, as seen from the IO controller, and arrange the standard Ethernet nodes at the end of the line. With a large volume of data through standard Ethernet communication, it makes sense to reduce the load on your network by separating standard Ethernet communication and cyclic real-time communication. Example: Use the interface X1 for the PROFINET IO communication and a different interface for the standard Ethernet communication.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
199
Functions 5.7 Isochronous mode
5.7
Isochronous mode
5.7.1
What is isochronous mode?
Objectives of isochronous operation
The advantages of the isochronous mode function in automation engineering can be seen in an example from everyday life.
The transmission of data corresponds to the transport of people on public transport. Assuming public transport were to operate at maximum speed while reducing stop times at the passenger terminals to absolute minimum, the last thing many potential passengers would notice of the departing contraption are its red tail lights. The overall travel time is, however, decided by the train, bus or underground-railway clock, because well adjusted timing is essential to a good service. This also applies in automation engineering. Not only fast cycles but also the adaptation and synchronization of the individual cycles result in optimum throughput.
Just-In-Time
Figure 5-65 System cycle
200
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.7 Isochronous mode
The fast and reliable response time of a system operating in isochronous mode is due to the fact that all data is provided just-in-time. The basis for this is an equidistant cycle. The isochronous mode function guarantees synchronization of the following at constant time intervals: Signal acquisition and output by the distributed I/O Signal transmission via PROFINET IO Program execution in the CPU in time with the equidistant PROFINET IO The result is a system that acquires its input signals, processes them and outputs the output signals at constant time intervals. Isochronous mode guarantees precisely reproducible and defined process response times as well as equidistant and synchronous signal processing for distributed I/O.
Advantages of isochronous mode The use of isochronous mode allows high-precision control. Optimized control loops through constant, calculable dead times Determinism, reliable reproducibility of response times Consistent (simultaneous) reading in of input data Consistent (simultaneous) output of output data
5.7.2
Use of isochronous mode
An isochronous system acquires measured values and process data within a fixed system cycle, processes the signals and outputs them synchronously to the process. Isochronous mode contributes to a high control quality and increased production accuracy. With isochronous mode, the possible fluctuations of process response times are drastically reduced. You make use of the time-assured processing to improve machine cycle times. Even fast processes can be reliably controlled thanks to the precise time reproducibility of all sequences. Shorter cycle times increase the processing speed and help to lower production costs.
In principle, isochronous mode is worthwhile whenever measured values must be acquired synchronously, movements must be coordinated, and process responses must be defined and simultaneously executed, as in the following example. Isochronous mode can thus be used in a wide variety of applications.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
201
Functions 5.7 Isochronous mode
Example: Measuring at multiple measurement points with isochronous mode
Automation task A camshaft production process requires precise measurement of the camshafts for quality assurance purposes.
Feature For this purpose, a component is needed that can synchronously measure the positions and displacements of the cam during a rotation of the camshaft.
Solution
Figure 5-66 Measuring of camshafts
With use of isochronous mode, the measured values are simultaneously acquired at the various measuring points at fixed times. This results in the following workflow: Continuously rotate the camshaft During continuous rotation, synchronously measure the positions and cam displacements Process the next cam shaft Thus, during a single rotation of the camshaft, all the positions of the camshaft and the associated measured values (red) are measured synchronously. The machine cycle time improves with the same or better measuring accuracy.
Advantage and benefits The time required for measurement is reduced.
5.7.3
Time sequence of synchronization on PROFINET IO
Introduction
On PROFINET IO, you can isochronously operate I/O modules in distributed I/O systems on a CPU, e.g. in distributed I/O systems ET 200SP, ET 200MP.
Like the I/O modules, the interface modules of the I/O systems must support isochronous mode.
202
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.7 Isochronous mode
From reading in input data to outputting output data The basic time sequence of all components involved in synchronization is explained below:
Measured value acquisition in the process Isochronous read-in of input data Transport of input data to the IO controller (CPU) via the subnet Further processing in the isochronous application of the CPU Transport of output data to the outputting IO device via the subnet Isochronous output of output data
T_DC TI TO TV
Data cycle (Time_DataCycle) Time for reading in the input data Time for outputting the output data Configured delay time
Figure 5-67 Time sequence of synchronization on PROFINET IO
To ensure that all input data is ready for transport via the subnet at the next start of the PROFINET IO cycle, the start of the I/O read-in cycle is advanced by the amount of lead time TI. TI is the "flashbulb" for the inputs; at this instant, all synchronized inputs are read in. TI is necessary in order to compensate for analog-to-digital conversion, backplane bus times, and the like. The lead time TI can be configured by STEP 7 or by you. Let the lead time TI be assigned automatically by STEP 7. With the default setting, STEP 7 ensures that a common, minimum TI is set.
The subnet transports the input data to the IO controller/DP master. The application is started synchronized to the cycle. That is, the isochronous mode interrupt OB is called after a configurable delay time TV. The user program in the isochronous mode interrupt OB defines the process response and provides the output data in time for the start of the next data cycle. The length of the data cycle (send clock/DP cycle time) is always configured by you.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
203
Functions 5.7 Isochronous mode
TO is the time for the compensation arising from the backplane bus and the digital-to-analog conversion within the IO device/DP slave. TO is the "flashbulb" for the outputs. The synchronized outputs are output at this time. Time TO can be configured by STEP 7 or by you. Let time TO be assigned automatically by STEP 7. STEP 7 automatically calculates a common, minimum TO.
5.7.4
Configuring isochronous mode
5.7.4.1
Introduction
Configuring at a glance
Setting parameters for isochronous operation of the I/O module
You use the properties of the I/O addresses of the corresponding I/O module to:
Set isochronous mode for the module.
Assign the inputs and outputs of the module to a process image partition and an isochronous mode interrupt OB.
The data of the process image partition is updated synchronously to the assigned OB. Isochronous mode interrupts give you the option of starting programs isochronously with the PROFINET send clock. Isochronous mode interrupts are processed with high priority.
Setting the send clock
The send clock is the shortest possible transmission interval for the data exchange. In isochronous mode, the send clock corresponds to data cycle T_DC.
You set the send clock in the properties of the PROFINET interface of the CPU or in the sync domain.
Setting the application cycle
The application cycle is a multiple of data cycle T_DC. If the runtime of the isochronous mode interrupt OB is short, the application cycle can be identical to the data cycle (= send clock).
You can reduce the application cycle of the isochronous mode interrupt OB relative to the send clock of an isochronous PROFINET IO system. Set an integer multiple of the send clock as the reducing factor.
You use the factor to reduce the CPU utilization by executing the isochronous mode interrupt OB less frequently. You set the application cycle in the properties of the isochronous mode interrupt OB.
204
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.7 Isochronous mode
Setting the delay time
The delay time is the time between the start of the send clock and the start of the isochronous mode interrupt OB. During this time, the IO controller performs cyclic data exchange with the IO devices.
STEP 7 sets the default delay time in such a way that the isochronous update of the process image partition automatically falls within the execution window of the application cycle.
You set the delay time in the properties of the isochronous mode interrupt OB. A shorter delay time enables you to increase the processing time for your user program in the isochronous mode interrupt OB.
Additional configurations for isochronous mode on PROFINET IO:
Setting IRT as the RT class for the interconnected PROFINET interfaces
A precondition for isochronous operation on PROFINET IO is IRT communication (Isochronous Real Time Communication). IRT means synchronized data exchange at reserved time intervals.
Configuring the topology of the configuration
A precondition for IRT communication is the topology configuration. In addition to the reserved bandwidth, the exchange of frames on defined transmission paths is used for further optimization of data communication. For this, the topological information of the configuration is used for planning the communication.
Using a sync domain, you assign the IO devices (sync slaves) to an IO controller (sync master) for the isochronous data exchange.
A precondition for IRT communication is a synchronization cycle for all PROFINET devices in a sync domain, for distribution of a common time base. With this basic synchronization, synchronous operation of the transmission cycle of the PROFINET devices within a sync domain is achieved.
5.7.4.2
Configuring isochronous mode on PROFINET IO
Introduction
The configuring of isochronous mode for a module is described as IO device in the following based on the ET 200MP distributed I/O system. The procedure described also applies to other distributed I/O systems (e.g., ET 200S or ET 200SP).
The IO controller is an S7-1500 CPU.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
205
Functions 5.7 Isochronous mode
Requirements
The STEP 7 network view is open.
A S7-1500 CPU has been placed (e.g., CPU 1516-3 PN/DP).
An IM 155-5 PN HF interface module (ET 200MP) has been placed and networked with the CPU via PROFINET IO.
All requirements for an IRT configuration are met:
The ports of the networked PROFINET interfaces of the CPU and interface module are interconnected (topology configuration).
The RT class of the PROFINET interface of the interface module is set to "IRT" (area "Advanced options > Real time settings > Synchronization").
The "sync master" and "sync slave" roles are assigned for the PROFINET interfaces of the CPU and interface module (in the properties of a PROFINET interface: area "Advanced options" > "Media redundancy" > "Domain settings").
Procedure
To create an isochronous connection between the I/O and user program, follow these steps: 1. Select the IM 155-5 PN HF in the network view of STEP 7. Change to the device view. 2. Insert an I/O module that can be operated isochronously (e.g. DI 16 x 24VDC HF).
206
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.7 Isochronous mode
3. Go to the "I/O addresses" area in the Inspector window of the selected I/O module.
Figure 5-68 Configuring isochronous mode on PROFINET IO
4. Make the following settings in the I/O addresses area:
Select the "Isochronous mode" option.
Select a process image partition, e.g., process image partition 1.
Click the "Organization block" drop-down list. Click the "Add" button or select an existing OB. A dialog box for selecting organization blocks opens.
Select the "Synchronous Cycle" OB. Confirm the selection with "OK".
In the case of automatic number assignment, OB 61 will be generated and opened.
In the Inspector window, you can continue directly with the setting of the application cycle and delay time (Page 208) in the "Isochronous mode" area and start the programming of the OB in the instruction section.
5. If required, insert additional IO devices in the network view. Adapt the configuration and the settings for the isochronous mode.
6. You want to retrieve information about calculated bandwidths or on adapting the send clock. Select the sync domain in the network view and navigate to the corresponding area of the domain management in the Inspector window.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
207
Functions 5.7 Isochronous mode
Reference
You can find examples of parameter assignment and possible settings of isochronous mode for distributed I/O and drives in STEP 7 in this FAQ on the Internet (https://support.industry.siemens.com/cs/ww/en/view/109480489).
5.7.4.3
Setting the application cycle and delay time
Requirements
You have created an isochronous mode configuration in STEP 7. You have created an isochronous mode interrupt OB Synchronous Cycle (OB 6x). The isochronous mode interrupt OB is open.
Setting the application cycle
The application cycle is a multiple of data cycle T_DC (send clock). You use the application cycle setting to reduce the CPU utilization caused by execution of the isochronous mode interrupt OB. In the following example, the OB is called only after every 2nd data cycle T_DC in the CPU.
To set the application cycle for your isochronous mode application, follow these steps:
1. Open the "Properties" dialog of the isochronous mode interrupt OB under consideration.
2. In the area navigation, click the "Isochronous mode" group .
3. Set the application cycle in "Application cycle (ms)". Open the drop-down list box and select the application cycle. The drop-down list offers multiples of data cycle T_DC as possible values for the application cycle. Data cycle T_DC is set to 2 ms in the following figure.
Figure 5-69 Setting the application cycle
208
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.7 Isochronous mode
Setting the delay time The delay time is the time between the start of the send clock and the start of the isochronous mode interrupt OB. STEP 7 sets the delay time automatically to the start of the execution window by default. As a result, the isochronous mode update of the process image partition automatically falls within the execution window of the application cycle.
You can also set the delay time manually. A shorter delay time enables you to increase the processing time for your user program in the isochronous mode interrupt OB. If a manual setting is made, note that you must call the "SYNC_PI" and "SYNC_PO" instructions in the execution window of the application cycle.
To set the delay time for your isochronous mode application, follow these steps:
1. Open the "Properties" dialog of the isochronous mode interrupt OB under consideration.
2. In the area navigation, click the "Isochronous mode" group .
3. Clear the "Automatic setting" check box.
4. Enter your desired delay time in "Delay time (ms)".
Figure 5-70 Setting the delay time
5.7.5
Programming isochronous mode
5.7.5.1
Basics of Programming
Programming in the isochronous mode interrupt OBs
You program the isochronous section of the program exclusively in the isochronous mode interrupt OBs Synchronous Cycle (OB 6x).
Because the isochronous mode interrupts are processed with high priority, only the timecritical sections of the program should be processed in the isochronous mode interrupt OB. The isochronous mode interrupt OB is called with a configured delay time.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
209
Functions 5.7 Isochronous mode
Access to isochronous I/O through call of instructions
You access the isochronous I/O via a process image partition. That is, the addresses of the isochronous modules must be within one process image partition.
You program access to the isochronous IO in isochronous mode interrupt OB Synchronous Cycle (OB 6x) with the SYNC_PI and SYNC_PO instructions.
The isochronous I/O is updated by the call of the "SYNC_PI" and "SYNC_PO" instructions and therefore in the corresponding process image partition.
Note
Recommendation: To prevent inconsistent data from being returned to OB 6x, do not use the "DPRD_DAT" and "DPWR_DAT" instructions (direct data access) in the isochronous mode interrupt OB.
The "SYNC_PI" and "SYNC_PO" instructions update the process image partition only within the permitted execution window. The execution window stretches from the end of the cyclic data exchange to the point in time before the end of T_DC at which the outputs can still be copied in time. The data exchange must be started within this time window. If the execution window is violated by the processing of the "SYNC_PI" and "SYNC_PO" instructions, the instructions indicate a corresponding error message.
Program execution models Depending on the order of the "SYNC_PI" and "SYNC_PO" instruction calls in OB 6x, there are two basic models for the program execution:
IPO model (read Inputs - Processing - write Outputs)
OIP model (write Outputs - read Inputs - Processing)
5.7.5.2
Program execution according to the IPO model
If the execution time of the isochronous mode interrupt OB is significantly shorter than one data cycle T_DC, use the IPO model. In the IPO model, you do not reduce the data cycle. That is, the application cycle of the isochronous mode interrupt OB is equal to data cycle T_DC.
The IPO model enables the shortest response times.
210
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.7 Isochronous mode
Programming according to the IPO model in the isochronous mode interrupt OB For programming according to the IPO model: 1. Call the SYNC_PI instruction at the start of the isochronous mode interrupt OB. 2. Then call the actual user program. 3. Call the SYNC_PO instruction at the end of the isochronous mode interrupt OB.
Table 5- 3 Programming according to the IPO model
Step 1
Action Read in (I)
2
Process (P)
3
Output (O)
Explanation
The SYNC_PI instruction reads in the inputs of the process image partition and provides them to the isochronous mode interrupt OB.
You program the actual user program of the isochronous mode interrupt OB.
The SYNC_PO instruction outputs the data changed by the user program via the process image partition.
Signal sequence in the IPO model
The following figure shows the signal sequence in the IPO model from the acquisition and the processing in the CPU to the output of the process values:
Execution of isochronous mode interrupt OB "SYNC_PI" instruction "SYNC_PO" instruction Isochronous read-in of process values on I/O module at time TI Isochronous output of process values on I/O module at time TO
Figure 5-71 Signal sequence in the IPO model
At time TI the process values are read in isochronously on the I/O. The processing of the data in the IPO model is completed within one data cycle T_DC. The output data is always available on the I/O in the next data cycle T_DC at time TO.
With the IPO model, there is a constant execution time from the "input terminal" to the "output terminal" of TI + T_DC + TO.
TI + 2×T_DC + TO can be guaranteed for the process response time.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
211
Functions 5.7 Isochronous mode
5.7.5.3
Program execution according to the OIP model
Use the OIP model in the case of execution cycles of the isochronous mode interrupt OB of different lengths, if the application cycle is greater than data cycle T_DC.
The data exchange with the process is always deterministic in the OIP model, i.e. takes place at a precisely specified time.
Programming according to the OIP model in the isochronous mode interrupt OB For programming according to the OIP model: 1. Call the SYNC_PO instruction at the start of the isochronous mode interrupt OB. 2. Then call the SYNC_PI instruction. 3. Then call the actual user program.
Table 5- 4 Programming according to the OIP model
Step 1
Action Output (O)
2
Read in (I)
3
Process (P)
Explanation
The SYNC_PO instruction outputs the data that was changed by the user program in the previous cycle via the outputs of the process image partition.
The SYNC_PI instruction reads in the inputs of the process image partition of the current cycle and provides the inputs to the isochronous mode interrupt OB.
You program the actual user program of the isochronous mode interrupt OB.
212
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.7 Isochronous mode
Signal sequence in the OIP model The following figure shows the signal sequence in the OIP model from the acquisition of process values and the processing in the CPU to the output of the process values. The application cycle is twice as long as data cycle T_DC in this example.
Execution of isochronous mode interrupt OB
"SYNC_PI" instruction
"SYNC_PO" instruction
Isochronous read-in of process values on I/O module at time TI
Isochronous output of process values on I/O module at time TO
Figure 5-72 Signal sequence in the OIP model
At time TI the process values are read in isochronously on the I/O. The data is processed over 2 application cycles in the OIP model. The output data is always available on the I/O in the following application cycle at time T_DC + TO.
With the IPO model, there is a constant execution time from the "input terminal" to the "output terminal" of TI + application cycle + T_DC + TO.
TI + 2 x application cycle + T_DC + TO can be ensured as the process response time.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
213
Functions 5.8 Direct data exchange
5.8
Direct data exchange
5.8.1
Introduction
This section describes the direct data exchange function.
Principle of operation
Starting with firmware version V2.8, the S7-1500 CPU supports direct data exchange with other S7-1500 CPUs.
In the case of direct data exchange, an S7-1500 CPU provides cyclic user data from the I/O area to one or more partners. The direct data exchange is based on PROFINET with IRT and isochronous mode.
The data exchange takes place via transfer areas.
Direct data exchange between two S7-1500 CPUs (1:1)
The figure below shows the direct data exchange between two S7-1500 CPUs. The output transfer areas of the sending S7-1500 CPU correspond to the input transfer areas of the receiving S7-1500 CPU.
Transfer relation between the user program and the transfer area. The user program and the transfer areas ex-
change input and output data via this path.
Communication relation for direct data exchange You configure the communication relations in STEP 7. You create
transfer areas for direct data exchange in the properties of the communication relations.
Figure 5-73 Direct data exchange between two S7-1500 CPUs (1:1)
214
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.8 Direct data exchange
Direct data exchange with multiple receivers (1:n) The following figure shows the direct data exchange with multiple S7-1500 CPUs. In this case, the sending S7-1500 CPU provides the data of its output transfer areas to multiple S7-1500 CPUs. Each receiving S7-1500 CPU has its own input transfer areas.
Transfer relation between the user program and the transfer area. The user program and the transfer areas ex-
change input and output data via this path.
Communication relation for direct data exchange You configure the communication relations in STEP 7. You create
transfer areas for direct data exchange in the properties of the communication relations.
Figure 5-74 Direct data exchange with multiple receivers (1:n)
Applications
Deterministic, isochronous I/O communication between multiple S7-1500 CPUs
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
215
Functions 5.8 Direct data exchange
Properties of direct data exchange Always isochronous Support of MRPD for MRP configuration No acyclic data exchange via PROFINET data record mechanisms No PROFINET alarms Configuration limits: Maximum data length for direct data exchange 3075 bytes including user data qualifier Maximum data length for a transfer area: 1024 bytes without user data qualifier Maximum number of transfer areas of sender: 128 Maximum number of transfer areas of receiver: 512, distributed among a maximum of 64 receivable PROFINET frames and thus up to 64 sender CPUs
Diagnostics options of the receiver Operating state change of sender: When the sender goes from RUN to STOP, the receiver behaves as follows: The "SYNC_PI" and "SYNC_PO" instructions return an error message in parameter RET_VAL during synchronization of the process image. With direct I/O access to the input transfer areas of the direct data exchange, OB 122 "I/O access error" is called, if present. Incoming diagnostic message "I/O data failure in hardware component" When the sender goes from STOP to RUN, the receiver behaves as follows: Call of OB 83 "Pull/plug interrupt" for input transfer areas of the direct data exchange Up until the call of OB 83, OB 122 is called if present. Outgoing diagnostic message "User data failure of hardware component" Station failure/station recovery of the sender: When the sender fails, e.g. due to a bus interruption, the receiver behaves as follows: Call of OB86 "Rack failure" The "SYNC_PI" and "SYNC_PO" instructions return an error message in parameter RET_VAL during synchronization of the process image. With direct I/O access to the input transfer areas of the direct data exchange, OB 122 "I/O access error" is called, if present. When the sender recovers after a station failure, e.g. because the bus connection is reestablished, the receiver behaves as follows: Call of OB86 "Rack failure"
216
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.8 Direct data exchange
5.8.2
Configuring direct data exchange between two S7-1500 CPUs
The procedure for configuring direct data exchange between two IO controllers is described below.
First, you create the communication relation for direct data exchange. You then configure transfer areas for the connection.
Requirements
STEP 7 V16 or higher Two S7-1500 CPUs firmware version V2.8 or higher IRT is configured:
Both CPUs are in one sync domain. One CPU is the sync master, and the other CPU is the sync slave. Ports are interconnected.
Setting up the communication relation for direct data exchange
To set up the communication relation for direct data exchange between two S7-1500 CPUs, follow these steps:
1. Select the PROFINET interface X1 of the sending S7-1500 CPU.
2. Change to the table view of the network view, tab "I/O communication". The PROFINET interface X1 of the CPU is shown in the "Partner 1" column.
3. In the "Partner 2" column at "<Drop or select the device here>", select the PROFINET interface of the communication partner from the drop-down list as the connection partner. Note the communication direction:
: Communication partner is sender
: Communication partner is receiver
The communication relation for direct data exchange between the two S7-1500 CPUs is set up.
Figure 5-75 Communication relation for direct data exchange
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
217
Functions 5.8 Direct data exchange Configuring transfer areas for direct data exchange
To configure a transfer area for direct data exchange, follow these steps: 1. Select the communication relation for direct data exchange.
Figure 5-76 Communication relation for direct data exchange
2. Navigate to the properties of the communication relation to "General" > "Direct data exchange" > "Transfer areas".
3. Create a new transfer area by double-clicking on "<Add new>". Assign a meaningful name for the transfer area.
A transfer area for direct data exchange is created.
Figure 5-77 Transfer area for direct data exchange
The communication direction of the transfer area is specified by the communication relation. You cannot change the communication direction of the transfer area.
218
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.8 Direct data exchange
Editing the transfer area Set the properties of the transfer area under "General" > "Direct data exchange" > "Name of transfer area" > "Detail of the transfer area".
Figure 5-78 Properties of the transfer area
Table 5- 5 Overview of the settings of the transfer area
Parameter Start address Organization block Process image
Data length [bytes]
Local
Set the start address of the input or output transfer areas in the local CPU.
Assign the transfer area to an isochronous mode interrupt OB or the "MC-Servo" OB.
Select a process image partition, e.g. PIP 1. If you have assigned "MC-Servo" as the organization block, STEP 7 automatically sets "PIP OB Servo" as the process image.
Set the size of the transfer area.
Partner
Set the start address of the input or output transfer areas in the partner CPU.
Assign the transfer area to an isochronous mode interrupt OB or the "MC-Servo" OB.
Select a process image partition, e.g. PIP 1. If you have assigned "MC-Servo" as the organization block, STEP 7 automatically sets "PIP OB Servo" as the process image.
-
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
219
Functions 5.8 Direct data exchange
Downloading the configuration to devices Rules: Download the configuration to all CPUs involved. If you make changes to the configuration of the direct data exchange, download these changes to all CPUs involved.
5.8.3
Configuring direct data exchange between multiple IO controllers
The procedure for configuring direct data exchange between multiple S7-1500 CPUs is described below.
First, you set up the communication relations for direct data exchange. You then configure transfer areas for the communication relations.
Requirements
STEP 7 V16 or higher S7-1500 CPUs firmware version V2.8 or higher IRT is configured:
All CPUs are in one sync domain. One CPU is the sync master, and the other CPUs are sync slaves. Ports are interconnected.
Setting up the communication relations for direct data exchange
To set up the connection for direct data exchange between multiple S7-1500 CPUs, follow these steps:
1. Select the PROFINET interface X1 of the sending CPU.
2. Change to the table view of the network view, "I/O communication" tab. The PROFINET interface X1 of the CPU is shown in the "Partner 1" column.
3. In the "Partner 2" column at "<Drop or select the device here>", select the PROFINET interface of the communication partner from the drop-down list as the connection partner. Note the transfer direction:
: Connection partner is sender
: Connection partner is receiver
The connection for direct data exchange between the two S7-1500 CPUs is set up.
4. Repeat step 3 for every other receiving IO controller.
220
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.8 Direct data exchange The connections for direct data exchange between the sending CPU and the receiving CPUs are set up.
Figure 5-79 Connection for direct data exchange with multiple S7-1500 CPUs
Configuring transfer areas for direct data exchange The following graphic shows the order for configuration of the transfer areas.
First, you configure the transfer area between the sender and one receiver. You configure this transfer area at the
PROFINET interface of the sender.
You then configure the transfer areas between the sender and the other receivers. You configure these transfer
areas at the PROFINET interfaces of the receivers.
Figure 5-80 Order of configuration of transfer areas in the case of multiple receivers
To configure a transfer area for direct data exchange, follow these steps:
1. Select the PROFINET interface X1 of the sending CPU and change to the table view, "I/O communication" tab.
2. In the table view of the network view, select a communication relation for direct data exchange between the sender and receiver 1.
3. Navigate to the properties of the I/O connection to "General" > "Direct data exchange" > "Transfer areas".
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
221
Functions 5.8 Direct data exchange
4. Create a new transfer area by double-clicking on "<Add new>". Assign a meaningful name for the transfer area. A transfer area for direct data exchange between the sender and receiver 1 is configured.
Figure 5-81 Transfer area for direct data exchange
5. Now, select the PROFINET interface of a receiver for which a transfer area is not yet set up, e.g. receiver 2.
6. Change to the table view of the network view to "I/O communication" The communication relation for direct data exchange with the sender is displayed.
Figure 5-82 Connection for direct data exchange in receiver 2
7. Select the communication relation. 8. Navigate to the properties to "General" > "Direct data exchange" > "Transfer areas". 9. Create a new transfer area by double-clicking on "<Add new>". Assign a meaningful
name for the transfer area. A transfer area for direct data exchange is configured.
222
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.8 Direct data exchange 10.Select the transfer area. 11.For "Partner address", select the existing address area in the sender as the output transfer area.
Figure 5-83 Transfer area for direct data exchange of multiple IO controllers
A transfer area for direct data exchange between receiver 2 and the sender is configured. Editing the transfer area
Set the properties of the transfer area under "General" > "Direct data exchange" > "Name of transfer area" > "Detail of the transfer area".
Figure 5-84 Properties of the transfer area
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
223
Functions 5.8 Direct data exchange
Table 5- 6 Overview of the settings of the transfer area
Parameter Start address Organization block Process image
Data length [bytes]
Local
Set the start address of the input or output transfer areas in the local CPU.
Assign the transfer area to an isochronous mode interrupt OB or the "MC-Servo" OB.
Select a process image partition, e.g. PIP 1. If you have assigned "MC-Servo" as the organization block, STEP 7 automatically sets "PIP OB Servo" as the process image.
Set the size of the transfer area.
Partner
Set the start address of the input or output transfer areas in the partner CPU.
Assign the transfer area to an isochronous mode interrupt OB or the "MC-Servo" OB.
Select a process image partition, e.g. PIP 1. If you have assigned "MC-Servo" as the organization block, STEP 7 automatically sets "PIP OB Servo" as the process image.
-
Downloading the configuration to the device Rules:
Download the configuration to all CPUs involved.
If you make changes to the configuration of the direct data exchange, download these changes to all CPUs involved.
224
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.9 Device replacement without exchangeable medium
5.9
Device replacement without exchangeable medium
Definition
IO devices which have no slot for exchangeable medium (e.g. ET 200SP, ET 200MP) or IO devices which support the PROFINET functionality "Device replacement without exchangeable medium/PG" can be replaced without having an exchangeable medium with saved device names inserted and without having to assign the device name with the PG. The new IO device is given a device name by the IO controller and not by the exchangeable medium or the PG.
To assign the device name, the IO controller uses the configured topology and the neighborhood relations established from the IO devices.
Figure 5-85 Device replacement without exchangeable medium
Note When you exchange a device, make sure that the PROFINET cable is again inserted into the correct port, as it is configured in STEP 7. Otherwise, the system will not run.
Advantages
With the Device replacement without exchangeable medium/PG PROFINET functionality, you can profit from the following advantages:
After the replacement of the IO device, it automatically obtains its device name from the IO controller. You no longer have to assign device names with the PG or exchangeable medium.
You can save on the storage medium for the IO device that replaces the removed one.
Simple device name allocation with series machines that have the same configuration and set topology. It is no longer necessary to assign device names via exchangeable medium/PG.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
225
Functions 5.9 Device replacement without exchangeable medium
Which devices support device replacement without exchangeable medium? An overview of the devices that support the "Device replacement without exchangeable medium" function is provided in this FAQ (https://support.industry.siemens.com/cs/ww/en/view/36752540).
5.9.1
Device replacement without exchangeable medium/PG function
Neighborhood
Neighborhood is the physical relationship between two ports of adjacent PROFINET devices. A PROFINET device is connected in this case through one of its ports over a physical Ethernet line to a specific port of the second PROFINET device in close proximity (neighbors).
Both terminal devices, for example, IO controllers and IO devices with a port, and network components, for example, switches, IO controllers and IO devices with multiple ports, are considered PROFINET devices.
Failure and replacement of an IO device
The following example describes device replacement without exchangeable medium in the case of failure of an IO device.
Figure 5-86 Example configuration of device replacement without exchangeable medium
For the device replacement, the following information is available to the IO controller:
PROFINET device Controller Switch Press Mill Pump
Device alias "port-001.Switch" "port-002.Controller", "port-001.Press", "port-001.Pump" "port-002.Switch", "port-001.Mill" "port-002.Press" "port-004.Switch"
The IO device with the device name "Mill" fails in this example:
226
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.9 Device replacement without exchangeable medium
Requirement
The PROFINET device replacing the removed one has no device name.
Principles of name assignment The failure of the "Mill" IO device is considered here. 1. The IO controller queries the device name of the replaced IO device. 2. The IO controller detects that the IO device with the device alias "port-002.Press" does not have a device name. 3. The IO controller assigns the device name "Mill" to the replaced IO device via the device alias "port-002.Press" of the failed IO devices.
Note If you insert a device with the Device replacement without exchangeable medium/PG PROFINET functionality at a different location than the configuration, a different device name is then assigned to the device. Reset a wrongly inserted device to delivery state before you use it again.
5.9.2
Replacing an IO device without exchangeable medium
Introduction
Replacement of IO devices is sometimes frequently required in automation systems. The IO devices are generally assigned a device name by either inserting an exchangeable medium or via the programming device. The CPU identifies the IO device by using these device names.
Under certain circumstances, replacing an IO device can be done without inserting an exchangeable medium or without the PG.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
227
Functions 5.9 Device replacement without exchangeable medium
Requirements
The topology of the PROFINET IO system with the respective IO devices must be configured.
By configuring the topology, the neighbor relationships of all the PROFINET devices located in the PROFINET IO system are announced to the PROFINET IO system or the IO controller. From the neighbor relationships specified by the set topology and the actual neighbor relationships established by the real PROFINET devices, the IO controller can identify the replaced IO device without a name and assign to it the configured name and the IP address and then again list it in the user data traffic.
The affected IO devices in the automation system must support device replacement without exchangeable medium.
If the individual IO devices in the automation system do not support device replacement without exchangeable medium, a corresponding alarm is output for the IO device.
Note
Use only new IO devices as replacements or restore configured IO devices to their delivery state.
Activating/deactivating device replacement without exchangeable medium
The "Device replacement without exchangeable medium" function is activated in the IO controller by default.
To deactivate device replacement without exchangeable medium, follow these steps:
1. In the device or network view of the STEP 7, select the PROFINET interface in the corresponding IO controller.
2. In the interface properties under "Advanced options > Interface options", clear the "Support device replacement without exchangeable medium" check box.
To reactivate device replacement without exchangeable medium, you must select the "Support device replacement without exchangeable medium" check box again.
5.9.3
Permit overwriting of PROFINET device name
With the option "Permit overwriting of PROFINET device names of all assigned IO devices", you can overwrite PROFINET device names of IO devices during startup of the CPU. This option reduces the effort during automatic commissioning, for example, when replacing a device.
Requirements
IO controller supports the "Permit overwriting of device names of all assigned IO devices" option, for example CPU 1215C DC/DC/DC as of firmware version 4.0
228
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.9 Device replacement without exchangeable medium
How the "Permit overwriting of PROFINET device names of all assigned IO devices" option works The IO controller (CPU) can overwrite the PROFINET device names of IO devices in the IO system when the "Permit overwriting of PROFINET device names of all assigned IO devices" option is enabled. Multiple use IO systems can only be operated when this option is enabled. The IO controller checks prior to overwriting if the type of the IO device matches the configured type. If the option is not selected, the IO controller cannot overwrite the device names of the IO devices. In this case, you must manually assign the PROFINET device name on the IO device if the PROFINET device name changes in the configuration or when a device is replaced, or delete the device names of the IO devices prior to an automatic commissioning.
Response during commissioning Select the option "Permit overwriting of PROFINET device names of all assigned IO devices" only if the following requirements are fulfilled: All the configured IO devices are available. All IO devices are wired correctly in accordance with the topology configuration. No IO device is jumpered. If configured IO devices are missing or are jumpered (partial commissioning), do not use the option.
CAUTION Error at partial commissioning If device names are assigned incorrectly during partial commissioning or incorrect wiring, these have to be deleted manually after a correction of the wiring in order to attain correct assignment of the device names.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
229
Functions 5.9 Device replacement without exchangeable medium
Behavior during operation After commissioning, you may exchange or jumper IO devices as long as the IO devices do not have a PROFINET device name that is used for a different IO device in the project. Otherwise, incorrect assignment of PROFINET device names in the neighborhood or further vicinity of the IO device can occur.
WARNING Wrong PROFINET device name When the "Permit overwriting of PROFINET device names of all assigned IO devices" option is enabled, incorrectly connected devices can be assigned an incorrect PROFINET device name from the configuration. Depending on the connected I/O, there is risk of death, severe injuries or damage caused by malfunctions. To rule out any danger, check whether the suitable replacement device has been connected in case of a device replacement and whether the port interconnection matches the configured preset topology.
Typical source of danger When replacing an IO device ("standard case"), it is almost guaranteed that the replaced device will be connected according to the configured port interconnection. The figure below shows a scenario whereby the connections of two identical PROFINET cables are swapped at two switch ports. Because the IO controller assigns the device names according to the preset topology, the incorrect connection of the devices has serious effects on the naming.
230
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.9 Device replacement without exchangeable medium
Due to the control of different actuators, the plant could become hazardous in this case.
Procedure
Switch with connected PROFINET cables Device A, device name "IOD-1": controls motor 1 Device B, device name "IOD-10": controls motor 10 Device A controls motor 10! Device B controls motor 1!
Proceed as follows to change the "Permit overwriting of PROFINET device names of all assigned IO devices" option: 1. Select the PROFINET interface of the CPU for which you want to change the option in the
network view or in the device view. 2. Select the area "Advanced options", section "Interface options". 3. Change the option.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
231
Functions 5.10 Standard machine projects
5.10
Standard machine projects
Introduction
Standard machine projects are STEP 7 projects that use a set of innovative functions allowing simple configuration and commissioning of flexible automation solutions for standard machines or for machines with a modular structure.
A hardware configuration consisting of an IO controller and any number of connected IO devices represents a "PROFINET IO system master". This master is configured with a maximum configuration based on a template from which various options can be derived for different standard machines, for example with different configuration variants of the IO system.
Greater flexibility at all levels
Standard machine projects have the following central characteristics:
Different variants of a standard machine can be loaded from precisely one project with an engineered maximum configuration (IO system options). The standard machine project covers all variants (options) of the IO system.
An IO system option can be integrated in an existing network locally using simple tools.
Flexibility is provided in more ways than one:
With suitable configuration, adaptation of the IP address parameters of the IO controller is possible locally using simple tools. This allows a standard machine to be integrated in different plants with little effort or to be included in a network several times. IO systems with this property are known as multiple use IO systems.
With suitable configuration and programming, different setups of IO system options can be operated locally that differ in terms of the selection of IO devices used or in terms of the arrangement of the IO devices. Since the specific configuration of the IO system is controlled by the user program, this is known as configuration control for IO systems.
Independently of the functions described above, with suitable configuration and programming, you can use different station options of central devices or distributed I/O devices in one project. The devices can be different in terms of the selection and arrangement of the modules. Since the concrete configuration of the station is controlled by the user program, this is also known as configuration control at the device layer.
Application examples
You can find application examples for configuration control at the device layer, configuration control for IO systems and multiple-use IO systems on the Internet (https://support.industry.siemens.com/cs/ww/en/view/29430270).
232
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Functions 5.10 Standard machine projects
Additional information For more information on multiple use IO systems, refer to section Multiple use IO systems (Page 233). For more information on the configuration control for IO systems, refer to section Configuration control for IO systems (Page 241). For more information on configuration control, refer to the system manual S7-1500, ET 200MP (http://support.automation.siemens.com/WW/view/en/59191792).
5.10.1
Multiple use IO systems
5.10.1.1
What you should know about multiple use IO systems
Multiple use automation solutions
For a flexible reusable automation solution as is the case with series machines, the following use cases are typical:
The machine (and therefore also the PROFINET IO system) is used more than once by the customers.
The machine is used in different plants by various customers.
For this to be possible, the automation solution must meet the following requirements:
A project (configuration and program) can be loaded on various machines of the same type without changes.
Only a few easy adaptations need to be performed locally to integrate the machine into an existing network infrastructure.
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
233
Functions 5.10 Standard machine projects
The following figure shows how an automation solution with a multiple use IO system is loaded on different automation systems and then one automation system is adapted to the existing network infrastructure locally.
Load configuration with multiple use IO system
Set IP address and device name locally on the IO controller
Figure 5-87 "Multiple use IO system" principle
Principle
The automation components for a machine include a PROFINET IO system, consisting of an IO controller (PROFINET interface of a CPU) and the IO devices assigned to it.
With the "Multiple use IO system" setting for the IO system, you turn a STEP 7 project into a "Standard machine project".
The "Multiple use IO system" setting triggers various settings and checks of the configuration by STEP 7. The settings ensure that the IO system is self-contained and there are no dependencies on components outside the IO system.
Requirements
STEP 7 as of V13
The IO controller supports the "Multiple use IO system" function, for example a CPU 1512SP-1 PN as of firmware version 1.6.
234
PROFINET with STEP 7 V16 Function Manual, 11/2019, A5E03444486-AK
Rules
Functions 5.10 Standard machine projects
The following rules apply to a multiple use IO system: No IO device can be configured as shared device. The ports of the devices must be interconnected.
Devices for which no port interconnection is configured, for example, interface module IM 154-6 IWLAN (ET 200pro PN), cannot be operated with STEP 7 V13 as IO devices on a multiple use IO system. If an IO device in a multiple use IO system is an I-device (CPU as an "intelligent" IO device): If the I-device has a lower-level IO system, this I-device cannot be connected to the
same PROFINET interface as the higher-level IO controller. Note: If the I-device is configured using a PROFINET GSD, STEP 7 cannot check for compliance with this rule. In this case, you are responsible for ensuring compliance with the rule.
I-device in multiple use IO system. The PROFINET interface is operated as IO device. No other IO system is con-
nected here.
A lower-level IO system on the I-device is connected to another PROFINET interface.
Figure 5-88 Example configuration for "Multiple use IO system" with I-device
The PROFINET interface of the I-device must be set to "Parameter assignment of PN interface by higher-level controller".
If MRP (Media Redundancy Protocol) is configured: All IO devices on the multiple use IO system must belong to the same MRP domain.
If IRT (Isochronous Real Time) is configured: All IO devices in multiple use IO systems must belong to the same sync domain.